The Q's so let's go all the way back first. I Want to go back to When this one really started taking off can everybody see the chart can everyone see the chart Okay back in 2015 It was a summer of 2015 If you were trading at the time you might remember it the market had a huge gap down in the summer and It was it was some kind of reaction to something that happened overseas in China Now for those of you that don't know what a gap is I'm going to explain to you very briefly a stock gaps So the other market which we're talking about the Q's which is an ETF when the closing price one day is different from the opening Price the next day. That's all a gap is so this day here. It was August 21st. The QQQ is closed at 102 40 Okay, the next day. This was on a Monday. So this was Friday. This was on a Monday On the Monday the market opened at 94 23 So that gapped down So we were we actually closed on the Friday night Okay at 102 40 and we opened about eight dollars down in the on the day in the morning to start the week That is actually a decent size gap for the overall market because the market gaps almost every day But it's rare that the market has a substantial gap in it and this was substantial Okay, it was it was very noticeable. I don't think anybody that traded didn't notice it There were a lot of stocks down in the day that morning and I remember and and if you don't know me I'll tell you right now I do like to short and that's why I teach the the class on shorting every month and only do the bullish one once a year But I will tell you that we didn't short that day I didn't short that day didn't tell anyone to short in the room because it was a very volatile time when something like that Happens you never know what to expect so it's abnormal circumstances. I can't go back in my Orbis charts Which I love but I can't go back to this long on the one minute But I watched it and I will tell you That this okay Open dropped fell you can see we can see the low But I just can't show you the one-minute bars the low in this day was 84 74 All of that happened in the first couple minutes of the trading day It all happened like in the first 15 minutes of the morning So not only did the market gap down eight dollars on that day Then it fell another 10 Into the open between 9 30 and 10 in the morning. Okay, which is you know, I wouldn't say catastrophic But very very scary for people to see the market react that way Despite do the same thing. We'll look at that chart later, but I'm just looking at the cues right now Anyways it reversed It actually got bought now. I'm gonna just show you this here So the tail was made by buying because when we when we open here We felt like a brick and again, I can't show you the woman a chart But I'm telling you I watched it and that's what it did and if you if you were trained this thing You noticed it too it this happened in the first beginning part of the morning and then it got bought The market now I'm squishing these together here so you could see it has never looked back since that moment Actually what happened that day is the market open and swushed Something called the stock's wishes was that I named my company and then it negated the swush all at the same time Which is extremely extremely powerful and despite the fact the market opened that day Eight dollars down and then fell ten dollars in the morning It was a very bullish action that happened on that day for the market to recover from such a big gap down And then get bought like that and drop that heart of the morning and then get bought and then halt And it's held ever since and now here. We are it's it's not August yet So in a couple months, it'll be two full calendar years But that was the beginning of a monster move that has pretty much taken place in the market Is still going and I still foresee it continuing to go Now Then we had the election so 2015 bullish 2016 2016 let me find the day in here here. This was the day after the election So what happened is? Again, you can't really see this here But the market in the pre-market the post-market the pre-market was down more than this We did gap down then on this day of the election But then we we actually recovered we had a nice recovery then by the time the morning opened in the market And we have taken off ever since so this was the end of 2016 November December and look at what we've done. This is here. Let me find the first day of the year just to show you Here's one three So actually the low here look 1889 Was the low of the first day of the year? We're nowhere near that now today's closing price 130 707 if that's that's correct or that might be the post-market here Look at what we've done. This is this year Boom But you but you also notice there's not a lot of massive green bars here lots of greens But not any big fat long greens But hardly any reds. In fact, let's just count just for the sake of so how many red days there are in the market This is very interesting. I've never let me just count one two three Four five six seven eight nine ten eleven twelve Thirteen fourteen fifteen sixteen seventeen eighteen nineteen twenty twenty-one twenty-two twenty-three twenty-four You're at the done. There's only been twenty-four Days with any red at all in them this whole year. That's unbelievable to me Wow, and I just realized that now as I'm talking So the point is we're very bullish. Okay, so if you're looking to trade What do you do? Because if you're clearly if you're looking at this, no one would disagree with me the market hasn't been trading up higher and higher and higher and If you're looking at this for thinking gosh, how can I go long? We're extended. I'm sure a lot of people are saying although I'm not reading it that way But I'm sure people are saying we're extended. How can I go long? I Can't short this you say to yourself. What do I do? What do I do? What do I do in a bullish market? Well, the answer is easy You look for specific stocks Very very specific stocks to trade you read the direction of those specific Individual stocks and you play them in the correct direction on that given day and you make money if You want to do an overnight trade an option trade or a swing trade I believe that the best thing possible for you to do is To be with the market, which would mean to be in longs overnight Or option trades as calls in a long position moving higher, but they still have to be strong stocks You still can't buy anything in the world and go long and Make money or expect to make money in this market despite the fact that we are up and despite the fact that we're higher Now I did a video on YouTube. I don't know how many of you follow me in YouTube and There was a lady that called me. She's she's an older lady. She's been following me for a long long long long time Actually, she just called me now. I just missed a call from her. I she's been following me since almost the beginning She has been in this stock here long It's rigged. Okay Since 2015 Her price in the stock she has 5,000 shares. She's in a swing trade. She's in an overnight position It's not a day trade. It's not an option. So she's in it and it could go to zero But she's in it with a price of 16. So she's under water the stock today had earnings and a gap down again And I spoke to her earlier. I said you actually could have shorted the stock today I could have shorted this as a short as a day trade and she still isn't gonna get not of the trade So she's down 30,000 dollars in this in this but she bought it at a time when Everything was starting to recover at that period in 2015 In fact, let me go back and look at this chart I'll show you this here when she which is the area when she bought it that time that time in the summer After the bounce happened and things were starting to move back up again and recover and people thought thought they were buying the dip Okay, so people thought that it was great and it was a good idea. It was a fabulous idea to go long Okay, after that bounce happened and we'll look at the spy in a minute too So she went long This this rig in here. Okay with a with a with a very large position actually And she's been suffering in it and down in it every every every day since for two years and I and she hasn't gotten out of the trade yet, but It's not a good trade It's not a good trade because it's been down for a very long time It's also not a good trade Why because the stock this chart is in a downtrend this chart isn't a clear clear downtrend And I just got done showing you the overall market Which is making new highs almost every single day. In fact, we didn't do it today, but we got close So 137 43 today went through six pennies away from making another new high in the cues But she bought at that same period here where a lot of people were thinking it was going to be the low in certain stocks So if you see it doesn't even matter It doesn't even matter that a lot of things have rallied since then or recovered not everything will So same concept here what i'm telling you right now for 2017 for picks and Choices that you want to do for things you want to invest your money in you still Even if I tell you right now, which i'm going to tell you right now I'm going to tell you right now the market's higher don't even think that we're extended And i'm not saying that we're not going to pull into support I'm not saying we're going to go straight up like an arrow, which we actually have done by the way All right We don't even need to do that whether we come in a little a baby support or a mini support to make a new support Or pull all the way back or do whatever it doesn't matter. We're still we're still higher in the market I see all of 2017 and all of 2018 and actually for for The foreseeable future that the market will continue because I I truly believe that a new area is being created in the market Um that is going to hold and stick for a very long time And it's just in the process of being created So it's almost like people can't even see it But i'm i'm seeing that having happened here So even though you may not be long stuff you have plenty of time to go long But you still have to pick quality things and i'm talking about over nights, okay And you still can't buy crap So what do you do in a bullish market? You look for specific specific things to trade that are quality that you can predict the direction They're going to go because not everything is going to go with the market You want to go long strong stocks and even stocks that you think Can't go any higher Ken, okay Case in point google all right It was an option trade i called yesterday morning it flew flew flew like a bird, okay 16 points Almost over the strike and this option still has another week left in it Although i think most people are out of it because it had such a monster move, but i called this In here in the morning on this day yesterday five three the stock broke out and came out in here And this is google this had earnings last week gapped up huge on the earnings Fell on the day of the earnings a tiny tiny bit gapped down right after the earnings did gap down Gapped down didn't even hold the gap down. I mean didn't even fall on the gap down held Flipped rally net has bought ever since the low on this day here was 901 This stock has rallied 36 points in four days After gapping up 30 some points or was it more eight 75 Basically 40 points So google has gone from the day before the earnings at earnings thursday night Again, i focused on gaps, but it closed at 874 today's high was what 935 35 and 25 60 some points crazy people It's so crazy that i love it So the bottom line is and i'm just seeing this in here now look at this This is a gap up. This is a gap up This gapped up Look at this this stock is you think the stock can't keep going. Yes. Yes, I can it absolutely can It can Okay, so the point is that even if you think I can't go long Good quality stuff because they're already gone.  I don't think it is and it may never get anywhere near 16 dollars again So it is it is this is a very very challenging time for traders who really are not very good at reading charts Which I which I am okay, which I luckily am But for people that aren't aren't good at reading charts They're confused because they they think things can't keep going and they can and I'm calling them I'm calling them higher and they're they're running up like banshees And then people also Are afraid to short Because they don't want to show anything in a bullish market, but that's not true either Today AVP was the play of the day in the trading room. Look at this bar. This fell like crazy I got out of this in the morning and it kept falling So you can still short stocks in a bullish market, but you have to have the specific right Correct stock symbol the right pick. Okay But not everything is going to rally With the market And Regan is an example. There's other examples. There's another one I did Was this yesterday? Yeah, it was just yesterday Here again now this this didn't gap up a gap down But it did gap up previously here. It didn't go anywhere couldn't get the momentum under it This was back in february. This is groupon People here probably thought this was another goodbye But it wasn't And people probably thought with the markets rallying the markets rallying and da da da da da What if thanks book ended up doing today? Let me see how that close Oh, that was the next point. I want to make for actually before I get to the next point. I want to make here the next Teachy topic what does anyone have any comments or questions about what I said before I get into the next thing Because those two other things I want to talk about Any questions from anyone? Is anyone there? Is anyone listening to me? Is everyone mesmerized? Well, I'm going to go to the next topic then The next topic That I wanted to know questions. Okay. Thank you. Thank you. The next topic I want to get to is There were two things that had earnings out this week That were noticeable The one is facebook The other one is apple So what happened to facebook today it gapped down It didn't gap down that much But it did gap down The stock closed. This was last night. I guess it had the earnings it closed at 150 180 It opened in the morning here at what 150 17 So it wasn't a crazy crazy big gap down, but it was noticeable enough It did have a short move in the morning. It did fall But it didn't gap down that much. I don't know what the fundamentals are in this I didn't read the report. I didn't listen to it or don't know why it gapped down It won the report which it did but the point is it gapped down But it didn't go anywhere. It had one quick move in the morning and then flipped Apple did something extremely Similar except for even more bullish. Okay This was two days ago apple gapped down two in the earnings Close the night before here at 147 51 open the next day down here not quite two dollars 145 59 Fell in the morning quick and then flipped and actually was more bullish than facebook because it went full on green And it's not that far away again from getting up over the high both of these stocks gapped down apple And facebook on earnings And are almost close to getting up again to make new highs after the trading day the closing day after the earnings So do you see These two charts and i'm just gonna blow them up here This is facebook again point in fact People probably thought it was too too much to go long the stock at any point in here at any point in here at any point in here At any point in here at any point in here and look at it It's not extended it's still going higher Apple very similar although facebook actually looks stronger Here Again you could have gone long this bullish gap in apple in february And you would still be in the trade and the low is 127 ish And it's ran up 26 points and this is just since february february march april 90 days in a couple 90 plus days barely the stock has gone up like crazy again You could count the red bars in this just like we did in the cues So do you see how this is something you can make money on? This is this is not something that you can make money on going long I'm talking about going long now So when you want to when you want to go long stocks and again if you want to be in an overnight I really think it's critical now to be in in the bullish movement in a bullish direction to be overnight with the market directional buys Not that you have to be at anything overnight like an option or swing chain But i'm just saying i think it's extremely important to be with the market trend right now It is so strong. There's nothing stopping it. Okay But you've got to still be in a quality pick So i i determine my picks which i teach in the class based on a rating system And that's what tells me whether something's a good pick short or a good pick long And sometimes i'll do something on the day and that's it and it's not a good long term trade bullish or bearish as a day trade because i do the day trading every day But i'm talking about two things now if you want to do overnight So you want to do day trading if you want to day trade You still have to pick quality things because you have to get in that stock in the right direction Because things do tend to go with the market and if you're going to short stuff then it's got to be 100 on its own Not involved with the market at all not affected by the market at all Or you take it and you have the move in the morning and you get out quick Which is usually what i wanted to do anyways, even though this the save EP thing kept going This was really a good one today. It rated very well, but anyways you got to make your money and Just take it when it comes to you in quality quality picks If you if you don't have the patience to to wait for a pullback You don't need to to go long stuff you can go along the gap But you can't go along every bullish gap Because if you had gone along this this gap here actually we would have lost on the day Which was the day of the earnings So google gapped up it was a valid gap to rate I don't day trade google google, but i'm just using this char's example could have been anything it could have been You know microsoft or something the fact of looking at microsoft the point was you can't go along every bullish gap You still have to have a way to do it It is more important than ever to pick quality things that you're doing Because the market's so strong and people are struggling now. They don't know what to do and for some reason and I have no idea why Actually before I make that point Let me just get back to the facebook and the apple. I know i'm jumping all over here, but i'm talking I have a lot in my head, but the facebook and apple is just is just uh It's just glaring to me and I realized that this morning in the room I was talking how bullish the market is because those stocks got down in the earnings and they didn't fall a bit And not only did they not hardly fall they they flipped and got bought so it's just it's just glaring to me How strong the market is because all these stocks are marketing leaders amazon google facebook microsoft all these things are our market leaders In fact, let's look at tessa next to they're all market leaders. Okay, so they were driving the market up Yeah, so microsoft here actually Was this the day of apple the 24th? No, what was this? Maybe that was microsoft earnings. I don't even I have to go back and look So i'm gonna look at what happened on the 24th here. Was this just a gap up and maybe this was earnings on microsoft Let me look at tessa I don't want to have any comments or questions about anything i'm saying as well Now this what this did get down today. I did see it. Of course, I didn't short this at this price point Um, I just want to see here. This is an option trade in this or not. Well, this will be one to watch This hasn't changed the trend to here at all yet, but it doesn't be a watch one. This did fall hard today I mean, there's no two ways about it But this stock has had a big big move here and so it's still in it's still in a solid up trend It'd be interesting to see what this does. I will watch this the next few days So don't don't short this don't go along the sleeveless beat, but you could have shorted as a day trade today I just typically don't trade things that expensive But that'll be one for me to watch Uh dallas saying how many shares you decided to take in a 60 dollar stock compared to an eight dollar stock for shorter a long trade Well, it depends on the size of the stock. You never know the size of your stop to the stock opens and sets up You don't know so for example today in abp and this was this was one you could have just taken You know a million if you got filled If you could have gotten filled a million shares here, hold on um Because it was so cheap This one in it depends on the size of your stock That varies on every trade on every day in every stock and I don't know that until after the open until the live day So I can give people an estimate and I usually get people an estimate I usually say I think this is going to be 30 cents of 35 cents or could be 20 cents or could be a dollar I usually get people an estimate and I'm not far off. I don't know galley had can can tell me that I don't think I'm far off with that Anyways, the one today was boom dune and I even gave us a little more room 15 by 30 was the one in this here today. So it was 15 cents But if you're gonna if you're gonna short a 60 dollar stock, I'm not saying you can't get a You can't get an entry for for 15 cents in a 60 dollar stock, but it's probably going to be 35 to 50 I'm guessing on a one minute chart for the entries I do for the day trades And this is whether you go long or short and talk about just the entry So you see it's different you will you will be you will have larger stops typically typically With stocks that are more expensive than stocks are smaller But your risk amount is the same If you're risking $500 a trade, that's what you're risking You're just going to get to have more share quantity and something like abp than you will in something that's a higher price stock But if the stop's going to be bigger anyways, and if your risk is $500 your share quantity is going to be based on your risk Which would be $500 if that's what you're risking or a thousand you have to figure it out You either have a cheat sheet next to you what you give people in the class or you have a calculator Or you figure it out in your head, okay The bottom line is it's it's it doesn't even matter because usually the stops for more expensive stocks are Are are actually bigger stops You know what i'm saying So the chances of you of you getting a 10 cent stop and a $60 stop that you'd be able to take You know Five six thousand shares of it and need three four hundred thousand dollars and buying power You know is I can't I can't think of one I'm not going to say never because there's never a never in the market, but That it would you wouldn't even matter so I always tell people to buy in power You probably need for a day trading account is about a hundred thousand remember what I what I rated abp on gala hat I don't think I I don't know if I have it here in this sheet if I have it on my other sheet I already put my sheets away for the day We can look at that tomorrow But anything over 20 gets gets the ratings so whether it was 2021 whatever It's It's It was good enough to short But anyways the point i'm trying to make is what do you do in a bullish market? You can still short stocks. Oh, that's the other point I wanted to make that's the other point I wanted to make You can still short stocks. Okay So you can still short stocks in a bullish market if you find the right things Okay But you but you got to find the right quality. So what I what I find when I'm talking a lot of people people are saying Well, gosh, I can't I can't shorten this market. It's everything's too strong and everything is too strong And it's too strong. It's too strong. It's too strong. No, not everything is too strong That's the point Whether the market was bullish or bearish, let's just say fast forward 10 years from now and I'm just making this up I'm not predicting this. I'm not saying this. I'm just talking now to make a point Fast forward 10 years from now the market does turn bearish It doesn't mean you're going to be able to short everything in the world doesn't mean that at all You still will have to find quality things to short The point I'm making about the overall market and overnight's is If you're in a position, okay, which which patty's in the ring Take a clue if it's not move if you're done in the position and it's not moving The market's strong. There's a problem Get out. Okay. It's not working. You have to acknowledge sometimes when you're in a bad training You have to take a loss and everyone should have stops Whether it's a paper stop or a wheel stop.  That would be so foolish Just like you shouldn't take let option trades go to bust okay so the point is that You've got to pick quality things to do there's two points a pick quality stocks B if you're going to be in an overnight with the swing trade option trade try to be with the market direction Which in this case with google was up? okay if you take something And the market is going and the stock is not going with it Then the bottom line is Recognize if you're down in the position and if you've been in it for a couple of days or a couple of weeks Which is actually a long time that something's wrong with it and maybe you need to kill it and maybe it's a bad trade It's not going to work Well gala had was saying I originally I called the let me i'll go over the abp again abp originally I called 35 but then I lowered it to 30 it was neither here nor there for this one though For whatever you did with it 15 cents 20 cents. It's a great great stop. This is a very very Good entry in this we I mean the only way that we've could have gotten a better price in this is if we had taken it all the open Which I wasn't going to do because I never do and I actually thought it was going to rally first and it didn't And thank god I pressed the button So normally you would you would you would wait till it triggers. I'd never get in at 9 30 Now in this one here today, I did not get filled full size, but I tried I could have kept press pressing the button to to press me to get in but the sucker fell so quick and so hard and so fast That I just left it be so I killed the rest of the position in this I didn't get filled the whole amount So I tried to get 5000 shares of it. I didn't get filled the whole amount Some people did get filled full size in it today. Some people didn't either It was just so weak So that's rare for me, but it was a cheap stock and it was down a lot and I mean it just fell like a brick And I actually held this a little bit longer than I normally would so I got a good move in this here today And you could have done a second setup in it You actually could have shorted this here late in the morning in the afternoon And look where it went and you probably would have gotten filled full size in here because it had It had some backup in here when that happens and I told people you can leave the order sit I didn't do it because I didn't know if it was going to pop over the high or not And I didn't want to get hurt but you can leave the order sit and when you get the greens when you get the push back It will fill you into the order That didn't actually even happen here early today So I don't think it would have mattered if I had the order said I probably wouldn't have gotten filled here But I didn't I didn't want it I didn't want it to drop and I didn't want to get a horrible price in it And that you know, that's what I try to avoid if I don't get filled full size But it's rare that happens, but this was a very cheap stock. I mean It's this week we did two very very cheap things that you could have taken a lot of size One was this and the other was Groupon and actually I got I got everything I wanted in the Groupon So it was the avp. I didn't get full in But normally you would size yourself for what? Whatever the difference is between the entry and the stop. So if I'm calling it 15 by 30, that's 15 cents 15 by 35. That's 25 cents or 20 Yeah, 20 cents. So you have to figure out your sizing based on that So if you risk a thousand dollars normally your trains and your stops 20 cents, you'll go for 5000 shares If your risk is 500 you'll take 2500 shares It's the difference between the entry and the stop So I pulled it down tighter on this today From 20 to 15 But it didn't matter. It's still a very very very tight stop So you will have ones like Microsoft. There's no there's no short play in here to show you an example that I've done recently But even if you would go along the stock in here It's the same principle the entry and the stop is how your size and your position and your risk should be the same cash Why isn't almost every trade you take So looking at looking at all of these charts and looking at the market Whatever you decide to do what and I'll take some questions here Let me just get my point out whatever you decide to do in this market I think it's important to be an overnight with the market directional bias But the stock still has to be strong If you're in something and you think that the stock is strong You're down in the position the market is higher and in a bullish market And it's not moving you're down in the position that you should get out. It's not right And if you want a day trade actively you can you can still short which I do every single day Things are still selling off like the normally would like abp But you still have to pick good quality things to do It doesn't matter if you want to go long or if you want to short you have to pick quality quality stocks and maybe Maybe you don't maybe if you don't feel comfortable Okay doing overnight right now because you're not sure what to go long because you feel like everything that's strong is up So much then don't then just day trade then now let now be the time where you day trade weekend And you get out quickly on the day and you read the read the gap on the live day and do it Or if you have some other method, I mean I I trade only gaps and I'm in that day and I'm out But if you don't feel comfortable going long at this point with the market, you certainly can't short this market You can't do it You can't short stocks like google and you can't short stocks like amazon and you can't short the overall market and people are Going to do it. They're going to do it and they're probably going to do in any second or getting ready to do it I mean the spine looks like it's going to in fact I mean look at this. I didn't even see how we closed or anything like this I I wish there was something else here. I could call long in an option. This looks like a breakout play This looks like the spy is going to break out tomorrow It's friday if we don't gap up tomorrow and explode over the high. We'll do it next week There's no way this isn't going to do it. This is probably going to do it tomorrow It's 509. I just saw how we close We could gap up tomorrow morning. We could gap down tomorrow morning in valley. We could gap neutral There's no way we're not higher. We could just do it right tomorrow I can't if this google is probably going to keep going. This is really this was ridiculousness If the market goes over the high this google is going to get a 950. It'll go another day I don't even know what I could call in here. This is like, what do I even? This just this is just so crazy But the spy looks like it's going to pop and break out and go right over the high I don't even know what this is just so crazy It's just here maybe Uh, I gotta see how things gap in the morning I want to see what the market does between now and the next week. This five is going to just break out over the high It's a breakout play. It's going to go because it's going to explode. Um, do I trade both options in stocks? Yes, but I prefer to day trade daily if I do an option trade It's not every day very specific Not daily. I short stocks daily or occasionally I will go long a bullish gap So that's the reason I don't teach the bullish gap class all the time But I will tell you my bullish gap class is extremely extremely valuable because not all the points are the same Because not everything is the same when you're looking at a long you're looking at a short number one and number two Because I've gotten so good at shorting. I'm extremely good at reading longs. How do you think I called this thing? This was a long. I mean, I read the gap So, you know, I short every day of my life and I've been I mean, I'm all I do is short mostly 99.9 of the time and I have called this market so well Bullishly and I'm calling this phenomenal Phenomenal options trades all are bullish Netflix was another one And you say, well, how is this girl that likes to short calling these incredible stocks higher because it's the gap Because it's the gap itself. It's the gap. It's the points. It's the points. It's the gap. It's the chart.  I said patty if she had done 5 000 shares of google she would have made 35 000 Yesterday not even holding it She's hanging on to a loser And she's taking good trades now with me and getting quick out scared like a rabbit Very hard to combat bad habits, but you know, I really train people very very well to do that when they're in the room with me Kenny is shorting your 401k or IRA account. You have to ask your broker I Have a regular day trading account I don't Think you can but I would ask someone specifically. That's a broker. There are certain rules and certain Requirements and I think you can't actually take a short, but you can buy a put You can buy a put trade so In which would be Nuts which would be a shorting essentially, but you'd be buying a put But that's something to ask your broker tail All right, good luck to everybody. So we'll see what happens. I did. I just saw this how this is this looks crazy I don't know. It's too late to call any trains now for anybody to do any because of the markets closed But I'll have to watch some things tomorrow morning. We'll see what they do If we don't break out tomorrow morning over the high in the spy, we will we will Any second in fact, I'll here. I'll tell you a prediction right now We don't break out tomorrow over the high no matter how we gap in the morning We do we gap we gap Monday morning up over the high. That's what I think happens So it's one of two either we're gonna trade tomorrow and run right over the high or Monday morning We'll get up and we'll be over 240. There you go. You just heard it here Can you buy a call option in the spy? Yes, it's too late. You can do options in the market till 4 30 or 4 15 I think it is 4 15. I think it's a cut off or maybe it's 4 30. I forget and the queues in the spy But it's even too late now So just wait wait till the morning. I'll look at some things in the morning and see what what's what's doable here But yes, you can You can but you can't right now What I would I'd like is something another another google kind of thing something something I could something that I really see that looks crazy because this this this moved 10 points literally In a millisecond a profit um So I don't know I don't have any ideas here, but we'll wait till the morning All right. Good job everybody. Thanks for coming. Have a great night. I'm going to go sit by my window and watch trump He's visiting here in new york. I'm going to take pictures outside my window. It's going to be Fun and interesting. There's helicopters everywhere fbi So I'm going to have a nice glass of wine and sit outside and look at the look at the Hudson river and all the action You're welcome


So hello everyone. Good morning. Thanks for joining for this session. We are having quill audits with us and we'll be discussing a lot of questions and one use case related to hyper ledger how audits are done and what are they up to so that we can make some good decision in future over to Pradeep. So, I'm Pradeep. I represent quill audits. I had the marketing division at quill audits. If anyone of you have already heard about quill audits, you would know what we do. For those who do not know, quill audits is basically in the business of securing smart contracts, securing Web3 projects. And we do it in a very passionate way in a way that our mission speaks for itself. Our mission is we are here to make Web3 a safer place. The testament of that is we have done already 700 plus projects. The clients are global, are spread across the globe, and they speak highly of us. And if you look at the world's rankings, we are at number three or number four. So we are a fast growing. We are making a very positive impact and we audit smart contract for the sole purpose of making the whole Web3 technology to evolve in a positive direction. So this is about quill audits. This is about me. Sanket, do you want to share about what you do at quill audits? Sure. So, I mean, another thing I would like to add to Pradeep's description of quill audits is, our CEO Pritam has said multiple times that the money is in the court. And if the money is in the court, but the court is written by developers and developers are humans who make mistakes. So it's important that we do not understand the flaws in the court, which could lead to potential disasters. In terms of the funds that have been deposited by users into different protocols. So yeah, that's it. And my name is Sanket and I work on products on different products in quill audits. So quill audits is a cybersecurity firm and we do audits primarily, but simultaneously we are also developing cybersecurity products to automate cybersecurity, given the fact that audits do tend to be really difficult. But nonetheless, audits will not go anywhere because tools are only suggestive measures. And my role is to understand how we can benefit users and how we can give them options to assess the cybersecurity protocols implemented by different protocols before investing into them. And also understand the vulnerabilities present in smart contracts by developers that have been written by developers. So yeah. Thank you very much for the introduction. Karthikeya, maybe you can now tell a bit about what Hyperledger has about us and how have you been, you know, over the years. Sure. So Hyperledger is one of the oldest community, which we have in India. It's one of the largest community under Hyperledger Foundation. We have close to 1500 people. And Hyperledger is having different, different chapters all across India. Noida is there, Mumbai, Hyderabad, Bangalore. We ranked second just after Bangalore. And we used to organize all such meetups where developers can understand, take some idea, take some inspiration. So it's always an open source community. And I also contribute to Hyperledger Foundation in different ways. So let's move on to our today's topic. Shall we start with some questions or you want to pick up some? Sure. On that note, maybe, you know, I'll have a continuity of what you were talking about and maybe you can answer the audience about that concept. Just wanted to ask in that regard, how does Hyperledger handle authentication and access control? So Hyperledger have a different ways of handling it. We have our own set of rules and regulation, which we can write it on configuration file. And then organizational level dependencies are there depending on how you make the nodes. There we have authentication things. Take a pause one minute. Yeah. Sure. Yeah. Can we take some questions which you can answer? Sure. Yeah. Go ahead. Like, have you done any audit for Hyperledger? Sanket, do you want to answer that question? Yeah. So not to my knowledge. I mean, we usually work with Solidarity and Rust based projects on Solana and majorly work on projects with Polygon and Binance Smart Chain. So Hyperledger is, I believe an enterprise level tech. Okay, my video is so sorry. Just a second. Yeah. So Hyperledger being an enterprise level technology and being a niche skill. I mean, the number of audits that do come are very less. So to be honest, our exposure to Hyperledger is very limited. Okay. So I would also like to understand, there is one more thing called Hyperledger BESU, which does work with Solidarity and EVM based things. You can also upload something on Ethereum main network and something. So have you worked on some kind of audit with Hyperledger BESU? I mean, we in general avoid work, I mean, not as an avoid, but we don't have that sort of expertise working with Hyperledger fabric. And the thing is that as Pradeep earlier mentioned, I mean, I understand that it uses Solidarity. But to be honest, since we don't have a lot of exposure to the infrastructure, and we tend to deal with individual protocols that are currently developing their projects with Solidarity or Rust. So we have auditors that have expertise, that have built certain protocols on these languages. Our auditors are used to auditing protocols that are made on these languages. And since, as I mentioned, Pradeep also mentioned that our service is a testament to the best quality that is out there. And since we believe in making the three safer with the best quality as well, we avoid taking on projects that we can't deliver the best. Okay. Okay, so I have one more question if you can take that. Let's say, how convenient it is to use some kind of libraries like OpenZplane? Like, do you recommend using it or? Yeah. Okay. I got your question. Yeah, so from a security standpoint, it's fine because all these libraries are audited and already have the security implementations in place. So what we do in terms of, so okay, so in our audit process also, so firstly, we try to get a hang of the code quality while gathering the specifications from the clients. So our focus is on the complex code that has been written by the developers of the project. And I mean, using standard libraries like OpenZplane or code from Uniswap or Pancake, so usually comment out or, you know, we consider that as a dead code because these are already audited. This code is already audited and the cybersecurity implementations are there. And then we try to look for consistent coding style and follow the style guidelines for us or solidity. And then we make sure that the contracts can be compiled and tested for formula tests. So this is how we work. And I mean, there is no harm in using OpenZplane standard libraries or, you know, taking code from different organizations that are open source and whose code has been audited. Okay, thank you. And moving forward, I'll have one more question. So do you use, do you do mostly the audit of coding manually or there are certain tools which you. Okay, so basically, so as I mentioned, the first part is to look for the specifications and understand what the protocol, how the protocol wants the contract to behave, what is the intended behavior of the contract that it has coded. So as I mentioned, after testing the code, removing the dead code and marking the complexity, marking the complex part of the code, what we do is we freeze the code and specify the commit hash. Oh, sorry, specify commit hash, yes. And then we do a manual review as you as you guys already know, we look for unusual behavior, common security vulnerabilities, like BSCW, guidelines and everything. So then we do functional testing, in which, you know, it is the contract is deployed in a sandbox environment using hard add the Nash or different tools. We also do gas analysis, look for, you know, latest attack vectors, say, escrow manipulation or access control, authentication, token supply manipulation, things like that. And to your point, we also use different automated testing tools, like mythics, mythil, you know, and then solgraf or solidity courage also we use. We also use LIDAR. So we have a myriad of tools at our disposal and we try and test all different tools. We also have some internal tools that we use. And part of my work in the coming, in the coming months, I believe would be to develop such tools to help us identify different attack vectors in code and how the content and functions is wrapped and passed through all that code to find that code and to find, I mean, as you mentioned, code in open discipline. So part of my work would be to find code that is already present in standard libraries and then separate that from complex code and then analyze the complex code for different attack vectors and possibilities of vulnerabilities and exploits. Yeah, okay. So thanks for answering that. I have a few more questions. Sure. So the other question I would like from you to get it answered is, so developers always think through like before deploying it to main network, they should test it properly in some local environment or maybe on test network. Yeah, so let's suppose if I put something fishy on some some vulnerability mistake and I have put it on main net. Yeah, so now what will you advise? I mean, the advice would be, I mean, obviously, if you're getting audited, the code audited. So, I mean, we would have to redeploy the code by testing it for the vulnerability, and we'll have to test it in a sandbox environment by, as I mentioned, freezing the code and specifying the commit hash, and then we will audit the code manually for each line. And once we do find the vulnerability that could be exploited, we will try to fix the code and redeploy. Yes. Okay, so there's one question. Maybe either you or Pradeep can answer. Somebody's asking in chat what kind of skill we need to have a career in the three securities and future scopes. So I think you can also cover some bit of private blockchain also here. Sure. No, so we would love for you to actually give more insight on how a career in security for private blockchains, you know, that could be made because I mean, I honestly don't have a lot of exposure to that. So what do you think? So I would like to add in one point here. In order to make any career in this thing, one of the things that Quill Audits does is we have conducted one cohort wherein we train enthusiasts with the basics of auditing. And so that they can start initiating these practices in their career and step into the world of Web3 auditing and security. This is something that as a step to support Web3 guys, I think one of the things that is absolutely important in an evolution of a project is auditing itself. So any company or anybody who wants to enter into Web3 or maybe who is an entrepreneur. So these founders should take into consideration the security and auditing aspects, which means that in their technical team they should also have people who are knowledgeable about these things. So to support that and to drive such participation, we have already done this cohort and other cohorts are in the pipeline, which will be announced later. But this is just wanted to put this award in because it's totally worth it. So I think to answer the question exactly, an auditor is somebody who has good expertise with or the development part of things. Because once you know how to code, probably and you know the my the nitty gritties and the details and the techniques to sort of ensure. I mean, you know the best practices basically because you've been coding so much and so frequently and building different projects. So what this does is it gives you a handle on how different codes can be manipulated or what are the flaws that you need to look out for while writing the code. So an auditor is basically an experienced developer who has some techniques or a method to identify flaws and vulnerabilities. And I know solidity I mean is not that old a skill wherein you say that you know I have 10 years of expertise and I will be an auditor. But in one year or six months or maybe 1.5 years if you've been coding on solidity, then you must know that you know there are certain things that you need to look out for while you are coding and stuff. And obviously there are cohorts like ours and many other cohorts as well that do offer you know strategies to look out for these flaws and vulnerabilities in contracts. So to summarize I would say I mean learn solidity and whatever comes before it just the basics then practice on solidity for some time develop projects. Showcase your projects at different hackathons and try to get it try to get its flaws exploited by different people and then develop your own techniques and then also join different cohorts or there's a lot of substance available online also a lot of medium blogs. We have our own roadmaps to development and best resources and practices on our portal called Web3 Suggest as well which indexes all the information about development and how to become developers and how to get into different careers into Web3 security and Web3 in general. And then probably you know just try to get some more experience by taking out bug bounties for different projects. So immunifies one such platform that allows you access to different bug bounties by different protocols. So once you tend to go through the code for these protocols and try to understand what sort of vulnerabilities can be exploited or exposed. That would probably give you more experience and help you to understand you know how you can better your methods. So I think I hope that answers the questions for public blockchains and I mean Karthik I would love for you to sort of shed some light on how we can do the same for private blockchains if I'm sure there must be a difference. Yeah so I also as part of my day job I also work for one of the big four where I do some kind of audits and with my past experience in auditing some of the private blockchains I would say your knowledge of understanding one architecture is very very important. Like how the data flows through how that entry point is there and how well you can understand one architecture. Okay and read as much as possible about the securities that itself is very very important. I'll give you one example in every audit is very different basically to me whenever some audit will reach out to me I have to think through the architecture first. And you can understand every project and every implementation is different in its own architecture so there is no specific thing or thumb rule that we have to follow. Okay so let's say if the architecture contains private key and public key of the user so you have to think through is the public key and private key secured properly. Is it put into Hasecock wallet or how it is like made secure so some some general principles you have to derive actually from the architecture itself how the data is actually flowing how everything is like kept in place. How well it is documented documentation plays a very very vital role at least for your team to understand and for others also to understand. So document is a very important role that also I believe is one part of auditing when we audit we also used to take care of how well you have documented certain stuff like how are you protecting your password. They should not be single admin to one cloud provider or whatever cloud you are using. So first is and very very important is read as much as and through all the architectures which are available. You can you can Google it around what is the architecture of let's say. Broader architecture might be available for npci or something okay so broader architecture of some supply chain was must be available. The broader architecture of so many NFTs are available architecture means just not means the smart contract some other API calls are how it is done. So there are several such examples which are already existing. Go through those architecture and understand because it seems it's a private blockchain your architecture is already in your control. Okay, so when when the architecture itself in public blockchain we don't deal much with the architecture because that is not in our control. So reading as much as about the architecture that will actually help. Okay, so I can pick some questions on I think Shane has made a very valid point in terms of security of any project. So, I mean, you know, as you were also mentioning that probably the business logic and how things work apart from, you know, the court part and the business operations work and the stakeholders involved are also very important.  But what do you think is its implication in a private blockchain or in a private blockchain segment. The question is for me. Yeah, I missed the question I thought you're asking this question. No, no, no, no. I will allow Shane or to also. Okay, so please, if you can allow Shane to answer that would be your view. Shane, I will come. Hi. So yeah, I mean, we, in my firm, we actually deal mostly in the private blockchain and I'm sorry Shane to interrupt. Can you give a brief introduction about yourself and then you can take the question. Sure. So I'm currently a developer for the surface Asia blockchain that for one of the big four. The roles includes in like developing the proof of concept solutions and some auditing mainly for the central banks and enterprises. So yeah, so as I was saying, some of these risks, especially when dealing with a large and complex systems such as like the central banks. So what we discovered is some of the vulnerabilities right. It does not come from the course but mostly of what is not in the course. So for example, like, because they have their internal controls, and they also have their governance that we have to match with our, like you said infrastructure. So, in case of, for example, is, maybe I should give one example, for example, like is multi sick really needed in the private private blockchain right. I know it is multi sick, for example, in the public chain. It will be more secure in that way, but it's arguably introducing more risk if you are implementing it in the private blockchain. Why because now you have two wallets that you have to be secure. This not only costs more, but it's also introduced more actors that interacting with the blockchain. So I guess this kind of like perspective on whoever thinking about making a career in a private blockchain space that it depends on the industry right. So dealing with like renewable energy industry, their requirements is way more different than the central bank or the banks or the financial institutions. So, getting the understanding, or on the how the operation works, who are the actors that we're dealing I think this will be like a very, very important in developing a much more secure architecture. I think on this note, I have to request some kids because some kids has, you know, has a case study to sort of present which has, you know, which is absolutely interesting in this context and some kids we want to share that piece of information with us please. I'll share my screen. All right. Is my screen visible. Yes. Okay, perfect. Yeah. So, right, so on second of December, am I audible yes. Okay on second of December 2022. We had anchor protocol, which was, you know, exploited and more than $5 million were lost and not only were they lost other, you know, other protocols using their services also, you know, had to be at the brunt of this crash. So, I mean, I'll just briefly explain what anchor protocol is. The anchor protocol was based on DLT and was basically an integral part of, I mean, you know, the new web and this was before Web 3 was termed as Web 3. There were just cryptocurrencies and blockchain and the different underlying technology. So we'll just talk about its staking platform. It has a lot of different services, but we'll just talk about the staking protocol since that was the part that was hacked. So anchor basically what it does is it allows you to stake your cryptocurrencies for different blockchains and in return it gives you and it gives you its own cryptocurrency called AETH or ABNB or AMATIC, which basically what you can do is it represents the currency that you had deposited plus these staking rewards for that currency. And, you know, that is how the pool of users that had staked their currencies are rewarded through the anchor currencies. So, I mean, you know, you can deploy development nodes and build the apps and everything. But there are a lot of benefits to, you know, becoming stakers on anchor Web 3 platform, which, you know, which result from basically two types of tokens. A anchor B and anchor C. So you will see two types of tokens moving forward, ABNB B and ABNB C. So the two types of tokens are basically reward earning and reward bearing tokens. So ABNB B is a reward earning token. So basically the number of these tokens increases in your wallet and it's pegged one to one to BNB. For example, if so, for example, one ABNB is equal to one BNB. So then if your reward is to BNB and you had deposited 100 BNB. So currently you will have 102 ABNB B. And the other token is ABNB C, which basically is which basically just represents the tokens, the reward, but in terms of the value of the token. So if you have deposited 100 BNB and your reward is 102 BNB, then your ABNB C will still be 100, but the value of each ABNB C will increase. Yeah, so, okay, so basically, as I mentioned, the ABNB B and the ABNB C are were the two models of tokens in which anchor used to reward its users. So they were actually updating some of the reward policies and schemes in the contracts for these two tokens and while updating these contracts, they were using the private key. But the hacker, while the update was going on, was able to steal the keys because of the update, the private key was not and the private key was not completely secured. So the hacker was able to, you know, just steal the private key from the deployer's wallet of the deployer's wallet, which allowed them to gain absolute control of what I mean the wallet and allowed them allowed the attacker to mint more tokens to his address. So as you can see on the screen, the attacker minted 10 trillion tokens to address to his address. So these are some of the on chain details. I'll share this PPT with you guys so that you can see what actually happened and make more sense of the flow of things. So these are the address and I mean, obviously on different block explorers, you can go and check what actually happened. But if you go to Nansen dot portfolio, it allows you to see basically that what are the funds in each of these address. So if you just go to Nansen and you can just paste these contracts right now, I think the funds would be depleted, but around 2nd December when it happened, you would see that how the hacker had implemented the contracts and you know, minted 10 trillion tokens of ABNB to his own wallet. This is a short activity that anyone can do. Yeah, so basically, this is what I was talking about from an address the hacker, you know, had deployed this contract and if you want to see how this implementation contract was created. So anchor was so this is the hacker only the deployer because he had the private key so it uses basically the hacker use the private key to deploy ABNBC tokens which are the reward earning token, which means the value of the token increases instead of the number of tokens increasing. And he implemented this to mint more tokens. So now you can see in this transaction after minting the tokens he had transferred these tokens to his own wallet and for that he had to pay a gas fee and for this gas fee he transferred the 1.125BNB from deployers compromise wallet to his own wallet.  So in different attack vulnerabilities, or maybe you can see even, you know, like a honeypot or anything. Mostly what hackers do is they use their own funds, firstly, to get a sense of liquidity and how the pools are working and everything but in this case, hacker did not have to spend anything. And secondly, because I mean, he had already bought an access of the private key of the deployers wallet. So I mean it's one of the most basic things to keep your private key most secure and we often take it very lightly that you know, I mean it's the private key and obviously no one would expose it if such a multi billion protocol could do such a simple mistake then probably I mean you know we should implement more cybersecurity protocols or probably use a cold storage or whatever I mean you know there are a lot of different ways to keep your private key secure even while exposing it while updating a protocol. But there are a lot of things you can do to safeguard your private key, while doing such updates and such a protocol should have kept them in mind, given the fact that you know, more than I mean I think almost 30 billion dollars have been lost in more than 800 hacks in the past seven or eight years and in the last year alone, I think around 2.5 3 billion dollars have been lost. And obviously, after minting all these tokens and depleting the pools from pancakes of ABNB tokens, he started, you know, just transferring the amounts to tornado cash after bridging the funds to Ethereum and polygon using the seller network and you know the multi chain or you can see the use of seller network to convert the to convert the funds to Ethereum to convert USDC Binance peg USDC to Ethereum and to polygon and then you and then sending those funds to tornado cash and tornado cash is basically I mean it's a protocol for laundering cash so that so basically you put some funds into tornado cash and it divides the funds into multiple wallets and different things basically it allows you to I mean not exactly launder the transfer cash and make it more difficult for other people to track the flow of funds by distributing these funds into different wallets different accounts different currencies that sort of stuff so you can see immediately after the crash this happened and another interesting I mean another interesting impact of the price dropping was that there is this protocol or maybe another staking platform called Helios so yeah so there is this another protocol called Helios which is a staking platform it uses a delayed I mean it uses an oracle but the information of ABNBC dropping by 100% was you know it was it was delayed so the information did not reach to them in time because of which the one of the hackers hacker was basically what they did was they put I mean they deposited I think 183,000 ABNBC and took out a loan of 16 million dollars in his tablecoins so basically using 183,000 tokens of ABNBC they were able to extract 16 million 16 million dollars worth of stablecoins yeah so as you can see on different chains so tornado cash as I mentioned it helps you to convert and send cash sorry send funds into different wallets and you know it's sort of untraceable so the hacker used tornado cash to send to convert funds to different tokens of different blockchain so if you can see there is one there is BNB and then there is matik polygon matik and then there is ethereum so three different chains used three different tokens on three different chains to send it to tornado cash and basically make the funds untraceable for the authorities so as I mentioned you know about Helios also so I mean post that exploit the primary motive of anchor has become to alert different organizations or different platforms that have allowed the trading of ABNB tokens basically anchor tokens to stop trading and obviously we had to use a new private key and secure all the smart contracts with the key to prevent the tampering so I mean next I mean the current steps that anchor could take for ensuring that you know all the users are you know none of the users are harmed in the long run and there is still some trust in their protocol because even though the staking protocol did make some mistakes anchor protocol also offers a myriad of different services which people will still keep on using regardless of the hack so they had to instill confidence in people so that they don't stop using the they don't stop using anchors different other other different services. So, firstly, I mean they should ensure that all the liquidity providers to different pools on different protocols are identified about you know, I mean the people who provided liquidity to pools in which these tokens were traded they are identified they are you know just notified about the hack and they are notified about what actually happened and how anchor can compensate them. So, then obviously they will have to purchase $5 million of the NB which was the amount that the hacker ran away with and they would have to fill in the damage created to different liquidity pools. But in this case there were two types of people one were the liquidity providers that were caught off guard right and the other type of people were they knew that the hack happened they were also liquidity providers but then they made use of this information that ABNB price had dipped by almost 100% and by making use of this information they actually were able to dump the token and make profits. So, it will be interesting to see how anchor can identify probably by taking snapshots of the before and after of funds of wallets. So, yeah and then this is in the scheme of things to launch new anchor BNB tokens and airdrop to affected ABNBC and ABNB users by as I mentioned taking snapshots of users who were affected before and after the exploit actually happened. Yeah, so the snapshot okay so yeah as a user the primary task should be that you should stop buying ABNBC tokens at any point from any pool and just wait for the anchor BNB airdrop and just redeem it against the stake. So, that was it. Thank you. Very interesting, Sanket. Indeed it's very important to sort of be as an end user. It's very all the more important to know about these hacks. So one of the things that we also do, you know, in this context is that we publish a well researched well studied newsletter that is, you know, that is curated for the benefit of not only people who are technologically, you know, informed about the audits and programming languages and everything but also to people who are in the world of investing who are interested in engaging with projects and things like that. So, I think, from that standpoint, following our newsletter is very important because that is absolutely great wealth of information that you are getting at your fingertips every week and a very highly curated valuable information. Shane has a question for us. Do you guys have any involvement with proof of reserves audit? If any, what are the key risks and takeaways from the project? Yeah, so at the moment we don't do proof of reserve audits because primarily it deals with issuing a Merkle hash certificate by checking, I mean, you know, it's just not something that at the moment we are involved with. I mean, there are a lot of different organizations that are into this. In fact, I think someone from our team has shared the reference for what three suggest. So to ensure that, you know, you invest into protocols and exchanges that do have a Merkle certificate or a proof of reserve. We have created a list of exchanges that do have a proof of reserve or a Merkle certificate to ensure that you only invest, I mean, you know, the FTX, you don't lose money in disasters like the FTX. So that is there in that three suggest. Yeah. But at the moment to answer your question, we don't do proof of reserve audits. Okay. Do you mind if I ask question? I think I just wanted to ask, are there any security best practices or guidelines that organizations should follow when they are using or probably consider they are considering the using of hyper legend? Yeah, so there are almost same kind of guidelines what we do for public blockchain as well. Here is specifically what is very much important is how well we keep our private key public key secure in some wallet, like as you call it or something. And then the architecture point of view, you have to build the whole architecture by yourself, like we do it on Kubernetes mostly. So if your Kubernetes port should be well secured, and the other aspect it relies again on which cloud you are using, let's say Azure or something, then you have to understand more details about the security of the cloud. And how well protected you are on your cloud by firewalls and some other kind of security aspect when it comes to blockchain stuff. It's about the private key public key how to secure and rest all is almost same. How we do it for other applications which are on Kubernetes or on cloud securities. I can take few more questions. Are there any third party security audits or certifications for hyper ledger projects? Do you have any recognized hyper ledger basically officially they don't give anything, but I still recommend that one should definitely go through cloud architecture and cloud certification cyber securities. And that will be very, very much important. Then about the DevOps, if they have some DevOps security certification done for Docker Kubernetes, those things will be very, very much helpful. But how does hyper ledger also ensure the integrity of the data, like on the network, for example, to prevent tampering or manipulating of the records. Is there any built processes that protects the integrity of the data itself? So for integrity purpose, we depend on the consensus, how this consensus is actually working. And we also provide the explorer. What Sanket was showing us also an explorer where you can identify, verify several other things. So the explorer for hyper ledger is also same where it helps you to investigate any run transaction which have happened. And it's a permission blockchain. So whenever we are enrolling one organization, so it's a close consortium, you know, so the different organization make one consortium to for this private blockchain. And these organizations have their own set of rules which they can write in some ML file. Those rules are very, very critical to examine and those rules, you can understand. I'm just giving you a very generic and layman example how hyper ledger used to work. When somebody is joining the consortium, they have to go through the rules which we have already written. And those rules are very much critical to examine. So those rules are written in this gamma files. And the certification also we should do is for hyper ledger foundation gives their own certification. If you do the certification, you will get to understand all details and understanding the best understanding you will get once you pass that examination for hyper ledger about the ML files, how these are actually configured. configured. So config config configuring one organization is a very critical part. Cloud security is the second critical part. And third is this thing, what we say private key and public key security. The rest, you know, smart contract is same how we do smart contract also exist in private blockchain. Hyperledger allows you to have smart contract in different different languages. There are primarily three go lang, then JavaScript, and one is Java. Okay. And smart contracts in this is mostly analyzed manually. So there are no such tools, which Hyperledger is providing currently for the chain code here. The smart contract is called as chain code. When Eliza chain code, we are still trying to develop such tools where you can analyze your chain code. So primarily, there are four things I would say. First is this configuration file, then the cloud security, then this is smart contract. And last is the DevOps infrastructure security. Awesome. Thank you for the answer. Yeah. So, okay. So, I mean, I just wanted to ask since I don't have a lot of exposure with Hyperledger in public blockchain, we use cryptographic hashing to maintain the integrity. So, I mean, is this is the same case with Hyperledger, since you mentioned, I mean, the bit about the chain code. So is that how it works with Hyperledger as well? Can can you please repeat the question? I follow. Reading one of the comment. Okay, okay, that's okay. No, so I was just saying that in public blockchains you have cryptographic hashing.  So since you didn't mention about the chain code in Hyperledger as well, so do we also have cryptographic hashing to maintain integrity in Hyperledger? Yes, it's it's same as it is low. So how we have a typical blockchain, like previous has is matching with the next has and all. So the blocks are created in such a way. So that's how same thing happens here. But little bit difference is we don't have continuous blocks flowing up whenever there is one transaction that will form one block. So in public blocks and what happens there are like 30, 20, or sometimes hundreds of transactions in one block. Whenever there is one transaction that will create a block. And meanwhile, it will be silent. And if there are two transactions at the time it will take two. But on an average, there is only one transaction at one time in one block. So this and also the cryptographic things is same. It uses our 256 to hash it and there's some encryption and same kind of block structure. The only difference I can say the major big difference you can visualize is the formation of block in public blockchain is continuous block which is flowing up whenever transaction is coming. It's just capturing bundling all the transaction. But here in this, in this case, what happens is it's just sits for even in private ethereum. Yeah, private ethereum also there is like blocks are like keep on generating. Yeah, even when the data is not there. Even with even some transaction is not happening. The blocks will be keep on generating. But when it comes to hyperledger, the blocks will appear only when you do some some kind of transaction. Understand. Thank you. So if you have some more question from audience, we'll take up and last half an hour is only for audience if they want to interact with us. If we don't have we'll wind up. So Shane Ashok anybody I probably have a question right. So do you deal with any tokenization on hyperledger fabric? And if that is the case, and how would you ensure that the tokenization is as secure as those implemented by the standard of ERC, for example? Yeah, so with the latest release of hyperledger 2.0, they have given us this flexibility to have our own ERC 721, ERC 20 or any such solidity, EVM based smart contract. But it really depends on the use case where you want to use the ERC 20. Okay, since it's a private blockchain for what purpose we will be using it, your token will have no value until you list it on some exchange. I think that's that's the thing. So still figuring out if the use case is demanding if the use case requires such kind of token, then we should use it. Otherwise, I'm still thinking for a best use case where ERC 20 or such thing can be, you know, good fit for a hyperledger based application or architecture. Did you get my point? Yeah, but in terms of the implementation, so for example, is that the use case of tokenizing like, for example, electricity. So on this, and we want to clear an FTFA. So if you personally wish to choose fabric or make soon for this purpose. Yeah, I'll choose. See, since this is a good use case, let's say for tokenizing electricity grid, what how much electricity you are using this for this purpose, I'll definitely use hyperledger fabric because it is taking us to a private consortium. Okay, so these electricities will be privately deal. We need not to put it on public blockchain. And a base who based private blockchain I'll prefer. Hyperledger base who based private blockchain that will be more helpful than hyperledger fabric because hyperledger fabric comes with a lot of configuration details and some different different other things. And these two will get rid of us and masses can adopt it very easily. Is there any security concern on tokenizing on tokenizing like this? I know that we can deploy the ERC contract in February, but it does not work the same as the one that you put on the edge of the chain. It's my understanding correct. Security concerns for this one will be as same as how we do it in public blockchain. Maybe what Sankeet and Pradeepa discussing is about let's say if ERC 20 is deployed, then what are the vulnerabilities are there in the smart contracts? Same vulnerabilities will be here because both the smart contracts are same. So we in that case, the security concerns will be only those controls which we look for normal ERC 20 in public blockchain. All right, thank you. I mean, do you guys have any more questions? We would love to take them up. Anyone else? Kartike, I have a question about a generic question about in the interest of auditors who might be who might be interested to take up a career in enterprise blockchains or promotion blockchains. You said, you know, there are internal processes that we that you follow for hyperledger. So if somebody wants to become an expert in enterprise blockchain or permissioned blockchain, what kind of, you know, certifications are probably what kind of training would help? Does hyperledger conduct any security related trainings in specific in the interest of people who are interested in this field? Yeah, yeah, yeah. See, when it comes to private blockchain, it's just not not one technology. So yesterday, I was reading about some funny meme on LinkedIn itself, like there was one hiring happening for blockchain expert. And below that, they have written there's nothing like blockchain expert. There are different different options available right now, polygon, ethereum, many are there. And when it comes to private blockchain, it's just combination of all those technologies we have gone through, it has DevOps, it has Node.js, completely Node.js. The smart content is also in Node.js API is also in Node.js your your your securities with cloud, how well you can secure firewalls, many other things. So you need to be expert of each of those things, you have to get one certificate for Kubernetes, you have to get one certificate for maybe in securities of Kubernetes, or maybe you have to get, definitely, you should have a one certification for cloud security, you should have one certification for hyperledger foundation from hyperledger foundation itself for hyperledger fabric. So combining all those you can get this thing. Is that answer clear? You have to be expert of cloud security, you have to do one cloud security, let it be GCP, AWS, or Azure, or anything. Because you will be ultimately hosting it on that. Then some normal cyber security security is related to APIs. Okay, your APIs are written in Node.js, then your infrastructure based on Kubernetes, you have to be expertise on Kubernetes as well, then you have to get one certification for hyperledger foundation itself. So anything like that.  Sure, sure. So we have a question also from Ashok. He is asking I would like to know the demand for auditors as a career in the future. So I would say Ashok I think the technology itself is evolving in a positive direction and there is a lot of you know, there is a lot of hopes in on this technology to be replacing the existing ones, right? So from that standpoint, you can, you can already witness the kind of innovations that are happening in the NFT space, in the DeFi space, in the enterprise blockchain, like hyperledger itself. So the undeniable fact of any technology that is evolving is the security aspect of it, which remains as one of the concerns which has remained in the past, which will also remain in the future as one of the important aspects. So security guys will already have will always have a demand, I would say. And you know, because this is an evolving technology, it is all the more important that security guys are in the forefront of any innovation and take part actively in any product development or so. So from that context as well, the auditors, you know, become a very integral part of any Web 3 project. I hope I hope this answers your question Ashok. Thanks.


back to the Yankees and Red Sox and Off the Rock in the offseason coming into the year the Yankees the favorite in the division bigger picture the Red Sox have certainly outplayed we know the Yankees aren't totally healthy but Boston too early for a statement game but they certainly have shown that they're a team to contend with not only for the division but maybe in the big picture with that rotation the way they've been pitching and that offense and athleticism they show on both sides of the baseball this is a postseason team they're fired up they circled this ballgame and to be able to hit the Yankees in their mouth so to speak especially beating up on their ace that's that can send the shock waves throughout the league that this is a team that's for real that can do throwing the Houston Astros but and I think a lot of people got excited with the Yankees when they acquired Stan right we're all enamored with power and that's there's power on the offense there's power arms out of the bullpen the reality is if you're talking about athleticism if you're talking navigating through a lineup and having to really pitch to a team Boston provides a lot of issues and they can beat you in a bunch of different ways and but you know we talked about it earlier if there's a team to rival Houston in the American League I mean I know I said it was gonna be Boston I think Don Trell said it was gonna be Boston I don't know what the big hurt said he might have said I don't know what he might have said oh Toddy the Angels didn't eat him tonight he's about to pinch hit even though they have that big lead we'll take you out there and show you that with the Angels but I did want to ask you about Stanton who has been struggling with the strike I did have a couple of hits tonight how would you pitch him right now or what are pictures talking about what they've seen of him in pinstripes they saw the scouting report and they saw the homeruns that he hit in New York off sliders and that helps the bat head catch out front now you know you caught some balls out front too so that as a left-handed pitcher you're gonna rush him and speed up his bat so then you can go to the slider down his own and especially with Chris L having a nasty one he wants to set up his pitches but Chris L didn't need that especially with his high velocity today especially how cold that was nobody was catching up to 97 especially up top 16 pitches 14 fastballs tonight well and that's a thing when you've got a dominating fastball and you're throwing to a hitter that is struggling I mean that opens up the whole strike and you can do a lot of different things because stand look at the reality is as great as he is as physical as he is between the ears everybody's gonna struggle and that's the big battle playing base real quick last year he hit what 59 homers around 280 what does he have to hit average wise what do you think he has to hit what do you think he will hit in New York this year I think 35 40 that lineup he's still gonna be pitched to and they're gonna have any very shrieky year I mean 270 I'd be surprised if he hits under 270 I would in this day and age batting average doesn't matter okay they want them to get on base and just create create havoc in that line 40 home runs though okay and you have Aaron judge of course all right let's check it on some news before we get back to the highlight you had some thoughts obviously they miss Justin Turner's one guy but a lot of energy he brings and it's early in that lineup affecting things I think the bullpen to has been a concern I mean look it for me the first part of this season not gonna be concerned with the Dodgers I'm not gonna be concerned about the offense I'm not gonna be concerned about the wins the only thing that raised a bit of a I'm gonna say yellow flag okay was Kenley Jansen in some of the struggles early on and you know the velocity but his last two outings he think he put that to rest I mean he was thrown back in the mid 90s look dominant for me the Dodgers look at they're gonna do things differently they're gonna have different lineups Kike Hernandez is gonna hit fourth you know they're gonna mix and match they're gonna be fine and they will win the West and they will be in the postseason I mean up until that highlight Taylor and see you had no home runs with it we combined so I was a little concerned about the power they're missing the red Baron in that lineup especially how late he got hurt but for me that they started the top they were huge to that lineup they put pressure on the starting pitcher you saw that the where they can put speed on the bases as well as ambush you hit the ball the ballpark they get going the ballcups definitely gonna get going yeah and the only real threat in the division realistically would be the diamondbacks in your opinion well for me it's a diamondbacks there are a lot of people that you know out they got JD flew out I mean that's it but a lot of people that the trendy pick was Colorado Colorado is gonna win the division and there were a lot of baseball people that which I just don't see I don't see it happen in this year and look at our resident Homer here Anthony Masterson loves the Rockies love the Rockies right even acknowledge it might not be their year you know so that I know I'm on the right road no he's missed the Rocky Anthony is our researcher here but the Dodger team in terms of you know how they do things down there they're also a team that can make a trade at the deadline right if if they need to if they're in a position for the because last year was not just about getting to the postseason for them you know it's the World Series they have depth in the rotation they have depth everywhere they decide to make sure that their stars are healthy and playing at top form Clayton Kershaw's velocity has been down a little bit he's 90 to 92 you want to see him 92 to 94 but still they need to have health health as well to that locker room they're able to get the reps they all should be fine it's the talented ball club I was gonna say there's there's really one guy that is you can't replace and that's the guy at the end of the ball game and that's can't right yeah you just finally got you just don't have anybody and not to say that you won't miss you know look at Kershaw it is one of the greatest pitchers ever I'm not saying you would but Kenley Jansen if he's not there I'm not sure that they have options right now to close it out yeah his last few outings at least have been better


Hey guys, Dylan Schumacher, Citadel Defense. So I saw this post on Twitter the other day and it was something to the effect of some person was posting this article and saying, I'm glad for this mom that she carries, but please don't carry this way. And I looked at the picture in the article and there was this chick and she had a gun. She was carrying appendix and she was just showing her gun.  And I was so confused. I thought maybe there was something actually wrong here. Maybe there's some kind of problem. And so I scrolled through the thread and the comments, I'm trying to figure it out. And after I read a couple, I understand that her problem, the original poster's problem is that women shouldn't carry appendix because reasons, I guess. And I just read this and initially I was kind of annoyed, but then I thought, you know, the more I learn and the more classes I go to and the more books I read and the more I practice and the more I take training and et cetera, et cetera, et cetera, the less I care about stuff like this and the more I find that the pedantic minor arguments are only pursued by people who have too much time on their hands who aren't busy actually learning to shoot their guns or getting educated or taking training courses or reading books or doing any of that stuff. It's this first world problem where you have so much time on your hands, you want to nit pick about minutiae that don't matter. Listen, I don't really care how you carry your gun, okay? I'll tell you right now, I'll carry my gun appendix, maybe that's why I'm so biased towards this deal. I think shoulder holsters are dumb, but if you want to carry your gun in a shoulder holster, God bless you. It's America. You can do what you want. And I think when we get caught into these battles of these 9mm versus 45 and 8K versus AR and whatever, we spend too much time focusing on minutiae rather than the core of what we should be doing, which is valuing liberty, training to get better with these weapons, no matter what your weapon system is.  So we need to focus on the things that matter, and maybe it's just the internet, maybe it's just the 21st century, but I really think that it comes down to a lot of people having too much time in their hands who aren't busy actually pursuing things of substance, and so therefore they want to wax poetical about their opinion on which carry position is the best and which one is the unforgivable sin.  Do brave deeds and endure.