Welcome, everyone. How are people feeling? Do you want a little stretch? Yes. Yes? We'll do a stretch? All right, everyone. If you're able and you want to join in, stand up. We're going to do the open source stretch. This will be great. So reach up for all your open source hopes and dreams. Now we'll go down. We'll reach down to the grassroots. Come back up. Arms up. We're going to sway in the winds of change. And now reach your arms out. We're going to shake the money tree. We need that funding. Put your arms on your hips. We'll lean right to avoid account takeovers. We'll lean left to avoid maintain a burnout. And now we'll lean all around to avoid unsecure ecosystems. Welcome, everyone. Good job. Thanks for stretching with me. I appreciate it. So yeah, welcome to securing the NPM ecosystem. Really thankful to be here today. Thanks so much, the organizers, for having me. I'm excited to talk to you all about this. I did want to start with some acknowledgments. Namely, Miles Borenz, who's on parental leave. He actually gave a talk. He picked this topic first, and I realized he gave a very similar talk before, so he let me use the slides. If you did see this talk before, don't worry. I added my own fun jokes, so you will still be entertained. But I also added a few other things. We've had some new releases since Miles was giving this talk. And to all those faces on the right-hand side, these are the people who actually did the work. I was a bunch of different teams from NPM, Security, Ospo, DevRel, the new packages security team. It's really exciting work that they're all doing. I wanted to share with you what they've done. Hi, I'm Abby. I did want to introduce myself a little bit. I lead GitHub's open source maintainer programs. I like this photo. I was trying to find a photo of me and my grandmother, my Lola, without my little brother stealing the scene, but this is the best I could find. I started my career actually in cancer research. I was writing web apps for scientists. And my grandmother, my Lola here, she had passed away from cancer. So this idea that I was helping other people, I was writing software that actually helped other researchers find discoveries and find curies was really meaningful for me. So that was really what got me into open source. Just seeing that the code that I was writing was being used around the world, that other people were making discoveries. And since then, I've spent my career just helping people do open source well from Mozilla and now at GitHub. And I'm really excited to be somewhere where I can actually help maintainers. So many of you are on GitHub. So happy to be there. I'm also joined the OpenJS board. Hello, OpenJS table this year.  So here's what we're going to talk about today. So first, a little bit of, like, why focus on security. How did we get here? That slide's weird. I'm going to look on this side. Then we're going to talk about 2FA enforcement and how GitHub really approached this in this maintainer first way. Because we are the stewards of the NPM ecosystem. So we want to do this in a way that helps security but also made lives easier for maintainers and just help the whole ecosystem overall. Next, there were some new releases this week. I'm really excited at the timing of this talk. So I'm going to talk to you about granular access tokens and Code Explorer, which both were released like two days ago. So you get hot off the press info there. And then finally, Sigstore and more, I'm excited about the future of NPM and some future work and some investments that we're making. So that first section, why focus on security. Oh, yeah. I was deciding whether or not to leave this in. I was like, is this a serious conference or a fun conference? I wasn't sure. But I realized it was kind of serious but needed a bit more fun. So here's a quote from Lady Gaga from New York. Trust is like a mirror. You can fix it if it's broken. But you can still see the crack if that mother of hers reflection. And to focus on here, I did want to focus on the positive. You can fix it. But also you want to prevent these cracks from happening. This maybe wasn't the best quote to include, but I thought adding some levity. But really the point I wanted to make there is that open source is built on trust. Like I'm trusting these open source maintainers who built the software that I'm running. I'm trusting the people I'm collaborating with. Trust is a really essential part of open source. So we need to be helping build up that trust however way we can. So at GitHub, like we are the stewards of the NPM registry we are really aiming to be good stewards. We want to help this ecosystem grow. We want to be able to make things secure but then also make things easy for maintainers. So it's a nice balance that we have to walk. So NPM is a critical tool in the open source software supply chain. NPM, yeah, I learned this style recently. The JavaScript community downloads over 2 billion packages from NPM a month, which is a time. Do people here use NPM? Yeah. We're in the JavaScript track, so I do expect so. So this is really a central for the JavaScript ecosystem. But there are some threats. So a big one that we've seen is account takeovers. This is where high impact packages, well, the credentials for an account gets taken by someone and they use it to publish malware. So looking at last year, there were a couple weeks where there were a lot of account takeovers in a short span of time. So it started in October 22nd. UA Parsard was hijacked and that has 1200 dependents and 7.5 million weekly downloads. So a lot of people are using this and downloading it. Someone got the credentials and then they were publishing malware with it and it affected a ton of people. And GitHub was able to take this down after about nine hours. So same day, but a lot of people were affected by this. A few weeks later, COLA was hijacked, which only has 166 dependents. It's a bit lower on the dependency tree, but it does have nine million weekly downloads. So still a ton of people affected by this. But we were able to remove that in 30 minutes, which is great. And then less than two hours, probably about two hours later, RC was hijacked and that has 1300 dependents and 13 million weekly downloads. And that was taken care of in 15 minutes. So you can see we got a lot better going through this. So looking at what we learned from this, first is that these improved process policies and notifications worked. So after that UA parser, we're on high alert. So we added a few things. We already had malware scanning, but we added better notifications, especially for high impact packages, where they had over a million downloads or over 500 dependents. So that helped a lot. We had better policies in place and better processes. So internally, all hands were on deck when this happened. So we were ready to do that, to take care of that. So you can see going from nine hours to 15 minutes, it really worked there. Next, we saw a pattern of account takeovers. All of these accounts had stolen passwords. So we saw that strong 2FA may have stopped this. And then finally, we saw that we really needed to stop these attacks to build trust. People lose trust every time there's a dent in the armor. So doing what we can to really build up that ecosystem and make sure that people are comfortable using NPM was really important. So we'll talk about how NPM really enforced 2FA in a maintainer-friendly way. So the plan actually started not with enforcing 2FA, but with better login verification. So for accounts that didn't have 2FA enabled, making sure that there was login verification through a one-time password for new sessions. Next, there was also mandatory 2FA for high-impact package maintainers. I'll explain how we did that in a way that still was nice and friendly for maintainers. And then finally, there's a few things in this one, but just making it easier and nicer to be using 2FA. So improved 2FA experience and better account recovery, because if you have 2FA, I'm sure... I don't know, actually, I've been locked out of my 2FA accounts before, and it's always very stressful for me. But more people using 2FA, more people need to go through the account recovery process. So I'm going to walk through these things. First with login verification. If you have a non-2FA protected account, you were emailed a one-time password. So again, this is not 2FA, but it did add an extra layer of security that wasn't there before. And it's great for email verification. So this made sure that you actually had, yeah, access to that email for that account. And we started enrolling that about a year ago, like shortly after the account takeovers from that previous graph, and March 1st that was introduced for all accounts. So that's there now. And again, it's because improving security is a trade-off between usability and security. So this was a nice way to just level up beef-up security for everyone across the board without adding too much friction. And then next for the 2FA enforcement, we really wanted to focus on those account takeovers. So the enforcement was only for creating new sessions. So if you were logging in from somewhere new. So we encouraged 2FA for publishing, but it wasn't enforced as part of this campaign because we were really thinking about those account takeovers. There was a phased rollout, so we could learn from this. So we started with a smaller set of maintainers and then grew that larger and iterated on it as we went. And we really kept that maintainer first approach. We didn't want to disrupt everyone's workflow. That's always annoying, and then, yeah, you don't want that. So existing access tokens continue to work. And publishing until 2FA is enabled, new sessions couldn't be created. So they were kind of in limbo if they were a high-impact maintainer. They could still sort of publish, but they couldn't do anything new like change their password or anything. All right, so here's a little update on 2FA adoption as of yesterday. So for the top 500 maintainers, 88% of them have 2FA enabled. The top 100 maintainers, 91% have them enabled. And then for just the general high-impact maintainers, which, again, that's over a million downloads a month and over 500... Oh, no, it was a week, a week. And over 500 dependents, 79% have those enabled. So we see this ticking upwards. It keeps increasing. And we don't expect this to be 100% because, again, we're trying to be nice around how we're setting this... having this adoption happen. And most of the ones that haven't adopted yet, a lot of those are, like, inactive accounts. So it's working, 2FA is coming along, even though we're very gentle about it. And then this improved experience around 2FA, so that improved 2FA experience and account recovery. The big one was using WebAuthn. So this way before, 2FA was only your phone with those timed tokens, which always really stressed me out. I could see it, like, counting down, and it's like, oh, am I going to get the number in time? Then I wouldn't, and I'd be so frustrated. But now, you can use Ubiquit, you can use your finger, your pass, your fingerprint, probably not your actual finger. You could use a whole bunch of things. So this was a great improvement in 2FA. Next, better 2FA management. You can manage multiple keys. You can replace your Authenticator app without disabling 2FA, which is great. And you can also view and regenerate your recovery codes. I'm that person who never remembers where I save my recovery code. They're just all in my downloads file. Please actually put them in something like one password. I'm learning, but I... Yeah, I just have that downloads folder that's just full of files from the end of time. Who knows what's in there? But this way you can regenerate them. It's great. And then another big investment was 2FA for orgs.  And you can audit to see who has 2FA enabled within your org. So we don't publish who has 2FA enabled on their public profile, because that would just be a huge sign and it's like, take over my account. But this way we thought org owners should have that information so that they can enforce that so that they can trust their community. And then for that improved account recovery. So if you did get locked out, they added new playbooks that were reviewed by account security experts, and they added consistent processes across all account recovery. I thought this was interesting. They're really inspired by the DMV to have a point system to measure, like, how many factors of identity you have and, like, is this enough trust that's, like, similar to 2FA? So if you had, like, email verification and you linked your GitHub and Twitter, it's like, okay, this is probably who they say they are. We'll let them have their account. And before, it was just, like, text boxes where you put your GitHub and your Twitter, but now you can actually verify them. And then we automated a lot of that. So if you make an account recovery request, it'll automatically walk you through the process of verifying your email, verifying your GitHub, your Twitter, so that when you get to that agent they can just, like, use that point system, like the DMV, and say, like, oh, yes, this person is who it is. Whereas before, there was a lot more back and forth, like, can you tell me your GitHub? Can you tell me these things? So that's been great. And then new releases this week. These are a couple things I'm very excited about. Oh, I'm going so fast. That's okay. Well, I have more time for questions. First is granular access tokens. So that's the public beta it's now. It happened a couple days ago. So you can create access tokens that limit the access. So you can limit it by package, by scope, by organization. You can also set expiration dates up to a year. And you can also limit it to an IP range. And an interesting thing I thought I was reading the blog post. Orgoners can now automate more org management. You couldn't do that before with the tokens that were generated, but with these new tokens you can. So super helpful. And there's a lovely animation walking you through what that looks like. So you can use these new access tokens. Next is Code Explorer. Because, yeah, we wanted you to be able to view the contents of a package without having to actually download it, run NPM install. So this way from NPM portal, this used to be a paid feature, but now for free everyone can just go to that tab. And then you can view the folder structure. You can click through to an actual file.  And, yeah, it's a nice way so you can actually verify this before doing other things. But wouldn't it be great if there was a way to automate all that or to automate the verification, which is some of the new stuff that people are working on. Sigstore plus more, I called it, because I liked how it rhymed. It's some future plans and investments. So first, Sigstore announced general availability about a bit over a month ago in October. So this is the new technology for signing, verifying, and protecting software supply chains. And I'm really excited about this because the first thing people do when you're securing your build, you usually sign it, and then you have to keep hold of this token and keep it a secret. You have to rotate it, and did you generate it properly? It's a lot of work. I see some nods. So there hasn't been a wide adoption of the Sigstore. If you're building on a Cloud CICD provider that supports the OpenID Connect tokens, it can do keyless signing for you, which is great so you don't have to keep hold of that key, and then it stores things like the repository this came from, the commit that this is actually coming from, and the build instructions. So right now in an NPM... Oh, that's the next part. So it stores a lot of these things. And GitHub's really partnering with OpenSSF on this and helping with the Sigstore. We're also working with other CICD Cloud providers just because we want other people to adopt this. We want this to be part of the ecosystem. So here's a proposal and this will probably go into public beta. The plan is Q1 2023. So next few months or so. This way when you're looking at... Right now when you're looking at a registry... Sorry. Yeah, this is the part that's the least. It's exciting stuff but it's very technical. So right now if you're on NPM, you're looking at a package you can optionally add a repository that it will go to, but it's optional and it doesn't say which commit it goes to. But this way you can link the packages to a source in the build. So if you're building on a Cloud CS CD and you use Sigstore then yes, this will be added. So this will be optional if you want to opt into this. But this will really help with the provenance. So this is a good first step for that end-to-end supply chain security. So excited to see that happening. This is a screenshot of a request for comment that was out. It is closed now, but you can go and look at the proposal. You can read all the comments from the community and it's exciting stuff. So let's wrap us up. So what's next? This is a slide from Myles again. So the team is really thinking in three different areas. First is that core security improvements. How are we going to be securing what we're doing at NPM. Next is the customer requirements. And then the big thing I want to talk about is innovation. I think that's where we're talking about Sigstore. But how can we be making NPM useful for JavaScript five years from now and not just from today, not just being reactive to things like account takeovers, but really forward thinking. And I'm excited that we have a package of security team that's really thinking about this and a lot of people working on this. So to close us off, thank you so much. We have 12 whole minutes for questions and comments. And yeah, you can find me online. I'm Abby Cabs with GitHub and Twitter. And yeah, thanks for your time, everyone. Sorry. Oh, so like the account takeovers? We're talking about like, yeah. Well, that's what like two factor and so the question was like, how did we mitigate the account takeovers? All of these, all of this work was to help mitigate that so that stolen credentials couldn't be used to publish malware. So first was increasing our processes so we'd be more responsive to an account takeover. So that was the one thing that's how we saw those times go way down and just making sure like all hands were on deck if something like that happened, especially to a popular package. And the next was trying to make sure that doesn't happen again. So if we go back to Lady Gaga at the beginning, so the next part was really like making sure we didn't have cracks in the first place rather than trying to patch them up. So this was beefing up the security for logins. And then I think the six store stuff would be more for later, like if it did happen being able to track the provenance and understand why this happened. Did that explain? Ooh, can we publish the security score? I am not a security expert. I probably should have said that at the beginning of this. And also I'm not always the biggest fan of scores. It could be hard to balance those what goes into that and the factors that goes into that. But I'm sure someone could create a score. I don't know if someone here has any ideas. That's great. I don't know if everyone heard that, but OpenSSF has security score cards so you can integrate that with GitHub. Yes, I probably should have said that at the very beginning. I'm not a security expert. I'm sharing what a lot of work was done on NPM and security. You can ask me about maintenance questions also if we want to chat. Anything? Yeah. Yeah, so we're not going to say which ones don't have 2FA enabled. I think that would not be good. What is interesting is the high impact maintainers they make up, I wrote this down on one of my notes. I forgot to say it. I think they make up 93% of the traffic of the downloads on NPM. So we are really pushing on those 500 top maintainers to get adoption. Visibly, I think we're going to continue pushing for 2FA there. But then things like the six-store integration I think will help a lot. Yes. Thanks. Anything else? Yeah, yeah. Yeah, so that's part of the Webathon that was implemented there. So yeah, you can use different forms of multi-factor authentication depending on where you are. Yes. Anything else? I went super fast so you can ask me all the questions you want. But with that I think we'll call it. Thank you all so much. Yeah, I had a great time. Feel free to find me after this.


Hi everyone, I'm Joe for jaspyscasebrakes.com coming at you with 21, 22 tops. I think it's actually tops Merlin Chrome UEFA Champions League soccer, instead of UEFA Champions, anyway. Pick your team, three. We got Nick Jaspy helping us out, opening up the case. He's gonna help us pack stack this so this will be, oh no. Why is that missing a box? Well it's a little open. Fresh case, fresh case. All right, big thanks to everybody here. Maybe that was open for the store. And there was re-sealed, that's probably used to what happens. Thursday, September 15th. Your Thursday, my Friday. And we've got that Merlin pick your team, three happening here. Big thanks everybody here. Oh, that 17 team combo, let me show you that. In fact, I actually wanna get all those teams on that list. So there's the- And people say we get influencer boxes. We do not get influencer boxes as evidence to my, did that seem heavier? That would be no bueno. All right, so let me actually reprint this. Sorry, sorry, paper. Let's all help the shipping team too. But so there was one spot where we sold 17 teams. So that's a big combo right over here. All right, so thank you sir. Let me show you that list one more time. Oh, Diego's letting us know that Club America and Guadalajara, they play on Salvador. So that'll be a rivalry game between me and Nick. All right, here's once again, the final printout. Pick your team three. Pick your team four is almost sold out, ladies and gentlemen. I'll tell you a little secret. We do have a decent amount of these cases, so keep working on it, soccer fans. You would appreciate that, jaskyscasebreaks.com. And especially with the World Cup this year, falling in the winter time. There could be extra interest in soccer too, in the secondary market. So even if you're just like, ah, I don't care about soccer. If you care about making a little bit of money, then keep checking out the Pops Merlin Chrome. Joe Pizzle, not a fan of the soccer. But that's okay. These are group breaks, not Joe Pizzle breaks. We do what the group wants to do, Joe. If they want to do Merlin Chrome all day long, I'd be happy to do it. Happy to do it. And ladies and gentlemen, if you want Joe Pizzle to have an aneurysm, keep filling up that Merlin Chrome soccer, jaskyscasebreaks.com. Pick your team four in the store. I think maybe only a handful of teams left. Joe Pizzle thinks our ratings go down if we do soccer. We had one of our busiest days yesterday, Joe. Thanks to, in part, to the soccer. The numbers, the numbers show it. Soccer is more popular than baseball in most of America. It's growing at a... There's Robert Lewandowski. This is still Fire and Munich edition. Going to Sean Peeples. And then obviously, rookie refractors, we always want to keep track of it as well. That is for Real Sociedad.  Yeah, Alex told me about that. He said this was a pretty good time. And there's Neymar. This is the one-for-case renaissance insert. Sort of a stained glassy kind of look. I see what they're doing there. There you go, PSG. Han with PSG. Yeah, Joe, help out another Joe. Fill up that hip parade. Brazil favorite in the World Cup right now. They are, I think. I was looking up the odds yesterday. I think they're plus 400. There's Cristiano Ronaldo. Harvey Vail for Chelsea, 275, rookie. And remember, all-card ship. There's Liverpool's Diago Jota. Harry Vail goes to Sean Peeples and Chelsea. There's Ryan Scherke, 81 out of 99. That is for Lyon. That's part of the 17-team group. And we got a coach autograph. That's Brendan Rodgers, not Rocky's baseball player, Brendan Rodgers, but Lester City coach, Brendan Rodgers. Ooh, Nike dropped a bunch of the World Cup kits today. Let's check those out. If I had to choose one sport to go away between baseball and soccer, which would it be? Baseball.  There's a reason why those games have been around for 100-plus years. But baseball is really restricted to America, whereas every single country in the world plays soccer. Globally, that's what I think. In America, it might be different just for our market, but globally, it's hard to say that soccer is going away. Wait, what am I saying? Oh, I'm getting rid of a sport? Oh, I thought you meant just in the natural course of soccer, oh, I see what you're saying. If I had to choose, that's tough. 11 out of 50 is Karim Benzema. Real Madrid, gold, atomic for Sean Peebles. Benzema? Yeah, this is one of those murder, marry, and have an adult relationship with kind of questions. Yeah, then I'd have to stick with soccer, or I'd have to stick with baseball. But I don't think it's as easy a choice as you think. Thankfully, I don't have to make the choice. I can watch both, my heart's content. I'm happy to. There's a mecsense carat to 199 for Lyon. Yeah, Joe Pizzle, why don't you like soccer? Diego's asking ya. Joe just doesn't like things he doesn't understand. Look at these crazy names. Look at these crazy different teams. Sponsorships on their jerseys. I don't understand it, I don't like it. That's Joe Pizzle. I'm gonna love it when Joe Pee's daughter ends up being like a soccer star. There's Harvey Elliott, 41 out of 99. For Liverpool, the youngster going to Sean Peoples. Zahel Gomez, for Lille. That'll be for Sean Peoples. Yeah, a little too close, a little too close. And for Leicester City, there's Hamza Chaudhry. It's another autograph for Leicester. That'll be for Sean Peoples. I'm not too hot to start the season. I can't believe how well Arsenal's doing. They start off the season hot. They start off hot. I mean I guess they do have a lot of youngsters on that team. Ooh, there's that big soccer patch card on the bottom. Those are really cool. How quickly? 61-75, Jonathan David for Lille. American sports. Yeah, I was kind of shocked. Well, it's kind of like college, but I feel like college coaches get fired.  Yeah, if you did get bought out by like. Yeah, and then you get bought out. Like $13 million to not work. Yeah, I was surprised they let go of Thomas Tupeldeck. So quickly, but I suppose. New owner. Yeah, I was gonna say new owners. The writing was probably on the wall. It means like not their guy. There's Luca Romero-Falaccio. That's part of the 17 team combo. It's a rookie refractor. An all-card chip, remember? First match in the Grand Ponder. Right, that was, oh, in a one out of five, James Mann, well, look at Leicester. Crush in here. Out of fives and under, get the world famous train whistle. Train travel, very popular in Europe. Sean Peeples, all aboard the Big Hit Express. Woo-hoo! That looks like a good romp. Yeah, it is. Like, it's like nothing too heavy. No. It's just kind of a fun thing. See people fight on a train. Yeah. He's going by Vinny Jr. Yeah. I think he wears on a jersey now. Oh, okay, okay. Vinicius going to Sean Peeples in Rio Madrid. There's Alessandro Zanoli for Napoli. We got smoked by Napoli in their first group stage match. You know, Nick, Diego reminded me that they got rid of the away goals rule a couple years ago. Oh, really? Did you know that? I didn't. No, I did not know that. I was just like, I thought that was still a thing for the knockout stages, but he's like, no. They got rid of it like a year or two ago. Now it's just straight up goals. I think the tiebreaker is you just keep playing the second leg, the second tie. So whoever has smoked field advantage, second leg kind of has a big advantage. Could be, unless they don't let it get to that point in the first place. There's Keogo for Ahashi, for Celtic. That'll be part of the 17er? Yeah, 17 team group. And, ooh, this is nice. There's Viad Marez for Manchester City. Piece of the soccer ball and his autograph. Big card stock right here too. Merlin match ball card. Man City, that's gonna go to Sean Peoples. They actually are just a little too big for our largest top loader. So we're gonna put into this little slider box here. We'll put a little extra filler cards there to make sure that it doesn't rattle around during shipment. But yeah, you can see that's like the star on the Champions League ball right there.  Some of our football breaks. Remember that Jared Pique Shakira, not together anymore. Yeah, allegedly. The best soccer product out right now would probably be this right here. Tops Merlin Chrome. UEFA Champions League edition. The best soccer product out right now. And plenty available on jaskyscasebreaks.com. You like that, Nick? ABC, always be closing. Always be closing. I don't know if these Erlen-Holland refractors just by themselves are going for anything, but oh my God, that was just ridiculous. Yeah, you like that Diego? ABC, always be closing. Sydney Raeberger, 29 out of 99. I think someone, maybe Diego is mentioning. And he's a good rookie again. And this is for Leipzig, Red Bull Leipzig. That'll be for Sean, different Sean, Sean Mandel. Spells Sean differently, too, with the W. And nice. The South Korean and a Tottenham Hotspur, Hyunmin Sun. The pride of South Korea. Even my parents know who Tottenham is because of this guy. And that'll be for Matthew Wood. There you go, Matt. Although I think he's had a slow start to the season, too. I saw some wacky articles on ESPNFC.com suggesting, should he come off the bench? This is just after a handful of games. I guess I'm getting old. I guess I'm getting kind of old. Garrett Baylor playing the MLS at age 32. Nobody would have said that ever, like 10 years ago. Anthony Alanga, rookie refractor. Yeah, that's kind of weird, too. Antonio Blanco, Real Madrid to 275. He has a 17 pole of TBC Sawgrass in the backyard in Spain. Does he, really? I didn't realize he was adding to golf. And the reporters say he wasn't doing well because he spent too much time playing golf. Maybe, I mean, it's possible. Your interest shift as you get older. Hyunmin Sun is, look up some videos of his, ladies and gentlemen, because he's like tri-lingual. He's like, obviously, Korean, speaks Korean. Speaks German, I think, because he was in Germany for a little bit. And then speaks pretty good English, too. Alfonso Davies for Bayern Munich. That'll be for Sean Peoples. Kamal Dean, Sulemana. For Stadia Rene. That's the French team going to Dan. All right, nice. Chris Maxwell is saying, welcome to Rexham is for you. Fun. Yeah, I've been watching him. Yeah, I started that, too. And it's a lot better than I thought it would be. I didn't know how much interest I had in like two celebrities, like two couple millionaires buying a football team. I didn't know if it was gonna be a vanity project or if they were serious about it or whatever, but they were taking it pretty seriously, it looks like. And most of the show is not really giving them a feature. Right, exactly. Yeah, so I think it's gonna do a lot for that, a lot for that small town. They probably sold too many drinks. Oh, totally. Do you see their Eagles green third kick? Yeah, I know. I was like, oh, I was watching them. They're like, ooh, Nick's probably gonna want that jersey. Yeah. There's Ryan Gravenbach for IACs. That's part of the 17 team combo. Travesting race, they made baseball history having all Latino lineup. Nice. On a spitting for Roberto Clemente a day. It's Anton Griezmann, Lionel Messi, Ageless Alchemy. Yeah, he's actually been turning it on this season. The interesting thing about this World Cup is that a lot of times the World Cup happens after a long season for these guys, right? And especially for teams like PSG that are playing like a lot of league matches and a lot of international matches or UEFA Champions League matches. Here's Pedri for Barcelona. But now they kind of had a summer off for the most part. So we might see a lot of these players playing on a much more fresher legs than usual. How hot is it in Qatar in November? Pretty hot. I think it's like still in like the, I think it's Qatar. There's Matias Tell for Rene. So I think it's still like probably 90 degrees. And do you think the United States will make it out of their group? Yes, I think we have a better chance in four years when it's here. There's Anthony Alanga, 191 out of 199 for Man United. And here is our autograph, Elia Matazo for AS Monaco. Thank you, Nick. Matthew with AS Monaco. Big thanks to Nick for ripping open these packs. It will help the break go a little more quickly. Joe Pizzle's happy about that. Exactly, Diego. A lot of these guys will be informed by the time, by the time the World Cup rolls around, which might actually make for some pretty exciting footies. Some weird printing issues on a couple of these cards. There's Miguel Gutierrez, Blue Shimmer for Real Madrid to 75. That will be for Sean Peebles. There you go. The average November weather in Qatar. About, what, 79 to 89 is the high. So still pretty toasty. What's crazy is that I think they're all, I think they're all gonna be domed, right? Are they all dome stadiums? And they had like some like epic air conditioning that happens there. There's Sidney Raver again, nice. For Leipzig, that's gonna be for Sean Mandel, 72 out of 225. And I wanna say that those stadiums are designed to be broken down and be able to, like they're gonna ship stadiums. Cause like the Qatar's population doesn't need that many World Cup stadiums. So I think allegedly they're designed to be broken down and then resold and shipped somewhere else. No worries Sean, thanks for getting in. See if we can find some even lower numbered stuff for Ray Berger. Kai Havertz, for Chelsea at 99, that's gonna be for Sean Peoples. And there's Kai Havertz again. Here he is, his autograph this time. SP, 17 out of 99. Harvey Vail, rookie refractor. All right, so we got one, two, three, four boxes here and two more right there. Each stack represents a box. Next box, good luck. There's Keogo again for Celtic, 55 out of 99. For Sean Peoples who bought the 17 team combo. Our Suso for Sevilla. We've got Milan Scrinier. Scrinier for Inter Milan. Part of that 17 team group. For Sean Ronaldo refractor for Man United that'll be for Han. And there's Weston McKinney. The American, 48 out of 99. The United States, we actually have a pretty young squad coming up the ranks. Could make some noise this World Cup. Definitely, once he's, some of these youngsters kind of rollin' round into their prime in four years. It's gonna be really interesting. Christian Pulisic by then will be an elder statesman. Gabriel Jesus for Man City. Another solid Manchester City player here, Sean Peoples. Juve, by the way, is part of the combo? I'm not seeing it. You know, we probably sold that separately, no? No, Juventus is part of the 17 team combo. Giovanni Reina, Gia Filis for Portugal. Next box, Liam Delape. And Leslie Oguchoku for Rene. That'll be for Dan. And the refractor here, this is a Man City player here. Then it's gonna, rookie's gonna go to Sean Peoples. Eric Cantina, pretty incredible player. Take a look at one of the, just look up the video. Cantina Kung Fu Kick. There's a wild time back in the day. That goes to Man United. That'll be for Han, the Charlie Sauvage. Or Savage. Man United, that's gonna be for Han as well. And the Vinny Juner for Real Madrid. Under 23 star. That's gonna go to Sean Peoples. We've got Cameron Carter Vickers for Celtic. Two out of five. Train whistle. For Celtic, that's part of the 17 team combo. That's for Sean Peoples. All aboard the Big Head Express. And we got Alejandro Balde for Bartholona. He's got Barça. That's gonna be Sean Peoples as well. Nice. Picked up a big group of teams all at once. A lot of last bot mojos hidden. There you go. Rookie refractor autograph. And we got Lionel Messi for Paris Saint-Germain. 127 out of 250. It's for Han. PSG. Is this the year PSG won the Champions League? They don't have too much competition. There's another Sidney Raeberger. Shawn Mandel, look at that. 23 out of 150. But PSG doesn't have too much competition in the league. Not these days. So really a lot of their focus has been on trying to get... Trying to make a difference. Trying to make a deep run. If not win the Champions League. But not quite gotten there. In spite of having an immensely talented squad. Cristiano Ronaldo, 41 out of 199. Did you know that Cristiano Ronaldo extended his UEFA Champions League record by scoring his 140th career goal on November 23rd, 2021? In the 78th minute, he broke a scoreless deadlock with a lovely right-footed lob from over 20 yards away. The match winner in a 2-0 victory over Villarreal. Maninade, Han. There is Ilyas Akhomach for Barça. Rookie refractor. Let's see what else we got here. Got another rookie refractor here, Nico Gonzalez for Barça. Will be for Sean Peeples. There's Ivan Romero for Sevilla. 53 out of 99. That's part of the big combo group for Sean Peeples. So what are the... Diego is saying, the odds man city favorite to win, followed by PSG, Bayern and Liverpool. We got Harvey Barnes for Leicester. 275, who's got the foxes? Sean Peeples. Here's another Sydney Raeberger, Sean Mandel. Refractor this time. Those are all going to add up. And we've got for Stade René, Jonas Martin. Or Jonas Martin. Not sure. But that is for Dan. That I'm sure of that. And Dan Leo is going to get this base card autograph. There you go, Logan Colster is in the house. All right, next box. And we've got the autograph popping early. That's Sofian Diop for Monaco. And that'll be for Matt Wood. 25 out of 99. We've got a Frenopoli, Alessandro Zannoli. There's Lionel Messi, Killian Mbappe, Neymar on that PSG team. It's got to get over that hump. Try to win the Champions League. 64, 75, man city. Sean Peeples. Benoit Badiashil for Monaco. Badiashil. Something like that. Close. Close enough. And we've got Sandro Tonali for AC Milan. 56 out of 99. That'll be the combo group. So Orcs Can't Be in the Sun. I don't remember Laura the Ring's movie doing that. Am I wrong? Yeah, I think Orcs Can't Be in the Sun. That's why Logan, that's why they created the Urokai, which are a combination of goblin and orc that can run in the sun. Tomas Muller, 48 out of 50. I think that's Canon. Appreciate it's in the books. All right, two box to go. All right, there's Duván Zapata, 40 out of 199 for Atalanta. That's in the combo group. And there's for Lazio, that's Luca Romero. 100 out of 150. This is also part of the combo group. I guess we have the prophecy fulfilled trio. Neymar, Lionel Messi. I think we saw that in Bapé as well. Logan Singh, that was a wizard spell. You forgot the stuff. The stuff. You forgot to take the wizard stuff. All right, we've got Jonathan David for Lio. He's out of two, 75. Sean Peoples. We talk about a lot of different things here, ladies and gentlemen. There's Shola Shortier for Man United. Refractor, rookie refractor for Han. And that's pretty cool, a prophecy fulfilled autograph. I haven't seen one of these yet. Harry Kane, the prolific English striker. He goes to Matt and Tottenham. All right, final box, ladies and gentlemen. Good luck. We've got Karim Benzema, 45 out of 99 for Real Madrid. That'll be for Sean Peoples. And we've got a Gabriel Jesus autograph for Man City. Sean Peoples, 18 out of 25. And there's Marco de Graça, 12 out of 150. That is for Juve, part of the combo. I see, I see. Diego is going to go into the lore of it. It was said that trolls were carved from stone, which is why they turn black when they're hit by the sun. And we've got Tomas Mulder, 23 out of 225 for Byron Munchen. Byron Munich. And we've got Dominic Zobazlay. Don't go with that. For Leipzig, 250. Sean Mandel. The last little bits here. We've got an Alex Grimaldo. Did we get two autographs in that box? That is for Benfica, the Portuguese team. That is going to be for the combo. There's Miguel Gutierrez for Real Madrid. Prophecy fulfilled, Erlen Holland for Brusa Dortmund, still in his Dortmund gear in this set. And that's for Han. And that's that, ladies and gentlemen. Big thanks to Nick. We've had a time on this break. Thanks to him for pack stacking. Here's a quick little autograph recap. And low-numbered card recap. And a couple of train losses in here, too, which is awesome. We've got a couple of nice autos here. The Hyunmin Son autograph. The Riyad Mahrez autograph. Another out of five. And this generally follows one per case. The name are for PSG, that's for Han. And there you go, ladies and gentlemen. Please casebreaks.com. Thanks for watching. Thanks for breaking with us. And I'll see you next time for the next Merlin Chrome Break. Bye-bye.


Hi everyone, Joe for Jaspy's CaseBrace.com coming at you with our last filler to unlock that football mixer. Thanks everybody, that's coming up in a different video. If you're looking for that. This is Blaster Break number six, Donners Optic Football. Let's do the break first. Big thanks to this gang right here. Nicely done, thank you very much. And there's all the teams right there. So the break first, then a different dice roll for the randomizer. Four to three, seven times for names and teams. One, two, three, four, five, six, and seventh and final time. Four and a three, seven times. Teams, two, three, four, and a three. Five, six, and seven. As always, no trade windows. Let's just show you the list. There's the first half of the list right there. And there is the second half of the list right over here. Let's print and rip. Is everyone right here? Thank you. Once again, hot off the presses. And the Jalen Hurts, nice, rated rookie pink. Pink parallel is exclusive to these Blaster boxes. Sean O'Leary with the Fly Eagles Fly. And we've got an elite series. Insert, Justin Herbert rookie card for Ryan Redman and the Bolts. Logan Wilson, pink, and Cole McDonald had a farm. All right, a couple of decent cards there. Not too shabby. Now let's grab everyone's names. Let's see who's gonna get into that football mixer. That's gonna be awesome. All right, so again, thank you, thank you, thank you. Let's randomize that list. Snake Eyes, two times. So it's gonna be top five after two, really quick. One and two. So from six on down, yeah, I'm afraid it's sad times, but I appreciate you taking the risk. Thanks for trying. Nothing ventured, nothing gained, all the cliches. I appreciate it, though, thank you. Happy times, though. For the top five, Sean O, Ryan Redman, Sean O, David, and Dylan. Congrats to the top five you're in. We'll see you for that mixer, jaskyscasewrakes.com. Bye-bye.


Now we're ready to get started with our very first simulation scenario in NoseLab. First of all, I would like to show you the default dummy example measurement data we're using NoseLab. So here we assume you have an average daily conversion count per bucket over hundreds. You can also change that of course. And we assume that you're going to want to measure two metrics. The first one is purchase value and the second one is purchase count. You can edit all of that in advance mode. But this is kind of a boilerplate to get you started with your first simulation. We're also assuming that you want to track three dimensions. You want to track the campaign ID, the geography, and a product category. And we're assuming that you have four different campaigns, three different geographies, and two different product categories. So this makes for a total of four times three times two. So 24 buckets in total for each of the specific measurement goals. Right. These are the default parameters. I'm also using a batching frequency that is daily. We can also change that. We'll talk about that in a minute. And I have scaling on again one more parameter that we're going to discuss in more detail. You will also notice that here at the top of this parameter panel, we have contribution budget and epsilon. We will not be editing these for now. The contribution budget is an API parameter that's fixed at the moment. And as per epsilon, I'll touch on that in the next section. All right. So with this, we're ready to run our first simulation. So let's go ahead and run that. So here we have a little timestamp to remember when we run the simulation. And we can already look at our output for our measurement value, our average percentage error, which is the metric we're going to look at for now. RMSP will be useful later is about 1.8%. This is the exact value. But here knows that gives me a little overview that's colored. Give me an idea of how much noise that is. And for the purchase counts, I have an average percentage error of 0.1%. Important to note that noise is added from a random distribution. So if I was to run the exact same simulation with the exact same parameters, this percentage here, these may vary a little bit. They should stay in the same ballpark, but they may vary a little bit. This is the nature of noise. It is random. What you can see here is really the average percentage error that's calculated as an average on the whole summary report. The data table is over here. We've already touched on that in the introduction about the user interface. But this is really all of the output simulation data of NoseLab. Each key, this is the bucket. Over here, this column represents the summary value before noise, the summary value after noise, noise over here. You can see that noise can also be negative. This is important. And here, finally, we have our calculation for noise APE.


Today, we are also honoured to offer the stage for the announcement of a new award celebrating the life of Jimmy Jorabji. Jimmy was a pioneer in international harm reduction and a major figure in the movement in Asia. And we're also really delighted that Jimmy's partner, Del, jam-setting sure are here. Thank you, Peter. Thank you very much for the opportunity to present the Jorabji Award here today on the unceded lands of the Wurundjeri, Wururung and Buururung peoples. I also pay my respect to their elders past and present. And I thank everyone for attending the final session. Congratulations to you all. It's quite fitting that we follow the Vietnamese experience because Jimmy was very committed to the work that happens in Asia. He died in November 2019. He was a brother, an uncle, a father and a grandfather to many people in our sector. I first met Jimmy in 1998 at the Sao Paulo Harm Reduction Meeting just two years after the establishment of the Asian Harm Reduction Network. And I'd like to acknowledge, Nick, for all of your work that you did in supporting the groups of Asian drug users and activists who came together at that meeting in Hobart in 1996 to establish that very important network. I was a friend of Jimmy's and a work colleague until his death. Three decades later, the network of Asian people who use drugs continues as the voice for many people who, for structural reasons, are unable to be in a position to speak about the issues they care about. Jimmy was a key part of the reason why many of these networks were established and why they still exist today. Jimmy mentored and inspired many. He epitomised lived experience and peer education. He was truly an inspirational leader in harm reduction and this award will ensure that Jimmy's legacy to harm reduction and to the rights of people who use drugs is remembered and acknowledged. It's fitting that today, the 19th of April, is actually also the day he married Del. And it's, as Naomi said, Del and his two children, Jamshie and Sher, are both here to celebrate the acknowledgement of this award and I am proud to announce that the Burnett Institute, who was the last place for which Jimmy was working and worked for so many years, together with the network of Asian people who use drugs and the international network of people who use drugs, have established the Doribji Award into perpetuity. The award will be annually provided scholarships for two people with lived experience and working in the field of harm reduction to attend a conference of their choice and at least one of these people will be from Asia. The actual specifics and the timing of the award will be promoted through our harm reduction networks and through the networks of people who use drugs. So look out for them, encourage others and yourselves to apply. Thank you very much. So delegates who attended HR 23 have created a conference declaration specific to the Australian context. This declaration is intended to align our many voices, so we might be more clearly heard when advocating for change. In creating this declaration, we've conducted an online poll in workshops aimed at identifying our collective priorities and developing simple yet powerful language to communicate them. We recognize that not all delegates will have been able to contribute and therefore their voices and perspectives may not be represented. So there will be further opportunity to refine the priority statement, statements that accompany the declaration. We see this declaration as the start of a conversation that we hope you will all continue. In addition, the HR 23 Viral Hepatitis Pre-conference developed statements calling for action for people who use drugs. One that a global priority statement to integrate Hepatitis B into harm reduction and an Australian priority statement about Hepatitis C and implementing needle and syringe programs in prisons. These will be circulated to delegates. So I'd like to invite Gabby, a proud Aboriginal woman and harm reduction Victoria board member to tell us about the conference declaration. Hello. So this is the harm reduction international 2023 Australian conference declaration. We recognize and celebrate the unique and valuable contribution that people who use drugs make to society. This declaration unites and aligns our many voices. We deserve and demand equitable health and social outcomes for people who use drugs. We recognize and we hold the shared priorities to ensure people who use drugs are permanently resourced to lead and self-determine through genuine inclusion and representation. Dismantle colonial systems and structures and criminalization and prohibition of drug use and stigmatization, discrimination and racism ensure equitable access to an individual. So good, now I stuffed it. Ensure equitable access to an individual choice throughout the full range of health, harm reduction and related services. In advocating for these changes, we recognize the need to ensure the genuine equitable health and human rights for people who use drugs as determined by people who use drugs. Be community led and driven by diverse voices, knowledge and experience of people who use drugs, including Indigenous peoples, young people, women, people of color, people in custodial settings, queer and other marginalized groups. Ensure Indigenous peoples and groups lead the work of decolonization, including the International Indigenous Drug Policy Alliance and the Black Harm Reduction Network. Our priorities are detailed in the accompanying list of advocacy statements. We commit to continuing to refine our language and understanding when using these statements so that we may be united in advocating for community led change through our many efforts. Thank you. Fantastic. So in order to wrap up, I'm going to ask the HRI team to join me on stage against their will and start by telling you a little bit about what it's been like to partner with Harm Reduction Victoria. I cannot thank the team enough for their endless, endless support day in, day out, their thoughtful conference planning, their partnership, all very much under the leadership of Seonni Crawford, who is everything we would like to see as a leader in the Harm Reduction community, somebody who makes space for others, somebody who listens before they speak, somebody who has such humility, he won't give me a long bio for him, but you get the gist. I'd like to shout out to Harm Reduction Victoria, Seonni, Ben, Nick, Sam, Jane and the team. Thank you so much for being an incredible conference partner. As I mentioned in the opening, we're really excited to also partner with Aval, Asham and Intu in implementing this conference. So a big shout out to the new Aval CEO, John Goby, Charlie, Jeff, Elle and the whole team, Nikita, Emma, Jason and the team at Intu, and Nadine, Shelley, Brett and the team at Asham. So I'll take you through a few now. Local support committee members, including Craig Holloway and Gabby Brunning, the program committees, people from all over the world that dedicated their time to do such an amazing job of help us pull the incredible program together in a really democratic way. The organization's hosting the site visits, the Melbourne Convention Bureau team, Caroline, Vizio and her team, Shana, John Boy and the team at the Melbourne Convention and Exhibition Centre have really been so supportive throughout the whole week. Our donors, sponsors and exhibitors have enabled us to issue 60 scholarships to get people here from around the world.  Please stand up. Can't believe none of you are wearing those orange t-shirts anymore. Thank you to Lee Hirtle for leading the medical services with support from Harm Reduction Victoria and Co-Health. It's really important to us that we can talk about drug use and keep each other safe during the conference. Michael Kessler, our media consultant who literally worked around the clock for the past week and our communication strategist and all the incredible work they've done to showcase this conference. We've had great media coverage across Southeast Asia and Australia. So thank you so much to both of them. Conor Ashley and Nigel Brunning, our welcoming version of Paparazzi. Eric, Thomas, Milena and Helena who do our website and design. The Elton John Aides Foundation for supporting the film festival and the team from Drug Reporter. Joelle, Samento from Crowdcoms who went above and beyond. Joan and the team at Harry the Hyrer for the beautiful exhibition space. Mickley and Mon who ran the virtual element of the conference. Watch out for all the videos on YouTube in the coming weeks. Patrick O'Hare and our board member Alex Stevens. Get a little closer for the last bit of love. Thank you so much to Rua Dariete and Ailish Brennan for really stepping up and joining our conference team to make it work. And finally, Maddie O'Hare, Lucy O'Hare. Our conference directors extraordinaire have the vision for creating a conference that has the values that you know speak to our heart and mean that we can bring the community together in this way. So thank you so much to everybody. Have a wonderful afternoon.


Ladies and gentlemen, we take you now by transcription behind the scenes of a police headquarters in a great American city We're under the cold glaring lights will pass before us the innocent the vagrant the thief the murderer This is the lineup. Mr. Dempsey show up. Yeah, not yet Let me know when she comes in. Yeah, sure Explain the lineup to you each of the suspects you will see will be numbered I'll call off a number their name and charge if you have any questions or identifications Please remember the number of sign of the prisoner as I call his name Please be prompt with your questions or identifications the questions I asked these suspects and really to get a natural tone of voice Not pay too much attention to their answers as they often lie. All right, bring on the line Keep it moving boys all the way at the end of the stage. That's it all the way I'll turn in face-front Speak right out so the people in the back of the room can hear you Number one Francis Gilligan open charge step out Francis right to the circle Where do you live? The leader last place you slept in town to 1 9 balance 7 Partman 10 and on the east side. Yeah, when were you arrested night before that where at an eating place It's the rest of downtown. What's your business plumber? You'll have to speak louder plumber. That's more like it Anyone will you when you were picked up? The long you have a gun. No any weapons at all. How about the sap? Yeah, that's that a weapon What were you gonna do with it? Carry in it. Where'd you get it found it where I'm on the ground in the park Okay, Francis slide on down the line Number two Russell Pollard grand theft auto. I didn't steal nothing. It's all a mistake. We all make mistakes Russell Tell us your address Elliot Hotel. It's on Glen Armour trim on. I don't know which along you live there a couple of days Where'd you come from Russell? I am Wyoming anyone arrested with you I need a bed. Oh great. This is Dempsey. Caller. She's the 69 No, what you doing there the way here she could pick up for driving. Oh She wants you to get her out we get her See upstairs, yeah Hi anything on the book Chicago Wyatt about Phillips extradition papers ought to be in the mail tomorrow What'll mean a change in the night watch who we got Kennedy and go malice can stand in for two days. Yeah I'll take it in right but John Guthrie Lieutenant this is Bob Tasker. You know I reported a burglary the fifth the last month. Oh, yes, mr. Tasker No, what can I do for you? Well? I think I have some information that might help you You know, it's been over a month. You fellas. Yes. I know mr. Tasker. It's been slow Would you like to drop in here or do you want us to go? There's no time for that lieutenant. I'm going out on another selling trip tonight Matter of fact my train leaves in 45 minutes. Can you meet me at the station say the cocktail lounge in 15 minutes? Well, certainly mr. Tasker will be there. Thanks. I guess that's the one he means been The only one open yeah, the table over here. Come on. Thanks And this is Sergeant Asher. Mr. Tasker glad to meet you. I had no thanks. How about you sergeant? Thanks, sure. Yep train leaves in a little while. I travel you know on the road most of the time I hope this isn't a lot of trouble for you coming down here No, no, not at all. I had to drop by the station myself But I just didn't want to until I thought about it a little more than I already had But what a cause you any trouble we pull the report on the burglary if you're a problem mr. Tasker Nothing been recovered yet. I suppose I was still working on it. Yeah, I'll bet What does that mean things stolen out of my place over a month ago after I called it took the police Have an hour to get somebody out there a couple of police will not drive behind the years yet Nobody down there cares no skin off there No, the man's been robbed things taken from his place and then I know the setup Well, you know it takes time to work these things out. Mr. Sure. I know typewriter camera thought a lot of them They're gone now. Please don't care the robbery detail has a description of everything stolen from your apartment It's on the bulletin every day every second-hand stolen pawn shop in town is being covered. Yes, sure I know how it works. I told you every day we recover stolen property when we find your things will let you know Sure you with I get it the brush on look Tayska. Do you have anything to say when you asked us to meet you here? Sure, I didn't I don't get the idea. I had a couple of drinks and this called up to talk to somebody I got something on my mind. They've been on my mind for a month or so now I've been around your train leaves pretty soon. Mr. Tasker, maybe we all ought to have a drink together. Thanks. No, thanks again Okay I want you to know there's nothing personal in what I said a second ago. You pregnant pretty good couple of guys We are a pretty good couple of guys mr. Tasker. How about it now? Look that place I live in some darn funny things going on in and around there. You know that You're talking about 1720 North Raft Avenue. Yeah, what do you mean funny things funny things people? I guess I noticed them before my place was burglarized, but I never connected it before I always pay attention to my own business You see I don't even know the name of one person living in that building and I've been there two years What do you think of that? Well, how does this tie in with the burglary these people going in and out at all times? That's how it times in there funny. I tell you. Well, how's that? Well, they're they dress funny You know what? I mean big shoulders on their suits pants all cut big at the knees and tight around their ankles long hair I know people decent people right people Kind of I've seen around there lately aren't what I'd call right people I've seen him in the hallways the lobby and cars parked in front of the place and it doesn't look right to me I think one of them didn't you think one of them broke into your apartment. Yeah, I do any particular one Oh, no, I couldn't say about that, but I think one of them is our man, but you don't know which one Well, any one of them. Well, tell me do these people live in the building? No, no, I don't think so Then they visit someone who does live there. Yeah, sure. They must you know who they visit No, what do you think one of these people might have something to do with the burglary? Well, it's funny. I tell you you ever have a feeling about something You know what I mean? Well, sure you do you two been in the police department and all right You got it. Yes, mr. Taske well a week ago. I got in from Asheville See you about eight at night and three of them will sit in there in the lobby all slouched down on the couch a couple of guys And a girl they all just stared when I walked across to the elevator not a word.  No, thanks. No And when I was leaving there tonight to fellow stand in the lobby funny-looking guy When I passed him he said something to me. I stopped and I asked him what it was and he just looked at me and says You uptown man. Is this man living in the building? No, no, would you recognize him if you saw him again? Sure, what he looked like well tall about your height maybe 150 and on a dark suit red hair How old 40 or so any idea who he might have been seen there. Oh, yeah, the manager Oh, what's his name? It's a woman named a wall is Mrs. Waller. She runs the place. I don't see much of her Well, how do you know this man had been visiting her came out of her apartment? She was arguing with him in the hallway when I got off the elevator. That's when he came up to me Have you ever seen him around there before? Yeah a couple of times never knew who we visited before new. Were you alone? Yeah, was he alone just with her or did you hear what they were arguing about? No, mr. Tasker, what was it? He said to you again. I'd like the exact words you uptown man. That's what he said. You're positive. Yeah Positive truth some kind of zoot talk or something like this. I wonder what he makes by I've been around but I never heard He seemed crazy like that before have you yeah, huh? He was asking you if you had any marijuana Yes, I'm the manager here. What is it officers a couple of hours ago? You were seen talking to a man tall redheaded man. Is that right a couple of hours ago? No one's been here all night. I've been alone all evening. We'd like to talk to this man. Mrs. Walters. Are you sure? Yes? I'm sure Why do you want to talk to him? I want to clear up a few things. That's all Tall redheaded man docks. Oh, oh Yes, there was a man here. I guess you mean him. What's his name? Well, I don't know that he came here looking for an apartment That's all I don't have any vacancies.  Tascan, you know mr. Tascan? Yes 308 We shouldn't say things like that. It isn't true at all. Why would I be arguing with the man? Mr. Tascar told us he'd seen the man in the building a couple of times before We thought he might have been a front of yours. I never saw him until tonight when he came and asked about running an apartment Sure, of course. I'm sure have you ever seen him around here before not that I know or maybe visit someone here in the building He might have I can't answer that What's this all about? Why are you so anxious to talk to this man? Just trying to get a little information Was he here long? No, he just came to the door. I told him I didn't have a vacancy and then he left Did he come inside your apartment? No, mr. Tascar told us he saw this man leaving your apartment Then you walked out in the hall with him. I don't know why he'd tell you a thing like that It isn't true. It isn't true at all. You didn't argue with him. No, of course not What was it argue about is your husband home? I've been divorced for seven years How we sure like to get this straightened out mrs. Walters mr. Tascar says one thing you say another Go back to mr. Tascar. Don't bother me. What's this man done? You're so interested in him Well, we only want to talk to him He didn't happen to leave a card or anything No, doesn't he want you to get in touch with him when you have a vacancy? No Well, here's my card if he happens to come by again or a phone you do you mind letting me know all right But there's not much chance or ever see him again. Well, thanks for your help. I'm sorry to bother you. Good night, mrs. Walters Good night nice-looking woman. Yeah You got a line. Oh Yeah, keep them. I Want to look at the mailboxes? Yeah She's got two vacancies Excuse me Ben hold on just a minute all right records and identification olexi Yeah booking number Okay Half the place is out with a cold working kind of shorthanded. It's got Ben I like a make-and-worn on this one. Let's see you Margaret Marion Walters, huh? Yeah, grab a stool. I'll see if we ever leave. Okay Watch a cigarette.  No Oh I'm getting hungry. I could go for some of Charlie's ham and eggs myself me too guy can sure grill a piece of ham Ben yeah, you and Pete want to come in here for a second sure. That's her all right Take a while to get a package on her. Why don't we just send it up later any convictions? 1938 child stealing Or here's another one may 1947 Archaic's violation Alex check-through force No complaints no activity reported in that neighborhood brainered or one of them be up later on I Sent through Tasker's description of the redhead and they're checking any coffee around this place. No ran out yesterday Don't look at me. I bought the last pound. Yes, you did the apartment building is owned by a man named Shabon Retired lawyer. He hired Mrs. Walters to manage the place for him a couple of years ago Asher talked to him this morning Shabon says she's always done a good job Tends her books keeps the place running like a clock thinks he's just fine She gets 75 a month under rent 10% bonus for every 12 months lease not bad Good enough to be driving that for catty. Who knows Shabon gave me a list of all the tenants in the building. I'll better run it through before we ask any questions You got a chance to get out there and look at the place. Yeah, nice place nice residential neighborhood Everyone minds their own business. No one bothers anybody else Was that all you think it'd be good spot to work the best anything from Kramer and Murph, huh? Still staked out across the street. No callers so far today. Okay, quite an Asher can follow them We'll go on at six She's up to her old tricks. She's selling again. We're bound to recognize somebody who comes along right now I'll check back. Where you going coffee want some sure wait a minute. I'll go with you You stay here and drink that pound you bought 22 a 415 at 1657 Brunsdale Road see the woman 73 a 480 proceeding north on North Randall Boulevard 62 Edward 4568 4568 Hi, Asher She been an old day hasn't stirred 315 a man and a woman went in to see a state 10 minutes check the license tag with DMV people name of Robinson 1105 North 8th Street Our and I didn't have anything it looked like apartment hunters Two hours early a man from Columbine Laundry service another one selling brushes both of them working the whole neighborhood Anything else? Yeah, 20 minutes ago a tall guy in a brown suit went in to see it drove a gray Ford coop I looked at the registration Thomas P. Jepsen 11691 Bell Avenue might be what we've been waiting for I called our and I for a make on him doesn't arrest two Convictions petty theft and possession want to go out and get him. Yeah, don't have to Ben He's still in there Five after eight I'm freezing we should start getting warm hate these kind of nights Right to wrap this up Maybe we can do it now. There he is. Yeah, come on just a minute there You're talking to me. Yeah, hold it just a second. What is it? What do you want police like to talk to you? I haven't done anything another driver's license. Yeah, sure Yeah, just the license you keep the wallet Thomas Jepsen That's your name isn't yeah One one six nine one Bell Avenue. That's still your address. Yeah Yeah, who do you know lives in that apartment building? Hmm.  Oh, but just a friend of mine. No harm in a guy visiting a friend Is there what's your friend's name the girl? I know Walters. That's your name. Mrs. Margaret Marion Walters Yeah, how long have you known it? Oh a few months. You have any business with a town? I don't get you when you were in her apartment just now Did you buy anything from her? I don't know what you mean. Did she give you anything then? No You ever bought anything from her. Hey, you must be on the wrong track. I don't know what you're talking about She's a friend of mine. I want to see her. I got a right to see my friends Don't you think so? That's right. We're just trying to clear something up. Somebody give you a wrong tip Nothing to clear up. We have to look into everything Tom. Did you buy something from her just now? All right, Pete. Hey, stand still. What is it? Come on Tom, hold still. I don't get this. I don't get this at all What are you shaking me down for? Nobody's shaking you down Don't you have to have a reason for something like this? Hey, Ben Yeah Now we have a reason Tom Do you buy these things from Mrs. Walters? Did she sell them to you? Okay, you better come with us Full name Thomas Paul Jepsen When were you born Tom August 7 1911 Blue pale medium turn your head Now the other side Okay Well Tom, well what what are you booking me for? I haven't done anything. We were hoping you'd be smart about this What do you mean be smart? I don't know what you're talking about This will make your third trip Aren't you getting tired of this kind of thing? You're in pretty serious trouble whether you know it or not look booked me jail me do what you got to do I'll be out tomorrow. We don't think so. Well, you got nothing on me. I think we have I went to see a friend I can do that. Why do you want to go through all this? I don't want to go through any not very smart All right sit down. What are you doing for a living these days Tom? I work where? Selling tip sheets at the track doing pretty well. Are you okay? About my car.  They'll tow it into the city garage It'll be okay. What are you gonna do with me? We're just gonna sit here. Don't you like it now? Look you guys. I know a little something. I've been in a squad room before Tom.  She's been peddling you can bring mrs. Walters in The lineup where before you pass the innocent the vagrant the thief the murderer Listen again next week when we again bring you the lineup You people out there on the other side of the wire in the audience room may I have your attention, please? Thank you. My name is Cogger Sergeant Pete Cogger. I'll explain the lineup to you Each of the suspects you will see will be numbered. I'll call up a number their name and charge The lineup starring Bill Johnstone as Lieutenant Ben Guthrie and Jack Moyles a Sergeant Pete Cogger Was written by E. Jack Newman with music by Eddie Dunsteader Featured in tonight's cast were Clayton Post Victor Perron John McIntyre Peter Leeds Virginia Greg and Tyler McVeigh The lineup was transcribed in Hollywood by Jaime Del Valle


So there are so many open source tools that it seems like a very simple thing to create a perfect photographic workflow on Linux. Like if I want to import photos I can either use an import module in DigiCam or a dedicated tool like Rapid Photo Downloader. If I need to keep tabs on my photos I can use DigiCam. If I need to process raw files, I don't have to tell you how many raw processing applications are out there. If I want to publish my photos there are also open source tools for that. It's also fine in the end, I think we realize that there are some cracks in this beautiful smooth imaginary workflow. And I discovered some of these cracks and I tried to develop tools that will fill them. Today I'm going to talk about them. So the first tool is probably one of the most popular ones, well at least by my measure. It's called little backup box. It is a set of scripts, passion PHP scripts that transform regular Raspberry Pi into backup box. So you can use it when you need to backup your photos while traveling. So you don't have to carry a laptop and use it as a glorified backup solution. You don't need to have any proprietary solutions like WD, wireless passport, which is both expensive and not upgradeable, not tweakable. If the battery dies you are pretty much screwed. So what you have is basically a Raspberry Pi running a set of scripts. My setup looks something like this. So this is what I carry with me at all times. This is a Raspberry Pi powered by PowerBank. And this is my very old phone running web interface that you can use to control little backup box. So little backup box can operate in three modes. The first one is card backup mode. So the idea is that you use a USB stick or high capacity USB stick as a backup device, backup storage. And you use a card reader to transfer the contents of the card to the backup storage. And in the card backup mode, this is what little backup box does. And it does so completely automatically. So it detects, it has a very simple primitive mechanism for detecting storage device, then detecting the card reader, and then copying the whole thing to the storage device using RC. The second mode is camera mode, which uses a screen based on Gphoto. Basically as soon as you connect your camera directly to little backup box, it will offload all the photos from your camera to the storage device, to the backup storage device. And the third mode is remote control mode. So in this mode you can actually perform simple actions or trigger new card or camera backups manually. And in addition to that, little backup box has the mean, the DNA and SAMBA servers. So you can activate it from the web UI. So you can view your photos, assume your photos to any DNA device like your smartphone, your DNA, and your TV set. And you can of course use SAMBA to transfer files to other devices. So that was little backup box. So now that I started the problem with keeping my photos safe when I'm on the move, the second problem is to offload them. Yes, you can use the input module in DigiCam, you can use Rabbit for the downloader, but neither of these tools did what I really wanted. And what I wanted was quite a lot. So what I wanted was to transfer photos to JPEGs and RAW files. I wanted to extract basic information like camera model and lens model. I wanted the script to fetch weather conditions for the day the photo was taken because I'm obsessed with weather, so I want to know the exact weather conditions when the photo was taken. And I want all these data to be written in the commands field of the basic metadata. I want the script to magically write copyright notice. And I wanted the script to rename all my photos based on the dates time. And I wanted my script to organize all the photos in folders by date. So this is how auto was born. This is, again, a relatively simple batch script. And it does exactly that. So it transfers photos. Oh yeah, and I forgot one more thing on my wishlist, to geotide my photos. So it's a pretty basic script. When you run it for the first time, it will ask you a few basic questions like where do you want to copy your photos in the destination folder. It will prompt you to enter your copyright notice. It will also ask you to specify your notify token, which is a simple Android application which can receive push notifications. So I run auto in mass. So when the transfer is finished and when the script is done, it will send the notification to my phone so I don't have to sit and wait when it's done. So when you run the script without any parameters, it will do just that. It will assume that your photos are already geotacked. It will copy the photos, add the data, which features the weather conditions, write everything where it's supposed to be, execute the data, and organize the photos and raw files into folders. In addition to that, you can specify several parameters. Like if you have, for example, a GPX file, if you use a geotracking application and you can save your tracks in the GPX format, then you can use a special parameter to provide a path to this file and the script will geocorrelate your photos. And if you have several GPX files, you can use another parameter so it will combine, merge all the GPX files into one, and then go to geocorrelation. If you don't have anything of this, you can perform a course correlation. Basically, it uses a specific parameter to specify the city where you took your photos and the script will fetch an approximate geographical coordinates and will use them instead. So the problem with important photos is solved. At least partly. I mean none of my solutions are perfect. There are some weird things going on and I still can figure out why they're doing that. There are still some weak spots like, for example, in the little backup box there is no mechanism, or at least there is no easy way to teach the device to recognize which storage device is what. You have to go through the specific sequence. The first device you insert is considered to be a backup device and the second one you insert is considered to be the source. So these are two screens that I use most of the time. On my desktop, as you can probably notice, I use KDE as my preferred desktop environment. And the best thing about the default file manager in KDE is that you can specify custom actions, context actions, meaning that in the browser when you right click on a specific file you can get access to commands that you have created. So I have several things, several actions I use very often. It's not very difficult to specify this, to create these actions, but if you have something like five or ten of them, then it could be becoming useless to create an entry for each year in every one of them. So what I created is simple, it's not a script, but it's sort of a package that has all the elements required for these context actions. And there is an installer script that downloads everything, compiles the required stuff, puts everything where it's supposed to be. And what you have in the end is a very nice little menu that gives you access to all the actions. So as you can see, I can use it right click. I can geotype by CT, add the active command, resize the image. This is particularly useful if you like posting your images to your blog or website or whatever. Re-compress using the absolutely excellent tool called JPEG Archive. You can show geotype photos on the map and so on and so on. And finally, so I share office with colleagues whom I describe as privacy fundamentalists and they brainwashed me into leaving Google, photos, Facebook, Instagram, Twitter, everything. And I don't miss it, this decision of my life. The only problem is, another problem, the only feature I sort of missed was what I call photos from the past. So you know that in Facebook it will scan through your photos and if they find photos from the past even on today's date, it will sort of show them to you. I really like the idea and I wanted to create something similar that would run in my NAS, scan through my photo library and do pretty much the same. And this is how NAS Fashion was born. So this is a solution, a tool that consists of two parts. First there is a shell script that does pretty mundane thing. It goes through all the files, reads, creation date and time, date and month, compares it to date dates and puts all the final photos in specific folder. And after that, a simple PHP script generates a page. So it looks something like that. This is an offline version. And yesterday I ran the script on my machine. Let's see if I can show it to you. I didn't do it today because that would be typical if I ran it and it didn't work. So it looks something like this. And as you can see it also, maybe you can't see, but the captions of the photos comes from the command field and this is where the whole weather thing is important. So I can immediately see what camera I used to take the photo and what camera and lens combo and what the weather was at the given moment. So as I can see, very nice memories. Seems like in 2015 I was running Tokyo. So I have a little bit of time. As I said, none of these tools are perfect. Natsukashin, for example, is pretty slow because it's in its nature. It has to go through every single file, read the dates, creation dates and compare it and so on and so on. So I have something like a couple of southern photos on my mask and it usually takes between half an hour and 45 minutes to go through the entire collection. So usually I run it during the night by drone job. But if you have any suggestions how to make the screen faster and if you have suggestions how to improve the web front, I would be very grateful to hear them. So that's my tip for now. Questions? Do you do hash verification like check zoning when you copy? Because that has been made in the past when I copy a file. Actually my prototype is the simultaneous backup and copy to work and directory. And I've had a circumstance where the backup was corrupted when work and directory was not copied from the same source. So I started checking after I write. Can you try to summarize the question for the video? Okay, whether I use hashes to make sure that files are not corrupt. Is that correct? After copying. After copying. Yes, I thought about that. No, I haven't implemented it because I cannot code to save my life as it said in the description. So that's the reason. I mean it's an interesting exercise for me because I'm not a programmer. And it's my only programming skill worth mentioning is copy paste from Stack or Flow. But I thought about that. And it would be a very good idea to implement it just to make sure that everything is supposed to be the same. Yes? Do you use a web service to get the weather information or how do you get the weather information? Ah, yeah. It uses DAX Guide API. It's not the best weather service. They can be sort of... Yeah, they're weather forecasts at least, I know it's not precise. But it's close enough. So it's DAX Guide. You can... I think they have a free account. You can get 1000 requests per day. After that, it costs some symbolic amount of money. I've been using them for almost a year. I still haven't received any bills from them. If you start the photos into folder with the date, you need to search the photos now. Sorry? If you put the date in the folder, you don't need to search the wallet photos for yourself. Yeah. But you're right. But I try to make my script sort of more universal in a way. So it doesn't depend on the name of the folder. So it reads the dates of what is in the file. So if you choose the name... Choose a different naming convention for your photos, then the people still work. At least they're educated. I haven't tried it. Thanks. By the way, I usually talk about DigiCam. And normally my audience is like a quarter of what is now.  Do you really know it? Yeah. I'm here for the rest of the day. If you have any questions and even better, if you have any bright ideas how things can be improved, done differently, please. You might be able to store that hash of the extended attribute to the file itself. Yeah. We were carrying the hash. Yeah. So we can do that for some things. What's that? Well, any more questions? No, extended hash. Thank you very much.


If we want women to be equal, if we want women to be paid the same, if we want women to be heard at the table, we need more of us doing it. We need more of us at those tables where decisions get made. And that is how we help each other. Ultimately, all of the other things that we can do that will matter, won't matter compared to how much each of us can do by stepping up and deciding to be a part of the change. And we are getting closer to equality, especially in government, but we have a long way to go until we reach full equality right across society. And that's why I wanted to get all of you in the room together today, because I believe that your generation is the generation that's going to crack the code. I believe that after all of the work for hundreds of years that women have put in to make it possible for British Columbia to elect a woman to the highest job in the land, that after all of that work, you are going to be the ones that finish the job. Because there is strength in numbers. And when you are at the table, you are going to make your voice heard. And your generation of young women have it within your grasp to change the future forever for every single woman who comes after you. So go do it. Thank you.


And six that he gets up to don't always go down too well. In towards Stead! Half a chance for Bradford, and arguably the first real opportunity of the night has gone the visitors' way. Picked up by Tavernier. Pringle trying his luck on the right-hand side and going for the bottom corner. And Revelle couldn't turn in the rebound after McLaughlin had made the save. Agar. Can he get a shot away? Oh, and Revelle couldn't quite apply the finishing touch. Pringle will take this free kick. He leaves it instead. Driven in and off the post. Michael O'Connor with the effort and just missed by Revelle inside the six-yard area. Double chance for Rotherham right at the start of this second half. This shot was nearly all right from O'Connor. He almost got his head to the initial ball in and then it was driven back in by Adams. So close again. By Stead, here's Bennett. Jones making the little run ahead of him. Kyle Bennett has Stead on this near side. Twisting and turning, getting the shot away. Would have been a terrific goal. Popping up on this near side. Scars now for Rotherham. Into Moore's Revelle. Oh, it drops here for Harris. Vukic! Oh, he's missed. What a chance for the substitute. Vukic just hanging back here. And then suddenly he was in some space. McLaughlin out quickly. And the ball lofted over. Pringle with it. Oh, it's a free head-up. What a chance for Kerry Arneson. Rotherham could have won it there. Nobody with the central defender. What an opportunity. Couldn't be taken.