Okay, I guess we'll go ahead and get started My name is Brian Alton Hoffel and I like lots of data. How many of you all like data? Like seeing lots of pretty graphs Do you like seeing pretty pictures in your presentations? Because I don't really have any And then up there there's a few ways to contact me if you ever need to I'm veggie meat on IRC I am in just about every Drupal channel Connect to it by proxy, so I'll always get the message Connect with me on Twitter send me an email whatever a little bit about me I have two Drupal businesses actually one doing development, which is VMdo and the other one I do hosting and that's in horizon and that's also where I started doing a whole lot of a centralized logging I've worked with Drupal since 2008 and like I said, I like lots of data and also like automation It's very rare to find me without putting a task in a Jenkins So who knows what what what that is? Yeah, that that's just a typical engine X or Apache access log You ever tried to go in You've got an issue on your site and you need to find out what's going on right? So you hit the log files Well, typically you're going to just grab it maybe send it through Oc a little bit of said or whatever just to Just to find out certain pieces of information that you need If you don't have a lot of traffic you might just hit tail on it But if you've got three million hits a day, that's not going to work one way to go through this log like I said would be like with Oc and In this case, we're trying to get how many times content was accessed between 3 a.m. And 3 59 a.m. Server time Can you remember how to do that every time that you need that information? If you wanted to have some fun with it, you could maybe do some Pearl you could through throwing some other regular expressions I've had one liners or maybe they should have been multi lines that were alias But it would take up that entire screen And I'm sure all of you have had that before too So that's kind of brings us to our problems with a conventional logging If you've got one machine Great, you can go through it that way What happens whenever you get say 40 web heads or say that you've got multiple database servers Or you've got multiple file servers You're needing to find the source of a problem Maybe it doesn't occur on every single one of those servers. Maybe there's something slightly different because Your configuration management didn't work right Conventionally you would need to go to every single one of those machines and access the logs That that doesn't work with 40 or 400 or whatever if you You can't really have your Technical support people a lot of them won't be able to go through those logs and find out if there's a problem So let's say that you had a email issue Customer call says that I'm not getting any emails. So you Customer support would ideally be able to Okay, let's go look at an email see if it's giving up any errors or anything like that in the conventional logging You won't be able to do that. You you have to have a sys admin or an ops guy or some other technical guy basically be a keyboard for that person and Because of that it ends up taking a long time to fix problems And we all know that in customer support the customer wants their problem fixed yesterday So the solution to this is a centralized logging With centralized logging you basically are shipping all your logs to a central place and in this case what I'm going to talk about is Shipping them from your servers Through log stash, which is the cute log guy in the middle and Having them indexed by elastic search And what that what that helps you be able to do is you can go back weeks from now or whatever and You can search through your logs Just using standard Apache Lucene queries You can do that. You can limit it to certain time periods. You can find trends It makes life a lot easier, especially if you've got a website that's generating Tens or hundreds of thousands of log messages a second. So what is log stash? Well log stash is a Java That it was it allows you to receive messages But it can also parse them and then you can send them to wherever you want So if you want to send it to elastic search, you want to send it to pager duty You want to send it to a stats D and graphite? You can do all that. It's a lot like Using Unix pipe or using T Except you get a whole lot more parameters and it's a it's a lot easier to configure than that if there is not a Plugin available to ship at some place There actually should be pretty easy to write Log stash has three different types of plugins The first are your inputs plugins, and you have your filters and you have your outputs I've got a few of them listed up there which one I'm going to talk about here is a lumberjack The filters it the filters are great for manipulating the log data However, you need it so you can separate out different parts of the log message into whatever field so that you can search by say the HTTP status code field or you can search by how long a slow query from my sequel took And grok is also a great filter It's basically You can put together different regular expressions and also pass them as variables and and reference in that way Anonymize is a great one if you say you You're your IT guys need to have all the data, but maybe customer support needs certain data stripped out and Then you can also do that with mutate Your outputs right now it goes a lot of places. You can ship it out to Page your duties one that I use all the time elastic search You can also I think you can do IRC to if you if you need to It's a lot of fun, and it's also real really easy to configure This is just a simple configuration that does engine X and Apache access log What what it's doing here is It's receiving from lumberjack and you'll notice that there's a type key on everyone I'm not totally sure if you can read it up there. There's a type key on every one of them and What happens is? Logstash references that type to say that hey this filter applies to these inputs and this output applies to everything that has this type attached to it and So that way you can route stuff wherever you want as it's needed Lumberjack, which I'll get to in a minute has a really cool feature where you can arbitrarily add a field from the shipper side so that you can have it show up on in a elastic search and That way you can search by maybe your client name or or a particular server name Which would actually already be there But if you had something that you needed to put together there like maybe a cluster You could have that all exposed as a field You can also in this case. I'm manipulating it and Turning turning that field into a tag and then dropping it elastic search Elastic search is a Document-oriented search engine It's built on Apache who's seen One nice thing about it is it's schema free, so you don't have to go through and define What all of your fields are going to be it takes it from the JSON input and figures it out by itself It's also very easy to scale Especially in a multicast environment if your network you can if you can multicast on it All you need is the cluster name and it will automatically find other peers or other nodes for that cluster and It will rebalance itself as needed Most of your cloud providers don't do multicast I know that if you're doing this in the cloud Rackspace actually does if you use their cloud networks their private networks And so Kibana is actually pretty simple to explain Kibana is a really awesome front-end for elastic search is what it amounts to It's current version Kibana 2 is in Ruby and Kibana 3 is HTML and JavaScript based but Really with elastic search you could actually build your own front-end in Drupal if you really wanted to Elastic search has a rest API for that But why bother whenever you can get Kibana to the kind of make sure logs look like this Where you've got a easy chart there you can sort by fields that are over on the left you can go and search them graph them You've got the messages there below or Kibana 3 is is kind of like this Lot prettier Actually has a lot easier to use Interface to make custom dashboards, and you'll see a few screenshots from that later and Finally, what is lumberjack? well You can use log stash On the servers that you're shipping logs from to actually ship the logs to another log stash server but It usually takes up a hundred megs or more of memory just sitting there running if If you're say you're in a cloud environment, and you're spinning up little 512 megabyte web servers just to scale out You don't you don't really Have the available overhead for that that kind of application Our syslog I've seen those grow up to Close to a hundred megs before lumberjack It is a very very efficient shipper that just kind of it sits there, and it just waits for log messages to send Sends them over SSL. So if you need to ship them Over an unprotected network or over a non private network you can do that and It uses very very little memory whenever for the footprint if you look that's 4kish maybe But they are pretty lightweight And that lumberjack is also really fast this is a little spreadsheet that a Jordan SSO Put up on Twitter one day that was comparing the Published rates and the consumer rates of different shippers through log stash and If you look at that lumberjack is capable of a 25,000 Per second as what he was showing there. So Why not use a Drupal's database log or the Core statistics module that's in court It's really slow whenever you whenever you get a larger site. That's getting a lot of traffic That that's more that's more stuff that you're having Drupal do That's more times that you're having to hit the database If you're hitting the database you're probably hitting disk and it can get really really slow if say that you Say that you set up something with rules where you were looping over a set of line items on a Drupal commerce order and You're trying to do something with all those line items, but you You may be messed up and had something that threw a little error Well, that can get carried away and suddenly you've got 20 30 50 or 100 pages worth of errors in the Drupal database log That probably really slowed down the site for those people that were on there at the time so It's typically a lot better to just log it Have Drupal either just log it directly to a file or to syslog but If you can't Get direct file access like that, but you happen to be able to get remote database access Log stash actually has an input for Drupal's database log So all you have to do is give log stash the credentials and the connection information for your database and It will pull out the watchdog logs and ship them for you Some advantages to shipping Drupal's logs elsewhere It's a lot easier to search through them. You can like I said before you can do Standard patchy Lucine search queries You can easily graph things if you were say looking for 404 errors or failed login attempts Or maybe you're looking for just how many times a page was hit successfully You don't have your database exploding whenever you have that little issue inside a loop and You get happier users on your high traffic sites You can also ship like instead of having to use the statistics module to see maybe your traffic Maybe you want to see a long-term graph. Well, you could could have also shipped your statistics to Stats D and graphite where you're able to get a chart like this so How does this help help me as a Drupal site administrator or really in a general Scenario number one as a website administrator I need to know if there's a trend of increasing errors You could if you were shipping to say stats D and graphite and you had that long-term graph You could easily reference that and see that But maybe you're not maybe you're just indexing all your log entries Or you're wanting to see if a particular error is occurring like maybe a certain message That's you know is coming from a certain part of your application Well, you can easily put in a search query and generate graphs like this These are actually two charts of the same same data The one on the left is a pie chart. That's just showing the percentage just showing your ratios basically of 200 errors to your 404s and 301s and whatever The ones on the right are showing how that happened over time The another one is my sequel and the slow query logs suck You've ever tried to go and Maybe you you're trying to grab through that You don't know if it's going to be one line five lines six lines ten lines. Whatever you don't know how long it's going to be Plus a they have a really weird time stamp And so you kind of have to shift gears to kind of think about okay. What is this time stamp here exactly? Well with log stash You're able to take that and and Manipulate the log messages Compress all of those multiple lines down into one continuous message You're able to translate the time stamp into a standard Time stamp that you can use on everything so that all of your index messages have the same time stamp format You can split out fields which I'm showing the scanned the the amount of Scanned results or scandal Rows and the amount of results from that really I can actually go through and if I set down some more with the filters and Worked worked a little bit more at it. I could I could Split this out into even more fields Just splitting up that log message But this you would agree that this is a lot easier than trying to look through My sequels normal slow query log another one might be Twitter trends. Maybe you're just wanting to see What somebody's saying about your your brand or you want to search through a Drupal con tweets or you want to You want to see Maybe you've got a whole bunch of interests that you always search for on Twitter and you want to see how those are Talked about over time Well, that's actually pretty easy to This is actually tracking the Drupal and Drupal con hashtags and is actually a screen grab from last night and It's just got a few messages up there and it breaks out the Nickname and the any links that appear into their separate fields that can be sorted on there Maybe you got things like unauthorized access You always get people that Maybe it's Scripps or maybe it's bots that try to log into your site or create users Maybe you want to see if there are certain times of day certain IP ranges Or other certain characteristics that Are making an extraordinary amount of attempts That's also easy to do What what this one has is this is Drupal is actually logging the syslog and then all the Syslog messages are being shipped over to log stash and so we're searching on The syslog type being being for the Drupal program and then we're basically searching for It being denied for the access denied You could also bring up you could Easily do a graph of this just by click. I actually have the graph section Collapsed there, but it would have a graph of that over time and if you wanted to drill down Into different parts of that parts of that message you could another fun one is IRC And like I said, there's like say up there There is a ton of documentation on IRC that never makes it on the Drupal org It's just you know, somebody has a question that might seem off the wall there. So it gets answered But nobody makes goes and makes a documentation page you can actually have logstash sit in IRC channels and Log them and ship them to elastic search and index them So that you can go in and like in this case This was over a 15 minute period Last night and just searching for views. Hey, I get a message where The Drupal conbot responded to somebody about something with views bulk operations but you could say say that you did that over a long term you could go back and you could search through a Something that you're having an issue with or maybe chart interest in a certain certain problem And then another one would be a smarter notifications I'm a big fan of pager duty even though I get a lot of messages from it sometimes You can actually have Logstash go through and say hey does this message maybe have these certain this certain stuff in it so maybe you've got a certain error message from your site that Needs immediate attention, but it's not doing anything necessarily that would trigger something like Nagios or Zeno's to actually send out an alert so you can have Logstash say ship it to pager duty and That way you get a text message or an email alert or whoever is on duty at the time gets a text message or email alert So in this case got one that say that I went through and tagged it with a type ouch Well, it's gonna send me a message that says super bad event for for This or that But this comes in handy for for like I said those little errors that don't necessarily Trigger my Zeno's monitoring system, but they do need immediate attention In this case on this configuration too It's also at the bottom. You see one for stats D. It's shipping the account for a for a particular response from engine X to Or for a particular response code from engine X to a stats D So that you get one of those charts that I showed earlier more resources can be found at a Logstash net or last search lumberjack can be downloaded off a github and Then a Kamana feedback Can be left at a triple con site. So any questions? Yeah Wait this one. Um, do you have any recommendations for? All these logs once you're storing them and indexing them and that sort of thing it's probably going to Take quite a bit of disk space Are there Anything that allows you to maybe put these things on s3 or something like that to help with the storage I should be if you don't have a lot of storage on the servers that you're using it with or Maybe it doesn't maybe I'm wrong. Maybe it doesn't amount to a ton of storage, but Okay, yes, it does amount to a ton of storage I've got one site that gets About three and a half million hits a month and it generates probably 12 gigs Every day or two So I do run into that problem and One nice thing about the elastic search data Is you can pretty much just back it up as is and bring it in someplace else Bring it into to another elastic search instance So what I end up doing is I've run a script that Takes everything every index that's more than seven days old and Archives it and then yes ships it off to s3. Okay, so yeah, you can do that And it's it's easy to just bring those archives back and pull them up in another elastic search in Instance if you need to actually go back and look at them. Yeah, can you go to the microphone?  Yes I'm actually going to upload them to to the Node on the Drupal con site Just haven't had a good Wi-Fi connection this morning Thank you with patent media. No, it's curious if there are any performance considerations to take into place with 40 or 60 servers like this Um Yes I'm not quite sure what a threshold is on the elastic search servers I Know that I I can run them on on cloud servers Typically for me, I've been running into about 17 or 18 web web nodes Shipping their logs to elastic search And those are running 2 gig servers That that's about what I've been doing is every 17 or 18 it's up another two gigs and That usually works out pretty well with lumberjack in the shipping off of the logs Is that something where the engine acts your web server?  Um, well, there's two ways to go about that one one is you can have the standard ways to have Lumberjack just watch the logs and it just reads them off the disk and ships them out Which that lets you get really aggressive with log rotate Because hey, you're not you don't care if they're there or not So that gets you to kind of a second way, which is if you wanted to You could mount that in memory Mount your log logs in memory if you Can manage it well Or you know that you're gonna rotate out before it gets full or anything like that and you can actually speed that up pretty good But yeah lumberjack typically you just have it read from the files It'll also take standard in so you can just pipe something to it We're gonna have different site owners need to see logs or information just about their sites And of course they're gonna want to be on the web on a GUI. That's not on a private network Does there are these tools gonna be able to do that or are there others you using to let the public see their logs? Um Kibana to has a branch That has authorization in it It's not recommended for production use so What I would do in that case is I would take the Kibana 3 version which can run on engine eggs or patchy or whatever your web server is and Let the server handle the authentication there or put it behind SSL Whatever you're needing there not seen if they are putting authentication into this into a cabana 3 yet or not But earlier in the talk whenever I mentioned that I was shipping from lumberjack and that I had a Field that lumberjack added that is actually something I've kind of played with from the cabana to branch that has authentication Which is it just authenticates off the tags? so, I don't know if you've worked with other tools, but Is there anything in particular with this tool set you found that has particular advantages over? Splunker other products in this space other than sort of the open source. I haven't really worked with anything else I kind of got started on this one By I hang out in the infertile channel on free note, and I kind of got started by this one by asking Hey, what's the standard right now? And this is what they pointed me to I Did look into Splunk at early on and I found that in my case where I'm I'm creating Right now I'm creating a total of 20 gigs to 25 gigs a day It was just a lot more cost-effective for me to roll my own basically


I joined the Air Force right after 9-11. I actually graduated in 2001 Shortly after 9-11 happened and I was ready to go into the military I actually was drawn to the Air Force or the Navy because I had this notion that they had the best Intelligence assets. I actually went to the Navy recruiter first He wasn't there and right across the hall was the Marine recruiter US Marine Corps recruiter And I told him that I wanted to join the Air Force or the Navy because I thought they had the best intelligence assets and Ironically the Marine recruiter agreed and he said this is the only advice I'm gonna give you and he took a dime He had it in his hand and he flipped it up and it laid it on the floor and nails the floor in his office Was actually blue and had blue carpet and he said I want you to imagine this entire carpet is ocean and that dime is the ship you're on and The rest of your career is spent on that ship in the middle of the ocean He said is that how you want to spend the rest of your career and right then in there? I knew that I wanted to join the Air Force, so when the Air Force recruiter came in I talked to him and The rest is history. That's why I joined the Air Force I've been in the Air Force total service now about 16 years almost 17 years However, this gets a little tricky because I served 11 years active duty and I've been a US Air Force Reservist ever since so 11 of those years were active and the rest are on the reserve side of the house Now when we talk about a rank my rank is also confusing because I'm a special agent So technically my rank is special agent. I'm a special agent with the Air Force office of special investigations Now our rank is masked for a couple of reasons one is for command influence We don't want any command influence on our investigations. So if a higher ranking officer, let's just say a colonel Let's say a colonel is a subject of an investigation and I'm talking to them They shouldn't be able to order me to do anything or influence the way my investigation has taken me So that's why our ranks are masked in that scenario But also let's think about the opposite end of the spectrum Our ranks are also masked because if there's a brand new airman in the Air Force Let's say a female and she wants to report a crime if I am in 05 and she is in there talking to me She may be intimidated and she might not tell me everything that there is she might not tell me all the facts or the Circumstances around the situation. So that's another reason why our max our ranks are masked So we can actually get all the information we need without an airman feeling intimidated The name of my job is special agent with Air Force office of special investigations The a fsc is seven s o x one You can't get into OSI straight from enlisting you actually have to be in for a while before you can get into OSI So when I initially signed up for the Air Force, I actually signed up on the delayed entry program under another job That was called power production. I scored really how on the mechanical side of my as fat That was a job that came available and that just means that I work on I worked on big generators The specialty code for that is three o x two now What's my retraining window opened then I applied to be a special agent with Air Force OSI the The recruiting team liked me. I got picked up in the rest of history. I Didn't really know about the OSI position I didn't know OSI even existed until I went to my first tech school and Once I got to my tech school There's like an endoc briefing that you have to get where they teach you all the rule They they brief you on all the rules They tell you what you can and cannot do and all that type stuff and I remember one of the briefers in that endoc Was an OSI agent the guy walked in now remember I just came from BMT where everyone had a sharp crisp uniform Everyone was clean clean shaven and I've been in this briefing for hours being you know killed by PowerPoint So death by PowerPoint this guy walks in he doesn't have a PowerPoint presentation He's got a beard and a suit and he says hey, I'm a special agent with OSI I just want to tell you guys what to look out for and where you shouldn't go in this town And he tells us that you know what his job is how he investigates crimes for the Air Force and from that point on I was just super intrigued with OSI and I knew that at some point I wanted to do that So from that point on I knew that when my cross training window came available. I was going to pursue OSI When I first signed up remember 9-11 had just happened and I knew that because the Attackers were from you know Middle East Middle Eastern descent I knew that Arabic was gonna be a language that the Air Force needed and I really wanted to be an Arabic linguist also if I couldn't be an Arabic linguist I wanted to be to do something in Intel the Intel realm I knew that we were gonna need intelligence professionals to help track the bad guys And we were gonna need Arabic speakers to actually communicate with anyone they might catch So that's how my mind was working back then. That's what I wanted to do Unfortunately, I didn't score high enough on my ASFA to get into the intelligence community And I didn't score high enough on the D lab to actually get an Arabic language so that since I scored high on the mechanical side and Electrical power production was gonna get me into the Air Force the quickest.  I'm not saying that's the route that everyone should go But I can tell you worked out great for me because if I would have enlisted for six years that Retraining window to cross-train into OSI would have been extended and I wouldn't have been instead of retraining at three Or applying to retrain at three years and some change. I would have had to wait five years and some change So I'm kind of glad at this point I signed up for a four-year commitment They actually offered me a fat bonus. Well when you're 19 that kind of money sounds good I think it was about 3,500 bucks and after taxes. That's not much to stay To commit for six years, but I actually didn't I turned down the bonus to do four and now we can it worked out for me So the tech school if you will is in Glenco Georgia. It's actually at the Federal Law Enforcement Training Center It's not a tech school. It's actually the Federal Law Enforcement Training Center in Glenco, Georgia It's where 80 different federal agencies send their new agents to get trained So the training the initial training in OSI is going to last about five and a half months So I remember leaving in January end of January in 2007 and I graduated mid-July and the training is broken down into two sections the first section is The the course that everyone comes to all the agencies send their agents to this course It's called basic basic special investigations course now. That's where you learn to be a federal police officer That's where you go. You're gonna learn your constitutional law your use of force You're gonna learn your officer tactics and then once you graduate there if you graduate Then you get to go into your follow-on school at your respective agency now all the agencies have schools at the Federal Law Enforcement Training Center Of course mine was Air Force OSI so at the first school you might be Embedded with a bunch of different agencies, but once you graduate basic you go to your respective agency training That's where you learn how to be an Air Force OSI agent and you learn about Regulations and Air Force how the Air Force operates and UCMJ and things like that Tech school was very different from a military school now remember this is a this is actually a civilian school Where civilians go to learn how to be federal agents So it was a different experience for me and I actually liked it now. I was young when I went into OSI I was actually an e4 I was only two one of two e4s that got selected to go in 2000 my class in 2007 was me and another guy the hardest part for me was the studying You know, I'm not a good student So I have to study extra hard to actually pass tests and things like that and the teaching is very fast-paced now Remember you're going through you're learning constitutional law and going through very important cases in just a matter of weeks So you have to learn very fast and you have to study There wasn't a time where I got to go out where my other classmates would go out in town and in party a little bit I wasn't able to do that because I had to study and to be honest with you I'm embarrassed to say I still finished right like right in the middle of my class. I still wasn't you know that great I had to study a lot that was the hardest part about my class the physical aspect I was in great shape at that time and I actually liked the physical aspect of it You know, I ran a lot while there the officer tactics portion. I really enjoyed I excelled at you know I can't think of anything that I disliked about the federal law enforcement training center One thing I'd like to add about Fletsey is it's not like a military course It's a it's a civilian training center and also with that, you know people that are going into Fletsey They're either they have their four-year degree. They've already been through college Or they've been in the workforce for a while. So it was a very professional course There wasn't a lot of yelling and you know, hurry up and wait and wearing your reflective belt and rules that just don't matter So I actually enjoyed Fletsey. They treated you like an adult and you got the respect that you earned So where can you go as an OSI agent when you graduate Fletsey? You can pretty much go be assigned to any base that has an Air Force OSI presence, which is almost all of them Here's the thing about OSI that not many people talk about the opportunity to specialize in OSI or the opportunities to specialize It's abundant. You can specialize in almost anything Now if you choose to specialize after your year of probation and you choose to specialize, let's say in forensics Or you specialize in being a polygraph examiner or you specialize like I did on the AST team or special mission branch Then your bases actually narrow. So for instance, the polygraphers can only choose from about five bases Maybe six and one of those is in Germany. You've got another one in the DC Buckley Air Force Base I think Travis Air Force Base and maybe Ohio. I can't you know, things have changed since I Specialized so those bases might have changed now. I can tell you on the anti-terrorism specialty team That's what I chose to specialize in now those units are assigned to special operations groups within the Air Force So wherever there is a special operations group, that's where you can go My assignment was at Milden Hall in England. I was a special I was attached to the special operations group in Milden Hall It was a 350 second special operations group and I know some of my colleagues were in canon air force base Some of my other colleagues were in hurlbert field. There were some other colleagues in Korea a base in Korea and I can't remember the other base right off hand just keep in mind if you're a Special agent and you choose not to specialize if you don't want to specialize in anything You can go to any base that you want any base that has a OSI present when you specialize those bases get narrow You can only go to a couple of bases As a special agent that's not specialized right in a certain area what happens is it's a very atypical day There's nothing typical about your day when I first came into OSI the days were it's not a nine to five job So anything could happen No, not only can anything happen You get phone calls all day about stuff that you may or may not look into at some points in your investigation You never know where those leads are going to take you and you might those leads might take you You know, you might have to travel to a different state and One day and you come back home and then the next day you're like Oh, I've got a we have to stay out at 3 a.m. To do a surveillance. So it's very atypical I can tell you that it was a very rewarding experience my first year in OSI because I got exposed to a lot of things with the local law enforcement Other federal agencies. I was doing, you know, Surveillance and I was involved in an undercover operation I was not the undercover but we led an undercover operation. I thought that was awesome. What else we got involved I was actually my first year in OSI. I was involved in a this was back when the f-22 was Coming on board and we found a deficiency in f-22 and we were being frauded by a company and I led an investigation that actually detected a deficiency And one of the systems and processes that was costing the government about 200 million a year So that was cool. So you get to be involved in all kinds of things like your first year in OSI Actually anytime in OSI like it's very atypical A lot of people don't know that they have a counterterrorism support or counterintelligence support to force protection mission when they are Actually deployed. What does that mean? That means that wherever they're deployed to they are tasked with protecting the assets and protecting that base Now you might be at a fob that's getting rocket and mortar attacks daily You've got to find out where there's mortar attacks are coming from and you need to go stop them So that was my first deployment experience in Kirkuk, Iraq and when I Went out there and I was exposed to that type of mission. That's when it flipped I was like, hey, this is what I want to do for the rest of my career And that's why I signed up to be on the AST team or anti-terrorism specialty team because I wanted to deploy I wanted to catch bad guys and now when you specialize that's different So I'll tell you about a typical day on the AST team You were either working up to a deployment. You were deployed or you were working out logistics for a deployment What do I mean by that? I mean, you're either training So you were going to a school that taught you how to shoot move and communicate Self-defense ci something along those lines to make you a better agent Then you were working the logistics how to get you from point a to point b get whatever you needed from point a to point b And you were working out what you were going to do when you went to that location Or you were actually deployed to that location as you can imagine the time with your family is it's not much Like you you know, I was married with two kids in England at the time and I didn't see them that much And that actually led me to to get out after 11 years because I knew that I was almost addicted to that job And I let that job kind of define me and that was kind of the point where at which I decided Hey, I need to get out So I'd like to give two pieces of advice to new airmen that are thinking about air force osi As you already know, I've already stated you can't come into osi when you enlist you actually have to be in You have to be within your retraining window before you can apply. There's no exceptional policy to that You have to do that now if you are thinking about osi and you want to be a federal agent There are some things that you can do to actually make yourself more competitive when it is your time to retrain Number one is keep your nose clean. So that's very important osi is looks very highly on moral compasses Right. So keep your nose clean. Number two is knock out your degree Your ccaf is first because osi wants to see what you've done for the air force and for some reason knocking out your ccaf is a huge deal Like you could have a phd in chemistry, but if you don't have your pa your ccaf you haven't done anything for the air force So that's in any career field that I've noticed. So make sure you knock out your ccaf I promise you it actually opened up some other doors The second piece of advice that I can give actually any airman not just anyone seeking osi So I can tell you that I fell into the trap when I was actually active duty of letting my job define who I was And I've seen this throughout my air force career People are defined by their air force job or their military job And because people let their job define them their relationships suffer. So let me go in depth with that So instead of when people ask me, hey who I am or what I like to do My first answer would always go back to my job. Like, oh, I'm I'm an ast team member, you know, that's my job That's who I am instead of saying I'm a father. I'm a father of two boys.   Now a personal story here And it got to the point in my career where I did love my job It was the most rewarding job I had being on the ast team And I got to see some amazing places and I got to do some work that Some people can only dream of and I actually got addicted to it. It was like a drug I was ready as soon as I got back home. I was ready to deploy again.  I still had kids that I had to raise I still had two boys that I had to, you know, teach them right from wrong And I had to teach them how to be men, but I was addicted to traveling to these places and doing the work I was doing so I had to look at myself in the mirror. Basically. I came home from a deployment and what my oldest kid He was a toddler. He was afraid of me. I was all bearded up. I walked through the door I was happy to be home and telling everybody hi my kid was terrified Like I was a stranger to him and from that point on I knew that something had to give So that's when I decided that I need to leave active duty I need to scale back a little bit and I need to open up my own business Some of the training that I received on the AST team opened up a lot of doors for me And I was able to open up a self-defense facility from some of the training in the contacts that I met on the AST team They helped me open up a Krav Maga training facility in a small town in virginia And um, I thought that was a great experience Now I actually travel full-time I sold that business and I travel full-time with my family in an RV And we actually document our experiences through a youtube channel Hey, I'd I'd be grateful if you guys check it out You can find out how to subscribe to our youtube channel by going to freedomcallingrv.com That's freedomcallingrv.com and if you have any questions about osi Um, I'm sure I don't have all the answers, but I can point you in the right direction So thanks a lot for checking out my experience with Air Force OS


Hi children, my name is Mansi and I am going to help you solve the following question. The question says, prove the following by using the principle of mathematical induction for all n belonging to natural numbers, 1 into 3 plus 2 into 3 square plus 3 into 3 cube up till n into 3 raised to the power n is equal to 2n minus 1 multiplied by 3 raised to the power n plus 1 plus 3 the whole divided by 4. In this question we prove by using the principle of mathematical induction. Now before doing the question we see the key idea behind the question. We know that the principle of mathematical induction is a specific technique which is used to prove certain statements that are formulated in terms of n where n is a positive integer. This can be stated with the following properties. If there is a given statement p at n such that first p at 1 is true and second if statement is true for n equal to k where k is some positive integer pk is true then statement at k plus 1 is also true for n equal to k plus 1 then p at n is true for all natural numbers n. Using these two properties we will show that statement is true for n equal to 1 then assume it is true for n equal to k then we prove it is also true for n equal to k plus 1 hence proving that it is true for all n belonging to natural numbers. Now we start with the solution to this question. Here we have to prove that 1 into 3 plus 2 into 3 square plus 3 into 3 cube so on till n into 3 raise to power n is equal to 2n minus 1 multiplied by 3 raise to power n plus 1 plus 3 the whole divided by 4. Let p at n be 1 into 3 plus 2 into 3 square plus 3 into 3 cube up till n into 3 raise to power n that is equal to 2n minus 1 into 3 raise to power n plus 1 plus 3 the whole divided by 4. Now putting n equal to 1 p at 1 becomes 1 into 3 that is equal to 2 minus 1 into 3 raise to power 1 plus 1 plus 3 the whole divided by 4 that is equal to 12 divided by 4 and that is equal to 3 and this is true. Now assuming that p at k is true p at k becomes 1 into 3 plus 2 into 3 square plus 3 into 3 cube and so on till k into 3 raise to power k that is equal to 2k minus 1 into 3 raise to power k plus 1 plus 3 and the whole divided by 4. Now to prove that p at k plus 1 is also true.  This is same as 2k minus 1 into 3 raise to power k plus 1 plus 3 plus 4 into k plus 1 into 3 raise to power k plus 1 and the whole divided by 4. This is same as 3 raise to power k plus 1 into 2k minus 1 plus 4k plus 4 plus 3 and the whole divided by 4. This is same as 3 raise to power k plus 1 into 6k plus 3 plus 3 the whole divided by 4. Now this is same as 3 raise to power k plus 1 multiplied by 3 into 2k plus 1 plus 3 the whole divided by 4. This is same as 3 raise to power k plus 1 plus 1 into 2k plus 1 minus 1 plus 3 the whole divided by 4 and we see that this is same as p at k plus 1 hence from principle of mathematical induction the statement p at n is true for all natural numbers n hence proved I hope you understood the question and enjoyed the session goodbye.


B12 supplementation is crucial for anyone eating a plant-based diet, but does it have any side effects? Watch this video to find out. Acne is a disease unique to humans. Why do humans get acne? Well, think about the distribution of those greasy sebaceous glands, face, chest, and back— exactly the same structures that pose the greatest obstruction during childbirth. So hey, maybe having a little extra lubrication at those sites would help make the baby more slippery for birth, conferring a selective advantage for successful delivery. OK, but what triggers them to become inflamed into zits later on? While in Westernized societies, acne is a nearly universal skin disease afflicting up to 95% of teens, and some populations eating more traditional diets, not even single cases could be found. This suggests that perhaps nutrition counseling should be a first-line therapy for individuals with mild to moderate acne. It looks like it's the high glycemic foods and dairy products. So we're talking sugar, soda, refined junky carbs, white flour, breakfast cereal, and dairy products like milk, cheese, yogurt, whey, as well as saturated and trans fats concentrated in meat, dairy, junk, and fast food. So, for example, acne patients should be encouraged to discontinue any whey protein supplements that might be taking the relationship between milk and acne severity, maybe explained by the presence in dairy of normal reproductive sex steroid hormones or the enhanced production of growth hormones such as IGF1. And if you're like, wait, I gave up dairy a month ago and still no change, it should be noted that changes in acne due to any dietary changes are likely to take at least 10 to 12 weeks, so you have to stick to it. Not surprisingly, acne patients are more than twice as likely to have a non-vegan diet compared to controls, but the difference did not reach statistical significance. So maybe the vegan's reading a lot of vegan junk. But what about this? Vitamin B12 induced acne. Our fellow great-ape herbivores like gorillas get all the B12 they need practicing the eating of feces, but my preference would be to take B12 supplements. And you don't have to worry about getting too much, because there are evidently no reports of adverse effects associated with excess B12 intake, but that's not true. First described back in the 1950s about 1 in 10 people erupt in acne within days or even just within hours of getting an injection of vitamin B12, which then disappears rapidly when you stop injecting them. At the time, we had no idea what the mechanism might be. A problem still unsolved even up until just a few years ago, but then we finally figured it out. Vitamin B12 modulates the gene expression of the skin bacteria that cause acne. They swabbed the skin of 10 people before and after being injected with vitamin B12, turning out the level of B12 on your skin is proportional to the level in your blood. And so after injection, the bacteria on your skin have to make less of their own B12. And so the acne bacteria could concentrate instead on using its cellular machinery to churn out more compounds to attack your face. Without excess B12 on the skin shown here in green, the bacteria has to make most on its own at the expense of porphyrins, which can trigger acne inflammation. When there's lots of B12 floating around the bacteria, it can not waste resources and focus instead on trying to pimple you up. Okay, so wait, what do you do? Those on plant-based diets have to take supplemental B12. Yes, but we don't have to get injections. Vitamin B12-related acne tends to occur only in dosages, in excess of 5,000 to 10,000 micrograms a week. Well, in excess of the 50 micrograms a day, I recommend or alternately my 2,000 single weekly dose. I mean, the only time you'd be taking between 5,000 to 10,000 a week is if you were treating B12 deficiency. If you remember from my previous video, B12 deficiency is treated with 1,000 micrograms a day for a month or more. And that could potentially trigger it, as noted in this vegan woman who wasn't taking B12. Developed B12 deficiency had to be treated with such high doses her face erupted in acne. So all the more reason not to fall B12 deficient in the first place. But look, worse comes to worse. Even if you do get B12 injections, the likelihood of it triggering acne may only be about 1 in 10. In 2019, a study found an association between high intakes of vitamins B6 and B12 from food and supplements with the risk of hip fracture among post-menopausal women in the Harvard Nurses' Health Study. But note it was only the combined high intake of vitamins B6 and B12. We know that treatment with high doses of vitamin B6 may alone increase hip fracture risk. After a decade or so, those who had been taking high dose B6 supplements had about 40% higher hip fracture risk, but not in those taking B12. And that's what the Harvard study found, too. High intake of vitamin B12 alone was not associated with increased risk. In fact, some observational studies suggest slightly lower fracture risk at high B12 blood levels. But what we care about most are interventional studies where people are randomized to B12 so we can see what happens. And when you do that, no increased fracture risk among those given B12. In conclusion, based on randomized controlled trials, high doses of vitamin B12 have not been shown to be associated with the risk of fractures. Okay, but what about this? In 2017, a study found that men taking vitamin B12 supplements appeared to have an increase in lung cancer risk. Now they didn't find any such association. Women, it was mostly among smoking men. I mean, could it be that B12 was like feeding some budding tumors? I mean, it's hard to imagine a vitamin being carcinogenic on its own, especially somehow only in men, not women. The bottom line is that replication of these findings with additional studies is necessary. And indeed, when you put all the observational studies together, there was no significant correlation between levels of B12 in the blood and lung cancer, whether you smoked or not. I mean, if anything, most studies seem to be trending towards higher B12 levels being protected. But then in 2018, a new study found an association between overall lung cancer risk and higher circulating levels of B12, again, appearing to be more of a smoker thing. Now this was another observational study. Those with higher B12 levels were just observed to have higher cancer levels. And so those of you who've been following my work know the drill. There are two potential issues that arise in observational studies that prevent you from ascribing cause and effect, confounding factors, also known as lurker variables, and reverse causation. What might be a lurker variable in this case? A third factor associated with both higher B12 levels in cancer, and that may be the true cause? Well, who has higher levels of B12 circulating in their blood? Those who eat lots of meat and dairy. In fact, probably the most important contributors. And those who eat more meat do tend to have more lung cancer, about 35% more risk for every about daily quarter pound burger, and 20% increased risk for each like breakfast sausage leg. So no wonder. Those with higher B12 levels in their blood could have more lung cancer. The B12 could just be a marker for meat intake. And if you remember, reverse causation is when, instead of x leading to y, maybe y is instead leading to x. So instead of high B12 blood levels leading to cancer, I mean maybe cancer leads to high blood levels, and indeed nearly three-quarters of cancer patients. Exhibit elevated B12 levels. So elevated B12 levels may just be a marker for cancer. There's all sorts of things beyond just taking extra B12 that can raise your levels of liver problems, kidney problems, bone marrow problems, and cancer. So high levels may just be a marker of a brewing, not yet diagnosed cancer. Yeah, but what about observational studies specifically linking supplement use to lung cancer? That too could be reverse causation, where being at risk for cancer, in other words being a smoker, makes you more likely to take vitamins to try to decrease your risk. And basically any behavior tied to smoking could be indirectly tied to lung cancer, but it's the smoking itself, of course. That's the real lung cancer risk. So we're left with this chicken-of-the-egg causality dilemma, which is why ideally we need a randomized controlled trials to see if there's any cause and effect. This became even more urgent, with genetic evidence suggesting that those just born with higher life-long levels may be at increased risk. Thankfully we do have randomized controlled trials over a dozen randomized controlled trials randomizing thousands of people, up to 2,000 micrograms of B12 every single day for years, and vitamin B supplementation does not have any effect on getting cancer, dying from cancer, or dying overall. And this includes specifically looking at lung cancer. In fact, if anything, vitamin B supplements may actually lower the risk of the most dangerous form of skin cancer.


Just give her a kiss. She loves you. Ah, come on. How cute is that? Are you going to deny the bird a kiss? Don't do that. Don't. Don't put that on me. Nelly's laughing. It's like opening its mouth. Yeah. I'm not going to French the bird. I'm going to show you the in-between behind the scenes of us making a video. So what's happened here is... Miguel, what's wrong? I'm such a fish out of water. Why? Because of all the birds? You're capturing my nervousness. Miguel, come let's meet Jersey. She wants to meet you. Are you scared? Huh?  I thought you were going to be a professional. I played with them like 15 years ago. I haven't been around a bird in like 15 years. Come on, Miguel. It's time. Don't be scared, Miguel. Yeah, Michelle was scared of her. I was scared of her. Now look at her. She had time. You want to get over this in like one day. Did she overcome it in like one day? Yeah. I can't have you upset Jersey. So let's go. Oh my... Come on. She wants to perform for you. She has a song. Come on, Miguel. Let's go. Jersey, look who's here. Miguel. Do you want Miguel to see you dance? I think she's over me. No, she's not. Trust me. She's probably hard to get to. It's like a whole thing. Go for a kiss, Miguel. No. Alexa. Is there even such a thing? Whoa. You're excited for her, Miguel. You might feel so fake. Are you not excited for me? I am excited for her. Don't tell her. You should do it through. Even if she doesn't step up, at least she knows you tried. Brando. Did you see your new boyfriend? I'm confused. How do you know who's which? These two are the same kind of birds. So that's blue. That's Brando. That's Leo. This is Nelly. This is Monty. And then that over there. Do you remember that bird's name? Up there? That's um... Rocky. Rocky and then Vinny and... Cody. No one told me. You're fine. You got it. Turn around and sniff her. I don't want to sniff anything. I don't want to sniff anything. Turn around and sniff the parrot, Miguel. No. Sniff the parrot in the nose. Then I turn around. She'll assume sniff position. Just get up in there. Assume sniff position? What does that even mean? Miguel, sniff the parrot. No. She's laughing. Do you hear her laugh? I hear her laugh. Turn your head and look at her. No. I never had a deal with such a difficult case before. What happened to you? It's not delicious. Smell Brando. No. She likes you. So you don't want to break their hearts. They're little souls. Stop putting all this pressure on me. It's not pressure. It's fact. The bird is expecting to be sniffed. Why would the bird expect to be sniffed? Because she was born in the sniffer community. She likes affection and that's one of the ways. Go ahead. Turn and sniff. I don't want to sniff. You turn. You sniff the nostril. He doesn't know about sniffing, but Brando does. So go ahead. Turn and sniff.  Look, she's ready. She heard sniff. She wants you to sniff. Oh my god. She's going to get offended Miguel. What? Sniff the bird. I don't... What did she don't do? See? So go for it. Go. Get into the nostril. It's so much pressure to sniff this bird at it. No, it's not. Just turn. Did you get some? I got some. If you didn't enjoy it yet, you didn't get it. Go ahead. I take things in spurts. That's okay. Next spurts. The nostril. Did you smell what it smelled like? It smelled... I don't know what to call it. It's... It's different. If your ear won't be in her way, if you sniff her. Can you please like... I have an ear in my mouth. Are you scared? Am I...what? I'm scared. He's of a little parrot? Nelly laughs. That's funny. Nelly's funny stuff. Look, she wants love. Give her a kiss. She wants a kiss. You said I had to sniff and I had to kiss. Just give her a kiss. She told you. Did you hear her kiss? All right. Is that okay? Give her more. She enjoys it. You don't enjoy it. Just give her a kiss. She loves you. How cute is that? She's asking for a kiss. I moved boxes. Are you going to deny the bird a kiss? Don't do that. Don't put that on me. Nelly's laughing. I don't know what this is. It's just so weird. She wants a kiss. It's like opening its mouth. I'm not going to French the bird. No. Just watch. You feel it. It feels good. Yeah. I tried.  Oh my gosh. It's like opening its mouth. She's not going to bite you. She's just going to open to give a kiss. All right. She's good, right? You like that? No. It's easy. She wants a straw. It's mine. No. No. No. No. No. No. No kisses. No kisses. You know you want one. No. No. No. When you're ready, you can meet Vinny. You'll love Vinny. It's a lot. Because it's not like meeting one bird. It's meeting like 15 at once. You literally came to a bird park and didn't even have to pay 10 bucks to get in. Parking. No kisses. I mean come on. I paid 10 bucks to stay out. No. No. Do I have to go behind Peni. This is your arc. Follow it. Your character arc. You're achieving loving the birds. Now say hello to the bird now. As if you've been with the bird years. Did you see how good Ron did today with his lines? Who's. Ron got big today. What if you're in a movie and you're working with a bird? You have to be prepared. It's going to be a CTI.  Don't be afraid to fix your hat head. It's okay. But she loves you. It's too late. Megan gave her a toy. You're fun now. Are you okay? Are you being attacked or anything? I'm still alive right now.   Is that bird biting you? He's biting something. Is the bird holding a gun to your head? It might be. I can't see what it's doing. Did the bird try to kiss you? Yes. Okay. So did the bird make kissing noises at you? I guess maybe. Right. So this bird's showing you nothing but love. Sure. And you're acting like it's a terrorist. Why'd I feel like it's another bird? It is. Oh, it's the best. It's the best. The best sweatshirt you'll ever have. Oh, it's a sweatshirt? Yeah, it's a hoodie. Oh, this is awesome. I love it. Thank you. I'm still recording. What are you talking about? You know, it's really soft. Feel it inside. It's the best. Like, you don't have to wear a bra. Holy s**t. Yeah, I forgot to tell you. Blue loves curls. Oh my god. You have probably the best hair for blue. He's still in school, so bear with him. What? What? What does that mean? He's got to give his hours in as a hair stylist.  He's got to get his practice in. So just be patient. You know, somethings take time. Nothing, you're evil. He's doing a great job, really. I can see he's adding more volume. Crazy. Yes. Head massage, you know? You're almost there. You like your camera, please? I think I'm laying out right now. I love you. She's got it, right? Yeah. Miguel, you should at least take a selfie. Let's take a selfie. I've recorded it already. Oh, yeah. So blue does this to also LL's hair. Blue loves curly hair. Yeah. If you could see it. As long as I don't have a bald spot when I'm done, I'm good. Go ahead, Jenna. What? Tell Miguel. Miguel, do you think he'll be overwhelmed by the next piece of info? I come from Maniac, so I should be okay. I come from a different type of crazy. What do you want to tell him, Jenna? I mean, I want to know if you introduced him to the King of Rue in the back yet. No? His name is Lordy. I haven't met Lordy. Look at the baby. He's cute. What is this? We started getting animals from Australia. That's our main goal.  I like the teamwork. You guys worked so well together. Yeah. Thanks. Wait till you see the kangaroo. So it's 9 a.m. Miguel wanted to get another chance with Terzi, so I said, why don't you come in and wake her up and see her reaction. She's in here. Say hi. Hi, Terzi. And then you reach in. Is there another bird in there? No, Vinny is talking from the cage. Or pet her hand. She likes it? She looks like she's backing away. Do you hear him say give me a kiss? What do you want, Vinny? He's in here. He's upstairs. Walk you through a perfect cage set up for an African Grey. Would you? I like it.


Panic of being upside down and not having air and kind of just it's an awkward feeling for people. I thought it was fun, other than getting all the crap in my nose and ears and stuff, but that's just comes with it. Trains you to be ready for if you were to crash into the ocean, just worst case scenario kind of thing. I was definitely a little bit nervous at first, they're saying oh they're going to flip you upside down, you got to feel your way out. I was like oh, no worry, but once they explained it we did all those drills that we did today, it definitely helped. When we actually did it, it got the hang of it, it was pretty easy and I wasn't worried about it after that.


Many people today are concerned about the rising cost of health care, particularly in the United States. This indeed is one of the prime motivations for President Obama's health care reform proposals, so-called Obamacare Plan. There's been quite a lot of backlash politically and otherwise against Obamacare, but most people agree that something is wrong with the health care system, particularly in the United States, and that something needs to be done, in particular, to get prices down. One of the problems with health care pricing in the United States is that the prices are not at all transparent. When most of us go to the doctor or go to the hospital, we're relatively unaware of how much we're actually paying for the various procedures that we get. Mainly, we ourselves do not pay. We pay a little upfront cost, and then our health insurance provider pays the rest. Indeed, there's a study just out in the last couple of days by a group in Colorado called the Center for Improving Value in Health Care, pointing out how much variety in prices there can be for a single procedure. They noted, for example, that in Colorado, in Denver alone, a colonoscopy, which is a very standard procedure, can range in price from $400 to $2,800. When we shop for most goods and services, like restaurants or automobiles or vacations, we can go online and compare prices and get customer reviews and really do some comparison shopping. With medical services, we typically can't do that. There's simply no way to find out how much things cost. If we had more transparency in prices, this Colorado group argues, and I agree, there would be more pressure on health care providers to compete on price to keep prices down to be more efficient. Most health care providers go a long way to avoid disclosing how much things cost. One reason is there are huge and highly variable markups on very standard procedures. I had dinner with a couple of doctors a few weeks ago, and they reported how a simple injection that can cost less than $10 to the doctor can be priced to the buyer anywhere from $200 to $400, depending on who's paying. The problem here has to do with this so-called third-party payer system. Most Americans don't pay for health care expenses out of pocket. Their insurance company pays, or if they have Medicare or Medicaid, the government pays. This results in consumers having little incentive to learn about prices and to compare prices among providers. Why do we have a third-party payer system? So even leaving aside Medicare and Medicaid, most Americans have insurance provided by their employer, and that's no coincidence. It's because the U.S. Tax Code considers employer-provided health benefits to be an untaxed benefit. If I pay for health care services or health insurance premiums out of my own pocket, I have to pay income tax on those. So it's this peculiarity of the tax code that leads to the dominance of these third-party payers, which means that consumers are not price-sensitive, and all of this contributes to the high cost of medical care in the U.S. In an earlier Mises' view, I argued that health care goods and services were really not that different from other goods and services, and that the free market could provide effective and affordable health care just as it provides automobiles and shoes and housing and other goods and services. The key is to let the market do what it does and to avoid government intervention that leads to the third-party payer system and other mechanisms that prevent competition and keep prices high and quality low. We can have an effective free market in health care services if the government will just allow it to work.


Sun's going down soon so I don't want to crash.  And then we go low, control throttle, keep it steady. Don't let it hit the ground. Stay as low as you can. Don't crash into anything. There we go. Check that. Okay. One more time.


The Ocean State University has won a $170 million grant to conduct research on six projects, including migration, government policies, use restiveness among others. The Vice Chancellor of the Institution, Professor Clement Adeboye, disclosed this in a shubo Ocean State capital, due to the presentation of letters of award to the six winners of the grant that Tertiary Education Trust Fund released to fund advanced knowledge and research. It may be your very first one. Don't pursue material gain from your first grant. Push knowledge. It is not the time to go and buy the most expensive phone in the society. It is not the time to go and buy radio with many lights. It's not the time to go and buy 100-inch television. It is the time for you to push knowledge. Write your name in gold. So that from this small 30 million, 20 million, 50 million, you can start to earn $50,000, $100,000, millions of dollars. That is how some of us built our career. The first grant we got, we focused on promoting knowledge, on doing research and doing the work as it ought to be done. It is not the time, I repeat, to buy the most expensive phone. It is not the time to buy new car. It is not the time to buy 100-inch television. It is the time to pursue your research. Put your name in gold and make sure that things are done properly so that you do two things. One, you make yourself a strong scientist or researcher.  Therefore, I thank you all for coming for this very...


folks. This is Tom O'Brien of TFNN. We have five days a week. We go seven hours a day. We go 24 hours a day on the internet at tfnn.com. Always remember folks, whatever you think about, you bring about whatever you focus on grows. Hope everyone's having a great day, safe day. It's making a great night, folks, and a great week. And check it out, folks, okay? We're gonna have to check this out. So my grandson Tommy, Tommy's son, right? He is growling like amazingly right now. We were growling and prowling all morning long. He has it down pat. I mean pat. It's a beautiful thing. Be impeccable with your word. Replace fear with love. The human mind is like a fertile ground with seeds that continue to be implanted. When you're impeccable with your word, your mind is no longer fertile ground for the words that come from fear. Your mind is only the fertile for the words that come from love. This is a great card, man. You need to live in love or live in fear. And I've done both, folks, and let me tell you something. It's a lot easier living in love. You know, we all go through these trips. There's no doubt about it. Mug it wise! Let's take a look at it out here. We have the Dow Industries up $2.41, Nasdaq up $2.28, S&P's up $53, Gold Contract up $5.80, Traded $18.33 an ounce. They got Silver up $0.07, $23.27 an ounce, Light Sweet Crude up $0.18, $89.54 a barrel, Notes and Bonds. The 10-year note, up 5 ticks, $126.23, the 30-year up $13 at $153.06 and $Kingdala. $Kingdala's down 131 ticks, Traded $95.12, Euro's $114, the yen is at $1.15.50 and a half, and the British pound is at $135.00 to $1.00 US. Our phone number's<PHONE_NUMBER>. Give us a call, folks. I want to know what's going on in your world, and the world of the S&Ps, let's take a look at them. Let's go into the futures first, because this has been a heck of a day. They're running the market. There's no doubt about that. We have a big contraction of volume happening here. So this is going to get really intriguing watching how the CPI is going to come out tomorrow and how the reaction is to it. I mean, it's going to be a hot CPI, man. But let's get into where this S&P is right now. So what we just had, last two 10-minute bars, we just went down 12 S&P points. What you have there, you get volume behind the move. So right there, what is that? $45.54. Yeah, $45.54 is game. That's this morning. That's how this is setting up right now. And it's only three o'clock in the afternoon. So the bottom line is that we'll see how that shakes out. But you get an expansion of volume. Right now, that's 10 minutes. So that bar just finished. The first bar, I mean, at 10 of three, we had $26,000 contracts. We just did $35. $35 is going into $19, going into $41. So the bottom of $41, I suspect it will get there, is that's another $11 bucks lower. So we'll see how that shakes out. But that's where it looks like it wants to go right now. NDX 100. Let's go take a look at the NDX. Bring the NDX up. You're up 241 points right now inside of the NDX. Okay, so bring this one out. Okay, so same setup in the NDX. The difference in the NDX, now this is going to get cool. The difference in the NDX, this is kind of nice actually. I suspect we're going to get down about another 30 points. But it's going to be really hard for the NDX to get under the futures. This is $14,951. We're at $981 right now. I expect it's going to try to make a run for it. And what that is, that was the open bar out here today. And then we had another bar right underneath it with 18,000 contracts. Yeah, we only did $11 on the way down. So we'll see where it shakes out, man. Gold. Gold contract out here has price. Excuse me. We need volume, man. That's the real bottom line. This is, we're going to do probably about $130,000 again. That's not a lot of volume. So this thing's going to get pretty wild out here tomorrow morning that CPI comes out. Right now you're up $6. You're at $1833. And we'll see whether we can get an expansion of volume. It's going into the downdraft. The downdraft was pretty extensive though, meaning you're going into $150,000. Notes and bonds. So the 10-year note is on a confirmed ABC structure on the way down. You're up four ticks today. And what that's all about, folks, there are buyers of bonds. I mean, in a monster way, too. That auction this morning, it was a very successful auction. It went off, 10-year notes went off at $1.904. And the bottom line is that you had $2.6 chasing every dollar. The biggest part of this is that these were direct issuers, folks. We have the large banks, basically a license by the Fed, as dealers, and they have to buy so much. But everyone else can come in direct. And when they come in direct, okay, the bottom line, you're going right to the Treasury, they had a big number out here today. There's no doubt about it. That's what was most of the buying. And where that comes in, that comes in with trust funds, hedge funds, states, countries, okay, straight right in, you know, so it's a big number. There's no doubt about that. And no shots on YouTube. Well, you got them now? You got them now. Okay. Some of the, oh, let's go to the dollar. So CPI is coming out in the morning.  King Dollar here been laying out down the first leg down. So we'll see whether King Doll is going to do a monster ABC structure on the way down. You know, the B point out here is a 95, 137. If we go over to Euro, we take a look at the Euro, just the opposite of the U.S. dollar, of course. And we'll see the Euro already broke its consolidation. You know, you broke the top of the consolidation at that 113, you're at 114.26 right now. And the pound, let's look at the pound. So the pound is flat out here today. Hmm, interesting. The pound looks like it wants lower price, actually. Yeah, this is failed the whole price today at 135. So it looks like it's going back to 134. We'll see how that baby shakes out some of the higher volume equities out here today. It looks like it's going to be a low volume day because when we come back, I'm going to go to Jose and Lakeland first. But the Dow, when you look at the Dow numbers, meaning the volume, the Dow's taken up the B point and it doesn't have the volume for an ABC structure, confirmed ABC structure up. It doesn't mean it won't go higher. It just means it would have been a lot easier if it's an ABC structure confirmed. You get an NVIDIA up 13 bucks. You get Uber up $1.67. We have Exxon off $0.40. PayPal's up $2. You got Advanced Micro up $3.57 and Facebook. Facebook finally caught a bid up $1,178. Stay right there, folks. Come right back.


Hello, my name is Jim Garrett. And in this very short video, I'd like to talk about implementing multi-layer container and Kubernetes security with OpenShift for an automated DevSecOps environment. In my 35-year history of developing software, I've been personally involved in dozens of software delivery projects and on multiple occasions have been responsible for creating automated delivery pipelines used to build and deploy your code. One thing I've seen countless times is the fact that teams often don't cover security requirements until very late in the process, sometimes not until the end of the process. And when this happens without fail, the end result is delays in the actual delivery of the software. In today's discussion, I'd like to talk about the topic of including security in the development and operations process, something known as DevSecOps, something I'd like to think of as the marriage between development, security, and operations. With the implementation of DevSecOps, the goal is to prevent security challenges early rather than later. To facilitate this, security tools are included directly in the build process. And the end result is the delivery process is able to perform security auditing from the start and not jeopardize the release schedule of the project. In this demonstration, we've created a DevSecOps CICD pipeline leveraging multiple technologies that, when brought together, provide an amazing, reusable pipeline capable of producing rock solid products faster and with security built in from the beginning. As the foundation of this pipeline, we're going to be leveraging the OpenShift pipelines using Tecton. Then, starting at the left, we'll be using a GOGS source code repository to store our source code. We're also going to use JUnit as the means by which we perform source code unit testing. We also have a tool called SonarCube, which is going to be used to perform source code quality checks, and a tool called Nexus, which is going to store any of the build artifacts that are generated by the pipeline. And then next, after we store that generated image, we have Red Hat Advanced Cluster Security, which is going to be used to scan, check, and then deploy the image. And then on the far right, you see we also have OpenShift GitOps, which is going to be based off of Argo CD. And this is going to be used to deploy an image in preparation for penetration testing. And then finally, after we perform our penetration testing, we use a tool called Gatling, which is used to execute performance tests against the deployed image. So the first thing I'd like to show you is the OpenShift user interface and how it can be used to not only create but then visualize the build pipeline that we've created. So to look at the build pipeline, we can switch into the developer view. And you can see that I have two pipelines that I've built, one for development and one for stage. If we look at the development pipeline, you can see the exact steps that have been defined, which mimic the information that I showed on the previous slide. For example, the first thing that we do is we get a copy of our source code. And then simultaneously, we can do our unit tests and a dependency report. We can release the application. We can build the image. We can do the scan, the check, and the deploy check all in one step. Update of deployment, do performance tests, penetration testing, and then another performance test. So you can see that this pipeline is pretty all-inclusive. Now, if we wanted to look at the actual YAML of the pipeline itself, we could see all of the different steps and see exactly how those steps are executed. For example, if we look at, let's say, we look down on the list, we see that there's a task called source clone. And it has parameters that we pass into it, such as the URL, what revision, the subdirectory. And then it uses a task called get clone to actually clone the source code from our source code repository. Now, you'll notice that if we look at pipeline runs that there are no runs of this pipeline as of yet. There are multiple different ways that we can actually initiate this pipeline. For example, we could come up to the action and say start. That's one way. And then, of course, this pipeline would start and do all of the different pieces that it needs to do. However, what we would really like to see is how a development team is going to use the pipeline. And typically, the way a development team works is when a new file is added to the source code repository or maybe you change an existing file, it can be set up to automatically kick off a build. Now, one thing I'll mention is this build pipeline. Again, this is done using Tekton. And when this pipeline is generated, the end result is it creates a container inside of OpenShift which physically runs this pipeline. In fact, if we go back to a topology view, we're going to see not only all of those products that I showed you in that previous screen. For example, the GOGS repository and Nexus and all of these different pieces of the puzzle. But we also see a container which is called a webhook. It says EL webhook. And if we actually go and look inside of our source code repository in this case, which is called GOGS, you can see that I have a project setup with some source code. And if I click on the settings of this project, you can see one of the items that's displayed is something called webhooks. And if I click on webhooks, this is a URL to the actual webhook container that was created inside of OpenShift. Now again, the scenario that we'd like to show you is what happens when somebody changes a file or adds a new file. So to show this, I'm going to click on this readme file. And I'm going to edit this file. And I'm just going to make a simple change. I'm going to put the word test at the end of this title. And I go in and I commit the change. Now, automatically, you can see if we go back into OpenShift, this pipeline now has one specific task that's started to run. And again, we can watch that pipeline run. We can watch the details of it. And we can physically see it go through each one of the steps that we've outlined before. And of course, the first step is it's going to get a copy of the source code from Git. And if we click on that particular step, we automatically start to see the output from it. You can see that it's going to perform a checkout of this Spring Pet Clinic source code. And eventually, this exits. Now, again, if we go back to the details, you can see that it's completed. And now it's simultaneously running these unit tests and dependency checks. And basically, it's going to run throughout this entire pipeline. Now, this pipeline takes a few minutes to execute. So I'm going to pause the recording and wait until it finishes. Now that the pipeline is finished running, we can see that the pipeline has actually failed. And it's in this step called Image Check. Prior to looking at that, let's take a look at these other steps that were performed. For example, we can click on each individual step and look at the log file information that comes from it. We've already seen the step where it sources or clones the source code. We also have a dependency report that gets generated along with some unit tests. Once the unit test is finished, you can see that at the very end of the unit test that it's going to build a jar file from all of the artifacts that make up this particular application. In the release step stage, the jar file that's created actually gets uploaded to the Nexus repository. And this repository is what's going to be used to store this image and artifacts that go along with it. We then see a build image step. Now, what the build image step is going to do is to physically create the container that is going to run our application. And then if you recall from the pipeline, there were three steps that were executed simultaneously. Deploy check, image scan, and image check. However, you can see that the image check step has failed. And there are several violations that have occurred when it physically looks at the image that's been created. You can see that the first set of violations convey that there are some CBEs that have a severity that's high enough that's going to cause this to fail. For example, a CVS 7.5, something found in component Jackson data bind, or something found in the Tomcat that's being used, Tomcat web server. We've also got some packages that have been deployed to this container, which in the long run could cause this container to expose security vulnerabilities. So you can see that this image check actually went and looked inside the container and was able to find issues or vulnerabilities with that container. And you may ask yourself the question, how does this happen? And the reality is that when developers create things, for example, maybe they create a Dockerfile which defines how a container is going to be constructed, it's very possible that that container is using either old technology, old container images, or maybe the creator of that container included something in it which would break a security violation. And it's important to catch these things sooner rather than later so that you don't get all the way into production and all of a sudden realize that you have a vulnerability with your code. So before we move on, let's also take a look at the image scan step of the pipeline. Again, when we click on the image scan log, we can see a list of all of the vulnerabilities that it has found inside of this container, some of which are severe, some of which are not. And then at the very bottom, it conveniently conveys a link to our advanced cluster security, or ACS module, which we can actually go into and view using the web browser all of these different vulnerabilities. So when I copy and paste that link into the browser, this is what it takes me to, again, the advanced cluster security, and specifically the vulnerability management tab for this container. And at a high level, we can see all of the information about this container. For example, what's the risk priority? What are the number of critical versus important versus moderate versus low CVEs that are brought up? And it actually allows us to drill down into the components that it has analyzed. So take, for example, one of the components which it says is fixable is the Tomcat web server that's contained inside of the container. And again, if we drill down into the Tomcat web server, we'll see, first of all, that the version of Tomcat is 9.0.31. However, all of these CVEs or CVSSs that are conveyed are fixed in version 9.0.54. But again, in this particular Tomcat web server, we can see that nine of the CVEs are rated as important and four as moderate. And if we minimize this particular summary, we can then see all of the things that are technically fixable inside the Tomcat web server. If we want to, we can also drill down into the CVEs and see a list of all of them at a high level. If we go back to the Overview tab and minimize the image summary, we can see all of the image findings. And again, it lists those various things that are fixable inside of this container. Next what I'd like to do is show you how you can fix your build pipeline so that it gets past the image scan step. And to do that, it's going to involve a couple of steps that we do. First of all, if we go back and look at the image check step, we see that one of the violations that's coming up is the fact that some packages, the RPM and the YUM package, has been installed into the container image. And the other set of violations have to do with some CVEs, which are failing. Well, the first thing I'm going to do is I'm going to fix the creation of the container image. And I'm going to fix it so that it no longer installs these two packages. And the way that I do that is the task, the pipeline task, which is used to take your code and lay it on top of an image is called source to image. So first thing I'm going to do is I'm just going to delete that particular task. And then I want to recreate it. And in this case, I want to recreate it in a way such that the source to image is correct. And it does not have the RPM package for YUM and I guess for RPM. So to do that, I've got a command window that I can use. And you can see that in this command window, I am opening or using a YAML file, which can be used to basically redefine that source to image task. And of course, we're going to use this kubectl to apply it. And we're going to apply it to the ocp-workshop namespace. So I recreate that task. And if I go back into OpenShift, you'll see that the task is now back in there. So that's step one. If we want to take a look at that particular YAML file and exactly what it does, we can scroll down and we can see that in this YAML file, it's removing those packages that are in question. Now, the second step as we saw when we looked at the pipeline is to disable, I'm just going to temporarily disable the CVEs that are coming back in error or with a problem. So in this case, I have four CVEs. And I'll show you how I do the first one. And then I'll show you how to disable it. And we can do the second one, third one, fourth one as well. So to disable the CVEs, we go back into our Advanced Cluster Security. And I want to look at the Vulnerability Management tab. And specifically, I want to view all of the detected vulnerabilities. And basically, I want to search for, let's say, search for the first one, CVE202025649. So we go back in here and let's do a search for that CVE. And it's really simple to disable it. All we do, let's say we want to disable it for a day or a week or you can even disable it indefinitely if you want. Now, of course, eventually you would want to fix it. But for now, we're just going to make it simple. And we're going to disable it. So boom. There now it's disabled. Let's go back and get the next one. And again, we're going to disable this guy for just one day. Get the third one and disable it. And the fourth one. We'll disable that as well. And I think that's it. So we go back. Yep, that's the last one to disable. We'll go ahead and clear this out so we see all of them again.  And again, this pipeline takes a few minutes to run. So we're going to pause and come back when it's finished. So you can see that the pipeline has now finished. And it actually went all the way through past the image check step all the way to the end, where it does its performance testing, its penetration testing, and obviously the results for the performance test. If we go back into the image check task, again, no failures. All is good. We can then look at the remaining task if we want to just to see what the log presents. But in short, the pipeline has finished. It's done every single step. And we can go back and look at all the different things that we need to look at. So that concludes this demonstration. Again, this showed a pipeline that was written in Tecton that incorporated a lot of the different DevOps features that you're used to, but then also added the DevSecOps features, which is the advanced cluster security component, which is actually formerly known as StackRocks. And it was that ACS module, which was able to scan the container images and check them prior to updating the deployment and pushing it through to the end of the pipeline. I hope you found this demonstration useful. Please feel free to contact me if you have any questions. If you'd like to learn more about this solution, visit redhat.com slash en slash partners slash DevSecOps. Thanks for watching this video. I hope you found it useful.


So we're out here 2G4 in my battalion at Hunter Army Airfield, got chosen to host the Brigade Best Water competition So we got folks from all over Conus and the Brigade out here competing they brought they brought their best and brightest Competitors out here. So I got we got two I got Jackson Hawkins both ones of 25s here and ones of 15 Charlie UAS Soldier different backgrounds different walks of life and just killing it out here on the course So today is day two yesterday. They had the ACFT and an equipment layout today They will have the obstacle course followed by the grenade range followed by all of their warrior tasks and drill evaluation lanes They can come out here. We see soldiers all the time.  They're writing essays. They're doing trauma related stuff on top of the physical The physical challenges, you know the well-rounded soldiers with what we're looking for