Welcome to the Homelab episode show. What number are we on Jay? Well, gosh, I totally forgot what number we're on. We've done so many of these and it's like, I know we're not at 50 yet. Not at 50, 45, I had to add it too. It was on the tip of my tongue. It is number 45. We had a meeting, well, Jay did one that ran over and I kind of had one that ran over as I was working on something before I got set up. So, you know, you get those distractions and your notes are not funny out right away. So this is Homelab show episode 45 where we're gonna talk about YubiKey. These things are awesome. They can save you some convenience. And this is one of those rare exceptions where it's actually relatively convenient and secure. Generally, security and convenience are at so much at odds with each other when people, this is what makes them not wanna do security or have long passwords or go through multiple steps of authentication because it's hard, it's inconvenient. And obviously, most of the attacks because they occur remotely, you can think about your threat modeling a little bit different in terms of technology. If you're someone who has a physical threat model on her, well, I'm sorry, YubiKey's probably not the solution and we're probably not the podcast for you because we're gonna focus on the technology side and securing things, not as much. I mean, yeah, it does help your physical person to the extent. We'll actually talk a little bit about that because there's an option to use a lux and encryption with YubiKey. But before we get too far off topic, let's start by thinking of sponsor of the show. That is Linoad. And Linoad has been a sponsor since the beginning. They continue to sponsor the Home Lab show and it's a great place to host and talk about all these projects. Matter of fact, let's bring it related to YubiKey. Yes, you can set your YubiKey authentication up on a Linoad server so you can log in and then need your YubiKey to get any further. This is a great way to help secure things. And once again, it's a way to be a little bit easier actually to log in than just SSH keys. It adds an extra factor of authentication, gives you that extra security. I guess the only inconvenient thing could be is if you lost your YubiKey, maybe it's part of their marketing because a lot of the suggestions are buy two YubiKeys. This is a conspiracy by the YubiKey people to get you to buy more YubiKeys. And I like to think of it as like a consequence of having ADD, like I have to buy spare things every now and then because I lose my car keys all the time, I lose everything all the time. So having another of something is always a good thing for us. So I think we could be to blame too. Could be to blame. But either way, when you set it up, it is recommended to use two of them. We'll get into why later in this video, but we wanna thank Linoad for sponsoring. Head over to linoad.com slash homelab show to get started.  So go ahead and get started with that. Thanks, Linoad for doing this. We appreciate it. Yeah. I already see comments on this. We're aware of the news with Linoad. That's as far as we can really talk about it. Yeah, we haven't even had a conversation between ourselves about that as of yet. And it's kind of like one of those things we're just kind of digesting that. And- Linoad was bought by Akamai so we can get the elephant out of the room. Right, that happened. I found out late last night personally so barely I haven't even had 24 hours on it yet, but it's one of those things that I might make a video I might not, I haven't decided yet. Yeah, so, all right, that's as much as we can. We just don't have anything to say. It's not that we know anything more. Matter of fact, it turns out a lot of people didn't know this was gonna happen until it happened, like it was breaking news. I think people could probably accuse me of knowing about it, but I didn't know. I didn't know. No, that doesn't mean anything. We're not on any disclosure.  That happened. Now, I think there's one thing that we can all agree on and let's be honest, there's few things in life that there's universal agreement on. There's always debate about everything, but I think one thing I feel safe to say that there won't be any debate on is the fact that passwords suck. Like- All they do. Who likes passwords? Like raise your hand if you think passwords are awesome. And I really don't think anyone's raising their hand unless they have oppositional defiance disorder, but no judgment on that either. Passwords are horrible. We have to try to remember them and manage them and resist the urge to make them the same across different devices, which we all know is bad. But I mean, honestly, can you say you've never done that? I mean, even I can't say that I've never done that, but you shouldn't do that and we need something better. And passwords are one of those things that I'm surprised we still have if you were to ask me 10 years ago, do you think we'd still be using passwords in 2022? I'd probably say no. We should have something better by then, but people listening can't see me, but I'm holding up a computer mouse, which is another thing that I wouldn't think we'd still be using that we've had since the 80s, but- So Star Trek lied to me. It kind of did, like, you know, like Scotty, like computer, computer, talking to your mouse. I know, I know. Scotty was, he had me hoping for the future. I remember seeing that going, I can't wait till the time like that. And it kind of gave me a bit, but that movie in particular Star Trek 4 was the very first theater movie I've ever seen in my life. Anyway, we didn't come here to talk about Star Trek, although I know a few people wouldn't mind that. Fact is passwords suck. We need something better. We're kind of like in a crossroads where we have different technologies that do exist, but they're in varying levels of adoption industry-wide. So that's kind of the hard thing is that we could develop something that's amazing and we'll replace passwords. But will people implement it? I don't know. Now, Ubiquiz give us kind of that extra layer of protection because if your username and password were to leak out without a second factor, obviously that's really all someone needs to get into your account. But with the Ubiquiz or a device like the Ubiquiz, there's another layer.  Or if it's NFC, you just kind of wave it around or put it in the back of your phone. And that makes it such that if someone gets your password, then hopefully they won't get any further than that. Obviously change your password. If you think it's been compromised, don't rely on the Ubiquiz to always protect you. But it's kind of one of those things that'll help you out. Now, this is a HomeLab podcast. So why do we care, right? Maybe we do, maybe we don't. But I think in today's day and age, whether you're an enterprise user, HomeLab user, this is a good thing to have because I've seen people have their Twitter accounts owned just because they have a username that another person thinks that they want more. So they take over an account just because they want the username. You don't even have to be famous. You don't even have to have a YouTube channel or anything. Sometimes you just have to consider having one or having something to help protect you. And the Ubiquiz is a hardware device that allows you to do that. And I'm in the process of making another video. There is a video on my channel already about Ubiquiz and setting them up, but I'm going to be making an updated one. You can still watch the original. Probably not that great compared to the production quality now on my channel, but it is there. But part of my desire to dust this topic off again is because the product lineup is just confusing. And when I first looked at it recently in preparation for writing this script, I mean, I've been working on it off and on for a month. Not because it's difficult. I have other things going on. But part of it was like, what do I tell people to buy? Like there's pros and cons of each. And you would think if you buy the most expensive product in a lineup, you get all the features of the ones or the models underneath it plus new features, but that's not really the case. You actually lose some features on the more expensive Ubiquiz. So I think that what we're gonna do in this video or video in this podcast episode is talk about the basics of the Ubiquiz and then in the video that I'll be putting out, I'll go a little bit more into detail about it, but there's a lot of advice I think we can give in this video. Yes. Episode. I've been recording a lot and saying video over and over again, I'm working on like 80 videos at the same time. And no, I'm not. And I also shared out Jay's video he did and how to turn on with authentication. There's a couple of PAM models you need to load in Linux. This will allow you to use Ubiquiz for your Linux desktop. This will also allow you to use Ubiquiz for your SSH and servers as you set up. So those videos already exist in those tutorials. So we're not gonna get into some of the walking you through step by step because those already exist. And I'll throw them in the show notes, but they're also when I tweeted out the show, it's in the Twitter and it's easy to find on Jay's channel. If you type in Ubiquiz, I think it's the only video you have on Ubiquiz if I'm not mistaken. I'm not aware of, I don't remember doing another one. Yeah, and that one's dated, but like I said, a new one will be coming. So first of all, what can you use a Ubiquiz for? I think that's a good place to start. And you already mentioned a few things there, right? So SSH is a big one for us because we use that a lot. So having SSH protected with the Ubiquiz, you have to press the button. Basically you type in SSH or your SSH command. You type in your password unless you have like, key authentication as you should. And then the next step is it's going to ask you to press the button on the Ubiquiz and you do that and then you're logged in. And that's one thing, protecting social media accounts, sure. You know, it doesn't have to be SSH. You could protect your Twitter account, I'm pretty sure. I don't remember what all services support it, I think most do. And you could actually have it backing several different accounts. So that way you have one security key that can get you into your desktop. You can make your login screen, even on Ubuntu, even on the GDM login screen, you can make that require someone to press the key.  They need the Ubiquiz and you have it in your hand, then guess what, they can't go any further. Server logins, like you said, you could set that up. And there's even an authenticator app that they offer as well. So there's all kinds of different features here. So I think that it's something to consider and considering how bad passwords are, whether you care about this or not, I think you kind of should because we really need that extra layer of security because the minute that password leaks out there, I mean, who knows, someone could be logging into something that you'd rather they not log into. Exactly, that's a huge thing. Do we wanna talk a little bit about the, how the protocol works? Yeah, that's something I'm diving into kind of in the middle right now. So we could talk a little bit about that. And then maybe I'll just say a few things and if you can fill in some of the blanks, we could do that because there's several different terminologies that you have to know, right? There's- It makes them a little bit challenged to understand. Right, there's like OTP, there's TOTP, there's UTF, there's 502, I'm sure I'm forgetting something there because at its basic level, if you don't understand any of this stuff, right? You don't know what these terms mean and we'll talk about it in a sec. You don't really need to know at this basic level, you could set up the UV key to where you just press the button and logs you in. Do you have to know how it works under the hood? No, but we usually like to know that, that's why we're into the homelab thing because we wanna know more. But if you just wanna get started and get up and running, you just buy one, you pair it and then press the button to get in and that's it. But to understand the feature set, we do have to understand some of these terms like OTP, one-time password. I think that one is pretty self-explanatory. It's a password that you can use one time, it's a one-time password. It's something that changes regularly. For example, it increments by one as I understand it. So if you log in and then increments and then there's another one and there's another one. So I've been to explain it a little bit because I think our audience will give them a little bit more how the OTP algorithm works is, I know definitely it works, it's secure, but what if you could see it? What if you could see it and then increment it by one? And this is where it's a little bit of a cool nuance the way Ubiqui does this with the Ubiqui OTP generation algorithm. Now, good news is it's completely, if you type in OTPs explained Ubico, they have a detailed write-up. This is all open source. One of the huge things that Ubiqui does is allow all of this to be open source. So you're completely trusting the math and implementation, not deep dark sorcery secrets locked in silicone. That's a really important factor that all of this is done with open protocols. That way, from a developer standpoint, you can understand how to implement it and from a security auditing standpoint, you can go through and go, the math is good and they break down all the math in there. Now we're gonna get too deep into the math, but we will talk about how that works with the ID. So every time you touch the Ubiqui if you're using the Ubiqui OTP for authentication, it has the UID, the private secret ID, then it has the usage counter, then it has timestamp, cessation counter and random number. Each time it generates a one-time password, just as it sounds, OTP one-time password. And if that password is used, the system marks off that the increment ID was X and we've now used a one-time password. Now, what if someone were to try to intercept or get that password? I got it, you know, Tom, I copied it and it authenticated. I'm gonna try and use it again. Replay attack. The way the counter predicts against this is it increments the counter and let's say I'll use Bitwarden as an easy example. I log in at Bitwarden and let's say you were screen capturing me and you were able to somehow intercept the input of my OTP. Well, it's one time. If you tried to replay it back, the system would go, no, the counter doesn't match because I had a counter of this. I expect the counter to always be higher, even if it's multiple times higher. The reason it has to be up to multiple times higher is because what if I log into a few other services that use UBKey OTP? Well, the incrementing goes up. So it just has to be greater than the last authentication used. It can be one greater, it can be I use it 20 times greater. This is kind of the genius of how they do it and how this is why even if you were to see my UBKey and watch me type it a couple of times, you can't reverse engineer it and you can't do this. You can't intercept it and you can't replay it. This is a really important factor for how they do the UBKey. Yeah, and also we have TOTP, which is time-based. Oh, yeah. It takes the time into account. Yes, that's how you stop every play, every 30 seconds it rolls. Exactly. So then you're thinking about things like Google Authenticator and Authy and they have their own solution for that as well where you have like a code on your smartphone that's changing, you just gotta type it in really quick before it changes again and that gets you in. So there's also that. And then there's FIDO2, which I admittedly haven't done a lot with. My understanding of that though is that they're trying to get rid of passwords altogether. It's almost like a key pair relationship where you have a shared secret and then you have some information that you don't share and that gets you into sites. But I haven't really seen or researched yet how common that is yet. That's something I'm in the process of diving more into, I don't want to say yet. The adoption is definitely one of the huge challenges here. A lot of places because of the openness have adopted the UBK OTP, but some of the other authentication methods have been, I think a little slower to adopt. I think people get a little afraid to implement them. Yeah, and I understand why because if you're, I mean, you should never do this. If you're inventing your own security, you're writing your own libraries, then you could forget something or have something happen in the code or an overflow or some kind of thing that would allow somebody to get in or weaken the security. So generally speaking, you want to use something that's tried and true and that's been audited, but you get off into the weeds when you start to configure some of these things. And I think it's unfortunate that people are slow to adopt it, but it's also a good thing because we shouldn't just blindly accept every security solution that comes our way. We do need to bet it before we implement it, especially in enterprise. But that being said, it's just adoption slow. Like I remember in 1993, they said VR would be the future. Like, yeah, we still have VR now, but is it as widespread as they said it was? No. That is not the future we asked for. We didn't want to talk, because we don't want Zuckerberg in charge of that. No, I want the, what do they call it on Star Trek where you have that room you go into? The holodeck. The holodeck. Yeah, that's what I thought we would have by now with something like that. But no, here we are with the Oculus of all things. Anyway, adoption takes a while. That's the problem here, but because the Ubiqui supports several different types of authentication than chances are, whatever you use, whatever accounts you use, you'll be able to protect it with a Ubiqui. Yeah. I've seen a few people mention in, I mentioned Linux. Yes, it supports Linux, but yes, you can use a Microsoft account, even have your Microsoft login set up with it as well. So I don't want to leave the Microsoft people out. So someone you out there. Mac, Windows, Linux, it works with everything. You don't even have to have a GUI if it's a Linux server, it doesn't matter. It works with all of that. So if you can imagine it, it probably works. I haven't seen very many use cases yet, but we should kind of get one thing out of the way because you mentioned buying two and why would you do that? So the thing is, we're all human. I'm not sure how waterproof these things are. I remember one time I had a flash drive on my key ring. This is a long time ago when having a flash drive was like a really cool thing and now they're practically disposable. And I live in Michigan, so I dropped my keys in the snow when I was trying to unlock my door and the said USB flash drive no longer works. But I don't know how durable the Ubiquis are because I'm not trying to torture test them right now, but the idea is if you lose it, if it breaks, that's bad because you can't get into your accounts anymore. You need another way. So you could have another Ubiqui, maybe in a safety deposit box somewhere that you could go and grab if you need to go ahead and get into your accounts again. So having two is generally a good idea.  You could probably lose five of them, but that's another story held together. But at least having two because we're human, things happen, it's just the way it is. You need a backdoor to get back into your accounts and if you're relying on one Ubiqui, one really annoying thing that I've noticed with this stuff with security in general. And I think this isn't a Ubiqui problem. This is just an industry problem. I can't remember which service it was, but I had a two factor enabled as I should and I wasn't able to get in. I don't know why. So I found a button on this account. I really wish I could remember what service this was and it just said, you know, reset second factor. So I clicked on it, it sent me an email and I clicked on the link and then I was back in. And I kind of feel like if you have that on your service, then the Ubiqui itself isn't really going to help you because if a hacker got control of your email then they will also click that, I don't have the Ubiqui link. And then all of a sudden they'll reset that and they're in. So I kind of feel like having that link in a service to easily bypass second factor really just makes it worthwhile. A lot of companies, they do that to try to be a little bit more convenient to the user base, which I think is hugely wrong. And often, you know, there's even been a few crypto heists and they were able to bypass some of the two FA systems. Once there is a bypass method by link, for example, to email, there's a greater potential for that potential method, for that method to be exploited and leveraged as a way to get around some of these. So yeah, poor implementation is a huge and I've dealt with it directly in my industry. We had to call out a company and they eventually fixed it. We won't say the name of the company because they did fix it without being called out but we had to engage with them to get them to stop that ability in some enterprise software that we used. We told them, this is really wrong people. Like it's so easy to get around the two FA, it's almost pointless to have it because you can just do a reset. For my personal favorite, the SMS messages that have the code when SMS is so easy to eavesdrop on. So it's like that doesn't help much. Yeah, so poor implementation is not gonna be Yubiqui or excuse me, Yubico is the company that made the Yubiqui. It's not their fault if a service is like that. Now I do understand a service. They, it costs a lot of money to employ customer service representatives and if you don't have a way to facilitate people regaining access to their accounts, you're gonna get a lot more calls. But at the same time, the way I feel is that if I decide to use Yubiqui or a similar hardware device, then if I lose it, it's my fault, right? I don't feel like I would ever wanna put that on a customer service agent to help me because I made that decision to lock my account down so no one else could get into it. And if that also means I locked myself out, well, I took that risk when I set this up so they shouldn't have a link on there to bypass it because I made the choice to not have that. But on their standpoint, it's gonna be, but we have way too many calls and not enough people to answer them. So that's an whole other debate we can get into or maybe you could get into in your other YouTube channel, but that's not for us today. But the bottom line is have to at least just put one away in a safety deposit box or maybe stash one at a relative's house. If you trust them, if you were, do you really gotta trust where you put that thing? But at least have a second way to get in if the primary way isn't working. Or isn't possible. Yeah. So now we can kind of get into the confusing aspect of it. And this is something that I'm still wrapping my head around honestly, but the confusing nature of what to buy because there's so many of them. Now, any Yubiqui that you buy and they can be as cheap as I think $25 on up to like almost, or if not $80 US dollars depending on features, any of them will help you secure your accounts. So if you're, I mean, obviously we have a lot of tech people here, this is a tech podcast, but even if it's like a relative that's not tech savvy you want them to protect their accounts, it's pretty easy just go into the settings of the service that you are using, basically make your Yubiqui able to be that second factor and then you're done. You don't have to know about the protocol. You don't have to know what it's like behind the scenes. So the barrier of entry is small, but when you get past the barrier of entry and you're like, oh my God, which one do I buy? That's where it gets a bit confusing. And part of it, the bigger part of it is not their fault, right?  I don't think they wanna do that. I don't think there's a marketing advantage to making things confusing, but the industry we have USB-C, USB type A, we have lightning and all these other different ports and the average person is going to have unlike devices nowadays USB-C is so common that it is very well possible that someone listening has USB-C on all the things and they don't care. They're just gonna buy the USB-C version of it, which is great. But then some people might have an older iPhone that doesn't have a USB port on it or maybe they need USB on the go. Then there's NFC near field communication. So there's no port. You just kind of, you could actually have it behind your phone and it gets in that way. So that's where you start to get off in the weeds because what if your laptop has USB-C and your desktop doesn't, right? You could buy an adapter, but that aside, what if you buy a USB type A UBIKI and then you wanna eventually use it on your laptop which doesn't have that. So that's when things start to get confusing and now we have the UBIKI Bio which has a biosensor or a fingerprint reader on it that adds another layer of security but that has fewer features than, because you don't have the, I believe it's NFC that you don't have with the UBIKI Bio. So there's a little confusion around that. So that's kind of what I wanna talk about next because it's just one of those things. Yeah, it looks the UBIKI Bio series FIDO edition. So supports FIDO web, web auth, available USB A and C has the fingerprint on there. But it's obviously like you said, it's missing the NFC, which is really handy. If you look at the table, it's just weird because this classic little table where you have the different levels of a product, you have the product and then super product and ultra product and goes on up regardless of what it is and you have these little green checkboxes where the first one, the cheap one has like four and then the next one has 10 and then 15. But when you look at the compare page from UBIKI, you'll notice that some of the more expensive ones are missing some checkboxes. So it's not about buying the most expensive one, it's about buying the one that has the features that you need in particular, which might mean that that $25 UBIKI is perfect for you. That's all you really need. And if you need that fingerprint reader, then of course you are going to need the fingerprint reader but then you actually sacrifice NFC, doesn't have a lightning port, it's just USB type A. So basically we're talking about desktop use at that point, but to go all the way back to the beginning and work our way up, we have the UBIKI 5 series and I'm actually looking at the table right now. So I'm hoping I don't misspeak here, but for the entry level is the security key series. So this is actually the cheapest one, $25 US dollars at the 29, it has pretty much, I think most of what people need, that you could buy a USB A version, a USB C version of that. It also has NFC, depending on which one you get, supports FIDO, we were just talking about that. It does say water resistant, so I guess I didn't notice that, it's crush resistant too. I don't know how crush resistant it can be, but maybe if you drive a car over it, it'll survive, I doubt it though. No batteries required, so there's that. And there's a whole bunch of check boxes, I'm not gonna read all of them, but what you do is you look at the check boxes and see what's missing and maybe the $25 one is perfect for you. The Ubiqui 5 series is generally what I recommend starting with because it has slightly, actually probably more than slightly more features because you get like one-time password, you can actually use OTP, OAuth, which we haven't talked about yet, open PGP, there's a bunch of additional security things that the Ubiqui 5 series will enable you to have. And at that point, it's just a matter of what connector do you have. Obviously, if you have a connector type that all your devices have, buy that one. So if everything you own has USB-C, buy USB-C. That's probably a no-brainer at this point, but if you have unlike devices, that kind of gets a little confusing. So depending on what kind of hardware you have or what you're protecting, that'll determine which version of the security key 5 series you'll go with. Yeah, and I would, like you said, the 5 series, not the security key series, but it's called the Ubiqui 5 series, has the most support for everything, including a couple of custom functions if you wanna use the personalization tool. Oddly, that's not supported on the security key series.  But once you go to the Ubiqui 5 series, you have all the features you're looking for. And they do have one for those of you that need FIPS 14, 140-2. That's just more of a compliance thing. So they do have the FIPS series one. That's really gonna only apply to people who have specific needs, usually when you're interacting with government entities.  Exactly. Now, the security key series, as I understand it, it doesn't support login to a desktop operating system or laptop operating system, Mac, Windows, Linux, whatever. There's X's for that. So if your use case is to protect logging into your computer as well, then you can't go lower than the Ubiqui 5 series at that point. That's your lowest barrier of entry right there, starting at $45. Now, one thing I think is interesting is that the little matrix here that I'm looking at, we could put a link to that in the description or whatever, but they basically list the password managers that they are compatible with, which is pretty useful. So if you use a specific password manager like Bitwarden, for example, like Bitwarden supports all of them, like literally all of them, but then they call out Dashlane. And I think this is kind of funny. There's an X on everything. So regardless of which Ubiqui you buy, you can't use it with Dashlane. So I don't know if they're just trying to make it so that people that use Dashlane know that Dashlane does not support any Ubiqui at all, whatsoever, or they might be calling out Dashlane to say, you need to support us. We're putting it right on our website that you are the only one that doesn't. So you need to kind of get with the program here. I'm not sure which it is or a mix of both, but they do list Dashlane as being pretty much impossible to use with the Ubiqui. Interestingly, the LastPass Premium won't work with the security key series. You do require a Ubiqui 5 to work with LastPass Premium as well. So I thought that was interesting. Yep. And as soon as you go to the Ubiqui 5 series, then you get support for Keeper, whatever that is. I don't know. LastPass, you know, OnePassword and Bitward and Premium. But of course, like everything else, Dashlane is a no-go. So that's not going to happen. So Dashlane, I don't know what, if it's your fault, get with the program. I don't know whose fault it is. If someone doesn't want to work with someone, that's all I can gather from that. Or they just haven't gotten around to it yet. Now, the Ubiqui Bio series is interesting, especially interesting, because that's the one. Now we're outside the five series at this point, right? So that's another series altogether. And currently, I only see one listed. I have several of these I'm going to be playing with. But it has a fingerprint reader on it.  So basically that they can get in an emergency to use it if they need to do so. But I would say I can't think of a reason why, and maybe you can, but I can't, why you would want to buy two Ubiqui Bio series keys. Because when we say that you should have two, we don't mean that you have to have two of the same. You might, if you have like a minimum feature set that you need, but it could be the case that you might have a Bio key, which is more expensive at around $80. And then your second key might be just a Ubiqui five at $45, depending on what's important to you. One's in the safety deposit box, for example, you don't have to worry about someone stealing it and using it because unless they were able to do that there, but the Ubiqui Bio series actually has, like I don't want to, I don't know if it's like the fewest features. But you're right, it does. There's a lot of X's and when you look at the Ubiqui comparison chart for those, it's definitely missing a lot. So I don't think that would go with it. Well, yeah, you know, and that's a shame because it doesn't have NFC, for example. And you would think if you're paying $80, which is their most expensive key, it can go up to $85, that you're going to get everything, right? Because you're buying the most expensive one available, but you're actually getting fingerprint access in exchange for losing a lot of other things. Now the fingerprint access is really cool because you're essentially locking the key with a fingerprint so if someone does grab that key and they don't have your fingerprint, so they can't use it. So that alone might be- It's a nice advantage it has. That is, that really is.  If you've got your right hand ready, so you just enroll your other finger on there, you know, we all snack, it's a pandemic, no judgment. You could put up to five fingerprints in there too. And that's the test we really need is how many Doritos fingers or Cheetos can I eat before my Yubi Kikwits working? There's the test we're going to have to do at some point. Did you say April Fool's joke?  Nope, OAuth, nope, OpenPGP, no secure static passwords, NADA. It's not FIPS compliant. It's available in the USB-A and C, but not Lightning. And if you still have one of those, it doesn't use NFC, which NFC is really cool. It's just something about having a phone and just kind of having your Yubi key behind your phone and then it just unlocks, which is pretty neat. But you can't do that with that one. But my understanding, I haven't tested this out yet. I thought that you could set this up to have fingerprint access to log in to your computer. But I'm pretty sure, but on their diagram, they have Xs next to Windows, Mac OS and Linux for logging into the computer, which I thought you could do. I thought I read that. I'm going to be totally testing that out in my video, so I'll have a final answer on that. But according to this, they're saying that that's a no go. So it's looking like the Yubi Key 5 series is going to be for the majority of people that are watching or listening to this video or this podcast. Yeah. One of the other things, so basically sum it all up, the Yubi Key 5 series has the most features. Look at the comparison chart. That's the one I get. It's a little bit more expensive, but absolutely worth it. I am paying so you can do all the fun things with the Yubi. Yep, all the things. Yeah. Now, other cool things you can do with the Yubi Key, kind of relate that. And this is also why you may want the 5 series. Now, somebody pointed out right away at the beginning that yes, you can only do up to 32 of these, but you can store your standard TOTP authentication inside of the Yubi Key. It's got 32 slots that can be written to for scanning QR codes. It's actually really clever because you're thinking, well, I'm used to using this with my phone. How do I scan a QR code with a device? Well, this is a cross-platform application. So it works on Linux, works on Windows. It's a Yubico application that you load on your computer. You plug the key in. It will then read from the key and find any of the TOTP that you have and set all those up. And it's great. Copy, paste them that are right inside your machine and when you remove it, they're gone. There's no storage being used on your computer. The computer is simply reading it. Now, the same application works on iPhone, works on your Android device as well. And you can do this over NFC.  It can read the NFC chip. It can populate your two-factor authentication. And now you have your rolling TOTP numbers. But how do you get them on there is actually really simple. Use that same YubiKey application. And when a QR code is on the screen, you can tell it to scan the screen for a QR code. And then it will scan the screen, find the QR code and update that YubiKey. Now, one real strong piece of advice is if you have two YubiKey's and you don't want to lose these TOTP codes because they're not reversible back out of the YubiKey. It does not have a methodology by which it does that. You actually will open up the application, scan the QR code, but don't close the window for whatever you're setting it up in. Then you'll program that key with the code. Remove that key, put in your second key, scan the screen again. Now, this time when it scans and sets up the code on the second key, go ahead and put the code in unless you have a third key and you want to keep repeating the process. This will allow more than one key to have the same TOTP codes. That way, if you ever lose one of those keys, you have it on your backup key. The inconvenience, of course, is if you ever forget and get these things out of sync because you've added or changed one and you forgot to do that process, you'll have to just keep that in mind to be very conscious of it. The other downside, of course, as I mentioned, 32 seems like a lot of numbers, but for those of you that have a lot of things on two-factor, I have way more than 32, so. I think I do two. Yeah. I think I do two. There is that as a disadvantage. So I would say maybe it's good for some of your really critical things, your few critical things, and then decide what app you want to use. I know someone mentioned Authy in the comments. Authys are a really popular one. I don't use Authy. I use a tool called Aegis, A-E-G-I-S. I'm a huge fan of Aegis. I plan to do a video on it pretty soon. Aegis is an open source but runs on Android application that will allow you to do two-factor authentication storage. It's got a really clever storage mechanism, but we'll talk about that at a later date. I like Authy quite a bit. I mean, I'm not sure if I'm gonna stick with it, but for right now it's fine. And just for people that don't know, Authy is like a Google Authenticator replacement and it's compatible with Google Authenticator. So if a service is saying, enable your Google Authenticator, you can use Authy in place of that as a drop-in replacement. But what's cool about that is you set up an account and I've seen people, they lose their phone or they upgrade their phone, right? And then they don't have their TOTP at all. But with Authy, you can actually log in and pull that back down, which is really useful. Just make sure you have a really good password protecting that, but obviously that can be helpful in making sure that you don't forget something. As far as whether or not I would use Ubiqui for that, I don't know yet. I'm still kind of, I don't know, maybe 70% through the outline of the video at this point. So I should have that out within a few weeks and then I'll outline those features and what I think people should be using. Yeah, and it's worth mentioning too for this because you can just take this key and bring it by your phone or bring it by someone else's phone who has the app loaded. It might be worth putting a password and locking it so you have to actually unlock the application itself. Just an extra little step because obviously if someone wanders off with your key, they're small, they're easy to lose, but they're also easy for someone else to find therefore a good way to look at this is gonna be you probably should have a password on there so other people can't read your TOTPs. The other side of this is it's your second factor of authentication, not your primary. So they would still require that they know your password and then use that. And of course, if you realize you have lost or someone has wandered off with your Ubiqui, you should go through and start resetting all of your 2FA because once it's longer in your possession, you have an unknown quantity and a story I so wish I could share about this where someone had to rekey everything because a friend of mine who works at a very large enterprise company did lose his keys. You don't think he even stole them. He left his laptop on top of his car and drove off and it was a very specific laptop supposed to be kept in a security case that was not. I am a major klutz, but I have never done anything like that. That is on a whole new level I think. It caused them to have to rekey all of servers at data centers because they didn't know the status. They said, was it in a unlocked status? He says, I honestly can't remember I was moving and I meant to put it back in the case. I put the case that he keeps it in a locked case because they had the signing keys on it so they could sign software and they very much keep it shut down, password is unlocked but he just was using it outside and he did finish something before he moved instead of not his car and put the case locked in his car. He panic when it wasn't in there then he realized I left the laptop on top of the car. Yeah, contact switching is really hard to do. You know, you're doing one thing and then you have to switch to another thing just kind of like having a meeting before this podcast started and contact switching and start this one but that's the eternal struggle of multitasking I guess. Yeah, but nonetheless do lock these devices especially because they're so easy to do and I mean, it really comes down to your personal threat level. More than likely if someone were to find this the average person doesn't know what the Ubiqui is. Sometimes we get caught up in a tech world and yes, it's a security threat but the other side of it is if my wife's seen it I don't think she would know what it is and I work in security, she knows what I do and she wouldn't know what the Ubiqui is if I asked her. Like I'm gonna throw this flash drive in the garbage because every time I put it in the computer it just spits out random gibberish and then it doesn't show or drive or anything. So obviously there's something wrong with this thing. I'm just gonna toss it is probably what most people would do I guess. Right, so those are a few thoughts on there. All right, what's the next topic? Well, I mean, I think for me that's kind of like the basic thing because the next stage, because we just talked about what it is, is how do you set it up? There's PAM modules, there's all this and that wouldn't really apply to a podcast in my opinion. That's why I mentioned your video at the beginning. Jay's got an entire tutorial of how to load the different PAM auth modules, how to set up your repository. I will make sure it's in the show notes and absolutely it's great for setting up those different authentication which includes managing the GDM, the GNOME display manager so you can use your YubiKey for your login there. You can have it as part of your sudo. So you type in your sudo password. The only thing, and I don't think this has changed Jay and Jay commented on the video on this, when you are prompted for your 2FA for your sudo, you type a sudo, it prompts you for your sudo password. It doesn't prompt you for the YubiKey. If the YubiKey is not installed, it just fails but without telling you it's the YubiKey missing. That was something I remember bringing up in the video and I'm not sure if there's a fix for it but I'm hoping to look into that and see maybe it's better now. So yeah, it's what you said. It's like it's looking for something but it failed the password but I typed the right password, what's going on here? No, the YubiKey wasn't plugged in and wasn't accessible or whatever. And sometimes it'll just wait for you to press the button but it's not telling you what it's waiting for.  It just has a blinking cursor last time I tried it. To my knowledge, they still have an update of those modules in there basically. I was reading through, I didn't try setting it back up before the podcast to see if that was the case because I'm not using it currently for my law. Now, one thing that there's plenty of write-ups on but maybe I'll do a video on this is there's a way you can use it for Lux encryption. So you can use it as part of your boot up. Now I highly recommend, I've done a video on Lux encryption already but not specifically Lux plus YubiKey but with Lux encryption, it is boot time encryption. Well, it can be used for more than boot time. You can use it as just a decrypt different drives and I use it for that but Lux encryption can be set to boot partitions. That way when you boot up your computer you have to unlock it to get any further. This pretends people from doing things like removing the hard drive and getting any of the data off of it. So even if they have physical access Lux encryption is nice. Now where you can use YubiKey in this there's actually a Lux YubiKey integration and there's write ups right on YubiKey has a whole how to do this. And this allows you to then touch the YubiKey to unlock your system for finally finishing the boot up process. This is actually pretty cool but obviously you do want to make sure if you set something like this up there's ways to also combine it with a password that way they can't unlock your computer because what if you left your YubiKey in what if you have one of those little YubiKey's and you just leave it in the USB slot and someone takes your laptop when you're ordering some coffee at the coffee house and you're like, I didn't realize that you left it on there. There's also people that do things like tie a string to themselves. They got the little retractables to pull it out every time you get up from the computer. There's a few different ways to mitigate it but you can combine it with that. Now one final thing I'll mention is the YubiKey personalization tool lets you reprogram the YubiKey's. Yeah, yeah I was about to bring that up too because we have several or a couple apps. And the first thing, you know as I'm dusting this subject off as well do I need that now? No, you don't need an app to use a YubiKey. I mean, it's good to have it but you just basically attach it to your computer and then just enroll it into an account. But there's two apps. There's the YubiKey manager and the YubiKey or Yubico, I should say authenticator. The authenticator being a replacement for Google authenticator. I have not used it yet. So I can't speak about that but we also have the YubiKey manager which allows you to actually edit the features on a key. You can actually disable a feature. If it's something that you never plan on using like you just don't wanna have Fido for whatever reason just disable it. You could do that in the app and there's other things that you could do with the app as well. It's good to have not required. They have it for all the OSs, you know the Linux's and the windows and all your Mac people out there will have access to these apps phones in addition to that. So if you need more control over your YubiKey you'll download the manager and if you wanna just use the authenticator then you can download that separate app for that purpose. And that's why we have more than one app because there's two different purposes. Absolutely. Now, one of the wonderful smart people in our chat said there is, Marco says there is an option to prompt to put the YubiKey in in the PAM module. So that has been, again, really probably a non-default config but can be configured to prompt it. So let's do some testing with that. So make a note of that Jay when you make your new video to that module to note, because that's definitely worth enabling so you know why you failed if you're using it in the sudo system. Right. And yeah, I kind of assumed, you know as I was talking like, you know I bet there's probably a way to prompt a message because pretty much everything in Linux there's a way to prompt for something, you know just send something to standard out while you're doing something. So even if there wasn't an official way to do it I'm sure there's a way to do it but that's yeah, the video does need to be remade. It's a little rough around the edges. It works, everything's fine but I could do better and I will and that might be one of those things. And worth mentioning too because of the programmableness of the YubiKey you have slot one and slot two on those YubiKey five keys we mentioned you can program slot two to be a static password. Now you could decide what that static password is. Now obviously this is easily if someone took the YubiKey they would have that static password with a long press which it gives you slot two it would dump that information out but where you could find some usefulness in this you could have a password U type and then you can have a longer string that's part of the YubiKey. Now you combine two pieces of things still kind of a second factor and it's gonna be useful if you have things that you can't actually go through and integrate fully with YubiKey but you wanna have a stronger password for something and you wanna have it on a module because it's something that you know you can't just use and password fill with a password manager as easily you could have that slot two be that so even let's say you wanna use your Lux system on boot but you wanna have a password so you type the first part of the password that you know and then the next 20 random characters come out of the YubiKey consistently the same random characters just random as in when you programmed them it's kind of another work around it's not gonna be the absolute most secure but it's a move forward insecurity is how I look at it's not the it's better if you did the whole Lux integration for those you might be looking for something simple and I've seen someone mention it using it like essentially like a password salt it's gonna be a static one but it's a way you can have it so you can have a consistent way to authenticate something and do it so just more use cases and stuff fun stuff to play around with with the YubiKey Yeah, I think that's something that you'll find after you get used to the YubiKey there's other uses for it other ways or clever ways people have found to you know implement it and do something like as you were talking I'm like could I just like type in a Linux command in that slot and then just long press cause it's like I forget sudo all the time so maybe I could just have the long press be sudo exclamation mark exclamation mark so every time I forget to type sudo I just press the button and then I'll just repeat the it was sudo in front of it that's not even a password or anything private it's just you know maybe I could just set a convenience or something I'll just press a button and now H top comes up or something there's all kinds of you know crazy things you could probably do with it if you put your mind to it and many people have I think GitHub probably has a bunch of stuff on there if I remember correctly Yeah, yeah there's I'm sure there's a lot of use cases we have not covered in but that's the flexibility of these they're pretty cool it's great for secure authentication matter of fact we like some of the enterprise software that we're using some of the stuff we switched to I really like the UBK authentication cause every time you have to do a privilege command in it they actually just have you touch your UBK if it's opposed to entering your TOTP each time which because they have a high level of security for mass actions it makes you think a little bit more but it also adds a little bit of convenience of cool I don't have to go get my TOTP code each time I can just touch my UBK and let me have this privilege escalation for this particular thing I need to get done so I'm hoping to see more integrations with it it's a great system it works great in Bitwarden I'll mention too in Bitwarden it's not your only authentication it can be an addition two so you can still have your backup either your backup codes or your backup TOTP and the UBK is an additional level of authentication so you don't necessarily in that circumstance have to have two UBKs cause you have another method to get in if you were to lose it Yeah, that's what I use actually I have UBK mapped to Bitwarden and then I have I think it's like offy as a second I can't remember so basically when I try to access Bitwarden it says press the button on your UBK if I don't have it plugged in then I just say well I don't have it with me then it takes me to another screen where I can put in a TOTP code from another app and then I get in that way so if you had everything if you just wanted to lock your password manager down I mean that alone could just be a use case for this Yeah, so this was by the way we should have got this sponsored by UBK it was not but this is what I was excited You know I actually reached out to them because I like them so much you know the way I look at it if I like a company maybe they'll want to sponsor but I literally sent them a couple of emails cause I bought when I bought the UBKs they looked at my email address you know the company domain name and like oh yeah you're that guy like yeah do you want to sponsor videos sometime I love your company they've never responded it's been months so I guess they just don't do that yeah I don't know how often they do any type of sponsored stuff on there they're such a well-known brand it's not like we're trying to promote them as a specific brand as much as they are such a well-known brand they're so well they're just there omnipotence in the market they're pretty much I can't think I don't think they really have cause Google they have something similar for their own security Google has those special security things they were doing but I can't really think of who a direct competitor is to the UBKs platform gonna be the Titan keys from Google I think but the Titan keys were for Google specifically and not necessarily for everybody else for example when you look at authentication methods supported by LastPass Premium or Bitward and Premium you don't see Titan in there you see UBK I thought they were universal or maybe they are now I don't know but I thought they did make something that was competing but either way yeah I mean there are other things out there I think I've seen some off-brand ones that kind of scare me but they're cheap right and the way I look at it it's not that if you buy the cheapest key that you can get it's not that big of an investment and yeah we love it but to be completely fair if UBK had like a massive security breach tomorrow and did something really stupid in the security that came out we would drop them like so quick like we would just go on the next episode be like yeah about the UBK thing you guys need to stop using that we'll just totally throw that out there but so far knock on wood we haven't had any big problem and UBK or UBCO has actually been a big and a good steward of security so so far I trust them but you know to be fair my trust is never 100% in IT because you know everything does things change companies get bought? like we're talking at the beginning of the podcast just like just minding your own business oh wait what? yeah what's next Ubuntu getting bought out by Microsoft you never know right? I didn't mean to we're waiting on that one still we've been predicting that one for years we just can't believe it hasn't happened no they'll probably buy SUSE anyway that's a different topic somebody will buy something they're too busy buying Microsoft is too busy buying video game companies right now so they don't care yeah they're trying to buy you know they're not in they don't have the push they had in the school market they used to so now they just buy the game companies and go hey you liked us remember we're the Minecraft people come on kids buy Microsoft stuff later because we're the Minecraft people remember Minecraft you like that right kids? yeah yeah you want our system mom yeah you liked our software come taste this Microsoft Office 365 that we keep raising subscription prices on oh boy I mean Microsoft sound maybe a little bit creepy wait they are a little creepy you know we could probably have a whole episode about that I won't get a crash on Microsoft I'll stop they do some good things too they do some good things there's actually been a lot of good I've been there I've interviewed people like Jeffrey Snowber if you check around you'll find some interesting topics I've had he's the guy that came up with a little thing called PowerShell maybe you heard of it there's some definitely really good people on there at Microsoft I will dog on them as some of their past and they're still a large corporate company that occasionally makes bad decisions but there are some really good and really talented smart people that care about the greater ecosystem of things actually care about open source too so I will completely say that I just like making jokes about them and their corporate overlord buying everything because you're right they're buying all the game companies well speaking of yeah like insanity and things like someone I have to bring this up in the chat room it was just so funny I don't know if this would work in practice but Winston mentioned security through insanity where you have like a bunch of UVA keys you have to press them in a certain order to get into your I'm pretty sure though that when you press the UVA key button that the enter key is programmed to like press enter so I don't know if that would work but that'd be hilarious where you have like four UVA keys you have to have a certain pattern but then again like are you gonna plug them in the same order every time mom that's just funny you know security what if we did this as an escalation this could be a fun video day because they press center you actually set the system to prompt for a series of UVA keys so any elevated privilege action that was gonna be very needs a high level of authentication let's just say you would have the first person put the UVA key in second person and a third person or three UVA keys in some pattern that actually could be done that way you need two people's authorization or three people's authorization to actually get an action done this could be fun another thing we could probably do this in the SSH modules where you just loop it to require more than once in the PAM module maybe there's a way to tell it to ask for each key because then when you're setting up a season yeah all right you guys got us way off topic I think one last thing I'll mention to go further off topic because why not right what if you want to reboot a server and you have three system admins each one has a UVA key and each person that are they're remote they each have to press the button in order to reboot the server so it's kind of like how the nuclear reactor is like oh yeah I have to have like this key and this key and this key to reboot a server you have three admins three UVA keys and each one has to press their button to facilitate the reboot so no one person is to blame for a reboot that shouldn't have happened absolutely that's one of the crazy things you could do with this stuff yeah I do like someone said use the Shamir secret splitting schema where you can have we always need a quorum of at least three out of the four people with the secret together so yeah that could be fun there's so many different ideas just add RM dash RF slash because someone mentioned something similar in the chat have that be the thing and they just throw it out in the middle of a you know parking lot see if anyone's stupid enough and if they're running Linux they or Mac they plug it in and press the button they wipe out everything yep you shouldn't have used it you shouldn't have done that don't ever do that again put something in your computer that you found on the street absolutely all right don't do any of those things I'm just in a oppositional mood I guess yeah it seems like fun though come on it kind of does right yeah I actually have a bad USB here that we play with at the shop I haven't tried it yet I'm going to see if the new guy will put it in his computer so that's always the fun thing is hand it to the new guy so it just goes over to my friend Xavier's site that says you have been hacked by Xavier and it launches a browser and Windows and opens up his site we're not a rickroll I mean that'd be the best yeah what it brings you right to is how to buy security from him and auditing from his so but a rickroll that is so brilliant that's the best way to sell your services right there yes yes so all right well thank you very much I will have Jay's video where he talks about how to get this set up Jay is coming out with a new video that will be out but you can be watching it sometime in future net videos out and that will also be in the show notes if it exists yet but either way check Jay's channel he's got lots of great stuff over there regarding this and awesome thank you all for joining us and we'll see you next week thank you


Okay, so it's got the two turn on, the power on, straight up with a full power in, 56 volts. You're going to see the power coming out here, don't you? And we're going to do the power coming in. I'm just going to get in the mess of everything, so let's just forget about for a second. These have to trust me, it's 56. What are we doing? Oh yeah, so I'll put the two turn on, so we're going to power this on. Turn it on. Adjust the voltage going up. It hasn't actually got anything. So that's 47 watts at 23 volts. So that's 113 watts. That's at 33 volts. 40 volts, 172 watts. 205 watts. That's like four and a half amps it says there. Let me just... That's quite exciting. Just turn it off for a second and just feel that. That doesn't feel warm or anything. I need to have a look over at the back at the amps. I'm sorry if you can't see it very well, I can hardly see it. Hopefully this camera might be able to pick up what that's doing. Just check that. It's not warm as in hot, but I'm just going to give it a minute while I go for a quick wee to cool down and come back and carry on. I just really hope that you can see. The back of this camera in the spring is very small. I can hardly see it. Probably do need to get my reading glasses changed because of all the way I'm doing this. I can't quite remember where we got to, so I'm just going to do that again. I'll put the meter on this side here so you can see what comes out of here as well. I'll put that back down again. I'll put that across the forework. So we've got 55.1 lot. We've got 56 coming out. That's pretty much the minimum I suppose that we had to put out. Let's put this back on. I just want to see what it's going to be like on full blast because I didn't get to the video recorded there. There's a lot better over there now because I actually put the probe back up there. I forgot I got the probe down and it was connected to it otherwise. It just looked a lot better over there now. So we've got 145. 250. Oh, it's fitting back out a bit. Let's turn it down. So that's 250. I wonder what that was actually. I wonder if that was a mixture between the maximum that this can do. I'd need to look over at the amps over there. I'll turn it back up again. But this is 160 VA. I wonder if that's per channel then. Interesting. So let's do it again anyway. I think we might be getting to the full max of my 200 volts. 220 volts is supposed to be able to do 60 watts. But we're not using 180 volts into this. Let's flip that back across. It's not the same. It's good. There we go. Now this time I'm looking at the meter back here. The amps one for me. 26 volts there. On the meter at the back of it, it's on one of the half amps now. Now it's on 200. Okay. That's the amps over there. Do I see? So a lot of this is about... I'm not signing over over there. It's quite nice. A lot of this is about... I'm governed now by, it looks like, possibly the... the variator. Just on the way it was suggesting that the power was being drawn over there. So two amps. So we're saying this is a three amp, or two and a half amp variator. So that bit where it started flushing the bolt, I think it was because it was probably right at the limit of that. So it's warm enough to get it again. Just to have a better check at that. I'll turn it on a few times. Probably help if I turn it on one more time again. Breakout. We'll get a breakout at 20 volts. So I'm looking over there. I don't know if you can see that. I'm trying to see it in the angle I can see it there. So that's on my two amps. That's probably about two and a half amps. Right on the 226 watts now. 4.6 watts. You realise it was that easy to build up with any power supply. Like you've got a lot of power. Yeah. These are the things that I should have just built this. I'm quite impressed with that. Only then I'm not that impressed. It's not I've not gone to the moon and back. I mean I'm impressed at what I've done here. It actually works. And I've managed to be able to get, you know, it's all like 200 and so watts. And this is still okay. It basically goes to the extent of what I can do. If I turn the voltage up a bit more. I just don't, I probably could put them, you know, right at the edge. I'm probably on 58 volts going in or something. So I've got 60 volts practically coming out into this. I've got this right on the edge. But over there, I'm probably going to squeeze a little tiny bit out and it won't be enough to see much difference in this. You know, I'm going to let it cool down and then I'm going to just play around with this a little bit off it and see what that's like. And come back to it. I don't know how much of a last video it got. Because this camera went funny on me again. I don't know, so I'm just going to turn this up anyway. I normally turn it on like that, but I feel it's not as nice as I didn't press the app. That's 120 volts. 20 volts. And it's higher than I thought it would be. Just a little bit. It's all gone. Everything's gone. But it looks like it just all reset itself. I've had this happen before where it's reset itself off the power, because that's off the power in the capacitors. Because at the minute this is all off, but as you see it rapidly going down now. And this will stay on to about 6.5 volts, I've noticed. Yeah, so that was pretty good. The whole thing cut out. But it all came back again. That's always good. So let's turn it back on again. Put the full power back into it. As I'm pulling it away as well. See which one there. I do see a problem actually. I do see a problem. And that problem is, when I turn the voltage on, on that side it's okay. Maybe we've got a bit of a tough connection or something. Because I've got 27 volts. But when I just flipped it back on for both sides, you can see the amp meter. Variable transformer, if I switch that off. Okay, it's just 31 volts that side. And then it just made me just have a bit of time to realise. Okay, so we're back to 55 volts. It should be on 56 really. I'm quite sure what was going on there. I just switched that off temperature. I think it's a little bit warm, but it's not. You wouldn't drink your tea like that. It's not warm enough, to be honest, like it was too cold. Okay, let's keep an arm out of that bit. I'm under just 200 volts. And now it says, I've got 10 volts there that you can signal up. That's just the only capacitors. So I can switch this on to the one side. Gives me 27.2 going in. Switch that across. Switch that to that side. I've basically got this. Switch with the 227. So that's going down. Just going down. I think I've got a loose connection. Okay, so I've just tightened that back up again. I'm not sure if it was loose or not. It wouldn't be affecting anything. Anything that's not right there on those two meters. I'll switch it straight over to the 56 this time. 55.7. And that's where it should have been. I think it's because the wire just come out off a little bit. It looked like it shouldn't maybe have been connected, but I don't think it was. Nothing dodgy going on there. With the amps, there's no amps being drawn. I'm just under 200 volts. I've got 185 somewhere up. Let's make sure this all works. Yeah, oscillations. I know that's good. Just do that one. There you go. 30 volts. Oh, it's trapped out again. Okay, let's just switch that off. I noticed over there as well it looked like I was on full amps. Well, maybe not full, but like 1.5 amps or something. I wonder why that's cutting out. I'm going to take it off. So I added an extra one. That's good because that's still dropping power. I've got one side. I think I've lost one side of the transformer. Possibly. Because I don't seem to have on the other side the same amount of power. So let me switch it back on again with that one. It says we're back on 56.2.  The oscillation. Well, it's just come on. It's going to be a break out. I'm going to watch the amps over on that meter in the background over there. I don't think you're going to be able to see it. I'm just watching it now as I turn this up. I've dropped down to 49 volts. 75 watts. Half an amp on the transformer. On the 118 watts. 45 volts. Down to 44 volts. Going into the boost. Still 57 coming out. 250 watts. 50 volts. 3 amps. About 600 milliamps. About 200 volts going in. Okay, so it didn't do that time. So I think it might have just been someone to do the circuit spin a bit. A bit weird. Alright, well, I reckon I'm going to kind of clue for now that this is still good. At one stage it was going above. Went to about 250 watts, I think. Something like that. Just an attention of 50 watts and it's still good. And the screen doesn't seem to be doing what it was doing yesterday. So that's good too. I'm liking this little DPS 50-15. Still be nice to... I can actually. I can get more power. I can get more ampage. Because I can double up two of these, can't I? But no, I forget I just said that. Because doubling up two of those, I still want to use the variac and it's that. That's going to its limit anyway. So we've already had it there. Alright, okay, conclusion so far. So good with this. I do quite like it. The display stays good. It's been fun. Alright, catch you on the next one. Bye.


Almost time for the bell, how many options will you sell? Fire up your platform, get ready to enter But first, let's get the mindset centered Listen, trade it, have success, find what works for you and forget the rest Stats and probabilities is what we're a dismiss, greed and doubt Focus on the process, not the money and the big honey Power our lives, let's start the show, come on trade hackers Get ready to go, zero day options, time to make bank Get locked and loaded, then be ready to play Hey everyone, welcome to Power Hour Live Today is Wednesday, October 25th S&P down 65, NASDAQ down a bloody 2.6% 390 Russell down 26 and Dow down 134 Dow's down less than a half a percent Gold and silver mixed, notes and bonds lower, 10 year yield back up to 4.95 Oil and natty gas up, grains down Bitcoin up a couple percent and VIX up 10.5% back almost to 21 And we are approaching lows of day, low today and SPX is 4181 Currently at 4183 I did an AM ratio, got stopped out of that I did an early quiet lunch, kind of massage the back test based on the current parameters and it still looked good Got stopped out of that I had an iron duck on and when SIBO had issues I literally shouldn't have gotten stopped out but I ended up getting stopped out for a small loss Which in hindsight ended up benefiting me, so thank you SIBO I guess And then I put on a little gap and go PM iron condor that hit 40% and I've got my remaining half on still here Yeah, in hindsight, I'm not filing a complaint So for Power Hour, looks like we might get 10 wide, maybe 5 wide By the time this thing shakes out here in the next couple minutes Go ahead and buy some longs for Power Hour Tronch 1 Yeah, I was hoping with a drop like this we may get 15 or 20 wide, but not so much today Looks like it's going to be 5 wide Give it another minute, got about 11 and a half point expected move left for the day Got my 5.7 that I still need to close We actually could use a little bit more downside to benefit that Do that here in just a moment Yeah, saw Murph dog So you end up closing that one You know, I mean my back test it shows either closing at the end of day At one DTE or end of day zero DTE so I opted to It's kind of in the middle I opted to hold it for today so End of day is what I was waiting for and I mean we just happened to get a nice down move I kept on going and going and going It was up closer to $1,300 it's up about $740 right now With this little bounce Alright, 5 wide, 90s and 85s Tronch 1 5 wide Trying to get 8.35 Filled at 8.35 on the 90s, 85s This is where my 5.7 is at right now I don't want to take a loss on it so if it starts to push up much more I'm just going to take it off, book a small profit See if this thing is going to go back down Dick K told me we're going down so I got to hold it Because when the machine speaks you listen Dick K, do you like the Dick Kelsey meme this morning? I enjoyed that, I had a few chuckles out loud to myself on that one I like to laugh at my own jokes, I don't know if you guys know I'm pretty much the funniest guy now So I had a couple people ask about the VIX and Gap filters in Option Omega So I just wanted to go over a little bit of that while we have some time Kind of in between trades here So let me just give you an example and then you guys can ask whatever other questions you have on this So for example, here is my reverse iron condor test And so one of the filters I have on here is Actually I must have accidentally changed that to 1% That should be .25 Hang on a second, I must have been messing around with it and accidentally saved it Alright so So I have a VIX overnight moved down minimum of .25% So what I'm doing here is essentially On a reverse iron condor, for example, you're essentially buying premium You're buying an iron condor as opposed to selling it So when we buy this, we want to do it after volatility has contracted So the filter is used to say, OK, if the VIX opens up down, meaning volatility has contracted That's when it makes this more attractive to get in And so that's an example on a reverse iron condor The opposite, when it comes to like, let me look at like a AM ratio My Monday, Wednesday, I don't use a filter, but like AM ratio Friday, for example So on this one where I'm selling an iron condor I want volatility to be Expanding to sell premium, right? We want to sell high and buy low We want to buy low and sell high So on this one, I use a VIX overnight move of a max of a quarter of a percent So in other words, if volatility is contracting more than a quarter percent This doesn't back test well So I want volatility to be down very little Or to be expanding for me to put this trade on So it's just it's regardless of zero DTE It's, you know, really any timeframe you want to you want to sell premium when the options are expensive when implied volatility has expanded And you want to, you know, if you're going to buy premium, you want to do that when when premiums low looking for it to expand from there Does that make sense? JBPR and then Wally World, are you in here? So the in option omega, which is the software we use for back testing They don't necessarily have an implied volatility indicator filter It's just VIX So you're just looking at VIX If VIX is down more than a quarter of a percent That's that's kind of the most common VIX overnight filter we use Yeah, VIX is VIX measures the 30 day at the money options of SPX So it's a measure it's a it's a measure of implied volatility So the VIX is going up implied volatility is going up But again, it VIX specifically measures the 30 day at the money options of SPX So like, you know, I also have this implied volatility indicator that I measure where implied volatility is based on a percentile and IV rank version And I look at it, I look at it on an annual basis So where's implied volatility compared to where it's been the last 252 trading days and the last 21 trading days are essentially a month to get an idea So for example, obviously the VIX is up today so you can see the volatility indicator is going up as well Hey, Wally World, I see I'd see you just posted on the zoom chat All of our when we're streaming live go to the zero live chat channel in discord Let me know if that made sense to you Wally World Oh alpha options Maybe I didn't miss maybe I misunderstood your question as VIX rises does its IV rise or fall and the answer to that is yes as well So for example, you can look at our implied if you have toss you can look at the IV indicator on VIX So typically when VIX is going up the volatility on volatility is also going up So the volatility on VIX is going up as it's going up As it's going down the volatility is typically contracting Is VIX still a symbol? Yeah, so VIX VVIX is a symbol and that's the actual volatility on VIX So you can look at that as well All right SPX coming back down 4185 ish I added a downside vertical spread to our single put calendar and SPX just to protect the downside We do have Mr. Powell taking the stand after the after the bell today So I just wanted to protect the downside if it bounces I will I may add another calendar to help with the upside But I just wanted to protect the downside I wonder if the market's going down because it just it knew Jerome was taking the stand after the bell It's like yeah, let's just get this out of the way Let's just go down before you before even gets in Yeah JBPR so that So those are some indicators that Atenra one of our members created just to give you a quick easy glance So basically what this shows is you've got gap minus 0.36 so SPX gap down 0.36% today from yesterday's close The move is the current move from today's open So S&P is down you can see you know SPX is down one and a half percent from yesterday's close but from today's open It's down 1.15% that's what that one is And then the VIX 90 ratio that's VIX versus VIX 90 I don't I don't really use that for anything but that's on there as well That's another filter you can use an option Omega And then it shows the max move and max max move up and max move down on the day and that's from the open today's open So it's really handy to just have on your chart to kind of take a look at and you can find those in the zero DTE course channel You can see the toss shared links posted there My PM iron condors looking good so far let's see I've got to hit my 80% I'm looking for four bucks It's currently trading at 640 a trunch one I got in at 835 I'm looking for five bucks to reduce my stop on trunch one trunch two and about six minutes I don't know if Wally World ever made it in Wally World. I just tagged you in the correct channel zero live chat Just want to make sure you understand everything was clear that I mentioned to you Yeah I saw him and he said he's on the he's on the zoom call so I told him where we were Runch one currently trading at 715 There he is Did I answer your questions Wally World does that make sense? Are you PMMers that PM time flies getting a little close to the edge I may close that one before the end of the day Well welcome Wally World glad to see you're dipping your toes in the zero DTE land Yep JBPR correct Just protecting the downside you know Jerome's taking the stand after the market closes so Who knows what he'll say could get a little wild so I've got a lot more room to the upside And if it does bounce then I can adjust with another calendar tomorrow There's no tutorial Aten Raj has created those chart labels but what questions do you have they they're pretty self-explanatory You got gap move and max move the gap is what the S&P gap overnight The move is where it currently is from the open and the max move and max max move up and max move down are the maximum amount they've moved from the open today There was the tutorial there you go All right trance one still pretty centered here trading at 680 Trance two here in a couple minutes buying my longs Looks like we may get 10 wide could be the same strikes Going with the 90s 80s Well no 90s 85s or 655 Build at 655 on the 90s 85s the same strikes Looking for 395 to reduce trunch to a J. B. P. R. That was from this morning That was at the open the expected move was 2026 points from the open Obviously we smashed through that I always mark the expected move on my chart so see this dotted yellow line here That was the downside expected move at the open we smashed through that It's about a two and a half standard deviation move today And if you look at your option chain every every option chain has the expected move for that period so Do we now in the end of tomorrow the one DTE see the expected moves that move is plus or minus 38 and change Expected move at the end of Monday is 70 and change Okay you holding your five seven right up until 10 minutes to the bell Are you already bounced? Yeah I guess I do I'm supposed to close half at 50% I did not do that It's supposed to close half at 20% I mean Let's see I got into my five seven 1345 I'm up about 12% right now No I don't I don't have profit targets on my power hour trades If I get to 40% I reduce the stop on tranche one and two But I don't I don't take profits early Launch one is it 585 I'm looking for five bucks to reduce my stop Ken that should not be the case you must be doing something My PM iron condor trading at 440 I'm looking for four bucks to close my last Last portion Are you on toss Ken with that one five seven Did you click on a wrong leg or something Sometimes when I have accidentally messed up Sometimes the easiest thing to do is go back to the order and toss Find it in your past filled orders and then just do an opposite order That way you know you got everything correct Sometimes if I'm you know if I'm clicking on legs from the analyze screen And then right clicking to close the trade Sometimes I'll actually like you know click on a leg that doesn't belong to that specific trade Launch one down to 560 Coming up on tranche three Launch three in two minutes Looks like the 95 85s possibly Launch one still hanging around 550 Give it another minute Alright looking at the 95 85s for tranche three Launch three 10 wide We get filled at 350 Build at 350 on some of them There we go Build at 350 10 wide 95 85s And a little bounce here The five seven just went to scratch I could have would have got I didn't I should have had a profit target to close half at 20% Like my Like my plan says to do I just totally forgot Price to come down just a little bit to get out of my Rest of my PM iron condor Tronche one trading down to 4 540 530 And out of my PM iron condor 80% nice Tronche one gets down to five bucks. I'll change my stop to $8 515 I'm down to around 87. We'll definitely get there Another point another point lower. We'll do it Looking around 515 520 510 Just a little bit lower 505 Five five flash there we go Reducing stop on tronche one And tronche two which is the same strikes I need 395 so I need another buck Little buck little bucky buck to come out of it Reduce that one Alpha options to your earlier comment on Vivex Realize we are using back test data but it would seem Hypothetically worthwhile to watch Vivex if it moves Up for days like today Pending Fed global conflicts could be help on when to add The calendar or take it off like you did today Not routine but situational Add the add the calendar Which which calendar are you talking about When I added the vertical to my calendar No I don't I definitely don't add calendars On days when implied volatility is spiking I enter calendars on days when implied volatility is contracting Unless it's like this morning I traded a one two Which I just do every Monday Tuesday Wednesday But For maybe what I was talking about here on the stream was I had a I already had a Calendar in spx Which was this one here It's trading down near the the lower end of that calendar And so I added a vertical spread for protection to the downside So now it looks like that Is that is that what you were talking about Is that what you were referring to I guess I should say But yeah I don't I don't necessarily look at Vivex Just because I I have my Navigation trading implied volatility indicator So I can see what the volatility of VIX is doing If I just click on VIX and I can see the volatility on VIX And kind of where where it's been relative to where it's been the last year The last month so that to me that's that's how I look at it Yeah I kind of during power hour I mean once I get my trades on I kind of jump around other positions So sorry that may have been confusing What I do for power hours trunch one two and three so I'm in all three trunches I reduced my stop on trunch one Waiting for trunch two to get down to three ninety five I'll reduce it So what did they manually did they close it for you can Okay What am I gonna do with my five seven A really nice profit going and then this little bounce happened That's the problem with the old gamma When you get down to the wire Power hour trades could use a little downside as well Yeah when I set up my Quanteo When I set up my This thing push When I set up my OCO orders it has a stop And a ninety percent limit And that's just so I can easily adjust that at the end of the day So if I want to get out with five minutes to go I can just adjust that up so it's already there Or if I decide to take it to the bell I can get rid of it Or lower it down to ten cents which I do sometimes Trunch one stops at eight bucks currently trading at seven ten Need a pullback Elliot all out not feeling it today huh Oh yeah you hate Wednesdays Wednesday has a it has betrayed our trust hasn't it the last few weeks It's gonna come back and redeem itself today You got Wednesday in a timeout Alright I'm gonna give my five seven ten minutes before I pull the plug I got so discount if you're looking at my screen On this little push up right here Let me get it bigger On this little uh on this little bounce I survived the whole initial flush Then we we got this little bounce right here About an hour after the market opened I got stopped out somehow And it was because of the SIBO issues going on All of a sudden it just took me out so it stopped So which ended up being in my favor Because I would have gotten stopped out for my normal loss Instead I got you know I got in at seven sixty stopped out at nine ten So it was a small loss But that data issue must have Must have just triggered it Trader Jim's on the Wednesday is sketchy train Closed out of a time fly today Just for a little scratch profit to protect the downside And then jumped right back in in the same cycle Repositioned it Put on a duck earlier today Market wasn't down nearly as much as it was at this point VXX closed out half yesterday Came all the way back up to basically break even on this remaining half I'm gonna wait to reload though I wanna see if we get another pop above these recent highs You know if VXX gets above twenty seven twenty eight I'll be jumping in with some more Back down below ninety please Anywhere between eighty five and ninety is good for me Market on close Twenty six million sell size is the early indication I don't have any stats on it Chris I've just been watching it So far I don't really think there's anything to glean from it I just know that if it ends up being a big number Or if it you know switches from sell to buy in a pretty major way Then you get some market movement But then you know as far as there's nothing really you can do about it at that point So I don't know it's just something I'm kind of watching Trunch number two is trading at five fifty I need three ninety five I don't do anything different with it There you go come on back down It's nice and warm below forty one ninety Wuga what are you doing here I thought you were getting a root canal You already done? After the market okay good planning Trading in the chair You don't you probably don't want to be trading You get a little happy gas going on Alright there we go Brunch two down to four seventy Four forty Four thirty Four twenty five I need about thirty more cents It's right in the sweet spot between eighty five and ninety Just got to sit here for a few minutes I've looked at the gamma is that spot gamma I've looked at it I don't I mean to me it's just like any other level It's it's really how you trade around that how you manage your risk How you manage your position around that level So I don't I don't I don't use it Down to four fifteen Four ten Four oh five Three ninety five alright reducing my stop on trunch two Just like fibs right decay You know I don't I say all the time I don't have anything against using any of that stuff It's just You know We all perceive things differently so whatever gives you the confidence to Help you manage a trade better Go for it fifteen tell So I'll get out of my five seven Build it fifteen twenty Alright so the five seven ended up being a nice little winner Could have made more if I've got out A little bit ago but It's alright I was up around twelve hundred bucks at one point at the lows of day But of course you're never gonna Hit the hit the exact best I'm good with it I stuck to my the only thing I did wrong was I didn't I should have closed half at twenty percent And I just didn't even think about it Trunch one trading at three fifty Trunch two trading at three fifty Trunch three trading at two dollars and twenty cents Elliot put how much money you left on the table Because of your hatred towards Wednesdays Hundred and twenty four million sell side Final number coming out in two minutes Just need to chop around right between that eighty five and ninety No need to get excited Jerome's not here yet Save your little Dog and pony show dance for after the market My one two from earlier today is up My three four from Monday is Struggling This is my three four Right in the valley Need Jerome to say something to move Move the market one way or another Up or down Sixty points should do it Taking that off in the morning Less than ten minutes to go Trunk one and two trading at two eighty Trunch three trading at a buck twenty So alpha options whenever premium gets When implied volatility gets low You know we're looking for a specific credit on each side So when implied volatility is low We'll end up just doing an iron butterfly Essentially we'll you know we're buying the wings And then we're selling this selling the straddle At the money So we end up We'll end up doing plenty of those We prefer not to We prefer to be wider As far as double goes You know you're just really using more contracts Than you need to Double butterfly the risk profile graph Will be similar to an iron condor Get the little bat wing bat bat ears But I think you're better off just doing an iron condor Yeah so once I once I buy the longs All I'm doing they're basically dead to me From that point on I'm just focused on Managing the shorts because the the longs are worthless And I buy them for five or ten cents You can see they're all worthless at this point So they'll just expire All your risk is in the shorts And all your profit Well I guess I'll keep my PM time fly Tomorrow you keep in yours I'm doing whatever you're doing Keeping it alright go down together Market bounces will be in business If it goes down We will wish we closed it At five minutes till I'm going to close Tronche 2 Tronche 2 I've got an order at $1.50 I've got $1.60 Build it $1.60 on Tronche 2 Four minutes to go Tronche 1 I've got an order at 80 cents Need a little bounce Tronche 3 my order is at 35 cents 85 is the low strike on both of those Need a bounce A hold above 85 please Final number 230 million to the sell side Pretty low Tronche 3 down to 57 cents Tronche 1 should get filled at 80 cents If we bounce just a little bit I said if we bounce just a little bit Starting to get filled at 80 cents Got three contracts filled Four, five, six, seven, eight, nine, ten Alright, out of Tronche 1 at 80 cents Tronche 3 at 10 cents Currently trading at 55 Still need a little bounce Still got to stay above 85 835 Tronche 2 I got in at 655 Tronche 1 I made 7,555 Tronche 2 I made 7,920 And Tronche 3 Is trying to give me another 3500 In 10 seconds Hold your head up buddy Hold it up for another 10 seconds Ding ding ding pin on Tronche 3 Very nice Alright, let me see 350, yeah 35, no 350 times 14 Is 4900 on Tronche 3 So 4900 plus 79 20 Plus 7,555 Equals A little over 20k today my friends Not bad on a Wednesday It owed us It owed us from the last few Awesome Alright my friends tomorrow Where we got on the docket for tomorrow Tomorrow is the 26th Yeah so I'll be streaming live At the open tomorrow morning And then we will be back for Power Hour Live Alright good stuff my friends Have a good night Talk to you soon


is TFNN, the Tiger Financial News Network. Update. Good morning, everyone, Basel Chapman here on this Thursday, the 16th of February, and we're looking at the Dow right now down almost 400 points at 33,729. Remember where I said this is where I'm anticipating a sideways move that we could roll over and we did make a peak D yesterday at the close a little higher than the previous day, and therefore we are somewhat vulnerable. We've been kind of cautious, raised cash especially to be able to put to work on this big pullback, at least this pullback that I'm anticipating, how long it lasts, we'll see, because the S&P at this particular moment, the S&P is also down quite sharply, down 52 at 4,095. Now it's under the 14-period exponential moving average, and if you're looking at the QQQ, which yesterday broke out of the inside track resistance, and that's that falling X formation, and now we're back in it, we're down 3.8 at 305.2. Yeah, this is nothing serious at this particular point, the day is young, we'll see what happens. When we come back at the range, the IWM also did the same thing, tried to rally, did a nice rally yesterday, today giving back some of it down 2.30 at 192.10, watching this closely, but now look at this, the gold contract is still down 7 at 1838. Now it is testing, the 1838 support has actually gone to 1836 this morning at 200-period exponential moving average, as the dollar is rallying, it's extended at an A and B, it's at 104.08, looking at the TLT, which is bonds, and bonds are down, so rates are going up again, this is a little bit hazardous to the market, a shorter term, and looking at crude oil, and crude oil is in fact holding quite steady, it's up 30-Q cents at 79.13. We'll be back for the Tiger Technicians Hour, this is a really important couple of days going into tomorrow's close for the weekly charts, and we'll talk about when I do the Tiger Technicians Hour, and of course check out my opening call, my daily newsletter. I'll see you in a few moments, did I not hear the music, music should be coming on, have I beaten the music, I don't usually do that, not hearing anything, not sure, there it is, music has come on, and we will go straight into the Tiger Technicians Hour, don't forget we started at 9 with Tommy Jr. doing his morning market kickoff, of course great programming for the rest of the day, Steve Rhodes and all the others, we'll be right back.


Like I was like constantly trying to figure out ways how I can control my own destiny as far as like the financial side of it. What it comes down to is just having your own brand.  The publishing and the checks and the royalties, that can most definitely be a part of it, but it's really, really hard to make that your main thing and be in full, complete control of your own business because someone else is cutting your checks at the end of the day.


Just when the Browns slated to get Odell Beckham Jr. back this week, they end up losing their receiver on the opposite side of him. YouTube team keep it clean, what's going on is engraving here with another video. And in this video, Odell Beckham Jr., who missed the past two games, he's coming back but now Jarvis Landry, he's going to be out for a minimum of three games since the Browns are placing him on injured reserves. Now remember, of course, with the new injured reserve rules, a player just has to be on there for a minimum of three games. In Jarvis Landry, he has, I believe, an MCL injury. So this is going to keep him out for the foreseeable future. When he's going to come back, no clue yet. But I do not think that he'll end up being out for the season. So Browns are definitely going to have to make some big adjustments. Because this, I know this comes as a shock because with Jarvis Landry, when he was with the Dolphins, since he's been with the Browns, he does not have a problem with missing games. He does not have any injury problems. This dude is always out there every Sunday, every Monday, every Thursday. If a game got to be played on Saturday, he'll be out there too. So this is a huge blow for the Browns as a team because on the field, Jarvis Landry, his productive, tough wide receiver, good hands. I remember back when he was still on the Dolphins, his last year, the year before last with the Dolphins. I remember when the story came out that my Ravens tried to trade for him. And that was pretty upsetting because I was like, oh man, we could have had Jarvis Landry. Then the following year, the Browns end up getting out. And then they went and doubled down and they got his buddy Odell Beckham Jr. after. But anyway, so this, this is huge for the Browns. So now it's really going to take everybody stepping up that much more. I know the saying in the NFL is next man up, but and it's true, but at the same time, when your first guy up is a Jarvis Landry, the next guy after that is that that's some tougher shoes to feel. And again, with Odell Beckham Jr. coming back, that'll absorb some of that blow because it is Odell Beckham Jr. We know what Odell Beckham Jr. is capable of. We know what this guy can do. But for every other receiver on that roster, now you got to put in that much more work. And this is, this is an unfortunate part of the business because with the NFL injuries are the worst thing that can happen. But at the same time, injuries are very, very bittersweet. They're bitter because your favorite player gets hurt. They're bitter because a guy could possibly lose his job, obviously not Jarvis Landry, but just it's happened before because now whoever gets that opportunity is either boom or bust. So they can get an opportunity to shine and they can go off or they can be thrust into that spotlight and it could be too intimidating for them and they could end up failing. So we'll see what happens with the Browns. We'll see what happens with them at the wide receiver position and how they really adjust to the loss of Jarvis Landry. But again, I don't anticipate him being out for the entire season. But again, with the new Endreserve rules, which are great, by the way, because before for Endreserve, they had to be out for the whole season. And then before with Endreserve, they had to be out eight games. But then they changed it to an Endreserve. They just have to miss three games. And I'm so glad that they left that rule intact because it just makes things so much better for players to be able to come back. Team keeping clean. I love y'all. I appreciate y'all and we out.