What's going on? This is Don't Flop DC slash DMV slash whatever else man. We're here in the USA. It's our tour volume number three. Shout out to Sonny, shout out to Maestro, shout out to everybody at Chicago and Detroit as well. We're about to get into the only two on two of this car here at DMV. MC's on my right-hand side. We've got my man Udo Lavos and J.R. Slam. It's your boy! UDHD, J.R. Slam and his sound click. New Jersey. I don't know what crew he's with, but still. It's your boy Udo Lavos, two of my 5D thoughts.  Shout out to Udo. In the UK, I've been with him the last three weeks on the tour. Got my man Impact and Quill. Makes a noise. Go Fox. Good. Let's do this show. Alright, we've got three rounds on the car.  You know what I'm about to say. Make sure you click on the end of the video. Give a little vote. It's on my boys on the left. Yo, you took so long to arrive. I was getting impatient then. I realised how to thank you. You just made us co-main events. And cheers. You should be paying for these frees. He can't even pay attention. He rockin' ADHD. Only came out here to battle Rom-nitty. Only came out here to battle Rom-nitty. And I only came to battle the dude Snow. But now they got us up against Uno. And this nigga, well, who knows? I know. I know. He's the guy from Seven.  The film Seven, which character's he again? Ain't it obvious? The one who died of gluttony. Now what I insinuate is insinuate. Yo, and this dude's from Philly. That's how he's got that obese weight.   Normally it's a victory dance today.    You got beaten by a wise guy like a good fellas film script. You a wack rapper from Philly. But you ain't Will Smith. He's a comedian. But you ain't Bill Hicks. Yo, check it. Uno tried to perform stand-up in London. For him, that wasn't a great night. Because you got booed off in under a minute. That's less stage time than daylight. So what, he really needs to give him some help. Robin Williams, this comedian's just killing himself. Why do we talk about shooting for when you wouldn't have fire arms if you were the human torch? But okay, I'll let you get away with talking about letting the tech spray. So we're gonna raise arms to get on this Mexican wave. And check it. Uno, you're about to get wrecked on. Last time we battled, it was in Paris. You was a shoe and right now you're getting stepped on. In the round one, I'll be feeling hella strong. One word, fuba. Put the kettle on. Let's go. Let's go, make some noise. I say you can thank me motherfucker. Because you can get this shot. This ain't what I was expecting because this ain't king of the dots. I say your shirt says, fill in the dots.  Because after I bang them in the head, nigga, you gonna fill these dots.  Give him a line up with the clippers. Your shape up is getting no barber. At least two syllables. And I've got it. One sign up with the clippers. Got me for you. Yo, you got us below a lot of Zay on the flyer. So right now you got two choices. Rest of these rounds. Or they gonna get hit with magical moose noises.  No, we can't because I'm my freestyle. Moose noises it is. I said first off, basically, I said, erg hit up impact. He was giving some head. He said I got a bowel for you. But it don't involve you getting some bread. Impact jumped up and kicked quill off the bed. Your turn. Now they might use some slang you're not used to and you'll wonder where they get that from. For instance, y'all say slut, they say slag, we say impacts mom. Yo, what? Easy. Whoever gave you that haircut, it wasn't a great one.   And this is what would happen if the fresh prince was raised by Jeffrey instead of Uncle Ford. Yo, somebody needs to help this kid.  Any suggestions?  He walked up. I said you haven't been in none of the big leagues. I have been in all of them and none of them you haven't seen, son. I've been in over 10 leagues and get paid for most.  I said, yo, I got a battle almost at 2 million views. What exactly has your team done? I'm a problem for everybody on the road like a speed bump. I get money, fights, and big opponents. That's a three sum. You just do the same show over and over. That's a rerun.   You should be asking for a refund.  Alarm issues. For me, leaving bodies everywhere filled with scar tissue. These bars get you. Carve in you.  I said, large pistols, arm missiles.   Yo, listen. I'm awake to your mowing your lawn or when you're with your little homie about to roll to the mall.  You won't be able to see my dough with the wall of smoke in the fog. You won't even know who's approaching till you get yoked for the car.  Woop woop. Jokes of a bar. Get him the fit. Yeah. Yo, let's go, let's go.  Independence Day. It was yesterday. Quill was hella waved.   I'm straight terrorizing guys. Then I'll put the text to his head like he's memorizing lines. Yo, your flow's been wack.  Like when part's ringing, most is lacking. Just like now you pretend to be drunk when you're performing all you get tight lines. I bet you can drink non-alcoholic wine, get pulled over at night and still stumble and struggle to walk a straight line. Yeah, fate drunk. Just as the sky's your poorly orchestrated rhymes. Like red buckets. Blue buckets. Old bucket. Blue buckets. Rough buckets. Blue buckets.  Old buckets. But wait. How about those KFC Kentucky Fried Chicken buckets? Nah, I judge it by its thicker, man. We're gonna need a bigger bucket.  When your movement light, you wouldn't leave a footprint on wet sand. You can't count your best punch lines on a clenched hand. Yo, when these two claim to be some of the hardest in Philly, for that, I'ma bury these liars and put them on ice because they're both always at the bottom of Philadelphia Flyers. Yo, I'm Philly's basketball team. That's the 76ers, which I find quite funny because you look like you weigh the same as 76ers. Now if we're making cake, that means we've got paper around. If you've got cake for this battle, it's baked and he's probably ate it by now.  And you're making cake literally because you cater into the crowd. End the round two. How am I feeling? Hell is strong. One word, foobah. Er, put a kettle on. That was better. So all bars this, bars that, bars everything.  So we came up with a solution and thought of a far better thing. Let's settle this like Americans and get to the arm wrestling. We're about to get to the arm wrestling. We're about to get to the arm wrestling. You got it, Tay. Bring it out. It's like, there, boys, let's do this. British, we're American. So I brought a translator so that way you can understand us. I say I'm about to peel your cat back.  Careful, it's soft up there. I'm done. I put your whole square in his... You could end up in a coffin here. Whitney, I need crack heads. His weapons are an awesome pair. Easy, bro, I'm white.   So sometimes I had to fight and it ain't stopped. When you would get him fights, you use one hand to do the face block and put the other arm through so you could do the Atlanta Brains chop.  Nobody understands you and this is true. You don't believe me?   I said, listen. This is my lyrical sand potion. I want to dip in a manned ocean so I can spread open a man's colon so I can fill it with manned ocean.  It doesn't matter, bro. Look at my hand motions.   There's no reaction. I don't even think he spits that great. If you listen to the silence in between the lines that this bag say, you can actually hear people in their head guessing impacts race.  I think your mom matched the base with chopsticks. Maybe that was a bad example. Maybe he's part Indian.  What if he's half Jewish?  What if he's just black?  I don't think he's a real black guy. In fact, I'm thinking that you're not one. What does your dad look like? Got one. Round three. That's two. All right, yo, check it. Hey, yo, everyone, hold it down, please. Final round. Let's go. Well, J.R. Slander's been sitting at home alone trying to rack his mind to try to find the best lines and phrases. We've been on tour with Big T, getting white boy wasted. Hey, yo, what do you know about hopping in Pittsburgh with real deal doing pure damage to your liver?  Most likely, but yo, check it.  I think we should have spent some more time doing this.  You've been getting waved off of booze and splits. What about in Chicago?  I had real rap, but what about last night? Fool for July when you was bombing Kruger's disc.  If them you are real niggas, you can get away with it.  That's about to be my favorite bit. Blazer clip, aim it quick. I explain it like an Asian chick shooting that way. I'ma shoot this way in case you miss. I'ma start pumping it everywhere until I have to change the clip. You better change the clip and change it quick, or aim the fifth.  Agent Smith?  I'ma start spraying with you. I'm pumping shots in every direction until I spray my fingers. I'ma shoot this way. I'ma shoot that way. I'm looking like a gamer twister.  He's J.I. He's J.I. It's only right that he talk a great fact.  On demand. Pop him fast. Hockey mask. Just so you don't know who shot J.I. And check it, yo.   Yo, it's funny. It's funny.  When every gang member in your city wants you out, it's kind of like the Warriors. End of the battle. And we're feeling hella strong. We ain't going anywhere. DC put a kettle on. Let's go. I'm actually really impressed. Yo, yo. Let's go. Let's go. Let's go.  No, you're not. I actually came with that slowly. That slowly? It's funny you talk about Agent Smith. That means you're the bitch, because remember, Brad Pitt's partner was Angela Jolie. But it makes sense, because I know exactly what happened, kid. It makes sense you would talk about Brad Pitt and Angela Jolie, because they always adopted African kids.  The next time you try to aim the fifth, don't put your hand where his aim is at.  Why don't we say something disrespectful about the British? I can't do that. I mean the crowd. Yeah, but we're battling in DC.  Princess Diana.  Was it murder?  I mean, last time I checked, I heard it was an accident. Yo, now Princess Diana loved any song as long as it had a good beat to it. Her favorite wrestler was Stone Cold. Why's that? For some reason, she was really into his theme music. Yo, but let's do one more Princess Die joke before we clear the field. What was her last thought before she died? The steering wheel. This dick! Yo, your whole persona is wack. We get bored. Yo, your whole persona is wack. We get bored watching you spit.  See, that's why you name it yourself after a pen with a freakin' feather as weak as ever. You might not recall exactly how we beat you then, but we remember. The last time a quill had any impact, y'all were usin' it to write the words, we surrender. He's going to. 1812! They are Hammy the Blicker.   Oh, so I can fuckin' burn myself? Alright, give me the thing that straps. Well, you already got a belt.  Well, let's just keep our hands to our fuckin' self. 1847? Oh, why don't we just call 911? Those people are actually coming out.  Hell!  But where I come from, that doesn't exactly mean the same thing. I mean, I've seen a lot of niggas in my life, but these niggas is crazy.  He said, niggas. Not that word. Don't hit me.  I think it's time for you to pay your respect.  I said, I'm about to catch a body, but you're about to catch a body, too. Now, why try and go and flip that? Shoot him where his wigs at. I said, this dude's gone. Click, clap. That's a princess Diana.  They fuckin' dead. We done? Yeah. Let's go. That was left to rot in the sun.


Hi everyone. Welcome and thanks for attending the presentation. My name is Satya Indrananwal and I'm excited to speak to you about building products in the hyper growth stage. So a little bit about me. I'm currently a product lead at Uber and I've been here for the last five and a half years. Before this, I spent a couple of years at Facebook, a few years before that at Microsoft, and my academic training is in human computer interaction and social computing. And like all of you, I'm passionate about building products and that's what we're going to talk about today. So as a PM, every day you're faced with tough choices. Meet Alice. Alex works at a hyper growth FinTech company. Her payments product is really taking off. She's swamped with feature requests and had a has a full roadmap. Her competing company is investing in crypto. Alice believes crypto could be really big for her product, but it's torn between pursuing it or focusing on her core product. How should Alice proceed. I'm sure each one of you has been in similar situations where you've had to make similar decisions. And my goal today is in discussing a few learnings and some frameworks, so that after having gone through those. It gives you a framework to reason about such questions in terms of how do you understand your options in these stages. How do you evaluate the alternatives and plan trade offs. And finally, how do you act and what you should prioritize when you're in situations like this. Before we get there though, let's look a little bit more into hyper growth phase and what's interesting about that. So, there are various definitions out there, but my favorite one is one by Nicholas single who's a VP of product management at Facebook. So instead of thinking about a certain percentage of growth to define hyper growth, he looks at it from four different stages of the product. The first is a drunken walk, where essentially you are wandering around semi randomly and trying to find some kind of value and exploring product market fit. In the second stage you start to find a trade and refine that bit of product market fit. The third stage is where you reach hyper growth, where you've clearly achieved product market fit, and now your entire goal is to scale your product, increase the value your product provides, and really build and solidify that competitive advantage. So while it's amazing to be in the hyper growth stage. It comes with its unique challenges. This challenge primarily stems from the need to scale your current business and grow new business lines simultaneously. Now scaling the business is hard. You need to scale engineering, you need to scale design, grow the team, and doing all of that at high quality is hard by itself. So you can combine that with the search for a new venture, trying to use your growth and engagement as leverage and expand to other use cases with the limited resources you have. It's really challenging. And the only way to do it well is really to balance execution with strategy. That's one of the unique aspects of hyper growth stage in a product where product management truly becomes a strategic function. And you see examples of this kind of scaling and venturing into new business line, all the time in our industry. A great example is Uber. Uber's right sharing business, a clearly found product market fit, growing at a rapid pace. That's when they started and ventured into eats a whole new category. And just as the eats business for scaling up, moved into another new business freight, and then elevate and then autonomous, all at different stages, but each trying to do the same thing that while scaling the current business finding these new lines of growth. Facebook is another great example. The whole family of apps of processing huge and massive growth. I recently read an article where it said that 20% of Facebook employees now in some shape or form work on AR and VR. Another great example of how at even at such scale, they're trying to find the next growth lever in their business. Tiktok is another fascinating examples. There's been hyper growth in terms of short form video consumption. And even in this core category, when there's so much room to grow, they're already venturing out and exploring new growth engines like live and socials shopping. So whether you're at one of these companies, or at your own company, when you're faced with these kind of situations and office question is, which of these new ventures do we invest in. The interesting way of looking at that question is to think of these ventures as bets. Now bets is a really interesting word and has a very specific connotation here. So think of a game of chess versus a game of poker. In chess, your skill dominates quite a bit poker, while you need skill. The outcome is also dependent to a large scale on luck and uncertainty. When you build product in the real world, it resembles poker more than it resemble chess in the sense that outcomes depends significantly on uncertainty and in many cases luck. So when you think of planning your product portfolio, you need to balance the risk in your bets to maximize chances of success. When you think of these different kinds of bets, a useful framework I found is something Ken Beck proposed, which is to look at these three specific types of bets. Explore, expand and extract. Explore basically aligns with identifying new opportunities. Expand aligns more with growth and scaling and extract is more about optimizing and tweaking your processes and your product to maximize your revenue and profitability. Each of these types of bets has unique needs, which is quite different from the other. And that dictates what kind of things become important in when you're thinking of these bets and how you approach them. So in the Explore stage, it's very early stage and your primary goal is searching for value when there's high uncertainty. So a primary goal for you there is to de-risk and move as fast as possible, trying out many solutions and de-risking them as quickly as you can so that you can try out more things. On the second or the expand stage, your primary focus is on eliminating bottlenecks to growth. By eliminating these bottlenecks, you can unlock growth, whether it's in increasing revenue, increasing your number of users or increasing engagement. And finally, on the extract stage, the core focus is for a mature product to try to optimize for increasing profits and reducing costs. And you do that by optimizing and tweaking various levers you can press, and this is somewhere where scale really matters. So small changes that you can do can have an outsized impact because of the scale of things. Think of a small change you do on the Amazon homepage, and if it works, the impact you can have on revenue and profitability because of the number of users Amazon has. Now, when you're planning, it's important to allocate investments across these bed types to maximize your chances of success. Now, these are not recommendations, but just example allocations. But typically in the expand stage where there's high return on investment and the value is known so you know your products providing some value. And the key goal is to scale it, you want to invest a significant amount of resources, because this is known value that you want to extract. On the other hand, on the right hand side on the extract stage, you also want to invest quite a bit, because you know that targeted refinements, the ones that work out can give you huge advantages because you're leveraging economies of scale in a mature product and small improvements are going to give you large gains. But you do want to reserve some capacity and invested into the explore stage, because although the risk is high, there's a huge asymmetric upside. And if that risk works out, you could have a whole new line of business emerging from the explore category. But there is high risk, both in terms of the value you can provide and executing to provide that value. And de-risking that risk is an important aspect. So as a product manager, typically you need to spend more time on the explore stage than your entire organization would. And this is because there's extreme uncertainty in the explore stage. You're not really sure of who should be your core user or persona that you're focusing on. There's uncertainty around what would be valuable for that group that you've identified. And finally, does your product actually provide that value? And when there's such a lot of uncertainty in so many different dimensions, a really good approach is to be super focused. So if you're not really sure who should your focus be, it's always, always better to be extremely focused rather than going broad. A fascinating example is Tesla Roadster, where the entire audience group of people who would find their offering attractive was about 2.5,000 to 3,000 people who would actually buy that car. But for that group, they'd identified something that would be 10 times more valuable than anything else their peer group could provide. For example, for the Roadster, it was faster, it was cleaner technology, and it was more forward thinking technology than anything in its class. And so it's really important for you to identify a very, it could be a very narrow group, but identify a very focused group and for that group have a clear hypothesis on something that would provide them 10 times or a huge amount of value. And then you want to better the stage where you're trying to de-risk of the question that does our product provide that value. To do that, in the explore stage, you need to exit it with a clear understanding of what are your riskiest assumptions, and then systematically start to de-risk them. So now we'll talk a little bit about how to de-risk your riskiest assumptions and some examples that might give you some inspiration. So the first part is to, like we talked about, is to actually identify what your riskiest assumptions are. And it could be the entire value proposition of your product. For example, for DoorDash in the early days, a key question was, will people even pay for delivery? It might seem obvious now, but at that point that was a big question, and the entire company hinged on that. So in terms of another example, the question could be more at a feature level. For example, for Buffer, which is a company, the question could be, will people actually pay for this service? So it's a feature in a product. Or it could be at a solution level. For example, when we were looking at redesigning the UberRight sharing experience, one of the questions was, can we optimize the request flow? If it was at the top of the funnel, what if we didn't ask you for the pickup location and just asked you for drop-off? It was a risky proposition because it was right at the top of the funnel, but it could simplify the experience. So remember, you want to identify assumptions which, if you de-risk, will give you high confidence and or a unique insight advantage as you move forward with the rest of your product. Taking those same examples, in case of DoorDash, the founders actually did deliveries between their classes at Stanford. They gave a Google Voice number, pasted PDF menus, and charged $6 for deliveries to try to validate that people would be willing to pay for the solution, and they successfully did that. In case of Buffer, they launched on the first day with the payment solution without actually having built out the entire payment infrastructure. And this was possible because the CEO was manually emailing PayPal confirmation receipts to customers so that they felt there was the payment functionality was working. In case of our Uber example for destination first, we used a static screenshot to simulate the app flow and have users walk through it. And the users didn't know whether that was a real app or a screenshot, but if they clicked on where to and they didn't seem startled by this change in flow and give us confidence, early confidence that we could proceed in this direction. So remember, at this stage, you want to de-risk as fast and as cheaply as possible. The key goal is to really learn a lot quickly. And anything that doesn't contribute directly to that goal learning, you should try to shortcut or find your way around that. In the entire Explore stage, the biggest goal that I want to stress is to accelerate your learning. The more amount of experiments you can run, the faster you can run them, the higher you maximize your chances of success. If I give you a goal of in this month, can you increase the rate of your learning by 10 times? It seems like a really ambitious goal. But if you start to break it down creatively, you start to think that, can I run five times the experiment? And can I run them in half the time? And if you can do that, using creative ways like we just talked about, you can actually 10x the amount of learning you would get in that month. The faster pivots here are crucial because remember, there's a lot of uncertainty and you don't know which solutions will work and which won't. You just have hypotheses. So the faster you can pivot here, the more you increase your odds of success and the longevity of your idea and company. So that was a lot of stuff to walk through. But in summary, we talked about the hyper growth phase and how there are specific unique needs. And how because of those unique needs of balancing scale with growing new business ventures, product really starts to become a truly strategic function. And you are operating in an environment of a lot of uncertainty and luck. So in those cases, it helps about thinking about your product launches or ventures as best. And dividing up those bets in a portfolio along ideas such as exploring, expanding and extracting. Once you do that in the explore stage is where you find the highest amount of uncertainty. And in that stage, your key goal should be to de-risk and learn as much as possible as quickly as possible. To do that, you need to identify your riskiest assumptions. De-risk it fast and cheap and then learn and iterate in that way. And if you're doing all of that, hopefully you'd have a successful product and don't forget to have fun building it as a team. Thank you again for your time. I hope you enjoyed the talk. Please let me know if you have any questions or thoughts and have a great day. Bye bye.


Save 10% with my coat Bobby Tan. Just kidding guys, today's offer is much greater than a saving of 10%. I teamed up with my Muslim brothers and we created pure passage. Imaging sending the reward of Umrah, this Ramadan, to someone you really loved but had already departed from this Dunya. For they're really sick and they cannot perform Umrah at all. Imaging the feeling of honoring his or her memory and expressing your love and devotion, while still ensuring that they receive this gift, the reward of performing Umrah. As a new revert I just learned about this but you know better than me, that performing Umrah is a profound spiritual journey that most Muslims aspire to undertake and you understand the rewards of it. However, for some this journey can be challenging especially when their loved ones are sick or have already passed away. At pure passage we understand how important it is to fulfill this obligation for your loved ones. That's why we offer our professional and reliable service to perform Umrah on behalf of your sick or deceased parents, spouse or any other relatives. We believe that everyone should have the opportunity to fulfill this sacred act even if they are unable to do so themselves and equally understand that the physical and financial challenges of performing Umrah yourself on behalf of your loved ones can be overwhelming. That's where pure passage comes in. We take care of everything and make sure that your loved ones Umrah is performed with the utmost care and attention to detail. So let us help you earn this immense reward for your loved ones by performing Umrah on their behalf. Contact us today and let's make it happen. Mith-mila. Alright guys, welcome back to the channel. If you're new, my name is Bobby. Guys, today's super interesting video we're going to react to Islam is growing in Mexico by the channel IERA. To me as a recent revert, it is of course not surprising that Islam is growing. However, I do have to admit that it is surprising that it is growing in Mexico because Mexico has a humongous Catholic culture. They are so intertwined that it is almost impossible to imagine Mexico without Catholicism. Nevertheless, we do know as well that Catholicism is not the original Mexican religion. It has been imposed by the Conquistadors before that the Mexican used to be what we from the west would call pagans. When I visited South America, I saw there were many practices from that very paganism still remaining to this very day. It was a mixture of Catholicism and the old religions. However, now it is very interesting to see that Mexico is emancipating itself basically by choosing its own religion. It is not presupposed and as you can see, people are not reverting to their old religions. However, they are seeking Islam by themselves. I'm super excited for today's video, guys. With no further ado, let's have a look. We estimate around between 600 and 800 visitors every month. So if we do the math, I would say around 20, over 20 every day, Alhamdulillah. We are located in a very good place in the city of Guadalajara. We are right outside of the main subway station. So we are quite visible and people are getting consciousness and awareness of what Islam really is, Alhamdulillah. Every month we are getting between 10 and 15 Shahadas per month, especially when it comes to Ramadan. It's so interesting to see about South Americans, especially when they let their beard grow look like Arabs. We did some interviews in the last few days to revert Mexicans and something in common that they have mentioned is that they want more visits from the Muslims. Many of them or the majority of them are the only Muslims in town. So they have no communication, they have no community, they have no mosque or Mosalah to attend so that they can learn. So they were saying, we need a place where we can gather because we also did Dawa and the people that approached them, they were always asking, okay, so this is very nice, this is really interesting. Now, where do I go to learn more? Where do you guys gather to pray, to study the book? It's very tough to hold onto a belief system if you are the only one. You have to be very strong-minded. It's not impossible, but having a support system will help you. This is why it is important to establish Dawa centers and local mosques. We need places, we need more places so that the Muslims can gather and learn their religion. The Mexican people, I think they are really open to Islam, like the group of students, high school students that just attended, I was making proven questions to see how they think, what they find about Islam, and they say, what I hear right now, I think is the truth. You are giving me even more details, like for example, you can see the Jesus exhibition here, right? And they were saying, you are giving me even more information about Mary, about Jesus, than my own religion, which is Christianity. They are very eager to learn, they have a lot of curiosity about Islam, they have a lot of curiosity about the Muslims, this is something completely new to them. There are many ways that people can support us, there are many ways. That's extremely fascinating because coming from the West, Islam is nothing new to us, however we don't really understand it and we do believe that we get it fully. Islam has been present in Europe and Islam is present, unfortunately, in the media.  However, here in Mexico, you see that Islam has a fresh start and it's absolutely beautiful because I personally do believe that if you are presented just with the information of Islam, without even knowing that we are talking about bad, bad Islam, then you would accept it naturally because it is such a straightforward message, it is such a simple message. Worship one God alone. To help us, especially through Ayyera, give the materials, we have plenty of Koran right now, Alhamdulillah, but we do need some books so that we can teach the new Muslims. The best way that I find to explain is like a tab. Right now, we just open the tab in a manner that we can handle the water that comes out of the tab. I think that if we have more resources, we can open the tab a little bit more, but sometimes, for example, we don't do a lot of advertising, we don't do a lot of invitation to people sometimes because we are very few people and we cannot handle the amount of people that would come to the Dawa Center. We have more resources, I think we would hire more people, more dyes. We would train more communities, more Muslims, more reverts so that we can take care of the non-Muslims that come to the Dawa Center in a better way. And of course, the people that will embrace Islam so that we can take care of them and provide them the knowledge. Guys, I'm not affiliated with this channel whatsoever and I have no idea if there is a way to support them, but I'm going to link their channel in the description box and if there is a possibility, I would highly suggest you go and support them. The foundations are amazing so that they can practice their religion in a strong way, in an independent way and eventually that's going to let Islam grow all over the country, inshallah. This Ramadan, we have... Alright guys, and this is already it for today's short video. Unfortunately, they didn't really go into depth why the Mexicans are reverting to Islam. However, from the video we could take, that Islam is very new to Mexico and therefore they have a fresh, unbiased perspective. I would believe that this is one of the main reasons because like that those people can truly see what Islam is about without being brainwashed by the media, telling them that Islam is so violent. And moreover, we know as well that in Mexico we do already have a lot of violence coming from the cartels, coming from the drug trafficking and what not. Therefore the Mexican people must have a totally different perspective on who the terrorists in the country are. Surely not the peace-loving Muslims. Moreover, I know that South American people love their communities and Islam provides exactly that. It provides community, a strong brotherhood. So all of that taking into consideration, it's no wonder that Islam is growing in Mexico and inshallah we will see it grow even further. Alright guys, but this is it for today's video. If you liked it, leave it a thumbs up. If you haven't subscribed already, guys, please do so. And if you want to support this channel, all the links are in the description box below. Thank you so much for your ongoing support guys and as always, may God bless you all. Much love and peace.


Let's get started. Uh, please give Gerald and Roger a very great DEF CON welcome. Hello DEF CON. Hello everybody. Um, today we're going to, uh, discuss the current state of, uh, DNS rebinding, including attack, recent attack and prevention technique. We will also discuss, um, our tool, uh, Singularity of Origin. It's a DNS rebinding attack framework and how it incorporates this new, um, technique and how you can use them today. So our contribution in the domain of DNS rebinding are, um, two-fold. Uh, the new tool, Singularity, uh, it has everything you need to perform DNS rebinding. It is reliable. It is performance. It has built-in payload for, uh, command services and can perform, uh, automatic service detection and exploitation. Um, the second area of contribution, uh, is, uh, in the research of, uh, technique to improve the speed of DNS rebinding and how to bypass command DNS rebinding protection. So, um, our talk would be articulated around, um, uh, the new tool and the, the techniques, uh, intake operates and, uh, we will, uh, include the customary, um, uh, refresher on the basic of, uh, uh, DNS rebinding. We will also discuss, uh, uh, an architecture we have implemented in Singularity, which allow you to interactively browse, um, uh, hooked browser, uh, internal network. So who are we? We are Gerard Lusso and Roger Mayer. We are security consultant at NCC Group. Uh, we are attached to the San Francisco office. And, uh, we are the authors of Singularity of Origin. Roger? So why should you care about DNS rebinding? Most developers understand that when they bind their application to all interfaces, that they expose themselves to remote access and this is not a good idea. So what do they do to fix this? They bind the application to the local host. They think only trusted users can access, it's a trusted environment so they don't need authentication, right? And then all these DNS rebinding issues happen. The EOS cryptocurrency wallet is vulnerable. Google Home, Roku, Sonos speakers are vulnerable. The Geth, Ethereum client was vulnerable. Redis, MemcashD, Elastic Surge, the Kubernetes dashboard on Meacube is vulnerable to DNS rebinding, allowing RCE and VMScape. The Rails web console was vulnerable. We see more, more applications exposing, uh, where, uh, HTTP server on the local host, especially through the popularity of frameworks, such as Electron. The rise of IoT devices exposing sensitive interfaces on internal networks without authentication will make this even worse. We would also like to clear up certain misconceptions such that DNS rebinding is slow and can be solved by out of the box DNS filtering products or services, which is not the case. We'd like to start with a quick refresher on how DNS rebinding works. The origin is, consists of the scheme, host and port. Two documents share the same origin if they have the identical scheme, host and port components. The same origin policy is an important security concept implemented in browsers that dictates how two different sites with different origins can interact with each other. Certain interactions are always allowed between all origins, such as forum submissions, links, redirects, content embedding, but cross origin reads are typically not allowed. This is important, for example, if you're logged in to gmail.com and browse to an attacker controlled website, you don't want the attacker controlled code to be able to read your gmail messages. DNS rebinding permits us to bypass this same origin policy. We'd like to show you a visual walkthrough to make it easier to understand the concept. So on the left side we have the victim, which is the browser. We have a target service, which can be a service on the victim's local host or on the internal network. We have an attacker, which consists of a DNS server and a web server on this public IP. So on the right side we have the internet. On the left side we have the intranet. The victim can access the target service without authentication and the attacker cannot directly reach the target service, otherwise we wouldn't need DNS rebinding. So step one, the victim browsers to the attacker's website, hosted on rebinds.it, that's our domain name. We respond with the DNSA record of the public IP address and load some JavaScript, which keeps running in the victim's browser and waits until the DNS record expires. Once it expired, we make another request in the same origin. This time we respond with a different IP address, the IP address of our target service, 127.001. Notice that the origin, rebind.it, did not change. We did not violate the same origin policy. The browser will make this request and will allow the JavaScript to read the response and where we can exfiltrate it back to the attacker. All of this is possible because we did not violate the same origin policy. It's still pointing to rebind.it. We only change the IP address. This was a high-level overview which omitted a lot of details. There are a lot of previous good research which you can look at if you want to know more about the details. We would like to show you a first demo on iOS using Safari where we can achieve DNS rebinding in just five seconds using the cache flooding technique. In this case, we will be exploiting a home router on router.asus.com and we will be just reading the index page and displaying the results in a JavaScript alert box for demo purposes. This is Safari. We're going to router.asus.com. This is the target we're trying to exploit. Now we're setting up the attack. We're going to the Singularity Manager Web Interface. We're setting the target host to router.asus.com. We're leaving the target port at port 80. We're setting the attack payload to a simple fetch gap. We're using the first and second strategy, the interval of one second and we're enabling the cache flooding technique. We're starting the attack. This only takes about five seconds and we display the results. What we see here is the return of the index page which is just a redirect to the main login on ASP web page but it shows that we were able to read the response from an internal system, the home router. Thank you Roger. Now that we have a grasp on the basics of DNS rebinding, we are going to explore how we made DNS rebinding more reliable within Singularity. So let's say that you are a fan of horse riding and you're trying to plan your next vacation and you found a website that just allowed you to do that. There's nothing wrong with this website. Displayed permanently is a trojan horse picture. In fact the website was compromised and is running a hidden high frame with Singularity. So you connect to the website and you download the malicious JavaScript from Singularity and the code emits its first DNS query. So what is in a query? As you can see the query is made of several components. These components encodes everything Singularity needs to perform an attack. So first you have a start tag, then you have the attacker host IP address where we run Singularity, then you have the target IP address or it can be a name as well followed by a session ID. Session allow for the use of concurrent users and targets. Then you have the DNS rebinding strategy. Singularity incorporates a number of different DNS rebinding strategy. Here you can see FS, first and second, although known as a time-varying attack. This is the simplest and most reliable DNS rebinding strategy you can implement. Then you have the end tag and then you have the attacker domain, the one that you have ever purchased or compromised. So to improve reliability, you want to remove any HTTP performance enhancing technique that may impede DNS rebinding or stop it completely in its track. So we try to disable HTTP caching in all browsers implementation and intermediate cache to ensure that the browser gets a fresh copies of folder resources. We also instruct Singularity to drop idle connection from browsers. So when it is time to rebind against the target IP address, the browser doesn't maintain a connection to Singularity. What about TTL value? Um, most literature and other tools use a value of one second. Uh, we tried zero in the hope that, um, it will break stuff. It didn't. Uh, zero second is a valid TTL value so we just ticked with that. So how do we know that we have, uh, successfully rebind it against the target service? Um, historically, uh, Singularity use an index token in the HTML body. Um, so if this index token is present, um, then the Java script code knows, uh, it's still pointing against Singularity. If this token is, uh, disappears on the next, next fetch, uh, then it means that you have successfully rebind it. We recently moved to a custom HTTP header. Uh, however the index token is still useful in a, uh, one specific DNS rebinding strategy, uh, where we, uh, abruptly, uh, terminate the connection, uh, from Singularity to the browser and the browser get confused. We will, uh, go into more details, uh, on this later. Something you need to consider as well is that, uh, you may, uh, encounter an environment, uh, where there is an IPS, an IDS, um, and, uh, this IPS IDS may emit their own, uh, spurious, uh, DNS queries when they see, uh, requests from, uh, the, uh, the target browser. So it, it means that you may receive, uh, uh, IP address, uh, out of sequence when you make your DNS query, uh, um, which, um, uh, means that, um, the target browser will never see the IP address of Singularity, only the target, so we'll never be able to download the code and, uh, perform DNS rebinding. So to address that, we, um, have implemented a random DNS, uh, rebinding strategy where, um, um, uh, we respond either with the attacker IP address or the service, um, IP address, uh, which is a much slower technique in general but you could get lucky. So, um, we're now going to explore how we, um, improve the speeds, uh, uh, of DNS rebinding in, uh, in Singularity. So the first thing to know is that implementation details matter. Um, the DNS, uh, rebinding speed will vary, uh, depending on the whole implementation. Whether you use, uh, Windows or Unix like environments, uh, operating systems such as, um, Linux or MacOS, the browser vendor, uh, i.e. Edge, uh, Firefox, Chrome and all the, it's been off, uh, and Safari. The target specification matters, um, whether you use, uh, uh, a service, you're po- you're targeting a service that's bound to the loopback interface or, uh, uh, on the private network or a remote public IP address. Obviously we just, uh, solve that, uh, external factor may impact the speed such as the presence of an IPS and IDS. So just to illustrate, uh, DNS rebinding may take 40 plus minutes, uh, when, uh, uh, using Edge, uh, and down to three seconds depending on what strategy you use. Uh, Singularity can automatically, uh, fingerprint to optimize for speed, uh, in some condition. We'll discuss this later. So the time varying attack, uh, uh, Singularity first and second is approximately 60 seconds on all browsers except, uh, i.e. an Edge. Um, we, um, there's another technique called multiple answers that we didn't believe would work. Uh, however, uh, one of our colleagues Michael Roberts from NTC Group, uh, created a small proof of concept, uh, demonstrating that, uh, it was working on Windows when we specified, uh, an IP address of <IP_ADDRESS> and that we were achieving rebinding time of, uh, of three seconds once, uh, we implemented that. Uh, however, it didn't work with, um, the same technique didn't work with a Unix-like machine, uh, such as Linux or, um, MacOS. However, after a bit of digging, when we specified, um, uh, target service IP address of 0.0.0, uh, we achieved, uh, approximately three seconds, um, rebinding time. So now we have a solid and fast, uh, DNS rebinding against all loop back bound, uh, services. Just to illustrate at a high level how the multiple answer rebinding strategy work, so the target browser will emit its DNS query, uh, to rebind at its, uh, where we run Singularity as usual. Um, instead of responding, um, with the IP address of the attacker, then, uh, the IP address of the service, uh, as we do for the time-varying attack, we respond with both recorded at the same time. So then the target browser is going to keep, uh, polling, uh, the service, uh, and, um, uh, to determine whether it's pointing against Singularity or the targets. Uh, Singularity is going to then implement at some stage, uh, a firm role, um, uh, firewall rule that will, uh, abruptly block the traffic. This will force the browser, uh, to, um, uh, connect, uh, to the target service using the second IP address we provided earlier. So the multiple answer technique, um, my strategy worked very well for loop back bound type of, uh, services. So if your service, uh, uh, for instance, for instance is listening on <IP_ADDRESS>, but we were getting inconsistent results for over target specification, for instance on the, uh, private network, uh, where one attempt out of five would, uh, succeed. Uh, we implemented another technique called DNS cache flooding. Um, this worked very well in, uh, Google Chrome and, uh, Safari and iOS platform. Uh, you basically, basically, uh, flood the cache of the browser with thousands of queries. Um, and, uh, you can reduce vendor DNS rebinding time from five to 40 seconds, which is a great progress over the average of 60 seconds. Uh, Roger Demo was using this technique, uh, when we were using iOS and we got a rebinding time of five seconds. Um, flooding the cache is performed in a separate web worker. So here you have a Chrome, um, uh, console and in blue, uh, you have your regular, uh, attempt to fetch, uh, uh, resources to determine whether, um, um, we were pointing against the target service or not. And, uh, uh, in between all these, uh, requests you have thousands of queries that fill the cache of the browser, the DNS cache, uh, in an attempt to, uh, evict the IP address for the singularity server, forcing then the browser to point to the service for instance 127.00.1. So we have, uh, illustrated in this table some configuration and, uh, what can you expect, uh, uh, from a, uh, DNS rebinding time perspective. Roger? Let's talk about DNS rebinding protection bypasses. Using singularity, we can bypass all known DNS rebinding protection such as those implemented in open source DNS service unbound or DNS mask. We would like to emphasize that common recommendations and default configurations do not provide complete protection. How do common DNS protections look like? Most solutions block certain DNS responses at the perimeter so when they enter your internal network. Some tools block RFC 1918, private IP addresses such as 10 slash 0, 192.68 slash 0. Some tools block local host IPs, 127 slash 8. Some tools can be configured with, with IP addresses you're using internally if you're using public IPs on your internal network you can get those blocked. Some tools block the 0 slash 8 range. DNS mask and unbound are two widely used open source DNS servers. They're used in tools such as PF Sense, OpenWRT and certain home routers. There are also free public DNS services such as Cisco's OpenDNS which advertise that they have rebinding DNS rebinding protection implemented for OpenDNS. It's called block internal IP addresses and that just blocks private IPs. DNS mask has a setting called stop DNS rebind which blocks private IPs, the 0 slash 8 range and 127 slash 8 range. This does not block local host. We will talk about what we mean by local host in a minute. The unbound DNS server has a configuration setting called private address where you can configure internal IP address range and this will then be blocked. This does not block the 0 0 0 0 IP, the 127 0 0 1 or the local host. Our first protection bypass is using this 0 dot 0 dot 0 dot 0 IP address. This is a non rodable or invalid IP address but it works very well on Linux and macOS using Firefox and Chrome to access the local host. This bypasses protections that block DNS responses containing the IP address of 127 0 0 1 or the whole 127 slash 8 range. When we query singularity we can specify the target here so we can use the 0 dot 0 dot 0 target and then the DNS response will be an A record pointing to 0 0 0 0. What if the DNS protection solution blocks all internal IP addresses? Then we can use C names. Canonical name records are DNS records which map one domain name to another domain name. We can return a DNS C record instead of an internal IP address such as wiki.ncc group.com or chenkins.internal.card.com whatever our target is. This bypasses protections that block DNS responses of private IP addresses. The local internal DNS server will then resolve the C name for us and you don't want to block internal DNS resolution if you want to use internal host names. When we query singularity we specify the target here so instead of an IP address we specify wiki.nccgroup.com and then the DNS response will be a C name pointing to wiki.ncc group.com. Our third bypass is a variation of the previous technique. We can use the C name of local host. This bypasses protections that block DNS responses containing 127 001. This works well in linux and macOS. When we query singularity we specify local host here and then in the response we just return a C name pointing to local host. Okay. Now we're going to discuss the architecture we implemented in singularity to browse the victim internal network after a DNS rebinding. So tools such as beef, the browser exploitation framework and fire drill, a DNS attack tool can use a hook browser to access targets which are not typically available directly from an attacker such as your own appliance or corporate environment assets either via cross-site scripting or DNS rebinding. So we know that beef required the attacker to configure its browser or operating system to use the beef application server to avail of this functionality. We don't know how fire drill does it since the codes and the binaries are not available. We implemented the browsing of service in singularity without requiring the attacker to setting up its browser to use an HTTP proxy but instead just to point to singularity using normal HTTP requests. So at a high level once your browser has been hooked or the victim browser has been hooked the browser will make a web socket connection to the singularity application server and wait for instruction. The attacker will use his browser to connect to singularity and display the list of a victim that's been hooked and select one to browse. So let's say you want to connect to the home directory of a service bound to 1-2-7-0-0-0.1. The attacker browser will emit a normal HTTP request to obtain the directory. The singularity application server will translate this into a web socket operation to fetch the resource. Then the target browser using the singularity JavaScript code will translate this web socket fetch operation into a normal fetch API call to the home directory. Then the data will be sent back all the way back to the attacker browser. At a low level we just customize the Golang ground-tripper interface and we use the web socket plain text protocol to package each fetch request and response. Since we use base 64 encoding the size of the message is increased by 4-3 of the original length of the message. Please note that you don't have to use a browser. You can use any user agent. You can use KERL, HTTP inspecting proxy such as a port-sweager or wasp-zap or SQL map and so on. So when we implemented this architecture in singularity we encountered a number of challenge. The first assumption we made was that we didn't have to care about the cookies exchanged between the victim browser and the victim service, the target service. However our first test case was duplicity, a backup solution that was vulnerable to DNS rebinding. And as you can see the code snippet here, duplicity is extracting C-surf token from the cookie to generate links that are used to browse the duplicity application and perform a number of actions including running a backup. So singularity didn't work with that. So we had to consume this cookie so we read them from the target browser and we transmit them to the singularity server of a web socket and then the singularity application server set them on the attacker browser for the target domain that singularity has constructed. For HTTP only cookie, we don't really care about them. They cannot be read by JavaScripts. So they cannot be used by JavaScript on the attacker browser. So we let the target browser handle them for us. Another challenge is that to be able to read cookies when you perform a fetch request, a fetch API, you have to pass the credentials includes option to the fetch request. And if your application require HTTP authentication, this is not going to work. And why is that? This is illustrated in this slide. So let's say you have a service that requires HTTP authentication and you issue the command fetch HTTP <IP_ADDRESS> with your credentials includes then authentication dialog box appears. That will warn the user that something is amiss. So we don't want that. However, if you type the same command but you pass a different argument credentials omits, then there's no authentication dialog box so the victim is none the wiser. So when we have cookie and HTTP authentication required then we forget about we actually don't transmit the cookie to the attacker. Okay, now that Gerald introduced us to this hook and control feature we would like to show you how this works in a demo. For this demo we'll have two browsers. One is the victim, the other one is the attacker. In this case they will be both on the same machine but in a real world attack this does not have to be the attacker can be anywhere. So the victim will have a Jenkins instance installed in the local host and the attacker will try to access this. So this is the victim chromium browser which has Jenkins instance running listening in the local host. Now we're switching to the attacker. This is the hooked victim clients which will show up here so we reload the page and show it's currently empty there's nothing there. Switching back to the attacker sorry to the victim browser we're going to the singularity manager interface. We're setting target to zero zero zero for local host target port is eighty eighty. We're using the hook and control attack payload. We're using the multiple answers attack strategy. We're using one second interval. We're starting the attack. It only takes three seconds. The attack was successful. We're now we're switching back to the attacker. We're reloading the page and we can see this new victim session. So we click on it and we can now browse the victims Jenkins instance over the internet. So the attacker browse this credentials endpoint. We're going back to the victim to show you the requests. The first request is this slash credentials which the attacker was browsing to show you how this looks like. We can see the slash credentials. The remote address is zero zero zero for local host and the request URL is the origin still points to the attacker. We'd like to show you how we exfiltrate our data back to the attacker. So this S-O-O-W-S endpoint is how we send and exfiltrate the data back to singularity using web socket messages and that's how we can all the attacker can then browse to Jenkins instance. Okay now we're going to discuss how to scan for vulnerable hosts and services. So in the past there have been many very smart attempts to replicate end map behavior in the context of the browser but we've had the power of four sockets. So many of the solution we have looked at are either not completely reliable or do too much for our purpose. For instance we don't care whether SSH port is open or not. Denys rebinding is concerned with exploiting issue with HTTP resources so far. So the only thing we care about is does it speak HTTP. So we implemented a very simple solution that leveraged modern API and so it's including sorry fetch abort for implementing a timeout. So we distribute the list of targets we want to scan. That includes IP address and ports across four web workers. We only fetch the resource header. We don't bother with the response body. And we have a outcoded limit of 300 milliseconds before we move on to the next target if we don't get sufficient results. So the timeout will obviously drive how fast you can scan a host or a whole network. It is fast for HTTP open port obviously and it's fast as well for closed ports because if you send a packet to a closed port the TCP IP stack of the target will respond with a reset packet if nothing is listening on this port. It is slower for firewall ports but because here typically a firewall will drop any response so you don't know what's going on. So the scan will wait 300 milliseconds and then move on to another target. And slow as well possibly for slow HTTP service and over protocol that are not handled by fetch. So you want to use a lower timeout when you're scanning a LAN or fast HTTP service. Or you can use higher timeouts when you scan over a network. Make the one that I have high latency such as VPN. Over interesting bits and pieces we use the classic web RTC IP address leak to obtain the IP address the private IP address of the victim when available it works on Chrome and Firefox and we use this IP address to derive a subnet we can use to scan. We obviously pass the credentials omits to fetch. So the victim is not made aware that a scan is ongoing and we currently considering performing a second pass scan to identify slower HTTP service that we may have missed. So we have learned how we made singularity more reliable, faster, how we can find vulnerable targets and services. Now we're going to show you how you can implement all the above, orchestrate all the above and perform service detection and auto exploitation as a bonus. So singularity provides a sample auto attack.html file, it is fully customizable and permits to leverage all the features we have discussed so far including but not limited to you can specify specific exploitation payload for instance targeting a service like Jenkins or you can ask singularity to auto select the payload based on the service it detected. You can out code your targets and ask a singularity to optionally detects more targets maybe on your network. Same thing for ports. You can specify a DNS, a default DNS rebinding strategy and ask a singularity optionally to auto optimize and find the best strategy for you. And obviously you have all your options such as flooding the DNS cache, visibly hiding activity and so on. In the future we intend to implement more auto optimization so you don't have to read the extensive wiki. So when you're designing your attack you want to mix and match different specification of the same targets. For instance for local host bound service specify <IP_ADDRESS>.0 local host as a C name or 1 to <IP_ADDRESS>. This will improve reliability, the permit you to bypass security controls and for speeds. You can instruct singularity to find and use the external IP address to exploit the internal interface of Wi-Fi access points and routers for a device that use the WIC and system model. I can only encourage you to refer back to the DEF CON presentation, DEF CON 18 in that regard to see how it works. And you want to do some homework using open source intelligence. Try to figure what is the naming convention for assets in a corporate network or even use a dictionary of service name and specify them as C name in your target list. For instance Jenkins.internal.corp.com. This is likely going to pay off because a lot of service are still not updated in a corporate environment. So we mentioned that singularity can do service detection as well. So singularity come with a number of attack payloads that target services such as Ruby on Rails, Admin console, Amazon, AWS Instance metadata and so on. And we recently added a service detection routine that allow you to detect what service is running behind and try to deliver an appropriate payload. So for instance if you find that the service responds with a HTTP address that contains the value X Jenkins, then singularity will figure out that's more and more likely is using, is facing Jenkins application instance. So when you select the automatic attack payload, singularity will try to detect a service and deliver the appropriate payload it has. So without tool we were trying to blur the line between origin and I think we have achieved that. Hence the name, singularity of origin. So how do you protect from DNS rebinding attack? You often hear comments or on blogs or recommendation to use DNS blacklist or to use tentatively to use DNS sec maybe or to use this DNS service provider or one of your colleague or friend bought this appliance that or router that state that it provides DNS rebinding protection. Well as we learned command wisdom is not enough. It is hard to understand all the subtleties of DNS rebinding and no DNS sec won't help you there. So Roger how do we protect from DNS rebinding? There are three proper ways to protect your service. One is to use TLS on your application including the service listening on local host. You can require authentication if the attacker doesn't know the credentials. They can't make a valid request. Or you could validate the host header for all incoming requests using a whitelist of trusted domain names such as localhost or 127.0.1. Remember when we showed the origin in our last demo it was still pointing to the attacker which won't be whitelisted. There is also a proposal called course RFC 1918 which would require a pre-flight course request for websites hosted in a public IP address when they make a request to a private IP address. This is currently a draft and not shipped in any browser but this may prevent the DNS rebinding in the browser. We have one last demo where we show you how to automate this process. Previously the victim was browsing to the singularity manager interface where they had to configure everything which is not very realistic. So in this demo we'll show that the victim only has to browse to singularity. We start with a port scan to detect services listening on the local host. We rebind to these discovered services in three seconds already detects the service listening for the payloads we have and launch the exploit right away. For this demo we have a Rails console listening on the local host port 3000 and a Jenkins instance listening on port 8080. So this shows the managed rebind phase which we are not going to use. What we're going to use is this auto attack demo page. So browsing to the page we see that we detected port 8080 and 3000. We're launching DNS rebinding right away. The rebinding was successful. It detects already detects the services. We, not sure, let's go back one more time. It didn't update quite well. It detected Jenkins right away and it should detects launch. It detected Jenkins and here it's still rebinding, already detecting. It doesn't seem to update quite well. So for Rails we have remote code execution which launches the calculator and for Jenkins we just dump the plain text password stored in credentials to the console. We'd like to show you how the script looks like, the configuration script. It's very simple, the auto attack script so we can define the rebinding strategy. Here we use multiple answers. We use the attack payload automatic which automatically tries to detect the service. We specify the port, port 8080 and 3000 in this case only and we can specify which address to use. There are a few more settings but which we don't need for you. You can get the slides including your notes on this URL. You can get singularity or tool on our github page with all these features. Let us know if you have any questions. Thank you.


Hi everyone, Sean with jaspyscasebreaks.com here doing 2021 Panini Origins football 8 box half case break pick a team number three Where obviously all card ship and is release day. So I'm excited to see it. This is my first in-person look. Thanks to everybody for getting in from Ryan Hines and the Cardinals down to Brian Croft and the Washington football team If you see anybody with a little rooftop next to their name like all these folks here That just means they won those in the team random filler. So thanks to everybody for getting in and good luck This is that finalist in person and this is a half case break pick a team number three So this is starting a fresh case. So there is our case. I'm gonna pop this open and figure out which eight boxes for the half case We're gonna do of course Ben. Yes. They are there. Oh, that's right terrace Marshall out of LSU Thanks Mark. Thanks everybody else for the assist as well What up Joe? How are you buddy? Okay, so there's our stacks left stack is gonna be one through three on the dice right stacks in the four five or six Good luck to four. So it's gonna be boxes on the right. These boxes on the left here are gonna be for pick a team number four So so that you guys see that these are all four pick a team four I'm gonna throw a little four on here. Yeah, so those are all for pick a team four, which is in the store now to eat your spots but What we're worried about pick two three here are our boxes Yeah, LCS by eight of these night Nice Did he open them there Joe or did he take them home? giggled them left? That's the way to do it. He'll be like, dude, what's that guy giggling for be like, I don't know. He's happy a Box with tray on it Shit, man. I was I'd say if you're local you can come pick one up I don't get that reference. Who's who's judge males? Why don't I get that Joe? What what movie or show are we talking about? If there's a guaranteed booklet in every case or however many boxes, that's your booklet right there. That's a monster pack So let's see. I said, it's my first look at this stuff. So I'm excited There's a redemption on the back Caddyshack And it's love that show Marquise Brown to 25 for the Ravens Aaron Billingsley and Ryan Tannehill to 175 for the Titans Raymond de Jesus Darius Leonard and Alan Robinson and Jerry Judy dual relic or two color relic to 49 for the Broncos That is James Powell and you've got an auto of Kenny and Wang Wu for the Vikings and Pat Wolf The wolf okay, let's see my first redemption check it out We've got rookie jumbo jersey autographs card 159 Najee Harris going to the Pittsburgh Steelers and Carl Martinson spot he won in that team killer Congrats Carl Nice Najee Harris Do you know what the 11 teams are that one? Do you know what the 11 teams or that I won? Yes, I do baby. I'll I'll show you them after That breaks coming up next actually so you'll you'll be doing that right right after this Alan Robinson to 79 for the Bears Brian Croft and Herbert to 299. It's my boy Chargers Mark Haraki Aaron Donald and Tutu Atwell Both for the Rams Yeah You got Jalen waddle nice two-color patch almost three colors. That's to 199 for the Dolphins and Adam Cuperman We'll all this rookie Otto for the Ravens that is Aaron Billingsley and Jersey and Otto Cadarius Tony for the Giants That is Joshua Idlitz Nice Cadarius Tony But Anthony your teams for that next one that you won Try to see if I can read them off for you Baltimore Ravens Denver Broncos Detroit Lions Green Bay Packers Indianapolis Colts Los Angeles Rams Miami Dolphins Philadelphia Eagles Steelers 49ers and Buccaneers TJ Hawkinson the 175 for the Lions and Alec Harrison and Alvin Kamar to 299 for the Saints Raymond De Jesus Yeah, Patrick Mahomes for the Chiefs everybody loves him Angel Acevedo and Sammy D Pulled a one-on-one nice Brody. I think I saw a picture of that actually We've got Zach Wilson jumbo relic to 199 For the Jets that is Chris Maxwell Kyle Pitts rookie Otto for the Falcons and Brody Vaughn You go Brody Congrats, dude. That's your guy Jersey and Otto semi-fae Hoco for the four Cowboys That is Ryan Heights team he won in that team random filler Herbert Rivers booklet. Oh damn Ben Now you're talking to me Get another redemption See Brody's happy CD Land 175 Cowboys Ryan Heights and Calvin Ridley to 299 for the Falcons Brody Vaughn make if it's Patrick and Xavier and Howard old teammates both crazy defensive backs, too You saw that too, Brody de Andre swift for color patch to 49 for the Lions Alec Harrison and Simi Fae Hoco again for the Cowboys That is Ryan Heights that spot he won again in that team of random filler Thank You Ryan Congrats 5-5 back-to-back Zach Wilson one regular RPA one book RPA Let's see if we can get like that tonight rookie jumbo patch autographs orange I don't know what orange is out of but let's hope that it's low number card 15 Rashad Bateman who is Baltimore Ravens. I believe right was out with a hamstring. Yeah Baltimore Baltimore Ravens Aaron Billingsley Rashad Bateman for sure Rex for sure Out of 99 or out of 49 okay for the orange 49 Carson Wentz to 175 for the Colts Mark Rao and Corey Davis to 299 for the Jets and Chris Maxwell Big Ben and Ramon Dre Stevenson our relic Is Davonta Smith to 199 for the Eagles and And Sean Maddock love the look of this one that is receiving stars Jalen waddle 24 out of 25 Dolphins Adam Cupperman spot. He won in that filler. There you go Adam congrats man Beautiful Jalen waddle 24 out of 25. Love the look that card And on the back is Diami Brown Jersey and Otto for Washington and Brian Croft beautiful waddle Yeah, dear look like you got a hold of that Yeah, Brandon I uke to 175 for the 49ers that is Mark Rao and for Davies white to 299 for the Bills and Mike Tower Stefan Gilmore Rashad Bateman Gilmore on the move to the Panthers I believe right sixth round trade or six-round pick trade for him last minute And Nice name here Jamar Chase three-color patch 71 out of 99 for the bangles That is Sean Maddock very nice patch You got a redemption and our patch is Elijah Moore Jersey Otto Elijah Moore for the Jets Chris Maxwell our redemption Origins of greatness booklet Otto gold. It's got to be out of 10 right origins of greatness. Come on This can't be anything but good day and card six Tony Gonzalez Travis Kelsey that's got to both be chiefs version, right? They wouldn't have Tony Gonzalez as a Falcon on this That is pretty It is chiefs origins of greatness dual booklet and parallels. I'll pop over here real quick You can see Tony Gonzalez there under the chiefs obviously Travis Kelsey there as a chiefs right under it card number six Kansas City Chiefs dual booklet Otto Gonzalez Kelsey that's pretty cool. Chiefs is Angel Acevedo Congrats Angel and like I said gold. Hopefully he's out of 10. I Know that's what I was like Brody. I was like, I was like, I don't think they would have put Falcons on there If they're putting Kelsey on there That's just hurtful, you know Branding cooks to 99 for the Texans Patrick Davis and Deandre Swift to 299 for the Lions Alec Harrison Miles Garrett and Jalen Waddle Jalen Waddle Dolphins Adam Cupperman You get Trevor Lawrence two-color patch three eight out of 75 Very nice for the Jags Jacksonville Jaguars Shawn Maddock and Back to back Shawn Trevor Lawrence on card Otto 63 out of 99 Shawn Maddock Jaguars There you go, man beautiful signature that'll do and Jacob Harris Jersey Otto for the Rams Nick Lucia There you go. There he is Congrats, John We still have what I think is a booklet because this thing is monster We already have one booklet redemption Joe is not at the game. No, Sam. He he was on until not too long ago. Wow. Did he get that? I snatched it is a booklet and the side of it give it away No, it doesn't say anything You got Branding cooks to 299 for the Texans Patrick Davis and five hours later than 99 for the Chiefs Angel Acevedo Stefan digs and Najee Harris Steelers again Carl Martinson What up, Jim? How are you buddy? Happy Wednesday to you, man Let's look at the bottom one before it's for my Chargers Josh Palmer out of Tennessee Jersey and Otto for the Chargers Mark Parake We go mark. Let's see if we can find you that Rivers booklet right here Cover that We got Jamonte Williams to one 166 out of 199 relic for the Broncos and James Powell Joe no Joe was off at seven tonight. He came in early for release day and I'm finishing it up It is Cadarius Tony very nice two-color patch auto booklet for the Giants and Joshua Idlitz Very nice Josh Palmer was a wide receiver for the Tennessee Tennessee volunteers 12 out of 25 New York Giants But we do need to work use him more often. He's very very good Very nice one to end it Giants that is Joshua Idlitz Congrats 12 out of 25 Beautiful break Obviously that booklet we just saw dual autograph booklet auto Tony Gonzalez Travis Kelsey and the Trevor Lawrence on card auto out of 99 as well plus Jalen waddle out of 25 beautiful stuff here. Naji Harris redemption Very nice half case guys second half of that case pick a team four is in the store. There you go No, no randomizers to do that was 2021 Panini origins football eight box half case break pick a team number three from jaspiescasebreaks.com I'm Sean jaspiescasebreaks.com. Thanks for hanging out. See you next time


T F N N headline news update Everyone Basel Chapman the host of Tiger technicians are coming up straight after this T F N N noontime update The dollars down 69 at twenty six thousand three forty two Like to have a little struggle there with a little double-toppy share pattern on the daddy at twenty six thousand four eighties If it does close this week at any point above twenty six thousand six hundred and seventy That's almost like a breakout to a certain sense certainly starts a leg C up in the weekly chart We'll see what happens because the gap that was that very strong gap up on Friday I suspect quite a bit will be folding. We'll see other twenty six thousand two twenty two thousand six Twenty six thousand 180 area holes on any pullback. You've got the SMP, which is also taking a little bit of a breather here A better pattern. In fact, it's already a leg C in the weekly chart leg F in the Daily at down seven and a half at twenty eight ninety nine testing the twenty nine hundred level that was resistance for a couple of days Then boom we went right through it. So we'll see what happens how it can hold twenty six eighty five is gonna be key and a moment to get to twenty six twenty at any point in the next Four or five days would be really important if it does that the QQQ's that's the NDX one hundred But trading right at this moment down sixty two cents at one eighty five twenty two Made a new recovery high. Oh man. It is at one eighty six point oh seven the all-time high is one eighty seven fifty He's like a dollar and a half away from an all-time high that is amazing much better than the Dow And you're looking at the IWM which has been struggling lately, and then it had a really nice session Friday's giving back some today. It's down sixty two cents at one fifty seven oh six But what's really interesting to me is gold took a bit of a dive earlier on it's come back a little bit It's down three at twelve ninety two It's going to be very important because it needs to hold the low that was made right on the this is April the fifth April the fourth 12 eight twelve eighty four It really needs to hold that a break under that says opposite can start to test is very long-term uptrend support line That's gonna be important and it's interesting that the dollar The dollar is now down four cents at ninety six ninety three was down a little bit more even Friday had an interesting candle This is the chaplain wave Roman candle it didn't get into a half way of the candle So we're gonna be watching this closely because it keeps coming back from lows The dollar's still holding pretty darn well when you think about it and crude oil finally is down a little bit It's down seventy three cents of sixty three fifty. I'll be right back for my tiger technicians are will be talking stocks today Be right back. Otherwise see you tomorrow You


Before I get into this video, I got to remind you of a couple giveaways we have going on right now One of them is for a Nintendo switch an Xbox series X or a PlayStation 5 The other is for two copies of Pikmin 3 Deluxe you can like this video comment on this video subscribe to the channel That bell icon head on to the description be sure to check out how to enter these giveaways. Alright, let's get into this because We have a quite a bit to talk about here because there is a kind of a a I Guess an opinion going out there kind of a Thought process I guess is the best way to put it that Xbox series X and the PlayStation 5 are rushing to launch this year and What supports it is things like how there's no major games for the Xbox series X and series S at launch Sony not being forthcoming in a whole bunch of features that we normally know by now And yeah, it's a weird pandemic year and it kind of feels like maybe You know, they shouldn't have these systems out there There's obviously a lot of pre-order snafus pre-order cancellations and delays I mean the PlayStation 5 some people are getting emails about their PlayStation 5 pre-orders saying you won't even get your system till 2021 Like that doesn't even sound like second shipment third shipment fourth shipment That sounds like 10 shipments down the road. You finally get your PlayStation 5 pre-order That's that's really insane to be completely honest and a lot of this has led to Confusion and people are just saying you know what these systems are rushed They shouldn't be launching now and I want to be clear here we will not know how rushed these systems are until they're actually in our hands and There are certain aspects about these platforms that will point out how rushed they really are but right now from the outside looking in You know, you look at the line-ups. You you look at how all the handling of this has been happening It looks like these systems are rushed But I think one thing that's important to do is look at the history of console launches Because if you're gonna claim that these console launches are rushed then we need a basis to compare it to now We could compare this to Nintendo switch. We all know that switch launch with a killer app We all know that switch had hardware issues and for all intents and purposes it kind of feels like switch was rushed in Hindsight even though the switch blew up and no one is saying they shouldn't have released it on March 3rd 2017 But there are some things that maybe could have been fixed if the switch sat in the oven at least till holidays It is what it is Now let's get into Actually comparing other Xbox and PlayStation launches So I decided to first look at the one thing we know for sure that we can check and that is launch line-ups So for the Xbox 360 we're gonna start there because that's like the first console that Microsoft really came on the scenes and Made a name for themselves. Yes I know the original Xbox with Halo and everything was a big deal But again, they were just breaking into the video game market.  That was that was an exclusive game at the time one of the exclusive launch games Madden NFL 06 NBA 2k6 NBA live 06 need for speed most wanted NHL 2k6 perfect dark zero Microsoft game studios with perfect are zero there again. That is another You know quote-unquote exclusive game there Peter Jackson's King Kong the official game of the movie by Ubisoft Project Gotham Racing 3 which was another exclusive at the time Quake 4 My id software and Activision we had Ridge racer 6 Tiger Woods PGA 2 or 06 and Tony Hawk's America Waston So basically a ton of sports games a couple other ones a couple shooters and then we had some exclusives All right, not no big names in there, right? No big name exclusives But you know a decent listing out about 20 or so games there Then you look at the PlayStation 3 launch lineup because again, we're gonna kind of compare I'm just going back a couple gents here. They had about 21 games. It looks like so you had resistance fall man That was an exclusive game NBA 07 Genji days of blade Blazing angels squadrons of World War 2 Call of Duty 3 EA sports fight night round 3 the Elder Scrolls oblivion fear Full auto-tube battle lines Madden NFL 07 Marvel Ultimate Alliance Mobile sweet Gundam crossfire NBA 2k 7 need for speed carbon NHL 2k 7 Ridge Racer 7 Sonic the Hedgehog Tiger Woods PGA 2 or 7 Tom Clancy's Rainbow 6 Vegas Tony Hawk's project 8 and untold legends of Dark England now There's some good games in there, of course, but Sony themselves didn't really provide a lot of the best games I mean you're thinking about oblivion. You're thinking, you know about games like You know, I'm even looking at this Marvel Ultimate Alliance was actually pretty decent But Sony really didn't have anything to do with that. They're big games are obviously resistance follow man Genji days of blade like that was there their go-to games neither of them really that big of a deal And kind of showing that the PlayStation 3 and Xbox 360 didn't exactly have great launch line-ups So let's go to the current generation a PlayStation 4 So the PlayStation 4 launch lineup was again about 21 games again most recent generation Let's just take a look at it angry birds Star Wars assassin's Creed 4 black flag Battlefield 4 black like retribution Call of Duty ghosts contrast DC universe online drive kick FIFA 14 flower Injustice gods among us Just Dance 2014 kill zone shadowfall that was the big PlayStation 4 exclusive at the time Knack that was another one Lego Marvel superheroes Madden 25 NFL 2k 14 and be alive 14 need for speed rivals playroom another Sony exclusive Riso gun Skylander swap for sound shapes super motherland trying to the complete story in warframe It's funny because it's all like Riso gum was kind of like the one that people were really really excited about it It was on PlayStation Plus. You can get it for free if you were already a subscriber But yeah, that was you know it again Not a terrible lineup, but there's nothing in there that really jumps out to you, right? Like at least at least to me There's nothing really, you know that jumps out because I mean if you go over and you look at the Xbox one launch lineup It doesn't really sound worse You have assassin's Creed 4 black they battle feel before Call of Duty ghosts crimson dragon dead rising three people 14 Fight it within for some orders for five Just Dance 2014 killer instinct Lego Marvel superheroes Local cycle Madden 25 NBA 2k 14 NBA live need for speed rivals power right rise rise on a roam That was an exclusive Skylander swap force zoo tycoon Zumba fitness were apart again. Nothing really major there music basically what kills own versus rise son of Rome Otherwise a lot of this a lot of very similar games in those lineups. I didn't these aren't really impressive Lineups, but it does sound better of course when you start looking at What did they have coming this year and this is where this generation is a little bit weird So on November 10th the Xbox series X will have assassin's Creed Valhalla launching that same day Literally, they moved up the launch date to match the series X launch There will be destiny to be on light dirt 5 gears tactics, which is like the exclusive game that they have Because they don't have any big exclusives at launch now that hails pushback Gears tactics Tetris Effect connect watch dogs Legion and Yakuza like a dragon Now one thing you notice is it sounds like a lot less games But things are different now because these systems are fully backwards compatible You don't need a Madden 21 launch title because if you own Madden 21 on Things like Xbox you just put it into the system and it'll have free Updates and stuff for next-gen so reality is the launch lineups are going to be smaller this time around But that doesn't mean there's actually less available games In fact due to backwards compatibility of both platforms at least so to last-gen for all gens for for Xbox You actually start with a massive library at launch bigger than we've ever had But these are the six games that basically are coming to Xbox series X day one That you can't really enjoy fully right now at least not in the same way you can on Xbox PlayStation 5 is Where you know you start to see a few interesting things so yes They have you know some similar games, you know with Assassin's Creed and everything but Spider-Man Miles Morales That's an exclusive Astros playroom Sackboy a big adventure Demon souls those are like the big ones so Sony's offering maybe arguably Sony's offering the best Exclusive launch line up they have offered maybe in the history of the company Then you get into Godfall Is a launch game watch dogs legions again dirt five call of duty devil may cry five special edition It's gonna be there at PlayStation 5 on launch. We don't know if that's coming to Xbox yet It's not from that coming at launch. There's gonna be fortnight there at launch for tonight. It's gonna be on everything Destruction all-stars So Sony doesn't have a ton of games coming either But again because of backwards compatibility There's actually a bunch of games you can play on PlayStation 5 day one You can pretty much pick up any PlayStation 4 game you want and play it same for the Xbox like when you buy an Xbox one Excellent launch if there's another game point out this holiday you want that's coming to Xbox It it's plays on the series X so you actually have a lot more gaming options this time around So this makes the launch lineups really really focused more on the exclusives than on anything else and Exclusive wise clearly Sony has maybe the best launch lineup they've had so if it's such a rushed launch For PlayStation 5 then why does it have so many decent exclusives? Why is there demons sold remake? Why do we have a Miles Morales? Why are we why we have an Astros playroom or sac boy? I think like this is a pretty solid exclusive lineup So This is where we actually get to the honest conversation about what makes a system rushed because I don't think game lineup Really has much to do with it games are gonna come games are gonna go as we looked at all the launch lineups for prior systems Exclusive wise it really wasn't that great for either platform for Sony or Microsoft This is the first generation where Sony actually has a couple decent games at launch You know Miles Morales, which is also a cross-gen by the way. We can't just ignore that cross-gen So what makes these systems launched or rushed? Well, these are things we have yet to be determined So what's going to determine if the systems are launched or rushed not launched rushed is one hardware failure Are we gonna have another red ring a death situation? Are we gonna have? You know another like PlayStation 4 where the controllers were the plastic was cracking on the thumbsticks Are we have another situation like that that could have been easily caught in more quality testing if they had let the system bake for longer Are we gonna run into operating system bugs and issues that would have been ironed out if these systems spent more time in Development are we gonna run into heat problems with the platforms? Are they gonna overheat? Are they gonna draw too much power more power than they're supposed to because there's something wrong in the power supply? Are we gonna run into issues where the systems are crashing all the time? These are things that to me determine if a system is actually rushed like when you get a Brand-new latest GPU graphics card and this happened. I think back with the Vega 7s From AMD the reason you know that was a rushed launch is when those GPUs came out and you bought it The drivers were so poorly done for that GPU that most of your games just won't run on it at launch It was insane that lets you know that hey look even if the hard Technology parts ready the software side is not so don't release it give time bake your driver Is a little more so things work better and they didn't do that and that's kind of what I'm getting into With the Xbox series X the Xbox series S the PlayStation 5 and the PlayStation 5 all digital version is we can't Talk about them being rushed yet We can't because the things that determine if these platforms are rushed are things We can't determine until the systems are in the public's hands Now we could talk about supply and demand and not meeting supply and demand But I actually went back into research on this did you know that Every new generation console even the Dreamcast for crying out loud sold out at launch I'm not sure if you guys knew that Whether it was the PlayStation 1 place is to Xbox Xbox 360 Xbox one PlayStation 5 4 doesn't matter Nintendo systems You know n64 GameCube we even the Wii U all of these platforms sold all that launch all of You know when if online pre-orders were available all sold out within an hour and in-store sold out as well when they were supposed to Yes, maybe things are a little crazier now because more people are trying to buy online than ever due to COVID But I mean we need to sit back and look at this realistically And that is that Every new launch sells out every new launch does not have enough supply to meet demand in the video game console space So what does this mean? What can we do about it? Nothing? We have to wait, okay? You could still hold on to that opinion that these systems are rushed. I just don't think the evidence supports it I think the evidence shows that determine a rush system cannot be determined until the system is in our hands a Rush product has flaws a rush product has issues a rush product isn't we can't make enough to meet demand a Rush product isn't oh my gosh. There's not enough launch games for the platform That that doesn't matter in the grand scheme We see with prior launch line-ups and and prior hardware issues that you know what that stuff isn't as relevant when you look at the launch Line-ups we've seen terrible launch line-ups from other took rushed compared to what exactly is there a platform? You feel like launched perfectly Let me be honest with me. Is there a platform that launched perfectly? This is why there's always been this mentality of early adopters deal with early adopter problems one of those problems being not a ton of exclusive games to play and Oftentimes some hardware failures You know a big thing when the switch launched was left joycon connectivity issues forget all the other issues There was a legitimate issue Nintendo did fix with left joycon connectivity So like these are problems that seem to always exist in new platforms Rush compared to what again? We can't determine how rush these platforms are until they're in our hands for all we know There is nothing wrong with these systems the games are gonna keep coming consistently And you know what your determination if you want it day one or not might just come down to whether you can get it Or you get your hands on it and if you can't oh well They'll eventually be able to buy some time next year. You'll be able to walk into a store and get one You'll be able to walk into a store and get one sometime this year too if you're really diligent So I'm not I'm honestly not that concerned About these platforms being rushed the things that concern me the most are just consumer practices I've covered it a lot between Xbox and PlayStation 5, you know The different consumer practices they're doing the fourth rightness and the honesty from one company versus the yeah We'll tell you some things what we're gonna tell you it kind of in a hodgepodge way So like the whole general public doesn't really hear about it in the best possible way It's it's just a lot of Different approaches to the market both are going to be successful this holiday The question is which one is going to be successful long haul and can they both be successful and can switch also thrive in the same market I think it's entirely possible We might be entering the first generation where three different platforms could actually be thriving at the same time I do Firmly believe if you're just gonna like, you know, force me to pick right now PlayStation 5 will outsell Uh, the Xbox Series X at launch because it does look like there are more PlayStation 5 stock available Uh, and PlayStation 5 will outsell the Xbox, you know long haul But I do think there are going to be some key markets where Xbox is going to have a massive foothold I think right here in the united states my home country I think there's a chance xbox series xns might outsell PlayStation 5 in this country now worldwide Worldwide is totally different, but again and switch nintendo is going to keep dominating with switch They're going to release a revision. They're going to do a new generation here in a few years like Hold on tight. It's actually a really exciting great time to be a gamer I will note the one the one downfall of next gen That maybe isn't talked about enough. This is going to be the most expensive generation ever games jump into 70 bucks storage costing You know $200 plus for an extra terabyte It's going to be the most expensive generation yet But I always notice about video games in general Video games is a hobby video games as something to do for fun has always been expensive It's an expensive hobby. It's an expensive thing. Even you know, you think about the 3ds Oh, you buy it for for 200 bucks while the games are still 40 bucks a pop. It's pretty pricey You know like in comparison to the cost of the system.  Um video games is just an expensive hobby and I kind of accepted that a long time ago All right, folks. I am the thinner RoboJance from the thinner brand and I'll catch you in the next video