Love to welcome everybody to the show here. Give everybody a moment to get in here. I I recommend one of these Crown Royal this evening Life is good. Let the gallery fill up a little bit anyway Push this through every Friday Provide a consistent message for people to understand that Financial markets will ebb and flow. We just so happen to be in quite a rep right now It's interesting enough value in the Dow Jones down about 13 percent So value is kind of holding in there in my assessment were a couple ticks away from Bear market Territory and I hope we get there. I do or at 18.14 in the S&P 500 I think we'll get over 20 percent at least I hope we do I've seen this many many times play out it butts right up against the The 20 percent mark only to come back People are becoming Accustomed to what it is that they need to do or at least I believe that they are Is there anybody in the gallery who's freaking out or they are on life support right now? You can come on. I'll talk to you. I dropped the link You can come on talk to me. I'll provide you a little bit of coaching mentoring Whatever it is that you need to understand that life is bigger than your portfolio. No doubt about it Portfolio probably a little less valuable than it was last week, but we're not we're not investing for that we're investing for Where you're gonna be down the line and down the line could be as as as little as A year to see this thing kind of wash out a little bit Me personally made a couple strategic injects on the market today one of which was to pick up the TQQQ because What I'm seeing here rolling off with the big three Amazon Google Facebook is falling in there just a little bit, but with the TQQQ is long. I doubled my position to a hundred shares I felt like that was a prudent move and so You know just taking strategic shots in the market here NASDAQ soft 27% so by my calculation we are Fully immersed in a bear market and I'm glad to enjoy it with you kind folks If you can just flip the script on this bitch a little bit and just kind of think the opposite of the way Everybody else is thinking about this You'll be you'll be right in the pocket It's so much easier to look at the market in the from the lens of the further It goes down the more of an opportunity to that that it provides you and I'm a bit There has to be people out there that have been frustrated looking at this market over the last many many years I mean many many years and Watched it go up every single day every single day now. We've got a little systemic shock to the market. That's fine Price of goods going up, you know, everybody's talking about our supply chain that we've had decades to iron through and all of a sudden right now Everything's crumbling and go to going to hell and everybody just needs to throw in the towel on the United States of America I think the differ. I think the differ sport. Let's just do I'm a bullet hard and I'll continue to invest in financial markets I look at these markets and this this to me as Drastic of a sell-off as it's been I find pockets of value in this market right now There's some severely drawn down names. I mean Boeing got my attention today at 120 It gone it went down for a matter of seconds to eighty nine dollars a share during the absolute Absolute depth of the history of Boeing and here it is at 120 Some other names that really stick out to me I've left my conviction buys in here if you wanted to pick up some Google at any time in your life and pick it up Presplit here Feel free to do it. The value is just it. I think it's about 16 17 times right here Doesn't get any better than that and then with Amazon Looking at Amazon off 41 percent. It's oversold right now. It's just that simple So there are some piece pockets of value to be had I want to clarify something that I've spoke with the group about with regard to my Hands-off approach to the market. I want to be crystal clear with you guys I dollar cost average about two thousand bucks a month into the market So it just speaks to my conviction about financial markets over the long term when I disclose to you guys What it is that I do about a thousand bucks goes into my TSP every single month And then of course with the Roth IRA contributions That's another five hundred on top of that and I usually try to pick my spots Conveniently pick my spots to make sure that I'm picking up those value plays that I I see on the landscape I do have a fairly mature portfolio Really the game right now is a fairly simple. I'm writing my own script in not doing a whole a whole lot Real simple. I I don't think that people need to always be looking at financial markets from From this perspective thinking that because they monitor it going down all the time that they need to look at it And they need to do something about it. That's just not how We need to be dealing with this situation We need to just be looking at this and we need to be looking at it diplomatically You want to take a strategic stab at the market great? You want to increase your dollar cost average contribution?  No doubt about it.  We're going to continue to roll a product out probably for the next coming couple of weeks Keeping the streak alive. We want to make sure I'm intimately devoted to this because I know there's probably some people out there that Give in to emotions when they look at what's going on in the market Portfolio values roll off and they don't have the validation that I have and have learned in years past and decades past Going through this many many times and I come on to show that I do and this too shall pass Okay, this too shall pass and the unfortunate part about it is there's probably some new investors that are Not accustomed to this type of volatility in financial markets This to me is completely normal. This is what happens and What ends up happening when people start investing in a bull market? They begin to get complacent.  If you've listened to Tom Petty what goes up must come down, right and It's these lessons that you'll learn that are not They're not bad lessons. If you're going through this right now, trust me It will be the very validation now when that comes six months down the line Maybe next month. I have no idea. Maybe a year from now. Maybe we go into a prolonged sideways Channeling market here where we find a base and we don't go down and we don't go up We just kind of absorb what's going on in the market right now Unfortunately, I see a couple other things rolling off. I think that price of goods is going to be affected I think that prices of our transportation industry Are suffering right now in that the cost of diesel is out of control So what cost X amount to put in the tank at $3 a gallon of diesel last year is double that price That goes right to the bottom line guys Fuel is what drives this economy. That's why I put it as one of my needs Okay, because it's a tax to the lower-end consumer. I have to put fuel into my tank. I don't have a choice I'm not going to run to work. Okay. I'm not going to hitchhike either. I Don't have a choice if fuel was ten dollars a gallon. I would put it in my vehicle Transportation companies they also don't have a choice. They don't have a choice Okay, so they will incur those costs and they will look to pass those on to the consumer I'm fascinated by what's going on right now. I really am I don't I think that People have been lulled to sleep And I think that this is a dose of reality I think it's a reality in a wake-up call to understand that Your involvement in financial markets, whether it be very very good or perceived very very bad Perhaps maybe times like this that you look at financial markets and you're like, what what what the hell am I doing in here? Is so much better. I contend than not being a participant at all Okay, so it's very very important to understand that I do a very good job on this project And differentiating for those investors Introducing financial markets to those folks out there that are looking to grow wealth for themselves What a wonderful time to pick up the triple cues right here if you're a young person and you're seeing Amazon down where it is Amazon over the next 10 years Is a scary proposition and my friend rick is in the group here talked about opportunities being abound in this market I totally agree. Here's the problem. What happens is this volatility blinds people To seeing the market for what it is and that is clarity Okay, there will be millionaires that are made and the further the market goes down The more those opportunities will be uncovered Okay, it's for those prudent and sharp minds that are willing to diplomatically look at the stock market Look at those opportunities. Look at where those areas of emphasis perhaps Maybe there's areas of your portfolio that you've always wanted to Add that additional layer to Now's the time to go ahead and do that now is the time to really start to Embolden that dollar cost average schedule. Ask yourself what you're doing. I'm doing 500. The market's off 13% Now's the time when you're kind of buying the the market lower And these are the times that you want to take advantage of Conversely, I said when the market was high and for you guys that have been with me You're getting a real special treat because when the market's high I wear a specific hat I take on a different defensive mentality in the market. In other words, I'm not I don't get into this euphoric. Oh my goodness. I need to fall over myself to buy the market because that's what everybody else is doing Okay, it's the opposite. Actually, I get cautious I continue my dollar cost average, but I start to really look at those opportunities that I can fine tune, but I throttle back on the aggressiveness when we're in Super prolonged All markets now it's times like this when I start to shift gears a little bit And you'll notice that it's always against the current It's always against public opinion highly on perfect example Basing here at three dollars showing really good support. Nobody's talking about it. It's actually up month throw for month 10 percent Nobody's talking about it. Nobody will talk about it Okay, I actually see more negative sentiment now on highly on than I saw at 58 dollars Why is that? It's because everybody wants to feel Really really good when their thesis is playing out and they don't want to be Contrarian and for you guys that are new to investing being contrarian is super super important to always look to Identify opportunities from two different perspectives. It doesn't mean that being contrarian is always going to be that Truth in the light by a stock because it's come down all the time. No, it doesn't mean that What it means is to entertain the prospect of picking up shares when they're lower And I find that there's too many social media creators on right now is just disappointed as hell this week to come on And consume a content creator that I've I've endorsed on the channel And I think this individual is probably a really really good guy. As a matter of fact, I know that he is But to just flip the script all the time from week to week It's a different this and that and oh my goodness the stock is down two bits and everybody's talking about it So therefore I should go this way. It's completely wrong It's just completely wrong in the approach And the sewer Through youtube is just influencing people in the wrong way You cannot look at the stock market through the lens of days or weeks or even months. It means nothing I've said this many many times. It means absolutely nothing and furthermore. I don't need your validation I don't need 10 12 people to come on and say this is a really good deal. Welcome to the club Welcome to the movement Ryan you're you're in it to win it. You're you're with you're with the winning crowd now You dumped the losing crowd and now you're in the winning crowd. What? I don't need that validation at all The only validation I need is my own conviction. That's it. You want to share in our conviction Yours is going to be different than mine. I'm all for that But man alive the justification that is going into your Stock analysis is the end all be all In regards to the dollars that you pledge to a certain company, which I find extremely ironic They're making huge progress with their company because they have a huge investor relations department So that's justification to buy the stock I don't get it. I don't get it What are the margins on your product? Oh, you can't tell me Where is your product actually going to fuel up?  I don't understand and These are the questions that always get revolved around That Never get asked They never get addressed You're part of the club now Good job They don't even look at the stock the stock's down just as much as the one I'm looking at They're both speculative growth Both of them. They're both speculative growth. And if you want to know the truth Look at the one month chart. Okay My bowl This bowl He always agrees with me too, right rightly on Yeah, good Is highly on a good investment I like him because he always agrees with me. It's pretty cool For you guys that want to pick up leon man, you can pick him up The description is in the link before I told the artist I'd help him out to provide some referral, but I tell you what man, it's it's interesting enough to Understand that the justification I by no means come on and perceive To have or to project that I have all the answers. I don't do that But man alive at least at least discuss the important things Okay Because the company is Three times as big or four or five times as big It's somehow a better investment or it's somehow that has a better product because it has a dream or you know I heard a rationalization that just blew me away because highly on is working toward And putting r&d dollars toward hydrogen fuel cell That that automatically means that they're looking to make their r and g c and g opportunity obsolete and it's like Man alive you had it good when you were talking about the sit the hydrogen fuel cell initiative But and then you go and you just double down on this stupid idiotic opinion That is suggesting that somehow r and g is not going to be a player In the space my video last sunday talked about optionality with highly on and I think that's the key I do if you think for a second the diesel is going away You're crazy Right now as we speak the status quo is 95 percent dominated by diesel. That's the facts You can dispute it all you want. I don't know. I I hugged the tree really hard this week, right? And you're wrong. The entire industry is going toward this or that Fine. Believe what you want. No problem. The sheer reality is such that we are looking to relieve Our reliance upon one fuel source diesel Okay, it's not going away sorry 25 years from now we will still be using diesel however What we're betting on here is that the industry is going to reduce that reliance upon and that 95 percent figure In the fleets are going to be reduced right and that's speculation on your part. Hold on a second There are oem mandates and fleet mandates right now that have just been signed into law to require That those percentages to the fleet have to come down. They have to they cannot continue to rely on The their ability to say that the technology is not there and if I was a fleet I would say the same thing Look at it from the fleet's perspective. They have to move goods. It's that simple What is the most reliable way of moving goods right now diesel? Do they care about the environment? Yeah, but they're not going to sacrifice the bottom line to move goods ain't going to happen What am I the only one that thinks like rationally and just I don't know Uh, I have like I'm a realist And just if you think about these things for a couple seconds, you'll understand that While the technology is emerging on all fronts hydrogen fuel cell Renewable natural gas is coming to a fruition and that the permits that are being cut Are extremely bullish. It does not speak to a future that r and g is going to go away Using existing infrastructure that already exists with the c and g Infrastructure in all of north america both canada and the us alike Doesn't suggest that that's going away at all I think we're going to have to be open and honest with understanding that fuel As a basis drives everything everything And to suggest somehow that the technology is going to advance so much That we're going to flip the diesel and reliance on fossil fuels on its ear And that somehow down the line, we're going to be reliant on hydrogen fuel cell at a 95 percent clip Where is the data that suggests that I do not see in the technology? I do not see in the product offerings that have come out By the two dominant players nicola and hyzon That we can turn the industry on its ear What type of work has been done with regard to Industry integration high leon's got this licked and they don't get any credit for it at all And i'm very critical on highly on very critical that people Really don't like it that want me to just come on and cheerleague for the company The people who get it they understand what i'm trying to do with my intent to Challenge where people challenge because I sit across from nicola bowls And I do the same thing i'm like how can you say that how how how can you not challenge? What's going on? How can you just forgive? The things that have gone on the in the past just straight up lies With the technology. Oh, well, they've come a long way. Really have they come a long way a company that was built on false pretenses you know I find that interesting and I think when we're talking about the stock market as a whole I think we really need to look at this in context and understand that if you're having a value discussion Or you're having a dividend discussion or you're having a passive discussion with people Pick your discussion Creatively and adjust accordingly. Okay People don't participate in the stock market to just lose money over the long term People find a creative way to lose money in the stock market over the short term all the time It's just amazing to me How many people will give it give in? I'll throw in the towel. I've had enough. God dang it. Ryan said we're down 27 in the naztac. I'm selling everything It will be the worst mistake And I'm not going to remind you of it. I'm going to tell you right now. Just don't do it Okay, if you want some prudent information to come through the channel Stocks are meant to be bought and held. They are meant to be funded over time And they are meant to be held in the long term not to be justified in the short term It's that simple. You're using false pretenses to judge your long term Viability in the stock market and it just doesn't work guys. Let it go Let it go. It's all right.  Nice to see you Steven. Great to see you I'm going to be doing a Q&A tonight guys. So if you have questions for me, man, please drop it in the gallery Really appreciate this highly and is the evolution before the revolution It is positioned for all fuel sources So I've deemed this optionality in the business and I've looked at it from all different angles and I think hydrogen fuel cell although wonderful, okay is Very underdeveloped right now. This is the reality Do I think it is going to be viable into the future? I do Do I think that there is infrastructure in place right now to support this? Potential viability down the line No and people who want to disagree with me all they want They are just two shakes away from having their head up their backside because they don't understand the sheer reality Of what's going on right now Even if there was infrastructure in place The cost of hydrogen fuel cell compared to an at-the-pump price Comparison of compressed natural gas just does not jive with the economics. It just doesn't jive You can put a solution that runs on c and g in play right now And reduce the tco benefit to the fleets right now with c and g So I totally agree. I think there's going to be a place I'm not so sure if that place is going to be in class 8 I think hyzon is doing a great job in pursuing more of the five six and seven market as well I think a lot of them kind of shy to say. Yeah, we're class 8 too. I don't believe it I don't believe it. I think the tri benefit for fleets to look at the payload capacity Driver satisfaction The amount of fueling downtime that it takes to fuel these rigs I think is going to be paramount and I think at the end of the day Um, I'm just giving you my opinion. I could be totally wrong And you know, I'd like to hear more of these youtubers talk like this go ahead and give your give your thoughts and then Justify that with a little bit of a statement to say look man Make your own decisions because there's people out there that are completely bullish on nicola I took a small stab today in it right here Today with the market down 600. I bought some long calls. I shared it with my viper group I bought some long calls. No problem. I bought it at a seven dollar strike. Okay Bought it at a seven dollar strike because I think they will capture Some form of the market and I think it's going to be in the mid tier Transportation category. I think highly on is going to dominate in the class 8 space. I do I don't think nicola is going to compete with them in the class 8 space Except for local moves and I think port terminal moves where that zero emission and zero reliance on fossil fuels Is probably going to be bullish for nicola The idea that I just suggested is not spoke about at all when people are talking about nicola people talk about It being leaps and bounds ahead of highly on no, they're not they're both in the shitter wake up That's the truth Look at the six month chart on both of them. They're both down 60 Don't come to me and tell me that one is lightning bolts ahead of the other and I don't know what that means man It's both speculative investing. Okay, so when you're talking about who's going to emerge over time I actually think that both of these companies are going to emerge I think nicola is going to have an interesting go at it. I think they've done a good job of building their team I think the factory that they have Gives them the ability to make that splash. I just don't like their rollout. I don't like the rollout I don't like the bullish thesis surrounding them delivering trucks to dealerships which suggests that those Rigs have to be sold to fleets and not integrated with fleets Highly on is going out to the industry and saying, what do you need? We're giving you 95 of the truck What do you need on the bottom end with regard to fuel? Do you need hydrogen fuel cell? Do you need one that runs both? We have that too, right? Eventually the hyper truck erx is going to be a four prong animal Okay, it's going to be able to run c and g on c and g routes It's going to be able to run r and g With existing c and g infrastructure. That's another It's going to be able to run both hydrogen fuel cell and either r and g or c and g In the agnostic product and then finally when they introduce the hydrogen fuel cell that's going to introduce that almost four-tier Opportunity for them.  This is incredible. I I I can go with c and g on this route I can take the same hyper truck erx and put it into service down here With a potential for catching some fuel on the hydrogen fuel cell on this route It's absolutely fantastic and it's going to be great to see how this thing rolls out I think unfortunately there's a lot of really good companies out there right now that are taking A wet blanket. I mean companies can't do anything right right now. There's no doubt about it Everything's rolling off and that's totally fine, but I'm continuing to scour the landscape and picking my spots I disclosed to the group here. I bought TQQQ which is the Triple levered to the NASDAQ. I already own the NASDAQ and the Roth IRA with the triple Q's I bought I doubled the position today at 25 dollars a share I thought that was a fabulous entry. So when I had doubled that I've got a hundred shares now at TQQQ I will hold it will hold it long. My idea is that technology Over the next 10 or 20 years is absolutely going to give me that accelerated growth and I'm in that for the long term It's an easy product to own I'm picking it up TQQQ has been drugged down by what is their top three, which is uh, google amazon I believe and facebook in the top three I believe but it encompasses 36 percent of the triple Q's so Went ahead and took a strategic stab at that as well as the nickel along with the Dollar cost averaging on it and there's going to be some folks that say well, why didn't you buy highly on? Highly on a monitoring very very closely. I did buy highly on I did not Disclose it to you guys when it went down to two dollars and 68 cents And I didn't buy the stock I bought the long calls. I bought the leaps at three dollars. Now. Those are already in the money Okay, but but here's the thing if those leaps are not over three dollars by 2024 Uh, I'll quit investing. I kind of made a joke with everybody. I think it was in rick's facebook group I was kind of joking tongue-in-cheek, but you know sometimes you have to just allow yourself optionality in the market because People think that somehow the stock market is predictable To to the point where people I think actually have themselves Believing that they can control the market.  Okay, so It doesn't mean that we don't invest You know doesn't mean that we just give up and throw in the towel on financial markets Of course not it just begs the question to sit back and say How is it that I can approach this? How is it that I can try to define my investor profile? How is it that I can define my? Risk tolerance to markets when I don't have a lot of experience in the markets If you just come and sit down with me on the live stream for an hour every single Friday It costs you nothing outside of your time But you are getting years and years of perspective that I break down for you and identifying what is important I just gave it to you To ask yourself look if I wanted to enter into markets right here Am I buying the nasdaq at a premium? No, you're buying it at a 30 discount right now The nasdaq and the tech is in bear market territory right now as we speak And if you think that somehow tech is not going to outperform over the next That foreseeable future. I mean tech is going to drive Innovation it's going to drive everything we do is data as transition to the cloud AWS is where why you buy amazon right here and down 41 percent right now peak to trough Amazon's a shooting fish in a barrel investment Google as Incredible of a balance sheet as they have the free cash flow that they have They are almost a technology a technological utility Google It's my number one conviction buy right now It's one of those things that it's tough for me because I already own four shares of it I know that it's going to split to 80. I know there was a An actual Comment in here wanted me to comment on the splits I think it's a great opportunity for both of them. I really do. I already own them both I own three shares of amazon. I own four shares of google Um, I bought it a little bit higher than than off. I'm off 10 15 percent in each of them No big deal maybe a little more on amazon amazon's really really rolled off but You know, I think you just need to pick your pockets there where you've watched these companies go up immensely And here they've finally rolled off and given you that real opportunity for an interesting entry I think to ignore those entries is is um, it could be a problem. You could Reflect back on this and say good grief. What was I doing sleeping Ryan said wake up. Look at these things, man They're worth looking at and I believe that they are right here And it's the hardest time to actually sit back and and kind of look at it and say god dang Are you kidding me Ryan or is it okay to buy stock right here? Yeah, it's the education that we really try to put through there and have that that diplomatic approach to the market In all markets doesn't matter This is the way this is the demeanor that you have to have To find that middle ground to be able to Diplomatically approach markets and take advantage of those opportunities and not be blinded by everything's going to zero And you know your your portfolio is going to continue to go down forever The only thing that hasn't changed in your portfolio is the share balance that you've been able to build up over time And for you guys that are getting paid dividends, you guys are getting paid dividends every quarter on your stocks All right, my dividend portfolio hasn't rolled off very much at all. It's holding in there really nicely Steven said he rolled I'm going to look to roll some of my um less conducive leaps But I'm going to let it get a little bit closer See if they can't improve a little bit uh on the price action because I've got some 2023s that Obviously are not looking good right now. So we'll see what happens and if I need to roll down my will No big deal. I mean it is what it is. It just um, you know, it's one of those things to where I look at the opportunity in today's financial markets, and I'm extremely bullish. I really am I I do not buy into this whole like Um America is going to hell and and the world's going to hell and there's not going to be better days I take the exact same approach that I had last year and the year before and the year before that and the year before that and I am always A an unshakable bull unshakable and and that is the way I invest And you say gosh Ryan, how can you how can you be like that? Well, it's simple if I can impart to you this It has just straight up worked It has straight up worked and you say well this one this time is going to be different in in what capacity What would you suggest is the way forward? You would suggest that I take on a different philosophy about financial markets Would you feel better if I sold half of my portfolio and put it to cash? Uh, uh an um an asset right now that is depreciating at an eight percent clip every single year Is that what you're just suggesting? No way You put my money in opportunities for growth. Yes, and right now you look at it and say you're crazy I think there's a lot of people out there that are being very very careful Very very meticulous about picking their opportunities, and I think there's opportunities out there They are emerging and they've been emerging for quite some time And I think if you're savvy and you're willing to put a little bit of risk on the table I I think I think you could be picking up some on some incredible opportunities right now And I don't speak like this when the market's hunky dory I don't because I know that the further down the market goes the more Those opportunities will be uncovered guys so super super important for you to understand that man Let's get in here and take some questions, man Brownies in the house here better days will coming days will eventually subside That's hard to tell people that that's for sure. It sure sure doesn't feel like that Uh, I tell you it's been a rough ride for me in the portfolio. It's uh, if I have conviction through these markets I'm good. I mean, uh, I've been pretty proud of myself I've weathered it since january 1 of last year Where the market's really kind of started to show some some signs of of cracks And uh, I've been really good on just holding through on the market It's just that simple have to love those dividends absolutely Very important to have that stability in the portfolio. I do own some cash Uh, I have taken some of that cash obviously deployed some of it strategically into the market Um, but still sitting on quite a significant amount of cash and I'm um Taking a just a deliberate Monitoring approach to this. It's nice to have it there. I'm not quick to just take and dump All 40 grand of cash on the market that I have accessible to me right now I could foresee myself coming out of this at some foreseeable point in the future Three months six months years in this year next year two years I have no idea and being in a completely different situation The only thing that's going to prohibit me from that decision at some point in in the future Is an ill-fated decision now. That's it an emotional decision Well, I can just stop the bleeding now and sell everything Right, it's the wrong move and it's setting yourself up for regret down the line Really is so you got to be very very careful Okay, I'm being buying ETFs large cap growth small cap growth total markets very very smart Very very smart move the next buy that I do will be a double up in VTI I would like to double that position that's a $10,000 bill It's just unfortunate for me right now. I'm kind of taking a double and triple whammy I'm taking a triple whammy on hyper growth and right now with the stability that I'm monitoring in highly on Unfortunately, I've got a weather about 15 more months to where I think there's going to be catalyst down the line And I hope they're surprised to the upside But there's no guarantee of that What's guaranteed is the timelines that's been projected on the earnings call to me So I'm adjusting accordingly and I'm not putting a whole lot of New capital to work in way of strategic buying. However, I am dollar cost averaging the market into the s&p Into my index funds But I do have that that total market index that I'd like to go ahead and double up on If given the opportunity, but I'm just kind of hold them in there I'm being tough and being tough means Monitoring not making an ill fated decision making a hypothesis about the next buy that I want to make And that's really where I'm looking at the portfolio is maybe a a pocket Of a potential double up and that's exactly what I'm looking at h.m. Investors in the house, man Really appreciate you sharing your thoughts. I agree with that. I mean you're You're identifying areas and pockets where you want to put some value to work and that's it's just that simple It's not it's not rocket science. Anybody can kind of take that and look at it Say that's a Interesting perspective. Maybe I need to look at what I'm doing and and make it happen I've gotten sold nickel a long time ago trip wasn't wrong Just early I certainly wasn't wrong.  I believe that they have Uh, I don't not everybody out there is the personality at trevor milton Okay, and I think where a lot of people would laugh and joke and say well, that's what's necessary to be I don't want to invest in that kind of stuff. I I don't I don't want to buy into that There's all kinds of different companies out there that I can buy into A lot of companies I probably own are doing things far far worse than what trevor milton did In in dragging nicola through the mud during the SPAC process. I I get it.  That was uh wrong And the sec said he was wrong as well. So it's not just my opinion. Um, he had litigation brought against him and and um, and those fines have been assessed and Now nicola's going after him actually To recoup some of those losses All right, so very cool stuff Yeah brent's in the house man brent's one of the first ones that was with me on the independent investor channel Kind of speak to some of the community piece to this whole Independent investor project and I just appreciate brent. He's been with me a long long time And uh, really appreciate you stopping in with me tonight brent's very cool. Really appreciate Uh, what's doxy talking about? Uh depends depends on when I was talking about it Probably talking about highly on I own about 12 000 shares the company and I own about 37 contracts Which uh obligates me for another 3700 shares the company um, you're gonna want to you're gonna want to perk up and pay attention because Um, I take a very diplomatic road with the market when highly on is $50 a share I'm not going to come on here and jump up and down and scream yell. It's not one of those things that I'm Stock market needs to be kept in a box. Okay. I'm proud of a lot of things in my life Does it have the uh opportunity to be the investment of a lifetime? Yada yada yada. Yeah, it does But keep it in check. Okay. It doesn't make it doesn't make you a better person I've said this many many times it doesn't make your genitalia bigger. It doesn't it just You have the ability to to buy a stock and and that's it It it doesn't it doesn't it doesn't mean you're a great investor It just it means that you made the best decision that you could at the time Maybe you were off on timing which is obviously what I am. I'm off on timing on this Is it gonna matter in the future? If it does what it is that I suspect that it's going to do in the in the foreseeable future Within 24 months this thing is not going to be a three dollars a share. It's not That's my presumption and you as a youtube audience get to come on and hear my Forward thinking opinion about a company that I have 100 conviction on it's just a matter of time This global exposure that they're getting in Davos with regard to this Environmental committee that they've just become a part of it is just another advancement In the right direction in getting their name out there in providing solutions and I think sometimes people kind of Get the wrong idea and they try to complicate the idea This is about moving goods from point a to point b at the lowest cost At and and meeting the green initiative. That's what this is about. Okay, and when I say green initiative I know that sparks some political interest. I I'm a political guys. I'm neutral Okay, I believe a lot on the right and I believe a lot on the left. It's no problem. Where am I left? Well, I'm left in a society that tells me that I should think one way or the other Based on a political affiliation my affiliation. I fly the flag of me. That's it I am my own personal brand and if you guys want to step away from this whole bullshit About you need to you know be loyal to one political affiliation or another break free of that garbage It's not going to help you believe what you want to believe. Okay, believe what you want to believe I don't mean to get too political on you But if you believe that we could take steps in the right direction to help Reduce the amount of pollution that we put into the air Hylion's your bowl Hylion is your bowl. It's that simple and the technology is being emerged right now in such a way to where These solutions are actually viable In the hands of these fleets, so it's going to be interesting to see how the developments take hold over the coming months And specifically years as we approach latter back half of 2024 Nicola is making noted progress with their product It's going to be interesting to see how well they're received in industry and i'm a fan I sit back. I watch and see how it works. I've got a few dollars at stake in them. Great Again, ryan doesn't change I still continue to come on and do my thing if hylion gets up to 100 dollars a share I'm going to take some profit and i'm going to roll those into the home depots and mcdonalds of the worlds Make no mistake about it. I will always always mark my word Keep a small stake or a large stake in this company depending on what I decide when I do my due diligence at that second look but Absolutely, it's going to be one of those things to where I'm going to use this to embolden my portfolio both inside my roth and inside of the taxable brokerage account For those of you guys who say that you're wrong ryan or you're delusional No problem. That's your opinion. I could very well be doesn't matter. This is my thing Okay, this is what feels right to me and that's exactly what i'm doing And i'm sharing it with you guys and there's a lot of people out there that share in the same conviction with me We're just kind of scratching our heads right now In that no matter what you do in the stock market. You're not getting that you're not getting the nod Right, uh, and it's it's just a tough go at it, man I got my boy davin the house here highly i'm going to davos next week surprise announcement This week as agility invited. I'm right. So agility has been there since the beginning This has been one of those critical pieces that i've been a little bit critical of with hylion with Allowing that agility order in my mind to kind of die on the vine a little bit But I I think those orders will turn out they're on the hyper truck innovation council I believe that the council that they get the Ideas and process improvements that they get from agility and many others are going to be incorporated in their product And I think agility is probably going to be they're going to surprise They've been right there from the beginning They know that hylion has worked very very hard in this mission to step into electrification And when you step back and I hear all kinds of different scrutiny's of this company It's really really quite simple. It's quite simple right They're using the generator to create the power to charge the batteries that drives the rear axle Really simple. What does that mean? That sounds really complicated ryan or that sounds really simple It doesn't matter the whole idea is that they can propel cargo From point a to point b and make deliveries in a timely manner that provides tco benefit back to the fleets That's it in a nutshell. That's it When that's going to happen next year Two years down the line three five That doesn't matter to me. It's going to happen. It's going to happen They had 75 ride and drives at the act expo 75 at certain times there were multiple potential customers In the cabs taking the ride and drive Hylion's been very very forward with their pr that they've been rolling out. I think they've been doing a wonderful job I sat there and listened to the reception in the cab of the truck and everybody was like, oh my god This is a game changer. Oh my god. They say the same thing all of them Nobody's got in this truck and said, oh my goodness. This is terrible. This is really really noisy or oh my gosh This is the exact same as a diesel truck. Nobody said that and if they had Trust me, I'd be the first first one to come on to youtube and share it with you guys like a Maybe this isn't so special. Maybe this isn't the right way. Maybe this is a pipe dream That that's not what people are saying. I'm not making this up guys, right? It's just What's going on? Okay? Will they incur problems? No, maybe probably You know, are there going to be ideas from the fleet that they want incorporated? I hope so I think that's going to be great But where this thing goes from here There has been enough material with this company that there would have been no way A year and a half ago that I could have identified with this company That they have surprised to the upside on And I don't believe that just stops With an all-stop and they just stop innovating and stop providing catalysts or stop identifying These grant programs the grant program really for me was like, oh my god I sat back off of that and I was like what that's that's killer stuff right there That's that's a big deal Where the government steps in and says hey fleet you the time is now the time is now the Time of making the decision to go full diesel is over Okay, you're going to have to change your thought processes There are solutions out there that do apply for these credits and you do need to employ the services of some of these solutions It's just that simple now. All I got to do is sit back lean on it and wait I'm just having a little crown royal tonight Fantastic Highly on to the moon. Maybe we'll see what happens. It's going to take some time That's for sure as every day that goes by that this stock gains a little bit of traction here I'd love to see it get above the five six dollar level By the end of the year. I'd love to see it above the ten dollar level. That's my short term medium term thesis I have a price target on the on the company at twenty four dollars I think that's fairly modest when it gets up to ten twelve dollars I'll revise that to the upside to thirty eight fifty With the eventual revision up above fifty and and above its current High because I understand the valuation of what it needs to get to for unit sold And I have no reason to believe that they're not going to have those units sold Logged with the help of help of the oems that are also In receipt of those mandates to turn out to the fleets Remember guys, there's three hundred thousand trucks being turned over every single year Three hundred thousand There was a figure of a million and a half trucks on the road right now that are four to seven years old right now Which introduces a whole other market out there of these companies that are still forced to run on diesel If this product becomes available and the price of diesel is still High Brent crude right now is one sixteen a barrel as of today as of today So do we think that diesel's rolling off right here? Yeah, I don't know. I beg to differ I think high fuel costs are probably going to be around at least for the foreseeable future because I don't I don't think that this Conflict abroad is going away anytime soon at least from the recent article that I read today. Okay, so It'd be interesting to continue to monitor that with the fuel costs and how this could potentially drive the decision making the fleets just Not really in the convenient spot of They're forced to look at these additional solutions out there and making these decisions to You know to help their bottom line. It's just that simple Freshest stock market is outperforming It's nice Yeah, this guy is following according to the experts investing is not a short-term trading Know the difference Um, I think if there were more conduits that were out there really aimed at and I think even cnbc they they get how Stupid they are with regard to they're just going with the momentum all the time I remember when I talked about going against the flow The majority of the time They're trying to play into that and they're trying to sell that to people because they know people are interested in tuning into the markets and if the market's going down they don't expect to tune into cnbc and yahu finance and Have people saying everything's okay They don't they don't expect that and not everything is okay But that's not the driving decision making metric that you need to be using in entering into financial markets When the time is conducive to to do that. Okay, you need to be looking at these as opportunities It's it's kind of just that simple really have an opposite philosophy of the way everybody else looks at the market And you'll be fine with other things Not not so much how you seek out relationships How you seek out your aggressive posture at at work How you take care of yourself How you deal with Injects in your life and you know you have a problem arise and you find a solution for it and you fix it Stock market's completely different And these are some of the learnings that you have to kind of understand when you're when you're looking at What to do here? What do I do Ryan help me? What do I do? Continue to fund the market the dollar cost average will continue to be that very baseline It will be that Continual lifeline For the rest of your life. It really will you should be dollar cost averaging Like wearing your seat belt every time you get into an automobile You should be dollar cost averaging no matter what the market has to dole out Very important to understand that And as you look to build upon that you can look at different parts of the portfolio and say, you know what? I'm not dollar cost averaging my dividend portfolio But it's paying me right now Everybody's talking about the market going down and oh my goodness But my value's holding up not only is it holding up, but it's actually paying me dividends right now That's great. Okay.  I'm going to buy five ten shares of the market right here like I did with tqqq today Now I don't recommend the alternative investment and strategy for the faint of heart. It's uh very volatile. Okay It's 3x what the uh triple cues will do And it's an alt strategy. Okay, so it's a little bit different I also own the triple cues But to take a set amount of money and say, you know what I'm gonna I'm gonna up it right here I'm gonna buy 10 shares the market right here That's prudent decision-making and it will prove out to be prudent Down the line in so far as you'll remember back and you'll say gosh, I remember when it was so terrible And ryan talked about just taking your shots taking your spots Picking your spots adding a little strategic inject here and there and you'll look back and say I'm glad I did that. I wish I would have been more aggressive Right, everybody plays that game. Everybody is like I wish I would have done more When I had the opportunity to do more I mean, we are just a couple years removed of the pandemic hello, which was March 18th of 2020 Right around that time. I'm a couple days Uh in that it was about 18 to 18 3 18 4 on the dowjens industrial average But everybody looked at that and said, ah, we're gonna retest the bottom and that ended up being the bottom And everybody was like, you know, gosh, I wish I would have done more. Why didn't I do more? That was the opportunity of a lifetime blah blah blah blah blah blah Thing about it is it's easier to sit there and second guess yourself after the fact We are in the fact right now guys. This is the time where you want to be wealth building for the future For anybody out there that has not been involved in financial markets Um, what what a great opportunity to actually, um, uh, participate Uh, I don't know if they're asking from my email address. It's actually on the uh the channel This is one of them. I'll throw it in there for you You can hit me up. It's actually on the front page of the channel as well That's me hit me up. No, baby here to help. It's all good. We had a new viper come into the group today Uh, like to welcome Gabe to the community. Thanks for signing up anybody who signs up for my patreon Automatically gets entered into my viper group. Uh, it's a small group and they're serious about it We've got about 50 patrons in there, which is fabulous. Okay.  We engage. We ask each other questions. I've got a few geniuses in there That I am in debt to them for being part of the group because they're just their studs I'm not I'm just You know, kind of an ugly fella that comes on and runs the independent investor channel. I'm I'm very convicted in my approach, but Got some really cool minds in the in the what's that group You can enter the group directly through my Shopify site. You can go to independent investor group com You can enter through there But again, if you do sign up and pledge to the patreon You can do that. There's exclusive content on there and you also get access to the to the private viper group and Access to me for your one-hour session if you want to take advantage of that Some people do some people don't it's no big deal But they just like that ability to use social media to provide themselves that that support structure And I love rendering it. I'm Constantly monitoring markets and I love helping people so it just it works really well really does Michael's in the house man. That's a hell of a guitar Michael That's awesome. Then really cool just chilling Adding when I can very cool. Michael. Thank you so much really appreciate you stop and buy Winding down a little bit. It was a good good live stream tonight really appreciate the the candid discussion really appreciate the conversation before I came live but I wanted to come on and just kind of do a q&a with you guys. There was no script tonight. There was no agenda Come on have a cocktail for the fastest 60 minutes on youtube man It was super super glad That you guys are are continuing to support the project and we continue to Be forward with our thought process and emboldening the retail community and understanding the right way to invest And I do contend. This is the right way to invest. It is okay I know there's a lot of people that want to play into this trying to time the market game I do not I know there's a lot of people out there with that would have you believe That being scared right now in financial markets is the correct way I beg to differ I think strong moves in the market have its place. I think fundamental approaches to the stock market is the only way to win Over the long term. It's just as simple. I've proven it over time And I'll continue to prove it and the more I continue to prove it wealth build for myself and continue to share my story The more people are going to have to take note because this stuff works Okay, you can be wishy washy with your application all you want I'm not looking to be wishy washy with my life. Okay eliminate the regrets that are potential Get on board with the independent investor channel community. Take control of your financial future Do it on your own trust yourself be your best advocate for your financial future Don't trust others. You don't even need to trust me. Okay, you should be the number one champion of your program It's just that simple and when we're looking to empower one investor at a time It's the sheer intent of my message that we look to footstomp every single week I thank you so much for tuning into the live stream We'll be back next Friday At nine o'clock eastern standard time on the fastest 60 minutes on youtube. Be well. Have a great great weekend We'll catch you next week


Welcome to the original gangsters podcast. I'm your host Scott Bernstein today. We're going to take you to New York City, Brooklyn, Staten Island. And we're going to talk about a brewing situation that's been machinations of this over the last couple of years regarding little Rob DeNofrio, who is the new acting boss of the Colombo mob and some disputes he's had with the Gambino crime family and their leadership and how his promotion this past year to the acting boss spot from a capital position could affect this dispute. And the dispute relates to little Rob's son-in-law, a guy named Mike Scott, who was a young aspiring button man with the Gambino's. He's married to little Rob's daughter. And I guess little Rob hasn't been thrilled with some of the treatment that Mr. Scott has been giving to his daughter. And there have been a number of altercations between little Rob and Mike Scott. Little Rob's 67, Scott was 37, so a 30-year age difference here. And over the last handful of years before he became the acting boss, there was a series of sit downs where little Rob met with Gambino's to try to get his son-in-law shelved, prevented from earning as well as blocking him from getting a button, getting made into Gambino's. Scott is a kind of Gambino royalty to a degree. His bloodline is in that Scott labor union, waterfront, racketeering dynasty that goes back to tough Tony Anastasio and Anthony Scotto. Mike Scotto's uncle is Big Billy Scotto, who was a made guy in the Gambino's. And from what I'm told, what's Mike Scotto's ace in the hole, which has allowed him to stay on the street and continue to earn, even though he has not received a button yet, according to my sources, is his close relationship with some of the OG Gambino's, even though this guy is in his 30s. Besides his uncle, Billy Scotto, he's very close and in the good graces of the Corozo brothers, specifically little Nicky Corozo, was a John Gotti, loyalist, a skipper, guy that was on the ruling panel for a while. And I guess Mike Scotto did time with Nicky Corozo in the 2010s. Scotto got nailed in Danny Moreno's crew, prostitution, extortion, and a slew of other racketeering counts, went to jail for, I think, three or four years and got close to Nicky Corozo, or maybe had been close before, but got particularly close to him behind bars. And I'm hearing that that is what has prevented little Rob from successfully getting Mike Scotto kind of persona non grata within the five families. Although he doesn't have a button, he's still active. And I know little Rob has been pushing to have him made inactive. I know one of the last sit-downs I'm told that occurred. I'm not sure if this was when Rob was boss, or acting boss or before, that an administrator from the Gambino's sat in on that, in that sit-down. So I know that the FBI as well as some mob powers in both of these families are kind of monitoring the situation and see how Rob being the acting boss affects this domestic situation.  And he never got, didn't get in trouble for her participation in the mob wives the way that TG over in the Bananos got in trouble for his daughters being, they weren't just participants, they were the catalysts, they were the people that created the show.  So we'll keep this top of mind and I'll keep on going back to my sources and tell you what I find as 2024 goes on and see if little Rob can get some more traction in this effort to get his son-in-law shelved now that he's acting boss of the Colombo crime family. For OG Pod, I'm Scott Bernstein out.


Hi friends, I am Purva and today we will discuss the following question. One card is drawn at random from a well-shuffled deck of 52 cards. In which of the following cases are the events E and F independent? First, E. The card drawn is a spade and the event F is the card drawn is an ace. Second part is E is the event that the card drawn is black and F is the event the card drawn is a king. Third part is E is the event the card drawn is a king or queen and F is the event the card drawn is a queen or jack. Now if E and F are two independent events then we have probability of E intersection F is equal to probability of E into probability of F. So this is the key idea behind our question. Let us begin with the solution now. Now since there are 52 cards so the sample space S will contain 52 outcomes for 52 cards. Now in the first part we are given that E is the event that the card drawn is a spade and F is the event that the card drawn is an ace. So we have probability of E is equal to 13 upon 52 because there are 13 spades in a deck of 52 cards and we have this is equal to 1 upon 4. Now probability of F is equal to 4 upon 52 as there are 4 aces in a deck of 52 cards and we get this is equal to 1 upon 13. Now we have to find whether the events E and F are independent or not. Now by key idea we know that if E and F are two independent events then we have probability of E intersection F is equal to probability of E into probability of F. So here we will find probability of E intersection F that is probability that card is a spade and an ace. Now in a deck of 52 cards there is only one card which is a spade and an ace. So we get this is equal to 1 upon 52. Now probability of E into probability of F is equal to probability of E is equal to 1 upon 4 into probability of F is equal to 1 upon 13 and we get this is equal to 1 upon 52. Now we mark this as 1 and we mark this as 2. So from 1 and 2 we have probability of E intersection F is equal to probability of E into probability of F. So by key idea we get thus the events E and F are independent. Now in the second part we are given that E is the event that the card drawn is black and F is the event that the card drawn is a king. So we get probability of E is equal to 26 upon 52 as there are 26 black cards in a deck of 52 cards and this is equal to 1 upon 2 and we get probability of F is equal to 4 upon 52. That is the probability that the card drawn is a king is 4 upon 52 as there are 4 kings in a deck of 52 cards and we get this is equal to 1 upon 13. Now again to find whether the events E and F are independent or not first we will find probability of E intersection F that is probability that card is black and a king. This is equal to 2 upon 52 because in a deck of 52 cards only 2 black cards are kings and we get this is equal to 1 upon 26. Now probability of E into probability of F is equal to probability of E is equal to 1 upon 2 into probability of F is equal to 1 upon 13 and we get this is equal to 1 upon 26. Now we mark this as 1 and we mark this as 2. So from 1 and 2 we have probability of E intersection F is equal to probability of E into probability of F Now by key idea we know that if E and F are two independent events then we have probability of E intersection F is equal to probability of E into probability of F so we get thus E and F are independent events. Now in the third part we are given that E is the event that the card drawn is a king or queen and F is the event that the card drawn is a queen or jack. So probability of E that is the probability that the card drawn is a king or queen is equal to 8 upon 52 as there are 4 kings and 4 queens in a deck of 52 cards and we get this is equal to 4 upon 26. Now probability of F that is probability that the card drawn is a queen or jack is equal to 8 upon 52 as there are 4 queens and 4 jacks in a deck of 52 cards and we get this is equal to 4 upon 26. Now to find whether E and F are independent or not we find probability of E intersection F that is probability that card drawn is a queen and we get this is equal to 4 upon 52 because there are 4 queens in a deck of 52 cards and we get this is equal to 1 upon 13 now E is the event that the card drawn is a king or queen and F is the event that the card drawn is a queen or jack so probability of E intersection F will be probability that card drawn is a queen now probability of E into probability of F is equal to 4 upon 26 into 4 upon 26 and we get this is equal to 4 upon 169 now we mark this as 1 and we mark this as 2 so from 1 and 2 we have probability of E intersection F is not equal to probability of E into probability of F so by key idea we get the events E and F are not independent thus we get the answer for this question as 1st and 2nd hope you have understood the solution bye and take care


All right, is that working? Yes, but it's nice. Okay, hello everyone. Welcome to my talk. Today we'll be covering Drupal Defense in Depth, which will be a security framework for hosting Drupal at scale. And this is something we've been practicing internally at Salsa on our own hosting products, Salsa hosting. I just wanted to share our approach with you all. So on the agenda for today, we'll have some introductions. We'll go through the five key phases outlined in the NIST cybersecurity framework and just wrap everything up. So as for introductions, who's Ming? Who am I? I'm a DevOps engineer with Salsa Digital. I've been working with government slash enterprise Drupal deployments since about 2020, mostly with Lagoon. I've worked in projects such as the Victorian government's single digital presence. I've been doing some GovCMS work here and there. And I also work on Salsa Drupal hosting product, Salsa hosting. Oh, something in chat. That's, Lee has hosted a Drupal link. So I'll go ahead. So I realize I forgot to advance the slides. So before we dive into it, we need to cover a couple of concepts. So our first concept is something called defense and depth. So what's defense and depth? It's a layered approach to security and it's traditionally composed of physical, technical, administrative controls. However, with the move to cloud computing, cloud computing platforms, the physical security layers often taken care of by the cloud provider. And it's not really something that us and DevOps have to be overly concerned about when managing our Drupal sites. So we'll really just be covering the technical administrative controls. Salsa's defense and depth strategy consists of seven layers. So the first layer is infrastructure. You know, the infrastructure, compute infrastructure forms the foundation of the entire platform, needs to remain robust. I'll contain a hosting platform such as Kubernetes on EKS or AKS or GKE. Ensuring the security of that origin host prevents unauthorized access to any of our host applications. Of course, the application itself, Drupal in this case, needs to be secure up to date to prevent the exploitation of vulnerabilities and so on, like code execution, memory corruption, edge protection. We want to have edge protection as well via a web products, such as QuantoWeft, which will help detect and block potential attacks before they can even reach application. Content delivery, something like a CDN, like Quant CDN, Cloud France, number of CDN products offers DOS protection and traffic filtering. And these two are strictly, they're more of the administrative side of things. So people, we need to have well-trained and security-aware personnel that will help reduce the risk of incidents on your Drupal site. Someone's falling for a phishing link and in a process as well, in a well-defined security process in a well-defined disaster recovery plan, help you identify and manage risks associated with Drupal hosting. The next concept we need to cover is the NIST cybersecurity framework. So it's highly respected and a highly adopted cybersecurity framework in the US and contains five key phases. So let's identify, protect, detect, respond and recover. The NIST CSF isn't a certifiable technical standard, but it's highly flexible and it can be tailored to, you know, specific tech specs and unique threat landscapes. So what's our strategy here for these two things? We'll be aligning a Drupal defense in depth strategy with the NIST cybersecurity framework. Why are we doing this? So for one, defense in depth is an effective strategy to contain many attacks. If attack is supposed to compromise a single defense, the effective blast radius of the attack will be limited by the latest protection. The secondly is the NIST cybersecurity framework acts as a stepping stone to begin the journey to more stringent certifications. Many of the practices and recommendations from the NIST framework are actually echoed in stricter standards. So aligning a defense in depth strategy with the NIST cybersecurity framework, what applies to layers or your defense strategy while helping to streamline the path to compliance for more advanced security standards like ISO or PCI DSS. So the first phase of the NIST framework, sorry, I should also clarify, so for the purposes of the presentation, we're just focusing on these five layers, infrastructure, application, container hosting, people and process because these are the things that most organizations usually have direct control over. So infrastructure, we need to identify assets in our control that might be at risk. So some infrastructure components that might be targeted include computing infrastructure like web servers and worker nodes in addition to networking components like network load balances. Application, the vast majority of vulnerabilities in Drupal sites come from contrib modules and themes and libraries. It's important to keep track of those that in use and monitor the Drupal security advisories for any vulnerabilities that are disclosed.  And it's like, well, I never knew we had that. It hasn't been updated in like five years. Our container hosting as well, parts of our container hosting or orchestration infrastructure that might be particularly exposed include the Kubernetes API server as well as components of any observability stack that's in use like Grafana or OpenSearch. Other cluster management APIs in use should also be considered, for example, if you're using Amazey's Lagoon.sh, the Lagoon API, for example, is exposed publicly to the internet. Your people are an asset that might be at risk as well with the level of sophistication of phishing and spear phishing these dates. Personnel are often the weakest link in the security strategy and your process. Although it's not something an attacker can attack directly, outdated processes are a risk that could negatively impact your implementation of later stages of this framework. So moving on to the protect phase. So we need to protect our five layers. So starting off about infrastructure, we want to try and leverage cloud provider concepts when we can. Make effective use of things like network security, policy and security groups. Try and rely on things like cloud provider managed operating system images because these are often configured with best practice and are kept up to date. We can also do things like regular rotation of our working nodes to ensure that the OS is always up to date. This can happen manually by a maintenance window or it can happen automatically using tools like carpenter where you can set an expiration policy. So every seven days, for example, we'll find a node that's hit a certain age, like 14 days old, drain it, kill it, bring in a new one. So it's got an updated operating system. Our application, so for our application, we need to have things like configuration management and auditing, ensuring that the configuration of our Drupal sites in line with the security policy. Celsa actually has a tool for that called ShipShape that can monitor any running or any Drupal code base to ensure that all the exported config or the config in the database is actually in line with what the Obscene or security team expects. Regular and automatic patch management for core and contrived. We want to do these as often as possible. We can make use of security modules like password policy, username and enumeration prevention, login security, the TFA module. These provide quite a few extra security features for Drupal. Like Drupal Out of the Box is quite secure but these modules help build on that good foundation. And finally, we also want to use static content if at all possible using tools such as Tom Aucoin CDN which will generate a static representation of your Drupal site. For our container hosting, we want to put sensitive endpoints like our API server on a private network accessible only by a company VPN. We can do the same with Grafana and any logging dashboards. We can put it behind a VPN and further protect them with things like OLO. We can use an IPS to detect connection to certain blocked addresses. For example, someone breaches your PHP container and deploys a crypto miner and it tries to phone home using a known crypto protocol. Your IPS can detect things like that, block them and send an alert to your upstream. And in a container hosting scenario, you usually have an ingress controller. You can implement things like mod security which is an open source web directly on an ingress controller. So that no matter how traffic gets to your cluster if it bypasses the CDN or if there's host header spoofing that gets through all traffic is checked by mod security before it reaches origin or at least you have some baseline level of protection. For your people you want to have things like proactive security training, role-based access control, Drupal's access control system is very robust with roles and very granular permissions. Managing the use of things like password managers and to factor authentication. And your process as well, you should instate a security policy that enforces the standards listed above from things like your application configuration to network policies to user access which will drive all these other layers. Our next phase is detect. So on our five layers, how can we detect a potential breach or an exploitation? So for our infrastructure, a good way to actually detect anomalous behaviors, your cloud cost and usage alert. So if your cloud uses fairly stable, a cost and usage alert is a fairly useful identifier to determine if that's a breach, especially if a tech is still a compute by spinning up things like crypto lines. Amazon also has tools like GuardDuty which will actually monitor your instances that actually scans your volumes and monitors outgoing traffic to identify known malicious signatures. At our application level as well, the login security module for Drupal is very robust. It can do things like send out automatic alerts when it detects that multiple accounts on your sites are having the passwords brute forced. Also things like the security kit module can be used to configure a content security policy in a reporting endpoint. So if someone does manage to compromise an editor account on your site and they embed a third party script or an iframe, they'll be blocked by the security policy if the user browser will actually report the violation to your endpoints so you know that, oh, there's some content on my site that violates our security policy and you can take action on that. At the container hosting level, you can also ensure that logs from Drupal and PHP are aggregated and stored in a single place. So Drupal can forward logs to a wide variety of endpoints through the use of community modules. So the benefit of having centralized blogging collected from all your Drupal applications is that your options support team can proactively create alerts and monitors for events that might indicate potential issues, breaches, you know, just general instability. You know, people like content often should be trained to spot unusual or suspicious contents and be encouraged to report it. Like, you know, no shaming here, like that was actually legitimate, but that's fine. But yeah, your staff should be encouraged to report things they find suspicious. Same with emails if they receive a phishing threat, they should be encouraged to report that. And that's what process you wanna have as much automatic alerting and proactive detection as possible by IPS, things like Prometheus, Elasticsearch. OpenSearch can monitor metrics and you can create lots of thresholds to monitor for specific events and actually send proactive alerts to your ops team. The next phase we're going to cover is, you know, responding. So there's a brief famous quote that I like. It's not, if you get hacked, it's when. So we'll need to respond in the event of a security breach. And at your infrastructure level, since we're in the cloud, we can, you know, leverage lots of cloud infrastructure concepts to respond to the attack. So for things like a DDoS protection, we can, instead of, you know, adding a web server rule and blocking the attack of the Ingress Control or Nginx, which will place a lot of loads on your origin infrastructure, you could use things like a security group on the load balancer itself to drop the incoming attack traffic. So the advantage of this is that this is, this filtering is done at the cloud provider level on their hardware, so it's not putting strain on your web service and with alleviate a lot of pressure. For your application, most of the time, if your Drupal site is, you know, pretty badly compromised, the only immediate response that can be taken is to just take it offline. But if you've actually taken a static snapshot of your site beforehand, using the tools that you described earlier, it can actually serve as a pretty good fallback. Although, like, functionality for some very dynamic applications might be reduced, the site would continue to be accessible in some capacity as opposed to completely offline. At this point, you'd also want to look at initiating restoration of backups while the static snapshot does its job of keeping your presence sort of there. At a container hosting level, it's easy to ensure that your site can be restored to a known good state using things like container images which are immutable. You can't change a container image unless you compromise the image registry itself. Also things like version control help with that. So we can very easily redeploy, restart your deployment and instantly your site's code is replaced with a known good copy that, you know, that you're sure your devs have authorized and worked on. That being said, your site's still vulnerable at the stage to the exploit that the attacker use again exists in the first place, most likely. We can make use of our centrally collected logs and metrics to perform a root cause analysis. All staff should have clearly defined roles and responsibilities during an instant response. Like, last thing you want is if you've replaced your site with a static copy and you're trying to respond to an attack and the content team is confused and they're trying to log in to try and fix things as well and they send in a support ticket and then ops is both trying to respond to the attack and also trying to respond to your support requests coming from in-house. And at this point all documented and hopefully practiced disaster recovery plans should be executed. And the final phase is recovery. So as part of the recovery process at your infrastructure level, you probably want to recycle all your work notes and ensure they're updated to the latest machine image. Although containerization should have protected the host note, you know, better be safe than sorry, there's still a risk of container breakout. Recycling all the notes will return them to the original condition using the cloud provider's operating system image. And of course before we can put our application back online, we'll need to make sure it's patched and updated so it doesn't get breached in the same way again. We can use information gathered from our root cause analysis earlier based on your collected logs to actually figure out how they manage to gain a football in the first place. Once that's done, we can bring the application back online or cut back from our static version. At a container hosting level, we can retrieve the backups I described earlier using a centralized backup solution, such as K it up. So the advantage of this is that the backups are completely to couple from the application I start off site. So even if they are executing code on a Drupal site and they have access to the entire file system, they can't affect your backups because the backups are never on the file system in the first place, they're shipped off to S3 or some other blob storage and encrypted so they can't get to them. And you can know that those copies are completely safe and tampered with. In terms of people, you should ensure that your staff are clearly informed about the cause of the breach. There's no point hiding, it's happened. And this will just help people know what to look out for in the future. And of course, if you've identified any weaknesses during this whole process, should make sure your plans and processes are updated to address any of these. So in summary, the NIST cybersecurity framework is a great security tool. We've applied the five steps in the framework across these seven security layers or domains. And it's time for you to start defending your Drupal site. Hopefully this gave you something to think about, the way we've broken down security domains and the five phases of how you can, the lifecycle of each of these layers of your hosting infrastructure and how you can proactively apply the security to them to ensure that your platforms as robust as possible. Thanks. Any questions? Dick-Mian has a question. Hi, I was just wondering on, I think it was the first slide, you had about nine points. I was just wondering if there was a significance to the order? I don't know, so it was the fifth slide. The fifth slide? I was just wondering what the order is. Yeah. Yes, it's numbered here. It goes from, how do I explain that? It goes from like foundation and we slowly build up from that. So we've got our compute infrastructure and we've got our container hosting platform like Kubernetes use. We've got our Drupal application and on top of that we have our itch protection on the web. And then on top of that, we have our content delivery system. Does that answer your question? Yeah, if that makes sense now. So I couldn't say that before. Oh, okay. Sorry, I might need to make it a bit bigger. But yeah, that number's on the side here. Right. Don't think there are any other questions? Yes, I mean, I'm hoping to feedback. What did everyone think? Any general or more specific one? Actually, I had a quick question. I probably did notice at one point that spearfishing attack obviously on a fishing boat. Can you do the spearfishing attack? So spearfishing attack is, it is conceptually similar to a fishing attack like they're trying to trick you into something where spearfishing attack is very targeted specifically to your circumstances or your company. So for example, it might be, instead of Nigerian Prince trying to steal your money, it might be someone that's impersonating your CEO and knows that your CEO is currently on a business trip to Japan.  I need $5,000 very quickly. I'll pay you back. Something like that. Let's spearfishing. Actually. Any more questions? Thanks a lot for the presentation, Ming.


Good morning everyone, I think all remote centers can hear me and they can see me. So we will just have a quick clicker demo as we have had earlier and I believe that nearly all remote centers have finished with their clicker installations. So since Monday we will be using clickers regularly in our sessions. So this will be a final demonstration just to check that all of you have working clicker installations and not facing any problems. On the screen I have displayed one question. So this is how it will look like in all your clicker sessions also. This is a simple question. So the question here says what will be the output of the following code. This code is in C and if you compile and run this code then what will be the output? Okay everyone, so couple of things first some of the centers have received the second trench of clickers. So I believe they would have around 25 to 30 clickers. Now it is for those centers also we have received the student list but it may not have been updated in the database right now. So I just request all the coordinators to distribute the clickers among the participants. Don't worry about what clickers to give to which participant just distribute them randomly. To all the participants I just want you to read the instructions if you can on the top of the screen. This is how you have to choose your response. If you look at the clicker there is a start key ST key you press the ST key then choose one of the responses A, B, C or D and then press the lock key. One thing is there that the response whatever you choose it remains valid for 30 seconds. So please don't choose it now I request all the coordinators to first distribute the clickers among the participants when all the participants have understood the instructions I request the coordinator to ask all the participants to choose their responses and within 30 seconds the coordinator should press the collect response key on their computer. So I just request everyone to do that I will give you about 30 seconds or a minute of time so that I can check the responses here. One thing I wanted to ask the coordinators if they have any trouble reading the question then I want you to raise your hand here because we are not sure if the coordinate if the centers are receiving the display properly. So with the current color of the font and with the background contrast everything if anybody has any problem reading the question or reading the responses or seeing the instructions I want you to raise your hand and let me know. The question is I will just repeat it the question is what will be the output of the following C code if you compile it and run the window is a little small but this is the main question starts with void main and the last statement is printf after that there is just a close parenthesis so this is the main question what will be the output of this C code yeah I understand the question is not visible on the screen fully but can everyone read the question it is okay if the question is not visible fully because this is not resizable we will change it later on but are people able to read the font in the question only if you have if you cannot read the font you let me know okay it is okay if you cannot see this list this list is actually for the lecturer only so I can just tell you what is there on this list this list actually displays from which centers we have received the responses and I can see about 5, 4, 7 about from only from 10 centers we have received the responses okay I am getting a query from the PSG college saying that how to collect clicker responses so I think you you should have got the manual link by now and you should have got the instructions on how to use the clicker remote software by now you just open the screen you enter the quiz number which is being displayed on the top of the question and then you press collect responses I am not sure whether it will work the first time because if you are asking me that how to collect clicker responses then probably you have not tested the application even once by now I request you to do that immediately okay we have received responses from a couple of more centers I believe some of the centers are behind a proxy and are still facing network problems okay my colleagues has a list of centers which they have been in touch with and we just have the status of each center so I just go over each centers from which we haven't received the responses and just like to ask what problems they are facing within okay I will just go over each center one by one SVNIT surat can you just raise your hand and tell me what problem you are facing because I understand that yesterday you had said that it was working fine so can you tell me what what is the problem that you are facing right now okay we'll just go to SVNIT surat hello yes SVNIT surat am I audible to you yes yes good what problem are you facing the receiver yeah receiver machine is not being connected to FTP server of your clicker okay what is the error that your response in from our participants could not connect could not connect to FTP server yes can you try once again just ask okay because I believe the FTP server is fine we have received responses from a lot of centers so either your network connection is very slow or there is some other problem so since yesterday yesterday it was working fine I just request you to try once again okay okay we'll just go over to the next center Somalia college Somalia Vidya we have hello hello Somalia college yes hello yes I can hear you can you just check some hardware wiring might have come off just check it again okay okay when it says that it to I just want to tell this to all centers if you receive a message which says could not collect responses that means the software is not able to communicate with the hardware so just check your hardware wiring some wire might have come off or the power cable for the receiver might have come off or it is not properly connected to the computer port so just verify it and for those centers for which we have not received responses just try once again thank you thank you okay we can we go to VGTI VGTI can you hear me anyways yeah go ahead with your problem as such we don't have any problem only thing is for uploading it we have some issues in the FTP that we will sort it out in okay right now we are able to collect the things in the local file okay all right okay I request VGTI that you please resolve this issue because since Monday we'll be having regular sessions so I don't want you to face any problems then yeah yeah today afternoon this will be corrected and we'll get back to you on okay thank you VGTI okay can we go to SGSIT Indore sir actually we had some problem with the FTP and so we had agreed to the point that will be sending the responses through mail okay I believe you are behind a proxy server right so hello yes sir might be that is the problem okay well that problem can be resolved actually if you can talk to your administrator just ask him to put your machine with a no proxy setting okay you can specify an IP for your machine and you can put a no proxy setting sorry for the interruption I'd like to say that we are out of proxy now and we had agreed to the point yesterday that will be sending our responses through mail so I just wanted to know that whether you have received our mail or not okay all right fine so this is for all centers also I mean worst case scenario if your FTP is not working we will be able to collect responses through email right now we are not displaying them here but from Monday onwards we'll be able to do it it is not a very good way of doing it because we have to manually save your files in a folder and then read it in our software so just try to get your networks up and running if possible otherwise sending emails to clicker at IT with your responses is last option okay can we go to VIT Velour VIT Velour can you hear me tell me what your problem is with the clicker installation okay Velour I can see your machine so it seems your hardware is working fine but you cannot connect to the FTP server okay I believe that we have received responses from all the working colleges so there are some some colleges have are still facing issues somewhere behind the FTP proxy so I request that just just try and talk to your administrator if they can give you a no proxy for your machines IP otherwise you will have to send emails which will not be very convenient for you also because you know during the lecture probably the lecturer will give only 30 seconds or a minute for each question so by the time you send your email and we receive your email and put it here your college might already get skipped so just try and see if you can yes Amravati yes you are being sent a new receiver it has already been courier to you I think you should receive it in a one or two days probably by Monday or Tuesday so just request you to you know wait till then also I would request you to get in touch with our team clicker.it as soon as you get your receiver so that we can help you in setting it up okay all the colleges who have some queries regarding clickers in a minute we will start the G talk for clicker so they can just post their queries on that I believe some colleges are having problems they are saying that they don't know the FTP server IP so for the colleges that we have received the responses this is how it will look like the lecturer can check your responses here and it will show all the clicker IDs along with the response I think the screen will not be very clear for you now we will just increase the font and try to change the contrast a little bit but this is what it will look like so I believe most of you have answered A what the correct answer is C okay so I think this session was successful again I request all the colleges which are facing problems to just log in on G talk or send a mail at clicker.it and we'll just get back to you okay