Which really just broke down exactly how we get paid from YouTube, Instagram ads, watching the ads before our videos, sponsorships, merchandise, whatever. I really broke it all down and kind of gave you an idea of how much we even make from the things we do. So if you haven't seen that video yet, you might want to go back and watch that one first and then come back to this one because today I'm going to be spilling all the tea. The truth about sponsorships. The sponsorship world isn't as pretty as many of you may think. I'm sure that your mindset is we get free stuff. We take a cute picture with it. We get paid easy peasy. There's nothing to it. So there's actually a not so pretty side to the sponsorship world and many of us creators YouTubers influencers are getting kind of fed up. So I'm just going to give you a little, just a little bit of insight of the behind the scenes of a YouTuber and influencer and what we really have to go through with these sponsors. Now before I get into that, let me explain to you how I run things, how I do things here on Beyond Grenade today. Contrary to what many of you may believe, not every hair product I use works for my hair. I just don't take photos or make a video when I'm having a bad hair day. Yeah, surprising, right? And if I don't like that product, I'm not going to recommend it to you. I'm not going to post a picture with it and I'm not going to make a video on it even if I'm offered to get paid. There have been many times where I and other influencers I know have turned down good money, good money because we want to remain authentic. To give you an example of how Riot or Die I am for you guys, one time I was offered a nice, yeah, five figure number check, okay? That's a nice number of digits, but they wanted me to use a bunch of products that had silicone and kind of say that like these were my favorites out there, but there's no way, one, you guys would believe me if every single video that I have is like, don't use sulfates, don't use silicones, don't use parabens and all of a sudden I'm like, hey guys, and these are my new favorites. You guys would be like, what is wrong with you? We don't believe you. So even though I really, really wanted to just say yes, I really had that moment that was like, okay, this is that moment in your life where you got to figure out if you're going to be a sell out or if you're going to remain authentic to your brand. And I chose to be a good person and so hard sometimes because at the end of the day, it's just not worth it. So even though I might make a lot of money from one video, I might piss off so many people that then they unsubscribe, they stop watching my videos because they just don't trust me anymore. But fortunately, because God is good and there's no point in worrying, I was able to save that deal and switch out the products to products that I actually do like and do recommend, therefore I still got that check and still as they would be authentic to my brand. Another way that I like to prove my authenticity to you guys is you might have noticed that anytime I'm reviewing a product or a new line, I'm always showing you guys real results. Only one time in my very first YouTube video ever when I didn't really know better that I ever just talk about a product. I'm always showing you me actually applying the product. I take you in the shower with me, which is very uncomfortable to be filming in the freezing cold with the door open, making water splash all over your bathroom. But I do it to show you that I'm actually applying the shampoo. I'm actually applying the conditioner. This is how well it detangles. This is how the styler works. These are my real results. These are my real day two results. I'm always showing you guys so that there's no room or reason for you not to believe me. And even when I do that, I still have people that just doubt me. They're like, she doesn't really like it. And I'm like, I showed you everything I could possibly do, but you know, I can't please everybody. Now that you understand how I run things, let me tell you the truth about many sponsorships. So sometimes you guys ask me to review a product over and over and over again. And I see those messages and I see those comments. And as much as I want to review that product, sometimes, most times it's not on me. It's on the brand. I can't tell you how many times I have reached out to a brand or they actually reached out to me saying that they want to pay me X amount of dollars to review this product. Most of the time, they send me the product because I always say I have to try the product first before I agree to a deal. And then if I like it, then I'll do a video. So I could love a product. Now I'm excited with you to review this and they're like, okay, we'll let you know when you can post it. I'm like, all right, cool, waiting, waiting. You guys are commenting, where's the video? And I'm writing like, hey, I'm ready to post this video when you are. And then like sometimes brands will just go ghost. Like why? I'm over here trying to promote your product. I have a very high demand of people requesting to just get it Bianca approved so they can go out and spend money.  That's just bad business.  So I didn't really want to work with you anymore. And that's the part that really sucks. So when you actually do like the product, but you just can't separate the product from like the brand or the people behind the brand, sometimes dear all brands watching, you might need a double check with your influencer department. The person doing your PR, your marketing, whoever is the one communicating with us, they can make or break our mindset on your brand. There's been times where I've got emails where this lady was just so rude. Like I said, please only send me products that are soul fate and silicone free. Then she sends me products with silicone in it anyways. And I was like, hey, I don't use products with silicone, but this has, you know, whatever silicone in it. And they're like, oh, well, it's a water soluble silicone. I'm sorry. Did I, did I say that I was okay with water soluble or did I just say I don't use any silicone? I know it's water soluble. I'm still not interested. Well, you said, if I see the products, you review this. I was like, well, I'm sorry, I don't like the product, so I'm not going to review it if I don't like it. Well, you said that and I'm like, she was literally like yelling at me. So that's what I'm like, well, even if I did like the product, I just don't want to work with you. How about that? The other very, very annoying part of the sponsorship world is the brands that just don't want to pay you. I'm pretty sure that the person emailing me is getting paid to go to work every day. They're getting paid to respond to these emails to work that nine to five, whatever company it is. But for some reason, they just don't understand that we're also working. And if you don't pay us to promote you, how are we supposed to survive? I can't tell you how many times a brand will be like, hey, we'll send you free product, which in the beginning, yes, it's cool. If you're a brand new YouTuber and if you're just trying to get your name out there, trying to get started, trying to build a reputation, take the free product. It's very exciting at a box of free hair products that you already love sent to your doorstep instead of going out to buy them. I get it. But once you reach a certain point, a certain number of followers, subscribers, and that you've really built that trust with people to where if you give it the stamp of approval, they're going to go buy it. There's value in that. And brands know that.  Thousands, thousands of dollars. You have to get a set. Get the higher hair and makeup, blah, blah, blah. Or as I mentioned in my first video, many of us most likely buy something because a friend, family member, or influencer recommended it. I don't know if I could tell you a time where I've ever watched a commercial like, wow, that conditioner worked really well for her hair. I'm going to go buy it versus me watching a YouTube video and this girl showing me how she's detangling in the shower with ease. And now that, that I'm going to go out and buy.  You know how many products you've bought because of me. You've bought because of someone's Instagram post, Instagram story. Maybe just a tweet did it for you. But there is obviously value in that because we were able to influence you, hence the term influencer, to buy it because we show you that we actually like it, that it actually works, or we show you how well it looks, period. So when we get emails that are like, hey, we can't pay you to do all this work that we're asking you to do, but we could send you product. Now, I don't know about you, but my car dealership doesn't accept shampoo and conditioners as a main form of payment. Yeah, neither does my rent or my phone bill or, you know, anything. And y'all know that because you also go to work every day and have a job and you expect to get paid to do what you're doing. So, so do I. Another thing that I mentioned in my first video is so many people get mad when they see hashtag sponsorship, hashtag ad. But it's like, this is our job. This is what I do full time to get paid. And some people think you should just make these videos just because you love the product and you want to help us, period. Well, what do you do?  Well, you should just teach kids because it's the right thing to do.  You should just save lives because you know how to. Oh, you work at McDonald's. Well, you should just give me a burger because I said please. No, that's not the way the world works. So yes, there are times where I just want to make a video and I just do it. I don't expect to get paid for every video that I do. But if I am approached by a brand or I have a relationship with the brand and I really like this and you know that my audience is going to probably buy what I'm about to show them because I show them that it works, why wouldn't you value that person that is promoting your brand? So frustrating. Another thing that many brands like to do is kind of like, what's the word, blackmail? Not blackmail, but it's like bribing but without money. And a lot of brands do this with these influencer trips. So sometimes an influencer will kind of just bite the bullet because we want to be invited to these trips. Some of these trips can get real lavish and it's like, hey, we're getting a free trip to Hawaii or Bora Bora or Fiji or wherever they want to take us. So you're like, OK, let me just keep being nice to them. And then maybe just hopefully they'll invite me. So now we're doing the most for free in hopes to be invited on this trip. Fortunately, I have been on a few influencer trips and it is great. I think the biggest thing that I got out of them is meeting other influencers that I can now call my friends. But at some point, if you're on a brand trip and they're like, hey, we're going to fly you out and then we want you to post every day on Instagram and then we want you to put five stories in your Instagram story every day. And oh, we also want you to make a YouTube video. It's like, OK, it's kind of sounding more like a work trip now.  Now, I'm not trying to sound ungrateful. I'm very thankful when I do get invited to a trip. But and this is me speaking for a lot of influencers, actually, is that we just kind of feel like this obligation to just do whatever they say so we can go on this trip. And at the end of the day, trips are cool. But what my life motto is, it's not about where you go. It's who you're with.  And now you're just on the beach with a bunch of people you don't like. So I'm going to tell you right now. There is a good handful of products that I really, really, really want to review. But the only reason that I have it is because one, I've actually started communication with the brand. They've promised to pay me X amount of dollars and then they just stopped. So it's really hard to just do something for free when you are promised a lot of money to do so. You know what I mean? Another reason why I might not have reviewed is because that person that I talked to at the brand was extremely rude. And if that's how you conduct business, I don't really want to continue this business relationship. It's already really sloppy. It's messy. Who knows if you're even going to pay me after I do it, that trust is just broken. Or I just straight up don't like it. And I personally don't really review products that I don't like. I know some of you guys wish that I did do videos on things that I don't like. I really wanted my channel just to be like a one stop shop. So you just know that if I reviewed it, it's good. Like anything on my channel, Bianca Renee approved. I get to send it to my channel and it's easy to find something that'll work. But, you know, I've been thinking about it and I might switch things up because I'm just obviously getting fed up. So I might start putting brands on blast. I mean, I'm not going to like bash them or anything, but it might be time for you guys to know what doesn't work. You know what, I think that's going to be my next video. Come back on Sunday and I will show you all the products that I don't use. All the products that have sulfates, parabens, silicones that are just sitting over there in a big old box that I'm going to donate. But before I donate it, I'm going to show you what's in it. So hit that subscribe button and notification bell so you don't miss it. Oh, OK, last thing before we go. The truth about influencers. All right, let's let's let's take it there. We're here. My shirt says no chill. Let's not have any chill. Some influencers, there are some influencers that just promote whatever they're getting paid to promote. I know it's true. They're out there and I really hate that because that ruins the authenticity for those of us that are truthful in our reviews. And I know this personally because I have had conversations with other influencers where I asked them like, oh, I saw you did a post with so-and-so. And like, oh, yeah, I actually never tried the product. But yeah, I posted about it and I was like, what? Sounded like, dang, man, like you're the reason people be bugging out when they see hashtag sponsored because they just don't believe anybody anymore and they're out there. So let me tell you guys how to find out what influencers are true and which ones are lying. OK, don't tell them I told you this. But this is how you could find out if that person posts about a product and then you never hear them talk about it again. There could be a chance that they don't actually like it or don't use it. Now, that's not like a foolproof thing because I have hundreds of products that I have reviewed. And sometimes they don't get a re-mention on my story because I just have so many to try. I only watch my hair once a week. So if I get new products once a week, it's really hard for me to double back and try something that I actually have already loved because there's just not enough wash days in the week. But this is why I think it's really important for you guys not just to follow someone on YouTube, but also on Instagram. So you can watch their stories and kind of see what products they really use all the time. And then I would take the products that you really see all the time take those to heart. Another thing I want you guys to keep in mind when watching YouTube videos or Instagram or whatever is don't compare your routine to that person's routine like 100 percent. So, for example, let's say I'm a curly influencer that uses silicone, right? So I make this video on Monday showing you how great my hair looks with my silicone product. At the end of the video, my hair looks great.  But then what you don't see is on Tuesday, Wednesday, Thursday, Friday, Saturday, I use all these other different products because I have, I don't know, hundreds of curly hair products in my collection. So I might be using Shea Moisture one day, Divacurl the next day, not your mother's the next day. May I moisture like all products that are silicone free? So, yes, my hair does look good because I am using a lot of products that actually are solvay, paraben, silicone free, whereas you, the viewer, might not have a curly hair product collection.  And you're wondering why your hair doesn't look as fabulous as its influencers. Peculiar. So overall, the influencer world can get very, very tricky. I know it's hard for you guys to really find someone that you can trust, but that really is on you, your own interpretation. I hope that you continue to watch my videos because you do believe in what I'm saying and the effort that I put behind my videos to really make sure that they are always authentic. And then I'm really giving you guys good results because I want your curls to look good. It's true. I don't just do these big chop challenges, no heat challenges for fun. No, I really want you guys to see good results because when you see results, then you trust me and you keep coming back for more than we all win. So if you enjoyed this video and or any of my videos in general, please give me a thumbs up and subscribe. I post two new videos every week, once on Friday and once on Sunday. And if you want to see more of my behind the scenes to really keep everything authentic, make sure to follow me on Instagram at Ms. Bianca Renee. And if you want to see my video where I'm showing you all the products that I don't use, make sure you come back on Sunday. I'll see you guys next time. Thanks for watching Bianca Renee today.


When I got asked to do Pockville Pride, I got really excited. Just because it's a small town in Kentucky and I come from a small town in East Tennessee. Pockville Pride, the annual celebration of love, acceptance, and diversity is back for its fourth and biggest year yet. This year's headliner is Eureka O'Hara, known for her appearances on RuPaul's Drag Race and HBO's We're Here. She is a household name in the world of entertainment and now she is set to grace the Pockville Pride stage. Because I grew up in a smaller town, it's always important for me to come back to those towns to just show them how they're seen and how fierce we are and, you know, honestly, like why not give them a little bit of big mama love and honey? It means a lot more than a lot of people realize. Growing up here and being closeted as a kid, knowing as a kid that I was gay, I didn't have any kind of community here to look towards. I didn't have any gay role models and couldn't see that around me. So it just seemed unattainable for me to really be gay. That's kind of what it means to me is that we're creating that community so that younger people or even older people feel safe and at home here in the community. At Appalachian Wireless, we have the best service and the best deals right now. Save up to $500 on iPhone 13th and 14th, all models, all gigabytes with trade-in. Maybe go for an iPhone 12 for a penny, a penny with a two-year contract. We're not leaving out Samsung, save up to $350 on select Samsung devices, including the S23. It's a win-win. This month at Appalachian Wireless, the service, the savings. Y'all gotta jump on this deal right now.  We are Appalachian Wireless. The event will feature three inspiring guest speakers, three musical acts, over 45 vendors, food trucks, and offerings from West 6 Brewing. We have right now reserve tickets. They're free tickets. Of course, you can go online and get those. And we have almost like 1,400 tickets reserved. We estimate a crowd of over 2,000 to be joining us. It's gonna be like a festival-like atmosphere, so we're gonna have Main Street blocked all the way down to Division. The highly anticipated drag show will feature performances from eight talented artists with the dynamic duo of Wendy Williams and Rachel Sparks, serving as the host for the show. So this is an all-I-just show, which I'm really excited about, because I love doing drag that's empowering and uplifting, and I love getting an opportunity to show young queer people that they're not alone. And I know that there's been a lot of pushback when it comes to underage people coming to drag shows. And I love that there's so much progression happening where people are starting to understand that there's no volatile reason for us to be trying to do anything to your children. We really just wanna help celebrate their existence and entertain them. That's all we're here to do. We do have security coming in this year, just because there's kind of amped up rhetoric that's been launched at LGBTQ people with the anti-LGBTQ legislation that's been throughout the country. So we just kind of wanted to step up our security measures this year. We have a group that's coming in that's very professional. Make everybody feel safe, everybody feel comfortable. And the thing about this event is everybody's welcome. It's not just for the LGBTQ community. We want our allies to come. We want all people just to come out and have a good time. The event takes place on Saturday, September 30th, from 12 to 6 p.m. at the Appalachian Wireless Arena Plaza. All attendees will be required to have a ticket and reservations can be made by visiting pockfullprod2023.eventbrot.com. Hydeville, I hope you're ready for Big Mama because Big Mama is so excited for you. I wanna thank everyone on this new channel for allowing me to come on. Also everyone at home, thank you for just watching and listening, you know? And if there's anything that you can do in this world for someone that is different, just allow them to themselves and show them some love. And honestly, just show everybody a little love. Reporting from Mountain Top News, I'm Ethan Miller.


Hello everyone, welcome to theCUBE's presentation of the AWS Startup Showcase. This is our season two, episode four of the ongoing series covering exciting hot startups from the AWS ecosystem. And here we're talking about cybersecurity. I'm John Furrier, your host. We're joined by Carl Mattson CISO, Chief Information Security Officer of No Name Security. Key of Alumni, we just chatted with you at Reinforce AWS's event. We're here to talk about securing APIs from code to production. Carl, thanks for joining. Good to see you again. Thanks for the invitation, John.  You know, on one hand, it's the goodness of cloud APIs. Make the cloud, that's the API first. Now you're starting to see them all over the place, there's APIs everywhere. Securing them and manage them is really a top conversation. At many levels, one, you can have a great API, but if you're going to manipulate the business logic, that's a problem too. So a lot going on with APIs, they're the underpinnings of the modern enterprise. So take us through your view here. How are you guys looking at this? You want to continue to use APIs. They're critical, connective tissue in the cloud, but you also got to have good plumbing. What do you do? How do you secure that? How do you manage it? How do you lock it down? Yeah, so the more critical APIs become, the more important it becomes to look at the API as really a unique class of assets because the security controls we employ from configuration management and asset management, application security, both testing and protection like EDR, the platforms that we use to control our environments, they're poorly suited for APIs. And so as the API takes the position of prominence in the organization, it goes from the sort of edge case of a utility now to like a real crown jewel asset. We have to have controls and technologies in place and skilled teams that can really focus in on those controls that are unique to the API, especially necessary when the API is carrying like business critical workloads or sensitive data for customers. So we really have to sharpen our tools, so to speak, to focus on the API as the centerpiece of an application security program. You guys have a comprehensive view. I know the philosophy of the company is rooted in API lifecycle development management, runtime, can you take a minute to explain and give an overview of no name security? And then I want to jump into specifically the security platform and the capabilities. Sure, so we're an API security company just under three years old now. And we've taken a new look at the API, looking at it from a full lifecycle perspective. So it isn't new to application security professionals that APIs are a software asset that needs to be tested for security vulnerabilities, security testing prior to moving into production. But the reality is, is the API security exposures that are hitting the news almost every day, a lot of those things have to do with things like runtime errors and misconfigurations or changes made on the fly because APIs are changed very rapidly. So in order for us to counter API risks, we have to look at the full lifecycle from the moment the developer begins coding, the source code level, through the testing gates, through the operational configuration, and then to that really sophisticated piece of looking at the business logic. And as you mentioned, the business logic of the API is unique and can be compromised with exploits that are specific to an API. So looking at the whole continuum of API controls, that's what we focused on. It's interesting, you know, we've had APIs for a while. I mean, I've never heard and seen so much activity now more than ever around APIs and security. Why is it recently we're seeing this conversation increase with specific solutions? And why are we seeing more breaches and concerns about security? Because APIs are hardened.  Why now? What's the big focus? Why is API becoming more in the conversation for CISOs and companies to secure? And why is it a problem? Well, take it at APIs that we had eight, 10 years ago. Most of those were internally facing APIs. And so there were a lot of elements of the API design that we would not have put in place if we had intended that to be public facing. Authentication and authorization that is, we kind of get away with a little bit of sloppy hygiene when it's internal for the network. But now that we're exposing those APIs and we're publishing APIs to the world, there's a degree of precision required. So when we put an API out there for public consumption, the stakes are just much higher. The level of precision we need, the business criticality, just the operational viability and the integrity of that API has to be precise in a way that really wasn't necessary when the API was sort of a general purpose, internal network utility as it was in the past. And then the other area of course is then just the sheer use of an API at the infrastructure layer. So you think about AWS, for example, most of the workloads in the modern cloud, they communicate and talk via API. And so those are, even if they're internally facing APIs, misconfigurations can occur and they could be public facing or they could be compromised. And so we want to look at all of the sort of fast sets of APIs because now there's so much at stake with getting API security right.  Can you take me through that and what you mean by that? Because, you know, some people will say, hey, APIs are pretty straightforward. You got source code, you can secure it, code scanning, do a pen test, we're done. Why the full cycle approach? Is it because APIs are talking to third parties? Is it because, well, I mean, what's the reason? What's the focus? Why full life cycle of an API? Why should a company take this approach? Sure, so there's really three sort of primary control areas that we look at for APIs as what I call the traditional controls, there would be those to test and assure that the source code itself has quality or is secure. And that can, of course, usually is step one and that's an important thing to do. But let's say for the sake of discussion, that API that is designed securely is deployed into production, but the production environment in which it's deployed doesn't protect that API the way that the developer intended. So a great example would be if an API gateway doesn't enforce the authentication policy intended by the developer. And so there we have, it's not the developer's fault, now we have a misconfiguration in production. And so that's a type of example also where now an attacker can send a sort of a single request to that API without authentication or with, you know, misinformed authentication types and succeed resulting in data. The WAF didn't protect against it, it was secure code. And so when we look at the sequence of API controls they all really have to be in sync because source code is really the first and most important job, but good API design and source code doesn't solve all the challenges for the production environment. We have to look at the whole life cycle in order to counter the risk. IBM's research last year in its own X-Force survey estimated that 60% of all API breaches are due to misconfiguration not to source code design. And so that's really where we have to marry the two of the runtime protection, configuration management with the source code testing and design. It's interesting, you know, we've all been around the block we've seen the early days and, you know, it was really great back in the day is slinging API. Hey, you know, Carl, you have an API for that? Oh sure, I'll bang it out tonight.  I'm over simplifying, but you get the idea. They've been kind of really cool to work with and connect with systems. It's not plumbing. Okay, so organizations are dealing with this. They're dealing with API and more of them. How do they know where they stand? Is there like a API discovery capability? What do they do? What does a CISO do? What does a staff do? It's saying, okay, you know what? We don't want to stop the API movement because that's key to the cloud. How do we reign it in? How do we reign in the chaos? What do they do? Is there playbook? What is, how does an organization know exactly where it stands with the state of their APIs? Yeah, and that's usually where we start a discussion with the customer is a diagnosis, right? Because when we look at sort of diagnosing what our API risk exposure, you know, the first critical control is always know your assets and that we have to discover them. So we employ usually discovery as the very first step to see the full ecosystem of APIs, whether they're internal, external facing, whether they're routed through a gateway or whether they're routed through a WAF, we have to see the full picture and then analyze that API footprint in terms of its network context, its vulnerabilities, its configuration qualities, so that we can see a picture of where we are. Now, in any particular organization, we may find that there is a high quality of source code, perhaps the gaps are in configuration or we may see the reverse. And so we don't necessarily make an assumption about what we'll find, but we know that that observability is really the first step in that process is just to really get a firm sort of objective understanding of where the APIs are. And the really important part about the observability to the API inventory is to do it with the context also of the sense of the data types because, you know, for example, we see organizations, our own research showed that for organizations over 10,000 employees, the average population of APIs is over 25,000 in each organization. 25,000 APIs is an extraordinary amount to even contemplate a human understanding of, so we have to fingerprint our APIs. We have to look at the sensitive data types so that we can apply our intellect and our resources towards protecting those APIs which are carrying sensitive data or which are carrying critical workloads because there are a lot of APIs that still remain today even sort of internally facing utilities, workhorses that keep the lights on, but not particularly high risk when it comes to sensitive data. So that triage process of like really honing in on the high risk activity or the high risk APIs that they're carrying sensitive data and then the risk exposure assessing them to see where an organization is that's always the first step. You know, it's interesting. I like your approach of having this security platform that gives the security team's ability to kind of let the developers do their thing and then have this kind of security ops kind of platform to watch and monitor and be in any potential attacks. So I can see the picture there. I have to ask you though, it's a CISO. I mean, what's different now? Because back in the old days where APIs even on the radar and two, there's a big discussion around software supply chain, this kind of this API is now a new area as you've been referring to people stealing data, things are in transit with APIs. What is the big picture? If you had to kind of scope out the magnitude of like the API problem and relevance for a fellow CISO, how would you have that conversation?  You got to rein it in or is it a 10 and a 10, is it a eight? I mean, take me through a conversation you're having with security teams or other CISOs around the magnitude of the scoping the problem. Yeah, so I think of the API sort of problem space has a lot of echoes to the conversations and the thought processes we were having about public cloud adoption a few years ago, right? But there were early adopters of public cloud and over the course of time, there was sort of an acquiescence to public cloud services. And now we have like actually like robust enterprise grade controls available in public cloud. And now we're all racing to get there. If we have anything in the data center left, we're trying to get to the public cloud as fast as possible. And so I think organization by organization, you'll see a reminiscent trajectory of API utilization because like an application, we're out of gone are the days of the monolithic application where it's a single website with one code base. And I kind of compare that to the data center in this comparison, which is the monolithic application is now sort of being decomposed into microservices and APIs. There are different differences in terms of how far along that decomposition into microservices and organization is. But we definitely see that trend continues and that applications in the three to five to 10 year timeframe, they increasingly become only APIs. So that an organization's app development team is almost exclusively creating APIs as the output of software development. Whereas there's a journey towards that path that we see. And so a security team looking at this problem set, what I advise for CISO, looking at this maybe for the first time is to think about this is this is the competency that we are security teams need to have. That competency may be at different degrees of criticality depending on where that company is in transition, but it's not a question of if it's a question of when and how fast do we need to develop this competency in a team? Because our applications will become almost exclusively APIs over time, just like our infrastructures are on the way to becoming almost exclusively public cloud hosted over time. Yeah, I mean, get on the API bus basically is the message. Like, look at it, if you're not on this, you're going to have a lot of problems. So in a way there's a proactive nature here for security teams.  I mean, the DevOps movement was essentially kind of cavalier, very Maverick oriented and the APIs around no problem. Linguafranquic connecting to other systems and API to an endpoint to another application. That's what it was. And so as it matures, it becomes much more of, as you say, a connective tissue in the cloud native world. This is real. You agree with that, obviously. Yeah, absolutely. I mean, I think that the API connections are the connective tissue of most of what we do right now even if we are not presently conscious of it, but they're increasingly going to become more and more central. So that's a journey. Whether the focus on API security is to, let's say, put the toothpaste back in the tube for something that's already broken or whether it is preventative or preparing for where the organization goes in the future. But both of those are true or both of those are valid reasons to emphasize the investment in API security as a talent processes, technologies, all of the above. Okay, you sold me on, I'm the customer for a minute. Okay, and now I'm going to replay back to you. Hey, Carl, I love it. You sold me on this. I'm going to get out front. We're in lift and shift mode, but we can see APIs as we start building out our cloud native. But I'm really trying to hire a team. I got a skills gap here, too. That's one customer. The other customer is, hey man, we've been on this train for a while, Carl. We feel you. We've been DevOps pioneer. We're now scaling out. We got all kinds of sprawl, API sprawl. How do I rein it in? And what do you guys do? What's your answer to those scenarios from a security platform perspective? And what's the value proposition in those scenarios? I think the value proposition of what we've done is really to lean into the API as the answer key to the problem set. So whether it's integrating security testing into a code repo or a CI CD pipeline, we can automate security testing and we can do that very efficiently in such a way that when a one API security specialist with the right tools, it insulates the organization from having to go out and hire 10 more people because they've all of a sudden have this explosive growth and development. There's so much about API security that can capitalize on automation and capitalize on API integration. So the API integrations with web application firewalls, with SIM systems, those types of workflows that we can automate really do empower a team to use automation to scale and to approach the problem set without needing to go to the sort of the impossible ask of growing teams of people with special skills and who aren't available anyways or they're extremely expensive. So we definitely see ourselves as sort of leaning into the API as part of the answer in creating opportunities for automation. Yeah, so I got one more kind of customer role play here. I said, I love this, this is a great conversation. There's always the person in the room, Carl, hold on. Boss, this is going to complicate everything on the network layer. Application changes, there's a lot of risks here. I'm nervous, how do you guys handle that objection that comes up all the time? The person that's always blocking deals like, oh, it's risky implementing no name or this approach. How do you address the frictionless nature? Developers want to try stuff now. They want to get it in and they want to try things. How do you answer the quote complication or risk to network and application changes? Sure, two really specific answers. The first is for the developers, we want to put an API security in their hands because when they can test and model the security risks on their APIs while they're developing like in their IDE and in their code repos, they can iterate through security fixes and bugs like lightning fast. And developers really appreciate that. They appreciate having the instant feedback loop within their workspace, within their workbench. So developers love being able to self-service security. We want to empower developers to do that self-service rather than tossing code over the fence and waiting two weeks for the security team to test it then tossing it back with a list of bugs and defects. That annoys everybody. It's an inefficient one. Just for record, you guys are self-service to the developers. Yes, self-service to the developers. And that's really by customer sort of configuration choices. There are configuration choices that have, for example, the security team establishing policy, establishing boundaries for testing activities that allow the developers to test source code, iterate through defect fixes, things like that. And then perhaps you establish like a firm control gate that says that vulnerabilities of medium and above have to be remediated prior to that code committing to the next gate. That's the type of control that the security policy owner can apply. But yes, the developers can self-service and the security team can set the threshold by which the source code moves through the SDLC. Everybody will. Yep, exactly. And we have to practice that too because that's a new way of the security team and the developers interacting. So we have to have patterns that teams can then adopt procedurally because we aren't yet accustomed to having a lot of procedures that work that way. So yeah, we have templates, we've got professional services that we want to help those teams get that equation right because it's a truly win-win situation when you can really stick the landing on getting the developers the self-service options with the security team having the confidence level that the controls are employed. And then on the network side, by the way, I too am mortified of breaking infrastructure and which is exactly why what we do architecturally out of band is really a game changer because there are technologies we can put in line. There are disruptors and operational risks that we can incur when we're utilizing a technology that can break things, can break business critical traffic. So what we do is we lean into the, through the network nodes and the hosts that the organization already has, identifying those APIs, creating the behavioral models that really identify misuse and progress and then automate blocking, but doing that out of band. That's really important. That's how I feel about our infrastructure. I don't want sort of unintended disruption. I want to utilize a platform that's out of band that I can use that's much more lightweight than putting another box in the network line. What was interesting is what you're talking about is kind of the new school of thought and the script has flipped. The old school was solve complexity with more complexity, get in the way, inject some measurements software agents on the network and get in the way. And the developer, hey, here's a new tool we agreed in a vacuum, go do this. I think now more than ever developers are setting the agenda on the tooling. If it's, and it has to be self-service at our super cloud event that was validated across the board that it's self-service, it's got to be self-service for the developer, otherwise they won't use it pretty much. Oh, I couldn't agree more. And the other part too is like, no matter what business we're in, the security business has to honor like the business need for innovation. We have to honor the business need for speed. And we have to do our best to empower the strategy and empower the intent that the developers are delivering on. And yes, we need to be seeking every opportunity to lift that developer up and give them the tools sort of in the moment. We want to wrap the developer in armor not wake them down with an anchor. And that's the thing that we want to keep striving towards is making that possible for the security team. So you guys are very relevant right now, APIs are the favorite environment for hackers are seeing that with breaches and in the headlines every day. I love this comprehensive approach developer focused our security team enablement, operationally relevant to all parties. I have to ask you, how do you answer and talk about the competition? Cause with the rise of this trend, a lot of more people entering this market, how should a customer decide between no name and everyone else pitching API security? What's the, is there nuances? Is there differences? How do you compare what's the differentiation? Yeah, I think, you know, the first thing to mention is that, you know, companies that are in the space of API security, we have a lot more in common, we probably have differences cause we're focused on the same problems. But there's really two changes that we've made bringing to market an API platform. Number one is to look full life cycle. So it used to be that you could buy, you know, Dast and Sast software testing tools. No name has API testing in sort, you know, for source code and for pipeline integrations, along with then the runtime and posture management, which is really the production network. And so we really do think that we span east-west, a much broader set of controls for the API. And then the second characteristic is architectural fit, particularly in a runtime production environment, you have to have a solution that does not create significant disruptions. It doesn't require agent deployment. They can maximize the infrastructure that an organization already has. So we think are, you know, a big advantage for us in the production environment is that we can adapt to the contour of the customer. We don't have to have the customer adapt to the contour of our architecture. So that flexibility really serves well, particularly with complex organizations, global organizations or those that have, you know, data centers and public cloud and multiple varieties. So our ability to sort of adapt to a customer's architecture really makes us sort of like a universal tool for organizations. And we think that's really, you know, bears out in the customers and the large organizations and enterprises that have adopted us because we can adapt to really any condition. And that's great alignment too from an execution consumption standpoint. It's got to be fast with a developer. You got to be frictionless as much as possible. Good stuff there.  They got to manage the current, protect the future and architect the next level infrastructure for security.  What's on their mind? How do you see it? What's your, what's your view there? What's your vision?  You know, the CISO, so they the frog in boiling water right now? Or like, what's going on in their world right now? How would you describe the state of the CISO in cybersecurity? Yeah, there's two kind of tactical themes, I think almost every CISO shares. The first tactical theme is, as a CISO, I probably know there's a technology out there to solve a little bit of every problem possible. Like that's objectively true. But what I don't want to do is I don't want to buy 75 technologies when I could buy 20 platforms or 12, that could solve that problem set. So the first thing I want to do is, as I want to communicate what we do from the perspective of like a single platform that does multiple things, from source code testing to posture and configuration to runtime defense, because a CISO sensibilities is challenged by having 15 technologies I really just want a couple to manage. Because it's complexity that we're managing when we're managing all these technologies, even if something works for a point problem set, I don't want another technology to implement and manage. That's just throwing money oftentimes at suboptimal. We're not getting results when we just throw tools at a problem. So that platform concept is I think really appealing because every CISO is looking to consider how do I reduce the number of technologies that I have. The second thing is every organization faces the challenge of talent. So what are my options for mitigating what is sort of I can't hire enough qualified people at a remotely reasonable price to staff what I'd like to. So I have to pursue both utilizing third parties who have expertise in professional services that I can deploy to solve my problems but also then to employing automation. So a great example would be if I have a team that has a five person application security team and now next year my application security or my applications team is going to develop three times the number of applications and APIs. I can't scale my team by a factor of three just to meet that demand. I have to pursue automation opportunities. And so we really want to measure the successes that we can achieve with automation so that a CISO can look at us as an answer to complexity rather than as a source of new complexity because it is true that we're overwhelmed with the options at our disposal. Most of those options create more complexity than they solve for. And I pursue that in my practice which is to figure out how to sort of limit the complexity of what is already a very complicated role in protecting an organization. Got it. And when the CISO says, Carl, what's in it for me with no name, what's the answer? What's the bumper sticker? It's reducing complexity. It's making a very sophisticated problem set simple to solve for APIs are a class of assets that there's an answer for. That answer includes automation and includes professional services. And we can achieve a high degree of sophistication relatively speaking with a low amount of effort when we look across our security team. This is a solvable problem space and we can do so pretty efficiently. Awesome, we'll call. Thank you so much for showcasing no name. In the last minute we have here, give a quick plug for the company. Give a little stats, some factoids that people might be interested in. How big is the company? What are you guys doing? If people enthusiastic about the solution, share some, give the plug. Sure, we're a company of just about 300 employees now all across the globe, Asia Pacific, North America, Europe and the Middle East. Tremendous success with the release of our software testing module which we call Active Testing. We have such a variety of ways also to test and take no name for a test drive from sandboxes to POVs and some really amazing opportunities to show and tell and how the organization is diagnosed quickly, where they are. And so we love to show off the platform and let people take it for a test drive. So, nonamesecurity.com and anywhere in the world you are we can deploy a sales engineer who can help show you the platform and show you all the things that we can offer for the organization. Carl, great insight. Thank you again for sharing the stats and talking about the industry and really showcasing some of the key things you guys are doing in the industry for customers. We really appreciate it. Thanks for coming on. Thanks, John, appreciate it. Okay, this is the AWS Startup Showcase. I'm John Furrier, host. Season two, episode four of this ongoing series covering the exciting new growing startups from the AWS ecosystem in cybersecurity. Thanks for watching.


Hi guys, hey, hi, my name is Carl Lambert, I'm here for a project called Universal Market Access, or UMA, and I'm quite pleased to present to you guys this research paper we just put out, it's fresh, it's a draft, we're calling it Bitdex, and this is our design for a decentralized Bitmex using what we're calling Priceless Financial Contracts. So goals of this talk, just to give you an overview, I want to explain to you guys how Bitdex works, I want to explain this concept of priceless financial contracts, and then go into some details of what we think that can enable. So as a starting point, let's just talk about what Bitmex is, and I'm not really picking on Bitmex here, I'm talking about any centralized futures exchange, anything that has levered transactions, and so Bitmex, like the CME Trading Futures or any CFD provider, is a lever-driven trading platform, it's a huge exchange, and the exchange itself provides a bunch of functions that make it usable to the people that trade on it. Those functions require a trusted third party operator, and so those are things like custody margin for all the positions, moving margin back and forth clearing, and ensuring the solvency of all the positions in the exchange. What's really important to notice, reminded everybody of, is that when Bob and Alice trade on Bitmex, Bob and Alice might actually end up having offsetting positions, but they don't face each other, everyone faces the exchange. The exchange functions as what's called a central clearing counterparty, and they're the ones that ensure the solvency of all the positions. So Bitmex does some good things, all these exchanges, fast high performance trading, we like that, with high leverage, this is things that people want. Bitmex is going on a big business, CME, futures exchange, big businesses, these are services people want, but they are completely custodial, and the exchange sets the rules of game. So the exchange decides what leverage you get, how to trade, but importantly they also decide when positions get liquidated, unilaterally have that power. And so this is like really centralized, it's not just like a centralized coin base or whatever, where that's just custodial, there's also this whole aspect of centralization around trusting Bitmex or whatever exchange to monitor your position's solvency correctly and to not liquidate you at the wrong time. So this is bad, this is not what we want. So the question is, sorry, why is decentralizing Bitmex so hard? What makes this so difficult? Why can't we just like run this on the blockchain?  So the idea is that Bitmex functions as this somewhat of a black box that has all the position and margin data for everybody out of all the trades in the system. And they go through and they check the solvency of all trades with each price tick. So every price update, they're checking the solvency of every position in the system. And that's just a lot of transactions, you can't run that on the chain. And the data is even available to do so if you did have it. So what are we going to do? So we're going to try to solve this with blockchains. But more importantly with some layer two thinking, some layer two concepts that we're going to put into financial contract design. Okay, core idea here, our observation on a futures exchange like Bitmex, position data does not change that often. The data can actually, it changes infrequently enough that it can be recorded on chain, allowing anyone to monitor positions to verify their solvency. And so this is pretty interesting, right? If we can actually put the position data on chain, we can design a system where anyone can monitor the solvency of that data off chain, allowing us to have a design with no centralized price feed and no centralized arbitrary of proper collateralization. So Bitmex does this by allowing any counterparty to dispute any opposite position. So any long can dispute any short, any short can dispute any long. And Oracle is only used to resolve these disputes when they happen. So this is very much like an Oracle minimized design. We only use an Oracle when a dispute happens. And I'll go into more detail on that in a second. Penalties are then paid to the disputeer by the disputeer position, if the dispute is deemed valid by the Oracle. So there's economic incentives here to correctly dispute or enforce the way the position trades. Okay, so core idea here, we're going to ask people off chain to monitor the exchange to see if it's properly collateralized. That's like the big idea. And there is no on chain price feed, an important point. All right, so let's just talk about what's happening on chain and off chain. Kind of go through some details here and why this can be fast. So Bitmex only puts data on chain that needs to be on chain. Let's break down the core exchange functions. So margin deposits and withdrawals, those happen very rarely. People contributing to the margin or withdrawing margin from their account, like on Bitmex that happens very frequently, that can easily be supported with on chain transactions. Recording new trades, how many new trades actually happen a second? It's hard to deduce exactly what happens on Bitmex here, but it's like low single digits. Arguably that'd be tough to support on Ethereum right now, but if you get pretty close. So we can also record that data on chain. The interesting part and where this scales is all the measuring trade solvency. So checking all the positions, Bitmex has like tens of thousands of transactions per second to check. All the positions in their system with every price take.  So anyone off chain can check the solvency position. That's where our scalability comes from. But one point I want to make clear is that Bitmex does not solve a decentralized order book problem. That's not what we're starting out to solve. Longs and shorts in this trading system still need a mechanism to find each other. That would be an order book. We aren't building that. There's pretty semi trusted designs or peer-to-peer order book designs like 0xMesh that are pretty interesting approaches to solving that problem. Okay, so let's go into an example just to try to illustrate what's happening with this design. So remember, the trade and position data is recorded on chain and anyone can check the positions. So what starts here? We're going to name all of our longs L1 through LN over here and our shorts S1 through SN. Important point, L1 does not base S1 and S2 does not base L2. They all base the contract in exchange. So they're not directly offsetting. But we're going to record, we're going to also define a market here where we're going to trade the price of Bitcoin and let's just say there's a starting price of Bitcoin at $10,000 per coin and so our NPV function for what longs and shorts get paid out is going to be the current price minus $10,000 so our initial price of $10,000 longs and shorts both means $0.00, we're all flat and we have a margin requirement here of 10% of the current price which means we got a tax leverage for $1,000 so you can get $10,000 exposure. Jumping through some details, okay? So we go and we record this data on chain everybody agrees that the price of Bitcoin is $10,000 they check the NPV in margin and everybody looks good, they all check it out everybody thinks everyone is correctly margin and the system is solvent. So let's now say that L2 thinks the price of Bitcoin might drop to $9,500 and if that were to happen L2 knows that they will be under collateralized they'll lose $500 because they're long they'll lose $500 and they'll no longer meet their margin requirement of 10% of the price so what L2 does is deposit additional margin they're doing this to make sure they don't get disputed and liquidated in their position. Cool, easy, this is exactly how it would work on get next to where if you didn't if you're right against your margin requirement and you don't deposit more margin you'll get liquidated. Let's go through another example where L2 does not deposit additional margin but S1 does indeed think the price of Bitcoin has dropped to $9,500. Note that I said this is S1's opinion there is no on-chain price fee for them to point to they basically it's like a bring your own price fee concept S1 is looking at the world and says hey I think the price of Bitcoin is $9,500 they're then going on to our on-chain data and they see that at a price of 9,500 L2 would actually be under-collateralized according to our NPV and margin functions and so what S1 does is they go ahead and dispute L2 they say hey I think you're under-collateralized you're in default and at that point that dispute goes to an oracle that's going to resolve this disagreement or this issue and as one is right L2 will pay a penalty to S1 this default penalty if S1 was wrong according to the oracle the penalty will go the other way to compensate L2 for being unfairly disputed okay core design, core idea so these are the core function signatures in our just initial simple design I'll actually just jump ahead to the slide and go back in a second that green is pretty bright so you can't read that but it basically says we've got a half-and-half situation so imagine you're now a position in this big-deck system at any given time you can do one of four things you can do nothing because you think you're correctly collateralized and you wanted to sit there when you're happy you can deposit additional margin in your position which you would do if you think the trade is going to move against you and you might get liquidated or you can withdraw we request a withdrawal of margin so if a trade has moved a lot in your favor and you're up a lot of money you can make a request to withdraw that money note that you cannot immediately withdraw the money because we need to have a time lock to allow other participants to verify that that request is valid, that you're not trying to take out too much money at your position or you can dispute somebody else's position and say they're under collateralized so the core argument here is that in the optimistic path in the happy path you're just depositing or withdrawing margin and making sure your position stays perfectly collateralized there's no need for an oracle and oracle price while you're staying in that happy path the only time we need an oracle and oracle price is when there's a dispute when somebody says, hey, this position is under collateralized so just to go back to that last slide for a second these are like the core functions of this simplistic design deposits happen at any time withdrawals can happen at any time again, time locked by this delay, this slackness requirement and once that passes then anybody can withdraw that mark then the withdrawal request goes through disputes remember, any long can dispute any short and vice versa what's interesting about this is that because we have many watchers of the system we've got many longs and many shorts and they're all watching each other we can actually have a pretty short wideness requirement our time law on disputes can be pretty short because we can be pretty confident that somebody's gonna be there to watch the system the last two things here are really about entering and exiting trades in the position so we have a simple design where any time you want to enter a new position you can create a pair so any long and short find each other say, hey, we want to do a trade at this price and negotiate that off-chain and then they come to the system and they're like hey, here's our new pair of longs and shorts we want to enter the system the Biddex contract just has to check that that new pair of longs and shorts is correctly margined and we can do that with a clever trick this is a little bit of an implementation to help but if you do it with a clever trick of having that new pair point to an existing long and short position that it is equal and collateralized to or more collateralized than this is detailed in the white paper but really it's a shortcut for us to have an instant entry through the system and then we have a simple mechanism where you can instantaneously exit a trade from the position and withdraw your margin if you're a long, you do that by buying an offsetting short position and then you're immediately able to withdraw the combined long and short deposits so those are detailed and a bit more detailed in the white paper just a quick overview so, again, back to the slide this kind of looks like a layer too and that's the idea this is meant to be a bit of a layer too for financial contract design where we are assuming that things stay in the happy path and we are only using our oracle when there is an unhappy dispute when something goes wrong so we're calling this priceless financial contract design and the core idea here is that if everyone behaves as they're supposed to if everyone doesn't default and adds margin appropriately then we don't actually need an on-chain price and it's priceless this is the happy path we stay in the happy path, we need no prices on-chain other core kind of concepts of this this framework that we're proposing is that when someone behaves badly it needs to be observable off-chain we need rewards to correctly reward participants for disputing bad behavior and if that dispute is proven valid we need that behavior to be punished, to be penalized and we only need on-chain prices to resolve disputes which means that the oracle functions as a sort of dispute resolution mechanism which should be relatively infrequently used so these ideas are sort of priceless financial contract design this is something new that we're going to write more about we would really love feedback on this idea but again it's all about how we can minimize oracle usage to allow us to do higher leverage, higher speed things with DeFi and with financial contracts so going touch deeper on what this means for oracle design itself so writing contracts pricelessly I'm repeating the point from the last slide writing contracts pricelessly means oracles become dispute resolution mechanisms that only need to be used when counterparties fail to agree that we think is kind of interesting and kind of novel and the example here is to point to like the fiat world where me and one enter into a legal contract financial contracts a lot of them are like legal contracts we can enter an illegal contract and we do that privately with no intention of litigating that contract we only litigated if something goes wrong we fail to maintain the terms of trade the same concepts being applied here where we're saying hey let's enter into a financial contract that we both know the terms and we're going to do what we've got to do but we're only going to dispute we're only going to use an oracle if something goes wrong framing oracles as dispute resolution mechanisms arguably opens up the design space for decentralized oracles since we can do things a little bit differently we no longer need like an on-chain price fee that's constantly pushing a lag or real-time price to the chain we can instead let oracles be relatively slow and expensive and potentially like far more decentralized because they should be relatively rarely used again like using the court analogy you don't go to court for every contract you write you only go to court when there's a major dispute and it also lets our oracles be asynchronous we don't need the dispute resolution process to be happening at the same time as the rest of the contract system so we must build a design for this type of oracle that we call our data verification mechanism which puts economic guarantees around corruptibility that design we've got way paper and it's actually a bit built it's on testnet it's well suited to support this type of priceless financial contract so just to wrap up really quickly we introduced this idea of Bitdex which is decentralizing Bitmax something that has been really really hard to do at DeFi and we did this using this concept of priceless financial contracts where we are pushing all of the work off-chain so we are getting greater scalability by having positions there's solvency being monitored off-chain and enforced via disputes we're doing this without an on-chain price feed people bring their own price feed off-chain and we're minimizing oracle usage so we're reframing the use of an oracle as purely a dispute resolution function this lets us build what we're calling the fast DeFi products like Bitdex in exchange with leverage it also lets us build synthetic tokens we're big on synthetic tokens you guys can go to our website and read all about that we can do this with lower collateral requirements because we can be much more efficient with our margin usage by not having a lagged price feed or any kind of delay and we can build all kinds of swaps options also to other financial contracts and this is the sort of stuff that frankly we love talking to you all about what you want to build and how you can build it ok so wrapping up there's a lot of research out there that we would love feedback on this Bitdex paper we just published last week it's a research paper and it's a draft we would love feedback on this design we also have our design for our oracle our dispute resolution style oracle that we published a couple months ago that we would love feedback on and there's five of us here at DeFi please join our developer Slack links in our github links to where you can find various things thanks very much


Hey yo listen up we got a lot to talk about subscribe to the channel do all that good stuff at the core of all the 2k's problems is Content new content. We want to keep the game fresh throughout the year, but 2k is getting in the way of that Because of profits you heard it here first. They like money a lot. They like it a lot I'm where I'm getting really tired of games that release every single year I don't put that games like Assassin's Creed and Call of Duty have different Developers so what I'm saying is while NBA 2k has one dev team and they all have one year to come out with every NBA 2k game Call of Duty has three dev teams and each dev team has three years to come out with their Call of Duty game so One year is not a lot of time and it's not even really a year Because you have to give them time to tidy things up work out the kinks and bugs There's game testers and then get the feedback from them make the improvements That doesn't even include polishing and porting the games to consoles, right? So really they have like eight nine months to develop the game before they have to Polish things up and move on to the next 2k so the second NBA 2k 18 launches a huge majority of the dev team moves on to NBA 2k 19 they don't have much time They have to get on the ship Meanwhile NBA 2k 18 launch and there's players being deleted nobody knows why if you're on the east coast and your Buddy's on the west coast you can't play with each other on on team program Nobody knows why there's incredible lag in the playground to the point where it's not playable Nobody knows why there's insane variable latency It's making it impossible to shoot the skills gap is not existent Nobody knows why and then of course the animation glitches come out Which for some reason 2k hasn't learned from previous years to patch up and now the whole archetype system is fucked Because you could never get those animations back from players the whole meta's tough Meanwhile People have already moved on to 2k 19 the developers of course and the dev team that stayed behind and is working on 2k 18 It's scrambling to get their shit together after four or five months of patches We finally get a game that you can call playable and then we have like seven eight months to enjoy the rest of 2k Except there's never any new content added So there was never anything to keep it fresh. This is not rocket science. You don't need to sit here and listen to me I don't have a degree of PhD in common sense Just come out with new content that keeps the game interesting literally fortnight is coming out with new limited time modes left and right They're coming out with new guns you were talking about rainbow six now They have new operators that come out new weapons that come out new packs a every every few months They recognize that you have to change things up You have to add something new to keep it fresh because those games have increased in player bases and people love those games That's why they stick around as frustrating as it might be sometimes and then let's think about us over here at 2k The game launch the NBA 2k 18 and if you're playing playground pro-am or my career at no point throughout the year We're some of the massive issues with the game even approach They didn't they weren't even approached let alone fix and on top of that they made no new content So we're talking about simple shit like just nerf the blowbys and snatchbacks.  Why would you keep it fresh if you can't make money off it? Literally 2k does not make a decision unless they could profit off it even if long term It makes sense to make that decision in the short term They're so focused about Increasing their earnings for this quarter that they can't see straight So let me help you see straight 2k fortnight is not the only reason why your game underperform the last quarter This is the first 2k in a while You could easily say they made zero effort in adding new content and this is part of the reason why I hate yearly games Because we have to wait for the next game to release just to get new content Okay, I'm gonna say some crazy and radical just rock with me for a second a lot of you can be like agent Why don't we just do that that makes a lot of sense? Let's launch NBA 2k once like for tonight like rainbow six like League of Legends like Dota We don't launch it every single year. We just launched the game once now The entire dev team can work on adding new content throughout the years If there's any massive problems with the gameplay it can be addressed And we don't have to wait eight months for the next year's game so that we can be like oh finally that issue is gone I think it allows them to focus if you can focus on one product and make it the best it can be You can add new content keep it fresh There's a reason why the games that are doing that are succeeding because that formula works now Financially that formula hurts 2k would never do it just like EA would never do something like that because in their minds They're thinking of themselves. Like what do you mean? We can't launch a game every year How are we gonna get the 100 million dollars we charge people for all their pure bundles, right? All that money they're gonna get for that $60 version of 2k the hundred version dollar They got 150 they got a one million dollar version of 2k They're gonna sell you and they're not they're not gonna make that money So like the chances of something like this happening is almost non-existent, which is crazy, right? Isn't there enough proof in the industry already companies like Ubisoft did like a 360 in this bitch Ubisoft used to do the same thing with Assassin's Creed They used to do the same thing with a lot of their franchises and people hated them for it What did you be soft do you be soft drop the game? They called it the division right and they're recently coming out with the division to like a few years after they dropped the game They called it rainbow six they dropped the game They called it for honor and instead of worrying about dropping a game every single here like that They just worry about dropping new content and that keeps the games fresh and alive Literally just last week you could have got for honor for free on the PC And so Ubisoft has an entirely different frame of mind than 2k You be soft is thinking we can increase our player base by dropping the game for free for a week 2k would think what are you out of your mind? We're gonna give away the game for free. Well 2k is missing the point Ubisoft realizes if if people can start to play for honor and the player base can rise then they can start to charge people for simple Things right whether it's micro transactions in game whether a season of content Whatever the cases if you're adding new content and you give people the option to purchase and or work for it Like rainbow six then you're gonna end up making loads of profit You're gonna have a game that's so popular that's played by so many people that you're gonna make so much money You could just sleep and money you could roll around in it So Ubisoft right now is killing the game and they're doing it and in the fans are loving it and then and then we're looking at EA and 2k EA 2k and they're just what are they up to these guys are the like at what point could we just focus on making a good product Well, why does it always have to come down to every single penny these guys are wild and y'all I'm gonna give a shout out to some developers right now CD project red shout out to you shout out to Naughty Dog All right shout out to you for focusing on the game and Recognizing if you drop a fire product people can have to respect it people are gonna play it and then when you drop some content They almost feel obligated to buy the content when Ubisoft comes out with rainbow six dead on arrival They work on the product they improve the game Even though they there was never a guarantee that there was even a future for the franchise What so happened is they came out with a product They almost revived tactical shooters rainbow six is killing the game now They come in out with seasonal content and they're making a boatload of money It's not even like a challenging concept like plenty of people are doing it I would much rather see 2k come out with the game just one time We don't have to come out with it 20 times over 20 years just one time maybe once every five years right Maybe once every 10 years it might make sense Maybe depending on like if there's a benefit to doing it am I crazy it's not crazy to think that right at the end Of the day we just want to find good basketball game to play But I feel like the least in a game every year is getting in the way of that It has to be getting in the way of that because if you're a developer think to yourself Are you gonna what days is June 17th right now? Are you gonna drop new parks June 17th? Are you gonna drop a private poem June 17th? How are you gonna promote your next game? So they start saving features they start saving new things for the new game so they could be like look It's new it's brand new give us more money They're saving stuff for next year like the only reason the only possible explanation I could think of of why private program wasn't in the game as of two years ago last year or even this year It's cuz they've been saving it They're saving things so that one day they could be like look at this new thing You've always wanted now by the game if you drop a game just one time and you're all your whole focus Making the game stable optimizing the game so who runs well good performance making the game fun Right keeping it new and fresh then you won't ever have to worry about saving anything when fortnight comes out with a new gun They're not waiting for fortnight to to add a new gun or a new mode a new skin They just drop it because their product is right there in front of you It's free to play you can play it if you want and for those of you who enjoy it enough You can spend your money on all these skin you can spend thousands of dollars if you want on the store and really at the end Of the day that's your option when you're playing rainbow six the same thing you can work towards getting the operators Or you can just pull out your wallet and buy them if you want, but I love that they give you that option I love that they don't hold anything back And I love that they recognize the obvious in that if you create a good product people can play your game And they're gonna tell their friends about the game and then their friends are gonna buy the game Especially if it comes out free to play if it comes out on sale whatever the case So I'm excited for NBA 2k19 because I know that all the saved up new content like I'm hoping private programs is in there I'm hoping all the things like I'm hoping there's a skills gap right when it comes to not only just shooting But dribbling the whole nine. I'm hoping there's a good ranking system leaderboard system I hope there's a fantastic progression system that gets me addicted to playing the game to wanted to come back and play More I hope that there's ranked and unranked pro-am and park to differentiate the casual fan from the competitive guy So we can both get each of what we want. I'm hoping that they come out with the my career. That's intriguing I actually like 2k18 is my career aside from the fact that it had unskippable cutscenes I hope that they come out with fire But I'm telling you this right now if 2k19 comes out is gonna be fresh and fire for a few months, right? Maybe even through December everyone's gonna get it for Christmas But come February if they're not putting any sort of effort to add anything new whether it's new things Aesthetically like clothe I can put on or a new hat in the game Whether it's a new park you can go into with like whether it's new mode Like remember when they tried park after dark in 2k17 and failed miserably like give us that part to playing 2k18 right now Like there's plenty of things they can do to add new content I'm rattling stuff off the top of my head like you could sit down in a board room with 20 other intelligent people that are being paid millions of dollars and you could think of even better solutions right 2k17 was straight-up booty butt cheeks Right 2k18 was dry boring. There is no way 19 could be worse. There's no way I'm not really trying to rant or going hard. I'm just kind of speaking out loud This is honestly what I believe like it is not even a crazy concept. We've seen so many other people do it I don't know why I had the headset on this entire video. I really wasn't listening to anything Wow feels weird to hear my own voice yo if you guys enjoyed the video drop a like subscribe to the channel put on post notifications in the Comments, let me know where you stand. All right. I'm gonna catch you guys in the next video If you guys missed one of these two go ahead click him subscribe to the channel drop on them post notifications I'm gonna catch you guys in the next one. I'm out. Peace


What's up everybody Jason here for jazby's case breaks comm it is a new release they happy flawless football day This is pick your team number one of our two box brief case breaks on jazby's case breaks comm So this is our first break guys. Good luck There you go Thank you all for purchasing purchasing spots with us and selling this out Sammy about the cowboys last bomb oh Joe All we've done a Patrick with the red Alrighty Good luck. It's like we got some gold briefcases this year. I don't know if this one's gonna have three or two But we'll find out it does have three. All right. Good luck everybody. What is this? Let's show this on camera I'm not one second Okay, it goes this way Alright, so this is blockchain. This is your digital blockchain card to redeem Okay, so it does have a code. That's blocked. Okay. Awesome. I just don't want to be like Oh, sorry about that. Here you go. Audio should be better now Alrighty, alright, so then here's a blockchain. Let's quickly just show you guys that Blockchain flawless rookie signatures emerald card number six Which is a Miko Harmon jr. For the Chiefs Now what are these out of what are the emeralds out of so basically it's just a digital version, right? From blockchain. I haven't really studied up too much into that but card number six I don't even know what card number six is. Alright, so this is the blockchain. So Miko Harmon jr. Is a emerald signatures So that would be out of ten. It looks like card number six No, actually no, sorry emerald actually is out of two That is a two out of two Miko Harmon jr. That's a way to open it up Quickly show you guys that card number six emerald edition Is Kansas City Chiefs two out of two. There you go. Very nice Awesome. I don't expect blockchain in here, but then again, I haven't seen any All right, so there you go Kansas City KC It's going to James James Hannah There you go Very nice All right, we got a triple swatch for my Eagles Carson Wentz, Miles Sanders and all Sean Jeffrey seven out of 25 Eagles Go to Jordan Very very nice Got a little dirty patch right there of Julius Peppers out of 25 that is for the Bears going to Steve and we got a Sony Michelle nine out of 25 Three color patch there for the Patriots Jeremy Tillman with the Patriots We got a Mari Cooper for the Rams five out of ten star swatches and this flawless is just loaded Forget how crazy flawless NFL could be there you go Rams going to Clyde We have a will Greer three there you go Jersey number three out of 25 Little eBay one of one Oh, did I say I'm our Cooper? Sorry Cooper cup. I'm a little too excited right now There you go So Jersey number three out of 25 Jeremy Tillman as well for the Panthers Very nice How about a DK Metcalf seven out of ten for the Seahawks Who has this Seahawks Quinn does there you go and then we got a three out of three Super Bowl MVPs for the Cowboys Troy Aikman, and I believe that was last spot mojo Samuel with the Cowboys There you go. Very very nice That was a great little little box right there Three out of three sweetness, all right, let's go with the Case cards We'll go right middle left and we have a triple relic. Look at that Daniel Jones, Kyler Murray and Dwayne Haskins six out of 15 So that'd be randomized for the Giants Cody Redskins Patrick Cardinals Nicholas Let's go with the middle we got a 11 out of 20 Josh Allen And that is a ruby Bills going to Tony and the last one here signature gloves and It's drew lock Looks like a little Nike swoosh the corner of it 14 out of 15 There's even wear gloves. It says player worn used material There you go Drew lock for the Denver Broncos Nathaniel very nice All right That was one briefcase Let's go with the next one. Oh my god.  All right, let's go with this break this little box first So looks like is there a blockchain in every start of this? You will find out David You will find out. All right. Good luck guys BC rookie Jim signatures diamond What's it? What's a diamond out of nine? Wow, Daniel Jones? Look at that rookie Jim signatures diamond And that's card number three that it's out of five Jesus Yeah, it's just a digital blockchain, but there you go. That one's out of five Giants going to Cody. No, let's just be too many horns going on. All right guys continue You got trace McSorley eight out of 25 I think they are Cody, honestly but I Think there's more to it besides just being digital I think of it as you can still redeem the physical card of it Just like I believe upper deck does their e-pack where they have the real version of the card and you can request it But the whole point is to have it virtual so that way you don't even have to worry about it easy to trade easy to sell Compared to a physical card, but again, I didn't study up on the blockchain too much Cam Newton three out of 20 So they do make the physical card, I believe of it Carolina Panthers Jeremy Tillman, and we got a Bradley Chubb eight out of 20 Denver Broncos that's going to Nathaniel We got Easton stick three out of 15 Nice little patches in there for the Chargers Going to Eric We got 13 out of 20 Philip doors Philip Lindsay, sorry That is another one for the Broncos Nathaniel Miko Harmon Jr. 19 out of 20 Like a Ruby in there There you go Ruby and autograph Get city chiefs going to James. All right, and then we got a 13 out of 15 Mitchell Trabisky All right, you guys For the Giants Michael Strayhan little Ruby eight out of 20 Giants Going to Cody Next one. We got a Dwayne Haskins 11 out of 20 Another little Ruby. All right, guys. This is a nuts booklet right here. I Had to block it a little bit Are you guys ready? I don't even know what to say about this right now This is gonna be one of the hardest random buys I've ever had to do a one-of-one dual shield autograph of Kyler Murray Daniel Jones One very very sad person.  Good luck to you Nicholas and good luck to Cody with the Giants. I know Cody, but honestly I We've dealt with many of these booklets before and I've dealt with like hundred a thousand dollars of cards before and We've had to randomize them So, I mean, I don't really know what to do. I texted Nick there right now to see what he says I don't know if he's watching even one second. Yeah, we just had to random it though I can talk to Nick But again, we've been doing this for seven years and we've hit bigger cards like bigger than this honestly Which kind of is mind-blowing, but we've had to random every single car. I don't do that But I guess for this inception exception I can't you just do a e-ha Yeah All right, I texted it guys, but again We always random everything that's just one of our rules Good luck. All right, so let's do the first round. I'm know what should be the triple swatch All right, so those are the only two randomizes right the triple swatch with Danny Jones Dwayne Hatchkins Kyler Murray Yeah, I mean, I think a book that's gonna be always cool, especially if you can find a collector that loves both But I feel you that you know, obviously someone's gonna that's a true Kyler Murray collector is gonna want Just a regular RPA shield, but I mean if you find someone that loves both players Yeah, no, I mean, I'm gonna random it. I'm just I'm just take I'm just making sure that I'm doing any other randomizes Again, we've randomized big cards like this and if not bigger and that's just one of our rules You know, this is the reason why we do the group breaks this way We've established that everything is randomized no matter what No matter how big the card is no matter how little the card is if you had both teams That's the only way to save yourself from this, but obviously we don't expect to hit a monster like this every single case so Yeah, all right guys, let's do the randomizer Good luck guys. Let's roll it and we use three times three times for both randomizers and Giants residence Cardinals first one Two Three Boom goes to the Cardinals here So the triple swatch between of Daniel Jones, Wayne Hatch, and Kyler Murray is gonna go to the Arizona Cardinals And one last time. Let's show you guys this after three times here Giants Cardinals one-on-one booklet shield autos of Kyler Murray Daniel Jones Good luck everybody Or good luck to Cardinals and Giants Cody and Nicholas. I know I hate to do this, but so we got to do three times one Two Three Wow three times Going to the Cardinals After three times, I'm just triple checking this two and a one three three Cardinals Nicholas L with the Arizona Cardinals Congratulations, you just won that dual shield booklet of Kyler Murray Daniel Jones This was fall as Pikachu number one on JaspiescaseRakes.com and what a way to start off our first case I don't know if I'll be able to top this, but we'll try it in Pikachu number two Which will be coming up next again buy your spots on JaspiescaseRakes.com


are most popular game birds and a delight to birdwatchers, hunters, and other recreationists. They can be found throughout Canada and the northern forested regions of the United States. To people living in this area, a tough winter is long and cold with lots of snow, but it's just right for roughed grouse. A good winter for roughed grouse is a winter that lasts about 120, 130 days, unbroken, soft snow about 10 inches to 20 inches of snow and temperatures under 20 degrees Fahrenheit. When there are at least 10 inches of loose snow, grouse make snow burrows to escape cold temperatures and predators. Well here is a snow burrow here as you see now and the bird came in here from the tree that he was roosting in, they're feeding in, dived into the snow, and then in this case turned and came back and actually roosted here and you can see quite an accumulation of droppings there where he spent the night and then when it came time to leave he took a couple of steps and there the marks from his wings as he flew off into some place else. Grouse need an adequate food supply to survive winter and breed effectively in the spring. Without it, hens may not lay good quality eggs or stay on the nest long enough to hatch them. Chicks that do hatch may be too weak to survive. Here and across the major portion of their range, I think the stamina flower buds of the aspen is the most important and I consider it the basic food resource for grouse. The aspen flower bud is a rich nugget of food. It runs anywhere from 14 to as high as 20% protein which is about the equivalent, pretty close to the equivalent of the protein level of yellow-shelled corn I believe. Across most of their range, the northern part of their range, you're not likely to find very many grouse in the forest floor unless there's aspen in the forest canopy. So they're almost always associated with aspen, though the aspen may be mixed with other forest types. When grouse are not able to find good food and shelter their health may deteriorate. Then they are more likely to be taken by predators. The most important predators through most of their range are the avian predators or what we call the raptor which includes the hawks and the owls. I think across most of their range is probably the great horned owl is the number one predator because it occurs in just about any wood lot that you're likely to find rough grouse in. The most efficient predator in terms of being very likely to take a grouse if it gets after it's a grouse hawk. For protective cover the ideal timber stands have from 3,000 to 8,000 trees per acre. Such stands are too dense for hawks and owls to fly through but trees are far enough apart that grouse can fly away to escape ground predators. Young conifers can also provide good grouse cover however as the trees grow older and taller they can become death traps. Raptors can sit hidden in the conifer crown and grouse will move into the cover on the forest floor unaware of the presence of the raptor until too late. Gullion speculates that frequent disturbance of grouse in winter may increase natural predation. For example late season hunting for grouse or other game may push grouse out of ideal cover into poor cover where they are more exposed to natural predators. Snowmobilers and cross country skiers are less likely to disturb grouse because they don't usually enter the dense timber stands preferred by grouse. Harsh winter weather and hungry predators can stack the tables against rough grouse. Good habitat however can help even the odds. I look at a forest as a as an aggregation of 10 acre activity centers and each activity center is capable of supporting one pair of grouse and so you can apply the same management to a 10 acre wood lot or 10,000 acre wood lot. In each 10 acre activity center there should be four cutting blocks of two and a half acres each. Cutting blocks are usually harvested at 10 year intervals to produce the variety of age classes of timber that are needed by grouse for food cover and nesting space. This 10 year cutting interval may vary for different timber types. A professional forester or wildlife biologist can help you with specific grouse management plans.