Hello and welcome everybody to this session. I'm Víctor Cuadrado and with me is my colleague Raúl Cabello and in this session we will talk about coordinate security, pod security policies and what happens after the removal and deprecation so we're gonna see what we have learned from them and what are the alternatives. Okay, so with that said, let's get into it. We hope that you enjoyed this session. So the first thing that we need to say now is that everything is a trailer. Here we have this XKCD comic. I'm not the first one to use it. You see that it's just a loop, no? And the loop starts with everything interconnected which creates bugs and security holes and then we get things unboxed and then everything is more difficult to use and then we're back where we started, no? I think that the tag for this XKCD comic is something like, all I want to do is something, it's a secure system where it's easy to do anything that I want. Is that so much to ask? Yes, it is. Everything is a trailer. It's something that we need to have in mind. With that said, let's move into security in the cluster. So how do we secure a cluster? How do we think about it? We can start by thinking about the forces of cloud native security. Here we have the forces. The first C would be the cloud or the data center, no? So the computer, the networking, the hardware that is behind everything. Then we have the cluster, the Kubernetes cluster, which is the second C. Here is where we deploy our workload, no? It's going to be in our case workload resources. So deployments, replica sets, jobs, demon sets, pods, things like that. Once we have deployed our workloads, those workloads are going to run containers, which is the third C. And that is a bit of sandboxing, no? That wraps our logic. And this logic comes from the fourth C and the last one, which is the code. For this talk, we're going to focus on the cluster and container part, which is the one that is relevant for us. So if we want to secure our workload resources in the cluster, how do we do that? Normally what we do is just have some authentication and authorization for those workload resources. So basically we use RBAC to secure that part of the topic and the problem. So what happens once we are done with that RBAC? And we allow somebody to create a pod, for example. If somebody can create a pod or update a pod, then they can check the spec inside of that pod. And maybe that's a problem because if we remember pods and containers inside have a spec.security context, and there we define the security settings that define the privilege and access control for those containers run inside of the pod. So once somebody is able to change the spec of that pod, then we are in a world of trouble. If we remember the security context, it's going to check things like allow privilege escalation, linux capabilities and things like that. And we need to make sure that people and users and tools cannot change that spec of pods and containers. How do we do that? Well, so far we have been doing it by using pod security policies, PSPs. PSPs come from Quarnetes, they are an entry mechanism, and they are implemented using an admission controller that is inside of the cluster. The admission controller will check every request that goes through it, so basically when somebody wants to create a pod or update a pod, that goes to the admission controller and then the logic for the PSPs is run and then we get the behavior. This logic is run, as I have said, for creating an update of pods, and they check what goes into the spec.security context of pods and containers. Pod security policies apply to all the pods in the cluster and check for all the things that come from the security context. So as we have said, file system of the containers, privilege containers, read-only root file system, up linux, sorry, up armors, linux, things like that. How do they look like? Here we have a minimal PSP. This is not particularly useful, we can see that the kind of resource is pod security policy, and then in the spec we are setting the minimal needed, which in this case does nothing, but we get an idea what's the minimal. How does a useful one look like? Well, here we have a useful one. Here we can see that we are setting so the containers cannot be privileged, we are dropping all linux capabilities, we are only allowing some specific volumes and so on. We can see, for example, that it's also allowing for pods of containers to be open inside of that pod, for example from port 8080 up until, sorry, port 80 up until 8080, everything, all the pods are open. Okay, we have the PSP. How does it work? How does it get applied? We just deploy this and we are done. Not really. Let's see it with this diagram. So imagine that we are Jorge, which is the user, which is on the bottom part, and we as the user want to just create a pod and we just do a Qt control run of the pod and then it gets checked by the PSP and if it's allowed it gets scheduled and if not it gets blocked. But what happens here? What's the rest of the things? Ah, PSPs need to be bound for them to apply to a specific pod, for example. And here it's happening because Jorge is trying to do Qt control run and he is doing it with a service account called WebAppSA. We can check that the admins of the system have created some service accounts, in this case the WebAppSA and have done a role binding of that WebAppSA with the WebApp role and in that WebApp role we are saying that that role can use the PSP and that's how we bind the PSPs. So we want to see how that looks in general. It would be like this. First, for example, we create the cluster role. Here in this cluster role we define the rules pod security policies use and then the list of pod security policies that can be used. This would make these PSPs apply and once we have this cluster role we create the cluster role binding and we bind it to whatever we want to bind it. For example, we can bind it to specific users, for example Jorge or we can bind it to the specific service account, the one that Jorge was using or we can bind it to all service accounts in the namespace, which is what's recommended because as we will see it allows for an easy transition out of PSPs into other things. Now we know how to set up the PSP and how to bind it. Is that enough? Not really. The PSPs have a lot of settings and some of them cause the request for the pod to be mutated and some of them don't and one needs to know them by heart. There's nothing to it. So then we get some rules which basically is, let's say that we have a PSP, you know, or two PSPs. Which one gets applied? First, the rule says that if a PSP can do the thing without mutating the request, that's the one that will get applied. Okay, perfect. That's rule number one. If we will need to mutate, that would go to the second rule, which is if a PSP will mutate, then one of the PSPs would be chosen from the list and then the thing would be mutated. Which one will get chosen? Actually, it's alphabetical in alphabetical order of the name of the PSP, which is a bit, I don't know, clunky if you ask me. But with this comes a mental model. With this rule, suddenly a mental model appears and how people have been using PSPs or how the community has been using them. This implies that we have first an application-specific PSP, which applies to the rule number one, which will not mutate the pod request. For example, let's say that you have a hand chart and in that hand chart inside you have a PSP that is targeted specifically for the pods of that hand chart and that application and so on. Since it's targeted specifically for that application, it doesn't need to mutate because it knows already how the application behaves and the application has been written in a way that it will pass without mutating mutation from the PSP and everything will be secure. The other approach is having a cluster-wide PSP, which will apply to every resource, basically, every pod. Since it's cluster-wide, it's a catch-all, basically, and then it will mutate. That's another way of approaching this problem. So either you write PSPs specific for the application in a specific manner or you write a catch-all PSP that performs mutation. That's the mental model that we have at the end. Okay, after this explaining, it has been 10 minutes or so, why are they going away? Well, you can see that it's not as simple as it looks. First, they are not namespace, which means that you have to set up an airbag as you see fit for whatever namespace, for whatever service account and so on. That means that then you need custom airbags depending on your layout of the cluster and so on, which means that they cannot be enabled by default. Either you go with the app-specific PSP or cluster-wide, but even cluster-wide, it's specific to the cluster, not so good. You have the rules about prioritization and things like that, so you don't really know which PSPs apply where. You have the indirection layers of several airbags, which cluster-roll and cluster-roll binding is making this PSP apply and so on. They are not easily composable, because the prioritization model is alphabetical and you cannot stack them easily, and also they lack modes, so they enforce. Once you have the PSP running, it's going to reject things, but you cannot have them worn or audit about things, which is a pity because then you cannot retrofit PSPs easily to a cluster that has already workloads, so you can learn from it and then evolve it. So yeah, it's a bit confusing. And it was already confusing three years ago. So for example, in 2019 now people were already thinking, what do we do? Do we fix pod security policies or not? Well, now it's 2022, we know that they decided to not fix them and move on and find better ways. We know that pod security policies are deprecated and will be removed in Kubernetes 125. So what are the other options? We have two other options. The second option is another entry policy mechanism, which is called pod security. It's more minimalist, it has less moving parts than the PSPs and it's in a way composable with the third approach. So if pod security is not enough for you, you can always go with the third approach, which is an out of three policy mechanism. Normally the entry policy mechanism comes with the cluster, the missing controller inside of the Kubernetes cluster, but you can have the missing controller outside of the Kubernetes cluster installation and just run your own. That's the third approach and that uses the web of the ecosystem and you can use that third approach to work towards standardizing in a policy framework using a policy engine. My colleague Raúl will explain it later on. So for now, let's go with the second approach, pod security policy. What are they? How do they work? Well, pod security policies are just labels in the namespace resource. So it's pretty simple. They are defined in namespace resources, they apply to namespaces. That's analogous to the recommendation for PSPs, which is great, and then they provide three standards, instead of providing all the options for setting up what would we want or not, they bundle all those options in three different standards. Privilege, baseline and restricted. Those standards can be applied in three audit modes. Enforce, allow analogous to what PSPs were doing and then audit on worm, which are new and we will see. They are done in a way that it can be enabled by default, as we will see, and it's kind of like a step back. You can use plugins and an external admission controller, but it's a step back, which is nice and it has a trade-off. Okay, so they provide three standards, the privilege, baseline and restricted. How do they look like and what do they do? Here we have them. It's pretty simple. They are like cumulative policies. We have the privilege, which allows for everything. And then if you restrict more things, you have the baseline standard, which basically allows you to deploy a minimally configured pod. So imagine the minimal pod jammel that you need to write for a pod. With baseline, you can deploy it. And then you have restricted, which just follows the current pod best harnessing, hardening best practices. That's it. Which is great because then you don't need to think. And those standards can be applied in three different ways. Enforce, audit on worm. Enforce just makes the violations to be rejected. Audit. In the violations are allowed, which is different. And then they get locked. They go to the government as audit log, and that's it. So you have a log of what violations are happening. And worm, they are also allowed the violations. But instead of going to the government as audit log, a user-facing warning is printed. So you do keep control, run or apply, and then you get a warning there. One thing to have in mind is that the enforce only applies to pods. So you have the rest of workload resources such as deployments, jobs, replica sets and so on. You try to create one of those. It will succeed. And then once the deployment creates the pod, triggers the creation of the pod, that pod will not get created, which will make the deployment in a failed state. But that's it. It's something to have in mind. Here's an example of a pod security. Pretty simple. Here we have a namespace, kind namespace, and then we add some labels to that namespace. We are in the very enforcing baseline, for example, for minimal security. And we see that we have also the enforce version. This could be set to latest, but here we have 124 and basically follows what the community knows up until the Kubernetes version 124. And we can see the new thing, which is audit and worm, which here we are setting to restricted. So basically this is enforcing baseline, but it will bark to the audit log and worm to the user about restricted. So we can start learning about what security problems do we have, which is great. And we talked about setting it as default, no? How do we set defaults for pod security? Well, we configure the audition controller. Here we have the thing. We can set defaults privilege, for example, which is the least restrictive and it's the one that comes from default. And we also have exemptions. We can exempt things such as user names, resource names, namespaces, and so on. One thing to have in mind is that this has some food guns, because, for example, most pods are created by a controller. It responds to creating a worker resource, no? And a user creates a deployment and then the pods for the deployment will be created by the reconciler of Kubernetes. So those will not be exempt. Just have that in mind. The same happens for other things. Some fields are ignored, for example, .metadata or .spec.tolerations. You cannot just try to exempt them and so on. And also don't try to exempt controller service accounts, for example, QSystem, because then everything breaks. Okay. Now we know about pod securities and PSPs. How do we migrate from one another? Well, it's pretty simple. First, we see pod securities are fit for our case, and then we try to change the things in the PSPs, no? For them to apply on namespaces and not mutate things, and then we just perform the migration. For disabling pod security policies, maybe one needs to reconfigure the cluster to take off the admission controller and so on, but yeah, that depends on per cluster. So for example, here we'll have the PSP from before, and it actually matches pretty well with the restricted standard of pod security. The only thing that doesn't match is host ports, which then we will need to remove, which means that then maybe our workload, the health chart or the application will need to be rewritten, so it doesn't depend on having ports open. But that's one thing that we should have in mind. And this is what we will end up, if we were to try to migrate from the previous PSP. It's just setting restricted as everything, and that's it. We could also set it as defaults, if we want, for the whole cluster. Okay. So as a recap, pod securities, trade-offs. We have seen they are simple, and they are all or nothing. You cannot select some specifics, which is okay. They don't allow mutation. They are only for pods and workload resources in a way, so you cannot use them for ingresses and things like that. They are not context-aware, so they don't know what's happening on the rest of the cluster. They don't provide compliance audit checks, so you cannot check, for example, for signature or annotations in things and cool things that you could do in a different way. So the upside. The upside is that it's the same on any cluster that implements them, which then means they are easy to test. They are easy to communicate with suppliers, teams, and so on. The downside of pod security is that maybe it's unrealistic to assume that your entire workload fits in the restricted policy. I mean, at the end, you are a consumer of applications of Helm charts, and some of them cannot fit into the restricted policy. So then maybe you need a different way. And for that different way, my colleague Raul, which is going to talk about admission webhooks. Thank you, Victor. So what's Victor? As I've already mentioned, there are several fields in pod security policy that are not covered by pod security standards. And if you must enforce these options, you will need to supplement the pod security admission with an admission webhook. So let's see what's an admission webhook and how you can implement it. An admission webhook is basically a HTTP callback that receives an admission request, which is a JSON object. It will perform some evaluation based on this JSON object. It will either accept the request or reject it with an error message. If it rejects the request, the object will not be created or modified or deleted. So in order to create an admission webhook, you need to provide a HTTPS webhook server that will provide an endpoint for each webhook. There are two types of webhooks. You have the validating admission webhook which will just perform validation on the request and the mutating admission webhook which in addition can mutate the request. So let's see what's happening when you try to create an object on your quantitative cluster which will hopefully help us to understand how the admission control works. So let's imagine we are the user and we want to create a pod. Let's see what's happening inside of our Kubernetes cluster. First thing that happens is the authentication authorization. Kubernetes makes sure that you're authorized to create the pod. If that's the case, then it calls all the mutating webhooks one by one with the pod we want to create. It will pass the JSON object of the pod. The mutating admission webhooks they will perform some validation. They will either accept or reject it and they will also mutate the original JSON object. After the mutation, it will perform a schema validation and after it will call all the validating admission webhooks in parallel because they cannot mutate the request. It's safe to call them in parallel. If one of the validating admission webhooks fail, it will return an error to the user and it will say you cannot create a pod for whatever reason. If all the validations are successful, then the pod will be stored in HCD and that's it. Your pod will eventually be created. If you want to implement your own admission webhooks as we said previously, you need to implement a HTTPS server and it has to be HTTPS because it does not support HTTP. You need to create a certificate and then you will need to pass the certificate authority you used for the certificate to the webhook validating object and you need to provide an endpoint for each webhook. Also, you need to create the webhook configuration object which can be either validating or mutating. That seems like a lot of work but there are open source tools that help you with this process. They are called policy engines and today we are going to talk about Q-Warding. Q-Warding is an open source project. It belongs to the CNCF sandbox and Victor and I were both working in Q-Warding at the moment. Q-Warding integrates with Kubernetes by providing a set of custom resources. These custom resources simplify the process of enforcing policies on your cluster. These are implemented as WebAssembly modules and they are distributed inside the OCI registry so you could reuse the registry you are using for your containers to distribute the policies for Q-Warding. The policies are run inside of the Q-Warding policies ever and they are run in a dedicated endpoint and they are isolated from each other. Let's see how Q-Warding works with this diagram which will help us to understand how it works. These are the custom resources that Q-Warding provides which are the policy server and the cluster admission policy. You will also have the admission policy which is basically the same as a cluster admission policy but it is a scope to a namespace. You will use a cluster admission policy for cluster resources for cluster-wide resources for all namespaces. So what's happening every time you create a policy server the Q-Warding controller is continuously watching for new policy servers or for changing in existing ones and it will be in charge of creating the HTTPS WebWare server and it will instantiate the policies inside of this policy server in a dedicated endpoint that will happen every time you create an admission policy. Q-Warding will locate this admission policy inside this policy server so I will instantiate the wasa module and then I will expose an endpoint for this wasa module for this policy. Then it will also create the WebWare configuration for this policy and that's it every time you create an object it will call the policy server which will call the wasa module and then it will perform the evaluation based on the policy you chose in the wasa module. As we previously said all the policies are stored in OCI registry so yeah they will be pulled from the policy server you can also use a normal HTTPS server if you want. So let's talk about policies you can either create your own policies or you can reuse existing policies if you go to Artifact Hub it's an application that enables you to find, install and publish packages for CNCF projects and there is a kind it's called Q-Warding policies and you can find many Q-Warding policies there. There are some policies that comes from the Q-Warding organization as you can see we have here three of them which are called PSP if you see PSP in the name that means that's a PSP replacement policy because it's a verified policy that means that it was very far that it was uploaded by Q-Warding and it's also signed with the system so you could use a co-sign to verify the policies in nature. So yeah, we said that Q-Warding uses WebAssembly for creating the policies. Why? Why WebAssembly? First thing is because security just out of the box by using WebAssembly we have a lot of security by design it cannot escape the sandbox WebAssembly modules are running in a sandbox environment and they cannot escape from there. Also there are many programming language that compares to WebAssembly so you can write policies using your favorite programming language at this moment Q-Warding supports writing policies in grass to go assembly is great swift and we recently added support for C-Sharp and we will be adding more programming language in the future so you can use your existing knowledge you don't need to learn a new language. As we also mentioned before it's distributed in OCR registries which means that you can reuse your existing infrastructure you're using for your containers. As there are WebAssembly modules they can run outside of Kubernetes you can run it in WebAssembly runtime actually Q-Warding provides a tool that's called CTL which allows you to run a policy outside of Kubernetes which is very handy for testing your policies. Ok, so let's see a policy. Let's see how a policy looks like. This is an example of the replacement for the PSP capabilities. The first thing we see here is the module this is the WebAssembly module. As we can see here that's coming from an OCR registry for the GitHub container registry in this case then we have the rules. These are the configuration for the webbook configuration object. It will basically tell Kubernetes which resources we want to watch. In this case we want to watch all the bots for the creation and update operation. Then we mark it as mutating that means that we are going to create a mutating a validating webbook which will mutate the original request. And then we have the settings field which is specifically to this policy. Settings are different for each policy. All the other options are the same for all the policies. And in this case what we are saying is again we want to allow these two capabilities CHO and KIL. That means that if we add another capability that's not in this list it will fail. And we want to add this default capability CHO. So if you create a bot without any capability it will add this CHO capability. Okay so let's see let's see how this works. Let's see how it works in the Kubernetes cluster. So I have here in my class that you were there in install. Let's first create the policy. This is the same policy we were watching before. Let's wait for it to be active. Okay it's now active. So first let's explore a bit. So let's see the mutating web book configuration that Q-word and created behind the scenes. That we went as we mentioned previously. The Q-word and controller was watching for new policies. It saw the policy we just created and it created this mutating web book. As we can see here it's labeled as Q-word and that means that it was created by the Q-word and controller. Then we have the configuration here. This is the CAA bundle configuration. This is needed for establishing a secure HTTPS connection to the Q-word and policy server but don't worry this is all created by Q-word and behind the scenes so you don't have to really do anything with this. This is the path. This is the endpoint we were saying before. When we created this policy Q-word and controller created this configuration and also it added a new endpoint in the policy server with this path and it instantiated the Watson module inside this path. Here we also have the name and then the configuration for the rules we created with the policy. Let's see in action. Let's try to create a pod with the net admin capability which as you remember it was not in the list so that's why it was rejected. As you can see we have an error message here. Now let's create a pod. This pod didn't have any capability so that's fine it was accepted but if you remember this was a mutating policy which means that it will mutate the request and we added a default capability which was the CHO so now if we explore the pod here it is. We didn't specify this capability but as we marked this policy as mutating we added a default capability it is here and this will happen to all the pod that you create. This is how a normal policy works in Q-wording. Now let's move into PSP. We were saying that PSP are deprecated, you should be moving from PSPs. We also mentioned that in Artifa Hub you can have a PSP replacement policies so how you can migrate? There is a great tool built by the app via team that helps us with this process. This tool will fetch all the information from PSPs and it will transform it into policies not just for Q-wording it also supports all the policy engines such as Kyberno or Parade Keeper. We created a wrapper based on this tool which is very easy to run and will actually fetch all the information from PSPs and transform it into Q-wording policies. There is an excellent blog post that you can find the link here written in the description below. Let's actually see it in action because very easy as you will see. Let's see how. We have this PSP. This was the same PSP example that Victor was showing before. Let's see how we can transform this into Q-wording policies. We downloaded the script we were mentioning before. We run the script that's it. It fetches all the information in your cluster of the PSP and transform it into Q-wording policies. Now once all these policies are created we can safely remove the PSPs and that's it. Just one line. Here we are actually applying the output. You could save this into a jammel file and inspect the policies if you want to your cluster. You could also maybe modify the policies if you want to enable the monitor mode because Q-wording policies by default they are restrictive which means that they will reject pods if they violate any of the policies but you can also enable in monitor mode which will not reject any object but it will lock. It will monitor. It will lock that the failure will do that for testing purposes but that's it. Very easy as you have to just one line and you can move away from PSPs. Okay, so what are the benefits of Q-wording? First thing it's simple. You don't need to write a custom web browser but handle certificates then create a dedicated endpoint for each policy you want to create that's happening behind the scenes. It will save you a lot of time. Also, you can verify any resource. It's not restricted to pod. This is a sample resource but you can actually verify any resource you want. Also, there are many existing policies in Artifah Hub. Actually, the Q-wording team created a lot of policies based on what user usually needs but you can create your own policies, UCI, user case that's not covered by existing policies and you can actually publish to all the people who can benefit from this work. Hopefully also contributes to that. As we have seen, it's very, very easy to migrate from PSPs. Just run the script and that's it. So now that they are deprecated, you can migrate to Q-wording quite easily. You can write your own policy using your favorite programming language as we said. If you're using a language that compiles to WebAssembly, you can use it for creating a Q-wording policy. Also, we created a special policy which is called Verify Container Images that will verify container signature based if they are signed using Sisto. If you're interested about Sisto, you can watch our talk enforcing a secure supply chain in Kubernetes. We talk deeper about Sisto and how you can use Sisto and Q-wording to verify your to enforce a secure supply chain on your Kubernetes cluster. Okay, so PSPs are going away. We talked about pod security admission which are provided by the Kubernetes team. They are built inside of Kubernetes. They are great. They are very, very easy to use and you should be using them if you are not. And then about Q-wording. Can you use both at the same time? Yeah, of course. That's fine. What will happen is that you label a namespace with a pod security standard label and then you have a Q-wording policy. What will happen is this pod will be created if any of these policies validate successfully. I mean, if one of them fail, it doesn't matter if it's the pod security standard label or if it's the Q-wording policy, it will be rejected. But yeah, it's fine. Absolutely you can have both running at the same time. Actually, yeah, we will see an example. Let's see an example of how you can do that. So let's create a namespace called test. And now let's label it with the enforce baseline. As Victor previously mentioned, this will create the pod security standard baseline. And it's in enforce mode which means that it will react. And now let's create another mission policy. This is the verified image signature. This is the policy we were talking about, about SISTO. It will verify SISTO images for all the images that comes from Github, the Github content registry. And for this one, it will actually verify that the signature was created inside of my Github account and for this example. So we have for this namespace, we have the label, the pod security standard label, and we have an admission policy. So now let's wait for the policy to be active. Okay, so now we have both at the same time. So let's create a pod that will violate the first one, the pod security standard baseline, which is a previous content. So let's see what happens. Yeah, so as we can see here this violates the pod security baseline, which means that this pod was not created. And now let's create a pod that will violate the keyword and verify container image policy. And as we can see here we're using the unsigned image, which was not signed by SISTO, so it was rejected by the keyword and admission control. So as we have seen, you can use safely both at the same time in the same namespace. And now if we apply a pod that will not be rejected by any of them, that's fine. It was created and that's it. So yeah, you can use both safely by using keyword and pod security admission. So yeah, that's all we wanted to talk about today. If you want to write in both please reach out to us in Slack or in GitHub. Feel free to create an issue or contribution are always helpful and that's all. Thank you for listening and I hope you enjoy our talk.


Now Chris Holder can only watch on here as we look towards heat number 20 when the semi-final line-up will be decided, riding well eight points but could do with another one. I mean it's a good enough struggle so far tonight, everybody's been looking forward to seeing this guy steady so far but needs points here. So an important heat number 20 not just for these four riders on track but for riders in the pits watching on including the raining chap waiting for the green light from Greg Akroyd the referee. Hancock moved to the start there, a very nervous NG start in 20 and that's allowed Saifud enough to get the jump on Hancock and the Russian Hansel in here, it's going to be too little too late, seven won't be enough to get into the semi-finals and Hancock's under pressure from Darcy Moore. Already up so Darcy Moore can squeeze up against the fence, just about gets himself in the second place. Saifud are all about in front, Hancock having the battle, oh so hard after that mistake on the start line. We had to wait for a while but proper end.


Everybody forced here ripping Some packs and three boxes for a to s or out of yes Sorry for net versus your name correctly. It's a gold pack a lot of five from the 2022 national gold pack a lot of five and Three pro-set sockers. He's been a lot of fun Good luck A Out of yes out of yes Let's gold packs or pro-set first. Let's do the gold packs of the gold packs first All right, Alan Iverson the answer followed by a Dylan Carlson a rookie looks like a Velocity maybe a laser not numbered on that one Lamar Jackson you got a cracked ice behind it.  Let's see a nice parallel here Zion Williamson with a pink disco or pink circles here Bryce Harper Makes his return tomorrow that is 250 on the brace all together. I'm not sure The gold pack lot of five is 380 the pro-set sockers. I think are 100 apiece Let's do the pro sets now or eight or addy good luck three pro-set soccer boxes by leaf Gonna start with a Jordy Alba number four of 25 on the auto nice Jordy Alba I told you all he was in here.  All right, man, dude that that pale is nasty Stuff here. All right last one. Oh, that's pretty nice young American Caden Clark three of 50 Caden Clark could be a good one y'all and Jao Felix non-numbered Jao Felix Magda paylay, I will will do sniff will do Thanks again, I will get those right out to congrats on the paylay


Thank you so much. Good evening. I am here to formally welcome you. My name is Anurag Bhatia. I'm part of the USAID media group in the business world group. I'm particularly happy that we've been joined by our chief guest. She is my history. He's a member of Parliament. He's a spiritualist. He's a person who brings positive influence to people's lives. He happens to be a volunteer leader. That's how I'd like to introduce you. Please acknowledge his presence with us. Another round of applause. He's a very... He was one of the people in the Parliament himself. He grew into being a politician to service, to help, to the community. And really that's the kind of role model we want to associate with. And I'm happy that he has accepted our request to be here and really encouraged him. Which top 50 awards have been around for seven years? It has grown year on year. This year's Juhi, as you've seen, is a very eclectic, very high-powered Juhi. I've told that Juhi gave us some specific feedback in terms of data points, so we're going to include that. But I must also mention that it's difficult to get some data points. For example, in our agency awards, we ask for us certain disclosures and data points in some kind of companies are not able to share them for various reasons. But we as exchange for media will make sure that we put our research resources, our editorial resources to be able to get, if not all of those data points, some of those data points which can help you to save money for the Juhi. Having said that, the reason we have the kind of Juhi we have had for this award is because they're knowledgeable about the domain. They understand the domain and they can make informed choices with the data they have. So really, I want to make that point because the Juhi is the most important part of the awards. Juhi is the reason why we all are here. Juhi is the reason we select the right award winner. So we'll see tonight's winners have been selected. Some of the Juhi members are included. So I thank the Juhi members for spending so much time in due diligence in coming up in the minute. There's no more standing in between you and me. I welcome Mr. Mahesh Kireeji again. I'm sure Subharnay is going to invite a formal address which I'm sure he'll do in either English or Hindi. I'm sure he'll do in English or Hindi. I'm sure he'll do in Hindi. I'm sure he'll do in Hindi. I'm sure he'll do in Hindi. I'm sure he'll do in Hindi. I'm sure he'll do in Hindi. I'm sure he'll do in Hindi or Hindi. I'm sure he'll do in Hindi or Hindi. When I spoke to him, he said, I can speak in English as well as in Hindi. But my natural language and some reason I don't speak English. So my mother is from Hindi. She's from Hindi. I speak English well. But you don't have to worry. Subharnay is a very important award winner. She was talking to me two months ago. I was reminded about Arvind Kejriwal's show. I think that's more interesting for some of her. But that's just the truth. I'm sure every political leader is trying to make a difference. And I'm sure all of you are with paid in-bred. Over to the elections in Bajjahab. I'm sure it will throw up some winners and some losers. Let's see what happens. Tonight we'll celebrate Peshtaf. Thank you to the jury members. Please give the jury members a big round of applause.


American Horror Story is slowing down production amid the writer strike, however, filming on season 12 is still pushing forward for better or for worse, and I've got all of the updates you need to know about the upcoming American Horror Story delicate. Before we start, I just want to remind y'all to hit that subscribe button for the latest horror content from me. A significant portion of my views recently have been from people who have yet to subscribe, so I thought I'd try a little call to action. This summer I have multiple videos planned for each month, plus the latest AHS news in my community tab, so subscribe so you don't miss any of that. Now back to the news. If you've tuned in to my last two news reports on this season, you know that the confirmed cast members for season 12 are Emma Roberts, Kim Kardashian, Mikayla J. Rodriguez, Matt Zucre, Cara Delevingne, and Annabelle Dexter-Jones. Speaking of Emma and Kim K, the pair have recently been spotted filming scenes together in New York City on a high-rise balcony. Kim has also been photographed holding one of the season's scripts for episode 3, which confirms that the episode will be entitled Win the Bow Breaks, and it is written by the season's sole writer Hallie Pfeiffer, and will be directed by Jennifer Lynch, a frequent AHS director of the most recent five seasons. My favorite episode of the ones that Jennifer Lynch has directed would have to be True Killers from AHS 1984. But back to the cast, we also got confirmation that MJ Rodriguez has been gearing up to film scenes for her role in the season as she has been in costume fittings for her AHS debut. While these confirmed cast members are still the only ones we know for certain will take part in American Horror Story Delicate, there have been a lot of casting rumors that have been swirling since my last video. So let's talk about them from most likely to least likely. First up in the rumor mill is Billie Lord who has been listed as a part of the cast on Production Weekly. We've been talking about Production Weekly a lot in these news reports lately, like I keep saying I do trust them, so I am considering her to likely be a part of the ensemble this season. The only thing I'm waiting on to bump her up to confirmed would be an article from a trade like Deadline or The Hollywood Reporter, or if she gets spotted on set at some point. I'm a Billie fan and I think her inclusion in this season would be great. Not only is she on a streak of five American Horror Story seasons in a row, but how could you deny us another season of television with this duo? Like I said, Production Weekly hasn't done us wrong yet, but for now let's just wait and see. Next up, let's talk Dennis O'Hare. In the last video I said we should keep an eye on him because he had to pull out of a horror convention due to filming obligations. With his recent history with American Horror Story, it could easily be for a role in Delicate, or maybe even the upcoming third season of American Horror Stories, which is also currently in production. But it also very well could be a completely separate project, so this one's just speculation at this point, so let's just wait and see. Next, Leslie Grossman has been rumored to be involved in American Horror Story Delicate after sharing social media posts in New York City. With her five season streak, I would not be shocked if she made it a six season streak and joined American Horror Story Delicate, but for now all we know is that this woman just went on a trip or she could be there on separate business. We just need more confirmation to nail her down to this season. I'd love to see another Leslie role. I thought even though her role last season wasn't the biggest, it definitely was one of her most compelling emotionally, along with her iconic run as Margaret Booth in 1984. Again, we'll just have to wait and see if Leslie turns up in any paparazzi photos or press releases. Odessa Azion, who had been rumored to be a part of this season by fan accounts with no disclosed source, is still just that, rumored. In my last video I stated how MJ Rodriguez sharing this fan edit including Odessa was basically confirming her involvement and I think I got a little too excited because for one, MJ had not begun filming at that point and maybe just took that fan's word for it after seeing a majority of the already confirmed cast in that edit. Just because the initial source of this casting is so flimsy being a fan account not disclosing their source and with the timing of MJ Rodriguez's post, I can't say with confidence that Odessa will be in the season, but it's in the universe so who knows, we'll just have to wait and see with this one as well. Lastly let's talk Demi Moore, who I am classifying as unlikely being involved with American Horror Story Delicate despite how much it would elevate the cast. Rumors went wild recently after AHS fan accounts began spreading a photo of the actress posing in a mysterious photo shoot which some claim to be for American Horror Story. Only now fan accounts claim production sources have said that the shoot was not for American Horror Story. Listen, I haven't seen any of those sources first hand but to me this whole thing seems to be a miscommunication either intentionally orchestrated to fool fans or this promo campaign is actually for a production close to American Horror Story or Ryan Murphy and fans may be jumped to conclusions a little bit. I am definitely leaning towards the latter, I don't think this was intentionally put out there to mislead American Horror Story fans, I think it's a miscommunication because Demi Moore has already filmed season 2 of Ryan Murphy's Feud anthology series which this time will be centered around New York City's socialites in the 60s. Perhaps they're just now getting around to shooting the promotional campaign for that season or even maybe working with a similar or the same promotional team that is currently working on either American Horror Story or American Horror Stories. To me that seems to probably be what's going on here and it's just a miscommunication and as much as I'd like Demi Moore to be a part of this season I do not think that she will be unfortunately. Alright now with all of the casting news and rumors out of the way let's talk a little bit more about how the writer strike is affecting the production and release of American Horror Story delicate. Season has slowed down recently with the end date for filming being pushed from the original August end date to now October and FX has also revealed their entire summer broadcast lineup with no sign of American Horror Story despite previously having announced that the season would come out in the summer. So it seems like these production delays might have pushed the release date back a little but like I said before what the writer's guild is striking for is a worthwhile cause. Writers deserve a living wage royalties and residuals should be consistent between broadcast and streaming shows and writer's room should have numerous contributing voices. All of these things just lead to screenwriting being a viable career path for writers as it has been in the past and is no longer. This is exactly what the writer's guild of America is striking for along with so many other issues that not only would help current writers be able to maintain a living wage but it also promotes a healthier environment where more writers are given more opportunities in the industry and in the long run it would make the television and films that you and I both enjoy that much better. Now Disney and American Horror Story have been going above and beyond to squash any union solidarity and keep their productions rolling throughout this. Disney the parent company of FX sent out a pointed email to its writers, producers and showrunners stating that they are obligated to work on non-writing duties while still encouraging writers to resign from the WGA and continue writing. The email also makes it clear that Disney will replace anyone who does disrupt productions by striking alongside the writer's guild, aside from writers because they are protected by the union. The language in this email is very careful yet clear, it's a writer's choice if they want to write during the writer's strike but producers, showrunners and directors must perform their duties or risk being fired if they show solidarity. While the email states that showrunners must only continue work on non-writing duties, to them that includes script revision which would be violating the strike rules based on my understanding. Disney is not the only studio to have sent out emails like this as it appears that every studio aside from Netflix and Universal according to Deadline have sent out similar emails. Sure, members of other guilds may be barred from striking in solidarity with the writers but surely when you're actively encouraging your employees to resign from the guild and continue writing and producers and directors are being threatened with termination for any acts of solidarity, to me it's just a very expectedly tone-deaf response from executives to a conflict that could easily be resolved in everyone's favor but instead is being drawn out even longer by these studios, doing the most to make sure the strike doesn't interrupt their bags. In another shady move by Disney Productions, including American Horror Story Delicate, it has been alleged that the productions of AHS Delicate and the upcoming Daredevil reboot series both under the umbrella of Disney have been sending out fake call sheets to its crew members and then personally calling those crew members individually with an earlier call time in hopes that picketers would believe the physical call sheets and show up picketing long after the actual cast and crew were called in to show up. This alleged information comes from Deadline's podcast strike talk and yeah, it's shady as hell and it's clear that Disney and other major studios are entities that are prioritizing their profits over the livelihoods of their employees. This is nothing new but it is why the writer's guild is striking. With their alleged fake call sheets and union-busting parent company, American Horror Story Delicate is still filming in New York City as we speak under the codenames of Hamptons and Thriller. Like I mentioned before, Jennifer Lynch will be directing an episode of the season and Max Winkler, director of an episode of Double Feature and an episode of NYC, is also reportedly returning to direct an episode for Delicate as well. Another rumored director for Delicate is Jessica Yu, who has directed episodes of Ratched, Hollywood, and 13 Reasons Why. But there you have it, there's everything we know about the upcoming 12th season of American Horror Story entitled Delicate. Because of everything becoming even more shrouded in secrecy with the writer's strike, the news coming from set has been significantly slower than in the couple of weeks that the season was in production before the strike. But nonetheless, give this video a like if you liked it and I will see you next time with more horror content and AHS news.


Joe, could we do a question about transforming a physics problem into a math problem? Sure, it's... Do you have one in mind? Physics can go down so many directions and a lot of physics problems are We're working with known equations, models, right? So we sort of have to take into account what is known What we know about a certain situation, right? So, like for example force equals F equals ma, right? So Force is equal to mass times acceleration. One of the most simpler simplest things, right? Newton's second law The second law, right? So that's a formula that we know. Force of an object is equal to mass times It's acceleration. So if you want to find out question would be What's the force of an object? Find force of an object with mass of 15 kilograms Accelerating G at 50 meters per second, right? Then F equals ma would just be all the force of an object is equal to mass times Acceleration and this is going to be What is it 75 and the units? This is mass is going to be the units is kilograms times meters per second That's what we got the killer kilograms Is the mass and meters per second is the meters per second squared is the acceleration and This unit is called Newton's The force of that object is 75 Newton's right? so As for the derivation of this formula Oh my I can't remember the derivation of the formula. I'm pretty sure I've looked at it, but I can't remember it so Here's the problem A ball is shot into the air. This kinematics a ball is shot into the air From the edge of a building 50 feet above the ground Its initial velocity is 20 feet per second The equation is oh when they give you the equations the easiest stuff and the question asks how long until the ball hits the ground Let's do this Physics question when you're given the equation Should be the easiest physics questions that you ever do So here's here's the formula that they've given you the equation is this And that's going to be distance. I believe right so the distance D is a D D is equal to negative 16 T squared plus 20 T plus 50 is a D It's initial velocity is 20 feet per second So something's wrong. We need that So ball is shot into the air from the edge of the building 50 feet above the ground. So here's a building Into the air. I'm assuming it's being shot like this I pulled the ground to velocity of 20 feet per second 20 feet per second The equation is that and the equation asks how long until the ball hits the ground To answer the question you simply need to solve the quadratic equation But how do we actually drive the formula from the word problem in the first the formula from the word problem is Driven like the quadratic formula this thing that you're talking about. This is the quadratic formula of the simplest The basic quadratic formula of this from mathematics, right? Now these quadratic formulas The that model projectiles a lot of it occurs through observation Right, so what they do if you've ever sat in a lab In a physics lab what they'll do is they'll Do projectiles and they have some kind of sometimes flash Some kind of light system that flashes and in the background they'll have some kind of sheet with where it Embeds the projectile, right? So once you do that then what you can do if you model this stuff You can throw this on a cartesian coordinate system, right? Let's assume you say, oh, okay. You don't want to to make this simple. I'm going to put my x and y axes here Right, so I'm going to make the peak of the thing my Origin for the cartesian coordinate system and then you can take points from here x and y Take points from here x and y x and y, you know x and y and Do some algebra to come up with equations for these functions, right? Because from the motion you would say, oh, this is obviously parabola, right? If this is a parabola then General formula for a parabola is a x minus p squared plus q. That's the vertex form of parabola And if the origin is zero zero So bad Also, hi. Sorry. Hi. Hi judah. How are you doing then p and q would be zero So f of x would equal a x right a x squared And then what you can do you have to calculate your a value Well, if you want to calculate your a value all you got to do is take one of these points plug them in Get your a value and then your function for this thing would be oops Whatever the a value is the number x so you get that back and that's your formula and all that jazz right A lot of it is through modeling a lot of it is through modeling And there are some that are derived, right 100 percent from other Formulas that we have that we bring in together and say oh, this is this is this is this is this is this is Here's a new formula Here's a new formula Gang do not forget. What is this called? This is called projectiles, right first time chat Smuggy nine. I think we don't need formula for such questions um formulas come in handy and These formulas if they give them to you in the question and physics Really easiest questions you can do Easiest questions you do And gang do not forget do not forget. Thank you. Other god free a song free a song free a song Julian songs is a publisher and journalist that has been crucified for trying to bring transparency and accountability of capitalist power to humanity For more information see wikileaks.org defend dot wikileaks.org or our Julian songs on wikileaks playlist on


It's a pleasure to be again speaking to you and especially on the topic of Archbishop Fulton Sheen, you know, not only the bishop who ordained me, but also to working with his cause now. I really think he would be an enormous blessing to the church for his canonization, beatification and canonization. And we are really not that far from the beatification. We're only three steps away. Problem is we're like a ship out at sea with the motor off, we're not moving anywhere. So once we get past this, our little obstacle about the body, I think the beatification will come immediately. You know, we have that case of a little boy who was stillborn and he had no life signs. He had triple zero, no brain waves, no heartbeat, no breathing. And he was examined four different times and they, after 61 minutes, without any life signs, they were actually signing his death certificate and the little boy started to breathe. And the mother, all through it all, she kept invoking Fulton Sheen, Fulton Sheen. So it's already been presented to Rome, that case. And they, the medical team in Rome studied it. And all seven members of the medical team said there is no known natural or human explanation for how this little child began to breathe. So that clears the way to a miracle. The theologians, seven of them who studied the case, said it was clear that the only one invoked in this situation was Archbishop Fulton Sheen. So they said he would be the one responsible for this miracle or whatever, you know, for this intercession. And that's where it stopped because the next step is to examine the body. And right now there's a difference over the body, you know, between New York and Peoria. So that hopefully, please pray that we can break through that impasse. I really believe that Bishop Sheen would be a great, great saint in America. You know, he wrote a, he wrote an editorial. He wrote for two different newspapers. He wrote editorials. He wrote for one, one newspaper for 15 years and another one for seven years. And one of his editorials was American Needs a Saint, by which he meant a homegrown American saint. Because I think at the time he wrote that, I think the only saint we had in America was Mother Cabrini. And she was a naturalized citizen. So he said we need a homegrown American saint, somebody from the hot land of America. And he was proposing Bishop Ford of Merinola was martyred in China. Bishop Ford was from Brooklyn. I never thought of Brooklyn as the hot land of America. A wonderful place, but not exactly the hot land of America when you think of that. But he proposed him. And I said, you know, I think maybe the saint we need now is Archbishop Fulton Sheen. If we could begin with a little prayer to the Holy Spirit to our lady, okay, the name of the father and of the son of the Holy Spirit. Come Holy Spirit, fill the hearts of your faithful, and in kindle in them the fire of your love. Send forth your spirit and they shall be created. Shall we move? Let us pray. O God who did instruct the hearts of the faithful by the light of the Holy Spirit. Grant us by this same spirit to be truly wise, endeavor to rejoice in his consolation through Christ our Lord.  The Lord is with thee. And blessed art thou among women, and blessed is the fruit of thy womb Jesus. Holy Mary, Mother of God, pray for us sinners. Now and at the hour of our death, amen. Sorrowful and immaculate heart of Mary for us, Saint Joseph, and servant of God, Archbishop Sheen. The name of the father and of the son of the Holy Spirit. Fathers, I don't know if there's any sisters here, women, okay, but I want to greet you with the greeting of St. Francis. May the Lord give you his peace. You know, whenever Bishop Sheen gave talks, many times he would begin with a little story or two, so I'd like to share one little story that he told when one time he was traveling by train down to Philadelphia, and when he got to the station there, he didn't know where the city hall was. He had to go there to give a talk. And there was a young boy there, a little boy at the station, and he said to him, son, where is the city hall here, you know, in Philadelphia? And the little boy didn't know Bishop Sheen was, and he began to give him direction. Well, you have to go down this street about three blocks, but then you have to turn right and go left, and then he finally said to Bishop Sheen, I think I better take you there so you don't get lost. So as they're going along, you know, the little boy got curious, and he said to Bishop Sheen, he said, what are you going to do at the city hall? And the bishop said, I'm going to talk to a group of people. And the little boy said to him, well, what are you going to tell them? And he said, I'm going to tell them how to get to heaven. And the little boy looked up at him and he said, you can't do that. You couldn't even get to the city hall. You know, he also told a story where one time he was at St. Patrick's Cathedral. This was St. Patrick's Cathedral when he was on radio on Senior Sheen. He was standing in the back of St. Patrick's, and this man came up to him and saw the Roman collar, didn't know who he was. And he said to him, Father, Father, can I go to confession? You know, I'm very angry. You know, that Monsignor Sheen on one of his programs, he said something that upset two of my Protestant friends, and I'm really angry at him. And I think I've got to go to confession. And Sheen said to him, look, look, I know you're upset. Look, you don't have any meanness in your heart, no revenge or anything. You're upset.  He said, so he told the guy, you don't have to go to confession. You can wait till your next regular time for confession. And as he was leaving, the guy said to him, you know, if only there were more priests in the church like you. So you say you never know what he was going to run into. You know, let me go through a little bit of his life so you have a little bit of idea about him, and then we'll go on to his love of the priesthood. He was born in El Paso, Illinois on May 8th, 1895. And he was the oldest of four brothers. Three of them came right in a row there. His father was Newton Sheen. His mother was Delia Fulton. Now, when he was baptized, he was baptized Peter John Sheen. But what happened with that name, Fulton, is that he was a colic child, and so he cried an awful lot. In fact, one neighbor said that child never stops crying. So the maternal grandparents, the Fultons, would come and help their daughter, and they would take him, stroll him little Fulton around the town, and people kept saying, that's Fulton's kid, Fulton's kid. And he liked the name. And when his grandfather took him to the cathedral school to sign up, you know, for school there, the nun asked, what's his name? And he said, his name is Fulton. And years later, somebody said to him, you know, there's no Saint Fulton, he said, not yet. And so that name stuck with him, Fulton Jay Sheen. And the day he was baptized, his mother placed him on the altar of the Blessed Mother and dedicated him to our Lady. And he said, all through my life, I felt the influence of that dedication pulling me toward our Blessed Lady. He went to the parish school there. One thing happened when he was about eight years old, he was serving mass there at the school Bishop Spaulding, I'm sorry, he was serving at the cathedral. Bishop Spaulding was the celebrant, and he dropped the crewit, one of the crewits, and it shattered. And he used to say in his talks, nothing sounds as loud as a crewit, shattering on a marble floor in a cathedral in the presence of a bishop. And after the mass was over, the bishop called him over, and told him he was going to get a scolding. And the bishop said to him, son, where are you going to go to school when you're older? And it was already a high school named after Bishop Spaulding, it was the Spaulding Institute. So he said, I'm going to go to the Spaulding Institute.  And the bishop said, no, I don't mean that. He said, you go home and you tell your parents that someday you will go to the University of Louvain in Belgium as I did, and you will be a bishop as I am. He was eight years old when the bishop told him that. So he went to that school, you know, the Spaulding, the grammar school, St. Mary's Cathedral Grammar School, then the Spaulding Institute, and which was staffed by the brothers of Mary at the time. He then attended St. Viadier College in Bourbonay, Illinois. And there's two very important things that happened. He was on the debate team, and it was the night before Little St. Viadier College was going to debate the University of Notre Dame.  And the father, Begin, who was the head of the debate team, he called young Fulton over, and he said to him, Fulton, you are one of the worst students I've ever had for public speaking. You have absolutely no natural talent as a speaker. You listen to his talks and you say, how could you possibly say that? So he said, I want you to give the talk you're going to give tomorrow in the debate. So he went through the talk, and Father Begin said, all right, do it again. Do it again, five times. And finally he said to young Fulton, do you know what you're doing wrong? He said, I think I'm not being myself. He said, that's exactly right. Well, the next day for the first time ever, and maybe the last time ever, Little St. Viadier College defeated the University of Notre Dame in the debate. And he never forgot that. At the end of his college experience, he entered a national scholarship, a scholarship contest, and he was a national winner. Now, we're talking 1915. He won a scholarship worth about $15,000. I wonder how much that would be worth today, maybe $150,000. I don't know. It entitled him to go three years of postgraduate work in room and board being paid for. So he runs to see Father Begin with the scholarship that he had just won. I said, Father, look, I won that scholarship. And Father Begin challenged him. And when he referred to this incident, he said, there were events in your life that will change you. And this was one of them. He said, Father Begin said to him, Fulton, rip that up. But Father, I can go to any university I want, get a doctorate in any degree I want, and Father Begin said, but Fulton, you know you have a vocation to the priesthood. He said, but Father, I can go get this doctorate first, then I can go to the seminary. And Father Begin said to him, Fulton, you don't put off the call of Christ. You know what he did? He ripped up $15,000 like that. And he never turned back. And he went up to St. Paul's seminary up in Minnesota, and he was ordained on September 20, 1919, in that cathedral where he dropped the crew at. And the bishop told him that he would be a bishop someday. After he renewed his desire to offer Mass every Saturday when the liturgy permitted it in honor of the Blessed Mother because of his great love of our Lady. In the seminary, I have to mention this, this is very important. He began a practice of the Eucharistic Holy Hour. Did I mention? I don't think I mentioned that in my talk to you yesterday, did I? The Eucharistic Holy Hour? Okay, I was at a seminary as I mentioned. See, what happened? He got, he heard of an incident that happened in China. It was a little girl about 12 years and she was in the church when the boxers took control of the town and they broke open into the church. They broke open the tabernacle and the priest was put under house arrest. There was always a soldier guarding the priest and they forced open the tabernacle and took all the hosts and consecrated hosts and threw the body of Christ all over the sanctuary. Now that little girl saw this. Now whether the soldier saw her or they didn't mind that she saw this, that little girl was so affected. Now the priest knew he had 32 hosts in the tabernacle. For 32 nights, that little girl came back to the church, climbed in a window on the opposite side of the church from where the priest was. And she would pray in adoration to the bus of sacrament and then on her hands and knees every night she would lick up another host. She wouldn't take the host in her fingers. Those days the laity did not touch the Eucharist like that. So she licked up a host every night. The last night the priest eventually began to see her coming and going and he saw her that night and as and he realized it was the 32nd night. As he saw the little girl leaving the church she made noise and she woke the guard up. The guard, the little girl panicked and she started to run and the guard ran after her.  Now the priest saw that and relayed that story. And young Fulton Sheen, it was in second year theology when he heard that, he and a couple of his classmates said that if that little girl could have so much courage that for 32 nights she risked her life for Jesus in the Eucharist, I can spend one hour of every day of my life making a holy hour before the bus of sacrament. And so that's where the inspiration of his holy hour came from. That little girl who was heroic in her love for Christ in the Eucharist. We don't even know, to my knowledge, don't know her name, but certainly heroic. And so he kept that, he kept that faithfully all next for 62 years. You know, no matter whether he was traveling, I remember I heard from one of the missionaries, he was a priest who belonged to a missionary order and he told me that some of his men were in a mission in Africa. And the bishop arrived, there were 2.30 in the morning. And he didn't ask for a meal, he didn't ask for a bed, he asked where is the blessed sacrament, he wanted to make his holy hour. And so he made his holy hour faithfully and sometimes it was difficult. One time he was traveling by train, he arrived in this certain place and he had 3 hours to get another train out. And he found the church and he went in, I guess he was so exhausted and tired that he fell asleep for the whole hour. And when he woke up, he said, Lord, did that holy hour count? And he seemed to think how Lord said to him, well that's the way the apostles made the first one. Sometimes he would actually have to stand right in front of the church looking through the crack in the door at the tabernacle so he could make his holy hour that way. Sometimes he got locked in the church, the sexton let him in and forgot he was in there and locked up the church, he had to climb one time out through the confessional, over the, you know, climb up to the top of the confessional out the window, another time through a cold bin. So, but he was faithful. And he called it the hour of power. And he said he did that for perseverance in his call and fidelity and I'm sure was the source of many of the graces of his priesthood. After ordination, his bishop would wanted to send him to Catholic University. The bishop there was a founder, one of the co-founders of Catholic University. And so he was sent there to get his doctorate. He wanted to study the theology of St. Thomas to deal with the problems of modern time. Okay. And he went there for two years. And after two years, he was really disappointed in the quality of the teaching about St. Thomas. And he asked around, where can I get the best teaching on St. Thomas? And they said, you have to go to Levine in Europe. So, to Levine he went.  And they were so impressed. So, he got his doctorate there, his first one. He seems he got another one in the following year, which he probably got at the Angelicum in Rome. But he was so impressed them that they invited him to study for a super doctorate called the Agriget Degree. And no American had ever received that before. And so he had to study for about two years for that. They brought professors in maybe as many as 200 professors would attend this. It was an all day oral exam. And they would grill them. And he was grilled.  If you get a knock on the door, it's a good sign because it means you passed and they have a meal to celebrate. Okay. If you didn't get a knock on the door, you know, you knew where McDonald's was. Okay. So anyway, you could tell how well you did by what they served as a drink at the dinner. If you just passed, you got water. If you did a little bit better, they served beer. If you did very well, you got wine. And if you did exceptionally well, you got champagne. Well, he had buckets and buckets of champagne. That's how well he did. So he certainly was a very learned man. In fact, his reputation, you know, was quite impressive. His friend, Father Ronald Knox at Oxford invited him to come over to Oxford to, you know, teach there with Ronald Knox. He also got an invitation, believe it or not, from Columbia University in New York to open a chair of studies on St. Thomas Aquinas. So he calls his bishop back in, contacts him back in Peoria. He said, I've got these two offers. Which one should I take? Well, some of the people in the diocese were feeding the bishop with the idea, you know, he's had such success because he also won the International Prize for Philosophy, the Cardinal Mercier International Prize. First American to win that, you know. He said, he's not going to listen to anything. He's never going to listen to you again. He's going to have a big head. So the bishop said, don't take either one of them, come back to Peoria. So he goes back to Peoria and the bishop assigns him to an inner city parish, where there were four people going to Mass during the week. He went and visited every single home in that parish. By the time he left, nine months later, there were 90 people coming to Mass every day. And the other pastors were getting furious, you know, jealousy and everything. Don't go down there to listen to that young priest. That's not your parish. And they came and drove. So finally the bishop called him in. He said, well, I promised you that you could teach at Catholic University. So he sent them off in 1926. Now, there's one other little incident I want to mention because it's very, very insightful and interesting. He, during the summers, for about seven different summers, he would go to England and he would prepare his notes for the next year. And he went to a place called St. Patrick's in Soho Square in London. Soho Square at that time was like the old Times Square in New York. It was a seamy place. And, you know, so he was on duty this one day and the doorbell rang. And he goes to answer the door and there's a woman there and she collapses, you know. He reaches down to pick her up and she sees his Roman collar. Oh, she says, oh, thank you, father.  She said, yes, I am. He said, who are you? And she pointed to a marquee across the square and said, you see that theater, the marquee there, that name? I'm the leading lady in that play. Well, what happened was the lady had had three boyfriends and they were all finding out about each other. So, of course, where do you go? You go to the local rectory to talk to father to help you get out of the hot water, right? So she came to see a priest. But in order to do that, she drank quite a bit. So she wasn't making any sense. And he said to her, would you come back when you're feeling better? She said, I will, but on one condition. He said, what's that? Yet you promised me you will not ask me to go to confession. All right, I promise you, I will not ask you to go to confession. As she was leaving, she got him to promise a second time. You promise me, you will not ask me to go to confession, I promised you I will not ask you to go to confession. And finally, when she came back later feeling much better. She said, and I remember, will you promise again you will not ask me to go to confess you, I promise you I will not ask you to go to confession." Well, he talked to her for a while. She felt much better. And she was ready to leave. He said, you know, have you ever seen the inside of our church? We have a very beautiful church next door here. Can I show you some of the artwork in the church? So they're walking down the aisle and he's pointing out, you know, artwork on the ceiling and the walls of the church and the stained glass and all that. When we got, when he got by the confessional, he pushed her right in. See, he kept his promise. He didn't ask her to go. The woman made a confession of her whole life and ended up becoming one of those Benedictine cloistered nuns at Tyburn, which is just a short ways away from there, where the martyrs, the English martyrs were killed at Tyburn. There's a perpetual alteration of the Tyburn Benedictines. She was a nun for 40 years, so it wasn't a flukey kind of conversion. It was the real thing. When he came back, he went to teach at Catholic University from 1926 to 1950. So he was there for 24 years. And in 1930, the bishops in the United States or the Catholic men, the National Conference of Catholic Men, wanted to have a national radio program. And they wanted Fulton Sheen to be the host of that program. See, he had begun, when he was teaching at Catholic University in Washington, D.C., on weekends, he would go up to New York, he would go down to, you know, other places, Philadelphia, and so on. And he would begin to preach. He preached at St. Paul's Church on 59th Street in New York. And the crowds would come. And he would be, some of his talks were broadcast locally. So he had a reputation as a speaker. So the Catholic men asked him to come. It was at six o'clock on a Sunday afternoon, and he was on for half an hour. It was called the Catholic Hour, but it was a half-hour program. And they estimate that by the time he stepped down in 1950, he had a listening audience of about four to five million people on a Sunday evening. Okay? So he became a national voice. And then what happened was, he got transferred from Washington, from his assignment at Catholic University, up to New York, to become the national director of the propagation of the faith. He used to say, the missions of the church were always my first love. So he went there, and his work, his great work, was to raise funds for the missions and send money out all over, you know. I met a man who told me that he knew these Baptists, they were in the South, they were African-Americans, and they were being persecuted by the Klan. They wanted to build a church, and so they wrote to him, could you help us build a church? And they told him of their situation, and he sent them $5,000 to build a church. And the man who told me the story, he said, you know, they love your man, he said to me, that's the way he put it. They love your man because of what he did for them. By the way, he had a great love for the poor. He had a great love for minorities and, you know, the rights of people. And, you know, so he was very, very keen on that, very keen. So he went up to New York, and through the good graces at the time of Cardinal Spelman, he was consecrated a bishop in Rome at the American church there, the church of St. John and Paul. On June 11, 1951, Cardinal Piazza was the one who consecrated him along with two other bishops. Now when he came back in 1951, the Dumont Network, which later on I think became ABC, the Dumont Network wanted to have a religious program. So at that time, all the major networks had to have a half-hour religious programming. So they decided to get Fulton Sheen, all right, he had just become a new bishop. So they put him on television, that was his program, you know, the life is worth living. And he was on for half an hour. Now they deliberately put him opposite Milton Burl. Milton Burl was Mr. Television. Milton Burl was on Tuesday night from 8 to 9. They put Bishop Sheen on Tuesday night from 8 to 8.30. They figured nobody's going to listen to it anyway, okay, that was their thinking. Within six months, most of the people, the viewers who were watching Milton Burl were watching Bishop Sheen from 8 to 8.30. Then at 8.30, they turned back to Milton Burl. In fact, Milton Burl said, and remember, he was Jewish. He said, if I had to lose a good part of my viewing audience to anybody, I couldn't think of anybody better to lose it to than to the man Bishop Sheen represents, who's Jesus. So that was a comment. Remember, the secular press began to talk about Uncle Fulti, Uncle Milti and Uncle Fulti, what do you call it? And you know, it's amazing with something that could really be a source of great jealousy and, you know, just envy. There was no bitterness between them. It's interesting. So anyway, he was on, and in that first full year on television, 1952, he won an Emmy as the most outstanding personality on television. He, in the, in the voting, he, he outscored Lucille Ball, Jimmy Duranty, Edward R. Morrill. So you could tell he was popular, most outstanding personality on television. And when he went to get his Emmy, you know how everybody, they thank their producers, directors, he says, I want to thank my writers, Matthew, Mark, Luke and John. So, so, so he had won this great Emmy. And he had between 25 and 30 million people watching him on a Tuesday night. I told that to an assistant producer for ABC. No, CBS. He was stunned. And you know, of the religious groups in the United States, the major ones, Catholics, Protestants and Jewish, the highest percentage that watched him was Jewish. The second highest is Protestant. Third was Catholics. Maybe the Catholics, I had enough of that on Sunday, but whatever. But he was greatly, greatly, you know, honored and, you know, they, they really admired him. In fact, when that producer said, had you account for that, I said, well, he told him the truth. And they, they trusted him for that. And they, they were very grateful. So he was on television then from 1951 to 1956. Okay. In 1956, he basically was removed from television. He would never talk about it.  He had received as the head of the propagation of the faith, he had received a million dollar donation from the US government to buy powder milk for children in the poor countries of the world. They figured through the propagation of the faith, they could get this powder milk out to children all over the world. Well, Spellman said to Sheen that you received that as an auxiliary bishop of New York. So I have a right to tax that money. And Sheen said, no, I didn't receive it as an auxiliary bishop of New York. I received it as the head of the propagation of the faith. You don't have a right to tax that. Well, the tension got so great, maybe you had the most powerful bishop in America was Spellman. And the most popular bishop in America was Sheen. You know, so he had this real clash. And it got so intense that Pius XII called them both over to Rome. And he listened to both sides. And he said to Spellman, who was his close friend, in this case, Sheen is right, you cannot tax that money. That's meant for the poor and has to be given to the poor. Well, after that, you know, Bishop Sheen was basically persona non grata in New York, you know, and that's why he did a lot of preaching all over the country. And so he and he began, you know, his writing, he wrote 65 books. His favorite, his favorite, was the world's first love about the Blessed Mother. Some great ones on the priesthood, you know, the priest is not his own and those mysterious priests, you know, powerful books on the priesthood. And, and, you know, some of the his great book on the life of Christ, you know, great for meditating on the life of Christ. So his writing and so on. Now, in 1966, oh, he was at the council. He went to all the sessions at the council. And whenever he was next, he was announced that he was the next speaker, all the bishops who usually went out to those little coffee clotches, you know, there, they came back in to hear him speak. And he was at all four sessions of the council. When they asked him, when they asked for the bishops for suggestions of topics to discuss, he suggested to talk about the role of women in the church. And he was told that's not important. It's one of the most burning issues in the church today, you know. Another thing he said was you should drop the name Propaganda Fidei from the propagation of faith. The word propaganda in many countries sounds like, you know, propaganda and it's very negative. And some bishops attacked him. How could you dare suggest that this sacred name and year later they changed the name to the pontifical, you know, world pontifical missions. So he was a man who was very far ahead because remember his view, his view was not localized to one country or one area. He had the whole world that he was dealing with, you know, especially with the missions. Now in 1966, after the council, he went up to Rochester and he became Bishop Rochester from 66 to 69. It wasn't a very easy thing up there, but for me, that's where I got ordained by him. I was a student in, we had a little seminary in Geneva, New York, and my director asked, would you ordain Brother Andrew? And sure enough, we took a little trouble getting past his secretary who only wanted to set his schedule for one week in advance, so he can't get ordained in a week. But finally, we got to the bishop and he said, I told you, I would ordain him and I will. He stepped down in 1969. I think he felt he was a failure. He spoke to Pope Paul VI, he was very close to Pope Paul VI, and four times he asked the pope to accept his resignation. The first three times the pope wouldn't even listen to it. Finally, the fourth time he pleaded with the pope and the pope accepted his resignation. He didn't want him to step down, you know, feeling that he was a failure, but he knew there was opposition. He said he went to one parish to talk and the little kids threw stones at his car. He said, little kids, don't do that spontaneously. So he felt he had become ineffective and one of the things I think brought on a lot of difficulty for him, I told you that he was very much a person of great justice. The big company for employment in Rochester was Kodak. Kodak had promised some minority people better pay and jobs and everything, but they reneged on that. He commented on that. That must have infuriated a lot of the priests and the dioceses because their people worked for Kodak and the people must have been telling them and the bishops, you know, making things very, very difficult for us with his comments, but that's the kind of man he was. In fact, there was a there was a march, I don't know if it was the end of World War II, and it was segregated. The units were segregated, you know, and there was a fence separating, you know, the Caucasian from the minority soldiers. He went and helped tear down that fence. He said, this shouldn't be.  They criticized him for a lot of things and he never dared criticize him that he didn't have concern for the poor. He had a great concern, you know, for the poor. Well, his last 10 years, he basically used, I think, in giving retreats, and particularly for the renewal of the priesthood. Okay. And so I'd like to, he died on, he died on October, I'm sorry, December the 9th, 1979. Shortly after he had, you know, Pope John Paul II had come to the United States for his first visit, a member in 1979, and he visited St. Patrick's Cathedral. And maybe you've seen that picture of the Pope embracing Bishop Sheen there in St. Patrick's Cathedral. And he said to Bishop Sheen, you have written and spoken well of the Lord Jesus.  And Bishop Sheen said, you know, the many things that were said about me and to me, I always hold that as probably the greatest tribute. John Paul and he were very good friends, you know. So let's say a little bit about his thoughts on the priesthood. Okay.  At Mount St. Mary's Seminary in Emmitsburg, there's a statue of St. John, Viennese, and on the bottom of it, who's now patron saint of all priests, and on the bottom of that statue, the beautiful words, the priesthood is the joy, the heart of Jesus. And I know that it was the joy of Bishop Sheen also to be a priest. He said in his autobiography, Treasure and Clay, I cannot remember a time when I did not want to be a priest. He wrote those books I mentioned. Priest is not his own, those mysterious priests. And his books and tapes even now are helping many priests to remain faithful. Monsignor Franco, who recently put out a book on I think from some letters from Bishop Sheen, he lived and worked with Bishop Sheen for about five years at the Propagation of the Faith. And he told me that he was in Africa in 1999.  And he was up on the platform. He didn't speak, but he was simply introduced as a priest who had lived and worked with Fulton Sheen. And he said after the talks were over, all these African priests came to him and said we're being kept going by Bishop Sheen's books and his tapes. Inspiring so much. I remember a seminary and telling me there's so much in this book, the priest is not his own, that I have to read it slowly to absorb it all. And many of these books now have been reprinted in recent years. As a bishop, he loved to ordain men. And first thing he said in the homily at my ordination was this, one of the great joys of being a bishop is the power of generation. It is given to a bishop to have sons in Christ through the power of ordination, to prolong into another generation sons upon whom he has given the august power of the priesthood. So what were those powers? He described the power of mass. He said the powers that are given simply in a few words are staggering. One of the powers for example is to go to the hill of Calvary and take up the cross to plant it down in Geneva in the Capuchin monastery in Africa in Asia or in any city or village. This he said is the power of offering mass. It is the prolongation in space and time of the redemptive work of our Lord. What our Lord did on Calvary in a certain sense was localized. What we do by the mass is to apply it all over the world. Our Lord wrote the first note in this melody of redemption. And by the mass we add our own notes to it. And this is the harmony of the people of God. So he stressed also the power of absolution. You know, he said that then there was the power to forgive sins. You will never forget your first absolution. I never forgot mine either. I was so nervous. I had just gotten my faculties. I was a simplex priest for about three months. I was ordained early but didn't take my exam until June, July, and you know. It may manifest he said some power to send the man to the moon, which was just happening at that time. But what is that in comparison to sending sins into nothingness? A raised hand and a voice, your sins are forgiven. And quite a part, even from our consciousness of that power, the people themselves feel it and know when they have received absolution. His insights into the understanding of the priesthood, he took much from Scripture. One of his first beautiful comparisons was the priest and victim. He says, this is what distinguishes Christ's priesthood from the Old Testament priesthood and from the pagan priests. See, the Old Testament priests, the pagan priests, when they offered a victim, it was always apart from themselves. A lamb, a bullock, the first fruits. But when Jesus was priest, he was also the victim for he offered himself. And so St. Paul could say, my life is being poured out like a libation. My life is at the service of the gospel. And we as priests, you know, do that also. So we are priests and victim. In fact, in his book, the priest is not his own. He says that in the introduction. He said, if you don't believe that you're both priests and victim with Christ, don't bother reading his book. Because the whole book is based on that. He talked about the cross. He said, this was at the heart of the priestly vocation. He said of priests that they were crucified on the vertical beam of their God-given vocation and on the horizontal beam of the simple longing of the flesh. He said, the priest is called to be the happiest of men. And yet daily is committed to the greatest of all wars, the one waged within. So the priest had to be faithful, he said, carrying out God's will and faithful to the people proclaiming the message in season and out of season. One of his other analogies that he took from scripture was the priest as Simon and Peter. Simon the old man, the paradox, the priest, exalted in Christ yet weak in our humanity. He said, this is clear in his contrast then of St. Peter as both Simon and Peter. Simon was the old man rooted in the ways of fallen nature. He had worldly wisdom, right? Remember when he tried to talk Jesus out of the cross? And what did Jesus say? Get behind me Satan, you think the thoughts of men, not of God. His weakness later on which he would deny the Lord three times. And we all have that weakness. We carry weakness within us. So there's part of us that is Simon. But there's part of us, part of us like Peter. Jesus created Peter's name. Remember, there was no name Peter. He made that up. You see it in the Greek. Petra is rock. But the A made it feminine. So he just put OS, so at least when it's translated. OS was masculine. So he made up a name, rock. Bishop Jean said he called him rocky. He was a little rocky, wasn't he? So he proclaimed Jesus as the Messiah, son of the living God. He believed in the teaching of the Eucharist. When the crowds walked away, as Jesus said to them, would you leave me? As if to say, if you don't believe in it, when I'm telling you, go with them. But Peter said, Lord, whom shall we go to? We have come to believe in you.  So he stayed, the faith of the church. And then even after his threefold denial, he was to confirm his brothers in the church. So feed my lambs and feed my sheep. That beautiful touching scene there after the resurrection. Remember when Jesus said to him, in the Greek, you get it more clearly than you do in the English. English may have one word for love. When the Greek, you know, first two times Jesus asked him, do you have agape love for me, that full, total, complete, self-sacrificing love? And Peter was afraid to say that. So he answered, I have love for you. I have feeling of love. Like a love of friendship back and forth. It's not as total, not as sacrificial as agape love. And finally, the third time Jesus asked him, do you have feel your love for me? And Peter said, yes, Lord, that's what I have. Feel your love. And he was to remain faithful. And so in our own lives, we feel at times, Simon, the old man pulling, falling, weak. But then Peter restored to the love of Christ and he remained faithful. We have that struggle between the old man and the new spirit that's willing and the flesh that's weak.  Remember, he entitled his autobiography, Treasure in Clay. The treasure was the priesthood. The clay was human weakness. This is what one author said. How did Fulton Sheen see his life? He saw it as a priest, no longer his own, but at every moment acting in the person of Christ. He was to be always an ambassador of Christ. That is one side of the coin. The other is the priest as a man. That is the contrast that Bishop Sheen saw in his life and why he chose the title of his autobiography as Treasure in Clay. The title came from St. Paul's letter to the Corinthians about himself and the other apostles being no better than pots of earthenware containing the treasure. He thought the title illustrated the nobility of the vocation to the priesthood and the frailty of the human nature that houses it. Let me skip a little bit here because I'm running out of time. I want to get to something later on in his life. When I was ordained by him, he spoke about how priests are losing their identity, not attracting. He knew the problems that were entering into the priesthood. One of the most important converts that he made, he made about the estimate 52,000 converts that we know of, that he had. One of the most important of them, the most important outstanding was Claire Booth-Luce. She was going to take her life after her daughter died. He asked to see her. She came and he kept talking about God's love and mercy. She screamed at him, how could God be loving and merciful if he took my daughter? He said, because otherwise you wouldn't be here. She became a great convert. There's one other lady I want to tell you about. You may have heard about him, maybe not. Her name was Bella Dodd. Bella Dodd grew up in the Bronx and she was a lawyer. She became a socialist and in 1930 entered the Communist Party. Now, the head of the party at that time was Joseph Stalin. Stalin, I don't know if you know this, but he was in a seminary, got thrown out for reading pornography. He had read Darwin and came to the conclusion that we are simply just developed animals and that's it.  Have you ever read a little book called AA1025? Okay, it's been reproduced a couple of years ago by Tan Books. AA1025 means anti-apostle. This is exactly the kind of people she was recruiting. When Bishop Sheen converted her 20 years later, she told him, I personally recruited about 1100 men to enter the priesthood to destroy the Catholic Church from within and Sheen knew that. She also told him, we had four people, cardinals, high up in the Vatican who were masons working with the Communists. You know, so he knew the church had been infiltrated. Okay, that's probably why Paul the 6th who was very close to Bishop Sheen said that the odor of Satan has entered even into the sanctuary of the church.  He said, this is what we need. He said, if there is any key to the renewal, the reform of the church today and the salvation of the world today, it lies in the renewal of the priesthood.  I forget who it was that somebody told me he was walking down a cart with a nun and he stopped to let her go by.  That's what she said to him. And so we have been very blessed and sometimes there are discouraging days. We get discouraged with ourselves, our own personal weaknesses, our struggles.  Even the Lord himself, bearing the cross, tradition says he fell a number of times. And so as priests, we know failure at times. But you know what? You can get right back up. The Lord's mercy is overwhelming. And we have been entrusted to be, you know, the bearers of that great mercy. So Father, this has been my pleasure. Maybe someday we can say, St. Fulton Sheen, I hope so. Please pray for that. God love you. Bye now.