Good afternoon. Hopefully, everyone had a nice lunch. We're starting to roll in a little bit, and it's about time to get started for our next session. My name is Brian Payne. I'm from Nebula, and I'll be here to talk to you today about security and private clouds. So really, the premise of this talk is to think a little bit about why security matters in a private cloud.  I've had a lot of conversations, even with security minded folks, that say, well, in a public cloud, it makes sense. It's on the internet. You have a lot of security concerns that you need to be thinking about. But in a private cloud, it's behind your firewall. Maybe it's in a dev center somewhere, and perhaps it just doesn't matter so much. And so today, we'll talk through what a private cloud is, what it looks like, and why, in many cases, security does matter very deeply in a private cloud. I say, in many cases, because I can certainly imagine various private cloud deployments where maybe security is not the topmost on your mind, and that's OK. But the important thing is to recognize when it should matter so that you can do the right things about it to make it better. So let's dig a little deeper. If we look at how NIST defines public and private clouds, it's pretty simple. A public cloud is effectively accessible to anyone. In fact, what they say is it's provisioned for open use by the general public. Typically today, what that means is you have a credit card, and you can provide that to your cloud provider. And in return, they will provide you some instances. A private cloud, NIST says it's provisioned for exclusive use by a single organization. So in this case, you might be a member of a company, and therefore you can use the cloud. You might be a member of a nonprofit or some club, or you might just deploy a private cloud at your house because you have a need for a lot of computing resources. These are all examples of private clouds. The problem with the NIST definition, I think it's correct, and it's a nice, very high-level view of it, but it sort of doesn't get into what does this very high-level difference mean in terms of how these clouds actually get deployed and how they might look different behind the scenes. So let's talk about that a little bit today. Excuse me. OK. So first off, some private clouds can look a lot like public clouds. There's no doubt about that. So you could imagine a private cloud set up for a company. You can hang it off the internet, and you could access that resource just like any public clouds, with the only difference being that you're accessing it because you're a member of that organization. That's perfectly fine, and you could even do that private cloud in a complete and total vacuum so that it's not connected to any other corporate resources or anything like that. It's just a cloud that the company members can use. And in that case, your security concerns are, in fact, pretty much exactly the same as that of a public cloud because from a technology standpoint, presenting a public cloud is just limited in who can use it. A lot of private clouds are different, though. A lot of private clouds are deployed within a company or within some sort of existing network. The cloud probably isn't the very first piece of IT infrastructure that you brought into this place. You probably have existing things stood up, like DNS infrastructure, PKI, email servers, SIM solutions, NTP servers. It just goes on and on, right? So you have all of this already set up because you've been doing IT for decades. And now, within the confines of this private network, you're going to add a cloud. Is this cloud going to stand by completely separate and isolated from all this infrastructure, or is it going to integrate in with the infrastructure? I would argue that most of the time you're going to want it to integrate in because that's how it actually turns around and adds value to your corporation or to whatever the group is that's deploying it. So what does that look like? Well, if your cloud is integrated in with the email services, maybe it's using those servers to send notifications to the cloud admins when something's going wrong in the cloud. If it's integrated into LDAP, maybe it's using your existing directory to allow people to log into the cloud. In fact, maybe the integration with LDAP goes deeper. Maybe you can write to the LDAP server to create new groups, to allow people to provision groups and projects from the cloud that then propagate through LDAP and get saved there. Maybe use an NTP service just to keep your clocks in sync in the cloud. Maybe you send logs to your corporate logging infrastructure so that you can monitor those and understand when there's problems in the cloud. Maybe you have a DNS service where the cloud can actually modify the DNS so that you can provide DNS as a service. So sometimes people like to spin up instances and provide a name for it. And so that would require the cloud to have a deeper integration with DNS than a typical DNS client would. Similarly for PKI, maybe the cloud is using certificates to provide TLS to protect all the network communications going into the cloud. Maybe the cloud is doing rapid provisioning of certificates and has some sort of provisioning authority through your PKI system. And so it has, again, a stronger relationship with that service than a typical client would. And also with storage, how many of you work at a company where there is some sort of network attack storage, be it a NetApp or something there where you can go drop your files on and come back the next day and they're still there? Probably someone's one or two? I bet there's more than that. You guys are probably still sleeping from lunch. So what I have found is that as people want to deploy clouds into their corporation and to their enterprise, they're seeing that, well, hey, we've already got terabytes, pentabytes of storage that are set up. And we're not going to move that data into the cloud. We just want to connect it so the cloud can use that data as it does its computation. Sometimes those connections, again, become more trusted than a typical client because the cloud will need to talk to the management plane of the storage system. So what happens then is an attacker can actually come in to these systems. And if the cloud isn't set up properly, the attacker could leverage the cloud to do bad things, not just in the cloud, but throughout the enterprise. So going back to something I said in the beginning, I've heard countless times people say in private cloud security, probably doesn't matter so much because you're sitting behind a firewall. So one of the things that this diagram is showing you is that your firewall doesn't really matter. I really hate to tell this to you, but it just doesn't matter. Because what an attacker is going to do is they're going to do some sort of spear phishing campaign where they send an email to someone at your company who has access to the resource inside the network. That person's going to open up the email on their computer. It's going to run some sort of an attack. And from there, they're going to access the cloud. And then from the cloud, they're going to access whatever other resources they want. And all of a sudden, your firewall just doesn't matter anymore. And so if you built everything inside the firewall, thinking with the mindset, well, I've got a firewall. So it doesn't matter, then your services will probably fall down pretty quick. So in this case, I'm showing an attacker launches an attack just like I described. They might go through a desktop or a laptop that's inside your corporate network. They're leveraging that connection to get into the cloud. And because the cloud in this case maybe has a trusted relationship with the directory service, they're able to go in and modify the users or groups inside that directory service. Now they've got access to a lot of resources throughout the company. And they got it because someone deployed a cloud that wasn't set up properly. So what can we do to make this better? We'll get to some of the specific hardening things that we can do in a little bit. But first, I want to step back and look at a, this actually is a diagram that came out of the OpenStack Security Guide, which is a great resource for those of you that aren't aware of it. It's available online for free. And in the beginning of that guide, we talk about threat models and attackers. And this particular diagram was actually drawn by Rob, who's in the back laughing at me right now. It's a great diagram. And so I put it in here. I redrew it so it looked a little prettier, of course. On the bottom, you can see we have script kitties. These are like your really basic people. They don't even know how to code. They just run someone else's attack, right? We go up to individuals that are motivated. More capable groups. They have more resources, more skills. Then you get an organized crime and even the intelligence people, intelligence services. If you look at the width of this triangle at the bottom, you see the likelihood of attack. So how many of you operate a server somewhere? Say like an SSH server. And you actually look at the logs. Cool, hands stayed up. All right, so you've probably seen brute force password attempts, right? Where people are just trying to log into your service. Let's try admin 123. Let's try password, password, all these things. These are script kitties. They're just hitting everything on the entire internet hoping that something works. And they probably do get a certain amount of success. But they're just launching tons of attacks. All the way up to the top, how many of you have seen an intelligence service break into your network? Okay, I see some hands. I'd be curious to talk to you later. These attacks are going to be much less common. But it's very likely that if these attackers are going after you, they will succeed because they do their homework. And so you have everything in between. And so when you're starting to think about the level of security you need, the first step is to think about, well, what's one of these groups am I interested in actually protecting against? From there, you can start to think about, well, what is that group actually able to do? So what I drew here is a simple attack graph. You can actually imagine expanding this to be much richer. But I didn't want to make it so convoluted that you couldn't see it on the slide. So the idea here is you start on the left and you sort of work your way across. The example that I showed earlier started with a compromised user system somewhere within that private network. So that's the upper left there. And then from there, maybe you can access the cloud as either an admin or a user, depending on what sort of level of access that particular computer had when you get onto it. And once you're into the cloud, maybe you can launch an instance and do a VM breakout and find yourself on the control plane. Maybe there's a vulnerability in one of the APIs. And so you can exploit that and, once again, find yourself on the control plane. Maybe there's like a cross-site scripting vulnerability in the dashboard that you can exploit. So there's all sorts of options. Once you actually get into the cloud, then you can do all sorts of things. You can look at instances from other tenants. You can abuse the cloud resources. If you need a botnet, all of a sudden you've got a lot of nodes at your disposal. You can view all the data that's in the cloud, which I apparently have listed twice. The other one is supposed to be to view some of the computation in the cloud. You can leverage the resources that are within that private network. So we talked earlier about how the cloud may have a trusted footing into the private network and to some of those services. So we talked about how you can modify LDAP. But you could also view data on this external data store, like a NAS that's attached to the cloud. If there's VLANs that are going in and out of your cloud and to other portions of your corporation, perhaps you could then just tunnel through those VLANs and end up wherever those networks take you. That could be useful. And you could do spear phishing attacks. If you're already able to send emails through the corporate email server legitimately, well, that makes it much easier for you to send emails that look legit to people to then further your own exploit campaign. So this is just a simple set of ideas. I sat down and sketched this out in a few minutes. If someone really, really wanted to do some damage, you could imagine building out an attack tree like this that has many more nodes. Many more ways in, and just many more opportunities for the attacker. So the trick, as a defender, as a security person, is we want to make sure that the attacker runs into obstacles at each one of these steps along the way. So your cloud might be vulnerable to something that you don't realize, but you want to have a lot of compensating controls in place so that that single vulnerability doesn't allow them to walk through and own your entire cloud, and therefore own your corporate infrastructure as well. So I've been criticized in the past for scaring people about things when I do security talks. And so I'm going to try not too hard to scare you too much today. So I want to let you know that there's some good news out there. And for me, cloud is a really interesting opportunity to do some great security work. And it comes about because of a few basic things that almost anyone that's working in open stack is probably using. The first is orchestration tools. I listed a few of the more common ones up here, but in a sense, it doesn't matter what orchestration tool you're using. I'm not advocating for one or the other. What I'm saying is this allows you to roll out configurations very consistently. It allows you to update your software very consistently. And that's what's really important. If you read a security note that says the default configuration for Keystone had a weakness in it, and you go back and you check your notes and you say, wait, I happen to be using that default configuration. I need to change this. And I need to change it on all 100 of my nodes where I'm running Keystone right now. Well, it would be nice if you had a configuration management system, an orchestration system that lets you make that change, push it out reliably, and know that it's everywhere. It also perhaps would let you go back and audit and make sure that what you expect to be deployed is actually there. The next piece is known hardware and software. If you think about the job of a typical systems administrator, now way back a long time ago, I used to administer some Windows networks and some Linux networks. And I recall one of the pain points being that each of those systems was always a little bit different. You might image your Windows systems with a disk imaging utility like Ghost, and they start out straight out of the IT shop exactly like you expected, and everything's just wonderful. And then like a day later, the users install the browser of their choice. They've customized all these little checkboxes. And before you know it, you have all this divergence. And every system out there is just a little bit different. In some cases, they're quite a bit different. And then a couple years later, you buy a new rollout of different hardware, and someone brings in hardware from another division. Before you know it, like, there's just so much diversity. It's hard to wrap your mind around it all. Typically, when people are rolling out infrastructure for clouds, they have a little more control over what the software looks like when it's installed everywhere. They have a little more control over what the hardware looks like everywhere. Sure, you're gonna see some diversity in time and some evolution, but this knowledge of what's rolled out everywhere is really a security dream. Think about a lot of the classic security tools, like intrusion detection systems. The job of these tools is to look at your system and understand when something is happening that is different from what you would expect. So the more you know about your system, the better you can configure it and the better your results will be as far as determining what's wrong. Similarly, if you look at tools like SE Linux, mandatory access controls, where you put in really fine-grained security policies that say what's allowed to happen on the system, these typically really, really frustrate end users on laptops running Linux because they wanna do all sorts of different things than what the policy creator had in mind. In a cloud, you know what the cloud should be doing. It's running Nova. It's running some sort of networking service. It's running some instances. And you know this in advance and so you can set up policy correctly and expect it to work. So the story here goes that if you have nice orchestration tools, if you know what software you're rolling out, there's some really good opportunities for security. And I'm not saying it's easy, but you can take the time to do it right and it's worthwhile. So what does right look like? This is a somewhat generic picture I put together, sort of inspired from ideas from that OpenStack security guide that I mentioned earlier. The idea here is step one is to make sure that you have separation of concerns. So you have different logical networks. Maybe they're actually different physical networks depending on how you're deploying it. For outside of the cloud, the external, you have a control plane, you have a data plane, you have a guest network. You probably have a lot more than this depending on exactly how you're deploying your systems. And then what you really wanna be focusing on in addition to hardening everything is the bridge points, right? So think about an API service that's running in your cloud. Think about Keystone. So a user from the internet is talking to Keystone in your cloud. That's going from the external network right onto the control plane or the management plane. So that's a bridge. It's going across two different security domains and so you wanna be very careful with what happens there. And so Keystone or any service that runs one of these API endpoints becomes a service that you care about from a security standpoint and you wanna make sure it's implemented properly and it's not vulnerable to attack. Excuse me. Similarly, if you look at where the instances run, there's a boundary there. The instance is running within a hypervisor, say KVM, QMU, ZIN, LXC's, right? LXC's aren't really a hypervisor but it's running in some sort of container or hypervisor and again, it's sitting on a security boundary. So a user can come launch an instance and from there they could do a breakout, they could get onto your control plane and they could do some damage. So thinking about how you separate out these concerns helps you identify where in the cloud you need to be thinking about protecting it. Now I mentioned some of the OpenStack projects but then I also mentioned hypervisors. One thing that's important from a security perspective, I mean I know we're at an OpenStack conference and so we should be thinking about all of the OpenStack pieces but it's also really important to keep in mind that your system, your cloud will not be secure unless you get all the other pieces good too. All of the glue, right? So here we've got the Linux Insta, excuse me. All right, I think I'll make it through this alive. You've got the Linux distribution that you've installed your cloud on. You've got your hypervisor, your messaging queue, your database, you've got all these different pieces that come together to form your cloud and you wanna make sure that they're all installed and secured properly. Interesting side story, when we were writing the security, the OpenStack security guide one of the suggestions that came out of the room from all the authors as we were sort of brainstorming this was that when you're connecting to a database every node that connects to the database should probably use a different username and a different password and if you're provisioning multiple clouds those passwords should be unique across all the different clouds too because this allows you to do really good auditing and all this kind of stuff but then there were some people in the room that said well geez that's exceptionally hard. How do I deploy a database with all these different accounts and manage this and handle all of this? And the answer of course is you go right back to what I was talking about before your orchestration tools and you let them do it for you. So you develop it once and then you let it happen multiple times for free and that's the beauty of it and that's where we can really get some security wins as we deploy these clouds. All right, so digging a little bit deeper we've got these threat actors, right? These bad guys that we talked about before everything from the intelligence services all the way down to the script kitties. We've got all the various ways that they could get into our cloud and we started to think about how can we protect the cloud by breaking us out in different security domains. Now the next piece is to think about what are these guys actually gonna be doing to me and how do I need to protect myself so that they can't do what I showed in the beginning. They can't break into the cloud and then hop around and break into the rest of your enterprise from there and the way that I like to think about this is to start to walk through all the various places that someone could attack you and then think about what do I do to mitigate that. So I've listed some here. This is I think hopefully just big enough that you guys can read it all in the back but I'm gonna walk through some more specific threat things on the next few slides and dive in a little bit deeper to give you some more concrete content here. Okay, so one of the biggest threats is information leakage and you would actually be surprised perhaps at how many OpenStack clouds are deployed today that do not use TLS to protect their network endpoints. So I will say this once and I'll say it again every five minutes until the rest of my talk. You should use TLS for everything. Protect your endpoints with it. Protect your web dashboard with it. Protect your log feeds with it. Yes, we just went through Heartbleed and there are complexities and complications with the protocols around TLS but it's still basically the best thing we have. So use it and keep it patched is the best advice out there but that's not the only way to leak information is across the network. There's interesting attacks that you can get from basically looking at cash effects on a single host and there aren't really good answers for this today. So if you're worried of things at this level you might need to keep different tenants on different nodes, for example. But for example, recent research has showed that using these cash effects and timing effects you can actually do things like read AES keys from a pure VM on the same node. So that's kind of bad and it does sort of influence how you might think about deploying a cloud. There are ways that you can actually set up security policies so that different tenants would never be allowed to deploy VMs on the same node and so if you're thinking that your users of the cloud might have these kinds of sophistications and capabilities that might be something to consider. VM breakouts, I've mentioned this a little bit before but I haven't really gotten into defining it. So who here is familiar with the notion of a VM breakout? Also known as like a VM escape attack. All right, only a few. So this is an interesting one. Virtual machine, a lot of people refer to it as a security boundary of itself and it can help but it's not a panacea. The thing about the virtual machines is that it's software like everything else in this world and so, and not only is it software but it's relatively complex software. So you're emulating hardware in software and you gotta figure there's gonna be some bugs in there somewhere.  Now, if you were on a desktop system maybe this wouldn't be so bad, right? Maybe you're running Windows in a VM on top of your Mac OS and you're just doing it for convenience and if someone broke out from Windows and got into your Mac, eh, maybe you don't care so much. If you're in a cloud, not only did someone just cross into the management plane but now they're in a position of power where they can potentially see all of the other instances running on that node and if your management plane is not locked down properly perhaps they can get from that node to any other node in your system with relative ease and so the problem just sort of unfolds like dominoes. So what can you do? In the KVM world, there's ways that you can use things like SE Linux which is a mandatory access control policy to provide containment around each virtual machine. So each virtual machine would get its own context and one context cannot talk to another context. So the idea being that if you were to break out you're still confined by the SE Linux policy and very limited to what you could do on the system. There are similar technologies available for things like Xen so I definitely encourage you to look into them. Anytime you're using virtualization in a multi-tenancy environment these kinds of controls are really really critical and again since we understand the software that it's being rolled out on it's not gonna be quite as painful as rolling out things like SE Linux on a desktop machine. There's additional hardening steps you can do. You can make sure that things like QMU which provides all your device models doesn't have extra software in it. Strip out all the drivers that you don't need. Use compiler hardening techniques. Just do everything you can to harden this layer because this is an important layer. The breaking down the security of this layer pretty much breaks down the security of your whole cloud and it's stuff like this that really destroys confidence in cloud systems. Finally, at some point in time you have to assume that someone's going to actually maybe get out and you wanna make sure that in the event that they do get out they can't get very far. So you wanna deep privilege your node so that it can't do much in the cloud. You wanna make sure that you're doing boot time attestations if you can to verify that that node came up and is still running the right kernel, the right hypervisor, the right boot loader, the right firmware, all these pieces. So all of this together can provide really strong defenses against someone who's attacking your node but nothing's perfect and so you still need good security update policies as well. Excuse me. So we just talked a little bit about what happens if you have a node compromise but more generally you can have a control plane compromise or a management plane compromise. In these cases what you're actually seeing is maybe someone came in through a breakout like we just discussed or maybe they came in through an API endpoint that wasn't configured properly. For example, what do you think the chances are that one of the open stack services somewhere has code that says exec shell equals true. Anyone seen something like that? It happens, right? And when it happens if what they're executive is user input then you might have yourself a vulnerability. So when someone gets into your control plane you don't want them to be able to get very far. Again this comes down to you want to have specific passwords that are used on each system. You don't want to be able to just sudo and log in everywhere. You want to have firewalls that restrict the flow of traffic to only what's necessary. All sorts of just really best practices, hopefully nothing that I'm seeing here is really groundbreaking in this particular slide but we need to remember to do it. I think often times when we're deploying open stack we just start celebrating and popping champagne quirks when we spin up an instance because it worked which is really quite great but there's a lot of work beyond just getting it to work. Primary focus here, limit the damage from a bad actor on the control plane. Today you basically have to assume that someone's going to get there and make sure that there's not a whole lot they can do when they are there. You want to be tracking vulnerabilities upstream. This could be an open stack or in any of those other glue pieces that you're using and be prepared to roll them out quickly. Be prepared to triage them quickly. And I would also argue that if you have things like compensating controls in place it helps a whole lot here, right? Because if every single vulnerability that comes across is a critical level of vulnerability for your cloud because there's nothing that mitigates it then you're going to really be in for a lot of long nights as you're constantly rolling out security updates. It'd be nicer if you see a breakout vulnerability come through and you can say, well, I'm actually okay with this one for now. It doesn't have to be critical because I have all these compensating controls in place and I'll roll this out in the next day or two instead of not going home right now. Okay, this is the last one. This sort of starts to bridge the boundary a little bit. I actually spoke with some people earlier today and this topic has been coming up a lot so I think it's on people's minds. We talk a lot about what you can do to secure the cloud itself and then often we punt on what you do to secure the instances. It's easy enough to say, well, you have all these instances that are running and they're not at all different from all the systems that are running across your enterprise and so you just apply the same sort of policies and controls that you do there and you make sure that they're patched and they're running all the right things. It's a nice thing to say but sometimes it's not entirely true because instances can be extremely transient. It can be hard to track what's going on there and frankly, shouldn't we be able to use the cloud to make the instances more secure? Shouldn't we be able to use the cloud to simplify this process of keeping them up to date of auditing what's running? It seems like we should and so I think there's a lot of services that the cloud can provide to make auditing and managing your instances better and this is an area that I think we need to do a lot of work in to be thinking about what sort of innovations we can do there. One such thing that you can do is you can provide entropy to your instances. Now, entropy is just random data, random numbers. Turns out it's extremely useful for things like key generation for cryptography.   And I bet you're doing other things that you don't even think of as cryptography but in the shadows behind the scenes, crypto's happening. And so entropy is very important to protect all these things. Turns out when you're running a virtual machine, entropy is usually not too easy to find. So as a cloud, it's something that you can provide. You can take hardware random number generators, you can wire them through your cloud. If you do it properly, maybe you have different sources, multiple vendors and then you find a way to get these to your instances so that they can actually get a good stream of entropy. It's just one example of ways that we can provide cloud level services that can make securing your instances a little easier. Okay, so to come back full circle, if the cloud is gonna be deeply integrated in with the enterprise network, then it becomes really, really important that your cloud itself remains at least as secure as everything else in your enterprise. Now, if you run an enterprise network where you don't care about the security of anything on there already, then hey, you're golden because your job's really easy. You add in a cloud and you still don't care about security and you're good to go. The thing is, I don't think that's where most of us are today. I think most of us are deeply concerned about security across the enterprise. We don't want corporate espionage to happen on our watch. We don't want information stolen and we don't want resources taken away from us. And so when the cloud comes in, the bar in the cloud needs to be higher because the cloud integrates in with all these pieces of your infrastructure often at a privileged level. And so you need to think about what are the communications going in and out of the cloud and how do you protect all of those? And you need to be thinking about how can the cloud itself be locked down so that it doesn't become yet another stepping stone across an attacker's attack tree like I drew earlier. And I think if you think about it that way and you can think about it holistically like that, then you'll be good to go. Just remember getting the cloud up and running is step one. Securing the cloud is step two. And I think step two is oftentimes a little bit harder than step one. With that, I'm happy to take some questions. And please do use the mics because as you might have noticed, the audio in this room is not too good. I've got a question. Have you thought through like VM uploads, right? So VMs get uploaded into a cloud. How do you do things like looking through them before they are unable to be provisioned or what not do? Is there a place where you stick them until a scan can be performed against those and then they get elevated into being accessible by the cloud and put it into a catalog or what not? So you're talking about the images that you would then turn around and run in the cloud. Correct, yeah. Right. Yeah, so there's a variety of things that one could do here. And I think there's actually a lot of really interesting opportunities here related to this. I'll sidetrack and then I'll come back. One thing that I would love to see, and I'm gonna be trying to work with people to make it happen, is imagine if you could take your image service, Glance, and just point it at your Ubuntu or your Fedora upstream server where all the cloud images are and give it maybe a GPG key so it can validate them and say just make sure that I'm always running the most up-to-date trustee cloud image or the most up-to-date Fedora 20 cloud image or something like that. And so that whenever someone launches a Fedora 20, they get the one with all the latest security patches, all the fixes. That, I think, could help quite a bit. But then you've got the custom images, which I think is more of what you're getting at. So someone has some random custom image, the upload, and you wanna make sure that it's not malicious. So yeah, I mean you could imagine, I actually haven't seen that fully integrated yet like a automatic upload an image, scan it, but it's not a big stretch to imagine doing something like that. The one caution is that it would be very easy for me as an attacker to upload a benign image, you approve it, I launch it, and then I inject my stuff over SSH or something, you never saw it coming. So just don't wanna get a false sense of security from something like that. Yeah. Go ahead, question about, OpenStep used a lot of open source projects. So what's the best practice to track the security what I believe from those open source projects? Another question in the future, are we gonna conduct some secure review about those open source projects before we use them? Okay, so I think first question was, how do we track the security of the OpenStep projects? Wonderful, so I'm involved with the OpenStep security group which does a lot of work in this front. There's basically two primary resources that you wanna watch for. One, which is actually put out by the vulnerability management team of OpenStack, which is a real small group. They assess vulnerabilities in the product and then put out what's called an OpenStack security advisory. Those advisories are kind of like CVEs. They tell you when there's a vulnerability and you need to go update your code right now. So be watching for the OSSAs because they tell you when you have to update your code. The security group complements that by putting out OpenStack security notes. These are sort of little pieces of configuration guidance that are useful for deployment of clouds. So maybe the default configuration wasn't as strong as it should be, or maybe there's a concern about using Linux containers as a security barrier, things like this. These little notes of guidance will come out to give you steps along the way that can help out. And so between the OSSA and the OSSN, I think you have a nice collection of resources there. Your second question was about threat modeling, looking at the existing projects. And actually the security group has been working for about the past six months and we've been spinning up projects to do threat modeling and assessments of the existing OpenStack projects. They've started with Keystone, perhaps for obvious reasons, being a very security critical service. And they are already like shoulder deep and Keystone threat analysis. There's documents out there that are available. I actually just tweeted links to it today.  You can go find them. BDP security is my Twitter handle. And there we go. So there's work on Keystone. They're gonna be working on Novinnext and the idea is just to keep stepping down through the projects. That'd be a great thing for anyone in this room to be involved with if you're interested in threat analysis work. Just a heart bleed related question. I know that there are patches, but the second piece of that is the certificate revocation. There is no certificate store in the core of OpenStack. So what's the best practice for OpenStack implementers on certificate handling since I know you recommend TLS everywhere? Yeah, so how TLS is handled throughout the cloud really varies. There was actually a nice blog post by Nathan Kinder at Red Hat recently about the various ways you can deploy TLS in the cloud. And so the right answer in terms of how you manage your certificates is gonna depend greatly on how TLS is deployed. So that's kind of a non-answer. Maybe a better answer is there's a lot of people looking at trying to standardize some of those ways using things like Barbican as a backend secret store combined with some sort of middleware layer depending on how people prefer to deploy their clouds that would actually present those certificates to stud, pound, Apache, Nginx, whatever it is that you want to use, and then have a nice way that you can actually auto those and quickly update them and that kind of stuff. But again, it's gonna depend on your specific deployment. So now we did actually release a OpenStack security note that talked about Heartbleed and talked about how you can go through your cloud and do the proper updating and stuff like that that gets into some of the OpenStack specific details. So that's probably worth referencing if you have questions. All right, thank you everyone so much for coming out. I'm happy to take additional questions on the side.


Welcome back to esoteric Atlanta with my friend Catherine Edwards. How are you Catherine? Really good. I'm sitting there having my radiance and Yeah, I I'm pretty good popular everyone else watching this. Um a lot going on isn't there? A lot going on in all sorts of areas, but yeah, I'm in a good place. Thank you Awesome. Well I Catherine and we've talked about this off camera But I have made one video talking about this on camera But you guys Catherine and I With a few of our other friends from youtube are at this moment looking into doing a wellness retreat 2024 towards the summer fall time and I've actually got some leads and so I'm super excited about that That's something that I'm really looking forward to and I'm so happy Catherine that we can kind of start to plan something like that For our greater audience to have a legit copy chat Oh, it's just going to be amazing because you know, I've done this such a thing before and it is so special And price I'm not going to give much way but prices certainly some of the pictures of the places she's investigating and it is going to be the perfect location to Connect with each other connect with nature connect back with our roots and I I'm so excited for this It's just going to be amazing. And I know that it's just it's going to be divine who comes together for this experience Me too. And I thank you guys so much for giving us the feedback in my video update video I put up everybody seems very excited about this and of course a lot of people asked about prices that We won't know that until we know it like we're still investigating. I told Catherine There's a lot of places. I mean that my friend Cindy who Catherine knows you guys know She's going to help us too and she's done this before as well And so she knows some places and the different price ranges and what they offer So once we have that all figured out guys, we're not going to really have a no a price until we've got it all figured out We will absolutely let you guys know and let's start their enrollment and all that kind of stuff And it was just so fun to have like a legit sit down to talk to everybody and have these weird wacky conversations In person with everybody It's nothing like it. There's absolutely nothing like it. So I just can't wait and it's coming along well and all the ideas and the people That are going to be hosting it with us. We have got an amazing team of people together There is literally something for everyone. It gives me chill bops. Yeah, it's gonna be So guys just keep just keep your just keep your eyes out once we have everything We will absolutely let you guys know once we have once we know everything you will You will obviously be the first to know after we know so Speaking of that, we have a very interesting conversation today I thought that we could cut because usually in our coffee chats We we we talk a lot about like life issues that we're kind of going through and our different perspectives and opinions Just like you would do with the friends over coffee Well, this is kind of a combination of a deep dive and a modern day conversation And we're going to be talking about the I'm going to call it the Kellogg conspiracy Um, and you guys know that Catherine and I one thing that Catherine and I have in common Is our interest in wellness health And of course That leads into the spiritual help as well because the health the physical help also plays into the mental and the spiritual too And you know, we've done these shadow work challenges where we've talked about people getting up first thing in the morning and Exercising but a lot of people what about breakfast? What about breakfast? Well, you guys Kellogg Was the company who created the marketing as breakfast being the most important meal of the day But is it? Is it? So I'm gonna put some links down in the in the description box below guys of some hysterical videos that I ran across when I was reading this Are researching this and this isn't going to be a big deep dive. I'm just going to discuss just a little bit about Dr John Kellogg and his brother will Kellogg who are the two brothers that really make Kellogg big There's one video called um, where I haven't meet the psychopath who invented your breakfast. That's one I'm gonna that's an instant that guy did a really good job But basically the Kellogg brothers and I I do know that there is a Kellogg descendant Who has been a whistleblower So we do know from her perspective and her life experiences that there is something very shady about this family All right from her perspective But we know that the Kellogg's they um, they were born into a really big family. There were like 17 kids in this family And um, they were very religious seven day Adventist. Do you guys have seven day Adventists in the uk? I haven't heard of it, but that doesn't mean we haven't helped got it because I'm not really big on religions to The seven day Adventists, they're what we would call like an american Like Mormonism and Jehovah's Witnesses are like an american flavor of christianity. They're very they're more aligned with the Jehovah's Witnesses Extremely conservative They believed very much teaching the end times that though into the world is coming Jesus is coming back soon very hellfire and grew and all that kind of stuff So john and his brother will along with all their siblings grew up in a very uh, a family that did not actually push Which a lot of these Jehovah's Witnesses don't either because I think the world's going to end soon. So You know, I mean that in some ways i'm laughing because in some ways they're kind of right But but i'm not as doom and gloom we're not as doom and gloom as they are So john Kellogg who is the physician he was he's considered an american businessman an inventor and a physician So how did this guy that went from parents who did not educate their children become a physician? Well back in the 1800s. He was born in 1852 his brother will was born in 1860 So in the 19th century century, you guys have to remember this was before the federal reserve This is before the educational system as we know it today What they would do is so john Read a lot. He was basically self educated according to what the research says And the church actually paid for him to go to what medical school was considered to be at that time Now here in the united states for a doctor I get you know different countries do it differently. Obviously you have your high school education bar Everyone's got to go through that and then you have your undergrad Which is where you get your bachelors of science or bachelors of art if you're going medicine You're going to get bachelors of science That's a four-year program And then you have to take what's called the m cat which is a test to go to medical school Which is many many many years and you have residency depending on what type of so now to be a doctor It's a lot more intense than it was back then back then it was more of like an apprenticeship So, you know, and there are things about john Kellogg's beliefs that I actually very much agreed with like he was a vegetarian He promoted exercise He knew that that our diet was important to to our overall quality of life Um, and so but again, it goes back to that thing that darkness can't create anything only the light can So a lot of these ideas start from truth and then get inverted and manipulate it And uh, john Kellogg himself was a bit of an eccentric character. Did you watch the video? I sent you what video and the fact of him cycling around on his bike with his cockatoo on the pat on his shoulder I thought well, I could do that. Yeah so Basically after he finished medical school He was then put in charge john the doctor of running the sanitarium They caught up the sanitarium back then which me thinks it makes me think of like a crazy place But it was more like a spa like this wellness spa where these very very wealthy the elite of that time Would come to for wellness Um, we have people like henry ford The rock of fellers loved this this wellness center, right? That's a big name. Yep Henry Ford is another big name inventor of the car Um, a president war president warren harding thomas edison Amelia airheart before she took her famous flight where she disappeared was at this spa So we have a lot. This is the this is a wellness center spa speaking of wellness centers Ours is not going to be this fancy guys That's not going to be but we're certainly not going to be doing some of the treatments that he's got No, I mean he did two things like colonics, which I've done colonics before like and that's a night therapy. He was into night therapy as well Absolutely, he figured out like synthetic light. He could cause light can help the body rejuvenate Um, yeah, but they laughed a lot about the colonics and I'm like You know, that's in the vetic text. It's a kriya and the vetic text cleaning out your colon, you know And um and and he but he also guys he also was big in a germ therapy, which are germ theory, excuse me germ theory Which is not something that I Germ theory is basically what's gotten us a lot into trouble. I think with the proper I won't say too much. We would like the propaganda of of the fancy sicknesses that have been going going around um I I follow I I believe more of german new medicine where sickness is not as simple as just germs There's something bigger happening with the body. But anyway, that's a conversation for a different day But he was also a eugenesis And that is where there's the even bigger red flag, right? Somebody who cares about someone's quality of life and their wellness typically is not a eugenesis And so captain for the people who don't know what a eugenesis is Do you want to kind of should we explain what that is? Basically, it's population control population control and in terms of but normally I mean, I'm not an expert in it, but thank god But normally they that it's very Prescriptive in terms of you know, they want to get rid of certain parts of the population Right, so therefore it's quite an elitist idea generally speaking that those that don't I mean We're all used to the term that are useless eaters that we will know about now But it's normally where they've decided that there's too many people Um, and they've decided they want to decide who are the worthy ones to survive and who are not Yes, there are lots of issues. Absolutely. So we know a lot of our Controllers today are open about their belief in eugenics like bill gates Um, I'll say much more because it's it's Yeah, it's not just that we're overpopulated. It's we're overpopulated and these are the people that need to go Yeah, right. Yeah, and no one else has to say in it. Yeah, absolutely So that's where a lot of the controversy with these comes into because of of some and you guys can do your own research into the history of that and some situations that have happened where certain populations have been So very very, um Cringy with that but uh will Kellogg was his little brother will Kellogg was kind of I mean what kind of makes me laugh is like he kind of and I don't have to say he abused him But he kind of was a little used to the bully to his little brother.  I don't know or something going on that wasn't completely You know typical probably neuro divergent or whatever they call it whatever the word is nowadays So what what happened was though they ended up creating a a cereal We all we all know the Kellogg cereal and I don't want to go too deeply into the detail about how this cereal was made But the thing about Kellogg's cereal in my in my experience as a vegetarian, of course I've had a lot of these these we grew up with Kellogg's everyone I think I work with a box of Kellogg's in their house, but I remember even as a child Ebola cereal never really held me over Too much like I remember always being really hungry before lunch But he created this from it started in 1877 It was the start of the corn flake, which is flour oats and oatmeal um, but it was so tough that A client at their spot broke her tooth And so they had to start breaking it into little pieces now according to this video that I'll place in the description box below They accidentally left some dough out overnight and it kind of fermented itself And so I think it was will who decided well, let's just try it It ended up breaking into these really nice little flakes like you see with the corn flake cereals today and so um basically by 1898 will Kellogg became the um Kind of the entrepreneur the business one that was like we need to like make this a household product Where John Kellogg was like no, we're not doing this John Kellogg was more like i'm going to stay at the sanitarium They ended up like suing each other They went through a lot of legal battles and uh will Kellogg ended up owning them the rights to the Kellogg name And that's how Kellogg ended up becoming one of the biggest Brands in the world I would gather to say kind of like coca-cola everybody every country knows Kellogg knows the rooster That's on the box of Kellogg. I mean you think it about fraud I mean it's so many different brands of cereal now that are owned by Kellogg Um, they even uh went into they were the first company to have a toy inside the box Did you guys have that as as kids? Yeah Yeah, we had toys inside of our our cereal boxes. They were the first to include a nutritional label Um, they were extremely good at marketing obviously and of of course part of that was again That breakfast is the most important meal of the day Well, is it? That's again where we come back to this and so and again I noticed that a lot with these shadow work challenges where people where I asked Hey, if you could do it in the morning, that's the best time to do it because that's the Brahma morta That's the eastern philosophy try it see how it sets your day up and people are like, what about breakfast? What about breakfast? We've been so indoctrinated to believe that we need to eat right away when we wake up and that's not necessarily true Now this is where I'm going to bring cat because Catherine's a biologist So she understands the way the human body works on Catherine. I was watching another doctor A little clip came up on instagram or another doctor was saying please stop eating when you first wake up Do not eat your liver produces like a Sugary there's a substance the liver or a chemical the liver will produce That gives you a surge of energy first thing in the morning And when you eat first thing in the morning, it messes up the body's biological rhythm with what the liver is doing And um, and I noticed because I'm I'm very adamant about Exercising first thing when I wake up and I always have energy to I mean it's hard to get started But once I get started I feel that burst of energy So I'm going to let you take it from here Catherine with your thoughts on this Well, it's such a fascinating discussion price because obviously I'm laughing out because what we've been taught about the evolution of humans and our You know caveman and ancestry and hunter-gatherers now everything's up for grabs You know what really where really do we come from? But from a basic if we we look at other animals in nature We are the only species apart from pets that humans take into their homes Where we don't have to go out and forage or hunt for our food So most animals are evolved to actually when they wake up whether they're nocturnal or or Awaken the day diurnal you would you wouldn't normally have a refrigerator to open So the whole point is the exercise would come before so when you wake up You've got your hormones which are balancing your you're designed to actually You know wake up at dawn and go to bed at dusk Which of course most of most of us don't do anymore But if you take it right back to what we've been told about our Ancestry or what we see with animals who are alive today. So it does make sense You wouldn't get up and eat straight away You'd get up you'd normally try and find something to drink if you had access to that and you'd go out and forage or hunt for your Food so you'd get that physical exercise Which then of course gets everything working gets your lymphatic system working gets the liver flushing out first To prepare you for whatever you manage to forage or hunt So in some respects do I think breakfast is really important? Yes, but it's what you count as breakfast and when you take it So just like you and I have had discussions about dog nutrition. It's not just what you eat It's when you eat it So you do most people generally do need to to balance their blood sugar Eat something healthily before they really set off into the day But by that I would normally mean, you know possibly a couple of hours After you've been up not ever get out of bed and eat straight away And that's purely been caused by our modern lifestyle really started in my understanding in the industrial revolution Where people had to get up go into factories And so they would be shut in a factory for a 12 hour shift And if they didn't have something before they went they lost their chance to eat for the day And that's they they brought that up in this I think it was the video with that I watched a couple of videos that with the industrial one you sent me But you see it's all completely out of sync with nature because of course we don't go to bed in line with nature anymore Because we've got Artificial lighting so we can stay up in the evenings was before people wouldn't have had lighting And they couldn't afford to keep burning candles a lot of people So they went to bed with the you know, and they woke with the seasons and with the daylight So our bodies unfortunately Fitting our bodies into the modern way of living has disastrous effects On our digestive system therefore our immune system our gut health So and also The whole point about the Kellogg's thing it was fascinating listening to some of the research because as you say Some of the ideas you're like, yeah, that's good. That's right.  Well, that's what that one doctor said you need to be up for at least two hours before you eat anything And that's enough. So with the eastern philosophy, you know, we are we do our practice? We sweat we we work work out if you want to call it and what they call the brahma morton times Which is right when you wake up like it's right when you wake up and so and they don't want you eating anything because when you exercise in a very Taking spirituality out of it when you exercise Your blood is going to move away from the the organs into the muscles into the fascia Now your blood is your sacred dna And so the blood the flushing of the blood is what creates a pattern of wellness, right? So you're you know, you think about cupping like that's big right to cup and what they're looking for a cupping The way to explain it, you know, when you get a cup and they pull it up and there's a big bruise Like a hickey almost what they've done The chinese doctor used to work with what's explained it like it's like a car crash Whether the cars are just sitting there and so the cup pulls the old blood up so new blood can come in This is why things like inversions are important because like the calves your calf muscles are your second heart It's responsible for pulling the blood from your lower body back up to your heart for it to be cleansed and recycled So when you're working out when you're exercising The blood is going to do what it's supposed to do to to help you and help that wellness that helps start to come It's got to leave the digestive tract.  Clearly biologically It's an absolute disaster because then you've got food sitting in your digestive tract That hasn't got the life force the blood the digestive enzymes all that energy has been diverted away And therefore it's sitting there and almost fermenting and not digestible So by the time you then stop the exercise and come back to it the whole natural cycle has been broken And therefore you've set off this sort of you've started We all know how important it is to start your day properly mindset wise gratitude wise But if you then start it wrong by eating straight away and then going off and exercising or rushing off to work Or running to catch the train or whatever Your body is in a constant state of stress Just like if an wild antelope or an animal had eaten a meal and then was suddenly chased by a lion That's a massive stress response and you're almost keeping your body in there Um, and so it's a real real disaster and the problem is is most people's lifestyles Are a set up so they're always in a rush in the morning So they're trying to practically put something in apart from doing say what you and I do for different reasons of getting up Loads of time before we start work. I go out and my exercise is doing the animals, which of course is getting your calves moving a lot So long as you're weighing the right footwear So if you're wearing welly boots and something that doesn't let you move properly You're not pumping those calves different story But I find it so fascinating price with the whole Kellogg stuff is about how in one respect with this sanatorium and the well the obsession with wellness and then ending up with something That is just completely You know the invention of chemotherapy or we've got this petroleum.  That's then going to make it even more So you then have not got the physical resilience or the mental resilience to make good lifestyle choices How you start off that first meal of the day This is why things like, you know drinking lemon water and things like this is so important because they're helping flush those toxins out of the body Before you pump most and let's face it most of the food that a lot of us have got access to Is really hard for the body to digest and use Absolutely and as you're saying that too like, you know, I have a friend and yoga who says you're only as happy as your colon is healthy Yeah, that's true. And we think a lot about how, you know, so many cleanses today Advertise saying, oh, you've got seven years of poo basically Stuck in your colon all this kind of stuff. Obviously Dr. John Kellogg knew this because he was performing colonics on his on his patients He knew the value of a clean colon and as Catherine saying when that stuff gets Firmated because you're you're out of sync with your body and you're just putting more and more and more on top of it You know, you can see it in people's eyes when their colon is backed up the eyes start to look bad They start to get rings under their eyes And the colon is the the trash system of the body And so if if the colon is compacted and it's you're constipated or you sometimes people don't even realize they're constipated They don't even realize that's what's going on The body the blood system can't bring any more to the any more stuff to the colon To to eliminate it so it holds it in other areas of the body You're killing yourself basically completely poisoning yourself And your colon is part of your gut when we talk about the gut microbiome Most people sort of think of the stomach and the first part of the digestive system But it's not it's everything from your mouth nose sinuses All the way through until it comes out the other end and your microbiome in the colon is absolutely crucial To every part of physical and emotional health and it's really really hard for most people now To keep that healthy because of the sedentary lifestyle we live, you know Even the difference in my lifetime From his children how we had to walk everywhere And you were out playing all the time everywhere and outside and your mum would say come make sure you're home by dark sort of thing Um, although I think my mum would have quite liked us to have just pitted off someone not But I just in all seriousness, you know, this is it no wonder so many people are struggling so much because it And I do agree with you Boris from the research you sent through this with his level of knowledge This had to be a deliberate ploy. Oh, absolutely way It was an accidental thing because he had far far too much knowledge in the other areas of work that he was doing in the sanatorium To not realize the implications of what they were doing Absolutely, and I get this a lot We went part of this like if you want to call it a great awakening whatever assist the time of seeking Is us realizing Where we've been programmed And I see that a lot in my yoga shala because we teach early in the morning and people like well, what about breakfast? And i'm like, you're not going to starve You're going to wake up in the morning and you're going to come to the shala and you're going to do your practice and then after you're done practicing You might and the funny thing is is for me and a lot of my students the same thing happens is You'll practice, you know, I think you're going to be starving by the end of it But no it takes about 30 minutes to an hour to actually feel feel hungry Because the body is still kind of You got to allow the body to kind of settle back into its place But people are so programmed and so brainwashed To literally panic If they can't eat right away and that's coming from Kellogg Guys that's all coming from you that is a programming of the brain and and it's it's amazing And I remember my grandmother who was so You know, she's my grandmother who tried to teach me to meditate when I was eight She knew I wish she was still alive because she was just hysterical But she would say all the time breakfast is not the most important meal of the day. She believed lunch was Because and now looking back in our evadic medicine And they would say the same thing because that's the pit of time where there's the fire time So that's when the digestive system is really active And she she was very Aware that that was not correct that breakfast was not the most important meal of the day And I just I just hope that for people watching Because I got that with the shadow work challenge as well with the people asking when I when I encouraged people to try to start their day with exercise Um, what about breakfast? What about breakfast? I'm like, well, it'll be there afterwards and you're not going to die You're you're not going to starve, you know, you can actually live on way less than most people think they can live on You know Way way less and you know, it's all about quality and when you do it Like when we take it to the dogs, you know, most people think that's why it's a day That can be really really damaging for their digestive system not talking about puppies, of course talk about adult dogs But this is where I think brice everything that we've spoken about it links into everything else we've spoken about because we're so over Overpush this knowledge that is so wrong deliberately from these sources that You know marketing experts and can put it in a way that sounds convincing if you're Listening to it in a rush as part of the brainwashing and you haven't really got time to tune in properly with it It's like, oh, yeah, of course. I've got to have something to eat before I go off to work for the day or before the kids go off to school Um, but actually when you start really tuning in to listen to your body like you do with your exercise So I get up each morning and I go and do it takes me about an hour to do the first shift of morning Animals and it's out in the weather and a lot of movement And then I come in and I normally will have something to eat Um, whereas my husband might go another couple of hours before he'll have something to eat You know because it does depend on your body type and you know your blood sugar regulation And also what your evening routine is but I think particularly for the children now where They've got such terrible choices available to them And what we count as normal and what healthy is so out of the past So if you go to finland the type of thing you'd get served for breakfast would be completely different to america Which would be completely different to the uk on norms becoming grained through the brainwashing not because there's any science or Any proper reason for it and let's face it You know it we are designed to either go out and catch something to eat Which you would be very unlikely to do because most of the animals aren't going to be out first thing in the morning Unless you really are I put I'll put the crack of dawn Um and we'd go out and forage and we'd forage for fruit and vegetables and nuts and seeds and things and that's generally speaking What we would eat and they would give us a slow sustained release of energy an easily digestible form because Our guts were healthy and designed to keep them that was of course now a lot of people This is why there's so much outrage about plant based diets and things and we're talking proper plant based arts Not fake ones because most people's microbiome and guts are so damaged because of what's gone before that They can't process real food anymore But when you heal your gut and funny enough, I am just bringing out a nutrition course I haven't told you about that for this exact reason because it's sort of you know, you're trying to go You always say I love the way you always say brice don't compare your day one to your year 10 In studying yoga for years proper yoga when I come along on the Retreat I'm not going to be comparing me that doesn't do yoga to what brice can do There's no no way there's going to be a match there And this is the same with our poor digestive systems and our bodies. We've all been fed rubbish And therefore when you start turning over to a healthy meal some sort of healthy alternative Some people don't immediately get the benefit or they get problems because they're microbiome They're gut is so out of balance But if you do it properly with a proper support And you gradually make those changes so your body's healing as you're putting step changes in place Then you're onto a complete winner and your whole every aspect your mental health your physical health Your longevity your energy levels everything will transform So don't worry if you're struggling initially to make some of these changes and it's not easy It's just because you've got to go through that healing cycle and it's worth persevering Oh 100% I mean, I'll tell you guys Just something just random that might help you understand like how serious this actually is When a student is if we know that a student is struggling with constipation I give a student and we get you know, because when you're doing yoga you really can feel you start to be able to feel Where there things off we won't let them practice because When you are that compacted And you're doing all these shapes Without that compaction these shapes are amazing because they're flushing out the organs there But when you're that compacted you're actually bruising your organs. That's how dangerous this is for the whole Body and I agree with you Catherine one thing they did say we're talking about the industrial revolution And how every and that's the thing about arubatic medicine as well Is that it's also seasonal eating that there is food certain foods You're going to need this in certain seasons certain foods You're going to not need another seasons and we see how nature produces that forest Then we try to bio engineer it to make it so the foods that are available in the spring are also available in the winter But that's that's not supposed to be that way right and then we wonder why we're all sick but um Before the industrial revolution When people were living more royal rural lives On farms and or even people who lived in cities cities weren't really that big until the industrial revolution There was quite a ritual to meals And oh yeah when people had to make breakfast like you were saying Catherine You know they would have to actually go out and get the eggs go out and get the grains and so There was there was an effort put into preparing that meal So the breakfast meal wasn't right when they woke up there was a few hours there of preparation Where the body was waking up and adjusting before they digested that first meal But then with the industrial revolution where people were getting shipped off to factories kids were working This Kellogg cereal came out all over the world to give people. Oh, don't worry weak wink We've got your breakfast for you just pour in a bowl and pour that milk in the milk man will come drop it Off and you're good to go. You don't even have to worry about breakfast. It's already done. We've done it You're welcome. We've done it for you and so it messed up the whole cycle to get people quickly into the Which it's kind of a double-edged sword, right? Not only are they screwing up our health But they're also giving us an opportunity to get to work faster to produce more for who for them, right? so I would just challenge people like if you're one of those people that was terrified or is terrified to exercise First thing in the morning because you think you need to eat Or you have this like real belief that breakfast is the most important meal of the day I would really challenge you To research this and ask yourself. How do you know breakfast is the most important meal of the day? Where's your data to back that like where's the research to back that? Or is it when what are you defining as breakfast? You know, what are you actually doing? You rushing up and grabbing. I think it's such a good point. I mean Tuning in and listening to your body. I've done quite a bit of studying with Paul check He's an amazing holistic health coach and he really teaches all of us to Really tune in with, you know, how you feel emotionally physically energy wise after what you eat what you drink You lot of this and your shadow work challenge And it's so important because look at the pattern everyone Everything of this is to get us not to tune in with ourselves to skip our intuition To sort of think oh my god. I'm feeling like this, but I'm told something different So I need to stop listening to myself It's a consistent theme over and over again. And if we just sort of okay Might be a little bit more difficult if you've got teenagers, you know Getting them up early enough to have that time before they go to school But if you're going off to work start with yourself and so to say I'm not going to eat straight away The night before I'm going to prepare something really healthy that I can eat when I get to work Yeah, I get to this place and just see how that shifts for you Give it a few weeks to let your body adjust and just see the difference it makes for you and and start listening to yourself Not what these eugenicists I know I like everything they've told us was healthy is just like not Absolutely no wonder people are confused, you know, for me, I've always said Bryce It's ridiculous that we need nutritionist, you know, no other species in the world who's nutritionist But it's actually not ridiculous at all because everyone's so confused because we've been so brainwashed But when you get that right for your cells or your animals, oh my god, suddenly you're not programmable And that's what they'll do once you see it. You can't unsee it. It's funny. You say that to Catherine Because our dog Robbie has been on the Catherine diet for a while now and we order really really I mean we spend more money on his food than ours. We order top line Very good food for him. But when we were traveling, we always spend the night halfway And usually what we'll do is just there's a little grocery store down the street We'll just go to the grocery store and get You know the the meat for him there at the grocery store and normally it's fine Whatever then once we get to the house where we can go and get the good food again But this past trip Robbie turned his nose up At the food we tried to keep him at the hotel because he was like this is not No, this is not the quality of food that I normally get so he did No, thanks. Like he just did not so it's just because dog said he has no idea He doesn't know how much we pay. He doesn't even know what money is He just knew he didn't want it because it wasn't the high quality that he normally gets right And they're so in tune they can smell the bacteria they can smell the chemicals on it and everything Which unfortunately most of us some of us but most of us our senses They're so used to it was so full with so much stuff So I just think this was so brilliant when you recommended this subject price because If anyone delves into it look at the links below for price and start questioning There's these common themes time and time and time again and really just being gentle with yourself and saying well no wonder I'm confused by all this anyone would be when you're bombarded with such conflicting messages because isn't that the perfect way to control people Just just bombard them with so much confusion at the end. They just submit and say whatever Right, right. Yeah, absolutely. And especially with the the slogan breakfast is a slogan Logo and slogan together slogan the logo the logo breakfast is the most important meal of the day That's been around guys since like the 1920s. So it's not even it's your parents generation It's your grandparents like that is so ingrained in us now and it's a lie It's not true Right, so that if that's the first thing if you are new to this world of health conspiracy And like really trying to figure out what's good for you and what's not that might be the first place you start Is is breakfast the most important meal of the day? Is it really? Um and and it is it is once you start to get a handle on your eating the times you eat the quality of your food Even for me something that really because I am vata. So I do I'm better at like grazing I stop eating at 5 p.m. Every night And I don't eat again until like 9 or 10 o'clock the next day Your digestive system system also needs a chance to rest And when I started doing that and giving myself that sleep in that long period when I'm sleeping to just not eat anything Man, I started to feel a lot better my digestive system started working better Getting up exercising then after after I recover from that then having breakfast like it just makes and you the food Just tastes better it tastes you can really taste what you're eating Whereas I think a lot you're right a lot of people just don't even they're eating so quickly. I don't even realize You know, and this is why it's so beautiful with so much and this is why we're gonna have such fun on our wellness retreat because that that shared experience Of the gratitude of preparing good quality food and then allowing yourself time to eat it It is just absolutely wonderful. It's what we're designed to do We haven't been able to do it as a human race for More centuries than God knows that, you know, because it's just not been possible, you know The rich have always overindulged the poor have just taken whatever's left. So if they can get hold of anything And therefore I think this is this is why we're so passionate about when you take back that control when you start Experimenting and started listening to yourself and it won't be overnight because we all know habits take a while to change because your body's got to change slowly But if you give yourself that time and you stay curious and you ask those questions and you start listening to yourself Not all these awful lies that are being fed to you Oh my goodness and imagine if we could treat it to teach our children to do this just imagine Oh, yeah 100 and the children and the young ones the ones that are new to this earth are already biologically programmed to know the truth Just You know, you've only got to look at toddlers I won't go on for too much longer But my son always used to eat with his hands and and I used to tell him off because I'd say it was bad manners And now you say it's so important to eat with your hands because you're connecting with that energy and you're feeling it And if you see like he always knew he as a toddler he knew what to forage straight away It was hysterical friends used to think, you know, because he just had this innate ability to know I'm not suggesting that's not dangerous sometimes Obviously I was keeping an on him. But also if you watch a lot of children eat they will Automatically food combined they'll eat this bit on their plate first They'll eat that was worth all to put a little bit of everything on our fork and that's not how we did in nature You know, so I think, you know, we our children can teach us so much and we can have that fun Of getting back it's not too late for all of us listen to this and we can all learn and help each other and see what works But what works for you? Will evolve over time as your body responds to the changes you're making I would love for I know we've got a lot of Indian students who watch because indians eat with their hands too They have a way it's it's actually beautiful to watch I don't know how they do it because I'm western I know how it's not beautiful when you watch me with no I'm like with messy the way that they're able to like it's like It's amazing to watch them use their hands to eat or do they use your left? You've got that amazing connection. You've got with the food. It's just beautiful. Yeah, it's amazing There's so many traditional Indian restaurants. You can go to an India where you eat on banana leaf She don't even eat on a plate You eat on a leaf and there's a whole other conspiracy about the particles of this fake, you know Plastic and stuff getting in the food You don't know you sit on the floor instead of a chair which is better for your lips Which then of course is better for your digestive So I'd love for our Indian students to our Indian students listen like I'm at a yoga show Our viewers who are Indians to talk about Using the hands to eat and how um, especially if you're someone who's from India I maybe lived in India, but now lives in a western country or something just kind of give your I'd love to hear your thoughts on that because it's amazing. I'm a mess in India Like it's messy for me, but to watch them actually It's just an art where they scoop And you think about it most things in nature this morning I went out for a lovely dog walk with um, can we see Lola in the background there? With my daughter and we've got the sweet chestnuts are out everywhere at the moment And of course I make sure I leave loads for the squirrels and the wildlife But I picked a whole load because my my um We were going to make sweet chestnut soup and also the horses love them and because the horses are in the fields Not free raising they haven't got any chestnut trees in their paddots So I picked this great big bag of sweet chestnuts But then when I walked past the deer part the deer were desperate for them So we haven't got them we gave them to the deer But this is what the thing if you think most things in nature You would be able to pick them up and eat them because they weren't slob They don't just rubbish. They were stuff that you know, you'd pick this off the tree You'd pick the berry you'd pick the nuts you'd okay You do grab lumps of meat and rip it off with your things So this is the thing is no wonder we're designed to do that because real food you can pick up with your hands Oh, we we do that with mushrooms. We we go up. We don't we go up to the balance And we're up there whenever we see mushrooms we forage when we pull the mushrooms up and uh, my boyfriend knows a lot about mushrooms And so he'll he'll use them Um, he used to he used to sell them to restaurants Yeah, it's curry leaves.  And so yeah Do it that apple at the supermarket Came from a tree somewhere Exactly Do let us know what works for you and let us know, you know If you're going to experiment with this and just let us know what you start to notice and what I'm already really fascinated Is how long it is before people start thinking wow, I'm really noticing I am feeling better with this So please let us know that as well. It would be really great and it inspires other people as well Absolutely.  Let me know too.  I I love it. I love the videos you sent me and I was like This is such a great idea because we could literally speak about this for 10 weeks because there's any Bits to this jigsaw puzzle and when that penny starts dropping about Oh my god, you evil Yeah, evil geniuses and unfortunately, yeah Very bad, but no more I will say too The church was the one that was behind it all you guys. They're the ones that funded it So have a little think about that with the missing, you know What yasha was said versus the canonized bible and the corruption you guys because the church was the one who funded all So anyway, you guys well, this was so fun. Catherine. I can't wait. It's really good fun. Great idea for us Next week we'll be a girl on Catherine's channel guys. I'll have all her links there too and again Indian Indian viewers let us know about eating with your hands and any other slogans Let us know in the comment section below and your thoughts on this and let's let's revolutionize and go back It's not really revolutionizing, isn't it? It's just going back to the basics It's going back to how we were originally created. So all right you guys. We will talk to you soon. Bye everybody