Today, the trend level channel, the trend level universe is having a full circle moment. It's all coming back to square one. If you didn't know, Teen Wolf and Paramount decided to release a Teen Wolf movie.  And if you are not a long time trend viewer, which many people aren't, that's completely fine. I used to be the biggest Teen Wolf fan ever. Not to mention it was the first show I ever did reactions and reviews on. So I wanted to say all my history on Teen Wolf to let you guys know. This is not just me watching a cringy reboot. This is an avid fan coming back. I've already heard a lot of the news about the Teen Wolf movie. And if you've been following kind of the little like press releases that have been following up until this release of the movie, it has been really bad. So you're bringing back characters and you're leaving out major roles. So Dylan O'Brien and Arden Cho both decided to not come back. Dylan O'Brien, I have no idea why he didn't want to come back. And Arden Cho did not come back because they were not giving her an equal pay like her other co-stars were, which is just another hit to Arden Cho and Kira Yukimora's character because her character has been through so much. I will get into all the disservices that Kira Yukimora faced within Teen Wolf later. It was a huge slap in the face for them to do that to Arden Cho because this movie is surrounding and kind of reviving the season three B plot, which was their most successful season.  What's shitty about that is that Kira and Styles were like the most crucial characters of that season. Like they were literally without them the season wouldn't have happened. And so to not have them back, you should have just shut down the whole movie. If you were not able to get Dylan O'Brien and Kira Yukimora on, you should have just shut it down because all the other characters don't matter if you're going to be referencing the Nogitsune. And all of that being said is very important. And I had to say it all before we got started. It's time to actually watch the movie. Ozo Meshigate Kuruzai. Wow. That was like not even trying. Ozo Meshigate Kuruzai. You didn't even try and you work at a Japanese restaurant and you're not even trying. It was made from the wood of a sacred tree used to capture a dark kitsune. Whatever it is you came here looking for. No, exactly what I came here looking for, Mr. Donbar. You all do. So the whole entire story revolves around the Nogitsune and Fox spirits. All these Asian people and you couldn't hire Art and Joe back. Awesome. You can't get any better than this. You love using Japanese stories and folk tales that you won't pay. The Asian actress who was playing said Japanese Korean character Kira Yukimora, the proper pay. OK, awesome. Oh, this sucks because you're undoing everything that you did in season 3b that made season 3b good. Oh, it's so bad. Oh, my God, it's so bad. And who was that person that was putting on a weird Batman voice?  I whether or not that's like a hostination or like the Nogitsune playing tricks on him, it really bothers me that they're bringing Alison back.  No, far from it. I actually really liked Alison in her like prime. Like, I loved her. I just think it's ridiculous that they will go to such extent to bring back Alison, but they couldn't bring back Kira and Syles. Like, like you're not making any sense. You are doing triple backflips to bring Alison back from the dead, but you are not willing to just pay Art and Joe enough to bring Kira back to us. In this day and age, you're really letting your co-star get paid less than you. On Paramount Streaming, like, come on, it's not just a dream. Alison is caught between life and death. It's not that simple. Just a word. It's a concept.  What? Why? Why does this need to be rated R? Why do we need an F bomb? Who needed an F bomb and Teen Wolf? Not me. I really didn't care. I didn't care for that. But if you drive out tomorrow, I can meet you there by afternoon. This is the most half-assed plot. I've ever witnessed in my entire life. This is the epitome of reading a fanfiction alternate universe story.  You are not even trying. Out of all the things that have happened after Alison died, you guys are acting so dumb. Like, are you kidding me? Like I said, if this were to happen, the first person you would go to would not be the end. It would be the Yucca freaking moras because they've been through it twice.   And literally, it's enough to not do the movie. It does not work without them. Why do I have a feeling that that's about me or maybe my son? He has a son with who? That looks nothing like Derek.  Derek looks ambiguous in a way. He looks a little bit ambiguous, right? So that's Derek's child who looks so white. He looks Norwegian. OK, like, OK, OK. You couldn't dye his hair. You couldn't get the guy that played young Derek to come back or something. You couldn't get someone with like dark brown hair. And who's the who's the mother? Who's the mother? I don't even remember the last girlfriend Derek had. I think the only girlfriend that Derek had that I liked was Brayden. And that boy does not look like it's half Brayden and half Derek. This is bothering me. It's like every single choice of this movie. They were like, OK, it literally seems like a fanfiction war. It's like, yeah, Derek's son has bright blue eyes and auburn hair. Literally looks like it could be Lydia's son. By the looks of it, Lydia and Styles aren't together. So awesome. That's great. Build up, slow burn, all for nothing, thrown away into the garbage. Well, Lydia called begging me to help as usual. And I said, OK, so long as she promised never to tell Ethan because I promised Ethan that I would never come back to this nightmare hellscape of the town. But why do we need Jackson's help? What would Jackson do? He wasn't even there when it happened. Ethan should have came back and he should have questioned if Aiden was in the same Bardo state that Alison was in because he died the same way. I never really liked Jackson and I was a little excited. I don't know when he came back in season five or maybe in season six, but he wasn't a big enough character for the reboot movie. Never. Oh, never. I don't even know what to say. I just saw her leap through the air like a spider monkey. But as makey and she's with Parish, that was never a plot line. That was never a plot line. It would have been it would have made more sense if Lydia and Parish were together at this point. They put Malia with anyone. They like literally have no care in the world for her storyline. She's been with Stiles. She's been with Scott. She was almost with Theo and now she's with Parish. It's like you guys have no respect for her whatsoever. They're just doing stuff to do stuff at this point. Like they don't care. This is honestly just sad. Like I never directed that scene jail out of all the ways to introduce Malia's character, all the badass ways we could have seen her character. You decided to have her leap through the air make it. I just saw his booty cheeks. What in the world? Ew, you made Teen Wolf movie rated R so you could show Parish's butt cheeks. Are you kidding me?  And that's frigging Derek Hale.    Derek Hale.  I'm still caught up on the fact that it's Malia and Parish. And they have this like relationship that like doesn't make sense. They I don't even think they exchange sentences with each other in the original series. I don't even think if you looked at Malia's character and asked her who Parish was, she would know who that is.   That's what you should have shown. What is it?  I'm actually speechless. I'm actually so speechless right now.  Awesome. Oh, it's so bad. I did not expect it to be this bad. Wow, play. Didn't even try to catch it. Didn't even try to catch it. Awesome. So now the fly is just going to keep bouncing between them. Awesome. Great. That's awesome. That's so great. That's literally so smart. Oh, my God. Stop. What is that? I don't even want to talk about it. I don't even want to say anything about that because like, what is that?   You're fucked. Pause.    She just appeared from like pixie dust.  I have seen how many butts have I seen? Three, too many.  I didn't need to see that.   So that explanation of Allison being resurrected is kind of doodoo. It is kind of doodoo.  I think that's a great idea. You don't know who my son is, do you? I don't know who you are, but you look. I don't know who you are. Four minutes, not a second longer. What about four and a half? I am perfectly fine with that. And that was the best scene I've ever watched. That's the best scene of the movie so far. Coach and Derek, best scene of the movie. You got me there. Awesome. And that's just because the actor that plays coach is a really good actor. The usage of Asian characters in this movie is kind of wild. Like, right? I'm not like crazy, right?   The spirit in you, it's all the it's wrong to be connealed. Yeah, I'm gonna I'm I'm putting my foot down on that. The usage of Asian characters in this story is kind of just mocking me at this point. Like, it's kind of just like throwing dirt in my face at this point.  I absolutely loved it. I thought it was so clever and I love the usage of Kitsune's. And I thought it was so amazing. And now it's all tainted because they couldn't just pay one actor enough. I don't remember liking Riddles.  It feels like he's doing a little bit too much now. Like the actor came back and he's doing a little bit too much. Like, calm down. It's not that serious. Like, none of this is that serious. In the winning move, once the winning move, we call it the divine move. I I'm going to do horrible things to this. Anyone who was involved with the making of this movie do horrible things to you. It's just saying things at this point. You're literally just saying things from season three and being like, yeah, it's like when you write certain lines to get people in the audience to go. Divine move, the styles. No mention of Kira Yukimura at all. The way her ancestors were literally like the single singular piece to be connected to the nukitsa day. Are you kidding me? Are you kidding me? That's the one name you won't shout out for for an applause. Today's video is sponsored by Raycon. You guys know I love my Raycons. I use my Raycons all the time. I use them when I'm filming. So that means I use them when I'm editing and I'm recording. They're also my go to workout earbuds. I always use them when I go to the gym because they have noise isolation and awareness mode. And they are also water and sweat resistant. So I don't have to worry about them breaking if I'm sweating gallons and gallons of sweat. That's really gross. Raycon makes it so you don't have to choose. You can get premium sound quality without breaking your bank. Raycons come at about half the price of other premium audio brands on the market right now with all these things. It's no wonder that Raycon has over 50,000 five star reviews. I've had this pair of Raycons for, I think, about three years and they are still going very strong. They're dirty because I am disgusting, but they have still been going super strong. I even broke the case because I was I was going a little too hard and everything still works perfectly fine. I can't say that for some of my other wireless earbuds. I think they died within a year and a half, whereas Raycons have lasted me so long. This one is a veteran.  She's taken her place because she's pink and pink is better. But these are the OGs. These are these are the ones that I've used in practically all my videos. So if you're ready to have something small with a big impact, you guys can click the link in my description or go to buyraycon.com slash Trin to get 15% off your Raycon owner today. And if you buy a pair of Raycons, just know that that is in turn supporting me and supporting this channel and making it so I can make all this content for you guys. Also, Raycon contributes to this channel because they are the earbuds that I use to make these videos. So make sure you guys go check out Raycon. Thank you, Raycon, for sponsoring today's video. OK. I I've just been filled with rage. They just they literally put in a stand in Kira. Awesome. Just throw in another kitsune. I am so far beyond upset about how they're their usage with their usage of Asian characters within this story. It is foul. It is so transparent. It's so transparent just using Asians for the sake of it. Just being like, yeah, we love their folk tales, but we don't really like paying them as much. What's also killing me is that not only are they not including styles or Kira, they're not explaining it. They won't even mention Kira Yukimura's name. They won't even say her name in this Godforsaken thing.   He passes out, things come out. He's on the floor, claws two. And also what I'm getting from this is that the Malia Parish storyline is so irrelevant to what's going on. It's almost as if you didn't need to include it. Like, that's what I'm getting from it. I'm also seeing that Jackson really wasn't necessary either. Great. A lot of unnecessary people here. That he slashed my throat once and it killed me. When it comes to you, most of us try to forget. That is no way to speak to your father. I don't care about you either.  This is this one's going to get them. People are going to love seeing this character come back. It's like so, so lackluster to me. I'm watching it like I'm watching the same thing I've watched for years. Does anybody remember in season six when he like took out his eyeballs? Like, he took out his eyeballs and he magically got them back. Like, he literally blinded himself to defeat the enemy. And then he just got him back. Like, why doesn't anyone want to talk about that? I was done by a sword. Like, I'm like, I'm such a hater. I'm such a hater because every single time they say stuff, I just am like, yeah, OK. You'll never be here. I'm sorry.  And no hate to this girl like at all. Oh, she just died.  Maybe it's good that Kira wasn't in this.  OK, well, I'm assuming not all of these people are dying. They're probably like going into a jar or something. This is like the same thing that happened in Season 6 when they were all like turning into stone, right? They like all turned into stone in the school and then they got like turned on stone or something, right? That happened in the sixth season, I remember. Oh, wow. Oh, wow. Oh, my God. Oh, my God. That's definitely a choice. Dude, this is Teen Wolf. This is OG Teen Wolf right here. Kira and Scott in the desert. Dude, this green screen goes crazy. Never forget your roots. Oh, oh, my God. Oh, my God. There's blood. But yeah, we can see. Why were you snipped? Why did you go on all fours to sniff it?  What do you mean there's blood all around us? We could see it clearly. If we don't die tonight, we can talk about the look. If that had any setup in the prior seasons, awesome. But it didn't. So it's kind of just a waste of my time. Not saying that everything has to be connected to the original seasons, but it wasn't even built up in this movie. So I can't even I can't even think of it of anything of value. He says, brothers and sisters, have I not? But this man's father is my father's son. He's doing way too much. He's doing absolutely way too much. None of it is that serious. Calm down, be calm. And that's so foul. That's that scene from that episode is such a crucial moment, not for Allison, but for Stiles and Scott. It's about their friendship. When Stiles takes it, it's like, I will die.  And it is amazing. And it is one of the most like heartfelt scenes of the show. And you just throw it in there. Like, oh, my God, it's a flashback of Allison. No, it was about Stiles and Scott. Oh, my God.  I think I remember you or maybe someone like you, maybe someone I was in love with, and maybe she's like, I think I remember someone named Isaac. I think I remember a hottie with a body named Isaac. He's not here either. Would have been great if he was here, too, because he was also a crucial part, maybe not as crucial as the others. But he was like a very big part of Season 3B. Adrian Harris. He kind of looks like our chemistry teacher. I was your chemistry teacher, Jackson.  Do it.    Are you kidding me? All that for him to be revealed in us. Everyone be like, who is that? He wouldn't let me come near him for days. That look of fear in his eyes when he saw me. That's why he can't change. Every time he starts to or he must see my face snarling back at him. What's that kind of good best part written? Actually, you've done something with that one. Wait, they kind of like actually. That was actually a very good dialogue scene and a really good backstory behind Eli's transformations. Love it. He needed me to help him win. All I had to do was give him my pain. Thanks to you and Scott McCall. I have plenty. It's supposed to be this like, oh my God, he's in so much pain. He's getting all these people back.  Literally, like, you don't know. I don't know who you are. It would have been better to bring Jennifer back. Like, you are nobody. Like, you are the epitome of a nobody. Because if she didn't tell me who you were, I wouldn't have known who you were.  That was definitely an effect. So it definitely was one. What?    Foxfire was his protection from that.   And the thing is, the funny thing is, is that they would have brought Kira back just for Scott to say that he's in love with Allison.  What is that?  It's like they just they said, just say what you want. It really is like they just gave people screen time and said like, OK, go OK, do what you want. What you've always wanted to do, just do it. We don't care. They're kind of good. I kind of like they're the best addition to the movie and the storyline that I've actually enjoyed. I thought it was kind of cute, very refreshing and a wonderful character development on Derek's part. Right. Like it actually moves his character forward and he had he had something to overcome within the movie. It was great. It's just like there's so many people, like why is it so difficult? No, the fact that Parrish can't hold this motherfucker down by himself is concerning.  I just like wish they didn't. I wish they didn't do things like that. So really, all of you guys are very useless.    Like I get it. It's supposed to be a sacrifice at the end of the movie. It should have been Scott to die. Scott dying at the end of all of this. So funny and so like way more powerful than anything. That not powerful. Derek had the best storyline in this whole thing and you killed him at the end.  This kid is left without a father and now Allison and Scott are gonna play mommy and daddy for him. I'm sick to my stomach. I'm sick to my stomach. She's been dead for 15 years. You know how fast the culture moves? She's not gonna know anything. Oh my God. And it wasn't even like a good death either. It was cause he had to hold him down and he burned up into flames. I don't even think you're Derek Hale's son. You don't look anything like him. Not an ounce of that tall, dark and handsome in you. I'm not worried about the past. Or your best friend apparently. Or apparently your best friend that you like literally wanted to live and die by. Or that, you don't care about that. It's still going. It just keeps going guys. It just doesn't stop. There's always a new one. Oh my God, it just never ends. It just doesn't stop guys. Just keeps on going. Remember who you are. Ending the movie on a still of him looking at me and breaking the fourth wall is like, I don't have very many nice things to say about this movie. I think it was extremely long for the entire plot. I think it didn't seem like a movie at all. It definitely felt like a show. Couple episodes of a show. Didn't feel like a movie at all. I'll start off with the good things because they're easy to point out. Derek's plot was phenomenal other than his death. I think that he was pretty much the only character that had any development. Development from the end of season six to now. And then also development throughout the movie. I think the backstory and the dynamic he has with this son was great. Kind of liked it that they didn't even mention the mom or who the mom was. I think it kind of would have been not very necessary at the end of the day. I quite liked Eli. I thought he was a fine character. I thought he was funny. I thought he was cute. He was kind of that charm of Teen Wolf that I feel like a lot of people liked. Was he kind of like a styles rip off? Kind of, but I was okay with it.  It really was. And that's not me just saying that in a way of like, oh my God, they did certain characters dirty. It's like if you compare it to what the actual show was, it kind of is just garbage. It's hot garbage because it doesn't, it tries to reinvent the story. And it is just taking back, it's taking out the things that you liked from season three, packaging them up a little bit differently and hoping that you'll get an ooh-ah because you're excited about seeing these references or excited about seeing them mention it again because in Teen Wolf, after season three B, kind of stopped mentioning the gets in A. They kind of stopped mentioning the only and they referenced it even less after Kira laughed. Without Kira Yukimura, the story falls flat. It was her story. It was her story. Not only would it have been beneficial for their plot and what they were going for, it also would have been a great opportunity to rewrite their wrongs of Kira Yukimura's exit of the show. So phony to have that Japanese character with Liam and just be like, oh yeah, she's the kitsune. Like we need one, so we'll just make Liam go off to Japan, I guess, and work in a ramen place and have this love, whatever. Like so half-assed, so half-assed and almost like, it's like honestly, kind of like a mockery to me. I genuinely felt, and this might sound a little bit dramatic, I did feel like this whole movie was like spitting in my face when it came to their usage of Asian people.   Who was so unnecessary? Jackson, unnecessary. Literally, who are you and why are you here? You added nothing. Jackson added nothing. Liam and kitsune added nothing because they just used her as another Asian female to fill the void of Kira Yukimura not being there. Okay, that feels great. That feels awesome. I must, that must feel great to just be like, oh yeah, we'll just put in a different Asian girl and have her be a kitsune as well and it'll have the same effect. It'll have the exact same effect. The reveal of Harris as the person who orchestrated this all, so laughable, so laughable because who are you? Out of every Teen Wolf character in the Teen Wolf universe, you chose him the most irrelevant character I have ever laid eyes on. It would have been a bigger event if Coach was the person that was doing all that. At least we knew who Coach was. At least we knew that, oh my God. It was, I don't even know how to explain that. That was awful. And what I said earlier, it just seemed like they pointed the camera at these actors and said, do what you feel, like do what you want. That's literally what it was.  I wasn't really a hard fan to please. I'm really not that harsh of a critic usually, especially for things that I like. Like things that I'm a major fan of, I can let a lot of things go. I can put on my rose-colored glasses for most of it. And this was just impossible to like. I have a hard time understanding how it moved past even the script because it felt like a fan fiction. I've seen teenagers write better continuations of Teen Wolf than this. So awesome, Jeff Davis. Going out with a bang. Haven't done much since Teen Wolf. And this is, this is our legacy. Awesome. And I think it's time that we tell actors from popular teen shows to let go. And it's okay to move on. It's perfectly fine to move on. No more reunions. Unnecessary. No more reunion fan events. Time to grow up. Let me know what you guys thought of this movie. I am so excited to hear what you guys thought of this Teen Wolf movie. I know many of you guys are Teen Wolf fans. I know many of you guys were like eating it up when it was on air. As I was, I'm literally breaking my, my little teenage self's heart right now because I'm ripping these characters that I once so loved. Once loved so deeply. I'm ripping them apart. That is it for today, guys. I hope you enjoyed and I'll see you next time. Bye.


Jan Lieskovski and Martin Preisler with his presentation. Good morning and welcome. My name is Martin Preisler. I work at Red Hat. And today with my colleague Jan Lieskovski, we'll be talking about how you can use ASCAP to secure the cloud. So there was a talk yesterday by Josh Pressers called Security. Everything is on fire. So just in case you weren't scared enough by that, we will try again. So everything indeed is on fire, and there are several types of fires. We will discuss how to fight two of them. One is about software flaws. So having unpatched vulnerabilities in the software you have in production deployment. And the second is configuration flaws. Having your services configured in such a way that allows attackers to attack your infrastructure. So let's first talk about vulnerabilities. There are several kinds of vulnerabilities. The first one I would like to talk about are undiscovered vulnerabilities. We can all agree that these are pretty bad, but they are actually the better type of vulnerabilities. Because they are undiscovered, so it's relatively expensive to exploit them. Because the details aren't public. Somebody has to invest a lot of effort to find these vulnerabilities and exploit them. What is much worse are known vulnerabilities. So a vulnerability that has an assigned ID. It's well-known in the community. There are details how to attack with those available in public. Some of these vulnerabilities are so bad that they've even received nicknames. And fancy names lately like Shellshock, Poodle, and Venom. And probably the most famous vulnerability has even received a logo. So we can all agree that vulnerabilities are dangerous and they are a bad thing to have in our infrastructure. We cannot do anything about the unknown vulnerabilities, but let's try to do something about the known ones. Let's try to find some way to prevent having known vulnerabilities in our infrastructure. But this is getting increasingly more difficult because in today's day and age, we have single-purpose containers in our infrastructure and single-purpose virtual machines. That means that there are many different types. Usually we no longer have that one golden image that we can use and check. And this diversity of containers is making it more difficult to audit our machines. So we need some sort of automation, some sort of a tool that we can run on our infrastructure. And this tool needs to explore and do everything for us automatically. And I'd like to present such a feature in Atomic. It's fairly new called Atomic Scan. What Atomic Scan does is you can give it a container or a container image, and it'll explore it for CVs. It can scan either one container or one container image by ID or by the image name, or it can even scan multiple images, which I will explain later. The output can be a summary of these results. So in this example, we can see that we have a container that has zero critical vulnerabilities, zero important vulnerabilities for medium and zero low-separated vulnerabilities. When we use the dash-desk detail as a command-line parameter, Atomic Scan will give us detailed information about these vulnerabilities, including links to them to their description. And we can also, if you use dash-desk containers or dash-desk images, we can scan all the containers we have or all the images we have in our infrastructure. So this looks like a pretty nice, magical tool, but as a security guy, I want to understand how this works before I trust it, right? So let's very briefly discuss how this works and why it works. So the first thing that happens when this command is run is we look into the container and we detect the operating system version. So be it REL6, REL7, Fedora, CentOS or something else. Then according to that version, we need to find the CVE database, so-called CVE feed from the vendor. So for example, if it's REL7, we need to download the REL7 CVE feed from Red Hat. Once we do that, we load it with a tool called OpenScap, which we will describe later. And OpenScap will look into the container and compare the versions of the software in the container with the versions in the CVE database. So if the vendor is giving you data that some version ranges are vulnerable to some vulnerabilities, OpenScap will report them. So here's how it works architecturally in Atomic Host. We have the host OS with the Atomic Command. On the host OS, we have a super privileged container where all the functionality is encapsulated. Only this privilege container has OpenScap and OpenScapDemon, both projects that power this functionality. And when you call Atomic Scan, a debuff call is issued to the super privileged container, and the super privileged container looks at other containers that are on the host OS to explore them. Okay, but security is a much broader term than just vulnerabilities, which we've discussed so far. We need to discuss the other important part of security, which is getting the configuration right, so-called hardening. So let's discuss this right now. So let's start by explaining what a security policy is. Security policy usually is some sort of a book or a very big binder that's human-readable, and the auditors, they carry it to these companies where they audit it. It contains a list of rules to follow with human-readable text about each of them. Usually it's a description of the rule, what the rule is about, some rationale, so why you should comply to this rule or not. And then some guidance is how the auditor can check that you are actually in compliance with this rule or that you're not in compliance. And of course, some guidance on how to fix the issue if you're not compliant. As I said, this is usually a PDF, some spreadsheet, or some other human-readable text, or even a big book. It's not important really to read this text, but this is just to illustrate, this is a real-world security policy called PCI DSS from the payment card industry. And you can see that these are human-readable rules, and there's no way we are going to read this and evaluate it for all our containers in our infrastructure. So we need something to make this automated. And I'd like to introduce a standard that does just that called ASCAP. It's a NIST standard from National Institute of Standards and Technology, a USA standards organization. And very simply said, it's a set of data formats for taking these human-readable policies and making machine-readable guidances from them. So this is an example of an ASCAP security policy. You can see that it's more structured, and instead of having just human-readable instructions, it also has some base snippets that you can execute to fix the situation or check. Other than that, it contains very simple information. It contains the descriptions, the guidances, everything the human-readable security policies have. So there are two types of ASCAP security policies, two types of use cases. We've just discussed the first, which is to detect CVE vulnerabilities like Heartbleed, Shellshock, and so on. And now we're going to discuss security compliance, which is to ensure that your infrastructure is set up according to some security policy. So as an example, when we're doing security compliance, we're asking different questions than with vulnerability assessment. We're asking whether root can log in over SSH. We're asking, for example, if AC Linux is enabled, we're asking if temp is mounted on a separate partition with no exec. We're asking if we're running any obsolete insecure services and so on. And, I mean, just the standard is not enough. We need some sort of implementation to use the standard. Open ASCAP is just that implementation, and it's a project that we're working on at Red Hat. Open ASCAP is an ASCAP 1.2 implementation started in 2009. It's NIST certified, and it's a library and a command-line tool, but also a GUI front-end is available for easier use, and I'd like to demonstrate this GUI front-end now. So let's give you an example. Let's scan a single Fedora 23 machine with Open ASCAP and ASCAP Workbench, and let's use a common profile from ASCAP Security Guide, which Jan will introduce later. Let's just use this as an example for now. So the first step we need to do is to install the tools. We need to install two packages, ASCAP Security Guide and ASCAP Workbench. After that, we just need to start ASCAP Workbench. When ASCAP Workbench starts, you'll see this screen. Let's just ignore customization and profile for now and focus on the rules. ASCAP Workbench will give you titles of the rules it will check, and when you click Scan and wait roughly three or four minutes in this case, ASCAP Workbench will give you the results with no other interaction necessary, so it'll give you fail and pass results for all these rules. But what if you need to find out why you actually failed for one of these rules? You can click Show Report, and an HTML report opens up in your browser with a breakdown of the results. So in this case, it looks terrible, like 27 rules passed, but 46 rules failed. Keep in mind that this was freshly installed for Dora and a pretty strict security policy. But what if we need to explore why some particular rule failed? We can go into the report, find the rule that we're interested in, and when we click it, we see the description of the rule. So in this case, it's a rule about password minimum length, so about password policy, and this rule enforces that users have password of minimum length of at least 12 characters. So we can read the description, and when we scroll down, ASCAP will explain to us why this rule is failing. So in this case, ASCAP says that at C login depths, there's a password length value of 5, whereas it was expecting 12. So now I would like to give the stage to Jan, who will explain more about different security policies. So hello, my name is Jan Lioskowski. I work as software engineer in the Red Hat, in the same team like Martin. And the primary area of my focus are security standards and security policies. We try to simplify the application of security standards in different software products. And I have came here to present why you should be interested in security policies, which of them are actually already available and what will be the next steps. So why the need for security policies? There are multiple aspects. One might want to answer these questions. I have created a couple of them, and so let's have a look at what we have got. The first point is Linux distributions are multi-purpose, are intended to be multi-purpose. Of course, one would expect different security requirements for some classroom workstation, another for high-performance computing server, and yet another for some laptops that are expected to be used on airports. Then there are those high-level security standards. For example, payment card industry data security standard, to mention one example. The issue here or the observation here is that they are often expressed in abstract language. They are universal in the sense they should be applicable to variety of different operating systems, different software products, and they need to be that universal. In contrary to that, there are concrete operating system details or concrete software details, like concrete steps you need to perform to be aligned with that standard. As Marcin already said, due to difficulty and the complexity of those standards, there might be a desire to have these things automated. A SCAP security guide. Like Marcin briefly mentioned, a SCAP security guide is basically a collection of security policies expressed in a SCAP protocol format. It's expected to be suitable for both the humans. In the sense you can see what the policy will actually perform when you scan the machine, and also to machines they are expressed in a natural way so the machine can automatically process them. Like we mentioned, there might be a desire for automation, so a SCAP security guide provides all the content that is necessary to fully automate the process of scanning and correcting a system. It's a community project. If interested, you can contribute. If you find some bug, you can file an issue. It's open source. All the content we create is released under public domain. So this slide presents some policies that are already available. There are two concepts to mention. One is security policy, and the other is security profile. If I should use some simple analogy, we could map security policy to library. Library for technical literature and profile would be more specialized, would cover more specialized subjects like mathematics, physics, etc. For example, here we can see that currently we ship security policies for RL, Federa, all those derivative operating systems, also for Debian 8. What's interesting here is we are not focused anymore on operating systems. There are also products or software components that are known to have a lot of security falls and therefore require or attention to create security policies for them. For example, Firefox or Java are the two main examples of policies you might be interested in searching for. Of course, if this picture isn't, like, is missing some of your product you would like to see here. It's easy to start contributing. File box, feature request, provide justification why we should be interested in your product and we might have a talk and can cooperate together. So security policies. There are, like, in any other human activity, there are two sides of the coin, the bad news and the good news. The bad news is, like Martin said, that you need to install a separate package when you want to use them. The good news is that in solutions, we often provide the security policies already included, so you don't need to take care for additional installation of these policies, but they are somehow already included there. For example, this is some blog post about, some announcement about Red Hot Cloud Forms or Manage IQ. If you want the interesting point here, it's 8th November last year and they justified the enhancement in the security area and as you can see, they explained it while they are doing it and they added support for security template, implementation guide and SCAP protocol. We can meet security policies also on localhost. This is the case Martin already introduced. Basically the very same tool. We can meet them even during installation of operating system. It's not necessary to split the tasks into two steps, like install the operating system and then enforce the security policy. It's possible to merge these two steps into one. Here is example of tool which is called Oscar Benek on the add-on. It's a graphical front-end for those that don't like graphical installations. I understand that for those thousands of systems, you probably wouldn't use the graphical interface. There is the kickstart equivalent, so you can use this snippet in playbooks and script engines. What's interesting here, basically the important is just the profile role where just by changing the profile name, you can install a system compliant against different policy. Some example, as I mentioned, Firefox is one of the tools that are carrying pretty a lot of security falls. This is an example of what a user might want to harden the Firefox instance more. For example, they might want to disable secure sockets layer and replace it with the security on the transport layer. A node here, these rules aren't interconnected somehow. You don't need to use all of them. It's enough to specify just one of them. It's enough to specify any subset. There is no relation. This is just an example. Another example for the Firefox Valley, what might be interesting is to enable the certificate validation. Maybe all of you remember all those warnings that this certificate is untrusted and if you want to accept the exception. Another example might be if you are bothered by those Firefox windows showing up, you might want to set or specify, enable this rule. The natural question is how where this policy is created. So I will speak a bit just motivation of why we would want to customize the policy. Here is an example of PCI DSS rule requiring some password length and the categories to be present in the password. We can see they require seven characters and two categories. Of course, this doesn't need to be sufficient for each individual developer company. So they might want to strengthen or vice versa, weaken the existing policy, strengthen in the sense they might want to specify or require four categories or less categories in the case for weakening it. Another use case, why to interest in the policy customization is to create your own one completely from scratch. Here is an example, again using Escab Warbench, how we can customize a policy. What's interesting here for us is basically just the customize button and here is how we would do that. We would, in the top, we would use the select all button and specify just those rules we would like to use. In this example, I have created a picture for the first case of Firefox policy, like disabling secure sockets layer and enabling transport-wise security. You might be interested in more details how to customize the policies, so we understand that this is like a complex topic, it's difficult to customize them and we have created a dedicated portal to all the tools and policies related with OpenSCAP. Here is an example of the tutorial focusing in more detail how to customize a security policy, but you can find there a lot of additional information about the tools we present here today and about security policies, et cetera, so check it out. The question might be we have presented a lot of tools and a lot of policies and if there is anything left for the future, a lot of things have been done and if there is anything we still need to do, so the answer is for sure. To speak about in more detail, we want the policies and also the tools to be integrated with more technologies. To mention some examples like Docker, OpenShift, OpenStack, Red Hat Enterprise Virtualization Solution, so if you are interested in these technologies and the topic of security policies sounds like fun for you, we can have a talk, we can cooperate in the future together. So that's for my part. Thank you. Okay, so Jan has talked about how you can get the content for infrastructure and let's now talk how to really deploy it. We've used GUI tools, which is useful in some use cases, but sometimes you don't even have an xorg server available, so you need some command line tools to use. I won't explain this in great detail, but just keep in mind that what we've shown in the GUI tools will also be accomplished with the command line or SCAP tool. We also have convenience wrappers to scan containers and VMs. The advantage of those is that you don't need to install any tools in the virtual machine or container. You can scan them from the outside, which is what security people usually like. They don't like to install new software in their production. Okay, so we've made it much easier. We've come from the book, from the binder, which is a human-readable text, and we now have some machine-readable policy. But we've only done solicited one of scanning, so the system administrators, they still have to load the policy manually and scan each machine manually, and this is not enough, because if something needs to be done manually, people will just ignore it in time and they just stop doing the compliance. So let's now discuss how we can accomplish scanning some resource continuously, for example, scanning a container every Sunday around midnight. So for that, I'd like to introduce a new project in the OpenSCAP world called OpenSCAP Demon. Instead of being a tool, it's a service. When it runs, it provides a D-Bus interface. There's a command line tool available for interaction, but it just issues the D-Bus commands to the Demon. A central task in the Demon is called Task, a central concept, and the task is about evaluation of some resource. So usually a task contains the content, the profile, which resource you want to scan and when you want to scan it, so some sort of a schedule. Tasks can be evaluated on demand or a schedule, as I said. Another goal when creating this project was to make it a bit more interactive, because as you could see in the OpenSCAP tool, you need to put in very long IDs of the profiles, and this is a big pain even for me. So when creating the tool, we made it more interactive. When you're creating a task, the Demon gives you a list of probable choices. So for example, here I'm creating a task to scan a remote machine every Friday, and when I press Enter after setting the target, the Demon tells me the Escape Security Guide contents that are available, and I just need to put in a number. So in this case, I'm scanning a Rails 7 machine, I believe, so I'll put in nine. And after pressing Enter again, the Demon will figure out which profiles are available, and again, it'll let me just type a number and pick the profile. So I think from the usability perspective, there's a big improvement over typing the IDs manually. So in this slide, I've made a screenshot of a task overview. I've created a task for everything the Demon can scan, so that's the local bare metal machine, a Docker container, a Docker image virtual machine that's either running or shut down, or a storage image or a remote machine. So it's like a showcase of what the Demon can do. We really tried to unify the scanning interface in the Demon so that you can scan all the resources in the same way. So after you've created the task and they're scheduled and they're running, you need to get the results. So this slide demonstrates how to do that. You can get overview of all the results. The Demon only stores the machine readable results, and the HTML reports we've shown are generated always from demand and they're thrown away immediately. For debugging, you can also get standard output or standard error from all the results. So I've very briefly introduced the Demon for continuous scanning, but keep in mind that it's a pretty new project and it's designed for smaller deployments. If you have a deployment with hundreds or even more machines, you probably want to look into Forman, which we think is more production-ready and more suitable for these large deployments. So I'd like to show you how it works in the Forman. The concepts should be familiar by now, but you're also creating a policy, choosing the content, choosing the schedule, and choosing what to scan. After the compliance policies are created, you can also see the results from all the machines and view the report. The reports are also generated on demand and the same familiar reports in Workbench and in the Demon integrated into the Forman interface. Thanks for your attention. This is all. Are there any questions? Yes? So the question was, is there anything in the Demon or in Forman that when a machine or container is out of compliance, it can perform some sort of an action? There are fixes in the escape content, so you can run remediation and remediate the situation. So in case some service is installed and shouldn't be there, like RSH, it runs YAM uninstall RSH and it stops the service. We have some plans to, like, undeploy containers that are vulnerable, but these are just plans for now. Are there any other questions? Yes? So the question was, are we scanning package data for the known CVs, invulnerably the scanning? Yes, we are only scanning for known CVs. As far as I know, there's no way to scan for unknown CVs and we're only scanning for the RPM package version, so we're comparing version ranges with the versions of packages that are installed. Any other questions? Yes? So the question was, in Escape Workbench, if I don't have a browser installed, can I view the results? What you could do is you could save the machine readable results and open them in VI, but that's very inconvenient. You could also save the HTML reports and open it with links or some other browser, but I guess that's, again, a browser. Okay, so the question was, if I'm hardening a system, I probably don't have a browser. So in this case, I recommend using Escape Workbench from some machine where you have a desktop system and you can use it and scan a remote machine so you can do all the browsing machine. Any other questions? Yes? So the question was, does Workbench support running the remediations for you on a remote machine? I'll see if I have a screenshot of this somewhere in here. There's a remediate checkbox on bottom right. If you check that and click scan, it authenticates, it runs the scan, and for failed results, it then runs the remediations automatically on the machine. That's a pretty good feature request, but we don't support that yet in Escape Workbench. If I could step into this, I would say that you can like initially scan the system, realize that there are those 10 failures, and create a custom policy like you would select just those three rules and run the remediations just against those three rules. So the question was, can we also scan according to some events instead of just fixed schedule? We are looking into these options, but right now we can only scan according to a schedule. Any other questions? Yes? That's a very good question. So if we have a security policy that, so the question was, if you have a security policy that disables root access over SSH, how do we scan remotely? We have support, we have something called OSCAP SSH, which is a wrapper script. It can do SSH and then sudo on the machine, scan and return the results back. So that's one option you can use. You can also scan like containers and VMs. You can scan from the outside. So even if you don't have any like SSH access to them, you can scan them from the outside. In SK, Workbench has a feature request for this, but it's not implemented yet. I would like to implement the same sudo support. So you can log in as a normal user that's in the real group and then sudo when you're logged in. Any other questions? Yes? So the question was, do we do some research on performance impact of the scanning? To be honest, it really depends on the content. There's some content that it's very demanding. For example, if you're checking that all the set2id binaries come from RPMs, you need to check basically every file on the file system. So we've done, my colleagues who've implemented Oval, some of them have done optimization in Oval, so they cut some of the branches and they make it a bit more performant, but it really depends on the content. We try to make the content fast, but sometimes for some policies, we really need to check all files. So in this case, it's slow because there's no way to make it fast. Yes? So the question was, for the CV scanning, are we using public CV databases or do we integrate the CV data in the policies? You can do both. In Atomic Scan, for example, we download the public CV feed and we use it directly, but in Escape Security Guide, in this example, it's not visible, but sometimes there are rules like, are there vulnerabilities? If the software is actually up to date and there are basically two approaches, we use the official CV or Oval content from the distributions. This content is available not just for Red Hat, but also for other distributions like SUSE, etc. So in the cases the CV data is available, we are using the official content. So the question was, from the time when a vulnerability is published to the time when it's available in the policy, like how much is that? Well, it's a question that I cannot reliably answer. It's a pretty hard question, really. It depends on a lot of factors. For example, for some vulnerabilities that cannot really be exploited, they may never show up in the CV databases. Usually the vendors, they only include vulnerabilities that customers care about or that users care about. The answer depends on many factors here. The primary factor is the importance of the security for all, which is very important. And the period in which they are processed is then shorter. For critical flows it would be very short, and for all security flows they might not even get into the policy. Thanks for your attention. We are out of time. We'll be around. Thank you for the questions. Hello. I've already got one. I have another question. Thank you. If you have more questions, feel free to check it out. I've never used it, largely because I didn't understand the capabilities. But I think I might have to play with it. There are a lot of things done and a lot of things ahead of us and it might seem confusing, like why all of these tools, like why each functionality is separated in some way. People rather have one tool doing everything, but the modularity gives us the possibilities and the functionality we can integrate. I understand. I think so. Yeah, yeah. It's the same with all the different tools that we have at Red Hat. That would be great. Yeah, okay. So you don't want it? I'm all set. Okay, thank you. You can ask for a presentation on the flash until you have the time. Who takes care of this information which is public but is integrated in the... No, okay. So yeah, I do the question more academically, I guess. So there are several problems. Some sort of cooperation with the guys who wrote this... Yeah, yeah. The way it works is, Red Hat publishes an update on the data and is some metadata, like which possibilities it fixes and so on. And when it's public, maybe we have some sort of script...


Hey, this is Brett and this 2016 Buick Encore is stock number 21J197B. We're here at Summit Automotive in Fond du Lac, Wisconsin, you're new and used SUV headquarters. This Buick Encore has the 1.4-liter turbocharged four-cylinder engine. It puts out 138 horsepower. This vehicle has been fully-safetyed and inspected by our service shop for the state of Wisconsin inspection process. It has a fresh oil and filter change. All the fluids have been checked and tapped off, and this vehicle is 100% ready to go. White pearl is the color. We shoot all of our videos in 1080p, 60 frames per second, so if you have HD capabilities on your computer, tablet, smartphone, or television, I highly recommend turning them on right now because it is your best way to check out the quality, condition, and options of the vehicle before seeing it in person. If you like the video, now we do things here at Summit Auto in the upper right hand part of screen is a subscribe button to our YouTube channel. Click that and then click the bell notification so we get updates every time we do videos here at Summit Automotive. This one comes with the chromed 18-inch alloy rims. Has continental pro-contact tires on here. These are 215 R18s. Front tires are brand new on this thing. Have all the tread left on them, still have the little wear knobs. We put those on in our safety inspection. Front fender is in excellent condition as well. No dents or dings on that. It does come with the projector lamp headlamps, projector lamp fog lamps. It does have the front bumper parking sensors. No major dents, dings, cracks, or scuffs on there. It does have the chrome-trimmed grille, and the hood is in really nice shape. Passengers side front fender looks really good as well, and the passenger side rim, no scuffs or scrapes on there. This white pearl does have just a little bit of metal flake to it, so pretty good-looking color when you get it in the sun. As you go down this side of the vehicle, take note of how clean the body is, how reflective and mirror-like that paint is. We take these HD videos so if you are far away or even if you're close by and just cannot make the trip down, but you're still interested in purchasing the vehicle, you can see the vehicle, hear the vehicle, and have confidence in what you're looking at before you even get here. When you do get here, there's absolutely no surprises, and you can make a smart and informed buying decision from wherever you're at. If this video helps you make that decision, let your salesman know that you saw the video that was helpful and that Brett sent you. Back rims in nice shape too, and the back tires have right around half the tread left on them. Coming around to the back of the vehicle, rear bumper is in really nice shape. I didn't see any major dents, dings, or cracks on there. It does have the backup parking sensors. The rear gate is in really nice shape as well. Back storage area is very clean. Those seats do fold down for extra storage, and those headrests also go down too. And we'll put those down just a second to show you how flat it goes, and it does come with a spare tire. Shocks are doing a nice job holding that gate out. Shuts nice and solidly, and as you go down the driver's side, just as clean as that passenger's side, no major dents or dings in the rear quarter. And for full disclosure, this back rim is in excellent condition as well. No scuffs or scrapes. Driver's side doors look really good. Has blind spot monitoring, built-in directional signals inside the premium package, gives the black leather interior. Both of these front seats are heated, no rips or tears. Power driver seat, memory driver seat, factory floor mats, auto hub lamps, tilt, telescopic steering wheel, power windows, power locks, power mirrors, Bose sound, and you get the nice wood grain trim on there. We'll hop inside, check out the miles, radio, and everything that this Encore has to offer. You can see that this one has 35,171 miles, and the instrument cluster is very nice and clean. It does come with the leather-wrapped steering wheel, Bluetooth and audio controls on the back. Use controls, forward collision warning controls on there as well. Didn't see any rips or tears on that steering wheel. You get the Buick IntelliLink system here. We'll turn that down just a little bit. This is where your backup might have to be on. We'll start it up here. Starts right up. Did want to point out. No check engine lights or anything like that. There is your backup camera, and this one has the factory navigation system on it. This one does have the nav system on there.  No rips or tears on there. The headliner is in really nice shape, smells very clean inside this vehicle. I don't think it's ever been smoked in, and it does have the power sunroof. It does have on-star and SOS buttons in that rearview mirror. We'll check out the back seats, and then we'll check out under the hood. I'm just going to put this seat up so you can see those back seats go down. Back seats are in excellent shape as well. No rips or tears back here, and it does have the latch child safety system for any child car seats. You do get a 120-volt, 150-watt plug-in factory format back here. These seats fold up like so, and then down you can see just how nice and flat those go. It's pretty easy to get them back into place. Child safety locks on the back doors and the bottoms of the doors all look really good. I would personally like to thank you for checking out the video today, and hopefully from this HD video, you will have been able to verify the quality and condition of this Buick Encore all the way around inside and out under the hood. We have the 1.4-liter turbocharged four-cylinder engine, 138 horsepower engine base. Very clean. Runs very smooth. Once again, this vehicle has been fully saved, and inspected by our service shop has a fresh oil and filter change. All the fluids have been checked and topped off, and this vehicle is 100% ready to go. I would highly recommend it from a quality and condition standpoint, and see more pictures of this Encore, one of our other 450 new and used cars, trucks, SUVs, minivans, wranglers, you name it. We've got to go to that website right there, summitauto.com. Full pictures and descriptions of every single vehicle from two locations all at summitauto.com. If you'd like to check out more HD videos, you can go to youtube.com.com.com. Remember to like, subscribe, and share on this video and all the videos that you see there. In fact, in a second, you will see a link to subscribe to our YouTube channel in the upper left. A link to more Encore videos like this one in the upper right. Link to this vehicle on our website in the lower left, and a link to one of our latest YouTube videos in the lower right. Click those, check us out. We look forward to helping you with this super clean 2016 Buick Encore premium all wheel drive and white pearl metallic. Thanks again for checking out the video.


we're on to uh five star a five star man dylan says we're pulling the paul walker cut auto i'll say we're gonna pull the uh the chatters bozeman cut auto or the or the ted williams we'll do that one too purple rookie ethan roberts cubs quan rookie debut for the guardians hold up shane purple rookie debut brand of marsh angels she's pulling both back to back cases jeremy panya purple rookie jp sears for the yankees the sears exist anymore guys i was asking uh dylan about that earlier but we don't know if sears exist i haven't been in one in forever who goes to a mall fully rodriguez purple morales rookie fillies wander franco debut alec thomas rookie purple for the d-backs you don't never realize about the d-backs logo is that it is the jaws of a snake and that a in the middle is the part of the tongue look at it so if you turn it sideways i never realized that until like yesterday i saw something on there's something about logos on twitter and i was like howdy to lez or like five left it's that's like blockbuster there's that one blockbuster in like washington state somewhere uh debut rookie cj abrams padres and it's only still around because it's like a museum on god if i saw a blockbuster like on my way home i would stop and i'd rent something i promise you i would and i'd buy like one of those i'd buy a bunch of crunch and like sour patch kids and i'd rent i'd rent like a game or something purple lm's ds but only one time so it's not a good business model don't open one i'm just saying if i saw one i would i'd stop in divide the use games there a lot when i was a kid too play my ps2 trares all-star game edwardo rodríguez oh band organ okay yeah far away from me sasa zuki purple rookie jaren duran debut you gotta make the trip meh uh burt you're gonna go you're gonna go to a blockbuster and get some big bucket of crappy popcorn and uh rent what would you rent at a blockbuster like friday the 13th part five or something something just not great deep blue sea was another one that you would always see a blockbuster rookie auto tigers joey wintz non-number for the tigers purple ladolo debut reds diehard yeah that's another classic all right guys everybody in chat list your uh list the list the first movie you think of when you think of going to blockbuster and renting meet joe black or something like that jaws you always saw jaws in there jack frost jack frost titanic there was always like 50 titanics joe turd avatar avatar man in black that's a really good one Jurassic park it's another one the lost world Jurassic park those are good all right here we go uh we had refractor tyler melee to 299 for the reds aqua's the 250 hunter dozer and jeremy penia debut nice card for the astros we had extractor jesse winker to 99 we had a red brad miller to 25 for the reds again reds are to 25 an update george kirby redemption mariners joey wintz tigers cooper hummel debacks match jeff mcneill all-star game auto rylan bannon oriol's extractor auto ozzie albie's to 125 braves and to 50 rookie auto fransisco morales fillies we also had a rookie refractor of jeremy penia numbered 50 of 299 congrats to the astros and that is going to do it five stars come up next thank you everybody we can probably court he's gonna give me a cap with a sharp you don't like this sit over here five star yeah joe dirt's definitely a blockbuster movie if i've ever heard of one you're probably pretty young for blockbuster right decently like didn't didn't remember too much of it only been there probably once in my life twice in my life or like movie gallery or hollywood video yeah all right we're pretty much ready for this random right here we're a few minutes behind but we're we're gonna finish right on time five stars quick quick hitting quick hitting pretty much have the random already here crocodile dundee that is a good one that is a good one cannot deny it let me double check the names really quickly and we'll do the random the uh the first spider the first two of them were spider man that's a blockbuster movie right there all the steven king movies were always there all right randoming now for 2022 tops five star baseball hobby eight box case number one random division style good luck everybody a five on our random four and one yeah right moves from the grocery store yep that's the thing too one two three four and five john a down to derrick you and five times in the divisions one two three four and five and at least on nl central what's happening carl i got john a nl east shane c nl west jason k al central hyeong qi al west adam k al east derrick u nl central let's get these posted we're gonna start in a couple minutes here oh it's almost hot cocoa time yeah this is my bowl bowl jersey my bowl bowl swing man very proud i feel like i can uh you know go coast to coast and like 10 steps and dunk it in this jersey 10 long strides all right y'all let's get started everybody forced here up in uh 2022 tops five star baseball hobby eight box case number one random division style you can always find those results at latentsportscards.com here we go everybody first case what's up derrick yeah good luck man good luck everybody this is all 180s by the way first up going to the al east rookie auto vedal brujan how you guys like the design vedal brujan didn't take long for us to uh get something nice here 14 of 25 mic trout boom five tool phenom auto al west tool phenom mic trout that is a gorgeous card we'll get that magged for you hyeong qi with the al west al east randia rosarena on the auto i go into the n l west larry walker auto 1940 silver signatures i got like old timey text on the bottom right silver signatures larry walker i like that design a lot actually with the auto in the middle of the diamond i like that looks really good this year i look good every year but all right go into the al east again a jose barrios auto not numbered because i don't kind of yeah a good call in that chain and a golden grabs of david right n l e seven of 30 yeah the golden in this silver i really like the design a lot i like the design of the trout too the five tool phenom was sick this is good stuff man nice david right good break so far two solvers a golden a trout or a silver a golden a trout so far feels like we got a redemption here do you have a redemption but first we have an nl central auto of jake cousins the rookie i know the teams are obviously on i want to see what this will be numbered to really quickly give me a sec al central five star pentamorous penmanship green parallel redemption of jose ramirez that should be numbered to 10 very nice jram going to the al central should be number to 10 what's up never good that's what babies do two of five on the furgy jankins auto for the nl central furgy jankins nl central to five wade bogs al east may he rest in peace that's a joke by the way non-numbered auto al east wade bogs another golden grass al east again fred lin 10 of 30 red lin al east boston ted lin there and going to the nl east of petalonzo auto polar p see you al central purple auto jose abray you 33 out of 50 like he's with color too they look good and a mark mcguire 7 of 25 blue parallel nl central auto big mac rookie auto nl central hoy park non-numbered and rookie auto spencer torkelson 47 out of 75 there you go al central on the torkelson nice hit there that'll do it for the first case thanks again everybody second case coming up next all right we'll get that upload and we'll keep going here case number two thanks again for filling out the brakes today everybody much appreciated sam's got some pyt top scrum updates with spots available for tonight everybody nerds yeah got nerd boy first of all there oh god there it is the bowl bowl jersey yo let's go dude oh yeah all right guys let me get this random ready for the last break sam is here so you could buy your spots now for tonight yeah i just listed them it's a lot of there's a lot of spots yeah hoy park hoy park red sox legends now braves legends uh that's just the risk of it giant we send out hitless packs but other than that there's not much we can do yeah that's just part of breaking really hey john m keith m shane w spencer b all right random time for 2022 five-star baseball hobby eight box case number two random divisions good luck a three just three names first one two three shane w and keith m three times in the divisions one two and three a l west and a l east all right shane with the a l west brian with the n l west john m n l east spencer n l central john a a l central and keith with the a l east we'll get the results posted the site we're going to start real soon here all right guys here's a website link to you can find all of the evenings breaks there the only breaks with spots available will be chrome update well we also have breaks listed for the next few days as well on the site grab up your spots guys we got two we have tonight and then two more days before the holiday break which will be saturday and sunday and then we'll resume on monday all right keith i'm gonna pull you the uh i'll pull you the ted williams cut auto get the a l east or the dual auto pager martinez uh and david orteez i would enjoy pulling that card well all right then here we go everybody forced here ripping 2022 five star baseball hobby eight box case number two random divisions you can always find those results at latent sports cards dot com here we go everybody best of luck let's have a good break come on paul walker chateau boseman come on all right starting off with rookie auto nl central erin ashby four of 75 and rookie auto a l central joe ryan he signed right on his body and not where the uh the space for the autograph is called joe ryan the a l central what's up ryan what are you asking what for i don't know like where he signed look look where joe ryan signed three i know joe has been signed in two i've seen his autos rookie auto nl east riley adams trying to pull that paul walker cut auto oh paul walker they should also have a paul wall cut auto and a silver signatures one of five andre dawson someone's going to go to the nle's via the expo's the hawk dylan does a really good impression of what a hawk sounds like actually i don't think we have time for today though i would tag that one nle's yeah they have uh cut autos of those two ryan there's 10 celebrity cut autos it's like george w bush obama teddy roosevelt woodrow wilson oh reagan there's boseman there's paul walker there's sir ebb and hillary coby bryant has a cut auto in this and betty white too with a betty why would i should be pretty fired dylan carlson nl central base auto dude the betty white that might be the that might be the most fireball out of all those and a 20 pares nl central autos six out of 10 gold six of 10 20 pares nle stroki auto tyler mcgill and silver signatures lee smith for the nl central seven of 25 lee smith you ran through about twice trash oh it was donnie even more jesus this is the shiniest thing i've heard you got a jake meyers rookie auto 12 out of 25 al west and the jake meyers and al east auto jason veritech veritech al east auto it'd be random to everybody in the group break only way to do it got a corbin burns auto for the nl central al east again and eddie murray auto 22 out of 50 all a famer eddie murray all right two more boxes yeah ryan's busy guy big dumper rookie auto for the al west cal raleigh it's mariner legend right there go al west cal raleigh hit that walk off the center of the playoffs and silver signatures nl west mike the stremsky two of 30 last one everybody got a redemption in the last pack of the daytime first up though is an al east matt Chapman auto matt Chapman and before i uh just want to see what is his number two oh wow big redemption probably the biggest hit of the day i would think yeah last card so this is going to be al east five star auto jumbo prime silver rainbow foil parallel erin judge which is number to five that is a huge redemption congrats to the al east keith you did it buddy upholding some heat silver rainbow foil to five jumbo prime erin judge giants legend erin judge congrats on that one what if he was late at the arson that'll do it for the daytime man what a way to end it love five star thanks everybody so yeah guys sam's here let's get those updates filled up there's p y t's coming up this afternoon i'll drop you a site link here yeah man i'll drop the insurance link for you too keith i would for sure consider it that'd be he's been redemption a lot of stuff he's got a lot of signing to do he better have the time he's got the money now all right guys we'll see y'all later again if you're looking for more bowman draft random styles or five star random styles check the schedule for the next two days because everything tonight outside of update is full so get those updates filled up guys and we will see you in about an hour in 15 minutes


Welcome trainers from the TITML Charter with me, Patrick Munnally. I want to draw your attention to developing opportunity in Bitcoin from the daily time frame. And you can see we traded into a three pushes high here with decent divergence. And we're now witnessing potential corrective move play out. So this initial legs to the downside, the reaction and corrective move higher. Now looking from extension down and the quality objective to bring us into 42,300, which also coincides with the prior breakpoint at 42,300. So watch for bullish reversal patterns in this area. Set long positions, initially targeting a three way corrective move up into 54,700 and the potential to extend to new highs. As always, trainers, plan the trade, trade the plan. Most importantly, manage your risks. Until next time, thanks very much.


Hello, welcome to the session on Convergence of Contacts Pregrammer to Chomsky Normal Form. At the end of this session, the student will be able to convert a Contacts Pregrammer to Chomsky Normal Form. Let's define Chomsky Normal Form. A CFG is in Chomsky Normal Form if all productions are in the form A producing AX. Here capital A is non-terminal, small A is terminal, capital X is again non-terminal. This means all productions are of the type non-terminal producing non-terminals preceding by terminals. Every CFG with its associated language has an equivalent grammar in CNF. Chomsky Normal Form is a straightforward ways of improving a grammar without changing its resultant language. Now, when we are converting grammar from CFG to CNF, first we need to follow some steps. In this first start with a grammar G which is in the form of V, T, P, S that is non-terminal terminal production and start symbol. Then eliminate useless variable that cannot become terminal. Then eliminate useless variable that cannot be reached. Eliminate null productions, eliminate unit productions. After this, we can convert grammar into the Chomsky Normal Form. We will see elimination of useless variables that cannot become terminals. Consider a grammar where a non-terminal A produced by S is producing a terminal but non-terminal B is not producing any terminal. So, see in this grammar, S is producing A and B that are both are non-terminal. A is producing this is a terminal symbol but B is not producing any single symbol. So, in this grammar, whatever the S is defining or S is producing B and that is not going to the terminals. So, B from the production S producing B is useless and it can be eliminated. Now, next step is we need to check whether a grammar production contains non-terminals which cannot be read or which cannot be reached while deriving the language. Now, consider the following grammar. Here S is producing A, A or B, B, A is producing A, A, A, B is producing B, B, D is producing A, B or E, A and E is producing A, C, D. Now in this grammar, A and B they are used in the starting symbol. But we don't find any path to reach D and E. So, these are the symbols, these are variables are nowhere used since they cannot be reached. So, the production of D and E can be eliminated. Now, check for nullable. A variable A in a CFG is defined as a nullable if production contains the production A producing null. For eliminating null production, we have to define new production that will be P1. Then in this example, we have to see if any nullable is present. Here A producing B, B, C, D then next is B is producing null. So, here B is a nullable. Now, which will lead to the values, different values. Now, here we are producing one more time A. So, we are rewriting wherever the B is there, first we will keep this B is equal to null. Then our production will be B, C, D. Next B will be as a null. So, again we are getting B, C, D. Then both B we are keeping null. So, we are getting C. So, totally we are kept wherever the B is and all combination of B's. Then we will check this newly created production B, C, D, B, C, D, C, D. But B, C, D and B, C, D are duplicate productions. So, finally we will remove that and our final production will be A producing B, C, D, C, D. Before going to unit production elimination, CNF grammar must be first eliminate all null production. Then we can go to eliminate unit production. Now, in this example we will see, we will check is there any unit productions are there. Now, here in this grammar unit productions are there, here single C. B is defining or B is producing C, C is producing D and then D is having some value. But here C is not having any terminal values and it is a single production. So, directly we can put instead of C, D here. So, whatever the newly grammar will be A, first one, S producing AB, then A producing A. Then instead of C, we are putting all where the D, B is producing D and instead of C here, now D is there and immediately it is going to the next production. So, here we are eliminating the unit production. To summarize, here we have seen just now that to convert the given grammar into Chomsky normal form, we followed following steps. That is we started our grammar with the G in the format of V, T, P, S. Then eliminated useless variable that cannot become terminal. Then eliminated useless variable that cannot be reached. Then eliminated null production, eliminated unit production. Now, in this production or in this grammar, find out what is the unit productions are present. So, there are three unit production in the grammar. B is defining C, C is defining D and D is defining E. So, these are unit productions. Thank you.


It's one thing to post or state, I disagree with the judge and I think that person should have won, I can do that, you can do that, each one can do it. But then to go and see how the judge is tiffed.   The judges are asked to apply the criteria and they do so. A lot of creative expression is subjectivity.  That tells you, is you that have to apply a criteria and different people will apply criteria slightly differently. It's not a mechanical exercise. So I really feel that those individuals have been unfair. But you know, we've reached a stage in our social discourse where anybody can say anything and anybody is an expert on everything. Now, there's some things I don't know about. I mean, I go to the queen pageant. I have my preferences, but hello, I don't really know about judging in this. So that's what it is. In Kalitsu, I listen, I had my own predictions. But the judges are the ones we choose to do it for us because everybody cannot do it together. So you choose a small group. You say, here is a criteria and they apply the criteria. A lot of the individuals who are commenting don't even know the criteria. They don't even have a copy of the criteria and what it's heading speaks to. They don't. So it really become an almost, you know, fastical, all those comments, you know. And like I said, I do not have a problem if a discussion as to who you think should have won. But when it crosses the line and cast aspersions on individuals, what not. I also believe the quality of the productions of the events have been phenomenal. The queen pageant was world class. I mean, the events we've had, Kalitsu final, Soka Monak, and last night were really top draw. And even Saturday nights, when it rained the night before, so they were challenges, but as much as possible, you know, the team presented very well and you must say hats off to the production team, to the CPMC headed by Tamara, an events company for all the outstanding work that they're doing. There will always be an issue with seating at the Saab and it's something we need to reflect on because there are people that come and they want to sit. And we'll have to figure out how we can ensure we put in some seating for individuals who want to sit.  So it's something we need to look at for us to improve the experience of the patrons that come to those shows. So we just need to continue to evolve and grow and improve.


The United States Consulate in Nigeria said that the U.S. government will continue to partner with Nigerian universities in an effort to enhance the nation's economy. The U.S. Consul, General Will Stevens, made the remark during the graduation ceremony of the 10 participants of Learn to Earn Project at the American Corner University of Potakot River State. The United States African Development Foundation has said it has funded a training of 10 young women for a six-month program on how to make sustainable and affordable furniture for African households and industries from reusable materials such as tires and plastic waste. In its remarks, Stevens explained that the aim of this training was to empower young women, reduce pollution, create a healthy environment as well as provide leadership and business management skills and earn a living. We need to be working together to help find African solutions to global problems. And that is what this is about today. We are here to work together to enable and empower incredible young entrepreneurs like beauty to find solutions to the problems that plague the entire world. He added that the partnership exchange between the universities in the U.S. and those in Nigeria from the foundation of the people's democratic setting made their relationship vast. The Creative Director for Mobile Designs Beauty, Ajayi thanked the American Consulate for the support of young entrepreneurs in Nigeria. On his part, the Vice Chancellor of the University of Potakot, Professor Arun Neri, said that the impact of the training in the American corner was obvious and combining degrees with skills would produce total manpower in the country. Our world is a way now that certificates alone are no longer enough, degrees alone are no longer enough, but when you combine certificates or degrees with skills, then you produce a total man or a total woman. And so what they are helping us to do here is something that is of tremendous benefits. Some of the beneficiaries expressed gratitude to the U.S. Consulate and urged young Nigerians to embrace entrepreneurship training to improve their standard of living. There are so many times where we have people abusing, abusing tires, burning indiscriminately, but here we have been taught how to maximize the use of tires, turning it into furniture. That's where the name Tire Neutral comes in. So it's coined from tire and neutral. We've gone through leadership training, organizational training, faith-based organizational training, NGO trainings, and a whole lot of it. And I can tell you it's been quite inspiring and educative. I learned one and two. I'm as a photographer. I've been able to use what I learned from tire nature to put into my photography business and also to serve my clients and make the world a better place. Why don't we use tires to make beautiful things instead of just thrashing them? Hello. Hope you enjoyed the news. Please do subscribe to our YouTube channel and don't forget to hit the notification button so you get notified about fresh news updates.