Thank you for coming. Hopefully, you had a great time yesterday with me. I learned something new. I learned some new words. That's not yet in chess. So it was great. Bye for me. Did you have a great time? No problem. Okay. At the beginning, we prepared a quick exercise for you. Fortunately, it isn't a fighter. We have a simple lesson for you. Do you think that people care about security? If so, just put your hands up. No. They care about it. Just not a method. I guess we are good. Unfortunately, they don't care about security. Even they are self-employed. So it isn't so good. But even so, it's fine. Today, together with Lucas, we will describe you the latest performance and disability improvements in SEMU. Thank you. Okay. How did you fix it? I will switch the cable. Today, we will describe you the latest SEMU's disability and performance improvements. And how it will help you if you see your own policy for your product. And how it improves phenomena security in general. So in the first today's topics, we call it security and fire. We will describe you how we deal with security issues, where SEMU stands, how SEMU helps you with these security issues. In the second topic, we will tell you about your demonstration in Europe. It's very amazing that Lucas will demonstrate you how SEMU is amazing. How SEMU is amazing. Technology and how SEMU will help you with your shell shock. In the third topic, it's also my favorite topic. We will tell you that SEMU is more handy. I will describe you these performance and disability improvements. And before the discussion and before the questions, Lucas will tell you how we ship February SEMU policy. And here we will describe you how we ship your own policy for your product. Okay. So let's start. If I talk about security, I use these keywords as a helper. So where, how and where. So let's start with the first word. Let's do people care about security. Right. Okay. After. Ah, they are in compromise. Yeah. That's true. But they start to care if it's too late. They start to care if there are DICs or if there are mobile or let's go, let's go. Everything already attached. So in the time, they start to ask, they start to ask, how do security, how these security issues affect me? And there are a lot of questions. So for example, where I use my personal data? Or will be my personal data share on the internet? I have a funny story about that. I can tell you, I can tell you a bit after the presentation. So the next question could be, will be my account and store. It's awesome. Or is my personal device protected anyhow? For example, the last one is, are trusted institutions very trusted and protected from these security issues? I think, I believe you think about more questions, but I believe these are representative. So, and because, yeah, people and people ask questions, they start to ask, where do security issues come from? What do you think? Where do security issues come from? Everywhere. External attacks, external attacks. Okay. Thank you. Many come from us. They come from... So, for example, of course, I remember going to the United States, but I was there. So, and if I see the mistake, I started to care and I started to ask, how are these security issues fixed? It's important. It was important for me to know it, and I guess people also, they asked about that. So, here we are talking about related security. So, if the new security issue appears, there is a time frame. There is a time frame when your assistant is unprotected. We call it, we call it a window of vulnerability. So, it means your doors and these doors are open. So, your assistant is unprotected. Your data can be shared on the Internet and you can lose your data and so on. And during the time, some engineers and security firms, they work on a fix. If we have a fix, we perform a fix and we release the fix. So, your doors are open, closed, but you can lose some data. So, what is important? Important is that your system is unprotected from consequences of exploits during the time, during the window of vulnerability. It's really important to understand. And here, and now, party security comes into the game. Party security through the window of vulnerability. So, what does it mean? Party security helps you and protects your system if your doors are open. So, can you give me any example of party security? Thank you, it's a big surprise, I would say. So, yes, SEMUX. With party security, your system is protected from consequences of exploits. And SEMUX is a good example, thank you for that party security. So, SEMUX is security enhanced limits. It's a security mechanism bringing party security for your system. So, with SEMUX, your system is protected from consequences of exploits. Do you have any? Do you know how many HTTP parts? Yeah? Yeah? Yeah, Google. Yeah, okay. So, for example, level exploits, we were able to access from one machine to another machine. So, another example could be pre-registeration in SEMUX. With telemetry, it's a SEMUX data, you know, there is a nice book about it and how SEMUX helps you. It helps you with SEMUX pre-registeration under a certain condition. You are able to access any files on your system. So, it's very cool. And, for example, Chelsea, it's the last one. And, look at it and demonstrate to you how SEMUX is amazing. And, we will show you how SEMUX helps you with shell shock. So, it's your turn. Thank you, Nick. So, hacking time. How many of you know the shell shock and some technical background? Okay, cool. One pre-reminer. The point of the shell shock is that after the environment variable, after the semicolon, you can add any arbitrary command and this command will be also executed. So, I also use this exploit to show you the example how SEMUX can be powerful. So, I started with the victim server. On this server, there is a web server and on the web server is a CGI script. And, on the other side, on the attacker side, I will start listening for 1999-99 and then I'll try to connect from the victim machine to the attacker and get the shell there. So, let's go. Do I sit for it? Do you have to write them all? Yeah, I have to write them all. Okay, thank you. Okay, don't worry about it. So, there in this shell there is a victim terminal and here is an attacker terminal. I can use this. And, okay, so I start listening using the lab cap command. And, now I'm listening. It's fine. Do you see? Okay, cool. And, okay, so now I send HTTP request and you can see after the semicolon, there is no direction. Standard output and standard input is immediately to work 1999-99. So, I execute it and here you can see I get the terminal. So, I can run IDZ, who am I? Yeah, or I can get some files in ETC, for example. Yeah, pretty simple. Okay, so this was the case with the selenux in permissive world on the victim side, as you can see. So, I switch to enforcing. So, enforce one. Okay. So, we try again. Yes, again I send the HTTP request and as you can see, I don't get the terminal here. And, for example, we can show the latest AVCs on the server. Yeah. And the most important here is the last one. And we can see that some CGI script with following contracts is trying to connect on TCP for 99-99. And this port is level as jbosman element port T. And this is not allowed in policy. So, the selenux protects the system. Yeah. So, that's all from me. Bye. Okay, thank you. No, no, no, no. Sorry. Sorry for that. And what's the conclusion? The conclusion of this demo is that if you run Linux with send, these are good. You're going to get the time. Thank you. What would happen in a few minutes? Yes, you can connect, but also you are protected because I show it that if you run IDZ, you are still the context of the ACI script. And, for example, the CGI script cannot access to some home directory. So, your home data will be protected. For example, you can chat at the channel. Yeah. Yeah. Yeah. Yeah. We have a, in our book also, we let it do soon. We look at questions. Yeah. We have a very nice example. Also, I have zero also. We have new examples. You are ready to access a CGI for example. Yeah. It's dependent on the configuration of the system of the victim server and also how clever the attacker is to use the port. I like this demo. It has been also presented on something as far as I know. And look out here. I have a question for you. What is your system protected? Yes, of course. Yeah. Yeah? Okay. You can show me. Yeah. You can show me the other video. Yeah. And everyone, you have a source for the other? Okay, so. So, really? What is your system protected? Not now because the reason is that, the reason is that I use also Confined users on my system and I have the boolean which allows to, to binding. The user can bing on some port. It's turned off on my system. Okay. So, I just quickly switch to permacillin. Yeah. If you are running on your own, then you have some problems with the system. Yeah. So, you have some problems with the system. My system. If you have some problems with the system, you see that in Coptic Farmy, my system is in function. Okay, so. You are protected. You are protected? Yes. You are protected? Yes. Do you have some problems with the system? Always. Always? Always. Just to be honest, yes, no. Okay. So, it's also protected from desktop. I remember the back and the steam application, the gaming one. Yeah. The back was something about removing your data files from, or a root directory or your home directory, can you remember? Yeah, I know about this issue. And first, from the CD-Lidon's label, and, unfortunately, I didn't see that problem. Ah, let's go. Let's go. I don't know what this is about. I have discussed it on the steam upstream and on the DLHP. Okay, thank you. Right now, I have a great news for you. Right now I will introduce the last, the last, we are going to introduce BIC. We said it improvements in a similar story and I will discuss that. So, the first one, we introduce BIC performance gains. So, previously, you tried to install the policy or if you tried to disable or enable the policy. For example, you tried to disable or enable the local policy, which means you tried to reduce the policy. You could count approximately 15 seconds. So, you have to show me 15 seconds for this guy. I don't know how to pronounce it because I look both the way. And fortunately, there is a here. So, you were traveling for Super Bowl. So, you can fix it and you can do it. Do I have to do it? Okay. He's not done it. So, is that true? Okay, so, previously, if you installed the policy or if you disabled or enable, in this case, local policy, but if you disabled or enable your local policy, it took approximately 20 seconds. So, it means you reached 70% of the speed up of the platform. So, I think it's really huge. And it's in Fedora and I'll tell you later that, oh, I don't say here, it will be also in Fedora. So, the second one. How did you make it that much faster? Well, we adopted a new user space for nothing. We did some changes to make it work in Fedora. And they completely reunite local structure. So, there are implementations because we depend on which it was pretty hard to do some implementations. So, I'll tell you later. So, the second one. So, you reached 35% of the speed up of the platform? Yeah. It's at least 70%. So, 70%. So, really? Especially for this one. So, you're also going to do it? Yes. Okay. Yeah. Well, no, no, that's the thing. It's, as you expected. It's more modern one now. Oh, see, I'm going to be able to open it up. It's just pre-linked based. Oh, yes. So, good. Thank you for that. So, the second one. So, you tell us the new easy way how to provide your own estimate policies. And look out the table about it later. And I will describe it with some real numbers. An example. So, obviously, you try to install, for example, the person who knows, or can take each. You could fail and you failed. You failed with the following error message. With a duplicate differential error message. Why? Because it's pretty easy. Because we shift all the people to see in our distributed policy. And if you try to install the person who knows, you try to shift all the people to see. And there was an outfit. So, you are not able to overwrite distribution defaults. So, there will be changes. Currently, you don't start the person who knows. And with that, you shift all the person's policy. You can see two other policies on your system. You can see the default distribution policy. With 100 priority. And you can see another policy with 400 priority. So, you can have more of the policies on your system in the same time. There is room for it. You can install your package. In this case, you can install the person who knows. And in the more, your local policy with you shift. This policy wins because there is a higher priority. And that's the point. So, we are able to assign priorities to modules. So, we come, we adopt it, and we completely enroll the module structure. And we are able to assign priorities. So, it's very cool. It's something new. And we will tell you this time, we will tell you with a real example how to shift all the policy and use these priorities. So, okay. Multiple priorities in Federal Authority 5. Federal Authority, here is the one. Let's introduce a guy. He came up with an idea. We could, we could add some, let's say default priorities. It's a plan. It will be in Federal Authority 5. And we want to let you use for default priorities. The first one is 100 priorities. It's the, it's the, it will be for system modules, which comes from SMS policy, so for the distribution policy, there is a command which we use in the SMS policies text file. And we directly declare 100 priorities. The second one is 200 priorities. It will be for your modules, coming from other packages, coming from your, from your packages. And we will use this command in your spec files. And again, we will directly define 200 priorities. The first one is 300 priorities. It's all, it's all dead. And we know that modules with the priorities come from e-cigarette food. So if you do e-cigarette food thing, we suggest you use 300 priorities. And the last one is a default. It's 430 for your local policies. So you, you don't define priorities directly. So these modules will always be real. Yeah? So it's a plan. We are working on the documentation for that, for Federa, for REL. So it will be, it will be there very soon. Okay. I do want to allow that jam just to remember. Please. I do want to allow that jam. Yeah. Yeah. Oh, yes. So if I run out of the loud dash A at all, the dash has to be in the awesome. Yeah. Federa is actually going to come out and say, now you need to run as the module dash X3. Yeah. So it's going to be. Yeah. 300 priorities. Yeah. So you're not dead. That will be 400 priorities by default. Yeah. So, okay. The last one. We're going to use the new program in terms of language. It's called SIL. I like it. I like it. Seriously. We will try to write our own policy module. Have you ever tried that? Yes. Yes. Sometimes it, yeah. It's complicated. Yeah. So for example, I was trying to, to reproduce and to fix some, some of the issues. So I created both the policy, my set of policy. Yeah. There is a policy rule and some comparisons. It's sometimes, it's not so complicated for me, but it's been sometimes. After that, you need it compiled. There's a policy file. You're using a, a serious use of X3. You went with my set of PPP, which is higher than I wish. It's higher than I wish. It's a, it's a, it's a compiled file. It's higher than I wish, and it's not in my legal. And it's higher than I wish. And after that, you wrote, you wrote, you wrote this PPP file. So your policy is correct. And your policy is correct. So how does it do? So we have, yeah. So policy files, using a serious use of X3, you wrote PPP. Again, it's a higher than I wish. It is in a legal. After that, you use a serious command. The policy is level. And this policy is after that, also in the panel. So too many steps. So it's also a reason why it took 20 percent, 20 seconds before that. What is the current state? The current state is you just declare one single rule with zero, and you just load it, load it. So there's no policy files. No compilation. You just use the zero. You use a similar command. And the policy is leveled. And you load it into the current state. And it's intermediate language. So we have read and load intermediate policy language against not read and load higher language. We call it the PPP. And there's a potential for a new higher language. We can write with you, for example, JavaScript. I feel everything good, but it won't. So there's a picture. So we have intermediate language. And there is a possibility to write a new variable higher language. So for example, there's an example. You should have load policy tool. It's being used for local policy modules. So you can define something like I as load watch in web server I want to read my works. It's an example of higher language. So it works. It works, I find. But without demo. So there's a possibility for us. And good news, it's here. It's we introduce it in federal law 3. It's federal law 4. And we introduce it also in federal law. So it's time. And for law 7. Yes. So who is? So who is behind these two keys? It's the law of the original. Yeah. Nothing else. It's major. I've been bribed. You know what I mean? The I think I need to keep writing whatever the policy is. Most people are right. Yeah, I mean it's fine. You don't have to use it. All the speed up advantages. All the speed priorities. You just write what you've got. Yeah. It doesn't matter. Yeah. I would make that. Yeah. Well, it's a thing. Silver's never really known. Yeah. No one stepped up to do the idle thing. Right, right. And what I think is wrong is Silver's new. And yes, we've been talking about Silver. Yeah. We've been talking about Silver. Yeah. Yeah. Yeah. Yeah. Yeah. Yeah. Yeah. Yeah. Yeah. Yeah. Yeah. Yeah. Silver銀 and Silver銀. Yeah. Yeah. Yeah. Yeah. Yeah. Yeah. Yeah. Yeah. Yeah, you have transformed yourself. Yeah. Wonderful. We will have a tech talk about that in August, so we will describe it with some examples. Okay, so who is behind these changes? Okay, so let me introduce myself. I was born in Nepal. I currently work in New York. Still, I am currently working as a teammate. The program is called, this is there. He is a fellow engineer that I have talked about. He is Bill Spejdan, Lukash. He is a policy guy. He is successfully replacing me. He is an intern. Why are you so mad? He has to deal with all the bugs when you found him. He is an intern, and he is a very good guy. So, nice faces, right? Okay, thank you, and stay with us. Thank you, Erik. So, Erik told you about local food style in Estonia. And the question is where can we find all these policies in Federa? And the answer is pretty simple. You can find some of these policies at the end of the package. And we call this policy distro policy. And this distro policy is adjusted for, especially for Federa. And distro policy contains mainly the policies for core components like kernel, system D. And then also contains policies for common demos like ACDPD, FTPD, SSHD, and a lot more. And then it also contains the user domains for some of the users, like users, CIS admin, or guests, for example. Distro policy does not contain any policies for third party components. This means if you download any application or some demand, you download it and install it on your system. Probably the policy will be missing the distro policy and this domain will be unconfined. And you need to write a new policy for this. We are trying to cover all demos in official Federa repositories. In Federa 23 and Federa 24, we have around 470 sales modules, which is a lot. Okay, so the next question is where I can find these sources. And we are on GitHub. We have a special organization called Federa Linux. And there is a repository for some of its policies and all source policies which you can find in Federa.desk.dev. And there are some useful links. And if you are interested in how to contribute or how to package this policy, you can click on it and read it. Yeah, no problem. So, okay, Murek told us that we know how to write on-sale-moods policy. And we also know that it's quite easy. Because I believe everybody here listened or read some documents about writing on-sale-moods policy from Murek or probably from them. But the other question is can we ship these modules easily? And I say yes. And it's also very easy and I'll show you how to do that. So, you can ship your own module as a package of the main LPM package of your application. And all you can ship the all-lesson module directly in the LPM package. It's your choice. But we prefer the sub-package. Definitely. You said just in case somebody didn't want to enable an SELenix Linux system. Why would you want a sub-package? Is it for people who are not using SELenix Linux? No, no, no. This change, if the people using the enable or disable SELenix, you will see in the spec file how I saw it. But it exists in a solution, I believe. Okay. So, another example. And you can try to install Docker on Fedora. How will you make mention? And as you can see, do you see it? You need it bigger? Maybe I can make it. Yes, go. Thank you. So, as you can see on my system, I don't have installed Docker yet. And I will use a C-module command and there is no output, which means there is no Docker module loaded to the kernel. Then I install Docker and other packages are installed, but the most important for us now is Docker SELenix package. And then you see it's installed and then I again try the S-module and we see this SELenix module loaded to the kernel. Okay. So, shipping your own SELenix module brings a lot of benefits. The first one is changes in policy can be modified immediately. That means that you don't need to wait while the SELenix maintainer is me. We'll fix your issue. Then you are also independent from SELenix policy and updates. This means that you don't need to wait while I create the update in Fedora. For example, the last one is connected also the first one and second one and I believe it is the most important. And the packages, your own SELenix module is synchronized with your application and this means that policy can affect all your features in your application. So, I believe this is the most important thing about shipping your own policy. Then I have a question on how to do this. And we will need definitely clear packages of SELenix policy. Then we will need working SELenix policy for the product. Next slide will be the make file comparison policy and of course the spec file of your application. Again, some examples are installed for packages. I created my environment and this is the really basic SELenix policy. They are just defined to types and run our rule. This is a patent enforcement file. Here you can see the file context file and there is also the interface file but it's not important right now. Okay, so we have prepared our policy. It's just an example. And this is an example of make file but as you can see the most important line is that line we've made. And you just make the policy in compiling to pp format as Murek mentioned. So, policy is ready now and let's go integrating to the spec file. Firstly, in build section you need to compile your policy to pp format and then in install section you will install firstly the interface file to user share SELenix that will include concrete directory and then you also install the policy files to user share SELenix packages. So it's pretty simple. And then in both install files of installation of your package you will be using a SELenix command you will be loaded to the kernel and you ask me about the users who use an e-book or this e-book and you can see there it's a conditional, it's a SELenix label and then after pps the policy is reloaded. And this is pretty same in both install files. Same but the model is removed. And the last one is file section where you need to mention the files to install. You can define some, if you install some your own model and you need to label some files after the installation you can ask to macro the path of some files. So by default the label only goes past only by the package? Yes, yes. It helps sometimes. Let's not tell this to me if it isn't part of RTPO. I have a very big problem with this part. Because I have a policy, a SELenix principle from my brother. And he tried to redo the reliable path, usually last an hour or so. Because I have more than that. So while you improve the speed from 20 seconds to 50 seconds to loading modules and get to more than 30 seconds to see more than an hour improvement. So when you start with the SELenix module I am basically installing it because I changed the path of some apps. So when you understand you have the information what was the previous SELenix module and what was the new one and you can generate a change, especially in those path contexts. So it would be nice if you can give me the list of the paths which are affected. So I don't need to label all those paths and just bunch of them. So we do that in the SELenix policy, I can make it. So yes, I think you know it in my head. We can talk about that. Because we are almost out of time. If you want to have a director with you, you're not allowed to. What? If you have a director with you, you're not allowed to. Yeah. It's taking a lot of your time. Yeah, but I have some kind of changes on that. Okay. Thank you. Okay, so policy model is now part of your package application and it's working. And also I am attaching some useful links and these links for my blog. And there is a tutorial, step-to-step, how to create your own SELenix model and ship it. So if you want to try it, if you want to try it, so that you don't have to start here. Okay. What about really, really near future? And as Mieck mentioned, using SELenix's feature makes shipping on models even easier. And again, another example. So now, this SELenix policy contains also the Docker package and this SELenix package, as Mieck said, has priority 100. And again, some example, you can see the priority of the package is 100 and there is no Docker SELenix policy LPM package installed. Okay. What will happen after installing Docker SELenix LPM package? And again, you see the priority 100. I have installed Docker and also with Docker is installed as a Docker SELenix package and again, you can see two different SELenix modules. And Mieck said that only the active policies, the only active policies that policy with the hierarchy. So it's pretty easy and it's changed in the parameter in the SELenix model. So it's same like the example. Yeah, but both the new policies have exactly the same name. How do I know which one is which? Well, you do numbers. Yeah. But I mean, I have the third one policy, which is the Docker. Yeah. It is called Docker. Then I can install the one. How do I know which one is the current one? The number versus both of them have Docker name. None of them has given me the distinction which is which. Well, the 100 is going to be the system. Yes. Yeah. The 100 is going to be the system. Yes. You see there's one with 300 and you know that it's going to be it. Yeah. And that one is 400, you know, to the local region. Yeah. This is the reason why we could better file the table. And it mentioned that we have us for a troubleshoot partners. We have the parity 300. The fault is 400. And this is the reason for that. Yeah. Okay. You're also in this module can be installed without any changes in this policy. And this is also, that's a new, a special point for me because if you want, it should be your own module without the new user space. Firstly, I need to know the policy from our district policy. And this is also a cool thing. And the last thing is the security with SLNXO. It's 7.1. Yeah. Okay. Any questions? I think we are out of time. Let's give you a personal view at the end. So I'll say one more question just. Thank you. Thank you. Thank you. Thank you. Thank you. Thank you. Thank you. Thank you. Thank you.


Hello everybody and welcome to another hobby-cheating video and today I am really excited GW sent me this awesome box of flesh eater quartz and today We're gonna paint up one of these models specifically one of my favorite models from the box And we're gonna talk about some really interesting and different ways to attack speed painting Models like this. So let's get into it The strict techno man sir that is Vincy V. Let us get to the technique and learn it Vincy V Those of you who've been around for a little while you may remember that a long time ago I did a speed painted flesh eater quartz army over a weekend and I still have that army and I love it It's a lot of fun and I get on the table every so often So I was excited to see more releases for flesh eater quartz But since the previous version of my army was speed painted I wanted to do kind of the same thing here But instead of just using the same tips tricks and techniques that I used in the previous video I thought we'd try something new and exciting. So today we're gonna do we're gonna mess around with oil paints Now just wait wait wait wait don't turn it off. I know it's scary We're talking about different paints different things, but trust me I think this is a really really fun way to go about base-coding your miniatures and getting things done fast Especially when you have a large amount of an army to paint because the time it takes these things to dry You can effectively batch paint a whole army along to a good place And then let it rest and then come back and do the finishing work But you'll see as we get into it Don't tell anyone but this is kind of how you subtractively slap chop. It's reverse slap chop. It's chop slap I don't know. It's using oil paints in a subtractive way with under shading to create tonal variation You'll see it's really easy despite the fact we can use a bunch of five dollar words to describe it Let's get over the desk. Let's get painting a model. Let's have some fun As I mentioned we are starting with oil paints, but don't be afraid We're not going to be we're not going to get too crazy here. This is a simple selection of colors They're very easy to manage and we're going to have a lot of fun with them It's just a nice range. It's going to help us do some deathly flesh And stuff like that and you'll see that when we apply these We're going to have a lot of fun with it. So oil paints The nice part about them is they stay wet for longer. The bad part about them is they stay wet for longer It's kind of a double-edged sword But the advantage here is you can't make a mistake when you're I'm working with this big giant brush And as I'm working my way around the model applying these tones If I ever get paint somewhere I don't want or don't like or anything like that Then in that case, I can just use white spirits and erase it So I always use Mona Lisa sort of white spirits or gamble gamsol white spirits. Those are my two preferred I'll link those down in the description as well But they make honestly the whole process very easy So what I'm working with here is the oil paints out of the tube thinned maybe one to one with white spirits And I'm just applying rough and dirty base coats Because I can clean it up later in later steps and because I'm going to subtract a lot of this paint off I'm not too worried about being a hundred percent accurate if some colors get into each other Or we're not quite as accurate with our base coats as we'd want to be or things look a little thick worry not For we will come back later and remove a bunch of this paint When you're working with oil paints when I say it's a subtractive method What I mean by that is you're going to apply the paint and then remove it We're effectively going to end in the same place as you would get if you put a thin glaze over You know a zenith all undercoat or a dry brush undercoat or something like that That's why all I say this is like And I hate to use the term but it is kind of a sort of slap choppy like method okay because The execution here is going to end in a similar place although we're using a very different method to get there And so when I'm putting down all of these base coats Even though they're really thick and you're like geez you really blew away your zenithal like nothing from the zenithal shows through This paint when it goes on right Don't worry as you see in later stages because we're going to use mostly subtractive painting for this We will in fact preserve a lot of that And as a point of fact here I went for a pretty simple black to white undercoat But there's no reason you'd have to do that playing with this subtractive method of oil paints You can actually get quite Experimental you can use yellows under there and reds and purples and stuff like that and get all sorts of fun interactions with the oil paint above Now I let it sit for maybe 20 minutes not very long and then I'm using these little makeup sponges I'll also link those below And you see I'm just wiping a lot of the paint off now I am not using any white spirits in this brush at this time. This is nothing more than a dry makeup sponge being wiped over the thing And that's because I want to start by just removing the excess and you see how immediately awesome those muscles look. I mean Honestly, even I was kind of blown away. I'm not gonna lie like the muscularity on this guy just pops right out When you with this method and you can then focus in Just lightly dabbing the thing across the higher areas and the more you remove The more you will reset the tone and remove paint bringing it back to kind of how it was with the gray and and Lightening the effect of the stain now. You'll never remove this completely unless you go to to actual White spirits with white spirits. You can actually strip it back down to the primer But the but without that you'll always leave a stain there and that's good That's not bad. It's an advantage for us Because it lets us use all the hard work that was done in the in the airbrush and by hard work I mean the 15 seconds I spent doing a zenithal prime To our advantage to create all of this all of this contrast and shade with basically no work And it's fast. That's the advantage of it Like layering like doing all the base coats on this guy and then wiping this off took maybe 30 minutes And I did all three of them now what I'm doing here is going back and then I'm going to reapply with some areas We may want to You can go back and forth the same way as you would do with acrylic paints So I can reinforce it. So for example here on the fur I'm going to start by reapplying some brown Then I'm going to work in some of that naples yellow Which is going to stand in for sort of our flesh tone here or a lighter color our universal highlight We're going to use a similar universal highlight across both acrylics and oils And I'm just going to work it into the the upper parts of the fur now. It will be rough when you start Like here it pulled off a little bit more of the red than I wanted so I can restain it And then next time you can pull it off in a lighter fashion and so on and so forth So you you have a choice when you work with this you don't have to be stuck Now I'm taking a clean dry brush just Bone dry large brush And I am going to just blend the two wet paints together when my brush goes off camera That's me wiping it pretty aggressively on a paper towel. You can use a paper towel or an old t-shirt t-shirt's actually better because you know get any little texture from the paper towel traits or paper towel Detritus But I'm just blending it together in that way We can also still push our highlights more. I thought the muscles look pretty good But I thought hey, let's push it even farther So this is nothing more than that purple plus a little bit of that naples yellow I I hit the tops of the highlights and then again back to my clean dry brush And then I just again wipe and smooth most of it together Really making sure we get that nice highlight pop on the muscles and now we're getting some real action here And again, this is so easy and the blend is liquid smooth Right. There's no glazes. There's no nonsense to achieve a smooth blend because you're working with these wet on wet paints and just bringing the tones together you end up with something completely smooth Because all the paints are perfectly integrated Now the downside is we're going to have to let this dry once we're done with the oil paint step for quite a while But for our purposes here Like I want to pop up the actual ghoul's flesh and subtract some of the green I don't want a huge amount of actual green and actual purple. I need to kind of kill both of those out Otherwise the two models will be too contrasting. So I need to to basically De-saturate the ghoul. We'll get rid of some of the green. So I bring in a lot of that yellow ochre But it's the same trick. I just once again go to my clean dry brush wiping aggressively on a paper towel in between And then blend that into his skin and once again, we get a completely smooth perfect blend No drama. No llama. No issue It really is an incredibly relaxing way to paint and I would highly recommend it But if this so you could get to this point and stop but of course We're going to keep going Now I will openly admit here that the downside is the amount of time it takes oil paints to dry Uh after I did all of these base coat steps It took me uh, I let them sit for The better part of three days to really fully cure Now that sounds like a lot if you're like on a tight schedule But I'm usually working on two projects at once. So I didn't just paint this guy I base coated a bunch of these models set them all to the side under a light And then just let them be and then I went and worked on a different project So it's not as though I was sitting there doing nothing This is why I usually recommend that it's good to have two different projects going at a time So if you get bored with one or you get tired with one or frustrated with one or blocked with one Whatever would happen You have that other project to go to to cleanse your palette to keep yourself fresh to keep yourself Hobbying and at the desk So for me, I just traded to my other project until it was dry then came back to this and quickly finished them up Speaking to finish them up. Hey, let's get back to the desk and you know, let's finish this guy up So now we're going to move to acrylic paints and I'm going to use a sort of similar-ish range of colors But effectively this is just going to be my detailing and highlights and just a little bit of cleanup Now one thing I'll say here is if you want You could just stop here Like I'm going to go in and touch up and push some of the highlights and things with little details with the acrylic paint But you don't have to you could just rely on what was here on the oil and it's perfectly tabletop ready But my first step is actually to deepen the shadows one of the problems with working with oil paints like this is You end up with a pretty samey color and you don't get those nice deep recess shadows in some places So here i'm just taking some of that garagak sewer running it in places like the fur where you want those nice deep shadows And and jobs are good. It's just applying a contrast paint. It's very easy Now anytime you see me layering on the skin of the beast or the ghoul or anything like that. I'm working very thin When I'm working the the paints sat for three days and then were varnished I gave them two I gave the model two solid coats of my standard varnish mix of three to one ultramat to satin Let that cure and then i'm ready to paint over it with acrylics. No problem Now when i'm working like this i'm working very very very thin Like my actual layer paints that i'm doing here are at minimum two to one water to paint And that's because I want them to be really transparent I'm not gonna this is a tabletop job. This is meant to be a speed paint So we're not spending a lot of time here. I don't want to be mixing different paints I make one mix I make it thin and then if I need to reinforce the color I'm just going to apply it more than once to an area as you saw me doing on the tips of those for the tips of Little I don't know his hair or whatever it is there So when you're working very thin your first layer of very translucent paint Will apply and not change much And then you apply it again and again and you can create a smooth transition Just through multiple applications of the same thin layer paint building it up without changing your colors But it will look different on the model Now here I wanted to bring some of the purple of the beast up into the ghoul Plus the ghoul is meant to be dead flesh dead flesh often has purple tones in it So I just took some of that Leviadon purple and thinned it way down and I'm with just with water not with anything else And work it down into the recesses Into the shadows basically anywhere where it looked like there might be a good excuse to capture a little purple there Then I take this beautiful pistachio mix with dark warm flesh to again And the reason I'm integrating these more traditional Caucasian flesh tones into the mix Is because this thing was meant to be have have been a human at some point in time And so we want to integrate You know human flesh tones You can use any tone of skin you like it doesn't have to be Sort of dark warm flesh or Caucasian skin tone, but you want it to have elements of Any of the any kind of human skin tone and so it feels like the thing was alive Now in a similar way, I want to bring some of the yellow green of the rider down into the Beast So instead of just going to ivory which the easy thing to do here would be oh, we've got teeth and claws Let's just go ivory. I want you to break those habits Stop the autopilot Instead I took the pistachio Mixed it with the flesh the same highlight. I just did on his flesh But this time instead of it going with being very thin and going over the green I have it as a normal layer consistency and I'm putting it over the Claws and the teeth so they appear very yellowed and sickly and gross And it's beautiful because it brings some of those same tones down into the monster and helps Mix up so they don't feel like this whole section is purple and this whole section is green I do some final touch ups on some little micro details here Like the little bumps on his skin and the scar he's got You know picking out the teeth of the rider the eyes of the rider stuff like that Give it another varnish and then it's time for the metallic paints This guy didn't have a ton of metal on him. So again, we're going to keep it very very simple This is speed painting. So we're just going to grab some Vallejo Magnesium metal color magnesium and I give the metal a nice ones overcoat I really like magnesium for this kind of thing. It's dark. It's a darker metal.  I'm just going back to that Garagax sewer And I'm just our Garagax or I don't know whatever it is And I'm just going to run a quick Very thin. This is two to one water to Garagax Garagax To this brown color Over the metal to make it look dull and pitted and somewhat rusted and warm And then I'm going to use the oldest trick in the book here. Right here. We go. What happens. How do you clean up a wash? boom Like magic.  I'm going to show you some photos of him here. I think he came out pretty cool overall This is a really fun way to paint You can actually mess around a lot more with these oil paints. You can do more with them I do have previous videos on if you paint the entire miniature with oil paints But this was a really fun fast way to go about it You know base coatings like the entire unit. So this is like three of the bat riders took maybe I don't know 30 minutes 40 minutes something like that like it wasn't a long time And I didn't and once I sort of wiped the paint away. I already had a lot of progressions I could have just stopped there on many of the surfaces So all in all, I think these dudes came out pretty cool and I hope you like them If you liked this video, hey, give it a like subscribe for additional hobby cheating in the future We have new videos here every Saturday If you've got any questions that I didn't answer about using oil paints or mixing oils with acrylics or anything like that Feel free to drop those down in the comments below I always read every comment that you all leave and deeply appreciate them If you want to support the channel, there's lots of ways you can do so You can share this video out there. That's completely free. You can check out our merch store down there We've got some fun stuff that you can pick up. We've also got amazon affiliate links So if you're going to pick up any of those oil paints, I've got that linked down below And when you pick those up, it gives a little kick back to the channel and doesn't cost you anything extra There's also of course a patreon focused on review and feedback and taking your next step on your hobby journey We'd love to have you as part of the community As always though, I thank you so much for watching this one and we'll see you next time


What's up guys Isaac chicken in your local realized man, and I'm gonna teach you guys how to meditate today Which is surprising because I've been talking about meditation for the past two years. I just realized I don't actually have a Video where I outlined how to do it I've just been talking about the benefits of it and all that stuff so I'm gonna teach you guys how to do it to them will give you like four different methods that you can use and Outline how I meditate and some general good practices and stuff like that And just remember there's no one way to meditate These are just basic guidelines to get you started so that you have some sort of resource to go from now First thing I want to talk about is I don't recommend that you guys do guided meditation Guided meditation is good for beginners is good for starting to get used to learning how to meditate, but it's not a good Thing to rely on because you become dependent on it Meditations to help you in everyday situations supposed to have practical applications. So when shit's hitting the fan around you when chaos is Coming up around you. You're like the eye of the storm. You're that center.  It's basically Where you sit down, right?    Just observe your breath and When you get distracted, what's gonna happen is you're gonna be observing your breath. Maybe the first minute or two Usually and then you're gonna start thinking about Pokemon go.     You always gonna be going off tangents But that's just the way the mind is with more practice You'll get pretty good at it and you'll be able to stay focused on your breath a lot more and be more mindful Now that's just a link. That's only one way of meditating Personally, I think that way is pretty boring. So I don't usually do that But it's a good way to start for beginners. The second way I'm gonna teach you is called Transcendental Meditation and a lot of people charge a lot of money to learn how to do this method they go to these Places and pay thousands of dollars to learn this technique, which is ridiculous You shouldn't have to pay to learn how to meditate, right?  A word that does not have any meaning to you So it can't be a word like cake or rice or bike needs to be just an arbitrary word or just sound like rum Zumb Bra just something that does not really have any meaning, right?  You're gonna say rum rum Rum so you're gonna use your internal dialogue to say the word rum rum Rum Rum and what you're gonna do is you just want to keep focusing on that and what you'll notice is if you keep doing it What ends up happening is you no longer have to consciously say the word just keeps coming rum rum Kind of like your breath.  You know something about making money. You don't get distracted Just like in the first technique don't get this hard and this happens. Your mind is not yet there You're still learning it takes many years to master the mind, right? And remember the mind is a good tool or good serving but terrible master So meditation is very crucial.  So You hear the word and just focus on that focus on that focus on that What you've also do is you can each time you hear the word have a visual in your mind of the word Like the letters bold or in a certain color. That's another way you can do it But that's a bit more complicated Just see as there's plenty of things you can do the basic gist of meditation is you're finding something to focus on And you're trying to pay attention to that you're trying to teach your mind how to focus and how to not always be distracted by these thoughts these Thoughts that come out of the eep for these thoughts that you sometimes have no control over Because those thoughts are the things that can cause massive destruction in your life I personally have been in situations where I've had Repetitive thoughts over and over again over again.  That's the power of thoughts For example, um, if I was to tell you to think about a close close family member Passing away or dying What tends to happen is if you actually really think about it If you really think about it you start feeling negative emotions because your brain's taking the thoughts as reality So that's why you don't want to entertain these thoughts You want to get these meditation practices in check so that you don't have to suffer the negative Reprecussions of negative thoughts you have to suffer about high causal levels and all the stress or that bullshit. All right, so It's very important now on to the next two techniques. All right, so the next one is basically Feeling your body.


Hey everybody, it's Hari Swaminathan. It's Thursday Jan 16th. We are looking at our swing trades yesterday was a decent day on the ES. Let's go take a look at the ES charts here. It's pushing up against the 3300 number although the SPX is slightly behind. So the SPX has a little ways to go. Maybe about 10 points to go before it hits the 3300. We could see some resistance at that level. However, things are remaining bullish as you can see it's been a nice bullish run. So let's go take a look at our positions. We do have now on Visa. This is almost a 100% return. If you recall, we had the long call at 190. So 5 contracts, it's about 950 and we have a profit of 900. We put in this short call to protect profits which was a good move. But we gave up a little bit. However, as you know from yesterday it went up from 500 to 900. So we did good on this. I want to close out Visa.  And also on Costco, it is not quite that much. It is about a 40-45% return and in absolute value on 5 contracts, I think $750 is a good profit. So I'm going to take off both Costco and Visa and close both of them. If you want to join the Swing Trading Signals program, you can go to this bit.ly link, http bit.ly slash 25 swing to get a 25% discount on the monthly plan. You can also come to the Option Tiger website at optiontiger.com and on the homepage itself, you'll see the algorithm based swing trading signal service. If you click on learn more, that will take you to the Swing Trading Signals page. And here you can get some more details on it and you can also sign up on a monthly plan for 25% off or an annual plan for 50% off the list price. Thank you.


What was the hardest part of moving here the hardest part was because I have to move a bunch of boxes Well, I liked that he facetime me because I could see his Handsome face and stuff you learn to rely a lot on who you have at home What are you most proud of about your dad? That he helps us keep the town safe. I'm proud that he is welling To sacrifice so much. What do you think the best branch of service is? I think it's to be I Think it's to be the leader of the ship. It's something that not every kid gets to do. I think it's cool being a military kid


and you are very welcome back to the show it is Ivan here with you and we're broadcasting right across the northwest of Ireland on beyond of course on how to radio.com we're also on our new youtube channel and just launched recently we're also live on facebook as we speak bringing you some news actually if you're a fan of the band deaf leopard lot of deaf leopard fans out there or if you're a fan of the band motley crew as well they've just announced a 2023 uk and arland tour deaf leopard and motley crew have announced a set of joint uk and arland tour dates for the summer of 2023 the two bands toured together in north america over the summer with the last gig of the stadium tour that took place on the 7th of september that was in las vegas deaf leopard joe elliot said in the statement earlier after finally getting back on the road and having a momentum uh sorry a mental tour uh in the u.s and canada this year we're beyond thrilled to be bringing this massive stadium tour to major cities all over the world kicking off european sheffield where it all started for us 45 years ago say that was the statement from deaf leopard joe elliot uh a little earlier so the run of uk and arland dates includes shows of course have been mentioned in sheffield in glasgo in london and of course in dublin as well so this is the important date as i say if you're a fan of deaf leopard or indeed motley crew they're going to be playing live in marley park in dublin and that is on july 4th of 2023 me


The following is an article that I wrote back in 2006 and I thought I would share this with you again. The link to the article will be provided in the description of this video. Anomalies, prisons and geophysics, how governments use data and how to stop them. A common definition of anomaly is a deviation from the common rule, type, arrangement or form. This definition, however, can be simplified by stating that an anomaly is a deviation from specific parameters. The defining characteristics of an anomaly is that it can only exist in a comparative setting, implying that it can only be detected with a certain data set. Once the data set is obtained, then parameters can be specified to fill throughout so-called anomalies for evaluation. Depending on the type of data collected, these parameters can be specified to be anything occurring in any combination. If there is no data set, then there are no anomalies. A prison can be defined as a place of seeming confinement. It is a place to incarcerate people who have lawfully or unlawfully stepped outside the parameters set in their societies. This implies that inmates are anomalies within the community. However, these anomalies, unlike eccentric and aristocrats, are deemed to be a threat to the establishment or the citizenry. Hence, prisons or locations will behold anomalies that we fear. Geophysics is the scientific study of the physical characteristics of the earth, including its hydrosphere and atmosphere, and of the Earth's relationship to the rest of the universe. Equipment is used to collect and interpret data for our surrounding world, and if required, to locate anomalies within a region. User-defined parameters needed to find anomalies are usually inputted into computer programs, which extrapolate data providing a detailed representation of a situation. As long as there is sufficient computer processing speed, good data, and competent interpreters, anomalies can be flagged. In general, the more data acquired, the better the controls of an investigation. It should be understood that anyone involved in a geophysical investigation, from the data collector to the interpreter, can create anomalies at will, anywhere and anytime, either deliberately or erroneously. It is relatively easy to change certain parameters to obtain the anomalies that are required. The isolation and or extermination of a number, such as 2 or negative 5 or at 600, can be achieved by running filters through a dataset. In most cases, to compensate for any errors in data collection and to assure that the desired number is isolated, the number will be flanked. For example, to isolate the number 2, any number between 1.5 and 2.4 will be flagged. This will assure that any number that might be confused as a 2, or has the possibility of becoming a 2, will be removed from the community. In the last few years, certain governments around the world have passed laws to legalize the merging and collection of data for their populations. From credit card information to medical records to travel destinations and phone calls, it is all being recorded, tabulated, and interpreted. Parameters are being set to flag people as anomalies who have stepped outside of specific boundaries. Those deemed to be existing outside of the limits set by the collectors are investigated and in some cases removed from the community. The interpreters are so confident in their collection and evaluation of data that they are passing laws to assure that those deemed to be a threat are unable to question their investigation or incarceration. Since most anomalies occur in batches, laws have also been passed to allow the controllers to have the ability to extrapolate information from captured anomalies by any means necessary, including torture. Those laws will also protect government and private organizations by granting them immunity from prosecution. At present, the parameters set by those involved in these investigations are narrow enough to allow the general public to feel relatively free. However, as time progresses and fewer anomalies are identified, broader parameters will be used in the analysis of data to assure that no one will accidentally turn into an anomaly. Anyone associated with or related to an anomaly will have their private and public life scrutinized to convince the investigators that they have not been influenced or misdirected due to their close proximity to an anomaly. Fear of certain anomalies, justified or not, will become a prison for most of these societies and fascism the end result. It is extremely important for us as a population to fully comprehend the power that this sort of broad data collection gives our governments. Those who control and interpret the data will have the ability to not only remove unwanted people, but also to restrict the movement of the entire populace. For example, it is relatively easy to place a location marker on all credit and bank cards, which when activated will only allow the cards to be used within a certain area. If governments decide to restrict travel, then all they have to do is activate the location markers to restrict the use of financial activity to within a certain distance of a residence, creating a jail without physical walls. When this scenario is carried out, special permission will need to be obtained for anyone traveling outside of their zone. There are numerous ways to gain freedom from these organizations whose purpose is to identify, isolate, incarcerate, eliminate and even exterminate what they deem to be undesirable elements from society. The machine running these filtration programs can be halted if people stop providing governments and corporations with data. Reducing the number of transactions that are automatically fed into the database will produce gaps in the certain days in the dataset, creating erroneous interpretation. If enough errors are made, a population loses confidence in the controllers and the system should correct itself. Providing these organizations with large quantities of false or distorted data can also reduce the efficiency of their system. Other methods may include the retraining of law enforcement officers, using cash whenever possible, disassociation and or protection from insecure electronic activity and private inquiry into the reasons for government acquisition of personal data. It is very important to grasp the concept that if there is no dataset, then there are no anomalies. The best way, however, to stop these entities is to make fundamental changes to the system itself. This requires us to be educated in the methods in which we are controlled, allowing us to understand the problems that exist in the current system so we can avoid its pitfalls. Placement of the highest levels in government of ethical civil servants that are accountable to the people and regard the privacy of individuals as the most important aspect of the duties is an essential starting point. It is crucial that during this transitional period, alternative choices for leaders are present to avoid a power vacuum. By decentralizing our government and localizing our communities, we can avert chaos during this process. As a collective, we must understand that democracy can only exist in a society with an educated populace and the right for self-governance can only be obtained through knowledge. When a society embraces ignorance and forfeits its right to control its destiny, it has to come to apathy and can only deteriorate. In science, the analysis of anomalies contributes to our understanding of the physical world, improving our lives. In contrast, identifying anomalies in our society based on political doctrine has created fear and misunderstanding, restricting our lives. The lack of accountability from our leaders and our indifference to the consequences of their actions is diminishing our civil liberties. But it is not too late. We can prevent this from happening. We still have the ability to reclaim our future and begin to educate ourselves.


Ever wondered who we have to thank for algebra? Enter Muhammad Ibn Musa al-Khwarizmi, a mathematician of Persian descent. He was the mind behind algebra's development and his work was so influential that the term algebra itself was derived from it. He also made significant strides in trigonometry, geography, astronomy, and even the calendar system. His work paved the way for future mathematicians, helping to shape the mathematical landscape we know today. So the next time you're wrestling with an algebra problem, remember al-Khwarizmi. His contributions to mathematics have stood the test of time, proving that numbers, like words, can leave a lasting imprint on the world. Appreciating the past, understanding the present, and anticipating the future, that's the beauty of mathematics. And it all started with a Persian mathematician named Muhammad Ibn Musa al-Khwarizmi.