What's going on, everyone? Sam here with late in sports, Cardiff in 22, Penini, Donneros, Optic, football hobby, six box, half case break in number five. Pick your team style. Let me read off the list of our names in our teams. We've got Alessandro T. with the Rams. It's gonna be Anthony P. with the Buccaneers, Brett O. Cardinals, Colin L. Falcon, Chiefs Jets, Dean I. with the Lions, Edward P. Cowboys, Frank G. Chargers, James P. Jags, Jason S. with the Dolphins, Jeff M. Bears, Broncos, Colts and Seahawks, Joseph C. has got the Vikings, Kevin H. Steelers, Niners, Commanders, Kyan K. Panthers, Marcel P. with the Packers, Matthew G.O. with the Bills, Matthew G.W. with the Titans, Matthew B. Texans, Matthias N. Patriots, Nicholas S. Giants, Nick H. with the Ravens, Ray G. Eagles, Ronald G. Saints, Ryan S. Raiders, Seth B. Bengels, and Tyrone F. with the Browns. Good luck, everybody. Let's do some optic. We'll be magnifying a decent amount of stuff since it will least I, pretty much any big rated rookie of like Purdy or any color of Purdy or Pickett. Same with like Howell and Ritter as well, so I'll let you know here. It's gonna be a blue Justin Fields, two, 175, right? No, 179, excuse me. And now a Pierce rated rookie. Start missing it, then I won't hear the end of you. Oh, here's the first one. Electricity, Brandon Cooks to 65. Matt Carell, let's get ready for that, dude. Boy, mape. That is a green, David Bell, three of five. There you go, Cleveland, congrats on that. That's awesome, dude. Three packs in, we pull a freaking green, let's go. I'm gonna have Sean wipe that down a little bit, a little bit of dust on that, but we'll get that into a mag for you, Browns. Kyler Gordon, congrats on that. There's Orange, Quentin Williams, that is giving me number two, 199, and Kyler Elger. It's not coming off, let me see. Dude, all right, we'll send an empty box and wrapper. It's gonna be a Aqua to 299, Josh Allen, and Wanda Robinson. Send an empty box and wrapper with the Browns, unfortunately that surface imperfection will not come off. What up, Vaughn? Vaughn, did you hear the stick for Electricity? Yeah, yeah, yeah. It's already driving Sean crazy. Diamond hands, DJ Moore, nice one there and the short print for the Panthers. And a Brock Verde rookie. Hot rookie Skye Moore, there's a Romeo Dobbs as well. Grady Jarrot, Hollow and Alante Taylor. Oh, just wait till he pulled an excellent one. Oh. It's funny, dude. Run for your life, Vaughn. It's so funny, and I don't want to. 299 Damien Harris on the Aqua and Roger McCreary. Is that called Aqua? Let me make sure I'm calling that the right thing. Da-da-da, da-da-da-da, yep, Aqua, 299. There's Dominators, Joe Burrow and John Mechie. We already got a Rising Suns, Jamal Adams. We already got an Electricity. Oh, yeah, man. I was like, that's kind of like Sean Moore than anything's done, so bad. It's gonna be a red, Christian Watson. Nice one there to 99. Heck, yeah, dude, congrats to the Packers. I'm so mad, I gotta take a picture of this car that I pulled on. Isaiah Spiller. Monday night, Andrew, two tubes out of one of one. I know, yeah, yeah, that's what Donnie was telling me yesterday. Saquon and Nicoby Dean. Donnie was telling me that. I wish it was two or two, honestly. Watson? Yeah, no. Recap the Watson. Recap the Watson. Troy Anderson. Shane goes for his bottom-over-the-ad before he pulls in our electric card. Nice, purple, Billy Zappy, 250. Grats on that, Pat. Camera's away, I can't do that. True. Oh, you can recappy this app. Greg Dulcich. What's that? There you go. Blue. Blue to 179, Robert Woods. What is happening here, everybody? What is going on? Tyler Algier, ready to rookie. Hello, Anna Jelani Woods. Last pack is a George Pickens, 58 out of 99. Great Iron Kings, rookie auto. Nice one, Steelers, Grats on that. One of the shorter-printed autos in the set. So congrats there. Anna Jordan Davis. Man, Chrome Dust already got me, dude. Holy, let's see what we got. Another impeccable tiered spot. Another impeccable tiered spot. And another impeccable random team spot. So we're slowly but surely getting there, everybody. Let me drop you a link to 10. That's down to eight to go now. We are at eight to go. Let's get that filled up. On to the next one. Got a little bit before that breaks, but we'll get it filled on up. I believe the second impeccable tiered is now sold out. Number 13, 12, and 14 still with spots. I think, might be wrong on that. The numbering exactly of the cases. Well, I'll have to take a look. Orange, Peer Strong Jr. Hey, Peer, you wanna come out here? Two, 199. Cam Taylor Britt. There's Davis Mills on the Aqua to 299. Second year for the old Texans. There's a My House, Malik Willis rookie for the Titans, and a Sauce Gardener rookie. Rated rookie for the Jets.  Yeah, buddy. There's a Christian Watson rookie Kings. That's been a ritter. That'd be pretty nifty. Hello, Corey Davis, JLMP Tree for the Texans. Say hello, Darnell Mooney for the Bears, and a Keate Ingram. Got Elite Series rookies, K-9, Kenneth Walker, and Rashad White for the Bucks. Rated rookie as well. Just a base pack. Machai Sanders being your rookie on the back with cardinals. A Machai Sanders, this time Aqua to 299 for the cardinals, and a Kenny Pickett. Rated rookie, just base. Legendary Logos, Debo Samuel, and Tristan Ebner. Those legendary logos are pretty awesome. J-Dot, Jahan Dots and Commanders, nice one there. Red to 99, Daniel Bellinger for the Giants. Nice one there, congrats NYG, and Pierre Strong. Stop, smack! There's a blue to 50, Rashad White. Congrats on that, or the 179, just kidding. Purple's the 50, that's what it is. Nice one there, congrats Bucks, still a nice card. We've got a Tai Chandler, 47 of 75, Red Auto for the Vikings, congrats Minnesota. Minnesota. Minnesota. You'll enjoy this card like this. That's what I picked up recently. Oh, is that the one that you texted me? Future Legends for the way it goes. Dexter Lawrence, Sexy Dexy, on the Pink Velo to 79. It's probably second year, I think. Yeah, Forrest picked this one up, everybody. John Lester, that's on card, too. Yeah, picked off from there. He doesn't have any autos after like 2010. I know, I don't remember him ever signing. He's very young there. That's sweet. Free song, then like two minutes later, Forrest. Hey, I got this, I got this. Thank you, thank you very much. By the way, allow me to introduce myself. See you later Forrest. Magi Sanders and TDP, pick off legend, yeah. Yeah, that's what I said. There's a Joe name that found the aqua to 2.99 for the Jets and Kevin Harris for the old Patriots. And Damian Pierce, nice one there. All right, on to the next one. And guys, please still eight to go. Let me double check how our spotteronis look really quick. I believe, yeah, I was gonna say, I believe we are sold out on the second tiered down to five to go on 14 as well. I think they're Dimitri taking a spot, Shigenori taking a tiered spot as well. So we're down to now two to go and 12 sold out on 13 and five to go on 14, seven and 19 to go on random team style of impeccable. Four group breaks spots left on the day. Everybody, incredible, thank you all. Purple, Jeremy Ruckert to 50, nice one there for the Jets and a Malik Willis rookie. Just letting anybody in here now. Tyler Gordon, anybody in here now. I'm gonna remember that when payroll come around. Oh, hey, let's, I got two ahead of ourselves here. Sean Barton, there's Danny Gray, aqua rated rookie. Nice one there for the Niners, two, two, 99 and a Brock Purdy, dirty Purdy. That is Danny Gray, 89 of 150 on card. Ready to rookie out, congrats Niners. Arnolda Kite, say something else. I know, trust me, I know she's not playing. Tremac pride color match to 99 on the red. That's gorgeous. Congrats Cardinals and a Christian Watson base rated rookie. Oh, what's this all about? Got a thick card in here. That's gonna be a Drake London, 37 out of 49, three colored RPA. We got London on the track. Let's go, congrats Falcons, very nice. Lante Taylor as well. There's Andrew Booth Jr. Hollow and Hassan Haskins. You got me, Donnie Andrew in here tonight. No, steamer fest. Oh, and Sharon Rogers, the 199, Logan Hall. Steamer fest, 20, 23 tonight. There's a blue Logan Hall to 179 for the Buccaneers. And a Lewis Seen. Yeah, RPAs in this, yep, yep, yep. Lighted up, Jonathan Taylor. Kevon Tibidou, owner of the Kevon Tibidoum. Ooh, is that a downtown? I believe it is, Micah Parsons. Downtown for the Cowboys. That's sweet, dude. Just one there. Got the Sheriff badge, the cowboy boots, a wine with a cowboy hat, very nice. Congrats on that, there you go. There's Micah, you get that mag as well. Nicoby Dean. I'm doing the chain, just doing it. Siobhan does the up arrow to that too. Miles Sanders, the 79, nice one there. What's up, Randman? What's up, Randman. Happy Wednesday, yes sir. Happy double a release day. Happy double a release day as a spiller on your base, rookie. There's a white hot rookies, Kristen Watson, and Greg Dulcich. Aqua Montes Sweat to 2.99 for the Commanders, and a Troy Anderson. Orange, Fadarian Mathis to 1.99. See you, Shama. Bye, Fadiers. Whoa, whoa, whoa, that's fighting your face. Red hot rookie Skymore. Not that I know about by experience. Hmm, hmm, hmm, hmm. Interesting, hmm, hmm. JK Dom and Shalonda Woods. Interesting, the doctor does not know that. Hmm, hmm, hmm, hmm, hmm, hmm, hmm, hmm. The rookie, Strait London and a Matt Corral. All right, nice, nice half case we're working with here so far. Got an RPA, got a downtown, a little bit of everything. Let's pull the Brady Gold vinyl downtown real quick. This box, easy, done, not even gonna be difficult. Shane's, Shane's, yeah, we'll chop him up. Let me see, are we straight up on Walker? Danny Gray, Shane definitely just got onto a list by saying that. Yeah, yeah. Shane's definitely on a list somewhere. And we're four. Phyllis Jones Jr. 2.99 for the Bears, Aqua. Same will be Gator Bates. Now you're on a list. Nope. Jake Ferguson. I've been on a list. You're on the fan. I've been on a list. You're number one on the fan of Sam Barton Sticks list. Oh, no, I'm not. There's Tony of Gibson to 125 Silver Circles. No, I'm not. They keep knocking at my door and I keep telling you. You got the wrong guy. I don't know this dude. Hello, Alec Pierce. Man, already? 500 listing? Sam, how? I was already on every list, LOL. Exactly. Every box that has a patch auto also had the downtown issue so I have to get interesting. Interesting to know. There's a Mike White hollow. Just going to know that's the correlation there. I'll have to keep an eye out on that. Kway Walker. Trainer, pusher. Kway Walker. Silver Circles. Jake Ferguson. Rookie to 125. Hey, Quan Thornton. I hit the Quan Thornton. There's Harrison Smith to 179. And Garrett Wilson. I'm down with that one. Someone Uber me a wood chipper. Oh, Rod Smith. Nice. Signature series auto for the Broncos. Nice one there. And Andrew Booth. Will Uber deliver chippers? I got to get the right Uber, I guess. Snoop Connor. I can't imagine that's a typically super. He'll get a great tip. 199T Higgins color match for the Bengals. Oh, it's there. Orange, George Pickens. Nice one there to 199 for the Steelers. Calvin Austin. Austin. Trey McBride. Now I'm not doing that. Nope, not happening, Higley. Josh Allen. That's Jaguar's Josh Allen for the Jags 2 at 299. We actually just pulled Micah Parsons in the last box. I'll do a card stand on that. Hello, White Hot Rookies. Christian Watson. Kaydotton. I'm not so good at Mac, but one then, what else is there? Hello, Tony Pollard. And K9, kind of Walker. I know, Dak, you're a fan, man.  It's going to be a retro series, Steve Young. Nice one there. The Parsons downtown Cowboys guy. The Rookies, James Cook, Cook Rook. There's Lamar Jackson 299 for the Ravens. Optics just called me and said don't do any more sticks and their stuff, they're upset. Are they? Yes, of course. That's tough. Tough day to be Optics then. Talking to the wrong guys, unfortunately. I said hey, get in there. I didn't mean to necessarily stop you.  I pulled a green, man. It's clearly the second best you can get. Clearly the electric sound. That was the pack right after the electric, too. Clearly it's doing something. Michael Thomas Lyme Green 235. Nice one there for the Saints, Tyler Gordon. Purple Aaron Jones to 50. Nice one there, going to the Packers. And then Isaiah Spiller. Troy Anderson. Now you can just put a rookie color. Yeah. Silver circles, Tony G. 2125 for the Chiefs. Greg Goulds, such a rookie. That is not currently live on the baseball channel. That is an Orange, Jamar Chase. Nice one there, too. Yes, 199 for the Saints. That is Harry Carson. Nice one there. Signature Series Auto, congrats at Giants. There's Jordan Davis. If I was head of Optic at Panini, I would have called the shop in advance. George Picanzalo, could stop the nonsense altogether. Oh, man. That's the move. I've already got sticks laid out for guys in the next year's class, too. David Montgomery, nice one there. Two, 79. Pink Vila, like Zae Flowers, that's the best one so far. April Showers, bring Zae Flowers, baby. And Robinson Jr. to 199. That is gonna be it right there. I got it. That is it right there. April Showers, bring Zae Flowers. Come on. Davis Mills, there is a lot of gunk on that one. We'll set an empty box and wrap her with the Texans. That's not coming off. There's K-Von, too. He goes, Shawn, just plumped him. There you go. That'll go with the Texans. Sorry, Texans. And that's not coming off. That Davis Mills, Aqua to 299. There's another Aqua, Debo. That is to 299 as well for the Niners. And a Wandale, Robinson. Hello, Red Hot Rookies, is James Cook. Sharpen the edge of Shaq. Diamond Hands, Debo Samuel. And Brock Purdy, Rated Rookie. Even Shaq can't stand it. Shaq can't move, though, so that's just tough, man. Magi Sanders, Aqua to 299. Roger Carriere.  Here's some. Hello, Mark Andrews and Alante, too. Rising Suns, Tremade Edmonds for the Bills. And John Metchie, lighted up Lamar. Lucine, Shaq can be swung. There's Dexter, Lawrence Hollow and Nikobe Dean. Last pack of box five, good luck, everybody. We've got a Jalen's over, Rated Rookie, this card. All right, another random team spot. We've got another, some Star Wars six series spots and another random team spot. 10, I believe now down to five teams to go. Five spots left. Let's get that filled up, everybody. Thanks again, five to go. There's your link, keep it moving here. Got Drippy, live over on Drip right now. Sure, he'll be making appearances. More than we'd like, yeah, into this room. More than necessary. Drippy. Purple, Jahan Dodson, nice one there, 250 for the commanders, congrats, commander. J. What's up, Neeks? Red Monta Sweat to nine yarn. That is Erica Zucana. What was I gonna say? In case the customer who receives the hit wants to try to get the card replaced. That is an ice, Jonathan Taylor light it up too, 15, nine to 15, there you go Colts. The optic comet. Which one, Shane? Sean's made a good amount of funny comments. Retro series, that Thomas, nice one there. Yeah, so they have video proof. They have the box, they have the wrapper if they want to send it in, try to get stuff replaced. The porch comet? He said optic, he said optic comet. Oh, the optic, I wanna say it. Which one, Shane? Purple, D'Andre Sweat, 250. Oh, about optic, calling us Aiden Hutchinson. That's true, that's true, stay there, man. Bresaul, the rookies. Oh, this guy's a loose cannon, man. Loose cannon, dude, you know? Hello, Aziz Ojalari. Yeah, good, I'm on the fold of the optic all the time because it's game, yeah. They're like aimless bees. They actually want me to power bomb you through this thing. Trey McBride electric, 265, nice one there for the Garnels. I know Vaughn just bombing it all over himself. Poor Vaughn. It's like, as soon as you get that projectile. Kobe Bryant for the Seahawks, God. There's Orange Joe Thomas to 199. Chris Olave, rookie as well. Optic once in the season. While cleaning up the previous vomit. Blue Jalen Hertz to 179.  Oh man. That is Jake Ferguson, 13 of 99 on the blue rookie auto. Nice one there. Congrats on that Cowboys, Josh Pascal. Got a top load of that Romo. Nope. Aqua, Chris Jones, nice one there. That looks like Azstuff on it. That's actually just the field in the background to 299. Trayvon Walker, rookie. Hello, Pierce Strong Jr. Yo, Pierre, you wanna come out here? Jameson Williams. No, that is nice. Logan Hall, Silver Circles to 125. Grats on that there, Bucks. Yeah, Cowboys did really well. It's a quad brisk here. Cowboys did really, really well. Really, well, Skymore. And a gold, last pack of Nick Bolton. Nice one there for the Chiefs to 10. That's gonna be three of 10. Congrats on that. So similar to what we do in Optic basketball, have you do Black Pandora, gold, green, and gold vinyl, even if they're not. Right, right, right, yeah. Yeah, Ty Chandler. Black Pandora is kind of the one that's like in the middle, but I think you do Black Veloes and that as well. All right, let's do a recap. Got our goal to 10 is Nick Bolton. That's gonna be Aquas to 299, Rookies, Majiah Sanders, Vila Jones, Danny Gray, Majiah Sanders, Orange is to 199, Pierre Strong, Brian Robinson, George Pickens, Jared Arian-Mathis, Blues to 179, Rashad White, Logan Hall, Silver Circles to 125, Logan Hall, and Jake Ferguson. We've got Reds to 99, Daniel Bellinger, Tray McBride, Christian Watson, Electric to 65, Tray McBride, to 50, Purples, Jahan Dotson, Jeremy Rocker, Bailey Zappie, we got Autos is gonna be Harry Carson, Rod Smith, Danny Gray, Jake Ferguson, Ty Chandler, and George Pickens. Magged Cards, we had a Drake London RPA, that is 249, but a green, David Bell to five, and a downtown Micah Parsons, the Cowboys. That'll do it for the break, guys. Thanks again for the fill. Up next, we've got number,


The 2013 Warrior Games officially opened May 11th at the U.S. Olympic Training Center in Colorado Springs, Colorado. The ceremonies were highlighted by a march of the 260 wounded, ill and injured service members and veterans who will compete in the fourth annual competition. With Prince Harry and Missy Franklin, U.S. Navy Lieutenant Brad Snyder, who competed at the 2012 Warrior Games before winning three medals at the London 2012 Paralympic Games, lit the cauldron to signify the start of the Games. The competition features seven adaptive sports, including wheelchair basketball, sitting volleyball and a pentathlon event. Team Navy is sponsored by Navy Wounded Warrior Safe Harbor. The Navy team is going to do great. We've had some real success with our camps leading up to the program. We were sponsored in our selection process by PAC Fleet, so we had our selection camp in Hawaii. It was a great event, and just being here, they're all winners. The team members have impairments ranging from upper body or lower body injuries to traumatic brain injuries and post-traumatic stress. Since fitness and teamwork are a way of life for the military, many wounded warriors say that it is not only the camaraderie from competing in adaptive sports, but the rivalries between services that make the Games most exciting. Last night we played a scrimmage against the Army at Fort Carson, and so they would go U.S. Army, and so I started yelling Navy, so some of the people like Lauren started going Navy and so they stopped. They didn't do it anymore after that. The Games will run through May 16th. To follow all the action of the Warrior Games, keep watching All Hands Update or log on to Navy.mil. From the Defense Media Activity, I'm Petty Officer Amara Timberlake.


Look at that dude. Look at that. Give me a high five right now right now That was our high five. All right, whatever. Let's jump into idle here Let's get started and I'm gonna create a new program. Let's see this can be a filed up Python as always I'm just saving on a other monitor So you couldn't see what I was doing there get our shebang line It's been environment. I think we don't want to slash there not a period and now let's create a new class Called this one base. I'm gonna try and set up that little skeleton program like we did yesterday And the blast tutorial it might not be yesterday in your case. Who knows who knows? Okay, we got our constructor and we're just gonna have them print. Hello Actually, that's a lot of L's not O's Hello Yeah, that's all let's do um new objects Don't ever don't ever do that when you're programming Don't ever whistle or anything like that because you're not gonna be able to focus. Hello. There you go All right, so now that we've got that set up. Let's create something new here. Let's create a We're gonna be working with today is the idea of passing in dictionaries as parameters and now this is kind of similar or at least a little bit similar It's what we were talking about in the last tutorial passing in tuples as parameters with dictionaries you can uh You can assign keys to it while you're calling the function. So let's just type in a Book now notice that our variable that we're passing in has two Proceeding asterisks with the tuple that we had in the last tutorial. We only had one preceding asterisk So now we're working with two and that's how we're gonna be able to denote things So what we're gonna do is uh, we're gonna go a little bit more in-depth with Understanding dictionaries today too. So let's go for key and value. We're gonna be looping for two Variables while we're reading while we're reading this dictionary for key and the value in the dictionary And on the book sorry and look at we're using a comma here to separate these two variables Just like we would be normally doing in like a parameter or an argument list and that sort of thing So for the key and the value in book now book is a dictionary But we're able to use a function with the dictionary called iter items or it here items And that's gonna allow us to iterate To go through every single item or thing that is inside that dictionary So let's get our colon here and security code block and let's start typing. Let's display print The string of key Because we don't exactly know what the person or the program is gonna be typing in for a key It could be an integer it could be a string We don't know and we're just gonna say refers to No add on the string variable a value So this should work We get the both the key and the value of the key right so when you have remember when you had that dictionary You had something that referred to something else something that linked to another value something that associated itself with another value And that's exactly what we're doing here except we're passing it in as a function with a different sort of with a different sort of idea here So now if we run this we can Print book Now remember because we haven't set anything up. We haven't passed in any values for this It's it's gonna run. Okay, because it's an option to have things inside of a dictionary or list like that or a toppler Any sort of variable like that any sort of data type You don't really have to have anything in there You can have an empty data type and in this case when we're not passing in any arguments That's exactly what's gonna happen So if we print out book though, we might just get an empty character set Let's try let's run a five and there you go you get absolutely nothing inside that list But now let's take a look at it when we're actually initializing the function when we're calling the function What we're gonna do is let's say The Raven actually Because what you have to do when you're calling new things in this With it while calling a dictionary inside of a function what you're gonna be doing is passing in Variables that are going to ask that they're going to act as strings for the key. So if you typed in a poem Poem can equal The Raven how about that now we could have Sonnet sonnet can equal how about evolution starts with an R with an R We can type in like novel We can call this one the Odyssey That's sort of thing. I don't know if I spelled that right Who cares? But yeah, what you're gonna be where you're gonna be setting up is The variable name and you're going to be initializing these things inside your function call So you've got poem you got son and you've got novel and these are all going to associate with the value of the string That we type in obviously it doesn't have to be a string it can be an integer it can be your float It can be anything it could be an object for all we know and But that's exactly how it's gonna work. So now if we run this poem is going to be treated as our key and then The Raven is going to be treated as our value and this is going to go through every single time So let's try it poem the Raven sonnet evolution starts in our novel the Odyssey and that sort of thing Poem refers to the Raven sonnet refers to evolution starts with an R and novel refers to the Odyssey So see we're taking a string value of what we have here of what we pass in as our key If we tried to do this. I'm curious of what would happen if we try to do this without casting it as a string Will it understand that of course it will it will default think of it as a string if we turned it to an integer Obviously, we're gonna get a problem here because there aren't any integers inside that but You get the idea it does take the key in the dictionary as a string and it's using it as a strange Syntax though because we're using an equal sign or an assignment operator rather than that colon that we're used to But that's the way it works people I mean item again I myself don't use this too often But you do have to remember some crucial things in this video here the way that you assign things while you're calling a dictionary into the Function the way that you pass in the two asterisks in the variable name when you're defining the function and Being able to loop through keys and values when you're looking through a book I'm sorry a dictionary And in our case it's a book and the function that you want to use is it or items if we created a Dictionary in the interactive shell we can see some of the functions that we'd be able to call Let's just try and select that here we go come on come on control C. There we go Stroll V. Okay, cool. So we get a book in this case book is equal to that Inside of our interactive shell we can do book and we can do we can call all these functions on here And some of these are being able to iterate through the keys some of them are able to iterate through the values and in our case Itter items allows you to to iterate through both the key and the values So there are a lot of interesting things you can do with loops dictionaries lists and any any sort of data type like that and using that logic, but hey I think I'm all done rambling. Thank you guys for watching. Thank you for listening It'd be cool if you could give me a comment. Maybe maybe like the video maybe subscribe I don't know. It's whatever you want to do, but thanks for watching again guys, and I'll see you in the next tutorial


That's right ladies and gentlemen, Garrett Watts is finally back and we're going to see what we can learn from Garrett Watts waking up at 5 a.m. for a week and there's a lot of information in this video that you don't want to miss. What is up everybody? This is Chris from the Rewired Soul where we talk about the problem, but focus on the solution. And if you're new to my channel, what I like to do is take different topics going on in the YouTube community, try to see what lessons we can learn from them. So if you're into that stuff, make sure you subscribe and ring that notification bell. And if you're not following me on Instagram and Twitter, I don't know what you're doing with your life, baby. I have just posted that the pre-order is now available for my brand new book, Rewire Your Anxiety. A lot of you who are already following me, you know that I've been working on this book. So the official release date for the e-book is June 29th, but you can pre-order it. So the second it drops, boom, it's in your hand. So that link will be down below if you would like to take a look at it. And yes, yes, yes, yes, for everybody who's asking, yes, there will be an audiobook format. I do not know when. It'll probably be around that time. But make sure you're following me on Instagram and Twitter so you don't miss out. All right? So yeah, anyways, Garrett Watts just came back after months and months and months of being gone. And I might do a follow-up video because some of you found my channel from an old Garrett Watts video I did when he was getting help for his hoarding and everything like that. And we're talking about accountability and depression and everything. So I might make a follow-up video to talk about just kind of the depression aspect of this whole thing. But anyways, in this video, I just want to talk about, you know, what we can learn from Garrett Watts actual video. So those of you who haven't watched it yet, that will be linked down below as well. But check it out.  And I'm glad he's back. As always, I hope he starts uploading more again. But anyways, first thing I want to talk about before I jump in to show him some clips and everything like that is talking about the importance of sleep.  But there's a balance. Like for any of you out there who are struggling with depression, sleep. All right? Make sure you are getting your seven to eight hours of sleep. Like did you know? Did you know? So one of the scales that they use to measure depression is called the Hamilton scale. Okay? So this scale, you know, there's plus and minus and everything like that. And there's certain things that you could do that will move you up or down that scale. So antidepressant medications on average move you about one and a half points in a positive direction on a Hamilton scale. Okay? So pharmaceuticals move you one and a half points on the Hamilton scale. Do you know how much sleep moves you on the Hamilton scale? Four freaking points, baby. All right? So get your sleep under control. If you can start getting your sleep under control, you will begin to feel less depressed. All right? It is just science, baby.  Like a code of conduct. If you're going to start doing this. Do not touch your phone for the first hour of being awake. Go outside every morning. You get the sun. You get the oxygen. And there's something about like melatonin or skin or something. I don't know. But they say it's good. All right. So that clip right there. That clip, yes. Absolutely. Like being outside will help you with your sleep. So there's an excellent book as well as a workbook that goes along with it. It's called the Upward Spiral. If you're into like neuroscience and everything like that and want to learn how to get out of your own depression, like pick up this book. I'm currently working out of the workbook that recently came out. I'll link those down in the description below. But anyways, like if you struggle with getting sleep, like go outside. Go outside at least once a day. Like take a walk around the block. Or like Gary does later in this video. Like go outside. Do some gardening, right? Maybe you like read books or something. Do it outside. Because what happens is when you get natural sunlight, when you get that exposure to the sun, your body creates natural melatonin. All right, so melatonin isn't just those little pills that you can take. Melatonin is a chemical that the body actually creates. So when the sun goes down and starts to be nighttime, it's easier for you to fall asleep. So if you're somebody who struggles with insomnia, go outside at least once a day.  So if you could do one thing a day, go for a little walk, maybe around the block or maybe just like down to the coffee shop, down the street. Rule two, accomplish one thing a day. That's it. Why so simple? Why not more ambitious? Because really ambitious isn't in my nature. And secondly, because I trust the new genie. So that's it. Two things. Wake up at five a.m., get one thing down a day. And then at the end of the five days, I'll reveal if it was life changing. So let's start day one right now. So that clip right there kind of ties in with what I was just saying. Yes, I absolutely love this idea. Like one thing a day, like anybody out there who struggles with depression, I cannot tell you the importance of this. Find one thing a day that will help you, right? Something that is productive, okay? And for some people who are struggling with depression, maybe that's just getting out of the bed and taking a shower, right? Like on my website, I just wrote a blog post about like if you're depressed, bathe every day. And I just discussed, you know, getting one goal done, getting something done, all right? And taking care of yourself is one of the biggest things, right? But find one thing. So I absolutely love how Garrett talked about that. Like in this video, I think this is something that everybody should do. Like right now, if you're watching this video, pause this video and think of one thing that you could do. No, no, no, no, no, no, no, no, no, no, no. Leave a comment down below. Let me know one thing, one thing you want to do a day to accomplish. So something else that's in that book, Upward Spiral, is when you set specific goals and you accomplish them, that will also help create serotonin in your brain, which will help to lessen your depression. So find one thing a day, all right? Whether it's cleaning the house, whether it's taking a shower, whether it's brushing your teeth, whether it's like whatever it is, hanging out with a friend, calling your friend, whatever it is, find one thing a day that you could do and let me know what it is down in the comments below.    Here's a reenactment of the hellscape of a sound that I wake up to when I do this. Oh, could I relate to this? Okay, so Gary's whole thing about setting all these clocks, like just real quick story and some of you who are in recovery from addiction, you might be able to relate to this. So like my substances of choice were alcohol and prescription pain pills. But one of the things was I would just sleep through alarm. So something I had to start doing was kind of like what Garrett did in this video. Like just so I can like, you know, get to work and stuff. I would set multiple alarms and everything like that. But now I've been sober for coming up on seven years next week. And on my phone, when I have to wake up in the morning, like I still set like my alarm to go off every 10 minutes, all right? And if I have something extremely important to do, well, now me and my beautiful girlfriend live together. But before that, I would like half people call me and I'd have my ringer on and everything like that. So yeah, do what you gotta do to wake up if you're a deep sleeper. Okay, this is dead and this is why. Because this is loose. This one is worn out and I didn't know.  You wanna know what I was gonna do today? You know what, this is fitting. This is fitting.  Now, as far as that clip is this, like, so in my book, Rewiring Your Anxiety, I have a few sections already where I talk about the benefits of having anxiety, all right? So like, something that we have to do if you're trying to set up a routine like this is like triple check. Like triple check, make sure things are plugged in, make sure things are charged. Like I always mess around with Tristan because like she lets her phone get down to like the red all the time.  But like, if you wanna lessen your anxiety, like triple check some things, okay? Sometimes what I do when it comes to alarms, just to make sure it's gonna work, I set it for like a minute from now, just to make sure before I fall asleep that everything is like functioning correctly. Oh wow, cute. Hey, good morning. I slept in a little bit today. Just a touch. It's 6.38, which, hello. But you know what? Okay, come on, come on. Considering how day two went. Okay, so, sorry. Today, what am I doing? So for those of you who didn't know, I am now a certified life coach and something that I try to teach people when they're working on goals or even their mental health or whatever it is, is accountability, right? So when we're talking about goals, we have to ask like, how are you going to keep yourself accountable? Okay, now for some people, you can keep yourself accountable. But like in this instance where Garrett, you know, he slept in and things like that, like I would recommend to a person like, okay, well, your accountability for yourself isn't really working anymore. You need to bring somebody else in on this. So all this could be is like, what I usually recommend to people is find somebody else who's trying to accomplish a goal and just say, yo, do you want to be accountability buddies, right? And then you just check in. Every day you just check in with each other. And, you know, like for example, let's say it was Andrew in Garrett's case. Andrew would just message him, you know, that day and say, yo, did you wake up on time today? And then you say, no, yeah, whatever it is, right? Because sometimes we need more accountability because we can't trust ourselves to do the thing that we set out to do. So get yourself an accountability buddy. You know, you really should get your car checked out when that lights on there. That could be dangerous. Yeah, it's gonna be good. Real quick, I just thought this was funny. So I worked in the car service industry for about six or seven years and I always had people coming in with that light. All right, so that little yellow light with the exclamation point, that is a tire pressure warning light, all right? So always remember, your tires are kind of like hot air balloons, okay? When they get hot, they expand a little bit. But when the temperature changes, they actually lose a little bit of air. And it is a law that all vehicles, like after I think like 2003 or 2004, have to have these annoying little tire pressure sensors. And they can be very, very sensitive because you don't want to get a flat baby. So anyways, just do that.  Garrett, you're welcome. You need some air. Oh my God, I'm so late.  Wow, wow. Okay, I can, I never honk but I had to because you won't move. Now, the last thing I want to talk about, okay. So if anybody out there struggles with anxiety, one of the biggest tips that I can give any of you. And it's something I'm gonna write about in the book as well, but something that helped me the most is quit causing your own anxiety, okay. Like Garrett rushing because he's about to go on a two week trip to Japan, right. And he's like trying to get a sleep schedule set and he has an early flight and everything like that. Like do that the day before, okay. Because then you see he's like rushing to the airport which can also, you know, you might get a speeding ticket, right.  So whatever it was actually the day before that, that's when he was doing the gardening, right. Yeah, he was doing the gardening. So in that instance, it's time to kind of prioritize things, right. Because sometimes, and this isn't a knock at Garrett, all right. There's just a little tough love for everybody out there. Sometimes being an adult is about doing what we need to do and not what we want to do. So in that specific scenario, I would have been like, all right, I want to do the gardening today but I need to do the packing, all right. Because missing an international flight is absolutely no fun at all. Like my first international flight that I went on, my boss actually missed the flight for a similar reason. So anyways, like make sure you handle things, like give yourself plenty of time. Like again, we cause a lot of our own anxiety. Like if you get anxious about being late, leave early, okay. Like I do my best to try to leave early places. So that way if I hit traffic, if anything happens, like it's not going to affect me. And then like what it helps me out with is like it helps me out with my anxiety. It helps me out with my road rage. Like if I'm stuck in traffic and people are kind of driving like jerks but I have plenty of time, it does not bother me.  You know what I mean? So give yourself plenty of time, especially, especially when it comes to getting to the airport, baby. All right, but anyways, again, let me know down in the comments below, what is one thing, what is one goal that you want to set yourself for yourself each day for, I don't know, the next week, the next month. That's something I wish Garrett would have talked about. It's like, is he going to continue that at least, right? But anyways, let me know down in the comments below, what is something small and simple that you think you can accomplish on a daily basis? Let's have a conversation down in the comments below. All right, but anyways, make sure you stay tuned because I will be doing another video talking a little bit about consistency and depression and some things like that in the aspect of, you know, Garrett Watts coming and going and all those kinds of things. So stay tuned. But anyways, that's all I got for this video. If you liked this video, please give it a thumbs up. If you're new, make sure you subscribe and ring that notification bell because I make a ton of videos. And don't forget to follow me on Instagram and Twitter where I just posted about the presale going on for Rewire Your Anxiety, which is also linked down in the description below and in the pinned comment, all right? And a huge, huge thank you to everybody supporting the channel over on Patreon. You are all amazing. And don't forget, if you're a patron, you get free copies of all my books. All right, thanks again for watching. I'll see you next time.


The Husky Boat 3, the Chargers this half. Grace Ryan, the first team in the 7th. Zachary and the line, fourth against the Thunder this half. The Thunder this half, for the Henry and the Huskies. The first team in the line, she'll be done with us.


Hey what's up guys welcome to our trending reviews so today I'm pretty excited I've got a brand new Android tablet that literally just came out last week this is the Matrix Pad Z4 it's from a company called Venkyo and I'm going to give you an unboxing a product overview and then obviously a little bit of a demo with some of the capabilities in playing games watching video and even reading ebooks so this comes in at just less than 95 pounds it's such a bargain it's under a hundred dollars in the US so if you wanted to get a very high-end Android tablet with great capabilities at such a cheap price then this should be the one you'd be checking out so let's just get straight into it all right getting straight into it it's a 10.1 inch tablet which runs Android 9.0 pi and it also has a 1280 by 800 IPS LCD display it also comes with this nice matte black finish with the Venkyo logo at the back and it also has two speakers on the bottom left and right of the back side of the tablet now inside the tablet it comes with two gigabytes of RAM and it also has a 64 bit quad core CPU and also comes with 32 gigabytes of ROM now in terms of the battery life it has a very decent 4500 milliamp hour battery which is comparable to things like the Samsung s10 plus which is a very flagship phone so that will give you around eight hours of usage depending on how much videos and games you're playing but day-to-day usage you should average about eight hours and it gives you a full charge within three hours of charging it you immediately notice that there's only one side of the tablet which has the ports and buttons and none of the others so we have a micro USB charging port a micro SD card slot where you can expand storage of up to 128 gigabytes you also have a headphone jack which is always nice and then the standard volume and power buttons it also comes with an 8 megapixel rear camera and a 2 megapixel front camera which you probably wouldn't use for taking selfies but more for short video conferences with apps such as Google Hangouts or Skype here are some sample photos I've taken with this camera around the office now let's dive straight into the tablet and take a look at some of the general usage of playing games and watching videos and maybe reading ebooks if you want to compare this to something like the Amazon Kindle in the box you will find the tablet the charging cable the wall outlet plug and the user guide so very straightforward items come with it and there are no additional accessories such as headphones or anything like that okay so let's take a look at the general usage so I've just logged in now as you can see the swiping gestures they're pretty normal if I go into settings I can scroll through so you may be very familiar with Android 9.0 if you have a smartphone running the same OS so this is basically going to be a demo of three different things reading books watching videos and playing games so if I start off by opening google books then I have a book here called a stranger in town so as you can see much like the Kindle you can swipe through so very fluid as you can see there's not too much lag or anything and I'm pretty much doing this in real time so the pages are not lagging behind so the two gigabytes of RAM is playing up pretty well when reading books especially so if I try and swipe faster obviously depending on your internet connection it will take a few seconds maybe to load the page but as you can see it didn't take that long it was pretty instant maybe one second or maximum two seconds so pretty happy with that that's done a very good job so reading books I think it's really good in daytime you'd be able to just keep the brightness at full and you will see the pages quite clearly so there's some really cool options in here the navigation bar along the bottom here as well that gives you quick access to things like the volume and taking a screenshot of the page you're on so if I press that camera icon there it will take a screenshot of the viewport there and you can just share it edit or delete so if I go back that is basically google playbooks all right so next let's take a look at youtube videos and see how that plays so let's open it up and let's go into my trending reviews channel so loaded pretty quickly I have this short cinematic film that I shot recently so let's go ahead and play that and try to hear the audio as well to see the quality in the sound coming from the speakers so I'll make this full screen there we go let's just hold it up a little bit hopefully that gives you an example of actually how smooth it plays back you can see there's no buffering it does a great job just loading the video straight away and playing it back without any problems so youtube I guess netflix will be the same as well so videos if you're going on some long journeys or flights or you're traveling then this is really great to take with you and watch some tv shows movies or even youtube so if you have any videos on the micro sd card then directly you will be able to play it back smoothly without any problems because this is using an internet connection and it still plays it very well so this is one of the games I've downloaded so hopefully it will give you an idea of actually how smooth it functions so let's go ahead I will turn the volume down slightly so swiping gestures so far so good there's no real lag or any problems buffering I think the quality still looks quite good okay so let's play something with a little bit more graphics power so this is temple run 2 so I'll be judging to see if this is smooth as it is with your phone so far seems to be going quite well it's got good response time so I'm going to go ahead and play so the graphics still look good the gestures are not lagging so the swiping gestures are not delayed as you can see if they were delayed then you'd be pretty bad at this game so for me this looks like a very good alternative to buying a expensive flagship android tablet so if I was to recommend you to play games on journeys or commutes or anything like that then I would definitely recommend this tablet because it's doing a great job so no lag it does for gaming I would definitely recommend this in terms of performance I think this is doing a very good job even if you have some kids or nieces or nephews that really want to play games on the tablet this is definitely the way to go because for the price you can't get any better than this I hope that was useful for you guys so if you'd like to take a look at more information and if you actually like to buy one then I have the links in the description below of where you can purchase it from Amazon in the UK the US and also Canada and if there's any other things you'd like me to test on this tablet then do drop a comment to me below as well I appreciate you watching I hope you like this I hope you subscribe I've got a lot more videos coming up for some really cool tech gadgets and I will catch you guys very soon take care


All right, time to get started. I'm Tom. I'm the community engineer for Cloud Zero. And I'm going to be talking about iterative security, secrets management, when you're not yet ready for vault. Two things I really want to get across in this presentation today, and they're actually not about secrets management. They're, how do I decompose security problems and solve them systematically? And how do I solve system problems given the constraints of time complexity and risk? Not letting perfect be the enemy of the good. So I created this presentation originally based on a blog post I had written. And what I found when discussing online was people are actually very happy about seeing a simpler alternative than much harder systems like Vault or, say, Conjure and Conjure. Both very good, but they weren't at that level of sophistication yet. They weren't ready for that. And they were happy to be able to just move a little bit forward. And so what I ended up realizing was the value of that blog post and this presentation wasn't actually secrets management. It was, again, my approach to solving this sort of problem that so many of us face. So who is this guy up here? You've already heard the dramatic reading of me. Again, I'm Tom Glachlan, community engineer at Cloud Zero. That's one of my cats, Nutmeg. We were at the speaker dinner yesterday. I got a text from my girlfriend letting me know that, for some reason, the cat saw the oven open and wanted to go exploring and nearly jumped in it. That is also the one of our two that we considered to be the smarter cat. So Cloud Zero, we're an early stage startup focusing on cloud reliability optimization. And so our work centers around creating systems that fail less and then ultimately recovering faster when they do fail. We're also using AWS serverless architecture to build our product. So if you're interested in either of those two topics, come talk to me afterwards. I'm a former full-time ops engineer. I spent most of my time working on automation. I have a lot of pointed views about Puppet and how to do automation correctly. Today, community engineer, my job is to engage with the audience and ultimately learn more from all you folks. I've started adding this few slides into my presentations because I feel that if you understand how I view problems and what's important to me, you can understand why I've come to particular conclusions that I've made. I don't believe most technical arguments are actually objective or even technical at all. They're really disagreements over the problem to be solved and the sort of subjective weighing of pros and cons to the different solutions proposed. So yep, there we go. I like startups. I think they're frustrating and a total clown show. But I also think they're really freaking fun. They operate very differently than your average organization. And I've found that they actually, it works pretty well for me. It also means that my problems tend to be a lot smaller in scale than most people. I don't have Google, Facebook, or Netflix-sized problems. I don't want to be solving those problems. I'm usually dealing with the first iteration of a solution towards solving a problem at my company. So what I also do, my engineering is typically geared more towards company survival than absolute correctness. I don't have time to always be perfect. And we're going to come back later on down the road and kind of fill in the gaps of everything that we're doing now. Again, I just want to make continuous forward progress in anything that I'm working on. Engineering is just a title to me. I really just show up to solve problems and contribute some sort of value. It just happens that the majority of the way I solve problems is through engineering. If I need to use different skills, if I need to think a little bit more creatively, I'm going to use that. I love this cartoon up there. Because if Thanos can't use Majolner to hit Thor, he's just going to use Thor to hit Majolner repeatedly. So, OK, let's get started here. I have lots of work to do. Who here has lots of work to do, OK? Some of you, wow. I have lots of work to do, and I have limited time or resources to be able to do everything. What do I need to be doing? I need to be keeping the site up. I need to make sure it's performing. I need to make sure that developers are delivering features. Security is just one of those things in the many parts of my wheelhouse. And secrets management, these are complicated systems to understand. And for any of us, this actually ends up as a reality. If you take a close look in there, you will see a database user name and password that was living in code.  But person, your friend right next to you may well be dealing with this right now. I see a few heads nodding. I have totally been there. I have totally been in situations where I've been looking at code and realizing, oh, wow, all these, we have passwords here. We have API tokens all here. They're literally just sitting in Git in our code. And so we have all this technology. But why does this problem still exist for us? Why do we still have people taking passwords and tokens et cetera and putting them in code when we know we're just not supposed to be doing that? And I think much of the reason is this is how we present security today. There's no in between. You're secure, you're not secure, and there's a ton of assumed knowledge between points A and B. And all this leads to security paralysis. We don't have a clue what to do. We don't have a clue how to get from point A to B. Given eight other choices of priority, we're going to shift our focus towards the things we can actually accomplish. We're rewarded at work for actually accomplishing things. We're not rewarded for trying, struggling, and totally failing. And so long as a disaster doesn't strike, no one's the wiser. So we can just sometimes pretend that everything's fine. It's all good. Some of the things that you all are responsible for is ops folks, access controls. How much is too much access? Password policies. How often should I rotate passwords? Oh, yeah, great. NIST actually decided to change that. They have a new recommendation. Don't force rotation. Awesome. Patching. How often should I patch? How fast should I patch? I just patch every single night. Just ship it to production. Or should I have some sort of patching and testing cadence? And with all those questions in mind, this is basically what you're left with. Good luck. We're all counting on you. Keep everything secure. And we're going to blame you if something fails. We've put this in your hands. Now it's up to you to figure it out. Awesome. So one thing I want to be up here and be clear is I don't speak as a security expert. I'm an ops person who has been tasked with having to secure my environment in some way over time. And I had to learn how to better secure the environments that I've worked in. So what we're going to discuss is what I call iterative security. Its approach kind of falls in line very well with the approach I take towards startup engineering. We're just going to start gradually getting improving our environment over time. We're going to start with lower hanging fruit. We're going to start with a simpler solution. And as we develop immaturity, we can work towards more sophisticated goals. So why is security, again, so hard for us thinking back to that owl? Well, one thing is we get very distracted by shiny objects in the security world. What are some of them? Zero days. Nobody expects them. You show up one day. You roll into work. You're all set to do something. And next thing you know, some zero day comes out. And great. There goes my day. This is what I have to focus on. Hash collisions and other assorted cryptographic weaknesses shattered where two different files that produce identical SHA-1s. I saw people wondering if the Linux Git repo was going to be poisoned via this method. The government, the government can hack things. The government can do all sorts of stuff. They stockpile exploits. They treat cyber as its own battlefield. Logos. These are all the cool things that we roll in. We're sitting there on Twitter, Ron Slack, Ron IRC. And these are the sort of things that people are discussing. Awesome. Cool. And here are the things we don't really get excited about. Patching. This is my obligatory Equifax slide because it's simply topical right now. I am not looking to name and shame any companies or employees. What I really just want to point out is how such a mundane thing can lead to such a massive failure. And I don't like calling patching simple. It's not. Not every system can be patched. And not every organization actually makes patching that easy. Not leaving MongoDB exposed to the internet with weak credentials. There was a ransomware attack earlier in this year. Automated worm. That was, yep, I see you putting your head down. Publicly exposed MongoDB systems with weak credentials just sitting there out in the internet and a worm traveling and no credentials. Thank you. No credentials on the internet. Any worm that was going around and again, taking them over and Bitcoin rancining them. And then from there we went to not leaving Elasticsearch exposed on the internet with weak credentials. A few weeks later, the same damn thing happening again. They just changed their target. And then finally, actually learning from our mistakes after Elasticsearch, MySQL started being targeted. And I just decided to proactively warn the Postgres community that they were going to be next. No one's paying attention. And this was early this year. All these systems was over the span of three months. Every time people finally got around to fixing one problem, they just said, OK, we'll just target the next problem. So for many of us, we focus on the wrong things. We get too caught up about whether or not we can protect ourselves from the NSA. And we look at that little red exclamation point in the top saying we have updates. And we go, yeah, we'll get that eventually. Be clear, some of you do have legitimate reasons to worry about zero days and logo of the month. But many of us are not exactly taking care of the basics. And we should really be taking less time worrying about advanced persistent threats and more time actually securing our databases, our open S3 buckets, and so forth. So back to the owl.  We don't do a very good job, again, of explaining how you get from point A to point B. We leave it up to you. And what we should be doing is actually teaching how to systematically assess risk and improve incrementally. Where do you start? How do you progress? What should your security posture ultimately look at at the end? Are you just an owl head?  What should your posture be? And you can find information that works on my machine. And then you can find information about developed by companies with ops teams many times larger who decided to half-reimplement Kerberos and open source it. OK? There's not a lot of in-between information. OK? Most of us are in the middle. And particularly towards the left, like I've just gotten off my machine, there isn't a lot of information out there. We focus on these much more sophisticated solutions. But again, many of us are not yet are capable of that sophistication. So we know not to put passwords, API keys, tokens, et cetera into code. And it still happens. OK? So we're going to solve this problem like it's an actual problem at work. And what we're going to do is we're going to develop a threat model for a hypothetical system. If you're paying attention to like nothing else in this presentation, pay attention to the next few slides. Like this is the meat, this is the stuff that you will actually learn something, and you can apply after you leave this. So again, we're going to start by identifying and assessing some sort of security threats within our environment. First, we're going to be realistic when we create our threat model, OK?   If you're a dating app, you should probably be less worried about China and Russia and more about employees, whether they're current or ex, automated attacks, or even like, what is your API exposing about its users to other people? Be realistic about damage potential if every single issue means your company is going to go out of business, you're not going to get anything done. Everything is a priority one done. Maybe you prioritize risk with financial penalties over things that are just kind of embarrassing, OK? So ask yourself, how well can you defend yourself against the person dropping USB sticks in your parking lot versus the man in the ceiling? And assess and rank damage appropriately. Companies survive being breached, OK? This is a fact of life. It's not a license to do nothing, but it means you can work at continuously improving. You don't have to start at completely secure. And originally, I was going to put logos of different companies that have been breached. I'm really against naming and shaming, so I took all those off. And so I'll leave it as a thought exercise to you. Name a bunch of companies where you've heard, where you understand that they had a data breach. And then ask yourself, do you still shop there? Do you still use their services? So I'll leave it all up to you. So we're going to start by identifying what we actually have to protect in our organization. That is our first step. We have intellectual property. We have customer data, the sort of data about our customers that we have. We have, in some cases, customers data. We have data from our customers that we collect. That is valuable to an attacker, even if they just want to actually attack that customer. Try and figure out next what you have to work with. Do you actually know what your environment looks like? OK, good, it is playing. Do you have a way of actually finding everything in your environment? Do you? All it takes is that one loan system you've kind of forgotten about into institutional memory that that's going to cause a really bad day for you. Also, I really like this graphic because if you watch a lot of the balls move around, you'll see all these complicated maneuvers they go through. And at the end, the ball just explodes or disintegrates. And you're just like, it went through all that work to literally produce no value at all. It's a metaphor for some organizations. So once you have an idea of what you're actually working with, it's time to start decomposing your system. Map out system boundaries and data flows. And what I have here is a nice hypothetical system. I don't want to fall off here. We have customers, they have agents, and they are sending data. It's going through an ELB. We have our ingestion service. The ingestion service, in turn, takes these events, drops them off to RabbitMQ. Consumers pick them up, and they write to RDS. Come all the way over to here. You have your users. Again, they're going through an ELB to our front end host. They want to know about the data that we've actually been collecting from them. And so again, they query a back end service, again, querying RDS where we've just been writing to. Next, we're going to take a look at the perimeters of this system. So what we have is we have our agents. They're sitting at customers. They are connecting to our system. We generate an API key when these hosts are registered. So that's their form of authentication. This link right here, we're using encryption. There is no direct access to our ingestion host. We protected that via our network configuration with VPCs and security groups. Going over again to this side, similar situation. We have users. They log in with a username and password. We're encrypted. Again, it's an encrypted connection. We go through load balancer. Again, no direct access to our front end app. And hey, we're even actually doing some sort of user input sanitization to prevent things like SQL injection attacks. We're making sure that when this person is trying to actually access their data, they're not doing it like little Bobby drop tables or something like that. So now we come to another point. Yeah. We ingest data from clients. We send it to RabbitMQ. And then a consumer picks it up and puts into RDS. RabbitMQ requires some form of authentication. How are we managing passwords? Not a clue, OK? Again, maybe they're living in code. Here's a problem in our system that we have actually identified. Getting access to RabbitMQ, that lets an attacker take a look at our customer data in real time. Moving over further in the pipeline, we have RDS again, where we write our event data to. And when we have the back end service that wants to fetch this event data, RDS, passwords, we're not sure how we're managing them. And here, this is actually really even more valuable. This is like the crown jewels. This is our customer's data over time. You get access to this. You can look through what our customers have actually been doing. So we've identified a few threats, some of which we feel are addressed, some of which not. At the network layer, exposed network ports, no, we actually feel pretty good that our VPCs and security group configuration is actually pretty good. Patching EC2 instances, the host layer, not actually sure how we're taking care of that. That's another presentation for a different day. We've identified weak secrets management as an issue. And users submitted data, we think we're actually handing again this pretty well. So time now to document our threat. What is our problem? We have weak password management within our environment. At two points, our infrastructure, we're not managing passwords. Both points, there's highly valuable assets. And a breach would be pretty bad for us. We have reputation loss, which leads to customer loss. We have data that could actually be leveraged against one of our own customers. So now it's time to rate this threat. So risk. Risk is probability times damage potential. That's the most simple way of actually thinking about what the risk of a threat is. Again, be realistic on this. We think sophisticated attackers might be after us. But again, it's probably current or former employees for most of us, automated attacks, some kid in Eastern Europe, et cetera. So to make rating easier and a little bit less, a little bit more precise and stop these subjective arguments, there are rating frameworks. This particular one is called DRED. And it makes it easier for us again to just agree on what the real risks are in our environment. So DRED is damage potential, reproducibility, exploitability, affected users, and discoverability. And each one of these, we can rank them high, medium, and low. And we can generate a score based on that. And then we can stack rank these scores against each other and figure out what needs to be taken care of first. So here's how I rated our secrets management risk. Damage potential. Yeah, this is pretty damaging. This is definitely a high issue. Somebody gets access to this. Again, it's something that they can use against. We lose customers. They can use it against our customers' reproducibility. If you have our user names and passwords, you're going to be kind of coming and going as you please.  Exploitability. It's somewhat easy to exploit. If you can get access to the code, you can figure out what to do. But it requires some sort of existing access. You're probably already in the network somewhere, and you're just doing a lateral movement now. So I kind of ranked that medium, figuring that it's not an outside attacker. It requires some sort of existing access. So it's not immediately easy to exploit. Affected users. Again, this is our database of all our events. It's all our users. This affects all our users. High. And discoverability. Again, it's a few hops away from an outside user. So it's not exactly easy to find. So for that reason, I decided to rank that as a medium. And so finally, OK, we're going to put this into action and actually clear up this issue we have with secrets management. So constraints, OK? We're going to impose some constraints on the solutions that we're going to deliver. In particular, time. How long is it going to take us to actually implement the solution? Complexity. How hard is it to actually do this? How well do we understand what we're implementing? Operational risk. What happens when it fails? And these are all normal constraints that we should be weighing with every single technical decision that we make. So a few of these slides are just from some of the discussions I had around the original blog posts. And these are the discussions that actually made me realize the importance of covering what to do when you can't be perfect and ultimately create this presentation. So time, something we all wish we had more of. Realistically, most of our work has to be time box. We don't have forever to work on a solution. And so in that conversation, somebody was asked, why don't you take your time to just implement the best solution? Why create some sort of technical debt? And the person was just straight up honest. I have nine other priorities. This is literally not the most important thing for me to do right now.  That again, recognizing that we have multiple priorities is just something that we have to recognize when every decision we make. Complexity. The devil is in the details. The person said, why not use vault? It looks simple. I mean, I just deploy it. And it's like, OK, well, how are you going to handle the master encryption shards? Where are they stored? Who has access to them? What are your storage at back ends going to be? How will you do authentication? These are questions you actually need to answer. You can't just sit there and say, I deploy this. Awesome. And then risk of failure. This was my favorite. It's all code. We monitor it using Nagios, OK? Boom, done, nailed it, OK? And I'll just let that comment speak for itself. I won't say I haven't done that before, but it's not something you should probably be doing if you can avoid that. So the constraints we've established here, starting, time, I want to get something done in a few days to a few weeks, OK? The faster we can get this done, the more likely we'll actually finish the work. Complexity. We're going to go with what we know. We're going to take less surprises. We have less to learn, less to get wrong. Risk. We're going to take only as much risk as we're ready for. We're moving fast. Personally, I want to limit the failure blast radius when something goes wrong. And so finally, secrets management, some approaches to actually getting you started when you're not ready for vault. So get crypt. Really super simple, OK? Encrypt secrets directly in your repository. Go through your code, audit it, find your secrets, rotate them, and store them. Pro, you've actually audited your code. You're like a step ahead of many people, actually, having done that. Cons, you have symmetric encryption, you have to worry about the master key, master key proliferation, et cetera. Your to-do is pretty much to prevent key proliferation and throw this out. But again, it's a build, satisfy your immediate needs, and throw it away later. You were at the worst point possible. You've at least started now improving. Configuration management systems. Let's start with Puppet. You have higher EML. Encrypt values directly into your higher hierarchy. You can use public key encryption. You have multiple back ends. I personally used it. I loved it. Pros, centralized. Everything is now living it. You have now at least coalesced everything into one repo. You have public key encryption support that is useful. Cons, may require manual intervention when rolling puppet masters. I ran into that issue. You may need to clean up your puppet code if you haven't already moved to Hyra. And now you're thinking, what? Puppet 5 is already out. And they've been telling us to use Hyra for years. There's probably several people in here still using Puppet 2.7. There was a puppet installation from about six years ago that you still know is in existence and in use. Your to-do, one of the issues I had written down the last time I'd done this was figuring out a master re-keying strategy in case we had to roll everything quickly. Ansible vault encrypts entire var files in your playbook. This actually ends up being a little bit just like getCrypt. You've done the exercise of at least auditing your code. You still have to deal with symmetric encryption. Everyone needs the shared password. You have key proliferation issues. And your to-do is really, you know, preventing the proliferation of the vault key and what do you do about re-keying and rolling secrets? S3 buckets. I found this when I was researching this. Sneaker encrypts store and retrieves secrets from S3. Awesome. Secrets no longer living in our repos at least, okay? We've gotten them out of GitHub. We've reduced our secret proliferation. Cons, how are you managing your S3 buckets, okay? Anybody here before you really adopted cloud formation and Terraform was S3 just kind of the wild west of just people creating buckets and so forth?  Yep, it's true. So you're probably gonna have to adopt some sort of management strategy for your S3 buckets. You need to make sure who actually had, who actually has access to these buckets and only should those entities have access to those buckets. So again, this might be something where it sounds great but you actually have to handle now configuration management of your AWS resources before you can even do it. And so okay, what should we have gotten out of all this? Me up here ranting and waving my arms and stuff? What should we have gotten? What? Logos, yes, logos and zero days, just forget everything. So less focusing on shiny objects, like that's a really sweet car and I'm sure it's fast but it's also on fire, okay? And more of this, we can manage this.  So all right, nothing I have talked about here is particularly earth shattering, none of that technology. What is important, again, develop a plan, take incremental forward progress and finally thank you. And if you like this, I have a feedback form, stray cat slash feedback, S-T-R-A-T-C dot A-T slash feedback. Let me know what you thought of the presentation, what you thought of me, give me suggestions, awesome. Thank you.


Thunder only happens when it's raining Thunder only happens when it's raining Bins when it's raining Bins when it's raining Bins when it's raining


The Columbia Police Department appreciates that your time is priceless. You work hard to take care of your home, family, and possessions. And that's why we like to remind you of a few safety tips to keep your valuables out of the hands of would-be criminals. These are some simple steps that are even easier to remember every day. Step one, lock your vehicle, even if it's parked in your driveway. Step two, don't leave keys in ignition and no idling. Don't hide extra keys inside your vehicle, either. Don't leave valuables in plain view. Lock them inside the trunk or beddy-ad, take them inside your home for safe keeping. And perhaps, most importantly, do not leave your firearm loaded or unloaded inside your vehicle. Here in the city of Columbia, there's a high percentage of firearm stolen from cars that are subsequently used to commit a crime. Step four, if your budget allows, consider anti-theft security devices such as alarms. And don't forget, if you live in the city, call us and report an auto-breaking or a theft in your vehicle. Let us know about surveillance video if you have any. Documenting crimes can help us solve crimes. So spread these tips to your friends and family and remember, criminals search for opportunities. So don't give them an open invitation to make their property. Follow us on social media at Columbia PDSC for more safety tips and valuable information.