Rw'n dweud fighters yn dŵr. Rwy'n no fyddwch i'r gwaith ystafell yma. Gwydai chi'n dddirioneddau? Rwy'n ddweud ffraibl fod y dyna. Rwy'n ddweud bod ni'n gweithio'r situation ffitu. Rwy'n dweud gweithio hynny, felly ein bod yn newidlla hefyd a'n rwy'n gweithio'r transmission yn dweud yn dweud yn gweithio'r sgiliau. Mae'r ffordd yn dweud yn dweud. A'r wneud gweithio'r sgiliau'r sgiliau yn tre'n, ond yw'n dathlwydd yn cymdweithio ac mae oeddwn yn gwlad i'r tîm o bwysig yma yw'r ffordd, mae hwnna'n gwneud y quaint o'r hollu gyntaf i'r holl llwy yw'r netyfu sy'n ddiwol iawn. Roedd o'n hollu bobl o'r hollu gyntaf, a'i Saiddurau a'r hollu gweld sy'n maen nhw i'n hollu gofal, ac mae'r hollwch i'r hollwch yn gweithgaf'r hollwch ond mae'r hollwch yn ni'n hollwch yn hollwch yn cael cyfnod gyfffrifol yma, Mae'n gwybod i'r amser James a'r amser yn ei gweithio gydol. Mae'n gweithio'n ddysgu'n ddod o'r lle fydd yn fflawni'r lle'r cyflwyno'r ddod. Mae'n gweithio'r lle'r cyflwyno'r cyflwyno yn ei ddod o'r lle yma. Cyn ymddangos y byddai'r lle ar y byddai'n cyflwyno? Mae ddod oherwydd. Mae'n gweithio hwnnw i ddod o'r lle'r cyflwyno. Mae'n ddod o'r lle yma yn ei ddod i'r cyflwyno.丁 ni, rhoi wrth gael yn gwrs ar y diwylliant. Mae'r popeth yn gweithio arfer y gynhyrch. Mae'r bobl yn bach i bobl a'r bobl yn bach i bobl mae'r cyff簷 ar gyfan. Rwy'n credu'r trofnilleth i'r codi. Ond yn y rhan oed, yn 30-35'n gweld歡迎. Rydyn ni'n rhoi ei ddweud o dechrau oherwydd eich bod yn eu ddechrau, mae'r ddweud yn rhan oedd teimlo wirwch . It was one that we have to react to in the right way. Our overall away results have to improve. We know that. It was there for all to see before I came here. I did manage to get a THW Castle. But we want more than that, if we can. Probably a debut that wasn't the most memorable for earlier King Mangaala. Was it maybe some of those mitigating circumstances that you mentioned about our good arsenal were or was it too much to expect him to make a too big a positive impact? Well you could only make an impact if the rest of the players are playing to their abilities and their capabilities and we weren't as a team, especially the first 30 minutes. ac mae erioed eich barth yma'r fach i gael eich cyfrifogau yn y secondwyr yn gweithio'r wnaeth, ond�r mwy o'n ganfawr gyda chi wedi'u unrhyw gweld ar un ar niferau am y secondwyr. Ac rydyn ni'n ddim feel y gweld arall nod ─ rydyn ni'n dwy ar gael eich gwrthu'r gweithio y gwir yw, ac yn fwy o ar gyfer ei gweithio'r diogel eich gweithio ar ysteimlo bod séch a'r angen i'r ffordd pinnwyr 5-1, Ieithhaf ydyn ni'n gallu gweld yn ymdoedd uchydig. Dyna fyddo i'r rhaid yn ystaffydd, ond—yna'r gweithio'n gweithio ar y cyfryd, oes yn ympryd, fod yn rhaid â'r gweithio'n gweithio'n gweithio ysgol, sy'n gweithio'n gyffredinol nad ydym yn yma eisiau i ymweld o perffodus yma a soedd y gweithio'n ar y cyfrif flynedd. Mae Ysbryd, fel Brian i'n deall, tra bobl yn y gallu cyd, hon yn gwelch cyfraith mwynhau bod yn collu meddwl i ddechrau'n bwysig o'r ddynau o'i gweithio'n credu. We don't always fall foul to a heavy defeat. We actually lose the goal and actually come back and get a result quite well and as good as any team in the Premier League. So we've not really to forget that on one isolated incident at that particular time. So is it a question now of you being able to focus on some of those positives particularly from that second after trying to make something out of those. Well it's focusing on our own form. I'm a three two one. Did you used to watch that? We've won three drawn two and only lost one since I've been here so that's out of six games so our own form is very good. Our own form is our best way of staying in the top half if we can and first of all avoiding the threat of relegation. But our own form has to be continued starting with Crystal Palace on Saturday again as it was against Leicester on the Wednesday. So when you're when you're looking at us in the in the light of yes away results are not so good but our own form is is pretty good at this moment in time.  They come back and play really really well and beat us comfortably. We want to hopefully repeat that if we can on Saturday against my old club Crystal Palace and they've been in great form at least two defeats in 10. So they're not going to make it easy for you either. No they won't and it's a great turnaround from Roy and the lads. But you know it was always in the players and Roy's managed to bring it out of them because it was it's more or less the same players I think that I had. I think there's only Fossa Mensa that's playing in the team at the moment that wasn't there when I was there. I think everybody else was but they've got some really good strengths in the side which we obviously me and Sammy, Ryland and Martin all know about. But really at Goodison it's about us really it's about us playing to our best. It's about us playing like we did against Leicester and trying to win the game. Yes we have to be concerned here and there about about Crystal Palace's strengths particularly the the front the front three. But I think that we may have a problem so I might not be playing so that may be an advantage to us.  Of course they've been very good and very resilient from a very difficult position so you know that's off to the players and Roy for how they've always mastered and battled their way through that. The game sees the 30th anniversary of Everton in the community which is a great landmark isn't it something that you're obviously very very proud of? Well I've only had a small time with the community of course and of course I can't speak highly enough about the community as a whole across every football club because they all do a fantastic job but none more so than Everton for me I've never seen anybody that does as much for the community as Everton football club does. And I think they've got freedom of the city and rightly so I mean they give so much comfort to so many people it really is a great effort by the football club and I think that we're all celebrating that effort this week after the game on Tuesday so we will all be there, we'll all be there supporting the community and hope it continues to grow and continues to be a major success. John Moss is going to be the referee in charge, had a bit of a nightmare last weekend at Anfield and I don't know how much you saw of that. Any concern about that or are you going to have a bit of sympathy for him? I think he chose to do the right thing and talk it out so and then come to the decision whether that decision was right or wrong only him and his bosses have to discuss that and come to the conclusion on where and when but I think that the only thing that they didn't do were cover the mouth up like everybody says you've got to these days because the camera goes so close and listening to what they're saying but I thought they decided to talk it out with the assistant referee. Just the last couple according to reports David Unsworth turned down the Oxford job I don't know whether you're aware of that at all you see somebody you'd prefer to see staying at Everton on a long term basis given the history that he's got with his club. Well I think David's expressed his will to be a manager hasn't he so I'm not so sure my opinion makes any difference whether he should or shouldn't stay because I haven't been here long enough and that's a bored decision. And David's decision in his own right if he feels that he needs to take the opportunity to be a manager then there's a lot of people that have worked with me and that same desire and have gone on to be managers and gone on to be good managers. You know he's got a great position at the club at the moment and that's a very difficult decision for him to give up. I'm sure about that because Everton under 23 is a very privileged position and he's done very well in it. But if he's desired to be a manager then he's somewhere along the line he's going to have to take the plunge. But just finally we saw Patrice Everes sign up for West Ham a couple of days ago was he ever a player that you were interested in in the last few weeks? No because we got Leighton Ben's coming back very shortly you know and Leighton's similar experience to Patrice and obviously Patrice is a little bit older so Leighton will be back very shortly like you mean so I didn't think that would be necessary at this stage of the season. We tried to sign a left back throughout the whole of the January window but were unable to do so.


Music should be for everyone. Introducing this sound shirt. A wearable device that enables the deaf to experience a concert through touch sensations. After six months of development, we put it to the test. This is how it works. Microphones all over the stage cover the different types of instruments. A software converts the sound into data and sends it to the shirt. Where 16 vibration motors pulsate with the intensity of the music. For example, the bass on the stomach and the violins along the arms. Several deaf people tested the shirt and their reactions speak for themselves. This sound shirt now available at every concert of the Young Symphonic Orchestra of Hamburg.


How can I add teachers and learners to my courses? When a new account is created in Moodle, the account holder is called an authenticated user. They don't have a specific role on the site. It's the administrator's job to make them a learner, or student, or a teacher in the courses where they will learn or teach. This video explores how you can add users to courses one by one and give them the roles they need for that course, such as teacher or student. As an admin, you can add several users in bulk with the text file made from a spreadsheet program. To see how to do this, watch our video on how can I add users to my Moodle, bulk uploading, and read the documentation, upload users. To add users to a course, access the course, click the participants link on the left, and then click Enroll users. As an admin, you can choose to enroll them as teachers, students, or other roles. When a regular course teacher clicks this button, they cannot enroll other teachers. If you need that, read the documentation, assign roles, for information on how you can allow teachers to enroll other teachers. Clicking show more offers the option to specify the start date and length of enrollment. When you save, the newly enrolled users will appear in the participants list with their roles. You can make changes by clicking the edit icon and remove them if needed by clicking the unenroll icon. To summarise, admins can enroll teachers and learners in bulk into courses with a text file. Admins can enroll teachers and learners into individual courses from participants, enroll users, and course teachers can enroll learners, that is students, into their own courses from participants, enroll users.


Hello. Hi. OK, I hope everybody's got lunch. And we'll start and move into the second half of the day, which is the way we broke it up is that the first half of the morning is the more design-focused talks. And the second half of the day is slightly more technical. We go into a little bit more detail on specific techniques that you can use. So Akash has been desperately trying to erase the phrase, that web security guy from the internet with little success. But he's that web security guy. And he's going to talk about how you can tell over the next 45 minutes whether you're designing an insecure site. So he's a co-founder and the manager for the OWASP and the open security community, which is called NULL. So perhaps if you're interested in issues around security, connect with him afterwards as well. Also, if you were sitting at the back, there's plenty of space up front if you'd like. You're more than welcome to come up in the front and on the sides. Hi. Good afternoon. Good afternoon. See, I have a tough job. You just had good lunch. So I need you to be awake, at least vocal. So you can keep your eyes closed. And whenever I'm shouting a bit, you can just reply then. Can you do that? Yes, no, maybe. Yes, no, maybe. OK, the first row is awake mostly because these are people I know and I've dragged them to the talk. I don't want them waiting outside. OK, so I'm going to talk about how to tell if you're designing an insecure website. First of all, the first thing you should know about, it's not a how-to. The reason is because apparently Hasgi doesn't allow how-to sessions. It's very clearly written on the proposal page of Meta Refresh. I got in. OK, my proposal title started with a how-to and I still got in. So maybe they're not paying that much attention. And does that bother you? Oh, yes. How many? Can you raise your hands? Whoa. So the only reason it's there is because I wanted to see if you're awake. But there is a subtle point to that. My talk is less about design from a designer's point of view, but more about how I experience it and how it comes in my way because I do application security day in and day out and how it always comes in my way from creating secure products. And if you've heard this before, security versus usability and business case and all of that, that's fine. Like grammar irks you. Like my friend Hasgi just said, it irks you when you see your being used. Sometimes design comes in the way of security. My point is that it need not be. It's possible that using design, you can develop in a more secure manner or it could be more secure for your end users. Whatever the objectives are, what we'll do, we'll go through it and we'll see. First, I have to tell you a joke. This is the second thing I have to make sure that you stay awake. So we all have our favorite websites. Some websites that we maybe log into every day. I use Reddit a lot.  Or maybe Facebook, which is very common because all your friends are there. So I had a favorite website. It used to be called Dig. Anyone's heard of Dig here? Wow, cool. They are using their hands on their own, great. So that's behavioral, whatever, at work. So I used to go to Dig and then I discovered something else. Reddit or maybe something else. There's pop URLs. And I started going to that website. So it had been three months, three and a half, four months. And I remembered, oh, I used to go to Dig and there were some cool links there. Let me go and see what it up to. So I type dig.com in my browser. I go there. And suddenly this pop-up opens. We've all seen pop-ups. They're very irritating. And the pop-up is the website talking to me. And Dig is like, so where have you been? Give me all these passive aggressive vibes. I'm like, OK, what? Yeah, I've been around. I've been busy. I've been going to other websites. And OK, are those websites nicer to look at? Do they load faster? Do they have better typography? And I'm not really sure what is happening. I don't expect the websites to have attitude. They're just static things, even when they're dynamic. But that is an example of an insecure website. Thank you so much. Now let's talk about what the thing is. First of all, as a disclaimer, I always put disclaimers for HASGI conferences because you tend to be very opinionated. And I tend to be a little controversial. I keep teasing people. So the disclaimer comes first. I understand things about insecure websites. I don't really understand design UI, UX that much. And the case in point, I was sitting on the second row. And during this talk about overexposed, this person was, I think Sawik was mentioning how it's, he changes the font a bit and it looks nicer. And he was talking about Saref and Sansaref. And I turn to Meenal, a good friend who really likes to talk about typography and other things. So what is the difference between Sans and Sansaref? And he says, what do you think is the difference? I thought Saref is where you have cursive writing. And Sansaref is when you don't have cursive writing. Apparently, that's not true. Anyone else who doesn't know the difference? Anyone else like me? OK, wrong order. Oh, there are two people. Great. Four. So apparently, Saref is the one which has a dash above the L and the P and all that. And in Sansaref, that's not the case. And Times New Roman is a really bad font to use online. That's what I got of that. So clear disclaimer, you understand what I'm saying? This is not a how-to. This is more like a series of thoughts. Any more spelling mistakes are mine. It's not intentional. So this points it out. What I'm going to talk about is effective design. I will tell you what I think is effective design. It could be UI, UX for me. It's the same. Sorry, I'm not from this background. So designer, UI expert, UX experts, all the three things are same to me. Obviously, it's not. I understand there are differences, but I personally don't care. When I see Clear Trip, I see that's a really nicely done website. And I definitely appreciate it compared to Make My Trip or Go Ibibo or one of those. But in the end, if Go Ibibo or some other website is offering a cheaper flight, so for me, that's effective design. So this is what I think effective design is. You may disagree with me, but we'll take the disagreement outside after the talk is over. Something that compels a user to do what the designer wanted. It may not be perfect. It may have missed a lot of edge cases. It may have missed the main point. But I think, from the end user point of view, I'm a consumer of design. I don't produce design, but I'm a consumer. It's like, when I showed the slides to him, and I was like, can you fix the typography? And he looked at two slides, and he was like, sorry, dude. This can't be done. But whatever. So I'm saying that something that compels a user to do what the designer wanted. Let's stay with that thought. I think Gmail is a great example of effective design. And I'll tell you why. Personally, I did not know that you could arrange males in labels rather than physical folders. Gmail taught me that. Maybe it was not a new idea. It was not unique to Gmail. But that's where I experienced it. So same thought that effective design is Gmail. But let's look at a closer look at an example. Can you notice? I don't know if you can read this. Obviously, last benches can't. But the URL seems different. Can you guys read that? Yes, no, maybe. So is it a phishing attack or an effective design? In this case, this is just a proof of concept for a phishing attack. Why? OK, add a nice animation. It's pointing. The arrow is pointing to the URL. What I'm saying is a well-executed phishing attack. I'll explain what phishing attack is a couple of times later, is an example of effective design. What is the objective of the attack to steal credentials or do something else, maybe post on your wall or something? But it is an effective design because the way web design works and how consumers consume it, there are a few things which are common here. We're looking at a just trying to see what makes it a phishing attack. First of all, there's a favicon, which looks like that red folder, which is like a Gmail thing. And when you drag it and save it in your bookmarks, it looks like the Gmail favicon. And whenever you bookmark something, you will not check the URL it is going to every time. Makes sense because that's why you bookmark it to save time? Yes, no, maybe? Cool. So this is phishing with a fur, not F, fur. There's a whole history behind why it's phishing with a fur because of freaking and all that. We'll not get into that. I believe from my personal experience, there are some features of effective design. I might have missed a lot, but let me stick to these for now. There are some assumptions about how the site should be laid out, what it should contain, based on some things like heat maps, and then a bunch of other data-driven things that Google does very well with your A&B testing and other things. There is always call to action. Sometimes it's a green, big button. Nowadays, you have these new frameworks for websites called Zerb Foundation and Bootstrap and all the others. And they tell you it's a feature that they have nice responsive buttons, because buttons which go big and small based on the size of the screen. There are some visual cues, right? And this is more relevant to anyone who does shopping online. There are a bunch of websites which very proudly proclaim why they should be trusted, right?  In the end, it's just an image and it's a visual cue. How does phishing work? Most people, now not the people sitting in this room, okay? Most people don't waste an entire Friday sitting in a room talking about UI and UX. They're mostly in office right now. They will finish at five and go drink or something, right? So you are not most people. Think about people in your lives who are not into tech. Your parents, maybe your siblings. Most people do not pay attention to what is in the address bar, right? So I completely agree with Savik's point about having really good looking URLs, but you know what? Most people don't really care. It's not an attitude thing. It's not an attitude thing. It's like, I remember email addresses better than full names. Why? Because growing up, that just made sense. Bunch of you, I wouldn't know your first name but I would know your Twitter ID, right? So that's what happens. This is the function of the company you keep. The second thing is people love to fill login forms. They see a login form and they know, I know this. Yeah, because this is what an address bar can really look like. Wow, your eyes will bleed.  It starts with scheme, colon, two slashes. Then you can actually have a login, colon, password at host name or host address, which means a website name or an IP address, colon, port number, okay?  Hierarchical path to the resource, then question mark and your parameters, and all of you who are into like backbone.js and all, your fragment ID, right? That's what you end up doing. How do you bookmark stuff and all? I've just taken this from the browser security handbook. So if you look at the URL for the reference, which is HTTP colon slash slash, a domain name slash, a hierarchical path to the resource, most likely it's multiple folders, but it need not be, right? You have your routers and everything else. So I was trying to research for this talk and I kind of figured out this is an important book for anyone who's doing web design and talking about usability. There used to be this guy, Jacob Nielsen or something. He had a blog called Use It. Right? Yeah, I don't know if he's like in fashion anymore or not because there are a bunch of other people, right? Because apparently Amazon says this is like a more popular book. It's a very cool title. Don't make me think.  Maybe this is my thought. Don't think equals impulsive. Why would that be? Because impulsive is acting or done without forethought. Young, impulsive teenagers, that was the original meaning I got from Google, but it could be shoppers. A lot about usability, you know, a lot of research is driven by how can we get people to shop more?  A lot of it is about landing pages and conversion rates, right? So the design is driving people to be impulsive. They're saying effective design is what is the conversion rate? What is data-driven design all about, right? What is A&B testing all about? But people rely on visual cues. We come back to fishing. So if anyone doesn't know what it is, it's a made up word basically. Okay, it's not a dictionary word. Is the act of attempting to acquire information such as user names, passwords, and credit card details by masquerading as a trustworthy entity in an electronic communication? It seems like a, you know, a bureaucrat has written this definition. The part that I want you to focus on, very nicely I've put it in yellow and I made the font bigger, is trust, okay? Because I believe effective design in the end is about generating trust, okay? It's like if you have a post on Craigslist about the next design wave, most of you will not take it seriously because it's on Craigslist. You've seen the UI of Craigslist, right? But if the same thing is in a Q&A format in Quora, some of you might actually, you know, upvote it. Yeah, you're being fooled. It's trust. People trust big, shiny locks. They do, right? That's why you're laughing right now. Trust no one. Do you know which? What? X-Files. Okay. The X-Files, yeah. They show about alien abduction and all that. It has the best piece of advice, trust no one. And there are a bunch of people who I work with regularly and they just get fed up of me saying that trust no one, be paranoid, do security, all of that and they're like, yeah, whatever, right? But that's what I'm trying to say. We cannot escape from getting better design. We cannot escape from people, you know, it'd be easy for people to spend more money buying stuff, but can we do it in a manner which is secure? I think I'll finish early. I just want to give you two examples where this trust collides with effective design. And it makes a really bad case for UI and UX. The first example is a password reset or a password change feature in websites. Okay. And again, the case I'm going to make is why I think it's bad for bad UI or UX. Maybe that's not the case. Please correct me if I'm wrong. And then the second thing which I'll definitely look at is an SSL-enabled website. Okay, question for you guys. Should it be an SSL-enabled website or it should be ASSL? Why? It's an S. See, another thing I learned today. Today I learned. So in an ideal world, when there were no criminals, there was nobody trying to steal your stuff, passwords wouldn't matter, right? Nobody was trying to steal, so why would you need passwords? But in an ideal world, how a password reset thing would work? You click on enter email to reset password or actually give me my password. It'll give you your super secret password. Why does it not work like that? Okay, that's what we're going to look at. When you click that button, what really happened? Okay. There was some code, some source code, some JavaScript, some HTML loaded in the browser. That's why the button got generated, right? That sent an email to the server. Or maybe it filled a form, it did something, right? It moved from the browser to the server, which is on fire, I don't know why. That's the graphic I have for you.  Maybe it was, you know, if a sensible programmer there, someone like you, it checked if the email was actually in the database, it generated a password. It did something all of that, okay? What is wrong with this picture? Why is it bad for UI and UX? Okay. Intern, bad for security. Because the server doesn't know it is you who filled the form. The email ID that you filled in, that it actually belongs to you.  Because you don't have the password, you've not authenticated with the server. You just got a form, you filled it. Could be anyone's email ID. Like someone gave an example of IRCTC, where you can get the username in the error message, if you put in some email ID. Or the other way around, okay? Now, this is the difficult part. How is this securely solved? Using out of band communication. What does that mean? This communication is not based on the web, you know, the client server thing that you have just done. Most likely, the core loaded in the browser did something to the server. And the web server will email you a link, hoping that the email address is in your hands. The web server is gonna trust that information. It is going to email you that link. Now, the email is lying on another server. You will have to log into your email, right? You have to click on the link and that link will take you to the server. Now, the server has the unique, whatever identification it had, because it knows that it sent the link to you. Based on that, it confirms, the link is proper and it allows you to reset the password, okay? That's how it happens, right? Now, try explaining this to your dad, okay? My dad, the way he uses the computer, okay? He uses one finger to type. And when he's like typing, he does not hold on the mouse. Okay, so he'll find the keys, make a mistake, find back space and does not know what tab is, so doesn't go to the next field. He then searches for the mouse, holds the mouse, searches for the cursor on the screen, then finds the exact spot where if he clicks, it'll be in the next field and he does all this. You completely broke whatever he has learned about it, okay? Which is why it's bad for you and UX. But, there's another twist. All of this was sent back and received in clear text. Clear text is text that you can read, right? That's it, nothing else. What's wrong with that? This is a hypothetical list of stuff that is between you in the browser and the server, okay? You could be on a wireless network. If you, it was sent in clear text, all of you who are in the same wireless network, it is theoretically possible, it's practically very easy to see what data was being sent. There could be a helpful IT admin monitoring for bad traffic. You know, bad traffic is in code, so you don't know what they're monitoring for. There could be an ISP gateway with helpful IT admin. There could be a country level gateway with helpful government IT admin. Again, monitoring for bad traffic.  There could be a server admin monitoring and you don't know who else. How many hops are there? What routers were involved? All of that. So, there are a bunch of things that can happen and this is all sent in clear text. Just so, before we continue, I'm gonna recap what we have talked about. Because I kind of forgot when I was doing this, you know, where I was. Effective design inspires trust. People trust based on strong visual cues. These cues can be faked. I gave you an example of a phishing page. Ideally don't trust anyone. You guys won't listen to me. If we use common sense approach to generating a new password, we will need to trust multiple intermediaries. I always wanted to use that word. So it will pronounce. Right? So this is what we have looked at so far and we now know that it is going in clear text. It is, you know, may be readable by a bunch of people who may not be very friendly to you. This is a problem worthy of a philosopher actor. So how do we create secure websites? Nobody gets the mean? I thought it was funny. SSL. Ever heard of this? SSL? HTTPS? Yes, some people are nodding. Okay. Sorry. Sorry about that. There was a time when people used to think that all problems in application security will be magically solved by SSL, okay? Did it not turn red or something? Oh, okay. I put that animation in it. Okay, maybe, maybe not. Let's see. This is what SSL looks like to a normal user using a browser, okay? This is not my slide. I've taken it from a place. I've referenced it. If you were using Chrome, that shiny lock will be on the left. If you're using i9, it'll be on the right. Opera has a different place. Safari has a different place.  And I'm not even looking at the mobile browsers. Okay.  But the way, and I'm not saying, you know, designers are at fault or something. But the way it looks like to an end user, these things appear everywhere. And there have been attacks against SSL where they have just created a shiny lock, put it on as part of the webpage. They can't manipulate what's on the, you know, the Chrome or the browser, right? But they can put it on the webpage and people trust those things. There are two things the SSL's supposed to do. Okay. Without being too technical, ideally nobody can see your message. Therefore, they can't change it because they can't really see what is in clear text. And are you talking to the right server? Your encryption doesn't really count for anything if it is reaching the wrong server because there it is going to get decrypted. And then there is this hierarchy. You are supposed to trust some intermediate CAs. CAs are certification authorities. Let's just leave it at that. You are supposed to trust some third parties and who have been assigned and who have done business with the root CAs. So root CAs have a business. They have sold something to these middle guys and you're supposed to trust them to tell you that the server you're talking to is your actual bank. What could go wrong? Bad things can happen.  The point is hundreds of certificates for different websites have been generated which your browser will completely accept as genuine, authentic, and you wouldn't get the dreadful red page warning that are you sure you want to continue. I'm sure you guys have seen that, right? This is what a rogue SSL certificate can look like. This was done as part of a research project. These guys created a certificate and they called it, I broke the internet and all I got was this T-shirt. They never released this because they thought that this was too sensitive to be released but this research is available. It'll be part of the slides so you can have a look. So then, you know how businesses respond to a challenge. They came up with something called EVSSL, Extended Validation SSL. They would only give this SSL certificate to a genuine business, right? That's what they're saying. Makes you wonder who were they selling it to earlier? This is, there's a lawyer involved and he's gonna make sure that the business address is checked or whatever but that's what it came to. But look what happened to that. This is how it appears to an end user. If you're in IE, the whole bar is green because PayPal is using an EV certificate, Extended Validation, on Chrome and Firefox, just a small part in the left is green. But end users mostly don't notice address bars, right? They're not even looking at this. Firefox also does one other thing, it's a subtle thing, I don't know if you noticed. If you notice the actual domain part is like darker then where it says, H-E-T-B-E-S, slash, slash, W-W-W. Okay, so that is trying to show you the actual domain like people really cared about it. I don't have time to cover this. I actually promised three things. So maybe next year. I don't have the answers for you. I really don't have the answers, okay? I don't understand design that much. But I'm guessing, I'm hoping that being in this room, talking to this audience, you guys will look at these things as well, right? Because a secure, safe internet basically means more business for you, right, in the end. And I don't understand the design part of it, okay? I understand security. I also understand that people want to use these things without worrying about security, insecurity, how safe, how paranoid. They don't care about all that, okay? The idea is to get your attention and see if these problems can be solved using design. Because it's a very powerful tool. I think before Clear Trip, we didn't really have good travel websites. It's actually really beautiful to look at, right? Even the way a ticket gets printed and all that. That's all I have, questions? I'm on time. Questions? Okay, till someone figures out they want to ask a question. I just want to tell you a nice story. I went to a KSRTC booking office. KSRTC is your bus roadways. And there was this really nice person sitting there managing the ticket thing. He had Chrome open on his computer. I was really impressed.  So I said I have to book a ticket. You know what he did? In the Chrome bar, he typed in www.google.com. Then pressed enter. Then it went to google.com. Actually went to code.in. And then it showed the search bar. There, in all caps, he typed KSRTC. Then pressed enter. And then clicked on the first link, search link returned to go to the KSRTC website. The KSRTC website is ksrdc.co.in. That's what normal people do. Questions? Was it so fabulous that there were questions? All the plants, ask your question now. Yeah, it's not really a question, but it's an anecdote. You know how the modern browsers have that they have different colors for the security locks? Like it can be red or green or yellow. I got the most concerned call from my mom when she was on Gmail once. And it was yellow. And because it was loading assets from an insecure website, she was like, oh my God, my website's hacked, my computer's hacked, oh God. And I was like, oh, she freaked out and she took a computer into a hardware store. Boy, it is just like, I tried to explain to it, not something to worry about. I didn't have any luck. But that's the problem, right? You can say don't worry about it this time. But next time it could be a genuine threat. It just confuses normal users. Yeah, sorry. Any other questions? Hi Akash, what do you think is the security requirement for intranet applications within the corporate? Which are not accessed by public, yeah. How much importance should we give there and how much we should not? If you're asking me, they should be built with the same security requirements as you would build any other kind of application because intranets tend to store a lot of sensitive data. And in fact, I'm doing a training next week where one of the tasks will be to get access to an intranet application from outside and steal data. Okay, so if you're asking me, you should definitely consider it at par. Anything else? This isn't a question, but his anecdote reminded me of another thing. So I used to work at Prakto, which is a medical startup here based in Bangalore. And one of the changes that the design team did there was that in the search bar of the website, of the internal application that the doctors and nurses actually use, in the search box, they put in a hint text that said search, okay. And the next day we received 13 phone calls from clinics across the country and there's already something written inside the box. How do I search? Yes. So if people think that, you know, I mean, people, a lot of people come up and discuss things like, you know, there should be hint text and labels and stuff. Yeah, and if it's not even funny, it's like my parents just get anxious when they're unable to figure out. It causes them so much anxiety like they have broken something there. Anything else? Oh yeah, there's a question there, the back. Hello. Hi, my name is Surudham a designer. We're discussing a problem to which the way I see it, you're saying it has a design solution or does it have a tech solution? What is the point of your talk? The point is that without really good design, none of the tech solutions will work. I don't have an answer that what would be a good design, but I'm saying the current situation is that we have a lot of security issues, but the design isn't really helping us out. Does that answer that? I don't really follow. I don't have a- I'm saying even phishing websites are made as well as pretty as say regular websites. No, they're just copying the entire source code and then they're set up. So from a user standpoint, both look equally secure, right? So from a design perspective, they've got it covered. So shouldn't the tech get stronger for authentic websites? Let me put it this way. I gave you an example of a phishing website of Gmail, where in the address bar, it clearly shows that it's not Gmail, right? Now the extended validation SSL, which is a solution for SSL's failings is doing everything in its power to put all of the visual cues inside the address bar. I don't believe that's a good solution. I don't know what is a good solution, but I don't believe that's a good solution because people, normal people are not paying attention to the address bar in the first place. That's what I'm trying to say. And this is the exact discussion that I'm hoping for, right? Answers from you guys. All right, thanks. Hi, do you think if browsers actually become smart enough to recognize the comparison between the actual page and the URL is different? So if a browser recognizes a Gmail page and sees the URL is different from a Gmail authenticated URL, which it has in the system, it can create an alert for it, not show the website. See, the problem will not be solved. The problem will not be solved by the browser vendors because if they try to start reading what is happening and start comparing and sending it to somewhere else, it'll become a huge privacy issue. No, no, no, no. You have your Microsoft site advisor and bunch of, sorry, MacAfee site advisor trying to do something similar. The other thing like Chrome can do, Google Chrome does is by default for some of the websites, it has the certificates already in the browser, right? So by default, you can't go wrong, you can't go to a wrong server. The idea is that let's just take it away from the user to choose that. Because they want to go to PayPal. I think you did not get, maybe I was not proper in that. I'm sorry. Maybe I was not proper in explaining what I was trying to say was, so normally what browsers nowadays show is a snapshot in the homepage where you can actually see a small image of their site, which you normally go to. Yeah. So what a browser maybe can do is keep a snapshot and let's say as an image, and whereas phishing site loads up, so the URL will be different, as you said. So take a snapshot of that phishing site and compare if there's some basic similarity algorithms can run on it, and compare that a similar UI, but the source, the URL resource, is actually not the right one. It can say a problem is there. Yeah, so where will the comparison data basically kept? In the browser. Okay, that's a solution. Maybe, I don't know if that's viable. It's just. But that makes sense. What you're saying makes sense, yeah. I think there was a question here. So one of the things is, I think there's a design problem to security, but I think there's a problem from the security side as well, in the sense that it's very hard for a small startup to make their website reliably secure. I think there are technical challenges to get SSL right, the whole mix content warnings and all that stuff. I think it's kind of, it's easy, but it's not that easy that anyone can be secure by default. I don't like businesses realize that their end users don't really care. So for startups, it's very important where they will put their money in, right? And at a business level, the problem is solved. They don't care. Like how banks solve it, they know that 10% or 15% of the transaction that will happen, there'll be fraud in it. So they buy insurance for that. Okay, but I think there still needs to be something to make it really easy for startups. Cheaper, faster, simpler to implement. You should start coming to null. We do a lot of information security stuff for free. Startups can benefit from that. How am I doing on time? Hello. It's not a question really, but I think the bigger problem here is a lot of things that we do in day-to-day life are dependent on convention. And the thing is all with these security issues like the green bar or the lock symbol and all, right? There is no standard convention on where they would appear. Like every browser manufacturer would have it in different places or they will indicate it differently. So the way we have web standards, if we have some browser security standards, then probably it will be easier for us. So the good news is they have already started doing that. Especially the teams at Firefox and Chrome, they are talking about these things on a regular basis. And they're actually working towards that. But I don't know how effective that'll be. Or will they actually be able to get stuff done? But the good news is they've already started talking. And including not only the browsers, but some of the big websites, right? Especially your Google, Twitter, and bunch of them also understand that how security is like a prerequisite for them providing their services well, right? Which is why Facebook has started turning on HTTPS for bunch of countries based on what happened in Tunisia. Sir, as you're talking about the SSL certificate, so if I'm running one website, and I'm using the self-signed certificate using the open SSL. So as I know, nothing is different between the already authorized CA certificate and self-signed certificate. Instead of just we are trusting on some CA. But internally, both are showing the same thing. If using that, the self-signed certificate, as some of browser don't have the root CA and CA, all those certificate. So anyway, some site is still offered. You have to anyway proceed to this site. You have to add to exception. So if I'm using on my site that certificate, self-signed certificate, and I'm giving that self-signed certificate. So anyway, user can proceed that certificate also. In that way, we can attack using the duplicate certificate on some site. So the attack can happen. On SSL attack can happen. It can happen. But again, if your users are well informed, they understand what your certificate looks like. Some authorized, that means already CA's provided certificate. Also, you have to anyway some, like in India. India having the seven or six CA's. From the, I think in IE or Mozilla and Chrome, anyone don't have it. None of them have it. Yeah. So you have to, Indian guy have to anyway add the exception in browser. So if I'm providing that open SSL certificate, in that case, you also have to add that certificate. So you don't know, I mean, you are adding that open SSL certificate or that CA certificate. So how can you prevent from this kind of attack on SSL? You can't. In any which way, you'll have to either give the key of the SSL certificate and the person can verify manually before they add it. But you can't prevent the attack if someone is hell bent on adding a certificate. In that case, sir, if I'm using the EV certificate, EV SSL, in that case, as the EV, I think, as I know, only they are going for manually verification of the servers and whatever the certificate is there. So in EV certificate, we can, somewhat we can provide the solution for SSL. No, I don't think your browser will accept a self-signed certificate as an extended validation. I don't think that's possible. But I'm not sure. I'll check up on that. I will let you know. Just meet me outside. But I don't think the browser will accept it. Akash? Akash? Yeah. So I just want to contribute to the discussion. But I think design teams and security teams are completely disconnected. I don't know of any design team that has security as an end goal. So I think the point you're trying to get at was really that designers should get involved with this discussion of how to secure things to maybe solve some of these problems. Because right now, we're just completely disconnected people. Because if they did talk a lot more. Maybe we could solve some of this, right? It wouldn't be so bad. Thank you, guys. Thank you so much. We'll have a quick break. Since we've gone a little bit beyond, let's take.


We are attempting to do a by-bust involving fireworks. All right, Sarge, come on in. Our undercover has confirmed that fireworks are present. The back room was just loaded with fireworks. Everything from mortars to black cats, Roman candles. Anywhere from $3,000 to $5,000 worth of fireworks. These are the dangerous ones. Fireworks are illegal in the city of Canada, Denver. They're illegal to possess, illegal to sell, illegal to set off. They're launcher boxes. What we're hoping to do is take a lot of fireworks out of play before the 4th of July so that people won't be able to set them off. The reason why these types are illegal is they cause serious injuries to people. The danger is, say it explodes in the tube, it blows up the whole works and blows all your fingers off. We're trying to prevent people from being injured for the holiday season. It's a shame when people do get hurt by this kind of stuff.


Dr. Mac has one for us in Mac OS Monterey, Apple's upcoming OS, Monterey he says will make it easier to prep your old Mac for sale or donation with a new menu item in system preferences that is a race all content and settings. So just like we have on iOS, now we have that on the Mac, and it will do all of the things that that we want it to do. I'm curious. We have not done this yet for anyone that has. You know, we were talking last week about the best way to prep a Mac for sale. And you know, what what we suggested was to wipe it completely, reinstall a new OS and then shut it off when it gets to the point where it starts to ask you, you know, the initial questions about logging into this OS for the first time so that the new user gets that pristine clean experience. I wonder if this gets that same experience like I assume this wipes out user accounts and everything and forces you to start from scratch. So I'd be curious to hear from anybody that's that's attempted this if if in fact that's what happens. So thank you for that, Dr. Mac. Yeah.


Hi everyone, Joe for Jaspy's casebreaks.com with 2019-2020 Panini Donnerous Optic Basketball Choice Edition. It's a one box TRT, tiered random team break number one. So I kind of like this. I feel like we've been doing this a little more often. It feels like people also like it as well. It's been moving some of the higher end basketball breaks pretty nicely because we group these teams. So if you, in a 30 team break, you can get stuck with maybe a couple of teams that you don't want, right? Let's say you buy two spots. I think people would rather pay up a little bit and then get a nice block of teams with the big teams kind of separated out a little bit, right? I think it's pretty good. I like the different tiers. Big thanks to these folks who like the tiers as well. And there are the teams, the block of teams. Let's roll it, let's randomize it. Two and a four is six times for both lists. One, two, three, four, five, four, five, and six. Four and a two, six times. There's six right there. Stephen Cohen down to Brenton Young. Six times for the different teams here. One, two, three, four, five, six, and final time. After six, we got the Wizards group down to the Cavs group. All right, so Stephen Cohen with the Wizards, Sixers, Blazers, Barack who with the Grizzlies, nice. Manette Nuggets, Matthew with the Bulls Warriors Kings, James with the Hawks, Hornets Raptors, Barack with the Lakers, Rockets Pacers, Anthony with the Heat, Sons Bucks, Rich with the Celtics, T-Wolves Mavs, John Samuelson, Pelicans, Thunder or Magic, Warren with the Nick Spurs, Clippers, and Brenton with the Cavs, Pistons, Jazz. Let's order these, I guess, by team. And while you're considering trade, remember, if you trade, you have to trade the whole block of teams. You can't just split up like the Warriors, you know, for the Nuggets or something like that. Can't do that, have to trade the entire block. All right, okay, let's flip to this screen right here. Looks like all card ship in this as well. I don't know why the, I think that was just a typo. I think Nick was copying, pasting descriptions. This is not hybrid select, obviously. It's optic choice. Optic choice. All right, so it is indeed a fresh case. So let's pop this guy open here. I guess, how should we do this? I guess we'll just mark all of these, just so you know they're from the same case. I mean, these might end up in mixers, just FYI. So I don't know if we're gonna do all, I mean, unless these start to sell out really fast, I don't know if we're gonna do all 20. I don't know if we're gonna do all 20 as one box breaks, but we can if they sell out quickly. I think there's already another one box in the store. Eenie, meenie, miney, moe. It's random enough. Eenie, meenie, miney, moe. Okay, they're tying it right at the top. I think all of them are real. Eenie, miney, moe. There you go. So that's the one we're gonna do. All right, just a quick little one box break. In case you're like, wait, in case you're like, kind of doing the math on this, right? Yeah, these basketball boxes got really pricey really fast. All right, any trades? I'm gonna go, I'm gonna keep the video running. I'm gonna go grab my coffee that I just made. When I come back, we'll do the break. Met cafe, Colombian, out of the shop curing machine here. I think I have the curing machine for the shop, which environmentally, not a fan of all those curing cups, but man, the convenience of it is pretty stellar. I think there's ways to recycle those things though. Yeah, well, there's like four different settings. I think there's like an espresso-sized setting and then a medium setting and a third and a fourth setting for bigger mugs. I use the next one up from the smallest because it makes the coffee stronger. All right, yeah, not that much in here, but could be huge if you land the right rookie. What are we looking for here? One autograph per box on average, six cards per box. Good luck. There you go. All right, there's the Marta Rosen, Spurs Group, that's for Warren. We've got Russell Westbrook, 30 out of 88 for the Rockets. That's gonna go to Barack Berman and the Rockets Group. Your autograph is Darius Basely, OKC Thunder, like that mojo pattern in the background there. Oklahoma City, Thunder, that'll be for John Samuelson with the auto, the two color, Buddy Heald, Kings, Matthew with that one. I thought John Samuelson, this was from afar. It looked like it might've been Zion, but it's his teammate, Nikhil Alexander Walker. And there's another Darius Basely right here, another Thunder for John, rated rookie. There you go, that's that. Nothing huge out of there, but I think these generally sell a bit better than the regular Donnerous Optic. Each, the per box cost has shot up, so there you have it. There you go, ladies and gentlemen. Joe for Jaspy's casebreaks.com. We'll see you next time for the next one. Bye-bye.


I have rhubarb. I love rhubarb. Don't eat that. The raw rhubarb is not very tasty. I also have sunscreen, because it's hot out there. You brought it with you? Sunscreen is important. Not sponsored. P.S. not sponsored. P.S.A. where sunscreen is hot out there. Hey fellow reading warriors and welcome to today's video. It is the mid-year book freakout tag and I am super excited to do it. It was created by Earl Grey Reads and Chan. So let's get into it. This book you read this year and that is a tough one because I've read so many good books for so many different reasons and of different genres. But the one I decided to go with for this is Clap and You Land by Elizabeth Acevedo. It was the first book I read in verse and everything was amazing about it. The characters were amazing. The emotion, the writing, the format. It is a pretty recent read so of course it's still in my mind. But I've read so many other books since then that for it to really stick out in my mind as much as it did, it's probably the best book I've read this year, Five Stars Hands Down. And then the second one is the Best Sequel and I went back and forth between two of them but I think Bruja Born by Zoreda Cordova is probably the best sequel I've read this year. It is the second book in the Brooklyn Brujas trilogy by her and I love the first book. I love the second book. I finally started reading the third book. I love it so much. Each one follows a different sister and the adventure that they go on. And each sister is so strong and unique in their own way. Like they're just amazing characters and you see that in every book. But it's just so fun and so exciting to finally read a book from each sister's perspective and you just see the family bonds and I love it so much. So the first one is called Labyrinth Lost just in case you're interested in starting the trilogy for your own. The third question is a new release you have yet to read. Obviously there are many so I'm only going to name a few. First off being Dial A for Anties and then there's also the Spanish Love Deception and Sweet and Bitter Magic. Those are three that I've been constantly thinking about and I definitely need to get them. The fourth one is Most Anticipated Release for the next half of the year and I believe the one I'm choosing for this is coming out quite soon. It is Six Crimes and Cranes by Elizabeth Lynn. I love Elizabeth Lynn's writing and her characters and I've just I've heard so much about this book. So many good things and I'm so excited to read it. So definitely as soon as I can get my hands on it and it comes out, it's fine. It's going to be here. Along with Six Crimes and Cranes by Elizabeth Lynn. There is another book that is about to be released literally like a week or two after this video will go up. I was very fortunate in that I was allowed to get an advanced readers copy so I can actually show it to you. But that is Wear the Briar Sleep by Emma Bevan and this is like a horror thriller novel. Oh my word, it will be perfect for Halloween which is great that it's coming out July 17 because then it's you know, it's right on time to get into the fall spooky season. And so this is a Victorian kind of gothic book about a girl who lives with her sister and there's something with this creaky.  So this is another big anticipated release that I have enjoyed and thought it should be mentioned here. Number five is the biggest disappointment and the book I've chosen for this is the biggest disappointment but it's not a bad book. It's still a good three star book. It's still one I would suggest. It just didn't quite do as much for me as I hoped it would. And then it's the Stormrunner by J.C. Cervantes. This was presented by Rick Riordan and really the disappointing thing about this book was that it just was another Percy Jackson. It's not in a oh it's a kid who finds out he's like half god, half not. It's not the premise. There were characters, scenes, moments that just seemed like that came straight out of Percy Jackson. I just hoped that it was a little more unique of a book. I wish it was a little more independent, a little more interesting and really played off of its own mythology and traditions rather than trying to fit it to this previously published book. So it's still a great book, still recommend it, just disappointed me a little. And then the next one is the biggest surprise and again this is interesting because I'm choosing the Gilded Ones by Namina Forna and this was the biggest surprise just because there was so much in it that I didn't expect. Like I kept hearing people get really excited for it and then everyone was like oh it's so dark. So I went into this book knowing that it was going to be dark so it very much surprised me at yes how dark it was but also not really. Like now that I was expecting it it just didn't seem that dark and there were just so many things in here that surprised me. I loved the feminist aspect of it. I loved where it ended up. There was so much to it that I just wasn't expecting and yet it all worked together really well. So it was definitely a happy surprise. And then the next one is your favorite author whether it's a debut novel or a new to you author and for this one it's definitely a new to me author and that is Tatsuya Endo. This is the second volume in the Spy X Family manga and it's definitely new to me because I have not really read any manga before but I am a fan of anime so it makes sense that I would like manga. But I just read the first volume and I know I'm the second volume and I am loving it so much. I'm definitely going to speed through these as quickly as possible which is not hard because they're not big and it's manga you can flip through that pretty quickly. So this is my favorite like new to me author. Question number eight is your newest fictional crush and I kind of have to go with Twilight from this book. So I should probably explain the main character here is a spy and he's put on a mission and in order to complete this mission he needs a child to enroll in a very prestigious academy. But in order for the child that he will eventually adopt but in order for her to get into the academy both parents have to be present. So then he needs to go and find himself a wife and oh my goodness I love Twilight so much. He has no idea how to take care of a child. He has no idea how to be a husband. He just knows how to be a great spy but he knows that he can't let his cover slip.   And they neither of them know she's telepathic because she's afraid that when they find that out they're going to give her up. She's going to go back to the orphanage and that's not been great for her. So oh my gosh Twilight is definitely my fictional crush. Then number nine is my newest favorite character and for this I'm going to choose Charlie Vega from Fat Chance Charlie Vega. I finished listening to the audiobook this morning and oh my gosh Charlie is just very much that character that I want to give her a hug.  She goes through such a journey in this book. She's relatable in many different ways for many different people. There are elements that I was relating to her for and elements that I could just see other people that I knew relating with her. So I'm like oh my gosh I want everyone to read this book. It was amazing. I just I loved Charlie's personality how strong she was but then also just how she grew. I just oh mm-hmm you get it. Let's move on now. Number ten is a book that made you cry and I really don't cry for books or movies all that often. So for me I chose the book that came closest to getting me to cry. Like I was very much on the verge but I didn't quite get there and I can definitely see other people crying. And that is the new release of Stars in Ebro by Peggy Wargo. This tells the story of a true story of a titanic survivor who is also a child. And she her parents were missionaries in India but her brother gets sick and so they have to go home to Michigan. And they end up boarding the Titanic hoping that that will take her, her family, her brother to the states to get him treatment. All without her father who stayed behind to watch the orphanage. And oh my goodness this ending. It's the Titanic so you know it's coming but you just can't help but bawl anyway. So this came definitely closest to getting me to cry and I very much believe it will get many other people to cry. So if you're looking for a good cry pick this up. And it's not too long so you can just like zip right through it and just feel all the emotions. Have a hangover for a day or two and then you'll be fine. And then for a book that made you happy I'm going to cheat a little bit and kind of do two books but they're written by the same author. So those are Rachel Hawkins books Her Royal Highness and Prince Charming. These books made me so happy. I love them. I read them essentially back to back and they just, they were romances that I loved strangely. And these have put a new faith in me that I actually do enjoy reading romance for so long I was denying it. I wouldn't let myself enjoy romance but these books just made me so happy that you know I just had to, I just had, these books made me happy. The next one is the most beautiful book that you have bought this year and I believe the book I have chosen is the most beautiful with and without the dust jacket. Because I have just started reading it I have taken the dust jacket off so I will just show you what it looks like. And the book I have chosen is With the Fire on High by Elizabeth Acevedos. Obviously I read Clap and You Land and loved it as I talked about earlier in the video. So I'm really excited to really dive into this and I think come on this is beautiful. This is absolutely gorgeous. The last question is books you need to read before the end of the year. Obviously so many. Really just watch any of the readathon TBR videos that I filmed in the past half of the year and you'll see most of the books I need to read by the end of the year. I filmed so many TBRs with like the same books that I just haven't read yet so those are obviously the ones that I need to read. Like To Kill a Kingdom. We Hunt the Flame. Beach Read. Like there have been so many. Caravall. Like oh but I'm going to read them. I will, I will, I will. Thank you guys so much for watching the video. I hope you enjoyed it. If you did give it a thumbs up. Let me know if you enjoyed it. Comment down below any of the answers to any of these questions that you have. What was your favorite book of the year? Maybe your loose favorite book of the year so far. If you have any reading recommendations I always love to hear those. Click the subscribe button and click the bell to be notified when I upload which is every Thursday. But until then and I see you guys in the next video. I wish you a happy reading.


I really love art because it feels like I'm able to connect to so many different parts of myself. The Summer Institute for Teens is a program that Emily Carr provides to people in high school in which they are able to come in for the summer and gain some experience of what art school is like. It sounded really cool to be able to have like a full month to just sit down and do art because of COVID-19 the program was all online. This is where I might call my art. Even though we are online the instructors really still put their best foot forward. Teaching us these new experiences that they would have in person they still brought it online in just a new way. One of the lessons I learned was taking materials that were already available to me that I probably would have looked over and looking at them in a different way especially since we were working from home. This is where I did all my drawing, painting, sketching. Not everybody was in Vancouver or even Canada so it was really interesting to see art from so many places. Every once in a while people would be like how do you do this thing and somebody always knew. So it was fun to be able to have that interpersonal learning of students too. The Summer Institute for Teens definitely helped me grow my portfolio not only with pieces but actually giving me the experience to do so many works in a rather like condensed period of time. The progress that I've seen in my art was like doubled or tripled even in that time because it was just so intense and so much art. Having an instructor there to review the portfolio is definitely reassuring. Although you might feel alone while crafting your portfolio having that instructor feedback makes it so that you know where to go. It definitely felt like I was learning what art university was gonna be like. I knew so much more and I'd done so much art and it just felt like a really good experience. I'm glad I had the opportunity. Be the change you want to see in the world but be the art you want to see in the world.