All right, this is super loud. Give me a second. OK, much better. So thanks for the intro. Yeah, it's true. I am a physicist. I don't admit it too often because then people don't take me seriously, right? Because if you didn't even study computer science, are you a real developer? So yeah, anywho. I'm going to talk about what makes JavaScript Web token secure. And so I think the previous speaker already said this, but when you're building front end applications, there's so many things you have to think about. There's routing performance, animations, keeping up with react cons.  And often security takes a backseat, which is obviously not cool, but it always happens. And there's like multiple methods of securing your applications, right? You can use cookies, tokens. You can handle them differently. You can have no sessions. You can only do a server side.  But the idea that security is difficult, right? It's a tough thing, and it's not super accessible to learn. So I'll talk about one of the popular methods of authentication, which is Java JSON web tokens. I tend to prefer JSON web tokens because they're not super difficult in implementation. It's for non-computer science geeks like me who can understand it, but it's still secure at the same time. So who am I? I'm Siddharth. I work for this company called Auth0. Auth0 is this authentication security company, right? It's like, if you don't have security engineers outsourced it or more like used tools that already do that for you. Tiny pitch. I'm on Twitter. I post garbage stuff all the time. I also run this side company thing. I called frontend army, where I do training mostly frontend stuff, mostly react these days. Cool. Back to JSON web tokens. So JSON web tokens are, I'm just gonna call them JWT, are actually an open standard. So it was built by a few folks from Microsoft and people around them. And the paper is actually open. So you can read the research paper. It's surprisingly short. So you can read it. It's all open there, it's all there. And they kind of built it for a different reason, but it's been repurposed on the web for authentication or I should say authorization. So the first use case that they actually built it for was information exchange. So it's just JWTs are a great way of transmitting information between parties, right? They can be signed. You can use public private key pairs. So the idea there is you're always sure of who sent you this message. If there's a hacker in between you'll probably get to know. And then it's been repurposed for the web for authorization, which is for a logged in user you want to figure out is this actually the user or is this somebody else in between? It's a hacker or it's like tampered data. So should I give access to this route, this service, this API? This is a snapshot of the problem it tries to solve. So have your user, you have your API server. This is the original connection, but sometimes somebody steals the token or somebody is impersonating your user, right? And that's the hacker. Sometimes it's just a man in the middle attack that tampering with your network. And your API server needs to be sure that is this my user or is this someone else? That's the problem that JWT aims to solve. It does that by doing something called stateless sessions. So the idea is that these sessions need not be stored in your database like cookies. It can just live on the client side and get passed around. And this kind of leads to some interesting vulnerabilities and also some interesting features. I'm gonna talk about all of them. But to understand how they're actually secure because if it's on the client side, it's kind of just visible, right? It's like, if it's there, somebody can just do a Chrome extension and just steal it, right? So how does it secure? So to understand that, we need to understand the structure of a JWT. It's three parts. It's the header, the payload and the signature. The header and payload are kind of dumps. They look like this. This is what a token looks like. It's all gibberish hash stuff and I've color coded so that looks pretty on black, but mostly to signify what is the header and what is the payload. Cool. So you can also have JWTs without a signature. It's supported by the spec. It's not useful for security purposes, but it's supported. It exists and we'll talk about it. It's important later. Cool. The header is the metadata about this token. You have, there's only one mandatory field, which is the algorithm. So you say algorithm and these are some of the nicer algorithms. You can use HS256 or RS256 and you can also use none, which is the no security part of it. There are multiple other fields. You can say what is the type, like type is always JWT for us. You can say what is the content type? So the payload, is it a JSON object? Is it again a JWT, like you have nested things? But for the most part of it, this is enough. Cool. And then, so to make that hash thing, you first JSON stringify it and then you base 64 URL encoded, right? This makes it secure for the web. So all of the exclamation, all the positive sign, you hash them down so that you can pass them around. And this is what it looks like, right? Again, it's only encoded. It's not encrypted, which means if somebody has this, they can just base 64 decode and they'll get back the JSON object, right? So they can see your metadata, it's out there. Next is the payload. So payload is the message you're trying to send. So again, it has, it can have any fields you want. These are the canonical fields. So you have the sub, which is usually the subject. And then you have the issuer. Issuer is with service issued this token. It could be your own authentication server. It could be the same API. It could be a third party, like out zero. What is the intended audience for this token? So for example, this token is only useful for the cart API. Any other API that you use it for should reject it. You have the expiry, you have the issued add, both of these are date time. And then you can have any number of custom fields. Like I have name, John Doe and is your admin or not. So that's, I'm going to strip everything else. This is the useful part for my talk. And then you do the same thing.  Again, it's decoded, not encrypted. If somebody has this, they can decode it and get the thing. So the decode thing is you can only use session information here, don't try to put secret information like a password or a credit card info, right? Because somebody can't decode this. Again, if third parties can read this, why advise this even a good authorization mechanism? And that's where we have the signature. That's the most interesting part. So to create a signature, you need the header. You need the payload. You need a shared secret for HS256 and you need the algorithm that you're using. So it's a function of all of these. The secret is the most important part. So it's not your password that you use for your Gmail account or stuff. It has to be more, it has to have more entropy. So the recommended thing is use a 256 bit secret like this. And you obviously don't hard code it. So I'm going to read it from the process here. I'm going to store it as an environment variable so that accidentally it doesn't get committed to GitHub. It sounds silly to say this, but it has happened in the past with people and companies have gone down because of it. So, yes, we'll mention. And to create a signature, you can use the crypto library. It's a built-in. Crypto here stands for cryptography, not cryptocurrency. So, just the side that I have to mention it. So as you can use crypto library, you can create a HMAC with the HMAC stands for hashing for message authentication. And then you can use a short of six to create the digest. So you pass the content. The content is a concatenated string of your header and payload, the hash that you have. And then you digest it for base 64. Again, you have to base 64 escape it so that you can pass it around the web. And you get this hash thing, right? Now this is not encoding, right? This is encryption using the crypto thing to create an HMAC encryption, which means this is only one way. If you have the signature, you can't really decode it to understand what's inside it, unless you have the shared secret, right? This is where all the magic happens. So you can always have the answer to have the contents of this message been manipulated, right? Did somebody change one of these data? Admin was false, did somebody change it to true? And we look at how. But first, the token is just you just concatenate these three things, the header payload signature. This is what it looks like. It's separated by these dots in between. Cool. To do all of this, you can of course use a library and they're like millions of libraries. So as Shyam said, find a trustable one. So this one is called JSON web tokens. It has over a million downloads a week. So I hope it's secure. Like, I know it's secure. A bunch of my coworkers work on this. So it's secure. Use this. And to use this, you say JWT.  Dude, that's the timer. Don't touch there. I thought I'm out of time. Okay. So use JSON web tokens. You import it. And then you say, I'm going to use the payload. I'm going to sign it with JWT, pass the payload, pass the secret, pass the algorithm, right? And then it gives you this whole hash thing, right? Just like a nicer API. Just say sign payload secret, which is the algorithm to use. And you get this. There's a whole playground that is crafted bio zero. It's on JWT.io. It looks something like this. You can put in your token. If you put the secret as well, it's going to decode it for you. Or you can put the secret and encode it. It's a good way to test your implementation, while in dev. Cool. How do you use JWT? So whenever the user wants to access a protected resource on API, the browser should send this JWT, send this token using the authorization header, right? So it doesn't rely on cookies. It relies on headers, right? That's kind of important. So the first request goes to your authorization server. This again could be your own server or it could be a third party like odd zero. Send in the credentials. You get a token, right? This is the document that we'll use for the API. You send it to the API. Now you're not really sending the credentials. You're only sending this token. The API can verify if this token is valid and send you back the data. So how does this API server verify the token? That's the important part. So you have this whole big token, split it, split it by like the dots. You get the header and payload, which are just encoded. So you can URL decode it. Sorry, base 64 URL decoded. JSON parsed it. You get the data inside them, right? So you see this was the algorithm use. This was the payload, right? And now you can see the payload, but you have to verify, has this payload been tampered? Is this really coming from the original user? And to do that, you can just create the signature again, right? So we have the secret. We know the algorithm. The hacker doesn't or the client doesn't really know the secret. Only the authentication server and the API server know the secret. Nobody in between. So it's like the token is parsed and the API server at the end can verify by creating the signature again by using JWT again. And it gives you the signature. If the signature part of the token matches, you know it's legit. If not, then you mean something, something shady has happened in between. Again, you can use the same library. You say verify, you give the client token. You give the secret and you give the, you give the white list of algorithms that this API supports, right? So the API can actually support multiple authenticate, sorry, multiple algorithms for different clients.  It's optional in the spec, but you should always give it. I'll show you why soon. And then you get a function callback or a promise method. There's both. You can see if it errors out, then it's been tampered. If it doesn't error out, you just get the data and move on. Cool. Again, you can read the contents of the token, but you, if you don't know the secret, you can't change it, right? So you can't really tamper it. Here's a quick example. This is the payload admin is false. This is the token. If I change admin to true, the payload changes. But if I don't know the secret, I can't change the signature, which means on the server, when you do verify, signature will not match. You know something shady has happened, you reject it, right? Okay, let's talk about the authentication methods. The first one supported by the spec is none, right? It means no signature.  You sign it. Don't use that, please. Use something like HS256, which uses a shared secret, right? It's way more secure than none, of course.  Again, you get the client token, you pass your shared secret, and you say, this is the algorithm white list, right? Then there is RS256, which is slightly more secure because it relies on a public and private key pair. The interesting part here is to sign it, you need a private key, which means the authentication server, the first one needs to have the private key. Sign it, create the token, pass it through the client, pass it to the API server. The API server doesn't need to have the same private key. It only needs to have the public key, right? Which means it's one less thing to protect. Only the, what do you say? Only the authentication server needs to protect the private key. You don't have it on multiple servers, so it's slightly more secure. The interesting part here is that by the virtue of its name, public key is public, right? So it means anyone can actually grab it from somewhere. You probably put it on GitHub and stuff. But the fun part is the hacker can verify if your token is valid, still can't change it, right? So that makes it pretty secure. The hacker can see the public key, but can't do anything with it unless you have the private key. So it's all cool. The last one is ES256, which is a slightly more interesting take on RS256. It also uses a public-private key, but these keys are typically smaller, right? So it's perfect because the signature created with them is also smaller. So the network payload that you have to send because you're sending this token on the header is also smaller. So it's slightly more performant over the network. So if you're dealing with low, what do you say, bad networks, this is really useful. The trade-off over there is it's slightly slower in comparison. Actually, not slightly, it's like at least five times slower, usually, in benchmarks. So if you have a lot of CPU, but your users use the internet, then you can use ES256 over RS256. Cool. Cookies, right? Cookies are the more popular authentication method. So I just want to do a quick comparison here. With cookies, you typically need a database, right? You have to store the cookie somewhere, right? JWT, we don't actually store it. We just pass it through tokens. We pass it through the header, right? Which makes JWT stateless. If you're storing the cookie in a database, that means for every request you get, you also have to query the database so that extra works. The server has to do, right? Extra requests, extra time performance, et cetera. JWT is stateless. You don't have to do that. Cookies are vulnerable to CSRF, right? So cross-site request for the CSRF is like when a hacker picks the browser into thinking that the information is actually coming from the same website when it's not and they usually steal your cookies. So what do you say? JWTs are not vulnerable to CSRF because they don't use cookies, but don't get excited. They are vulnerable to XSS, which affects both tokens and cookies. I'll talk about them soon. Sessions can be invalidated on demand with cookie because you store it, you can also delete it or you can flag it as invalid with JWT because you don't store them. You can't really do things like remote logout. So the, what do you say? The good practice is to always have an expiration, right? So given expiration and date time, don't create everlasting tokens, create really short-lived tokens that expire on their own. So even if they basically keep expiring, you keep generating new ones. It's useful to say that JWTs can actually be used at cookies, right? They're just hashes. So you can actually store them as cookies. You lose all these benefits, but if remote, instant remote logout is super important to you or for some reason, you really rely on cookies, you can use the same hashes as cookies as well. That totally works. Cool, so important security question. Can JWTs be hacked, right? Like everything else, yes. So the JWT spec is bulletproof. It's really good spec, but a weak implementation can get you hacked, right? So JWTs really get a bad rep sometimes.  So it's super easy to get started, but then you have to kind of follow some rules to make it bulletproof. It's a lot like CSS, right? If you start it, it looks easy. It's just a simple syntax, but on day three you have completely screwed yourself. Cool, so the first attack I wanna talk about is cross-site scripting, because I said you are vulnerable to this. So, XSS is a attack where you basically insert, how do I put this? Okay, let me give you an example. So this is like the orange website where I'm putting a comment here, and in the comment I'm basically saying, I'm saying, yeah, nice post, but what I'm really trying to do is I'm inserting a script tag here, and I'm loading an image. In the image, I'm actually pinging my own attacker website, and I'm passing the local storage token, right? So I'm basically stealing. And if the server doesn't sanitize these comments, right? Sanitize user inputs, they'll just store it, and when the next user comes in, or when you open this, the user only sees nice post, but actually that code runs, and then I basically store their token, right? And there's like a super common, super old attack. The orange website takes care of it, so you don't have to worry so much, but because JWT are also stored on the client, they are vulnerable to XSS. Cool, more JWT specific things is, if you use a weak signature for, if you use a weak algorithm for your signature, right? So these are the three recommended ones in order of more security. So HS256 is shared secret, HS256 is slightly more secure because it uses public and private key. The authentication server has the private key, that's it. The APR server doesn't need it, it uses the public key. Third is if you use a weak secret, right? If you're using HMAC with this shared secret and use a weak secret. The funny part about HMAC is that these signatures are optimized for speed, right? So the verification is really fast, but the irony here is if somebody's trying to brute force your password, they can actually use the speed. It's gonna take them less time to brute force it, right? So it actually makes attacks slightly easier. So the spec actually says, like this is the recommended thing. If you're using a HS256, what do you say, algorithm, the key should at least be 256-bit instead, right? So you kind of need like very high entropy. Super secret 007 is a bad password. Lead password is, I don't know what I wrote there, but yeah, using like numbers and hash and like, things that would work for your Gmail password are just not as secure when it comes to HMAC. So you kind of have to use a 256-bit, which is roughly 32 ASCII characters. Okay. The last, this one is kind of, I introduced at the last moment, which is if you're storing the token in local storage or as cookies, I call it the Kulita Jori attack, which is there for someone to take, right? So number one, if you can just don't store these on the client side, don't store them, local store it, just keep them in the memory. And when the user refreshes, create a new token, right? It can be really annoying to implement, right? So you, the typical thing that people do is they still store it, but they give it a very short life. So that by the time somebody can use it, it's already gone. The other thing is keep expiring them and implement like a background authentication. Cause otherwise it would be really annoying. If every time I refresh the page, the page tells me, sorry, your session has expired, click login, go the whole reroute and come back, right? It's gonna be super annoying. So implement like a silent background authentication or zero JS kind of does that for you. So you just use open source libraries. Use good open source libraries. That's important. The next attack is the next mistake is reusing the same key across services. This, this is a really nice attack. I'm gonna mention this. So it's called a substitution attack. Look, something like this. You have your two servers, you have a client. In the first service, John Lowe is an admin. In the second one, he's not an admin. So you do the typical authentication thing.  We're gonna call this JWT one and you use the JWT to access the data from this server, right? The typical method. Now, ideally what you should do is when you're talking to service to, you should send your credentials to the service to, it will give you a different JWT and you use this JWT to talk to the server, right? Now, if you're an attacker here, what you will definitely try is what happens if I use JWT one for service two, right? Just to try to see if the implementation is right or not. So I'm gonna send JWT one and if you're using the same secret for both the service, it's gonna check out, right? It's gonna verify and it's gonna work, but the problem is JWT one was for admin true, right? Not for admin false. So what the user can do is say, I'm just gonna pass admin true and your API servers kind of relies on the authentication servers to make this call, to pass this data of admin true or false. So if using the same secret, it checks out and you basically ask good. So you have two options there. The first one is always mention the audience key, right? In the payload, I mentioned this at the start, you can mention who is this token intended for. So always pass the audience and say this token is only valid for service one, right? And then if service two gets it, checks the audience, even if the signature is valid, but the audience is somebody else, it's going to reject it. Option two is just use different secrets. So even for the same payload, it's going to generate slightly different signatures so that it doesn't match. The recommended approach is just to both, right? Use different secret and always use audience as a good practice. Cool. Attack number six. If you don't verify the algorithm, you're going to get screwed. So this is called a signature stripping attack. It's really cool. Where this is the intended signature. This is the intended token. Strip the signature, right? And I told you JWT supports non-signature things, right? This is algorithm done. And then change the header to algorithm none, right? So I've done two things there. I've stripped the signature, I've changed the algorithm to none because headers are encoded. So I can decode them, change them and switched admin to true. Now on the server, when you do a verify, right? And if you're doing a client token and secret, just verify these. It's going to verify them based on the algorithm and header, right? Which is none. So it's going to say, okay, this token is obviously not encrypted. It's always true. Let's pass this along. So the bug here is you should always pass white list of algorithms, right? So sometimes this is again something I've seen. This is like a lazy approach where you say, I need to give a white list, but I'm just going to read it from the header, right? Because that's the intended header, right? Again, if the algorithm, if the hacker intercepts it and changes to algorithm none, you kind of just shot yourself in the foot. So always have a hard coded list of white list algorithms and only these are valid. So signature stripping attack doesn't work anymore because algorithm done is will get rejected. Our two of this attack is, this is super interesting, which is you can use the RS 256 key as the HS 256 secret, right? This is similar to the algorithm none attack where the goal is to fool the verification, right? And check this out. So this token was created with RS 256, right? Which means you had the private key on the authentication server to create the token, right? Public key is used for verification. Now, public key as the name reply implies it's public. So the attacker can get his or her hands on it, but it's okay because all they can do is verify, they can't really change anything using the public unless. So this is what the verification looks like on the server, right? You say, this is the token, this is the public key, right, verify. Can anyone tell me what's the bug in this right now? No, this is the verification. So on the authentication server, the one that generates the token, you need the private key, but on the verification side on your API server, you just need the public key, right? There's a very simple bug here first, which is, cool, yeah, somebody said algo's missing. Yeah, so I was testing you. Yeah, so I just told this, you always mention the algorithm whitelist. So we're gonna say these are the two algorithms that this API supports, right? There's still a problem here, which is notice how the signature kind of looks a lot like what HS 256 verification does. So it's like in HS 256, you'll do JWT verified token shared secret and the list of algorithms here. What you're doing is you're saying token, the public key and the algorithms, right? Which means there's something weird in this map, right? So what an attacker can do is change the, change the algorithm from RS 256 to HS 256. Of course do a privilege escalation by changing admin to true and then create a new token on the fly, right? So you create a new token, say I'm doing HS 256 with shared secret and give the public RSA key as the secret, right? So suddenly this is like a valid signature because it uses a secret, it uses HS 256 and on the server side, when you're doing the verification, you're just doing the same thing. You're saying use the token, use the public RSA key and these are the whitelisted algorithms, right? You see what the problem is here? The attacker can basically change the algorithm and because the function signature looks the same, can fool your verification into thinking this is not an RSA 256 signature, this is actually an HS 256 signature and because it's in the whitelist, it's gonna say, okay, cool, I thought you're gonna give me RSA but I also support HS, so cool. I'm gonna take it and it's gonna verify to true, right? The fix there is if you can, just use one algorithm authentication method across all your applications, right? Pick HS 256 or RS 256 and stick to them throughout so that you don't end up doing the, somebody cannot do like a substitution on you. If you can't, there are cases when you have like a generic server which has to support all of these, split them into two, right? Create two different functions to create to check for different methods, create a decode RSA token, create a decode HMAC token, RSA for RS 256, HMAC for HS 256 and based on what's in the header, send them to different functions, right? And then only put the whitelist in individual in one of them, right? So the RSA token only has RS 256 and then when you send it, it's gonna fail because it's actually going to check the RSA thing for the RSA one, even if you're trying to fool it with HMAC, the signature is not gonna match. So split them if you have to use both. Other things are like, you can also use the algorithm. Okay, that's good enough, okay. Cool, so that's, I'm on 30 minutes exact. So that's all I have. These are the resources. You can go to JWT IO for the dashboard to play around with it. There's a JWT handbook. It's like a 120 page handbook which has everything you can learn about JWTs. That's where I learned almost everything for this talk. It's on this URL. These are long URLs. I've just put them on my domain. It's at sit.studio slash JWT. You can get all the resources. And yeah, if you like this, give me a follow on Twitter. Thank you. Do we take questions now or in the session? I have time? Okay. So how does this compare to SAML tokens? To? SAML. I have no idea, sorry. Okay. I have another question actually. Sure. The tokens are actually created by the IDP, right? By the? The authorization server. Yeah. So the key which the client sends out to the authorization server, what actually is it made of? You're talking about the credentials part that, let me go to the diagram, just to make sure I understand you're right. You're talking about this key, right? So this is like your credentials, right? This is your username password, right? Like, oh sure. Yeah. So this is like a big way of saying that you need the credentials to get the authentication. The implementation details are very different. Usually what you do is, if it's like a third party, then you redirect them to the third party using like a unique token so that it verifies the third party hits your own servers to verify is this really your application that's trying to do it, right? There's like a handshake in between, between the authorization server and your own services. And if the handshake is successful, then it passes a token that can be passed. Okay. So is it, is it basically something like, if it's a multi tenant system, so are you, are you sending the tenant ID there in the key or the tenant ID? Oh yeah, totally. So this is where the idea of, if you have multiple services, then don't use the same signature. Sorry, don't use the same secret or same keys, right? Which also means that, which also means that if you have multiple, what do you say, servers that multiple services of your own and you're using a third party to authenticate, make sure you always pass the audience claim, right? So that for every audience or every API server that you have, it gives you a different token. Yeah, hello. So if you're using a single sign-on system like Google sign-in, Microsoft or let's say Auth0, so we would typically have a farm of thousands of servers and each would have its own public and private key pair. So the intent and service, how does it know to use which server's public key in this case? You're saying the authorization server, how will that know which one to use? No, no, no, the resource server basically. Oh, sorry, the API server, got it. You're saying how will the API server know which key to use? Which public key to use for verification of the... Oh sure, so the fun part is that this public-private key is between the authorization server and the resource server, right? So when you create a new public-private pair, you basically put one private key in your authorization server and you keep the pair of that, the public pair of that in your API server. So if you have three API servers, you actually create three different pairs and send, put the public keys in each one of them and then in the authorization server say, for this one use this private, for the second one use this private, for the third one use this private. Typically in implementation, how this works is if you're using a third party, then you say I'm gonna create three services on their dashboards, CLI, whatever they have and they give you the option of downloading three different public keys, which you put in the specific API server that you want them used, right? So the API servers, if they're three API servers, which means they're three different resources, each one of them has only one public key, not all of them, okay? Ooh, okay, I understand what you're saying. So when I say authentication, or sorry, authorization server, I don't mean authorization server instance, right? If there are five instance, doesn't mean you need five different keys, right? Because if you're load balancing, then they're basically duplicates of each other with the same keys. By authorization server, I mean, if this is like one, let's just call it authorization app, right? Authorization service. If it's a service, it has one, if you load balance, create replicas, all of them should have the same keys, yeah. Yeah, right, maybe I should just call it service instead of server, good point.


Chancellor Merkel, Monsieur le Président de la République, Monsieur le Président de la République italienne, Madame la Présidente de la Commission, Monsieur le Président. Madame des messieurs, Madame des messieurs, les gouverneurs, les ministres, les commissaires, present, past and possibly future. Signor Presidente Draghi, Signora Draghi. It is customary in very well speeches to recount the highlights of the many worthy professional deeds of the person who is living. In your case, Diomario, these deeds are so well known that there is no need to repeat them. I have actually committed to staff not to say the famous three words. So let me instead, and varying a little bit from the three beautiful qualities that President Macron has identified, vary a little bit and highlight those personal qualities that I associate with you and that have turned you into such a leading figure on the international scene and that I admire most. The first quality, very similar to the knowledge that you've identified, is the wisdom that you impart. In all those numerous meetings that we both attended, whether at the IMF or in European institutions, I have always been impressed by your contributions.  It is what I call the Mario approach. That approach is vital in a world that is constantly changing. Economic relationships and trends shift. Policy reactions that were appropriate two decades ago are no longer valid. Only through continued research can we fully understand the contours of the problems and the way in which we can address them and propose new solutions. But wisdom without a purpose is not enough. Your contributions also demonstrate your devotion to economic and monetary union with the euro at its core. During the sovereign debt crisis you played a pivotal role in finding a European solution that underpinned the return to stability. You understood, there were not many at the time, the power of destabilizing dynamics that risked becoming self-fulfilling. Changes in market pricing caused by fears of countries leaving the euro were exacerbating economic difficulties and thus making such an event even more probable, the self-fulfilling prophecy was in place. But you realized that the vicious cycle needed to be broken and that it was vital to anchor the irreversibility of the euro. And here your second quality, your determination was crucial because insight was not enough. You also had to act together with the governing council with creativity, vision to use all available tools in the ECB's mandate. File K. Chid Devi is certainly something that you had in mind and that we had in mind and should have in mind. Your decisiveness and commitment inspired confidence not just to the markets, not just to the economy but also to the policy makers who were inspired by your confidence. As you have noted, the moves establishing banking union, the European stability mechanism and structural reforms in a number of countries were also a vital part of the process. But you inspired us at the time. Your dedication to the future success of the euro remains unabated. You continued to advocate for the completion of the reforms started during the crisis, for structural reforms that have been started and maybe not yet completed in order to harness the opportunities for living standards offered by the single market and for a better mix between monetary and fiscal policy in order to facilitate the effectiveness of both of them in an interrelation that is something of a chemistry. These factors all remain crucial to ensure that we never have to face such a crisis again or that if we ever have to face it, we are actually equipped to deal with it. Now to anyone who knows you Mario, I think it is very clear that underlying all that you have done is a genuine commitment to the people of Europe. The euro does not belong to you, you know that. It does not belong to the ECB, however well it serves it, it belongs to them, to the people of Europe. And we are merely stewards on their behalf. As we both know, we are just passing through. And while always faithful to the mandate for price stability, you showed you care for people through your speeches raising a number of important issues. A few years ago you gave a speech in Dublin highlighting the long-term cost to our societies of youth unemployment. You pointed out that while national policies were crucial, Europe could actually provide part of the solution through the opportunities offered by the single market. And if there is one number that you mentioned, it is not necessarily 2% close to but below, but it's 11 million of those jobs that were created. You have also highlighted how Europe provides protection for people. And in your speech earlier this year at the University of Bologna, you explained how by working together we increase our sovereignty in a globalised world and distinguished between independence and sovereignty and how one can facilitate the other. Europe has been at the heart of everything that you do. Your stewardship is now coming to an end and you live with the euro more popular than ever and trust in the EU at its highest level since the crisis. Let me thank you for all that you have done in bringing about the continued success of the euro area and more importantly the wellbeing of its people. Your legacy is such that it is a call for us to excel, to exceed expectations and to deliver on the mandate and to serve the European mission as you have served it with wisdom, with determination and with commitment. Now that should be the end of my speech but because we both love music and I cannot duplicate the talent that are out there, I thought I would just mention the words of a song which in my view corresponds very well with what you have done, which if not inspired by the Jesuits might actually meet the expectations as well and you will recognise it. Ring the bell, ring the bell that can still ring. Forget your perfect offering, there is a crack in everything. That's where the light gets in. Thank you very much Mario.


This 2021 Ram 2500 Crew Cab Short Box Big Horn Sport is stock number 11935Z. We're here at Summit Automotive in Fond du Lac, Wisconsin, your new and used Ram and heavy-duty truck headquarters. This 2021 Ram 2500 has the 6.7 liter Cummins diesel. This truck has been fully-safetyed and inspected by our service shop for the state of Wisconsin inspection process, has a fresh oil and filter change, all the fluids have been checked and topped off, and this truck is 100% ready to go. Super clean all the way around, bright white is the color we shoot all of our videos in 1080p, 60 frames per second, so if you have HD capabilities on your computer tablet, smartphone or television, turn them on right now, because it is definitely your best way to check out the quality and condition of the truck before seeing it in person. And if you like the video and want to subscribe to our YouTube channel, and the bottom right hand part of the screen is a button to subscribe, click that, and then click the bell notifications. We do videos of our vehicles every single day here at Summit Auto, and you'll get notified every time we do one if you click those bell notifications. This one comes with the 20-inch painted alloy rims. It has Achilles Desert Hawk XMT tires. These are LT 320, 60 R20 tires, and they are like new, I'd say 90 to 95% of the tread left on them. Frame and underbody is in excellent condition, as you'd expect on a 2021. Front fender, no dents or dings on there, headlight lenses are nice and clear. Front bumper is painted and in excellent condition, I didn't see any dents, dings, cracks, or rock chips or anything like that. Front bumper parking sensors, the hood is absolutely perfect as well.  As you go down this side of the truck, take note of how clean the body is, how reflective and mirror-like that paint is. We take these HD videos so if you are far away or even if you're close by, just cannot make the trip down. You can still see the truck, hear the truck, and have confidence in the vehicle that you're looking at before you even get here.  Very clean down this side, absolutely perfect. Comes with some nice wheel-to-wheel side steps, back rim, no scuffs or scrapes on there, and the back tires have just as much tread as those front tires. Frame and underbody, absolutely perfect, and it has all the remaining factory exhaust. It hasn't been altered in any way, shape or form. Lower rockers are in nice shape as well, and those step bars are really nice too. That's just a sticker, so if you didn't like that, you could take that off. As we come around to the back, rear bumper is in great shape, no dents or dings in there, back up parking sensors. Tailgate is in excellent condition as well, and it has a tiger soft tonneau cover, and that is in really nice shape too. Has a shock down assist tailgate. Nice wheel and goose neck prep package, bed is like new, has a seven pin and four pin wiring back here, and some side box tie-downs, and you can see just how nice and clean it is back here. Tailgate shuts nice and solidly, and as you go down the driver's side, just as clean as that passenger side, no dents or dings on the box, and for full disclosure, this back rim is in nice condition as well. Down the rest of the side of the truck, doors look really good. It does have the heated fold up tow mirrors, they also fold in, they have built in directional signals on the side, and these are power fold in mirrors, so they fold in like so. I always like showing both sides so that you know that both sides are working properly, even though this truck has full bumper to bumper warranty left on it. The big horn package gives you the dark charcoal and black cloth interior, no rips or tears on the seats, you do get the 40, 20, 40 split bench seating, so six passenger, power driver seat with lumbar, factory all weather floor mats, auto headlamps, power pedals, tilt steering wheel, power windows, power locks, power mirrors, get the nice cloth and woodgrain trim bolstering on the doors. Little hop inside, and we'll check out the miles here, one second. Let's turn the ignition on here. This truck has 1,554 miles, instrument cluster is very nice and clean. You do get a digital speedometer, compass display up there as well, comes with the heated leather wrap steering wheel, no rips or tears or wear on there, gear selector has the cruise controls right there, Bluetooth and information center controls on the left, and on the back there's audio controls there as well. This one comes with the six speed automatic transmission with the optional tap shift right here now, push button four wheel drive, you do get the push button start, comes with the 8.4 4C radio, AM, FM and Sirius XM radio capabilities, you can also, that's also where your backup camera shows up, you have all your different controls there for your heated seats and heated steering wheel buttons, and you can check out that backup camera, and it is an HD backup camera now, so very nice and crystal clear, and then you can zoom in over the receiver hitch to get hooked up to your boat camper trailer the first time, every time. Also has Android Auto and Apple CarPlay capabilities in the projection realm of things, so you can project your cell phone to the screen via Android Auto or Apple CarPlay, and if you have a navigation system on your phone you can project it up there and it's like you have nav right on the screen, so a really cool system, we actually did a demo on Android Auto on an 8.4, check that out, it's in the upper right hand part of the screen. You got heated seats, heated steering wheel buttons right there as well, more tactile climate controls, factory brake control, you get six upfitter switches to hook up to auxiliary lights or anything, tow, haul mode, you also have your factory exhaust brake and those front and rear parking sensors, you can turn those off and on, you do get a media hub down here, two USB's, two USB C's, USB C's, and an aux jack right there, here's your keyless entry right there, and the passenger side format and seat are in excellent condition as well, no rips or tears, this truck's never been smoked in, and the headliner is absolutely perfect, map lights up there, home link buttons for your garage door security systems and lighting systems, and you do get an auto dimming rear view mirror, we'll take a quick look at the back seats and then we'll start it up and take a look under the hood, the back seats are just as clean as the front seats, no rips or tears back here, you do get the latch child safety system for any child car seats you may have, excellent condition, these seats do fold up for extra storage and you get a load floor right here, these are nice if you got pets, you can put both sides down, they got a nice flat place to lay, or if you got muddy boots or tools, put them on there and you're not going to wreck your nice clean seats, also storage underneath there, and then you do get in-floor storage right here with removable bins for easy cleaning, you can put ice and drinks in there, it's like you have too many coolers wherever you go, pretty cool system they got right there, you do get side current and airbags on these seats as well, you get that woodgrain and cloth bolstering on the doors and child safety locks on the back doors, we'll start it up and take a look under the hood, starts right up no check engine lights or anything like that, other than my hood's open warning and I would personally like to thank you for checking out the video today and hopefully from this HD video, you've been able to tell just how perfect this 2021 Ram 2500 Bighorn Sport is, under the hood we have these 6.7 liter Cummins diesel engine base very clean, runs very smooth, once again this truck has been fully safety and inspected by our service shop for the state of Wisconsin inspection process, has a fresh oil and filter change, all the fluids have been checked and topped off, the truck's been gone to a mechanically 100% and is 100% ready to go, there's your mission sticker and I would highly recommend this truck from a quality and condition standpoint, I didn't see anything wrong with it, pretty much like new and I think you'd be happy with it if you get it and to see more pictures of this truck or one of other 450 new and used cars, trucks, SUVs, minivans, Wranglers, half-tons, three-quarter-tons, one-tons, you name it, we got to go to that website right there www.summitauto.com, full pictures and descriptions of every single vehicle from two locations, all at summitauto.com and if you'd like to check out more HD videos you can go to youtube.com slash summitauto, remember to like, subscribe and share on this video and all the videos that you see there, in fact in a second you will see a link to subscribe to our YouTube channel in the upper left, a link to more Ram 2500 truck videos like this in the upper right, link to this vehicle on our website in the lower left and a link to one of our latest YouTube videos in the lower right, click those check us out and we're super excited to help you with this like new 2021 Ram 2500 Crew Cab Short Box Big Horn Sport in bright white clear coat with a 6.7 liter Cummins Diesel, thanks again for checking out the video and remember to like, subscribe, click those bell notifications, get updates on videos we do each and every day here at summitauto.com


Good morning. I have a today really weak my voice, but shortly I want to share with you please prepare the clip clip and Thought with what I want to share with you will be will be named called Maximum by spirit or through spirit. Please watch This is wise man John she and the synagogue church of all nations Set in the people free from every demonic bondage in their lives The name of Jesus Christ is power and fire that makes Satan and his agents flee Wiseman John she encounters this lady at the prayer line and Delivers her in the power of the Holy Ghost What you you are what? My snake, how long have you been in her since she was born?  I'm not a snake. My name is happiness. Jesus. I said to pray Thank You Jesus. My name is happiness. Well, oh man The problem that brought me to the synagogue church of all nations was the problem of prostituting Actually after watching the delusions of my sister I knew I needed to be delivered Because these spirits of snake had made me to destroy top man because that was the commission They gave me in the black sea to destroy men and I have been doing it very very effectively in a day I can sleep with nine to ten men without getting tired. I Just have that power. I don't get satisfied. It's just the odd just comes I can charm any man of my choice Because my eyes is number one the very first tool I using getting them How do I do that? Any man I look at Must fall down for me and anything I tell the man he must do it if I tell him I need any money He will get that money for me. He would do virtually everything possible to get me give me that money without looking back So I've been doing it and the worst of it that if any man I sleep with After sleeping with me, you will not be yourself again. You will become like a fool Following me any way I go to and I was doing it very very well If you're a married man, and you are married you have children We have been crisis in your family And if you are trying to look for children, you will have no sperm count. That is it because we take those things to our kingdom Very foolish of them. They were like, ah, this guy. She's so good, but they won't know that they are not sleeping with an ordinary person They are sleeping with a snake. That is what we do. So that's why I came here to be delivered Even sometimes I would like let me stop it on my own But I still have that urge to go out and because it is already ringing in my head Okay, my my thought maximum by spirit in our church, we pray for great revival for great church and For us really important to know and we try to Be aware and make to know for everybody of the spiritual reality Spiritual reality is is that knowing knowing to Spiritual reality exists as we are our spirits Beside us. There is there is God's spirit God create God create us each each of us and breath he is he is spirit in us in The body which were created from the earth and we became became living soul and For us really really important to understand beside our body our material appearance and Substance in this world we have spirit from God and Which are ascended by God who himself is spirit God is spirit and For us really important to understand from this clip We clearly can see That spirit is Person It's hard to understand all things as a creation as a creation. It's really hard for us to understand our creator But we don't have choice we have to accept the facts in In This case we can clearly see this young lady. She is student of University and Doesn't matter how how high in society you can have your position you still in the world of spirits and By herself She couldn't do what what she so she's doing but This spirits in the book Apostle Paul wrote to Philippians chapter 2 verse 13 and he wrote over there such a things but the God Spirit of God create produce within us his desires and Produce his actions works We have to clearly understand that spirit of God or spirit of Satan This is the person as a person person has his own will desire Vision emotion everything as a we are persons Spirit is person The mind spirit has his own passion and desire and this and desire of Satanic spirit to destruction to destruction To deceive To lead astray To to kill and destroy on the opposite Spirit of God he is good it is a good spirit and It is a person with his desire as As a as a spirit Satanic spirit let this young beautiful girl in such a shameful pattern of life conduct of life and leading her surroundings to the destruction and her personally Maximum by spirit spirit he has Unquenchable desire to progress To go forward to to it to his and the goal and goal of Unclean spirit is death destruction I Want to explain maximum with God with the Holy Spirit maximum for our church for each of us Good maximum on the opposite side as the morning spirit leads people and And a bet Destruction maximum Holy Spirit That's really important for us each of us to know To find connection with the Holy Spirit to know him Establish a relationship with the Holy Spirit because Holy Spirit on the opposite of the money spirit He's he's he has his own desire plan vision to bring Maximum of his goodness kindness Abundance in our life on the opposite To unclean spirit Holy Spirit he has his best for us in our marriage in our Singleness in our business in our finest finances as as a demons try Wants to touch every area of human life He is health wealth relationship peace joy happiness every sphere of our of our human life and He and demons Against even human will humanly this beautiful lady Having degree from university She likely Choose will choose for herself good life But on the opposite being promoted pushed being possessed by Unvisible person demon He he brought so so much destruction In the surroundings surround in her surrounding Not looking on the tears of babies wives the This regard everything Demons with their great passion came to kill still and destroy Maximum with spirits with spirit brother and sisters With our own Power Willowness we cannot accomplish much but when we accept spirit of God when we Welcome the spirit Holy Spirit Holy Spirit. He has his holiness Holiness speaks for itself. It's holy You will be protected by holiness people who who who are left By by demons on the way of sin There is always a risk There is always always danger But when you when you choosing the Holy Spirit, he has his own character He has his own desire He has his own vision and he reveals us His desire vision and he promote within promote within us his actions He create within with us his character of holiness so important in our earthly life to rely on Spirit as a holy people in church people Brother and sisters so important if you consider today mega churches mega movement of Christianity all of them are based on a spiritual entity and on a spirituality if you if you Take for example, young teacher young teacher even did did Not finish high school If you consider young Prophet to be Joshua this ministry what we watch Millions people are delivered there restored for life on a base what on a exceptions by the Prophet to be Joshua Holy Spirit maximum with Holy Spirit, that's why It's so important for us when in our church we pray For salvation, that's real salvation Saving soul we save life From drugs alcohol perversion a morality poverty sicknesses confusion Depression just name it Holy Spirit saves He has holy desire and he create within with within us that's that's passion as he has he claim on Us because we are his own In under in the beginning when earth was empty Not demons Howard around the globe, but Holy Spirit if you if you watch Deliverance exorcism you clearly can see passion of demons. They don't want to live person Why so big passion? Why so big? Desire to stay That's evil person If if devil whom we who we who whom we Belong not He has so big claim on us We are a stranger to him But to Holy Spirit we are his creation Holy Spirit has his passion on you But he cannot Come in relationship with us as As demons do for demons for for them to come in the life of Person and not just enough any sin But to have communion with the Holy Spirit Holy Spirit is gentleman and he is looking for our willingness to yield to yield our self to to respect him and to invite him and develop our relationship the my young granddaughter She she cannot speak She's just five five months old But she's person She is not grown yet not developed yet as a as a In her mature maturity Holy Spirit is person in our hearts He can be developed Through our commitment in relationship with him and he will start produce his desire He will start presuit his want his Vision in our hearts and he will establish in us His work his action to reach


Tam, thank you for joining us on Think Tech Hawaii's Connecting Hawaii Business. My name is Kathleen Lee with Kathleen Lee Consulting, and I am your host for this program. This afternoon, we have some very special guests. See, I'm already settering, and it's not even a minute into the program. But today, we have the owners of Essential Peace. They are both police officers. We have Kaipo Paiva and Graham Wong. So thank you both for being on the show and welcome. Well, thank you for having us on the show. Oh, absolutely. Appreciate it. Yeah, so go ahead and introduce yourselves to our viewers out there. And just as a note to everyone who is watching, this is live stream. So if you would like to send us any questions, you can email questions at thinktechhawaii.com. So Kaipo and Graham, go ahead and introduce yourselves. So I'm Kaipo Paiva. I'm a police officer with the Honolulu Police Department. I'm a sergeant, and I work out of the Pro City Police Station. And I've been a police officer for 20 years. And we opened this company about back in March. And here we are today. What about you, Graham? My name is Graham Wong. I met Kathleen when we used to work at the Prince Waikiki. So I'm kind of honored that she had us on the show. But I'm also a police officer with the Department of Defense. I've been a police officer for 13 years. I'm actually a sergeant now. I'm assigned to the Wahewa Annex as of now, and then we'll rotate later on. Me and Kaipo have been best friends for ever since we attended Damien High School together. So maybe, I don't want to put it out there too, so everybody will know our age. But maybe close to 30 years of friendship, he had this great idea. You want to support your friends. So we collaborated together more for networking. The whole concept is his idea. And when you're believed that your best friend has a great idea, you just go and you run with it. Let's go run with that then. So your business is called Essential Peace. And it is a business that sells PPE, personal protective equipment, and it's inspired by first responders. So could you tell us a bit more about how, when that came about, what inspired you to do it, and why highlight first responders with the theme of your business? So this started back in March of 2020. And my mom had been diagnosed with leukemia at the beginning of February. And so she opted out of chemo. And she went straight to hospice care. And she came home and she was still joyful as the same as ever. And I chose to go and live with her and help her throughout all that time. And in that time, COVID was just coming out and it was just starting out. And we didn't know.  We were wearing masks around her and trying to keep a bubble around her. And as we watched, as I watched the COVID pandemic take more in Hawaii, I noticed that more people started to wear a mask. And they're saying it can help to reduce the spread of COVID. And so our first responders, police officers, EMTs, fire departments, firefighters, they're the first ones there at any situation. And we didn't know much about it, but we had to wear masks. And I noticed that I didn't, wearing those paper masks, you know, they were just, they were great and stuff. And so I wanted to wear stuff that I wanted to wear. But I've always wanted to look for clothing that I want. I go for clothing that, you know, that sends a message. And so I created a mask with a design that I liked and I created a handful and I wore it one day to work. And I took a selfie because we were all starting to wear a mask and everybody was like, Oh, where'd you get that mask from? And I said, I made it. I said, can I, could we order one? And I said, sure. And so I, one turned into 400 of them and said, okay. And there and behold, I was at home with my mom a lot. So I was playing around with a lot of designs and a lot of messages that I want to send out.  So I was like, you know, maybe we should put some positive messages on there, especially in a time where, you know, law enforcement are being seen in a negative way. I think that if we could send some kind of positive messaging to people regarding law enforcement and the name of the company itself came about because I'm also, I also have my own company as a, as a speaker, a speaker and a professional speaker and I do a lot of youth classes. And one of the, one of the subjects I teach is forgiveness. And I think the goal of every police officer, well, the goal of forgiveness is to help you find peace. And I think in my opinion, I think at the end goal, whether you want to be successful or you want more freedom or you want something to be a certain way, I think the end goal that everybody's searching for is peace. Because when I have freedom, then I have peace. And so police officers, when I learned the forgiveness skills that I, that I teach is that I think every end goal is that police officers, our end goal is that we want peace. And then I thought to myself, I go, it's not just me, it's, it's about everybody. And I think we're all the word, the, you know, essential workers when COVID was sort of, we're starting up essential workers with all those that go to work. And that word essential kind of stuck with me. And I thought, well, you know, peace is essential. And I think we're all essential pieces to creating peace together. And that's how the name of the company was formed is essential peace and that peace is essential. And we're all essential pieces to creating peace. So let's, let's pull up the second photo here. I know you had mentioned police officers. And that's the theme that your company is running here. Could you tell us more about the colors that you've used as well as the logo and elaborate more on that and why you decided to go that route or made those selections? Well, the colors are pretty much the thin blue line colors or the colors of, you know, thin blue line and the theory behind the thin blue line is, you know, in darkness where the blue or the police represented by blue are the ones that, that, that protect our community from the evil that's out there. And if people don't know or don't realize how bad it is out there, and I think we're doing a good job. And the shield, if you look at that, the shield and the, the, the, the Cahili with the cross panels, that shield and that Cahili with the cross panels are actually on the center of our Honolulu police department badge. And the theory behind it is there's a story called the law of the splintered paddle. And because I wanted to research, I see, you see it all over the, the, the Kamako Maoli flags and Hawaiian flags and it's, it's there and I never knew what it stood for. And I'm part of Hawaiian, so I did some research and I read about it. And I was like, it's, it's makes perfect sense. And it's a story about how I can come in and try to take over Hawaii Island or one of the towns that he failed and he was going to take over another, another village. And he saw, he ran to shore and left his army behind and he saw these two fishermen fishing and they were just minding their own business.    They run away and they're just trying to get fine safety. And when Kamena woke up, he realized that what he did was, was wrong. And the, these, these fishermen weren't a part of the, the war, the fight and the whole premises, the why we, why there's a shield is because police officers want to, want to shield and protect our community. And the law of the splintered paddles is anyone who's, who's not involved with the war, anybody, which is Kapuna, our community members, our youth, we're here to protect them. And our goal is to help subdue the evil that it's out there who are trying to victimize our community. And that's why I chose the, I like the, the shield with the Hawaii flag with the blue line behind it, because the whole theory of all that about protection and being a guardian for our communities. Okay. Thanks Kypo for explaining that. We actually do have a question from a viewer that I'm going to try to kind of rephrase. So because of everything that has been going on in the world, and again, your theme came from that, right, essential piece. It's to counter a lot of, you know, the disenchantment that has been going on in our society has the question is, has anyone given you grief about your company? Because it is, you know, police officer first responder theme. Personally, not to me, I guess. Not to me personally, I haven't heard anything. It's, it's been, it's been supportive so far. And I'm not going to bounce at every police officer on the planet is perfect and follows all the rules all the time. I, you know, I understand there are people just like in every other profession where they make bad decisions where it hurts people and it hurts the community. I myself, I do a lot of community work and I really believe in helping the community. I do a lot of work with the youth as a, as a police officer and educating the youth and community service work. So and at the same time, I've done a lot of work where we've had people break the law and we've had to arrest them or give citations, but I haven't had anybody give me too much grief yet. And I hope I can change their mind about police officers through our clothing line. What about you, Graham? What is your take on that? I think I haven't got any bad feedback, but I think more of our clientele we cater to first responders. So I don't think first responders would, we're trying to branch out. We're trying to, we're going to, we're trying to expand. We want to get everybody involved, but I understand right now, as of now for business-wise, our clientele is basically first responders. But as a police officer, we're not, we're more trying to educate than trying to punish.  And I can speak for Kiteville, but, you know, I think you kind of have the same mentality. It's not about always hammering down, hammering down, hammering down. We want to, you know, educate. We want to, you know, tell people, we understand that times are, sometimes times are hard. You come from a family that's struggling, you live in a certain area of the island and it's just hard. You have bad role models, but we just kind of, and I know Kiteville is really, really into like helping the youth so that when they come, when they get older and they try to, time to function so society, he gives them the tools. And I try to do that when I come across any individual that we get a call to, that you kind of want to listen to both sides and educate. So as far as getting negative feedback about our product, as of now, I haven't received any negative feedback. Thanks for sharing that, Graham. We will actually be going on break, but when we come back, we will be talking about some of the challenges that essential peace may have encountered while starting their business during a pandemic. So stay tuned. Back to think tech, Hawaii's connecting Hawaii business. My name is Kathleen Lee with Kathleen Lee Consulting. And on the show today, we have Kaipo Paiva and Grandma of Essential Peace, which is a company that makes PPE for first responders. And again, as I mentioned earlier, they are police officers. And that is what that is why their target is first responders as well. But let me go into that because we did get a question from a viewer. Do you only sell local and do you plan on expanding to include designs for other states?  So I'll let you guys respond to that. So yes, we do. We have a website, ESN, TL, PCE.com. You can go to our website. And we can order and we ship as far as Virginia and New York. And we love it. I mean, it's a positive message. I wouldn't mind if somebody from other states had an idea and there's a bunch of people that want it and could give me an idea of what's behind the design because it's not only about designing something that looks cool, it's about having a purpose behind the design is what I believe and what kind of message it's going to deliver at the same time. I think apparel and masks are a great way to send messages, especially in messages with a purpose and hopefully that purpose is moving towards peace. Let's show that third photo. So people have an idea of what you guys offer. So it looks like you make PPE for adults and children. Is that correct? Yes, we have adults and children's sizes. That's my son over there and he loses masks left and right. So I mean a lot more designs and this is probably one of our newer designs that's going to be coming out and probably my favorite message that we like. But yeah, we definitely can ship. I think to answer more into detail for that question, because I think because we're a base employee and we're such a small business, it's only being quite full. We're only employees of the business. So we started small and we're kind of catering to friends and family and co-workers that it kind of expanded out to, you know, because at one point we were doing delivery and we're meeting all these new people. We're delivering to all over the island, but once you're business-wise when you start expanding, you can't do as much deliveries as you want. So we do shipping, but we shipped to the mainland and we got to look at it for the business-sense-wise and expansion is always in the works. Like we are more than willing to expand to other states, other for ideas, but if we're only going to get a small hand of individuals from the state, we can't bring in a lot of bulk stuff for that state.  We're good sales people. Like we can stand up. We can talk to everybody, you know, sell our product, but behind the scenes, like the inventory, the bookkeeping, the business sense, you know, we took us three times to get our business account set up at the bank because, you know, we're fairly new to business. All our career, we just been, we were never owners of a business. We were basically first as far as police officers and now we're venturing into this new idea. And it's a learning process. Every day it's a learning process, but expansion is always going to be available as in any business. Yeah, let's go more into that. So you need a little bit of the challenges that you have ran into as a business owner in Hawaii, a new business owner, especially during the pandemic, but that's kind of, that is how the business came about anyway, is because you guys are first responders, you responded to COVID-19 by coming up with the PPE idea. What other challenges have you ran into since building this business and how have you guys been solving for it? I think, so in my opinion, one of the parts of community policing, which is what I've been assigned to for the last 10 years is problem solving. And one of the ways that I went through this class called, it's from, oh my gosh, I forget what the company name, I just went blank, but there's a course at Stanford University called design thinking. And with design thinking and problem solving with community policing, the whole goal is to listen. It's all about listening and design thinking, they tell you the difference between an invention and an innovation. An invention is something you make and you deliver to people and say, hey, do you think you could use this? Design thinking thinks of an innovation where let's go talk to people and see what they're at and what's going on, what challenges are they having? And I talk to people, I listen to people about what the challenges are, I hate wearing a mask, you got your ear solar or my nose, it doesn't fit right. And what I noticed was, yeah, if there was something like for police officers, we could be more inclined to wearing it and probably protecting our people. And I said, well, okay, and I tried out several different designs of masks. This is the design part and I found the mask that was cost effective. Our goal was to keep the costs down for our customers. And at the same time, trying to figure out what could fit most people. I mean, I understand that our stuff isn't the only one out there and I'm not saying this is the best for everyone, but I try to cater to as much people as possible. And the business side of it, like Graham said, it's setting up our account between an LLC and an LLP. We thought we were going to be partners. We went through a partnership and oh my gosh, we filed another partnership. And we had the goal, it took like 90 days or three months and the DCACA people were so kind and so patient. Talked to me and I said, I told them straight up, I don't know what I'm doing.  And, you know, I think if you just ask questions and you're very transparent and honest about what you're trying to do and what you don't know, there are people out there that want to help you. And I say, you know, accept the help because yeah, I don't know everything. There are people out there too and maybe ask them. So you had mentioned accepting help, but I understand that you guys also give help and you have donated a bunch of these PPE to organizations, schools. Can you tell us a bit more about that? So one of the community policing, one of our really close nonprofits that we work with is We Didn't Seed Hawaii and I have a really close relationship with them. They hold a lot of community events and during the COVID, this whole pandemic thing, it was starting out and where kids started staying home from school and one of the hot spots was actually where Papa were in the community that I work. And so Lori Connell, who I work with close with We Didn't Seed, she's one of the coordinators.  And I was like, yeah. And she said, oh, okay, because we're looking for masks because we want to make, you know, bag care bags to give to the kids and give to the community so they can start wearing masks and put wipes in it and stuff. So how many masks do you donate? And I said, I got a few hundred. Do you want some? So I had this model that made this one that didn't really sell so good. So she goes, oh, okay, how much do you think? And I gave like a couple hundred to her adults and kids sizes. I said, here you go. And she said, thank you. And she was able to get it to the people that needed it most. And you know, one of the philosophies that I like is a win-win. I mean, it's good for us that we're getting our name on and it's good for our community because in the end it's all about the community. That's free publicity to people wearing our masks. And we're donating it to a good cause. So I think it's very, it's, we donate to other things too. Like, you know, people's been asked, individuals been asking us to help with, you know, I don't know, it's trying times during these times. And we really appreciate everybody, you know, that come on the website and purchase stuff from us. Because, you know, I know you see it, every struggling, they're asking for the second stimulus check, people complaining about the unemployment not being to get him. And we're so appreciative that people actually go on our site and buy stuff during this time of, you know, uncertainty in the world. So we really appreciate that, you know, people support us, you know, and it's expanding. So business, we don't concentrate this on this full time.  We have full time jobs. We have families. And then we just do this, people put orders, we do this. But I think the partnership is what was I was really worried about is that, you know, because sometimes partners disagree, but we've been going on five, six months. I think we had one disagreement. And then we kind of squash that. So it's kind of, yeah, we're moving in the right direction. We just got to, you know, we were human, we're learning, we make order, we make what we've been, we make order mistakes all the time. But as the customer service part aspect, we want it, we will correct the mistake. We will come back, we've been getting quite a few and it's both, you know, in me, it's kind of, you know, but we will correct it. We as soon as possible. Okay, let's pull up that last photo. I know we talked about you, too, and your company creating personal protective equipment, but I mean, it goes beyond that. Your product line goes beyond that. Could you kind of go briefly into that? And then anything else that you would like to add that we may not have gone over in our last two minutes of the show? Well, I mean, it's, Graham and I have talked about doing like our own t-shirts, saying our own things and basically that shirt says it all. It's as essential. And in the end, just go to Aloha. And the hat in that picture is from a different company from another police officer called Monty's Apparel. You go to our website, they have a lot of good stuff, too. And there's Got Your Six, there's Blue Line Hawaii.  I'm like, I'm not in competition with them. It's, why can't we all succeed together? And I tell people all the time, you want cool hats? There's also Got Your Six, there's Blue Line Hawaii, there's Monty's Apparel. We'll check them out. They have really great messages, too. And it's not about stepping on anybody to get to our goal. It's more about let's collaborate with as many people as possible so we can all get to our goals together. And it's about sending positive messages to people and about our company and about everybody. And how can people find you guys on the web? I know Kaipo, you mentioned it earlier, but could you repeat it one more time for our viewers out there? You can go to our website. It's abbreviated, essentialpeace.com. So esntlpce.com. You could search us on Instagram. Same thing, esntlpce. Or on Facebook, esntlpce. You'll find us or Google us and put those letters together and find us on our website. And if you want to give us a message, go on Instagram. We're really good about answering messages. And like we said, the Graham said, if we make mistakes, please let us know between messenger or anything because we really want to correct it. And we do apologize. And sometimes a little bit extra stuff in there when we make mistakes. Final words, Graham. Like I said, I just want to thank everybody that's supporting essential peace. I know during these trying times that people are spending money on our apparel like that. We also support other, like Kaipo said, others like Back to Blue and Monty's apparel, Got Your Six. There's a lot of business to go around. We don't feel that we need to take all the business. We're not about that. We're more than happy because I see people were interested in Back to Blue shirts, but they have our mask on and they're asking Back to Blue, Oh, do you guys have those masks? And Back to Blue, Wayne Sherry always direct them to us. So we want to do the same. When people say, Hey, that's a cool shirt that says Back to Blue. We want to push them towards Back to Blue when people are posting with our mask with their shirt on. I'm with Monty's apparel and Back, Got Your Six and Blue Line Away. So yeah, we appreciate everybody supporting us. So I want to thank everybody, type Kaipo, you know what I mean? He puts it up with me. Sometimes I'm calling in late at night and asking them all these kind of questions. So I really appreciate that. Kaipo's patient with me. You know what I mean? I appreciate that. I think that's the partnership that is coming out. And on that note, we will go ahead and conclude the show. Thank you again, Kaipo, Paola, and Graham Wong of Essential Peace. Thank you guys very much. Yeah. Thank you so much for having us on the show, Kathleen. We appreciate it. Absolutely. Have a good one, everyone.