The Tiger, Financial News Network, TFNN, Headline News Update.  If we get open and take a look at the S&P, what you're going to see here folks is that bottom line out of daily, yeah, you pull back with some volume. On the weekly, you got to a higher high with light of volume, you failed on price, you failed on volume. What we did out here, we're not even talking about going into the August 1st down draft, which it was going into, but if we did that, that's 447 million shares, you came in today with 239. We're going to do the smaller one, which was the highs of last week, which is 386. You closed under that with 239. Bottom line, now we'll make a run for the lower end of this consolidation, which is down at the 273 number. We go take a look at the NDX100, same type of setup in the NDX. On the dailies, on the weeklies, NDX today came down with 25 million shares, which was a big expansion of volume than the highs that were generated out here two days ago. That's on your daily. On the weekly, what do you have? You have monster failure. You were coming into 199 million shares, you did all of 104. Last week, you did 243. You closed under the low, under the high, rather the high was 192.63. We are at 191.69. That is saying now it's game once again down to these June lows, which is the 169. I expect the volatility is going to basically pick up in this market after, you know, we've been up at these highs now for about six weeks, folks, okay? We had the down draft about three weeks ago. But realistically, you've been up at these highs, trying to bust through these highs for about six weeks. Haven't been able to do it. Each time you're going up on those highs on the daily or the weekly or the monthly, you're dying on the vine. There's no more buyers up here each and every time. Of course, that there's no bids in the marketplace. You have a down draft. The down draft is very fast. Gold, gold contract wants higher price. And what that's going to be all about this coming week is going to be all about the U.S. dollar. If we take a look at the gold, first off, closed at 1494. Gold wants to get after this high, the high that was generated out here in September was 1566. We'll see whether they get an ABC structure on the way up. We very well may. And this is the first time that we had the dollar move lower with conviction. Bottom line, dollars at 97 to 82.74. And you can make the case that the dollar actually wants to get to 88. That's a long way down, folks. But what that's all about is that the euro as well as the pound have been down for almost three years. It looks like they're going to get that deal done over the weekend. They both want higher price. That higher price will equal lower price than the dollar. Look forward to seeing you Monday right here.


My favorite book has to be Harry Potter and the Goblet of Fire. It's one of the few books that I've read more than five times. I first came across it in third grade when I discovered the Harry Potter series and it really just opened my eyes to a wonderful new world that you can create for yourself when you read a book. It was the book that started my love of reading because really reading really does inspire you. It opens your mind, it allows you to create new worlds for yourself, be a creative thinker and I just love the whole idea around a wizardry school. I really wanted to go when I was 11, I didn't get my Hogwarts letter but I still love the book and I try to read them once a year honestly.


Remember my wife, Ginny, I think. Well, we're ready to go.  I, Richard L. Fornberg, do solemnly swear that I will support and defend the Constitution of the United States against all enemies far and domestic, that I will bear true faith and allegiance to the same, that I take this obligation freely without any mental reservation or purpose of evasion, and that I will well and faithfully discharge the duties of the office on which I am about to enter. As we know, we're here today to welcome into the cabinet a man of great availability, America's 76th Attorney General, Richard Fornberg. Dick Fornberg comes to this post following a career of enormous distinction. U.S. Attorney, Assistant Attorney General, Governor of one of our largest states. Dick Fornberg has been all of these and more. Along the way, he has put mobsters behind bars. He has fought for integrity and government, and has shown himself to be a leader under fire. Now he's taking over a department of justice that is building one of the proudest records for fighting crime, particularly for fighting drug criminals. Here are some facts that speak for themselves. Between 1976 and 1980, drug cases brought for the Justice Department fell by more than 44 percent. Convictions plunged by nearly 50 percent. Since 1980, federal drug cases brought have almost tripled, and convictions have gone up nearly 167 percent. To fight the war against drugs and organized crime, we've hired more than 4,000 new agencies, and under Vice President Bush's leadership, federal, state, and local law enforcement officials have been working together as never before to stop drug runners from smuggling illegal drugs into the United States. The results of that work and the work that Attorney General Meese led are incredible. Cocaine and seizures are up by over 1,800 percent, and over half a billion dollars in boats, bank accounts, homes, and planes, and other property owned by drug lords was seized last year alone. Today, the drug war is international, and we took office from the two nations at Drug Evacuation Palace today in 2022. Our Justice Department and the Italian Ministry of Justice put together to produce an unprecedented number of convictions against members of Oklahoma. A prosecutor has also recently won the conviction of one of the four founders of the largest Colombian cocaine cartel, Carlos Levin. Not long ago, our agents arrested another major Latin American drug king, Juan Ramon Mota, and he'll be cooling his heels behind bars for a long time to come. In short, we're team tackling the drug rings, hitting them at their heads and at their feet, and everywhere in between. Earlier this week, there was an assassination attempt made on the Secretary of State. Initial reports said the attempt was linked directly or indirectly to the drug trade. If these reports are true, this desperate move is another sign of how badly we're hurting the drug trade. We must keep up and step up the pressure. And, Dick, you're just the man I want taking the helm of the Justice Department at this critical time. As a prosecutor and as a governor, you earned a nationwide reputation for attacking the drug problem head-on and cracking down on drug traffickers. And you've already indicated that as Attorney General, you will again make the war against illegal drugs a top priority. But I know that you can't do the job alone. The Senate recognized the importance of your nomination by acting on it with rare speed. And let me thank the Senate for its action. The Senators addressed this nomination with business-like seriousness. In doing so, they put national interest above all other interests. And now it's time for the Senate to recognize as well the vital importance of this nation's judges to our efforts in the drug war. It's time to act on the 30 judicial nominations that we have submitted, but they have yet to reach a floor vote. Dick, I know that you mentioned the great need for those judges at your confirmation hearings. And recently, the Judicial Conference declared a state of judicial emergency because of the many nominations that the Senate has hanging. Our law enforcement people can investigate and bring to court all the drug traffickers in the world, but without an adequately staffed judiciary of tough-minded judges, many of them may be back on the streets in no time. Some say the Senate is simply playing politics as usual, but this is not politics as usual. In 1980, only 17 nominations had not been acted on by the end of the year. And of these, all but five had been nominated on or after the end of July. Well, some of our nominees have been waiting for a year and a half. For example, Pamela Reimer, who has already proven herself to be tough against crime as a district court judge, has been waiting for Senate approval as an appeals court judge since April, even though she received the ABA's highest rating of confidence. The Senate's inaction throws a monkey wrench into the wheels of the war on drugs. And Dick, I know that you will continue to join me in urging the Senate to act quickly on our judicial nominees. And in the meantime, we are grateful to have as our nations have you as our nation's leading crime fighter. I know that you will continue in your long tradition of serving the public with excellence, integrity, and distinction. So Dick and Ginny, congratulations and welcome aboard. Mr. President, Mr. Vice President, my good friend and distinguished Justice Nino Scalia, family, friends, and colleagues. One month ago today, Mr. President, you announced your intention to nominate me to the high office of Attorney General of the United States. Today, I undertake the duties of that office with pride and with enthusiasm. As many here know, I have spent much of the last year and a half with young people, students, the next generation of American leaders. And as you also know, Ginny and I have shared the wonderful experience of raising four fine sons of our own. I have accordingly acquired a special perspective on the priorities you and I share for federal law enforcement, Mr. President. For example, I firmly believe that unless we sustain a vigorous effort to make drug trafficking and drug abuse public enemy number one, we could well stunt significantly the capacity of today's young people to contribute to a better quality of life for tomorrow's America. I accept your challenge as well, Mr. President, to devote every resource of the Department of Justice, consistent with strict observance of the civil rights and civil liberties of all our citizens, to fight other unique threats to our traditional values and institutions, organized crime and racketeering, official corruption, and white collar crime, as well as to protecting the first civil right of every American, the right to be free from fear in our homes, on our streets and in our communities. But as you have often noted, Mr. President, government cannot offer alone the sole solution to these problems. Citizens have obligations too. Today I took my oath of office on a Bible once belonging to William Penn, the founder of my beloved Commonwealth of Pennsylvania. I would commend to all Penn's reminder of the citizen's obligation in a free society. He observed, justice is the insurance we have on our lives and obedience is the premium we pay for it. Not a bad message for this great nation even today. My thanks once again to you, Mr. President, and my thanks and Godspeed to all of you who have joined us for this most fulfilling occasion for me and for my family. Thank you very much.


testing. All right, let's get started here. I think a few more people are coming in. I'm going to be talking a little bit about intrusion detection in OpenStack. I work at Red Hat in storage actually, but I also teach as an adjunct professor at the University of Massachusetts at Lowell, where I teach some courses in security and intrusion detection. At Red Hat, I work with a bunch of OpenStack people in Swift and other areas. That was the impetus for me getting interested in intrusion detection through my job external to Red Hat. In this talk, first of all, I hope to meet people who are also interested in this subject. I'm going to show you what I've come up with to get intrusion detection working in OpenStack, sort of where I see it going. I'd like to hear feedback from people. This is the right direction or not. I hope to do a lot of that this week. What I'll first talk about are network intrusion detection systems. I'll look at the design, some different use cases. The network plumbing changes the neutron that I see needed in order to make it work. We'll look a little bit at the performance, which is a kind of a slippery area in OpenStack. I'll highlight some of the key considerations that you run into when you set up an IDS. I'll spend a bit of time on host intrusion detection systems. I think host intrusion detection systems are quite interesting and probably have a great role to play in OpenStack. I can actually devote half my course to HIDSs. In particular, we're trying to put an HIDS and a network IDS together. They work together. This is the way commercial vendors sell their products. They don't have a network IDS or host IDS necessarily.  I think we can do that too. I'll talk about that. Right. Then some next steps is how we can make this easier, because a lot of this is I've found to be do-it-yourself, which is sometimes quite difficult. First, network intrusion detection systems, a recap of what these are for. A network intrusion detection system, what it basically does is it analyzes packets when they enter into the system. They look at them, they inspect them, and if they detect something that's malicious, that's suspicious, an alert will be created. The operator will somehow be contacted or a log generated. Potentially, there's also something in the lingo called an active response. An active response is some action to take to stop whatever the bad behavior is from happening. Network intrusion detection systems come in two flavors broadly. One of them is signature based, and what that is is basically you have rules which spell out in fine grain detail exactly what the suspicious activity is. I'll have an example on the next slide. Spell out the patterns that's bad. These rules are sometimes called core rule sets and can be maintained by the community, by us. If there's a new attack that comes out, say a zero day attack comes out or whatever, someone will make a brand new rule and upload it and it will get into the configuration very soon. Snort is really the best well-known IDS of this sort. Another one is called Bro. This one is anomaly based and basically what it does is it learns what it is capable of doing is learning the normal traffic and sending an alert when there's a deviation from that norm. This is also script based. It's almost like a programming language. It's possible to do some extremely complex analysis. I'm not going to talk about Bro. I actually have found it a little complicated to use but I think a lot of the techniques that I'll be talking about will be applicable to Bro. Here's just a quick example of some rules that you might find in Snort. These are reconnaissance rules. We're port scanning. The rule here is alerting. If a TCP packet comes in from any IP address or any port, that's the first four columns there, that arrives at the home net, that's my IP address, to any port. If the flags, SIN or FIN, that's the top line, are set, this is a SIN FIN scan so-called and that rule will trigger that has a unique identifier and a message is displayed. Here's another example of the shell-shocked rule. There's a simplified one which we did in our class. You see the content is just looking for a four character string, open parentheses, closed parentheses, space, open bracket. That was acceptable for demonstrating how to find shell-shocked. The actual rule used by Snort, as you can see below, is way more complex and it's a very, very fine-grained detail. Those are some example rules that give you a flavor. Why would you want to use, or how could you, what are the ways that you could use a network IDS in OpenStack? I use the word tenant throughout these slides but project interchangeably.  So a likely scenario that you could see would be to download and run a network IDS inside of an instance and use it to guard the other instances and that instance that you have would be charged just like any other instance. Then another use case that is plausible is of the administrator of the cloud itself. In this case, you could have a network IDS guard all the tenants and all the instances across all the tenants. Here you have a very practical problem. You could have IP addresses that are the same across two tenants. Not a big deal though. Snort can recognize VLAN tags. Each tenant has its own tag and you can even have in Snort different configuration files or different rule sets for each tenant. So those are the two use cases. The first one I think is a bit more interesting and that's what I'm sort of focusing on and we could call that IDS as a service. So IDS as a service, where would we want to place a network IDS? Well, this is, I think, probably a graph that everyone should be familiar with. I assume most of you are. The key points are that I'm using RDO. That's the Red Hat OpenStack distro. So I'm using OpenVswitch. So I'll be talking about OpenVswitch. The major piece here that matters is the integration bridge. All the instances go through there and right above that, the one with the three letters QBR, that's a Linux firewall bridge. Linux firewall because it has to use IP tables. And those connect to the green circles which are the instances. Okay. So one way you could put a network IDS into OpenStack would be to just have a gateway. You create a new instance and you feed all traffic through this gateway, perhaps after the firewall. And it could be sort of a store and forward model. So packets come into this gateway and then they go out to the instance. It would be slow because it's store and forward. Now I know some people are actually trying to implement this. I ran into some students in Australia who are doing some work on this and I think it's very interesting. It's not my approach. So I'm just going to cross that out because I have a goal, an interest in unobtrusiveness. So what I'm trying to do is create what's called a mirror or use port mirroring. And what this would do is it would take a tap basically on the wire somewhere in that software defined network and make a mirror copy of all the traffic and feed that to the network IDS which can then do what it needs to do. The downside with this approach would be that some of your virtual cores are still have to be allocated to run that network IDS. But at least you're taking the traffic out of band. So if you're going to add this tap to the open stack where would be a good place to put it, well I believe the integration bridge is an appropriate place because all the instances go through there. That's the main intersection of them all and you could choose all the instances in your tenant or some subset. So how is this done exactly? This is the fun part and where I think open sacks is explosively complex if you don't come from a network background. So let's say you want to do this. And you have created an instance and you've loaded it with IDS.  So you have this basic setup. This is out of the box, create the instance and it creates what's called a tap interface which is connected to that instance and that in turn connects to the lower box which is the Linux bridge aka firewall. All right. How are we going to do this tap? Well my goal is I want to move traffic from other instances to this and IDS so it can read it and react.  So there. So far I've not really done anything that interesting. I've created a brand new firewall as you can see and I've created a new tap interface. Well that firewall is just going to block all my traffic which is going to come from the instances that this and IDS is guarding. So I've got to somehow get rid of that firewall. No problem. There. I just got rid of it. Now I understand a lot of flashing the word hack in your face. Well that's part of the reason I'm here. And also another point is that there's something called tap as a service which is being talked about this week and I really am looking forward. This is how I got as far as I did as of now. So we got rid of that and now we can add that directly to the integration bridge. Okay. So I still need to move traffic into the network IDS. How am I going to do that? Well here's a cool command for open vSwitch and it's a long one but basically what it does is it selects a new port and creates a mirror to out the output port. I have a single instance which I've directed to mirror but I could have selected more than that. I could have selected or I could have selected all of the instances belonging to a particular tag i.e. tenant. So this is the low level nitty gritty way of accomplishing this and of course you want to make this easier. You don't want to have to go through this yourself. But this is what's going on under the hood I think. Alright. So I've just talked about a way to accomplish this on the same node and as I mentioned we're consuming virtual cores by doing this. Wouldn't be nice if we didn't have to consume virtual cores on that compute node. Well a way to avoid that would be to create another machine, a monitoring node I call it which would be responsible for monitoring only and perhaps it has a different set of hardware to do that. Maybe better set of hardware, maybe tune. So you can create a tunnel to talk to that and here is in ugly graphics but you'll get the idea. I create a patch cable and attach it to the integration bridge and I mirror traffic to that patch cable. Then I attach that patch cable to another bridge called the tunnel bridge which I'm calling a tunnel bridge. And then you can use the same kind of command, the same where you create a mirror, mirroring from the patch cable to something else and what the something else is a generic routing encapsulation interface which will be connected to another node. Again this is low level stuff and one of the nice things I hope to get out of this week is to make this easier and simpler but this is how you make it work. Okay so here if you do play with this stuff I just have a few tips to make your life easier. Basically whenever you create a new component in your network ping it or ping the element right before it and there are counters at each step of the way and you'll know if the packet reached that new point by looking at the counters. It can be dreadfully difficult. Alright so now that we've got this down we've got a way to do it let's analyze it at a little bit of a higher level. So what happens when, why do we care about performance? Well one reason is that if the limits of the network IDS CPU power is reached, the number of virtual cores power is exceeded, packets will be dropped and when packets are dropped you can get false negatives. You may think nothing's wrong when something really is wrong and keep in mind we're doing fan in here. We're taking multiple instances within your tenant potentially and fanning all that traffic into the one network IDS. So if we're going to be, we want to avoid that. How do we analyze this? So there's two areas to look at. One is the open V-switch component and the other is the CPU overhead of the network IDS. There are some upper bounds which are right here. I haven't gotten anywhere near to getting to that level but that's the ultimate upper edge of the envelope. Alright so open V-switch performance. I'm sure many people here are familiar with it for those who aren't. I'll just recap that it has a large cache of flows that it keeps maintains in the kernel. So when a MAC address comes in and it has to determine the destination port it can consult this table in the kernel. I guess you could call it a CAM table and not have to exit to user space. That's really fast. Also this table is very large. So normally happy path is that you're in the kernel and it's quick. If there's a MAC address that shows up and it doesn't exist in that table you jump to user space but that should only happen for that first time. And then another point is that we're not copying packets as the traverse the network from hop to hop. Very good. But here's the problem. There's a 30% reduction when you do the port mirroring in open V-switch. I measured this. I ran into it myself. I did a double take and then I found a paper written last year which had this great table and I put the citation below it. The numbers on the bottom are the number of times that the packet has been mirrored. So there's no mirror in the first bar one. The second time there's a 30% reduction because we're mirroring it once. Three we're mirroring it twice. Four on and on and on. You can see each time you mirror it your total packets per second, megabits per second drops. This is a serious overhead and something to talk about this week. Snort performance. The other component to study. Snort is single threaded at the moment. It's going to become multi-threaded in 3.0 so I've read. So at the moment it won't necessarily, and I'll put necessarily in quotes, scale with additional course. It is possible to run multiple snort instances and give each its own configuration file. Something you might want to tune is string searching, how packets are searched for when you're looking for, say, that shell shock string. There's faster algorithms to do that, and there's recommendations to do that tuning. A alternative to snort is something called shurikata. This is multi-threaded from day one and is also compatible with the snort rules. And I cite one paper, there's a few out there, which have done head-to-head compared bake-offs between shurikata and snort and shown that shurikata is faster. Okay. So that's network IDS, how it can be made to work in OpenStack. Let's talk about host intrusion detection systems. I'll have a few slides where I motivate its usefulness. Basically it does virus scanning and some other things, policy checking and file integrity checking. In the open source world, a popular one is called OSEC, and it does a few other nice things, which I think could be useful in the cloud space, such as log aggregation. So I'm an administrator. I do not want to look at 10 different logs, one snort logs, one var log messages. Maybe I have a web application firewall or WAF from running mod security. All these logs are driving me nuts. What OSEC can do is consolidate them all. It can parse each one of those, and so you have only one single set of logs to deal with. That's useful. The second thing that's nice about OSEC is that it is centrally controlled. So I don't have to look at the logs on each of my instances. I can go to one instance, which is called the OSEC server, and it will read from the different instances, which are running what are called OSEC agents, and monitor via the OSEC agents for bad behavior. So here's kind of an icky picture, but basically you can see that there is an OSEC server on the right, and logs are being sent from the six servers on the left, so they're being parsed on the OSEC server and being read from the six systems on the left. Now those six systems, you can just imagine those to be open stack instances. So here's a few things that OSEC can do. One of is file integrity checking. A bad guy might come in and say modify the LS command, or modify some other command. How would you know that they modified that command and perhaps put in some sort of Trojan horse? Well, if you take a hash of that slash bin slash LS, and you store that somewhere, and then periodically check to see, and to take another hash of bin LS, and see if it matches the one that you, the known one, well then that's how you'll know if it changed or not. So that's one thing that OSEC can do, and you can configure what directories to check. Another thing that OSEC can do that's very nice is what's called policy checking. This is checking configuration files to make sure they haven't been tampered with.  So what this does is it checks that it is in enforcing mode, and it will send an alert if it's not. This is one thing to note. OSEC doesn't necessarily check for these in real time. It's a very slow process to compute the hashes of all the files. So this is done perhaps on an hourly or greater basis, unlike the network IDS case. So let's say somebody tried to log in as root with the wrong password, and an alert, an OSEC alert is generated. What happens then? Well, you get an active response. Now an active response in OSEC is actually very nice because it's a script. It can do anything. A shell script can turn invoked Python or evoke OpenStack API, and this I think is another very useful property. Here are some things that are typically done.  These are all possible. They're all within the range of possibility. Now Snor can also do active responses, but my understanding is that it doesn't let you run an arbitrary script. It's a little more limited in the sorts of active responses that it allows. Namely, it can reset the TCP connection or send INC ICMP host unknown, if I remember right. So it's not as powerful in that respect. And here's just an example of on the top, I've created a script called wall.shell, and on the bottom I say run that if rule 5503 triggers. Okay. So back to use cases. Well, it goes back to if you're an administrator and your role is to administrate a tenant, then you would like to perhaps run OSEC on all the instances which are under your control. Now the only downside here is that you need to run that OSEC agent on each of those instances. The agent is the one that feeds information back to the OSEC server. And so you have to, those are the glance images that you would have to provide to people. As for the other use case, the hypervisor administrator, I see configuration files of OpenStack, you can see it being looked for and some rules created to check their validity. Okay. So let's put it all together. Here we go. So if you have perhaps two instances here, which may or may not be on separate machines, and you have a monitored instance, which also happens to be an OSEC agent, traffic will come in, say a malicious traffic, and that traffic gets mirrored to the other instance, which is your monitoring instance, that's snort. And it generates a log file. The log file is read by OSEC, which in turns runs a active response, which is a shell script, which will ultimately block the traffic. This is the goal. And you don't need to run OSEC, because as I mentioned, snort runs some limited but useful and important set of active responses. So the same workflow can basically work. Alright. Given this whole background, architecture of how IDSs can work in snort, and we have a way to do it in neutron, boy, how can we make this easier? Because it's too many moving parts. Well, first of all, I believe there's going to be a talk later this week called tap as a service. That is exactly what this IDS needs. So I think that's something to look forward to. We need a way to create a tunnel. That's easy. And probably it'd be nice to have some prebuilt images, which run the network IDS and the HIDS. We need some workflows. One workflow would be setting this all up in the very beginning. We want to monitor the IDS. Now monitoring the IDS, both snort and OSEC, most of them all have nice GUIs over HTML. So that can be something that you could probably access via the monitoring instance. And you want to be able to make sure that when you add and remove instances, they're included in the port mirroring infrastructure. However, that ultimately pans out. So in conclusion, IDS on OpenStack is very much a do-it-yourself thing in my experience. I have not found too many people who are working on this actively, and I'd like to meet some people who are. I think the orchestration is quite complex. What can we do to make this easier? Performance. Having an additional monitor node is ideal. It may not be necessary for everybody if you don't have a high amount of traffic, and it's also an extra expense, because it's extra hardware. You would want to look at Syracuda Cata if you're very interested in high performance or at least work with multiple snort instances. And in the short term, a lot of people who are interested in IDSs are looking forward to the new snort 3.0, which is going to be faster, presumably. And lastly, and this is another thing I hope to get into this week, is why are we seeing the support mirroring drop in performance? Is it because we're actually copying the packet under the hood, and this is resulting in a 30% drop? What can we do to make that faster? Could we use reference counters or something and not delete the packet until they all go to zero? Who knows? That's another area to talk about. And that's my talk, so I'll bring it up to questions now, and thank you very much. So we are doing, playing around with some of the same things, AT&T. And in your example that you showed, the OVS control examples, they tended to be static like you do in a lab. In a production cloud environment where tenants are spinning up, networks are spinning up, you have to spin your snorts up at the same time. That's been a little harder for us, and we're playing around with doing that. Have you thought about how you'd want to make that work with your examples? So that would be the workflow of adding new instances to existing tenants. And new networks, all the dynamic things that happen in open-stack clouds. Okay. Well, first when you add new instances to the existing tenant, I think probably that would be changing the port mirroring so that you're, I suppose you'd have to tear down the old one and create a new one. So yeah, that would cause an interruption. Something could sneak in the middle there. I haven't thought about brand new tenants, and that would of course be a whole new port mirroring construct. I mean, in general, this is sort of the next step for me, and I'd like to talk to you more about this afterwards. Okay, I'm a bit too tall again there. Another question about where you monitor the traffic. Now you do it on the bridges on the compute host themselves with that solution. It seems like this is really hard to scale when you run 100 or 200 compute nodes where you would have to do it per tenant, per node, and monitor all the traffic from there, from each node for each tenant. Wouldn't it be better to do it if you run neutron L3 routers to actually mirror it from the L3 routers themselves? Because I guess the incoming traffic from the internet is what you're mostly concerned about, and there you will get all of that traffic from one place. So you're saying as the traffic enters the cloud, you intercept it at that time, rather than at the integration bridge? Pretty much, yeah. Depending where you do it, either for the whole cloud or per tenant. So it's sort of like on the public network. Right before the public network you could have a tap. Or in the L3 router itself if that would have the... Oh, in the L3 router. That's an interesting idea. I guess I don't have a good feeling for the scalability problem. My understanding is OpenVSwitch is so-called screamingly fast, and I haven't encountered myself, to be quite honest, I haven't done big scalability tests, but I haven't encountered a problem with scalability. Did you mean in terms of the number of IDS instances? I'm thinking more of the complexity when you scale, not the actual performance. Oh, the complexity. I see. So in other words, I have many IDS instances, one for each tenant, and there's a lot going on there. And maybe one for each tenant per host even, depending on how you set it up, because you might have a hundred compute hosts. Yeah, I guess I leave that kind of... I punt that to the administrator of the tenant, a.k.a. project. I basically say, you know, you can do it easy or you can do it hard, and it's sort of on your... What you're saying I wonder is if that's more of the hypervisor level intrusion detection, rather than tenant level. I think you could do both. Okay. Well, it doesn't occur to me how that's simpler, but I'd like to talk to you more. We're going to discuss after this. Again, to talk. Hi, so Marisa from HP, and so they're a working team, working in collaboration with the tipping point security team, so we're working on facets of this, so we'd love to follow up with you. But my question to you is it seems that you discounted the middle box use case entirely. In the middle box, I mean the intrusion prevention use case where you're not just reporting. So I see IDS is still being useful in a tool set to be able to report when there's a security violation. However, in many instances, people want to take the next step and actually do active filtering. And so in the use case, it seems that, or in the discussion today, it seems like you completely discounted the possibility... I had some stuff on it. I didn't discount it at all. Let me go back and go back to here. So you're talking about active responses? Yes, but real time, I guess, like in the case of an IPS, it may do a block. There would be a delay, yeah, in my case. So do you see that as a next step beyond addressing the basic IDS use case? Okay, well in the vision that I outlined here, there is a delay, admittedly. I don't know how big the delay is. It can't be a big delay because if it was a big delay, we'd be falling behind it, we'd be eventually dropping packets. And I say a priori, we cannot drop packets. So I don't know if the delay would be that big, but if you want exact real time, then really you do need some sort of gateway model where you inspect the packet first, store it forward, and you do not forward that packet to its destination until you've inspected it and somehow vetted it. And I think that's what you mean. Exactly, so we'll follow up because we've got some ongoing work like this. I see some big performance issues with that, but technically with enough hardware, you could do it, yeah. Okay, thanks. Hi, Rob Clark from HP. One of the things I think is really interesting is to extend perhaps a little bit on the L3 router concept. So when you were talking about how to apply IDS, I'm really interested in how I can see a tenant-wide view. I want to understand when a tenant or a project that's spread across multiple compute nodes and potentially across multiple different sites is either doing really bad things or having really bad things done to them. And that becomes more difficult if you're operating at a compute node level because then you need to introduce some aggregation point elsewhere where you try and correlate different attacks that are going on against different parts or against different compute nodes. So I'm just wondering if you've had any thoughts in that space and if a few of us are getting together later to go over some of the IDS stuff, I think that would be an interesting topic. I personally know because I've struggled enough to get it working on a single compute node. However, there are lots of people at Red Hat who are working on more along the lines of what you're talking about where you have different regions and clouds separated geographically and so on. I think also that, you know, what I want to try and do, what I'm urging and pushing is that we somehow agree on a way forward and somehow make this easier. So it's not so much of a do-it-yourself project. And perhaps as part of the agenda for getting there, we should include regions, geographically dispersed clouds and so forth and so on, tenets which are maybe two sides of the world, you know, on the other side of the world from each other and so on. So that makes a lot of sense. Amongst other things, I'm also the PTL for the security project in OpenStack. We do a number of things including the security guide which is there to provide deployers with exactly this sort of guidance. And I think it would be an interesting thing to include in that. So I'll follow up. Sounds good. Thank you. Hi, I'm Chandr from Cisco. Have you considered what's the implication of this kind of solution in a Linux Bridge environment? Mainly looking at it because I see a lot of NFVs. Interesting that because of the VLAN, because they do need the actual packet as is. And that's why Linux Bridge is becoming more common in that case. Instead of OBS, instead of OpenVSwitch. So you're saying have I looked at Linux Bridges as opposed to OpenVSwitch? Yeah. No, actually because I'm using the Red Hat RDO distro which has Open Virtual Switch built into it. And okay, so my understanding, my understanding is a Linux Bridge has the same functionality to do port mirroring. However, I'm not sure it's got the same performance. And how about that? Well, the performance will be okay as long as you stay with VLAN, not VXLAN. But the command that you put out there to do the port mirroring is that supported, that's my... On the Linux Bridge. On a Linux Bridge. New, no, no. The syntax is completely different. And that... You would have to start... But the functionality would be the same, I believe. And again, I don't know that for sure because I haven't monkeyed with the Linux Bridge. I'm quite happy with Open Virtual Switch, actually. It does a good job. Yeah.


I learned this very very groovy song Koi Mil Gaya and this is on the key of B flat major that's the original scale however you could play it on any scale probably depending on your vocal range as you know in the in this original song the female singer goes insanely high right I don't know how many of you can even pitch that note so you may need to transpose it up or down a notch or maybe you want to sing higher than her I don't know so anyway so basically you have a verse and a chorus and then you have another verse the next verse is basically repeated I guess a couple of times right it's repeated about two or three times so let's just try the main part which is verse one then there's also a pre-chorus just before the chorus okay so let's try and do the verse and before that I'm gonna show you the rhythm on the key of B flat itself or rather on the chord of B flat try to follow this rhythm for pretty much the entire song unless you feel you want to make the song a little less busy and then you can perhaps play the song or play the chords a little bit more open just hold it and wait for it to change okay so this is my rhythm so B flat chord octave twice and then the chord now if you don't like playing the octave you can also play the fifth let me show you with the fifth actually I quite like the fifth more because it adds some color when you change your chords and in the right hand try to play your chords close to each other using a concept called inversions if you already know your inversions well and good if you don't try and keep them together and we'll also leave a link in the description where you can learn some of my other tutorials and we have a series on chord inversion so you may want to check that out if you're not aware of playing your chords that fluently on the piano right so let's get down with the verse and the verse is ridiculously easy it's B flat and a flat B flat and a flat however you need to play this with this really funky rhythm which we just came up with and then you change to a flat right and then the pre-chorus goes into C minor a flat major F major and stop at B flat that takes us to our chorus okay so pre-chorus don't play the groovy thing try and hold your chords right so with Navin let's try and do the verse okay so again recapping on our verse one which is repeated I guess one more time in the track B flat A flat B flat A flat B flat A flat B flat A flat and now the pre na na na na A flat okay so the last line is just the singer you can stop playing your instrument okay coming to the chorus basically you do an alternate of B flat major and F major and then B flat major and F major that's pretty much the deal throughout the chorus and then he ends the chorus with an E flat 7th with which adds a lot of anticipation and it leads us to the next instrumental part so it's B flat F B flat F and then that's E flat dominant how do you play that one three five E flat G B flat and then you add the flat 7 which is D flat okay so let's now try the chorus with Navin singing and I've also marked out the fact that the chorus chords I've put these double dots here that means the chord is repeated for two bars right so again and so on so play the chords in the chorus double their duration goes to that part you go your chords need to change a bit faster so you go B flat this is basically one four one five so if you are on any scale if it's not B flat you just have to do one of that four of that one of that and then five of that so in the B flat scale which is the original scale of the song it's B flat E flat and F that's the one four five okay we'll do the chorus once more perhaps a little slower and then we'll count out the chords as we play along F major B flat again F again E flat stop B flat E flat B flat F B flat E flat B flat F and it repeats so the chords just change a bit faster there and what else there's also another verse right so let's try and do the next verse which is going to again repeat a couple more times so you'll find the same tune whenever the next verse comes try to play these chords the good thing about this song is it's pretty much major chord driven if you know you have three major chords of any major scale like in C major the major chords are C F and G in G major the major chords are G C and D and so on this happens to be on B flat try to not get that scared when it's a flat scale or a you know a non-natural scale you can get used to it because the original is on this so more often than not a singer would prefer to sing on the original scale since they've heard this song all their lives right so changing the scale starts becoming a little bit of an issue so only change the scale if the singer demands it in my opinion otherwise try to learn it on the original and then if you have to change it you know what to do right so let's do verse number two please F A flat back to the chorus okay so that's the same groove but it's just a different assortment of the chords however just note you have a very interesting A flat major chord which is not part of the key right let's try and do verse to a little slower with me counting down the chords one two three four and that's into two and then it goes back to our chorus so also know that I've marked out some other chords some other sections like a bridge where people are humming and all sorts of instrumentation is happening as you know there's a lot of instrument instrumentation which goes on in Bollywood songs so it's going to be difficult to fit all that in into one video however if you'd like to learn something specific do let us know in the comments and we'll be happy to help you out so go through the chord sheet it's an awesome groovy song so have some fun playing it with your band cheers don't forget to like subscribe hit that bell icon for notifications leave us a comment for any other video you'd like us to do next and don't forget to share the video with all your musician friends cheers


Autolight and its 98,000 dealers bring you Mr. Herbert Marshall in tonight's presentation of Suspense Tonight Autolight presents a new radio adaptation of one of the most famous suspense stories ever written Mary Godwin Shelley's Frankenstein our star mr. Herbert Marshall Well men my fences if it's not the senator, how's it look for you senator? I'm going to cast your ballot tomorrow hello my senator I'd no more forget to vote and forget to winterize my car And now's the time to do it get the oil and grease changed put in anti-freeze inspect the battery cable and check the spark plugs too Right Johnny plug check the spark plugs are the very heart of your car's ignition system And when they're right your chances of starting even in coldest weather are better than ever Well, I'll visit my auto light spark plug dealer Harlow do that senator because he's the expert on cleaning and adjustment And if replacements are needed he'll recommend those world-famous ignition-engineered Auto light spark plugs either standard or resistor type to quickly learn the location of your nearest auto light spark plug dealer phone Western Union by number and ask for operator 25 and remember from bumper to tail light You're always right with auto light And now all the light presents transcribed Frankenstein starring mr. Herbert Marshall and hoping once again to keep you in suspense as usual Do you want me to call him no things I'll go out well all right tell him not to get too dirty We're supposed to play croquet with the McDonald's at five.  Well, these Indian summers hot too sticky James I got to talk to you. Well, of course what anything wrong, you know, you haven't looked too good for the past month or so Something on your mind. Yes. Oh, well, and let's go in the house. I'll get you a beer. We can talk No, no, not in the house. You mind if we walk. Oh, of course not. Oh, it's some rain. Hope so I don't have to play croquet. That's not a game James. Look now. We're friends.  You made a mistake. No, nothing like that Perhaps it's worse I'm not sure. Is it anything to do with Elizabeth going away in the way? Yes My favorite place, you know, Victor, I think of most of my sermons standing here looking across the valley Lovely isn't it? Got a match. Listen I've been doing an experiment. It's very complicated and I've almost finished. Well, it's wonderful. I think I'm a little afraid of it. I don't know. I Have tried to think it out myself. I Can't find the answer Go on You believe in God, don't you? Oh, I mean because I don't go to church You don't think that I don't believe do you I don't think that at all. You're a good man. I Want you to promise me something You've got to promise that you'll never breathe a word or what I'm about to tell you you have my word you swear I don't usually break my arm. Sorry look, I I've made something It's tremendous. It's impossible But I think I've done it and It goes against everything you believe James. Oh, what have you done? I've made a A thing I Don't understand. I put it together heart brain nerves muscle everything. I've done it Now do you understand a? Complete body and you're upset because of that you think that you've done something wrong, but You're a surgeon What you've done will help to save a life if you've learned more about the human body this experiment can't be wrong It can only do good. Oh, I shouldn't worry last night. I made it move I'm not certain, but I think I can give it life absolute life Now do you see why I'm afraid? I've created a man And a she'll be worried. All right, but I won't say anything. Oh, I'm with Victor Listen, dear. I'm afraid we'll have to put off the McDonald's Yes, I know Well, Mary, I have something very important discussed with Victor. It can't wait Yes, dear No, no, don't wait supper. I'll have something over here Yes, I will Goodbye, you don't have to see this thing if you don't want to James What is it in my lab? I Have an addition built on I'm the only one has a key I Don't say I believe what you told me, but how do you know you can make it live I mean, is it anything more than galvanic action? You'll see I lock it. I always do Is that the addition over there? Yes, there aren't any windows. It's better that way before I show you I want to explain This is what started it.  I Gave it a shot in the heart and then another but this stuff a compound I have fooled with for a long time Yes, the dog came back to life Just for a moment. How do you know the dog was dead? No, it was it had been for two hours All that happened three years ago. You've been experimenting on things ever since yes It's wrong. I don't know it's wrong. You don't have to stay James. What are you going to do? Try to bring it to life. I've got to I've got to try then why did you come to me?  I preach and believe in the Word of God. Do you want to see it? Oh? No, I don't but I Must it's not terrible to look at I've done a pretty good job on it But it isn't quite finished I'm not quite done with the face Let it be at peace don't do it even if you can and I can't imagine it possible don't don't don't even try Do you realize what it would mean to me to the world? Standing here with you Looking at that. It's easy to imagine anything. I don't want to Put it to rest Victor forget it. That's just it. I can't Not until I find out One way or the other Watch what are you going to do? I'm gonna show you what happened last night. I Don't want to see I don't care I know better or listen to me Victor this this mustn't go on you've got to stop it Not yet not until I find out does Elizabeth know what you're doing. No, why did you send her away? I didn't want her here when I made the last test because you're ashamed.   Will you I don't know Hand me that hypodermic will you know all right? there If I say I believe you Victor if you don't have to be afraid of it It couldn't hurt you to know There's only enough of this stuff to stimulate a small portion of its brain. I'm not afraid of it I'm afraid for us all I've never preached to you Victor it moved its left foot last night Then the right I'm gonna try the arm now Move the light over please Thanks Watch carefully Only takes a few seconds Now I know That's the way it was yesterday Movement only lasts for a moment though. I don't even think I understand what I've seen except that it's Terrible because you don't understand or because of what it means. I'm afraid if you like I'm afraid for you for what you've done that thing lying there. You've You've got no right. I Won't allow Stethoscope impossible. There wasn't enough is bringing you mr. Herbert Marshall in Frankenstein tonight's presentation in radio's outstanding theater of thrills suspense This Johnny plug check who's always electioneering about spark plugs why senator Johnny is a helpful hinter fighting old man winter He's the blithe reminder to wise motorists that now's the time to visit your auto light spark plug dealer to get ready for the cold Driving days ahead change the oil and grease put in adi freeze inspect the battery cable and check those Important spark plugs too because when your spark plugs are right your chances of starting even in coldest weather are better than ever And if my auto light spark plug dealer finds my spark plugs need replacing how long if they're worn out He'll recommend a set of the world-famous Signition engineered auto light spark plugs senator like the amazing auto light resistor spark plug It's one of the greatest advancements in spark plugs for automotive use in the past 20 years When you have a set installed in your car You'll get double spark plug life smoother engine performance and quick starts as compared to spark plugs without a built-in resistor So friends visit your auto light spark plug dealer soon and remember from bumper to tail light You're always right with auto light And now auto light brings back to our Hollywood soundstage. Mr. Herbert Marshall in Elliott Lewis's production of Frankenstein a tail well calculated to keep you in Suspense have enough It couldn't help 10 cc 10 yesterday Unless the drug is accumulative Maybe that's it his eyes are open What are you going to do now? Listen to his heart again It's got to be destroyed. You've got to put an end to it. It's inhuman Don't you see what you're doing? You can't give it a soul. No can't give it How do you know what I can give it? I've given it life. Haven't I it sees it breathes moves Perhaps here's Yes Does it here as you see that it blinked the head jerked it here's it's aware of sound Does it feel pain don't Victor? It's not an animal.  I Won't let you do that to it. I've gone this far James put down the scalpel What are you going to prove by that I think you must be mad I don't interfere with your work James. Why someone at the door? Yes, I Think I'd better strap it down on the table. You won't forget your promise. Will you I'm sorry? I gave my word. I'm sorry. You ever told me about this. I feel I'm as guilty as you are now I took you so long Hello James Hello darling. I tried to call from the station, but the lines out of order. Oh, I'm sorry dear. Do you have a nice time? Lovely everybody sends their love. That's good What did you do been up to how's Mary James? Oh very well. Thank you What a fine pair of so besides you are What did you do darling break one of my good dishes? I knew I shouldn't have left you alone Well, what are we standing in the hall for? Let's go Elizabeth. I must be going Mary. You'll be wondering particularly if the phones out of order. It's raining very hard No, I'll be all right. You'll take an umbrella. There's one in the kitchen Are you going to tell her no? You won't unstrap it from the table. Are you not yet? All right. I'll try to come back later I want to think about what? You've changed since you came to see me this afternoon. You really don't care what I think now. Do you I suppose not? Thanks anyway, Jim. Are you going to let it live? That's funny from you Have I the right to kill it? You've already done something you had no right to do Something that you don't even understand the creation of man isn't your job. It isn't mine Oh, I know your bright scientific minds laughing at me the umbrella James But I wish you'd wait until the storm blows over. No, I I really must get back. Thank you Elizabeth. I'll return it tomorrow Goodbye Well, what's the matter with him? Have you been arguing religion again Victor? No dear Look, I'm doing a little work in the lab. It's rather important. Do you mind? What is going on Victor? There's something no dear nothing at all. There is I know there is what's the matter nothing dear really? I I've got to get back to work now the straps It got off the table. It broke the straps It's just standing there looking at me. What do I do? Talk to it. What do I say? Can it understand I've done it I've done it It's almost perfect Muscular control coordination I wish I'd finished the face though It must be terribly strong. That's odd It's not over average size Now what? Can you understand what I say? You feel any pain? Are you hungry?  You are a man.  This is a mirror You can see yourself in it. Look, it's all right. It's all right, but it doesn't show anger in its face There's a motion though and sees otherness and is afraid I'll have to get it back on the table put it to sleep. That's the best way Then use a stronger strap or chain The eyes Just staring You see more to it. What a marvel it is though.  Do you hear me? Come here and sit down Come here No, don't touch that. No, stop it. Let's put it down. What happened? Did you see anyone? No, did someone break in Elizabeth? Don't ask me any questions Just do what I ask But your coat on I'm taking you over to the Gibson's. I want you to stay there. Oh, why why what is it? Oh Victor, please I can't I can't tell you about it now You may have to stay there all night Hurry, please To call the police. No, they'll shoot it. I don't want that. It's just frightened.  What about the children everybody in the village? I'm going to get the police. No, please James Give me a chance to find it first then what you do a few more experiments give it speech perhaps and it happens again It's mine. I made it. I'm not thinking of that now. It's Mary and your wife We don't even know where it is if it wants to kill. How do you know where it will start?  Yes? All right, I'll go with you. Thanks James. I'll get my rifle. Do you have a gun? Yes But I'm not going to use it unless it yes unless That's why I'll take mine shan't be more It's getting dark Where do you think it might have gone? It's hard to tell It's afraid of thunder It might be hiding in the barn the old Hamilton place. Yeah How are you going to capture it if you thought of that? I brought along a hypodermic You're not afraid anymore. Are you? No Because I am not of what it might do to me because of the fact that I've seen it. I I know it exists There's the barn If it's in there, there's no way out the back way It was boarded up wasn't it? Yes I'll go in Wait out here, will you? No, I'm coming with you. No if it's in there if it tries to escape Shoot it as it comes out. Don't take the chance. It won't let you get near. I'm going to try Thanks James allowed. I am afraid It's in here hiding Waiting for me. I am afraid I Should have destroyed it James was right. What's the matter with this flashlight wet? That's better. What's that? In the corner and hurt you. It's all right. I Understand I won't hurt you Don't be frightened It's going to be all right You'll hardly feel this It won't hurt. I'm not sure. I might have hit it. I don't know Yes, are you he never recovered consciousness again? Outside I looked for the thing I'd shot at There's no sign of it. I returned to the lab and burnt every paper Destroyed every single evidence of Victor Frankenstein's terrible experiment But the result of that experiment has never been found Nor have I been able yet to convince the authorities that such a thing ever existed Suspense Presented by auto light tonight star mr. Herbert Marshall This is Harlow Wilcox speaking for auto light world's largest independent manufacturer of automotive electrical equipment Auto light is proud to serve the greatest names in the industry They are members of the auto light family as well as at the 98,000 auto light distributors and dealers in the United States and Thousands more in Canada and throughout the world Our family also includes the nearly 30,000 men and women in 28 great auto light plants from coast to coast and Auto light plants in many foreign countries as well as the 18,000 people who have invested a portion of their savings in auto light Every auto light product is backed by constant research and precision built to the highest standards of quality and Performance so remember from bumper to tail light. You're always right with auto light next week a story based on fact Terrifying in its truth the dramatic report of a man returning home to find he now lives in a Frightened city our star mr. Frank Lovejoy The program will be heard on Suspense tonight story was adapted for suspense by Anthony Ellis Suspense is transcribed and directed by Elliot Lewis music was written by Lucian Morrowick and conducted by Ludgloskin in Tonight's cast Joseph Kearns was heard as James Gibson Paula Winslow was Elizabeth and Paul freeze the monster Herbert Marshall is soon to be seen in the RKO radio picture the bystander Remember next week mr. Frank Lovejoy in the Frightened City You can buy auto light resistor or standard type spark plugs auto light stay full batteries and auto light electrical parts at your neighborhood auto light dealers switch to all right Your vote is important to you and your country if you are eligible Don't forget or neglect to vote tomorrow. Remember one vote can make the difference This is the CBS radio network


with a speed of light, a cloud of dust, and a hearty hail silver, the Lone Ranger. In the early days of the western United States, outlaws and Indians roamed the frontier. The local sheriffs were powerless to control them, and it was not until the Lone Ranger started his great fight for justice that law and order were established in the new territory. Return with us now those thrilling days of yesteryear, when eventually at the end of every trail, from out of the past come the thundering hoofbeats of the Great Horse Silver. The Lone Ranger rides again. In the courtyard of the mission, the Lone Ranger satisfied Silver, at his sides to the Good Padre, who had long been the masked man's friend. He held a letter in his hand and began to read aloud. The people here no longer speak to us. Even those who had been our friends turn away when they meet us on the street. We are hated by all, though no one dares to claim that we share in the guilt they fixed upon my son. Padre, a manhunt is a terrible thing.  Our home is watched constantly. Frequently it is searched. All this when, as heaven is my witness, my son is innocent. I write to you Padre, having heard that the Lone Ranger is your friend. If he can help us, my gratitude will go with him all the days of my life. If he cannot, well, then I shall understand and not let sorrow make me bitter. Sorrow, I have read, must come to everyone. That is all? All my friend except the name she signs. And that? Mary Garland. Garland? Then you have heard? Her son is Vance Garland. See? She speaks of a manhunt Padre. It's been years since there was a hunt to compare with it. A crime of which her son has been accused is the most horrible crime, Amigo. Forty men and women deliberately left to die of thirst as they crossed the desert.  Because one man was a coward. But I have lived long, my friend. Long enough to learn that the truth can sometimes be made to appear a lie. Perhaps all that we've heard is not so. And would it not be most terrible also if an innocent man should be punished for such a deed? You're right, Padre. Then you will help? I ride it once. But you have not eaten? Where the Garlands live is a long journey. No, Padre. There'll be time for food when Silver must rest. And Tonto. He's riding here. I shall meet him on the trail. Then I shall not attempt to detain you, Amigo. Adios, Padre. Hasta la vista. Come on, Silver. Adios, Silver! Howey! The great horse leaped forward at the command of his master, the silver hoofs making thunder on the trail, away from the mission in westward. On the trail ahead, Tonto galloped toward his friend. T'ai, Kimosabe! T'ai! Back, Tonto! We ride to the west! T'ai, Kimosabe! Come on, Silver! Come on! Three days later, not far from the town of Oak Ridge, a care-worn woman stood at the window of a weather-beaten house. She gazed across the prairie and... What is it, Ma? Dead. Come here quickly. You see something? There. Beyond the grove. Horsemen? A white horse and a paint. Ma, you think it's them? I don't dare hope. No, wait. Look, it must be, see? One of them's mast and the other, the other's a red skin. The Lone Ranger and Tonto. Golly. Here they come, Ma. Hurry, unbar the door. Yeah. Silver, hold on, hold on, hold on. Why? Is this the garland place? Oh, the pottery found you. He sent you here. Yes. Come in, please. Ted, bar the door again. Uh-huh. You always bar the door? Oh, yes. If we didn't, they'd bust right in on us. They?  They're all a suspicion that he sneaked back here somehow. You must be Vance's brother. Uh-huh. I'm Ted. You and Tonto, you've come to help. Mrs. Garland, I can make you no promises. If Vance is innocent, I'll do everything in my power to prove it. But if he's guilty, then I must see that he's brought to justice. Vance ain't no more guilty than I am. He isn't. I know he isn't. Tell me what you can. You better talk fast, Ma. Somebody's bound to have seen him right here. Tonto, keep watch. Let us know if anyone comes. Tonto, do that. Now then, Mrs. Garland, to save time, I'll tell you what I know, and you can add what I've left out. I've heard the story that's been spread across the state. A party of settlers reached Oak Ridge and decided to cross the desert. They hired your son to guide them. They set out, and nothing more was heard of them. Then, the month later, an Indian scout rode into town with the news that the entire party had died of heat and thirst, according to the evidence. Am I right so far? Yes. Further evidence seemed to indicate that Vance must have taken a wagon, hitched his horse to it, and driven alone to alkali springs for water. It was assumed he'd done this to save the party the extra miles they'd have had to travel. The entire group had gone by way of the springs. Well, that's the way it looked. No doubt, he ran into a party of apaches at the springs. The horses, including his saddle horse, were found killed by arrows. The wagon was burned. But Vance somehow escaped. The springs aren't far from the northern edge of the desert. And Vance, a foot, left a trail that showed he reached it. Yes. Yes, that's true also. So people have drawn the obvious conclusion. Vance was able to escape the apaches, and he could have sent smoke signals to guide the settlers to the spring after the apaches had left. The settlers, unable to read trail sign, could not reach water otherwise. Only to send a signal if he could. It's claimed, however, that he didn't, because he feared smoke would bring the apaches back. It's claimed that to save his own life, he sacrificed the lives of 40 others. Maybe he wanted to keep the settlers from being attacked. Signs revealed there couldn't have been more than half a dozen red men. Indians don't attack whites unless they greatly outnumber them. Oh, please. Yes?  He didn't have an ounce of cowardice in him. I'll tell you, mister, my brother didn't serve you what it meant to be scared. Guilty or not, Vance is hiding somewhere. Have either one of you an idea where that's likely to be? No. I can't. Can't think of no place. Ted. Yeah? You didn't answer honestly. You either know or suspect something. All right. Talk. Now look, mister, I don't know. I got an idea. Just an idea, that's all. I haven't even told it to Ma. Tell it to you if I figured it was for Vance as good, but if when you find him, you're just going to drag him back here where he'd likely be lynched.  He Vance deliberately left those people to die, and I won't interfere in his punishment. But if I feel he isn't guilty, I'll give him every chance to clear his name. You won't go back on that. You give Vance a real chance? I will. Then I'll tell you. Our coming was reported in town, and they're here to investigate. Quick, Ted. We've only got a minute. Ride to Wild Horse Canyon. Go clear to the end of it. There's a cave there. I haven't got time to tell you how to find it, but you will if you look close enough. Me and Vance found it when we were kids. We used it to hide out him when we were camping, and we never told nobody about it. If he had the chance, mister, that's what Vance headed for. Right. Come on, Tyler. Stay there. We'll get in touch with you when we can. Silver, how are you? They dropped back, Tonto. We go canyon now. To the desert first. To Alcalá Springs. Not fine. I'm there. Most of the signs may be gone, but something must be left. And what there is, I want to see. Hurry, old fellow. Hurry! Get them up, Scout.  The lone ranger and Tonto quickly out-rode the pursuit. Most of the horsemen turned their mounts toward town. Or, however, rode back to the garland place. Come on. You and Cliff coming in slim? Lead the way. The scene is coming, all right. Yell to him. Open the door. Open up. We know you're in there. Hell sure we mean business. We'll get in. Open up before we bust the door in. You hear us? We'll bust right in. There's somebody. Get ready. Now! All right, reach. You're covered. Leave your hands in the air. I'll give you both barrels.  No, look here, ma'am. Wait. In the first place, my son never did what he's been accused of doing. Wait a minute. But even if he had, it would never justify the treatment Ted and I have suffered. You spy on us. You break into our home whenever you please. You calve. It was a time when you called yourself our friend. I can remember when I nursed your wife when she was ill. But those things don't count now. Friendship, loyalty, nothing matters. All that matters is killing. If you found my boy, you'd shoot him down without a chance to explain. Well, you can do what you wish to Ted and me. But nothing you do will ever make us do one thing to help you capture Vance. I have nothing more to say. But I have. You saw the masked man and the red skin, but you don't know who they are. Well, gents, that was the Lone Ranger and Tondo. They come here because they're on our side. Now, just what do you think of that? I don't believe it. You're just running the bluff. Think what you wish. But now, get out. Go on, on your way. You got the drop on us, but we ain't done with you.  And don't forget the masked man for us. You fellas think that was really the Lone Ranger? Gosh, I don't know. It'll be funny him sticking up for a yellow coyote like that. Well, they're going into town. Or just now, Cal. Me and Cliff's got something we have to do. Uh-huh. You coming, Ben? Yeah.   Lim, I know what you're thinking, Cliff. They wasn't lying. If that was the Lone Ranger and that red skin party is. Which now that I think of it, I got a hunch it was. And we'd better be making tracks for a wild horse canyon. And Pronto. Get on with it. Get on with it. In the desert, that alkaline spring, 48 hours later, we found all we can here, Kimosabe. Time and the others who have been here to investigate before us have pretty well confused the signs. That's right. There are several things that need explaining. We find them out. Here's over. Call Scout, Anna. Here's Scout. You fill the canteens? Where are we going? To find the one man who should be able to give us the rest of the facts, Kimosabe, to Wild Horse Canyon and Vance Gerland. Let's get going. Come on, Sue. Get him up, Scout. Oh, Silver, away! The curtain falls on the first act of our Lone Ranger drama. Before the next exciting scenes, please permit us to pause for just a few moments. Now to continue our story. Slim and Cliff did not cross a desert to reach Wild Horse Canyon, but stopping only to pick up supplies, followed a route that skirted the desert, heading first to the north, then west again. They made three camps in late in the afternoon of the fourth day. They entered a narrow canyon walled by towering cliffs and floored by jagged boulders. They pressed forward until a voice hailed them with... Get out of there! Just stay right there. It's all right, Humor. It's us. It's me and Cliff. Show yourself, Humor. So it is you, fellas, eh? We come to give you a warning. A warning? What's wrong? We was told the Lone Ranger was looking for Vance.  Well, we seem two fellas that could have been him and that red skinny trails with. Where is Vance? Inside the cave. He's spill it yet? Not a thing. I'm just about through, Monk, in with that fella. Things have changed. We ain't got the time to waste it. We had a four. Come on, Cliff. Let's go in there and work him over some. Leave the horses here. Yeah. Now, hold on. Well... Now, look here, Slim. You can't do it that way. Once you get tough with him, he'll be on to the truth. You can't try to force him to talk and still make him think we just happened on to him by accident. He'll be in suspicion things. And he'll no blame, well, we ain't been feeding and hiding him cause we're his pods. Who cares what he thinks? I care. Because as long as we've gone this far, I want that cash.  You can take my word first. Well, come along. You're gonna do it my way? For now, but not for much longer. I'll give you another week. And if they ain't talked then, I'm using my system. With a lone ranger horning in, we ain't got much more time. Where is he now?  Watch out, pushing through these brambles here. No! Makes pretty good cover to hide the cave, don't it? Carefully ahead. Where is it? Where is it? Where'd you go? A couple of friends to see here. Is he sleeping? Son? Oh, howdy, Slim. Oh, yeah. What brings you here so soon? Bad news, fella, huh? Ever hear of a masqueraderie that's called a lone ranger? Who ain't? But what's that? Slim says he's after you, kid. A lone ranger after me?  But that ain't bad news. Why, that's just what we want. That's just the one fella that can prove I never run out of them folks are hired to guide. You don't get it. A masqueraderie figures you're guilty.  A lone ranger ain't got no reason to figure you want to blame Vance. If I could just talk to him. Talk to that fella? He'll throw down on you so fast you think he's grease-laden. The next thing you'll know, you'll be dancing a jig at the end of him. I've always heard he's fair. Sure. And he's got the two facts to go on. But he can make a mistake, Kenny. What you've got to keep in mind, Vance, is that me and Slim and humor are the only folks in the whole state to credit your story. Well, maybe you're right. Well, sure, that's how it goes. Hold it. What's that? Hold it, I said. Somebody out in front. Didn't you hear him? You're gonna turn out after the landing.   Look. Yeah? I saw him again in the light from outside just then. He's wearing a mask. Well, he steps in. Let him have it. Oh, hold on. You can't shoot him down. That must be the long range.  We'll handle this. He comes now. Watch out! Vance! Vance!  No! You can't shoot him down in cold blood! My hands! Come on, fellow. Let me get him. Blast, you, Vance! Next man's mask. Mother gets thrilled. You, mister! Just mask my hands! You're not first. What's the matter, huh? Listen. You're Vance Gernon? Yeah. But I never done what you figure I did, Vance. Honest, I never. Give me a chance to explain. You gotta believe me. Turn up that ladder, and tell her how to do that. Vance, that's what I came here for. To hear your story. How'd you know where to look for me? Your brother said you might be here. The head wouldn't have told you unless... Well? He figured you'd give me a fair shake. I promised him I would. You see, fellows, that's what I said. I told you the mask man wouldn't do nothing. Or was it right? Yeah, we, uh, we didn't know. Mister! Yes? You really on the kid's side? I'm willing to give him the chance to prove his innocence. Gosh, we didn't figure you'd give Vance a chance. We're friends of his, too. I hope you ain't holding the beginners for fire, don't you? I mean, anybody would have done the same the way you busted in here. Oh, I get it. I don't think these fellows are outside. I want to talk to Vance alone for a moment. Uh-huh. Just a second. Outside. Come on, fellas. Well, Vance, when I first rode here, I was convinced you were guilty. Since then, I've investigated. And now I'm not so sure. But first I want to hear your story of what happened. You mean after I went for a water that time? Everything. Well, look, mister, I'll give you nothing but the straight facts. I drove alone to fill the cages of the springs just like you've likely heard. And I was attacked by a patchy like you must have heard, too. They killed my horses and burned the wagon. But when I dug in behind cover and showed a fight, they lit out. But it ain't true what folks are saying, that I sneaked away without doing what I could for the settlers. I did make a smoke to bring into the springs. S'more, I lived there nothing but water for three days waiting for them to show up. They didn't soon. At least there wasn't nothing I could do, but give up and try to save myself. Well, I agree with the facts I've discovered. The place where you'd built your smoke had been covered by sand. But when Tato and I investigated, the wind had blown enough away to reveal the truth. Strange. Yes? There's another thing. Something I even told Slim and them, because even if they have been friends to me, I figured I couldn't tell that except as somebody I was positive about. What is it? Before I went for water that time, there were some things that happened that made me wonder if maybe outlaws wasn't following our party. A couple of times it seemed riders in the distance, but they always galloped away soon. Well, I advised them settlers to hide their cash somewhere and send back for it later. Well, that cash must still be where it was first hidden. Yes. The base of needle rock over where all them gullies are. I know the place. Are you figuring to help me? I believe I can with the help of your friends. How did you meet them? Sometime after I got clear of the desert, I was making for town of foot, thinking that I'd be blamed for what had happened. They come along and told me to talk in town and said I'd better hide. I suggested this place, so here I am. I see. We're going outside. Yeah. I've got a plan that might clear you. I'll explain it to the others also. Men. Yeah? What do we do now? I just explained to Vance that I'd found evidence that might clear him. I found more I haven't told him about yet. Signs that indicate the war party that attacked him wasn't an Apache war party, but whites disguised as Indians. Is that the truth? It is. Slim, I believe the best thing Vance can do is tell the truth to the law. And that's added to the fact that there's cash buried at the foot of Needle Rock, which he has made no attempt to get for himself. There's a possibility he'll be believed. Gosh, I don't know now. Vance, the man's fellow's right. Slim, I want you and your friends to ride to town after the sheriff. I don't know. I'll stay here to protect Vance from discovery before your return. Sure. We'll be glad to go home with fellow's. But it seems like such a thin chance. Vance, it was you yourself that said the masked man was the only to clear this up, didn't you? Yeah. Then you just leave things to him. Everything will work out all right. All right, man, get going. The sooner you return with the sheriff, the better. Mr., we're on our way. Slim and his companions mounted and rode off in the direction of town. Once out of sight, they changed their course and headed towards the desert. And that masked gon' be supposed to be slick. Yeah. He played right into our hands. We should ride to town. We'll go there, sure. But not until after we pick up that cash first and the message we give to the sheriff won't be the one the masked man's figuring out.  They rode first to Alkalai Springs where they made sure of a plentiful supply of water. Then they struck out for Needle Rock, a prominent landmark in the desert. It was a hard journey, one of hot days under the sun and bitterly cold nights when the sun had set. Finally, just two hours after dawn, one morning, Needle Rock. Move over there. Come on. See any signs of digging anywhere? What's that over there? That looks like it. Hurry up. I want to get my hands on that cash. I was digging here, sure enough. What do we dig with? Hey, hand me that sharp rock over there. Give me a hand, Slim. Here. What's wrong with the horses? Hey, the masked man. Stand back. What the... I'm taking your horses and water. I'm leaving you here in the desert just like those settlers were left. Well, hold on. You can't do that. Unless you're willing to tell the truth. What are you talking about? I told you where the settlers had hidden their money to see what you would do. When I saw your head for the desert, I rode ahead of you. Now I want the truth and fast. We don't know what you're talking about. You can't free him, Hans. Very well. I'll return when you're in a more willing frame of mind. Hey, come back with the horses. Come back here. Come on back. Tricks. Blast him. And we ain't got no more chance of making our way to water a foot than buffaloes have of flying.  To add to their misery, the masked man always remained in sight, although just beyond gunshot. One, as if by accident he'd dropped the canteen, and the men recovered it. But when that was gone, their misery increased. Slim held up his hands in surrender and followed by Cliff and Yuma, staggered toward the pile of rocks where the masked man was waiting for them. We give up, Mr. Water. We've got to have water. You're ready to tell the truth? We're telling the whole thing. Just give us water. Keep your hand from your gun. The person's wishes move you, make, and I shoot. Don't shoot. You got us all right. Over here. Water. The truth first, then water. But we got to... Quick. You tell it, Slim. And then, then you let us drink? Yes. You was right about us being disguised like apaches. That's what we done. Us and some fellas in town. But why didn't you hold up the party? Why did you go to the trouble of attacking vans at the springs? That's all we was going to do at first, stranger. Just hold them settlers up. And then we've seen how we can get rid of them by letting them die of thirst. So we've done it. That way the blame will be put on vans. And there would be nobody left to testify against us. And no signs of fighting or anything. How about the smoke signal van sent up? Why didn't the settlers ride to it? Slim here told them the smoke was made by apaches. He sent them off in another direction. They said they'd find water. Really, sending them further from water all the time? Yeah. Afterwards, when you found they didn't have the cash they expected and you trailed vans and hoped to get him to tell what had happened to it, huh? That's right. Give me water. Water, please. A sheriff will take care of that. The sheriff? You bet I will. Come on, fellas. Grab these spunks. They was hid behind the rocks. All right. I wanted them to hear your confession. That's why I dropped a canteen the other day and allowed you to hold out until they got here. The engine brought us here during the night and showed us where to hide. I don't care. Just so as I get something to drink, I can't stand it no longer. Give them water, Ben. Seems like a waste of time when they're going to hang so soon. Ben! Don't bother him, mister. Look at him there with Ted and his mall. You ever see folks who was happier? Sheriff, you'll see that the truth about this is told as soon as possible. You just leave that to us. We've been mighty mistaken, stranger. But we'll fix that all right. And hey, hold on! Stranger! Young brother! Get him up still! I'll be blasted right in the way like that. If I hadn't known he was a Lone Ranger 4, now I'd be sure. You have just heard of the copyrighted feature of the Lone Ranger Incorporated.


So, right now we're in Finland, we're approaching the last phase of our video. We're filming for X Games, it's this competition, it's called Real Snow, so they invite six riders from all over the world and you make a 90-second video part that's just fully street-based. You can hit this side, then there's a natural landing. Yeah, but this looks cool, let's come back here another day and we'll do this too. It's me and Stefano travelling around Scandinavia and just trying to film the best stuff we can. Looks good, eh? Yeah, a little icy but it should work, we'll make it happen. Everything counts, it's really about pushing this type of snowboarding in the next level and of course the filming and everything counts. You're also trying to evolve that and it kind of sets the bar for that year. You know you're trying to push the boundaries and if you don't do that spot-wise you try to do that trick-wise, so you might do a classic spot that you've seen before but you'll do a trick that's really rare, uncommon or brand new, even if that's possible. This particular spot doesn't take too much work. We just got to set up a landing and a little takeoff but some spots that we've been doing have taken us two days just to build so today is kind of an easy one. I was thinking about filming the line with the long lines and then maybe cutting to fish out. Isn't the earth fish eye blurry anymore? No, no. Well, we're really influenced by skateboarding. We like to use long lines and zoom a lot or fish eyes and get really close and I don't know, Stefano is into that, I'm into that so we got a similar type of taste in videos, which is nice. Just do it. Do a 180, no stress. And then turn that? Yeah. We work really hard to get what we want. It's kind of stressful, sun's in my face, trick isn't easy and I've got about 45 minutes left to land that really hard trick so I mean put some pressure on you but try to stay calm, try to get it. Yeah, there's a lot of pressure, you're trying to do as best as you can but sometimes this time pressure works against you as well. Fuck, this better be good. Yeah, there.  When you do a nose press, which is the trick that he's trying, you have to stay with your weight on your nose and if you tap with the tail, it's not an appropriate trick so you want to do it better. There are some rules in this street snowboarding and you have to respect them. It's super cool to film with Jesse but for sure if you're working on this kind of project where you're always out and it's cold and you have just limited time to shoot all the tricks you can get depressed or like super happy one day you're here and the other you're down. But at the end, when you finish the project, you always look back and say it was an amazing experience. Either we have something set up the day prior and we go back that morning or we just drive around, we look in between buildings, behind buildings in the schoolyards, all these different types of places that you can't really see from the car always. I found this just a couple days ago. We were just driving around and decided to take a look behind this school and found this. It looked pretty good. We're just waiting for these last people to leave. It's seven o'clock on a Friday and there's still people in this school. It's kind of crazy. I think they should go celebrate their weekend so we can start building. I feel more patient. I've always been way more into X Games than the Olympics. It's so much more about expressing yourself, especially a competition like this. Try to put it as far to the right. Yeah, that's good. That's perfect. So after building last night, we left the house this morning, had some breakfast and headed right back to the spot. The jump wasn't really working. It was like too poppy. So I was flying way too far onto the first loop. This metal edge is higher a little bit than the roof. So every time I get a bit stuck. So we changed the job, tried again, and I landed kind of clutch before the sun went out. Fuck, I was in the air thinking like... To be involved in this is really cool and a lot of greats have come before me that I look up to. Just to be mentioned alongside those names is already like a goal. I think it's time for a pizza.