Before we start, I'd like to thank all of the CubeCon organizers for giving us the opportunity to share our story with you all. Let's get started. Quentin and I work on the security team at Yelp. Today, we are going to talk about how we utilize the open policy agent and active directory to provide fine-grained role-based access control to the Kubernetes infrastructure at Yelp. And let's start with the motivation for this work. If you are not familiar with Yelp, it's a company that connects people with great local businesses. As of at the end of 2020, Yelpers have contributed 224 million reviews on our platform. Approximately 31 million unique devices access Yelp every month on average. And more than half a million business locations spend money on Yelp ads every month to promote their businesses. And as you can imagine, it takes a lot of infrastructure to support an application of that scale. Today, we have more than 1,000 geographically distributed software engineers across hundreds of different teams. We have a containerized microservice architecture managed by an in-house built open-source platform as a service framework called PASTA. Under the hood, PASTA uses Kubernetes as the container orchestration framework to manage thousands of workloads. And we have a dozen of Kubernetes clusters that we run on EC2 instances, with several custom namespaces, where we run our microservices and batch jobs, and other types of statement workloads like Kassandra clusters, Kafka filling, Spark, and other many various use cases. But we weren't always using Kubernetes. In fact, it's a relatively new technology for us at Yelp. As early adapters to the whole containerized workload system, we had been using Mesos as our container orchestration framework since 2014. Our Mesos infrastructure was primarily used for running services of batch workloads in containers. And we didn't really have a strong need for fine-grained access control on the Mesos clusters, because only the infrastructure team needed to interact with the Mesos directly. And they literally used only shared secrets with administrative privileges for that access. Workload developers used an abstraction layer provided by the infrastructure team, and they really didn't need the direct access. And to be honest, they didn't even need to worry about the underlying technology at all. But over time, Kubernetes gained a lot of popularity in the community, and we eventually decided as a company that we should migrate over to Kubernetes for its plug-able components, extensibility, and its wide community support. The migration of Kubernetes unlocked a lot of new use cases for us beyond just services and batch workloads. And with this came a lot of interest from the other development teams with Yelp that wanted to leverage the Kubernetes infrastructure support, like other types of workloads such as Kafka, Cassandra, and various other use cases. These developers would need to interact with different namespaces and resources depending on their use case. Unfortunately, the security model that we used in the Mesos world was carried over to Kubernetes world. In which, in hindsight, it doesn't really make a lot of sense, because given all the new use cases and participants in the new ecosystem. And as you can imagine, this brought up a major problem, because it meant that all Kubernetes users got administrative access to all Kubernetes clusters via shared client certificate for the client admin role. And it didn't really matter how much permission they actually needed. They had the admin privilege and to the all clusters. And even worse, to access to the client certificate, these users had to be given pseudo access to the sensitive control plane nodes. As you can imagine, this has obvious disadvantages. Since everyone is using a shared set of credentials, it was more difficult to understand who did what in that cluster. And since every action appears to come from the same user. And as a related one, anyone could easily make a mistake and accidentally modify or delete resources in namespaces. Additionally, this complicated our compliance narratives, and we had to do strange things to overcompensate like creating completely separate bespoke Kubernetes clusters for sensitive workloads, which obviously doesn't scale. So with that picture, it was very clear for us that we needed to introduce fine grained role based access control. So let's go over our requirements and what we really needed to solve this access control problem in our large Kubernetes infrastructure. First, we wanted to authenticate individual users using an identity provider. Then we would like to define authorization rules for Kubernetes objects based on the team ownership, resource sensitivity, action sensitivity, and infinitely many other combinations of the custom taxonomies that exist in our infrastructure. Finally, we needed to maintain a formal paper trail for all changes to the authorization policies and all group memberships. For this project, we prioritize human users since there's a lot of them with lots of use cases. And thankfully, we only had a handful of service users and they each had their own client certificates and nonsense the role bindings and RBEC configurations. Therefore, the starting with the human users made a lot of sense for us. So now we covered the motivation of this project. And at this point, I will hand over this presentation to the question to deep dive into the technical details. Thank you, Charlie. At a high level, we have human users authenticate using their octa credentials. Kubernetes supports this basically out of the box. A human user runs a command like kubectl get pods. We provide a wrapper script that first prompts the user for their octa authentication, which consists of their active directory credentials and a second factor like Ubiqui or an authenticator app. Upon success, they receive a JWT token from octa valid for one hour, which is then sent to the cluster via kubectl's dash dash token parameter. The Kubernetes API server verifies the authenticity of the JWT token by verifying the signature using octa's public key server. The human user's identity from the token is then propagated downstream for authorization considerations. The benefits of using octa for authentication are pretty straightforward. Root access is no longer needed to interact with the Kubernetes clusters. Each action can be tied back to a specific user rather than a generic administrative user, and credentials obtained from octa are temporary and behind a second factor. This mitigates the risk of credential theft and replay attacks. Now let's talk about authorization. Here's an overview of the architecture. First of all, on the top, you've got the user who interacts with Kubernetes using kubectl. Kubernetes sends a request to Open Policy Agent, which makes the authorization decision, and on the bottom, we've got the data that feeds into that decision. We collect data from Git and from Active Directory, and then we put that data into an S3 bucket for Open Policy Agent to read. Let's talk about that data first. Here's a summary of all the data that feeds into OPPA in order for it to make authorization decisions. First, the access control capabilities are stored in an access restricted Git repository. These are the roles that we can give to a user to allow them to perform certain actions. We then use Active Directory to store group membership, which tells OPPA which users are able to use which capabilities. And then finally, we have service metadata that contains various information about the services that we run that we may want to use for authorization. Next, let's talk about the policy. The OPPA policy is the logic that OPPA uses to take all of the data provided and make a decision. It is written in rego, which is a language based on datalog. I will cover the details of the rego policy, but I'll cover specific examples of what the input looks like. The capability format contains a number of different ways in which you can limit access. It currently contains clusters, namespaces, resources, subresources, resource names, verbs, pod metadata, and service metadata. These are all native Kubernetes attributes, except for the service metadata. A capability can have any number of subcapabilities. Like in this example, we only have one called admin. These attributes are all structured as allow lists, where if you match any value you are allowed, which means that an empty list means allow all. Here's an example capability with two subcapabilities. The first allows you to run any command as long as the cluster is one of these two listed. And you can also run the list command, which sometimes looks like a git in QTTL, in any cluster. Therefore, these two subcapabilities combine to create an unprivileged capability. In this example, we're using pod metadata to filter. Yelp.com slash service name is just a custom metadata attribute that we use to represent the name of the service that a pod is a part of. This will work if either of the two values match. Here's another example. We're using a team attribute to limit actions to only those where we can match the action to a service owned by the infrasec team. You can also use a custom variable in the capabilities to represent the user's team rather than a static value. Here's a capability to let someone run read only commands for any service that their team owns. And here's the same capability, but without the read only requirement. Next, I'll cover the OPA policy manager. This is a service that we use to compile all of the info data that OPA needs, bundle it up into a format that it can read and push it to S3. It runs continuously and only updates the bundle when anything has changed. Now I'll cover the components that run on each Kubernetes host. OPA runs as a service on each house and is configured to pull from S3 to configure itself as well as to listen on a WebSocket for any requests that come from Kubernetes. The input it gets from Kubernetes takes a form of a subject access review and that contains all the information about the user's request. It then combines that with the data from the S3 bundle to make a decision. These decisions are then logged and written into Splunk. Now we'll go over just a couple of end-to-end examples of how this can be used. First, we'll cover a basic example. In the top one, a user is trying to list pods in the default namespace. The list verb matches the specified verb in the capability. The namespace and the resource don't have any restrictions in the capability. And the user is a member of the OPA Kubernetes Dev Unprivileged Group. So this request is allowed. In the bottom example, the verb doesn't match and the request is denied. In these next two examples, we are using a team-based capability which depends on the request matching with our service metadata. The subject access review only contains the name of the pod and so the first step is actually for OPA to request the pod metadata from Kubernetes. This pod metadata then contains the name of the service and that service can be matched against our service metadata. In this case, the service is owned by Infrasec team and the user making the request is also a member of that team so the request is allowed. In the bottom example, the service name is now PE service and so the owner no longer matches with the user's team and the request is denied. Note that we could still add a static value into the capability. If we added PE there, then the team would match again and the request would become allowed. Finally, I'm going to talk about the decision logs briefly. Each authorization request ends up with a log being recorded. This has, of course, the basic information like whether or not the result was allowed or denied. And also the various input in the subject access review that Kubernetes sent to OPA. But what's really neat about it is that it shows you which groups would have been allowed versus which groups the user had. This makes it very easy for us to debug requests and to figure out what capabilities we should add to someone who needs to do something. Next, I'm going to hand it over to Charlie to talk about rollout strategy and system reliability. Thanks, Quentin, for the great technical deep dive. Let's talk about our rollout strategy. Our major challenge was switching to a new authorization system under a heavy usage. To avoid any system or user disruption, we came up with the following approach. First, we ensured that all of the changes are rolled back safe. Then we configured our infrastructure to support a dry run mode. Then we rolled out the dry run mode incrementally, cluster by cluster. In this way, we were able to observe the actual usage patterns. Once we collected enough data, we provisioned least privileged authorization capabilities. Finally, we incrementally rolled out the enforcement mode that enforces the least privileged authorization. One thing that I would like to emphasize here is that on every step, we overly communicated the rollout. For infrastructure changes, we let the SRA teams know on each step. For authorization provisioning, we communicated with the stakeholders. In this way, we were able to similarly roll out our major authorization system in our infrastructure. Now let's talk about several challenges that we encountered throughout this project. One of the major challenges was that the subject access review did not contain enough information for us to make least privileged decisions. For example, we didn't have the service name that we used for the team-based authorization. As a solution for each authorization request, OPA reaches out to QBAPI server with the resource name and gets the resource labels including the service name. OPA also reads the environment variables from the host to make authorization decisions based on the Kubernetes cluster or YAP ecosystem. Next problem was that unprivileged engineers who has network access can curl to OPA API and modify the authorization policies. In this way, any unprivileged user could entirely bypass the authorization system. And this is really bad for our security posture. As a solution, we set up MTLS between Kubernetes and OPA. Additionally, we created an RBAP policy for OPA to only run GET commands in Kubernetes clusters. In this way, we aim to mitigate privilege escalation attacks through OPA. The next problem was that we encountered during the design process, which was that multiple teams owning services in a single namespace. In fact, one of our namespaces contained hundreds of services owned more than hundreds of teams. So we could have created a capability for each of these teams, but then we could have hundreds of different capabilities. Instead, we came up with a special keyword called my team and created a single team-based policy. In this way, everyone who has the same team-based policy can only access their own services. One thing I would like to mention here is that this couldn't be possible with the default Kubernetes RBAC policies, because RBAC policies do not provide such granularity. The next problem that I would like to talk about is how do we associate the team with non-pot resources with metadata. So we previously talked about how we use part metadata to associate a request with our own service metadata to make team-based access, but some non-pot resources require special treatment. For example, secrets that are bound to the services that they do not have team membership associated with them. To enforce these privileged team-based access to the secrets, we came up with a special case handling in the Rego policy. Literally, we say in our policy that our policy only allows team-based access for the secrets under the following conditions. The service should belong to the users team and all of the services instances should also belong to the users team. In this way, we can enforce team-based access for all types of resources. But as you can imagine, this came with a price. This approach made the Rego policy long and overly complicated. This brings us to our next problem, which is that our Rego policy becomes overly complicated and hard to test and debug. To make sure that we have enough coverage, we wrote extensive test cases, unit test coverage. In fact, we had unit test coverage more than 2,000 lines of code. So these were overall problems and challenges that we encountered throughout this project. Let's talk about a little bit on the system reliability. As you have seen from the new architecture presentation, we actually added more complexity under the hood than in the status quo. As such, it was very important for us, for our design and our role as strategy to ensure that the system was fault-tolerant to any failure scenarios. So let's go through some of these scenarios. First one is that what if we push a bad policy that has a catastrophic side-effects like blocking access from old users? We do enforce a strict code review process, but nobody's perfect after all, like some bad things might slip through. In case this happens, we have automated checks in our CICV pipeline that will prevent uploading the bad policy bundle into the S3 bucket. The next case that even with the automated tests, it is still possible that a bad policy might slip through. This or any other kind of issue with the open policy agent service could cause it not to respond and block people to authorize into the Kubernetes clusters. To mitigate that risk, we distribute administration keys to Kubernetes hoods and check created Kube CTL admin wrappers that only the system administrators can use. In the case of emergency, a handful of admins will still be able to access to the Kubernetes clusters using these admin keys. In our architecture, we rely on many different systems and we implemented our architecture in a fault-tolerant way. For example, if for any reason GitHub or Active Directory does not respond, we have the last frozen state of the word in the S3 bucket. And system will continue to work. And if for any reason S3 stops responding, we still have the last frozen state of the word cache in the OPA at the Kubernetes clusters. And users still continue to access Kubernetes clusters. So to conclude this talk, first I would like to talk about our shortcomings of the system. After all, nobody is perfect, right? First shortcoming is that unfortunately not every resource has meaningful metadata in our infrastructure. So for that reason, we cannot make a team-based access decision on every resources. Although these cases are rare, but still in the future we want to give ownership-based access to all resources to go all the way with the list privilege. To enforce all resources to have meaningful metadata, we are planning to use the admission controller. Another shortcoming is that the inconsistency in the authorized actors. We use OPA for human resources, which are the majority of our users, but we use RBAC for the service users. So in our roadmap, we are planning to migrate service users to OPA-based authorization. The next one is that the Octo authentication has one hour TTL. And to be honest, we do not consider this as a shortcoming. And in fact, from a security engineering perspective, this is actually good for our security posture. But we receive some complaints from the users that they have to enter their password every hour. The next two shortcomings that I'd like to talk about here is that related to keeping the system list privilege compliant. So after we implemented the new authorization architecture, we spent a lot of time to come up with list privilege compliant capabilities. And we believe we did a good job there. But unfortunately, we do not have a system that would constantly monitor the unused permissions and drop them from the users. Additionally, YADV is an extremely dynamic environment and people always get new access to new clusters all the time. And we do not have time limited access controls. Once a user gets the permission, they keep it anyways. And addressing these issues are already in our roadmap. So to conclude this talk with some of our learnings, I would like to first say that if you are making a fundamental shift with how you interact with a platform such as exposing more levels to people or expanding the surface area, do not just bluntly carry over the security model. It's important to rehabilitate the security model at a major system changes like this. Another thing that we learned was having a well-told true system design can make a smooth reviewing process for security teams to get shipments from the SRE teams. In fact, during our project, we had a very smooth reviewing process to implement such a large project. And since it's inception, the server, the system never malfunctioned to prevent people to access. Next is that it is totally okay to first build the tools that can support the list privilege access without actually doing the list privilege rules, because doing both can be really challenging. And after some time you can actually do the list privilege setup as a follow-up. At the end of this project, we update the ability to give list privilege access to Kubernetes classes based on the many parameters need and ownership. And as a result, we now have a stronger security posture by enforcing list privilege access for hundreds of teams to thousands of different Kubernetes resources. And this concludes our talk, and I would like to thank all of you for joining us today and feel happy to answer any questions. Thank you.


I was born in Colombia, in the Andes, Colombian Andes that is in Bogota, and that is Haya 3000 meters elevation above sea level. And I grew up in this kind of mountain region, but in a very large city like, I think, Mexico City, something really oversized, like almost 30 million population, which is the population almost of Canada or something like that. But only for one city, so I grew up in a very verbal environment, but always with the mountains behind me. And that, there's actually something that I recently acknowledged, and it's that in Colombia, because you might know there's conflict, violence and all these things, accessing natural spaces is not as easy as doing it here. Here you might fear bears or other things, but there you fear different things that are sometimes you might get robbed or you might get kidnapped in some instances. So it's kind of a raw reality to acknowledge, but actually it's a reality that I actually, when I moved to Canada, I started to actually explore the natural world in a different way with more freedom. And I think that is what really allowed me to access the knowledge of plants and the gifts of plants in a different way. Of course there's stepping stones to get to that place, but I just have to want to refer to that reality just so you understand my context and where I come from. So I was born there, grew up there, and for a time I actually am a visual artist, went to university, did different studies in sculpture installation, and that's where I come from, from sculpture. And then I worked as a community-engaged artist, and furthered that here when I moved to Canada. Working there in kind of my early 20s, I was an outdoor instructor and I accessed natural places from a recreational point of view. And where you really access the natural world more as a backdrop and as a container of your own experience, rather than a relational approach to the natural world where you're actually acknowledging leading beings that are actually containing your experience that you are relating to it in a different way. So that was more kind of recreational, adventure-focused, right? Nature is my kind of device to access, to maximize my experience, right? That, travel across like Central and South America doing that. Then when I immigrated to Canada, this is a different story. After some years in doing community-engaged work, I started taking courses that created a game changer was a day when I attended a witness ceremony at the Brown Coast Community Center this is years ago. And that really changed my heart, actually, in a different way, and I lensed to see the natural world. It was a long witness ceremony, but really didn't have anything to do with any of art creating or anything like that. It had more to do with like actual ceremony and actual seeing really things with a different lens more an intersection of spirituality and also relational approach, right? And also understanding the principles of indigenous peoples, right? I also kind of went back to a little bit working as a community-engaged artist. I also worked in cultural arts and cultural programming. And my connection to Westminster is really interesting because I used to be the community arts supervisor at the Frederick Lincoln Gallery here from Western, but just renovated. Are you from Western, by the way? I don't know. Yeah, the Frederick Lincoln Gallery is this beautiful heritage building and I was in that position for about three years and then it hit. So we all kind of lost our jobs as you might know or got paused and then that really changed the course. Another thing that really changed kind of the way I related to art making was my mentor and friend Sharon Collins and her practice. Do you know Sharon? So Sharon was the first person, I actually before the Frederick Lincoln Gallery worked in an arts programming capacity and I knew Sharon from an arts programming capacity kind of engaging her to deliver arts programming and then I attended one of her benefits community events and she was teaching how to make rope out of daily leaves. That one teaching transformed my relationship to art making because by then she showed me how to really work with even garden trinities that would go to the ring in otherwise, right? And the moment I started to make rope and got kind of like in that zone something happened internally. I kind of now seeing it retrospectively see it as my kind of ancestral DNA of work. It's kind of like the awakening of like how am I supposed to be doing this rather but I wasn't doing it. Someone just showed me a path.  It's kind of our daily thing in kind of Western culture somehow. This felt true to me and really was kind of giving me back my humanity in a way if I can explain that somehow. So from that, that was the starting point to now opening a world of possibilities with working with plants, with garden trees, with food waste, with wastage, et cetera, et cetera. And from that, then on, I used to work with different mentors, indigenous and non-indigenous, right? And also YouTube university and all the things, right, that are accessible to us these days, books, et cetera, right? Et cetera, et cetera? Oh, you know that word? Of many avenues that knowledge gets communicated. So that's me, Juliana. And well, now I, after the pandemic, we moved to the island as a family. If I had two kids that were born here in Canada and with my husband we started a new life a year and a half ago, almost. And anyway, that's pretty much in a nutshell me. I really wanted to start with positioning the relational aspect to plants because to me that actually is more important than even the art making, so to speak. Why? Because we come from a heritage of extractivist mindset, right? Of functionality, of really seeing things for what they can do, their performance. And we actually see ourselves in the same, with the same lens, right? Always measuring capacity, performance, et cetera, et cetera. But we don't stop to just be, right? Just be an acknowledge and just don't expect deliverable from people, from things, from plants, right? That's why I really wanted to start with that and hand out a little pocket card that I created with the honorable harvest. And this teaching comes from the book. One of my most favorite books called Breaking Sweet Grants. The author, Robin Wolkimer, put the language to words that were practiced in her own Potawatomi culture. How that is a foundation for the work we do. Or for the work I want to do and want you to do. Of course, you can keep accessing plants whatever way you want but this is an invitation for you to kind of refrain. And also, start building relationships with those plants that we're asking their gifts from, right? In this particular case, their color. Another source really great is called also reciprocal foraging. Not the honorable harvest, but the principles are the same. Start with like acknowledging, introducing ourselves to the plants, right? That sounds sometimes for some people like crazy. You talk to plants, you know? But in a way, like I have experienced it from my personal kind of journey with plants. It really makes a whole difference. They talk about like even whatever you can fit in a handful, like in your hands but they even say it with one hand actually, you know? So of course it depends what you're harvesting. If you're growing your own things, if it's worth eating or for, you know, of course it's kind of making sense but if you're foraging and not necessarily growing from seed, I think that attitude of like just a little bit, especially if you're experimenting with color. Handle is enough. Work with what's about it is the best way to describe it. Another thing is, well, we talked about this idea of kinship when asking for the gifts that plants are going to give us, being that their food, their shelter, their fiber, their color, you know? And one important thing, and that's why I always refer to what my organization is called, plants are teachers, but I always refer to art, ecology and community. Community is an important thing because humans on this planet also have relationships with plants and if we view a relationship with humans and plants, then the whole kind of equation works out. And again, experiment with all parts of the plants knowing that color changes considerably depending on the season. There's higher tenants later in the season, but earlier in the season. So that also would change your color extraction.  Also, there are surprises with plants that probably they look purple, but the ultimate might be resulting in my turn green or my turn other color. So experimentation is fascinating with plants. Also, it's not written here that some plants are toxic, so that's kind of like the first thing that you should do your research. So it's actually written here like do your research. Right now we have access to so much information and it's so easy to just google the plant and see if it's toxic, is it not. Always try to kind of set up your kitchen in the outer so that you can kind of absorb all that. There's a lot of like poisonous things here same as like if you were working with commercial paint, like you would never eat a tube of acrylic paint, right? So it's kind of part of the norms to dedicate your equipment to dye or art making and never use it for food. And our goal for today is to make ink out of the part of the maquonia. It's from the Barbary's family. If you're aware of like the Barbary's plants, like in that family, they usually have a very pigmented inner part. One other thing that is important to consider is that this is living color, so don't get attached to color. And you look at it like next day and the color is like goodbye. Totally fugitive. But it's good to see it, you know, maybe photograph it once it's alive like that. And then, okay, you're okay with that. Let go, right? We're so used in our culture to synthetic colors, you know, that are so homogeneous and permanent. And it's hard for us to kind of go back to, you know, how nature talks, which is in a different language. When ink was discovered, paint was discovered first, right? Like when you see the hands with the red pigment on your face, you know, it's like that humans have to make paint. But ink is almost kind of a newer discovery, actually. And when ink was invented, it also was paired up with the language and the transmission of language in written like knowledge, right? And also ink became the medium to communicate the spiritual knowledge as well through scripture, right? There's a beautiful kind of connection of ink and the truthfulness of the gestural ink, right? As opposed to the paint. When you see paint, paint is more kind of a layer, it's more kind of, it has a different, it communicates the idea differently than ink. Ink has some certain sincerity and truthfulness to what it is. And that relationship to spirituality to me is really fascinating, right? So what he says is that he calls his experiments like tests because he wants to be free and let ink do what it does, right? So you're invited to let ink do what it does. No pressure to having to, you know, make anything particularly. Just let the ink and just be curious about what happens if you put a drop of iron or like if you put a little bit of this or that or nothing at all. Because I see there's some sediment from the mark, like super tiny pieces. So I'm going to actually filter with this paper filter again. Okay? Just so you know. And after that, I'm going to add the last remaining ingredient, the drops of club oil and all that. We're going to talk about something called a lake. I don't know if you've ever heard the term a lake, a lake pigment. Have you? Ever? Never ever? Have you started? Like a lake. Like L-A-K-E. Which is a term that actually, it's super fascinating the history of the term because it comes from originally from L-A-K, which is the name of an insect where L-A-K-E comes from. And this insect produced ink pigment back in India which actually is awarded, I think in Sanskrit, Sanskrit, sorry, that is pronounced like similar to L-A-K, you know? Then L-A-K-E lake, it comes from that origin. And what it is, is actually a chemical process that is ancient as well, which is fascinating that we're resurrecting all this chemistry and like this is how medieval people used to make paints, right? Out of botanical origin. Because lakes can only be created with organic matter. You cannot make a lake with a mineral pigment, which also is another source of color historically. Like there's a lot of mineral sourced pigments like from clays, from stones like Lapis lazuli, for example. It's a beautiful blue that was extremely expensive. Like if you read some of the books that we put out there for your bibliography, there's really this cool story about how the commissions for portraits and medieval times and renaissance, some artists wouldn't have the money to pay for the pigments and they would ask the actual commissioner to pay for the pigments and buy them themselves and they would be so apprehensive of the use of the color because it was so extremely expensive, like say a blue or a red, that they would say and this pigment is for the dress of so-and-so because that was also a symbol of status if they would use the color for a particular medieval painting of a portrait of someone, right? That was also kind of, if we talk about color in representational aspects of painting but if we talk about color in actual wearing the color also it was forbidden for certain classes, social classes to wear a particular color because it was only royalty, royalty, not only who could wear these colors but also who could pay for them, right? Because certain colors are extremely expensive even to this day, right? That is so fascinating the history of color and how when it was synthesized and accessible to the masses then the whole kind of status of color changed all of a sudden, right? And it was a red color that also originally came from the root of matter, the matter root this root I grew on the island this is the color of rubia tinctoria is the name of this beautiful plant that historically has such an importance because all the potent reds in history came from the rubia tinctoria which is this root if you read this fascinating because rubia tinctoria was the pigment known in the world for reds until they discovered at quote unquote the Americas and then cochinio which is the insect that we already spoke about became accessible and then that was a game changer because anyway there's a lot of historical kind of accounts like how color transformed history and then royalty would prefer the cochinio because it was more potent and there would have been kind of battles in the ocean for like pirates kind of trying to steal the cochinio coming from Mexico that's where it came from so it's really fascinating the history of these pigments but let's go back to the idea of a lake or lack or lake I would say lake is now how it's known a lake pigment so what it happens what happens is that instead of creating an ink which is in liquid form you can actually get rid of the water and make the color not hydro soluble and turn it into a water color by precipitating the organic matter and how that happens in the chemistry of it is that you have this liquid is suspended here the pigment is suspended in water right now this is long worked I double boil it so not direct heat but double boil it all of these pigments here I created this way with a double boiled system basically it's just a pot with amazing dark inside and let it simmer for an hour or two depending as you can see the color really extracting is when you can turn it off or textiles so I can actually put pieces of fabric that are pre-mordanted or not depending on if it's a protein fiber or a cellulose fiber dip it in the pigment or in the dye bath and take the color from it okay so we're using the metallic salt which is the alum the aluminum salt and we're using soda ash and it's usually one part of soda ash for two parts of alum the measurement you use in our case we're going to start with one gram if it's not enough double it to grams and you can see the precipitate to create it's honestly like a chemistry lab and you're seeing the color being from hydro soluble into a non-hydro soluble right it's fascinating and then you filter that and that's why I wanted to display all these filters which is kind of process what I'm showing you is how all these colors were filtered closer you can see oh there's golden rotten iron in the mix here and then I filter that and this powder is what we are going to grind with a medium which is our watercolor medium that you have the recipe of that has honey and glycerin and all these components we're going to use a glass muller which is an ancient instrument also to grind matter from mineral or organic origin to a micro particles to make it more suitable for painting so just so you know this was double boiled maybe for an hour and a half on the stovetop with a pot full of water the jar inside and all these jars where they're kind of boiling to extract the color that is right there so this is what I'm doing just taking as much as I can and look all the color is really in the water now okay and now this can also go here so now let's put this back in the jar we're going to add our alum right tell what's happening there not only turn green so it modifies the color of the purple cosmos but it's also do you see that it's actually kind of becoming precipitate okay so that's what's happening in there so I feel like we should probably add to precipitate and separate it more of the same measuring that we just did let's pour the alum first thank you so much do you see that bubbling kind of then let's add a little bit of this splash you see what's happening in there it completely separated so that separation that's the pigment right there and once you filter this which is what we're going to do next we're going to let it kind of separate even more and once we do that we're going to strain it here with one of these coffee filters use white just so you can see the color but you can use any coffee filter or any good filter that you have access to you can just use that and this is your dry pigment sometimes if it sticks whether it takes one day or two to dry up for you to be able to turn that into a watercolor pigment and that's what we're doing next but if it's cold it takes longer or if you put it next to the heating system it really accelerates the drying of your filters so now we have these beautiful separation we're going to leave it aside because we're going to do this in a moment but imagine fast forward in our cooking show you know when they pass the plate it happened overnight we filtered our precipitate and now we're going to turn it into a watercolor usable watercolor pigment so this is what we do come to your grinder which is here that you bought at the thrift store or an old grinder that someone gave you just kind of put it hot now and I love doing it here because it's really homogeneous but in ancient times you could do it on a mortar like that for a long time so you have some uniformity if you don't have access to electricity which chances are you're in the outdoors and you're doing this or something just use your mortar that could be a first step in the process it's actually pre grinding this and then putting it in the actual or pre what's the word for that and then passing it to your actual grinder but in this case for the purpose of time because I really want you to see this whole process we're going to grind it here and cover it and then just because this is the part when it's good to have a mask because there's some whole kind of storm happening inside your grinder sometimes I occupy myself with doing something else and that's starting to kind of if I open it right now look what's happening here do you see that? so all your pigment is kind of escaping so excuse me for that thank goodness we're outside I'm going to let that kind of settle so now that I ground my pigment here I usually pack them in these tiny bottles that are also very cute and I use a funnel for that so that's what you do with your pigment this is one step of the process that's if you want to collect your pigment and save it for later use but in this case we actually want to turn it into watercolor paint and for that I bought this piece of glass at a glass store I had some sandblasted glass that's how you ask for it because the sandblasting adds grind to your what you're going to do and these I bought online as a glass molar that's what it's called a glass molar they also have the ones that have a bigger handle that are so great to work with that they cost a little bit more so I only have like the cheaper version you could also use the weights for fermentation that look like this too and if they're completely flat they work what you do is you pour down a little bit of the pigment for these I'm not measuring I'm just eyeballing because it's more about how you feel the pigment is some people are super technical about measurements I'm not so forgive me for that if you're the type of person who's super technical you can do this in a very technical way so let's do it and let's just feel it the only thing that really has measuring is this substance and you have the recipe and there's other things that I really need to measure like the alum and the sodash you really need to measure that because if you change the ratio it affects your end result but these two things are the only two that follow the recipe the other things is more about experimentation and then this medium, the watercolor medium watercolor medium and there's a recipe so the recipe calls for honey winter green oil or clove oil a lot of gamarabic water and a little bit of glycerin vegetable glycerin that's my recipe for the medium that makes your pigment flow a little bit of that medium and put it in there for these I had a painting knife all the things that I need is the pure that I need them so what I'm going to do is I'm going to start mixing the pigment with the medium here what we're going to do now is grab the glass molar and this is the most satisfying thing to do and what you're going to do is you're going to start grinding the pigment like this to the minimal expression of particle grind it grind it grind it this I think feels to be the sound is pretty yeah it sounds like soft right so this is one you can tell okay this is ready to be packed so what we'll do is we're going to put a dot of these in this little card and let it dry and that's going to be your dot card anyway all these particles are not dissolved but you know that they can dissolve if you just make the effort to kind of dilute it here


alongside Kevin Durant Kevin we know these games aren't going to be easy but how good is it feel to start this longest road took of the season with the W. Yeah it feels good I mean it's our first half for us but I thought that third quarter was incredible getting up 16 and you know a team at home they gonna make a run and I think they did a good job with just staying with the game and making it a game late and we made plays late Blake was huge that tip out in that charge really won the game for us so it's a good grind I win you know we made it harder on ourselves but we stayed focused let's talk about that third quarter you guys had 39 points in the first half then 39 in that third quarter what was it different I mean we moved a basketball I mean they shots I mean you know they were giving us a lot of open looks in the first half that is just didn't go down and you know we we stayed with our defense and I often start to come around you broke a tie with Kyra Irvin and Richard Jefferson tonight franchise record nine straight 20 point games to start a season clutch shots down the stretch how would you describe how locked in you are right now to start this season I feel like I missed a lot of good looks I think I was 12 for 27 today I feel like I could have been 20 for 27 you know so I feel like I got a lot of good shots I got to my spots tonight but I was I was happy I was able to make a couple shots down the stretch force 29 points congratulations on the win thanks as always


I'm trying to be politically correct.  No, I do not know you're very good at bringing out the worst It means that's why you're the president, right? I gotta be presidential. You're gonna be president. Yeah, I mean and I getting soft on you. All right No, I'm not getting soft, but I'm old we 34 now 34. I'm an old man. Yeah I mean, I there's a lot going on the man is fair There's a lot of guys who I just think let me be politically correct semi be semi semi politically correct I think everybody should just genuinely be looking to be as honest as possible as Individuals and I think a lot of the reason why they lie is because they feel like they wouldn't have a brand or they wouldn't be able To say anything if they told the truth and that might be true But however that you could still come at it from the angle of and this is one thing I know you're not a fan of Rollo. I'm gonna stick up from to a degree Rollo doesn't say he's out there slaying pussy, right? He says look I am a theology. I look in the theology of it I look at the the study of why I think certain things happen. He's a keyboard warrior. Yeah, but he's not saying I'm out There a playboy really he's saying look this is what I believe the theory is so you can't hate on him for saying Look, I'm a theorist. Here's the theory.  Sorry 16 year old women or 18 year old women. Whatever the law is in America 18 It's 18 usually married at 16. All right in Romania 16.


A new quarterback in freshman Brandon Alt, new coordinators and a brand new season of Bemidji State football kicked off tonight as the Beavers hosted northern state in the season opener. Bemidji fans pumped to cheer on their Beavers also win some free pizza there. First quarter Beavers up three to nothing, the freshman Brandon Alt shows why he got the job, finds Landon Jones deep down the field. He trots 77 yards for the touchdown. Beavers go up 10 to nothing. The four half time is 10 to three. Alt finds Manny Kugma over the middle of the field, stays on his feet and hits Paydirt. BSU up 17 to three. In the second half, Beavers up 17 to 10. They give it to Andrew Lakowski. He was on and off the field in the first half with an ankle injury but giving it all he's got. That's a 58 yard touchdown. Comes up limping at the end. That's a lot of heart there from Lakowski. Fourth quarter of the icing on the cake. Alt to Jacob Anderson. Pitch and catch from 40 yards out. Three touchdowns for Alt today as BSU opens up with a strong 38 to 17 win. If you enjoyed this segment of Lakeland news, please consider making a tax deductible contribution to Lakeland PBS.


Hey, Psych2Goers, welcome back to another video. Are you worried about your bond with your partner? You feel like your relationship isn't as strong as it was before. Or are you still single and want to learn how to build a strong relationship with your future partner? When you've been so accustomed to being around your partner after dating or being married for months to years on end, you may feel that a once-solid connection has gone cold or stagnant. But worry not, because there are a number of ways to keep your relationship strong. And while many people may tell you that communication is key, and it is, here are some other, perhaps more specific ways to help strengthen your relationship between you and your partner. 1. Spend time together without being distracted by technology Have you ever been to a restaurant with your partner but spent most of your time on your phones? It can happen to the best of us, whether it's scrolling through our Instagram feeds or checking our emails. It's no secret that we're beyond hooked on our smartphones. However, while the issue may seem harmless, the problem can add to relationship strain, particularly to married couples. A New York Times article from 2016 points out that while men and women are equally as attached to their devices, women in partnerships react more sensitively to it. Dr. Susan Heitler, author of Prescription Without Pills, noted that one of her clients, who was fearful that his partner was unfaithful to him, reacted to his anxiety by retreating further into his smartphone rather than facing the issue head on. So, a good way to strengthen your relationship may be to make a conscious effort on the conversations in real time, rather than the ones on your phone. 2. Ask your partner something new When was the last time you asked your partner a deep, out-provoking question? When you get so used to being around someone, it's common to think that you know everything there is to know about them. But the truth is, human beings are ever-evolving, and there's usually more beneath the surface that could be revealed. According to the website, GoalCast, open and honest conversations can further serve a couple by eliciting feelings of trust, understanding, and compassion. These conversations can allow you and your partner to have a clearer idea as to why the other thinks and behaves the way they do. It also gives each partner the opportunity to be empathetic and good listeners. 3. Look into each other's eyes more Have you ever actively looked into your romantic partner's eyes? It's been shown that sustained eye contact, meaning a few minutes or more, can foster feelings of intimacy, connectedness, and vulnerability. Even more powerfully, according to the website, Mind and Spirit, looking into each other's eyes more can create the feeling of really being seen and acknowledged without distraction. While it may seem unlikely that the common couple with busy schedules would just take time out to stare at each other every day, the act alone of increasing eye contact and unsuspecting moments can have a transformative effect. 4. Small acts of physical affection How often do you show your partner physical affection?  A 2003 study which surveyed 295 college students showed that there's a direct link between the amount of physical affection in a relationship to the overall relationship satisfaction. The correlation was simple. The more physical affection there was, the more satisfied couples were. 5. Cooking and eating together Do you spend time with your partner in the kitchen? Cooking together can be an overlooked way to strengthen the bond with your partner because sometimes it can be logistically difficult to do. For example, you and your partner may come home from work at different times, but making a conscious effort to make a meal together can be the perfect opportunity for you both to share stories about your respective days, to banter and simply work towards something together. Then don't forget the playful splash from the faucet that always adds just a little bit more fun to the process. So what other ways have you tried to strengthen your relationship with your partner? Let us know in the comments below. If you found this video helpful, be sure to like and share this video with those who might benefit from it. Don't forget to subscribe and hit the notification bell icon to get notified whenever Psych2Go posts a new video. The references and studies used in this video are added in the description below. Thanks for watching and see you in our next video.


గానికిక్డమర్ల్ ఈదినిలాల్ల్ల్ గానితిినిమర్ కురిరారారారాని యమనూవస్తూవాని వినారిమచ్ నికూవతిమయానిమకి విహ్టికివరార ఇపరలత భాది హనిక్లి ఍ద్లోటాండిరాలినినిషిం విరూడాందిదుని. అరివండినికై సంవైలి కిసర్రి నిరంనతికలిరి ۧ۰ ۶ ۹۶ ۶۸ ە ۮ ۉ ותר ۪ ۪ ۸ ۶ ۉ ۖ ۛ ۼ ۖ ۉ ۮ ۜ ۯ ۫ . ۚ ۚ ۛ ۛ ۚ ۚ ە ۚ ۚ ە ۔ the� only in summer, in winter, especially in cold countries, in winter season, they cannot come out because they can't tolerate cold temperatures. So what do they do? They collect enough of the stalks which is sufficient even for them to survive the winter. So in the winters what happens,they get confined to the dark chambers of the anthill,they confined inside,they cannot come out,it will be chilling cold out there,bone chilling cold out there. So what goes in the mind of the ants at that time,when they are going through the hard times,they are going through difficult winter time, when they are confined and locked down inside the anthill and unable to come out, what would be the mindset, what would be the search of the anthill, please write your answers in the chat box, I want to see your answers, great, trying to improvement, fantastic why this winter, why this cold, we are not like humans, we don't have sweaters, we don't have, you know, rugs and all that, why this winter at all, Bhagawan, if winter, winter nahi hota tha, kitna ancha hota, if winter, you know, why this winter, why this winter, no, no, when they are going through the difficult winter, my dear friends, some people are writing, some day late will come again, yes, and survival, yes, when they are going through this winter, when they are going through the difficulties of this winter, the confinement inside the chambers and when there is such a biting cold, they don't think of winter, when they are there, wow, the summer will come, the bright sun will come, and we all will go, we will sing and dance and we will collect our food, yes, the sunny days will be coming very soon, so when they are going through winter, they think of summer, they don't think of winter, they think of summer, that's all, look at their philosophy, amazing philosophy, and they happily, because they are happy, they think of the good times they are going to get, definitely good times will come, my dear friends, to you, to me, to all of us, we shall overcome the present situation and good times are coming, let us put our focus on the good times, let us not bother much, let us not attract corona into our lives, let us not attract corona, thinking about corona, thinking about all this, thinking all the time, let us not, let us think about the good times, let us be positive, let us, you know, that's how we attract good things into our life, my dear friends, yes.


Guys, that was one hell of a direct, if I can say so. I mean, I have seen a lot of people complaining about this one, but I suppose people have different opinions and different tastes in games, but I feel like, and I got this a lot in my inbox also, this is the direct that was made for you, Isha, because there was game after game after game that I'm like, I'm getting this one, I'm getting this one, I'm definitely reviewing this one. It was just non-stop. I'm like, when are they gonna stop with the game style for me in this direct? They just never stopped. And the ending, oh my god. I mean, I think I can speak for everyone when I say the ending was good. Why did you have to do that now? Okay, so when the direct happened, I wasn't even at home, so I grabbed the pen and paper at the place where I was at, and I wrote some notes, so I'm gonna go over the direct with you. My highlights at least. And if you have the same taste in games as I do, you will love what was shown and announced in this direct. Now, they start out with Fire Emblem Engage. I wrote in my notes their gorgeous graphics. I truly enjoy what Fire Emblem does with their graphics.  Sort of cel-shaded style going on, and if you know me, I love cel-shaded style at anything that is going in that direction. Gorgeous graphics. This Fire Emblem game has the tactical combat that we know from the main line of Fire Emblems, which I can appreciate. I did very much enjoy Fire Emblem 3 houses. Still recommend that game for everyone, if you haven't by that. So this one, I'm definitely gonna review. There were new and old characters, and a hub area from what I could see. You could change your clothes, and it is having its release date January the 20th next year. Then they announced it takes two, which is coming to the Switch, but I have no interest in that game. Then they said a new Fatal Frame game will drop to the Switch. I have the first one that was dropped to the Switch, but I have not played it a lot. It's a horror game with a girl and a camera, and this one apparently was a Wii exclusive in Japan from what I heard. It's now coming to the Switch. And then we have the Wave 2 of the Expansion Pack for Scenoblade Chronicles 3. And you know what? Someone asked me, is the Expansion Pack for Scenoblade Chronicles 3 worth it right now? And I said no. I was just being honest. No, it's not worth it right now. And still with what they have shown in the Wave 2 of the Expansion Pack, no. The main game is where it's at still, if you ask me. There's a new SpongeBob 3D platformer coming. I have tried the Bikini Bottom one and I didn't like it. But I do love 3D platformers, but I don't like SpongeBob. Fitness Boxing. I am not interested in sports games. Toonic, which is an isometric action-adventure game with traps and puzzles, very Zelda-inspired, and I heard over at Nintendo Life here on YouTube that they know the developer of the game, something like that, which is funny. And it took like six or seven years to develop this game, so I will play it. I think it looks cute. Now we are getting into some surprises. I was very surprised when I saw this one. Harvest Moon, a wonderful life, is getting a remake. What? This game. I did a review on this, and I had forgotten all about that, that I did a review on my channel, probably five years ago by now. It's a game that I grew up with. I played this game a lot while family was watching, but from my memory, it was not the best farming game. Actually, I didn't grow many crops in the game. It's more about, in my opinion, the farm animals. And it is really easy to conquer your spouse in this game, is what I remember. Also, some tragic stories happens in the game, but it's a very mysterious game, and the music is very memorable. It's getting a remake. Did not see that one coming. It changed name to Story of Seasons, but you know that. It was called Harvest Moon. That's coming out in summer 2023. Now Splatoon Splatfest. I have never attended a Splatfest, but Nintendo did send over Splatoon 3 to me. I have not opened it yet. But what do you guys think of Splatoon 3? Let me know down below, and I will read every single comment. I know some people are hardcore fans. Now Nintendo did also send over a hoodie with Splatoon 3. Super nice. Thank you, Verksalala. I love hoodies. So they sent over this one. And a bag. This one. Octopath Traveler 2 from Square Enix. Square Enix was on fire. I have only tried Octopath Traveler 1, so I'm not excited about Octopath Traveler 2. But it is a big RPG with intertwined stories between eight main characters. Now, a game that I will play. This one I am excited about. Faye Farm. It is a farming simulator with spells to grow your crops. And it has multiplayer, where you can farm together with your friends, collect stuff, and you can be doing crafting and customize your home. All the elements that I enjoy in a good farming simulator. I'm looking forward to this one. I will be playing that on day one, and it is coming out in spring 2023. Then we have theater rhythm. Not interested. Sorry. And Mario Rabbits, a new one. But this one had some sort of RPG elements in it. It is called Sparks of Hope. I am not going to play that. Not interested. Okay, so here is my second what just happened moment. What actually just happened. Rune Factory 3 Remade on the Switch. I have been going on and on about Rune Factory, and I have said that Rune Factory 3 is the only Rune Factory game that I don't have, and I have never played, because it's so expensive on eBay. Impossible to get a hold of that copy. And subscriber of my channel sent over the cover. But it is impossible to get hold of the game. So I only have the cover. So this game is coming to the Switch. If you're hearing noises right now, that is my cat. You like to be down here when mommy is working. I was legitimately surprised. I'm just looking forward to this. Now, there's one other thing. Actually, when they talked about this one, cool, I will get it, all of that. But then they showed Rune Factory, and then they said a sentence, and I wrote down the sentence, because it makes sense to me. A new Rune Factory series will launch in the future. A new Rune Factory series will launch in the future. What do they mean with this? Another genre. A subgenre from the already subgenre of Harvest Moon. I'm intrigued. More N64 games. Mario Parties, Pokemon Stadium 1 and 2, 1080, Snowboarding, and all of these are, if you have the Switch online expansion, which I do recommend that you get because of Cloudsaves, and the N64 and the Super Nintendo and all of that stuff that you get. And then they said GoldenEye will be having online play.  Then there was a game called Various Daylife. This is Square Enix, and I will not be playing it. Okay. This is what I have gotten in my inbox for the past day now. Esha Gaming. Did you see Atelier Risa 3 being announced? This couldn't have come sooner. I'm so looking forward to Risa 3. You guys know that Risa 1 and 2, I love those games.  They are not just cute graphics. They are complex with this crafting system. And another thing, the Risa 1 and 2 crafting system is my favorite crafting system across all Atelier games. So I'm soon having three Risas, sort of thing. I rolled down Flying, question mark, and Riding on Sea Creatures, question mark.  Is this gonna be an open world game? Looking really good. And all of the friends in the gang, they have this even more mature look to them. I'm looking forward to meeting all of those guys again. Claudia in particular. This one is coming out February 24th of 2023. As you have noticed, a lot of the games announced in this direct are for next year. New Mario Kart tracks peach gardens in particular from the DS era. I do play the new tracks with family watching. Nintendo Switch sports update delayed. Oopsie. Peek Me In Bloom, I am not interested, but it is a GPS based phone game and a step counter, probably for the people that really enjoyed Pokemon Go. Peek Me In 4 announced title screen, not excited. I have not played any Peek Me In game. Harvestella, live simulator RPG with a demo out now. Demo is currently downloading upstairs, which is also a Square Enix game, because like I said, Square Enix is on fire these days. And this one is coming out November the 4th. I will talk more about that really soon, because I'm gonna try the demo first. But as you can see, it is a Isha gaming approved game sort of thing already. Very good. Bayonetta 3, I am not interested. Now, Raincoat is a game by the creators of Danganronpa. Anyways, you play as an amnesiac detective, solving unsolved cases where you just gather a lot of clues and evidence. I love the graphics of this game. And I know the writers of Danganronpa are really good with storytelling. Resident Evil Village is gonna be playable on Switch. In the cloud. What do you guys think about cloud gaming? I see the Switch is trying to dip their toes into cloud gaming nowadays. I mean, the obvious con to cloud gaming is that you gotta have a good internet connection. Leave a comment down below about that. Okay, then we have Final Fantasy 7 reunion. I am not interested. Tales of Symphonia remaster, and I wrote question mark again question mark. Is it being remastered again? Or is it the same remaster that I already have? Which is this one. Already remastered. It was originally a GameCube game. But this made me think, are they forgetting the sin of the series? A lot of people are saying that Tales of Symphonia 2 is the worst Tales of Game. They did not say anything about that. I will not be needing this remaster because it's excellent on the PS3 already.  But another Kirby game. Another one. Again, how many Kirby games are there now? And this one, they are remaking an older one, which seems to be a theme somewhat anyways. Which is Kirby's Return to Dreamland Deluxe. I wrote down really cute graphics and it has a bunch of multiplayer minigames along with it. I am not a big fan of 2D platformers, but if I'm gonna like some, it would be this sort of game. And then they told us the title and release date of the Breath of the Wild 2 sequel. 2 sequel. Also has been codenamed Breath of the Wild 2 for a century now. And it is called Tears of the Kingdom. It's kind of an unfortunate name right now if you are watching the news. The United Kingdoms. But anyways, they just had to go with that. We only got about 10 seconds of somewhat gameplay-y gameplay where you are seen jumping off this kingdom in the skies. Kind of like Skyward Sword vibes going on. We knew that. And you travel up and down from the kingdom in the skies and then down, oh we don't know. But the release date is said to be May 12th next year. They have a hard date now at least and I don't think that they will pull out on this date now. That would be embarrassing. So now we know when it's coming. I wish there were more gameplay shown, but the entire world wished that too. So guys, what did you think of that direct? Are you as disappointed as a lot of YouTubers currently are? Maybe it was a lot of focus on farming simulators and Italian and farming simulators and live simulators and a bunch of remakes. But I think, guys, personally, that this is the best direct I have seen in all memory.  I enjoyed and I loved this direct. I feel like it was catered towards me in particular. I have so many games now to look forward to. It is an insane time to be alive, guys. That's what I think about the direct. Leave your thoughts down below and I will try to be active in the comments section. Now in the ending now, I'm gonna open something I got in my postbox. It's a package from New Zealand, Britta. You know, in edit right now, I think I spent a good five minutes opening the package, but you will never know that because of editing. Oh my God, now everything makes sense, guys. I had no idea who this was from. I did not connect the name. My cat. Sorry about the noises. My cat is going nuts. But yeah, I remember this now. Thank you so much. Food for dogs sent me over her beautiful pin. This makes me so happy. This is a YouTube friendship. This is what makes YouTube fun. The friendships that we develop on this platform. It's a food for dogs enamel pin. Dear Irene, I hope you like the pin. A small token of my appreciation for your YouTube work and collegial positive personality, Britta. Fantastic. I absolutely adore this. Thank you so much. I love your YouTube channel. Shout out to Food for Dogs. We have the same taste in games and I am sure she's just as excited as I am about this Nintendo Direct. Thank you, Britta. Really good. I was surprised now. Now, I hope you guys enjoyed watching the video podcast that we just dropped. Keep on listening to Diskadesk and I will see you later, guys. Yes.


Hi, I'm Caroline, and today I'm at the Science and Tech Museum. The museum is currently closed, but there's lots of action happening here today. Gordon, what's actually happening today at the museum? Today, as the museum is closed, we have two periscopes in the museum that have been on display and are very popular with the public since 1969. We're going to be renovating the roof, removing the roof, so the periscopes, because they're from submarines and they go straight through the roof, we have to take them out in order to safeguard them, and they actually will be returned to the Department of Marine in the United States. The periscopes are about 14 meters long each, they weigh about 1,000 kilograms, and we have to do one piece, and they have to be collared and then raised straight up the roof and then off onto a flatbed that's waiting here.


In this discussion we will discuss the discussion question of list and describe what is needed to create the statement of cash flows. If we see a discussion question like this and we don't know exactly where to start we may want to discuss what the statement of cash flow is and then how it's constructed. Support Accounting Instruction by clicking the link below giving you a free month membership to all of the content on our website broken out by category further broken out by course. Each course then organized in a logical reasonable fashion making it much more easy to find what you need than can be done on a YouTube page. We also include added resources such as Excel practice problems, PDF files and more like QuickBooks backup files when applicable. So once again click the link below for a free month membership to our website and all the content on it and in doing so we're probably going to be end up listing what we use in order to construct it. So a statement of cash flows is going to be one of the major financial statements including the balance sheet, the income statement, statement of equity, statement of cash flows. So we're going to put the statement of cash flows together. It's going to be a representation that's going to show the change in cash or what the activities are that make up the change in cash from one period to another. So what are we going to need to make the statement of cash flows? Then we're going to need the two time periods. We're going to need at least a cash flow of course or where the cash was the beginning of the time period and where it is at the end. So because that's what we're looking for that change. Now that'll typically be found on the balance sheet. We're going to need the balance sheet from the current year but also the prior year. So we need probably a comparative balance sheet. We need to be a balance sheet from the prior year and the current year so that we can see the differences in the cash account. Now that's going to be our major tool as well because we're really going to oftentimes look at the differences basically in all the balance sheet accounts. So we're kind of backing into the change in cash, the activity in cash by looking at the change in all of the balance sheet accounts. It's going to be a typical method that we will use. So oftentimes we will take that comparative balance sheet possibly make another worksheet from it. So we may need a worksheet then that we're going to put together from the comparative balance sheet. Now the comparative balance sheet is what we need. The worksheet is probably what we're going to make from a comparative balance sheet taking that information and put it into a format that will be most easily used to create the statement of cash flows. That will take us, that will give us the balance sheet items from one period and compare them to another period and then give us a column that will give us the difference between every line item on the balance sheet from one period to the next meaning the change, so we'll have a change column. That's what we're going to use. That's what our worksheet will basically be formatted in order to help with the statement of cash flows. Those are the primary tools we're going to need. Now we also want to have the income statement because the income statement is going to help us to determine many factors within this. So the income statement note is showing us activity on an accrual basis rather than a cash basis. So when we take the change in the balance sheet accounts we're going to try to figure out what the cash basically changes. The income statement gives us some information because it's going to give us that information, the activity that happened on an accrual basis which will be useful as we work through the process as well. Now there's going to be some items that's not going to be enough. The financial statements aren't going to be enough. For this reason, by the way, we typically do the cash flow statement last so we would do the other statements first. The income statement, the balance sheet, the statement of equity then we typically do the statement of cash flow using those prior statements to help with the statement of cash flows. We're also going to need more information and in real life, clearly we would just know where that more information is as we construct the statement of cash flows. For example, if we see that there's a change in equipment we're typically going to say, well, there's a change in equipment that probably means that we purchased or sold equipment but there might be more detail than that. We might have financed the equipment. We might have purchased and sold multiple pieces of equipment. We might have purchased and sold equipment. So the change in equipment, so things that deal with the financing and investing activities are often things that we have to dig deeper in and find more information about because just the change in the balance sheet account isn't enough. Now luckily those types of activities, there's not a lot of them meaning if we look at the detail for the purchase and sale of equipment it's not going to be a whole lot of activity as compared to if we looked at the detail for like a counts receivable or something which is something we do every day. So what do we do in practice then? We would go through the GL account for equipment and see all the activity related to it and then we would go into the individual journal entries for each of those line items and look at the transaction and then figure out what actually happened in terms of a cash flow. So that's what we would do in practice. We would have more information including possibly the GL for certain accounts and then possibly transaction detail journal entries and backup documents so that we could figure out what the journal entry was. That would be the case for something like equipment. Possibly loans are going to be another area where that's typically the case. If a loan changed, there might be a lot of loans that happened.  Did we receive a loan? Are there multiple loans in one account? So again, there shouldn't be too much activity because we don't take out a lot of loans. We're not taking out a new loan every day, hopefully. So we can go back and figure that out. So we're going to need that added information. In practice, we would kind of know that we'd have to take a look at the GL and look more deeply into the activity for financing activity changes and investing activity changes. In a book problem, of course, they'll have to give us that added information. They'll give us the comparative balance sheet. They'll typically give us the income statement. And then oftentimes added information, which in practice we would get from a GL, including activities related to financing and investing activity changes.