Good evening may I present my wife Kathy good evening last week We presented a comedy about the theater for you and promised for this week love and adventure And so Morton fine and David Friedkin who wrote our opening show the string bow tie and are possibly more familiar to all of you Through Broadway's my beat came up with a story, which we think you'll like it's called Cargo And it's about a man and a woman the woman is a bellwarner the man Paul Kincaid Romantic setting for a story of love and adventure Brazil The small port town of Metoplay on the River Amazon At the edge of the river dock and tied to it a motor launch Standing alongside the launch of girl is a bellwarner and on the launch two men Paul Kincaid and his deckhand assistant and friend called Corville She's the cargo huh she told you that See that one.  I've got a man waiting for me four days away Deliver me because I need the money if I didn't you stand here on the dock and watch the Amazon and be careful with my suitcase It's got my wedding gown in it. You carried around wherever you go.  Yes a river drifter who needed to be killed your brother. Yes, and you did it And this is what it's done to you eat.   Oh You're not kidding are you know, I'll marry you because he asked me politely He bought me a drink once in Point Grosso, and then he said he was lonely times like this Like before what do I do now to hurt you? Mark here you said marriage here. You said he would send for me. He did he sent you Take me to him from a toppy where we started to palm ball as four days by launch One day of it on the Amazon to Harupa River town three more days down the Tonkantines River And there was this enough money to buy enough gas to Harupa then rely on credit But mostly there was this the day and the night it took to get there 24 hours at the green edge of the world before you go over the side of it Sail at a hundred times like I have and wonder what it would look like the next time The heat would always be there in the stink The million things that grew into each other and choked each other and dripped and grew and died and sprang to life again and grew See it till the night comes And pick a clump of black and watch it waivers becomes defined becomes trees and lianas and green And it's day again in River town Harupa And the man of the River town is named Brady Lanny Lanny it's always a pleasure to extend you credit. Who's the lady up for it cargo? I'll eat enough gas to get me to pump ball greedy surely surely indeed. Hey, so low gas for the jack-o-leaner. I'm a hand Corbel Who's the lady cargo? Yeah, she said you said Lanny. I Wonder they were you going? Oh to offer the lady a drink. You want a drink lady? No Oh now here are what the bottle top for you. Get out of here. Great.   Oh, but I'm a man with a curiosity who sells gas for credit the friends of mine Isabelle Warner Isabelle Warner of him Are you of him little dear? What's he talking about? She's his brother. Yeah, there's a tidy one Sister to the brother King Cade killed as you ride on his boat Hortie. Now. There's no one get him away from me Oh, no little dear. He's in our vice Paul King Cades I'm a lonely man in a lonely place, and I'm needed now for the gas. Listen to me greatie you listen to me It's a thing of strangeness You Paul King Cade to her killer of her brother for a woman in a jungle town Now you to her Tell me what? Were you there? What dearie when he killed my brother. Yes importo de motz. It was down the river tell me Tell me greatie. I've heard ten different stories about it, and I want to know Over a bit of prettiness it was a pretty thing named jackalina the same as the launch and I think the killer shut up Greatie you serve your time for it. Let me forget it the dear little one of me is getting on come on Come on drink little dear. We'll talk of whatever drink Kincaid bagged greatie you really did Fighting you want lady a that time for it now. I'll warm my night Fish I'm out Does it hurt or he cut you to be all right? Cargo help me. This is the deep one for another reins greatie would have opened the place where your soul is stuff it closed Take The long drink on to the light and bring it down And through curve of glass the girls face cargo girl Hurry those girls sister of a man who's killed her face Watching Corvo work the knife wound Isabella's face still didn't emerald moonlight Drinking alone mr. Kincaid it seems to her the lady a drink Corvo. She's been through a lot And her laughter mixes good with the night wilderness Drifts inland on mist wind empties into the great fountains of jungle ferns dies there and One more twisting of pain and Corvo finishes So kick her over now take the wheel Head the jockeline ends are rotting shore currents into sweep of forest river Cargo a bride Vamark Huryo plantation owner coffee grower lonely fellow Biting his nails against the time when an end to loneliness walks up his private dock with a suitcase in her hand contents bridal four days away for Huryo and For me two days to where the tongue canteen spills its jungle silt into the Amazon and the dead city at its mouth Porto de moss Walk along through the dead city city of ruins dead city of a memory and From a tangle of wilderness where once a street was pluck the moist wild orchid Walk some more The fringe of lost city to a place you've kept clear where memory lies Where the dead girl lies Where great lay the wild orchid on it press your face to her. What's that you're doing mr. Kincaid what I? Asked what you were doing mr.   Kincaid You're lonely place. No trespassers allowed, huh? Come on. I'll take you back to the launch No Stay here as long as you want. I'll go back alone Kincaid yes I'm sorry for what I'm sorry. I followed you forget it. Sorry. I said what I did Sorry, I stood there and watched More than that I'm ashamed.  Yes. I'll tell you because you need to know yes Jacqueline a girl I buried in that grave The girl who wore a jungle orchid in her hair and some scarlet things of linen about her That girl Jacqueline can cave dead now Like her city like me And the flower for her hair The jungle grave my place Like you said my Mr. Kincaid What's the matter with you my place? mine Here From somewhere deep in forest the sudden screeching of glee and the furtive scurrying sounds and Moon gleam on a slow line of ants fever or death And not care which a Flower had been placed and then the remembered motion the sway and rock of the jacalina And try to get to the wheel and be held back just lie there mr. Kincaid Corvo's doing all right Here let me handle this one senorita one Two days now you have been at his side and this one of Paul's you will not know what to do drink And cold cold fever and of a base dead and swarming earth into cave wild blossoms on a forest grave The touching of a new warmth It holds you close And there's another face and its breath is on your cheek against your eyes against your mouth And the new fever dream takes hold Where is the gentle face? Rests its warmth that your side Where was death where it's grave and not remember Paul Paul way Paul publicity to try to wait What? Bombard We are here poor Tied to hurry those dog. You understand what I say. Yeah. Yeah, I'm Bob Oreo and this This and your hoodie or approaches to us for his cargo For you, and you read the Isabel Warner. Yes The fever sickness Corvo Three days as the senorita She will count also for you the nights at your side to warm you when you are cold to make cool you when you are burning.  No Be still and listen to me Something you said when you were in fever When I did what Corvo told you something you whispered against purchase a man's face so gently Does she not communicate my bride to be? my Isabel No, no Do not rise to me isabel finish saying to kinkage your farewell, and I will pay him for my cargo He has fever. He's very sick He's a doctor.  I'll take care of me. We'll get out as soon. Oh, no, no kinkage the doctor the things of my house the gentleness of Isabel and You will be well for the wedding of isabel to me hurry over by Wednesday the priest And you will be to me The end of loneliness to me Come Isabel come bride You are listening to Kathy and Elliot Lewis on stage tonight's play cargo Science chalked up its biggest year against polio in 1952 by discovering a temporary Immunizing agent that already has saved many lives to help continue this work the National Foundation for Infantile Paralysis Asks more urgently that you join the March of Dimes in 1953 The River town of pambal end of journey And what was in it this acres of coffee and the cultivation hovels shacks and a palace a quarter mile from the river The Senor's Palace Senor Mark Hurio Lord and master and rich enough to have built a thing of gleaming white stones Like something he'd seen in Portugal. He once told me with musk like roof and minarets With gardens and pools of speckled sunlight where strange birds came The place where I got well again Let me see You look better Paul much better. Yeah, I feel fine. What day is it? You always ask each day you share the excitement with me. It's Tuesday, isn't it? One more day Tell me something hurry. Oh, how come? Well, Isabelle Can you get up sure I've been walking around all morning? Why what to hear to the window? now Down there in the garden look Isabel She's a beauty that's why oh And the gentleness and of compassion Once in point grass I drank with her and talked and all these things I have her I knew and understood at once But you must know what how she has nursed you Near to you more than to me. She has been since you are here.  I know of beauty. You love her for you Tomorrow in the afternoon, I marry her No From you an answer. Yeah The much time she spends with you. I'm leaving tomorrow in the morning Good I'm happy that you are that well Paul. Is that you? Yeah over here You and the darkness are another shadow. I wasn't sure his house chokes in on me. I had to get out Walk with me Paul away from it. All right There's a place past where he's caged the wild birds a grove. I know what I've watched you there You saw me there Paul Oreo took me to a window and told me to look and it's where you were And when he got out of the room, I came back to the window and you were still there And I watched you as you walked and when you lay down and thought there was no one to see you I watched And the thing hurry or had said What Paul? What did he say that you were a beauty? Your boy has a twisted way with words You're right. I'm not beautiful. You want me to tell you I have to tell you But tomorrow I get out of pambas tomorrow you not beautiful I'd like the other one. What not her beauty. No scarlet thing to wear on my shoulders Just this What I am Listen to me cargo cargo that gave you the chance to stop dead. She's dead Say it once more Paul She's dead But your love for her not dead. Will you listen to me? I'll listen to jacalina Only this now a launch a boat. I have that runs the jungle river and the girl she was named after Something that was found in fever and lost in another kind of fever and Made dead is a bit. I'll wear the wild blossom in my hair Wherever you say wait, there are wait. I love you.  I don't care. What are you talking about? I don't care Paul Whatever happens now. It's going to happen is that we're going to get the boat and get them a toppy if you say we will Come on There's the river the boats down Corvo Shot dead And the boat gone. I was wrong. I said I didn't care. I was wrong Whoever killed Corvo took the boat upstream into the jungle. He can't go far why not that way rapids There's only one place a boat could go upstream about 10 miles down just before the rapid start the river branches off And there's a stream that could take the boat, but not for long less than a mile We'll never find it find it upstream is only jungle. We have to find it if we don't will rot We'll find how follow the river. Yes, we'll find it is about I promise you it was easy at first the rim of the river was sand a long slow curve and tonight an hour of it No talk and no boat Then the beach narrowed and then the river became a twisting tunnel of darkness Endless Vines and creepers and roots that was suddenly there against you holding you two hours No boat And the river became the land and the land the river Isabelle falls gets up again walks Through screen of jungle and night and terrible doubt and fear seven hours And it happened Isabelle, I can't we'll rest Yes Why didn't they kill us back there where he killed Corvo? Yes Wednesday, there'll be a priest there Priest will hear about a dead native. It'll be easy to explain away, but a dead white man and a dead white girl It won't be easy Do you think he's waiting him or someone?  You hear that the rapids Right I can go on And that was near the end of it there before the torrent began a stream the banks of it sandy and easy walk and steam and heat and There was a boat There, Paul It was, Uriel Wait here, Isabelle. No, I said wait for what Paul. He's got a gun wait for what Paul? For me. No I'm coming with you That's the way it is I'm coming with you Good morning Hello, hurry up and good morning to you bride oh Such a bedraggled bride so it was a mistake curio Let us go back in Kate. What that's your boat the Jacqueline Now weren't you tried to take so you can shoot me in the back when I border here?  I won't do right bride. Let him go.  And mrs. Lewis will tell you about next week's play Maybe Millie won't succeed in getting the boss's son But you'll succeed in laughing when you meet Millie starring Elena Verdugo You can hear it every Thursday night over most of the same CBS radio stations and now Kathy and Elliot Lewis Our thanks tonight for a beautiful script to Morton fine and David Friedkin and to the fine actors and friends who made it all come to life John Daener who neglected his picture career long enough to play Mark Hurio and Ben right to return from being a French Policeman in Beirut by sunrise two weeks ago to play the villainous gasoline seller Grady tonight and Anthony Barrett friend and assistant to Paul Kincaid next week Anthony Ellis suggested a story Which we liked in which he has written for us called a public furlough about a soldier on leave me you and a motion picture Actress he wants to date with you me and that's what's going to happen next week Thank you all for listening and good night. Good night Music for tonight's story was composed by Fred Steiner and conducted by Lud Gluston the Kathy and Elliot theme is by Ray Noble Kathy and Elliot Lewis on stage is transcribed and directed by mr. Lewis George Walsh speaking


As-salamu alaikum my dear respected viewers, hello and welcome to the 29th episode of the Treaties of Rights series with me or host Ali Jassim. Today we will discuss the right of him through whom God makes you happy. Regarding this, the Imam Sajjad alaym as-salam has said, and the right of him through whom God makes you happy is that if he intentionally made you happy, you should first praise God and then you should thank him accordingly and reward him for initiating a nobility and be determined to return his favor. If he made you happy unintentionally, you should praise Allah the Almighty, thank him, and realize that he chose you exclusively for that and you liked it. He has been one of the means of God's blessings descending upon you. You should only wish him well since the means of dissension of blessings are themselves blessings wherever they may be even if unintentionally. And there is no power but Allah SWT. Going through life and experiencing harsh circumstances makes us appreciate happiness more. Being happy is a gift from Allah SWT that everyone should be grateful for. It is through being happy that we move through life. If one were to closely observe their life and the lives of those around them, they would surely notice something very significant. Every individual in this universe seeks and works tiredly to achieve an aspect that may already be present in their daily lives if only they took the time to realize it. Achieving happiness is everyone's global subconsciously or consciously. We humans are always striving to reach this illusion of happiness. Everyone has their own definition for happiness. Some might say that their happiness is achieved through buying a house or traveling or getting married. But is that really happiness? There are many different situations in life. Sometimes life is filled with failures and difficulties.  The difficulties may seem like storms that threaten a safe harboring. The successes may cause such an outbreak of happiness that we lose all of our control. Islam in the Holy Quran directs us towards prosperity and invites us to act moderately in all situations. We should not lose hope in Allah SWT's mercy when we are faced with difficulties. We should not think that there is no way out for us. We should not become negligent during times of happiness and forget our identity and God. We should remember Allah SWT in all situations and realize that blessings and the attention that we receive are due to God's will. It is God who makes us happy. We should also realize that difficulties are very instrumental in our progress and development. We should be moderate whether we are happy or sad. The cause of happiness varies. Sometimes we get a new position. At other times we get rich. Another person makes us happy. One of the common reasons we find it so difficult to find happiness is due to our perception of what it really is. Our ability to be happy depends on how we define it. For many, happiness is defined by what has been achieved or what has been accomplished or material things we have obtained. While these things can't contribute to the feeling of being happy, do they really bring us true happiness? What does Imam Ali Amir al-Mumin in Peace and Blessings be upon him say about happiness? Nine rules for happiness by the commander of the Peytul Ali. First, rely on God when pleased and when grieved. Second, fear Allah SWT when you are alone, when traveling and when at home. Third, do not coerce anyone no matter how much he wrongs you. Fourth, do not worry no matter how high your concerns may pile up. Fifth, lift simply no matter how high your prestige may be. Sixth, anticipate goodness no matter how serious the affliction may be. Seventh, give Allah though you may be deprived even of a little. Eighth, smile even if your heart may be bleeding. Ninth, do not stop supplicating for your Muslim brother when he is absent. Through Imam Ali's eloquent words, one can slightly change their viewpoint about happiness. Allah SWT has given us humans free will and a mind to make decisions. Anyone can be happy if they tried and worked hard enough. Financial stability as well as other materialistic matters do play a role in one's happiness, even though its importance is extremely low compared to other factors of happiness. An individual with a correct set of beliefs and values will surely have a higher sense of happiness than those who live life freely without any beliefs and rules to regulate their lives. In the Holy Qur'an, Allah SWT says, those who believe in the oneness of Allah, Islamic monotheism and work righteousness, tuba means all kinds of happiness or name of a tree in paradise is for them and a beautiful place of final return. Most factors of happiness, like ethical and religious virtues, are at all people's disposal. But we must not forget that there is a special emphasis in the words of Imam Ali, peace be upon him, on the unseen factor of Tufiq, i.e. divine help for success. He says, Tufiq leads to goodness and is the most important factor of happiness. Now, what if someone came and gave you a reason to be happy or made you happy in any way? How could we possibly thank them? Making believers happy is a greatly encouraged in the Holy Qur'an and in the narrations of the Ahlul Bayt, peace be upon them. Let's go for a quick short break. Stay tuned.  There is a chapter on this subject in Usul Al-Kafi. The importance of happiness and making people happy has been outlined there. We will review a few of them here. Abi Hamza Tumali, Qur'an on the authority of Imam al-Sadaq, peace be upon him, on the authority of God's prophet, peace be upon him, and his pure progeny. Whoever makes a believer happy has indeed made me happy. Whoever makes me happy has made God, spana wa ta'ala, happy. This tradition shows that one way to please the God and the prophet is to make the people happy. This can play a very crucial role in fostering social unity and in eliminating hard feelings and animosities. Jaber narrated that Imam Baqir, peace and blessings be upon him, said, The smile of a believer at another believer is a good deed. Removing a speck from your brother's eye is a good deed. No form of worshiping God is more loved by him than making the believer happy. Therefore, the best form of worshiping God is making others happy. Imam Baqir, peace be upon him, also said, In the supplications of Moses, the son of Amran, we read that God told Moses, There are among my servants some for whom heaven is destined and they shall have the rule there.  God said, those who make believers happy. This tradition continues as follows. If a believer who lives in a land that is ruled by an oppressive ruler migrates to a land in which pagans live, seeks asylum there and gets influenced by them. When he dies, he will be told, Oh my servant, I would have let you reside in heaven if you had any place there, but heaven is forbidden for those who set up partners with me. The fire will be ordered to seize that man, but not to torture him and he will be fed at proper times. Then Moses asked, where will he be fed from? God said, he will be fed from whoever God wills. We also see a similar concept in the following verse. God forgives not that partners should be set up with him, but he forgives anything else to whom he pleases. The Holy Quran and it's chapter four, verse 48. Therefore, we realize that those who make people happy go to heaven and have a special rank there. In the sixth tradition in the above mentioned chapter, we read that, When one of you makes a believer happy, you should not think that you have only made him happy. No, I swear by God, you have also made us happy. No, I swear by God, you have also made God's prophet happy. Therefore, the prophet of Islam, peace be upon him and the immaculate imam, peace be upon them all, all get happy when they see that their followers are being kind to each other and making each other happy. Not only that, but making other believers happy could actually save you on the day of resurrection. So there, Serafi, quoted on the authority of Mamal Sadiq, when a believer is resurrected on the day of judgment, he might see someone ahead of him who tells him not to be afraid of what he sees and gives him glad tidings of happiness from the Lord. Then that person always accompanies him until the reckoning. His reckoning will be an easy one and he will be told to go to heaven. That person who always walks ahead of him will still accompany him. Then the believer will ask, may God have mercy upon you. You have been walking ahead of me since I was resurrected and have given me glad tidings of God's mercy on me.  That person will say I am the result of your deeds making other believers happy in your life. God created me out of that happiness to give you glad tidings. In this tradition, we see that all of our deeds will somehow be manifested in the hereafter. Now we will mention a beautiful story about making others happy. Kulaini narrated that Muhammad Ibn Jamhur said, Najashi was a farmer who was appointed as the governor of the provinces of Ahwas and Fars. One of his agents went to see Imam Sadiq and said, I owe Najashi a lot of taxes and know that he really likes you. Can you please write a recommendation for me? Imam Sadiq wrote in the name of Allah, the beneficent, the merciful. Make your brother happy in order to make God happy. Then the man took the letter and gave it to Najashi. Najashi waited until others left. Then he kissed the letter and asked him what he wanted. The man told Najashi that he had been taxed 10,000 dirhams. Najashi ordered the tax not to be taken from him and asked if he had made him happy that way. The man said yes. Then he ordered that a horse, a servant and a maid be given to him and asked if he had made him happy. The man said yes. Then Najashi ordered the carpet he was sitting on to be given to him too. Later on, Muhammad ibn Jumu'ur told the Imam what had happened. The Imam became happy. He said, oh, you became happy. The Imam said yes. I swear by God that the Prophet became happy too. From this story, we can learn how much the Ahlul Bayt peace be upon them valued making others happy and how we as their followers should strive to do the same. We have reached the end of this episode. Stay tuned for another episode on the Treaties of Rights. Thank you all for watching and may Allah hasten the reappearance of our beloved Mahdi. Wassalamu alaikum warahmatullahi wabarakatuh.


Okay, I think we have most of the interesting part in the room for VM test Yeah, let's get started next then we talk about a VM test Hello, so this is about VM test testing Running tests inside a virtual machine not testing virtual machines So this is the motivation but before I actually begin. I just want to Make a note that none of the ideas here really that new in fact. I just stole most of the ideas I Just looked at all the other projects around and I took all the ideas I liked and I combined them and in particular I even stole the name But everyone was doing that already so I I don't feel too bad about that But uh, yeah, so the motivation So the reason I started this project was that you know, there's a few reasons one like tests are good It's pretty hard to maintain Complex software without good automated testing. Otherwise, you're just thinking really hard when you're looking at code. I'm not very good at that BPF is also really fast-moving target. I do a lot of BPF related development And so if you have like a non-trivial application You have a lot of feature gates and fallback code and especially in like the new k-funk world There's no like UAP I guarantee so it's It would be good to like test your code against a bunch of different kernels to validate your assumptions But that being said This is a pretty generic problem. It's not really limited to the BPF world. So The solution is hopefully applicable across a variety of domains But more in BPF so BPF program. I think is actually really powerful It's one of the really cool things that BPF powered applications can do Essentially, you can run a program in freestanding mode You provide the input context and you can like the return value. You don't need to attach it to anything But it's inherently dependent on the kernel you run on because it still runs in the kernel It doesn't run in user space. So you have to wrangle the right kernel The last point is that VM based testing is actually pretty popular a lot of bigger well more Resource to projects have support for that, but it's like it's all very bespoke stuff Very sometimes kind of hacky and definitely not reusable. You can't pull it off the shelf So the main thing I want to do is I want to create a solution They could pull off the shelf and it's really easy to use and in fact, I want to make it so it's silly not to use it so the goals in order of Kind of importance the first is reusable infrastructure I want people to be able to pull it off the shelf whenever they need they can instinctively reach for it The second I want to make it run inside CI. That's really important because I don't it's much easier to tell contributors Hey, just make the CI test pass versus they run these 10 steps on your machine and do it the way I do it And hopefully that works and the final goal is just to make it simple easy to use I don't really think this problem space is that complicated. So I think you can hide it behind a fairly simple interface That's about all the talking points. I had the rest of this presentation is mostly just demos I just it's easier to explain if I just showed demo There's two demos I'm gonna do one is as a development tool So you can use VM test the binary as part of for example, you know iterating iterating on the kernel changes You can just run it run some tests really quick. The second is a VM test action, which is a github actions wrapper I think that's just actually just called the github action in the singular form And you can it demonstrates how to drop it into your existing workflows really easily Oh and also note that there's two parts to this thing right VM test is the binary contains all the key move orchestration logic and some Terminal interface things and the second thing is Just a little bit of JavaScript that installs all the dependencies and configures VM test to work in github So, yeah, consider this config file. It's VM test that Tom will just Tom will format This is the local development example. There's two targets Essentially what we're trying to do is we're checking that the kernel version is what we expect The first one checks if the running kernel is 62 the last one checks if it's 61 Notice how we're running the same 62 kernel for both. So only one of these will pass. I put a gif and a PDF It doesn't work. So I also put a link Yeah, so pretty much. Yeah, you type VM test and looks in the current directory for the config file And then it'll start running things. I actually went through a great deal of trouble to make this interface Dynamic it also does the correct thing if it's you know If you're not attached to a terminal, so just prints it out straight to a log file and works as you expect It does some nifty things like it'll collapse Output if a step succeeds, but if a step fails, it'll leave it expanded So it's a little easier to debug just the UX thing the first time I did this I actually didn't make it like streaming output, but you get really antsy if there's no progress on the screen and despite it taking the same amount of time Runtime it feels much faster this way fancy, huh? The second example is the CI example So I create it like a demo application. It's really simple. This is main.cpp pretty much a dynamically links against JSON cpp I Runs you name and it prints out the kernel version in a JSON object for such a binary you might have a See I configure like this if you're not familiar with get-of-actions. This is Really just three steps the first step is you install some build time dependencies and maybe some runtime dependencies as well second step is you build You build your binary Configure slash make and then third one is you run your test runner So now consider because your binary depends on the kernel version you want to say Support everything 6.0 plus and you want to have a matrix of jobs that test that so this is how you would use VM test to drop into your CI workflow So the first part of the diff is You have a matrix try testing strategy. This tells GitHub to spawn three parallel jobs That will you know run 606162 and the URL is just linked to some dummy asset Where I dummy release where I host a bunch of test assets in this case. It's just the base. It's the standard VZ image The bottom part of the diff is how you drop it in so you replace the test runner thing With the kernel and the command and it just works And so note that the dependency installation and the build steps happen outside the VM And you want that because it's probably faster than being in the VM in the final step We run as little as we can inside the VM and we just only run the pre-built binary And so this is a good example because it does dynamic linking this binary. So it proves that The host user space is the same as the guest user space and we do that through Clever use of the 9p file system as we mount the root The host root of s as the guest root of s This is what it looks like the output for the 6-2 job at the very end. You can sort of see it print 6-2 Don't believe me. I have a link To the job and I can show off some of the other things So yeah, here's the 6-2 and then we do the run and Notice how the output is not collapsed. It's just all there and you're booting your kernel and the very end Runs the command and there it is So the implementation there's really no new ideas here You can squint at this later if you want, but if there was one novel thing I did it was I used the programmable interfaces for QEMU and QMU guest agent So a lot of the existing things they kind of just shell out and they have like triply escaped commands that they shell out with Which is which isn't necessarily a bad thing But I get really nervous when I try to extend that kind of stuff because you can't really rely on the type system or programming interfaces Cuma guest agent actually is really neat. I don't know if anyone's tried that yet for at least this use case But it's a it's a very clean out-of-band mechanism to do things inside the guest So you don't have to bring up networking or SSAH for wrangle SSH keys Pretty much is just a binary that runs inside the guest VM. It listens on this bird IO serial Port and they have some kind of RPC communication. That's statically typed So yeah future stuff the core functionality is mostly there for the use cases. I have in mind in the projects I'm going to add this to But if there's other feature requests we can discuss that and I can add more stuff One limitation right now is that the get-up action wrapper builds VM test from source That's because it's not packaged anywhere So a binary distribution would be good because it would cut down the CI time and short see it times are good There's a lot of ways to do that in the Rust ecosystem. So I'll just do it at some point. I Was chatting with some people yesterday One-liner interface would be nice. So if you could do like Really quickly just run things under different kernels With a couple words that'd be neat Tying into that idea if you build a registry of See I made we could build a registry of distro like kernels. It's actually not that hard I have these scripts that use Docker to repeatably Do kernel builds which is different than reproducibly which is much harder So you pretty much you take a distro K config you flip the configs that The M test needs pretty much you need to build nine PFS in as equals. Yes. That's the only thing you really need You can have a registry and can upload it to all the the Yeah, the fake asset. This is an idea. I stole from Omar. It's a very neat idea It's a way to get around paying for Amazon s3 You can just use github to host binaries Yeah, if anyone needs stuff you can open a ticket email me discuss it But I think it's pretty useful and it's really easy way to just do VM testing in your projects So Thanks, that's really cool The It was really impressive like how fast the test was in the give or achieve I don't know So we have some infrastructure for this in Cillium. It's called little VM helper. I would be surprised if you heard of it We we do something similar. So We use it to test Cillium that are gone and pack it. Where are you? And the basic idea is that we have a Program that looks a bit like this, but it also can build root images And it can also be used to build kernels So we need to build root images because for some of them We need to have kind inside so that we can do like Kubernetes tests and for others We just need to do like something. I don't know like run a bunch of code tests and there's another repository that has a Configuration of how to build these images and what it does is basically whenever you do a PR on it There's a GitHub action that will compile the kernel, build the root images and push them into OCI repositories So we already have like, I don't know five or six kernels that we test against in these repositories And also root images that one could use again like our use cases are kind and no kind But yeah, this looks really cool. I Just wanted to be because there seems to be like a big overlap So if you feel like something of for the from little VM helper would be useful would be great to like bring the two together Does that's so the thing you're describing it builds images But it's not Doing like the testing stuff right because I think the Cillium stuff uses vert me like a wraparound So Cillium's last CBPF use vert me Cillium uses this thing little VM helper so In addition to build images you can do LVH run Which is basically like VM test here. So But like this is I am pretty sure like it's pretty similar to what you do What you do is probably better because better because it's much faster Yeah, well one other thing I think I forgot to mention was because all the programmable interface stuff is there I it's actually really solid foundations in my opinion. You can I Feel pretty confident adding a lot more stuff. It's not very hacky at least in my opinion Cornelius just said that putting things into container images work well, right? So I Wrote the the vert me integration of use for the ebpf library And I think the m test for me is attractive because or why like vert me is essentially like a precursor to this like Less featureful I would say and why this is as nice as like this idea of having the nine pfs Kind of the host file system mounted Into that VM is for me really powerful because it means that I can very easily Test stuff that I have cooking on my local machine without kind of having going to go through like I build an image and all this other stuff And I actually went and created some issues this morning for you I think one one thing that would be really interesting and where where I think this Idea of having The host file system mounted is really powerful is We could add a flag to the m test that actually starts the gdb server in quimu And basically then the only thing you have to do is like you do VM test this thing and You can then connect to You can you can then connect to kind of the the current that's running your whatever your test is really easily and kind of Have all the tools that you're disposal Inside of that VM This also supports VM images. I didn't show any of that off, but it can boot up like a q-cat to image And it also does the mounting stuff with 9p So 9p is read only and I would like to use this for like better of us Brog's which is gonna have to write that's something Is it? Yeah, so it like it creates images and like corrupts them and then runs FS check against it to make sure that it does the thing So like I could probably make it run in tempfs inside the VM But like I would like to have the option of like I've used for me for like my quick tests And that lets me add disks.  I thought 9p was read writeable. I don't know I thought it's well, maybe then but it's just the way I use it as always read only so I could just be dumb Oh, you can read right. Yeah I think like in some of the VM tests other project VM test projects They mounted the 9p root of fs's RO Command line.  Yeah, I think it has to be right if it was used for the plan 9 OS stuff Yeah, I don't like again. I've only ever seen it as like give me access to like my get tree or whatever and like But yeah, you can add more disks. It already wrangles stuff like that and there's internal scaffolding for it. Cool. Yeah. Thank you everyone


Welcome to the Cyber Underground. I'm Dave Stevens, your show's host, and today we've got a co-host and a great guest to talk about artificial intelligence and how it's being used to dig into the deep web and the dark web, and we're going to discuss what the difference between those two are. Let me introduce my co-host today first, Hal Cochran, professor at Peolani Community College. Let me say the beer today. Calm down. Just dig it easy. And of course, Tom, finally from IntSites, we got to emphasize the tea because when people put insights.com it's a totally different website, right? It's a completely different thing. Welcome. You're from California currently, but originally you're from someplace else? Yeah. Yeah. So I was born and raised in Israel. Tell us about that journey from there to doing artificial intelligence. Yeah. So I was born in Israel back in the days in Tel Aviv, served three years in the IDF mandatory service in Israel. IDF is? Israeli Defense Forces. Okay. And this is where I usually, but this is actually where I got most of my experience back in the days. So we build cyber capabilities for Israel as a state. When I'm thinking about it, approximately 12, 14 years ago, there was nothing out there, especially not like finding out information about what's going on in the outside world, dark web, that was just the beginning of it, and even the surface in the deep web, which I explained in a little bit what it actually is. Okay. I'm sure you guys can benefit from some background about what it actually is. And during my military service, we developed some very interesting cold capabilities for Israel as a state. When I finished that, I moved to work for VMware, dealing with a lot of cloud management, network management, analytics, and a lot of like big data. So VMware is a virtualization company, right? They take computers and virtualize them in main memory. So how does that work? And why is that important to us right now? So there is always the network aspect of it. So when you take a computer and you virtualize that, like the computer that it used to have at home, like this box, and then you put it on a server and you can just put multiple of them on the same box and being able to move them around and do all those like cool cloud computer things, there is a network aspect with it. So you need to somehow connect them to the physical network. And this is where we started with how the hell we do that. So once we figure that out, obviously, not far down the road, we will have, we had to deal with the security aspects of it. Sure. So these virtual machines, they replicate or imitate a real machine. Yes. And you can put multiple ones on a physical device and your saving space is easier to backup, easier to restore. You can take snapshots of it in virtual space. But then you've got to do the same security you do to everything else. Yeah. So that's what you do. Yeah. Basically, I would describe it to my grandma, it's like being able to run multiple computers on the same computer. So you can just run multiple operating systems on the same physical machine. And the cool thing about that, what, you know, what cloud computing is really is, is being able to move them around. So let's say that you have two physical boxes on the table and you have one operating system running on top of one of them, you can move it like without any downtime to another one. And you can do it in the same room. You can do it between data centers. You can do it between countries. And I think that's kind of like all the magic. And it doesn't really matter where the hardware is, as well as you have the operating system running and bunch of boxes of hardware, you can just move and play with stuff around. So with more virtual machines, we had more computers on the, on the internet. And now we've got an even wider worldwide web to deal with. Absolutely. So that leads us into things like the dark web and the deep web. And there's a difference. Yeah, absolutely. So let's describe, you know, the regular internet and then why part of it is dark and part of why part of it is deep. Okay, yeah, that's a great topic. So we're gonna, we're gonna warm up to this. So yeah, it starts with what we call the surface, which is the internet that we all, that all of us know. Google. You go to Google and type in a search. I go to the regular web. Social media, application stores, basically everything that can be indexed by Google. That's kind of the background of, of what it's really is, which actually represent less than 5% of the entire internet that exists out there. So Google has things called spiders. They go and they index or browse the web automatically 24 seven, 365, right?  That's correct. And that is only five percent. It's less than five percent. Less than five percent of what that is actually out there is what's coming down. Wow. Yeah, but then the rest of it is goes between the deep and the dark web. So the deep web is basically everything that can be accessed through normal protocols, like your web browsers or, you know, like web browser probably will be the most like favorable protocol to interact with websites, I guess. But it doesn't show up in a search. But it doesn't show up in the search because it's behind closed doors. So you got to know where it is. Yeah. Or you just need a username and password. Or you just need, you know, there is a door that you need to cross. You might need a token. You might need a pin number, but it's not available for the public. And therefore Google would not be able to index that. So would this be, for example, maybe a country or a company's intranet? Oh, absolutely. Your mailbox is a deep web, but it can go all the way to black markets. And it's going to go to, like, cyber crime forums. And it's going to go to, like, you know, some places when people do bad stuff. So you'd register that as a dark web. When you get into crime and human trafficking, things like that. We usually differentiate based on the protocols. So if we look at a dark web, usually people use some special protocol to get in. Like the fore browser, and they use some special protocols, like the onion websites, that gathering, like, just keep them anonymized, so they don't have to reveal their identity. So let's back up for a second. Our audience isn't always technically savvy. So let's describe this. The Tor browser, or the onion router, T-O-R, right? It uses something like Firefox, and it's an extension to Firefox browser, usually, right? And it can actually browse websites that end in dot onion, instead of dot com. Dot net, whatever, right? But it's a different protocol, different top-level domain. Is that what you're saying? It's, so the Tor browser allows you to do two different things. First, as a user, you don't have to reveal your own identity.  So they know that, for example, you came from Hawaii, you have your IP address, they can go back to your ISP and ask, hey, who is this guy? And they will say, hey, it's Dave. And they can circle back to you very quickly. So the good part is, though, they know you speak English. So they'll display Google stuff in English. Exactly. If I use Tor, I could get back French, Slovenian, just whatever comes up, right? Because Tor's imitating something else or trying to obfuscate them. You might get something completely irrelevant to what you're doing. Because what Tor does is just routing you for multiple ops before you get to Google. So you might start here in Hawaii, and then you will jump to France, and then from France to India, and then from India to Greek, and get all the way back to Boston. And then from Boston, you'll touch Google. So Google will think that you're from the East Coast, and you start getting some web results from the East Coast, and you would understand that, yeah. So the idea is that you don't touch the website directly, you touch it for multiple ops. So it will be much harder to track your identity and track it back to exactly who you are. Now people hide stuff on this dark web. Yeah, so this is like the consumer side. There is also the provider side. So who put the websites together? So as the consumer wants to maintain his identity hidden, people will usually offer some shady stuff. And again, I just want to say that the four browser and the four projects was created with good reasons. It was not created with bad intentions. You know, when we're looking at the world and we have people spying on us, like when we're talking about Google and the Facebooks of the world, they're just trying to learn as much as they can about us for commercial reasons. Also, we have, you know, I'm sure our local country runs their own checks about certain people and foreign countries. No, there's no spying in our country. No, spying at all. The United States is completely open and free society, and we don't have anyone looking into our private affairs. So it's just foreign countries? It's only foreign countries. I'm going to tell the GOP line. You're safe. So that's why this project was created, to maintain that. Give some privacy. Yes, give some privacy. So it could be used for you just to tell about your feelings and you don't want anybody to trace it back to you. But then hackers found it as a sweet spot because you know, that's great, like location for crime when you don't have to reveal their identity. Well, you said something really important just now, someone who wants to state their opinion but not go up against some bad people, right? So human rights activists in countries that suppress activism wouldn't want that. But if you still want to post things, you could do it on the deep web or the dark web. Yeah, absolutely. It's like basically if you don't want people to reveal your real identity, or at least it didn't make it very hard for them to do that. So they would not like invest the effort. It's all about the effort, right? So yeah, you can track somebody back from the for browser but because there's no logs and because it's like multiple hops and usually you go for different countries, you just make it like financially or economically not like something you would do to track somebody, especially when people probably will use some other mechanisms to protect their identity. So you brought up another good point, right? When I'm digging through and I'm the dark web, the deep web and I'm trying to find somebody, it could be economically or not time sensitive. It's not feasible to go after that unless I have the resources to do so, right? If it's North Korea and they really want something, they're going to get something. But if it's just me, I mean, I got a regular job, I got to go to work, I got to get some sleep, right? I don't have the time to do this kind of stuff. And I think that's where your company is kind of the connection, right? Yeah, yeah.  Same goes for like, hey, try to reverse back somebody's identity for the dark web. When we play is basically there is so many like web pages and sources and places out there in the clear, deep and dark web. But usually if you want to understand what is the risk for your business, we'll take you to take you like hours, weeks, months just to go through all that information. What we develop is a software proprietary software that allows you to understand what is your digital footprint out there. So what people are talking about you out there, but farther more than that, using artificial intelligence, understand from all this noise, what are the things that actually being like cyber risk and find cyber threats to your own organization. So it's one thing to know when people mentioned you across the deep, clear, deep and dark web, but it's more interesting to know with all the noise that exists out there, what boil it down to really what are the threats and risks that I need to pay attention for. And you've seen this information used for nefarious purposes.  We've seen the same type of breach, we've seen the same type of data on the web and on the company and it was used for X purpose. You might want to... Yeah. What would you tell them about that? We've seen this data, we've seen it used for this purpose. What does your customer do? What do you tell your customer to do? It depends on the type of data that we found. So it can go all the way from like credentials that we found and we can tell the clients, hey, you know your credentials were compromised and you need just to go ahead and just, you know, you first just go ahead and change them, but also later on you might want to like validate how it happened and just start an investigation. Usually also when you see a trend, if like your credentials were compromised and a couple of others from the same school or for the same faculty, you might want just to create some kind of like investigation that we try to find out what is the connection and how it happened and around which time frame. Where with the leak of the breach. Exactly. Okay. So we actually want to connect the dots. And you know if we're talking about a phishing domain, we try to catch the phishing domains before they attack as even started and this has a lot to do with artificial intelligence that we will talk about, but basically, you know, using machine learning and artificial intelligence can help us a lot by catching phishing attacks before they even start, which is the primary way today Hacker tried to steal information credentials try to get control over your company assets. It's mostly start with phishing these days, which is kind of... Several different types of phishing, right? Yeah, different types. We're going to phishing just broadcast email. Yeah. Spear phishing to as particular people, right, targeted and then wailing. To high profile specific targets, right? So we're going to take a break. We're going to pay some bills. We're going to come right back until then stay safe. Guys, don't forget to check me out right here. The Prince of Investing. I'm your host, Prince Dykes, each and every Tuesdays at 11am Hawaii time. I'm going to be right here. Stop by here from some of the best investment minds across the globe and real estate, finances, stocks, hedge funds, managers, all that great stuff. Thank you. Fastest break ever. I'm Dave Stevens with the Cyber and Underground. Thank you for returning. And let's talk about artificial intelligence and searching the deep and the dark web and how that connects to people in real life. So how that connects to people in real life. Hal, were you affected by the Equifax breach? Me and everybody else, I know. 200 million people plus now. And then to try to put a credit freeze was a whole nother story. Tell me about that.  I got to admit I haven't done this yet. I got to do this. I tried to freeze my credit because I knew that my information was part of all the information that was going on. Right, right. And so I found, I didn't want to, I tried not to do it through the web because I knew there'd be a lot of fake websites out there trying to trick me into using them. So I tried to do it by telephone with all of the major credit. So TransUnion and Experian? TransUnion was the only one I could call and get through right away and get it frozen. The others, Equifax and Experian, the systems were down. So I was like, okay, well, the false systems are down. Why would they be overwhelmed right now? I can't imagine why. So I went to the web and very carefully made sure I had the right URL not someone I found posted somewhere in some forum. Although I heard that Equifax actually gave some people the wrong URL to send. They sent it to a person who put up another site just to demonstrate how easy it was to mock up the website and send someone to a fake site and Equifax started pointing to that site. So I tried those websites and guess what, those websites were down. I couldn't do it. I think I was able to do one. It was the very smallest one as I was an Experian or something. That one is what I was able to do through the web. Of Equifax, I've tried multiple times through the phone and through the web. I've not yet been able to freeze my credit on Equifax. All the others, I eventually managed to get it frozen. So at any point, did you have to enter a piece of your social security number? At every point, I had to enter my entire social security number. My address, previous addresses. Anything that anybody would want to know, I had to enter. It was a full page of just fully... What's the biggest problem with having to enter that information again? I mean, clearly they should have that information because they already gave it to somebody else. Right. So they had this information because they have your credit history. So they have your social security number, your driver's license, several past addresses that you put on your credit applications for buying a home, a car, or whatever. Getting a credit card application. And so they have this data that they leaked in a breach and they request that data to freeze your credit. And they charge me $5, I'm just saying. Each site charges $5 to the face. And now next week, I'm going to try to change the cell phone providers. So I'm going to have to unlock at least one of those so that they can do a check. It's going to cost me $5 to take it off and $5 to put it back. I think you can get through. Yeah. So it's just like a venue that you just put in $5 bills. Oh my, so they unlock the market. This is a brand new business. This brings your company into play.  Your services now. Because you dive into the dark web and the deep web and you find out, is my credit card number for sale? What's my information being used for? Or my account credentials being used somewhere? Biggest problem. If I use my same credentials for Equifax that I did for my home router and my email. And your bank account. And my bank account. So that's a big problem, right? You should use different passwords. And not just password one, password two, password three, password four. Which you would be surprised how common these are these days. I don't think I'd be surprised actually. I'm beginning to really focus on realizing that there's a huge segment of the population that just doesn't care. They just want to get them on with about their day, do their job. And they let their passwords down on a post-it note, stick it on the top of the monitor. It's hanging on the monitor, right?  And there it is. And in there. That is my absolute favorite. So you guys tell me, if I wrote, say, a script in, say, Python to go out there and just scour the dark web, right? Using those protocols and fish out all this information. You guys do that, but then you add artificial intelligence. And I don't think the audience, any audience anywhere, really understands or grasp what really is artificial intelligence. Can you break it down and like easy to understand? What is AI? Yeah, absolutely. I think AI in general is a pretty easy thing to understand. So it's just make a machine to be able to think like a human. And it's traced back all the way to the Greeks when they try to create something that will, they believe they can create something that will think like a human and behave like a human. All the way to the 60s and the last couple of years when artificial intelligence became very, very popular. And when you look at AI, usually today, you break it down into two groups. There is like one group when people and companies try to focus on a single aspect of AI. For example, like driving less cars or just, you know, image processing, just apply artificial intelligence the way people think into one field. And there is like a couple of academic researchers that are going on that are trying to create a big thing like something that will behave completely like a human regardless of which field you try to apply AI for. So this is kind of the two camps that exist today. And it's basically just make something like behave and talk and, you know, try to mimic the human behavior. So we're talking about something like Watson that was on Jeopardy, right? Yep. IBM made Watson and actually competed in Jeopardy. But you have a version of your artificial intelligence in your proprietary software. Correct. That kind of makes decisions when it goes out there and looks at data on the dark web. Yeah, so I think artificial intelligence like was very, very popular of them like for decades now. And it's always been the case about whether it's like efficient just to go ahead and invest in artificial intelligence because, you know, there haven't been any breakthroughs for a while. And recently with the introduction of machine learning, artificial intelligence came back to be very popular. And basically, machine learning is a subset or an application of artificial intelligence by trying to mimic the way we learn how to do things. Or in other words, you know, we learn how to brush our teeth or go to school every day by what we call experience, right?  So the more turtles you see, the more turtles you will be able to recognize. And that's applied to everything that we do all around. And machine learning is basically due to that is like, look at information, teach the computer about, you know, what we call data sets. So it can be mainly applied to text. So that's kind of what we do with phishing domains. So is there also a decision making and problem solving involved in this? Absolutely. Or just recognition? So it's first like recognition, but being able just to get the computer to understand what, you know, when you look at a bunch of like a thousand domains, you as a human, right, you will know like, that looks fishy to me, or that looks fishy to me, or that looks fishy to me. And being able to teach a computer to do that, that's the challenge. How do you get that gut instinct in here? Why is that? Exactly. Yeah, yeah. How do you get that like, hmm, that doesn't look right. But what exactly is it that makes it not look right? How do you get the computer? Like that guy walking down the street is blue. That doesn't look right to me. But then there's a Star Trek invention.  So that's kind of what we try to do. So if you look at computer science for years, we used to write those like super complex, like algorithms and Python scripts or whatever it is, just to say, if that happens, like this should be the result. And then you have like e-fails, e-fails like condition rules, and that's can go for like pages and pages for you to cover each and every aspect. Hundreds of millions of lines of code. Exactly. That gets really inefficient soon, hard to maintain, and requires a lot of labor. What if you can just teach a machine to think like human, and then the machine would be able to do it instead of you moving forward? And this is kind of how we started our artificial intelligence kind of project, especially around phishing domains. So phishing domains is something very subjective. You really present a list of domains for people, and people instantaneously can just say, hey, that looks fishy to me, that looks fishy to me, that looks fishy to me. It's not 100% bulletproof, but you know, you could reduce like 1,000 domains list to like 10 or 15 or 100, that looks like fishy to you. So you're talking about reducing your thread landscape.  But with your logic applied, you're reducing that down to a controllable subset. So just a few domains might get through versus hundreds, yeah. Yeah. So first we're looking, we know what your company domains are, right? So we know what are your assets and how do they look like. And then we try like based on that, we have like variations of these domains that we generate using like algorithms that hackers also use just to create those phishing domains. So hackers can use artificial intelligence too. Oh yeah, absolutely, they can use that. And also one of the things that they do is actually try to stay away from human intelligence, which is another very like interesting topic that we've seen lately on the dark web. Because most of the time when the law enforcement guys were able to catch like people or just trace back a malware or a specific phishing campaign to a specific individual, it was because it has its footprints on it. So they, you know, the way the domain was structured or, you know, the way he was talking English because you can easily pick up. People get into habits and they do things the same way and if something works, they tend to repeat it almost the same way. Yeah. And if you're from a certain place in the world, you will have your own habits and that's how law enforcement can somehow track, like say, hey, this came from Australia. Why? Because Australian speaking was a certain way. And he mentioned Foster's beer or something like that. Exactly. So actually hackers these days try to get like as randomized as they can. Even with their phishing domain, you know, if you look at malware these days, they literally have like machines like generating completely like random strings. And if you look at the key that they used to generate these domains, they can go to like, give me the last five posts on Twitter and based on these keys, just generate random domains so nobody will be able to trace it back to me. Interesting. This much link back to the Russian deal for Facebook and all that is fake news. I bet they use a little bit of this. I would not be surprised at all. So yeah, one minute left. I'm going to let you plug your company. So if you tell us about insights, why should we use you besides trying to find my credit card number that was stolen on the dark web? So if you ever want to get visibility to the clear deep and dark web and understand what is your digital footprint of your company or organization is out there and understand what are the risks and threats that you might have exist out there, just call us and we will help you gain this visibility and let you understand what are the risks and the threats that you are facing. You offer 30 days free? Yeah. So we offer free POCs. You just plug your information and you're ready to go. It's all SAS. So you don't need to invest any money with servers or hardware. You just put your keywords into the product and you're ready to go. And within minutes, it will start getting some pretty interesting things. Now I can find that on your website at intsites.com. That's correct. Okay. Well, thanks for being with us today. Thank you very much. Welcome back to Hawaii. Thanks, Hal, for being with us. Thanks everybody for joining us today. Come back next week. We're going to get into more attack phases and how to be a hacker again. Until then, stay safe.


The Crow and County Board of Commissioners has approved the 30-day notice to end the Sentence to Serve program. For over 20 years, the program has granted opportunities to inmates that qualify. With low-inmate numbers at the jail and few inmates who qualify, the program has seen a major decrease in participation. Those inmates who still do qualify will be able to work within the facilities after the program ends in 30 days. You know, it's hard. It's hard for the commissioners. It's hard for me as the sheriff because I love the program. I see what they do out there. They take pride in their work. And whether that be anything from building buildings or to raking, cleaning up, whatever they might do, they take great pride in that. The closing of the program will save Crow and County over $65,000. If you've enjoyed this segment of Lakeland News, please consider making a tax-deductible contribution to Lakeland Public Television.


Welcome traders to another TickMill earnings report preview with me, Patrick Munley. Before jumping into today's report, it's important that we adhere to the risk disclaimer material provided is for information purposes only it should not be considered as investment advice. Views, information and opinions expressed by me in this recording are solely mine and they're not indicative or representative. Those held by TickMill UK or TickMill Europe. Okay, let's jump into today's report. We're looking at what Disney company held you to report after the closing the New York session today. The EPS is looking for a $1.20 print on revenue of 18.91 billion. It tells us what to look for from the report. Focus is really on Disney's revenue from its parks, experience and product segments. This segment is comprised of Disney's theme parks, resorts, cruise ships and vacation clubs and is tied especially closely to the spending power of consumers in the US and around the world. Parks experience in product segment was badly impacted by the pandemic and related government imposed measures to limit the spread of the virus. This segment posted a string of revenue inclines beginning in the second quarter of 2020 and continuing into the second quarter of 2021. But it has begun to recover from the worst of the pandemic, thanks to the vaccine rollouts and the relaxation of restrictions that have allowed Disney to increase capacity limits at its theme parks. The segment's revenue soared 307% year over year in the third quarter of 2021, for slowing to a pace of 99.4% in the fourth quarter. It then rose 101% year over year in the first quarter and analysts now expect it to rise 101% year over year in the second quarter of 2022. Investors are also likely to focus on how Disney's retirement of its line skipping programs at some of its parks such as FastPass will impact results. Starting December 2021, Disney replaced those line skipping programs with Disney Genie, a digital park planning service that allows visitors to bypass lines for free. Disney Plus subscribers is another key metric that will receive investors' attention. The video streaming service which offers Disney Pixar, Marvel, Star Wars and National Geographic branded content in the US and a number of other countries throughout the world was launched in November 2019. Disney Plus still comprises just a small share of Disney's total revenue, but it has grown rapidly in the short time it's been available. By the end of the first quarter of 2020, in which the service was offered to customers, Disney Plus had 26.5 million subscribers. That number has increased nearly 5 times to 129 million subscribers by the end of the first quarter of 2022. Let's look at some of the statistical trading patterns around the Disney earnings release. Disney shares have moved lower in the immediate aftermath of earnings, 7 out of the 10-12 previous reports on average the stock has moved down, 0.1% in the first day of trading after the company's reported earnings. Based on the previous 12 earnings releases, Disney is more likely to trade higher one day after the earnings for an average gain of 0.6%. On average the stock has moved higher by 0.2% one week after earnings. From a volatility perspective, options traders are pricing in a 7.9% move on earnings and the stock has averaged a 3% move in recent quarters. Moving to the flow and sentiment perspective, there was a notable buyer April 29th of 12,000 and 21 contracts over 120 core expiring Friday the 20th of May. Options order flow sentiment in general has been relatively bullish. Investor sentiment going into the company's earnings release has 62% expecting earnings be. Consensus estimates are for year-over-year earnings growth of 51.9% with revenue increasing 21.12%. Short interest has decreased by 0.2% since the company's last earnings release while the stock has actually drifted lower 29.3% from its open following the earnings release. To be 29% now below its 200-day moving average at $155.42. Let's jump into the charts now and see if we can identify some near-term trading opportunities with respect to the technical setup. We can see that Disney has been in a fairly steep decline, this megaphone top pattern here. What I'm also looking for I think is a test of this trend line resistance monthly trend line support coming in around the $80 mark. So any pop here in the earnings as long as we find resistance at the trend line here $1,640, I watch for bearish reversal patterns to trade back through $106 to the downside. And ultimately I'm looking for an initial test of the $84 and then onto that $80 test to the downside. Then that's going to be pivotal because if we hold the monthly support and on a daily basis can put in some bullish reversal patterns then I'll be looking to engage on the long side potentially build a longer term position in Disney. However, if we don't find support about $78-$90 and take that out on a closing basis then that opens up a significant downside. Certainly thinking about $69-$21 test that will be the yearly S3 pivot likely to find some profit taking there. But then as we maintain this trend line support then to act as resistance we could think about trading mean free lower and certainly a test down to the $50 level. At this stage it would take a close back through the pivot here at the $121 handle to suggest we have a more meaningful tradeable low in place and then we look for a move up to test $130 and monthly projected range resistance $133 and then onto the high volume mode at $150. As always traders plan the trade, trade the plan and most importantly manage your risk. Until next time, thanks very much.


Hey, what's going on guys, welcome to a new video. So today I've got a couple of great products to show you, products that are currently selling really well on Facebook. This first product I've never seen before either. The post has actually been around for a take a quick look since 2021, how I've not actually seen it until this past week or so. There's really good evidence, strong evidence to show people really like the product and people are actually buying it as well. What's brilliant about this product as well, which is kind of different from the typical drop shipping product, is there's no kind of trend for products like this. This is a product that's gonna sell really well all year round, which is perfect to build your business off of. It's really difficult. I would say one of the hardest things about building a sustainable drop shipping business that's gonna provide you with an income in the long term, is that most drop shipping products tend to be trend in products. So as the seasons change, they come in and out of trend, which makes it really difficult to kind of predict what sales are gonna be like. And consistency is an issue, whereas with a products like this that sells really well all year round, it allows you to have some kind of consistency and what's the word I'm looking for, a bit of comfort knowing that it's always gonna be selling well. It also allows you to make that leap of progressing from drop shipping onto actually sourcing a product in bulk, getting it private labeled, branding it, holding stock somewhere, which obviously carries with it a significant amount of benefits. That being said then, I've got a couple of products to show you. I'll show you the ad creative so you can see what a successful and winning ad creative looks like to go alongside the product. We'll take a quick look at the Shopify stores selling these products to point out some ways in which we maybe as we improve on their design, some things I would add myself. And then I'll also show you what you can expect to pay for each of these products too. So we'll have a quick look on ad express, see what the current businesses are selling them for. So we know what kind of rumor profit or what a successful retail price looks like. Before we jump into the video, just wanna let you know about the mentorship program. If you're enjoying my videos, you've been following the channel for a while.  Then I do have a mentorship program. There is an application process because it is quite exclusive. I only work with five people per month because there's quite a lot of time from my side involved in helping the people I work with. If that sounds of interest and you're sick of watching courses and you need some one-to-one help from somebody who has experience, stay tuned until the end of the video. I'll show you how to jump on a call with myself. I'm gonna have a chat about whether I can help you or not. That being said then, let's jump straight into product number one. Okay, so product number one, I'll play the video I'd created in the background and just kinda talk you through what I'm seeing here. The reason why I like this product is, it's not just kind of like one of those impulse gimmicky type products. Like there is genuinely some value in having a product like this. It does genuinely solve a problem. That's the phrase I'm looking for and I'll show you that people are actually agreeing with that in the comments section. What's really interesting about this as well is that this company actually posted about this since 2021. And then you might be thinking, well, this product's three years old then, it's not. I'm gonna show you the newest comments and they're all from recent times. So it's not actually got a crazy, crazy amount of engagements. 4.8 thousand reactions, 983 comments and 455 shares. What's brilliant about this as well is, so if it was me in fact, I wouldn't have that as the first clip. I probably have, one way it shows the garage door coming up and you can see how one is so much more superior against the other, because instantly it's gonna kind of like raise somebody's intrigue and wanting them to watch a bit more. But this is actually an issue I have in my own loft is that there's only one light fitting up there. It's super dim, it makes it difficult to see what you're doing up there. Product like this solves that issue. Let's jump into the comments section though. So we can see from one week, one week, one week, two hours, four days, two days, this is something that's working right now. And in garages, in lofts, in tight spaces, it's always gonna be dark whether it's somewhere outside or winter outside. So it is the sort of product like I mentioned earlier that will sell annually. So we have these in our garage in our basement, love them. Have two in my three car garage, love them. Have these and love them, bought one, I love it. I just put two in my garage, three in the basement, two in our garage, installed in a laundry room, got these. They're awesome, love ours. You get the gist. This is a product that people are seeing the value in. People are definitely, definitely buying and when they receive it, they're also happy with it as well. So one of the biggest obstacles you'll have to overcome is somebody advertising as a brand new business on any platform is trust. People are naturally hesitant about who they shop with because there are so many unfortunately scam businesses out there. So you have to really, really emphasize social proof. So if I was these guys, I'd be screen trying every single one of these comments and putting it on the website because when we look at the website here, I think you guys watching this video would probably agree with me if I said that this looks quite amateurish and quite basic. Like you could, so they've actually got some testimonials here in this hideous kind of like turquoise highlight. It could definitely be displayed in a more user-friendly way, in my opinion. It says 4.8 out of five for customer reviews but they're not actually displayed anywhere. You could definitely improve upon the design of this and I'd definitely, definitely think about it as I would increase the conversion rate and make this business even more profitable and even more successful. So they're selling the products for $45. They're not selling it for a cheap price but when you look at the product and what's involved with it, it's a light fitting. It's got three LED sections to it. $45 probably seems about reasonable. When we jump onto AliExpress and then we'll take a look, ignore this one because there's always one store that has a weird price for some strange reason. This one actually has two arms that come out. This one's only one. So you could actually have like an upsell offer there. You could go for the singular one for $45 or upgrade for an extra, I don't know, $10, $15, $20 and get the Big Mac, get the $15,000 Lumen one. In fact, the reason why these ones are more expensive actually, they have bigger arms. The ones that are just as singular arms as we can see, three pound, 65, delivered that is which is crazy because what's that, $6 or $7? They're selling it for $45. If this looks like it does on the surface, this is a very, very profitable product and these guys no doubt are making some good money. Moving on to product number two then, we have a popular product that's been around for a while now. I wanted to feature these guys though because they do a brilliant job of just turning that down. They do a brilliant job of what everybody watching this video should be aiming for. So yes, they're selling a drop shipping product. I'll show you that in a second. It's a product that isn't cheap as well. Too many people go for super cheap products from the offset like $10, $15 products that they're always gonna struggle to make profitable. This is not a cheap product but what they also do really, really well is the branding of the products. They've actually got it private labeled and I can't emphasize enough how much of a difference this really, really makes. Once you progress from the drop shipping business model into a business that's sourcing in bulk with a product that has your custom packaging and has your logo on it, it instantly gives your business the impression of being legitimate.  Let's look at the engagement sense, 7.5,000 reactions, 5.7,000 comments, 4.3 million views. Something a post doesn't get, whoops, a post obviously doesn't get this level of viewership of over 4 million views unless it's some big time influencer with a massive following. It's most likely because they've been spending a lot of money on ads and getting their reach that way and of course to reach 4 million people it's gonna cost quite a bit which would indicate that they're seeing a profitable return on this. We'll have a quick look at the comments section and you always should when you're looking at competitors because these are genuine consumers that are given feedback on the products but in examples like this where they're actually asking questions about the product, these are all questions that you should then answer or look to answer in your ad creative or certainly on your product page because people who answer questions are people who aren't sure about a product and people who aren't sure about a product are people who don't buy a product. So it's great research, it's a great way of getting into your ideal consumer's mind and just making sure that you put any kind of hesitations to bed by answering all the sorts of questions that people are asking about the product, like Leslie here. So can you watch Sky Go from your iPhone or iPad? Let's jump on to their website as well. They have a super clean website. The first thing you've probably spotted is the logo on the products there. Then there's always, always, always a good way of testing whether they have just done that for the sake of looking professional or whether they do actually sell a product with a logo on and if we actually come down into the reviews I'm yet to see a picture review of this product with the logo on. So let's quickly go through the actual video ad creative. There's no logo on it there that I can see. No logo there. So it looks like to me, they've got the logo on the website to make it look professional but they're still actually just drop shipping from potentially a Chinese supplier. It says they're ready to ship within 24 hours. That's not ready to deliver in 24 hours, that's just ready to ship. So super clean, modernistic website, everything looks really, really good, the imagery, et cetera. They haven't put their logo on any of these images which is interesting. They've got some really nice gifts here showing the different applications of the product. They've got the logos of like different platforms and blue chip companies there and in a way it kind of helps build the social proof or reputation of the company and by having them there and associating Nanocast with the likes of YouTube, HBO Showtime, Netflix, Apple TV, Home Name Brands. It almost allows them to kind of piggyback off the reputation and again just put any kind of hesitations to bed because people subconsciously will be thinking well if Nanocast can work with YouTube or can work with Showtime then it must be a really quality product and therefore I'm going to trust it if you get the kind of like point that I'm trying to make. Really nice, effective imagery whether it's original, I'm not 100% sure I haven't gone that far into the research something for you guys to check but as you can see the products speak for themselves the benefits are clear and they do a really good job and this is just looks reviews by the way so it looks to me they are just like a traditional job shipping business but they've gone to that extra layer and extra level that most people aren't willing to go to by putting a brand on maybe a couple of samples taking some nice imagery, original imagery which again just helps separate them from anybody else who's going to come into the market and pop up overnight. Let's take a look in terms of cost sense so you can get this actually delivered with fast shipping for 43 pounds, they're selling it for 110 pounds they're doubling the money, 60 pounds a room very healthy profit margins if I was actually these guys I'd actually install Clana or something like that on there to actually bring down that price of 110 to say just three payments of 30 quid which is obviously a lot more affordable for more people than say one initial outlay of 110. With that being said guys that's the two products I wanted to show you I hope you've stayed stuck with me this long I hope you enjoyed the video more importantly I hope I've kind of sparked some interest I've got some creative juices going in your head for different business ideas and brands that you want to start if you want some help starting that brand and some guidance from somebody who's been doing this for quite a while now it's 2017 January of 2017 I went full time doing this so I've been doing it now for seven years in fact to the month almost full time so if you like the idea of working one to one with somebody like myself somebody to kind of be on the sidelines will always be there to help you or give you feedback or answer a question that you might have at a certain stage then I want to invite you to book in a call with me to do this head below into the video description open this up and you'll see this mentorship link here if you click on that it's going to take you to this page once it finally loads basically it's a two or three minute application form or it's just a series of questions not so much an application form and it's an opportunity for me to get to know you before we get on the call know what kind of level you're at and where you want to be in a couple of months time in two to three months time so I can see number one if your goals are actually realistic or not try and be specific if you put a want to make a hundred million pounds in my first two weeks then I'm going to cancel the call I'm not going to speak with you that's ridiculous so try and be honest about what it is you're trying to achieve and if I feel like I can be the person to genuinely help you get there then it will allow you access to my diary where you can pick a date and time which will jump on a call together and have a chat if that sounds good to you and the sort of thing you're looking for then head over there now claim your spot and I look forward to meeting you on the call thanks