Well, welcome to this CUBE Conversation. I'm John Furrier, host of theCUBE here in Palo Alto, California. We got two great guests all the way from Ohio and here in the Bay Area with Sequence Security. This is our focus on cloud growth companies, Shreyaans, Meta co-founder and CTO of Sequence Security and Jason Kent. Hacker in residence at Sequence Security. We're going to find out what that actually means in a second, but this is a really important company in the sense of APIs as they are starting to be a connective tissue between systems and data. You're starting to see more vulnerabilities, more risk, but also more upside. So risk reward is high and anyone who's doing anything in the cloud obviously deals with APIs. So, Shreyaans, Jason, thanks for this CUBE Conversation. Happy beer. Guys, let's talk about API security and but first, before we get there, Shreyaans, what does Sequence Security do? What do you guys specifically build and what do you sell? Sequence is in the business protecting your web and APIs from various kinds of attacks. We protect from business logic attacks, API, do your API inventory. We also detect and defend against things like account takeovers, fake account creation, scraping, pretty much anything in everything an application on an API is exposed to from the attackers. Jason, what do you do there as hacker and residents that also want to get your perspective on API security from the point of view of an attack standpoint from a vector, how are people doing it? So first, explain what you do and love the title hacker and residents, but also what does that actually mean from a security standpoint? Yeah, so we can't be in the business that we're in without having an adversarial approach to where our customers are deployed and how we look at them. So a lot of times I spend my time trying to beat on a client's back doors and try to hit their APIs with as many kinds of attacks that I can. It helps us understand how an attacker is going to approach a specific client as well as helps us tune for our machine learning models to make sure that we can defend against those kinds of things. As a hacker and residents, mostly my position is client facing, but I do spend an awful lot of time doing research and looking for the next API threat that's out there. Yeah, you got to stay ahead of the bad guys, but let's bring up some kind of cutting edge relevant topics. One is all over the news cycle, you heard Peloton, a highly visible company. It represents that new breed of digital companies that have a new approach and it's obviously doing very, very well the new consumers like this product. And you're seeing a lot more Peloton-like companies out there that are leveraging technology. So they're fully integrated. They had an API issue recently. What does this mean? Is that something we're going to see more of? These kind of leaks and these kind of vulnerabilities. What do you guys think about this Peloton thing? You know, from an attacker's perspective is a really boring attack, but it led to a huge amount of data leaking out. Same with the news has been ripe with this lately, right? John Deere got hit. We've seen yet another credit bureau got hit, right? And these attacks are coming off as fairly simple attacks that are dumping huge amounts of data, just proving that the API attack surface is really a great place to get a rich amount of data, but you have to have a good understanding of how the application works. So you got to spend a little bit of time on it, but once you've taken a look at how the data flows, you end up with pretty rich data set. As an attacker, I go after them just by simply utilizing their products, utilizing the programs and understanding how they work. And then I drag out all the pieces that I think are going to be interesting and start plucking away at it. If I see a profile, for instance, that I can edit, I wonder, can I edit someone else's profile? And this is how the Peloton attack work. I'm logged in, I'm allowed to see my things. What other things can I see? And it turns out they could see everything. So we also saw a hack with Clubhouse, which is the hot app now. I think it just opened up to Android users, but they were simply calling it back in to Gora, which is, you know, I've seen China. But once you've understood how the tokens work, once you understood what they were doing, you could essentially go in and figure things out. This seems to be like pretty trivial stuff, but it gets exposed. No one kind of thinks it through. How does someone protect themselves against these things? Because that's the real issue. Does this make it less secure? Our API is going to be more secure in the future. What can customers do about it? What do you guys to think about this? Yeah, so the reality is, I mean, there's just too many APIs out there. I mean, if you see the transition that is happening, that is to transformation where it used to be like a one app or two apps before, and now there are like hundreds and thousands of applications driven by the DevOps world, Agile development, and what matters is, I mean, the starting point really is, you cannot protect what you cannot see, right? What used to be an app hosted in your data center is now being hosted in the cloud environments, in the virtual environments, in serverless environments, and Kubernetes, you name it, they are out there. So the key is really to understand your attack surface. That's your starting point. So your tooling, your applications need to be able to provide that visibility that is needed to protect these applications. And you can't rely just on your developers to do this for you. So you need a right tool that can secure these applications. Jason, what's the steps that an attacker takes to uncover vulnerabilities? What goes through the mind of the attacker? I mean, the old days, you used to just do port scans and try to penetrate, you get through the perimeter. Now with this no perimeter mindset, the surface area as Shreya was talking about is huge. What's going on in the mind of the attacker here and the APIs and vulnerabilities? So the very first thing that we do is we sign up for an account. We use the thing, right? We look at all the different end points. I've got scripts running in my attack tools that do things like show me comments in case a developer left some comments in there to tell me where things are. I basically, I'm just going to poke around using it like a regular user, but in that I'm gonna look for places that make sense to try to do an attack. So a login screen is a real easy thing. Everybody understands that.  What I'm gonna do is put in a bad username and a bad password. I'm gonna put in a good username and a bad password. I'm gonna see what changes. What are the different things that your application is telling me? And so when we look at an application for flaws and ways to get to the data on the backend, all we're doing is seeing what data do you present me on? Standard use. And then I'm going to look at, well, how can I change these parameters or what are the things that I can change in my requests to get a different response? So in the early phases of an attack, attackers are very difficult to see, right?  It's when we decide, all right, I've found something that it starts to get actually interesting and we start to try to pull data out. What are some of the common vulnerabilities and risks that you guys see in the APIs when you look, when you poke at them that people are doing? Is it they're not really doing their homework, doing good security design? Or is it just more of tech risk? What's the most common vulnerabilities and risks? Well, so for me, I've noticed a lot of the OWASP API top 10, the first couple of things you see them on almost all applications. So broken object level authorization is the first one, it's mouthful. But basically all it is is I log on to the platform, I'm authorized to be there, but I can see someone else's stuff. And that's exactly what happened in Peloton. That and what we call insecure direct object reference where I don't have to be logged in, I can just make the request without any authentication and get information back. So those are pretty common areas that people need to focus on, but there's a few others that are outside the OWASP top 10 that really make a lot more sense. As a defender, Shrainz probably has a little better answer than me. Yeah, so like we said, creating that inventories is key, but where are they being hosted is another aspect of things. So when Jason spoke about hackers are actually probing, trying to figure out what are the different entry points, it could be your production environment, it could be your QA environment, staging environment and you're not even aware of. But once you've actually figured out those entry points, the next step of attack was like at Peloton and other places is really exfiltrating that information. Is it your TII information, PHI information? And you don't want to exfiltrate as a hacker just one person's information, you're automating that business logic that is behind it. Ability to protect and defend against those kinds of attacks, giving that visibility, even though you might not have instrumented that application for that kind of visibility is key. Once you're bubbling up those behaviors, then you can go ahead and protect from these kinds of attacks. And it could be about just simply enumerating through IDs that Peloton might have or XP in might have and just enumerate through that and exfiltrate the information behind it. So the tools need to be able to protect from those kinds of attacks out there. Yeah, I think I was actually on Clubhouse when that went down, that whole enumerating through the IDs, room IDs and then the people just querying, once they got an ID, they essentially just sucked all the content out because they were just calling the back end.  But they didn't think about it. I mean, they were just rushing really fast. So the question I have for Sriyans is, on a defense basis, people are going first party with APIs, API first strategies. Because there's just some benefits there as we were talking about. What do I need to do to protect myself so I don't have that Clubhouse problem or the Peloton problem? Is there a playbook or is there software tools that I could use? How do I build my APIs from day one and my principles around it to be good hygiene or good design? What's the, what's the, what's the problem? Yeah, so API security is sort of a little less known, given that it's constantly evolving and changing and the adoption of APIs have gone up significantly. So what you need to start with effectively is the runtime security aspect of things. When an API is live, how do I actually protect it? And it ranges from simple syntactic protection, things around that people can go ahead and break these APIs by providing sort of going after endpoints that you don't think exist anymore or going after certain functions by giving large values that they're not sort of coded to accept and so on and so forth. Once you've done that runtime protection from a syntactic aspect, you also need to protect from a business logic aspect. I mean, APIs will expose to information interact with the customers and partners. What business logic are they actually exposing and how can it be abused? Understanding that is another big aspect and then you can go ahead and protect from a runtime, from a runtime security perspective. Once you've done that and understood that well, then you can start shifting left things invest in your sort of a DAS tools or static analysis tools, which can catch these things early so that they don't bubble up all the way. But none of them are actually silver bullets, right? So that you have a good runtime security tools or I don't need to invest in DAST or ASAST, whatever I've invested in my shift left aspect of things and nothing will flow through. So you need to start shifting left but cover all your basis properly. Yeah, you can't shift left, there's nothing to shift from. I mean, if you don't have that baseline foundation, what does that even mean to shift left and get that built into the CICD pipeline? So that's a great point. How does someone and some companies and teams set that foundation with a runtime? Do you think it's a critical problem right now or most people are doing a good job or they just get lazy or just lose track of it? Or what's the common use case? Do you see behavior or behaviorally inside these enterprises? Yeah, so what we're seeing is adoption of new technologies and environments and they're not well suited for the traditional way of doing runtime security. Like if you have an app running in your Kubernetes environment, if you have an app running in a server less environment, how do you actually protect it with a traditional appliance based approach? So I think being able to get that visibility into these environments, understanding the user behavior, how these applications are interacted with, being able to differentiate from that normal human behavior or even sometimes legitimate automation from the malicious intents or the probing and the business logic attacks is key to understanding and defending these applications. Before we wrap up, I want to just get your expert opinion since you guys are both here around the next level of innovation. Also, you've got cloud, public cloud showed us APIs are great. Now you're starting to see cloud operations, they call day two operations or whatever you want to call it, AI ops is all kinds of buzzwords for it, but hybrid cloud and multi-cloud edge, 5G, these are all basically pointing to distributed computing systems, basically distributed cloud. So that means more APIs are going to be out there. So anyway, the surface area of APIs is increasing. What's your view on this as a market? I mean, early days, developing fast and what's the landscape look like? What do you guys see from an attack and defense standpoint? Well, just from the attacker perspective, I see a lot more traffic going, what we call East West traffic where it's traveling inside the application. It's APIs feeding APIs more data, but what is really happening is we're trying to figure out how to hook third parties into our APIs more and more. The John Deere attack was just simply their development API platform that they open up for other organizations to integrate with them. You know, it's very beneficial for John Deere to be able to say, I planted this seed at an inch and a half a depth and later I harvested 280 bushels of corn off that acre. So I know that's perfect. I can feed that back to my seed guy. Well, that kind of data flow that's going around from API to API means that there's far more attack surface and we're gonna see it more and more. I don't think that we're gonna have less APIs communicating in the near future. I think this is the foundation that we're building for what it's gonna look like for almost every business in the near term. I mean, this is the plumbing of integration. I mean, as people work with each other, data transfer, data knowledge, format, you mentioned syntax and all these basic things in computer science are coming to APIs, which was supposed to be just a dump pipe or just, you know, rest API was a glory days. Now it's not, it's basically connections. Yeah, you're absolutely right, John.   What are they gonna go after? These assets that are gonna be in the cloud, in your hybrid environment, in your on-prem environment. And it's a flip of a switch where an internal API can be externally exposed or just a new API getting rolled out. So all those things you need to be able to protect and get that visibility first and then protect these environments. That's awesome. You guys represent the new kind of company that's going to take advantage of the cloud scale and as people shift to the new structural change and people are refactoring security, this is an area that's going to be explosive in development, obviously the upside is huge. Quickly to end, you guys, take a minute to give a plug for the company. This is pretty cool. I love what you guys do. I think it's very relevant and cool at the same time. So, SQL security, what are you guys doing? Funding, hiring, what's the plug? Tell folks about it. Yeah, so we started about six years ago, but like starting in the bot defense space but focusing on apps and APIs. And from then we've grown and we've grown significantly in terms of our customer base, the verticals that we're going after in financial, retail, social media, you name it, we are there because pretty much all these verticals depends on APIs to interact with their customers. We've raised our cities B last year, we've grown our customer base in just in the last year when there was a lockdown, people were, all these retailers were transforming it's from brick and mortar to online. Social media also grew and we grew with them. Jason, your thoughts? I think that the sequence is ability to scale out to any size environment. We've got a customer that does a billion and a half transactions a month that are APIs from a thousand other clients theirs. Being able to protect environments that are confusing and cloudy like that is really, it makes what we do shine. We use a lot of machine learning models and AI in order to surface real problems. And we have a lot of great humans behind all of that making sure that the bad guy may be there right now but they're going away and we're going to keep them away. Yeah, it's super, super awesome. I think it's a combination of more connections distributed computing at large scale with a data problem that's playing out you guys are solving great stuff. And hey, you know, when the Cube Studio API gets built, we're going to need to call you guys up to help us secure the Cube data. Absolutely. Absolutely. Hey, thanks for coming on the Cube. Great insight and thanks for sharing about sequence. Appreciate you coming on. Appreciate the time. Okay, it's a Cube conversation here in Palo Alto with remote guests. I'm John Furrier, your host. Thanks for watching.


What's up everyone takedown here welcome back to the channel today It's another hockey card video and I'm gonna be opening up my second care package from upper deck as you guys seen recently I opened up my first care package from upper deck. I'm not sure why they sent this one I'm gonna have to reach out and ask them why they sent it But I'm not gonna argue. I'm really happy because it's some pretty good stuff. Let's open it up and see what we get Okay, so up first I already have these open Up first is a Connor McDavid all-star card for the 2018 That's pretty good. I have a Connor McDavid collection. So I'm super happy to add this to it It looks amazing, and I also have an all-star for Johnny good row. I have a small PC of his I found so I'm hoping To add some more. So that's a great addition to it next up is 2018 National Hockey Card Day for Canada I didn't get any of these this year because I don't live anywhere near hobby shops So I'm happy that I got one. Thank you upper deck Let's see what we get Mark Messier Austin Matthews that one's a nice one for me Josh Hossang Like that one as well. There we go. Let it focus Steve Zierman Really happy with that. I think it's gonna be going to Detroit to be the GM or I think GM at this point I think you'll be going back and Mark Shelfie. It's pretty good. And then of course your checklists It's not too bad. Just one pack of that Super happy got some pretty good ones Next up is the 1718 AHL. I think there is eight cards in here. So let's see what we get If I can open it up. Okay, so up first. Oh I love this one Colin White That is a great card. I like that one Jared let it focus here Coro if I butcher names, let me know down in the comments, please Carter banks Philip let it focus. Whoa Chowklick, I might have butchered that one. I know that he's on the Suns now though Surgey Todd Shinsky Might have butchered that one Linus Allmark Samuel Montem Bolts I probably butchered that one. I think I know I did and Nikita Whoa, wanting to focus So Snakov Snakov, sorry Not too bad. It did get some pretty good ones. I like the Colin Whites. Next is a hobby pack for 1819 MVP almost got the year wrong with that That didn't work it Hopefully I get something in this one Ben Bishop, that's great for my goalie collection. I like that card Coppolaar Coppotaar, sorry Don't know what I said the first time there Dustin By Figlin, I always mispronounce that one Dustin Bufflin Bufflin, okay Vincent Trochak Oh Becca Renee So that's one of the puzzle pieces. I believe Sidney Crosby have a small PC of him. So that's a great one to have Dylan Larkin Nicholas Backstrom I Like these cards here and Patrick Kane Not too bad Second last pack. They sent me which is 1617. Oh peachy Let's see what we get it feels a little bit thick So hopefully we get something I hope at least Okay, I think you've seen that one there Nick Letty Jordan Stahl Tyler Ennis All-Star Ryan. Oh really? Let it focus there. I like that guy that guy looks pretty cool That looks amazing Down in the back for a minute Noelle Akiri What's that Markey rookie, okay? I almost missed the Markey rookie there for a minute David Jones Feels thicker, but it's not Chris Creader I Won't focus today. What there we go and a black bolt Well, I almost screwed that up a foil black border for Jordan Jordan Martin cook Martin look sorry Numbered out of 100 so that is a pretty good card. I Don't think I have any black foil cards in my collection or black Border ones and it's numbered so that is to me a win-win and one final pack 1718 series 2 Let's see what is inside. I was hoping for something big Eric Johnson Mark Shelfie I've gotten two of his cards in this. I think let it focus there There we go. That's a nice card Dylan Strow me I Was mispronounced him. So if I did I do apologize Whoo, I like this one Markey rookie for let it focus Alex for meant Foreminton Whoa, I can't believe I butchered that Put that one with the sins Jamie Ben, I think I got in the last care package. They sent me I opened up one of his cards. Oh I don't have any of his cards and I was actually hoping I would Evender Kane fan of him Esa Lindell and Michael cam came Allery So not too bad. I do like that. I got a lot of stuff for my PC players that I collect Honestly, I think this one would be the best one here Martinuck numbered black foil Blackboard or foil that has to be the good one. I did get some good rookie cards though for my PC Colin White. That's a great one. I know it's a HL but still Got some pretty good stuff. Hope you guys did enjoy. Thank you upper deck I'm not a hundred percent sure why they sent me this package Cuz they already sent me one care package So I don't know why they sent this one or maybe they didn't think I got the first one I'm not so sure but I am gonna leave this video here Hope you guys did enjoy if you did please smash that like button and I'll see you guys in the next video Please take care peace


This is Witchspace news for Friday the 9th of October 2020, I'm CMDR Buur In this weeks news, the latest CG is live and there are mega ships firing in the combat zones. We've got yet more answers from Frontier about the features of Odyssey and after a significant format change there's a new edition of Sagittarius Eye. If you enjoy this video remember to hit the thumbs up and subscribe to the channel so that you don't miss any of our future updates. The latest in the ongoing torrent of community goals in the game went live on Thursday continuing the current struggle between the Empire and the political ideologies of Marlinism. The Empire having failed to take the engineer Liz Rider into custody last week has now turned its eye towards the Aquada system where it believes the faction known as the Dudu Secchlus Empire League, rolls off the tongue, have been recruiting its population into the Neo-Marlinist Liberation Army or NMLA, an extremist paramilitary organisation that claimed responsibility for the attacks on starports in Imperial space a few weeks back. As was the case last week, community goals have sprung up in the Aquada system with two CG's vying for independent pilots attention and firepower, one fighting for the Imperial authorities, the other fighting for the Marlinist refugees who are attempting to flee the conflict and persecution by the Imperials in a number of Megaships. The particularly interesting thing about this CG and its resulted combat zones is that the Megaships being used in the evacuation are actually showing up in the combat zones and participating in the ensuing firefight. Frontier promised some significant time ago that Galnet would only be reporting on things that are actually in the game, doing away with some of the more fluff based colour and texture articles that were never actually in the game but did, some would argue, add some extra depth to the elite dangerous experience. True to their word, the Megaships referred to in the community goal are present in some of the combat zones and are actively participating in the engagements happening in their airspace. If a ship of the Imperial forces strays close to the Megaships or indeed is kited over there by an enthused YouTube air and his camera operator wife then it is actively fired upon. It may seem odd to say this but this isn't really something we've seen in the game before, outside of the odd bug here and there so to see not only one Megaship but in fact three all flying in the same instance and participating in combat happening around them, this is new. The CG is likely to run until Thursday, grab your best gun and go get involved and see the spectacle for yourself, thanks to General Zof on our Discord server who pointed us to the combat zone shown in this report that was around Aquada 7 if you want to go hunting for it. There are of course other schools of thought, Captain James Flint of Flintlock Engineering announced this morning that the Imperial squadron that he serves, Ashling's Angels, which aligns itself to the ideals of Ashling Duval is calling on all Imperial and independent pilots alike to refrain from participation in the bloodshed surrounding the Empire's actions in Aquada and instead deliver power generators and agronomic treatment to the system and buy gold and silver from the system to help feed the populace and drive trade and wealth production instead. I love it that the community is almost choosing its own path here, blaze your own trail indeed, choose your side and pitch in with whatever fits you best. Frontier have delivered some more nuggets of information about Odyssey via the content creators collaboration program that we've been enrolled into. This is in addition to the roundup of what we know so far about Odyssey that we released earlier this week which is linked on screen just now for you if you haven't seen it already. On the subject of the differences between mission boards and mission giving NPCs, Frontier have said that they may offer you different work and get this, you may sometimes be actively approached at a settlement and the reward for helping with their task may be greater so essentially it seems an NPC may actively approach you with a mission. On the subject of engineers Frontier have confirmed something we've long suspected, a new cast of engineers will be joining the game with the launch of Odyssey, they haven't yet furnished any more details than that but with the suits very much being the spaceships of the Odyssey expansion and having modules all of their own we think it's a fairly safe bet that at least some of those engineers will be helping to improve the performance of your suits and their modules as well as your personal weapons and equipment etc at the very least. And lastly one of the rewards for the community goal last week to defend Liz Rider was a missile rack that had not one but two engineering improvements stacked on it, lightweight and high capacity as well as thermal cascade, Frontier have confirmed that this is a special reward for the CG concerned and it's not to be taken as a sign that dual stacking of engineering modifications is something that will be coming to the game. And finally the Galaxy's favourite magazine Sagittarius Eye which recently announced that it was evolving into a podcast only format and mothballing its written word arm for the moment while simultaneously switching to a regular monthly schedule has this week released its latest episode. The magazine this week delves into two of the galaxy's biggest ongoing mysteries as well as articles about laser weapons and the virtues of the oft overlooked South Kruger Dolphin, suffice to say it's linked in the description below. That's it for now, thanks very much for watching, we'll be back later this week with more videos until then, oh seven commanders follow the greens on the way out and do keep clear of the toast rack, we very much look forward to seeing you next time.


If you're a member of For Britain, please mark this date in your diary. January 11th 2020. This is one of the most important dates for our party so far. It is on this day that we will launch our campaign for May 2020, or should I say our campaigns for May 2020, campaigns that we will win. We know how to win and we will repeat that winning strategy across the country Add more seats to our tally. Do get involved. You know how important this is. You know that the knives are out for us. The only party consistently telling the difficult truths in this country. We must fight. We must fight at the ballot box and we must and will win. January 11th 2020. Mark the date. Much more information to follow. Thank you.


We're gonna learn in this video how to write basic html now html is one of the things that's most I don't know. It's everywhere. It's sort of like a background Thing that you've probably picked up even if you've just been on the internet But I did a series a couple weeks ago starting about like how do you have your own website? How to start your own website, but I didn't actually do anything about writing a website. It's a very easy process now Of course, I should say we're gonna learn html in this video You can do these fancy and complicated static site generators or You know all these other ways of generating a website, but I just think the Chad way of writing a website is just opening it up and writing HTML that's what I do. So that's what we're gonna do in this video I am gonna be using Vim as my editor because people on the internet told me it's cool And usually to start a website.  I'm gonna do something a little irregular Usually when you hear people doing tutorials on HTML or anything else They start by telling you okay You got to put in a doc type and all this other stuff. The thing about html is that how it's rendered in browsers You basically can be a Retarded boomer and still write HTML and it will still work in most browsers. You actually don't I mean now now of course This is don't do this, but I should just say you can actually just start writing. Oh, here's our header So here is you know the UNO boomers Cabin the name of my website and Or at least the one that I was making in the last video and so this is a sentence. Okay So technically speaking in order to have a properly formatted html page you need other things like this But most browsers if I open this up in my browser, it's actually gonna render it Okay, now first off. What does html usually look like now? I should say if you've just you got a stick to learn how to add in the the other information about a file But I just want to go into what this basic stuff means So if you look here, what have I done here now this? H1 thingy is gonna render as a big header. Okay, and this p thing this actually stands for paragraph It's rendering as a paragraph.  That of course is imitating the tags of html So basically in order to say that something is a paragraph. We open the p tag. We put some stuff in it Here is another paragraph And then once we're done, we close the p tag. Okay, so that is in general how all of html is gonna work Now there are some tags that do not need to be closed. We'll talk about those as well But just to be clear, so let's play around with this a little bit So I can of course have multiple paragraphs. Okay, and you'll see that each one of them is gonna be formatted differently Let's say I delete let's say I delete these. Okay, let's say I'm a boomer and I don't know how to write html So I I like only have half of the syntax there one thing about html is that most browsers are gonna just try and guess You know, even if you have bad syntax like this, they're just gonna try and guess what you mean there Okay So you could delete the beginning of these tags or the ends of these tags at least in the case of the paragraph tag And it will render it correctly now. That's not gonna work for everything if you like to leave the end of the header tag It's gonna be like, okay, I guess those are all headers, but anyway or heading. I should say those are technically different things So anyway that but in addition to this so we know how to write paragraphs. We know how to write headers Or headings. So here's another one another Heading now notice, of course, both of these have h1 h1 is basically the The biggest heading so if I look at this now, you have a big heading you have a big heading the one here Just to be clear it does not mean the first heading at the top It means the biggest type of heading if we put in an h2 here that is basically a subheading so sub Heading okay, so if we put in an h2, let's see what that looks like it looks like a smut It's it's a heading, but it's slightly smaller. Okay, or if we put in an h3.  Okay Changes to h3. Let's look at that. So this is even smaller and I think it goes down to like h6 or something like that Okay, so in addition, let me actually move this over here because we're writing more stuff Let's say something like text formatting. So let's format bold text or Italic Text okay, or actually we can do or underline text Okay, so in each of these cases bold is just going to be the B tag I is gonna be the I tag and U is gonna be the or underline is gonna be the you tag you see in each of these cases It's produced the text that we want. Okay, and of course you cannot like the paragraph tags. You can't mess these up It's gonna get confused if you like delete the end of this It's probably gonna bold everything for the rest of the document. Yep And notice so actually I should say so you should know that you can like put bold tags inside of italic tags to make it Like a both bold and italic or something like that now It's usually thought of as slightly better form to use these however. Okay, so for example You know here is the strong Tag strong tag and the emphatic Tag okay, so I'm gonna show you what this looks like now strong text is basically gonna look exactly like bold It bait it is predefined as being exactly bold and emphatic is gonna look exactly like italic now technically now the reason there's a difference between strong and be and infinite talic is because Basically the bowl the B and the I and the you tag. They're not supposed to change. They're always gonna be the same But it's usually thought of as better form to use the strong tag or the emphatic tag because when you go into actually Changing the style sheet of your website. It's better form to be able to modify like the strong. Let's say you instead of Wanting something emphatic to be italic you want to change it to be maybe it's underlined or green or flashing or something like that You can do that in CSS by modifying the m tag. Okay, but it's sort of bad form to modify the I tag directly Okay, that's what that's for Now before we get to that though, let's do at least one more thing one thing you do pretty common is make lists How do you make a list in html? It's not too difficult Well, we'll make an ordered list now to make an ordered list I'm gonna use the ol tag ordered list and inside of that you can have li tags That means a list item. So here is a list item Okay, and I'm gonna close that tag and in fact I'm gonna multiply that a couple times and Let's see what that is gonna look like Now we have a list and we have seven items in it notice that html has automatically numbered all of these set of seven items That is part of the ordered list Now if you just want a unordered list or a bulleted list just use you L for unordered list And if you run that if you see what that looks like, oh, it's just gonna have bullets And in each of these cases you can actually let's say I copy this lit this entire list and I'm gonna paste I'm gonna paste it inside of this list. Okay, so now we have a list inside of a list. What is that gonna look like? Okay? Well, let's get you're basically gonna have a sub list and it has a slightly different annotation here a little You know dot without stuff filled in. Okay, so that is basic html formatting This is not just the kind of stuff you use in making a website But you also might you know use a web form that requires html formatting now all of you people who are web devs are Screaming right now because I have just been writing html without having a proper header Or heading with a doc type and all that other stuff now I said html as it's rendered in browsers is usually very very forgiving But there are certain things that you always want to include in your html documents Okay, one of the most important ones at the very top and the very first line should be this it should be exclamation point Doc type and then html and that's html is going to be a lowercase doc top is going to be capital Now that is basically just telling your browser or you know other people's browser when they look at your website This is a proper html document if it does not see this your browser is basically gonna guess Exactly how to format it and it might guess wrong or it might be something weird. I think if you don't include this It's like internet explorer at least will totally break. Okay, so that's something you don't want to happen additionally you want to set a An html tag and you want to include some information about this html that you're writing Okay, so for example, you might you're probably gonna want to do this html Set lang equal to in for English So we've opened this html tag at the top and I'm gonna end it at the bottom Okay, that is good for him to have and also the body text of your document is usually put into a body tag So I'm gonna open this tag up here and I'm gonna close it at the bottom right before HTML notice that the body tag is inside of html Okay, now the reason for this now the reason you usually do this is multi-fold actually But what one of the reasons is we might want to set when we start doing styling and coloring and stuff in CSS We might want to set specific Like traits for the text that's inside of the body and things like that And that also it also helps helps with rendering across platforms and things like that now last and not least you want to have a head Okay, or you know a header in here And you basically this basically contains metadata and other information about your document Okay, first off notice in my browser that this is named index dot html Now if I were to put this up on a website, it would probably show up there as index html Or maybe depending on what kind of server you have Displaying that might do something different, but really we want to set a title for this How do you set a title? Well, you set it in the head tag you say title The unit whatever you want to name your site the unit boomers cabin. Okay Title now if I refresh this you will see. Oh now it has a proper title. Okay, that's good Another thing that you are gonna want to do I have to write this down because I always get it a little wrong Okay, is that you are going to want to set to have Unicode character proper utf-8 characters. So that is meta Car set chair set however you want to say it char set utf-8 Okay, and a slash there and that is just telling your browser. Okay. I want to use that You know if you're using a non-English Language Everything is gonna show up as a mess until you have some this thing included. So that is something you are definitely gonna want Additionally now now that we've sort of got now This is basically what you need for a bare bones I've sort of formatted this ugly because I you know we could take this and I don't know move it out a little bit So it I don't know see I'm usually not the person who even tabs in on anything usually I just keep it all to the left side, but this is basically a bare bones web page. Okay, so we have our dock type We have our header here that tells us that we're using Unicode utf-8 And tells us what the title is and then we have the the text of the actual content of our website And again, as I said like sometimes HTML is a little forgiving But don't rely on that always make sure to write, you know, good HTML code Now let's talk about how you actually change what this like the colors and stuff Let's say you want to edit edit it Let's say you want to put it maybe in the middle of the screen instead of over here on the left side or something like that Well, what we do is we create a css style sheet css Stands for cascading style sheet. So a css style sheet, I guess is a Cascading style sheet style sheet, but you know, whatever You're probably not supposed to say it that way, but who cares now the thing basically what you do is you tell your web page? Okay, I'm gonna have a style sheet. It's gonna be this separate file and I am going to use that For I'm gonna put all the information you need there. So in your head tag here We're gonna have another thing here. We're gonna say link and it's gonna say ref Or rel, excuse me style sheet Style sheet and then I want to say it's I think I wrote it down. Yeah type It's gonna be text CSS I cannot type today at all And then also you're gonna give it the file name or really href But this is the file name and I'm gonna name my file style that css you can name it theoretically anything Okay, so now what this is gonna do if you just run it and see what happens. Nothing is gonna change on your website But now what this is gonna say is this HTML document is gonna look for this file styles dot css and it is going to look for All the you know extra settings that you set there for how it's gonna look Let's go ahead and start doing some of that. I'm gonna create this new file style dot css And let's start playing with it now. Let's modify our body tag Okay, so as I said, we have a body tag that we can modify. We can put you know information Different settings in there.  I want to get rid of it I want this to be dark easy on the eyes, you know If you're a neat if you're in your dark room browsing, you don't want, you know All this white background all over the place So I'm gonna say this I'm gonna say color and color usually refers to the color of the text I'm gonna say color is gonna be white and I'm gonna say the background is gonna be black Okay, these are settings built into the CSS now if I run that you'll see that oh look at that now We have a nice dark site. Okay nice and readable. You can edit other things as well Let's say I want to edit the headings. Let's say I want them to stick out a little more Okay, you can do things like this. You can say h1 And I'm gonna say the color of that is gonna be red. Okay, that'll make it stick out very I don't know very strong. Okay, so now our h1s are sticking out. Okay, or you can do something I mean, let's say we want h2s to stick out as well. We have one of those second headings We can go in here and add a little block that says h2 was gonna be red Okay. Now, of course, there's an easier way to do this Let's say both h1 and h2 are gonna have the same settings. Well, I could just get rid of this and say You know comma h2 and that is actually gonna apply to both of those, you know None of it's gonna change but it's sometimes good form to keep them separate, especially if you want to later go in and change Let's say I want h2s to be green or something like that. Okay, so you can change things like that Let's see what else. So let's say I mentioned that you could change stuff like let's change What we want emphatic text to look like because we had this little emphatic stuff here Let's say I want that to be You know font size large, this is probably gonna look really ugly, but it can be done Okay, so that's gonna get a little bigger. Actually, let's make it extra extra large xx large Okay, so that is gonna be really big now that looks ugly, but that's just something you can do with the tag Let's say, you know, maybe something more realistic as you change the color to be Yellow actually that's still gonna look ugly, but who cares where this is an example video Okay, so this adds a little a little change to your site here Additionally, let's say we have a list items here. Let's say our list items are too big That's just something I want people to go over we can change the size of list items Let's say font size small, okay So that is gonna decrease the size of these list items just if you want that, okay? And this goes for anything now. I'm not gonna show you everything you can do with CSS I just want to give you an idea with it But you can go in and start changing how things look and how they're organized, okay? Another thing you'll probably you're probably gonna want is you know on this web page at least All of our text is on the left side. That is by default how everything is going to display in html Let's say we want to change that there are a couple things you're gonna want to do We're gonna set some settings to the body tag, but There are a couple things we're gonna want to do we want to say something like this So let's say max width We want it to be 800 pixels, okay? And I'm gonna do two other things. Let's say margin left is gonna be auto and Margin right is gonna be auto, okay? Now if I look at this document, I'm gonna refresh it now that what that's gonna do is it's sort of gonna display it in the middle Now what we've told using the CSS what we have told it to do is said this, okay? The body tag let's treat it as if it is only 800 pixels wide So instead of just automatically being the whole thing. It's only gonna be 800 pixels So it's gonna be let's say the 800 pixels in here We've also told it to when you give it to the margin left margin right thing that basically or the make them automatic That basically just says Well in this case, it's just gonna say center it and it's gonna so the body is just gonna be the 800 pixels in the middle If we change this to like 600 or something like that You're gonna notice that it moves a little in now It is only the 600 pixels in the middle or something like that or let's say You know a thousand or something like that, okay? So that is sort of a way of centering things now if you just want text to be aligned or something like that well let's say 800 that'll be that'll be what we stick with. Okay. Does that look okay? Well, you can also just align text You could let's say we want our headings to be In the middle of everything. So let's say we want h1 and h2 to be centered. You can say text Align Okay Center I think that's how you do it. Okay. Let's let's look at this. So I'm gonna refresh it Refresh it. Okay. So now all of our headings are in the middle This actually looks a little ugly and the reason it does is we don't have text that like goes through the entire Like normally paragraph text would be taken up like all this space over to this side So it would look sort of nice but since we're not writing that much at all looks sort of ugly But that's how you center text and things like that So HTML and CSS hopefully this is giving you sort of a view of how to do basic things in them But I want to talk about two more things that I think are pretty essential Now I will say this of course is not has not been exhaustive. You're gonna have to Learn some of this stuff on yours by yourself, but two more things. I think are important One is making links to other pages and the other is adding images. So let's do those really briefly Let's say I'm gonna make another I'm gonna make another page. I'm gonna call it another dot HTML. Okay, so here's a new blank HTML document I'm actually gonna go ahead and copy in most of this stuff that is required Okay, so we got our HTML Tag we got our Header up here. I'm gonna change this title to another page And we have our body tag and I'm gonna go ahead and write something in here You know here is another page Okay So in a paragraph here is some cool content exclamation point and Let's open this in a browser and we'll see that okay now we have another page So how do we link this page to our original page? Very very easy to do one or vice versa. It doesn't matter Let's say up here. I want to on our original page I'll say Check out this other page Okay, and let's say I want this to be the link so what you do is you use the a tag and What you do that is gonna look something like this okay, and a is basically for hyperlink and You give it the href option and the href is just gonna be what do you want this to link to? I want it to link to the page another dot HTML.  Okay in addition If I go to that other page I can add a link back to the index. So let's say Href Index dot HTML remember that's the name of our main page and I'm gonna say return to the home page Okay, close Those tags there that paragraph tag and the a tag so it's gonna say return to home page I really need to change the CSS because it's hard to read here, but that is gonna return us to where we belong Okay, so that is how to do links now if you want to link to a website Let's say I want to link to I mean another website not just like a page that you've created Well, then you just put the URL here. Let's say I want to link to my website HTTPS colon slash slash Luke Smith dot XYZ you got to include HTTPS stuff like that if you're doing a foreign website So now there's this link and I can click on it and it is gonna take me to my website Okay, so there's my website another web page on the internet Which is lowing it loading slow because I'm out in the middle of nowhere and I have bad internet I need to get rid of all this all these pictures. I need to slim down my website I need it to look I need it to look more like this. Okay So that is how you add links and I mentioned adding images. Let's add images. I've actually in this directory I have included a little image cabin dot gif. It's actually a gif file as you can guess So you can of course had have moving gifs It's to include an image. You're gonna do this Obviously, it's the image tag. You don't need to close this tag You just say image source and then name the file cabin dot gif It needs to be in the same directory or if it's in another directory. Let's say it's in your pics directory Inside this website. It's gonna be like that but cabin That is just going to make the the image appear and it's a gif. It's moving around. Okay, great So working is according to plan. It's also a good habit to add in some other information. Let's say Alt which is gonna be let's say the image can't display It's gonna display this alternative text. So we'll just say this is cabin or something like that and you can also do title and You know, this is a Cabin, okay, so that is gonna do if I refresh this page if I mouse over it It's gonna say this is a cabin. Okay, that's how you do that. All right So I've done basically what I consider all the basics of HTML So again, remember to have all your bait your dock type all this kind of stuff up here Hopefully that is made I have made sense of how to do basic formatting linking images some CSS The world of CSS is very big. I encourage you to check it out yourself I cannot teach you all of it, but I might do another video maybe on divs and other things like that You know how to do more special stuff, but this will give you at least what you need to make a nice 1990s a boomer website like this. This looks so nice. I don't know. I wish the internet looked like this But you can do your part by having a simple HTML website Okay, so that's it. See you guys next time


Hey I want to introduce you give you a chance to speak I Want I know you're over here, and you have a lot to say and I think You should have the opportunity to say it as well. I'm not trying to set you up or anything I mean, I know you have an opinion I think you should be heard out and then everyone else can be heard out as well We can do this in a good way. Do you want to do that?  I mean, I'm more here just to record. I mean, I guess I am talking so maybe I should yeah, I will I'm Ryan So apparently I'm gonna go No, actually, we're gonna have Mona speak first. Okay, because we're in charge of this show This is an indigenous format. I don't need and so he can it's okay. I don't need it. I don't Now go away very nice Why don't you honor the prayers? Okay, you expect us to honor yours. Why don't you honor theirs? I'm not Catholic. I'm not religious at all actually. It's a public space.  Do you think the media should pay a price for this? I think the media should pay a high price for this. I hope their viewership Numbers go down drastically. This is what President Trump has been talking about for a long time fake news Finally showed their true self. Good job guys Cool. Thank you. I appreciate it


All right, you're still watching Waze. Today is World Day for Safety and Health at Work, and it's celebrated annually on the 28th of April to promote the prevention of occupational accidents and disease globally. It is an awareness raising campaign intended to focus international attention on the magnitude of the problem and on how promoting and creating a safety and health culture can help reduce the number of work-related death and injury. In 2003, the International Labor Organization began to observe World Day in order to stress the prevention of accidents and diseases at work, capitalizing on the international, the ILO's tradition strength of tripartism and social dialogue. 28th of April is also the International Commemoration Day for Dead and Injured Workers Organized Worldwide by Trade Union Movement since 1996. So this is a very, very important day. I remember one time where we were having, sorry, I think this house fellowship that we have, somebody was sharing a testimony how he lost his arm at the factory and how even the insensitivity of the employees, they were setting, I won't call it the nationality, but the race, but they were setting the race and he was saying how bad that the Nigerian labor laws were not even protecting Nigerians that worked for foreigners in such factories, right? Imagine doing something, all those machinery works and you lost your arm, nothing. So they had to do the protest and all of that. So this just tells us that they are really bad hazards at work. Again, people that are exposed to chemicals, we're not even talking about normal work. Yes, all those people that work in all these factories and all of that, what are they preventing? Construction, see somebody dying and all of that. So what are the preventive measures to ensure that there are no death and there's safety at the workplace? And even if there are accidents that happen, what is done to compensate the families of the disease? Yeah, even just injuring yourself, it may not even lead to death, but the fact that, for example, the man that lost his arm, he has to be compensated. But they've all lost, do they actually push for, and even the unions in some of those areas, do they push for the benefits that they... It's a monitoring and implementation thing because we do have laws around and there are several insurance packages, workmen's compensation, even what's it called now? The, I'm trying to remember the name of the one that's mandatory. So if you pass away whilst working for a company... Life insurance. Yeah, life insurance, but it's called something in particular, but it escapes me now. But even just in the HSE space, particularly in the sectors you've talked about, oil and gas, manufacturing, just the requirements are there in terms of protective gear and all of that that they're supposed to be wearing. But how many people are actually enforcing these laws? When we talk about, I mean, the story has died now, the building that collapsed a few months ago. I mean, all of these things come into play when we talk about looking at that health... And in that case, there was loss of life. You know, talking about HSE, some companies take it very, very seriously. So in December, when I went to visit my dad, he's a major contractor with Nigerian Buries Inc. All those things, they mark, and I knew Unilever does that as well. A lot of the manufacturers... A lot of, yes. A lot of top international organizations, but they follow those...  So you must put into safety measures. So if they don't do it like that, it's not going to happen. And forcing them also makes those companies accountable. Absolutely. Alright, so what are we starting with? Uti, let me start with you. What did you find for us in the news? So this story... So let me just read my headline. CBN blames Falling Naira on Nigerian's import dependency. So no successful economy thrives on the promotion of imported products over the exportation of local products. And now Apex Bank, the CBN says that we are to adopt homemade products to boost Nigeria's economy and stop the Naira from depreciating further in the parallel market. He says that the COVID-19 pandemic was Nigeria's savings grace for improved rice availability. And then goes on to say that interventions in agriculture, manufacturing and other sectors are reasons why things that the government is doing to impact our depreciation or impact the economy. Now for me, why this story stood out for me? It's like all we're talking about today, put it in the cart.  First of all, we do that we're import dependent. But just like the larger topic that we're discussing today, it's not smoke and mirrors. You can't tell me, right, that I should buy Nigeria when majority of the products or the raw materials that are needed to make the Nigerian products are still imported. The ones that we actually grow here, i.e. the tomatoes, the rice, the... Do you remember the saga the last time about the rice pyramids? And what I really told you about the rice. And then there's tomatoes and oranges. When all of these things are in season, the entire value chain has not been optimized. I don't even think it exists because for every vegetable, every fruit that is in season, the wastage is huge. So we haven't done anything about this. Then we say that it is the things that we have no hope of making here currently. That is the problem. And you know, it's an hack. But it's even the lack of creativity because let's be fair, it's important to have export. It's largely because we've become so dependent on crude. But the fact is we were major exporters of cocoa. Today, we're still major exporters of a lot of things. But quality is a problem. A lot of our products, Gary, all of these things are turned back in European countries because of the level of... Well-processed things that have grown on it. So it wasn't properly processed. They said the things that we need to look at and these are the things we need to fix. Now, might I add that we're all talking about this from an export perspective. We're also not thinking about the values we have for reputation. Unfortunately, they are looking at everywhere I've been to and I'm thinking, we brought our money here. We by ourselves brought our money here to do the things that were man-made that we have naturally. Lagos has water. We've done nothing without waterways. The amount of tourism options that are available in this country today, but because of security, because of infrastructure issues, the money that should be imported... Blast of people already entered the conversation. Calm down. Thank you. Let's move on to the next question. We run out of time. Yes. I'm going to keep it as brief as possible while we're talking about healthcare. My story is on the kaduna train attack that one of the pregnant women who was a kidnap about a month ago, you wouldn't believe that. It's already 30 days since she was a kidnap. Gives birth in the terrorist den. Oh, wow. Look, the fact that she was in the terrorist den is another thing. They kidnapped her while she was even pregnant and she was eight months pregnant when they took her away. And they didn't even bother to take her to her hospital. They brought in a set of medical personnel to come and attend to her. I mean, they did that. Should she be grateful? She really be grateful. What are the circumstances where she gave birth? What is surrounding that environment where she gave birth? They didn't cut the child out of her. They didn't cut the child. See, I mean, okay, let's move on. These are all part of the conversation. No, but let me tell you your story. Still on health, well, in security this time around, we have the case of the missing court member finally found dead. And NYC is probing the killing. So this story really touched me. It said a member of the National Youth Service Court identified as Stephanie Siemba Terungua has been found dead in a buja. The NYC director of press and public relations, Eddie Megua, said this. And he also said that the attention of NYC management has been drawn to the pictures that made the rounds on social media of the missing court member deployed to FCT. And then she was found wearing NYC khakis, trousers with a face-to-face beyond recognition. Also, I read that a lot of her major vital organs were also missing, right? So, and this young lady went out because she was, I think it was her day. There's this thing like a CDS day. And she went out wearing her uniform to go to her community development site. And that was how she was missing since the 14th of April. And only to be found dead. And this is happening in the federal capital territory. Absolutely. So it still bothers on the security issue. Is it, it's this ritual killing? Is this, whatever it is. I mean, NYC says they will get to the bottom of this. But this continues to speak to the level of insecurity that we are facing. I hope our listeners are listening because we've not even started the conversation yet. My story is just quickly something I needed to draw our attention to. I saw a video of a young man that was attacked in traffic. And he was talking about, I think his name is Sororoso Berrecon or something. That's his name. So he, you know, Soso, right? Soso Berrecon. He said, Lucky Expressway, which we all know. Freedomway. I run from that place day and night everywhere. You've spoken about it several times. Or just at Oshodi. So he was calling on the governor of Lagos State. But what are you doing about this? Because it seemed like the way he sounded in that video, it was like saying that I am ready to put down myself. So while I was still on that video, I then saw another video, Chidi Mokeme's video. When he, so I was wondering why was Chidi Mokeme driving inside a car that was presumably, the windows were presuming me up. And he was all sweaty. Only for him to span the cameras. And you could see that the back windows had been smashed. He was not asking, what's happening? What's up with Lagos, right? So this is the current situation. So I like when we are trying to bring the laws and all of that. You put everything politically. Biko, is it me that they will kidnap now? My parents will not pay ransom or something.  We will keep quiet and wait. I listened to an audio of a gospel artist that was kidnapped. I don't know if I shared that. Yes, yes, yes. So he was talking about that, if you don't pay the ransom, there are days inside, they disdain your body class, and they want to sell your body fat that anyhow they cannot lose. So a Senate will not come and say, you want to put a jay item to the person that is trying to rescue his family. It's not a job with the body. You know what, let's take a break. Let's take a break. When we come back from the break, we are going to discuss this. I would really love to hear your thoughts as well. Stay with us over right back.