Hello. Today, we present to you our research on the DNS vulnerability class in the DNS service providers. My name is Shier and I lead the research team at Wizz, the cloud security company. With me in the room is Amir Lutvak, the CTO of Wizz. Thank you, Shier. It's really great to be here. Let's start with a bit of background about us. We are the Wizz research team. Wizz is a cloud security company. The team is composed of experienced security researchers, many of them with background from Microsoft cloud security group. Our goal is to do ground-breaking cloud research to find vulnerabilities, misconfigurations, risks in cloud environments that customers are not aware of and would impact anyone using the cloud. We started looking into DNS as a service. Why DNS as a service? First of all, DNS, as we all know, is the lifeblood of the Internet. It's probably one of the most important services that we have. Now, DNS as a service has huge impact. If you think about it, it holds your domain, it holds your internal routing. Now, what's cool about DNS as a service, unlike usual cloud services, is that also it controls not only cloud activities. When you use DNS as a service, it also impacts your own premise activities. Potentially, DNS as a service has huge impact on an organization. Now, on top of that, what is really great for researchers is the DNS protocol. It's one of the oldest protocols that we use. It's more than 20 years old. It's incredibly complex. There are so many different implementations of it, both from the DNS providers, but also I think about millions of DNS clients that we have out there, each of them implemented in a different way, creating a very, very interesting attack vector for researchers to explore. We started from looking into Route 53, which is the DNS service provided by AWS, and it's a highly popular across AWS customers. Route 53 is built on thousands of DNS servers that host DNS zones for all AWS customers. We mapped around 2,000 servers in the Route 53 platform. Whenever a customer is hosting a domain on the platform, they get four shared name servers to manage the desired domain. On the right side of the slide, you can see a simulation of one out of the four DNS servers Amazon provides each domain. The server stores the DNS zones for with IO, for example, and several other AWS customers. If the server is queried for one of the domains, under management, it will return the appropriate records for that domain. While studying the Route 53, we discovered that anyone can register any domain they want on the platform. There is no restriction on whether the domain is already hosted on the platform, and there is no ownership verification. The only limitation is that if the domain already exists in one of the name servers, it will not be possible to register it again on the same server. It makes a lot of sense, and it's indeed not possible, trust us, we tried. Basically, anyone can register any domain on any of the name servers as long as it does not already exist there. But is there anything dangerous here? For me, as a security researcher, it felt like we had too much control here. But almost any DNS service provider works this way. So is it really a security problem? This is an example that if you try to register with again on the server, it will be impossible because it's already there. So we started with a very, very simple and interesting research question. If we can register any domain, what domain can we possibly register that will give us interesting access to data? So we want to register a domain that is not already present on the name server, and that for some reason DNS clients will actually query for that. So we started into a quest to think what domains can we register that no one thought about, and we could actually somehow break the DNS. So we thought about it and came up with an idea. What would happen if we register one of the official AWS name servers on the platform? What would happen if we register one of the route 53 name servers under the same server? So we choose an arbitrary name server. In this case, it's the NS1611, as you see on the slide. And we try to register it on the platform enough times so that at least once it would fall under the management of the same name server. Let's do an illustration of that. So as you can see in the slide, we have an illustration of the NS1611 name server, which is an official route 53 name server. And you can see it already contains DNS zones for several of route 53 customers. What do you think would happen if we managed to register the name server domain name NS1611 under its own management? I totally don't know what would happen, but we must check it out. Definitely. So we tried it and it worked. As you can see on the slide, our new domain is now managed within a name server with the same domain name. We were really excited. We didn't know if it will have any impact, but we had a really good feeling about this one. So to test the effect of what we did, we decided to specify an IP record pointing to our server. So now, if a DNS client will connect to the NS1611 name server and ask it about itself, it is our IP address that will be returned. At this point, we're really curious to know if anyone is asking Amazon's server about itself and if anyone is trying to connect with us because of the manipulation we did. So we ran TCP dump on our server and hope to see something interesting. Surprisingly, we started receiving thousands of requests from thousands of different IPs. We realized we were onto something. The next step in the research was to analyze all these DNS queries and figure out why these queries are being sent to us. So wait, why are we getting any traffic? No one was supposed to ask the name server for their own domain. The name server actual domain is registered on other name servers. So why are we getting any traffic? And what's more weird was that it wasn't an actual regular traffic. It wasn't even DNS traffic. It was dynamic DNS traffic, which is a very specific protocol that you wouldn't even expect to see in this type of internet traffic. Now, we were getting a lot of data. I'm talking about IP addresses, computer names, domain names. So we started investigating. We started to look into the data. So basically, we saw we were getting millions of actual requests from endpoints. And when we started looking into it, we saw it's a lot of data. We are seeing internal IPs, external IPs, names of computers. We very quickly understood these are names of endpoints within many, many different organizations across the globe. And the scale was truly unbelievable. It's within a few hours of sniffing the traffic, we saw more than a million unique endpoints. And they would belong to based on the initial analysis we did, we saw more than 50,000 organizations, 15,000 organizations, all of them using AWS as a DNS service. Now, we said, okay, let's try to figure out what organizations are we seeing here? So it was quickly we understood that we are stepping into an unbelievable tap of worldwide organization and traffic. We saw Fortune 500 companies. We saw more than 130 government agencies in the traffic. So we knew we were probably onto something big, but the problem is that we had no clue what we were seeing and why. So what do we know so far? We registered a name server domain on the name server. We have no idea why, but for some reason, millions of endpoints started sending tons of dynamic queries to us. But again, why? Why are we seeing dynamic DNS before we are able to answer that simple mysterious question? We have no way to actually understand what we're seeing. So we decided we are going to step into the world of dynamic DNS. So what is exactly dynamic DNS? Dynamic DNS is an extension to the DNS protocol, which is specified in RFC 2136. It allows clients to dynamically update DNS records of a target DNS server. And it's commonly used to help devices find each other in internal Windows networks. Let's see how it works. So when my Windows computer joined the company's network and received a new IP address, as you see on the slide, it updates the local DNS server, which is called master server, when it's new IP address. Now, when Ami is trying to connect to my computer, he can query the local DNS server about share PC. And the master server will answer it with my current IP address. So far, sounds like a great feature. At the moment, it is still not clear to us why endpoints sends dynamic DNS updates to our server. These are requests that should never leave the internal network. Could it be that the endpoints sync of our server as their master server? I would even know how to find the master server. So it turns out Microsoft has its own algorithm for finding the master server. And it does not work exactly as specified in the RFC. Just before we go into the logic of the algorithm, let's do a brief refresh on DNS records for those who have not touched DNS recently. So in order to fully understand the algorithm, it is important to remember only three types of records. It will make it very quick. The first would be the A record. A record specify the IP address of which the domain points to. The second would be the DNS record, which specify the name server of the domain name. The third is the SOA record, which is short for start of authority. The SOA records contain administrative information about the domain, and its first parameter is the master server. This is the server in which clients will attempt to update during dynamic DNS updates. Usually, this server will be on one of the domain's name servers. And in Route 53, the different value of this field will be the first Amazon's name server from the name server's list. And now that we have already refreshed our memory, let's get into the algorithm. Now, this is the primary name server. So when a Windows endpoint wants to update the internal master server for its new IP address, it first needs to find it. The endpoint will send the SOA query for the internal DNS resolver on its own fully qualified domain name. The internal DNS resolver knows that the with IO DNS zone is managed internally. So with query, it will return the internal master server within the SOA response. Now, when the endpoints find the master server, it will update it as we saw in the previous illustration, and the update succeed. But what happens if the corporate DNS resolver is not set correctly and does not contain a DNS zone for the local domain? Or what would happen when the computer leaves the organization and start working with external DNS resolvers provided by home routers? In that case, when the computer query for the corporate domain, the DNS resolver will treat it as an external domain and will return the master server of the external domain just as it will do with any other domain. This is where the problem starts. So imagine an employee of Whiz decided to work from home, like most of us lately, and connected to their home Wi-Fi. The computer got an internal IP address from the home router, and now trying to find the local master server to update it. Because the external DNS resolver are not familiar with Whiz.io, it is going to resolve it just like any other domain. Because the domain is managed on Route 53, it will return the Whiz.io master server as specified in Route 53. The endpoint will then try to update the master server, which is an Amazon shared name server that manages thousands of customers. Obviously, Amazon servers does not support dynamic DNS, so the update request will fail. The thing is that the Microsoft's algorithm does not give up here. The algorithm believes it still has a chance to find the master server. So the next step would be to check if the Whiz.io's name servers have records for the master server. So the DNS client connects directly to the IP address of the name server and asks them what is the IP address of the master server. In our case, it is the same domain name as the name server. And here happens the interesting part. In fact, Windows DNS clients queers the name server for itself. And if you remember, we have registered this DNS zone, and here we can return any record we want. So we returned our IP address to the DNS client, and now the computer will update our server with DNS updates, which is the malicious actor server. And this is very crazy. So now we reached the point that we started understanding what's happening, right? Because what we know, we know the Windows endpoints. They use a custom algorithm to find the master DNS. The algorithm queries the name server for its own address. When you are in external and using Route 53, what happens that this means that you're actually querying the name server for its own domain? And that explains what happened. That's why we are able to register our malicious DNS server, and we're receiving this dynamic DNS traffic for millions of endpoints because all of the organizations using Route 53 when these devices are actually outside of the domain and outside of the company, they will actually use this algorithm, and we will be able to get traffic from those devices. So we understood what's going on. The next step was to figure out how much data are we actually getting, and what can you find from it? So when we started looking into the data, we quickly understood that we are actually building here what we call the nation state intelligence capability. Because think about it, we saw IPs from millions of endpoints from more than 15,000 organizations, but it's not just DNS requests. We are seeing external IPs, internal IPs, computer names. We are starting to map all of those organizations. Let's see what we can do with this scale of intelligence capabilities. We started from what we call IP-based intelligence. Imagine that you can map companies and a portion of companies around the world and map their global sites, map where their employees are at. We looked at one company, for example, and just see how amazing this is. This is one of the largest services companies in the world, and we got around 40k endpoints actively reporting from this company. Now, we are seeing a mapping of all of their global sites, all of their actual offices, the employee locations, right? So from just the external IPs, we can map, create a map of offices and home locations of employees across all of those companies. It's really amazing, and we can go even deeper, right? This is an example of a specific office where we detected 600 endpoints of that company. So imagine an intelligence capability that maps for you in one single tap into the DNS without any trace, actual structures of organizations across the world and all of their different offices and locations. But it doesn't stop there. Then we started thinking, okay, what interesting data can we pull from this if we're an intelligence agency now? So we started looking at companies that are in violation of the Office of Foreign Assets Control. We saw interesting things. For example, this mining company, it's an international mining company. And interestingly, we found six employees working from the Ivory Coast, which is definitely a place that is not allowed in that regulation at all, right? And we saw so many interesting examples like that. So we found a subsidiary of a large credit union with a branch in Iran. Again, 13 endpoints working from Iran based on our new and newly advised intelligence capability, right? So it's not only mapping all organizations, we can now start finding violations. We can ask questions across so many different agencies. You remember, we are actually seeing also government agencies. I wonder where are all of their offices, right? Now, it doesn't stop there. Because if you remember, external IPs is just a small portion of the data, right? We also have internal IPs. So what can you do with internal IPs? If I have internal IPs from different endpoints from the company, I can start building the map of the network, the internal logical network of the company. So for example, these are the segments. This is the employee segment. This is the ICD. Here's the operation network. Remember that we also see names of devices so we can start really understanding all of the segments. So building an intelligence map of the organization externally and internally across thousands of organizations. Now, we also had computer names and the computer names actually hold information about the endpoint, right? And many times you get employee names, you understand the actual role of the machine. You can see the specific, the build the machines is using, right? So we are actually getting quite a lot of information about those companies based on the IPs, the computer names. Here you see this is finance, and we see all of those machines are part of the specific segment. Okay, perfect. I'm starting to build my internal map of this company. That's perfect. Now, just so we understand the scope here. We looked at the specific DLS provider. Then we asked, wait, is this only this DLS provider? So we started looking at others. And we soon found there's many others also susceptible to the same vulnerabilities, right? This is not just about 53 vulnerability. This seems to be something that is shared across most of the DNS service providers. And if you think about it, we don't have to stop at the cloud providers. You have shared hosting. You have the main registrar hours. There's so many different service providers using, again, I think the shared concept here is that they provide DNS services for many, many different companies. And there's a chance that many, many of them are vulnerable to this attack of name server hijacking. So we started from AWS. We reported the vulnerability and was fixed really, really quickly by the AWS Route 53 team. Again, I think that within a week or two, it was fixed. And no one can now utilize this vulnerability in Route 53 because you're not allowed anymore to register those special domains in the name server. And we are in disclosure process with several additional cloud providers. And we believe there's many, many more to come. And it's part also of what we call the industry to start looking into and actually check across all of the DNS providers. So as Ami just said, AWS fixed the vulnerability very easily. They added all the names of their name servers to an ignore list, which is simple and very effective. Users trying to register one of the official AWS name servers on the Route 53 platform now receiving the follow error message, which says that the domain is invalid. And you can see it on the slide. When we report our discovery to Microsoft, they explained to us that this is a known misconfiguration that occur when the organization works with external DNS resolvers. And it's not considered as a vulnerability. So we would like to offer a solution for both platforms and organizations who would like to protect themselves from this kind of attacks. So first, we will start with the platforms. DNS providers want to ensure they are not vulnerable, should make sure it is impossible to register their own domains on the platform. DNS providers want to have even a better security, can also do ownership verification to ensure users only register their own domains. And in addition, it is very important to make sure that the platform user cannot register a reserved name as specified in the DNS RFC. The RFC is full of reserved domains that should not be allowed to register, and their gestation may lead to unexpected behavior. For an organization that want to make sure they're not vulnerable, we recommend making sure that the primary name server in their SOA record does not point to a different domain owned by the DNS provider. As you can see in the slide, and now you can see it, the different primary name server that a domain owner receives when they add their domains to the RATV3 is the first of the four name servers which manage the DNS zone. Changing it, changing the primary name server to an invalid sub-domain of the organization, or even the real primary master server will fix the issue, and attackers will not allow a potential attacker to register a domain on the platform. As you can see in the slide, and yeah, we are very close to the end. So just a few summaries and takeaways. First of all, what's really cool here is that we are able to get to nation state intelligence capabilities from a simple domain registration. Just a simple domain registration got us so much power, and we believe what we saw here is a new class of DNS vulnerabilities. This is just one idea of a domain. Think about how many different interesting domains you can try to register, and remember today you can basically register any domain that you want that will trigger unexpected results. No one thought, and we honestly did understand initially what would be the impact of registering the name server on itself. I'm sure there's many other magic domains that you can register, and it opens up so many interesting questions. Like all of this traffic was dynamic DNS. Why is it actually the dynamic DNS was built as a protocol like 20 years ago for on-premise networks? Why are we still seeing it outside in the internet? What are the implications of this protocol still being active on the internet and potentially endangering both the endpoints and the DNS servers? So there's so much here that we see as potential research areas for us and also for the community. And we believe the scope here is huge, because it's not a single service we founded across multiple DNS providers, and we are pretty sure that this one ability and many others will probably impact many, many, many of those DNS providers. Thank you very much. Thank you.


John Catlin of the USA, the man who shot the Asian tours first-ever 59 last time out will long remember round three of the Saudi Open. We'll get to Catlin in a moment, but it was a day when there was a lot of good golf play. Chris Broberg, an eagle two at the last for a 67 and eight under par. Pernipal Patayarat had a 66, this was one of six birdies on his back nine at the 15th and he's on nine under. Four players are on ten under par. Aitong Lee didn't have a great day at least he consoled himself for the birdie at the last, but a 70 for ten under for the Chinese. Same score for Wade Ormsby, this was certainly one of his shots of the day. At the 14th looked as if he might drop a shot instead he knocked it straight in for birdie. Alongside him and ten under is his fellow Aussie Scott Hend, the 50-year-old holding this putt at the 11th. Everyone was looking for David Puge, the leader of the Asian Tour, order of merit to make a big move today. It didn't really happen, good shot here at 13 certainly from the Spaniard, but he could do no better than a 69. And he's one of those four players at ten under par tied for third. Keredek Appy Barnrat is second and is on at 11 under, didn't have a good start the tie. He was two over after seven, but then came back brilliantly. This was an eagle at the 12th and a 67 leaves him in second place. But there was no catching John Catlin, what a performance it was by the American. Nine birdies, no bogeys on the card, in fact he hasn't had a bogey all week. That was at the eighth and then he finished with birdies at 17 and 18. This at the par three penultimate hole. Followed by yet another birdie by the smiling American at the last. It couldn't get any better, nine birdies, he hasn't had a bogey in three rounds and at 19 under par he leads by eight going into the final round.


We're kicking off with Deepak Rangaraj, who's PowerEdge Security Product Manager at Dell Technologies. Deepak, great to have you on the program, thank you. Thank you for having me. So we're going through the infrastructure stack. And in part one of this series, we looked at the landscape overall and how cyber has changed, and specifically how Dell thinks about data protection and security in a manner that both secures infrastructure and minimizes organizational friction. We also hit on the storage part of the portfolio. So now we want to dig into servers. So my first question is, what are the critical aspects of securing server infrastructure that our audience should be aware of? Sure, so if you look at compute in general, right? It has rapidly evolved over the past couple of years, especially with trends towards software defined data centers and with also organizations having to deal with hybrid environments where they have private clouds, public cloud, edge locations, remote offices, and also remote workers. So on top of this, there's also an increase in the complexity of the supply chain itself, right? There are companies who are dealing with hundreds of suppliers as part of their supply chain. So all of this complexity provides a lot of opportunity for attackers because it's expanding the threat surface of what can be attacked. And attacks are becoming more frequent, more severe and more sophisticated. And this has also triggered a ramp in the regulatory and mandates around the security needs. And these regulations are not just in the government sector, right? So it extends to critical infrastructure and eventually it loads again into the private sector. In addition to this, organizations are also looking at their own internal compliance mandates and this could be based on the industry which they are operating in or it could be their own security postures. And this is the last given which servers are operating into them. And given that servers are the foundational blocks of the data center, it becomes extremely important to protect them. And given how complex the models of the platforms are, it's also extremely difficult and it takes a lot of effort. And this means protecting everything from this supply chain to the manufacturing and then eventually assuring the hardware and software integrity of the platforms and also the operations. And there are very few companies that go to the lens that Dell does in order to secure the server. We truly believe in the notion of a security mentality that security should enable our customers to go focus on their business and proactive with everything on their business and it should not be a burden to them. And we heavily invest to make it possible for our customers. So this is really important because the premise that I set up at the beginning of this was really that as a security pro, I'm not a security pro, but if I were, I wouldn't want to be doing all this infrastructure stuff because I now have all these new things I got to deal with. I want a company like Dell who has the resources to build that security in, to deal with the supply chain, to ensure the provenance, et cetera. So I'm glad you hit on that. But so given what you just said, what does cybersecurity resilience mean from a server perspective? For example, are there specific principles that Dell adheres to that are non-negotiable, let's say? How does Dell ensure that its customers can trust your server infrastructure? Yeah, like when it comes to security at Dell, right? It's ingrained in our product medium. So that's the best way to put it. And security is non-negotiable, right? It's never an afterthought where you come up with a design and then later on figure out how to go make it secure, right? With our security development lifecycle, the products are being designed to counter these threats right from the beginning. And in addition to that, we're also testing and evaluating these products continuously to identify vulnerabilities. We also have external third-party audits with supplements as process. And in addition to this, Dell makes the commitment that we will rapidly respond to any mitigations and vulnerabilities, any vulnerabilities and exposures found out in the field and provide mitigations and patches for those in a timely manner. So this security principle is also built into our server lifecycle, right? Every phase of it. So we want our products to provide cutting-edge capabilities when it comes to security. So as part of that, we are constantly evaluating what our security model has done. We are building on it and continuously improving it. So a few years ago, our model was primarily based on the NIST framework of protect, detect, and recover. And it still aligns really well to that framework. But over the past couple of years, we have seen how computers evolved, how the threats have evolved, and we've also seen the regulatory plans. And we recognize the fact that the best security strategy for the modern world is a zero-trust approach. And so now, when we're building our infrastructure and tools and offerings for customers, first and foremost, they're cyber resilient, right? What we mean by that is they're capable of anticipating threats with standing attacks and rapidly recovering from attacks and also adapting to the adverse conditions in which they're deployed. The process of designing these capabilities and identifying these capabilities, however, is done through the zero-trust framework. And that's very important because now we're also anticipating how our customers will end up using these capabilities at their end to enable their own zero-trust ID environments and ID zero-trust deployments. We have completely adapted our security approach to make it easier for customers to work with us, no matter where they are in their journey towards zero-trust adoption. So thank you for that. You mentioned the NIST framework. You talked about zero-trust. When I think about NIST, I think as well about layered approaches. And when I think about zero-trust, I think about if you don't have access to it, you're not getting access. You've got to earn that access and you've got layers. And then you still assume that bad guys are going to get in. So you've got to detect that and you've got a response. So server infrastructure security is so fundamental. So my question is, what is Dell providing specifically to, for example, detect anomalies and breaches from unauthorized activity? How do you enable fast and easy or facile recovery from malicious incidents? But what you said is exactly right. Breaches are bound to happen. Given how complex our current environment is, it's extremely distributed and extremely connected, right? Data and users are no longer contained with an officer where you can set up a perimeter, firewall and say, yeah, everything within that is good. We can trust everything with that. That's no longer true. The best approach to protect data and infrastructure in the current world is to use a zero trust approach, which uses the principles nothing is ever trusted, right? Nothing is trusted implicitly.  And this is the principle that we use on PowerEdge, right? But with an increased focus on providing granular controls and checks based on the principles of these privileged access. So the idea is that servers first and foremost need to make sure that the threats never enter and they're rejected at the point of entry. But we recognize that breaches are going to occur. And if they do, they need to be minimized such that the sphere of damage caused by the attacker is minimized. So they're not able to move from one part of the network to something else laterally or escalate their privileges and cause more damage, right? So the impact radius, for instance, has to be reduced. And this is done through features like automated detection capabilities and automated remediation capabilities. So some examples are, as part of our end-to-end boot resilience process, we have what we call a system lockdown, right? We can lock down the configuration of the system and lock down the firmware versions and all changes to the system. And we have capabilities which automatically detect any drift from that lockdown configuration. And we can figure out if the drift was caused due to authorized changes or unauthorized status. And if it's an unauthorized change, you can log it, generate security alerts, and we even have capabilities to automatically roll the firmware and OS versions back to a known good version and also the configurations, right? And this becomes extremely important because as part of zero trust, we need to respond to these things at machine speed and we cannot do it at a human speed. And having these automated capabilities is a big deal when achieving that zero trust strategy. And in addition to this, we also have chassis inclusion detection where if the chassis, the box, the several boxes opened up, it locks alerts and you can figure out even later, if there's an easy power cycle, you can go look at the logs to see that the box opened up and figure out if there was a, making a known authorized access or some malicious actor opening a chain something in your system. Great, thank you for that. A lot of detail and appreciate that. I want to go somewhere else now because Dell has a renowned supply chain reputation. So what about securing the supply chain and the server bill of materials? What does Dell specifically do to track the provenance of components it uses in its systems so that when the systems arrive, a customer can be a hundred percent certain that that system hasn't been compromised. Right, and we're talking about how complex the modern supply chain is, right? And that's no different for servers. We have hundreds of components on the servers and a lot of these require firmware in order to be configured and run and these firmware components could be coming from third party suppliers. So now the complexity that we're dealing with requires the end-to-end approach and that's where Dell pays a lot of attention into assuring the security of our supply chain and it starts all the way from sourcing components, right? And then through the design and then even the manufacturing process where we are vetting the personnel at the factories and vetting the factories itself. And the factories also have physical controls physical security controls built into them and even shipping, right? We have GPS tagging of packages. So all of this is built to ensure supply chain security but a critical aspect of this is also making sure that the systems which are built in the factories are delivered to the customers without any changes or any tapper. And we have a feature called the secure component verification which is capable of doing this. What the feature does is when the system gets built in the factory it generates an inventory of all the components in the system and it creates a cryptographic certificate based on the signatures presented to us by the components. And this certificate is stored separately and sent to the customers separately from the system itself. So once the customers receive a system at their end they can run our tool. It generates an inventory of the components on the system at their end and then compares it to the golden certificate to make sure nothing was changed. And if any changes are detected we can figure out if there's an authorized change or an authorized change. Again, authorized changes could be like upgrades to the drives or memory and an authorized change could be any sort of tapper. So that's the supply chain aspect of it. And build of materials is also an important aspect to guaranteeing security, right? And we provide a software build of materials which is basically a list of ingredients of all the software pieces in the platform. So what it allows our customers to do is quickly take a look at all the different pieces and compare it to the vulnerability database and see if any of the vulnerabilities which are being discovered out in the wild affected platforms. So that's a quick way of figuring out if your platform has any known vulnerabilities and it has not been patched. Excellent, that's really good. My last question is I wonder if you give us the sort of summary from your perspective what are the key strengths of Dell's server portfolio from a security standpoint? I'm really interested in the uniqueness and the strong suit that Dell brings to the table. Right, yeah, we have talked enough about the complexity of the environment and how ZeroPress is necessary for the modern idea environment, right? And this is integral to Dell Powerhead servers. And as part of that, security starts with the supply chain. We have already talked about the secure component verification, which is a unique feature that Dell platforms have. And on top of it, we also have a silicon-placed platform root of press. So this is a key which is programmed into the silicon on the black servers during manufacturing and can never be changed after. And this immutable key is what forms the anchor for creating the chain of press that is used to verify everything in the platform from the hardware and software integrity to the boot on pieces of it, right? In addition to that, we also have a host of data protection features where it is protecting data access in news or in flight. We have self-encrypting drives which provides scalable and flexible encryption options. And this coupled with external key management provides really good protection for your data address. External key management is important because, you know, somebody could physically steal the server and walk away, but then the keys are not stored on the server. It's stored separately. So that provides you an additional layer of security. And we also have dual layer encryption where you can complement the hardware encryption security encrypted drives with a software level encryption. In addition to this, we have identity and access management features like multi-factor authentication, single sign-on, roles, scope and time-based access controls, all of which are critical to enable that granular control and checks for zero trust approach. So I would say, like, you know, if you look at the Dell feature set, it's pretty comprehensive. And we also have a flexibility built in to meet the needs of all customers, no matter where they fall in the spectrum of, you know, risk tolerance and security sensitivity. And we also have the capabilities to meet all the regulatory requirements and compliance requirements. So in a nutshell, I would say that, you know, Dell Powered Server's cyber resilient infrastructure helps accelerate zero-trust adoption for customers. Got it. So you've really thought this through all the various things that you would do to sort of make sure that your server infrastructure is secure, not compromised, that your supply chain is secure, so that your customers can focus on some of the other things that they have to worry about, which are numerous. Thanks Deepak. Appreciate you coming on theCUBE and participating in the program. Thank you for having me. You're welcome. In a moment, I'll be back to dig into the networking portion of the infrastructure. Stay with us for more coverage of a blueprint for trusted infrastructure and collaboration with Dell Technologies on theCUBE, your leader in enterprise and emerging tech coverage.


Hi everyone, Joe for jazzy's case breaks.com coming at you with the random number block Randomizer for museum collection picker team 14 featuring these teams here Yankees Rays Royals Cardinals Mets blue Jays Tigers Rockies I think everyone knows this by now those non numbered base cards hits if any will be randomized as one lot to one person this break big Thanks to this group Thank you for filling up this random number block the the break itself coming up in the next video. They're the numbers right there Let's roll it randomized names and numbers one and a five six times each one two three four five and six Got John down to Ed after six One and a five six times for the numbers. Good luck one two three four five and six Five down to eight after six So here's how it shakes out for everybody John you got five Bobby with four mark with zero Here will get to any and all redemptions for this group of teams right here including one-of-one redemptions But Ed you'll still get live one-of-ones Bobby with six Brian with two Ed with seven Alex with nine Jason with three Ed with eight Let's order this numerically and ladies and gentlemen got that break over the finish line I'll see you in the next video for that Jasper's case breaks calm


Thank you. So for the last, at least, I don't know, 10 hours, there's been widespread looting in Chicago, a tremendous, like no one has ever seen, even worse than 1968. Wow. And it made me think, actually, of a line in a section of a new textbook of America where Rana asked the question, can a society exist without a moral principle? And I'll quickly just a bit of an answer, if you don't mind. She says, we are still observing by tradition so many moral precepts that we take them for granted and do not realize how many actions of our daily lives are made possible only by moral principles. Why is it safe for you to go into a crowded department store, make a purchase and come out again? The crowd around you needs goods. They could easily overpower the few salespeople ransacked the store. The only thing she says, there's nothing to stop them and nothing to protect you except the moral principle of your individual right to life and property. And I'm just watching video after video of, I mean, every store on my block, your own, has been ransacked. All the glass is broken. The whole city has been burning and on fire.  Is this all over downtown Chicago? And it's during the day. It's actually happening right now. It's downtown, but your own. It's also in the southwest side. It's all over. When it's in Atlanta, you saw what they did, the CNN building. It's in Minneapolis. Also the National Guard supposedly clamped down on them yesterday in LA. LA has never seen, hasn't seen rights like this since 1992, the Rodney King beating or and is this, is this nihilism? I mean, it reminds me of what Dr. Peacock used to say that, you know, it's not that necessarily they want to steal it, but they just, they don't want to have the value. They just don't want you to have the value. No, I mean, if it was stealing, you could somewhat understand it. But no, this is more than stealing. This is smashing. I mean, there was no stealing going on at CNN. They were just smashing the building. They were just destroying. They, they're burning cars. They're not stealing cars. They're burning cars and they're not just burning police cars. Okay. They might have a reason to hate the police, although it's an illegitimate irrational reason. They're just destroying private property for the sake of destroying private property. This is just nihilism, anger, frustration, hatred, and a breakdown of civilization. And it really is. I mean, if we weren't, if I hadn't committed to doing this, this chat, I was going to basically talk about the riots because I think there's a lot to say about the riots. You know, this is truly a breakdown of civilization. This is what I predicted years and years ago. This is the culmination of a mixed economy, a culmination of a Trump presidency. You talk about morality. When you have the president, the commandant chief, who is a moral, who is, you know, who has no standards, no principles, you know, just could say anything, any day, who cares.  I mean, think about all these people writing in the streets. They've been locked up in their homes for the last three months. I mean, think of the frustration, the anger building up while that is happening. And all you needed is a spark. And that spark was this tragic killing of this black man in Minnesota who was, you know, being arrested and the cop basically killed him. And that was the spark. It's not the reason. It's just the spark. The reason is deep seated frustration, hatred that is expressing himself in this nihilistic mayhem, which is just about breaking things.  Why not? Right? And it's in most cities around the country, particularly cities that have, you know, cities like that where they're being police shootings or there's frustration with the police, but it's not just the police. Think about it this way. How many of these people are unemployed now? How many of these people don't have jobs?  I mean, think of all the frustration that we've had over the last three months with everything that's going on and we have a moron in the White House who keeps fueling this and inflaming this instead of being a leader, instead of a calming influence, instead of pointing out the issue of private property and rights and respect your fellow man and think about what you're doing. These are people who might employ you. These are people who create the businesses that make it possible for you to earn a living. None of that. Nobody is making that message, right? And instead, they're either just, oh, it's this group or that group, they're going after particular groups where my guess is 90% of the people out there writing are now members of the Antifa. So you turn Antifa into a terrorist group, doesn't mean anything to them, doesn't mean anything to them. So it's, you've got to actually, A, you've got to be much more aggressive in terms of the, in terms of national guard and police to stop this and B, you've got to have a proper response. You've got to have a presidential response and a moral response. And Trump and most of our political leadership is just incapable of doing that. So here's the parallel I want to draw on and I'm going to give a longer answer than, but I think this topic deserves a longer answer. In 1969, I think it was 1969, Iron Man gave a talk called Apollo and Dionysus. Everybody and everybody should go read her talk, read the essay Apollo and Dionysus, right? Jonathan, do you remember where that's published? Which of her books? Oh, I know. It's in the, the anti-industrial revolution, which is the new title is Peter Schwartz's, anyway, I can't remember, but look up Apollo and Dionysus by Iron Man. It's available online for free, it's available both on YouTube, you can listen to her, deliver the speech. And return to the primitive. Return to the primitive, that's right. Return to the primitive. Thanks. Return to the primitive. And it's one of the great essays, one of the greatest essays ever written. It's a great essay, she compares the launching of the Apollo with Woodstock, Apollo 11 landing on the moon and everything that that represents and the love that Americans have for technology and progress and success and science and she associates that with Apollo. And you could think about that yesterday with Elon Musk's spaceship taking off and docking with the International Space Station and wow, what a great achievement for a rocket designed and produced by a private entity, yes, with government funding, but a private entity, private entrepreneur who's built a business whose only custom is the government, but at least it's not all government, at least we prove that a private enterprise can do this. It's a beautiful thing, right? And at the same time, barbarians in the streets of America, the children and grandchildren of the generation of Woodstock is out in the streets of America manifesting the philosophy of Woodstock in reality, making it real by smashing windows, burning buildings, destroying for the sake of destroying. This is Woodstock. This is Dionysus. And what is Dionysus? Dionysus is the placement of, it's the opposite of Apollo. Apollo is reason, fact, logic, reality. Dionysus is emotion. Dionysus is, you know, the God of wine, right? It's all about emotion. It's all about pleasure. It's all about hedonism. And hedonism is the brother, sister, related to nihilism. And think about the culture in which we live. We live in a tribalistic culture guided by what? Guided by nihilism, nihilism across the board. And again, I know everybody thinks I'm just a hater of Donald Trump, but is Donald Trump motivated by anything but emotion? Is there anything to suggest that there's any thinking going on with Donald Trump? He is the most emotionalistic president I've ever seen in the White House. And this is definitely what you're seeing right now culturally, is SpaceX versus the riots, the riots representing three forces in our culture. It represents, well, no, the riots representing Dionysus in our culture, but it's not just the riots. It's our universities and it's the White House, all represent Dionysus. And the little bit that it represents Apollo is SpaceX and it's big tech and small tech.  We've turned around, we're not lovers of Apollo anymore. We take for granted technological achievement. We take for granted the next generation of an iPhone and the ability to do Google searches for zero cost and access to all the knowledge in the entire world. We just take that for granted. We don't admire it. We don't appreciate it. We don't venerate it like Ayn Rand describes in Apollo and Dionysus, where she still had hope for the American people. Now we all condemn it. Now we are all stuck in the mud of wood stock. Now we are all just emotionalists following our tribal instincts, our tribal leaders mimicking whatever, you know, just mowing off the truths that we have that have been revealed to us from those leaders. I mean, what we're seeing today is a direct consequence of wood stock and all of the intellectuals that led to wood stock and of the products of wood stock. How many of those wood stock attendees wailing a rod, you know, in the mud there, ultimately became university professors and taught the generation of rioters right now that reality is not that important, that logic and reason are impotent, that they should follow their genes and that the businessmen, the billionaires, the high tech companies, the producers, the creators, the builders, they are nothing. They don't deserve what they have. Their property is meaningless. Property rights are just a male, white, chauvinist ugliness and that they should destroy. That property rights is just thievery. And now you see the consequence. So the rights today are just the consequence of what we've been teaching our kids for generations now and is the consequence of not challenging that new left generation instead elevating them to the heights of academia so that they can take the ugly ideas, the horrible view of man and of the world and infect our kids with it. And then who do we have challenging these leftist ideas? We have the Dionysus of the right, whether it's the religionists or whether it's just the pragmatic unthinking anything goes, make America great again, emptiness, emptiness, anti-intellectual, anti-ideas, we have Dionysus on both sides fighting right now. And those of us, very few, tiny minority, tiny of the tiniest emote among my fans online. The few who still appreciate Apollo, appreciate reason, appreciate progress, appreciate science, we're the smallest of the smallest minority. And the president of the United States attacks Twitter because they dare label something he says. Then he is attacking private property in the same way as people are smashing windows. The nihilism is everywhere. The anti-reason is everywhere. The anti-property rights is everywhere. The anti-achievement is everywhere.  Why? What did Amazon do to anybody? Other than make our lives better, substantially, significantly better. And yet they are the enemy. What's the difference? And if everybody attacks Amazon, then why not smash Amazon's windows or whoever is in our way because it's not Amazon. So we'll smash the windows that happen to be in the street. It's just the lack of any kind of respect, the lack of any kind of thinking. And yes, Jonathan, you're absolutely right, the lack of any kind of moral conviction. Morality today is associated with religion and nothing else. And nobody wants the religious morality.  Morality is just an obstacle in our way. And of course, what do they teach in our universities?  That's where we are today. And what's happening in the streets of American cities right now is an absolute reflection of that. And instead of all of us rallying around the idea of a spaceship, around the idea of getting within 24 hours, whatever you want, from Amazon, instead of us rallying around Twitter and Facebook and every technology company out there that's making our lives better, instead of that, we condemn everything and everybody. There is no body to stand up to Dionysus. Dionysus is everywhere. So I mean, I'm sorry, Jonathan, you have to literally witness this. And I'm sure now you're in the lockup, not because the government, but now because it's dangerous to go out to the streets. And that is just a horrible thing to live through. And I know many of you probably live in cities where the same thing is happening and you have to be careful now where you go and where you're going. But this is the consequence of ideas. This is not an accident. This is not just one side.  And on the contrary, left and right have adopted the ideas of Dionysus. I gave a talk, which unfortunately was never recorded. I gave a talk in 2008 or 2009, it was 50, it was to commemorate Ayn Rand's talk on Apollo Dionysus. And it wasn't necessarily, so it was a talk basically updating that. And basically what I said was Dionysus is represented on the left by environmentalism, but it's also in those days, I think this whole identity politics wasn't quite evident. So it's represented by the entire left and in both the extreme left in both environmentalism and in the identity policy and on the right by religion. And it's not just religion anymore. It's now the kind of pragmatic, do-anything, nationalistic, white supremacist kind of alt-right, new right, nationalist right. It's all over the right. It's all over the left. And it's hard to be hopeful right now in America. All right, sorry, that was a long answer to your question, Jonathan, but I had to get it out. Beautifully said. Thank you, Euron. Thanks. All right. Let me take, I've got a few super checkpoints. Let me take a couple and then we'll go back to Leonard and Andrew. It's a paradox that the director, let me see if there's anything related to this. Okay. What are your thoughts, the connection between disintegration, this is the concept that Leonard Peekoff introduces in the DIM hypothesis, his brilliant book, between disintegration and the current riots are currently happening now. I believe what we are seeing is an example of disintegration in the DIM hypothesis. Absolutely. So what we've got is we've got complete disintegration, complete disintegration. No morality, no idea, conceptual idea, property rights of appropriate behavior, of right versus wrong. This is anything goes nihilistic disintegration. And if you remember, D2 in Leonard's categories of integration is nihilism. It's the complete destruction. And of course, my view is that Trump is to a large extent a D character, D2 type. So we've got disintegration across the board and we know disintegration is unstable. You can see it right now in the world. Disintegration is rioting and breaking and looting and destruction. And that is not sustainable. That will lead to, in some context, the police state, that will lead to some integration. And of course, that integration is not going to be around a proper concept of individual rights and freedom. That integration will be about an improper concept like the nation, the state, or the religion. And that's what we're heading. We're heading a more convinced right now than ever. We're heading towards authoritarianism. I think Leonard was overly optimistic. My fault. I convinced him to be overly optimistic. You know, Leonard wanted to say that the horizon is much shorter. And I told him, no, make it 50 years and give us a little bit of hope. And I was wrong. He was right. This is happening much faster than I ever thought it was happening. But this country is disintegrating. And the solution to disintegrating is a strong man left or right, middle doesn't matter.  We're looking now and people are going to be desperate for a unifier, for somebody to bring us together. Under what? By what principle? By guiding of, you know, what's the principle that unites us? They won't care. They'll just want the nuttiness, the craziness, the violence to end. So yeah, I mean, we're living through the dem hypothesis, you know, in ways that I wouldn't have expected. Okay, I'll take two more questions and then we'll go, well, let's see. Is America still the country Iron Man had hoped for or is it gone? I mean, I think there's still a remnant of America there, but it's so fragmented in the different places and not integrated and not, it's disappearing, unfortunately. And again, I refer to a talk that Leonard Peacock gave, and I keep referring to this, America versus Americans that he gave in 2004, three or two, no, 2002, because it was the eve and the evasion of Iraq, 2002, and he talked about the death of the American sense of life. And I think things have only gotten worse since then. And this lockdown and the riots and everything else are just more, more indications of kind of the death of the American sense of life. I don't think it's dead completely. I think you see it once in a while. You see it in the rocket launch and people's response to that rocket launch. You see, you know, the SpaceX, you see it a little bit in, in, in, in Silicon Valley, you see it in the productive nature of, you see it in people not wanting the lockdowns and, and, and resisting them here and there. But it's too little. It's just, there's not a lot of it. There's not a lot of it. What we need today, what I call the new intellectual would be any man or woman who is willing to think, meaning any man or woman who knows that man's life must be guided by reason, by the intellect, not by feelings, wishes, whims or mystic revelations, any man or woman who values his life and who does not want to give in to today's cult of despair, cynicism and impotence, and does not intend to give up the world to the dark ages and to the role of the collectivist broads. Using the super chat. And I noticed yesterday, when I appealed for support for the show, many of you step forward and actually supported the show for the first time. So I'll do it again. Maybe we'll get some more today. If you like what you're hearing, if you appreciate what I'm doing, then I appreciate your support. Those of you who don't yet support the show. Please take this opportunity. Go to Iranbrookshow.com slash support or go to subscribe star.com Iranbrook show and, um, and, and make a kind of a monthly contribution, uh, to keep this, uh, to keep this going. I'm not showing the next.


Might as well just rip the bandaid off now and keep it real, I dislike most commentary channels. Before you begin to cry and arm yourself with a blue yeti and soul footage I should state that I don't dislike the entire genre, just most of it.  But the majority is pretty mediocre and bad. Today we're gonna be talking about a specific area and a specific type of video idea I've been wanting to do.  This video was uploaded in 2016 and I was 14 when I made it.  Yo, what's up everybody? It's Boba. I state this because when looking at small commentators I can relate to an extent, so take this with good faith when I say a lot of the content you guys make is not as good as you might think it is.   But while this video is focused on me dropping my two cents the main intention is still criticism. Unlike 2016 it seems that a lot of these channels have developed egos and extreme levels of confidence for D tier level work. I don't like Dream's content at all and I think it's just really bad. I think his stands are really bad. I think like a lot of his stuff is bad. Manipulating kids is bad to choose something so we can win. It's just a lot of things with Dream I do not like. Alright, stop. The video being presented is by a small YouTube commentator named Kane and was uploaded on November 27th, 2020. I don't know this person, I'm willing to put a thousand dollars on the line to bet that they're a child so I should clarify. This is an example for criticism.  It's three minutes of nonsense on a topic he clearly has no passion for. I don't judge the video because it's made on Dream. I judge the video because it has nothing to say that's interesting or informative. There's a lot of videos like this though, such as this video on Corpse that was made by a channel named LilMane. This is like overrating him in general like oh my goodness. What's the best ever in saying like they've been a Corpse fan for years? Alright, that's enough. Once again this video isn't good at all but if you look at the rest of the discography on this channel or those surrounding it you start to recognize a pattern. Maybe I'm just wrong though. Of course, of course these small channels have to make these videos on Corpse husband and MrBeast. It has to be because they have genuine points to make. It can't be because the channels being discussed are big with followings that would definitely give them a burst of traction. But for real, it makes sense analytically. If you point your finger at the top dog and say anything against the norm you're gonna turn some heads. But when your video could be summarized in a tweet that should raise some red flags. The only point made in this video is that he doesn't like MrBeast because he finds his content repetitive. Which is definitely ironic given that most people in this genre tend to give the two cents on everything.  That's not my gravity just because it's like you're towards younger audiences. I feel like because like it's kind of like repetitive. I don't know. This point about MrBeast, which isn't even a point really, it's just an opinion was made in 15 seconds.  But I digress. Most of the community have lazy takes on lazy topics.  Corpse husband is overrated. Dream fan base is annoying. That goddamn Pokeman. I can't believe what she did this time. Of course, you could have these opinions all you want, but it doesn't make you immune to criticism. Making a video ranting about a popular YouTuber where you say nothing but regurgitated statements clearly shows how much interest you have when making the video. OK, guys, how are you doing? Welcome back to the channel.  And on top of that, the technical aspects of the video are bad. It shows the acceptance of mediocrity and how much effort the creator is willing to put in on the topic they care so deeply about. Men's Lee challenge kid here and I'm on Tokyo's channel today to talk about a retard that made a video on him. And what the fuck? Can't even hear anything.   People are really being offended by a video game hairstyle and animal crossing. Now, for people who don't know what animal crossing is, it's kind of like a kid's version of The Sims. Thank God I know what animal crossing is.  Thank you. Reaction commentary is bland. Doesn't matter if you have 800 subs or 8 million subs.  Putting three minutes, 10 minutes, or even 30 minutes of gameplay and telling a quick hit piece without going in-depth doesn't take any effort or creativity. Oh, Pyro's guilty. I just wanted to put this video out. 22 seconds! 22 seconds!  They're saying his voice is sexy because it's deep. Like, if I just talk like this, I guess my voice is sexy too. Never mind, we got a stand-up comedian here. No script either. God, basically Jesus, congrats. Wait, Ellen Page is now a man? I can't wait. I can't wait for this great informative video to tell me something interesting that I didn't know before. I really wonder what Cosmo has to say. So it is officially December, which in an annual tradition, I always play Dead Rising 4. I honestly don't know why I play this game because I myself prefer the first game, even though it's a bit clunky by today's standards. As much as you might like that he's playing Dead Rising, I personally couldn't give any less of a fuck, so I'll skip to where the video starts. But I was reading through this micro essay that she has written and I saw this word. I don't even know what this means. Latine X, Latin X.  In fact, it was so obscure, I had to look it up. Apparently it's a gender-neutral term for someone of a Latin American origin. It's an alternative to Latino or Latina. This is almost as bad as the feminist trying to change the wording of women. This video is a minute and 18 seconds and the only point made is that he doesn't like the word Latinx.  This is even long enough for a tweet. This is literally a thought bubble in your head. How do you manage to squeeze filler on a minute video? Wait, Pokemon did something bad? This is the first I've ever heard about this. I am so interested in what she did today.  Yo, what is going on, boys? I have just came across a topic that blows everything into the water. Pokemon has been on this love and hate relationship with the internet. Her name is brought up. There's always some sort of drama coming with it. And so far, this one's getting pretty juicy. If you've been on the internet for the last year, you'd know that there's something called the Offline TV House. This group of people consist of Michael Reeves, Lily Petru, Pokeymane, Disguised Toast, Psychuno, and Yvonne. Imagine the Clout House, but with only Twitch streamers that are mainly PG. A person by the name of Fedmine- That's it for the examples. I think you get the point.   She's basically the new Nicocado Avocado. Did I mention she might have AIDS? Ha, ha, ha, ha, ha, ha, ha, ha, ha, ha.   Doesn't make it any less lazy though. If you truly have a grud with something, put more effort in your argumentation and present it in an informative way. I'm Alex. If anyone deserves an expo say here on YouTube, it's probably him. Before you make assumptions, let me talk. Jarvis is a great content creator and I'm using him as an example in a good way. This is a 16 minute video and I'm Alex that has great editing and a great script. Even though the video is made in After Effects and is visually pretty, that's not the reason why the video is good though. But let's put a pin in this, I'll come back later. Good editing doesn't just have to be saber effects and fancy transitions though. Two youngsters out there, machinima, a combination of machine and cinema. This is a YouTuber named Zog. Wait, me, Zog and Jarvis both made videos saying positive things about the last of us two?  Zog's editing isn't fancy or smooth, but it's still good because it's engaging and interactive. You don't need plugins and fancy transitions for the editing to be considered good. A three minute video that consists of chopped audio and solemn background footage is not comparable to creators who put an effort in audio engineering, scripting, and video pacing.  Being interactive isn't even that complex. Zog's video on Sam Gladiator is edited to keep your attention while he delivers his script. It doesn't linger a one frame for too long while showing context to what he's discussing on screen. It's not rocket science, it's just effort. And yes, his mic quality could be improved, but that's situational.  Now, to unplug that pin earlier, Jarvis' videos aren't good because of his editing, they stand up because of his script. Story is good is a question too subjective to confidently answer, though I will heavily discuss it later.  Even back then, YouTubers like Zapti and Colossal was crazy once special for their editing, but instead for their delivery. There's reasons why YouTubers like Cordwit, Turkey Tom, Jarb, Zog, John Swan, and many others have respect or traction. That's because they put effort into making a statement or point instead of just chucking it at the wall. And while the editing from these creators are visually appealing, John Swan talking out of a ham radio calling Deji stupid for three minutes wouldn't be as impactful as the video he has now. A good video requires effort. When looking at the Pyrocynical situation, you see so many videos repeating the same point and you wonder why Turkey Tom's video stands out. It's because there's effort to put into the video, there's a flow, it's visually grasping, and there's something actually interesting to be said. Am I biased to essay commentators? Yes, absolutely.  But hey, this is all just my two cents as an outsider looking in. No matter what, saying something about anyone is going to stir the pot, so sorry for pressed. And if you enjoyed the video, subscribe and share it, or whatever, imagine not being of age to drive. Couldn't be me. Thanks for watching.


But when you take a step back and you look where the NASDAQ is, how is it different than when it was here, than when it was here, than when it was here, and here, and here? Welcome to Access to Trader, the number one community for those who are committed to taking control of their trading in order to achieve success, profitability, and longevity. Thank you for joining us. Here's Dan Shapiro to help you find your edge, master your process, and own your future. Hey, guys. Good morning, everybody. Welcome to another edition of the AccessToTrader.com weekend update show. Hope everybody is doing well. Just a quick piece of business before we get into this broadcast. If you are planning to join us for next week, whether it's the full webinar or the private audio feed, we are doing a pretty cool panel show. Usually, once a month, we do a pancakes and pivots, kind of off hours Q&A. You know, off hours, a lot of times, it's much easier to answer a lot of questions in depth during the course of the day. So we usually do this the first Sunday of every single month. Tomorrow is a very, very special pancakes and pivots. It is going to be a panel of traders, just like a lot of you guys have been trading for less than two, three years. Some of you guys are obviously under the pattern day trading rule and having your own journey, how to navigate it. And this will be hosted by Kenyon, okay, and this panel, it's not going to be one of those scenarios that somebody says, well, I turned $5,000 into $3 million. No, it's not. It's more about the psychology of how they are navigating the markets, the discipline, okay, the process, the discipline, the mentality behind every single day, what to do, what they've been doing right, what they've been doing incorrectly, the things that they've omitted. So it's a really, really cool show. I know a lot of you guys have been trading less than three years. Unfortunately, I have nothing to input into this conversation, so that's why Kenyon will be moderating this, but it should be really, really good. If you are watching this on Saturday, right, and I believe the video will come out on Saturday, Sunday, right? Sunday is nine o'clock in the webinar, will be the live event. If you are watching this after Sunday, don't worry about it, it will be recorded and sent to you shortly after. So it's just kind of a cool announcement. So for all you guys who are in that kind of that same boat trading less than three years, you know, struggling with a smaller account and trying to figure out the best way to kind of navigate, this will be a pretty good value. The link in the description will be somewhere in the video. Kyler will put it in. He's really, really good at all that graphic stuff. So most important part is, if you are interested, come join us tomorrow. It should be pretty good. So let's talk about the tape. So market was down this work, right? The market was down. The Dow was down 1% this week. That's it. The S&P was down 1% this week. And, you know, you see a lot of people sensationalizing this week, like this was the world's worst week, Armageddon in the history of the world. Okay, let me just give you guys a quick history lesson, really quick. When the internet bubble imploded, it was the absolute worst six months that you can see in dissipation of capital. Very, very quickly, very, very aggressively, right? That was memorable. After 9-11, okay, and I traded through 9-11, you couldn't buy stocks because you were afraid of a terrorist attack. You couldn't short stocks because, well, number one, you were afraid that these terrorists were going to get caught and the market was going to rally aggressively against you. That was memorable, right? Very, very aggressive conditions. The two and a half, almost three years of the mortgage crisis, okay, that we thought there was an Armageddon of our global economy.  That was memorable. March of 2020 that we introduced this global pandemic that we had the worst month in the history of the world, that was memorable. The market was down 1%. Okay, 1%. Tested the 50-day moving average and that's it. There was nothing memorable about this day about last week. There was nothing aggressive about this week. There was nothing materialistic that put you on tilt about this week. It was another long steps into a very, very long career. That's it, okay? The market was very organic. The market was very technically ready to move in the bias that it did. And oh, by the way, in between a lot of a really good aggressive selling, there was a lot of really good aggressive action this week to the downside. There was sprinkled in a 700-point update in the Dow and a 300-point update for the Nasdaq. So if you took that recipe, right, that recipe and put it into the mortgage crisis, the meltdown, 9-11, this was a day at the beach versus a memorable event. So guys, especially for you new traders, you don't have a long history. You know, you don't have a long history to kind of go back into your database. This is just one week out of many, many weeks. So relax, take a step back. If you got caught off guard of what you didn't see coming, that's okay, okay? You're new to this business, okay? You're not supposed to know everything. You're not supposed to see all the signs and recognize all the risks that are in front of you. A lot of you guys are brand new and you're trading off of the incredibly aggressive market and incredibly aggressive gains that the market has produced over the last several weeks. So this is something new. This is your really second shot at adversity. Remember, pandemic March 2020, this wasn't it. 1% versus 3,000-point Dow days only two years ago, 1,000-point Nasdaq decline only a couple of years ago. This was nothing compared to that.  This was very organic. This is a very high probability and this is all technically confirmed. So this is a time in your life that you don't want to make things, you don't want to make a mountain out of a mothill. You don't want to sensationalize something there that wasn't. We are basically a stone throws away from the last run of all-time highs. All we did this week was retest back to the 50-day moving average. So you guys remember, we reclaimed the 50-day moving average on October the 18th. And October the 18th, because the 50-day was so important, that started a two-month, two-and-a-half-month, really, really aggressive move in the equities markets, right? And it took all asset classes with it. It also took the bitcoins of the world with it. Everything went higher. And this week, things got aggressive. Technicals started breaking down off of minor levels, the 5, the 10, the 20, a 100-day moving average. But the 50-day moving average, when you look at your research and you kind of take a step back and kind of just breathe a little bit, right? Breathe a little bit and calm down. All we did this week is retest the 50-day moving average that we reclaimed on October the 18th. Nothing more, nothing less. And this was just the basic scenario of gravity is real. You had some Fed talk coming in. Okay, cool. You had a new variant that was introduced. Okay, cool. Nothing that we haven't seen before. And all we did was organically, successfully, okay, and we'll get to that in a second, retest the 50-day moving average, bounce off the 50-day moving average. And right now, the world is not going to end, okay? Everything is okay. Christmas is still on. And the most important part is now, at least we have a definitive line in the sand going forward in the future. So if the bear is taking control of that level, then you can start preparing for sell-side bias. But until that happens, we again, we're above the 50-day moving average. You have to give the bulls the benefit of doubt doesn't mean the market will go up on Monday. Because again, when I go through my research over this weekend, 90% of everything that I'm preparing for on Monday is definitely on the sell-side. But it doesn't mean the market can't have a dead cat bounce for two, three, four days and even start reclaiming macro levels. And if those macro levels start reclaiming again, then all these stocks that were weak, that successfully back-tested into major support, then they're going to start getting healthy again. Then bulls will start getting more aggressive and sellers will start getting tired and start being complacent at the levels we are. But at least, again, trade on data. Don't start talking about this is the worst week. No, until you trade it through 9-11, until you trade it through the internet bubble, until you trade it for three years, not three days, three years of the mortgage crisis, what we saw last week was, again, to put it into perspective, pretty much any random week that you're going to have in your trading career. Stocks go up, stocks go down. The most important part is our opinions mean absolutely nothing. It's all about technical analysis and getting clues through data. So just take that in mind for grain assault. When you look at where the big technical picture is, and again, this is supposedly a seasonality of strength. This is traditionally a market that is supposed to go higher, but supposed to and actually will are two different things. And when you look at the reality of what the market has been, we've been in this bullish cycle. Okay, look at the weekly view of the cues. Does this look scary to you? Which part of this reminds you of 9-11, the mortgage crisis, or any worst case scenario you've seen, right? I'll wait. It's just reality, guys. Sometimes, again, we build things up in our heads to kind of put things that are not there. Okay, I've done it myself. I know every single human being, if they're human, they do it themselves. So it's very, very easy to make something out of nothing. But when you take a step back and you look where the NASDAQ is, how is it different than when it was here, than when it was here, than when it was here, and here, and here, right? Guys, really, I'm telling you, take a deep breath, especially if you're newer traders. Take off the panic button.  All this was was a successful back test to the 50-day moving average, like I said before. And now, at least, we have a complete line in the sand going into next week. And if we start testing this line in the sand, then you should start, again, starting putting yourself in a position of strength, whether it's hedging your portfolio, whether it's trading exclusively on the short side, or making an adult decision. If you need to stay out of the market, stay out of the market. But again, don't make this more than it actually is. So going into this week, again, although we reclaimed, and the Bulls did a great, great job, although we reclaimed the 50-day moving average, when you do your research, you're going to see a lot of names getting really beat up, especially in the technology name. If you saw what happened this week, Tesla had a great run, and then Tesla started losing organic levels, and that's the name of the game. They started losing organic levels, the five. Everybody knows how important the five-day moving average is, at least for me. The five, the 10, the birth of the trade, the 20, which is macro support, and had a really, really aggressive move into this rising wedge. So Tesla, look at the bottom channel here. There's no reason to guess if Tesla's going to go higher or lower. Wait for these channels to confirm. Are there intermediate channels that you can take advantage of? Absolutely. But at least here's your big picture, right? The lows from November the 15th is your big picture. That's also going to correlate with this rising 50-day moving average. You don't have to guess it's going to go lower. Wait for this level to get taken out, and if it does, well, hell, it's going to go lower. If it doesn't, and they start reclaiming the five, 10-day moving average, it's going to go higher. A name like NVIDIA, same thing, right? NVIDIA had this really, really rockstar move. It tested the 20-day moving average successfully, bounced above it, had a really aggressive sell-off this week until the bulls defended the prices towards the end of the day. You don't need to, again, you don't need to guess. Wait for this 20-day moving average. If bears start reclaiming this 20-day moving average and confirm it, then we're going to go down to this bottom channel here. If the bulls start getting aggressive and the NASDAQ truly did hold the 50-day moving average, then if NVIDIA starts reclaiming the five and the 10-day moving average, well, guess what? Then it's going to go back to its 52-week highs. Now, there are definitely levels, there are definitely names, that are starting to really come in, okay? And they started breaking technical levels. Like Rivian is no Tesla. It's no Lucid. Hell, I don't even know if they're Nikola. Okay, let's not get out of control. I don't even know if Nikola even produces anything. But the point is, you can see the hype that it ran up, the deflation of the balloon, and now we've had the lows close in this whole formation, and if the market starts confirming level, then yeah, this is a clear shot back to its IPO lows for bigger macro moves, right? A name like that looks like it's really, really ready to fall apart. A lot of these earnings plays have been fantastic this week, have been fantastic last week. Like a name like Salesforce, right? They blew up on earnings. It tested the same level here three times in a row. If this thing starts building below these earnings lows, then this thing is going to have a really, really aggressive move down for several weeks. Just like we've been demonstrating for weeks and weeks and weeks, and names like a Zillow, or Fubu, or Roku, or Best Buy, right? Or Best Buy, just real, the earnings low plays have been absolutely outstanding. So again, guys, take a deep breath, prepare for both sides of the market. That's the only thing you could do. If you're an investor and you feel antsy, okay? If you feel antsy, if you feel that you don't have control of this market, well, get your control back, right? Isn't that the most important part? Whatever type of trader you are, you want to make sure you get the control back. So how do you get control back as of a trader? So if you are uncomfortable with your position as a professional trader, what you can do is either, you have several choices. You either get rid of the position, right? You either get rid of the position or you hedge your book. You don't have to sit there defensive. That's the last thing you want to do. You don't want to sit there defensive.  Have control. So if you're heavily invested in tech, short the cues against your book until cues start showing some signs of stability that the market has stopped going down.   Short some cues against it, right? Short some spies against it. Do everything you have to possibly do rationally to protect your investments. Why just sit there and watch your portfolio bleed? There's no guarantee your stocks will ever come back. So at least put yourself in a position of strength instead of position of weakness. It's a very, very important part. And if you don't feel comfortable trading with the market, again, I hear a lot of people talking about, well, cash is a position. Okay, I guess, put it a different way, right? Put it a different way. The market never has to snap back. That's what I've seen that for years and years and years. We'd always like to believe that the bulls will always come back and really reclaim things. And that has happened a majority of the times, but they don't have to happen. We've seen some markets for two, three years decline very, very aggressively. So if you don't want to participate, obviously, on the long side of a diving market, you know, God gave us, again, two hands, right? Two feet, two eyes, two ears. Those both sides of the market. You don't need to sit there, again, sit there complaining about how the market is irrational. The market's not irrational. The market goes up when the market goes down. You have two choices. Either participate or don't participate. But don't give yourself a clutch, a crush. To turn around and say, you can't do anything about it. The market doesn't suck. The market doesn't suck. Okay?  And that's okay as well. Okay? There's nothing wrong with that. But again, remember, the market never needs to do what you want it to do. The reality of the market might be a little bit different than your reality. You either have to adapt or move to the side. But to sit there and complain of what you think is happening or the market's being manipulated, it's the stock market. It goes up, it goes down. It's up to you to conform or do everything possible to protect yourselves from exposure that you are not prepared for. So let's talk about Friday's session. Again, the whole week was incredibly aggressive. When you see moves, you know, when you see multi-day moves of absolute destruction, that's technical analysis. That's just not stocks randomly going down. And this is kind of the whole thing we've been kind of preaching for years and years and years. If you've been watching this broadcast, it's all technical. It's not about opinions.   Okay, I'm not a good guess. The market can go up, the market go down. We have no idea. So we prepare through data. We prepare through technical analysis. And once you see stocks confirmed, whether to the long side, to the short side, our job, whatever your process is, is to take advantage. So let's talk about Friday's session. NTS 105, if it builds below, can flush. Primarily the day was all selling. So here was the 105 level, right? Here's the 105 level. It confirmed it, pre-market went down very, very aggressively. You're gonna see a lot of names. You see this low here? 105, 30s. You can see here just, there's a lot of aggression on Friday. And unfortunately, if you were one of those traders who were buying the dips on levels that got confirmed, you really felt it. You really felt it very aggressively. So NTS took out that 105, just got slammed all the way down to this 100 area. Still looks lower. Still definitely looks lower. Rivian, I still think this thing tests the IPO lows. Rivian 106 held three times. If it builds below, can flush. Rivian got hit. Rally back a little bit into the close. But here's the 106 level. And again, guys, the more times a stock test, the same level over and over and over, the higher probability it's gonna finally snap. So 106 was low here, 106 was low here. Finally snapped at 106, went all the way down to 100. If it snaps that 100 this week, I have to assume this thing's gonna see its IPO lows of 95, 20. NVIDIA, I was actually watching NVIDIA to the upside. It came nowhere close to 326. So obviously never confirmed. And this is when you know the market was very, very aggressive. One was the last time you saw Microsoft down 10 that had nothing to do with earnings. But that's the whole point. That's the whole point of technical analysis being ready for it. Microsoft 327.75 that builds below can flush. Yeah, I would say it flushed. Okay, I definitely can say it flushed. So here is the whole channel here. So this 328, 328, 328, 327.80s. So once this thing took out this 328, 328, 327.70 level, this thing went down $10 for Microsoft to go down 10. And again, you could see what the common denominator is traded down to, right, the 50 day moving average. So again, here's another example of a line in the sand going forward. So huge move, huge move on Microsoft. Coin got absolutely destroyed. 283 if it builds below can flush. Here was coin, right? So coin took out the 283. Again, went down all the way down to the 50 day moving average. Went all the way down to 258. Again, another successful test of the 50 day moving average, mirroring the NASDAQ 100. Another company out of 8,000 companies are gonna have a line in the sand going into next week. Square was an absolute amazing, amazing mover. Amazing, amazing mover from Friday, excuse me, from Thursday's session. Took out the 205 level, traded down all the way down to 93. I was actually looking for an upside move on Square. Okay, upside move, obviously it never came, but there was a sneaky pivot there that just never got confirmed. Snow I was watching through the upside never got confirmed. Marvel, not a big move, 87 needs to build. Only went up like a dollar in change. But the ones that came in got killed. Not only 272 was the next stop, 262 was the next stop. Rivian take on the way down, went down six. Microsoft got killed. CRM, I still love, love, love, love. Guys, watch that 251 level going into next week. Microsoft is getting destroyed, take down much more. And again, here's the whole perfect example of kind of thinking rationally as much as everything was getting slammed, here's the reality. For experienced traders only, and I'm sorry guys, this is 380, 70 support, not 180. My dyslexia kicks in from time to time. The 50 day moving average was 380, 70s. For experienced traders only, watch for a bounce there. So here was the cues, and this is my whole point. There was nothing sensationalized about Friday's session. This shouldn't have been a memorable event. So here was the 380, 70s, everybody see that? Here's the 380, 70s, and the bulls finally reclaimed it on the close and rallied at about $3 into the close. So this market is very organic. It's very driven by technical analysis. Yes, absolutely. We have new variants. We have Fed. We have everything still on the table to make things scary, but it's very tradable. Scary is being unprepared. Scary is being not in control. It could be scary. You know what's scary? Chasing the stock up 200% of the day. You know what's scary? Jumping into a trade because some guy on Twitter says it's going higher. That's scary. Technical analysis is not. It's organic. It's boric, but the most important part is you're in control and it's highly predictable. Guys, have a great day. Have a great weekend. Again, for all you guys who are joining us for this upcoming week, tomorrow is a very, very cool panel. Hope you guys make it. If not, God bless. Have a great, great weekend, and I'll see you all on the field next week. Take care.


Memba states need to focus on the conceptual framework of what is a smart society. First by understanding what are the main ingredients which one needs to look into when coming up with a smart society. And one of the things which we have identified in our annual deliverable report is that we need to have a holistic approach to the creation of smart society. We don't have to develop a unified approach. You can be able to have several steps done so that at the end of the day you'll be able to have a smart society. Smart society has improved the quality of life in several ways in that it puts the citizens and the business community into the heart of doing things and finding solutions to the challenging ways of the world into an area where one can be able to focus on technology. To be able to have more updated solutions, more advanced solutions to the various sectors of the economy, maybe transport, maybe health education, cybersecurity management and so forth. But the most important is to ensure that you have efficiency in service delivery. A good example which has been provided in the annual report is that we can be able to have a digitized society where a case which has been shared by the Republic of India is that through the use of biometric digitization you can be able to come up with a unified number which would ensure that the delivery of government services will be more efficient. This annual delivery will go a long way in informing the member states especially those who have not embarked on creating smart society. Because one of the things which the report has done we've been able to identify the various layers which architectural layers which one can be able to follow as we are coming up with a smart society and in that case we feel that member states would be able to learn great lessons based on the case standards which have been done and therefore this is a good benchmark for those countries which are looking forward into coming up with a smart society.