From DailyDoseOfWeirdNews.com, I'm Darren Marlar and this is your Daily Dose of Weird News. This episode is brought to you by the audiobook The Last Observer – A Magic Battle for Reality by G. Michael Vasey, narrated by Darren Marlar. Here's a free sample on the audiobooks page at MarlarHouse.com. The California State Senate has passed a bill that would make it a criminal offense to address a transgender person by the wrong pronoun. According to HotAir.com, the bill now goes on to the state assembly. If passed and signed by the governor, the bill could enforce criminal penalties, including jail time, against someone who refuses to address a transgender individual by their chosen gender pronoun. Meanwhile, that launch lady I had back in elementary school is still out of luck, because she's not transgender, she just looks like a man because of her mustache. 50% of Americans have ditched their friends and made up a lie so that they could stay at home and watch TV. Well, you have to admit the television never judges you or excuses itself to go to the bathroom when the check for dinner arrives at the restaurant table. Aston Martin says it'll go completely hybrid with its cars by 2025. We'll soon be getting exciting movie chase scenes with James Bond desperately searching for an electrical outlet. For those of you who eat at your desk every day, it comes as no surprise that the lunch hour has been shrinking in recent years. A recent survey shows 70% of Americans either work straight through lunch or spend a mere 5-10 minutes woofing down their food. 6-10 of Americans consider the one-hour lunch to be the biggest myth in office life. Although, I do try to bring the world into balance by taking a five-hour lunch each day. The city of Los Angeles has officially replaced the Columbus Day holiday on their calendar with Indigenous People's Day. ***Honestly, you can call it imaginary friend day for all I care. I wouldn't care as long as it means I get to sleep in. Parents in Zimbabwe who can't afford school fees can now offer livestock such as goats or sheep as payment. The country's education minister said that schools will have to show flexibility when it comes to demanding tuition fees from parents. That would never work in America. Our alternative means of payment would have to be stuff like Cheetos dust and leftover marshmallow peeps. New stats show that Americans, on average, spend more on taxes in 2016 than they did on food and clothing combined. Well, it certainly felt like it. A report says 85% of all clothes end up in landfills. ***See, and you've been wasting your money shopping at Goodwill. Rachel Ray has donated $1 million to animals that were affected by Hurricane Harvey. ***Really? You couldn't think about taking care of the people first? ***Crib? Car seat? Baby wipe? Warmer? You know, there are so many things expectant parents need to buy. Here's something else for the shopping list, a baby naming consultant. You'll find them mostly in Los Angeles, New York City, Chicago, Hong Kong and a number of other major cities. One Swiss branding company charges more than $29,000 to choose the perfect name for a soon-to-arrive child. Just imagine, for just under $30,000 your child could be the next Apple, or Scout, or Fifi, or Pilot, or Moon unit. An Australian pop star is getting lots of flak for thinking that twerking in a Holocaust museum and taking pictures was a good idea.  An armed robbery suspect found out the hard way that holding up a mixed martial art studio is not an easy target. Police said shortly after 9pm a man walked into the defiant MMA and fitness studio in Burbank and pulled a gun on employees and customers. An instructor, lightweight MMA fighter Jacob Powell knocked the gun out of the suspect's hand and pinned him down until police arrived to take him into custody. A gun is no match for Cobra Kai! Frito Le, the makers of Doritos, Ruffles and Funyuns, are working on an organic non-GMO chip to cash in on their increasing popularity. Although are you really concerned about GMOs if you're chowing down on Funyuns? James Sissum and Ashley Smider picked a unique location for their wedding earlier this year. The Northern Californians got married at the 17,500-foot base camp on Mount Everest. It was a dream fulfilled for the adventurous couple whose first date was an overnight hiking trip in Yosemite National Park. It took them eight days of hiking just to reach the wedding location. I've said it before, a good marriage is hard work. In this case, it's hard work even before the marriage. Competing muggers tried to rob the same bus. The gunfight erupted on a Mexico City bus where competing muggers ran into each other as they robbed passengers. They killed each other. You know what? All muggings should end this way.


All right, to find your Google Business Profile link, what you're gonna do is you're gonna go to google.com, then in the upper right-hand corner, if it says sign in, you're gonna sign in with the email that you used to set up your Google Business Profile. If there's a picture up here, or your company logo, or your first initial of your first name, my name's Nathan, so it'd be an N up there.  So you just wanna make sure you sign in to Google with your Google Business Profile email that you used to set it up. In the search bar, you're gonna type in my business. Once you get to my business, there could be some ads up here, but just scroll down until you get to the section where it has a little button that says view profile.  From here, you'll see this little carousel down here.  And then right here is your link.


Thank you for being here. I'm quite overwhelmed that this hall is almost full even if it's short after the lunch Thank you very much I'm Mark Leinebutter. I'm with spangotronics and I will tell you something about how to boot an embedded system arm system here from rom code to user space and in this boot process Every single stage will be very verified so that we can be sure after we've booted completely Into the user space that we have an un-tempered system that nobody has done anything about this So why do we want to do a verified boot? Because the Linux system is the Linux ecosystem is big. There are a lot of Targets on the internet a lot of systems that are very attractive for hacking Linux systems for example, have you read in the news some some weeks ago? There was a big DDoS where they used some surveillance cameras that run Linux so Linux systems are critical. They control critical stuff on the internet critical stuff in the industry medical Automotive you name it and we want to protect these embedded systems Compared to servers traditionally on embeddance on embedded systems. There are not They are not that well maintenance as servers, but as I've noticed here on the On this weekend there are a lot of talks about updating and updating concepts. So I hope it's getting better that no old Stainless systems with Linux will maybe out there in the wild and We want to have verified boot because it's a complex software system a Linux a Linux stack the user space the proprietary application that might be on top and It's for sure that they might be some it's for that. They are some Undiscovered vulnerabilities in a Linux system. So you want to build defense in depth that means They build different layers different shells around your Linux system to protect it and a verified system that boots verified and nothing is tampered is One part of it. So I will focus on this in this talk and it's quite easy to do this Ourselves, we don't have to rely on some some vendor or so because there are a lot of sucks around that have the hardware support for doing verified boot and it's at least in somewhere in us it's documented openly and All the software components that are needed for verified boot system are available as open source software So what do we want to protect? I expect a lot of you guys have booted an embedded system. Just give a hand sign who has booted an embedded systems Keep your hands up. Who has booted a? Bootloader that is somehow verified or encrypted Okay, and then next step the chrono Yes, okay, it's getting As people and then who does a verification of the file system And do you do read write file system that is still verified? Okay, not so many. This is what this talk is about So we want to protect the whole chain bootloader kernel find system Programs configuration application data and even be able to do read write stuff on this file system because the etica Can in theory if he has access to the system manipulate of the data That is thought on the system and we want to take tempering of this So as I outlined The boot stages of an typical embedded system it starts with a rom code. It's typically Burnt into or on the silicon itself So processor when it's gets powered on it starts Executes a rom code decides where I want to boot from do I want to be put from EMMC or network USB or whatever Then comes the bootloader. This is typically you would bear box something like this then the device with a kernel and then finally the root file system and we want to secure Verify the whole stages Every single stage the first stage on our systems is usually vendor dependent for this example, we use a free scale or now nxp imx 6 and The hardware the proprietary extension they use in the rom code is called High assurance boot or short hub in in version 4 and it uses a standard crypto like Shah and RSA to do the secure of the booting For the bootloader we use on bear box So the rom code will verify the bootloader and only started if it's verified the bootloader comes with another key in it and will load the Image of the kernel the device turns in a rumfs will check it and will only start this verification succeeds and in this fit image here there is Another public key available that will verify the files in the root file system and if you go this chain from top to down The anchor here is in the sock The next anchor is in the bootloader next anchor for verification In the ramfs or in the kernel and then we booted this we can be sure That the system is unmodified and no one has tempered any files Okay, let's talk with the bootloader If you can change the bootloader of your embedded system, you have Complete control over the system. This is usually what is done on the mobile phones If you want to route it you first put in your your own bootloader If you have it could usually comes from a source that is unprotected like emmc none SD card USB whatever and On modern arm systems the bootloader is not started The very first thing in the first the first thing that runs is a rom code So the rom code has to verify the bootloader before it starts a bootloader and This is done on the IMX series By signing the bootloader with a proprietary tool from free scale and The public key that is used The corresponding certificate is burned into the IMX chip itself so the rom code Verifies first The certificates that comes with the bootloader and then the bootloader is verified With a certificate and the bootloader contains the public key for the next stage So this is how it looks here's a sock the rom code runs first Introduction you burn the fuses into Your sock and the fuses verify the public key that comes with a bootloader. This is a bootloader blob here first the fuses or the rom code verifies that the pub key that comes with this is correct, so You are allowed to boot this and the pub key verifies It's used to verify the signature and the signature goes over the bootloader itself So this is our barebox or you would or whatever, but we use barebox in this example and We have another pub key here in the bootloader that is used to verify the next stage. This is a kernel Because we have to do some configuration in the early user space We make use of the fit image. This comes usually originally from U-Boat this is a Image containing a kernel a device tree or device trees and the inner drum FS and this is all In this one image and in this image there can be several configurations So one kernel and several device trees so that you can use one fit image on a variety of boards if your bootloader knows what system you have it can pick the right configuration from that fit tree from that fit image and and boot this and The fit image can be stored on a untrusted media Like separate partition or even in the root file system if your bootloader has access to the file system because The bootloader will first pick the configuration and then check if the configuration is valid against the public key that is included in the bootloader and then we'll check the individual parts of the configuration and then boot into the kernel and load in a drum FS and The kernel it contains the next public key the key that is used For the root file system Here an overview. So the bootloader has been previously been verified by the rom code the bootloader brings the public key with it and Loads this fit image from an untrusted media It first checks If the signature of a configuration that it chooses is valid Only if this is valid Here a lot here are three hashes of the kernel the device tree in the inner drum FS It checks the hashes if these are valid so If this is valid the public keys valid the signature and the hashes, you know, these have not been modified and You see here each configuration is signed So if you have several Configurations in your fit image, you cannot pick this kernel a second device tree and maybe leave out the rum FS Because the configuration is signed and you cannot modify this So we would the kernel was in it rum FS and the device tree Then the kernel comes up the in it rum FS configures the early parts and Starts the Crypto stuff in the kernel We want to secure Each individual file of the root file system So you can later in the next step do a read write mount of it the root file system Needs to be or needs support for extended attributes to store some signatures In this example, we use x4 for a customer. We used ubi FS. So if you have a flash Chip naked dump chip with ubi and ubi FS you can use it or you have a block media Emc that is represented as a block media. You can make use of x4 We want to protect Every file in this root file system. So what we do and we make use of the integrity measurement architecture IMA of the kernel. This is Mainline in the meantime and The IMA Contains a hash of every file So the contents of every file is hashed and then Stored onto your disk or your flash chip or your media and then extended attribute. It's a security IMA attribute so far if you change the contents of the file you can Detect modification of that file because the signature doesn't match or the hash doesn't match When the kernel accesses a file open Execute or mem app or whatever it will load the extended attributes hash the file and see if the hashes are the same So it can detect modification of it First step, but if an attacker has access to the system it can modify a file and just Recalculate the hash and write it to the media But we want to protect it Don't want to give the attacker a chance to do this So the next step is to make use of the extended verification module in the kernel EVM so we create a signature over all security attributes and This is done on your development PC during creation of the image. So you take again your private key Create your root file system sign every file Yeah, we extended attribute which contains a hash and so you can be sure That the file has not been modified and the checksum of the file has not been modified and The EVM has to be verified against the public keys that comes with the corner from the first stage So it looks like this and an overview in the kernel as a public key The public key verifies the EVM signature The EVM signature verifies the IMA hash and the IMA hash verifies the contents of the file so if you put in our kernel with So far trusted and verified system We can see if this EVM signature is unmodified and then see this hash is unmodified and then see If the file itself the coordinates of the file itself has not been modified This is the first step But if you wanted to read write You cannot recalculate RSA signature because the RSA keys the private keys are obviously not on the system if they were you can as an attacker just take the private key from the embedded system recalculate everything and You're in the system. No one will detect it So what EVM then does is make use of Sharm HMAC. This is a clever way of hashing things And you can then guarantee integrity and authentication of contents but you need a Different shared secret for this for each system because if the attacker opens one system does a modification and The HMAC gets used you don't want that the attacker can transfer a modified file from one system to another system So you need a different shared secret for the HMAC on every system and And we do this on the IMX6 and I tell you later how it is done and The funniest thing is an HMAC because it's just a bunch of hashes can be verified faster than an RSA operation This is preferred if you want to boot fast Once the kernel Opens every file or touches a file it will recalculate HMAC based Verification and write it down Because it's much more faster than an RSA one and The Attica cannot calculate A new HMAC when he has not access to the secret that is used in the EVM How we do this so we have our sock that has been fused and on the IMX6 You have access if you have booted your bootloader correctly signed you have access to a unique key That is unique for every IMX6. So you cannot Transfer data with it encrypted from one system to another This this only works if you boot your system With a secured and verified bootloader Extended verification module. It's a part of the Linux integrity subsystem It's mainline The question was What's it about the fuses how it is done in the manufacturing and what other fuses contain The fuses contain a Hesh of the certificate that's used or corresponds to the secret key that's used to sign the bootloader so you have a secret key and a public key and a digest of the public key is burned into the sock and then It's secured that you cannot change the public key anymore and That the system only boots if your bootloader verifies against that public key Does this answer your question? Yes, you can the question was if you can change the fuses You can only burn the fuses from one to zero or zero to one or whatever I'm not sure but you can only do it once and then you even Have another fuse to disallow the burning of more fuses So you cannot change the remaining bits that can be possibly be flipped you even disallow this so you can only burn that once and even Turn off burning of more fuses even and this is done in the production Of your board in the first steps of testing or you can even automate this in the bootloader You sign your bootloader During building of your board support package then you need the free-scale tool and and access to your private keys You can burn the fuses whenever you want You can after you've created a public-private key pair You create a digest of the public key and burn this into your sock. So this is no Material that needs to be secured only the private key has to be secured. What's going into the fuses? It's just Just a public key or digest of a public key So if we a if we have burned off uses signed our bootloader booted with a signed bootloader the system comes up in a secure way and then you can make use of the unique key that is unique to each mx6 and with this key you can Encrypt a shared secret that is that is used for the EVM and And this is stored somewhere on your on your media You can only decrypted on that system that has been used to encrypt it and you can only Decrypt it if you have booted with a bootloader that has been signed properly So your system comes up in your bootloader System is secure and you have access to this unique key You can take the blob and in the inner drum FS you can Decrypt the blob have access to this EVM secret this EVM secret just stays into the kernel and the root file system if You want to do read write you need this EVM secret that sees if the HMAC is correct and the IMA hash is correct and then the File is still correct. Yeah The blob is the question was how do you secure the blob the blob is Encrypted with a unique key and the key is unique to one special IMX You have only access to this if you have booted with a bootloader that has been signed The question was if I can if you can modify the system if you have replaced the blob You cannot Decrypt the blob Well, if you just use some random data for the blob you cannot encrypt it because you can only encrypt it with a unique key Yeah Yes Then You you create the blob in your factory and you only can create the blob if you have a bootloader that has been booted On a secured system So there needs to be a bug in the bootloader or somewhere else that you have Access and can It's generated in the blue bootloader and then written somewhere and you cannot Recreate it without having a secure system So you cannot just boot over USB then you cannot write a The blob because you have not access to this unique key It's only available if you're on a secure system Secure the Because I can change it then I can try to use the cyber side by text attack to Modify the block to fit The IBM sequence I The question was how the block is secured or is it secured? Yes, the blob is secured by the crypto engine of the of the IMX And It is secured you can only access it if you have You cannot Access You cannot recreate the blob that is No, because the blob itself is encrypted with a unique key Yes, but okay, so what you it's not a it's not a RSA. It's not a yes encryption It's more complicated No It's not secured it's not it is secured by the hardware crypto Yes It's The blob itself is I think it uses an HMAC that runs with a By No, it's uses the the red blob or black blob message This is done by the by the rom code or by the crypto engine so you you cannot if you switch a single bit for example in your blob the Crypto engine would say you have tempered with this blob. It's not a valid blob anymore. Okay, so it's Yes So it's not an AS Yes We can look at the data sheet after the talk of the of the crypto engine of the free scale, so it's not just as encrypted it's a Even if you encrypt with the same keys the same secret data the blob looks different each time Yes, yes, I had to be more precise. Thank you You have access to the blob but you cannot access the unique key You can only tell the crypto engine, please use this unique key to encrypt or decrypt stuff Yes, it's encrypted and To encrypt the blob Signing is just This is the shared secret of the so We decrypt the blob and get the evm secret. It's a shared secret for this HMAC Yes Yes, this mainly protects against offline modification, so Programming probably properly your application on doing user space hardening is a different aspect of the defense in-depth But if you have physical access to the system, you usually just replace your bootloader and are happy and You can store a secret data with this properly. Yes With making use of a hardware random generator hardware random number generator and it's done in the factory still so and The same concept having a blob and this unique key To decrypt something you can put this together and make use of ecrypt FS Ecrypt FS is used to do file level encryption this has The aspect that it works on both NAND Storage naked NAND with UB and UBI FS as well as on block devices because it works layer In an upper layer when it's working with the files So every file in the encrypted system When in the encrypted file system corresponds to a file in the unencrypted to a lower file system The file names and the file contents is both encrypted but the directory layout and the permissions they are in clear text and This requires two different shared secret for each system because of the same aspects with a HMAC you don't want to transfer encrypted data from one system to another and and I'm a and Eva M is not needed because we use or the encrypted as uses a yes in Gallo counter mode where you have both integrity and Encryption in one thing so this Almost looks the same as if uses the unique key a different blob this creates your encrypt FS a equipped of a secret Then the equipped of s does the as of the files in the unencrypted file system and this generates you On a sub tree your Encrypted files and you can for example store your proprietary application your configuration or your database or whatever or even secret keys that you don't want to have in your In your system lying around Question the question was if you can use equipped of s for your whole file system Yes, it is possible You can do this in the early user space in your inner term FS and then switch to your Unlocked an encrypted file system. Yes, it's possible You have to talk to your lawyer about GPL Aspects of this But it's possible yes Yeah, yes It's an overhead The slower your system the bigger is the overhead We make use of the crypto engine of the I'm x6 here It brings I think in boot time like 10 percent Overall, but you get probably more CPU cycles left when you use a hardware On an MX 25 we did some Analysts and it was like Like how much was it 10 seconds from 30? On I mix six it's not that that bad and when you have Re-signed your system from our RSA to HMAC it's it's even faster But you have an overheads Because you boot first in the inner term FS and then switch to your route When you can directly boot in your route, it's the system is faster. So it's Takes some time Doing boots you get a lot of IO because if an application for example system these starts and Just maps in your all the libraries Because the kernel accesses this library normally nothing Not much would happen, but with the IMA every file that is touched gets Completely written completely read in into the RAM and then checked So booting takes Takes longer But we haven't done measurements on I mix six No, I want to show you How it's working On the system here here of my riot watch Hope it's big enough everybody can see and I just plug it in and For simplicity I've put this blobs just here in the environment of the system and I can boot it Put the system and what we see here This is now the inner drum FS and The blobs are read and put into the kernel for decoding and Then here we configure The IMA and EVM so we say Please measure this don't measure this FS don't measure the buck FS so don't check security attributes on all the file systems that are exported by the kernel and Then we say At the end please appraise and measure so check everything and If a signature doesn't match, please Do not allow access to the file Then the system boots and Then we can look in and What I've done. I've created a root file system and X4 X4 file system and there is an application called zip on it and I've tempered it offline and I've Modified the copyright string when I want to execute it Here's some debug enabled it says. Oh The hashes invalid the command was my SH That tries to execute it and it says yeah user bin zip and On which file system it was and it says so the hashes invalid and then you get just a permission denied You can configure what to do here for a customer we implement here It marks a system as compromised that we don't want to try that we don't try to boot it again and Then we just reboot and try different system, this is what the customer thought it would be nice to do so and Yes mounted equipped FS so Encrypted is as well the name of the Unencrypted and as where the encrypted stuff and this is the equipped FS and here Yes, my file and it's called bar It contains through And if I unmount it here's the File the content is bigger because there's Private keys there is some I'm not sure what's what in there. It's a standard equipped FS stuff It's gets blown up to somehow You cannot Get to the original file size to the byte the file name itself is encrypted and the contents As well, I cannot Cannot access it even because it's It has no I'm a hashes When I Crypt it and it's here if you can start it again. Just be mounted again and File is still there. Yeah, that's so far for the demo No, it's up to you. You can try it yourself Get an I mix 28. It should basically work on this on the I mix 53 it should work or Get a QVV get a Q box or a ride board. This is the one I used here and Try to get it yourself working For a customer we have it working on an MX 25 and an MX 26 makes 28 is They decided to not do it. Maybe it comes back again The boot loader we used is just normal barebox current version, maybe the maintainer has Released another one because it's Already 2016 10 maybe It's all made and you just have to Tell the barebox that your boot loader should be signed And you need to download the proprietary Prescale tools to do the actual signing The kernel is a 4.0 with some patches on it and For offline signing of the image. I used e2 of s procs plus patches for the X4 and I'm a EVM who teals. These are the tools and you need some patches for these two the patches for the MTD who teals if you do UBI FS our already mainline and All the stuff is integrated with ptx this but you can do it With your own With your own board support package generator like your door All the components are Really available Yeah, what's missing? They have been patches around or they are still around but not mainline to protect Directories what you can now do is I'm a EVMS you can take a file from one location Of this system and move it to another location of this system Because the directory is itself are not protected these patches are somewhere on the mailing list but not mainline if you want to pursue it Contact us or try it yourself Then we have to do the mainlining of the image crazy process the patches for the e2 of s procs and the EV I'm a EVM oteals and the drivers to Decrypt and encrypt the blobs on the IMX 6 they are not yet mainline and Support for MX 53 is missing should be possible as well because it's generally compatible and maybe some other vendors have Crypto extensions or secure boot extension like this Maybe we need some more documentation you can probably use it's on the on the TI Yeah Now we have been in this project for I think two years and the lessons to learn Just for development sake put your development keys in your board support package that everyone can can build a root file System and a bootloader and just play with it every developer that wants to The keys that I use in production you can Not put it into your BSP because this these have to be protected, but you can make use of Cryptographics stunts API PK CS 11 That all the tools can use to read them You can put them on a smart card or even on a hardware security model. That's Somewhere on the network or make use of some vendors that do That have software Hardware security models that you can access over the internet with complicated schemes or whatever and What's really handy for development is that you have some packages in two configuration For example the bootloader you want to have the bootloader that you can log into have shell access maybe even can read out the lock from the kernel and do booting from from NFS routes just that the developers can work and the guys who want to debug and Just have a different bootloader different bootloader configuration. That's all secured. No interaction. No state. No environment With your production keys Just keep that separate that you can that your developers still can can work and still can be happy and are not hindered by the bootloader and You can do this also for the kernel and maybe one corner that Reboots as soon as a security violation is detected and another colonel just says, oh sorry permission denied there was a problem with the security and During integration what turned out to be really good is that we Regularly turned for every release some of the security features on Just step-by-step by step Just increase the security level of the BSP that was used by our customers and And Because once activated When you get a field return, it's really pain in the ass to debug these you have to be You have to keep this in mind It's it's really makes no fun if the system is all locked down and you cannot access it anymore and What we've seen that you be IFS with email and even it really doesn't like when you have sudden power loss if your customer says oh My my clients they just turn off the power You be IFS in read write mode. It doesn't like it. Maybe it's a bug in the old corner and the 4.0 We have to We have to do updates and tell our customers to do so Yeah, that's it. Do you have any questions? Yes, it's a arm system Maybe on the arm 64 series that are more so far so far great hardware. Maybe they have integrated TPM layer You can still put a TPM on your on your board, but No, I'm watch Okay, yes, this I'm a EVM was originally introduced with Support for TPM So it was the first that it came first up with a TPM support and then All the other stuff that you need when you have no TPM is Was added Yes, you can do this at least free scale of us this proprietary method to do so We take what we get there and the tools are proprietary And the mechanism is maybe ship windows will listen to us someday. Hopefully We have not debugged it yet So Customized very let's say cost sensitive and Therefore decided to use a naked another a management like EMC then it would be some others fault if the file system Degrades on power loss System It's not dependent on the root file system that delay because You only check the files that are used or opened or touched So you can have a terabyte of root file system, but if you don't access the file, it's not checked So it's not checked the whole file system is not checked on a pair block level on on booting From start to end but only the files the corner checks them when when opening them we're accessing them Sorry for the Yeah In the kernel we make only use of the Or the EVM and I'm a uses the crypto framework and we plug in the What's already main line? The crypto engine is plugged into the crypto framework and if you enable it, it's magically just makes use of the crypto engine the the Sahara is Partly supported if it's not supported it will just fail back to the software for Shah and It's No, it's It's not in the user space the blob is Yes It's in kernel space. Yes In in runtime so that you cannot scan the rum No, actually, I mean, okay, if you love this yes, then you decrypt the blob. Yes Some socks have the ability to when they decrypt the blob to put it directly into their Okay, protected Memory, I saw them when you use the crypto engine It doesn't read the key from either kernel space Yeah To just pass around a handle and then make a shortcut in hardware Yeah, I think this is possible, but you need first support in your crypto engine and crypto hardware It's it's not supported. I think but would be fine. Yes


onths. Some of it was because it was expensive to ship. But setting aside the expenses of shipping, you know how many people try to fake claim those giveaways and how long it took because of the method we were using for it and it just became a big cluster F and it became really difficult to like, de-confirm multiple people claiming the same prize.  This is just the reality of giveaways and this is the thing that makes giveaways so damn difficult to do. If you ever wonder why people use Gleam.io or why we were using Viral Suite before and if you wonder why I'm not using Viral Suite anymore, Viral Suite's 50 fricking dollars a month. I don't know man, it's just a lot of money to just toss away at something that I can do on my own. And Viral Suite didn't always work for people and would cause issues and it just, it was a mess. But here's the thing. Here's the thing I will say about all of this. And that is, look, the bottom line is I've been doing giveaways long enough now. It's been over a year that I've been doing giveaways every month that I've realized that no matter what I do no matter how big or little the giveaways are people are always gonna try to scam.  And then when they get called out or I deny them cause somebody else actually followed the rules and did it correctly.  I'm not gonna say that that wouldn't end up being the scammer and the legit winner didn't follow the rules. That might happen. I can't take responsibility for all of that. I can say this is just how you're supposed to do it and if you didn't do it that way, it's too bad. But my big thing is because I know that's going to happen all I can do is the best I can do. And I just hope that if someone ever gets screwed out of something, like if the real Ben Powers got screwed out of the Switch Lite I hope he doesn't hold it against me cause it wasn't like it was on purpose. I had specific rules and one of the emails followed those rules and that was the email I gave it to. I don't know what else I can do, what else you expect me to do. So it's one of those, yeah, mistakes might happen but it's not intentional. I try my best to make sure every giveaway winner is the real giveaway winner.  And I'm one person, I do this channel all by myself. So it's not like I have a whole team of people that deal with this crap for me, right? Anything that happens at the channel, thumbnails, editing, recording, scripting, research, giveaway handling, package handling, forgetting the packages to the post office shipping, Eric was supposed to handle all of that for me and did none of it. So I've had to do everything. I literally always do everything. Every time other people volunteer to help me, it never works out. The only thing that works out is when I do it. So like I have to do everything.  And this is before you consider the fact that, hey, I'm also, you know, working a different job and raising children and in college. I'm like, God, I'm busy. I think my fiance is missing me, to be honest, because her and I haven't really got a lot of quality time together lately. Thank you for subscribing. Luke Chensniak and Craig Meanie, we also had a membership, um, wait, no, did we? I thought we had a new membership thing. Am I wrong? Hold on, I'm scrolling here. Did I miss a membership thing? I swear. Oh yeah. Major Blazer! Welcome, you are the latest member of the board of directors of Nintendo Prime. Woo, woo, everybody! Thank you so much for becoming the latest member of the board of directors, man. That actually puts us up to 188. This thing is not updating because YouTube is kind of broken. So we're at 188, 12 more to go to our next giveaway. I didn't mean Nate, I meant those pieces of shit, yeah. I mean, that's just, it is what it is, you know? And I think by now, you guys, I think one thing that endears my audience, what was that? Was that a Super Chat? What is that? Someone bought some merch? Wait a second, was that a merch purchase? Hold up, hold up. Did we have a merch purchase happen live on stream? Let me open up Streamlabs. I saw the thing pop up over on my streaming computer, but like my streaming computer is really far away because I don't have my full setup right now. Normally it would be like right here, but I don't have my full setup at the moment. I will by the end of the month. I have a new monitor coming in and then things go back to the way they were during E3. Let me see here. What am I dashboarding it? Someone bought an Nintendo Prime question, question, question, bought one Nintendo Prime hat. Well, hey man, whoever bought that hat, let's go. Merch sale up in here. That's awesome, man. I hope you enjoy that hat. I don't know which one you got. There's different colors. I don't know if you went with white whoever bought it, but that's pretty sick, man. The white one, the white one's super sick. That's the one I've had. I eventually want to get like all the different colors and I want to get all the different colors of shirts and sweatshirts. I don't have the money. I believe it, I have to pay for the stuff too. I don't just get the merch for free. Hey, Ultra Moon Trainer. Welcome, you have become the latest member of the board of directors of Nintendo Prime. Thank you so much for that. That gets us to 189. So again, this isn't updating or 11 short of 200 for our next giveaway. Thank you so much for that. I greatly appreciate the membership and the support and all that because then I hope you guys decide do you want to renew your memberships month over month again because it just shows great support for the channel. And every now and then we have member exclusive giveaways during live streams and stuff like that as well, so. So there's a little bit of extra benefits there. There's technically benefits of the different membership tiers. Probably should pay attention because I think we have two 15 hell of members right now that I owe gameplay sessions to. Probably should find a way to get a hold of them. Actually get those gameplay sessions done this month. Carl, let's see here. Will Nintendo add more Sega consoles to Switch Online? I have no idea. Does the OLED Switch fit in the Satisfy program? Nope. Nope, gotta get all new grips. So one thing I'm going to say that I've noticed, by the way, thank you so much for your guys' support. The fact that we have almost 200 people who are members right now to me is just absolutely insane. I know we gained like a hundred or something on Friday. That was nuts. But like I'm always kind of amazed by the support the channel gets. And I feel like I shouldn't be but I guess I never want to lose that humble factor of just being shocked. I mean, over $100 in Super Chat tonight, someone just bought a hat. We have 100 and whatever, 86, 89 members. Like it's insane to me. This doesn't even count like the 25 to 30 members we have on Patreon. The community support is big. It means a lot because it's one thing to have your ad revenue, but one of the community themselves want to show love for what you do. That to me is just special because it means that you are entertaining enough or bring a smile enough to their face that they want to support you. And like my channel is not perfect. I made mistakes in my switch. Oh, like I still make mistakes. But I think one thing that I hope has always come through over four years, our longtime viewers can maybe attest to this is one I've grown as a person, as a content creator. Some of the mistakes I used to make, I don't make anymore. At least I hope I don't. I don't know, a long time viewers can let me know in the comments on that. What I think is that whether it was back then or whether it's today, I try to be as honest as I can, as upfront as I can and as genuine as I can. And yeah, sometimes I'm gonna be a little cocky. Sometimes I'm gonna be human and make mistakes. Sometimes I'm gonna say the wrong thing. Sometimes something I say might come across as e-bagging. I hope that hasn't been the case for a long time. I hope I've learned from all the things I used to say. And I feel like it's funny because a lot of the things that are happening now with the channel and it's getting more support than it's ever gotten before at a time that I'm not actively telling people to do it. I'm like, yeah, if we hit 200, it's a new giveaway. But like that's it.  Oh my gosh, you only donated $1? What's wrong with you? I wasn't at 20. I was watching how some people, so I always feel like that maybe that's why I have such a loyal, like some of the fans I've had around for a long time, they're so loyal because I'm not perfect, but I'm not gonna purposely lie to you guys about anything. Nothing I tell you is gonna be a known lie unless I'm planning a surprise.  Like I wanna lie about something because I know something big is about to happen.  So then that's like a lie for a good reason. I don't know.  All right, let me give that to you guys who are sitting in the chat here. Thank you, Alex Arias. I love Nintendo Prime's content. You could check my likes in some time, but honestly, I was telling the people who were trying. Yeah, yeah. Dude, I understand what you mean, Brandon. You're all good, man. Don't worry about it. Don't worry about it. It was just because I read your comments out of order. So that's like, don't worry about it. We're all good, man. I was never mad at you. Why do I have the Nintendo Wii photo back? Can you guys just notice this? Hey, it's the Wii, baby. And it's the Wii Mini.  Mini Prime, I didn't even know. I didn't even know I had a picture of the Wii Mini on my computer. So here you go. Here's the Wii, the Wii Mini. I didn't realize that I had a Wii Mini in my photo album. That's good to know. I wonder how long that's been up. Um, I've been around for a year and a half. Something like that. Nice, man. I dig you.  Sometimes cloud your judgment. What if you are wrong? Yeah, yeah. I mean, I try. The one thing I've been really forcing myself hard in like the last year, from last September to October this year is being like, look, I got my personal life. I got my kid. Let's kind of set that stuff aside. Like, they're big parts of my life, but that's not. Sometimes like the drama of real life I would sometimes bring into the channel in the past and that is something I've definitely tried to be like, no, we're here to talk video games. We're here to have fun.  You never heard of the Wii Mini? Huh. That's okay. It didn't exactly sell well. Let's just put it that way. You're not selling Wii's? Damn. How's your day going? Hope it's good. What's with the Wii Mini? I'm not. Nothing happened with the light giveaway. It's over with it. The person already received it on Sunday. So I don't know what you're talking about with the light giveaway. That was last Friday. Move the loss one and a half. We keep you concentrated on entertain. Let me see here. What else we got? So that's the photo it was on. There's Skyward Sword HD. He breathed a lot. See, this makes sense. Some of these make sense. I don't know why I haven't diminished cap. That's a really old thumbnail. Holy crud. Yeah, that's the end of that. There's some patent pictures.  Podcast. Heck, this is before I even paid for the podcast logo. Let's still have the preview, preview, preview all over it. Yeah, I love this photo. I love that photo. I'm gonna do that one, rough the wild two. I'm gonna do that one up. I like that one. I like that street shot a lot. Dude, this is gonna look insane on OLED, by the way. This image here, I should probably just go on YouTube and watch the trailer. God, I bet you the trailer looks phenomenal on the OLED. When did that get me? I really like your content. It always makes my day and week.  Here, we make a full scale movie out of it. Dude, well, you know what was funny? So earlier today. Earlier today. I try to read every comment on my videos. I don't always get to everyone, but I really try hard to read every single comment. So I did my news video this morning, where I mentioned I was probably going to be live streaming tonight, right? I put my live stream schedule for the week at the end of that video. And I mentioned I was gonna be live streaming tonight. And there was someone who said to the effect, like, after last Friday, I'm never gonna watch a live stream again. And I kept wondering, like, so I remember everything that happened last Friday. People think that I was intoxicated out of my mind and hungover, one, I didn't even have a hangover. I kind of hate that I can drink that much alcohol and be okay the next day. I hate my body because it can handle so much and that's just not good. That's not healthy that I can handle so much. I don't think it's healthy. But the bottom line is I was fine and I knew I'd be fine. And I was fine the whole time. I wasn't even tipsy going to bed. I never once got tipsy, that whole stream. There was a moment that I was feeling it after that tequila and I started slurring my words a little, but then kind of, I don't know if you say sobered up, but, you know, it started feeling fine after a little while. The thing is, I wonder if the people who say that are just disgusted that a grown adult man is drinking on a live stream. Cause I can't think of anything I said that was bad.  You know what are you gonna do? At least that's what Yulia said. I don't know, I haven't been able to find it, but Yulia claimed that my butt crack showed a couple of times. And I could understand that if I turn around or something like that, maybe you see the top.  It is what it is, you know. Yeah, I just don't know. I always wondered like what would, I thought Friday's stream was phenomenal. Not, and I'm not talking about, cause it's a super chat, it's a 1200 plus viewers. The chat was just popping off like crazy. I'm sure there was a lot of people in the chat cause it was moving so fast I couldn't read it all. A lot of people probably just e-bagging for giveaways, but I don't know man, it feels weird when I hear like what I felt was like one of my best streams of all time. And all of a sudden, after the stream I'm never watching you live again. And I think I responded to it with something like so you don't like who I am. Okay, cool. Because honestly, like on my live streams I swear I am more myself than any other piece of content I do. And I mean, I shouldn't say that. Like when I'm more serious in my news videos that's still me, but that's only like a part of me. I like letting myself get looser, you know. I like popping off, I like hitting the air horn going. I like having fun, you know. So I don't know. Not everyone likes to have the same kind of fun I do. Yeah, there was crack, yeah. And again, I never found it, but I'm sure it happened. It is what it is.   So what's the problem? Is the volume good in the OLEDs? It's my ears, it sounds exactly the same. What happened to the Switch Lite giveaway? What do you mean what happened to it? Why do you keep asking about it? Nothing happened. It was given away last Friday and the winner received it on Sunday. I thought you were auditioning to take Chris Pratt's role. He's probably saying that because he is mad since he didn't want the giveaway. I don't know.  And now to that I say, hey, it's free and that's kind of the brakes. I think people get angry because they don't think I'm being considerate of their time. And to that I say, go ahead and get angry because you're not being considerate to the fact that I just spent $400 plus shipping to buy someone a Switch OLED. So yeah, if I'm gonna spend the money, I'm gonna decide when I'm gonna do it. And if I'm having a massively successful live stream, why would I wanna shoot my load early, right? Like why would I wanna do that? Why wouldn't I wanna wait till towards the end? So it's one of those situations where it's like, yeah, I can respect your time but can you respect the fact that I'm shelling out a shitload of money for somebody? I spent more on that stream than that stream made. Think about all those super chats we got, right? We give away a Switch Lite and a Switch OLED. Well, there are 650 bucks right there. Streamed it makes 650 bucks. But there's $650 right there. Then I gave away a $99 E-Shop gift card. That's $750. Then I gave away a $50 E-Shop gift card. That's $800. And then a $20 E-Shop gift card.  That stream didn't make that money back. So it's like, the stream was costing me money the more it ran. So I don't know. People just, people are selfish. They only think of themselves. They don't think of the person who's doing it and think that I'm just being a selfish prick about things and it's like, dude, I'm the one spending the money, man. You don't wanna wait, then don't wait.  You see how many people are here. You see how low your chances are of winning.  Or four or five people won something. You know, on Friday, that's a pretty low percentage of people compared to how many people were there. Still better odds in the lottery, but still better odds in a lot of other giveaways, but still, you could tell. You know what I mean? He has a lot of people here. It's not really worth sticking around. That's a choice you could have made. But I don't know. I think it had more to, I see people get really upset that I drink on live stream and I just go, I really don't give two flying fucks. I drink, get over it. That's actually a great argument there. The more the stream went on, the more I gave and it was not before. Yeah, I mean, to be honest, if I would have just gave away the Switch OLED like an hour and a half in, that probably would have at least broke even. But I did. So, what are you gonna do? You give so much back to keep upgrading.  And like, I still wanna get a new camera. This camera is not really the right one that I want. I wanna use this one as my down shooter. I basically wanna have it permanently affixed like to the ceiling here as a down shooter and then have an actual pro grade camera. There's a lot of things I wanna do. I wanna upgrade this TV back here, which it's fine for what it is, but I wanna upgrade it. No, there's a few things. I'm good with the computer now. I got a sick monitor setup coming, so I'm good with that. I need to get a new capture card so I can take two camera inputs instead of one. This, I think I'm gonna be fine. I do wanna get a new external capture card, but for now I'm okay. I just wanna get a new internal capture card that can take two camera inputs. But yeah, there's a lot of things that I wanna do. Reality is, I just bought these lav mics. This is a $100 lav mic. Where's it? Right here, it's hidden. $100 lav mic. Like, I don't know. I'm always trying to upgrade my stuff and make it look better and sound better and do everything I can to be better. You like the fantasy football. I'm in three fantasy football leagues, so yes. Let me see, how did I do this week? Let's find out. First off, did they ever play that game tonight? It was rain delayed in the dome, which meant the dome was leaking, so that's fun. And Justin Herbert, good for you, man. Justin Herbert's having a good year. All right, so, let's see, that's a win. Well, okay, so I also co-managed one of Eric's teams. So this was a win for me. DJ Moore just went freaking off, that's awesome. Anyways, all right, so that's a win that got me to even in that league at two and two. Let's see here, Eric's team, did he win? Eric won. Thanks to Justin Herbert going off, sweet, good for him. So he won, let's see here, and then where is my... Then I have one on Yahoo Fantasy, I manage a bar league. And I lost, I think I already knew I lost before today, though. It doesn't help that I had Logan Thomas in who got hurt, then Joe Mixing got hurt, Chris Carson barely did anything, so I just had a bad week. But that's all right, two out of three ain't bad.   Got two hand that beast.  Cool. Well, I just hope you guys like checking out my A's. You all know that kid from Ryan's world or whatever that makes videos for all of our little siblings and kids? Yeah, I think Nate could be a cross between them and Mr. Beast in the future. I hope he grows big them in Mr. Beast. My God, you know what I'm gonna be like? So I have some crazy ideas. So like Mr. Beast has a whole bunch of channels. He does like the Mr. Beast gaming channel. And he's like, you know, hey, the winner of this will get like whoever can do this and X amount of time and get like 10,000. Like I have like a cool, some really cool ideas like how to do this with Nintendo games. It's like Minecraft is cool and everything because he does a lot of Minecraft ones. But there's like some really cool things you can do a super popular Nintendo games where I can offer like massive prize money pools that would just be insane.  But I don't have the kind of money to be like, hey, why don't you come compete?  And the winner gets a hundred dollars. And it's like, that sounds cool. I don't know that it's gonna draw attention on YouTube though, you know, right? Like it's gonna have to be something that draws much more attention than that. I have an extra Elgato HD 60 S if you want it. Now that's cool, dude. I have an Elgato HD 60 right here. It's not the S one though. I think it's the one before the S. I do, I've had this Elgato HD 60. This dates back to when I was a teenager, I think. Oh my God, I've had this thing forever. It doesn't work as well as I want. So there's a couple, so one, I don't really like Elgato products at this point. The Stream Deck is fine, but like most of their products are just really letting me down. There's a couple internal capture cards. I could take four inputs that I thought about getting because I could literally run two cameras in plus my switch. That would be really cool. I don't know, man. There's nothing that's really exactly what I want because what I really want is a four port input where all four inputs on the capture card are 4K 60. So then I can run two 4K, two to three 4K cameras in or two 4K cameras, my switch or future Nintendo platform, be future proof there. And then also a PS5 or something else in as well. Like I ideally want something like that. It just doesn't exist. Like the best one out there, let me see. Max device internal capture card. I think it's four and it's all 1080p 60. So like this one. So this Maxwell PCIe 8x2 channel. So this is the one that I want. I think. So this is a PCIe 8x2 channel 4K capture card from Maxwell. Forza resolution up to 4K features two HDMI. So this one just says two HDMI inputs and two loop outs. That's $1,800 for that. Isn't that insane? And it's still not enough. Still not enough. So like there's four port ones but they're all 1080p 60 and I want better than that.   Why do I have to have the most complicated setup on YouTube? I'm not even, you guys know how complex this setup is. You guys have a fundamental understanding of what it takes to do the show I do. It's insane. Two computers, right? So you have two computers. You have a main shooter camera that's, you know, whatever, some sort of distance away from me, it is what it is. Obviously you have the desk setup here. You have an audio interface here so I can use lab mics or other mics right here on this set. This audio interface has to be run with multiple extenders across the room to the main computer so it can actually record the, you know, complete audio in the highest quality possible settings.   I have a third backup computer down here in case this one shits the bed. I can still turn this one on and run this damn screen at least so it's not blank back here.  I got a rotating background thing that we have to manually remove. Ideally, I would like this to be a $20,000 video wall someday. But who the hell's got $20,000 to spend on a video wall, not me? So what we have is rotating canvas art.  I got a studio light that is honestly further away than most people would think it is. That studio light is probably 20 feet away from me at the complete other side of the room because I only have one of them and I really need one here and one here. But then I have nowhere to frickin' put them. Ideally they should just be hanging off the damn ceiling but I don't have ceiling mounts for it. The camera I was using for all my Switch OLED comparisons is a ceiling mount phone thing right here that I had to remove because it was showing on camera during my full pan shots for the podcast.   I'm running one, two, three, four, five, six different screens. All of this to make this one live stream happen. And have it all be super reusable to make my standalone videos. It's, oh man, it's just a lot. I don't know if I've ever sat back and just thought hard about how complex this setup is compared to what it used to be. You know how easy YouTube used to be for me? I used to have a gaming collection on the wall here, a gaming collection. There was my desk right here. I would turn the desk so I could put the camera on a tripod behind the desk, point it at the wall and then I would just stand up and talk. They gave me some beat-em-ups videos where he just stands up and talks in front of the gaming collection. That's what it was, nice and simple. Point the camera down at me so I could sit up my computer, desk and live stream, one monitor, no problem. You know, point the camera up, stand up and go back for the gaming collection. And you know why I stopped doing it? Because everyone does their videos that way. Every single person does. Like, who else has a set like I do? Can you name one person that has a set like mine? I can't, I love practical sets. I don't like green screens. I've done the green screen thing. I don't like it. Like, who else can you think of has a set like I do? But like, to make this all work, because by the way, a lot of the reason that things have to work this way is because I'm by myself.  I'm by myself. So everything about my setup has to be able to be managed from either here or over there or anywhere I walk. Like, have I ever get a, because my ideal is that I want a rotating swivel camera. So I want, basically I want to take this main shooter, put it on a swivel that's a separate camera that will rotate the camera as I walk. By the way, it does exist. It's super fricking expensive. And then as I'm recording, I could walk over here to grab something presented. I also want this desk to be upgraded to a sit-in-the-stand desk. So I want it to be in sitting position like this for things like podcasts. But then like, when I'm talking about the OLED or tearing it apart, I want this desk to raise up and be like right here so I can have a stand-up video where I'm standing at the desk. But I can't right now because I don't have a sit-in-the-stand desk here. And it has to be a stupidly long one because that's a doubly work as a podcast long table. So I have a stupidly complex setup for a YouTuber my size. It's insane.  But I feel like all of it leads to better quality. It's weird because it's all set up in a way that I need to do minimal editing on my videos. Some people might prefer I do more editing and I agree. I would like to do more fancy editing on my videos. I don't have time. I've already explained I have another job full-time college student, full-time parent. I don't have time. So I have to manage my time efficiently.   It's insane. I'm insane.  I don't think there's anyone else who does what I do. The way that I do it. The way that I do it. I've literally sought out so much advice for how my setup works. And everyone's like, what are you trying to do? Wait, you're by yourself? Don't you have someone in the control room with a mixer handling this or handling camera flips or this? No, there's just me in a room by myself. Shout out to Adam Buddies. Thank you, Adam Buddies for the five dollars. You think I didn't see it? I saw it. I don't want to get my little tangent over. Sometimes it's good to get it off your chest. Just how like insane my setup is. Shots. You want me to do shots. Got it for you, buddy. I am doing cap shots tonight. So I got you. I got a shot for you. You're insane. How many new members joined during the old giveaway stream? 108, I think was the grand total. The most we've ever had in any single stream, that's for sure. We didn't even gain that many during E3. We hardly gained members during E3. We actually lost members during E3. But we're actually at 189 right now. We have three new joined tonight. Who knows? Maybe we'll hit 200 by the end of the week. We still have tomorrow's, hey! We smashed stream tomorrow. So I'll do that one with you next week. Yeah, just doing cap shots.  You're insane. Like a pro also, I'd say. Nobody broke down the OLED like me. So I have one debate left with my OLED. I technically have not done a total tear down. And I know spawn wave and others are going to do it on day one. So I have this internal debate since I have this access to this platform.  I'm going to take this whole damn thing apart and I'm going to do it now. And I literally take every component apart not knowing what I'm going to break or whether or not I can get it back together.  I just did it with the doc today.  Because I have a unique opportunity to do something no one's ever done. Probably Wednesday. Probably, I'm just going to be honest, I'm probably doing it on Wednesday. I just, I know myself. It's a unique piece of content.  So why am I afraid to do the content? I have a new OLED coming on Friday. Worst case scenario, I fundamentally break this thing and then have to wait a couple of days to do content with it again.  I don't even know. Don't do it, do it. You already, I mean, it's going to happen on Wednesday. I just already know.  This is my last chance to really do this before other people get their hands on it.   Maybe even get the good camera on it. Damn it. I know I'm going to do it.   I know I'm going to do it. No. It's okay. It's okay. I'm confident in my abilities, but, what's up ginger? How's it going, man? What are the box dimensions? Tiny and tiny. I don't have the dimensions in front of me and I don't have a tape measure. But there's the switch OLED, there's that. So it's like switch OLED stack twice with the dock. And I would say it's like two of these wide. So like, it's four of these. Imagine like four of these, like one here, one here, and then one behind it, one behind it. That's kind of the boxes. It's tiny. Like here is the, here, for comparison's sake, here's the version two box, which is essentially exactly the same as the original box. Here's the switch OLED box. So you can see switch OLED box is smaller and it's, although it's slightly wider, like ever so slightly wider, but it's a smaller overall box. So it's small compared to the original. Well, this is obviously not the original box, but you know what I mean, it's small compared to that. What are the box dimensions? Oh yeah, I don't know the exact dimensions. How did you get that before launch day anyways?  A stork just kind of flew in with its wings just fully spread wide. And then I don't know, I think I hit it with a BB gun. Maybe it just happened to drop one of these son's bitches right in the middle of my driveway. That's how I got it really. Poor little stork, I'm pretty sure if I shot it with a BB gun I might be in jail. Is it illegal to shoot storks with BB guns? I don't have no idea. We don't have storks in this area, so I have no idea what the laws are for that. I know I'm not allowed to shoot the thing with woodpecker, okay. Our house keeps getting packed by the same three woodpeckers and I'm not allowed to shoot them with BB guns.    Not a damn. I know I believe in animal rights and I believe in like trying to like, but I'm sorry, you attack me.  Laws be what they are, you know? Cost me money. And I've tried everything to get rid of those damn woodpeckers. I've tried owl statues and I'm just gonna have to go buy an owl. That's the key. Buy a damn owl and just release it and let it go to town. Let nature take its course by forcing it to take its course by bringing a predator right to my yard. Well, there'll be a discount for Black Friday sales, probably not. And it just gotta let you know you're awesome for the simple fact that you're honest, thanks. Appreciate it. I think that's gonna do it cause I gotta wake up early. Well, I gotta wake up early every day with my kids but I actually have to stay awake. I can't go take a little power nap after because as soon as my kids get on the bus I gotta get my stream all set up for super. Smash bros, ultimate. Sakurai presents 40 minutes. We'll be going live a full hour before the event starts and then we'll obviously watch the event together, react it together and then, you know, probably close it out 20 minutes after the event. I plan to be done streaming depending on what happens with the event. I plan to be done streaming, you know, it's basically like a two hour morning stream. I think tomorrow's also podcast day, right? Yeah. So we have some of the podcast tomorrow. So we'll see if I even do any other videos tomorrow. I might just be too busy because the time I use the video I'm gonna be reacting to Smash bros. A couple Hawks. Do that spiders live in my apartment, kills everything else. Nice. That was a good one Paul. All right, thank you guys for tuning in. You guys are awesome. Thank you for all the support tonight. We had over $100 in SuperJax and I really appreciate that support. We had a handful of new members. We had someone buy some merch tonight. That's really cool. I love the merch and I hope you guys love it too when you do get it. I'm trying to make sure it's high quality merch. This, I mean, this is sweet. So I'm pretty happy. You guys have a lovely evening. Good night. Hopefully I'll catch you guys at our Smash stream tomorrow.


Hi, I'm Kathy. I'm the fruit project manager at NDSU's Carrington Research Extension Center and I'm going to prune this tree today. I just have three tools. I have my loppers, which is just nice little 24 inch loppers.  They're bypass hand pruners and I use them every day. I love them and I would encourage you to get the best that you can buy. You should have these for the rest of your life and even though they're a bit expensive when you first buy them, a good quality tool is just a life saver when you're pruning. Also, in addition, a sharpener. You want to keep your tools sharp so keep a sharpener around for your tools. Hey, I wanted to show you how to sharpen your tools.  Just going along with the angle that's there, do it a few times and then turn your pruners over and on the flat side of the blade, make a very shallow rub, just rub very shallowly along there to take off any burrs and then your pruners are ready. This is my neighbor's tree and it has had kind of a hard life.  I just want to show you here that this would be what we would call a stub in that there's no active growth here, there's no active buds for new growth and it's just going to continue to have little tiny shoots come from it and we're just going to remove this. My neighbor wants to be sure that he continues to get apples from this tree so we can't do all the corrections at once but we will do some of the corrections today and then maybe continue on next year with them. The first thing you should do is get rid of the things you really don't like about your tree, you want to remove all the branches that are heading downward, you want to remove the branches that are straight upward or they point into the tree, anything that annoys you at first. So let's get rid of these low branches so that my neighbor can mow around his tree a little bit better. I'm going to start right over here. This is the area that I'll be cutting on this branch and I want you to notice that there's a branch collar, the branch kind of curves out kind of like a funnel shape where it comes down and then becomes narrow. That's where you want to cut. You don't want to cut close to the main trunk because you're cutting too close, you're cutting off too much tissue and it'll have to heal too much. But if you cut right here, it's right at the junction of where the wide collar is and where the branch is, just like that. I'm going to take off this whole branch, it's very low, bothers my neighbor when he mows and it's been cut up pretty well. It's not going to grow very normally anymore. First I'm going to cut this branch shorter because where I really want to cut is right here, but I don't want to let the bark tear. When you cut a bigger branch it can fall down and then you just don't want that bark to tear because it'll leave a big wound, disease could get in there or something like that. I'm just going to cut these off shorter so that there's less weight on this big branch. So here I go.  I'm still going to make a cut underneath, it breaks the bark so that then it won't tear. And I'm making sure to stay outside of the branch collar area. There you can see we've made a pretty nice cut. So that's what we say when we don't leave stubs because they will die and it's a source of infection for the plant. Don't paint the wound, don't put tar on it or anything. Just leave it healed naturally and the tree will heal it up. Alright, here's an example of a branch that is crossing over from the direction it should be growing. It starts over here and it's coming all the way out here. You can tell this whole tree is not structured very well, but we're just going to do our best. And I'm just going to remove this as an example of a branch that's crossing over and not growing in the proper direction. I'm taking it off here first and then I'm going to take it out at its point. You might think that's a little high, but that is where it is joining with this other branch and we'll do that there. And then I'm going to take off this branch here. It's underneath, it's really shaded, it could get diseased also. And it's just in poor shape. So this one's going to go. This one is pointing downward. And here's another example of a crossing branch where we have the main branch here and then this one's growing on top of it like that. It's going to get rid of that. And while we're at it, get rid of all these other ones that are up here. Growing downward, growing outward there, at a bad angle, some dead stuff in here. And we'll just continue to do this, try to remove things that are pointing downward, straight upward, or crossing over and shading the tree a lot. We just want to open the tree up a little. All the branches are very close together. There's not any airflow in between here. And right behind me here, you can see that there's no air in this area and this branch comes out and then leans across this other branch, which is kind of a main part of the tree. So I'm going to remove this part here just to give it a little more air. I'm just going to use my saw. I'm going to look for the branch collar. There, you can see it's nice cut on the branch and there's this nice collar that's left on the tree for it to heal. And you can see what a big difference this is going to make for this tree to let that air in there in sunlight. We like a lot of sunlight in the trees because it helps to turn the apples red in the fall. On this branch, it's kind of an important part of the tree. My neighbor does want to get apples off this again. But look how this crosses like this. This is a pretty important part. This could be an important part, but what I'm going to do is cut off the top part and this is the part I'm going to allow to continue to grow. So now this apple tree is going to follow the branch that's left here, so it's going to grow out this way. All right, here's our tree. This is pretty much pruned. I've taken a lot out of the interior and whatever's been hanging down. I'm going to show you the pile of sticks. It's right here. That's quite a nice pile. And then I'll give you another shot of the tree. This is how it looks now. And there's my neighbor, Bob, whose tree we pruned and I hope he's happy with it. If he is happy, I'll get a couple apples this fall. If not, no apples.


The automated software called Metabat, which integrates empirical probabilistic distances of genome abundance and tetranucleotide frequency for accurate metagenome binning, outperforms alternative methods in accuracy and computational efficiency on both synthetic and real metagenome data sets. This article was authored by Don Juan de Cong, Jeff Frola, Rob Egan, and others.


Hello friends, let's work out the following problem. It says using differentials find approximate value of the following up to three places of decimal. The given number is 3.968 to the power 3 by 2. Let's now proceed on to the solution and let's define y as a function of x. Let's define y equal to x to the power 3 by 2 and here we take x in such a way so that we can easily find out the square root. And since we need to have x plus delta x is equal to 3.968 we take delta x as minus of 0.032 so x plus delta x is equal to 3.968. Now we know that delta y is equal to f of x plus delta x minus fx so this is x plus delta x to the power 3 by 2 minus x to the power 3 by 2. Now x plus delta x is 3.968 to the power 3 by 2 minus x to the power 3 by 2. Now this is 3.968 to the power 3 by 2 minus 4 can be written as 2 square. 2 gets cancelled with 2 and we have 3.968 to the power 3 by 2 minus 8 so this implies 3.968 to the power 3 by 2 equal to delta y plus 8. Now we know that delta y is approximately equal to dy and dy is equal to dy by dx into delta x so delta y is equal to dy by dx into delta x. Now dy by dx will be 3 by 2 into x to the power 3 by 2 minus 1 that is 1 by 2 into delta x and delta x is minus 0.032. Let's now substitute the value of x so we have 3 by 2 into 4 to the power 1 by 2 into minus 0.032. Now square root of 4 is 2 so this is 3 by 2 into 2 into minus 0.032. Now minus 0.03 into 3 is equal to minus 0.096. Now 3.968 to the power 3 by 2 is equal to delta y plus 8 now delta y is minus 0.096 plus 8. So this is equal to 7.904 hence the answer is 7.904. So this completes the question and the session by for now take care have a good day.


So I'm going to be talking and giving you a brief overview of the current available and the next generation of space-based data and mapping technologies that are helping bushfire management to better prepare and respond to bushfires. So well, unfortunately, I said I will go to take you to space, but I cannot do that. And anyway, I'm not sure you prefer to be at home or at the space of the now, but then we already have ice in the skies. So there are a lot of satellite instruments that are imaging our planet and are helping us to observe and understand the earth processes. So this animation here is from the NASA's the United States Space Agency fleet of Earth Conservation spacecraft. And currently the satellite instruments such as these ones here in the animations and other instruments launched by other international space agencies issue an immense amount of data. So terabytes per day, so that remotely sends experts like me profess and convert into useful information or products that are useful in decision making and planning. So when it comes to bushfire management, this basal right of data collected from space can be used to inform different phases of fire management. So in a nutshell, this slide showed that before the fire remote sensing data can be used to monitor fuel condition, which will affect a fire danger likelihood, for example. During the fires, we can use remote sensing data or satellite data to identify areas of the land with with anomalous high temperatures, or to visualize smoke, which help to detect active fires. And also also to know how this the fire will spread based for example on the fuel condition and the weather conditions. And this information helped to most efficiently direct a separation and evacuation decisions. So finally, after the fire, a remote sensing data can be used to assess the fire stand, the mission from the fires, and the impact in terms of fire security, and also to tell us how the vegetation is recovering after fire. So moving to the applications of satellite data to assess a profile conditions, the main objective here is around estimating fire danger. So this is the risk of bushfire occurring. So a good fire danger rating system is a very important as it supports a range of critical decisions such as pre-positioning firefighting resources, issuing public safety warnings and information, or limiting the potential of emissions through the use of total fire bans. And we know very well what this means as we've been going through these total fire bans very often here in Australia and sometimes it prevents us to do that barbecue we wanted to do.  So under this complex framework, remote sensing data is mainly used to estimate a fuel condition. And in case you don't know what the fuel condition is, I will explain now. So fuel is all life for the vegetation that accumulates over time and therefore can potentially burn at any time. And its condition includes moisture content, structure and quantity or load. So all these components of fuel condition affect the plamability of the landscape, and therefore the potential severity of a bushfire. So for example, thinking about fuel structure or the arrangement of the fuel that is separated is the fuel that is separated is less likely to carry a fire than a fuel that is continuous and packed. In addition, more fuel means larger flames and greater fire intensity. Finally, when fuel is high, there is less chance of a fire emission than if the fuel is low, fuel moisture is low if the vegetation is high. So let's start with the fuel moisture content. There are various methods that have been developed to estimate this variable from remote sensing data or data collected from satellites. And I'm going to try to briefly explain why this is possible because I thought perhaps some of you were curious to know the physics behind this. So well, when the solar radiation hits the surface of a leaf, a part of it is absorbed, or there is transmitting to other layers in the plant, and most importantly other fraction of this incoming solar radiation is reflected from the leaves surface back to the sensor that are on board of the satellites in the space. This fraction of the solar radiation that travels back to the sensor is called reflectance and is represented in this figure in the life. So basically this figure shows the reflectance for two plants with different moisture content. So you can see there are big difference mainly in this region here of the spectra. And this is because the water in the leaves absorbs a lot of the radiation in this area of the spectrum. And on the leaves tissue again or the, sorry, in the depending on the leaf tissue water content, the reflectance is therefore reduced to a varying extent. And based on these principles, we can create algorithms that convert the reflectance measured by the satellite into few moisture content values, and this is happening in near real time. So this animation here presents as an example the dynamics, the dynamic variation of few moisture content for Australia for 2019. And these maps were derived from data collected by a satellite from the NASA that is called MODIS. And this animation show us, as expected, the few moisture content values are constantly low in the desert central areas of Australia. But there are strong seasonality elsewhere. For example, in January, well now we are moving towards summer, we can see how the southeast coast get more red pixels. So now where are we? Hold on. This is September, December. So we are moving to a sour as we move into summer there is more red areas in the coastal area. But as we move into summer, there are less values and the temporal pattern is the opposite in the tropical region. So in the north of the country, higher life moisture contents are observed during the northern wet season that is December to March, and lower values are during the dry season that is a program. So these seasonal patterns of few moisture content have been demonstrated to be linked to far landscape flammability and before far occurrence. For example, unusually dry, fuel and hot weather was one of the factors that explained the high far activity we had in the south is Australia during the last five seasons. So this map, this figure here, for example, shows you the fuel moisture content nationally for the different years. And we can see how in 2019 the fuel moisture content was the lowest in record. When focusing in the southeast forest, these figures tells a similar story. So in black, we see the satellite base average fuel moisture content for the southeast forest during 2000, 2018. And in blue, we see the low moisture values at the same forest, the same forested areas reached during the 2019, the 2020 far season. So anybody can get access to these maps, if you were wondering, and here I show a screenshot of the public website we have developed to facilitate the access to this information. As a quick tour, for example, you can search for any date, since 2001, you can search for any location here and you will have the map of Australia, that date you can zoom in any area of Australia. So as an example, here what you can also see is in black, the areas in black are represented total burned extent reported by the emergency authorities at a given time and the red flames are the active parts as reported. This is basically the same information that you may have seen in the Farge near me, but with this website, we also provide information of the fuel moisture content. So this screenshot that I prepared, I searched for the fuel moisture content maps during one of the days of the oral ballet far in the 25th of January. And as you can see the fuel was very dry that day, and that they may have the intensity of this far. As a comparison, I also included the same, the map of the same day, but in 2011, and you can see a huge difference, so now the map is pretty much blue, that means it has very high values. And again, if we go back to this map, we can see how red everything was, so the dryness of the landscape was high. So moving into a mapping a fuel structure and load. So this is this capture with a remote sensing method that we call LiDAR. The principle behind LiDAR is really simple, it's a lot simpler than what I explained before. So basically the LiDAR is an active sensor or an instrument that fires a rapid pulse of a laser light at the surface and measures the time it takes to return to its source. So as the light moves at a constant unknown speed, the LiDAR measurements can calculate the distance between itself and the target with high accuracy. So by repeating this quickly in succession several times, the instrument can build up a complex map of the surface that is measuring and this is called a point cloud. So up to a few years ago, you could only have accurate LiDAR data from on-ground sensors such as these two that I display here on the bottom of this slide. But nowadays there are satellite LiDAR observations that are great. I am now greatly increasing with the written launch of, for example, the Jedi mission that is an NASA mission on board of the International Space Station. So LiDAR can reconstruct the three-dimensional structure of a forest, providing extremely detailed information of the forest's structure and load. And here I show you an example of a point cloud of the Black Mountain, so you can see the Telstra tower up there. And here, this animation, yes, it's a specific location assuming to this point cloud. And to this point cloud, we have basically run a complex automatic algorithm to classify the different points in the cloud into the different layers of the forest. And then from this, we can start to extract properties of the fuel, of the different fuel layers that are relevant for fire behaviour like the authenticity of cover of the near surface fuel or the elevated fuel or the height of the trees or things like that. By the way, I just take a time to remember you that if you have questions, remember to write them in Facebook and I will answer them when I finish. So apart from using LiDAR, the right information on fuel structure and load in fire behaviour modelling, also the maps are very important to provide useful information for separation of trees. For example, this is a map of the elevated fuel load, derived from LiDAR. So basically in red you see areas with high loads and in blue you see areas with low fuels. And these maps were used, for example, in 2019, you may remember that there was a small fire, a small in comparison with what we had this year, of course, around the square rocks. So these LiDAR maps were used to locate a site free of trees, to win the specially fire fighters in because it was a remote fire. And also it was used to try to pick up the easy line to construct the walking track to the fire. Okay, so now moving into the applications of remote sensing during the fires, the objective here is to use a satellite based data to detect active fires. And determine how the fire is going to spread and also find both what we call soft and hard containment lines. So soft lines, containment lines can be, for example, differential in fuel moisture content. So there is a part of the forest that is wetter that can act like a soft containment line. So when the fire hits that wet area, it may spread slowly and it will be easier to contain. And the hard containment lights normally refer to roads and paths and things like that. So most people may have seen, let's see this is an animation. So most people may have seen these maps here on the right during the last five seasons as they were very popular in the media. So these maps are hotspots. So what it is really is thermal anomalies used to identify active fire. In the Amazon, I have borrowed from Robbie, so as a time series of the active fires during the last fire season. And it's just spectacular to see how the activity grow over time. So one of the important aspects when it comes to detect active fires using satellite observation is the frequency in mimics acquisition. And of course, the more frequently the satellite collect imagery of a specific area, the higher the chances that you will be able to detect a fire as soon as it ignites. So this is an animation. So you on the left, active fires detected by the NASA Modi satellite I mentioned before. This sensor is on board of the Terra and Aqua platforms that views the entire surface every one or two days. So for the frequency of observation, it's a bit limited for bullfire, active fire detection. So on the right, on the other hand, you have the detections by Imawari-8 that is a Japanese geostationary weather satellite. And that the satellite is pointing always to the same location on the earth and therefore offers significant improvements in the frequency of observations. This satellite provides an image every 10 minutes. And therefore, it is more useful when it comes to the spread of a fire, as you can see in this animation. These are other images offered by Satellite, but I'm sure most of you might be familiar with them because they were also in the media during this last fire season. And these images here are from high-resolution optical data over Bayman's Bay during the 31st of December.  Of course, after the fire season, you can use this information about fire activity or hot spots during a specific period to know how the season was. And this slide that comes out of a report on the state of the environment we released a few weeks ago summarized the rank of fire activity by a region in Australia. And clearly shows us that while fire activity last year was below or average across most of the inland due to low fuel loads because of the dryness. It was the highest since at least 2000 in Tasmania, the East Coast and parts of Western Australia. So finally during the first phase of fire management, the objective here is to map the effect of the fire, basically how much area is being burned, in which severity. And then also to compute the missions resulting from the fire and also to look at how the vegetation is recovering after the fire. So in the same way that we can detect changes in fuel moisture content because plants with different water content have different response. Here we can detect fire severity because the reflect or burn area because the reflectance, reflectance spectra for and burn vegetation canopy and fires affecting different vegetation strata are very different. And those difference differences can be used to map a total burn a stand on fires. So this animation show an example of the total burn spent of the fires with Sydney last season. The yellows indeed show the active fires. Similarly as I previously show the time of the acquisition and the black shows the area damage at its time. So using that also from the NASA Modi sensor, we recently analyzed in this report I mentioned on the Australian environment in 2009. We estimate the burn area per land cover to clearly show that the bush fires we just had were unprecedented in the forested environments of Australia. And, and this analysis only included the area burn up to 2019 that was the, the period. But as I mentioned before, fire is not really a binary process. So the analysis of fire impacts require better discrimination of the variation of burn severity. Satellite data can also provide this information. For example, this is some map of the severity of the 50 fire that happened in Queensland. So this fire went a bit of convective on the 18th of November and burn right up to two significant dams, which are water resources for for two areas in Queensland. So we provided these maps, because they help the Queensland fire emergency services to talk to the local council about targeting remediation and efforts to protect the water supply. So basically, it tells you where you need to be more quicker and making remediation activities because the fire has been affected this area more severe than others. So one important aspect of any satellite based maps of any kind of variable is validation. We need to remember that the satellites records on information that then needs to be converted into the collect data that then need to be converted into useful information and for that we use algorithms. So once we derive maps of whatever we are targeting, in this case, for severity, then we need to do validation and these are some images. So some of the observations we took of the severity of the fire, the Aurora Valley fire here in the city in February, basically we flew with an helicopter and we took visual estimates of the fire severity at the same time that we also took photos with a normal camera. And these are the tracks we did during one of the days we flew. So this is the sample of the severity map for the Aurora Valley that we derived using in this specific case. We use data from the European Space Agency's Sentinel-2 sensor that provides imagery every five days at 10 meters as a resolution on the ground. And again, overlapping this map, I have those dots that are the observations we took from the helicopter. So again, once you do the modeling and you have a map, you always need to do some field validation. And here, for example, this spot that is in the green area that this area affected with low severity, we have this picture taken from the helicopter that shows that indeed that area was not heavily affected. We only have a few panopies that were scored. This other dot that is in the yellow area that are medium severity. Here we see that most of the, well, all the panopies are scored. And if we take up dot in the red area, we see how the vegetation is completely gone, so there's no fuel left there. So the fire was more intense. So I guess just to finalize my take home message, I guess, is that the increasing challenging fire management situation are calling for proactive approaches to reuse the likelihood of catastrophic bushfires. I'm not sensing information has already and will be in the future support for management in Australia to providing additional intelligence to better plan, prepare and response to bushfires. But my, I guess my key message is that on top of using better information technologies, governments and individuals also need to take serious actions to tackle the underlying problem with this climate change. So I think that was everything I wanted to cover tonight. I hope you enjoy my talk. And now I'm ready to take questions. Thank you for listening. All right, so we have a few questions already. So the first question is whether in the future, how can we reduce the potential for bushfires? Well, this is an excellent question and that really touches in my last point. So with better information, we can be better prepared and we can better plan and better respond. But we will not stop us to happen in the future. So for that really, we need to tackle a climate change and make a serious efforts to reduce the increase in the future. So the next question is whether there are predictions for the next summer 2021. Well, I don't think we have predictions yet. But it's very difficult to know what is going to happen because in one, as I said at the beginning, fire risk depends on many factors. One is the fuel load, the other is the dryness of the fuel. On one hand, there has been so many fires that the fuel has been reduced dramatically so there is not much fuel to be left to be burned. So on the other hand, the areas that have not been burned may be drier if we still have a dry winter dry spring and dry summer. So it's still a bit early to know what's going to happen. The next question is if more prescribed burns have been conducted in the areas burned last fire season, would the burn areas be low and not have resulted in fires we had? Well, there's a very hot debate around that and the answer to that is not simple. It really depends on a specific case. In the National Ballet specifically, we show that the areas that were recently burned with prescribed burns in recent years were affected with less severity than areas that were not burning the recent years. This has not been observed in all the fires, so it's very hard to have a direct relationship between a reduction of fuel and the effect on the fire severity and occurrence. Will you always need to verify the satellite data or will you eventually be able to rely on satellites alone? Well, that's an excellent question and I think we always need to verify the satellite data. This is in the research development phase.  But again, that initial evaluation is very important to also give an idea of the uncertainty of the algorithm.