Today we're going to destroy a vehicle that was used in a police impersonation back in September of last year. This vehicle had tried to pull over an off-duty police officer. The individual was contacted, he was subsequently arrested, he was convicted, and the car is forfeited to the city. And today we're going to destroy it. What do I expect to see? I expect to see a vehicle torn to shreds. It's going to be cool. When you have a police impersonator and somebody that engages in that type of activity, that's a huge violation of the trust that we have between the public and the police department. It represents a huge danger to the safety of the citizens, but also to our safety too. It makes it more difficult for us to do our job. We want to do our part, and hopefully in getting that message out today, that that behavior is just not tolerated. I'm sure the individual that did this, it'll come out to him and he'll get to see his car being torn apart. What he used as a tool of his crime is no longer going to exist. Hopefully this will send a very strong message and deter a few individuals that are thinking about doing that.


What's up team it's your biggest fan the real Casadero and in today's video I'm going to teach you to program and by the end of this video You will have written a useful program that you can use to help you in your day-to-day life And it may even possibly help you get So let's open up a power shell in every Windows machine That was built. Well, I don't even know about every Every If you're on a computer that does not have power if it's a Windows computer And it does not have power show on it then it's something is wrong your life is probably in shambles You you you probably hate your job and your wife and your kids and everything like because I don't know where you're working where the company is using a Version of Windows that doesn't have power show on it. So anyway We've got power show the next thing we're gonna do is we are going to open up We're gonna hit the windows key and we're gonna open up note. Well, do we need yet? We're gonna open up note pad Because one of the flaws of windows and not many people know this is it does not come with the text editor built Into the command prompt you have to go to the internet and download it at least in the at least in the current versions I mean, I don't know maybe back in the DOS days. I remember using some sort of text editor Maybe there is a text editor in power shell, but I can't I've never heard of it and I can't find it But I didn't I didn't look very hard either. So what we're gonna do is we're gonna type our code into notepad But first we want to make sure in the right directory. So Here I'm on the D drive But I know for a fact That notepad when I try to save this is gonna try to save it someplace crazy So we're gonna go control s and is gonna try to save it to my power shell profile folder We don't want that. So we're just gonna paste this directory right there And if we hit enter it was all it says it cannot be found. Hold on. We're gonna do this again We'll grab this control C go back to notepad control V and then instead of that symbol at the end, we're just gonna give this a name and the name is going to be new dash project Dot PS1 And so now we have our new project that PS1 and here's the deal every time I start a new project a new web development project I have to type a bunch of folders, right? So I have to go and I'll do a You know here actually we'll just type it in here So the first thing I do is I make all the folders that I need and we are gonna zoom in so you can see So the first thing I do is make all the folders folders I need and I so that's a command of MK di are and then I type all the folders name So I'll go CSS and Java script and then I'll make a documents folder for the documents I'll make an image folder for the images and that's it And then I'll go and I will type in new item and I will make a new dash item I will make make a index.html. I'll make a main Dot CSS but the main dot CSS has to go in the CSS folder So that goes here in the CSS folder and then I have to make a We might as well just copy this control C control V. I have to make a JS to hold the JS files and This is pretty much typically that the what what I do whenever I make a new project Now this isn't a lot of work But when you start to think about the fact that this isn't a lot of work And it can be done faster that means that you can do exponentially more work exponentially faster So when it comes to learning to code and learning to program and learning to write Applications and all this stuff right we have that we have to think a different kind of way right now We're programming one another to believe that a job is the route to go If we need a job to get money, which is cool But what happens is we get sucked into the job and we stick around for a very long time and most of us are not happy doing the jobs that we're doing and We aren't learning anything but most importantly right Computers are gonna take your job and There's there's there's there's no getting around that team right it's gonna happen at some point But you can be the person that programs a computer and you can be the person and Here's it gets even more powerful if you're the person that can program the computer You're the person that can do anything you can all you can automate Almost everything you do and it's only gonna get easier It's gonna get easier and easier easier team and you can be a part of that and this is where we're starting right with The simple script just thinking about this if we can make one directory on one computer We can make millions of directories on music computers right and it's all just us issuing commands. So what we're gonna do is We're gonna turn this into a program So we'll put a semicolon at the end that's gonna say hey, this is one command We'll put another semicolon here is gonna say hey This is another command completely separate command. These are both commands, right? So we're calling PowerShell and we're telling PowerShell to do this stuff And then we're calling PowerShell again, and we're telling PowerShell to do this stuff This is how every programming a language works All we are doing is telling a computer to do something in a series of steps. That's it Now we I want to create these folders inside of a different folder So they don't so I don't just have this directory full of folders So I'm gonna show you guys what I'm talking about. So we're gonna go control s to save We're gonna go back here to the construct and if we do a dir There is this new project dot ps1 right here, and if we do a git dash Content that's gonna show us what's in this new project file And it's the same stuff that we just type now if we type in new project and hit tab We can execute this file now. We can execute it because we're telling PowerShell Another command. We're just giving PowerShell. We're saying hey PowerShell, right and PowerShell is waiting for us to type something This is a program. It's reading what we're typing is that we say dot and then we put a dash and PowerShell knows right. He's he's saying in this folder Do something with this file In this file is project that ps1 when PowerShell sees that this is a ps1 file It starts to read what's inside the file and do what the file says That's programming. All right, so we're gonna hit enter and it's gonna try to make all this stuff But it can't because it ran into some sort of error somewhere could not find a part of the path the DCSS Main CSS so this and it tells me where that problem is it's on PowerShell one in line number two So if we go to our document over here, it's on Let's see PS1 line to alright, so our errors on line two and let's look at this. We're saying we want to make a new item Oh Index.html we want to make that and we want to make that and whatever directory that we're in already and then we want to make a Maybe we don't need this opening Bracket, so we'll save and We'll do a dir and oh we got all these extra files over here right now because everything created in this directory And we don't want to do that and we don't want to have to take this this Folder around everywhere we go. So what we'll do is we'll go back over here and we'll just say We'll make these in a new project directory and we'll just call that directory code so we'll do make a code dash CSS directory and we'll make a Code that will actually we'll copy this copy this right here control C and inside of that code directory. We're gonna make a Code.js and we'll do a All right, so everything's gonna go in the code folder. We'll put some spaces in here Just to make it read make it easy to read We'll do the same thing for this image is of course and then over here our index is gonna go just in the code folder But our CSS our our JS is gonna go in the JS folder. So it's gonna go in code Hold on control Z to undo that CSS digest this should be main digest main dot CSS This should be main digest right here main Dot JS and then all of this stuff. I see I messed this all up. This is but this is probably where our error was So we'll get rid of this All right, so what we're doing here, right? We call it. We're giving power shell a command Hey power shell we wanted new item power shell goes what what what the what's this new item gonna be we say? Hey, we want a code and we want Inside of the code folder. We want you to put an index.html. So we got a spell this right M L and Inside of this CSS directory. We want you to put a main dot CSS file and inside of this Well not inside of this CSS directory There we go There we go. This is gonna be yeah, it's gonna be CSS, but it's gonna be code CODE 4 slash CSS and then this one over here for the JavaScript is gonna be code slash JS slash Main.js all right, so Now we're saying hey make all this stuff, but make it in a different folder So we'll go back over here and we had this error They gave us a chance to look at something and figure some things out while we were in there We ran into some typos that we made and all kinds of stuff So we go back over here and what we got to do now is we got to clean up our old mess So we're gonna go start We'll go out here and this is gonna open just a regular Explorer window and we're gonna get rid of all the stuff That we don't that we don't need all right, so we don't need that we don't need this I'm just gonna control select these so I'm gonna zoom in so you guys could see we're gonna get rid of this JS folder we're gonna get rid of this image folder this hold on what directory are we yeah, we're in the construct okay, so we're gonna get rid of JS image doc CSS and index and That's it and we're gonna delete those delete and now those are all gone and now we're gonna go back here And we're gonna try our program again, so if we do a dir all that stuff is gone We'll clear in the NDR so you guys could see and now we're gonna run our new project again So we're gonna do a dot backslash new and then we could just hit tab or Power shell is smart when we do when we type new and we hit tab power shell Searches the directory is in for anything that starts with the in character And it finds this file and when we in that's the first thing it shows us But if there was something else in here with the in it would show us those two All right, so well not necessarily in this directory. There's commands that start with the in as well. So anyway, we're gonna go new dash project PRO hit tab and run it and now what has happened. Let's see so we've made Constructs so it made this folder in this directory. It made this ah We messed up the IR. We didn't restart power shell. So So basically we got to go restart power show to clear out all of the information the power show already has So we can start fresh but before we do that we're gonna have to Start dot and go get rid of all these files again now. We could do this in the command line We could just delete them ours. We could delete them ourselves But uh, but that requires a lot more Typing so we'll just come in here. We'll just do this CSS docs and code So we'll go late okay. No, we want to keep the code. We'll get rid of CSS docs images and JS and index So we'll get rid of those Delete and now we'll go back to power shell and we'll type exit And it doesn't matter when we exit power shells is just that's when I chose to exit it So no now what we're gonna do we're gonna make sure Everything looks good. So when we make a directory, we're gonna make a code Inside of the code directory and actually that directory that we want to make this stuff in well, you know, we'll leave it like this This is good So we're just we're saying make a CSS directory inside of the code directory make a JS inside of the and so on and so forth Make sure you got this right see it code. All right This isn't uh, yeah, this is correct. Okay All right, so we'll save And we'll go back and now we'll open power shell again, so we'll go power shell and Do a dir and let's run new projects. So we'll type any w tab and hit enter and it created the files It looks like it looks like it created them all in this There we go. Okay, so there's code All right, so when we do a dir We have a code directory and then we do a dir code. We can see what's in that directory now to make sure this worked We're going to do a Code we're going to do a dl code port slash Star and that's going to delete all the files in that code directory. We just hit a we'll do a dir Well dir in the code directory dir again dir In the code directory and so you see right so everything in the code directory is gone We'll clear this out and do another dir and if when we run this project If files end up in the code directory, we have a working program. So we're going to click to select this We're going to right click And then we're going to type well actually we'll just right click again Then we hit tab In order to make sure power shell knows. Hey, this is a file. It's a power shell one file inside of power shell We want to run it. We want to run these commands. So we'll hit enter And it does it does do dir. There's nothing in this there's nothing new in this directory dir code Now we have all of these files in this directory And we have just wrote A program this is a program that creates That creates files it creates the files we need Now the other aspects of programming are the writing two files The updating of files that's adding and removing information to and from them and then the deleting of files And we actually covered the deleting of files today But we can write functions and all kinds of programs to do all kinds of stuff like this all over the place Now we've created this basic scaffolding and we have this index.html so We can begin coding a web project now in the very next video that's coming down the pipe team I'm going to be showing you how to build a website from scratch From the ground up with nothing but html css in javascript You don't have to go out and learn a bunch of fancy stuff But you are going to be able to create a fantastic website and this is the website We're going to be creating in the very next video too. We are going to be making supreme new york dot com And on this site, they have a nice logo up here. They've got full page background image with the tint on it We've got links that light up when we scroll over them So do the social media links and they have a clock here in this clock Actually tells the real time if we do a control t and go over to get time and date dot com Uh Get Time and date Oh jays come on man. There it is time and date dot com. I should have started this website I've known about this website for like 20 years now, but anyway team The um as you can see right here. It says 755 p.m And we could go here and we could put in the city and we could put in new york And it tells us right there in new york. It is almost 11 p.m And if we go back to the website, it tells us it's almost 11 p.m So we're going to be incorporating this technology in that video as well team So that is it team. We have done it. We've we've done it. You did it. You've learned to code You have seen the the fundamentals of all programs And now if you want to learn more all you got to do is go out and seek more knowledge And the best way to do that. Well, one of the best ways to do that Is head over to the code 365 startup lab team Where you will find introductory courses in html css JavaScript Whatever it is you name it is there and you could also if you want to you could join the code 365 startup lab community And all that does is uh for 99 bucks you get lifetime access to all the courses that i'm making So right now in the free section you see there's a bunch of free courses here But if you go over into three into the startup lab, i'm working on one humongous one humongous course There's going to be html css and javascript is going to encompass a ton of stuff It's going to cover everything you need to know to build modern web applications And i'm talking have an idea design it out code it out put it on the internet and then Scale it out sell it do whatever it is you want to do team That is what i'm building into this course and as time goes on i'm going to be building other courses Is well for different projects like like the website project for instance So if you want to support the channel if you want more content sign up for the code 365 startup lab right now It is 99 bucks for lifetime access and i think i'm going to leave it at 99 bucks for lifetime access Uh probably until the end of the year team So take advantage grab that and if you if you want to just test it out for a while The $20 a month will get you there But you can also just take any one of the free courses and i'll have more Independent courses coming just like this team The one i'm really excited about right now is the one that is going to replace the web dev primer and that is going to be HTML genius And that's where we're going to dig deep and we're going to get Down into the nitty gritty of html and be able to really build some cool stuff That uh a lot of people just don't even know about because they don't go out and they don't read the documentation And they this stuff team. So that is it. It is me your biggest fan of the real castadero I look forward to seeing you next time team. I don't know you i never met you But i know you got greatness within you and i will see you in the next session


Hello guys, I'm Philip Magnus and today I'm going to talk about Tyranny Act 1. But before that, I have a question. How do I start to talk about a game that has scored basically every major box in my list of things done right in a role-playing game? Well, perhaps some background is in order. Tyranny is a story where you, the player, take on the role of a Fatebinder. But what is a Fatebinder? Well, you are basically a Judge, Jury, Executioner and occasional Elend Boy to Karras, the evil Overlord, who has done what Sarum and Voldemort, those pesky loudmouths, never could. She has taken over the world. With a mastery of all powerful magic, Karras' edict spells, the Overlord rules uncontested. Act 1 picks off after two of Karras' Arkans, the leaders of the disfavored and the scarred chorus respectively, managed a semi-successful Invasion of the Tears, which is basically this last part of Terratus, still not officially under Karras' rule, I say officially, because the Tearsmen use the same language, currency and their culture isn't too far from the one under Karras. At any rate, before you start the game, you can make several choices in the Combust mode, which will greatly enhance and change the state of the world. Basically, you will be suffering from consequences of those choices for the bigger part of the game, or at least for all of Act 1, I suspect that it goes over Act 1, however. So, what I'm trying to say here is choose wisely and choose with care. Your choices will matter. The game starts after you do the whole conquesting, with you bringing a terrible edict to the two Arkans, the voices of Nerath and Graven Arsh. The edict is a direct response to a rebellion that the two commanders seem unable to crush, mainly because of their bickering and constant rising hatred and loathing for one another. Karras' message in pragmatic overlord fashion is, end the rebellion, or all within the Tears will die, including you guys, oh and Osu, you the Fatebinder, who unfortunately ended up as the expendable Erenboy. What happens in the very first scene, once you click that start game button, is that the pass you just pass through, to get to the Tears, haha, get it, pass through which you pass through, anyway, it basically becomes inaccessible. Thank you, Karras. Well then, that's about enough background for you folks. The basic gist of the first act is that you have 8 days until Karras' Day of Swords, during which the edict you just carried to the Arkans, is basically going to activate and murder everyone. And I suspect that you don't want that to happen, although there is an achievement if you do not stop the Outbreakers, so anyway. It sounds easier than it is, rising tensions between the restrained Honourable Draven Arsh, and the absolutely insane, albeit hilarious, voices of Nerath. Much could be said about either of these characters, and I have a feeling that I'll take my time to discuss them in their own videos, but the most important thing to understand is that these Arkans factions are reflections of their very leaders. The disfavoured are a small professional army, Claudine Ireland professional, I already said that, and merciless. They are basically very, very much going to make you feel like a hero, and like an honourable man, which is kind of going to tilt your perception of what you are doing, you are going to forget just how evil some of the things you do are, if you follow them. The Scarlet Karras, unlike them, the disfavoured are always also very picky about who they include in their ranks, unlike the Scarlet Karras. The voices of Nerath's faction and followers, they are, let's just say, absolutely insane, and like a microcosm of the worst that Darwinism has to offer. Constant power plays, advancement through killing, and I don't know, an overall hostile work environment, let's just say that it doesn't awake my fate in humanity. And there is something strangely charming about that psychotic bunch, which I ended up choosing, maybe because they don't hide who they are through noble means and through noble language and through this feeling of superiority that the disfavoured have. Plus, it's mainly because of the fun as hell companion, slash assassin, slash elite Scarlet Karras soldier, slash Scarlet Fury, verse. Verse is the very first companion you unlock, and suffice to say she is a lot of chaotic murderous fun. Speaking of choice, say goodbye to the binary good guy, bad guy decisions, you've gotten used to in Bioware's Dragon Age or Mass Effect games, and as well as a bunch of other RPGs that have similar choices. Serving a bad guy, in this case a bad gal, since Karras is a she, means making tough decisions, some of which can be downright evil, but that's ok, being a bad guy isn't all bad, and it is where Tyranny excelled, in so many different ways, if you want a game which can show you evil in an entirely, well not an entirely, but in a new light, in a unique and ambitious way, Tyranny is the game for you. And its first act is going to give you plenty of opportunity to do some wretched evil things, as well as some small acts of kindness of course, like telling the truth to sorcerers or many other choices that you wouldn't expect in most other games, or any games really. Take the skills usage for example, if you have an athletics of let's say 35, you can basically go towards an enemy, grab him and choke him in your hands if he displeases you, which kind of sounds Star Wars-ish, yes actually if you like the dark side and sit, Tyranny is probably for you, as well as there are many options with other skills involved and your background, which you choose from I believe 10 or 12 different options I personally want to, with the noble backstory, because this seemed to fit my power fantasy and what are these games if not an outlet for your power fantasies, so go ahead and you know, play it and let's see what you'll come up with, tell me about it in the comment. At any rate, you've probably gotten it from my voice, but I'm really happy with Tyranny so far, it's much shorter than Obsidian Entertainment's last entry in the RPG genre, Pillars of Eternity, which I still haven't finished by the way. Tyranny is a mere 20 to 30 hour experience, whereas I've seen people put in Pillars anywhere from 100 to basically 500 hours, which I have no idea how you can do that, but congrats mate. A lot of the time you'll spend in Tyranny is basically reading text, but boy, what a good text. The writing of Tyranny is absolutely fantastic with this moral ambiguity I already spoke about and a general feeling and ambience, which reminds me a lot of the Malazan books of the fallen, which if you haven't read, you should. Particularly in its use of everyday language between soldiers, the dialogue in Tyranny doesn't come off as pretentious but rather as very realistic, which I realize is a word that doesn't fit much with the topic of a game about an evil judicator who does his overlord swill, and yet that's exactly what it is. The characters are so much fun. The two Arkans are really colorful characters, sorry I'm using characters way too much, they are really interesting. Their minions are also nothing less than a thrill. Verse Landry and I believe Barak, or is it Borak? I have it written down somewhere. Ah yes, Barak. Those are the three companions you unlock during the first act. You also unlock Ebb at the very end of it, but I don't really know much about her yet, so I'm not going to discuss her here. Anyway, verse is the slightly psychotic girl with the heart of gold. Landry is a sage from this library, which you have the option of basically burning down with an edict of Caires at the very start during the conquest, and Barak is a disfavoured who can't remove his armor, because he was in the middle of another edict, which did things to, well basically he managed to survive, but only because of some strange occurrence that locked him in his armor, which is cool, which is nice. I don't blame him, he's a really tanky character, but also he is very much a bigot, and he has a superiority complex. Not at all too pleasant once you strip away the nobility of basically the disfavoured, which is what a lot of the members of that faction are really, which is not to say that the Scarlet Chorus faction is better, I mean versus a psycho and she doesn't hide it, and neither do most of the other Scarlet Chorus members, which is really impressive and amazing that I find them so charming while they are absolutely bonkers. Well, each of these characters have only about one tenth of their dialogue voiced. All the companion voice actors are nothing less than stellar.  It's really a great way to handle characters the same way in fact that they used in Pillars of Eternity, and I do believe that one of the actors at least makes a return from Obsidian Entertainment's 2015 game. Now a bit about combat, and I still haven't made my mind up about it, but you've probably seen some footage of it by now, and it's safe to say that compared to Pillars of Eternity, the combat system is a lot more simplified, a lot faster, easier to get into, spells are cooldown based instead of limited per every rest you make with your characters, rests really are used only to cure wounds and for a very limited array of opportunities which you can unlock by having either more favor or rat with your companions, as well as having more favor or rat with factions. With factions though you unlock passive abilities, whereas with companions you unlock active ones, which is all fun game, all of these abilities which you unlock like that, they are insanely more powerful than I think the magic is, the magic is weak, it is not all that interesting, although it has a fairly fascinating, yeah let's go with a fascinating concept of preparing your spells, which I will go more in depth at a later date once I know more about it. Till and his first act has presented a big fascinating world which doesn't annoy with its writing, actually it's the very opposite the writing is exceptional and you're going to fall absolutely in love with it, I know I did and I know that I need to play more of it. It allows you to take on a perspective that has never quite been done before, not like this anyway, you may go with some tried argument that's overlaid and so on and so forth, did let you go in the shoes of villain but that doesn't really, it doesn't have anything to do with what is going on in Till and he the first act has only managed to wet my appetite and to make me want to play further. I will be returning with more comments, more videos about Till and he because honestly this game is a lot of fun and I'm probably going to replay it three times because I can see three maybe even four routes which I really want to take so far and who knows maybe there will be more in the future anyway thank you guys for watching this was fun and I hope to see you next time if you enjoyed this video please like share and subscribe if not send it to the guys and dolls you hate and make their day worse or better bye we'll need to advance across the matani we lose everything if we stand still and we move to back up plan green the earth shakers didn't make it over the mountain in time so we do this the hard way over the walls instead of through so you found your backbone at last we were worried past humiliations would make you soft timid that was a record for you right the makers dozen lost in one sortie if you had waited for the chorus reinforcements maybe we'd have eyes and ears on the matter


Appalachian Wireless has a plan to make your life simpler. It's called forward pay. No contract, no credit check, no problem. Plans start at $19.99 a month and include unlimited talk and text or ticket to the max with unlimited data plus for only $89.99, which has 50 gig of high-speed data because we are you. We are Appalachian Wireless. Turf is being installed at the baseball fields at Stonecrest in anticipation of hosting the 15th regional tournament for the next four years. We are really excited about it. Let me start off with that. We're going to have a Turf Enfield for both softball and baseball. And with that, we've also got a contract with the 15th region coaches for softball and baseball that will be hosting the regional tournament for the next four years. And it could be ongoing after that. So the fact that we can bring everybody here, we have more parking than any baseball, softball field in the region. We're centrally located. And that's a big excitement about it. These guys been out here working. I know we worked last week, three days. And progress seems to be going really well. And then Mother Nature kicks in like it did today. But we're excited we're going to be able to have these turf fields. There'll be no rain delays. There'll be no rain cancellations, unless it's just a monsoon. With weather being an obstacle, there is no clear time on when the turfing of the field will be completed. Well, we start out with a normal field. And we then take out all the dirt we excavate.  We put our filtration down. And we build it back up to where it to stone to a certain elevation. And then the turf goes on top of it. We tape. We turf is bonded together with turf glue. And then at that point, you've got a field. With professional grade turf on the field, children will have the opportunity to play and train in the same environment that is expected of college and professional athletes. For Mountain Top News, I'm Kelsey Dean.


Salamu alaykum wa rahmatullah wa barakatuh Welcome to Ahkam SOS, the show that discusses Islamic duties and practices in accordance to His Eminence, the Grand Ayatullah, Sayyid Sadik Shehrazi, Hafizullah I'm your host, Mohsin Shah, and joining me is Shaykh Ali Maaj, Salamu alaykum Shaykhna Salamun alaykum wa rahmatullah Shaykhna, today's discussion, I want to discuss with you congregational prayer, Jama'a. What is the Sayyid's opinion in regards to congregational prayer? Is it Mustahab? Is it Mubah? Is it Wajib? Insha'Allah It is Mustahab for the individual, for the Mu'min and the Mu'mina to perform their daily Salah, the Wajib Salah in Jama'a, congregational. And that, of course, there are narrations of this regard that the one should, if he's able to go to the mosque or to the gathering and offer the Salah in Jama'a. And the emphasis on the Jama'a is for the Salat al-Fajr, the morning, as the Sayyid mentions, and Maghrib and Asha'a, these are the main and most emphasized on that the one prays at least these three sessions. And, of course, for those who are the neighbour of the mosque, and I've mentioned the previous seasons that, and I brought the hadith, that the one who prays next to the mosque in his house and he doesn't go to the mosque, his rewards for the Salah is lessened and the better to go to the mosque, which is nearby and offer the Salah there. And also the Sayyid mentions the one who hears the adhan of the mosque, nearby mosque. So those two groups more encouraged to go and pray in Jama'a in the mosque, in which, in the neighbourhood. I think he's also mentioned that it's 40 houses in every direction, isn't it? They should come and congregate at the mosque, mainly the community of the Masjid. Sheikhna, what happens if I've already prayed Salah? I've prayed my Dhul-Hul-Asr, I've come into the mosque, and there's a Jama'a going on. Am I allowed to join it? Yes, of course. I mean, if you already prayed at home and you came to the mosque and you found some praying in Jama'a, you can, again, pray the Salah, the same Salah you prayed already. You prayed in Jama'a again. Or even if, let's say, you and the Imam were in the mosque only, and you both prayed separately individually, the Salah without the Jama'a, you can both, again, join together and repeat the Salah you prayed already individually in Jama'a. That's fine. Mashallah. And why do you think there's so much encouragement in regards to Jama'a Salah? I mean, what are the rewards of praying in congregation? Well, there's a narration with this regard, as I've mentioned, about the rewards of the one who prays in Jama'a. And for every raka'a, and the hadith says that for every raka'a, not of every Salah, every segment of the Salah, the raka'a itself, which has, for example, Alhamdulillah, Surah Al-Quran, Sujood, carries the reward and the thawab of 150 Salah, if the one prays with the Jama'a. And that's, of course, the one who prays with one person, one person with the Imam. Now, if there are two people gathered and pray Jama'a, the hadith says that for every raka'a of their Salah carries the reward of 600 Salah. Wow. Subhanallah. 600. So as the number increases, the reward will increase too. Subhanallah. Until the hadith says that if their number exceeds 10, it's more than 10. Yes. The hadith says that if all the skies were sheets, it's a paper, and the seas were ink, and the trees were pens, and the jinn, and the ins, and the angels were the writers writing the thawab, they would not be able to write the reward of one raka'a of their Salah if it exceeded 10. That's just one raka'a. Exactly. So imagine the greatness and for such Jama'a prayer that we usually miss. Masha'Allah, sheikhna.  Wajib, what about the mustahab prayers and the nafila? Can we gain the same rewards for those prayers as well by doing congregation? For the salam mustahab, we cannot pray at all in Jama'a. For the nafila, they're only done individually. You cannot pray the nafila, nafilaat al-subh, nafilaat al-maghrib, as-jama'a. You pray them separately, salat al-layl, namaz al-shab. You cannot pray it in Jama'a. These are done individually. And of course, what has been done and innovated by the other sect of the Muslims in which they prayed tarawih, for example. That's innovation. That wasn't in the time of the Prophet, Sallallahu Alaihi Wasallam. He never prayed mustahab salat in Jama'a. And they innovated this afterwards when some of those so-called caliphs came and they innovated this new way of praying, sadly. But in all, we don't have such a thing. The exception is in the Eid al-Fitr and Eid al-Adha that we pray Jama'a, which are mustahab. Because they were originally, they were muhajib in the time of the Imam of that time, of the Ma'asum, Alaihi Wasallam. But now, because we have an Imam who is not with us, then we can pray it as mustahab, of course, in Jama'a. Eid al-Fitr, Salat al-Aid, and Salat al-Adha. These were the exceptions. And of course, you have the Salat of Istisqa where you go in the middle of the desert and you pray for the rainfall. Otherwise, we cannot pray any other Salam mustahab in Jama'a. I understand. Sheikh, sometimes in congregation, in the Jama'a, there's just so many people. I've seen even the lines going outside of the mosque and so forth and so much. I mean, is this allowed? Are we still allowed to join the Jama'a that way? Are we still going to get the rewards and the thwab? What is important in Salat al-Jama'a is that you must have that person who links between this row and this row and the next row. So the front row and the back row in the middle there should be something. There shouldn't be a barrier, a wall, for example, or a closed door. If they reach the main entrance and the doors are open and there's somebody on the door praying, then you can join him or you're outside of the mosque or outside of the prayer hall. You still can pray by joining them and praying behind that individual who is standing on the doorstep of the main entrance inside. And you just join him behind him and you pray and whoever is on your left or right who doesn't see the Jama'a or the Imam or the prayers they also can, based on your being there as a link, their Salat will be accepted. That's fine. That sounds sheikh. It seems as if that, you know, you can keep connecting and you can probably go all the way into the car park. Sheikh, is there a ruling in regards to height as in if you're praying on a slope or on a hill, is there any rulings in regards to a Jama'a on such a situation or such an area? The said here mentions that the prayer leader or the Imam of the Jama'a when he stands for the Salat his position must not be more than a span of the hand which is about 20 cm higher than the others who stand. So let's say if the Jama'a are on the floor and he goes up, let's say 5 cm, that's fine but up to 20 cm or a span of a hand and in this case he cannot go up more than this limited given measurement otherwise the Salat will not be accepted. So you have to make sure you don't go up as Imam or leader of the Salat over the limited given. So the Sujood has to be within a certain limit. I mean I've seen in Iran we see sometimes the mu'am-e-meen they have these stairs that go down and they're lower than the rest of the Jama'a do you think that's why it's there so that they don't do the Sujood higher than anyone behind them? No, we have something called Mihrab in which the place in which you do worship there so it's lower than the Jama'a. That's fine but the question was about if it's higher than the Jama'a going up for the Imam is an issue. Down is fine but to go up that's the main issue that shouldn't exceed 20 cm or a span of a hand. That's right. Sheikh, what about we always bring children into the mosque we encourage our children to pray Salat sometimes we get them involved in the congregation as well in the Jama'a does the link remain in terms of children being there are we allowed to am I allowed to join the Jama'a if there's a child in front of me and is my Salat accepted? Well that child is not reaching the age of adolescence he's still a child in which the Salat is not wajib on him but let's say he's used to pray at home and he wants to join the Jama'a as well to get the blessings and in overall some of them say that there's a lot of the child is also accepted you know rewarded his parents are rewarded as well they would accept the Salat of the child and in this case they say yes if you don't know about the way he performed the wudu for example the way he prayed you don't know if it's Ba'at or not Ba'at that's fine Sheikh, I was taught that there's rules in regard to praying in Jama'a when it comes to the leader and you're not allowed to go ahead in terms of the Salat so if the Imam of the Jama'a is in Ruku I'm not allowed to go into Sujood what about if there's like people in front of me let's take Takbir for example Takbirat al-Ahram the Imam of the Jama'a has said it but I'm in the third row and the people in front of me haven't done it so do I have to wait for them or can I do the Takbir and start my Salat if the first row is almost about to start the Salat they haven't said Allah Akbar the Takbirat first in the first place but they're about to say it the second and the third row they're allowed to start that's fine because they're about to start the first row is about to start the Salat so you can say Allah Akbar before the first row and the first line of the Salat that's fine there's no issue with it as long as they're ready to start the prayer they're not sitting for example doing Tasbih because the first row is the main link between the Imam and the Jama'a behind the first row must also be initiated properly so the rest could follow so that's fine as long as they're going to start the Takbir you can start before them it's fine what are the rules in regards to having an Imam of the Jama'a and I mean we always hear that they have to be righteous and they can't sin in public well if I'm not sure about this person and if he's fit to lead the congregation well if this Imam possesses a good personal character and you have some kind of assurance that he's a good person now and he's of course he's just, adil now to get this assurance either you ask those who are in the Jama'a that you know them your friends, colleagues whoever prays behind this Imam and they will tell you that yes we know him he's a good person just person, pious for example then you pray or you might yourself know the Imam roughly you know him that he's a pious person he's mutaqi he doesn't do any sins and so forth then that's it you just follow the Jama'a there's no issue with it as long as you have gained the information and assurance that this individual is just and righteous that's fine what happens if I find out later on that oh no this person wasn't just and righteous or let's say the Imam of the Jama'a he didn't have wudu and later on he said oh sorry I've made a mistake I didn't have wudu is our Salah battle or do we have to repeat the Salah if you discover later that the Imam Jama'a's Salah was battle for example or was wrong or didn't meet no conditions but you pray that correctly as a follower of the Jama'a then your Salah is valid and correct there's no issue with it he needs to repeat but not I as a follower of the Imam so for myself I did it in the right way I don't have to be worried about repeating the Salah again Sheikh what about when I'm in the Jama'a and for whatever reason I want to pray individually I don't want to continue with the Jama'a can I change my knee and can I opt out to do Faradah or do I have to start from the beginning you're allowed to actually leave the Jama'a so let's say the Imam is reading Hamdan Surah and he finished the Surah he's about to go to the Ruku'a you can make the intention that you're going to leave the Imam from now on and pray individually Faradah so you go to the Ruku'a and you just leave the Salah as a Faradah individual that's fine you can however if I was in the middle of the Hamdan Surah and you were quiet because you have to listen to the Imam's Hamdan Surah if you made the intention of leaving you must continue the rest of the Hamdan Surah you read the rest by yourself Faradah and you completed the Salah and of course you cannot go back to the Jama'a after making the decision and the intention of going alone and Faradah you can't go back to the Jama'a so you have to complete the Salah as a Faradah individual Sheikh Naab when is the best time to actually join the Jama'a we always see it we're all there getting ready to prepare for Salah the Adhan happens we all stand up, the Aqama happens we've entered the Salah and then we're listening to the Imam we recite Surah Al-Hamd we're going to Ruq'u and you're always going to hear someone Ya Allah, Ya Allah when is the best time when is the last time we can join the Salah what Raqqa do we join in if it's the second Raqqa do we act as if it is our second as well or should we do those things which are prescribed in the first Raqqa and so forth if you join the Salah a bit late and the Imam is about to go to the Ruqqa or he isn't the Ruqqa then you just make the intention of whatever the Salah is and straight you go to the Ruqqa by saying Allah Akbar Takbir al-Ihram and then the Takbirah the second Takbirah to go to the Ruqqa and you join the Jama'a straight away so you join the Ruqqa if you missed the Ruqqa and let's say you said Allah Akbar and you went to the Ruqqa but the Imam stood up in this case you have to as a precaution repeat your Salah because now you didn't catch with the Imam in this case you have to repeat the Salah again as a precaution of course and of course you can actually wait for the Imam till he let's say if you don't catch the Imam in the Ruqqa you can wait for him for the next Ruqqa so you wait he stands up after the first Ruqqa for example you catch the Imam in the second Ruqqa that's fine and you do all the acts that he does even the Qunot you do the Qunot as well with him for example although it's your first Ruqqa but you do all the acts thank you very much that's all we got time for insha'Allah we will be discussing more on congregation insha'Allah on next episode until then make sure you pray and make sure you pray in congregation because it's a lot more thawab Asalaamu Alaikum


Virtual machines, this is a hardware talk and it's in English. Unfortunately, there is no German translation. We just assume that you can speak English well enough. Virtual machines are all the rage for many reasons, for security reasons, for practicability reasons. But the fact is that just because you're running a VM and you're just a provider, you can still, your hypervisor can still read and write into it. And that may not be such a good thing.  And Claudio, Claudio is from Italy, but he's been in Germany since I think 10 years, something like that. And they come from Chaos West in a further sense. I think they're based in Stuttgart. And they're going to tell you the challenges of protected virtualization. Not only VM, but protected VM, so that you can sort of claims-free, just say this is a black box and have nothing to do with it. Let's have a big hand, please, for Claudio and Janos. All right, let's start up with a big greeting from our corporate lawyers. So what are protected VMs? I mean, he already told us that. We'll have a look into what's the basic definition of it, and then what we did, how we implemented protected VMs on our platform S390, or you may know it better from the name, Mainframe. Claudio here is KVM and QMU developer for S390, and he actually made another talk about the topic, which you can see on the YouTube of KVM Forum 2019. And this is Janos. He is the KVM S390 commentator and also QMU developer. He also made other talks at the KVM Forum, but not about this topic. OK, let's step in. So protected virtualization, or sometimes also secure virtualization, allows for virtual machines whose state is not observable and alterable by the hypervisor. So the hypervisor can't reach into memory, it can't get the registers, and that brings us a lot of benefits. One is we can protect against malicious operators. So if you are hosting a cloud environment, you might fear that one of your operators extracts customer data from VMs and sells it to somebody else. We can protect against malicious hypervisors if the operator himself was not able to get access to the VM, but maybe he was able to infect the hypervisor and then get access to the VM. Protected VMs kinder also gives some protection against bugs because we provide protection against memory overrides into the VM. And then there's the big topic mostly for banks, which is compliance. When we speak about secure entities, secure VMs, we mostly currently speak about secure enclaves. And enclaves are pretty small. You need to adapt your code for them so they can run. But they provide one of the most important things, memory, integrity, and confidentiality. They don't provide denial of service protection, but basically nobody provides that because you can just unplug the machine. Protected VMs, on the other hand, can take basically any workload. It's just a VM. It requires moderate kernel support, but user space can basically stay the same. We currently do not have any changes to our user space. And they also provide integrity and confidentiality for the memory. As with everything, they are still vulnerable to DOS attacks. As an example, Intel and ARM have SGX and trust zone as secure enclaves. And the hot new thing, Protected VMs, is provided by AMD, who stepped forward at first with SEV. And they're also working currently on add-ons for that. IBM C, the mainframe. We currently work on Protected Virtualization, which is a working title, so don't put a pin in that. And IBM Power has Protected Execution.  And for VMs, also, a big part is host memory management, swapping migration, and all of that. How do we protect it? Well, first of all, for the state, for the memory, and for the CPU, we can give encryption protection. That's actually what AMD SEV does. They have different keys for memory encryption for the hypervisor and the VM. So if the hypervisor reads from VM memory, it will read encrypted data with the hypervisor key, but not with the VM key. So it will basically read garbage. Same thing applies if it writes to the VM. Then we have hardware-assisted access protection. Well, that's basically one of the key things to have in our opinion, because that allows us to also protect against write accesses. Then the hypervisor cannot only not read from the VM or reads just garbage, but it can also not corrupt the VM. We also need mapping protection so that if we have a page, the hypervisor cannot just remap it at a different address if the hypervisor knows the contents of that page and maybe alter execution within the VM. And then we also can give integrity protection of the data, which is not completely the same as access protection, because if we think about swapping, then you also need to make the data readable. But if you give it back to the VM and swap it in again, it should be integrity protected so that what the VM gets back at the end is still the same that was swapped out beforehand. All of these can and basically should be combined to give maximum protection. Let's go ahead to the boot image. Well, for the boot image and for booting in general, we used to have the TPM. And the current implementation of boot image protections are basically a successor of that. We can have encryption, which allows us to precede a VM with secrets, SSH keys, looks passwords, and so on. And we can have remote attestation, where a VM comes up, boots. And at some point in time, it will be measured, so a hash will be generated. That hash will be sent to the customer server. It will be validated there if it is a trusted boot image. And then the VM continues running. Attestation is really nice to have, but having the ability to just encrypt the boot image and also have it integrity protected just by a hash is great because of the ability to precede it and just reducing complexity of the whole attestation stack. I.O. is a bit of a problem because for I.O. you need to make VM memory visible to the hypervisor. If you have a look at Word.io, that's all done through VM memory. So everything that the VM sends and receives needs to be encrypted. You need to have full disk encryption. You need to use HTTPS, SSH, encrypted protocols, except for, well, if you want to make something really readable, which is maybe boot messages or just an error output via standard console. The VM cannot and should not make assumptions about the behavior of a device. But, well, in today's times, how often is that the case anyway? So that's just normal behavior currently. In the future, we might have dedicated hardware, which actually provides a protected channel between a VM and the hardware. And then you could communicate with that device without encryption. But I'm currently not aware of any hardware devices who support such things. Swap and live migration is a complete other beast for protected VMs. Because you normally can't read the memory. You can't write the memory. So normally, you get it in an encrypted form, transfer it to the other host for migration, and then you need to bring it back.  The integrity needs to be checked. And you need to check if everything has been transferred to the new host. So that's a whole other challenge of complexity, which a lot of people are currently working on. So Claudia here will give a brief overview about the implementation on IBM C. And as we can't trust the hypervisor anymore, the question is, which entity can we currently trust? Well, we did a poll, and the new name of that entity is Ultravisor. Problem will be, what's the next entity below that? Let's see. And of course, on the mainframe, we have an instruction for that. So let's have a look at what is this ultravisor and what it does. The ultravisor is a trusted entity and it's implemented in hardware and firmware. And it basically takes over some of the tasks traditionally performed by the hypervisor, like the boot process. So the Cripsen verifies the boot image. It protects the guests from the hypervisor and from the other guests. And proxies all the interactions between the guests and the hypervisor. So it does a lot of work. This is a little table that shows what we trust and what we don't trust. So we don't trust the hypervisor, as we said. We don't trust the normal guests because it's basically the same as the hypervisor from our point of view. So we don't trust them. We trust the protected guests for themselves as in we don't care if they shoot themselves in the foot. That's their problem. But we don't assume that they will not try to do fishy things. So we don't trust them that we're not trying to access each other's memory, for example. So we will prevent that. The only thing we really trust is the ultravisor, which is trusted system-wide. And it's the only entity that is really trusted. And here is a scheme that shows how the interactions between all the moving parts are. So normal guests are not trusted. The hypervisor can read into normal guests. The normal guests, in theory, should not be able to read into the hypervisor. But they could if there is a bug, for example, or a malicious hypervisor. Nothing stops that. On the other hand, you can see that protected guests can only access their own memory. And they cannot access anything else. The ultravisor can access everything. As we said, it's the one trusted entity that can do everything. And nobody can access the memory of the ultravisor. The hypervisor, in general, cannot access the memory of the protected guests. But you see there is an asterisk because, of course, you need to share some memory with the hypervisor in order to perform any kind of IO. Otherwise, yeah, you have a very secure guest, but not very useful. And of course, there's no interaction allowed between the guests themselves. This is the grand scheme of how everything works. Basically, the rest of the presentation is to explain how we make this work. So protection, as we said, the guest memory is protected by hardware unless it's shared. It's only accessible by the owner, so the VM itself and the ultravisor. And when it's shared, also the hypervisor, but never other guests, never other secure guests. The guests and CPU state, so some blocks of memory that contain the state of the CPU or the state of the guest in general, those are only accessible by the ultravisor. So nobody can access it, read it or write it. The host memory is never accessible by secure guests. So this means that, for example, a secure guest will have a very hard time to do any kind of breaking out-of-the-box kind of exploit because a secure guest cannot access, in any way, the memory of the host. The guest to host mappings are protected by reverse mapping table. So in case the hypervisor, for any reason, malicious bug tries to map a page, a guest page to a different guest address that will not work. And I.O., as I said, the guest shares the buffers needed for performing I.O. and it's the guests that decides which pages to share, of course. I put bounce buffers in parentheses because it's not necessary to have bounce buffers in theory, but in practice, this is done with bounce buffers. Finally, some emulation data, which it's bounced and checked by the ultravisor. There are some bits, some pieces of information that are needed sometimes to perform emulation of some instructions. And those are copied back and forth by the ultravisor and they're checked for correctness so that the hypervisor, for example, cannot provide values or bits in registers that are not allowed by the architecture. Of course, not everything is checked perfectly, but this will at least prevent the worst attacks. So what's left in the hypervisor then? The hypervisor still has to do any kind of I.O., so if there is a disk access, the hypervisor will need to read the data from the disk and provide the device model. Probably it's virtio, but it doesn't have to be. Of course, scheduling, from that point of view, it's just a VM, so it's just, and KVM in particular, it's just a process that needs to be scheduled. This, of course, means that the host could decide to never schedule a specific secure VM, that's the I.O. service, but that's unavoidable because, as Janusz said before, you can always put the plug anyway, so there's nothing we can do about that. So the I.O. service is never an issue because it's always possible, there's nothing we can do about it. We don't care. Housekeeping for some instructions, some housekeeping from the hypervisor, they're executed by the firmware or hardware, but still the hypervisor needs to know about it. And finally, some instructions actually need to be executed by the hypervisor. For example, I.O. instructions, not just those, but in particular, I.O. instructions are handled by the hypervisor. So, let's have a look at the life cycle of a secure guest and a secure host and see how this looks like now in this complex scenario. So, first the guest boots, and it boots in normal standard, non-protected mode. And then it loads an encrypted blob in memory, which is the actual protected boot image, although the second step can be skipped in some cases, like if you load the kernel image with a QM or common line parameter, then it's already memory, so you need to load it, but details. And then the guest performs a reboot into secure mode. Basically, the guest asks the hypervisor to reboot, and as a boot device for the reboot, it specifies this blob. At this point, the hypervisor will call the ultravisor and say, hey, I need to create a secure VM, and I need to create these many secure CPUs, and then it will basically pass this blob from the guest directly to the ultravisor. The blob basically contains all this, possibly contains all the secrets of the protected guest, so of course the hypervisor will not be able to do anything with it. So this is just passed directly to the ultravisor, which is the only one entity that is able to actually make sense of the blob. The blob also contains some other configuration parameters, some other keys that are used for some other purposes. At this point, each page of the image is then, we say unpacked, basically, the hypervisor asks the ultravisor to decrypt the page, so the page is first made secure, so it's made inaccessible, and then it's decrypted. So the hypervisor will never be able to see anything inside. Once that's done, we have a boot image in memory that is now ready, it's been decrypted, and the hypervisor just continues execution of the guest. It simply needs to use a different format for the CPU block because now it's not normal CPU, now it's a secure CPU, so some things are different, necessarily. So what do we normally have in the CPU block as CPU flags, a program counter, some registers, including all the special registers, some timer information, all the interception data, basically the reason why there was a VM exit and the instruction that caused it, some hypervisor control flags that altered the behavior of the virtual machine. This is, of course, this is not something that you want to have in a secure, in a protected virtual machine, so we do it differently when the vCPU block is for a protected CPU. So, first of all, when a protected CPU starts, the state is not taken from the block of memory that is in the hypervisor storage, but is taken from one of these ultravisor-reserved areas because it needs to be protected. Except for a couple of bits, we have a couple of bits that are always copied back into the hypervisor because, for example, interrupt management, the hypervisor needs to know when specific CPUs are enabled for interrupts because otherwise it cannot inject the interrupts. Of course, in some cases, some more information is needed, so let's say an IO instruction, there's some small memory blocks that contain some information, there's some registers that contain some important information that needs to be shared with the hypervisor, so the ultravisor will actually, on a case-by-case basis, copy this information back to the hypervisor, but only exactly those bits that are strictly needed to the hypervisor, and if needed, some information is copied back from the hypervisor into the guest, and these bits are also checked. Again, only for those instructions where the hypervisor is expected to provide information to the guest, and those bits are also checked for architectural compliance to prevent the hypervisor from playing any tricks on the guest. That's not all. Instruction interception is normalized, so the instruction text is not the actual text of the instruction, it's a normalized version, so every time the hypervisor will see the instruction with the same registers, of course, the values in the register will be in the right place, the ultravisor will take care of putting things back afterwards. There's a new interrupt injection API because normally we just read from memory and write back in memory to perform the interrupt injection, but that's not possible, so this has to be done through the ultravisor, and of course, there are new interception codes, new reasons to get out of the VM, for example, if some instructions seem to be interpreted in a secure way or if some cases and instructions have been already executed, but still the hypervisor needs to be notified about it because it needs to take care of some housekeeping so apart from these new interception codes, there is interestingly less to check because the ultravisor will take care of most checks and there's a secure instruction data area which is also something that normally is not there, some instructions have some small buffers that are usually just accessed by the hypervisor, in this case, they cannot be accessed, but since they are small, it's also hard to use bounce buffers for them, so what happens is the ultravisor will just copy those in a specific page, this secure instruction data area, and in case it needed, it would be copied back into the guest. It's easy for example, use for console data, serial console and stuff like that, or boot messages. So as I said, interrupt injection need to be done differently, this is done through the state description, so before running the VM, the hypervisor sets some bits to tell the ultravisor, please when you start inject these interrupts with these parameters. Of course, the interrupts are not always allowed, only a few program interrupts are allowed to be injected, these are like exceptions, and these are only allowed when they are expected, so you cannot just randomly inject a invalid instruction or a page fold, that's only allowed when the instruction allows for that to be injected, and of course you can never inject interrupts into the VM if the interrupts are not enabled for those classes of interrupts you want enabled, and this is why the ultravisor needs to give those few bits to the hypervisor all the time about which interrupts are enabled. Swapping is interesting because this breaks everything, now the hypervisor needs to read the memory and save it to the disk and then put it back when needed, so how we do this, we export the page, which means the page gets encrypted by the ultravisor, and then unprotected, so made available. This is initiated by the hypervisor. The hypervisor asks the ultravisor to export the page, at this point it's encrypted and readable, at this point it can be written to the disk, but also hash is saved somewhere in a protected memory area so that we know once we swap the page back, we can check if the content has changed because we have to guarantee integrity. At this point the pages can be swapped, okay so the hypervisor can swap the page to disk and use that memory for something else. Once the page is needed again, the hypervisor needs to swap it back, so okay, reading from disk, you have the encrypted page in memory, at this point the hypervisor asks the ultravisor to import the page, so the page is smart secure, it's decrypted, and the integrity of the page is checked. If the check wasn't successful, the page is not imported, otherwise it is and the guest can continue. If the check was not successful, the page is not imported, means that basically the guest cannot continue execution, so it's as good as that, but that counts as a denial of service attack and we said before there's nothing we can do about it. Anyway, now let's see what the guest has to do. Basically it needs to start boot, check if protected virtualization is available, if yes, loading the blob and do this reboot, this is done basically at the boot loader stage. What the kernel has to do actually is quite simple, check if it's running inside a protected guest, if so, set up the bounce buffers to be able to perform IO and then use the bounce buffers. So the changes in the guest are really, really minimal. By the way, the changes to the guest have been upstream already, well, the rest is still a work in progress. So let's have a comparison of how this behaves and what the characteristics are in comparison to, for example, with ACV from AMD. ACV is already there, so you can already use it while protected virtualization is not there yet. But apart from that, you can read the state of the CPU, so you can read the registers unless you have the ES extension, which I think the newest CPUs have it, whereas on protected virtualization, it's never possible. You can always read the memory with ACV, but it's encrypted, so it's not an issue. Whereas on protected virtualization, it's only readable when it's shared and same for writing, it's only writable when it's shared in protected virtualization, whereas on ACV, it's always writable unless the SNP extension is enabled, which I think it has been presented last month for the first time. I don't think there are any CPUs with that available yet. On the other hand, swapping is not supported yet with ACV. It's supported with protected virtualization. Migration is supported with ACV and it's not supported yet with protected virtualization. Sure, what can we get out of this? Protected virtual machines means the hypervisor cannot access the state, cannot read or write the state. Ideally, it's technically protected as a state and the boot image as well is protected. This is the basic idea behind this. What needs to be done yet is, and what challenges are in general, yes, making memory accessible requires bounce buffers. If you don't use bounce buffers, then you need to make memory accessible and not accessible on demand, which is terrible for performance. Swapping pages can be hard. For example, AMD doesn't even bother to do any swapping because it's hard. Migration also can be very hard. If you have any questions, you can find us around. Don't hesitate. These are our deck numbers. Yeah, the current hypervisor patches are on the mailing list, on the KVM list and the Linux S390 list. They are in active discussions. And this year at the KVM forum, we've seen that there has been a lot of discussion between the architectures. AMD came out with SEV as the first ones. Some others will follow, I guess. ARM came out, no, no, power came out, but they actually implemented their solution independently from the S390 version. So, get in touch with us. We always want to know your thoughts and the newest ideas. We want to create a kind of community around there because most platforms are working on protected VMs and they most often have the same problems. So, thank you. Okay, now, as usual, we can field question. There are two lit mics, please. Okay, you have a question? Go ahead, one sentence, just a question, please. So, on slide 31, discussing the provisioning with the protected law, what is the encryption key used for that blob and how does it prove to the customer who is launching this guest that it is actually being launched in the secure mode? Good question. So, the blob is encrypted with a public key? No, I mean, the blob is encrypted with an image key. But that image key is then encrypted with the private key of the machine. And for which you get the public key when you ask your cloud provider that you want to deploy on that platform. So, on a specific machine. So, basically, it's a classic public key system. So, the private key is somewhere in the hardware and the public key is public. You just encrypt your image and if your VM is running, you know that it has been decrypted by a system that has the private key. So, one of these things, yeah. Okay, okay, next question is, is there a question from the internet? Give us a sign. No. Okay, go ahead. Hi, you make the distinction between migration and swapping from a technical point of view. Where's the difference? Well, I mean, for swapping, you only bring out and bring in pages from disk or network. But for migration, you need to transfer the memory and then also the CPU state. And the CPU state is actually a bigger problem because you need to have some kind of protocol that transfers it in a specific way, specific structures and all that. It needs to be integrity protected and at the end, swapping only does integrity protection on one page, but if you transfer the whole state, you need to have an integrity of the whole state for all of the CPU states and of the whole memory. Also, you need to guarantee that the destination is also a proper system. Yeah, an authorized host that is able to run the VM. Okay, I see you. Ask your question, please. Are there any plans for nested virtualization? No. No, none whatsoever. It's just not possible. I mean, we already have two levels of virtualization on the mainframe. Going deeper is, well, we implemented it, but we would need hardware assistance for that and more than two levels is not in our plans as far as I know. Are any other architectures considering it? I don't think so. I haven't heard. Thank you. I mean, of course you have unlimited levels of virtualization, but without protection. Which we don't want. Okay, any further questions? Okay, well, let's call this a day. Let's have a final big hand for Janusz and Claudio.


Teachers are enrolled in courses automatically on loop. If they are named as a teacher in CourseBuilder, they will automatically have teacher privileges in loop. However, upon occasion, you may find a teacher that is no longer teaching on a module, but still has access to that module. It is very easy for an existing teacher to remove that person. To do this, click on Users. Click on Enrolled Users. And then Filter down so you can see just Teachers. Click on Teacher and then Filter. On this course, we have two teachers, Catron and Neve. Neve is enrolled via external database. This means that her name is listed as a teacher on CourseBuilder. However, Catron was manually enrolled on this course. So Catron can be deleted because the X is beside her name. By pressing X, Catron will be removed from this course. You may also remove Neve by pressing X beside her name. However, as I said earlier, she is listed as a teacher on CourseBuilder. And CourseBuilder and loop talk to one another every hour, which means within the hour, Neve will be re-enrolled automatically. So pressing X beside Neve's name is actually a waste of time.


Live from Cambridge, Massachusetts, it's The Cube at the MIT Chief Data Officer and Information Quality Symposium with hosts Dave Vellante and Paul Gillan. Hi everybody we're back, this is Dave Vellante and Paul Gillan is with me. We're here with Jeannie Ross who's a Director and Principal Research Scientist at MIT and has written an article that's got a lot of attention lately, it's called You May Not Need Big Data After All. Of course we always talk about big data on The Cube and you know we go around to all these shows, we like to extract the signal from the noise which sort of came from the big data world. Well first of all Jeannie, welcome to The Cube, thanks very much for coming on. Thank you for having me, it's great to be here. So what was the motivation for this article? I'm sure you got a lot of buzz around it and a lot of people probably have said what do you mean we don't need big data? So where did this come from? The motivation was a concern about the hype. I was worried because people would say to me oh we have a new role in our organization, we gave this person 2 million dollars and told them to do something fabulous with data. And I thought it sounded like the recipe for disaster. So we went out and looked at companies getting real value from data and our sense was that more often they were taking the little data that was all over the place and they were using it really wisely. So I have to tell you that title is not mine. I wrote to HBR and submitted an article that basically said people can work smarter with their data. And they said great, we'll call it, you may not need big data after all. It's their title. So Paul you came from the world of titles, you know the title is everything in that business right? Well I also know that hype is everything. This year you know it's been all about big data and there's a lot of money being thrown at big data. Huge market valuation in big data companies. In the moments before we went live we said that you're playing the role of spoil sport. How real is the hype right now and when all this shakes out do you think that this is a major new way of doing business or are we in fact going to distill it down to the value that you were talking about. The value really is in just learning how to use the little stuff. Actually I think you grow into big data. I really do believe the opportunities are out there. What's interesting is they've been out there for a long time and some companies have used them brilliantly. I don't think there's an oil company out there that wouldn't tell you big data has helped them decide where to put their next billion dollar well. And so if that's what you do on a daily basis decide where to put billion dollar wells I think you should be into big data in a big way. But for a lot of companies it's about understanding their consumers better and to go out and get big data about those consumers before they're able to adapt to the little things they already know. Many times we know great things about our customers. We haven't figured out how to address them. So we go get some more insights. We won't be able to address those. And I want to follow up on that because you know a lot of small companies are scared off by this big data phenomenon. They think we just can't do it. Are they on that. Is that misplaced fear. No actually if they think they can't do it they probably can't. I think the thing that's limiting companies is their ability to respond to a great insight. It turns out you have a great insight. That's just the easy piece. The next thing you have to do is change your organization to take advantage of it. For many companies that is a Herculean task. They've never learned how to transform their processes. And these new insights are basically demanding the same thing they haven't been able to do before. So when we have conversations with executives on the Q a lot of times will ask them are you a data driven organization. Oh yes. We're a data driven organization. Is that is that an illusion that there are a lot of data driven organizations out there. I think so. I think what we all are truly becoming is metrics driven. And we are collecting more data towards our metrics. And I think this is all a very positive thing. But I don't think most companies are yet data driven where they say what does our consumer want. Let's take the data we have and respond to it. I just don't think that's the inclination. So metrics driven would be a division optimizing on a particular data point. Whether it's let's say bookings or customer retention or whatever it is. That's very popular. Right. But that's not data driven. No. And here's the thing. I think we often find that we can respond to certain kinds of data. But to really be a data driven organization we start to ask ourselves well what data really matters. And right now what we see is a lot of companies that have been very product oriented saying oh my goodness it's really all about the consumer. So one of the companies we studied was Fox tell it's a pay for TV company in Australia. And they said we had all the data in the world about our products. We knew which one sold. We know knew who bought them. We knew what what stations people wanted to watch. You know what program they wanted to watch after the prior program. But we started to realize that that didn't help us make decisions. If we could look at the results but it didn't tell us what to do next. When we went back and said well let's learn about our customers and we started to understand our customer segments. And we started to understand what these different segments like to watch. Then we said oh OK that would be really data driven because we can anticipate their needs. But you know what happened.  And they said that was just incredibly hard. They didn't have the stomach for that. So do do I need a CDO to be data driven. I think that's such a great question. My sense is no. But but I'm sure there's exceptions. I am sure there are places where it's just they get the right person. They're in the right position and it makes all the difference. But the risk is you're going to hire a CDO and say oh good somebody will take care of data. I don't have to go figure it out. Exactly. I want to speak to one of the examples used in the HBR article which was Southland and 7 11 and how they really changed their business not by creating big pools of data but by investing more more decision making in the employees. Why did you choose that case study. What does that teach us. That I that case I think is my favorite. This is a company that said OK we have 200000 part time sales clerks. They know the customer better than any computer ever will. And what we're going to do is we're going to give them good data on what's sold. So we're going to give them data so they can become data driven not just instinct driven. But we expect them to supplement that data with their instincts with what they've learned by talking to customers day in and day out. And then they said we will coach them. We will teach them how to use data. And I think that's the piece that most companies don't realize is is key. I mean you can give lots of people lots of data and say OK guys be data driven. But if you don't teach them how to be data driven most people will not know how to respond. Well in fact most people are not numbers oriented. They're not data people. So should your goal be to teach them how to be data people or to teach them how to use data without having to think about it in analytical terms. Well I think you don't want to say I'm going to teach you how to be data driven. The beauty of the 7 11 approach is these counselors that come in twice a week every week and say to each individual sales clerk what was your hypothesis last last week. And they actually know the answer when they ask the question because they can pull out the sales. Their hypothesis is that the things they ordered would sell. And then they can say how did you do on your hypothesis. And they know the answer to that. They know if it's sold or not. And then they ask the magic question. What can you do better next week. And that's when they sit down and they have a conversation about well we know this sold we know this didn't. What have you heard from people. What do you see in this data. What's going on in some other stores. Let's figure out what you might do next week. And many people will respond to that by becoming without knowing that data driven. I think it was Gartner that came out and said that the CMO is going to spend more money than the CIO and that's the start of the big data hyper the modern era the last six months of the big data hyper I should say so one of the best practices that you put forth the article was you got to have a single call it the single version of the truth or I think you call the single source of data truth. A lot of people say with this move toward so-called big data and I look at big data as a different approach to analyzing data that can't be stuffed in a single box. That's what's different and that's what Google sort of created and how do created. And many have said we're further away from a single version of the truth than we ever have been because of that. So how to help me square that circle. Yeah. I think it's a great question. And what we realize is we were studying this is there's actually two kinds of data that are really important here. One is the performance data. And that's where you run into real issues because everybody keeps their own. I think we included in the article the example of Etna where Ron Williams comes in. The company has lost six hundred million dollars and every one of his business unit has a spreadsheet that says my division made money and he says OK I'm not using your spreadsheets right. And that's where you have to say this is the data we're using and not worry about whether it's accurate or not because it'll be made accurate if we're all required to use it. But rather say this is what we'll rely on and then everybody knows what the metrics are that matter. So that's more around performance data that single source of the truth. But you also need really good data about your customer. And to your point it won't all be in one place. But we will all agree on what data we're relying on and how we're going to keep it up to date and how we're going to make it reliable. And that data also a single source of truth may not be the right. Essentially you're saying you've got to have a single source of truth for for the different types of business processes that you want to optimize. Yeah. OK that makes sense. So is the role of the chief data officer then not so much to to manage data but to teach people how to use information in ways that are meaningful to the business. I think so but our risk here is that we'll all think that the chief data officer will take care of that. One of my favorite examples of really good use of data is a little company called Protection One. It sells security systems. And the CEO said I want people to start understanding their real results and what actually will make this business successful. So what he does every morning is check the numbers. He has a scorecard. He calls all of his direct reports and they talk about anything that is a potential concern in those numbers. And he always ends with what do you need from me so that you can make this better. And then he said I am modeling the behavior. The next thing they are to do is call their direct reports and ask the same questions about what the data is saying and how we should interpret it and what are the potential issues. And what do you need from me. And this goes all the way down to the branch chiefs who are responsible for bringing in their people every day and saying this is my understanding of how you did yesterday. What do you need from me. And it changes the culture. It takes time. He said he was actually surprised how long it takes. But it does change the culture. So when you I want to come back to the CDO question when you consult with organizations and they ask you do I need a CDO. It's an it's it's depends question. But when you get to the point of yes the CDO makes sense in this organization certainly financial services and a lot of government organizations and health care are moving in that direction. Do you buy the premise that the CDO should be independent of the IT organization. Well it does depend exactly what you're trying to get from the CDO. My guess is yes. That if you're looking for someone to take a very targeted strategic initiative forward. Here's some data we want. Here's how we want to use it. I would imagine it's if someone you want to partner with IT not put in IT. But you know these things I think do depend a lot more on the people and we've talked all kinds of CIOs who are not reporting to the CEO which is supposedly what every CIO would want to do. And they say well it doesn't matter who you report to and if it matters who you influence. And we found many of the best CIOs are actually not reporting to CEOs but they're having enormous impact. I think that would be true of the CDO. You don't want to be a CDO if people aren't very clear about what you want to accomplish and give you the authority to accomplish it. It won't matter what organization you're in if they haven't set it up that well. And you feel on balance the CIOs will get over it. Oh yeah. I think CIO is more than any thing want to have a positive impact. So if they have somebody who says I am going to make data valuable in this organization you've got to see I was very excited. All right. I think we get time for one more here. I just want to go back to that example because I think it's so illustrative. The everyone having their own version of the truth that together rolls up to a big lie. What doesn't it seem the companies need to overcome the the culture against failure the prohibits failure and encourages CYA mentality so that everybody has their own version of the truth because they don't want to fail. Isn't that where we have to start. We're really going to have to start there and that is going to have to be modeled at the very top of the organization. This has to be about. We need to make mistakes. Otherwise we won't learn fast enough. Let's understand the mistakes we've made what we expect to learn from them how we're going to go forward. And I yeah I think we have to not only allow mistakes I think we have to encourage mistakes I think we want to talk about how we get smart about making mistakes and moving forward. But it's going to have to start at the top. You can't take somebody in the middle of the organization say you know don't be afraid to admit you made a mistake. I don't think that goes well for a lot of people. All right. Gene Ross we have to end it there. You have to get back to the main stage. Thanks very much for coming on the cue. It's great to be here. All right. Keep it right to everybody. We'll be back. This is the Cube we're live at MIT in Cambridge. We're right back.


Hello and welcome to the session in which we will discuss the fair value option for long-term debt. What is the big idea? Well, companies have the option and notice it's the option, not the obligation to report debt instruments, debt, long-term debt, such as bonds and notes payable at fair value. What does fair value means? It means the company should can, if they want to, because they have the option, they can track and report increases and decreases, which is unrealized gain and unrealized loss. What does that mean? You might have a financial instrument that has a value of a million dollar today. Well, what could happen to that financial instrument? It could go up in value. It could go down in value. At this point, you don't sell it. You're only going to report the increases or the decreases in value. Now, every time we talk about fair value, and if you don't know what fair value is or how companies report fair value, well, you have to take a look at my fair value recording. So make sure you go to farhatlectures.com, where I discuss the fair value in my intermediate accounting course or in my CPA course. And I have a whole recording about how companies come up with fair value. Once they come up with fair value, where do they report the changes? Because you might either have an unrealized gain or it's a gain or a loss. So every time we talk about fair value, you ask yourself, where do we report unrealized gain or loss? Well, it's reported in the income statement. It's reported in other comprehensive income. Hold on a second. Well, the answer is for fair value for long term debt, it depends. Usually we know it's either an income statement or other comprehensive income. For long term debt, it's going to depend, depend on what's depend on why the change occur. Why did you have this unrealized gain or unrealized loss? If the change in value is related to the general trend and interest rate, what does that mean? It means if your debt obligation, if your notes payable, if your bonds payable went up or down in value because the general interest rate changes, such as the Federal Reserve making a decision, increasing or decreasing interest rate, what's going to happen is this, you would report this change in net income. So simply put, the change has nothing to do with your company. The change has to do with the general economic factors. The Federal Reserve change the interest rate, increase the interest rate. And by the way, how do bonds and interest rate work? Well, generally speaking, if interest rate goes up, bond value goes down. They are inversely related. If interest goes down, bond value goes up. They are inversely related. On the other hand, if the change in value is related to the credit worthiness of the company, credit worthiness means the credit risk of the company have changed. Now, how do we know that the credit risk have changed? Maybe one of the rating agencies, Moody's, Standard & Poor's, what they do, they rate companies and the highest rating is AAA. So if you have a AAA rating, it means you have the highest rating. The next one is AA, AA, AA, AA, you guys get the point, right? So this is how it works. So if they change your credit rating, whether they went from AA to AA or from AA to AA, what's going to happen is your debt instrument is affected. It may go up in value or it may go down in value. What's going to happen under those circumstances, the change is strapped and reported in other comprehensive income. It means it's on the balance sheet, the equity section of the balance sheet. So notice, if the change has to do with the company's credit worthiness, it's reported on the balance sheet. If the change in value has to do with the general trend and interest rate, then it's reported in net income. Net income means on the income statement. Now, the best way to illustrate this concept is to actually look at an example. Before we look at the example, let me remind you whether you are an accounting student or a CPA candidate to take a look at my website, farhatlectures.com. I don't replace your CPA review course nor your accounting course. I'm a useful addition to your CPA review course. My motto is saving CPA candidates and accounting students one at a time. My subscription is a nominal amount. The risk is one month. Your return is improving your performance, passing your CPA exam, focusing on your career. If not for anything, take a look at my website to find out how well or not well your university doing on the CPA exam. This is a list, actually a partial list of my accounting courses, governmental, intermediate, so on and so forth. My CPA resources are aligned with your Becker, Roger, Gleam, and Wiley. So it's very easy to go back and forth between my material and your beloved CPA review course. I also give you access to 1500 plus AICPA previously released questions with detailed solution. If you have not connected with me on LinkedIn, please do so. Take a look at my LinkedIn recommendation like this recording, share it with other, connect with me on Instagram, Facebook, Twitter, and Reddit. So let's take a look at this example. Adam has issued a million of 7% bond at face value April X1. Adam, company chooses the fair value option to account for the bonds. In December 31st, the value of the bonds is now 960 because the interest rate and the market have increased the 10%. So interest rate goes up, your bond value goes down. Well, how do we make the adjustment? Well, your bond value goes down. Is this good or is this bad? Actually, that's good. Now you can buy your bonds $40,000 less. Now you write down your bond, you debit your bond $40,000 and you will credit unrealized holding gain or loss, which is again in this situation that goes on the income statement. It's kind of a little bit controversial. Why? Because you gain because interest rate in the market went up. But that's how it works. Now let's assume on the other hand, Adam company fair value change on its bond to its credit rating change. What happened is one of the rating agencies dropped your rating from AA to AA. Now why would they do that? Well, they would look at your cash flow. They would study your ratios. They will study your industry. They will study the business trend in your industry. And they would make a decision whether you are credit worthy or not. Credit worthy means is what is your score? What's your credit score? Just like individuals, we have credit scores. Companies do also have a credit score. And they will either improve it or deteriorate. Now because of that, also your bonds payable went down in value $40,000. We're going to draw bonds payable, credit unrealized holding gain or loss, but now it's going to go into equity. Now notice also here what happened is as your financial condition deteriorated, you went from AA to AA in credit rating, you happened to book again. So it's a little bit controversial, but this is how it works. Now, FASB believe fair value is a better measurement than amortized cost. And the point of this, the point with the FASB, what the FASB is implying is if we report financial assets and financial liabilities, so your financial asset will go up, will go up in value, your financial liabilities will go down, they kind of cancel each other out, but we give the user a better picture of your financial asset and your financial liabilities. What should you do now? I'm going to invite you to visit my website farhatlectures.com, work additional multiple choice questions, look at additional resources. Don't shortchange yourself if you're studying for your CPA exam or your accounting career. Good luck, study hard and of course, stay safe.