Hi, I'm Daniel Weisberg, Search Advocate at Google. And today I'll talk about how to use Search Console if you're a developer. Since the tool provides a lot of information about search optimization, developers may think it's not useful to them. But I beg to differ. In this video, I'll talk about the most useful Search Console reports to help developers build websites that are healthy, findable, and optimized for Google Search. In summary, use the index coverage report to understand site-wide search indexing issues. Use the URL inspection tool to debug page-level search indexing issues. Use the security issues report to find and fix issues affecting your site. And use the core web vitals report to make sure your website provides a great page experience to your users. The first thing that is really important for you to know is whether Google can find and crawl your pages. Small bleaches can have a massive effect when it comes to Googlebot being able to read websites. For example, sometimes we see companies accidentally adding no index tags to entire websites or blocking the content from being crawled through an error on the robots.txt file. These issues can be easily uncovered using the index coverage report. When you open the report, the first page you see is the summary page. The default view shows indexing errors on your website. But you can click to show valid with warnings, valid, and excluded pages. In addition, you will find a checkbox to add to the main chart the number of impressions your pages got on search. Here's what each status means with some examples. Errors prevent pages from being indexed. Pages with errors won't appear in Google, which can mean a loss of traffic to your website. For example, your page might be returning a 404 or 500 level error. Additionally, you might get an error if you submitted a page through a sitemap, but it contains a no index directive. All these cases would prevent the page from appearing on search results. Valid with warnings are pages that may or may not be shown on Google, depending on the issue. But we think there is a problem you should look into. For example, Google might find pages that are indexed, though blocked by robots.txt. This is marked as a warning, because it's not clear if you intended to block the page from search results. If you do want to block the page, robots.txt is not the best way to avoid being indexed. To do so, you should either use the no index directive or request authentication to see the page. Valid pages have been indexed and can be shown on Google Search. So good job. Excluded pages were not indexed and won't appear in Google. But either we think that is your intention, or we think it's the right thing to do. For example, the page has the no index directive, your choice, or the page is a duplicate of another page, Google's choice. You can watch the index coverage episode in this series to understand more about the issues affecting your site and learn how to validate a fix you have implemented. To debug an issue with a specific page, for example, a page Google is showing an error in the coverage report, you should use the inspect URL tool. You can use it to learn the current index status of your pages, to test a live URL, to ask Google to crawl a specific page, and to view detailed information about the pages loaded resources and other information. You can access the tool from the top bar, from the sidebar, and you'll also see a little magnifying glass next to URLs in some reports. For example, if you drill down to a URL from the index coverage report, you can click to inspect it. Once the page displays the results, you will see three different sections, all of them presenting information from Google's last crawl, or crawl attempt. If you recently made changes to the page, you might want to check if they're working as intended by clicking test live URL, and comparing the live version to the indexed one. In the presence on Google card, you'll get a verdict on whether or not the URL can appear in Google search results. There are two important options available for developers in this card. First, if you made a change to the page and want to request Google to re-index it, use request indexing. Second, you can click view crawl page to check the HTML version that Google indexed, and more information on the HTTP response and loaded resources. In the coverage section, you'll learn where the page was discovered, such as a site map or referring page, when was the last crawl and by which user agent, and whether the page is included in the Google index, or another version of it was chosen as the canonical. In the enhancement section, you'll find any structured data details, along with AMP and mobile usability warnings and errors. For example, if your page is not marked up properly with structured data, the inspection will return an error detailing the missing or wrong values. You can watch the inspect URL episode in this series to learn how to use the tool to debug and fix any issues you find. Search Console also includes two reports that will help you optimize your site's health, security issues and core web vitals. The Search Console security issues report shows warnings when Google finds that your site might have been hacked or used in ways that could potentially harm a visitor or their device. For example, a hacker might inject malicious code in your pages to redirect your users to another site or to automatically create pages on your site with nonsensical sentences filled with keywords. These are examples of website hacking. An attacker might also trick users into doing something dangerous, such as revealing confidential information or downloading malicious software. That's called social engineering. When you log into Search Console, you'll already be notified in the overview page if you have security issues on your site. Clicking the alert will lead you to the security issues report, where you'll find a list of all security issues Google found in your website. In the report, you'll find more details about the type of threat, a sample of pages affected by it, and a process for you to inform Google when you fix the issues. I recorded an episode about the security issues report with Aurora Morales, my colleague from the Trust and Safety team. Check it out for more details. Lastly, the Core Web Vitals report shows how your pages perform based on real-world usage data, sometimes called fuel data. The report is based on three metrics. LCP, or largest contentful paint, is the amount of time it takes to render the largest content element visible in the viewport, starting from when the user requests the URL. This is important because it tells the reader that the URL is actually loading. FID, or first input delay, is the time from when a user first interacts with your page, when they click the link or tap the button, to the time when the browser responds to that interaction. This is important on pages where the user needs to do something, because this is when the page has become interactive. CLS, or cumulative layout shift, is the amount that the page layout shifts during the loading phase. The score is rated from zero to one, where zero means no shifting and one means the most shifting. This is important because having elements shift while a user is trying to interact with the page is very annoying. I'm sure you will agree. Log in to Search Console and navigate to the Core Web Vitals report. You'll see that the report is broken down by mobile and desktop. Open one of them to see an aggregate report with more details. By default, the chart shows trends for pages with poor performance, but you can click on need improvement and good to check their trends too. Be aware that if a page does not have a minimum amount of reporting data for any of these metrics, it is omitted from the report, so you probably won't see all your pages. Click an issue in the table to drill down. In this report, you'll find more details about the issue, a chart showing trends, and a table with sample URLs. Check the links in the description to find out more about the Core Web Vitals report. You might also like to check out tools such as Lighthouse before you deploy changes to production. With that, I'll end this video.  To recap, use the index coverage report to understand site-wide search indexing issues. Use the URL inspection tool to debug page-level search indexing issues. Use the security issues report to find and fix threats affecting your site. And use the Core Web Vitals report to make sure your website provides a great page experience to your users. Don't forget to subscribe to the Google Webmasters YouTube channel to watch our upcoming Search Console videos. Stay tuned.


Hello Columbia and welcome to This Week in the City, where we bring you highlights from the public relations, media, and marketing department. I'm your host, Alicia Utsy. On Tuesday, March 28th, the Health, Social, and Environmental Affairs Committee will meet at 1pm at City Hall. The meeting will take place in the Mayor's Conference Room. For agenda items, please visit our website at ColumbiaSC.gov. On March 30th, Mayor Daniel Rickerman, City Council members, city officials, and other leaders from local organizations will hold a Columbia Cleanup Press Conference at 10am at Hyatt Park. Hyatt Park is located at 950 Jackson Avenue. They will announce plans for a community-wide cleanup effort that is coming in the month of April. Also on March 30th, the Office of Business Opportunities will sponsor a workshop. Let's talk labor and FMLA requirements for small businesses. This workshop will be held at the Busby Street Community Center at 1735 Busby Street. It will begin at 11am and end at 12.30pm. And on March 31st, it's time for Food Truck Friday. Come out to 200 Bull Street, the corner of Bull and Colonial in the REI Co-op parking lot, and enjoy food from some of local Food Truck vendors. This will be our last Food Truck Friday for the month of March, so make sure you come out and enjoy some delicious cuisine. Well, that wraps up This Week in the City. If you have questions about any of the events being held this week or any meetings, please contact Public Relations, Media, and Marketing. You may reach us by calling<PHONE_NUMBER>. You may email us at PIO at ColumbiaSC.gov, and of course, check out our website 24 hours a day for information at ColumbiaSC.gov and also for agendas for various meetings. Also, make sure you are following us on Facebook, Twitter, and Instagram in order to receive the latest updates about the City of Columbia. Thank you for joining us, and we hope you have a great week in the City.


Hi everyone, Joe for jaspyscasebreaks.com with yes another case of jaspys big hit express This has been some awesome stuff so far. This is series four ladies and gentlemen So I have a lot of these hits still in there waiting to be pulled So welcome to break number six Big thanks to All of these folks and congrats to Matt for winning that spot in the previous break and big. Thanks everybody else right here There are all the teams comboed up right here There are the remaining cases right there and we'll figure out which one we're gonna do We're gonna roll it randomize it six and a five eleven times for each list your names first one Josh down to Brian Six and a five eleven times for the teams and eleven the final time for the teams. Good luck Miami down to the Knicks combo right there Trade out your own risk ladies and gentlemen All right, so I'll show you Everyone's names right here. That's half about a half the break right there Too many teams for me to read off There's that right there and now let's alphabetize by Your first names and there's everybody right here. Good luck everybody. All right now 11 times for the case numbers nine 10 and 11 final time After 11 we've got case 30 Case 30. All right, so I'm gonna pause the video when we come back We're gonna see if there's any trades and then we'll break stick around. I will be right back All right I'm back No trades a little bit a little bit of trade chatter In the end no deals were done here in break number six There's so there's just the the final printout right there same as what you saw in the previous screen All right, and it's case 30. I don't know why these this paper keeps not wanting to stand up There you go case 30 30, right? Good luck. Love the packaging here in series four Good luck everyone, and we've got rookie of the year contenders Josh Jacobs Nice on-card autograph from contenders optic football To 75 Nice who's got my Raiders Raiders that goes to Zach nice one Hopefully no no sophomore slump for him. I'm hoping next up is whoo Two out of two Devin Funches Adidas patch an on-card autograph from NT collegiate football Wow Where is he on he's on Green Bay now? So Devin Funches a Green Bay Packer Remember our college rules. I should have explained that before but everyone knows it by now They're active they'll go to the team. They're currently on they are retired They'll go to the team.  All right We've got Nikhil Harry 15 out of 15 not sure what Bowl that is but it's a bowl game patch that goes to the Patriots and that's Eric J With the Pats Is that the Sun Bowl Arthur saying that's Sun Bowl? There you go Graded 9 5 10 Matt Forte bears nice. That's pretty cool Edges corner surface a 9 5 centering a 9 as autograph is a 10. That's from 20 oh 8 tops chrome football Duh Bears Adam Wilson With the Bears All right next up And more of this coming up ladies and gentlemen We've got like another got to go through break 15 Hakeem the dream Alajuan in shrine signature 16 out of 20 From flawless that's pretty cool. I like that old Rockets logo to Rockets Will be Tony there you go Tony few more to go and there's Nikol Jokic from opulence nice magnificent signatures 62 out of 79 Denver Nuggets That goes to Jared and the Nuggets There you go Jared a couple more to go good luck and more more to come I'll be another one after this and then another and then another and we've got Elgin Baylor three out of 25 Nice the old that that old Lakers blue is pretty cool That throwback from the Minneapolis days. I want to say Lake show that goes to James James Connell with that one there you go Jimmy And the last one ladies and gents Good luck. Last one. It feels like it's graded It is oh Nick saying whoa. Oh Wow, that's on the cell sheet For the Cleveland Cavaliers. I've heard of this guy Draft pick number one back in back in the day back 2003 2004 tops and tops old basketball LeBron James That's a sharp suit. Good job LeBron It's a sharp suit Centering edges corners. They're sending it centering edges surface all the nine five Corners a nine for a total of a nine five All right. There you go. That is for Spencer Jordan Wow Spencer Jordan with the Cleveland Cavaliers Congrats, there you have it Joe for jazzy's case breaks calm another great case in the books Apologies to the hit list people, but you do have a chance Do you have a chance at a spot in the very next break?  Good luck. Let's roll it. Let's randomize it one and a five six times two three four And a one sixth and final time after six there's six right there and It's Brian people's there you go Brian Maybe maybe we're gonna start a start a hot streak with this bonus spot that you got in the very next break And that's coming up next. I'm Joe for jazzy's case breaks calm. I'll see you next time. Bye. Bye


that um oh we get defeat typhoon don't we that's right commander typhoon is up here somewhere I believe he's in here I do need to sell stuff again my bag is just filling up way too quick here way too quick we need to find a vendor just so I can sell everything literally everything actually what do we have an um this I wish there was a quick sell like I really wish there was a quick sell really really wish there was a quick sell but that's fine alright I have so many skeleton keys which is really good really really good we can fight old scratch a whole bunch of times maybe I'll eventually solo him probably not but you never know this is so exciting content look at this content me just clicking two buttons over and over again I apologize I just need to clear out a whole bunch of space because apparently this game hates me and gives me too much stuff apparently I don't know why I'm like upset about that but I am but I am righty ho 10 r 10 content people always the best content I have the best content don't worry right this must be that I think this is the typhoon fight pretty sure pretty sure let's not get pulled that would be bad team let's do this let's also not get pulled because that's bad except death is actually good I mean death is a very good class very good school was you'll start my your pirate was my pirate pirate fair enough fair enough mmm kid okay let's do this let's do this we have boss in bud noise what a guy what a dude what a dude six movement yeah gonna do this don't worry we got snakey again that's good snakey is good I love me a snakey love me a snakey okay invisible what can I discard here will that one we don't need movement it's a small board so that'll be fine that'll be fine magic resist I don't know why we need magic resist but I'm not gonna complain not gonna complain at all yeah okay okay go snakey go I believe you can do more than that mr. bud will also spill his fishes he sure does his starfish is what am I drinking their water water water water water water don't worry they will only explode and kill us all in five turns yeah I don't worry I think it'll be fine we'll be fine by then hopefully hopefully we'll be fine by then okie dokie all the accuracy and dodge all of it right and then invisible not unless mr. bud eats them oh yeah he can do that and regain health carney that's quite cool okay overwatch kaboom oh he's moved back sorry but he's not hungry right now yeah he's not very not hungry right now burst fire go okay just one that's a bit of a shame but that's fine bit of a shame but that's fine overwatch can you kill please that'd be great no okay if I could good job good job this one down one down already ready spell dodge all the dodge geez overwatch mega hit kaboom kaboom double tap burst fire burst fire noise ready spell noise dodge ha ha you're bad you're bad so bad this new year's you went party I went to might have made you a little tipsy I mean that's what happens on you yes it's fine right it's fine it's fine everyone's been there unless you're under the age of 21 in America or 18 everywhere else when I wouldn't suggest drinking drink responsibly people but I think a lot of people have been there so you know it's fine I wouldn't worry about it too much wouldn't worry about it too much as long as you don't miss with fireworks then Brent's okay exactly exactly as long as you don't destroy yourself with fireworks it's fine super fine otherwise you can do anything you want that's just how new year's works you know as long as you don't destroy yourself with fireworks everything's okay definitely righty hoe let's see what we can do here what trouble can we cause let's go for one of these I don't know what I'm gonna do let's just discard this and this we're gonna go for this you can do that and contesta can do that that should be good hopefully hopefully hopefully that should be fine what do we not need I don't know we probably won't be here for too long kapao exactly go love the kapao and a half super kapao there super kapao super duper kapao op so good mega hit kaboom there we go feel well gg gg we did it no not quite can po op op boy go do it do it camp oh I believe in you yeah yeah it was a really good here mr. boss and mr. bud is very good he be not here captain my captain be careful of the evil spirits captain my captain right but wait there's more oh no who would have thought not me now just kidding I didn't know there would be more there's like a lot of them I think the next fighters typhoon but we definitely defeating typhoon soon yeah we're gonna do that you can just pew pew you you can do that you can do should I send him out to his death I think it's time to send him out to his death minus 50 accuracy that sounds like a good thing okay okay ducks okay that is probably the weirdest thing I've ever seen in game before absolutely weirdest thing I've seen slightly concerned but it's fine you know it'll be fine ha you're bad here's the dodge relentless kaboom vengeance strike dodge second chance okay vengeance strike go fight him relentless yes go Horkie Lee's I believe in you do doon do doon do doon doon doon kaboom Horkie Lee's is just so good I love Horkie Lee's love me a Horkie Lee's in the morning just love it absolutely love it barrels explosion barrels isn't that fun isn't that fun I think this is gonna be super fun oh you've got the nutcracker the nutcracker that's cool I've never actually seen that in fight when the main state you got a max for all your companions is accuracy exactly so sad so sad Prince your fist yep yep it looks cool really looks cool crack the nuts darks holy moly holy moly kaboom you have the nutcracker as well he can combo well with burst fire to double tap to noise much like norsica but from that one bundle yeah that one bundle that one bundle first strike second chance buh-bye repel borders haha vengeance strike dodge second chance dodge watch blocked unlucky unlucky we kind of we kind of saw that one coming though kind of saw that one coming where's your block Bonnie and oh my god everybody else can block but you that's just disappointing honestly really disappointing that snake is pretty much a boss fight unit yeah okay Bonnie and just please just please please please please glancing blow oh ready spell kaboom coward Spain super hit just getting all these super hits out here nice okay this is not good do not approve of this message can you block please Bonnie like seriously I know you have no accuracy now but still blocking would be great just saying don't realize how Hawkely's is dodges just so good at the moment I literally think I have only one dodgy on him just because I want him to vengeance strike all the time but apparently dodgy's paying off here but that's fine I'm not gonna complain about it not gonna complain right who do we have over here we have a lot of boys a lot of boys just all over the place you can do that you can do this contessa you can absolutely obliterate this guy here this guy here Hawkely's can absolutely obliterate that guy and that sounds like fun mega hit oh no blade storm just stop hitting Bonnie that's a good idea here really good idea wow can I get a relentless please cannot get a relentless that's a shame definitely need to use a potion next when in doubt just relentless to blades don't to best fight to double tap to on combos for maximum combo yeah yeah vengeance is also really good especially when you're once you get venge three it's not showing off at the moment but it can stun which is really useful which basically means you just win instantly generally maybe pussy nice heel there nice heel righty ho he's basically dead which is good and you go for a mojo storm I love that spell so cool so cool first strike oh vengeance strike vengeance strike all the vengeance just constant vengeance everywhere vengeance three is definitely great but sometimes you've got to sacrifice that to give companions relentless to bladestorm to for combos yeah that is true but then also you know sometimes they just don't relentless and sometimes they don't crit so you know but and sometimes they do definitely get hit I at the moment I'm just more focused on vengeance for now just because there are some dungeons where vengeance quite useful quite useful you can do that contesta can do that you can also do that and that sounds good done okay good done okay I think we've done this fight I think it's fine I think it's fine it could be wrong but I think we're good the haywire amada dungeon companion can learn vengeance strike five yeah then again all the haywire companions can learn rank five ethics yeah they're quite OP they are quite OP I have one on my musketeer I think it's the musketeer itself I'm pretty sure it's musketeer he's quite cool I actually need to go through and respect all of my companions on my thing I wait for companion respect but I need to do that really on my witch doctor as well because at the moment they're just pretty trash okay okay typhoon here we go let's do this he's not too bad he does similar stuff to Rook he's basically Rook 2.0 they're like hey we need ideas for something how are we gonna do this Rook 2.0 I am slightly worried because there is a battle angel as you can see is OP I'm scared and worried oh we have we have catty cat ninja what a what a what a thing the Wing Chun Gortez voice actor yeah yeah I did actually pick that one up did pick that one up I didn't know Gortez was I didn't know Gortez was that I knew it was the Wing Chun voice actor for Kelly Ostrow but I didn't know Gortez was also the same voice actor as Wing Chun didn't know that one didn't know that one makes sense makes sense but didn't know it overwatch okay didn't do too much burst fire didn't do too much burst fire again didn't do too much so it's fine okay okay that was bad that was very bad dude and dude and dude and turn right there we go do you want Hawkely's to have a family reunion Tartarus yes I do I do ducks I definitely do want him to have a family reunion I definitely definitely do and there's nothing wrong with that okay there is absolutely nothing wrong with it he needs to go and meet his maker I mean his uncle uncle Hades he's waiting for it okay Hawkely's just loves to meet people and this is one of them that he loves to meet all the time Admiral Dogg at Bill Bobstay Kelly Ostrow, Constable, Hageno, Emmett, Gornado, Gortez, Goro, Misaka, Louie and Pepe, Lu, Miracle Mitch, Wing Chun, Wu-Tang and I still loved it. Wow that's crazy that's like literally half the game that's half the important people in the game crazy I did not realize that I did not realize that such a versatile voice actor cat ninja is so good cat ninja is the best okay that was not cool Optimus Prime is dead yes he is don't worry don't worry Optimus Prime has fallen okay I shouldn't have really seen um thingy more but it's fine cheap shot oh that was a lucky block there that was a very lucky block rip rest in peace cat ninja she did so well but could only do so well enough really unlucky really unlucky it's New Year's dinner with your family and people keep barging into your room yikes how rude of them caddy did do her job so it's fine it is all fine she did her what she was needing to do at least the battle angel kid which is good though they are the worst ever yeah that's so rude of them how dare they do that how dare they right let's go for this you can do that you are gonna do this you can do actually no you just take it you just stay here El Toro you're nearly dead so you can just do that that's all we need all we need all we need to do now admit it and concede it's not Avery's voice actor it's meow yari's voice actor yeah it is true very true it is meow yari's voice actor not Avery's voice actor however Avery is a bit more important in the spiral than meow yari but it is meow yari's voice actor not Avery's voice actor righty ho it's quite funny just playing between both games and seeing which voice actors are like literally the same I'm so happy they don't have grandmother Raven doing anymore or the narrator of was doing any more voices and either game because that would be just so upsetting because everybody knows grandmother Raven's voice and you just can't simply have another grandmother Raven ever I get those new years or just straight up January 1st but it's really rude and so just keep just straight up barging into someone's room without knocking it is very rude very very rude I completely agree with you I completely agree with you there quick draw return fire yeah yeah poop Campo is dead no Campo killed good job I just so dumb so dumb can't even English okay stop hitting your horculees please it would be great would much appreciate while that quick draw actually came in handy crazy crazy new whiz tutorial is garbage yeah it's it is it is I really don't like the new first-time user experience that they added I don't like it at all it's just a bit yeah righty ho did not leave a mark because I'm done but that's fine that is fine we can still get over there Gabba don't care for was destroyed oh no that's sad sad reacts only pirate 101 tutorial is non-existent yeah I just skip it so definitely non-existent I think I've done it like twice otherwise I've skipped it yeah it's it's a it definitely gets your attention the pirate 101 tutorial I'll give them that but I don't like it I don't like it at all but I mean I'm not really a fan of tutorials unless I really have no idea how to play yeah the whiz and pirate don't have a large learning curve so it kind of is just really easy to pick up and I don't think there needs to be like a really really handholdy tutorial yeah how to move how to talk and stuff but like other than that I don't really think there needs to be too much of a tutorial oh look look at these lamp posts that are completely square that are also Christmas trees who would have thought that you could have a completely square rooted tree or trunk tree not me actually it's a lot less square than the one in words at the moment a lot less square right let's head to the diplomatic residence which is in here in this bit here probably probably definitely probably definitely righty-ho what do we have to do now hey look the wisteria asset exactly exactly look this is definitely wisteria wisteria would look so good updated level 67 wow two levels already today um right let's level up you and you and you can't do it but that's fine we'll just save you for later new talent agile or accurate probably agile and you can get because you need tough you need to be tough El Toro you need to be tough right we are going to quickly head to Skull Island get our new thing get our new thing which I believe is repel borders three I think or two to repel borders to I think it is actually something along those lines and then we'll hit we'll head back it removes so much nostalgia stuff like Seren night chance classic greetings that was that's that's really sad I liked his greetings yes repel borders to nice dumb easy peasy level 70 blast of discord nearly there nearly there and all those classic voice lines like looks legit I'll let you pass exactly and all of that stuff I even remember when everyone was so excited to get the one day broom you still get that you still get the one day broom I think it's slightly earlier or later it's still there you can still get that was being nostalgic I think was is a very nostalgic game but I do do not play with classic on because it looks absolutely hideous absolutely hideous with classic textures your feet sink into the entrance yeah I mean there's a lot of things that happen here and pirate that are just really bad really really bad during the camera angles yeah I actually I actually I actually don't mind the cinematics and was I think they're cool I think they're really better that they do that more like pirate I really like pirates way of dialogue also that you can just hold spacebar and I have to spam it just saying that's definitely something that was needs to add because sometimes I just don't want to listen to the dialogue and I don't want to hear my spacebar being spammed five million times either just saying right where are we going oh we're going into the ship we're going into the ship get to this ship do doon do doon oh that was a good idea that was a good idea I'm smart I am very smart I forgot that we just went here I hope our mark has been left I'm so dumb sometimes I'm just so dumb just the dumbest has anyone ever heard of holding down the spacebar holding down the spacebar is really good it didn't mark god damn it god damn it who's over in Valencia part two right now crev tunnels that's close enough close enough yeah holding down the spacebar is so good okay we're gonna quickly escape this near impossible fight and we're gonna go this way out oh we have to go through these guys again luckily they were in Valencia part two haha so I didn't have to walk all the way over there by Rose have a good dinner have good dinner feast don't make well make sure you get the coin in the bread or what not and don't eat too many of the black-eyed peas I guess okay let's head over to Brazil's Brazil I don't know I don't know how hard we need to be can we get the galleon what do we want we don't want the bison I like the Royal Navy should we go Royal Navy or Mushu Mushu would be quite cool no I think we could go aquila I think we might go Royal Navy just because we currently got one was a changing the colors to not hideous actually kind of like it just solid gold a solid block of gold hey guys we got a gold ship yeah we got a gold ship what is a good name diamond as you see is a gold it golden golden surprise no I want to get some illiteration then it can also be GG golden glory golden glory it is we got us the golden glory nice work look at that let's um where is our current ship this one here valiant glory we're gonna quickly just unequip all of this for now and just transfer it over to our new ship one of the reasons why I went Mali bone ship golden glory usable I need to actually like get better gear what is this so much better let's just go to anchors what is best we'll just equip this see which one's better 10 10 8 that one's better 10 10 8 just do that they're both the same I think you're there right armor we'll go for 180 300 cool I'll get better guests and don't worry don't worry 8 17 1 accuracy yep what is that non-cool ranch ship who needs a cool ranch ship when you can have a golden a golden Mali bone amazing galleon just saying they're basically the same they're actually exactly the same they're just different colors 10 7 12 that one wheel I think this one would be the best no doubt no doubt no doubt probably maybe yeah and then horn we will go for this boy we don't need the e3 e3 bad e3 bad look at our ship it's so gold I love it I love it I know I know I want to save some gold just in case my companions can die it'll be fine I have people to help so it's I have people to help me so it's fine oh look at this golden ship oh look at that man I love Molly bone chips so cool so cool honestly my favorite thing honestly my favorite thing in the game Molly bone chips I'm surprised it can actually float considering that it's obviously pure gold because gold is very heavy shut up sorry shut up sorry no one wants you that's the fourth time today go love it make it them not as hideous as their part two bugs yep yep right what do we got here oh there's a fight here no doubt no doubt right here oh there's no fight here no fight here I thought it would be the ships will have the same stats like all the level 71s yeah I know but you got to go for the bigger you know bigger the better that's what I prefer I need to compensate okay so you got to get the biggest ship and it's either that or the aqua one and I don't really want the aqua one I have that too much I have too many aqua ones Molly bone ship looks like UK style yes that is the point of Molly bone that is the point of Molly bone the exact point of Molly bone you'll you have the same ship but green and pink disappointing you didn't go for all gold you don't have a gold ship aqua ships are really cool they're really really good I like aqua ships Mooshu ones are also really cool but my favorite is Molly bone I don't know why it's just my favorite and I I don't actually know I think I have the aqua one on my witch doctor but I mean my privateer I mean I have to go I have to be good with the Commodore and go for a Molly bone ship it just how it works you know just how it works sorry not sorry Molly bone is based off Victorian UK that is true very true aqua ships have good parts so people just use those exactly that is very true also because it's like the second highest level so if you don't have a good part you can just use one from aqua I hate this I hate this quest this we're coming up to snake cave the infamous snake cave the part where I rage quit not cool zero out of ten I don't like


It's a beautiful summer here in the Rocky Mountains, and you know what that means. It's time for feel running. It's important that you prepare from the ground up, and that means starting with your shoes. Different shoes for different shoe types are very important. When you run, you can have two to four times your ground reaction forces on each foot, which means that a 150 pound person might have 600 pounds landing on each foot with each step. With that in mind, it's important to have the right shoes for your feet. Someone who supinates or walks more on the outside of their feet will do better in a softer shoe. You can tell because it bends very easily and goes right through the middle. Someone who's more of a pronator or uses more of the inside of their feet will do better in a stability or motion control shoe. You'll see that this bends in the toes and is much stiffer when you try to spin it. It's also important to make sure that your shoes are not too worn out. Just like a pencil eraser, the materials in your shoes can wear out, become slippery and stiff, not comfortable for running. It's important to be safe, and that's our most important goal for you. Get out there and have a great time.


What's up everyone, Takedown here. Welcome back to another video. Today I'm really excited because we're going to be talking about two of my most valuable items that I recently sold on eBay, how I shipped them, and the profit I earned for each of the items. So today is going to be a recap of these two items that I recently purchased to resell on eBay and what I sold them for and everything about them. Now with these two items selling, I know exactly my niche and what I want to look for when I'm out in the wild to try to get some more of them because they did sell fairly quick, faster than some of my single video games do on eBay. The first item is my first Xbox 360 that I purchased to resell.  So I basically bundled it together with six games. So how I got this ready to ship, I bubble wrapped the console separately and all of the accessories separately. And then for the video games, I basically put two together and bubble wrapped that I put the console, all the accessories and games that sold in this lots in the box and made sure there's no empty space. This box was six kilograms. I'm not 100% sure what that is in pounds, but taking it to the post office was fairly easy to ship. It only shipped for about $27. So with all of the added materials that I ended up putting into the box to make it ready to ship, it was staying in Ontario luckily, but of course didn't want anything damaged. So I made sure everything was bubble wrapped and secured inside the box. So even if the box is thrown around, everything should survive this transit. Like I said, I sold it on auction for $98 plus $50 shipping in total with this lot. Since I did sell some things separately already, I am at $50 profit for the total lot right now. That's including the eBay fees and the shipping costs. Now with that, I still do have a couple other games that I'm going to be selling or bundling together. So there is a little bit more profit to be made, but so far on this Xbox 360 is sold for almost $100. And right now I'm at $50 profit on this unit. This was the largest item that I've ever shipped that I've sold on eBay. And surprisingly enough, it was easy enough for me to ship. I had the box. I had all of the shipping materials here. It's just a matter of putting everything together and taking it to the post office to get it to ship. The next item is my most profitable item that I've sold on eBay. Now this one here was very, very interesting because it's a lot that I purchased a while back, I think within the last month and I did share that in a video with you guys recently. And that was my Nintendo 3DS lot that I purchased. I sold the Nintendo 3DS separately on eBay and it sold for full ask and price of $175 plus $35 to ship. Just like my Xbox 360, I basically took the 3DS, bubble wrapped it, and then I bubble wrapped the controller, tossed it in a very small box, and I shipped it like that. Now since this was going to the United States, it's required now in Canada at Canada Post to declare your customs online, which is something I didn't realize. So I took the package there. He told me that it was mandatory that I do it online now, even though nothing says in the pamphlet he gave me that it says it's mandatory. But I just came back, did it all online, and then brought it back to the post office. This shipped for around the $30 mark because it was going from Ontario, Canada all the way to Tampa Bay, Florida, which was a very long trip for it. And that's something I think that's the farthest thing that I shipped away that I sold on eBay. But this one here was a really great profitable item for me. I purchased the entire lot for $100, and I sold the Nintendo 3DS for $175 on eBay, minus the fees and the shipping. I still walked away. Total profit right now so far is $70. I did recently sell one of the games separately, and I did mention that in a previous video, and I have two games left from that lot. So I'm expecting to get around $100 profit for the entire Nintendo 360 lot. So for these two, being my largest sales on eBay right now, individual sales, I'm really excited and looking for more things similar to those to sell on eBay. Of course, I always look up sold comps and make sure that there is profit to be made before purchasing something. So quick tip is always to include tracking for your items if they're over a certain amount. For me personally, if it's under $20, I'm not going to bother with tracking because sometimes the difference between regular parcel without tracking and having something with tracking is a lot more. For example, a single video game here in Canada, I can ship for around $4 or less. If I have tracking on that, it's going to be around $16 to $18 to ship that item. At that point, it's not worth it in my opinion. If it was only a couple dollars more, I could see myself adding tracking. But for items that I sell on eBay that are under $20, there's no reason for me to put tracking on them. If the buyer did turn and say that it never showed up, that's just a loss on me. I'd refund them the money and just move on. But for my higher priced items like the consoles and video game lots that I'm recently selling more and more of, I'm definitely going to include tracking just so that way I don't get burned. And also keep in mind whenever you go to the post office, try to be friendly with the workers there because sometimes they can try to find you better rates and better deals whenever you're going in, you're shipping a lot of stuff with them. Recently I sold one single video game and at first she wanted to charge me $16 because she claims that to put it through the slots, she had to force it when that realistically wasn't the case. I explained to her that I do ship a lot of things. I've been here five times because I recently moved. So I am going to be back here a lot and she ended up shipping it for the $4 mark. So always talk and explain that you are an eBay seller and usually they can find better rates for you. And here in Canada for Canada post, I showed for the Xbox 360 lots when I was at the post office to show the address that I was shipping to. I basically just showed the eBay app on my phone with the address on it that I was going to and he automatically went and put a discount for a small business. So you have to keep that in mind as well. So I hope you guys enjoyed this video, me sharing my most profitable items and larger valued items that I've sold on eBay. And now I kind of know what I want to look for whenever I'm out in the wild because bigger items are selling and now I feel a little bit more comfortable selling these bigger, more expensive items because now I know how to ship them and it really isn't that difficult and I did make some pretty decent profit on both these items.  I'll see you guys in the next one. Please take care. Peace.


From VOA Learning English, this is the Agriculture Report. Some people say eating hot chili peppers can help you breathe easier if you have a cold. Others believe that chilies give you more energy. All we know is that people have been growing chilies for centuries. And there are plenty of different kinds of chili peppers to choose from. Want to spice up your meals with homegrown chilies? They need a warm climate. If you plant the seeds outside when the weather is cool, place a glass over them. Add will add warmth from the sun and protect them from wind. You can also start the seeds in your home or a greenhouse. If you plant chili peppers inside, fill an 8 centimeter pot with soil. The pot should have holes on the bottom so water can run out. Drop seeds over the surface of the container and cover with a thin layer of vermiculite. Vermiculite is a material that can hold air, water and nutrients. Then cover the top of the pot with a see-through plastic bag. Hold the bag in place with a rubber band. Place the pot in a warm area. You should take off the bag when the chilies start growing. When the plants have reached about 2 centimeters high, place each one in its own pot. When the roots show through the holes on the bottom of the pot, transplant each seedling into a 12 centimeter pot. When the plants are 20 centimeters high, tie the plants to a stick placed in the pot to support them. When the chili peppers are 30 centimeters high, pull off the tops with your fingers. That should get new branches to grow. When the first flowers show, give the plants some potash fertilizer. When the weather is warm, put them into five liter pots and place them outside. Make sure they get lots of light and water. For VOA Learning English, I'm Alex Villareal.


Well, I'm an urban ecologist and I'm really interested in the impact of domestic cats on our local environment. So I run a project called Cat Tracker and with this project, it's a citizen science project which means that we recruit the public to work as researchers with us. So it's a collaboration with the community to learn together about what our cats are getting up to when we're not looking. The Cat Tracker project involves attaching GPS units to cats and having them wander around for a week. You can download the data and figure out where these cats have gone and when they've gone there. There's a lot of surprises that have come out of this. So we've had cat owners find out that their cats have secret families, which was a pretty interesting result. Well, I'm interested in basically figuring out where cats are going and when they have this whole choice of habitats that they can utilize when they basically have free range, what areas are they choosing and can we figure out why they're choosing those particular areas? And specifically, are they areas of conservation concern? Are they areas where we do have a lot of rare native wildlife that might be trying to thrive in that area and cats might be making it difficult? The end result of this project is basically that we get cat owners on board with us to learn a bit more about our cats, they'll become a bit more interested and engaged in the issue and from there be able to make some more informed decisions about how they manage their own pets.


y'all welcome back to the fire and water cooking channel I'm Darren and today I'm going to cook a little bit of surf and turf with my matador prime tri-tip that I got sent and some pretty big jumbo shrimp and we're going to sous vide both of these and then we're going to cook them on the grill so I'm going to show you how I'm going to do it I'll be right back okay guys like I said what we're going to do is going to make a little surf and turf tonight and I'm using this tri-tip that I got from matador prime steaks you can see a link to their website down below and a coupon code of firewater10 on your first order you get 10% off I got this beautiful tri-tip that they sent me they sent me a pecania and a tri-tip to do some videos with and tonight we're going to cook the tri-tip see how this turns out I'm in Florida so it's really hard for me to find tri-tip so that's one of the things and I contacted Matt at matador prime steaks and he was willing to send me one to try out and he was also willing to give a discount code to my viewers and the followers on Facebook so I appreciate that Matt here's that you and I'm going to go ahead and cook this tri-tip I've seen plenty of videos and how to cook these I've just never been able to because in Florida it's very hard to find this particular cut so I've got it all seasoned up with my beef rubs salt pepper and garlic and if you look up in the card above you I just did a seasonings and rubs video where I show you how you can make some of your own rubs this is my own beef rub salt pepper and garlic that I put together and then we're going to do some of these jumbo shrimp and we're going to cook them both sous vide but first I'm going to get my my steak going my tri-tip this is going to take about four and a half hours to cook I'm going to cook it medium rare at 132 I wanted to get a little bit tender so I want to be at four and a half hours so I'm going to go ahead and get this bagged up and we're going to toss it in the sous vide bath then I'll show you how we're going to do with the shrimp tri-tip in the sous vide bath at 132 and I'm going to run it about three and a half to four hours doesn't have to cook a whole lot but I want it to tenderize a little bit before we throw it on the grill and what I did is I took my jumbo shrimp and I peeled them most of the way I kept the tails on but I got rid of the legs and the skin and what I'm going to do with them I'm going to toss them in a vacuum bag and I'm going to put in about a quarter cup of butter here and just cut it up into little pieces and then I'm going to season it with the run and wild seafood rub I just got this I never tried this one before the seafood seasoning from run and wild and I'm going to actually cook the shrimp sous vide in this but I'm not going to cook the shrimp until the tri-tip is almost done probably about 15 20 minutes before the tri-tip is done I'm going to throw this bag of shrimp right in the same water as the tri-tip because 132 is perfect for 15 or 20 minutes on this shrimp but right now I got it all like I said I got it all peeled up and I'm just going to go ahead and toss it in my vacuum bag and I am going to I'm going to kind of spread the shrimp out I want it to cook even so I got it flattened out let me move my butter so I want it flattened out a little bit doesn't have to be completely flat but I want it flattened out enough and then I'm going to toss my butter in just kind of put some there in the back this butter is going to semi-poach it I might actually add another little piece there I think I want another little piece of butter never have too much butter right there's one more piece right there I'm going to spread it out kind of make it look a little more even so there we go and then I'm going to take some of this seafood seasoning and I'm just going to dump it in the bag and this butter is going to make sure that this gets moved around and we're going to season this up again when it comes out of the sous vide so it's really all I want to do and what I'm going to do now is take this and seal it up and I'm going to put it in the refrigerator until it's ready to go in the soup you see how they look they're right at all peak there and I got the tri-tip out and I'm going to go ahead and take them both out of the bags and we're going to just like I would with any kind of steak I'm going to go ahead and pat this dry get all the moisture off of this get all that moisture off then I'm going to hit it just a little bit more of the beef rub and replace any that's washed off in the bath that's it due to technical issues I lost some of the footage of me taking the taste test and all that on this I just want to say the tri-tip came out perfect I want to thank metador prime steak for sending me that check them out in the description below use the code firewater 10 for 10 off your first order the shrimp were perfect thanks to run and wild seafood seasoning you can check that out in the description below as well thanks for watching guys make sure you follow us on facebook instagram and twitter and make sure you like this video and subscribe and I will see you on the next video thanks for watching


All right. I started recording. Go for it. Okay. Sorry before you begin, I just want to say that we are prepping a kind of a so I was telling you guys about the global galaxy steering committee and all the government governance model so we're we're we're going to start pushing some documents towards community so we will need comments and for example, we formed the steering committee and actually any is a part of that committee along with Dan and Jeremy here, I believe. So, but you'll see more soon. So, and that note, any. I have to switch some tabs so I may have to share, reshare the screen because of just the way the screen size works and the presentation mode. I'll talk about a custom specifically and then actually start a little bit broader than that about how can we think about improving the galaxy server security across the community, and then some methods for handling user accounts groups and secrets within within So this is part of the justice project that was funded by NSF about 18 months ago in partnership with Marlon Pierce from Indiana University and Jim Bastian from NCSA. And talk about this to both collect feedback and just inform everybody about what has happened as sort of a midpoint and of this particular project and see where things can go. What interests are at the broader level. And so the four topics that like the cover is one is these recommendations for securing a galaxy installation that we've undertaken for the past six months with collaboration with trusted CI and talk about a completed implementation of delegating user authentication so rather than implementing everything in Galaxy is the trend has been over the last decade to try to offload this and authentication being one example of such approach. And then talk about some future plans from the project standpoint about ideas on secret and group management within Galaxy, and then an outcome that came up because I gave this at the lab talk at Hopkins. About 10 days ago and so an idea emerged and maybe this could benefit from having a new working group formed around these topics. Again, interrupt at any point you like. So to start off, you know, oftentimes I mean there is the security repository on the Galaxy project that deals with technical issues that emerge as issues, you know, at the implementation level. But there's often a lot of sort of additional security around the technical implementation that are more at the procedural and policy level that can help secure a galaxy server so things like who has access to a given server, what data is loaded, what kind of logs does a process have to be able to reconstruct a potential scenario and all so that is the focus of this it's not about the implementation technical implementation of improving the security. So the motivators for this have emerged over the past couple of years through active projects that a number of Galaxy members have one one being an evil project or the other one being Galaxy for cancer. And so the use cases are working with human genetic data so protected data sets that public servers are not really capable of addressing. I'm not not really they're not capable of addressing and secondly large data sets that are very difficult to move on to a public server. And so the implication is what I'd like to sort of presented talk about here is the after these projects have hit their stride and a lot of the implementation work is done. What can galaxy actually do and what they can community expand this into with these implementations. And so the, the part that has been done in this sort of policy on the policy side of things. This has mostly happened over the last six months in July last year, we did a security audit through an external firm that took a look at the cloudman application and the galaxy Kubernetes deployment. They provided a report about the implementation level. And it tells us to what can be improved to make this a more a more robust implementation, there's still some outstanding work left on that a couple of things have been addressed. The reason we chose the Kubernetes employment the galaxy is because it represents the most unified form of deploying galaxy that it has the least dependency on local infrastructure, meaning that you can have a local handmade implementation there's let's say 99% custom you can have ansible that is no some lesser percentage customers specific to a to a location. Kubernetes raises that to the next level where more and more of the deployment level is codified and then so this seemed like a good target for improving the implementation level. Capabilities to to adhere to the better security standards. Following that one off audit. We engaged with trusted CI through the science papers community Institute to lay this groundwork for improving the security posture of galaxy so this is a combination of a different look at kind of the implementation and recommendations for how a given site can use that implementation at their local location to to provide to implement the remainder of controls and then report this link that this at this URL that summarizes what has happened during those six months. And so what's currently ongoing is part of this talk today is the dissemination with the community so everybody's aware that this took place and what the outcomes of those those engagements have been. And then looking forward, you know this is certainly far from done so as part of the annual project, we've heard stories for the last year or plus from the doc store team, they are doing this but they're doing it officially. And it's been a year, it'll be another six months at the very least. The doc store team at the road spent at least two years doing the same so if we want to do this as a project, this is a multi year engagement that we would, we would need to sort of commits to. And more detail about this, this is like a short summary of it. And I did for the galaxy admin training, there's an hour long video at that link that kind of dives into more of this and I wrote those more talking about the outcomes of this collaboration and engagement. In short lines as to I guess what you can expect from that video if you choose to watch it. And is a look at the how can galaxy become more aligned with some of these compliance certifications. So the way this works and the way it's structured in the United States at least is that there's this National Institute for standards and this and they have a catalog called 853 that lists a number of controls that enhance a security posture of a given deployment of a given software service. And so, as a project you would implement those controls or explain and documenting a lot of this process comes down to documentation more so than the implementation of course there's implementation based implications. But it's not all implementation so you have this process of, you know, you have to categorize everything that makes up this service select which one of these services or controls you want to implement implement them assess the results. And authorize this is where official compliance comes into the picture so this is like a certified certified version of the controls that you have implemented this you get an external auditor that performs the process takes six months they work with you. And at the end, you may get something called the federal compliance and that can be at low, medium or strict levels depending on how many controls you've implemented from this 853 catalog. And then from these security things we can also talk about HIPAA as a private data protective data set compliance requirement that again comes out of implementing these controls and a specific deployment of the service. So the, again, this this is a multi year process assuming that we want to undertake it. But there are certainly lessons learned from doing this that can be implemented and can apply regardless of whether this is trending toward a compliance based galaxy installation or not. So, a very practical outcome of the engagement with trusted CI was the galaxy system security plan document or the SSP, which lists a set of controls and recommendations on how to improve the security posture of a galaxy installation. And this does include this catalog of components includes a set of deployment architecture diagrams. And so I've linked this document here at bit.ly slash g x y SSP. And you see, so here's the, here's the document that it's available for anybody to take a look at and see what the outcomes of it are. There's a number of controls that are stemming from that NIST 153 document. We went with the low classification of which controls we considered it provides a set of scroll down through the document a bit but you know it's a sizable one that it sort of creates a catalog of all the components that make up a given deployment in this case the galaxy on on Kubernetes. The architecture diagrams the flow diagrams of how processes that are act and all this is in service of creating recommendations. I can find some now. And then there's a little lower that that were recommended by trusted CI saying that, you know, for example, we have these access control policies and procedures so this is a site dependent solution saying like who has access to SSH who set has access to galaxy admin and all and then you can see. The controls are in fact sites dependent. However, some were classified as, as things that can be implemented at the deployment level. And I won't go through, you know, these but but that was the outcome at this point, some of these of course remain as undone they are highlighted, I think lower in the document that's the things that should be improved at the deployment level. Okay, so that without unless your questions of course wrap up the sort of the first agenda item for for the talk which talked about these how to secure provide a better more secure galaxy installation and what would it take for galaxy as a whole trend toward a compliance based installation. And so I'll shift on to the kind of more specific outcomes of the Custis project. So Custis has these three aims. One is management of user accounts and identities through an external service. So management of secrets are needed by science gateways secrets can include tokens they can include SSH keys they can include cloud access keys, and then third aim is the controlled access to digital objects across across instances of science gateways You know, so I'll say in the context of galaxy a little bit more and what these aims really mean. So the first one external authentication means that we can delegate user login from having a local based username and passwords stored in the galaxy server we can log in with existing credentials whether that be social identities, such as or institutional identity such as the employment institution and build this natively into into galaxies so it provides a good user experience without having to implement all of this in galaxy itself. So this is a storing secrets so Amazon or Google or or or key of JetStream for example SS keys to access that cloud to be able to access these secrets without those having to be stored in a local database. Is the group management so ability give ability to users to sort of self organize into groups so if you if you have a team you're working on a paper with or you have a lab. And you want to share a given history with five people you're not having to select five people individually but you can basically say I want to share this with my Hopkins teammates and select all of them that have once been added to the Hopkins teammates group. Our team. So. So before we go into sort of the details I guess at the high level. So the customers ecosystem is is depicted here. The idea is that before too long, there will be a service running for the world available to use customers.org. This is currently still in a testing phase so not actually available at this URL, but, but it's coming. The software that runs this is derived from the Apache airport our customers repository on GitHub and it's reusing key cloak for identity and user management and fault for secrets management, and this is going to be applied for as a as an Apache project as it matures a little The service itself runs as deployed via a help chart running on cloud man as one of our things and it's deployed at the Indiana University data center in their enterprise portion of the data center that is intended to run services such as payroll and things that that have high quality of service assurances from the data center operators. And then for the authentication itself, which is like I said externalize to identity providers that already exists. It's integrated with CI log on. And then on top of that we have science gateways galaxy in a lot of being the two flagship ones. And so we have to implement these wedges in these kind of dedicated gateways that allow simple integration with customers for a variety of deployments, but it's not limited to these projects. Other science gateways can implement can integrate with customers either more lightweight or more integrated as in case of galaxy so for example authentication can flow via the CI logons UI or it can be embedded into the gateways UI as the case has been a galaxy to provide a more a nicer experience for the users. So, they're at use galaxy.org, I'm sorry at use justice.org. As I said there is, there will be a portal where people can interact with customers. And this is predominantly intended for admins as a one off activity not not something you go to regularly. As I said, however, use justice.org is still not available. It's still in development. And so there's this test server available at test drive that use justice.org where you can log in and see what the, what the portal looks like at the moment. The actions that are envisioned for this portal fall into these three categories one is the ability to register new client applications. That's the only currently available featured in this test period. The ability that or what that gives you is the ability to register a new application of the meaning you get the secret and the token that identifies this application with identity provider is broker through customers. And this action is to be performed once by an admin you get those secrets put them into the config files and galaxy. And from there on all the users gain access to to that enable capability of logging in with the external credentials so the intention is to be a self serve process. But because of the restrictions on from the in common and trusted CI groups, there has to be manual approval process before you actually get the token. And the more future facing components of this portal are going to be the ability to manage secrets. So natively as I show in the context of galaxy some vision plans. This should be linked from the app from the science gateway itself, but as a user you can still go in and see like an aggregate view of all your secrets that you might have stored across different science gateways. And this is going to be centrally managed for multiple apps so in case we have multiple galaxy servers different apps and principle, it would be possible for a user to access those secrets even though they were stored once. And lastly, the idea is that we can upload sensitive content from that being stored in the application itself. The ability to manage users and groups. So again what I mentioned if you want to create a group, such as a lab or a classroom and treat that as a single entity capabilities for doing that will be added to the portal in in due time, and be able to share secrets you know I'll tie this more to galaxy in time. So I'll talk about the thing that's had that has happened over the last year or so, namely the features that have been enabled in galaxy on where, where somebody can start consuming them. So these were, of course, built into the core framework of galaxy. And the idea is that they provide a more native experience for users so instead of being redirected to the CI log on for example to log in with an external identity you can choose the external identity provider right from the guy CEO I'll show that. Secondly, it can be deployed with less configuration changes or with only configuration changes less changes to the gateway again I'll show an example of that as well. So from the sort of project management perspective. We, we may get better insights into users affiliations if they choose to sign in with their institution as opposed to social identity, such as Google where we don't know what users are actually coming from something that's useful for the funding agencies to proceed. So the benefits that I feel we gain with integrating with Custis is that we don't have to store local username and passwords personally I don't use sites that required me to log in with a username and password I want my Google login and not have to remember another password ever. So with that we can, we can do that in Galaxy. Secondly, we can link multiple identities to the same galaxy account so whether it's your Google account or Hopkins account. It's, you can choose to log in with either one. And this may have implications down the line as those services have additional capabilities linked to one institution so for example if Hopkins is to expand the capacity of one of the galaxy public servers for its users. You will be able to do that by having that linkage available. And then this is something that I have a question for everybody here that you might be able to carry the same identity across the use galaxy dot star servers, which I think from users perspective would be a very nice step in the right direction. The secrets management, as I said it's the ability to store sensitive content in Custis and retrieved from an application from Galaxy. Things like the dbgap SRA tokens or cloud store username and password instead of a disabling those tools on a server or beast. And then adding to store the sensitive data in the galaxy database, we fetch that from from a remote location, and similarly sort of the cloud credentials from cloud launch could be fetched, instead of being stored locally and ultimately the stuff I talked about in the first presentation is that we can improve security posture of use galaxy servers by not having to store a lot of the sensitive content to keep the login information and all as we presumably migrate toward a more compliance based installation. And so the external authentication. This is a demo of what what this looks like in galaxy. This is a local installation of galaxy so I can log in here with my local username and password as long as it's available on on galaxy at the moment. And so, but I don't have any external identities that have been linked so if I log out. And I try to log in here with the choice so this is what I was saying it's integrated with galaxies so it provides this native experience where you can choose from I think there's over 3000 identity providers. If I choose the Johns Hopkins as a list and say sign in. I'll be presented with this, of course the login at the institution. And then I'll be I'll be born here by galaxy. That may be creating a duplicate account. This is going to be so we had a little bit of discussion over the last week will modify this the key here being that users need to differentiate whether they are creating a new account, or linking an existing username and password based account with with their existing account and so in this case because already have an account I don't want to create a new account. As I go back to login login with as username and password. And then from here, I can link that external identity. Once select a login go through the odd flow. And so now I'm going to continue to be logged in as with my username and password ID, but if I log out. I can go back here and instead of logging in the username and password, I can log in through to the IDP provider. So it'll just log in again, maintaining that original username that was that was linked. So that's that that's the external authentication part. That's available we haven't rolled it out to main yet, but because of some of the recent suggestions that we've received. So that's, that's hopefully coming. The other thing is that this allows is filtering the login institution so if given galaxy deployment does not want to allow any institution from that list of 3000 to log in but like institution based logins only currently that was enabled through this email domain allow list file where had to list domains and subdomains so for Hopkins there were at least three subdomains that needed to be explicitly listed. And because of the way the in common IDP providers work. There has to be a unique ID that corresponds to a given IDP. And so here if we, we can now specify this list that the list that includes all of the, all of the subdomains that might exist and so full list is available here for for listing which identity providers should be included on in a given list and at that point that list of 3000 will be filtered to whatever is included in this list in this case it will be just Hopkins. And so this we get to the sort of the one last part of the presentation, which is features planned or discussed a little bit at least for the remaining period of the customs project and hopefully beyond hopefully broader. If people find interest in this. This said, the three services that customers provide one is the identity management we've seen the implementation of that second one is the secrets service. So it allows us to want to store tokens passwords access keys SSH keys that can then be accessed by by galaxy so again, like a dropbox token instead of storing locally for accessing users individual tokens through the upload data plugin. That could be stored in in customs and retrieve. So what would this, I guess at the very high level look like at the moment if we do this dropbox token stored in the local database and retrieved when the data is being uploaded. So in case it would be retrieved stored via the API and retrieved via the API in the custom secret service, which behind the scenes is stored in the in the vault and user if they choose to they can manage it through the portal. In case they have multiples and then want to do sort of aggregate or bulk additions. So something that might be possible, or it's a policy level would be possible is for a user to be able to store this token once to say, I'm on use galaxy.org, I want to link my dropbox accounts to this. To my account and do so once through the API this this secret gets stored in customs. And then the next time the user goes to one of the other use galaxy servers and because the through the identity. If they use this the same identity through through an IDP on both servers. They can get authenticated as one of the same or recognized as one of the same user on on customs and so be able to retrieve that same secret from a different server. They can get authenticated from other applications, such as cloud launch. However, in order for this to work at the sort of custom slash key cloak implementation levels. Both of these servers or all of these servers would need to be made part of the same realm in the local terminology and so it would require basically coordination and agreement across these use galaxy servers to say that they are different tenants within the same realm and can see each other's users so we would get away from who would slowly start getting away from each galaxy server being a completely independent island and start aggregating that information across multiple use galaxy dot star I think that it needs to be I guess the talked about but are there any gut feeling reactions about this whether this would be a desirable feature from both users and admins perspective or no topic, you know, GDP becomes maybe a bigger concern in this case for servers that are not in Europe, but have to adhere to some of these rules so anyway it's any any comments. Actually, I have a question on the token actually. So we're not supposed to use the token right that's a developer setting. Normally you would need to do the old flow and get a regular authorization from Dropbox. How do you see customers fitting into that this could help us there. It's, it's much simpler for the user if we implement the old flow so I've done the Dropbox thing and it didn't work for me, but I know a lot of people it has worked for. So, so I agree that it would all flow would be simpler. We need to refresh the token right. Yeah. I don't have an answer for you. Something to, I guess, but yeah, I mean that would be better. Yes, I don't know the implementation bits though. But you know okay so Dropbox token if we get away from that, you know, there are other examples of keys that can be stored that don't have a lot implemented. I'm sure like username and password must be one of the most requested features we have for tools that need to do authenticate and authenticated actions that will be really good. I don't know what time what time it is actually on. So, so the next kind of the last category or the last name of the customers project at least is this ability to provide groups and user management, allowing users to sort of self organize into groups or teams so imagine having a classroom or a lab that you can share artifacts with so for training for a workshop or for a classroom setting a teacher can provide a sample history and instead of having to select 30 or 200 students. Every time they want to share a history, they can instead say, you know, here's a group and every time I shared with a group. My group leads can then monitor what has happened across a given group I have a more specific example about that. And you can permit access to secrets so in case you have a lab and you for example as a PI have a db gap authorization where you which you can delegate to your lab members postdocs, whoever makes up the lab. Instead of giving them the username and password they have to plug in themselves. You can just allow them access to the secret as a member of this lab group. And lastly, can imagine this idea that you can create a group overview dashboard see what's going on across multiple people if you again, or maybe a PI or something at an institution and need to track what's going on within a galaxy. A potential implement, you know, a view of what this might look like in terms of the groups in galaxy. So the ability to create these groups as an individual as a member as a user of galaxy. You can create group by adding members of the group once created group and then from there you can say manage secrets, such to say that you know this group has access to these secrets and and from there on again they don't have to have a view into what the secret is, but can simply get get access to whatever the implication of that of that is. The second thing is kind of going toward this group view sort of the inverse of you being able to share something with a group being able to consume something from a group. So the way we have the multi history view you can imagine instead of all those histories being your own, they can be from multiple users in an aggregate view. And you see again, a classroom setting for example is great example you can hand out homework and retrieve feedback that way instead of having to import a bunch of histories and look at him browse and click around. This one I admit it's probably a very large amount of work that would certainly require some buying from a broader group of people then then the effort on this project can actually sustain but see a lot of use cases for this so maybe there's no interest. And so, so far again, this has been the people that have been involved with implementing what's been implemented and planning to making the agenda for what's coming, working on the trusted CI engagement. And the last thing I want to talk about is this, the idea of a new working group that emerged that the Hopkins weekly lab meetings. The idea would be to explore sort of these recommendations and solutions for improving the galaxy server security posture so pushing further on the, the engagement that took place with with trust CI the galaxy SSP document compliance based on projects like the ITCR for example, namely the galaxy for cancer, where there's going to be some stricter requirements what can we do at deployment level to make sure this is adequately secure. Secondly, coordinate development of Aussie, often approaches. I know we have to parallel implementations one based on PSA and this other one based on key cloak. We have a very strong opinion that we should implement lesson galaxy and delegate more. And so instead of implementing this, whatever we can just delegate it to an external provider of services. Key cloak being an example but I get at least coordinating that across the project would be nice. And lastly sort of work toward adding support for these groups and more generally role based access controls in in galaxy over, you know, the years to come. So that some of these group management capabilities become possible. And so I added a link down here at the proposed a working group to tackle some of these. And a periodic meeting time, that would kind of keep interested those interested in interested in working towards the same goal. So that's, that's what I have in case there's, of course feedback comments ideas. So we, I mean, I guess the major thing here is, we need to implement then the role based access control in a way and tie it to our database so whatever we do, we don't think we can just use an external service right away we'd always have to have an adapter. I don't know if maybe the roles that we already have can can do this so that the external provider would just do the linking of the roles and groups we have. I mean it could right I mean it was, yeah we talked about this of, I don't know, two, three months ago, that it could just, there could be a local implementation it's like a probable based implementation that provides a local and local plugin that stores everything in the database, maybe with limited capability, or just falls to do something and then plug in an external provider that provides the native implementation, or the. So, yeah, I mean this is an architectural. I think it will be interesting to to see what we can do because sort of not having a real RBAC setting, or something that is really complicated also limits us in implementing graph QL for example, where typically you do that against our back. It's all much, much simpler than what galaxy does right so you typically just check, can the user do this action that for us it's, it's a whole hierarchy that is encoded in the relationships in the database. So it sounds like super challenging. It's definitely worth thinking about. So to ask the question Marius what you just described the, the existing database has a bunch of fields and columns and the actual tables which have owners or group group IDs or whatever for our current system is that what you're describing. Yeah, so it's a it's a mixed thing so everything has an owner. Mostly, I think. And then we have roles. You welded it, you welded it to the data tables they aren't separate tables that are joined or something like that so it's not going to be easy to pull them out. They're separate. They're separate tables there's a. We have this hybrid thing right. Yeah, it's pretty intense. It's a very custom implementation of our back, I guess is what's what's Marius is getting at. Yeah, it'd be a lot easier for it were like a bunch of just joined tables, you know, that we could stop you so the adapter idea might make a lot of sense though right so if we can read. We can build an interface such that we could point it at hours or an external one. I mean, trying to sync stuff is just going to be a mess right yeah that was also thinking that we should have some adopters, we can use our own database or some external if the user is a kind of external user. It would be interesting to to see if anyone is already working on that from other projects I think Norway, someone in Norway was doing some external kind of role management connected to galaxy. I think it was working on something I maybe doesn't have anything to do with this. Just, and this do you have any ideas about how like we could balance. I mean, I love the idea of the new working group, and I love the idea of it having tasks. It seems like it seems like we were like at capacity and then if we just add a new group and a bunch of new tasks. I don't know that I mean I yeah I mean good frankly there's a project I'd love to work on right this is sounds really cool really valuable. Yeah, the resource capacity is a, you know, we're certainly at capacity so I that I don't really have an answer for you know the hope is that we continue to grow. And, you know, if it's at a forefront of the planning. You know, maybe something else. You know if this is important that this is of interest. Maybe something gets, you know, instead of having three or five things on a to do list for a couple of other groups maybe drops to two or four things and a couple of things get added to this group. So, it's a balancing act. Absolutely. I don't know, you know, we've come up with more people that would be the answer but you know, making strides in that but it's not growing fast enough as the ideas are growing. I mean cost us is so there's, there's people at Indiana that are working on a lot of this. So it can certainly be in coordination with them they're very eager and happy. They would be thrilled to see more of it adopted. So there's some potential for both actual effort, likely, and certainly guidance and compromises in terms of what the capabilities needed are as the implementation on on their side happens as well so maybe that's a helping step in the right direction. Okay, is there. Should we move on to the next topic. I mean maybe Alice. Yeah, maybe just a question and as do you know how cast this is working with GA for GH password and the life science AI and those projects. It's not. So that was a. These are unfortunately parallel efforts. So the passport is funded by the NIH through the RAS mechanism. This is funded by the NSF Jim Bass me who is the most qualified person has become aware of passport, the passport about four months ago maybe or so so it does look interesting. I have what I call a very similar if not parallel implementation called side tokens that functionally enables a very similar capability, but unfortunately, those were not known to each other until kind of recently. Alex, you want to take over and talk a little bit about it's on Kubernetes. Sure, I mean, I mostly just wanted to, I guess, bring up that I got them to work on Kubernetes with service and ingress without the reverse proxy, or the only change in the managers that needed to be done was removing the encoded job ID, either removing it with just the job ID itself or removing it altogether. I thought that's okay because the token is the UID that gets generated for each IT so I thought the URL would still be unique wanted to make sure that that assumption is true. I don't know if there are objections to doing it without the reverse proxy or if somebody thinks it's better to do it with the reverse proxy and how that would work behind the Leo proxy and or yeah just I mean, at least start the conversation now we can also just break off at a later time with whoever knows ITs and what and what cares about ITs I don't know. What people care about ITs. I mean I think that sounds awesome. Like, I don't think we're tied to the proxy. So that's cool. Alex we were showing that high glass works. Is that somehow transferable to main form or shape, or any other instances, as long as there is a Kubernetes cluster that is exposed. It works anywhere. It works on GKE it works on the clusters that we deploy. So, I don't know what I know there are some limitations with the cluster that main is using. In theory, I could just, you know, I can boot up a cluster on our jet stream allocation for main and we could use that. So, can make it work like that. Relatively fast, but I don't know about the cluster that means currently using with the limitations are a question to Nate. He added a comment in the chat saying that it should work. Nate, do you have any thoughts about removing the reverse proxy. Nate has no microphone. Okay, well, I would be careful about moving removing that other uniquely identified part of that from a security perspective right I don't have a claim against the proxy that's fine but the token is not guaranteed to be unique. Right, it's a combination of the item and the token that gives you the security. Okay, would it be possible to encode the job ID not using. So right now it was using chance dot security. So it needed to happen somewhere with chance comes from the web handler I'm guessing. But the way I did it, everything's happening in the runner. So, if we can just like, you know, salt it more generically or encode it more generically without using chance security then I can put it back. So we should be able to. Trans yeah. Yeah, so you have app dot security access in the runner. Okay, we can fix that. I can put it back with that then. Okay. So everyone would like to meet for a longer conversation I'm meeting next Friday with Rob to talk about an and well how it will work with the Leo proxy and what they need what we need from them. So ideally before that just even a brief conversation with people who designed it is originally like just no it is well just to make sure that I'm not doing everything wrong and just appears to be working. Sometimes when it has a microphone. It's on Friday. So anytime before the next Friday, or anytime next week really. Okay, not tomorrow. Yeah, no not tomorrow. Next Friday. I got out my laptop so now I have a microphone. It wasn't expecting to talk. So what was your question about removing the proxy. Yeah, can we delegate to Kubernetes to handle the, the proxy into the it. Well, is this about the the integrated proxy when galaxy is running in Kubernetes itself because you certainly don't need the two level proxy, or was it using ingress as the proxy. Right now. So basically the way I did it is I'm assuming there's an ingress controller in the cluster, because for the clusters that we use that's how we're exposing galaxy. Right. So then I removed everything from the I put the configure entry points like in the job runner, and then just get the token from the database you form the URL and when you're launching the job at the same time you launch a service and an ingress, or the job runner launches a service and an ingress that exposes that it at the unique URL. So, yeah, I don't know. Like in what the technical terms are for when it's less boxy versus a normal proxy versus. Yeah, whatever. So, so instead of running the proxy and having the traffic go through that you launch a service that that then. Well, you launch a proxy service in Kubernetes. It's proxy not. Yep. Yeah. I don't think there's any reason why that would not be a good solution for Kubernetes. Yeah. Do you think that's feasible for me as well. No, because main doesn't run inside Kubernetes. Well, but the ideas are running on Kubernetes. Yes. So couldn't you just expose and ingress controller there and do it the same way. You're going to have to map. And maybe you could. I mean, so the host name is going to point at. I guess the. And the way it's done with the DNS is just a wildcard that's pointing out what the ingress controller is. So it's just one wildcard DNS towards the IP of the ingress controller and the sub domains just work. That could work then. Yes. I think. I'll take a look at the implementation and see if I can think of any reason why I wouldn't, but. All right. Well, awesome everyone. Thanks for the good meeting. Alex, should we schedule that meeting for next week right now or do you want to. I mean, if there's a time that everybody has free, we can if not, I can send the one is good or something. Oh, I guess the laser hand if I like say something in the chat or slack me if you want to be in that meeting and. I don't know. I can just send it on the public channel and everybody can see. All right, I'm going to stop recording. Thanks all.