Podcasts about apple all

Sparkle Best TV of 2023 Interview with the Vampire available on AMC House of the Dragon available on HBO Central Park available on Apple+ Industry available on HBO Gentleman Jack available on HBO Heartstoppers available on Netflix The Sandman available on Netflix Hacks available on HBO Made for Love available on HBO The Flight Attendant available on HBO Prehistoric Planet on Apple+ Ms. Marvel available on Disney+ Under the Banner of Heaven available on Hulu Sparkle Movies: Women Talking available in theaters 13th available on Netflix The Sea Beast available on Netflix Puss in Boots: The Last Wish available in theaters Living available in theaters Koyaanisqatsi & Powaqqatsi available for rental Shallow Grave available on HBO Street Fighter available for rental Street Fighter: The Legend of Chun Li available for rental A Troll in Central Park available on Hulu Empire of Light available on HBO All That Breathes available on HBO The Elephant Whisperer available on Netflix Mission Impossible II available on Paramount+ The Ant-Man and the Wasp: Quantamania available in theaters The Martha Mitchell Effect available on Netflix Haulout available on YouTube Stranger At the Gate available on YouTube Causeway available on Apple+ All the Beauty and the Bloodshed available in theaters Sonic the Hedgehog 2 available on Amazon Prime Super Mario Brothers unavailable right now Magic Mike available on HBO Magic Mike XXL available on Netflix Magic Mike: The Last Dance available in theaters Joel Best TV of 2023 Our Flag Means Death available on HBO Reservation Dogs available on Hulu Severance available on Apple+ Andor available on Disney+ Joel Movies: Groundhog Day available on Hulu Infinity Pool available to purchase Lady Macbeth available on Mubi and for rental Titanic available for rental Spiderman: Into the Spiderverse available for rental Marc Maron: From Bleak to Dark available on HBO January Scorsese Watch: What's A Nice Girl Like You Doing in a Place Like This? It's Not Just You, Murray Who's That Knocking On My Door?

#reactionvideo #reaction #manifesting

Welcome to TWIG #90! This week we cover: #1. PUBG Mobile Doubles Lifetime Revenue to $3 Billion in Just Seven Months (Sensor Tower) #2. Apple Cancels Some Arcade Games in Strategy Shift To Keep Subscribers (Bloomberg) #3. Amazon and Google are in games for the wrong reasons (GamesIndustry.biz) SHOW LINKS: Game Changers is a webinar series featuring exceptional women in the gaming industry. Our goal is to create a platform for female leaders to share their expertise and to create a strong and caring support network for women in our industry. Isabel Ferreira, Stella Wang and Catalina Lou will join this Thursday, 9th July at 6pm BST to discuss and share their thoughts on Crossing the COVID-19 Bridge: Impact, Outlook and the Silver Lining. There is a sign up link here - https://lnkd.in/gWZqJ7M FEEDBACK?: Do you have feedback or comments for us? You can reach us on Twitter at: Joseph Kim: @jokim1 (Twitter, Insta) Eric Kress: @ekress Adam Telfer: @adamwtelfer Miska Katkoff: @m_katkoff Note to Apple: All hosts do not necessarily share the same opinions! --- This episode is sponsored by · Anchor: The easiest way to make a podcast. https://anchor.fm/app Support this podcast: https://anchor.fm/deconstructoroffun/support

A leaked version of Apple’s iOS 14 reveals a treasure trove of details about an upcoming iPhone and iPad, augmented reality software, and tracking tags; an analytics company has secretly operated VPN and ad-blocking apps and gathered data from tens of millions of users without proper disclosure, a company offering panopticon service to the state of Utah once developed disguised social-media scraping apps, Google adds quantum computing to its machine-learning open-source TensorFlow development kit, DoNotPay lets users share streaming and news logins, the latest on the coronavirus impact on the tech world, and things fall apart: political strife broke the knitting community at Ravelry.SponsorsLinks:iOS 14 reveals iPhone 9 and updated iPad Pro details, new Apple TV remote, AirTags, more (9to5Mac)Apple developing new augmented reality app for iOS 14, testing Apple Store and Starbucks partnership (9to5Mac)Apple Watch Series 6 and watchOS 7 to include ‘Infograph Pro’ with tachymeter (9to5Mac)Apple Invents Foldable iPad and iPhone that could enter a ‘Joint Operating Mode’ Similar to Microsoft’s Surface Neo (Patently Apple)Popular VPN And Ad-Blocking Apps Are Secretly Harvesting User Data (BuzzFeed News)Twitter thread from Will Strafach on Sensor Tower apps (Twitter)Surveillance Firm Banjo Used a Secret Company and Fake Apps to Scrape Social Media (Motherboard)Announcing TensorFlow Quantum: An Open Source Library for Quantum Machine Learning (Google AI Blog)Google launches TensorFlow Quantum, a machine learning framework for training quantum models (VentureBeat)DoNotPay Chrome browser extension (Chrome Web Store)Now you can share your Netflix account just by sending a link (Fast Company)How to clean your Apple products (Apple)All but four of Apple’s stores in mainland China have reopened after coronavirus shutdown (CNBC)Silicon Valley is effectively on lockdown over coronavirus (Cnet)Amazon Tells New York and New Jersey Employees to Stay HomeUber to offer drivers 14 days sick leave if they fall ill with coronavirus (CNN)Engineer Who Attended Cyber Event Contracts Coronavirus (Bloomberg News)How a ban on pro-Trump patterns unraveled the online knitting world (MIT Technology Review)

SERMON TRANSCRIPT BELOW: You’re probably familiar with the tragedy of “friendly fire,” but have you thought about the potential of “friendly faith”? Let me unpack the difference. Friendly fire refers to incidents when, in the fog of war, a soldier will accidentally fire upon his own forces. The history of warfare is replete with examples. Perhaps the best known is the case of Pat Tillman. He was a gifted athlete who played in the NFL. After 9-11 he voluntarily gave up that lucrative career and became an Army Ranger. He died in the mountains of Afghanistan as a result of “friendly fire.” Friends can hurt friends (and not just on the battlefield!). But, it is equally true that friends can help friends. Your faith in the Lord can encourage and transform the lives of your friends. That’s what I mean by “friendly faith.” A great illustration of this is the biblical account of four friends who brought their paralyzed friend to Jesus. There he found healing and, more importantly, forgiveness for sins. God wants to use our lives and, particularly, our faith to influence others for Christ. Whom can you pray for or encourage today? Whom can you “bring” to Jesus? A kind deed, a quick email or note, a word of witness, an invitation--all of these are examples of ways that we can live out a "friendly faith." Join us this Sunday at Istrouma Baptist Church as we continue our series entitled, “Who’s Your One?” We'll learn more about living out a faith that makes a positive difference in the lives of our friends.   Friendly Faith Sermon Series: Who’s Your One? Mark 2:1-12 Istrouma Baptist Church – Jeff Ginn, Lead Pastor 9:15 AM Sermon March 31, 2019 https://vimeo.com/327794391 https://www.facebook.com/istrouma.org/videos/1013316938861397/     Outline:   CooperativeFriends        And they came, bringing to him a paralytic carried by four men (2:3). Come the same way Carry the same weight         CreativeFriends        And when they could not get near him because of the crowd, they removed the roof above him, and when they had made an opening, they let down the bed on which the paralytic lay (2:4). Are desperate Are determined   ConfidentFriends        And when Jesus saw their faith, he said to the paralytic, “Son, your sins are forgiven.”(2:5) Have a faith that is visible Have a faith that is victorious     You’re probably familiar with the tragedy of “friendly fire,” but have you thought about the potential of “friendly faith”? Let me unpack the difference.   Friendly fire refers to incidents when, in the fog of war, a soldier will accidentally fire upon his own forces. The history of warfare is replete with examples. Perhaps the best known is the case of Pat Tillman. He was a gifted athlete who played in the NFL. After 9-11 he voluntarily gave up that lucrative career and became an Army Ranger. He died in the mountains of Afghanistan as a result of “friendly fire.”   Friends can hurt friends (and not just on the battlefield!). But, it is equally true that friends can help friends.   Your faith in the Lord can encourage and transform the lives of your friends. That’s what I mean by “friendly faith.” A great illustration of this is the biblical account of four friends who brought their paralyzed friend to Jesus. There he found healing and, more importantly, forgiveness for sins.   God wants to use our lives and, particularly, our faith to influence others for Christ. Whom can you pray for or encourage today? Whom can you “bring” to Jesus? A kind deed, a quick email or note, a word of witness, an invitation--all of these are examples of ways that we can live out a "friendly faith."   Today, I want to speak on the theme, not friendly fire, but its exact opposite, “Friendly faith.” That is, your faith in the Lord Jesus, lived out, can be a blessing to your friends. It can change their lives and their eternity. I’m going to take you to a story in the Bible where it’s a case of friendly faith. Four friends living out their faith influenced their lame, paralytic friend for time and eternity.   The story is found in Mark chapter 2. So if you have a copy of the Bible, I want you to open it there, please. Mark 2. And in honor of God's word, would you please stand as we read these verses. Mark 2:1-12. There God’s word says: 1And when he [that is, Jesus]returned to Capernaum after some days, it was reported that he was at home. 2 And many were gathered together, so that there was no more room, not even at the door. And he was preaching the word to them.   Could I pause right there and just note what Jesus was doing? As the crowds came, Jesus preached the word to them. You might think that Jesus was a great miracle worker who occasionally preached, but you'd actually have that backwards. He wasn’t a miracle worker who occasionally preached. He was a preacher who often enough did miracles. There is an emphasis in the word of God on the preaching of these truths because it is the preaching of the word of God that is used by him to bring folks to eternal salvation. So today, in the tradition of Jesus, we are preaching the word. Now look, please, to verse 3 and we’ll continue the reading.   3 And they came, bringing to him a paralytic carried by four men. 4And when they could not get [him near] because of the crowd, they removed the roof above him, and when they had made an opening, they let down the bed on which the paralytic lay. 5 And when Jesus saw their faith, he said to the paralytic, “Son, your sins are forgiven.” 6 Now some of the scribes were sitting there, questioning in their hearts, 7 “Why does this man speak like that? He is blaspheming! Who can forgive sins but God alone?” 8 And immediately Jesus, perceiving in his spirit that they thus questioned within themselves, said to them, “Why do you question these things in your hearts? 9 Which is easier, to say to the paralytic, ‘Your sins are forgiven,’ or to say, ‘Rise, take up your bed and walk’? 10But that you may know that the Son of Man has authority on earth to forgive sins”—he said to the paralytic— 11 “I say to you, rise, [take]up your bed, and go home.” 12 And he rose and immediately picked up his bed and went out before them all, so that they were all amazed and glorified God, saying, “We never saw anything like this!”   Let’s pray.   [Prayer]   Please be seated.   God wants to use our lives and particularly our faith to influence others for Christ. He wants us to live out what I'm going to call today a “friendly faith.” Now today, we're continuing our series entitled “Who's Your One?” We're going to learn more about living out of faith that makes a positive difference in the lives of our friends. You'll know that we have challenged one another through the course of 2019 to pick one person that God would lay on our hearts, a friend that we could pray for and seek to influence in an effort to bring them to faith in Christ. Do you have your one? I trust that you do. All throughout this week, we've been praying day by day, have we not? I hope you have been using your prayer guide. For the 30 days leading up to Easter we're going to be praying for our friends, and I want you to encourage you to invite them to come and worship with you here. If you'll go to the Welcome Desk before you leave, we have a lot of invite cards that you can pick up and use to invite others to come and worship with us, particularly on Easter that's right before us.   Now, the four friends in the story that we’re studying today are great examples for us of what it means to live out our faith with our friends. I'm going to describe these men with three words, and I'm going to give you the three words, and then we'll go back and look at them each in turn. They are Cooperative. They are Creative. And they are Confident. These are going to be the three key words for this morning.   Let's begin, then, by first of all describing them as “Cooperative friends.” Cooperative friends. Now here, I'm thinking of verse 3. Look at your Bible again, please. There it says:  3And they came [these four friends], bringing to him [Jesus]a paralytic carried by four men.   Now, there are two things that I notice about these four friends. First of all, they come the same way. That is, they’re traveling the same road. They have the same destination. They have the same North on their [compass], and he is Jesus. Notice that it says “they came...to him.” They are all going the same way. Now here they are, each of the four friends, I can imagine them, each one at a different corner of this cot on which the man is lying. Had they been going different ways, they would have drawn and quartered the poor fellow. But instead, they’re going the same way. They are coordinated. They are cooperative. And did you know that churches function best when we are like these four friends, and instead of us each going our own way, we cooperate together to do the Lord's work.   I'm so thankful here at Istrouma we have a North. We have an aim. We’re going the same way. And what is that way? We have a mission, and I think all of you probably can now quote our mission. It is, “We glorify God by making disciples of all nations.” Now, I want us to quote it together. Are you ready? “We glorify God by making disciples of all nations.” That is our aim. Our aim is to get people to Jesus and to help them become followers, dedicated followers, of the Lord Jesus. Let me remind you, here's our process that we follow. It's very simple. Four key steps in it. Number one, Connect. We're looking to connect people to Jesus by salvation and in active church attendance. Connect. Once connected, we want to help them Grow in their faith. Primarily, we do this by helping people get connected to a small group. A lot of these projects that you heard described that went on on Go Day, those were driven by our small groups. Cooperative friends working together to carry out the mission of the Lord. Growing in our faith. Connect. Grow. Thirdly, Serve. That is, get your hands dirty. Put your hands to the plow. Pull your weight. These projects, and projects like them that we do around the world, are avenues for you to put your spiritual giftedness to work for the Lord. And then, the process culminates by us actually going, locally and globally, to the very ends of the earth. This is our mission. This is our North.   I think it's largely because of this that Istrouma, now listen to this, you won't believe it; if you've been a Baptist for a long time, you really won’t believe it, Istrouma is almost a hundred years old – next year we celebrate 100 years – and did you know, to the glory of God, this church has never had a church split. We have always walked in harmony. Have you ever wondered why, why is it we don't fuss and fight? It's because we cooperate. We have the same mission. We have the same goal. We have the same aim. Jesus is our Lord, and we're cooperating together going the same way.   I remember a story I heard some years ago about this fellow who was moving. He was moving from his house, and so he was there in the doorway of his home, the front door, and he was working with a refrigerator. A passer-by walking there, a Good Samaritan, happened to note the fellow wrestling with the fridge in the doorway. The Good Samaritan said, “Hey, could I help you?” And the homeowner said, “I'd love it.” So the man jumped up the steps and came up, and each one got on one side of the refrigerator, and they began to struggle with that heavy fridge there in the doorway. After a couple of minutes they paused to kind of catch their breath. The Good Samaritan said, “Whew! I don't know if we're ever going to get this refrigerator in your house.” To which the owner said, “In? I'm trying to get it out!”   Now, I’ve loved that story across the years, because the truth is we've got to know which way we’re going. We've got to know which way we’re carrying this load. As a church, we don't ever need to be confused. We are working together, and our aim is to make disciples of all nations. If we’ll have the same North, and if we’ll have the same mission, if we’ll go the same way, we’ll be in harmony with one another. So these men, they’re coming the same way.   Secondly, they’re carrying the same weight. They're carrying the same weight. Have you ever heard this saying, “Many hands make light work”? It's true. Many hands make light work. I don't know if you’ve ever had to sustain someone who is what we’d call dead weight. Maybe someone passes out, and you realize how heavy the body is when there’s no life force at work in them. Here's this man, he's a lame man, he can't carry himself, and what a struggle it would have been for just one of these men to have borne him all the way to where Jesus was. But thankfully, there was not one friend or even two friends; there are four friends working together sharing the load.   Now the application is very easy to make, is it not? We, God's people, each need to take hold of our corner of the cot. Each one of us has a load to bear in helping our friends get to Jesus. Each one of us has a load to bear in helping the work of the church go forward, in giving life, and bringing the life-giving news of Jesus to a waiting world. I tell you, it's amazing what can be done when people cooperate together.   I want you to watch a video clip. It's from Perth Australia. You're going to get a glimpse of what people together can do [Video clip was shown]. Here's the story: In Perth Australia, and you can Google this and watch it, there was an incident several years ago where a man was waiting on a commuter train to come through, like a subway. As the train arrived, the doors opened and this fellow began to make his way into the train. There was quite a lot of traffic, foot traffic, and as he was stepping into the train, his foot accidentally slipped down into a crack between the platform and the train itself, and it went all the way up to his hip. There he was, stuck between the platform and a 43-ton train. Soon enough, that train is going to roll out of the station. Well, when the passers-by saw what was going on, they all rallied to where the man was and they, with their bare hands, they leaned into that massive locomotive, and together the crowd relieved the weight of that train enough; they rocked it off that man enough, that the man was able to escape. Now, can you imagine such a thing, the power of working together that they could move a 43-ton train off the leg of that trapped man? It's a lesson to us that if we work together, there's nothing that we can't do that God would will for us to do. We, God's people, have all about us people who are trapped, if you will, in their sins. The Bible even describes us as dead in our trespasses and sins. As good as dead if there isn't some help brought to bear to help them escape from the snare of the devil. And we, God's people, bring that help when we are connected and when we grow and when we serve and when we go together the same way, sharing the weight, God will use us to change the world.   I tell you, we do this as Southern Baptists in a great way. If you don't know, Istrouma is part of a larger network. We’re not an independent church. We are autonomous but we’re not independent; we cooperate, just like the word I'm using to describe. And it's often call “CP Missions.” Cooperative Program, that's what “CP” stands for, the Cooperative Program. Many of you may not even be aware of this, but we’re part of a network of about 45,000 churches, all of us cooperating voluntarily. We, every dollar that you give in the offering plate here, we take a portion of that dollar, and we actually send it away. The very first thing we do with your offerings is we give from our receipts to the work of the Lord around the globe through what we call CP Missions.   Let me tell you some of the things that are done with your gifts through CP Missions. First of all, we have the world's largest Evangelical missions sending agency. It's called the International Mission Board. By the way, we happen to have a couple of our international missionaries with us today, the Melancons. Would you please stand, Pat and your wife? God bless you guys, missionaries around from around the world with us today. Pat's going to come and dismiss us in prayer when we conclude our service. He directs a ministry called Baptist Global Relief. Can I say all these things publicly, Pat? Okay, very good. Sometimes we serve in sensitive areas where there are security concerns. But whenever there's a disaster around the world, let's say that there's an earthquake in Nepal, how do resources get to Nepal to not only alleviate human suffering, but to take the good news of the Gospel? They do it through our CP gifts, and we're supporting missionaries just like the Melancons who serve 365 days of the year taking the Gospel to the ends of the earth. So we support the International Mission Board, more than 4,000 career missionaries.   You know, sometimes we celebrate that we support a young couple in central Asia who are from our church; that Abbie and Tyler are about to go to Eastern Europe. We celebrate these young couples. But again, I say to you, you're not just supporting them. You’re supporting thousands of missionaries, many of whom you will not know their names until you get to heaven. But they're going to come and they're going to say, “Thank you for giving. And because you gave, I was able to go to Afghanistan or to Pakistan or to China or to Ecuador or wherever it may be in the world. Your gifts go. You go by virtue of your gifts. Not only the International Mission Board, but the North American Mission Board. Again, thousands of missionaries serving full-time across our nation, supported by your gifts. We have six seminaries, and many of them are multi-site. We're training probably in the neighborhood of 15,000 new pastors and missionaries and ministers who will serve all over the world, and your gifts sustain those seminaries.   We have the world's third largest disaster relief organization. I’ve already referred to Baptist Global Relief, but here in the states, Southern Baptist Disaster Relief. The yellow hats and the yellow shirts that do relief in places like New Orleans when Katrina hit. Believe me when I tell you, much of the work that is done is done by our network of corporation. So I want to encourage you that God is using you in ways perhaps you never dreamed or never knew. But that's what happens when all of us get against that weight and we do our part in carrying our share of the load. All right, that's the first word, “Cooperative.”   Now, the second word. How could we describe these men? I want to use as my second word the word “Creative.” These men were creative, were they not? Look, if you will, in your Bible again to verse 4. 4 And when they could not get near him because of the crowd, they removed the roof above him, and when they had made an opening, they let down the bed on which the paralytic lay.   Now, I've entered homes by a variety of means. I've rung the front doorbell and I've going in through the front door. If I'm a close friend of the family, I might come in through the carport door. Maybe even I'll come in through the back door. Maybe you've got sliding glass doors to the patio; I've come in through sliding glass doors. I even, I have to confess this, I’ve even come in through the window a time or two. I remember when I was in high school, I stayed out late one night, and my mom and dad, I guess they thought I was already in the house and I was already in bed, all the doors were locked when I got home. I was a teenager, so I began to look for a window that was open. I found an open window in our dining room. So I'm about halfway in the window when I hear this shriek. It's my mother who sees this strange man climbing in through the dining room window. So I’ve come in to a home by variety of means, but I'll tell you this, I've never entered a home through the roof. And I don't suppose these men had either. But the Bible says, they could not get near him, and because they could not get near him through a door, or even through a window, their ingenuity kicked in. Their creativity kicked in. I love this. Churches ought to be seedbeds of creativity. But instead, we're often known for quite the opposite. In fact, somebody has said that the seven last words of the church, do you know what they are? I've told you before. The seven last words of the church: “We've never done it that way before.” The seven last words of the church.   I can take you to a lot of churches today, and they're doing things the way they did them in the 1950s. You open up the door, you walk in, the music they play, the technology they utilize, it's like you've gone back in time. It's like a time warp. And very often, those churches are dwindling.   Now, we're never going to change the message we preach. Don't be alarmed. We're preaching the message that was once for all delivered to the saints. It's an unchanging message, but we ought to bring creativity to bear in our outreach. Let me just ask you this, off the top of your head, I want you to think of the most creative company, or the most creative entity, that exists today. All right, you got one? Let me see a show of hands, you’ve thought of a company that you think's pretty innovative, pretty creative, raise your hand. All right, you got one in mind?   What's the one you have in mind? [Disney.] How many of you thought of Disney when you thought of creativity? All right, a few of you. Someone else, raise your hand. What did you think? [Apple.] Okay, very good, how many thought of Apple? All right, a lot of you did, I see a lot of hands. Maybe one more, any other creative company that came to your mind? [HelloFresh.] Pardon? HelloFresh? What is that? All right, very good. I've got to get more current, I can tell!   How many of you thought the most creative entity on earth today is the church? Wow, okay, one or two of you. I don't think very many people think of the church when they think of creativity, and could I just say, shame on us. Now why would I say that? Because we have the image of God stamped upon us, the Imago Dei. He said, male and female, he made them in His image. He made them. We're in His image.   What does God like? Let just start at the beginning. In the beginning God…? Created – the heavens and the earth. You see, he is creative. Just think of the flowers that he made, the beauty of them, the grandeur of them, the delicacy of them, the colors of them. Roses. Irises. Daffodils. But the Lord is so creative, is he not? And here's the thing: the church is to be creative. You say, “Yes, but I like the way we've always done things.” I know that. I know that. I know you like the way it's always been done. Y’all sit in the same pews every week! I know you like it the same way, and the truth is, I do too. We're all creatures of habit, aren't we? We get in ruts. Have you ever heard this definition of a rut? A rut is a grave with both ends kicked out. You may ought to get out of your rut. And the truth is, we do get out of our ruts. Most of you didn't get here by horse and buggy today. Most of you heated up your coffee with a microwave or Keurig, or whatever those things are.   You love innovation in certain spheres of life, and we in the church ought to appreciate creativity. I just want to say on behalf of Istrouma, and I want to say to the praise of God, we're a pretty creative bunch around here. By some measurements, relatively speaking, we're pretty creative. I can't say that for myself, I'm not that creative, but we have staff members who are quite creative. I would just put a piece of artwork here on the screen. This is from our artist here on staff. This was a design that was made by our art staff, and it was for our student DNOW event. That kind of artwork is very, very cutting-edge, and they were doing a Bible study on the Battleground, Ephesians 6, and the armor of God, and how to win in life. That's creative.   You know, the bumpers that you see before I get up to preach each Sunday, that's our staff, they produce those bumpers. Folks like Jim Szalay and Josh Boyd and Jana and Laura Fuson, very creative people, and it’s to the glory of God. We ought to rejoice in it. We're creative not just in artwork; we're creative, for example, in our outreach in sports. You know, it's not every day you have a church that has a whole sports ministry, and we're blessed that we have it. And I just want to say, Thank you Lord for giving us this ample property and that there were leaders before I came that had the vision to build ball fields and gymnasiums, and we utilize those for the Lord, and that's the way it should be.   A couple of Sundays ago we had a 3-on-3 basketball tournament, and of course this is the time of March Madness, so our Sports Ministry said, “Let's capitalize on that and let's have a basketball tournament.” But the real goal, and if you know ML Woodruff who directs our Sports Ministry, we don't play sports for sports’ sake. We don't even play sports for the children's sake. Well, we do, but I'll explain how. We really play sports for the Gospel's sake – and in that sense, for the children's sake and their parents and their grandparents that they might come to know Christ. For crying out loud, we even have a Pickleball League! That's right, pickleball. Very creative.   I think about our age-graded ministries. They're so creative. A recent Sunday, our children’s staff put on what I think they called “Pajama Day.” They let the children come in their pajamas to Sunday morning, and I know this out of the box, a little bit creative, but they wanted to do something fun for the children, something creative, something out of the box. And here's our children’s staff, just being creative. Don't be mad at them; rejoice that they’re being creative, trying to reach those boys and girls!   Our Student Ministry, they recently had what they called Paint Wars and they just throw paint on each other as a fun activity, and again, when they conclude that, they sit the teenagers down and they tell them the Gospel. Now, are y'all tracking with me? What are we talking about? We’re talking about creativity. Really, when you think about it, that's what Go Day is. Go Day is an expression of creativity, reaching out. We had teams yesterday wash EMS and first responders’ vehicles to touch them with the love of Christ. How creative!   I led the donut team, and we took donuts to Home Depot and just gave them passers-by. Had a team go to Istrouma High School and give out donuts there because our Sports Ministry was doing a baseball clinic, so there those two creative outreaches dovetailed.   We had a block party, and I can’t list all the projects. 53 projects scattered across the city, each one unique, creative, God-honoring, and that's how we ought to live our lives, for the Gospel. Let's do it.   Now, there's a couple of things about these friends and their creativity. The engine of their creativity was their desperation. They are desperate. Have you ever heard this saying, “Necessity is the mother of _____?” Invention. Exactly. These men were desperate. They knew they could not heal their lame friend. They’d known him perhaps all their lives. They knew no doctor could heal their friend. This is the time, this is the place, this is the person, this is the opportunity. If they don't seize it, it may never come their way again. They are desperate. If they can't come through the door and they can't come through the window, they're going to come through the roof, because they're desperate. And I’ll tell you what. One of the reasons our churches are not as creative as we ought to be is because we are not as desperate as we ought to be to see the lost come to Christ. I'm not as desperate as I ought to be, so one of our prayers this morning ought to be, “Lord, make us desperate to reach our friends with the Gospel.” If you're desperate to see your friends come to Christ, you will pray for them. You will invite them. You will share the hope of Christ with them, and I will as well. God help us to be desperate.   And not only were they desperate, they were determined. Yes, desperation makes you determined. They were not going to go home unless that friend got to Jesus. I can imagine it was hot. I've been to that part of the world. I remember one occasion Nell and I were in Jericho; it was 125 degrees in the shade. And here come these men. It's hot, that lame man's heavy, but they're not to be deterred. They're determined to get him to Christ, and they will not take no for an answer.   One last word I want to give you, and that is these friends were Confident. They were confident. Would you look now to verse 5? 5 And when Jesus saw their faith [you could just circle that word “faith”, When Jesus saw their faith], he said to the paralytic, “Son, your sins are forgiven.”   Now, I want to be clear about something because I don't want you to misunderstand me, and I don't want to fail to be clear. These friends were not confident in themselves. In fact, I would say they had no confidence in themselves. It was for that reason they made the journey to Jesus. They knew their resources had been exhausted. No, they had no confidence in themselves or in their flesh. In whom, then, was their confidence? It was in Jesus. That's why he was their North. They said, “We've got to get to Jesus.”   Two things about their faith stand out to me. Number one, it's visible. Jesus saw their faith. I'll submit something to you this morning. Listen. All genuine faith is visible. You say, “Where do you see their faith?” That hole up there in the roof. There's the evidence of it. You see, their faith drove them to that decision and that action. James said it this way, “You show me your faith without works; I'll show you my faith by my works.” He said, “I will show you my faith.” Now, we’re not to make a show of our faith, but if we have faith, it will show. Should I say that again? We're not to make a show of our faith, but our faith, if genuine, will show.   Their faith was visible, and then, because it was, that is because it was genuine, it was victorious. That is, their faith reached its goal. In fact, it not only reached their goal, it want far, far beyond their goal. I love what happens in this story. They let that man down in front of Jesus. Jesus looks at him. Well, let me back up. The Bible says Jesus saw their faith and he said, “Son, your sins are forgiven.” Now here there ought to be a sound effect. There ought to be [screeching of brakes]. What? Like the needle coming across the record. Your sins are forgiven? Who said anything about sins? I don’t think they brought him there to get his sins forgiven; how embarrassing is that? Right there in front of God and the world, “Your sins are forgiven.” What sins; who is talking about sin? No, Jesus, he makes a turn here that is sudden and is telling.   You see, the greatest need of that lame man that day was not that he would walk again, as great as that need was. No, the far greater need was that he be saved. That he be forgiven. I don't know in what condition you’ve come today. You may be here a paralytic, and God can heal you and we would rejoice were he to do so this day. But your greatest need is not to be healed of your physical malady. You may be here with intense pain, and I know several of you have aches and pains and sicknesses, and O that God would heal you. But the greater need is our spiritual healing. You may be here in bankruptcy today, and I'm heartbroken that you’re in bankruptcy. But perhaps it is the bankruptcy that will bring you to Christ so that your greater need can be met, and that is that your sins be forgiven.   I think I may have misunderstood this passage for years, because it says “Jesus saw their faith,” and I always thought that meant the faith of the four. And he said he saw their faith, and then he said to the paralytic, quite apart from that, “Friend, your sins are forgiven,” as though they were a separate thing. But I’ve evolved in my thinking on that question. I actually believe that when he said “Jesus saw their faith,” it encompassed the five. He saw the faith of those four friends, and I believe he saw into the heart of that lame man. After all, the lame man was willing to be borne to Jesus. He was willing to come through the roof; he was anxious to. And so I believe Jesus saw right into his heart that that man had faith not only to be healed but to be saved, to be forgiven.   You say, man, what, you think Jesus can see into the hearts of men? Yes I do. Upon what basis? This very story. Because don't you follow the story? It said there were some Pharisees sitting nearby who said – in fact, they didn't say it, let me correct that, they were thinking it in their hearts – “Who is this man?” I can just hear the disdain in their voice, “Who is this man that he could forgive sin?” Jesus perceived what was in their heart while it was yet unspoken. So of course Jesus could see into the heart of that lame man, and he saw faith there, and he responded to the faith that he saw and he healed that man and saved him of his sin, because I'm going to tell you something, the only way to get saved is to exercise personal faith in Jesus Christ as Lord. Here's what the Bible says. For God so loved the world that he gave his only begotten son that whosoever believeth in him shall not perish but have everlasting life.   The key to heaven is faith. The key to heaven is committing in your life in faith to Jesus as Lord. And I believe that's exactly what that lame man did.   And in Lagniappe, he got the great thing, forgiveness, but lagniappe came when he was healed. He was healed. Jesus said, “Your sins are forgiven.” And then they questioned him, the Pharisees did, the religious crowd, and then Jesus put a question to them. He said – and I want to put the question to you; are you ready? Here comes the question: Which is easier to say, your sins are forgiven, or rise, take up your bed and walk? Church, how do you answer that question? Which is easier, and I'll give you a hint, which is easier to say? “Your sins are forgiven,” or “Rise, take up your bed and walk.” I'll answer it for you. The easier thing to say is “Your sins are forgiven.” And do you know why that’s easier to say? Because if I say to you, “Your sins are forgiven,” no one can verify whether it occurred or not. I'm clouded in this cloak of invisibility. You don't know if sins have been forgiven or not. But, by contrast, it’s harder to say, “Rise, take up your bed and walk,” because everyone will be able to see whether it happened or not, whether you’re genuine or not. So the harder thing to say is, “Get up and walk.”   Well Jesus took the easier route when he said “Your sins are forgiven.” But then he said to the religious rulers, But that you may know that the Son of Man has authority on earth to forgive sins” [lest you think I’m a charlatan]… rise, [take]up your bed, and [walk].”   That man took up his bed and he walked, and do you why that miracle occurred? That miracle occurred to confirm that Jesus is who he claims to be. Jesus is God come in the flesh to redeem sinners, and I'll say every miracle that occurs, occurs to verify and certify that Christ is Lord. It's pretty easy to say “Your sins are forgiven.” But it's not easy to accomplish.  Relatively free to say “Your sins are forgiven,” but excruciating to accomplish.   You know it's interesting, in the Bible, much of what occurs in the Bible occurs by virtue of God speaking it into existence. By divine fiat, God created all that is ex nihilo, out of nothing. He said, “Let there be light,” and there was light, no action required. No price to be paid. He spoke it, and it was. One of the few things, if the only thing, that required his action was to redeem us of our sins. He didn't just say “Your sins are forgiven.” No, justice demanded, holiness demanded, that sin be punished, it be atoned for, a price be paid. Justice demanded it, and love paid the price. Jesus died on the cross to pay for our sins, and to prove that price was paid, he arose from the dead. And he lives today to bring forgiveness and salvation to all who will put their faith in him.   Hey listen friend; I was talking a moment ago about the faith of these five. I honestly don't know of what quality their faith was or of what quantity it was. It could be that they came hopeful, not certain, but their faith was sufficient for them to make the journey, and what saves us isn't the amount of our faith, the quality of our faith. What saves us is that we exercise what little, feeble, weak faith we have. Come to Jesus, and when you come to Jesus, you'll find him sufficient to pay every sin.   Would you stand, please?  What a great story, a story about friendly faith. These friends brought their friend to Jesus. He got his cake, and he got to eat it too. He was healed of his illness and he was saved from his sin.     I know that God today wants to heal our sin-sick souls, make us his own. If never before you’ve called upon Christ as Savior, would you this day?  I want to lead you in a prayer to do that. From your heart, cry out to God.   [Invitation and Prayer]   [Lord’s Supper]   [Singing]  

Avsnitt: S01E08 Datum: 2019-02-20 Samsung S10 Samsung Akward Event Bixbi Samsung Fold Face ID eller Touch ID? Homekit efter flytt Siri Spela härnäst Apple Event 28 Mars - Eller? AirPods 2 Apple All in one service? Mac pro "Tower" Veckans App / Produkt Android Authority - Why are Apple’s chips faster than Qualcomm’s? – Gary explains https://www.youtube.com/watch?v=TiVF_ZzzLM0 ForkLift https://binarynights.com Danfoss Eco http://smartheating.danfoss.se/danfoss-eco/ Verisure http://verisure.se Instagram - www.instagram.com/macsnack/

FreeBSD 12.0 is finally here, partly-cloudy IPsec VPN, KLEAK with NetBSD, How to create synth repos, GhostBSD author interview, and more. ##Headlines FreeBSD 12.0 is available After a long release cycle, the wait is over: FreeBSD 12.0 is now officially available. We’ve picked a few interesting things to cover in the show, make sure to read the full Release Notes Userland: Group permissions on /dev/acpi have been changed to allow users in the operator GID to invoke acpiconf(8) to suspend the system. The default devfs.rules(5) configuration has been updated to allow mount_fusefs(8) with jail(8). The default PAGER now defaults to less(1) for most commands. The newsyslog(8) utility has been updated to reject configuration entries that specify setuid(2) or executable log files. The WITH_REPRODUCIBLE_BUILD src.conf(5) knob has been enabled by default. A new src.conf(5) knob, WITH_RETPOLINE, has been added to enable the retpoline mitigation for userland builds. Userland applications: The dtrace(1) utility has been updated to support if and else statements. The legacy gdb(1) utility included in the base system is now installed to /usr/libexec for use with crashinfo(8). The gdbserver and gdbtui utilities are no longer installed. For interactive debugging, lldb(1) or a modern version of gdb(1) from devel/gdb should be used. A new src.conf(5) knob, WITHOUT_GDB_LIBEXEC has been added to disable building gdb(1). The gdb(1) utility is still installed in /usr/bin on sparc64. The setfacl(1) utility has been updated to include a new flag, -R, used to operate recursively on directories. The geli(8) utility has been updated to provide support for initializing multiple providers at once when they use the same passphrase and/or key. The dd(1) utility has been updated to add the status=progress option, which prints the status of its operation on a single line once per second, similar to GNU dd(1). The date(1) utility has been updated to include a new flag, -I, which prints its output in ISO 8601 formatting. The bectl(8) utility has been added, providing an administrative interface for managing ZFS boot environments, similar to sysutils/beadm. The bhyve(8) utility has been updated to add a new subcommand to the -l and -s flags, help, which when used, prints a list of supported LPC and PCI devices, respectively. The tftp(1) utility has been updated to change the default transfer mode from ASCII to binary. The chown(8) utility has been updated to prevent overflow of UID or GID arguments where the argument exceeded UID_MAX or GID_MAX, respectively. Kernel: The ACPI subsystem has been updated to implement Device object types for ACPI 6.0 support, required for some Dell, Inc. Poweredge™ AMD® Epyc™ systems. The amdsmn(4) and amdtemp(4) drivers have been updated to attach to AMD® Ryzen 2™ host bridges. The amdtemp(4) driver has been updated to fix temperature reporting for AMD® 2990WX CPUs. Kernel Configuration: The VIMAGE kernel configuration option has been enabled by default. The dumpon(8) utility has been updated to add support for compressed kernel crash dumps when the kernel configuration file includes the GZIO option. See rc.conf(5) and dumpon(8) for additional information. The NUMA option has been enabled by default in the amd64 GENERIC and MINIMAL kernel configurations. Device Drivers: The random(4) driver has been updated to remove the Yarrow algorithm. The Fortuna algorithm remains the default, and now only, available algorithm. The vt(4) driver has been updated with performance improvements, drawing text at rates ranging from 2- to 6-times faster. Deprecated Drivers: The lmc(4) driver has been removed. The ixgb(4) driver has been removed. The nxge(4) driver has been removed. The vxge(4) driver has been removed. The jedec_ts(4) driver has been removed in 12.0-RELEASE, and its functionality replaced by jedec_dimm(4). The DRM driver for modern graphics chipsets has been marked deprecated and marked for removal in FreeBSD 13. The DRM kernel modules are available from graphics/drm-stable-kmod or graphics/drm-legacy-kmod in the Ports Collection as well as via pkg(8). Additionally, the kernel modules have been added to the lua loader.conf(5) module_blacklist, as installation from the Ports Collection or pkg(8) is strongly recommended. The following drivers have been deprecated in FreeBSD 12.0, and not present in FreeBSD 13.0: ae(4), de(4), ed(4), ep(4), ex(4), fe(4), pcn(4), sf(4), sn(4), tl(4), tx(4), txp(4), vx(4), wb(4), xe(4) Storage: The UFS/FFS filesystem has been updated to support check hashes to cylinder-group maps. Support for check hashes is available only for UFS2. The UFS/FFS filesystem has been updated to consolidate TRIM/BIO_DELETE commands, reducing read/write requests due to fewer TRIM messages being sent simultaneously. TRIM consolidation support has been enabled by default in the UFS/FFS filesystem. TRIM consolidation can be disabled by setting the vfs.ffs.dotrimcons sysctl(8) to 0, or adding vfs.ffs.dotrimcons=0 to sysctl.conf(5). NFS: The NFS version 4.1 server has been updated to include pNFS server support. ZFS: ZFS has been updated to include new sysctl(8)s, vfs.zfs.arc_min_prefetch_ms and vfs.zfs.arc_min_prescient_prefetch_ms, which improve performance of the zpool(8) scrub subcommand. The new spacemap_v2 zpool feature has been added. This provides more efficient encoding of spacemaps, especially for full vdev spacemaps. The large_dnode zpool feature been imported, allowing better compatibility with pools created under ZFS-on-Linux 0.7.x Many bug fixes have been applied to the device removal feature. This feature allows you to remove a non-redundant or mirror vdev from a pool by relocating its data to other vdevs. Includes the fix for PR 229614 that could cause processes to hang in zil_commit() Boot Loader Changes: The lua loader(8) has been updated to detect a list of installed kernels to boot. The loader(8) has been updated to support geli(8) for all architectures and all disk-like devices. The loader(8) has been updated to add support for loading Intel® microcode updates early during the boot process. Networking: The pf(4) packet filter is now usable within a jail(8) using vnet(9). The pf(4) packet filter has been updated to use rmlock(9) instead of rwlock(9), resulting in significant performance improvements. The SO_REUSEPORT_LB option has been added to the network stack, allowing multiple programs or threads to bind to the same port, and incoming connections load balanced using a hash function. Again, read the release notes for a full list, check out the errata notices. A big THANKS to the entire release engineering team and all developers involved in the release, much appreciated! ###Abandon Linux. Move to FreeBSD or Illumos If you use GNU/Linux and you are only on opensource, you may be doing it wrong. Here’s why. Is your company based on opensource based software only? Do you have a bunch of developers hitting some kind of server you have installed for them to “do their thing”? Being it for economical reasons (remember to donate), being it for philosophycal ones, you may have skipped good alternatives. The BSD’s and Illumos. I bet you are running some sort of Debian, openSuSE or CentOS. It’s very discouraging having entered into the IT field recently and discover many of the people you meet do not even recognise the name BSD. Naming Solaris seems like naming the evil itself. The problem being many do not know why. They can’t point anything specific other than it’s fading out. This has recently shown strong when Oracle officials have stated development for new features has ceased and almost 90 % of developers for Solaris have been layed off. AIX seems alien to almost everybody unless you have a white beard. And all this is silly. And here’s why. You are certainly missing two important features that FreeBSD and Illumos derivatives are enjoying. A full virtualization technology, much better and fully developed compared to the LXC containers in the Linux world, such as Jails on BSD, Zones in Solaris/Illumos, and the great ZFS file system which both share. You have probably heard of a new Linux filesystem named Btrfs, which by the way, development has been dropped from the Red Hat side. Trying to emulate ZFS, Oracle started developing Btrfs file system before they acquired Sun (the original developer of ZFS), and SuSE joined the effort as well as Red Hat. It is not as well developed as ZFS and it hasn’t been tested in production environments as extensively as the former has. That leaves some uncertainty on using it or not. Red Hat leaving it aside does add some more. Although some organizations have used it with various grades of success. But why is this anyhow interesting for a sysadmin or any organization? Well… FreeBSD (descendant of Berkeley UNIX) and SmartOS (based on Illumos) aglutinate some features that make administration easier, safer, faster and more reliable. The dream of any systems administrator. To start, the ZFS filesystem combines the typical filesystem with a volume manager. It includes protection against corruption, snapshots and copy-on-write clones, as well as volume manager. Jails is another interesting piece of technology. Linux folks usually associate this as a sort of chroot. It isn’t. It is somehow inspired by it but as you may know you can escape from a chroot environment with a blink of an eye. Jails are not called jails casually. The name has a purpose. Contain processes and programs within a defined and totally controlled environment. Jails appeared first in FreeBSD in the year 2000. Solaris Zones debuted on 2005 (now called containers) are the now proprietary version of those. There are some other technologies on Linux such as Btrfs or Docker. But they have some caveats. Btrfs hasn’t been fully developed yet and it’s hasn’t been proved as much in production environments as ZFS has. And some problems have arisen recently although the developers are pushing the envelope. At some time they will match ZFS capabilities for sure. Docker is growing exponentially and it’s one of the cool technologies of modern times. The caveat is, as before, the development of this technology hasn’t been fully developed. Unlike other virtualization technologies this is not a kernel playing on top of another kernel. This is virtualization at the OS level, meaning differentiated environments can coexist on a single host, “hitting” the same unique kernel which controls and shares the resources. The problem comes when you put Docker on top of any other virtualization technology such as KVM or Xen. It breaks the purpose of it and has a performance penalty. I have arrived into the IT field with very little knowledge, that is true. But what I see strikes me. Working in a bank has allowed me to see a big production environment that needs the highest of the availability and reliability. This is, sometimes, achieved by bruteforce. And it’s legitime and adequate. Redundancy has a reason and a purpose for example. But some other times it looks, it feels, like killing flies with cannons. More hardware, more virtual machines, more people, more of this, more of that. They can afford it, so they try to maintain the cost low but at the end of the day there is a chunky budget to back operations. But here comes reality. You’re not a bank and you need to squeeze your investment as much as possible. By using FreeBSD jails you can avoid the performance penalty of KVM or Xen virtualization. Do you use VMWare or Hyper-V? You can avoid both and gain in performance. Not only that, control and manageability are equal as before, and sometimes easier to administer. There are four ways to operate them which can be divided in two categories. Hardcore and Human Being. For the Hardcore use the FreeBSD handbook and investigate as much as you can. For the Human Being way there are three options to use. Ezjail, Iocage and CBSD which are frameworks or programs as you may call to manage jails. I personally use Iocage but I have also used Ezjail. How can you use jails on your benefit? Ever tried to configure some new software and failed miserably? You can have three different jails running at the same time with different configurations. Want to try a new configuration in a production piece of hardware without applying it on the final users? You can do that with a small jail while the production environment is on in another bigger, chunkier jail. Want to divide the hardware as a replica of the division of the team/s you are working with? Want to sell virtual machines with bare metal performance? Do you want to isolate some piece of critical software or even data in a more controlled environment? Do you have different clients and you want to use the same hardware but you want to avoid them seeing each other at the same time you maintain performance and reliability? Are you a developer and you have to have reliable and portable snapshots of your work? Do you want to try new options-designs without breaking your previous work, in a timeless fashion? You can work on something, clone the jail and apply the new ideas on the project in a matter of seconds. You can stop there, export the filesystem snapshot containing all the environment and all your work and place it on a thumbdrive to later import it on a big production system. Want to change that image properties such as the network stack interface and ip? This is just one command away from you. But what properties can you assign to a jail and how can I manage them you may be wondering. Hostname, disk quota, i/o, memory, cpu limits, network isolation, network virtualization, snapshots and the manage of those, migration and root privilege isolation to name a few. You can also clone them and import and export them between different systems. Some of these things because of ZFS. Iocage is a python program to manage jails and it takes profit from ZFS advantages. But FreeBSD is not Linux you may say. No it is not. There are no run levels. The systemd factor is out of this equation. This is so since the begginning. Ever wondered where did vi come from? The TCP/IP stack? Your beloved macOS from Apple? All this is coming from the FreeBSD project. If you are used to Linux your adaptation period with any BSD will be short, very short. You will almost feel at home. Used to packaged software using yum or apt-get? No worries. With pkgng, the package management tool used in FreeBSD has almost 27.000 compiled packages for you to use. Almost all software found on any of the important GNU/Linux distros can be found here. Java, Python, C, C++, Clang, GCC, Javascript frameworks, Ruby, PHP, MySQL and the major forks, etc. All this opensource software, and much more, is available at your fingertips. I am a developer and… frankly my time is money and I appreciate both much more than dealing with systems configuration, etc. You can set a VM using VMWare or VirtualBox and play with barebones FreeBSD or you can use TrueOS (a derivative) which comes in a server version and a desktop oriented one. The latter will be easier for you to play with. You may be doing this already with Linux. There is a third and very sensible option. FreeNAS, developed by iXSystems. It is FreeBSD based and offers all these technologies with a GUI. VMWare, Hyper-V? Nowadays you can get your hands off the CLI and get a decent, usable, nice GUI. You say you play on the cloud. The major players already include FreeBSD in their offerings. You can find it in Amazon AWS or Azure (with official Microsoft support contracts too!). You can also find it in DigitalOcean and other hosting providers. There is no excuse. You can use it at home, at the office, with old or new hardware and in the cloud as well. You can even pay for a support contract to use it. Joyent, the developers of SmartOS have their own cloud with different locations around the globe. Have a look on them too. If you want the original of ZFS and zones you may think of Solaris. But it’s fading away. But it really isn’t. When Oracle bouth Sun many people ran away in an stampide fashion. Some of the good folks working at Sun founded new projects. One of these is Illumos. Joyent is a company formed by people who developed these technologies. They are a cloud operator, have been recently bought by Samsung and have a very competent team of people providing great tech solutions. They have developed an OS, called SmartOS (based on Illumos) with all these features. The source from this goes back to the early days of UNIX. Do you remember the days of OpenSolaris when Sun opensourced the crown jewels? There you have it. A modern opensource UNIX operating system with the roots in their original place and the head planted on today’s needs. In conclusion. If you are on GNU/Linux and you only use opensource software you may be doing it wrong. And missing goodies you may need and like. Once you put your hands on them, trust me, you won’t look back. And if you have some “old fashioned” admins who know Solaris, you can bring them to a new profitable and exciting life with both systems. Still not convinced? Would you have ever imagined Microsoft supporting Linux? Even loving it? They do love now FreeBSD. And not only that, they provide their own image in the Azure Cloud and you can get Microsoft support, payed support if you want to use the platform on Azure. Ain’t it… surprising? Convincing at all? PS: I haven’t mentioned both softwares, FreeBSD and SmartOS do have a Linux translation layer. This means you can run Linux binaries on them and the program won’t cough at all. Since the ABI stays stable the only thing you need to run a Linux binary is a translation between the different system calls and the libraries. Remember POSIX? Choose your poison and enjoy it. ###A partly-cloudy IPsec VPN Audience I’m assuming that readers have at least a basic knowledge of TCP/IP networking and some UNIX or UNIX-like systems, but not necessarily OpenBSD or FreeBSD. This post will therefore be light on details that aren’t OS specific and are likely to be encountered in normal use (e.g., how to use vi or another text editor.) For more information on these topics, read Absolute FreeBSD (3ed.) by Michael W. Lucas. Overview I’m redoing my DigitalOcean virtual machines (which they call droplets). My requirements are: VPN Road-warrior access, so I can use private network resources from anywhere. A site-to-site VPN, extending my home network to my VPSes. Hosting for public and private network services. A proxy service to provide a public IP address to services hosted at home. The last item is on the list because I don’t actually have a public IP address at home; my firewall’s external address is in the RFC 1918 space, and the entire apartment building shares a single public IPv4 address.1 (IPv6? Don’t I wish.) The end-state network will include one OpenBSD droplet providing firewall, router, and VPN services; and one FreeBSD droplet hosting multiple jailed services. I’ll be providing access via these droplets to a NextCloud instance at home. A simple NAT on the DO router droplet isn’t going to work, because packets going from home to the internet would exit through the apartment building’s connection and not through the VPN. It’s possible that I could do work around this issue with packet tagging using the pf firewall, but HAProxy is simple to configure and unlikely to result in hard-to-debug problems. relayd is also an option, but doesn’t have the TLS parsing abilities of HAProxy, which I’ll be using later on. Since this system includes jails running on a VPS, and they’ve got RFC 1918 addresses, I want them reachable from my home network. Once that’s done, I can access the private address space from anywhere through a VPN connection to the cloudy router. The VPN itself will be of the IPsec variety. IPsec is the traditional enterprise VPN standard, and is even used for classified applications, but has a (somewhat-deserved) reputation for complexity, but recent versions of OpenBSD turn down the difficulty by quite a bit. The end-state network should look like: https://d33wubrfki0l68.cloudfront.net/0ccf46fb057e0d50923209bb2e2af0122637e72d/e714e/201812-cloudy/endstate.svg This VPN both separates internal network traffic from public traffic and uses encryption to prevent interception or tampering. Once traffic has been encrypted, decrypting it without the key would, as Bruce Schneier once put it, require a computer built from something other than matter that occupies something other than space. Dyson spheres and a frakton of causality violation would possibly work, as would mathemagical technology that alters the local calendar such that P=NP.2 Black-bag jobs and/or suborning cloud provider employees doesn’t quite have that guarantee of impossibility, however. If you have serious security requirements, you’ll need to do better than a random blog entry. ##News Roundup KLEAK: Practical Kernel Memory Disclosure Detection Modern operating systems such as NetBSD, macOS, and Windows isolate their kernel from userspace programs to increase fault tolerance and to protect against malicious manipulations [10]. User space programs have to call into the kernel to request resources, via system calls or ioctls. This communication between user space and kernel space crosses a security boundary. Kernel memory disclosures - also known as kernel information leaks - denote the inadvertent copying of uninitialized bytes from kernel space to user space. Such disclosed memory may contain cryptographic keys, information about the kernel memory layout, or other forms of secret data. Even though kernel memory disclosures do not allow direct exploitation of a system, they lay the ground for it. We introduce KLEAK, a simple approach to dynamically detect kernel information leaks. Simply said, KLEAK utilizes a rudimentary form of taint tracking: it taints kernel memory with marker values, lets the data travel through the kernel and scans the buffers exchanged between the kernel and the user space for these marker values. By using compiler instrumentation and rotating the markers at regular intervals, KLEAK significantly reduces the number of false positives, and is able to yield relevant results with little effort. Our approach is practically feasible as we prove with an implementation for the NetBSD kernel. A small performance penalty is introduced, but the system remains usable. In addition to implementing KLEAK in the NetBSD kernel, we applied our approach to FreeBSD 11.2. In total, we detected 21 previously unknown kernel memory disclosures in NetBSD-current and FreeBSD 11.2, which were fixed subsequently. As a follow-up, the projects’ developers manually audited related kernel areas and identified dozens of other kernel memory disclosures. The remainder of this paper is structured as follows. Section II discusses the bug class of kernel memory disclosures. Section III presents KLEAK to dynamically detect instances of this bug class. Section IV discusses the results of applying KLEAK to NetBSD-current and FreeBSD 11.2. Section V reviews prior research. Finally, Section VI concludes this paper. ###How To Create Official Synth Repo System Environment Make sure /usr/dports is updated and that it contains no cruft (git pull; git status). Remove any cruft. Make sure your ‘synth’ is up-to-date ‘pkg upgrade synth’. If you already updated your system you may have to build synth from scratch, from /usr/dports/ports-mgmt/synth. Make sure /etc/make.conf is clean. Update /usr/src to the current master, make sure there is no cruft in it Do a full buildworld, buildkernel, installkernel and installworld Reboot After the reboot, before proceeding, run ‘uname -a’ and make sure you are now on the desired release or development kernel. Synth Environment /usr/local/etc/synth/ contains the synth configuration. It should contain a synth.ini file (you may have to rename the template), and you will have to create or edit a LiveSystem-make.conf file. System requirements are hefty. Just linking chromium alone eats at least 30GB, for example. Concurrent c++ compiles can eat up to 2GB per process. We recommend at least 100GB of SSD based swap space and 300GB of free space on the filesystem. synth.ini should contain this. Plus modify the builders and jobs to suit your system. With 128G of ram, 30/30 or 40/25 works well. If you have 32G of ram, maybe 8/8 or less. ; Take care when hand editing! [Global Configuration] profileselected= LiveSystem [LiveSystem] Operatingsystem= DragonFly Directorypackages= /build/synth/livepackages Directoryrepository= /build/synth/livepackages/All Directoryportsdir= /build/synth/dports Directoryoptions= /build/synth/options Directorydistfiles= /usr/distfiles Directorybuildbase= /build/synth/build Directorylogs= /build/synth/logs Directoryccache= disabled Directorysystem= / Numberofbuilders= 30 Maxjobsperbuilder= 30 Tmpfsworkdir= true Tmpfslocalbase= true Displaywithncurses= true leverageprebuilt= false LiveSystem-make.conf should contain one line to restrict licensing to only what is allowed to be built as a binary package: LICENSESACCEPTED= NONE Make sure there is no other cruft in /usr/local/etc/synth/ In the example above, the synth working dirs are in “/build/synth”. Make sure the base directories exist. Clean out any cruft for a fresh build from-scratch: rm -rf /build/synth/livepackages/* rm -rf /build/synth/logs mkdir /build/synth/logs Run synth everything. I recommend doing this in a ‘screen’ session in case you lose your ssh session (assuming you are ssh’d into the build machine). (optionally start a screen session) synth everything A full synth build takes over 24 hours to run on a 48-core box, around 12 hours to run on a 64-core box. On a 4-core/8-thread box it will take at least 3 days. There will be times when swap space is heavily used. If you have not run synth before, monitor your memory and swap loads to make sure you have configured the jobs properly. If you are overloading the system, you may have to ^C the synth run, reduce the jobs, and start it again. It will pick up where it left off. When synth finishes, let it rebuild the database. You then have a working binary repo. It is usually a good idea to run synth several times to pick up any stuff it couldn’t build the first time. Each of these incremental runs may take a few hours, depending on what it tries to build. ###Interview with founder and maintainer of GhostBSD, Eric Turgeon Thanks you Eric for taking part. To start off, could you tell us a little about yourself, just a bit of background? How did you become interested in open source? When and how did you get interested in the BSD operating systems? On your Twitter profile, you state that you are an automation engineer at iXsystems. Can you share what you do in your day-to-day job? You are the founder and project lead of GhostBSD. Could you describe GhostBSD to those who have never used it or never heard of it? Developing an operating system is not a small thing. What made you decide to start the GhostBSD project and not join another “desktop FreeBSD” related project, such as PC-BSD and DesktopBSD at the time? How did you get to the name GhostBSD? Did you consider any other names? You recently released GhostBSD 18.10? What’s new in that version and what are the key features? What has changed since GhostBSD 11.1? The current version is 18.10. Will the next version be 19.04 (like Ubuntu’s version numbering), or is a new version released after the next stable TrueOS release Can you tell us something about the development team? Is it yourself, or are there other core team members? I think I saw two other developers on your Github project page. How about the relationship with the community? Is it possible for a community member to contribute, and how are those contributions handled? What was the biggest challenge during development? If you had to pick one feature readers should check out in GhostBSD, what is it and why? What is the relationship between iXsystems and the GhostBSD project? Or is GhostBSD a hobby project that you run separately from your work at iXsystems? What is the relationship between GhostBSD and TrueOS? Is GhostBSD TrueOS with the MATE desktop on top, or are there other modifications, additions, and differences? Where does GhostBSD go from here? What are your plans for 2019? Is there anything else that wasn’t asked or that you want to share? ##Beastie Bits dialog(1) script to select audio output on FreeBSD Erlang otp on OpenBSD Capsicum https://blog.grem.de/sysadmin/FreeBSD-On-rpi3-With-crochet-2018-10-27-18-00.html Introduction to µUBSan - a clean-room reimplementation of the Undefined Behavior Sanitizer runtime pkgsrcCon 2018 in Berlin - Videos Getting started with drm-kmod ##Feedback/Questions Malcolm - Show segment idea Fraser - Question: FreeBSD official binary package options Harri - BSD Magazine Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv