Good evening everyone.
Welcome to master class.
To night February 23rd.
Ah, 2023.
Hey.
It's too. Ohh, it's 223 on 2023.
The I'll never happen again.
Yeah.
Just hit me. Cool.
We have.
A great.
Uh.
What are group of people that are going to be presenting this
evening?
A lot of fun stuff to listen to.
And learn about.
Let's see.
And I get to stay for the whole thing. I don't have to leave.
In between terms, it's always helpful for me.
OK, so we've got Maurice.
Lospinoso.
Christie Simpson, Melanie Basso, Eric Gilbert and Karla Rodriguez
Rodriguez. Sorry, that's just.
My illness. So, Maurice, Are you ready to start?
Sure. Yeah, I can start it off.
All right, go right ahead and take over the sharing and you'll
be good to go.
OK.
Can everybody see my presentation?
Yes, I do.
Interesting, I don't like. Can you let me stop sharing? Try it
again.
There we go.
Alright, well, good evening everyone. I'm Maurice. Today
we'll be discussing a topic that in my opinion is one of the most
important yet overlooked areas of IT enterprise storage.
So just a bit about myself before we get started. I've
worked in the storage industry for over a decade. I currently
work as a technical architect supporting various U.S.
government agencies, so I've worked with the Department of
Defense, the VA, NASA Department of Energy.
And let's get right into it.
So why are we talking about storage? Well, because.
Data is a big deal. We are living in the zettabyte era. If
you've never heard of Zettabyte before today, it's estimated
that there are over 8 zettabytes of data in the world.
To add some context to just how large that is, in 2018, the US
Library of Congress stored 16 petabytes of data, which
amounted to all written literature, and that equaled
0.00016 zettabytes.
Or another way to look at it is 8 zettabytes can store roughly 2
trillion DVD's.
So there's a lot of data out there and how is it being used?
So for organizations, data is one of the most important,
valuable assets in today's world.
You know, or organizations rely on data to make informed
decisions. You know, access to accurate, relevant and timely
data allows businesses to identify trends, opportunities
and potential risks.
Businesses also need to provide a personalized and seamless
customer experience. Data is used to track customer behavior
and preferences, enabling business to tailor their
products and services to meet customer needs. For example,
think of how Amazon, Facebook and Google use data to target
ads and services to you.
Next data is used to optimize business processes, improve
operational efficiency and reduce costs.
Lastly, in many industries, data is a key factor in remaining
competitive.
Organizations that are able to leverage data effectively can
gain a competitive advantage by making better decisions,
improving their customer experience and operations, and
operating more efficiently.
So the question is how? How is all this data stored in a
resilient, robust and reliable way? The answer is enterprise
storage.
So what is enterprise storage?
It refers to the centralized storage of large amounts of data
like customer information, financial records, product data
and employee records.
They typically use specialized hardware such as high capacity
hard drives that can store. I think up now to 30 terabyte
drives might be even higher or solid-state drives.
As well as advanced software to manage data storage and access.
These systems often often offer features such as redundancy,
data protection and high availability to ensure that data
is always accessible and protected from data loss.
Now imagine what would happen if the hard drive on your computer
crashed. Is all your data backed up? You know how much time would
you spend restoring the system?
You know, enterprise storage systems are built with multiple
layers of redundancy and reliability to ensure failures
like that do not cause system outages.
Search instance systems also need to scale to accommodate new
workloads. This can mean adding more hard drives or nodes to
increase capacity or performance.
And they also help businesses meet regulatory compliance
requirements like GDPR for the Edu HIPAA, PCI DSS, and FISMA.
Uh, so storage enterprise storage systems are broken down
into different types of workloads they support. This
includes network attached storage, Nas, storage area
networks, and object storage. You know, the choice of storage
system depends on the specific needs of the organization and
the type of data being stored.
Because just take a look at what some of those terms mean. Uh.
The first one is network attached to storage or Nas.
It enables multiple client devices and users to access data
from a central pool of disk storage. It's accessible by its
own IP address and connected on a LAN over an Ethernet cable. As
you can see in the picture.
So it runs on the same user network that servers and clients
run on.
NASA's comparatively inexpensive, and it's commonly
used in small to medium sized businesses where cost is a
concern.
It supports uh file protocols like SMB or CIFS for Windows
clients and for Linux clients you're familiar with NFS and
also things like FTP.
So NASA's really popular place to store items like user files
that could be documents, presentations, spreadsheets,
images. You can also store media files like audio and video
recordings. You can even have virtual machines stored on Nas
and backup and recovery data and IoT data also.
Uh, so you've probably used nest storage. Uh, if you've worked in
in the business world, some of those examples would include,
you know, shared drive like AP DRIVE or Q DRIVE or an E drive,
or on Linux, like I mentioned earlier, NFS Mount points.
And.
Uh, Next up is a storage area networks or San?
So it's a highly performance network dedicated to storage
that is independent of an organization's common user
network. So think of it, it does not generally ride on Ethernet
switches.
San can support a wide range of applications, including those
with high IO and bandwidth requirements like databases,
Oracle and SQL, and virtual machines.
They rely on block protocols like Fibre Channel, iSCSI or
Fibre Channel over Ethernet FOE to serve data.
And these block level access which allows for more efficient
data transfer and management.
One of the drawbacks, whoever is due to its complexity and cost
of implementation. Uh San storage may not be the best
option for small businesses or organizations with limited
budgets and IT resources.
They require specialized San networking switches, host bus
adapters which are like Nicks to be installed on all servers and
storage systems so it can get pretty pricey.
And an example of that would be on a Windows system.
They're connected via a logical unit number or A1, and they
would appear as a like another physically connected hard drive
on that system.
And just sort of recap between the two Nas, you know San are
used for different storage requirements and applications,
Nas are well suited for storing and sharing files, while SAN
systems are well suited for storing and managing data such
as databases and virtual machines, NASA slower and
cheaper, while SAN is more expensive and much faster.
And then the third one that I wanted to discuss is lastly, it
is object storage, so object storage is like a giant
warehouse that stores objects instead of boxes. Each object is
assigned a unique identifier just like each box has a box,
has a label or number that identifies its contents and
location.
Object storage systems use a flat address space, which means
that every object can be accessed directly without the
need for this to be traditional file hierarchy.
So you don't have to go C drive program files, you know.
Uh.
Or or, you know, desktop. It's all in a flat hierarchy.
So it's like being able to find a box and a warehouse by
searching for its label or number, rather than having to
navigate through, you know, series of shelves and folders.
It's designed to be highly scalable and can easily
accommodate large amounts of data, making it ideal for big
data and cloud applications.
Uh, and it's often used for storing unstructured data like
documents, images and file video or video files.
And really common example of object storage is the popular
and was widely adopted cloud service AWS 3, which most of us
are probably familiar with.
So I could spend the entire hour discussing all the nuances of
storage, but we've got a lot of presenters tonight, but here are
some additional considerations when discussing storage, so
there's been a shift from a hard drive HDDS to SSDs and the last
few years, so HDDS, magnetic disks.
A solid-state drives use flash memory.
STD's are exponentially more performant and expensive
compared to hard drives.
And many organizations have already made that switch to SSD
based storage systems for critical workloads.
The next one is Nvme.
It's a new storage access and transport protocol used for
flash and next generation SSDs.
Umm.
It delivers really fast throughput and responses. It's
extremely expensive and currently only used on the most
critical workloads that require like extreme low latency and
high bandwidth.
And uh.
No mention a little bit earlier with cloud storage, but it
consists of storage capacity that is available from a cloud
provider like Azure or GCP or AWS.
You know, and some of the advantages of cloud storage
compared to something physically in your data center.
Are the accessibility scalability, ease of use and
disaster recovery?
You know, with cloud you can spin up and spin down storage
services based on requirements.
And an example that would be like in in UH AWS, you can use
S3 for object storage, EBS for SAN and EFS for nest storage.
Umm containerized storage would includes items like, you know,
storage for Kubernetes or software designs, software that,
excuse me, software defined storage and things like open
stack.
And finally, hyperconvergence solutions like the tanex Cisco
Hyperflex, VM Ware and EMC VX rail.
They all integrate storage, compute and sometimes networking
into a single unit.
Umm. So consumers can kind of easily scale by adding new nodes
into the infrastructure and it would increase the storage and
compute resources.
So I just wanted to include this slide on the left is a list of
the world's biggest storage companies. Many of the names are
probably familiar, you know, for example, AWS, it leads the cloud
storage offering. And one thing to remember is they all kind of
provide similar hardware and software based solutions to meet
the requirements.
Umm, you know, storage vendors all provide, like I said
earlier, the scalability, high availability, security controls,
performance and data protection.
On the right side of the screen is Gartner's Magic Quadrant for
primary storage.
Uh, the Magic Quadrant is divided into 4 quadrants, so in
the top brighter the leaders. These are vendors that are
considered the best in the market.
The top left are challengers. These are are not quite there
there. There might be lacking, you know, a vision.
The bottom right or the visionaries and then the bottom
left, and then each so as as a vendor you really want to be in
the leaders quadrant. So the top right.
And it just gives you a list of an idea of who some of them are.
And.
So you know, storage is a big business and the driving force
behind all modern innovations like AI and big data on average
organizations expect their storage footprint to grow by 40%
annually. It's estimated that the storage market will reach
about 120 billion by 2026. It's 80 billion right now.
And that's it for me. Thank you everyone. If you have any
questions, feel free to reach out to me via e-mail or teams
chat. Have a great evening.
Thank you. Excellent job.
It was really good.
Would you consider using a?
A mask configuration for like a.
A small mom and pop that had like 3 computers.
Yeah, sure. So they they sell.
Off the shelf Nas devices now for for purposes like that.
You know the the companies I listed are are really for medium
sized where you're spending 10s or hundreds of thousands for
those types of systems. But if you have three, yeah, you can
buy like a Western Digital Nas off the shelf for pretty
inexpensive prize.
Nice.
OK. Anybody else have any questions?
Alright, thanks everybody.
Alright, thank you. Great job, Maurice.
Christie, Are you ready?
I am ready.
All right, go.
OK, so I recorded most of my presentation and then I'll take
over in real time when I get to a certain point in the
presentation. But if you have any questions, let me know.
'cause. I'll be advancing it.
So let me just.
Bring my screen up.
OK. And oh helps. If I hit the right buttons and just let me
know if you can't hear it or see it.
So we'll get started.
Welcome to my presentation on the CISSP certification and can
everybody hear it?
Yes.
OK.
The CSP is a certified information systems security
professional certificate and it is it was created and maintained
by IC. Squared was first introduced in 1994, so it's been
around for a little while. It's globally recognized and.
Sorry, just had a little technical issue. I'll restart
that.
Vendor neutral and it's often described as taking a 30,000
foot view of cybersecurity.
Don't tune out yet. They're reasons to take the CISSP.
Perhaps the biggest reason to take this deisis P exam and
become certified is salary. The average crisp certificate holder
earns 131,000.
A year in the United States, I've seen statistics in error
from 128,000 to 154,000. It just really depends on where you
work, what sector you work in, what state you work in.
Also, your current salary, you can see a bump up as much to 27%
of your current salary, which is quite significant. So that's one
reason to take the CISSP. Another is job opportunities
currently in United States are only 95,000 are just over
95,000. In CISSP sufficate holders. But there are about 100
and 42150 thousand job openings that are asking for cisp. It's
one of certificates that is highly requested or desired by
employers or other certificates.
It also then meets the requirements of the ISO, IEC and
several of the DoD certificate requirements.
Another reason to take it is to receive credit. At Purdue, you
can receive credit for both graduate and undergraduate
classes if you get certified in CSP, or even if you become an
associate of CISSP or ISQUARED, which we'll talk about. That
means in just a second. But there is a list of undergraduate
classes you should credit for and recently turned this down.
So now there's just one graduate class you free credit for, which
is that security for analytics.
The CSP exam covers the 8 domains and those are on the
listed on the right on the side.
There are two routes to certification. On the left is
kind of the more traditional route where you do five years or
you have five years of experience and at least two of
the eight CSP domains, and we'll see the domains in just a
second. And then after your experience, you pass the exam
and you become a member of Isquared, you get your
certificate and CISSP and becoming a member is $125 a
year. You do continue education, it requires 120 hours of
continuing education hours every three years, and then you have
to follow the code of ethics.
Now the alternate way to do that or to receive the certificate is
to 1st pass the exam and once you pass the exam you become
what is known as an associate of ISC squared. Then you have six
years to gain five years of experience. But what's nice
about that is you can use your degree to to count as one year
towards the five years or even a certificate such as CompTIA
Security Plus will actually count towards a year. You can
either do one or the other. You can't count both. So now you
have six years to gain four years of experience.
And two of the ISP, two of the CISSP domains? Membership.
For an associate is only $50.00 a year, and continue education
requires 15 hours every year, and then you have to follow the
Code of Ethics also.
The CSP exam covers the 8 domains and those are on the
listed on the right on the slide and those domains. What is what
makes up the common body of knowledge for the CSP and it
covers for anything in cybersecurity, so it's kind of
cybersecurity. In nutshell, the exam itself is 100 to 150
multiple choice questions. Basically, with the algorithm
for the test. Does is that 100 questions it looks and sees that
if you're failing then it fails you at that point. But if it
looks and sees it, you're passing going to pass you at
that point. However, if you're kind of in the Gray area.
That can add up to another 25 questions to determine past or a
failure. Now, even though I just had one, it can do up to 125.
The reason why I have 150 is because they can't add an extra
25 questions which are ungraded but are ones that they can use
for future exams.
The test you have 3 hours to take the test. Uh, don't let
that scare you off. I know a lot of people here. 3 hours they
think.
It just it's kind of sounds scary, but it's not. When I took
the test, I had 100 questions, and when I finished I still had
80 minutes left. So and I didn't work fast. I just worked
steadily through the test and I said quite a bit of time left
over. So again, don't let the three hours throw you. It's a
Proctor test at a testing center. Currently, you can't
take it at home and the test cost $749. And right now Purdue
doesn't offer any discount, so you have to pay that full price.
It's offered in this way, it's offered in eight languages that
are listed there. If you have a language that's not listed on
the slide, they do offer tests and other languages, but those
tests are then offered on paper. They're 250 questions and they
take six hours. So if you can take it in English or one of
these languages, that's probably a lot better because it's less
time and less questions to have to answer.
Here are those eight domains again that make up the common
body of knowledge for the CISSP, and the debates are weighted
differently, meaning that their questions have different weights
within the test itself. The highest is the security and risk
management at 15% and then here just a couple years ago they
changed the test so that software development security is
now up to 11%, whereas before I think it was about 8:00 or 9%.
So they've kind of added some more weight to that one and the
most of the other domains are some around 12 or 13%.
So here are some of the resources that I use to study
for the CISSP, both on the side and the following slide. The
main source I used to the main textbook that I used was the
Isquared CISSP official study guide. This edition is actually
the newer addition than what we use in the CCP classes that
Purdue and this was my main book that I studied that I read
through, studied through at said questions. The book just under
that is the official practice test that goes along with that.
Both these books are nice because they also have the sybex
test question.
Think which you can access either online or app on the
phone.
A lot of the other books that I have on here are just ones that
are supplemental that I would use for like discussion boards
or essays, or to answer why I answered multiple choice
questions a certain way. So there are more ones that I would
search and they're they're also available in the library. And so
I can actually search different topics and that would help just
supplement what I was reading. But most of my study time was on
the official test guide and then the 11th hour. The books are at
the bottom.
I use that near the end. I can't use it throughout, just looking
up topics by really read it all the way through just a few weeks
before taking the test. It's kind of a Cliff notes to the
summary of all the things that are on the CISSP.
Here are some of the other resources or books that I used
the CISSP for dummies is nice because it's a bit more trimmed
down than the official study guide that has some good
information. The CIO and the CISM books there that I got from
the library are really good because they cover more kind of
the management side risk and business business plans,
disaster recovery plans and things like that.
The Certified Information Systems Security professional
field Manual that was really like to say just the field
manual. That book is kind of like the 11th hour that was on
the previous slide. It's more of a summary of all the things on
the CISSP and that's another good one to read just near when
it's time to take the test, when it's within a couple of weeks of
taking the test because it summarizes everything that I
studied throughout the months leading up to the test.
Yeah, we're not robots, so please don't try and read all
those books that I have on the resources slides. Just pick one
really good study guide. Read it all the way through and study it
and then use other things to supplement that knowledge and
get some different perspectives.
So the important thing about a study schedule is to set the
amount of time that you think you need. I've seen where some
people have taken over from three to six months to prepare.
When I was preparing for mine, I took about seven months and
that's just because I did it as I was taking the CISSP 1/2 and
three classes at Purdue, I decided that as I was taking
those, I would just study a little bit extra and then I
would be able to take the tests after CISSP 3.
So you want to also just make sure you have time to study
elephant elementals and the domains and get a good handle on
the 8 domains that we showed earlier and then do a lot of
practice tests and a lot of practice questions. I think that
was when the big things for me is doing a lot of multiple
choice tests every day, taking practice tests that really at
least like 200 questions and doing them timed just and by the
time that I was ready to take the test, I taken somewhere
around 13,000 multiple choice tests questions.
So I think and I think that really helps a lot. Then the
last nine weeks is kind of the cram time where I did more
questions and that's when I read the 11th hour and the field
manual and those really helped just to kind of sum up
everything that I've been studying for all those months.
So this is the schedule that I had for myself for the last nine
weeks and because I was still in CISSP 3, I have on there things
about reading the chapters and discussion boards and doing
certain amount of cure questions and Cybex questions.
And just things that would help prepare me an extra reading to
help prepare me so that I'd be ready to take the exam. The nice
thing about will sibex and live source where we get our
textbooks from for Purdue is that they also have the option
for flash cards. So if you like flash cards, those can be
helpful. I do not like flash cards. I learned when I was
studying for this. So I kind of just got to be black mark
through that line. I'm my little check off sheet, my role check
off sheet is actually really a mess.
But this helped me just to prepare and do things every day,
so kind of where I was at in preparing for that and I had a
little helpful thing that said Christie will pass. So, you
know, kind of encourage ourselves sometimes.
Again, I would suggest doing a lot of multiple choice questions
just to get used to taking multiple choice questions and
also seeing how the information that you're studying, how it's
actually asked or put together in multiple choice questions.
For me, I use the care test engine which was provided by
Purdue during CISSP, and then also the Sybex from the
different study guide and practice test guide that was
available and that was really good to have two different types
of test banks.
Just because they would present the information in a little bit
different, I also like doing the test in either learning mode or
studio mode study mode, because once you answer that question,
it would then bring up the answer the correct answer and
tell you why that was the correct answer. And I found that
a lot more effective to study than to wait till the end of the
test or the end of the quiz I was taking and then going back
through.
Umm.
There's also if you're not very good at taking multiple choice
questions, there's lots of information online about
different tactics or techniques to use to take those questions
and practice taking multiple choice questions. I just put a
couple down on here that I'd come across. One is to read and
ask, which is simply a means to read the questions that looking
at the answers and one seeing what they are really asking for
and the seeing. If you already know the answer and then finding
that in the in the options.
The other one is slim, right? Wrong answers, just quickly look
through and find things that are not correct.
And then use clue words and numbers and clue words can be
like best answer or most correct answer almost never. Always
those really kind of help as well as numbers. If there's
numbers that don't make any sense and the answers those
probably are not going to be the correct ones. There's also more
than one which is meaning more than one option or answer. And
you know this is when I use all of none of A&B&CD&E.
And looking at those and you know that if one's incorrect,
you can't do all of the above or none of the above type thing.
And the other one to look for is sometimes you might have like.
2 answers that are the opposite of each other, and statistically
speaking the likely answer is going to be one of those used
up. Decide which one the answer is going to be, and then the
last tip is just a guess and we know that it's better to guess
the question or guess an answer than it is to leave a question
blank. Just because statistically we have a much
better chance of getting it right by answering it.
And then I wanted to provide some example questions.
Just so that you can see kind of some of the questions that I was
asked on the test, these ones are actually ones that I took
from sybex.
And so and if anybody wants to answer, you're more than welcome
to jump in.
And chair.
So the first question is Chris's advising travelers from his
organization. He'll be visiting many different countries
overseas. He's concerned about the compliance with export
control laws. Which of the following technologies most
likely to trigger these regulations?
Do do do anybody want to take a stab at it?
Do do, do, do do. The answer is encryption software and another
example of questions you'll come across are which objects and
subjects have a label in a mandatory access control model.
And no ones being brave to answer.
And the answer this one is all objects and subjects have a
label and those are just a couple of examples of the
questions that I would have as I was studying for the exam and
then does anybody have any questions?
This was really great. This was good and and throwing questions
at us it kind of throws us off because I'm terrible at tests,
so I can't do them.
Although I would have gotten the first one right, I guessed it.
And then you gave the answer I was like, yeah, alright. The
second one I was half right. So OK.
You were half right. I know. I just. I just saw him. There was
I was afraid.
like, ohh. I just saw the answers. Whoops. I should have
waited a little bit longer to give people time.
Right.
That's OK. This this was good. It's good to get everybody you
know into it too.
Very nice. Thank you so much. Anybody have any questions for?
Thank you.
All righty. We will go on to our next.
Presenter Very good Christie, very good.
Thank you.
Melanie, Are you ready?
I am.
All right, take it out.
So I decided to do my master class on DB Schema. Any of you
that have heard me talk in ancient civilizations meeting or
during our Sof dev class or soft dev meeting? You've heard me
mention DVD schema because I feel like it is an amazing tool
for designing and updating a database because it allows you
to create, manage and visualize your database schemas. So one of
the things.
That TV schema it does, which the this is what it is.
You can create a layout.
I know when you create a layout.
Which it is loading.
Oh, come on.
OK, so you can create a layout and you can automatically create
a table. So when you create the table you can add a table named
test and then add your entities to it.
So name you can add what data type you want to use for it, so
I'm just going to keep it as varchar. You can set a maximum
length. You can set it as a primary key. You can also set it
so if it's not allowed to be null.
You can also associate with sequence. It is in. So for now
I'm gonna put name and I'm going to put in ID and set that as a
primary key.
So when you do that, you'll have this little option. This little
entity come up.
And you can add more tables.
Let's do let's do a bullion. So we're gonna do bit and.
Make it not, no.
And put another ID.
Make it not, no. And then.
Had to ID and make that the primary key, so when I add this
now I have an ID here an ID here that's primary key I can
actually drag this ID to this and say that is a foreign key
and now I can relate them to each other.
So that's just one of the things that you can do with DB schema.
However, I will mention that this is actually part of the
paid aspect which I actually got a license through my work to be
able to do the pain. So one of the things that you can do with
the free version is you can actually modify and.
He visually see a existing database that you have accessed
to so you can click on new connect to the database.
And there are tons of options of different types of databases
that you can pull from. You can pull from access, you can pull
from.
There there was a.
My sequel, there's Mongo DB, there's post Kris, and obviously
there's SQL servers, so I'm gonna choose SQL Server because
that's what I use most.
And when you hit next, you can choose how you log in.
And choose your database. Or you can create a new one. For this
example I'm going to use the database that I created for my
best of books project and I'm gonna connect to it. You have
this option to show only DBO schemas because that is the most
widely used. So if you do that, you obviously have all of these
options. You can choose just to bring over the tables. You can
choose just to bring over the views, stored procedures et
cetera and click OK.
Once you do that, you'll get this layout and this basically
it it.
Groups your table together by what is related, so I have this
view, the user table or or layout that shows in a group
where you have the users that are connected by admin ID's. So
you have the admin which has the foreign key for Bob user ID and
then you have the employee table that also has a foreign key and
then you have the books that has foreign keys for the author ID.
In the genre ID.
And then you can also open your stored procedures and you can
modify stored procedures. You can run them.
Right now I don't actually have the information in the table
because I already have the available inventory in the
table.
Umm, but if you didn't have the procedure already, you could
just create procedure and it will add the procedure to the
database in SQL.
Another option is you can actually generate a script that
will actually generate your.
Your your entire script for creating the database.
So you have the creative tables, you have the.
Bomb unique primary keys associated with each table at
the end of this you also have the foreign keys being added.
Then you have the stored procedures being added and all
of this you can actually end up saving as a file, or you can run
the script as long as you are connected to the database and it
will create that database for you with all of your stored
procedures.
All of your forming keys and everything. So when you open SQL
Server.
You will be able to see all of the information when you log in,
so when you open up SQL Server, you now have the best of books
database. You have all of the tables that you had in the DB
schema and then you also have the stored procedures that you
have added as well. And if you open them.
You'll be able to see it is the same information as you had in
DB schema.
I kind of went through it quickly, so does anyone have any
questions or while I'm taking a breath?
Currently Dax, I'm actually using Pro edition because this
is what I get from my my work.
By the Community edition has the connection to the database. I
did also wanna make a note if you are in that then you make
changes if you are connected to the database it will make
changes to your database. So if you want to make changes to it
but you don't want to make changes to your SQL Server, make
sure to push it offline.
Anyone else have any questions?
All right, Marjorie, I think I'm actually done with someone else.
Has any other questions?
Well, that was excellent and I'm totally shocked because I've
never seen anything like this and I think it's awesome.
I love it. I mean, when I when I first.
Ohh, when I first started making databases I was using Visio.
To actually create the layouts and how I wanted it. And then I
was having to manually add the scripts and all of that to
create the database. This just makes it like 20 times easier.
All you have to do is do the layout and it does everything
for you.
Seriously, it's like, you know, like a gift given to a database
person like here. Have this instead. Forget Visio. Oh my
Right.
gosh.
Yes.
This is so much easier.
Yeah.
Wow. Well, thank you so much for enlightening us and what we can
use now.
Yeah, I would definitely suggest getting the pro version because
of the the fact that it is so useful.
Umm and Sharleen, I actually had that information. Give me a
moment.
I think everybody's curious. I think everybody wants to have
that now.
Even if it's just for class, you know who wants to use Visio
anymore?
Well, yeah, I will say that the.
Community version is a lot cheaper.
I will say that.
Umm OK, so pro version has so much more, and of course they
don't say it online.
OK, so for educational uses is 98 bucks a year personal to 196
and then for companies it's 294.
No, wrong. OK.
So.
I dax, I love it.
That's it, right? Exactly.
Not bad.
It is definitely it. It is 100% useful. Yes, that is per
license, David.
OK.
Cool.
Also see, that's why I love master class. Right guys, I
mean, we just learn new things.
I mean, I didn't have like a full presentation and I know I
went through it quickly, but I'm so excited using DB Schema
Wait.
because I work so much in a SQL that it's just amazing and you
But I can see why.
can even do yeah. And and you can even do like full databases
for Nosql for it has connections to.
I I like I said Mongo DB. I think there was also I can't
remember that AWS 1 Cosmo I think.
But all of the no sequel, all all of the relational like. It
even has Oracle in there that you can actually generate the
creation script for. It's just so amazing.
Well, that's awesome. Thank you so much for bringing that to us.
Yeah.
No problem.
Anybody have any questions for her?
Looks better than DB for, huh?
Yes, I I I agree.
Well, you'll have to get it and tell us how it is, yeah.
Awesome. Alright, thank you.
Let's see who's next. I have to bring that Eric.
Eric, Are you ready?
I am get this started.
All right, it's all yours.
OK.
And see here.
There alright. Do I see it?
Yes.
Alright, good deal. So just to preface what you're about to
see, this actually occurred at my place of work about a I'm
sorry, you're gonna hear dogs having a ruckus cause they wanna
hear now.
Ohh but this happened in my place of work about a month and
a half two months ago.
And it just kind of sent me down a rabbit hole when I was trying
to find a topic to talk about so malicious USB devices. Have you
ever founded USB and thought about seeing what's on it? I
know we all have curiosity.
Or I know me personally, I bring a lightning cable for my phone
to work and it disappears 2 days if I leave it on my desk. So
where do otherwise don't borrow these items, don't check it out.
And here whoops.
Here is why.
They'll send them to you. They will send these coming through
the mail. This is actually become a new a thing. Again.
This is an early 2000 tens method of infection, but it's
coming to back again in an article, I believe it. I don't
know. I read it somewhere. It was back in 2022.
The FBI warned that thin 7, which is a cyber crime group.
That are behind the dark side and black matter ransomware
operations are sending these through the mail. Just hoping
you would plug it into your computer and we all know what
happens when you get ransomware. You couple different choices,
you pay, you trash it, or you pray that they just stop so they
will send them to you in the mail. They will leave it for you
in the office. This is actually how it occurred at my place of
work we have about 92 separate offices.
And the building itself is part of our main complex. Couple of
doors were not secured and an office was left open.
Umm, the person who resides in that office found this USB
device on their desk and they keep fairly clean workspace.
Found a random USB device on their desk, something they don't
use. We use OneDrive sharing system, but this device was left
there and they found it so they turned it in and lo and behold,
2 days later we come back with our tech, our tech guys and
they, you know, investigate a little bit found out that it did
in fact have a bit of ransomware on it.
The other way they'll get you with it is they'll just leave it
for you. You know, if you go to Starbucks, people like to write
all day long at Starbucks. They either USB device behind.
And you find 1 and you say, wow, I got a 256 gig stick. I'm
curious what they left on it. I wanna see what she's riding on
the manuscript. And that is exactly the way that people they
will get you nowadays. This is a 15 ish year old. That type of
attack vector and it is coming back in full force curiosity and
a human nature just take over. So why is this thing not moving
when I wanted to. OK So what can these things do they will get.
That you will get cyber attacks. It's outside of the the normal.
The box of. I don't know why I put it like that, but it's
outside of the normal box of ciphertext. They get sent
through the mail to companies. Think of it like this. If you
get an envelope with a USB device in it.
The return address from your company. You know it can be
handwritten on very easily, and it comes a little note. Hey,
plugged us in. Check out XY and Z file. That's called from
accounting or something. You got to check these numbers out. It's
imperative that we get this done by Friday and it's Thursday.
You know a little bit of sense of urgency and you're just like,
man, I really want to check this out, but open it up and guess
what? You see a little blink on the screen. Nice thing, you
know, someone in your system doing something, maybe they're
just copying everything you're typing in. Maybe they're
infecting you. A ransomware, maybe it's just a worm. Heck,
maybe it was just a glitch, and it's really not a really not a
malicious file. Who really knows until the.
He until the the things are with so secondary you've gotta kill
USB. These are devices that are set up to send an electrical
surge and we're gonna play a little video for you and it's
just quick, 30 seconds. It's going to show you what happens.
They put a surge protector in between.
The USB device in the laptop they were using it on and then
they take the device away. So I'm gonna play this. Hopefully
you get the sound and everything. Oops.
Whoops.
Can you guys hear that sound?
So there's the search.
And take it out. They're gonna take away the surge protector.
And plug this device in and immediately.
Logical electricals sent through the power surge went through the
computer. Computers dead will not come back on.
So.
Ah.
Pretty, pretty heinous little thing to do to somebody. I would
say, you know, just to.
For nothing more than the create havoc I would I guess is the
best way to look at it.
So persistent threats these with these are the ones that are the
the most damaging to a corporation. You get that that
persistent threat in there and it warms this way through your
entire system and you may never get rid of the entire thing.
This is when you get into that.
That segregation. I'm sorry about the dog barking. You get
into the segregation aspect where you're literally
partitioning off parts of your network that will never get rid
of this thing more. It'll take too much time and effort that
it's not worth the money. So.
The type of harmonies these devices can really cause its
data theft, data damage, data deletion, data encryption,
that's when you get into that ransomware type.
Atmosphere and the hardware related. This is when you get
into this kill you B it's gonna be access control of the
computer. Physical destruction of the computer that's that kill
USB and monitoring of the users. Actions like a key logger or
just any type of thing where they're capturing anything
you're putting to the computer. It may just be you put a second
USB device in and then all of a sudden they have everything on
it and then it in a form of like a bot. Now you've become part of
the botnet and they use your computer resources for
cryptomining.
Again, just stuff is just bad news, man. Just you don't want
the stuff happening to you.
So the types of attacks that originated from I just found
this to be a pretty interesting little little graphic here. The
USB hardware is that green box at the top, and then you've got
the three types as programmable microcontrollers, USB
peripherals, and electrical type attacks. And it's just lists
different things. If you remember, back in 2010, if
anybody ever heard of Kevin Mitnick, he talks about a rubber
ducky all the time and that was one of the very first bad USB
devices. He goes in, gains entry, a little social
engineering, gains entry into a bank.
Plug this thing in all of a sudden he has all the bank
records. There's documented proof. This is what the guy does
for a living, and he uses nothing more than a USB stick
and a fake ID badge. Says hey, I'm here to I'm here to upgrade
your systems, take about 15 minutes. Flashes a badge,
somebody says. Sure thing. Come on in. He plugs it in. Boom.
He's got every bit of the banks information. That's your PII.
That's your bank account numbers. That is your.
Just everything that can cause you grief and strife in your
life.
So the.
The point behind these bad USB device, or I'm sorry they're not
the point, but the sorry I have a note here. So what they do is
they're reprogramming the microcontroller in the in the
actual USB device, whether it be a USB stick or USB peripheral.
And it basically impersonates a, excuse me.
A keyboard and since malicious commands to the computer to
which it's attached, which.
In a slide or two here, you're gonna. I'm gonna show you a
quick two-minute video of a guy of Kevin Mitnick actually
attacking through a lightning cable, which is one of the
cooler things I've seen in a bit.
You'll get an idea of how small these things can get, because if
you've ever, if you have an iPhone, you understand how small
these controllers are on your or the peripherals are on your
iPhone.
And you would think it doesn't have enough space to do this. It
does.
So do you just avoid the USB drives? That's where we're
getting to the peripheral here. How many times have you borrowed
that friends charger for a quick, you know, give your phone
a quick jump. Scary fact that anything can be that utilizes
USB. I don't know why I said USB cable, but anything that
utilizes the USB can be used to hack you. This did become this
began as an NSA spy tool. It was an exorbitant cost.
Now you can purchase these things for literal pennies on
the dollar. I just I I did a quick Google search and found
that one at the top, the top picture there 75 dollars, $75 is
expensive for a USB cable, but for the amount of information
and the value that would hold to an ethical hacker. And this is
where a worth of money, the little black ring right there is
actually the charger and the activator for it. So.
That's what initiates the attack. You leave it somewhere
someone uses it. They never even have a clue that they used a a
bad device.
So what does it do?
To the in this case, again at ease drops its kellogs. It
tracks your GPS. That's brightening that they will know
where you're at at all times. Once you plug this in one time,
or in a worst case scenario, it takes control your device all
from that little charging cable. How do you avoid the scary
little things? First and foremost, if you didn't buy it,
don't use it. Make sure you keep your antivirus updated. No one
trusts anyone who you're going to borrow one from. And I mean,
I guess, do your background and make sure they bought it
themselves, that it's their personal item. They didn't find
it somewhere.
And just I guess the most important thing, don't take
anything for granted. If you think it's safe.
There's a high likelihood it will be, but I don't. I don't
know. I guess I'm just a little paranoid about these kind of
things now after watching this simple little video right here.
We're a bit sorry. It's gonna be small, but this is actually a
pretty cool demonstration what this USB cable right above it
does.
Hi, I'm Kevin Mitnick, Nova Force chief hacking officer. And
I have something super exciting to show you and you need to be
aware of this new vector of attack.
Back in 2014, a good friend and brilliant security researcher
Carsten Nole released what we know as the bad USB attack. And
in fact, Carsten gave me the original bad USB four years ago.
And how does attack work? Does the victim would plug this into
their computer and it would become an HID device, which is a
keyboard. And then this device would actually inject keystrokes
onto the system and it could do things like download malware and
that sort of thing. And this has been around for four years, so
it's kind of dated.
Ohh.
What happened? But security researchers have exploited
Carstens work to do.
What? Come on, things and what are those things? It's for
example, weaponizing a computer mouse that uses a USB with the
same technology to inject keystrokes. And most recently,
and this is a little bit scary, they've done it simply with a
cable. So here we have a micro USB cable. I actually have two
others. I have a lightning cable. I have a USBC, the USBC
cable. And it does exactly the same thing. So when the victim.
Simply plugs in the cable to charge your device. It actually
does the same thing that the bad USB does injects keystrokes and
takes over their computer. So let me show you how that works.
So let me show you how this cable attack actually works. A
friend of mine, Olive in Shenzhen, China, actually
designed this new cable, and this looks indistinguishable
from an ordinary micro USB cable. So what we're going to do
is take a look over here. We have a Windows 10 laptop with
the latest security updates and antivirus definitions. Over here
on the right, we have the attacker computer, and we're
connected to a remote access Trojan listener in the cloud.
So let's go ahead and plug in the cable. And by the way, if
weaponize this to immediately inject the keystrokes.
Ordinarily we triggered on some other event, so let me go ahead
and plug it in.
And plug in the cable. Let's watch the screen for a moment.
Here we go. The keystrokes are being injected by the cable.
Or by the technology in the cable. And there we go. It's
injected. And over here on the right we should see the Trojan
connect. And here it is. So what that means is the attacker has
full control of this laptop because the cable actually
infected it. And this cable actually works. So if we plug in
a hotspot to charge.
The green light will come on showing that it's actually
charging, so the cable actually works.
So this is kind of scary because now.
Your innoprise could be affected simply by a malicious cable.
Alright, so that in and of itself just.
Frightening. Frightening. It should frighten you.
Keeping your stuff together. Come on. There we go.
Keeping your stuff as your stuff man, it is just imperative that
you.
Well, I guess how do you survive? You don't trust anyone,
right? I mean, that's really the way to go, is.
Keep your policies up to date if you if your company doesn't need
USB. If you're working mainly out of the cloud out of
OneDrive, you don't have a reason to need a USB stick on a
computer. You don't have a reason to need those ports
turned on. Turn them off, block them. Don't let them do any
work. Keep a tidy work area so this is one of the things that I
pulled. I plugged this. I never found it anywhere but one of the
reasons that the employee who found the malicious device a
couple of months ago.
Notice is because it was left on a on a workspace that is
normally 100% clear, just left in the middle of the desk like
she left it there. And thank goodness that she reads our
memos and she reads the different snippets that are tech
team puts out about weekly. So and again utilize the shared
workspace, Google Drive, Microsoft OneDrive, other
enterprise collaboration systems through the cloud and avoid the
need for these devices all together.
I have worked in environment before that just light out
banned them if they see you with a something plugged into your
computer it would. It could lead up to immediate termination. So
they took their security pretty seriously my opinion.
So.
How do you protect company? Keep your policies and practices up
to date. Make sure that you're acceptable. Use stuff. It's that
the needed unneeded ports, things like that, every all the
stuff that we talk about constantly cyber security. Make
sure they're doing it. If you're practices are lacking, you're
going to get attacked.
You know the I saw in somebody, it may have been one of our
previous master classes, but former FBI head said there's
only two types of companies in the world, those that have been
hacked and those that are gonna get hacked. It's going to
happen. So the best thing we can do is to take as many different
avenues away to allow that to happen to our company. So
secondary is educate. Pebcak. I love this anagram or terminology
is problem exists between share and keyboard.
It's wild, widely held sentiment that the weakest link in any
security situation is the human element, and it's our job. On
top of protecting them to teach and educate, engage and ongoing
training to do the right thing.
And be the be the role models for our company. Tech is boring
to a lot of people. They as long as Facebook works, they don't
care how it works. They don't care how what keeps them safe.
They just care that it works. So it's our job to keep them up to
date on those things and then keep the awareness high. And my
companies case again. We were lucky that that employee found
the device. She read the memos.
We were just blatantly lucky and I again. Now the new memo is
make sure you close the lock the door, but at the end of the day
we were lucky that she read those things and noticed
something out of the ordinary. Keep reiterating what's been
taught and only through the reinforcement are you going to
get people on board with it. I feel like I walked into a good
situation and we've just managed to keep a really good culture.
It's it's very I feel like it's very high engagement and as long
as you have that engagement between departments and between
people inside your organization, you're always gonna have that
awareness level. And finally, does anyone have any questions?
I try to keep that right at the 15 minute mark.
Well, thank you for opening our eyes on that one. My goodness.
I thought you like I said. It's it's an old it's an old attack.
I mean, it's 13 year old. Attack was the first one. And you know,
they're back in full force with, you know, blatant ransomware now
so.
Course.
But, well, everybody's out. If anybody, any questions all out
there. If not, thank you very much for listening.
Thank you so much. That was excellent plots of information
tonight. Thank you.
All right, Karla.
Yes, hello.
Are you ready?
I am ready.
OK, let's see.
Now I gotta ask the obligatory can everybody see my screen?
Yes.
OK.
Since kid. Alright, then. Hello everybody. I don't think it may
be the last presenter here tonight. And if that's the case
then.
Good evening to everybody.
I will be discussing UI and UX web design today. Umm, if you
are a full stack developer like myself then this may be
something that hasn't been at the front of your mind where
most of the time we're worried about the back end and
algorithms and things of that nature, so I'm hoping to shed a
little bit of light with what I've learned these past couple
of weeks here in the internship that I've had.
So the first thing is why is it important and well, the front
end of your website? Is that going to be the very first thing
that people see when they come to visit you? So depending on
what your project is or what your business is, whatever your
goal of the website is, they are going to be judging it based on
what it looks like and how they're able to interact with
it. Is that something that they can follow along easily? Can
they get to where they need to go? Is your design deliberate
enough that you're able to achieve what you set out to do
with the website in the first place?
So you want to be thinking what is the main purpose of my
website the whole way through from start to finish, right? So
even though you also have to think about the logic for the
code and how it's going to get created at all, you do wanna
keep the decided mind as well.
So for this presentation, we're going to divide that up into
three key concepts, which is going to be the branding
behavioral patterns and at the responsibility.
So the first part is the branding, which is all about who
you are or what your websites for. The first thing, most
people think of is a logo. When they think of branding, which
makes perfect sense. You know, I think of Coca-Cola and they
think about that font. I think about. I don't, I can't even
think of anything else. Mickey Mouse, I guess you think of the
iconic ear shapes, right. But Brandon can actually be a lot
more than that because it's gonna be all about your colors.
Yeah, the feelings and.
The overall presentation of what you are trying to brand yourself
as. So for example, though it's not super well known, there are
a lot of companies that do go out of their way to actually
copyright the colors that they use. So if you want to use the
same exact shape that red that target uses, you actually have
to be really careful about how you incorporate that because you
may be infringing on their copyright of that red trade. The
same thing goes for the magenta that T-Mobile uses and other
companies.
Like that and the reason why they invest so much into it is
because they.
Incorporate that into part of their identity, so if not just
your logo, then keeping mind the feelings of what you're trying
to convey with your website.
At the theme.
And the colors.
And we can get a little bit more here with this example. This is
actually a template from one of the WordPress themes that's just
readily available out of the package and this one is supposed
to be specifically for our company. That worries about
creating.
Organic foods and vegetables ready to order so you can
actually customize the vegetables that go into your
box, and immediately you can tell by the darker shade of
colors while still being bright and colorful that they're going
for something that is very fresh, very cool, relaxing so
that you can get into that feeling of. Yeah, I would love
to be sitting in my little cottage eating some delicious
veggies that came right from my garden or things along that
line. And they incorporate that in there with their colors.
And the team.
Alright, so moving on from the branding, we come to the
behavioral patterns which is where most of the research into
user experience gets invested into note to people are ever
gonna be exactly the same. But you are gonna always have some
similarities. So even though these researchers have been able
to find a lot of.
Correlating results in their.
Different experiments that they've run. Uh, you know, not
everyone's gonna have the same experience. However, with that
research, we can actually try and control the way that people
will engage with your website. You just have to be mindful of
it and be able to apply it. So let's get into another example
about that here. So most people, at least in the Western world,
would more of the user experience research hasn't taken
place. We'll start reading from left to right.
So your eyes are going to start at the top and then go to the
left.
And then they may go diagonally down here.
You continue on to the left.
And you would consider in the pattern until you get to the
bottom of the page, or you may Scroll down and then continue
that pattern on forward. This is the most common pattern that
people will follow when they go into your website. So knowing
that you can then arrange your website in the layout that will
be more beneficial to you. So you may start with the
navigation panel at the top where they may be able to see it
clearly and then at the end of that first left area there you
may put the login button where people will expect it because
that will be the call to action they can follow.
After that, they'll go back down to the left hand side again and
then you can put some content that they can read to the right.
You can put a contact form where they can engage and then you
would continue that pattern along the way.
Umm, although the system was common one.
It's not the only one. This one does allow for some follow area
here and what a follow area is is basically Dead Space, more or
less. Most people are not gonna linger their two too long.
They're actually going to move on pretty quickly on to the next
thing. And so most of the time, these areas are either avoided
or nowadays you'll see things in there like the login button or
just really standard stuff that you don't expect people to
really engage with two too much. Everything else is gonna be in
the center.
Another common pattern is going to be something more similar to
an affirmation that goes from the very top of the page all the
way down and then left to right, left to right, left to right,
without going diagonally.
Even though these patterns exist, you can disrupt them
pretty easily with the way that you design your page. So if you
wanted to have something where OK, I know people are gonna
start here on the left hand side and then continue on this little
6 seg that they normally go on. But I really want to make sure
that they're.
Seeing my options here, so maybe I can put my contact page here
on the left instead of on the right because I want them to
know what the contact information is before they can
get to what what the services are that I'm offering. So
depending on what you're going for or what the purpose of your
web page is, this is how you can start.
Taking advantage of understanding these patterns,
this is just one of the many that exist.
Alright, so moving on from that, we can get into the ethical
considerations that you need to keep in mind when you're
designing your web page. The first of them is going to be
accessibility, which seems pretty obvious. Everyone's life
experience is different. Not everyone's going to be able to
engage with their website the same exact way you're going to
need to have alt methods of text in there that people who may not
be able to see or are legally blind will be able to still
navigate your web page and be able to get to the content that
is the main reason why they're at your web page, right?
Beyond that, you want to consider liability. What are you
responsible for for having this website? How can you make sure
that you avoid legal problems or any severe consequences for not
complying with what is standard, and then your identity? Because
as always, your front end is gonna be how you present
yourself to the world. So however you decide to
incorporate what you've learned with the patterns and everything
else that's going to tell and communicate to people, this is
really what I'm all about.
And for us to really better understand that I have one last
example.
Oh, but before that?
These are all of the different regulations, so you have to keep
in mind when you're creating web pages.
A lot of these are, you know, pretty straightforward. You
know, you need to have your terms and conditions. You're
disclaimers. Always keep in mind about plagiarism and copyright,
but some of the other ones might not be super obvious. For
example, if you're working with healthcare, you're going to have
to deal with HIPAA on your web page. So be really careful. Do
you really want to have testimonials on your web page?
Is that legally allowed to take that into careful consideration
before you incorporate any of that into your web page?
The ADA is very important. I think we've had a master class
about that as well. Make sure that your web page follows all
of the accessibility standards that have been set out for
people and the general data protection as well. You know
it's.
All part of the same thing, and that's all in the front end
side.
Some U.S. states even require contractors to display their
identity mark as well. So, for example, you may always be
seeing the WordPress powered or GoDaddy powered for anything
that was developed by them specifically, and that's part of
one of those legal restrictions to keep in mind. If it's not
available there, then you may be violating state law, so that is
something to always keep the mind as well.
Now on to that example I promised you. So here we have a
very.
Uh, hastily created on PowerPoint web page here to show
you what a bad example would look like.
So not only is it a little difficult to follow, it is also
purposely hiding the disclaimer with the contrast and is also
not 88 compliant and what this kind of shows you in this
extreme example of it is that this may be not necessarily
truthful. It's probably a scam of some kind. It's communicating
to me that I can't really trust this product. They're not being
honest.
But they're not really telling me what's in there. I can't even
navigate to an about page to learn about what their product
even has in it or anything of that nature. So this is of your
example, but you can kind of start to imagine on kind of
connect the dots about, OK, this is what I would change if I
could and go in and make sure that everything is up to
standard. Not only that, but then also follows a specific set
of branding. So the colors everywhere, it doesn't make
sense.
And this could use a lot of workshopping. So.
We can infer from that that.
We need to really go and fix it up.
Umm, but that is the general quick and short SparkNotes
version of UI UX design for web pages. Specifically, it gets a
lot different when you start working with things like
programs or video games and things of that nature, but the
general gist is always going to be the same. It's always going
to be about making sure that you are accessible, you're clear
with what your goal is and that you represent yourself and your
project in a way that is, you know, really representative of
what you're there for. So you don't wanna give people the
impression that you just.
Did something UM to make money real quick and you don't really
care if they're able to get to where they need to go. If you're
designing an educational course for people with low computer
skills or Computer literacy, then you need to really careful
about how you're linking your content or leaving your bread
crumbs so that people can get to the pages they need. But that is
the general gist of it. So if anyone has any questions, I'll
take some now.
Great job explaining that, definitely.
So for the page before that you had where there was errors on it
or really didn't look the way it would. What were the changes
that? What changes would you make to it?
Yeah. So for example here at the bottom, it may be really
difficult to see it because this is.
Immediate as extreme as they could, UM, the contrast is not
great, so you cannot see that disclaimer message very clearly
in a real world scenario, there have been some credit unions
that have hidden their disclaimers or legal terms and
conditions in a similar way. By making the contracts really
difficult to read, and then the way that they created their
pattern specifically. So you're reading, you're going through
your 6 tag and then you see this by now. Now button very clear,
very bright.
It draws your attention there. You're not necessarily looking
at that footer with the disclaimer that's saying
something about, hey, you know, our services seem really cool,
but actually we have these other problems that you may need to
take into consideration. They're hiding it on purpose so that
they can get more business.
I wasn't sure if I was legally allowed to put that in my paper,
so I just did it because I didn't want, you know, anything
about defamation or anything like that. But that would be one
of the changes there. Another thing for the real reviews part,
it would be a good idea if it's not specifically related to
healthcare and it's just about beauty products and things of
that nature, you could definitely have like the
people's names what their reviews were and you may want to
mix them up a little bit too, not have the just positives,
maybe have a little bit.
Of people who are like, no, it's OK, because that can build
confidence too. And trust in your project and it shows that
you have care in what people are saying. You respond to feedback
positively. So that would send a positive message and that could
be a way to increase your branding and go on so and so
forth.
Excellent.
I say the same thing.
Great job. That was really cool to watch that and and to see the
differences and to see how it's really built out that way.
Great.
I think everybody did a great job. Does anybody have any
So.
questions for anybody that has presented tonight?
But you might have thought up at this point.
No, I agree with Charlene. Good job, everybody. Absolutely. You
did great round of applause from everybody. Yep, I think.
You did great.
And really appreciate everything you came up with. You guys did a
great job and congratulations.
And I guess we can go have a great night everybody.
Goodnight everybody.
And be safe.
Thanks, goodnight.