What's up, GodsRocks and 34 back with another video. We have the final 10 of our 12 Tins. The Blue Eyes, White Dragon 10. At the end of this, we're going to go over every poll we got from these Tins. All 12 of them. We're going to see how we did on our $3,500 purchase. Pretty epic. Also for the giveaway. Let me get away with these three cards. Drop-off from Legacy of Darkness. We got a Mystical Knight of Jackal from Dark, what is that Dark Revelation one? Yeah, there we go. Darkroom and Blackmare 1st Edition from Veronica Guardian. Like the video, be subscribed and let me know. How many foils do you think we pulled from the 12 Tins? Not including the promos. So not including the 12 promos, just other foils. How many you think we pulled? You can go back and cheat if you want, I don't care. Or you can just guess. It's more fun if you guess because it's not really an award for winning, you know? Alright. We're also going to open up two OTS 13 packs, not 14. Let's see if we can pull a Book of Moon real quick and then we will hop into the Blue Eyes tin and hopefully pull something epic to end it off. Form the Synchron nice and a Where are Thou? I think Form the Synchron is pretty nice, as a common. Next pack, OTS 13, can we pull an Ultimate Rear, Exceeds Unit, Dimension Fortress Weapon and Deep Sea Diva, nice one. Pretty good pulls out of those two. Alright, now let's hop into the Blue Eyes tin. Let's see what we can pull from the legendary Injuno Destruction or whatever it's called. Alright, it's actually has some, this one's actually sealed really well. Oh, there we go, there's a hole in it. Perfect. This is actually one of the best sealed ones of all the tins though. So I'm definitely, you know, destroying the value on this. That's okay, that's okay. Here we go. Blue Eyes White Dragon, after the gear free tin I'm more optimistic. Here we go Promo, near mint. Let's do this. Oh, okay, not incredible, not incredible. But it is better than the other Blue Eyes out of the 25K special, check that video out. Definitely better condition than that one. So I'll take that. This one is, yeah, probably light play with all that, but that's okay. It's not like Mod Play like the other one or worse, that one I think maybe was even heavy play. Alright, Blue Eyes White Dragon set up there. Let's see what we can pull our final packs from 2003. Let's start with Labyrinth of Nightmare, last night, not last night. Why not? We got a sweet pull out of here. We got a Seeker Rare, our only Seeker Rare I think from these tins. Lightning Conqueror, can we start off hot again? Dancing Fairy, let's not have another dud tin in it, come on. Wormdrick, we had Wormdrick last time. Amazon Archer, come on. Destiny Board, start them off hot, okay. Another Destiny Board, F, F in the chat, hopefully not an F in the chat, I hope. Last time we got an L in the 25K, well not last time. In the 25K we got an L and it did not bode well. This time we got an F, so not good either really, but so pretty cool. We also got another Swordsman of Lancet. Pretty awesome. Pretty heavy maiden. And Saint Joan, almost dropped that but I caught it. Good start guys, Destiny Board, I'm taking that, that is epic. Pharaoh Servant, has not been too kind to us, I think we pulled Noble One of Cross Out and that was it, I think for all 12 tins, well 11 because we haven't opened this one yet, but so far we are 1 for 11, not too good, that is better ratios than 1 for 0 for 21, but still not great. Here we go, three headed Gido, Infinite Dismissal, Mubonic Vermin, seven completed, Skull Invitation, last time we had an Error Pack out of Pharaoh Servant which was pretty awesome, Harpy's brother, always good to see that one. So no Error Tins, no Error Pack, so we did get an Error Pack as well out of Pharaoh Servant, that was another cool thing it gave us. Magic Ruler, Magic Ruler with the Spell on the inside, pretty cool, pretty unique I think for these 10s, I think it's only in these 10s that it was like that. Here we go, Turtle Oath, you see Spell, MRL, pretty cool, this is not an error though, they're all like that, Twin Long Rods, number 2, Course of Sanctuary, Mechanical Snail, Giant Trunade, I'm taking it and that's really cool because it has the Spell on it, it says Magic Ruler or MRL but it has the Spell so that's super cool, super rare, Giant Trunade, we got the Giant Turtle who feeds on flames, very nice, very nice, so we've got two foils already, these 10s are so much better than 25k ones, so funny, Blue Eyes is actually true as well because that's where we got the Blue Eyes White Dragon in the video. Alright Metal Raiders, come on Metal Raiders, give us something epic, we've only pulled like Magic Jam, we pulled Suijin last time, that was pretty cool, can we get a Skull, not a Skull, Summon Skull, there we go, Gay Guardian, Time Wizard, Solemn Judgment, Barrel Dragon, like any of those, those are awesome, there's more that I didn't even say, Disc Magician, Rabbit Horseman, Steel Scorpion, Little Chimera, oh man sort of deep-seated, Pump King, The King of Ghosts, Guilty of the D-Night, I just want something from Metal Raiders so much, the good thing is, spoiler alert, if we open some 2002 Tins, let's say we maybe do that, they have two Metal Raiders packs, that's gonna be pretty cool, alright, Legend of Blue Eyes White Dragon, the last pack, our last chance at fire, here we go, can both Blue Eyes Tins have a Blue Eyes, no, there's zero chance, I'm just gonna say it now, if it happens, I'm gonna get accused of, accused of, why does this feel really skinny, this feels like there's long enough cards in here, alright basic insect, ray in temperature, watch it up be an error, no foil or rare, Dragon Treasure, Fire Yaru, and hit the like button for luck, Arm Ninja, okay, there's definitely enough cards, Lesser Dragon and Masaki, alright, so pretty good tin, compared to the 25K Tins, this was a fantastic tin, let's go over what we did get in this video, then we're gonna go over what we got overall, we got two foils and the Blue Eyes, which is about light play, so that's not bad, Destiny Board, that is really cool, Ultra Rare and Giant Trunay with the spell, which is pretty awesome, I'm gonna go over everything we got from all the Tins, it's gonna be pretty cool, alright, from all the Tins we have, some of these are in different sleeves so you're gonna bear with me, we have all of our promos here, alright the Blue Eyes, I'm gonna move that, wait, where's the Jinzo, oh it was right in front of my face, so here we have two Jinzos, then we have one, two Gear Frides, then we have the Blue Eyes, so there's all of our promos that we got, so you guys know those are in there obviously, unless you have some error like DDS, but then for the foils we pulled, we pulled Super Rare Suijin, Super Rare Giant Trunay, we pulled a Kaikyuu, we pulled Fire Princess, Nobleman of Crossout, Mahavilo, or Nisi Aliphantus, those are all the Super Rares we pulled from all the Tins, so that is three, six, seven Super Rares, we pulled for Ultra Rares, we pulled a Destiny Board from Lavender Nightmare, we got a Magic Jammer, we pulled Left Armored for Ben 1, Guy of the Fierce Knight, and of course Blue Eyes, White Dragon, so LOB was actually incredibly good to us, we got three Ultra Rares out of 12 packs, the ratios are 1 and 12, so getting one was about ratio, we got three, so that was incredible, then we got one Secret Rare from all the packs, we got a Magic Cylinder, that's about ratio about, what do we open, 60 packs, maybe a little bit under ratio, it should probably be 1 and 48 or so, we got one Secret Rare, we got four, five Ultra Rares and twelve Super Rares, so we got 13 Foils, so we averaged just over one Foil per Tins, that's about what I would expect, it was just funny that the 25k Special happened to have all the Duds, it had all the Duds in the same video, we had four Duds, there was only four Tins that had nothing in them, the other eight had at least one Foil, but four were in the same video, so it's kind of crazy, so overall we did about what you'd expect from Tins, I can put up the total value on here if I can figure it out, and so what we did, and we definitely took an L, but that's okay because it was extremely fun, hope you guys did enjoy it, and I'm hoping that we can do the 2002 Tins soon, see you guys later, thanks for watching, peace.


My name is Anand Kanagala. I'm a software engineer at Google and not a cryptographer. I am going to talk about a system that's been built over multiple years by a team of cryptographers, software engineers, and site reliability engineers, which underlies a lot of the privacy and security infrastructure at Google. I think some of my colleagues, I think Birdo and Harness, are in the audience somewhere. They'll probably can answer questions that I won't be able to do it. Just to head off any confusion, this talk is not about the Google Cloud KMS, despite the name, the two separate beasts. The Google Cloud KMS is a system used by clients of Google Cloud, whereas the system I'm going to talk about is the Google internal KMS, which is used by systems at Google, including the Cloud KMS. First, a quick introduction to the context of the KMS I'm going to talk about. It's going to be the system in green box here. There's a hierarchy at Google, and that's mapped. There's a parallel set of systems that meet the, sorry. There's a parallel hierarchy of systems implementing the trust hierarchy. So at the top of the thing, you see the boxes in blue. Those are our storage systems. The numbers and parentheses are the set number of tasks that exist at that layer. So there's millions of processes that implement the storage systems. A layer down is the KMS that I'm going to talk about. It's a production. There's tens of thousands of those. A layer below that is the root KMS, and below that is a distribution system for distributing the root KMS master key. And there's a few hundred of those. Again, going back to the top, storage systems, when they are encrypting data, chunk it up, generate a random data encryption key, encrypt the data, write the ciphertext to disk, and then take the data encryption key and call out to the KMS, which will wrap the key and return the wrap key back to the storage system. And so the wrapping is performed using what's done the key encrypting key here, which never leaves the KMS. And similarly, it sturdles all the way down at the very bottom, where we're down to a single key, which is the root of trust. And it's stored in a few physical safes if we ever need to, if all of Google were to restart. But beyond that, it's just held only in RAM and a few hundred machines around the world. So this begs the question, though, right? Why do you want to use a KMS? The core motivation is that code needs secrets, and there aren't really very many good options. One of the things that you'd see in a lot of open services is you store it in a code repository, but that sucks from a security point of view.  Storage and production hard drives is not much better. It doesn't help on the security point of view, and it's an operational nightmare. And you still have to manage all the secrets anyway. So you still need to think. So the best alternative that we've settled on is to use a centralized key management system, where you use our identity process and system identity management system, along with our Borg scheduling system, to manage who gets access to these keys. This allows you to solve this problem once for everybody, for all our systems, right? So you can decide who gets access to these keys. Is it humans? Is it services? Many of our keys are restricted only to services that are built verifiably. Humans will never see these keys. How do you impose this?  You can minimize the amount of code that needs to deal with keys. It's much easier to secure. And the separation of trust, because we're able to exclude any of the lower level storage systems that need access to this. That could even have access to this, right? But what could go wrong? In Gmail, it has something like over a billion monthly active users. And in January of 2014, there was an outage where people weren't able to access Gmail for anywhere between 15 minutes to up to two hours for some people. The root cause of it was that a configuration file for the key management service that I'm talking about was truncated in error. And suddenly, the key management system did not know about most of the keys that it was normally handles. And since Gmail encrypts all of this data using keys that are held by the KMS, nobody could read their email. We always knew, actually, back up. So the hiccup in our system was only about 15 minutes or so. And it recovered. But it led to cascading failures.  So we always knew the KMS was important. And availability was important. But this really got a lot of attention at Google.  And the rest of the talk is going to be about what we learned and how we fix some of these issues. So in normal operation, clients access the key management server through an RPC mechanism. And the KMS serves up the keys based on local config that it has. But the way this thing is assembled is that every one of the teams that uses the KMS, every one of the services run by the teams, maintain their own configurations. And they store them in our version control system, so it's a proprietary. And these are packaged up, merged together, packaged up, and sent out to all of our serving replicas worldwide. And since teams want to make their changes for velocity, we update these multiple times an hour. I think you can see where this is going. We had a problem. Some latent timing issue tickled a bug in the merging code that had been latent for a couple of years. And the bad config, the truncated config, got pushed globally. Nobody had their keys. A lot of the systems went down. So the lessons we learned was that, over time, KMS had become a single point of failure. It had become a startup dependency for many services. They would not start unless their keys were available. And even if they did start, they had a runtime dependency where, if you did not have access to the keys, you wouldn't be able to serve traffic, right? So this led to the realization that the KMS could not or should not fail globally. To achieve this, we ended up having to do a bunch of changes. This summarizes some of the important ones. So we'll mirror the global control plane. We changed how we roll out binaries and configurations. We no longer update changes, make changes globally in under 15 minutes. We've changed it to, it takes at least a week or so before we roll things out, or gradually. We're using the usual 1, 5, 10, 50% ratios. We've also minimized dependencies. And we've had to, different aggressively against our dependencies not being available as well. And also to deal with, at the scale it was just operated at, due to traffic shifts, we had to implement regional isolation so that one of the regions being overloaded or being in trouble, that does not cause it to do the cascading failure into any of the other regions. We had to do this for the KMS. And we had to do it for all of our dependencies as well. So I think we talked about the availability. So these are some of the other requirements that impacted our design. We talked about availability. The number that we were asked to meet was that we needed something like, was that five and a half nines of percentage of the requests that we serve. This is not based on time directly. Of the requests that we serve should be served successfully. So that means that, and this is measured in an hourly interval. So if you serve a million requests, we are allowed to serve five errors in that interval. We serve way more than that by nothing. On the latency side, we, at the 99% of the request latency, needs to be less than 10 milliseconds. After comparison, the reason this number that arrived at is human perception somewhere in the order of 100 milliseconds. And a user level operation may translate into multiple operations at the KMS level. So you need to be able to budget for that. Scalability, well, we need to meet all of Google's needs. That's the thing. I'll touch on security. I'll touch on only one of the security requirements that we have. I mean, I'm not going to talk about all the other ones, as it impacts availability. And that is being able to do key rotation, add scale, and ask foolproof a man as you can. The last one is efficiency, which is what's the performance you can get out of your course. This isn't as important, because if you can meet the scalability requirement, you can always deploy more. It's a cost. And minimizing it will reduce the cost of our service, the footprint and cost of our service. So we already talked about most of the availability thing. I'll touch on the latency and scalability parts of it. So we want to be able to encrypt everything all the data. That requires that you have a highly available service. And the other requirements are scale and latency. So we have a few choices that we can deal with. What is the granularity of encryption? If you have a system that uses a few keys to encrypt a lot of data, you are no longer as dependent on the availability of the KMS. On the other hand, the amount of logging and auditing that you can do is much coarser. And you have to trust the clients to do the right thing. On the converse, in terms of the rate of change, if you could allow clients to manage the keys at these things, you can end up with the different levels in the trust hierarchy. So if clients manage their keys and they can change them much more frequently, that's OK, because if that's messed up there's only a single client that goes down, potentially. And at the KMS level, we manage keys at a much more slower rate, which I mentioned over the one week rotation period, one week change management period. So that combined with a couple of insights, right? One is that if we do this thing one week, at least a minimum of a week to roll changes out, at the KMS layer, the key material is no longer mutable. That combined with the fact that if you can combine it with key wrapping at the KMS layer, we end up with a stateless server for that period of the week. So that allows us to scale trivially. It's very easy to bring up 10,000 instances of these. There is no coordination required between them. And so that's one way of fetching and scaling. In terms of keys, because of wrapping at the KMS layer, we manage in the order of tens of thousands of keys, which means we can hold them in RAM, which implies we can meet our latency budget as well. So that addresses the thing. So what we ended up with was infrastructure for managing secrets, SSL certs, crypto keys, passwords. But primarily, it's a wrapping and unwrapping service that takes the data encryption keys that I've talked about that the storage services generate and wraps them with the key encryption keys that are held by the KMS. And that never leaves the service. So we meet many of the security requirements. It's not a traditional database and storage system because updates happen via the version control system in a completely separate part than the serving system. And you'll also see why this matters further down when I talk about rotation. And finally, it's not a data encryption service because the KMS only deals with keys, and clients deal with the bulk data operation. So we're able to keep our tail latencies under control. So I'll hit on how we meet these requirements. I'm happy to say that we've had no downtime since that outage in early 2014. We serve our measured availability is much greater than 6-9s. And so we serve in the order of, you know, we're allowed to actually measure this in an early interval. We serve trillions of requests, and we serve dozens of errors or so. So many of these are not necessarily due to server-side issues, but anyway. On the latency side, at the 99.9% of most of the request latency is under 200 microseconds. The reason I already hinted at this, we use its held-in RAM that helps and to its symmetric repro, because we handle all of it. We own all the keys. On the scalability side, I'll hit on this. We serve in the order of tens of millions of requests per second. And we use on the order of tens of thousands of processes and cores to achieve this. On the efficiency, right, on the throughput per core, depending on the request mix and depending on the processor architecture running on, we get somewhere between 4 and 12,000 requests per second. I think that covers all the performance requirements I'd like to talk about, the key rotation requirement that we put in and how it impacts availability. The first is, right, where do people rotate keys? Where do you want to rotate keys? The two common keys are key compromise or the cipher's broken, both of which obviously require access to the ciphertext, which is typically access restricted by the storage systems, because you have other storage ACLs of that layer. In any case, if you were able to rotate your keys, you are able to limit the window of vulnerability, whether you detect it or not. And so we end up rotating quite often. But it happens that rotating keys is fairly error-prone. And if you mess up, it leads to data loss, and so which leads to our goals, we want our clients of the KMS to design with rotation in mind when they're designing their systems. That's one of the goals for us. We also want to make it trivially easy to use multiple key versions. So it ought to be no harder to do that than using a single key version. And we want to make it foolproof. It should be very, very hard for them to lose data. And the way we get to do that is that the first one forces our clients to think about what rotation frequency, rotation right up front, they need to specify the frequency of the rotation. What do they want to do every 30 days, 90 days, whatever meets their requirements? And they also need to specify the TTL or the ciphertext that they generate. It could be, there's a whole range of numbers, 30 days to every year, whatever they guarantee. Given that clients choose those, the KMS guarantees a safety condition, which is basically as long as clients do not try to access or decipher or decrypt ciphertext that was produced, that was produced within this TTL window, the KMS will have a key set that will be able to decipher that text, right? So basically, clients generate ciphertext and so up until the TTL, so until the TTL window is expired, the KMS will have a key version that they can use to decipher it. I mean, that's a guarantee that we provide, right? So the first and then the last one is it's, this is tightly integrated with Google standard crypto library, which supports multiple key versions and each of those key versions could be a different cipher, this thing guys, to provide more ability to rotate away in case some weakness in the cipher is detected. So this meets the three goals, the first one is basically forces our clients to design with rotation in mind. The last one, sorry, right? The multiple key versions is met by the third library, third bullet here and we make it very hard for them to lose their data and a bunch of safeguards that I'll go into. So the way we implement this is, there's a pretty busy slide I'll walk you through this. Given the parameters, the frequency rotation and the TTL of the cipher text, the KMS drives a number of key versions that we need to retain, right? And then it adds key versions, promotes, demotes and deletes these things over time. And the generation and deletion of these things is completely separate from the serving system. Remember I mentioned that customers, clients of the KMS manage, define the parameters that they need in our VCS. So we interface to the same system to these things. So we have a separate system that manages the rotation and that interfaces in an identical manner with the serving system. And this thing is rolled out slowly as always. So I'll walk you through this diagram, the weight works. So in the table, K1 through K4 are key versions for a single key. So every time I've used key in the last 10 minutes so I was really referring to it as a key set which consists of multiple key versions. Which any key version can be one of three states. It could be either active, primary or the SFR which is scheduled for revocation. All the key versions, any of these independent of the state, any of these keys may be used for decryption but only the primary key is used for encryption. So in this key set, time goes from left to right. At T0 we introduce K1, it's marked as active. It gets rolled out over a week to all of our tens of thousands of services. And if anybody were to access it, the beginning of the rotation period, one of the services service might have access to this key and the rest of them would not. At the end of the week, all of them would have it. So the next generation period, that key version gets promoted to primary. And again, first day, one person to the servers will have access to this key and you would be able to start encrypting data with it. But because we guarantee, what we achieve is that in the previous time period, we've ensured that that key version is available at all the keys. So even though it cannot be used for encryption, it's available for decryption. So any reader will be able to read data that was written by one of the keys that has access to this thing. Time T2, at the end of the week, everybody would have access to it again, but they have access to the key material itself. At T2, we introduce another key version, K2, a similar pattern. As you can see, it just follows another thing. This is just one of our schedules. There are trade-offs in terms of vulnerability windows and how fast you want to do this. There are other schemes that you can come up with, but this is just a simpler way of doing this. So a couple of things to note. We do not require transactional semantics for key generation, because the rollout ensures that every reader will have access to a key before any writer has used it. So, I'm not sure. So for example, let's see, at T2, T3, and T4 can interoperate independent of which version of the key you said they have access to. And then it goes on, and we introduce a new key, at K2 gets introduced at T2, and then it progresses through the states. And then going back to key version K1, based on the window, the rotation frequency, and the detail that we kind of think. Like I said, I've derived the number of... Okay, and we roll through this thing, right? And the schedule for revocation has held. We hold it for one more generation so that if clients were to use it, they would still be able to access the data, we'd alert them so we wouldn't lose the data. For many of Google's systems, such as Bigtable, the CypherTex TTL is enforced because we keep rewriting the data every time a compaction happens. So one other thing that we need to do is mitigating for hardware faults. Crypto provides leverage, right? It can amplify errors. If you had a single bid error in a wrapping of a data encryption key, you could end up losing a whole bunch of data. And so we need to differentiate against broken CPUs, NICs, twiddling bits, cosmic rays, right? So apart from all the hardware level, ECC and so on that we check something. We also have at the software layer, we verify the crypto ops at startup. We, after wrapping the data encryption keys, we unwrap them before we respond to ensure that we can actually, this is actually reversible. And as storage services end up reading back their data in plain text after writing encryptions, all right? And they also replicate one level up. So even if one region were to go down, you would have it. So anyway, that's a summary. So we need to do this at scale. It's not just the crypto. There's a whole lot of other work that has to go into it before it's usable. And for us, that's meant in a multiple lines of availability. The first few best practices listed there are pretty standard site SRE workflows. I know what you do, best practices. The last few are things that were specific to key management. All right. Now a few links at the back. Thank you. Thank you. Good. Do we have time? Yeah. Great, any questions for Anand? Yeah, Ian. When you're talking about key rotation, are you talking about the data encryption keys being rotated or the key encrypting keys being rotated or the level above that event? In this case, it was the key encrypting keys. So the data encrypting keys generally don't change. The cipher text doesn't change. You just change what they're... So, okay, data encrypting do get changed. Remember when I said every time a block gets redid and let's say because it's being copied or replicated or whatever, you end up generating a separate key. A brand new key. So those get rotated. Those get rotated. Is there any use of threshold crypto for the key encryption key? No. So it's just a single... Right now it's just symmetric. I hope I understood what threshold crypto means. This is the end of... No, it's not. We don't do it. It's just pure symmetric. Okay. Any other questions? What? Why aren't you using threshold encryption for protecting the key encryption keys? I should ask one of my cryptographer colleagues to answer that question. I have no clue. Okay. I mean, it's just being facetious though, right? For our security model, we don't need it. The number of people who have access to that thing is in the order of 10s. It's verified bills. You cannot get access to them. We do use PKI for the service identity management, but not for this. One of my... Bodo might have a better answer if he's around. Ben. Let's take one more question. Yeah, great. For the key rolling over operations, you might have, in your example, you had four different keys in use at one time. Is there something tagging the data to say this was version two of the key, or does the application have to manage which version of the key is used for decryption? Sure. So the question was given that a keyset has multiple key versions. Does the application need to manage which key version was used to encrypt which data block? No, because it's integrated into the the crypto libraries that I mentioned earlier, which has been released in NoPersource. So when the ciphertext is generated, we tag it with the little... It's basically a tag that tells you which of the key versions was used. And it's a truncated hash of the key so you can recover. So you don't have to basically decrypt using all the key versions that you have access to. Perfect, thank you. Cool, great, thanks so much. Thanks. All right, I'll have to catch you.


Senator Lindsey Graham has shown time and again that he is incapable of acting like an adult and he always tends to embarrass himself and act the most childish when everyone is watching during these confirmation hearings for Supreme Court nominees and this time it's no different. So on day two of the confirmation hearings for Judge Contanje Brown Jackson, he made it very clear in a rude and condescending way that she was not his first choice. But he's butthurt that Michelle Childs wasn't the one who was selected and that was his first choice out of the options that Biden was considering choosing and the reason why is very apparent because Michelle Childs is a more corporate friendly pick, a more anti-labour pick compared to Judge Jackson. So he's mad about that and he's going to make it very clear that he thinks her being nominated is problematic. Take a look. What is your judicial philosophy? So I have a methodology that I use in my cases in order to ensure that I am ruling impartially and that- So your judicial philosophy is to rule impartially? No, my judicial philosophy is to rule impartially and to rule consistent with the limitations on my authority as a judge. And so my methodology actually helps me to do that in every case. So you wouldn't say that you're an activist judge? I would not say that. So we'll have 20 minutes more later on, but here's what I would say, that every group that wants to pack the court that believes this court is a bunch of right-wing nuts that are going to destroy America, that consider the Constitution trash, all wanted you picked. And this is all I can say is the fact that so many of these left-wing radical groups that would destroy the laws we know it, declared war on Michelle Childs and supported you, is problematic for me. Thank you. I've got a recommendation, Lindsay.  Her being confirmed is not going to change the ideological makeup of the Supreme Court. You will still have your 6-3 fall-right supermajority. So she's going to vote in the same way that Breyer voted, most likely. And nothing changes. You'll still most likely have your overturning of Roe v. Wade. You'll still have your pro-corporate anti-labor decisions being handed down time and again. So why do you have to have one more pro-corporate choice? Why do you have to make it known that you're not happy with her? Who cares what you want, Lindsey Graham?  Nobody cares what you think.  She is insufferable. Now he is really upset because the every group that wants to pack the court and believes the court is a bunch of right-wing nuts that are going to destroy America, that's true by the way, that consider the Constitution trash, which is true by the way. They all want you picked. She can't control who supports her. How many Nazis in your state support you, Lindsey Graham? Can you control that?  Of course not. So who cares? Why does she have to denounce people? I'm assuming that's what he wants, who support her. And don't pretend like you also don't like court packing because that's what Republicans effectively did over the course of the last couple of years. Mitch McConnell stole not one, but two Supreme Court justices from Democrats. He stole one from Obama claiming that we don't nominate or confirm Supreme Court justices during election years. And then they confirmed Gorsuch. And then a week before the 2020 election, once RGB died, they confirmed to bear it. So you believe in court packing. You just want to pack it with far-right extremist activist judges. But yet he claims he's against activist judges. No, you support activist judges. You've advocated for them vociferously in front of all of us. So nobody believes what you're saying here. And it's funny that he actually thinks it's absurd to suggest that the far-right supermajority on the Supreme Court is going to destroy America when we might literally witness the return to unsafe illegal coat hanger abortions in 2022 in America. And we have one Supreme Court justice, Clarence Thomas, whose wife was in bed with insurrectionists.  So don't pretend to be angry when people call that out. You got what you wanted. So just take the L on this one Supreme Court justice, but he can do that. Now, the issue of Guantanamo Bay is going to come up and he's going to go on a rant, call for the deaths of people being held indefinitely and illegally at Guantanamo Bay. And then he's going to angrily leave. He, again, he is a child, but take a look. On the issue of Guantanamo, there are currently 39 Guantanamo detainees remaining. The annual budget for Guantanamo is $540 million per year, which means each of these detainees is being held at the expense of $12 or $13 million per year. If they would be incarcerated at Florence, Colorado, the supermax prison, federal prison, the amount would be dramatically, dramatically less. Since 9-11, nearly 1,000 convicted in the United States on terrorism charges. Since 2009, with the beginning of the Obama administration, the recidivism rate of the Guantanamo detainees released is 5%. Mr. Chairman, according to the Department of Director of National Intelligence is 31%. Somebody is wrong here. If you're going to talk about what I said, I'm going to respond to what you said. If we close Gitmo and move them to Colorado, do you support indefinite detention under the law war for these detainees? I would just say I'm giving the facts and I want to make sure that it's clear. The 31% you referred to goes back to the year 2009. What does it matter when it goes back to we had them and they got loose and they started killing people? Well, I could just say that if you're one of the people killed in 2005, does it matter to you when we release them? Do you suggest that the president of your own party released them? I'm suggesting the system has failed miserably and advocates to change this system like she was advocating would destroy our ability to protect this country. We're at war, we're not fighting a crime. This is not some passage of time event.   That's a better outcome to letting them go. And if it costs 500 million to keep them in jail, keep them in jail because they're going to go back to the fight. Look at the frigging Afghan government. It's made up of former detainees at Gitmo. This whole thing by the left about this war ain't working. Let me also note that Larry Thompson, who served as deputy attorney general under President George W. Bush or in Kerr special counsel. He is a manchild. I don't know what else to say. And I love how he just denounced the leftists who supposedly think that the Constitution is trash, but yet he's making the case for Guantanamo Bay, basically a constitutional free zone. We're holding people there indefinitely. Do you not believe in habeas corpus? Lindsey Graham, I thought that you are a constitutional purist, but yet you're arguing in support of Guantanamo Bay. He's so inconsistent. He's so inconsistent. And yet he thinks that it is absurd to suggest that Americans feel uncomfortable with the fact that we have far-right extremists on the Supreme Court. Well, we feel uncomfortable because most Americans aren't as barbaric as Republicans, even if they vote for Republicans because of other issues and culture war issues. I think that most people disagree with your barbarity as a party. In Lindsey Graham's home state, they just brought back firing squads in 2022. So in this same year, think about all the things that the GOP has done to prove how ruthless and barbaric they are as a party. In Texas, they're investigating parents with trans children and treating them as child abusers while they simultaneously argue for parental rights when it comes to mask mandates at schools.   Women may have to resort to back alleycoat hanger abortions again in the year 2022. Most conservatives are just against modern medicine in 2022 to the point where they're vocally anti-vax. They outright reject science and climate change. They reject the teaching of history in schools. A sizable chunk of today's GOP delusionally thinks that the election was stolen from a senile old racist in 2020. And again, in Lindsey Graham's home state, they brought back firing squads in 2022. So we're going backwards. We're getting more barbaric with time when most civilized egalitarian countries are moving forward. And it's not always the case that progress is linear, but we've gone back a lot largely due to the far-right extremist Republican Party here. Most conservative parties around the world are not this extreme. The Tories in the UK, they're extreme, but they're not this extreme. The conservatives in Canada, they're extreme, but they're not this extreme. Republicans are off the political spectrum. They are absolutely insane and barbaric. And yet Lindsey Graham thinks it's absurd to point that out.  Republicans are basically feral at this point. They'd like to take us back to the stone ages if they had the ability to do that.   So, I mean, I don't know if I expected anything different from Lindsey Graham. I certainly didn't, but it's just to see him storm off on day two and work himself into a frenzy for no particular reason, for no good reason. You can disagree with people who are against Guantanamo Bay, but to storm off, I just, I don't understand him.  You voted for a man, baby. Congratulations, people of South Carolina.  I hope you're happy with this choice of this corporate clown who gets in there and represents corporate America, not you. Mike is a total shitless. Once he started shilling for the DNC, I stopped watching. So I definitely won't be hitting the subscribe button or turning on notifications by clicking the bell. No way. It's very sad, I know.


Today we will discuss the last part of our unit that is power authority and legitimacy. We will discuss about the relationship between power authority and legitimacy. As we all know that there is close relationship between power authority and legitimacy. Without legitimacy, power and authority become meaningless. Similarly, without power, legitimate authority becomes meaningless. For example, government with legitimate authority but without power may easily be overthrown by a handful of arm rebels. For example, government with legitimate authority may easily be overthrown by a handful of arm rebels. For example, government with legitimate authority may easily be overthrown by a handful of arm rebels. For example, government with legitimate authority may easily be overthrown by a handful of arm rebels. For example, government with legitimate authority may easily be overthrown by a handful of arm rebels. For example, government with legitimate authority may easily be overthrown by a handful of arm rebels. For example, government with legitimate authority may easily be overthrown by a handful of arm rebels. For example, government with legitimate authority may easily be overthrown by a handful of arm rebels. For example, government with legitimate authority may easily be overthrown by a handful of arm rebels. to produce and maintain a belief that the existing political system is the most appropriate and people must regard it as sacred and worthy for respect and obey it unhesitatingly. as I mentioned before, there is no problem or problemlist of a背 disbelieving parliament. As sash of this democracy is Enterprise in tasked to be the one and only one of the most effective smugglers and that particular Congress is to say the price is not for the great majority. investment power which emerges as a result of power and let's be m jedee join it जीभ चैते हो बच़ब ऐसाब उपनिगन्थाDER जा इसकल नम...RI मी चा स्ब अझ़ाए आप ऎक वी लेएम ब向ाی... then this is the common people acceptance their role .. This is called rituals In k itís always thought this way So you can per politeness And from this, we must label it Shwala corps can get good agreement Or not From which we are morning ǒ paarte kowase to thep yō, ʒ'ip paarte ka jaw soute ó teb lo bek hē crumbs, ʒ'ip ātai ke da v di ōkhē ʒ'ip ātai ʃagome, i tue antur pori purok hē ʔi ātai antur labar uttu proto bubé ʔetho acial ఱ్ర్చనాక్న ఆర్ ఇనిక్దత్లురంచార్ ప్ర్చనిల్త్మాదావాట్నార్నిలె.


everyone and welcome. This is Melissa Armo with the Stock Swoosh, and I'm doing a Chinese New Year Golden Gap Course Combo Special. Chinese New Year is going on right now. Again, I live in New York City, so it's a big deal in New York. There's parades, there's parties, there's all kinds of different shows going on. It's called the Year of the Dragon, which has different meetings, and some people say it means there's going to be more prosperity for you this year. And I found that really interesting because I think we've had a great start actually to 2024. I was just talking about this with a friend yesterday.  We've had a lot of opportunities this year, so I'm here for it. If 2024 is a year of prosperity, I am here and ready to take advantage of it all. So if you are someone that's been interested in your following me, you have an opportunity now to join this week, start trading with us. My email is melissa at thestockswish.com. If you want to sign up, if you have questions, you can call me as well, 929-3200 Gap. You can follow me on Twitter, Facebook, YouTube, or Skype. So again, it's the Year of the Dragon 2024. It's here, and I'm doing the Chinese New Year Special, which is going on through Friday, February 23rd. The class is February 24th and 25th. So the Golden Gap course combo tuition is $74.99 US dollars. If you sign up for the combo by Friday, you will receive the following. The stocks will show live trading room free through the end of 2024. The options newsletter subscription through the end of 2024. For those of you that love options, the market report subscription through the end of 2024 and the Gap options course free. The Gap options course is in March. That is a half day course from 11 to 3. It's March 26th. And the Golden Gap course combo includes the Golden Gap, which is February 24th and 25th, and the Trends course, which is 11 to 3 February 27th. So at the end, I'll go over all these specific dates. The combo includes the Trends and the Golden Gap course, which you will learn how to rate gaps. You will learn the rating system. You will learn the 26 points. You will learn all my entries. You will learn the exits. And then the Trends class, which is a half day class, you will learn how to read and determine long-term trends in a stock or the market. So it's a great, great offer here. It gives you pretty much everything you're going to need to get going, get started, trade. And then of course you're going to get the options trades and the live room trades to the end of this year. So let's get into it. As I was saying, there's certain meanings behind different things. And when we're talking about trading, people do trade for various things. Sometimes people trade because they think it's fun. I think any, even if you think trading is fun, you should take it seriously because you're risking money when you take a trade in. It's your hard earned money and you don't want to lose it. So I find that many people decide they want to trade the market, though, because they really want to become more financially independent or they want a second career. For me, it was, it was both, but really I wanted a new career.  You've got to get started somewhere. You've got to learn what to do in order to be successful. You're not going to just wake up one morning trading to have no idea what to do, no strategy, and all of a sudden make all kinds of money. You have to have a plan of action to do it. You have to have goals. And again, you need a strategy. It's about working smarter, not harder. And if you are prepared, not just before every trading date, but before every week, what you want to do, what you want to trade, in what direction you're going to have a higher chance of success. And you want to put the odds in your favor for success. So many people trade the market and have no idea what they're doing. So many people trade the market and lose. I just am shocked actually how many people trade the market and lose, but that's why the odds are stacked in the favor of the people that do prepare themselves and do work smarter, not just harder. But learning helps your conviction. It's good to learn. It's good to open up your mind and learn new things. And you definitely will when you come to me, because in my Golden Gap course, I teach you how to rate gaps. And again, we're going to talk about that in a minute here. So for those of you that are following me that are interested in options and you know who you are, this is an example of what the options newsletter looks like. It has a symbol, strike, expiration date for whatever we're doing and we're buying puts and selling them. We're buying calls and selling them. Yes, I prefer to short. You're mostly short. The class is on shorting, but I will go long. And we have gone long this year, actually in the day trade room and on the options newsletter, a call is a long. But for example, if you sign up for this offer for the Chinese New Year special, you will get the newsletter till the end of the year free with the class. Again, you get this in the morning. You're not taking this trade in the morning, you're taking this trade after the open. Okay, but you are set and prepped and ready to go. And by the way, this trade worked. This was a nice trade. It was a call in NVIDIA and the stock gapped up and it rallied and moved higher. Okay. But for what I do most of the time, you know, whatever the percentage is 95% of the time, 99% of the time, I don't know, it's high that I'm mostly short. And again, we do puts where I'll buy a put and that is a short. If you learn how to short, you're going to also know how to do something that many people don't do in the market or don't do well. So you will have a niche if you're going to focus on shorting, which is one of the reasons for my personal success. And again, learning helps you. It helps your conviction. And when I decided to focus on shorting is because I wanted to do fast trades because stocks fall faster than they rally. I wanted to be done quick early in the morning. And and then I realized, oh my God, a lot of people don't short and they're not good at shorting and they have no idea what to shorten. They're shorting the wrong things and at the wrong places. So in fact, in NVIDIA is a good example where people were shorting that and I said, oh my gosh, this is the last thing I'd short. And again, we went along it. So you'll learn how to do longs and read bullish gaps better. Once you know, understand bearish gaps and shorting as well, because the class, the golden gap class, the main class that I teach, if you want to sign up for it is we're going to, you're going to learn how to short. Now this was a really good short that we did. And again, here is the gap stock close here, gap down. This was PayPal. This was an earnings stock closed up here the night before around 62 and change gap down here in the morning, open, dropped, fell. We shorted this as a Dane trade. Okay. Here was the trade again. You will get the room free with the Golden Gap course combo. Chinese New Year special going on through this Friday, the 23rd, which in which you would, you would get this trade. If you're in the room and calling it 5730 was the entry risk is something that you will determine based on the size of your account and you're buying power. This is a trade on margin. We also did a put in this, but again, you could buy the put the, the room is not an options room though. The newsletter that I showed you in the video, you're going to get them to your email. This is the live room where I'm calling these trades. And then we did an ad at 5780 trouble shares. This was an advanced trader risk average price was 5755 was a good trade. I'm looking for a dollar or close enough in and out is actually kept going though. 5660 was my exit profit was 4750. This was a nice trade. So this is a day trade. You would have to have a margin account to take this trade or you could have bought a put in the room when I called the entry, but I did call a put in the newsletter for this. Again, you will learn in my Golden Gap course how to rate the gap. How to know that PayPal was the short to do in the day to get the play of the day. And then of course you're in the room to get the live call. So let's talk about a little bit more here. What is the gap? A gap is a difference between the close and the open. Simple. Can you buy every bullish gap up? No. Can you short every bullish gap up? No. Can you short every bearish gap down? No. Can you buy every bearish gap down? No. Well, then how do you know what to do? Well, you got to figure it out. You got to find the good ones and there's a lot less good ones than non good ones. In other words, there's there's so many people want to trade all day. No, it's about qualifying it. It's about finding the good ones. And there's not that many. There's enough to do to make money, but there's way more that don't work if you know what I'm saying. So I'm always trying to narrow it down to one or two. One preferably. We can get it. That's all you need is one trade a day and then you add the size. And then you have less losses actually if you have less trades per day. People that are sitting down trading all day long between 934 just lose and give money back in the afternoon. Stocks get most every single day, but not every gap is a good gap or what I call a Golden Gap. And that's what I called my system. I'm looking for the gaps that are predictable. How do I do that? I use my rating system. It's a 26-point rating system and this is what you'll learn in my class, the Golden Gap course. It determines what has a high odds of working. I'm looking for 20 points or more. It's high odds versus gambling. Gambling is bad. Sometimes I talk to people they omit that they're gambling. I'm thinking to myself, well, then why are you doing it? Why are you doing it? Just stop. But that's what people do when they trade. That's you're better off going to just having a weekend, take a vacation, go to Las Vegas, go see some shows, go gambling, have fun, consider it entertainment expense. Trading is something you have to take seriously when you do it, whether it's two days a week, three days a week, one trade a week, five days a week, full-time, like I'm doing it even though it's part-time hours, you still have to dig it seriously. You should not have a gambling mentality if you're doing this. It's going to come back to bite you in the butt. And getting back to what I was saying about the room, we chunk it out in the room. Take the train, get the move, get out. And that's what we do. Okay, so whether you want to do this, again, full-time or part-time, we trade in the morning. The room opens at 9 a.m. We trade between 9 30 and 10. The options newsletters come mostly before the open that you'll have them all prepped and ready to go, whatever you want to do if it's one trade or several trades, and then those are mostly sent out early. Now, sometimes I will call an afternoon options trade, but it's not all the time. It's not even every day or every week. If this is something that you think you want to do and you really want to get serious about it, I'm here to teach you my method. It's a solid method. People are doing extremely well this year. I had in last year in January, I had people that made money before the January class to pay for the class. And again, I have people that have signed up already for this week's class. We'll see what we get this week. But it's been a good year to trade. There's been a lot of opportunities. The video was won. Again, that was a bullish move. PayPal was a bearish move. If you're looking for the market's help this year, I think you're going to struggle because people are talking about what's going to happen now with interest rates. Are we going to go into recession or not? That's one of the reasons the market fell on Friday before the long weekend. So you have to narrow it down to find, like I said, the good ones. Because if you're looking for something where you need the market, you may have a tough year. And again, the market, even if it holds the uptrend, may not go up every single day this year. In fact, it won't. And then people are going to start buying dips. And I think it's going to be a really interesting week, even though it's going to be a short week this week to see where we get tomorrow morning, actually. But don't drown in the market by trading alone. It helps to have a support system. The class is a support system. The room is a support system. I mentor people. They can call me on the phone, email me, ask me questions. That kind of support helps, especially when you're learning something that's brand new. And this is new meaning my system knew, not new that you've been trading new, although it might be. I've taught people that have been trading longer, I'm alive, and they have questions because what I do is unique to me. So you will get the live trading room free through the end of this year. This is huge. If you sign up for this special, and then you'll get to start trading with us, and you won't miss any more time, or any more options trades, or any more day trades, and you'll get the rest of the year to get going. And that is also the support system of getting the live calls. But if you want to work for yourself, if you want to not worry about prices, inflation, or recession, or any of these things, then it's time for you to take this seriously and start getting serious about your own success and saying, I want to do this. This is my dream. I want to do it. Again, maybe it's something you want to do eventually full-time. Maybe you want to trade on the side. Do the class in the weekend, do options, so you can get in the room every day. Make it work for yourself, however you need to make it work for yourself to get started because you may have questions. So again, the process that I go through every single day is I get up in the morning, I make a watch list of gaps, then I read them, and I go through and I read them. And this is what you're going to learn in the class is a checklist. Boom. And you're going to go through it, and you're going to read them and determine what you want to do, where, and when. So the class is called the Golden Gap course. It's February 24th and 25th. And again, 9 a.m. to 5 p.m. Eastern time class, the tuition is $69.99. You can be anywhere in the world and take it. The combo includes the trends. So the Golden Gap course combo is $74.99, which includes two classes. You get a discount if you sign up for the combo on the trends, which is a 27th, 11th, to three classes online. Then the Chinese New Year special, which is running through the 23rd for February's classes. If you sign up, you get all of these things. Again, for one price, which is $74.99, you'll be in for the room for the year in getting all the options. And then the options course in March, which is great too, and the market report. So if you want to sign up for this, again, my email is Melissa at thestockswishedup.com. Don't wait till the last minute if you want to sign up. Again, people already have, and they're going to be in the room this week training. I expect it to be a very profitable week. And think about the meaning of the year of the dragon, prosperity, being bold, and moving forward really with your finances, with your training, with your life. Email me if you have any questions and have a great week everybody.


So you want to get the top one in first, because that one's longer than the top one. You don't want to put this hinge bolt in first before you do anything else, because once again, going backwards, it's easier to put these bolts in when the door is closed. And once again, if you close that with that hinge in there, it's not fun getting out. See how that door will swing on foot if you don't watch it? You got to be careful. The old JKs were notorious for having dents right here from the mirror swinging into that piece there. So just be careful, and that's really the whole of it. Thanks for checking out the video.