Welcome, welcome, welcome. So far I'm here by myself. We will just hang out for a second here in the room. This is not my normal day to go live and so it might turn out to just be a giant bust but I guess we'll find out. Having a great day and a great week if you're watching this either live or the recording. I'm going to be doing some jelly printing this morning and doing some jelly print slash artwork kind of things. Sort of like these. These are just done on plain drawing paper. But I thought to do, and these are happened to all be the zombie doll art foamy prints. I'll be doing different ones but good morning Kathy. And these are just some plain drawing paper but I thought to do some nicer quality paper ones. These are, this is Bristol vellum. So we're going to be printing on some of this Bristol vellum and doing similar style of prints, different designs of course. Again these happened to all be zombies for whatever reason that's all I have left. But I will be creating jelly prints using my art foamies I designed for art foamies, different ones. And then my rubber stamps from my Etsy shop and then of course doodling or drawing on top of them like these and creating each one will be different and then they'll be going up for sale in the Etsy shop for a very inexpensive price. So I'll put those over there. So we're going to do that this morning. I also have a coupon code for you all. So if you don't have a pencil and paper handy never fear because it's in the video description. So if you use this coupon code at checkout in my Etsy shop you'll get 10% off your total purchase. Now there's a few reasons I'm doing this again. Good morning Linda. So I'm trying to reduce the amount of the inventory I have here at the house for the Etsy shop. There's a lot of things I can make on demand or I can have manufactured on demand which is a very much lower overhead for me than the way I was doing it and I need to transition to that. That being said we've been trying to reduce the inventory of stamps and stencils for kind of a while now with mixed success. So I need to continue that. So I'm going to put another coupon code out and it's good for anything in the shop. If you want stamps or stencils this is the time you know use one of these coupon codes to get them. There's still a lot of inventory. There are some designs that are out right now. That doesn't mean they won't ever come back. They will but they won't be coming back until I've done some more inventory reduction. The stamps will be once they're gone and then re-listed they'll be manufactured on demand from and shipped to you from manufacturing. So they'll take a little longer but the quality in anything won't be any less and the price won't be different for you. They'll just take a little bit longer to get. So anyway that being said I mean you know times are tough right now and for everybody and YouTubers and creatives especially so I'm you know doing what I can to raise funds. So yeah 10 welcome. I just got a message that one of my friends got her first COVID jab. So yay! Anyway and if I seem a little off my tone of voice I have an eye doctor appointment tomorrow I am having trouble with one of my floaters in one of my eyes. It's not necessarily a big deal but I have white coats in room and so I am just kind of yeah about it. So anyway I am going to use the Hemi gouache this morning. I'm good. Ahmet how are you? Good morning Kristen. So again if you missed it we're trying to do inventory reduction of the stock of items in my Etsy shop particularly stamps and stencils. So we will continue releasing different coupon codes throughout the coming months. Right now we have 10 welcome. It's good in my Etsy shop for your everything in your purchase so and that pretty much will cover shipping. So anyway we have a five by seven jelly plate here. I've got a pad of cheap dollar store drawing paper to like sort of stamp off on. We'll be doing our prints on Bristol vellum and again these prints will be doodled on and that sort of thing stamped on with some of the rubber stamps and we will be putting them up for sale in the Etsy shop in case you missed all that. Alright so I have what color do I want to start with this morning? I'm feeling in a weird mood so maybe a cheery color and not a depressing color. I'm just glad there's some of you with me because this is not my normal day and I kind of thought maybe I would be sitting here by myself talking to myself again. I think I'm going to start with this sort of gray blue color. I need some water, water, water. So the Hemi gouache are a water soluble paint and you can see they're resistant to the jelly plate which is fine because you get these interesting like marks on the paper when you do the prints. How is everybody today are we managing to stay safe and sane through this whole crazy stuff that's going on? I'm just discombobulated. Sorry you guys. I'm getting messages that friends of mine are getting their vaccinations today and or this week. I'm so happy for them. I like the way these are turning out. That's just one color with water and because it's a water soluble paint it's resistant to the jelly plate and it just gives you this interesting texture. And Linda, I can so relate to that. Safe but not sane she says. Yeah. Ditto. Ditto.  There we go. All right. Let's grab a different color and let's go with this purpley color. We'll do a little bit more of it this time. After we did our last round of jelly plating, I went ahead and got metal tins to store all my jelly plates in which worked great. There is a couple of them on Amazon that work really well. The one that works really well is the one that's made by Ranger. Show it very well. Where's my water? Yep. There we go. Let's try that again. The only problem with doing belly prints is I don't have any place to put. I'm going to run out of places to put the paper as it dries. That's going to be a given. So then I just print off, spray it with water and then print off the stamp. Clean it. That's like the most that I do. I don't really want to print that. I want to let it dry. Let's let it dry. And then let's put another color on the top. Maybe this color. Grab some white. A new braille. You know, the one thing I don't need is any more braille. I have so many. I don't need any more braille. And I don't need any more jelly plates like that's like a thing. I have too many of both. But good for him. I'm very happy for him. You know what? I'm gonna do this. Let's see. I want to spray it with water. This one. See what happens. I have like six braille. I don't need any more braille. My problem is I don't like obviously if you can tell from this one I don't like cleaning them. Why is the camera blurry? Okay. I don't know why it's blurry. I'm gonna turn the auto focus off. Oops, sorry. I knocked the whole table. I did figure out what was wrong with the camera by the way. There was of course a Logitech camera update that I needed that I didn't have. You know, I appreciate Tim Holt's creativity and Ranger makes great products. I just don't need anymore. I'm getting rid of stuff. I'm not getting more stuff. I have too much already. And honestly for me, I am best at creating with like the simplest of products, a big pen and a highlighter. Like I don't need I don't I don't need anything fancy. So yeah, so my daughter brought in buying and husband bought her husband bought a new Kia Sorrento. I think that was the name of it. And after she bought it, the battery light kept coming on. And they were pretty sure that it was a computer glitch. But they weren't of course 100% positive. So she had it brought in a couple times and it seems to be one of those sort of ghost in the machine things where you know it only does it when you don't have it at the auto mechanic. And so they looked at it and the you know, hardware on the machines working fine, the battery spine, the alternator spine, the cables were fine. So there was some programming updates that needed for the onboard computer. So they did those. And they just told her if it happens again, bring it back. It is a brand new car. It's under warranty. So you know, there's that. So I think it was an easy fix maybe. But you know, it was kind of different playing, you know, mom's taxi service. I haven't had to do that in a while. And in case you missed it, I wasn't live on Tuesday because I was playing on taxi service to my daughter's car. Yeah, I hope it fixed it too. You know, there's just we used to own a Plymouth Grand Voyager back in the day. And it was one of the ones that had computer issues and the wind you would be going down the highway on a bright sunny day. And the windshield wipers would just come on for no reason.  You had to like pull the car over to get them to go off because they didn't want to go off. So, you know, Bob and I, when she said she was having problems, we both kind of went Oh, because we've been there with cars.  I think most of us have been there. Yeah, you know, the nice thing about my husband's new sports car is it doesn't have an onboard computer. It's a 1973 Barracuda. So there's no, there's no onboard computer. I'm going to spray the art foamy with water before I put it down. I don't know what this is going to do. We're just playing. Yeah, there's way less to malfunction if there's no onboard computer. I agree completely agree with that. That's nice. I have this one piece here. I kind of like the way that turned out. But you know what, I think I'm going to Yeah, yeah, you also can get easily to some of the parts and things, you know, to easily change filters and like on the older cars, they were like right there and on the newer cars, you know, it's not as easy on some of them to get to filters and things. My dad is so fun fact for those who don't know my dad and brother are both auto mechanics. I grew up playing in my dad's garage. I'm trying to stack these in a way that they dry and one of the reasons we're using the gouache is it dries quickly and it dries very matte and right now I'm very into the matte finish on the paints. Isn't that pretty? This is the pad of drawing paper. So this is just a spiral bound pad of drawing paper from Dollar Tree. I usually get the different kind of tablets, but right now because of supply chain issues and COVID finding my normal drawing paper is been challenging because it's out of stock. I'm going to use a color I never will not never use, but I don't often use which is this tangerine color. How can you look at that and not think happy? A little bit of pink and let's see. Let's brayer it and see what happens. Shall we? Oh, they're there. They're hiding the moons. So while we're jelly printing, we'll talk about whatever you guys want to talk about. Um hold on. I'm having trouble just yeah. I'm having trouble. Um how are you all coping? I hope you're doing okay. I know times are tough for everybody. Right now, of course, um we're just doing the backgrounds. If we end up with an accidental focal image that I like for the next part when I do like the doodling and drawing on top. That's cool. Oh, yeah. So, without revealing too much, my mom is doing okay, but not great. She says she's doing better than she's actually doing. So, you know, that's typical for my mom. If you knew my mom, you'd be laughing right about now. Um my parents are both in their 80s and mom got an infection which caused her to have some brain fog type issues and balance issues, among other things. They weren't sure exactly what was causing it at first and then they realized it was the infection and when you're of a certain age, any infection is difficult to get over and get passed and um she's in that age category. Um so, but she's doing okay. She is home from the hospital and she's um recovering as best as my mom is going to not completely listening to doctor's advice. So, there you go. Oh, I'm so, yeah, Kristen, I'll thank you for your service so much. I appreciate all of you all on the front line so much as do the rest of us. I know um it's so tough. I'm glad to see the numbers go down, but I am a little scared of people opening uh too soon and going out to do things too soon. That scares me because I think it's too soon. We don't have enough people vaccinated yet. Yeah. So, Kathy, you're you know it's it's hard when you're stressed out like to stay bright and cheery and creative.   Let's see will these put on here and so I you know when I'm not feeling creative or feeling like I can express what's going on with me in my art that's when I just do cleaning and sorting and purging and then also I'm not able to work in a messy environment I'm not one of those creatives that can do that yeah so it's difficult and my dad is they live a couple hours away from us my dad is trying to his best to take care of mom and himself we keep reminding him not to forget to take care of himself um but it's difficult oh yeah well bullet you know some art is better than no art Kristen always I mean there are some days when I don't get anything done up here and all I do is my little daily drawing journal downstairs uh that's that's just a thing some days it happens I kind of what do I don't know what it is about that one that I kind of like not sure all right I'm liking this blue color and Kathy you're not the only one that's going in like ups and downs it's just you know it's the state of things right now we're all I think we're all feeling that way and you know when it's a non-covid year I hate things like grocery shopping and doctor's appointments and I do have anxiety disorder and things like that just get me off and I get stressed out I automatically assume the worst thing is going to happen it's just who I am and um I can't help it and you know COVID certainly doesn't help that it does look like people dancing which is one of the reasons I like this art foamy right here but you know the zombie dolls um both the felt zombie dolls and the zombie doll art foamy stamps started out as and they come in big and small these are the big ones you get the three and then and then there's a little one depending on what size you prefer to work with um they started out as a way to express my stress about COVID and they still are a good way to express how I'm feeling and I still find myself using them this one Kathy I really like this I like the way that one turned out I might not do anything more to that except doing a little drawing on it to bring the shapes out because that wouldn't really turn out cute there's a few of them over here I can see that already and then there's some that I'm like hmm okay that needs something I don't know the colors are interesting but yeah I'm not sure what that says yet all right but we have a couple more backgrounds to do before we do anything else anyway I just you know some days you're going to find through this whole thing that you know the art is just not cutting it it's not helping you as much as I hate saying that it's not helping you work out what's going on and getting through the stress I completely understand find something that does help and whether it's cleaning and purging or it's going out for a walk or listening to music turning all the devices off like just turn all the devices off don't listen to the news yeah it does actually don't listen to the news don't listen to you know any of the craziness just turn it all off and know that you're not alone like you're all there with you did you all can't see this but look so that's using my jelly plate as sort of a stamp pad for my art foamy stamps which is something I do a lot not only with the art foamy's but with the red rubber stamps so when I want to stamp them on paper or in a journal with paint instead of ink and I started doing it because I didn't have any waterproof ink um then I will use the jelly plate as sort of a stamp pad and I will ink up the jelly plate with paint and then I'll use it to ink up the the rubber stamp or the in this case art foamy stamp and then create some collage papers or images um focal images in my art journal now kind of want to see what happens if I spray the paper I don't know what's going to happen we'll find out turn on the telephone for a minute here and I'm going to take the sound out so it doesn't matter what I say but we're going to shoot a couple minutes for the vlog there's something about that purple today that I really like I want but I keep going back to this blue I don't know why now these kind of prints whether you're doing them on thicker paper like this bristle vellum or watercolor paper or you're doing them on thin drawing paper are great for um just making sort of images for your art journal or you know some of this can be used as covers for like a drawing a little a little like sketchbook yeah I don't disagree with you Kristen I alternate between being excited and being scared as hell to be perfectly honest and so you're a respiratory therapist so you have patients all the time that assume the worst right so I'm one of those patients I could have a cough but I just assume it's like something horrible I am that person so and that's in non-covid days y'all should have a conversation with my husband someday like he just shakes his head at me a lot I don't think he knows what else to do with me sometimes yeah see Linda no and you know and then you have things happen like the one time I wasn't nervous about getting doctor visits or tests I had a mammogram right before we moved and I was totally not nervous about it and and that was the time that they found assist and so now that just makes it worse because now it doesn't matter now I'm just going to always be you know sure something's wrong that's very true they have no idea I hope you can too Kathy I'm getting you know messages from friends who are able to get theirs and I hope you end up being one of them I really do Kathy's taking her husband in to get a vaccine tomorrow and they told her if they have extra doses she might be able to get hers so everybody thinks some good thoughts for her I may be able to qualify to get mine at the end of the month so so see you can do something like this with your art foamy's or rubber stamps and the jelly plate you can use the jelly plate to just do a background and then stamp something over it and then to bring it out like go over it with pen or pencil oh Kristen thanks for the encouragement appreciate that glad to know it's not just me ladies this is the last piece of Bristol vellum so now we'll start going back and looking at the prints and see if we need to do any more jelly plating on them or if we need to switch to rubber stamps look at that okay so clean this off yeah so um yeah Kathy I'm about to be a great aunt again my niece is about to have another baby I haven't seen the first one in like a year I look at so these are just the the waste papers and so I might be putting like blocks of these up for sale in the sd shop too they're actually interesting too right so now let's go back and look I might want to do more paint on that one and that one maybe that one this one I kind of like so we're going to leave it alone I like this one see what we have over here that one needs something else I like this one so we're going to leave it and I there's something about this one too that I like see the nice thing about these paints is they're already mostly for the most part they're dry already there's something about that one I like I'm going to just listen to my instincts I think these need to be worked on somewhere so let's get to it shall we all right so we're going to grab some white which is almost out but I have a spare so again these are the water soluble hemi gouache um you can use any matt fin I prefer when I'm journaling or doing something that may at some point end up in a journal I prefer to use a matte finish paint um because you don't have to worry about things sticking together later yeah Kathy I I know a lot of people like that so it's very frustrating but we can only control what we do and not what they're doing though it's Thursday isn't it I hear the gardener's truck outside so you guys might hear that ring go off a lot just FYI I kind of like our weekly chats by the way it's like I'm here in my art room crafting with friends at some point we should have a um party party if you're lack of a better term I have a weekend coming up where I'm free most of the weekend that's actually really cool so oh I'm I'm showing the vlog camera not you guys because I can't figure out where I'm at so yeah we could do an arty party and we could um just do it off camera like on zoom I have a zoom account so we could have like a hundred people there although that'd be a big huge arty party if you guys wanted to film it we could do it with stream yard we could do I think up to 10 people we could craft and paint and do whatever our heart speaks at us to do the way I'm going with this I'm going to need to get some more of this drawing paper because this is getting used up it's okay all right good luck yeah bring your snacks art food friends yeah exactly I think we should try to plan that I have a free weekend coming up where I have like a Saturday I'll have the dog with me but um I also can do it like any other days too I like that one want to do will you be able to do it in white maybe maybe let's see let's find out I'm just glad any of you are here I was worried because it was a Thursday and I know there's other creatives that are live today that it was just going to be me talking to myself and it would be the one time I've ever gone live with nobody here so glad that's not the case smear some of that around girls again well I mean you know I'm not in the best frame of mind these days in case you haven't noticed let's go back to a dark waste page if we can get these on here I try not to do Thursdays too much because I know there's I don't know I just don't well that didn't show up at all okay so we might need to do that again with a dark color let's do this see what happens okay lesson learned don't do white let's actually go wild and go crazy and let's do black no problem Linda and yeah I I like the smaller lives fun fact but I also like the lives that are not super long time-wise there are some really great creatives out there that do fabulous lives but they're like four hours long or five hours long or sometimes all night long I just can't I just can't for lots of different reasons and it's nice to have a smaller there we go it's nice to have a smaller live because it's more like we're just having an already party with friends that's a little bit better we can at least see them now now the question is what do i want to do with that one do i want to put it on here or here or here what do you think we also have these three which one do you think i'm kind of thinking this one what do you all think i'm kind of thinking that one or that one the red one okay let's do the red one let's see what happens so he's a crapshoot yeah so one of the reasons I don't sell a lot of work in the etsy store is because I have trouble letting go of my art but at this point I have a lot of it and it has to go there are some like purge envelopes and purge boxes in the etsy shop that have like random artwork in them now I can't even see the girls that were on there but that is interesting and I have an idea for that but let's let it dry first we still have paint on here so let's use it you want to use it on one of these maybe um what was I saying I don't remember though oh I have trouble letting go of art but there are some purge boxes and purge envelopes of old artwork in the etsy shop right now um and I'm going to be listing more because my house is just I'm running out of wall space so that's a thing yeah so I have an idea what if we went over that with something in a bright red I might actually have to get some of the stencils out because I have an idea okay let's contrast that with this this blue I keep going back to so yeah you guys asked about my mother earlier and for those that don't know Bob's mom also got hurt right before Christmas and she got COVID she got COVID and then she fell and broke her hip she's okay she's recovering slowly she is at home finally um she's 92 so that was fun not let me do this one so it was both um both moms so I'm running out of room again okay so if we take this one I take this one got a bright red here let's see show that again please this one or this one okay so I'm going to break one of my own rules and we're going to ink up the stamp I'm inking it up with paint do I know this is going to work no hey Kathy other Kathy yeah so this one is accidentally really pretty okay so we're going to take this I don't know if this is going to work and that color may be too dark for this but let's try it and see oh left one wait you said left one I think you meant this one because I forgot which is my left and you know I'm scared to take this up I'm scared oh yeah so what if you did that and you outlined them with a gold pen that would be interesting and see you're getting accidental sort of interesting prints over here in the waste paper which you always do when you jelly print like when you're doing monoprinting of any kind and especially if you're using like art foamy is the best way to get clean the stamps is to just stamp them off on paper see look at that and there's a lot of paint on here so you're going to get a lot of these do we want to stop with the jelly prints this one kind of needs something let's get the plate wet try not to splatter paint paint on myself because that's a thing cow let's clean this up a little bit one more time okay um we're gonna go with this color I think that's way too much paint so of course if you want your jelly prints way more opaque than these are coming out then you want to not water the paint down and you probably want to use a acrylic paint this is a water soluble gouache so although it's more opaque than regular watercolors it's not as opaque as acrylic paint before I get myself like all messed up let's clean the mat because I know me very well okay uh nope I want to do moves listen to your instincts because you know it's a good idea so again this is the waste paper and there's paint on here from do it from being on here so I'm not getting any more paint on it I'm just getting it wet and the paint that's on there is coming off on the paper let's see what happens so yeah the three women is one of the favorite my favorite stamps from the art foemies that they chose of the designs I did for them but I love them all and use them all but you know it has a good message right now but I love the zombies too I mean let's be honest I mean when you're really feeling like you need need to express your feelings so yeah so gouache on the jelly plate or or watercolors I mean see look at that it gives you an interesting texture and finish and a little bit goes a long way now it is water soluble so if you're going to use it as collage paper you need to glue it down with a glue that's not very wet um and or don't get the top wet um like I usually use a glue stick or I'll use a me I like a matte medium look at that look at that one more uh there's a little bit of paint on here left let's add it to this one okay yeah let's add it to that one as it slides across the table yeah exactly you can get so many stamps from just one inking and a little bit goes a really long way on the foam stamps much more than the um rubber stamps and regular ink okay so we're going to clean that I also no longer go super crazy with cleaning my jelly plate jelly plates I mean I do I try not to leave big crusty blobs on them but my plates are old you can see this one is kind of yellowed it's not your imagination um I mean I keep it cleanish but let's put this away and let's put that paint away because it's going to be in our way what did I do with the lid for the paint people oh there it is somebody tell me hey Laura okay kind of clean up the mess that we made put that up there I'm going to get out oops a couple of ink pads and the prints that we made okay sorry I was moving things around so you can get them directly through the art foamy's website um after the broadcast there is a link in the video description um but um you can also just google art foamy's and go to their website and under designers you'll see my name and um we have the moons we have this one which is like leaves and berries we have this sort of leafy vine we have the three women and they come with um these cutouts which on their own are interesting because if you look at them without the women to me they kind of look like chili peppers and you do get these with this with the design they come they come like this and then the arrows and then of course the zombie dolls which is what started the art foamy's which is funny kp message me can we do your your zombies as art as art foamy so the zombies come in two different sizes this is about what two about three inches this one's about i don't know seven or so and in each one you get your basic zombie with um a heart yeah they do sort of look like feet um you get um the zombie doll with the stitches you get this this one just stamps just the stitches and then this is the skeleton and um keeping in mind with all of these any of the art foamy's you can not only stamp with the proper side that's meant to be stamped you can also stamp with this side so like with these foamy's you know if you want to um stamp say this one maybe you don't want to do this with the face on it you want to just have to be a solid color to start so you can stamp it with this side let that dry and then go back to the other side and just do the stitches on top um they also would be great day of the dead dolls um and i use them frequently and i like to run i like to write kind of snarky comments on them um i did one of these on drawing paper and that i later put in my journal art journal that said dead to me which i just thought i think that's hilarious um i also have done felt zombies where you do like mr tp shortage you can do like mr coronavirus like all of those things this one says don't hide in the fog stand tall and it's the zombie doll skeleton one coming out of sort of a green purple fog gray fog um and i just stamped him like we did with these and let him dry and then i just went over it with pen and then this one it um is this one then stamped with the stitches and then doodled on top of to bring out certain elements and it says don't be broken and then this one which is just the big skeleton and it says sometimes things are a bit blurry stay focused because when i was looking at the print later um i accidentally moved the stamp when i was printing with it and so it came out a little bit blurry and not so clear so i outlined it to bring out more of that i can break out the coffin if you all would like to see the coffin i have to run downstairs for it if you all want to see that anyway i'm going to be doing um while we're i'm waiting to hear back for you on the coffin i'm going to be doing artwork pieces like these not all zombie dolls but like these well it will be paint jelly print um some drawing and doodling and writing from me on these that we just printed and these will be for sale in the etsy shop don't be broken and these may be too but these may be a little bit cheaper because these are just on drawing paper they're kind of thin so if you're going to frame it you're going to need to like back it with something like a piece of cardboard okay hang on a second let me go grab the coffin be right back this is the zombie doll coffin i'm not even sure it's going to all fit on camera because i think it's too big um so i made the coffin out of just some scrap cardboard because of course you can't find a coffin like anywhere let me zoom out a bit hold on um i made this to hold the original felt zombie dolls that i was making which started the whole that's okay i need the steps it's all right um when covid started i started working out my stress about covid in my art journals but also i started um slow stitching which turned into me looking at kits i had in my art room which turned into me making zombie dolls and turning the zombie dolls into sort of care covid characters if you will of things that were really like annoying me or stressing me out about this whole pandemic situation and then at some point i had so many of them they needed a case so of course what kind of case are you going to make for zombie dolls except the coffin all right so this is and of course this is their you know fabric shroud this is one of the many things i have gotten offers to buy allers or some of the zombie dolls and i don't know that i'm ready to do that and if i was i don't think the price that i would need to charge would be anything that anybody'd be willing to pay to be fair so let me just put that out there um the ones you see on top are the four horsemen of the apocalypse because i mean who else besides me is not only in calling it the year of mondays but the apocalypse like i mean right so this is um created in response to the pandemic and worldwide situations of 2020 each one of the each is one rider and one horse this one is war so this is war and i was raised roman catholic so i used to i looked up the catholic um references for the four horsemen there's lots of different references to the four horsemen of the apocalypse with different things on i went by the catholic version i think i need to keep them to cathie i don't i don't disagree with that i think this is one thing i'll probably not sell and like i said if i did um it would be really expensive so each one of these four horsemen has a horse and a rider um and this is conquest and you can hear i don't know if you can hear that blower out in the background that's the garter this one is death this one is famine or pestilence and depending on which reference you look at um i love the flies i got to put on him see you see you later linda um and then you get into the ones that are sort of my way of working through the ridiculousness of the pandemic um so this one is miss stay at home and i put you know a lock on her that says locked in her keys say the right key it just feels like we don't have the right key to not be locked in i just um this one miss misinformation can y'all guess what this is one is in regards to who i just you know this one is mr social distance you know you're told not to get close to anybody there is a sewing pattern for the zombie dolls because at some point i developed my own pattern and my own way of doing things and i started out doing things one way and then morphed into doing things another way so there is a pdf sewing pattern in um my etsy shop fyi and the uh 10 welcome coupon code will work on that um this one is mr stay safe you know because at some point you feel like you and your whole family are just wrapped in bubble wrap every time you like leave the house right um here we go miss corona virus and i did label the back of all of them i wrote something on the back and the four horsemen have like more of an explanation on the back i do have more zombie dolls cut out and um i do think this is a great therapy if you will for lack of a better term for um um not just what's going on right now but in the future you know if you want to work out what's going on with you and in a creative healthy way um rather than abusive destructive way um which could be a lot of things in my case eating too many m and m's or something um this is a great way to do that and you could make little you know sort of zombie or um um what are the ones you stick pins in voodoo doll type things to express how you're feeling um this one is miss taken faith oh you're welcome see that's the point of me doing this i want to share creative ideas with you all but i also i i don't mind getting running downstairs to grab these if it makes you all smile i'll explain this one in a minute there's a few different ones in here i'll explain those in a minute so here we go um this one is mr wash you hands wash you hands i don't understand why people weren't washing their hands before but neither does mr wash you hands uh this one's funny mr tp shortage and then you know i made i wasn't sure how if i could make little rolls of toilet paper so i ended up making a lot of them and their extra ones are in the box i did save all the extra rolls of toilet paper so they're in the bottom of the coffin i'll explain that in a minute so you see there you go there's all the different ones at the bottom this one is miss front lines in honor of all of you on the front lines and this the stuff part of the stethoscope that's the inside of an earbud just fyi i used what i had um this one is mr shut your mouth because at some point i was just not feeling like i could talk to anybody he does kathy he says what the hell what were you people doing before this is uh miss dead water and this is where i started doing my own pattern so this is a mermaid shape this one is mr death wish this one is mr bloodsucker this one is mr dead treat now these were done this particular one was done in response to a request by mike deacon it's not necessarily covid related um but it's definitely pandemic related because you know who else felt like just halloween and the holidays were just like dead like we needed to just skip it now he does the pumpkin head is a mask and underneath is his skeleton face now i can't get back on just have to like squish his brain to get him back in there there we go all right one of the things that prompted this whole idea was before the pandemic i had been thrifting i like thrifting um and um i found a bad boss voodoo doll and i just thought that was weird enough to buy it was like two bucks and so i did and i brought it home it sat on the shelf for a while then the pandemic happened and i decided to turn him into this sort of pandemic positive affirmation like voodoo doll thing the original doll was red and then i just started adding things to him mostly words on little pieces of fabric and sewing them to him like every day for like a month or something until he was filled up um words that just stood out to me things i thought were missing like laughter which is on here more than once because i evidently really needed that one and um queen and truth and freedom and i put wings on the back so that i could add more words um so he's definitely pandemic related so he lives in the coffin with the his friends the zombie dolls now making like felt dolls is not a new thing to me i used to make dodie dolls back in the day who's old enough in the mixed media world to remember dodie dolls and these are some small ones that i made back these are made a long time ago like 2007 2008 somewhere in there um these were miniature dolls that were made i sold most of the ones i made i happen to have these left these were actually made in miniature to um submit to a magazine for publishing and um these are not named but i have two angels this love heart and then a patriotic star and i knew when i had the idea for these zombie dolls that i had done something like this before and that would be cool let's do it again but let's do it bigger and differently and um because these inspired those in a way they live in the coffin with their friends the zombie doll family and so then they all fit in here sort of like i said i do have a few more that i want to make um and you know i get inspired to make new ones all the time the problem is at some point i'm gonna have to make a second coffin because this coffin's already pretty cool and yeah you um you can do anything with these dolls and the pattern includes the pieces like for the bones if you want to make it more of like a day of the dead doll you could do just the skeleton and then put flowers and things make it colorful and then if you're doing it in memory of maybe a past relative to honor their memory you could um do something like this where you print something on fabric on your computer or just write it on a piece of fabric with Sharpie and sew it to the back with like with maybe their name on it they're great therapy oh there's another of the miniatures a little mermaid so they all live in the coffin and it lives downstairs and it has like a book in here i need to write a letter about the pandemic and stick that in here which i don't think i've done yet and just like stick it in the side so that's the coffin that's a good idea Kathy oops i missed a roll of toilet paper yeah maybe a less depressing coffin and one more of a happy coffin and maybe zombies that are um still funny and snarky but less negative because i'm having enough negative thoughts on my own without help from the zombie dolls to be honest all right so let's so there's again there's the code for the etsy shop it's also in the video description okay so i just wanted to show you guys let's see let's see it's okay Kathy not a problem i i get sidetracked easy anyway so it's fine so here's one of the prints that we just did so this is um did i label this of course not this is one of my stamp sets i don't remember with oh yes i did set number nine again we are going to be running different kinds of coupon sales and sales sales on the stamps and stencils in this store um this year periodically on and off because i'm trying to reduce inventory right now you have 10 welcome and um that will give you 10% off everything in the etsy shop so i have this sort of hamsa hand we've got some black archival ink i could if i had the still had the jelly played out you can ink these up with paint but i think we're going to use ink and i'm going to just try to make sure i don't know how dry my ink pad is so hopefully hopefully it's not too dry it's going to go in the middle yes now everything's good and dry and i will be spending the afternoon um working on these so i'll post pictures later for you all when they're finished i do think i need more ink on the stamp pad but we're going to just go with it for the moment oops there are some words in this stamp whoop i think that's not what i want it's hard to read it when it's backwards now these are deep etched red rubber stamps yeah that's it this is just a big crystal pen so i'm just going to do messy lines i gave up trying to do neat clean lines a long time ago because i could never get them perfect and so then it would just drive me up the wall because they weren't perfect and so rather than make myself completely crazy i just gave up trying and bonus i kind of like the way that has turned out i'm finding some of the leaves that are in the background from the leaf stamp and i'm tracing some of those my niece is messaging me sorry or somebody the one that's about to have a baby this one there and there are some berries on here so the zombie dolls are not hard to make and there is a video out there somewhere on my channel for how to make them they were such a big hit that Mike Deacon even broke out his sewing needles and things to make some which i find funny because sewing is not generally his thing so i like that i'm gonna get a white pen i need a scrap piece of paper just kind of accent what's on there until you like them um composition i will make sure they're all signed i loved Kathy um that he gave them to the neighborhood kids for Halloween i absolutely loved that i thought that was fabulous okay let's i've got these i'm still kind of thinking this one's kind of wet i'm thinking this one needs gold do i have a gold pen out here probably not because metallics aren't my thing but i've got one close by do i know which one's going to work and show up better of course not let's try this one yeah that one's working good old sharpie so just try to follow the lines of what you see in the print whether you actually we're trying to create a particular image or not oh lord i don't want to stick my hand in the wet paint maybe you just did some abstract things and you're just trying to like pick out what you accidentally created that works too and then maybe at some point you're inspired to add or write words on the print this is a sharpie metallic paint pen this is i have the others i have different kinds but i'm a cheap pen girl and they seem to one be the ones that work for me consistently most of the time so i'm going to take the black thick and i'm going to take all of the prints and do something like that to them today and i will post some pictures of them and you might find you don't need to stamp anything else on or that that i like the way that looks so i'm going to leave it alone and i don't know if you all can see that different in the camera on youtube it looks all black it's not all black you can see the original like golden yellow in the background and the girls are red and you might find that there's ones like this my family's like going crazy on the text messaging if you hear my phone going off that's who that is okay so then you know you can make interesting pieces of art things that really speak to you or speak to the viewer of your art expressing how you're feeling your frustration it's good therapy sometimes it's not enough i'll admit that sometimes it's not enough and that's when you need to go for a walk you need to have friends you can safely chat to there's no nothing wrong with of course seeking help if you need it i for the most part find joy in expressing myself in my art not always yeah so positive baby news my yeah she's doing really well she and the baby both she said the baby's kicking so i stamped on this with that leaf stamp a couple of times things are a little bit muddy but i'm just pulling out the shapes that i see which is fine it'll be it'll be different and unique from the stamp no problem yeah i gotta go to i can only be on a couple more minutes i want to remind you all to if you can support the free content here on youtube and in the facebook art groups shop in the atzi store if you can especially right now because like i said the stamps and stencils are going to be either on sale or the or they'll be like right now a coupon code for the entire store so please support the free content by doing some shopping if you can or joining patreon or using the paypal tip jar or any of those things and not just for me for any of your favorite creative youtubers i know they all are struggling right now and they could use your love and support so let's please do that and if you have questions comments or concerns and you're watching this recording you can leave them down below you also can if we're friends on facebook you can DM me ask me you know whatever it is and we'll get it worked out and please stay safe stay healthy stay creative please be kind to each other and go out and do something nice for yourself because you deserve it and i'm going to draw the afternoon away all right guys thank you for joining me today and next week we will be back on tuesday wish me good luck at the eye doctors tomorrow all right bye guys


Jack Black, who is best known as a star comedian, actor along with accomplished musician and founding member of the award-winning band Tenacious D, has been able to snag some pretty luxurious real estate in Los Angeles. I mean, being as busy as Jack Black, it would only make sense to have homes in Hollywood. The lovable, multi-talented celebrity has bought and sold a number of impressive LA homes over the years. With tax records, his current primary residence is a home he bought in LA's Los Feliz neighborhood back in 2010 from Red Hot Chili Pepper's guitarist Flea for $6 million. He appears to still own a home in Beverly Hills, which was bought in 2005 for $3 million. We'll take a look at Jack Black's former homes, including his most recent sale, a 3,000 square foot gorgeous reimagined canyon home on a large lot nestled in Upper Beechwood. If there's one thing this funny man knows how to do, is snag some pretty lavish homes. In these videos, we don't reveal any addresses, so please do not show up at any private residences because it is not safe for anyone. Hollywood's lovable funny man has built quite a lucrative career, earning a net worth of $50 million. While Jack Black is best known for his comedic roles in various films and television, he also founded the successful band Tenacious D. Outside of acting and music, Jack Black has started his own YouTube channel and film production company, Jack Black Does It All. Now, it wasn't all smooth sailing for Jack Black. During high school, Jack had struggled. At the age of 14, he started using cocaine and hang out with the wrong crowd. He later stated that he wanted to leave high school because certain people wanted to kill him. After graduating from high school, Jack attended UCLA briefly before dropping out to pursue a career in acting. You see kids, dreams do come true. Now after rising to fame and becoming a major Hollywood star in 2006, Jack Black started his own production company called Electric Dynamite Productions. The production company has worked on a number of television series and films, some of which Jack Black has started. In addition, Jack Black started his own YouTube channel in 2018 called Jablinsky Games. As of 2020, the channel has almost 5 million subscribers and in 2019, Black collaborated with top-rated YouTuber PewDiePie in a Minecraft stream to raise money for a mental health charity. All of this hard work and earnings has given Jack Black some pretty nice digs in Hollywood. Hey what's going on guys, it's your boy Malin Palmer and today we're bringing you another house tour here for you on Famous Entertainment. Now notice 95% of you guys are watching and not subscribed so please be sure to hit that subscribe button because we post new videos daily. Now we've previously reported on the homes of Birdman and Kylie Jenner and so if you guys want to check those out, they are on the channel. If you like these videos, please ring that bell for notifications, follow me on Instagram at daddoomitflassie so we can chat some more and hit us with who you want to see in the house tours on the comments below. Let's get into the video. After becoming a household name in Hollywood, one of Jack Black's first homes was a Dazzling 2600 square foot house in Los Angeles Beachwood Canyon area which he eventually sold for one and a half million dollars. This massive compound was originally built in 1950 which boasted three bedrooms and three baths.  Now as relaxing as that sounds, it does not sound like the highly energetic Jack Black we all know and love. The house boasted an open floor plan with a massive living room dining room perfect for Jack to entertain all of his guests. Along with dining and living rooms, the boat also featured a large den and they all opened to a private pool sized yard. I can already picture Jack Black soaking in his private pool while breakdancing and twerking to Cardi B's wop. Other features in the house include a downstairs media room, office, and gym. It appears that Jack Black knows how to work hard and play hard. Jack Black's most recent sale was earlier this year. The house boasted 3000 square feet, four bedrooms and three bathrooms and sold for $2 million. I'm not entirely sure why he would want to leave this spot as the gorgeous reimagined canyon home was on a large lot nestled in upper beachwood. Jack really can't get enough of beachwood. If guests are able to get to the gates, this property offers an abundance of features including light, peace, privacy, and space. Not to mention the property is full of lush grounds and designer details. The interior of the home features oversized windows and an open floor plan creating an airy bright and roomy space. Not to mention the open floor plan is centered on a custom fireplace overlooking the breathtaking views of the canyon. The large kitchen is complete with high end appliances, custom tile, and breakfast look. I mean, I don't think we would expect anything less from Jack Black. The den boasts built-ins and surround sound entertainment system from the den. French doors open to a flagstone patio and large yard with a built-in fountain. I mean, isn't really a backyard without a fountain. The winding path continues up a swing set and yoga deck which, fun fact, Jack Black practices on the side. The main level comes complete with three massive bedrooms including an oversized master with huge windows to give the room an airy and bright ambiance. The room is decked out with custom walnut closets and elegant chandelier that hangs from the ceiling. While the main floor is quite spacious, the downstairs is just as large and features a separate area with two rooms accessed by separate entrances. Guests are able to access a bathroom, kitchenette, storage area, and a private yard. The dig comes complete with a custom garage that features large cabinets and a utility sink. Another attractive feature of this dream home is how close it is to the heart of Hollywood, the Beechwood Market, and hiking trails with breathtaking views. Probably one of Jack Black's most expensive purchases was a Los Feliz mansion and Flea's former home, aka Red Hot Chili Pemper's Basis, Michael Balzary, for nearly $6 million. This massive compound boasts seven bedrooms and three bathrooms are included in the home's 6,500 square feet of living space. With an abundance of space, this two-storyed 1915 house sits on a flag-shaped lot, more than half an acre. Fun fact, the house had been renovated by Flea who added a Topanga Canyon ambiance. Not to mention the kitchen is infused with a hippy vibe. I could see Jack making that work. The mansion comes complete with solar roof panels that keep the roof cool from those harsh LA rays, an enchanting motor court, and an enormous swimming pool. I'm starting to think that's where Jack Black filmed his WAP challenge video. Alright, so I think I'll bring this house tour to an end here. We got to take a quick look at Jack Black's home and that luxurious spot in Beechwood with the yoga deck. Come on, come on. After seeing that fancy house he snagged, what did you guys think? Was it everything you guys would expect out of Jack Black? The Jack Black? Personally, I'm a huge fan of the custom fireplace overlooking that breathtaking view of the canyons and the surround sound system in his first home. And out of Black's features, which ones were your fave? You guys can go ahead and rate them in the comments down below. Also, you guys can follow me on Instagram and let us know whose house tour you'd want to see next in the comments down below. I'll see you guys next video.


This is your gut and me on vacation. You know, I travel a lot. Sometimes for a vacation, but most of the time for work. And when I meet plant paradoxers on the road and I meet them all the time, they almost always ask me the same question. Dr. Gundry, how do you stick to the plant paradox plan on the road? It's hard enough when you're at home with your kitchen, but when you're traveling, how do you do it? It's true. Eating the plant paradox way can be extremely difficult on the road. But when you're out and about, it's especially important that you focus on keeping your gut healthy. In fact, did you know that when you travel to a new country, your gut microbiome actually changes? It's true. And that influx of new bugs is likely one of the reasons, along with some strange to you foods that so many travelers suffer from tummy troubles, especially in the beginning of their journeys. So how can you protect your gut and mostly stay on the plan when you travel? Well, along with sticking to any supplement routine that works for you, there are a few amazing things you can actually try and it starts before you leave. In fact, in my opinion, it should start when you buy your ticket. How? Well, the first step is make your gut bugs thrive. Because if they're happier before you leave, you've got a better chance of staying happy when you're on the road. And as you know, that's a great way to keep your digestion smooth, easy and comfortable, your energy levels high, and even your immune system healthy. So as you start planning your next trip, make sure to start eating more prebiotic foods like leeks and onions, leafy greens, and Jerusalem artichokes. And opt for a healthy dose of probiotics too, either in capsule form or in probiotic foods like sauerkraut and kimchi. It's a smart way to set yourself up for success so that once you're on the road, you're focused on maintaining your gut rather than healing it. But once you're on your trip, then what? Well, one of the things that makes my life easier is to start my day with a set breakfast and to eat the same thing each morning of the trip, unless I skip breakfast entirely. Personally, I like to have a green salad with plenty of olive oil. It fills me up, it feeds my gut bugs, and is something I can find just about anywhere, any country, any city. And sure, they may look at you funny when you order a salad for breakfast, but chances are they've got what you need in the back. Plus, if you make a plant paradox-friendly breakfast part of your routine, you're setting a good tone for your day. Now, if you're really on the run like in an airport or trying to catch an early meeting, remember, it's totally fine to skip breakfast.  They're also available, you know, most places. Now, along with starting my day right and keeping up with my healthy routines, I tend to plan my meals out way ahead of time. Now, this wasn't always possible, but thanks to the magic of the Internet, these days it's actually easy. What am I talking about?  That's right. By heading online and checking out restaurant menus, and heck, even hotel room service menus, you can really set yourself up for success. Personally, I always look for menus that are heavy on the leafy greens and wild-caught seafood, and light on fried, starchy, dairy-heavy foods, unless I'm in southern Europe where they use A2 milk. And just like with breakfast, when in doubt, you can almost always get a salad with olive oil and lemon juice. Now, a lot of the time it's pretty easy to find a piece of grilled fish, too. So, rest assured, you've always got options, which brings me to my next tip. Make your adventures paradox-friendly. Sure, I'm talking about exploring new cities on foot. It's a great way to get a bit of exercise in them, but it goes beyond that. Personally, I love checking out the unique farmers markets and food halls in new cities and building picnic lunches there. It's a great way to guarantee that I'm indulging in a little fruit, but it'll be in season. And it's easy to get to know more about the food you're buying because local artisans will actually be excited to tell you how their products were made. So, you'll have a better sense of whether something was grass-fed, pasture-raised, or made with A2 milk. It's also a great place to buy gifts for your loved ones. There's nothing like I appreciate more than a bottle of really nice olive oil and I bring them to my friends.  No, I'm not talking about going back to your pre-trip habits, but going back to square one and restarting my three-day cleanse or at least going back to phase one for a week or two. It's actually a great way to give your gut bugs the reset they and you probably need. And to remind your system that vacation mode is not the new normal. Oh, and one more thing. Whether you're traveling for work or for fun, make sure to take some time to relax. Even it's just a few minutes each day. You deserve it. I'm Dr. Gundry and I'm always looking out for you at home and on the road.


Hey, Sonja. Hey, Janos. You know what I really find fascinating? No. Monkeys. Monkeys. Monkeys. Okay, tell me more. Bananas. No, no, this time it's not going to be bananas. There was an experiment. Okay, it's probably not true. As far as I could find on the internet, it's probably a thought experiment where they put a bunch of monkeys in a cage and they put a banana on a ladder and every time a monkey would go up, then to get the banana, then there would be a really, really cold shower. So after a while, apparently, according to this myth, the monkeys started beating each other when one wanted to go up and get the banana. And even when you started switching out the monkeys, the new monkey would then also be beaten when they tried to get the banana. So after a while, the none of the original monkeys were there and they beat each other when they tried to get the banana, but nobody knew why. Okay. What does that have to do with honeypots? This is similar to, so this was actually in a psychology book and there's no cited reference, but it's kind of like a humanized thought experiment because that's how humans behave. So I'm thinking that this is similar to how we treat SSH because everybody says, oh, you should do this and that to secure your SSH, but nobody really knows why, right? Great analogy. No, seriously, you have all these rules about SSH, but you don't know what happens when you don't obey them. You don't know what happens when your SSH gets hacked. And of course, on the one side, you know that really bad things happen because people gain access to your system and they steal all your data, but even when that happens, you don't have enough forensic data to analyze what really happened. You can just pick up the pieces and try and figure out what's going on. This is how we get to the honeypot. This is how we get to the honeypot. Yes. Okay. So SSH, like normal honeypots, you try and put up a web server or whatever and try to analyze the attacks, but SSH is really not all that. Well, I haven't really found many SSH honeypot projects. So yeah, one of the key pieces of this project is actually SSH. So let's put the pieces together. Because you basically created a whole SSH server. Don't beat me to the point. Okay, sorry. So one of the parts is SSH. So you SSH into a server with a username. And when you build a honeypot, you usually want to allow any password to succeed.   But usually that's not what an attacker would type. They would type something like this. So to kill the Apache web server or whatever they want to do. And we'll talk about the incentives to hack an SSH server a little later. The other part of the puzzle is containers. So you know that you can run a container, that's where you can type commands into. So why don't we put the two together? That was the basic idea behind creating an SSH server. But that's what you do anyway, right? You can SSH into a server, you can run your containers. So what's new about this? Well, so let's take a look how you would enforce that you have to be in a container. Because when you're in a container, that's a sort of a, it works like the classic jails from the from the UNIX world that it doesn't let you access anything. It just lets you access the things that are inside of a container. So the idea is that the user SSH is into the SSH server. And then we pick a container back in like Docker podman or Kubernetes that we run the shell that the user is running, we run that inside the container. And there is a there is a way to do this with your classic SSH server. And there is a reason why there is a do not try this at home sign here. It's a bad idea. So the classic SSH server, there are a couple of SSH servers. One of them, the most popular one probably is open SSH. And open SSH has a feature called force command. So when you log in, then it runs this command that you specify regardless of what the connecting user is asking to do. And you can set force command to do a Docker run Ubuntu so that the user lands in a container and they can't do anything about it. And this works. And you can even put, you know, the whole topic is we want to see what the user is doing. So you can even use Askinema to record the session. And then you can replay it and let hilarity ensue of somebody trying to do something in a container. And this is how you do it. So if you want to try this yourself, good luck. Don't try this at home because it's dangerous. I want to know what it looks like. It looks like. This is how it looks like. SSH into this server. You type your password for the user that exists on the host machine. And then you can see the Askinema output that it's starting to record whatever you're doing. And then you can do an Askinema play for the file that's been recorded. And it will replay you whatever the user did on that session. So this is the basic idea behind Askinema.  I want to see what it looks like. You will get there. So there's another feature in SSH where you can type hello world. No, where you can run commands on the SSH server. So that's different to launching a shell. Launching a shell is basically asking a server, hey, launch me the default shell. But it's also run me this command. And that's a bit tricky because of that part, that's then going to be executed. And we get an error because we haven't prepared our little force command to run this command that's been passed. And it's also not an interactive terminal. So when we start to fix this, we try and pass this SSH original command variable, which contains the thing that the user said they wanted to run to Docker run. However, we can do shenanigans. This specifically is redirecting the output of this echo to a file. And this looks like, okay, this should run inside the container, except it doesn't. Because of how we constructed this, this is going to run the redirection is going to run outside the container. So this means that the echo hello world is running inside the container, and then the redirection happens outside. So we can write into a file on the host system. You can prevent this if you're really, really good at shell scripting. But you see why it's a bad idea. It's not. I see everyone who knows Pearl really shine now. Yes, probably. So you can do a Pearl script that takes care of this. And, and then hopefully you will not have a leak. The problem is that the force command command that the program that you're executing is running on the host machine. And if you mess it up, then the anything that you're running is running on the host machine. So there is, you have to make one mistake to expose your whole host machine. And also you need to create the users that you want to let in on your host machine. Yeah, we don't want that usually, usually not, not for a honeypot. Yeah. So that's, that's typically something where you would start thinking, okay, how can I do this? And of course you can go to classic Linux way and do a bunch of shell scripting and hope that nothing goes wrong. But generally, we have a better way. Let's get to it. Let's get let's get to it. So there's this thing that we started a couple of months ago. It was early summer last year. And it's called container SSH. And what it does, it's an SSH server that launches containers the same way that open SSH would without the whole shell scripting part. So same idea, user connects to container SSH. And that talks directly to the API of Docker or Kubernetes or what have you. We had a couple of other things though. One of the things is the authentication server. That's a web hook that container SSH sends to a component that you can run. And this web hook will send a username in the password of the user or the public key or any other credentials. So right now, one of the features that we're working on is the keyboard interactive authentication. And your server can say if we should let the user in or not. And basically, I mean, if you check out the website, there is an example implementation for an authentication server. Yes. But everyone is free to implement their own authentication server. So this can be used for enterprises as well as for small companies. And yes, that's the general idea is that the we are thinking about providing an authentication server for basic use cases like here's a MySQL database, read the passwords from that or right now the keyboard interactive is really interesting because we're looking into implementing OAuth, so basically single sign on. And the authors of various SSH clients have been very helpful. They have helped us make this use case happen by making the links clickable and the message, et cetera. But the basic idea is that this is pluggable so you can just come up with your own authentication server with whatever and still use container SSH in a useful way. Yes. And the protocol is really simple. So we'll show that a little later. The other thing that you can do with it is a configuration server. And the configuration server can be used to dynamically configure what kind of containers to launch. So that's again a web hook and you can create an application that gives back a per user configuration what kind of container image to run or what kind of volumes to mount, et cetera. So to do this, you create a YAML file because every configuration nowadays has to be in YAML and you specify that you want to do audit logging. And audit logging is a new feature in the container SSH 04 release. And for hilarity, you can specify the Askinema format and tell it which directory to store it in. Yeah, but don't do that. Unless you want Askinema videos to show. Yeah, so it's not something that you would want to use for enterprise grade audit logging, but let's see why not. You specify a host key. You can take this from open SSH if you want, or you can generate it yourself. We'll show in a minute how to do that. And you specify the authentication server. And again, we're supplying a demo authentication server with container SSH that you can use for this purpose. But generally, the idea is that you should bring your own authentication server. You can generate the keys with SSH key jam. And then you can launch container SSH. And then this is going to happen. When somebody logs in, then container SSH will send a post request to slash password on your authentication server with a JSON in it, username, password in base 64, because you know, there might be special characters. Do you know anyone who's using those in their passwords and regularly runs into systems? Yes, you. Yes, and you as well. So whenever we type special characters, random websites just break. So in this case, we base 64 the password. So you can check the best is when you type a password and they just omit the special characters. So you think you typed your password correctly, but they just don't take it. And then you forget the special characters and suddenly the password works. That's the best one.  You get the IP address of the connecting user, always useful for logging. And you get a connection ID. The connection ID is an ID we're generating. And it is it is the same connection ID that you get in your audit log in your authentication server and configuration server. So you can use that to match up various logs. When are we showing the Askinema replay? In a minute. So what you have to send back is this. You send back success true to let the user in, success false to deny entry. There we go. There we go. Here's the Askinema part. So about Askinema, let's take a look what happens when you log into container SSH. So here you can see me typing something into a console and this is already the replay. So this is an Askinema file, an ASCII cast file that we're replaying here. And this is how it looks. The format is rather simple. So there is an ASCII cast V1 format, which you shouldn't use. And an ASCII cast V2 format, which is the one that you should use. So the ASCII cast V2 format starts with, the ASCII cast V2 format is a new line delimited JSON. So it's not a JSON file. It's several JSONs and one JSON is one line. So you basically, you have one JSON in each line and this is the header. For each, wait, so what each command that the user types in is its own JSON? Yes, basically that's what it is. So what you have here is the header. You specify how big the terminal is for the playback. You specify the starting timestamp so that Askinema knows when to type the commands. So each, the typing that you saw before is timestamped and that's how Askinema knows how to replay the whole session. And then the consecutive lines are just JSON arrays. And you can see the first entry in this array is a timestamp. So that's the offset to the starting time. And the second one is if it's input or output. So you can record input as well. So hidden passwords, etc. But normally you in an ASCII cast file, you only have output. And then you have the terminal encoded output that happened on a terminal. So for example, in this case, a colored hello world. I believe this text should be read from the color codes that are there. And this is what Askinema replays. Okay, cool. So we got our Askinema. Let's watch our hackers, right? Yeah, let's get to the point. Let's watch some hackers. So we deployed an early version of this. And yeah, so this happened. Hmm. So they just tried to hack into the username. Yeah, they tried to change the password, etc. But you can see this doesn't look like a terminal, right? No. The problem is that whenever most hacking attempts nowadays are not somebody going there and typing at your console, they're bots. So they will not request an interactive terminal. And Askinema is made exclusively for interactive terminals where people are typing something. So the format doesn't really log the things that we want to look at. This is not, it's not an audit login format. And you can't really use it to record things that bots are doing. And at the end, we'll show a couple of examples that we found that are really, really astonishing of what the bots are actually doing and why Askinema is not suitable for this. So once we realized this, we came up with a second login format, the binary format that just logs everything. Well, that was the actual plan. And we just came up with Askinema, I think, because someone asked for it jokingly. So you were like, okay, I'll do it. Yes, that's true. But I was, for a while, I was seriously considering Askinema as a way to log things because it, I mean, it's a format that already exists. I mean, the new line, the limited JSON is a good way to. That's a really good way, yeah. Because the problem with logging everything in a single JSON is that you need to buffer everything in memory. Yeah, exactly. New line, the limited JSON is much better because you just need to buffer one line. So the Askinema player would have been really nice to show what the hackers are doing. But as we put it online, we realized that we can basically not use the Askinema replay for anything really useful. So binary logging is different. You can change the audit log format to binary. And that's going to log in a rather complex binary format, which we provide a decoder for. And again, you can log into a directory and then do the rest of the configuration file. So when you log in binary, this is end you decoded afterwards, because this is already the new line, the limited JSON decoded format. You see this, what this is, is first of all, all the commands that have been typed or any data that has been streamed is base 64 encoded. And we will see in a moment why. And second, we record the things that are not visible in Askinema. For example, when the terminal is resized, or when non-interactive sessions are happening. So the other thing that we can do and that we did for audit logging is uploading the data. But let's take a look at the data format. So you have an SSH connection and you assume that it's one connection, you type into it and that's it. But actually, there are multiple channels. So for example, you could open one channel to type something interactively. And on the second channel, start an SFTP upload, etc. So those are the things that we are logging. Let's take a look at a couple of interesting bits. This is fairly simple. It's a program execution. So basically, the connecting user requested to run this specific program is this cat process. So basically, the attacker was taking a look at what kind of a CPU we're running or I don't, I don't know what the purpose behind this is. The second thing is that we found a lot is SFTP uploads. So it's no longer the case that they're basically just typing the malware that they're trying to run. They want to upload the malware directly? Yeah, they want to upload the malware directly. And then it's a tar file, so they untar it and then they remove the tar file so there are no traces left of what's going on. So it's really, really involved and they're doing this in a single SSH connection with multiple sessions. So without container SSH, how does audit logging work normally? Usually use force command to run something that's doing the audit logging. Okay, so there are other systems? There are other systems that can do this. There are audit logging programs. But as we saw with the force command thing, you have to be really conscious of potential security holes. So the developers of these tools have to pay a lot of attention and it is not necessarily, they cannot necessarily correlate connecting users that are running multiple shells. They cannot necessarily correlate these connections together. But so basically, if I as a standard single user just have my server up and don't secure my SSH, anyone can come in and I don't even know what they're doing. Maybe fail to ban, bans them if they connect too many times or whatever, but that's basically it. I don't have any overview of what they're doing. Well, I mean, if you have a weak password, then yes, that is the case. So I've seen recently, I've seen a case where somebody set username test user and the password test. And it took about, it took about 20 minutes for that server to be hacked. It was a Hanipot, right? It wasn't. I don't want to talk about that. So anyway, yes. So it's really quick. Your SSH servers get hacked real quick. And then we ended up having to perform an analysis on the virtual machine image to figure out what the attacker did because most of the stuff was gone already. So the approach of actually uploading things and then untouring them and deleting the tarp would work if there was no audit logging. That would potentially work, yes. Or you'd have to painstakingly go through the audit log, but if the attacker gained root privileges, then I might be able to delete the audit log. So I'm not, I have looked at some of these facilities, but I haven't looked into their capabilities. So you can produce a fully viable audit log using force command, but you have to be really, really, really careful to configure your SSH server appropriately so that you don't have a security hole. And if you just don't allow people to SSH other than into containers, this is not an issue. Containers are not 100% secure. You shouldn't run untrusted workloads in containers. But one of the things that container SSH can do, for example, it can connect to a remote container backend. So you can run the SSH server on a different server, different physical machine, if you will, then where your container backend is running and you can drop your users into a network disconnected container. No, that's interesting. Yeah. So because we are interacting with a container API, it is basically a standard input output thing. So it's a program that's running, but the program can be in a network disconnected environment. So SFTP would still work. But when they try to attack somebody else, that would not. You can do the same in Linux, again, you can use firewalls, you can do all kinds of stuff, but it is going to be very tricky. So I found one more thing that was really, really interesting. Which was? I want to guess what kind of an attack it was. Someone tried to send you an email and spam you with free ebooks. Spamming? Yes, email no. It was this. So what the attacker was looking for is a mobile device. So a mobile phone. Basically what this is, they're trying to send SMS, spam SMS. And the reason why they're doing this is because getting a new mobile number is expensive and the network providers that allow spam SMS usually get blocked really quickly. So what they're trying to do is try to find mobile phones that are connected to servers, which has been a popular way of doing alerting with Nagios or whatever, what have you to just send a sysadmins and a short text message that, hey, your service is down. And since SMS service used to be really expensive, or you want a really reliable way, what you do is you just put a mobile phone on top of your server and you just plug it in using USB. And this is what this malware was trying to use. And this brings us into the motivation. Why would you hack a server? Well, there has to be some sort of an incentive because you're going through a lot of effort to writing these malware, etc. So there has to be a commercial incentive. And one of the commercial incentives is sending spam SMS. So what you do, you build a botnet that is just spamming out text messages from monitoring phones. And you would probably not even realize this as a sysadmin, because there's something running if you're not looking at it, if you're not looking at the audit logs. And your phone bill is paid by the company.   But I mean, that takes a while, right?  So SSH attacks have become really sophisticated. It's not like in the good old days where an attacker would upload a pro script and then just run that pro script. These are really trying to make use of only the basic tools and they're trying to upload their own payload. They're static. Some of the payloads are statically linked. So they're maybe written in Go or they're written in C, but they're statically linked so they can run without any additional dependencies. They're using multiple channels within a single SSH session to make sure that the connection doesn't break or they don't end up somewhere else. They're trying to really keep a low profile when attacking SSH servers. So that brings us to security. So the basic rule, of course, when you run an SSH server. Yes. Change your SSH port. It's been the same 15 years ago. It's the same now. It's the same now, but a lot of people don't do it. And when you change your SSH port to anything but 22 or 2222, you will receive only a fraction of the attacks or you could just not use passwords. Old rule. Old rule. Use SSH keys. You can disable password authentication and open SSH. Really easy. Do it. Use SSH keys. Don't use passwords. Use strong keys. You will probably not get hacked if you use a weak key, but if you have a strong key, the chances are much less. So the other thing is just don't use usernames that hackers are using. Root, test, admin, etc. Those are usernames that an attack is going to try. And if you have a weak password for whatever reason, then they're going to get in. So just simply not using usernames like that is going to lower your attack surface. The other thing is, and this goes into the direction of targeted attacks when somebody wants to hack your company, is when you want it to attack a, let's say a web shop, how would you do it? Would you go for the servers where everybody's paying attention? Yes. Yeah, of course. It's like everybody is running head-on into the firewall, right? No. You would probably look at trying to hack a developer laptop. But those are unhackable. Everyone takes care of those and pays attention. And everyone's laptop is encrypted. What are you talking? Yes. And nobody is running untrusted and npm modules on it, etc. And containers off the internet because somebody said it's good, right? Yes. And since this doesn't happen, what are you suggesting? Yes. The thing is that when you're a developer, you are more or less running untrusted code. When you're downloading a library, there might be a script included that's running automatically when you're running containers. Yes, it's running in a container, but maybe not as secure as they should be, etc. And one of the low-hanging fruits is trying to look for your SSH private keys. And if you don't use key passwords, then your key is essentially unprotected. So a payload that's hidden inside of a popular library could steal your SSH key. So use a password like test. Yeah. The funny thing is, even if you use a password like test on your SSH key, it's going to be better than not using a password at all. But ideally, you would use some long sentence for your SSH key. And then you can use an SSH agent to not have to type the password all the time. Because the attackers are unlikely to run attacks directly from your laptop because that's going to raise suspicion. They're probably going to take the key and try and run it from somewhere else. If you want to be even more secure, you could just use hardware tokens like a YubiKey. And you can put your SSH key on there. And then every time you want to log in, your YubiKey starts blinking and you have to tap the YubiKey physically to use the key. And the last one, which nobody ever does, running security updates. The thing is... See, that's the nice thing about automatic updates. Yes, automatic updates are great. Especially on immutable operating systems. That's your topic, isn't it? Yes, so running security updates is really, really important. And if you can enable security updates, my experience is that you really need to run them weekly. There is something coming up almost every week. If it's your SSH server or some other library, you really don't want to be left in a position where not having applied your security updates is going to cause a problem on your system. And yes, it's painful. So as a SSH admin, that is really a hassle. And you need to think about how you're going to do that. And as Sanya mentioned, immutable operating systems, the concept of immutable infrastructure really helps with this. So apart from audit logging, which is really fun to watch, and then you left with gigabytes of data and hours and hours and days and months to analyze what your honeypot did, what can you do with this? Any thoughts? Teach about how to secure systems by showing audit logs? That's one option, of course. The other option that was the original reason why what I wrote the prototype of this years ago. It was written in Java and it wasn't all that great. So there's a Java library that implements SSH and it's called Apache Mina. And Apache Mina implements an SSH server. The problem was that I used Docker at the time and the Docker libraries available for Java did not work well with the Apache Mina. There's an async.io library in Apache Mina and there's an async.io library in the Docker client and the two were incompatible. So it worked, but when a customer wanted to download larger months of data, then it would get buffered in memory and the SSH server would run out of memory. Sounds good. Yeah, so not all that great. Internal DDoS. Internal DDoS, kind of, yes. And then customers complained, oh, SSH server doesn't work. Oops. So the basic problem of web hosting typically is that when you want to have an advanced permission matrix, so we have a bunch of websites and then different users should be able to access different websites because the Linux permission system is rather basic and of course you have ACLs, but setting those is problematic and there are various tools that then forget to set them or actively unset them. So then user A creates something and then user B can't access it, et cetera, et cetera. So using containers to work around that problem where every user has the same user ID, so the same numeric user ID, but the folders are mounted into containers dynamically is one of the use cases that was the earliest for this prototype. And this is one of the use cases that appeared in people who are using container SSH to give people access to websites and give them tools like, for example, with in one of the cases, it's a Drupal website. So there's this utility called Drush, which is the Drupal shell and it's already there in the container and they can use it and it's dynamically provisioned for the website that the user is trying to access. The other option, of course, is Linux learning environments because you create the containers dynamically and when the user disconnects, then the container is removed as well. So it's not like you then need to clean up after your students. You can just simply let them in there and it will run as long as the user needs them. You can mount volumes for persistent data but generally the container is deleted when the user disconnects. That's pretty cool. Yeah, and later on we plan to add features that let a user keep the container or stop the container etc. So there are many things that we want to add to this but right now the containers are removed when the user disconnects. And the third thing is a high security environment. As we mentioned before, the audit logs can be automatically uploaded to an S3 compatible object storage so they're not stored locally. Which means no attacker can delete them and they can't be modified or anything else. With an asterisk, S3 does not allow streaming data because you have to finalize the output. So you upload it in bulk. So if in that time someone deleted it, it's... Yes, but the upload is... So it uploads in 5 megabytes chunks and you need to finalize the upload to finish it. But do you finalize the upload? So when the user disconnects then we need to tell the S3 object storage that the upload is complete and it can actually create a file. And from that point on the object storage, there is a feature that some S3 compatible object storage is support which is object locking so that nobody, not even you, can delete that file. You can only delete the whole bucket. No, not even that. If you set a time, this is called a worm storage. It's typically used for when you have to ensure that data is retained for a certain period of time. Then you use a worm storage. It's called write once read many. And then you can upload a file and it cannot be deleted for the time that is set. For example, three years or one year or six months or whatever. And then no attacker can delete it. And this is usually done for compliance reasons. You can use this for invoices, you can use this for audit logs, whatever you need to do to stay compliant with whatever rules you need to stay compliant with. And then of course the container backend can run on a completely different server which is an additional security measure. So even when the container gets breached, your audit logs and your SSH server stay where they are and you have the ability to analyze what happened. And one of the use cases that we saw in one company using this is they did something where they needed to provide access for their people to customer environments. And the way that they did this is they dynamically provisioned containers and of course enable whatever logging they enabled. I don't have the details. But the idea was that in the username, the person who needed to connect could specify which environment they needed to connect to. So for example, they could do their user at customer name in the username. And then that's how they connected to that environment. And everything was logged and they know that this person connected that environment. So and they locked it down. So only a specific command could be run, etc. So it's done in a way that's easily traceable and they cannot use SFTP to transport things out, etc, etc. So there are many things there that have been added to provide a high security environment. So if you want to learn more about container SSH, you can go to containerssh.io or... Debugged it. Debugged it, yes. So if you want to read more from us, various topics, then you can go to debugged.it. So with that, thank you very much for your attention and we are hoping for your questions. Thank you, bye.