Hello, and welcome back to the craft box. My name is Brenton today. We're doing some storm stuff. Hi Rose. Hi Mujah welcome Welcome, welcome. How are you today? Hope you're doing well My instead green That did not fix green Does that that makes green worse? Oh, well, that is fine. We live with green. I guess um, but yeah Welcome back if you have new here and Haven't seen my storm stuff. That's that's great for you Let me explain let me explain so this character is a character We are I have to do a lot of things collect a lot of stuff do a lot of things, but it's all random because that's fun and I have a spreadsheet I Have a spreadsheet it is in a link in the And comment at the top and it looks like this boom spreadsheet We we have we have a whole bunch of things currently and we're on a wizard city We're currently twenty two point four two percent of the way through wizard city We need to complete all of the tasks on this list. There's a lot of them This is 281 of them before we can move on to Crocatopia currently we are collecting either one one of Achilles blazing home stormwrap spotlight resplendent rod the scepter of tribute or the Cyclops statue from general Achilles So we will be fighting him for years to come because he doesn't like to drop anything So yeah, let us begin with this. I hope everybody's had a fantastic day today Yeah, welcome welcome welcome. Let me switch that to live chat and then I can make sure that there's no messages getting lost in my chat Because that would be bad Right general Achilles. Hello. Hello. Let me see what you give me today Hopefully you give me something quickly because we've been stuck on this guy for at least three streams now So I would like to move on to something else if that is possible. Maybe the wheel won't like that by the way, I forgot to mention that once we have completed a task we spin a wheel and Then that'll decide what category our next task will be so yeah completely random Hopefully hopefully we get we get some stuff that isn't defeating general Achilles again and again and again Because that kind of boring not gonna lie. I think this kills. I think from memory From memory also, I'm not allowed to use any crowns or trade with anything or use it as a So yeah, that is that is rules. It didn't even kill. No We're gonna die now. This is so sad.  This is how it works, unfortunately Just how it works quite devastating really Quite devastating Right. Love that. Hello. Bye. Bye.   Love to see it Very good work. We we pop off We pop off Land Oh my gosh rose was online. This is crazy.  Oh my gosh Dude, I've just realized that your name is perfect for this season because it's fall and your name is awesome in game That's crazy. I've only just made the connection and it's because you like Your planning guild house stuff fear fear fear. We have so many spaces now. We have like 200 and something Which is so cool. We can put so many you can put so many things everywhere So many things all over the place It's so good. It's so good. We're not limited anymore And also you can um decorate the inside as well because that's different Oh my gosh the bolt blade. Wow Wow, okay, that's crazy We got it first try Today it looks so good though. Look how cool this looks. Oh my gosh.  Maybe who knows so dope so cool. Hold up. We need to look at it. We need to like wear it honestly I feel like using this because five accuracy Is okay, but if we get an extra pit That could be kind of cool That could be kind of cool. Anyway, let us tick off the bolt blade boom Lovely. We are now up to 22.78 Very exciting and then I need to get the wheel the wheel of pain wheel of pain You had a crafting section in the house, but that's it for now. Hi, um, Betsy. Welcome. How's it going today? How's it going? Are these percentages correct? Let me check real fast Um, I wasn't actually expecting to get anything. So I'm not actually prepared Uh, yeah, we'll do that that should be fine um badges is Should be lower. I can't go any lower. That's called quests Can be one higher Um, that's fine and then Pets can be where it is because that's like bang on the percentage fishing Can be where it is because that's pretty good enough pretty good enough monstrology is about exact crafting is way less than that, but that's fine spells is fine and gardening is Okay, cool, right our wheel is ready to spin Are you ready for this? Let's see. Let's see. What are we getting? What are we getting? Please don't be a boss task. This is so sad I like how it's cheering at me. You can't hear it, but it's cheering at me to be continuing to fight general Achilles before the blazing helm the storm ramps the resplendent rod the sep drift tribute or the cyclops statue Um, so that's dope. That's cool. We have to continue I think this is like the third time that we've got this in a row Rip unlucky unlucky Our our general Achilles curse has not been broken yet. Maybe next time. Who knows who knows? I mean, I'm not surprised because there are a lot more boss tasks than there are any other tasks So it kind of makes sense Kind of makes sense but yeah Yeah, I want to see the house. I am excited to see the crafting section I'm very excited. I might have to visit it after stream and see And see hi Dylan. How are you? Welcome. Welcome. Welcome. How's it going today? Hope you're doing well Hope you're thriving and surviving. We got a new sword. Look at our new sword. It's pretty cool. It's a it's a dagger I can stab people now. I can go stabby stab. It's great. However, the only problem is um We do lose all of the like other hits that we have and also five accuracy, but we get an extra pip So maybe it's worth it. I don't know. We'll see We will see Um I mean instantly being able to kill general archelies. It's quite nice Not gonna lie as long as we don't fizzle, but we were fizzling anyway, so it doesn't really matter 5% accuracy will not mean that we don't fizzle less We'll probably fizzle a little bit more, but it's probably gonna stay the same. I would say Because like 5% means nothing Especially to a storm wizard Especially to a storm wizard. I'm doing good. Got the 10 zenith the zarathax tc's not nine. It was For the raid key not to unlock anything before that. Oh, yeah No, that's just for the raid key and we have to unlock the raid gate before we do that, but At least we got some some tc's now. So that's cool. I can do that as well um Um if I get that can I get that can I get it also What does that mean? What does that mean? Please explain Please explain what you mean by that statement. I'm slightly confused I'm slightly confused. I love this wand. I love this. This wand is great. Oh my gosh This is the best upgrade we've got on this account in forever in absolute ages This is dope. I love this. I love this This wand is epic I don't usually like these types of wands, but this one is epic. I like it a lot I like it a lot dark wool shelf. Nope. Nope. None of that, please We should probably lock this because we need to remember our roots The dagger looks beautiful. Thank you. I farmed so long for it And it was such a relief when we got it. Is there a silver chest? I kind of want to open up as many silver chests as we see today Um simply because it is double reagents and that means double spellements from the reagents Which means my grind later is a not double reagents anymore Oh, it's not. This is so sad. This is so sad It's not double reagents anymore. It's because it's monday I thought it was monday of my time, but it's actually tuesday my time. This is so sad This is so sad. That was the fastest I've ever put that. Oh my gosh. I'm a speed demon today.  I woke up this morning and I am a speed demon now Except I cannot think while speaking It's painful. Um, we need a we need a down and then we need a this boom. Lovely Lovely, let's go easy clap. We got this. We got this. Welcome to tuesday. Yep, it's tuesday Your code is this Um, please do not help me. I don't like help on this character In fact, let me just turn off ports because I don't allow help on this character Um, but you can air me. I will add you Wolf winter rider Who is this character?  Actually, you can help me. You're level seven. You're allowed to help if you're low level If you're low level what you are you're allowed to help so you can teleport to me I only accept low level help somewhere around my level I think it's like I think I said like max five levels above me Which would be level 20 um Yeah But if you're lower level you can help for sure or just come along for the adventure because you're not going to like Instantly one shot the boss with tempest or something. That's kind of out of the spirit of the challenge Um, right. Let me see what we can do here If we do this we can do a storm shark next Yeah, but I hope everyone's had a great day And stuff Sorry, sorry streams a little bit later today apologies. Usually I start like an hour and 15 minutes earlier Um, but I had to I had to come home from work Which I didn't finish work until 1 15 which is like 15 minutes after I normally start streaming and also have lunch And then I scheduled the stream for over 30 minutes In the future because then you get two notifications one when you go live and one 30 minutes beforehand So kind of allows people to know that the stream is going to happen before it does just quite nice. Thanks youtube appreciate it um so, yeah So sorry about the slightly earlier stream my apologies The latest dream I should say But it's not as late as I was expecting it to be so that's good um Didn't know you were streaming today At all so happy to find out you were well I did yesterday that I'll be streaming it was probably just going to be a later stream which it was Um, but not like a super late stream because I didn't do this yesterday, which I was meant to do Um, so I felt bad. So I said last Yesterday when I finished stream that I was stream today Um, yeah, I probably won't be streaming tomorrow Just gonna put that out there probably not tomorrow all the day after probably on friday though But yeah Yeah Yeah, that is that is thing very exciting Very cool. And how did you not fizzle?  Look at what it does Your wand gives um one one power put and also detonate and two smoke screens and a and some flash cool very dope very Um, you did say that I'm remembering now I was probably tired when you were saying it probably probably Probably but that's fine All good. Do not worry I am live I am alive and live and here on youtube.com slash at the craft box slash live Oh, yeah, by the way, um YouTube has like Changed a thing with like links. So now you can go either slash the craft box or slash at the craft box Um, just in case you wanted to know Very cool Very cool and dope Right three two one Let's try again Let's try again and see what we get this time Hopefully we get something we want Such as the Achilles blazing helm or the storm ramps or the resplendent rod or the scepter of tribute or the cyclops statue One of those would be ideal um You've been excited for nervous. I am excited for nervous. I cannot wait I cannot wait for nervous. I want it to be here now I want it to be here now Like right now you can get this one. So yeah, you can it's also in the crown shop But I can't use crowns on this character. So I had to get it through a drop But yeah, you can also get it in the crown shop But you can also get it for free For free from this man's This man's general Achilles. He drops a lot of crown gear Quite a lot of crown gear not quite as much as the raft skeleton key boss, which will be so fun to farm But yeah, I cannot wait for nervous. I'm really hoping oh now I'm fizzling all the time I said that the 5 accuracy wouldn't wouldn't make a difference Now I'm regretting the statement saying and now thinking that it will make a difference Absolutely devastating, but that's fine. Um I'm really hoping that I can Stream it on the day that it goes into test drum. I'm really hoping I can um, but like Actually can because like It's looking a little bit busy It's looking a little bit busy for the start of November Actually, it's not looking too bad It's not actually looking too bad, which is good So I may be able to stream it But it depends it depends on what day it comes out On the first week of November the second week of November if it comes out in the second week of November It's kind of like I'm not gonna be able to stream that unfortunately Third week I could but by then it will be already out if it's not I would be very surprised Yeah You're a low level storm the accuracy matters for the presence For the present true, but also we like to live life on the risky side You know, I don't need accuracy Because I'm either gonna die or not die and either way 5% I was still dying half the time So it doesn't really matter It doesn't really matter in my opinion You know dying is for the content obviously Obviously, I'm getting so many bar pips.  I die for the content not because I'm bad just because of the content Yeah, definitely. It's how it works 100 how it works Kaplan At the end of the day the game is just rng. I'm either gonna win or I'm not gonna win There's only two options and if I fizzle a couple times it makes me not win Well, that was the game telling me that I wasn't gonna win that one. We just got the tunic of disturbance again Which is not actually too bad. We also got the brown wire Which is a mount. We don't go for mounts. I was originally gonna go for mounts, but we don't do that anymore We've got quite a few though, which is quite cool. We do have quite a few we can make a um amount them Which is like a museum for mounts fun fact For the content exactly it's all about that content. Is there any chests? Nope or chests tragic Tragic tragic and sad Sad and tragic crusty toby. I like your name of your pit crusty or crusty remmy. Sorry How did I see toby? Am I blind can I not read? Actually, I cannot read How you got to 82 critical rating when you're just level 15 is from my pet My pet and my my pet was the only op thing that I was allowed to transfer over from another character Well, the only thing that I allowed myself to transfer over Because I can't imagine doing this And also making a pet at the same time Eventually, I'll probably make a different pet because this one could use some work But I decided that I would allow myself to have one mount and one pet from My other characters So I have a mount and a pet those are the only things that I have traded onto this character And those will remain the only things that I trade Onto this character. I'm allowed to trade things off of this character, but not onto this character So for example spellements when I get um Like Death spellements or something Then I'll trade them to my death But I'm not allowed to use the millions of spellments that I have in my In my shared bank on this character because like I could Upgrade quite a few of the storm spells. I could have Most of the lore spells most of the storm lore spells as well But I can't I can't do that. That's this cheating You're not blind because I still accidentally call high lore megas hugh lore megas. Wow imagine imagine being that blind couldn't be me That was funny though. That was really funny. That was really funny. You legitimately thought it was it was called hugh And that to me was just hilarious very hilarious. Oh my gosh lockwork Lockwork coming out.  Oh no, this is devastating This is devastating Go kablam do it. You can do it. I believe in you. That's minion It's minion We have clockwork helper. What is clockwork helper? Oh my gosh balance blade. Hello Hello, we can kill with this lovely Lovely Lovely, lovely, lovely Right gg We For it. Okay. Okay. I see you game. I see you Just casually creating Wanted love to see it Blue ghost, I think we've already got that one a couple times I think We're pretty sure Um blue ghost mit sprite blue ghost blue ghost mit sprite should be locked actually we have quite a few of them We have quite a few of them Oh, man What are we all manning about? I'm confusion I need health Please hold need health Whereas health Give me some red juicy wisp Oh Find red juicy wisps in your area This is what I am doing right now And I did it Are you proud of me chat? Are you proud of me?  Not really did I do it anyway? Yes. Yes, I did Right, I don't know what number this is for today, but we got this We got this Does this kill this actually kills this guy? So if we get this guy out first Then we can just work on general Achilles Okay, I didn't need to crit like that would have killed anyway, but thanks game. Thanks game appreciate it Appreciate it Very cool and good Oh my gosh Love that. Oh no. No way. No way. These guys never fizzle last year These guys never fizzle when they've got a smoke screen on them. What what is with that? What is with that? I want to see how many wantots I can we can cast and kill them That's one This is number two Minded more.  That's probably save a lot of damage You probably don't have a lot enough balance damage. Yeah, you don't have any balance damage And I have a lot of storm damage Quite a lot of storm damage in fact I have Um six plus nine storm damage Then four flat damage That's quite a lot It's quite a little bit Um We'll kill living puppet will not kill we will not do this We will not allow this living puppet to simply cast. They've done the snake and kill It would be so embarrassing. Oh, no, it didn't kill Oh, man. This is terrible This is so sad This is so sad Find red hot wisps in your area Find us in your spam folder on your email account today. Exactly Pretty much Pretty much how it works Um Right, let's go.  Let's get something good.  Okay, I'll take it. I'll take it. We got a snow ram That's all that matters really I don't think we yeah, we haven't got a snow ram yet. We're actually gonna collect all of the mounts I didn't think that was gonna be possible I didn't think we were gonna be doing that But hey, it looks like we're doing that Looks like we're doing that Which is very cool I feel like we need to change up our badge today to the um The gobler hunter one not the gobler the giant hunter Where is that? Blood of the giants It's only fitting. I need to scare them I need to scare these guys Because they're just being too damaging to me That's Nicholas Smith from Walmart. Yeah, Nicholas Smith from Walmart. He is in my messages He's buying things on my card that didn't get charged Very tragic Very tragic Right kibble lamb. He dead. Goodbye. Farewell. See you later Why are you hitting me? I'm not even a threat. Oh my gosh Dude, I go second. They still hit me This is devastating. They have it out to get me. I swear. They are 100% have it out to get me This is absolutely targeted bullying Targeted bullying at its finest Right kibble lamb Thundersnake, you can do it. Yeah 187 nice Noice Bloodbat. Oh my gosh. What is this ancient technology of bloodbat?  Trust me Trust me. He's gonna love it. He's gonna absolutely love it kibble lamb That was actually a good hit. That was a very good hit Through resist 100 through resist kind of crazy.  Farewell Right gg Dark wool shelf. Oh my gosh. We don't need that We don't need that What did you get? What did you get? If I can't beat it I get Imagine opening chest imagine open chest Raisy Are you good bro? Are you good? Are you having like a stroke or something? Do you need do you need help? Do you require medical assistance? I'm surprised that that was allowed through Like what the heck?  Don't worry. I've bought this guy a lot of times and I get trash all the time as well Don't worry This is I'm close to I'm probably nearing on Around a thousand not a thousand nearing a hundred runs of this guy. I would say at least high 50s Maybe 60s because you beat the boss first all the time um, if you're In the fight you you get the drops You get the drops You don't have to deal with the Finishing blow Oh, of course. You can't say blow.  You just have to be in the fight While the boss was alive In order to to get the drops fun fact Do you require emergency services? Imagine I fizzled unlucky unlucky Unlucky Boom Most of this guy's drop log is pretty trash Apart from the things that aren't trash such as the um The Achilles blazing home, which we still haven't seen which is crazy to me The storm wraps the resplendent rod the scepter of tribute cyclops Shell statue the dark wall shelf the elm tree the bolt blade and the jade stuttered FM those are all like unique drops that this guy has that only this guy has Um Or maybe maybe a couple of them have a few other bosses, but generally not Generally just this guy Um, what are we farming? We are currently farming for Achilles blazing home storm wraps resplendent rod scepter of tribute or the cyclops statue One of those and then we can possibly move on You want to kill this week one? Okay, you can kill the week one I I dealt the damage for you. You can you can finish it off You can finish it off. I believe in you. I believe in you Ka-blam nice tunic all disturbance You got nothing That's the goat whisper said What did you get? What did you get? What did you get? What did you get? We don't know what he got? um Thank goodness that um that ain't the case As if you'd had to be the one that to kill the boss In your team to get the drops everyone would riot. Yeah That would be terrible. That would be a terrible design Kind of good some of the drops are really some of the drops are okay and some of them are just absolute trash There's no in between and then there's the unique ones which are kind of rare And by kind of rare, I mean quite rare and also mounts I Mean if we tried this we could probably kill Just with one wanted the minion that would be kind of funny That would be kind of humorous. I feel so let's see if that can happen Let's see if that can happen I have to say I really love this wand. This one does so cool. It's a nice wee change Probably one of the best ones that we've gotten In a long time. In fact, it's the only one that is actually half decent So it's good to have very good to have Uh-oh He's myth-trapping me. No, I'm gonna die.   Enjoy it You're probably not gonna use it, but enjoy it anyway Enjoy it anyway.  It's better than the last few times that we've done this We also We've got something which is good. We also got something We're also currently at 64 tasks done of 200 and something 64 of 281, which isn't too bad Definitely not terrible.  That would not be very cash or money Second You can tell who the person is targeting because there's a wee little icon next to the hit That has the icon on the battle and for example the boss is in the key slot So every time you target just the boss, there'll be a key next to it So if I do this it has a key and that means it's the boss Or the one in the key slot Very clever Very cool Some people don't know that This is the thing.  You're dead. You're dead.  Oh my gosh Imagine a leprechaun. Raisy Enise Cool I won't fizzle now. This is great. This is great. I won't fizzle anymore. I need health Also, is there a silver chest? Is there a silver chest? There is no silver chests tragic Absolutely devastating Devastating Devastating outcome for us all No silver chests no chest for you nor it is so sad It is very sad very very sad Very sad and tragic Tragic and sad Um, right Let's just destroy the minion first as long as we don't fizzle As long as we don't fizzle, which probably now that I've said it we will Uh-oh, this is gonna be bad. He's gonna blood bear me. Oh my gosh.  Nope me not fizzling Never happens ever. It's a myth. It's an absolute myth. Me not fizzling I love storm shark such a good spell Such a cool spell. I love them. I love them I love them. He is a good boy. He is a very good boy Very very good boy Kaplan fizzle unlucky unlucky Um He did he real did You should get some health up this fight.  No, I just think I just think that they're sweet Like That they taste like sweet, you know They taste is sweet, you know No, I don't think that I think the blue ones taste more like the lemon. I think I think the blue ones would be really sour That's that's my hit cannon My hit cannon is that the blue ones are really really sour and the red ones are really really sweet You know, I've always found mana to be kind of like a sour like the liquid here looks sour You know like the the bubbling liquid in the mana pot looks sour to me I don't know what it is about it, but it looks sour. This looks sweet and this looks um This looks like radioactive goo Something that I would not touch it with a stick from five miles away um, yeah I wouldn't drink energy, but I would drink I would drink and regret mana I would drink it and regret it instantly afterwards and health I would drink Because it looks tasty It looks yummy yummy yummy yummy But yeah, I wouldn't drink energy. It looks it looks too radioactive for me So yeah wouldn't drink that But the other two man, I would drink that I would a hundred percent drink that Bum bum bum bum bum He's who's need and all indeed what a bit Also, I guess I guess it's my like knowledge of chemistry because red is generally a high pH which From memory is generally more like sweet sort of things. Whereas basic is um more blue and um They they're more like They're more sour generally. So maybe that's where I'm getting it from but yeah energy color looks like Um tree cool bats from caramel factory so true so true So true Right, what are we getting something good, please Nope Nope nothing good tragic Tragic and devastating Need gold how much gold will be up to? One thousand Not too bad Not too bad Let's do another few runs And then I'm gonna have to run because I've got a couple of little things that I need to do for work still this afternoon and then And then I need to go pick up my dad. I think from his work bum bum and then I should probably also um start editing the story so far Because I've done all of the voiceover for it. I finished it last night I was so proud of myself and I literally was losing my voice by the end of it not gonna lie I was I was hoping that I would wake up this morning and have a voice and luckily I did But I was I was a little bit croaky after recording it all that's for sure Try not to record like 25 pages of words in one day would not recommend it Would not recommend at all zero out of 10 Absolute zero out of 10 But it has been done It has been accomplished I just need to edit it now Which hopefully I can do over the weekend And have it up next week That is the plan Excited for the video. I'm I'm I'm not excited for the video.  I will pass I will pass Because I will I've I oh I should have bladed you bother Don't worry. You get another shot. You get another shot. I'm very I'm very nervous for the video Because I've put like I've put like six not six but like four months of work into this video So I want it to be like I want people to enjoy it quite a lot But I know it's a very long video. So that's generally not going to do too well. And secondly, it's like You know, it's just all of the things I'm like, am I gonna keep people gonna be interested for the whole time? Like, I don't know I don't know. I do not know I am worried I am worried But yeah, I hope people like it when it comes out That is all I will say Because it's so long. It's so long It's like way too long Way too long. Right. I think that's where we're gonna end off for today Trash yep, it happens. It happens That is all for storm today. We did actually do quite well.  We managed to tick off the bot blade, which is a new Best in slow wand for now. Um, and we're currently up to 22.78 Not too bad Not too bad. Well, let us go and look at the guild house and see this crafting area real fast Real fast because we've still got a few minutes left A few minutes left Let's quickly Let's quickly head to the guild house It's not done all fancy. I want to see the crafting area. I'm excited I am excited to see So yesterday on stream in case you missed that Which you might have um, we unlocked a whole bunch of new islands You can go and look at the video on second channel. Very cool. Um, we need to unlock the guild the um The the gate here um for raids Um, what should be cool very cool, and then we can start doing raids, which will be dope We need so much asoth for one raid key so much asoth um But yeah, and where is the crafting area? I assume it might be inside I assume it will be inside unless it's down here But yeah, it's looking pretty cool Looking pretty cool. If you want to donate stuff, you can and if you have like really good decorating abilities Um, let me know and I will I will give you decorator firms Um, just go join my discord and ping me there Ping me there. Say give me decorator firms and just make sure you add your character name So I know who I'm doing this to what is this? Oh, you want to trade me? I don't uh, no, no, I'll Okay Do I have enough space? I do have enough space. That's crazy crazy You just added the tables in the house Oh my gosh all of the tables amazing All of the tables we have we have crafting facilities now. Can we add teleporters in here? Love I'm gonna test something Do I have any teleporters in my thing? I hope so you just didn't have any to donate. I'll see if I I know I have some I just need to figure out where they are They Oh, wait backpack. I don't think you can you can't even donate them This is so sad This is so sad because they're in my backpack under the oh wait what are they decoration yeah you can't you can't do it this is so sad this is devastating this is devastating do you have Lord of Night TC TC I might I don't I don't sorry I don't sorry I have the spell but not easy for the spell about shipper falls I have the spell but I might actually have some TC but you can't craft it anyway so I don't know why you need to see the chip falls I don't actually have any I don't have any I think I used to I put it up somewhere that is devastating absolutely devastating absolutely devastating but yeah so we've got we've got a little bit of stuff that we can work on in the ghetto which is cool PvP you want to PvP me fast okay okay bit bit I'll PvP you fast wait you said you said PvP fast I'm getting my dick okay hey if you insist not enough players to start this combat tragic absolutely tragic let's go let's go let's switch my dick my stats with this dick what am I stats with this dick is they bad actually too bad was in this deck headlesses and stuff I don't even remember when I made this but it is a thing ready okay let's do this let's destroy Adam he is slightly lower level this is going to be easy is he so no here's 150 here's 150 I think I'm gonna win I think I'm gonna win let's see bum bum bum bum bum bum bum bum bum bum bum bum bum right just by the way I'm not PvP person ever so don't don't roast me if I'm bad please don't roast me if I am bad what wow sit shields really really sit shields are we playing dirty like that are we geez I don't have any shields I'm playing honorably no shields shields are shields are for weaklings shields are for weaklings only shield if you are terrible at the game and actually worried I'm actually worried about the results oh and you're fainting wow okay do I have an empower right how's it going how's it going how's it going dude how's it going nice shield you got there would be a shame if someone just removed it would be such a shame you know such a shame tragic honestly absolutely tragic you're enjoying this juju really really a juju I have a tower shield that's not too bad that's not too bad why are you healing you are you I guess you'd have taken a lot of damage I guess you have taken a lot of damage yeah let me shield let me shield if I lose this that would be very funny that would be actually hilarious if I lose I assume you can use the I assume you can use the PVP spells in this battle arena I would assume I don't have any I should have brought I should have trained some just for fun that would have been kind of funny not gonna lie man's healing as well oh my gosh why heal when you could just hit me you're a death wizard you can just hit me to heal it ain't that hard bum bum bum bum bum bum bum bum bum right let's destroy this I don't care if this does nothing is fine is fine I do has plan just kidding they used up all of my pips was not expecting that why are you shielding so much this is terrible why are you shielding why are you shielding so much please don't shield all the time that is that is toxic that is absolutely toxic plus you can see my screen as well I don't even think I have any poison poison would have been goaded I don't think I care it poison honestly I'm just gonna hit I don't care about your shields you're doing no damage to me so I don't care I don't care I'm just hitting I have enough pace I have like 20 something p.s. 60% shield whatever it's fine I can deal with that I'm not afraid I'm not afraid of this 51% shield that's just a tower shield with no p.s. easy clap easy clap get wrecked get destroyed he's gonna heal sacrifice or dead shield of course well now that I know that it's only a 51% shield you know that's actually tempting for me that's actually very tempting not gonna lie not gonna lie very tempting because at the end of the day he's not doing much damage I do have a very shuffle that's good it's been 10 minutes yeah because you keep debt shielding you keep set shielding what is this I have used literally one shield one shield is what I have used how many of you used so many so many shields so many shields all of the shields shield this dude shield this I have a great hand right now I have a great hand this is a this is I'm so sorry this is a great hand this hand is obvious is like fantastic for so many reasons so many reasons right now this hand is just great just absolutely great and I love this hand so much this is great I did this on a whim not expecting me to actually be able to like reduce backlash enough 1% I love Shrek this is perfect for people like this perfect absolutely perfect get absolutely destroyed get destroyed get destroyed absolutely destroyed mmm yeah we'll just do this we'll do this it'll be fine I'm like I could save up for a Lulu blade into a Lulu next turn but whatever it's okay you didn't have your full gear on that's not my fault you said you were ready you said you were ready so I didn't have any shields in my dick so if we wanted to play the shield game you know I could have I could have done that if you wanted to but I decided to be nice because I know I have a lot more damage than you so you want to you want to put your full gear on and have another go okay if you want to put your full gear on and have another go you can I will come with better strats oh dude you can't ask for anything better than this oh my gosh just the ghoul spam love to say it no shields no shields no set shields no she's set shields you're only allowed tower shields embrace and stuff that's it no set shields set shields a scummy set shields scummy then I won't I won't use any set shields either Solomon crane ours from my wand I'm like why do I have that like us from my one that's actually a that's actually interesting combination a skeletal dragon into a Solomon crane imagine that oh my gosh I haven't actually updated this deck since I've gotten a whole bunch of these spells this is the one that I used to just run with just for laws when I was getting arena tickets and tournaments did it work no but it got me tickets so that's all that really matters right yeah we can redo I want to just did you run out of cards that's tragic I wanted to destroy you we can't use that one anymore that's the no pvp version I need gonna get pvp spells hold up I need to go get some pvp spells I am determined to to use some because I never use them I want to use them where's the disco there's the disco to organ hello hi dad hi dad how's it going how are you today dad are you good let's just learn them all by the way you can press spacebar that's what I'm doing that's how it goes quick just in case you were wondering let me see what what can I do that would be kind of interesting I don't think death actually has like any like particularly great of these that he was doing last time future fraction is clear blades for weaknesses that one's clear over times I hear a lot of times for weaknesses that one is clear clear enemy person's blades for my for me blades and that one's clear yellow over times for shields which doesn't really work much we could however go set that up maybe but I feel like if we go for something that's kind of cool like a you carry some poison just in case I don't trust my man's I don't trust my man's he can also see what I'm doing as far which is not ideal what was I looking for let's take those out for now let's quickly put in a couple of those was in my side deck sounds about right honestly I have poisons inside I did have poisons do I have any I don't how do I not have any empowers that's insane that is insane actually kind of crazy not gonna lie let's run like that and then we also need big ol big ol big ol mashy boy mashy boy it'll be great it'll be fantastic you'll never see this coming even though literally watching this stream but that's fine my point still stands never see this coming hundred percent let's try and kid okay right I'm ready when you are I'm ready when you are but I have fainted I don't want no feints feints are pathetic feints are terrible you're almost done okie dokie okie dokie sounds good just in case just in case I think I should be good probably probably should be good right let's wait for him I'm back what was seven do what is this one interesting interesting interesting what is what is your get all you're changing up your gear oh my gosh we're seeing a whole different Adam deathblood here he's coming back with a vengeance a flying vengeance Senators Helm celestians the on Cape hangman sky and harster brood mother interesting supreme directors interesting interesting right we are waiting we are waiting we do be waiting if anybody wants to watch you can by the way if you come over to the guild house you can I don't know no one else is online but that's fine there's six people online on the in the guild that's kind of crazy kind of crazy it was online we have Adam Victoria Alicia here and your death was it why not have your death was it I do that is not roses death was fun fact that is not roses death with this is another autumn this is another autumn I was confused I'm like didn't we already add you all in but no this is another this is another there is another oh my gosh our guild is growing we have imposter all thumbs autumn the imposter this is insane when did they join they all joined today they all joined today interesting I should probably give them ad powers then we can grow our guild and be great and amazing it'll be great recruiters I like to give everyone recruit ability because then we can just grow as much as possible and it'll be great are you coming how long how long I am waiting almost done you've been almost done for a while now Adam oh my gosh oh my gosh oh my gosh devastating you're going to lose this time am I am I really going to lose this time that would be very sad if I was to lose this time that would be very very sad honestly if I was to lose I don't know what I would do like that's kind of crazy not gonna lie like that's kind of kind of crazy man kind of kind of crazy dude I would hope I wouldn't lose because that sounds very upsetting to me to be perfectly frank with you very upsetting so I would hope that I would lose you got a new pet put your gear on are you J are you gonna go like full resist full death resist that's cheeky if you go full death resist I'm not I'm not fighting you I'm not fighting you if you're just gonna put on like a hundred trillion death resist because that's just not fair that's not there I have a lot of flat resist but not that much like actual resist if you have more more than 60 resist percent resist I will probably not fight you just putting it out there men's got a new hat new hat new hat dark more boots exciting what is your damage up to now 69 nice 29 resist five percent accuracy men's is gonna start fizzling actually I can put some cleansers inside just in case man's has got a big ass sword big ass acts it's great at all I don't know where lesser Paul is but it's great at all fair enough and new pet as well okay interesting sword and shield ready okay you're going in with that'll be fun I've got better stats than you but that's fine let's do this let's do this this is the this is the winner takes all you are going to lose all of you spell the time what I don't even know what that means don't even know what that means man to be perfectly honest I said no set shields oh my gosh and you agreed you agreed no set shields oh my gosh this is devastating this is devastating oh well you said no set shields this doesn't even get rid of the set show it's fine it comes into the master plan the master plan that is simple it is simple I will win men's cheating out here saying he wouldn't bring set shields and then bring set shields devastating absolutely devastating sometimes in games it's better to pass he betrayed you he must be from Dragon's Fire 100% 100% 100% why are you already healing I haven't even hit you yet actually I have but why are you healing why are you healing seems kind of stupid not gonna lie not gonna lie kind of stupid what is this see big plan big plan of juju nice nice big plan you got there that would be a shame if I'm something happened to your big plan oops oh double shield really really you want to double shield against me interesting strategy interesting strategy just shield stacking a fair enough fair enough I just got the best spell in my hand right now this is great I've just got the best spell this is great this is a good this is a good this is good this is big for me I think I think this is pretty big for me I remove the tower plus I remove one of the debt shields debt shield go bye bye do lose a few pips for it but that's fine that is fine oh look he's healing he's healing oh my gosh I do one damage and he heals this is crazy man's got so many heals in his hand it is insane absolutely insane we do this we do this there's a couple things that I want to discard from my hand I feel such as this I kind of want to keep that feel like that's kind of good there's another thing that's in my hand right now that I kind of like kind of like it he's gone debt shield men's is stream sniping me men's is stream sniping me he sees my hand and he's like oh scary you know what he's not hitting me so I don't need to do anything shielding is not a strategy this is like healing is also not a strategy not a strategy he's gonna play he's gonna do a gin I feel like he's doing a gin play I feel like that's what he's doing I don't even care about that anymore I do have a plan I do have a plan chef don't worry I have a plan oh my gosh a little wow wow he's actually hitting me oh my gosh this is insane this is insane crit whoa whoa dude you just crit on me oh my gosh no way no way you just crit on me oh my oh my oh my gosh I can't do that I was gonna do that and then like actually I cannot do that but hear me out hear me out chat hear me out hear me out hear me out I think that's a good spell to have I should have discarded something else but that's fine I will return I don't want to concede I am here I am here and active in combat I am here and active in the combat is he going to take off my shields who's gonna take off your shields stop stream sniping me stop stream it's snipping me don't stream snip me stream snipping is not okay okay this is not what I wanted but that's fine I've actually got a plan now the plan is forming I have formulated the plan the correct plan is great it's cool I will love it it'll be fantastic this is great watch this don't worry I've got a plan I've got a plan I've got a plan this is all going well I create which is great please don't block he would never block me he would never block me he would never block me 152 respectable through two shields respectable respectable amount there very very respectable 700 love to say it absolutely from the mom in a mall absolutely for mom in a mall oh thank you I've been wanting to do this for quite a while so thank you actually actually thank you I appreciate it I really appreciate the pips thank you really appreciate the pips I've been wanting to do that for ages it's just been clogging my hand you know it's not been ideal not been ideal at all I don't think sacrifice is gonna save you at this point buddy I don't think sacrifice is gonna save you right now this unfair hey you agreed you agreed you agreed to this okay I didn't want to do this you did this you miss up your deck now you can't play that excuse again you can't blame that excuse again if I beat you fairly two times in a row then that's that's on me not on you if I beat you two times in a row that's on me okay he saw through my cunning plan of monster mashing this is terrible this is terrible I will admit that I do have better stats than them and I haven't been I haven't actually used any shields this fight or brace because that has is a little bit okay because I do have a lot flat resist GG GG no hard feelings no hard feelings yeah you doubt your account oh no please don't do that oh please oh no oh no oh my gosh I mean we did agree to not use shields set shields and I didn't use any tower shields so yeah I technically have better stats and by technically I do have better stats and my resist was a little bit higher and my damage is insane but I won fairly twice so yeah and second time without using any shields at all so yeah yeah oh he's back online he didn't let discount oh no but yeah anyway that is where we're gonna end up for today thank you for watching hope you enjoyed maybe we do some more PvP another time kind of fun way to end the stream I guess but yeah thank you for watching hope you enjoyed right now no don't do that don't do that that's silly don't it's just a game it's just pixel game okay it's just pixels don't delete your account just because you lost to me that's not worth it trust me but yeah anyway thank you for watching hoping dread I will see you hopefully later this week with another stream and as always remember to craft outside the box


Sanatana Dharma is held up by these two pillars. One is the temple with the murti and the devotee. And the other is the ashram with the guru and the shishya. And these two are actually upholding Dharma through the ages, 10, 12, 15, 20, 25, 30,000 years, even more perhaps.


Everybody everybody forced here rip in 2023 Bowman chrome you breakers to light and hobby six box number 15 Random teams. Let's roll the dice through the random. We do the break. Good luck everybody. That was Amazing nine times four and five on our random a lot of nines Names for one two three four five six seven eight and nine Isaac C. Down to Don H and the teams nine times one two three four five six seven eight and nine Tennessee down to UCLA Isaac C. Tennessee Robert B. Ohio State Abdo with Penn State Isaac C. Colorado Kyle P. Georgia Zach R. Notre Dame Josh H. Oklahoma Wayne P. North Carolina Matthew L. Clemson Jason Z. Ole Miss Joseph D. Washington Drew B. Bama Texas and all others Jonathan L. Duke Kyle P. Florida State Alexander with Oregon Christopher C. LSU and USC Jonathan L. Michigan and Don H. U. C. L. A. Let's post before we started You didn't like how long I was away from From the computer Castro. Let's go ahead and get started 16 to go on iMac mosaic choice plates Lot of stuff going on there and then 28 still on flawless Here we go. We go great. What do you come on great great? Yeah Probably had tequila's Refractor is going to be Jeremiah Jeremiah hunter for cow. That's all others Yeah, I'll just answer for me if you could yell for Adam Carnegie Drake may wake him up Purple shimmer are very nice. Shoulder Sanders first woman Colorado see I take a yards Refractor auto Tyler Buckner Bama to 499 Gold shimmer bucky Irving first woman for Oregon very nice color there 34 of 50 Let's go into Alexander Refractor first woman Ruben Owens for A&M What you do as well? That's awesome Purple mini diamond julian Fleming Ohio State out of 399. Oh, here we go. What's this? We got here future football die-cut auto jordan travis number 250 florida state Very nice hits for kyle p Remember we pulled that super last friday So probably one of the better looking cars we've seen yes in a long time. I thought it was fire I was talking about the fracter dallen hate in ohio state had to hear what kyle thought about it on saturday I was like, yep. This is the first thing I saw when I woke up X fracter first kendall milton uga What happened holding on the offense walking the back gary wilson. Come on gary wilson 299 bonix on the aqua for organ Marvin Harrison early risers inserts Fractor first chris hilton jr lsu lasso God, I think it got hit Like his arm did These receivers and dbs are talking Big time Extra factor karsten steele for ucla. Oh, he actually did have his arm hit Yeah, he had his elbow like hit. He's lucky that like he got it out And the ball like kind of like was like this. It was weird Marvin harrison That's what that penalty kills him because the whole line is a good enough for them to drop back and throw the ball third like 14 Caleb Williams early risers It's kind of true shady It's pretty true Did he said? Yeah, it's not good.  Yeah And even if rogers was healthy, I don't know about this offense, man The jets would be solid because their defense is so good and like rogers would help them out quite a bit But I think ravens bangles man at this point ravens bangles are the better-looking teams Refractor joe alt for Notre Dame tough out here Oh, yeah, john like what extra factor will rogers missus to be state They've only spoke to hookah like one time I know Ramblin man Xavier worthy Dude, it's really bad mic. They're only rushing four or five every time and it's like over immediately McCarthy early risers Yeah, I definitely got to throw the ball away there, but or just It's it's it's an all-around disaster here everybody Refractor first Brandon in this Ohio State Do you think they'll be above you mic or below you on the trash list? Purple first woman Noah whitington for organ of 399 Hello Joel the vanilla gorilla priss villa Shitter Sanders 1955 Bowman inserts That's all they do refractor auto first woman Devin Neal to 499 Kansas all others All right, take note of that Sean take note of mic's answer there Fractor Isaiah Williams a line I I told him that the O line is going to be above or below him on the trash Anthony was number one in the trash list this week Jesus yeah, Anthony was number one in the trash list shady Extractor Michael Williams for the george bulldogs You gotta go watch that whole bunch of new see he said juicy again. There he is Green shimmer mackaya lemon for usc I don't know about a green lemon, but that's a pretty good guard for usc there to 99 Green lemon they called a lime bow nicks early risers God you chat is chats going off the rails It's like it's 5 p.m. Do you know where your children are? It's like it's 11 p.m. Do you know where your collectors are? Yeah, they're in too late in sports cards chat being obnoxious Refractor first is chris revazina Clemson You don't need a big card here a big card here. Come on. Please get out of here Steve didn't make it purple shimmer is Caleb Johnson for Iowa Did I I don't know I don't know either Caleb Williams 55 bowman First woman base auto for callage jade and aught Purple first bowman Caleb downs at 399 Bama guys make sure to like the stream appreciate it quite a bit Helps us get more views Something Steve wouldn't know anything about yeah, that's for sure No views also tomorrow see for views and for shizzle are going to be playing Fortnight together We're going live shizzle is twitch Check it out All right, last hobby box. Come on. Come on refractor first jacob coeing for azona ramblin man braylon allen shimmer mine williams, ohio states Any dubs tonight? I don't think I have a win in the new season. Oh, yeah, I do. I we won a few games of forties Refractor auto first woman ruben owens for a and m the 499 A and m is all others Purple first bowman for lsu brian thomas jr Good color matched 399 refractor first for organ jorian dickie shitter sanders base Blue refractor to 199 Bama dallas turner Whatever bro Sponsored by gold ball Gold lava auto chrissor vizena first bowman clemson Nice one clemson 6 of 50 Refractor first cobi prentice bama. That was definitely a solid hit there on that uh Vizena first X factor first michael pratt for tulane Prats prats solid Yes, it is drew you hit a lot of cards green refractor is will roger's missipi state goes all others Out of 99 drew aller Yeah, there's some good quality in it too jackson onald into the job Refractor first kade stover ohio state Patriots. Oh, yeah, patriots do have the early game in frunkfort this week In frunkfort extractor julian fleming ohio states. They can lose early so i don't have to worry about it Lose the coles.  What are you doing kade club nick? It happens marvin harrison it happens Literally every day. I think it happens It's something as soon as we get around the 11 o'clock hour Damn, it's already 11 What's all this sitting preparation hb assault? Yeah, oh boy Oh boy cute matching your hat to his sweatshirt What it's different colors Yeah, what's wrong with it? It's different colors, dude. What a bet All right, three delights refractors smell mondan jr. Mitch labor devon makabe Troy franklin and hunter-deckers A shock of johnny wilson for florida states That is going to be aqua joe alt to 299 noter dame tyler buckner purple mini dime at a 399 bamma texas tech purple to 399 togebrook's first bowman Refractor first bowman auto vanderbilt stop looking at me swan It's 499 and a michael williams first bowman auto for georgia on the base No one said that at all. He was at view Early risers jackson onald Salam Oh, no Oh Oh boy. Yeah, this is your boom mixer All right refractors of tylic williams quinnish on juggins trey shawnd ward corrie kiner emet moorhead shock of jj mccarthy for michigan purple for ucla karsten steele to 399 aqua to 299 andrew makuba for clemson purple mini diamond to 399 teetaroa macmillan for azona Green auto blade core. I'm nice hit for michigan. That's number to 99 and there's a red behind it There's a red And here it is Elijah badger first bowman autograph, arizona states Five of five arizona state is all other schools There you go True. There you go, sir red first auto elijah badger badger badger That's sick and an early risers of bonix the last box fractors of corrie foreman Monterey baldwin kaleb downs elie holstein sam hartman a shock of ryan oakie for bc Blue refractor drew all our nice one penn state to 199 aqua for houston to 299 donovan smith Purple mini diamond logan diggs to 399 lsu color match Yes, karnig. You get it. Yes. He understands Refractor first auto for duke is riley lennard number to 499 And elie holstein the first woman base auto for bamma and early risers marvin harris and jr Quick recap coming up. Give me a sec here Thanks for filling that out everybody. Next up is going to be that basketball that we're getting to Numbered cards here and logan diggs Carson steel t tarot mcmillan tyler buckner taj brooks joe alts bryan thomas jr. Caleb downs. Noah wittington julian fleming donovan smith andrew makoba bonix bucky urving will rogers Dallas turner mackaya lemon drew all our autos of elie holstein refractor riley lennard there michael williams refractor aj swan ruben owens and the refractor base jaden otte green blake quorum refractor devon neal refractor tyler buckner Gold lava christopher vizena There was a jordan travis on the uh future football insert auto to 50 And red first woman auto elijah badger for arizona state to five That'll do thanks again everybody moving on now to one more basketball break


So first I'll start with our motivation. What motivated us to do this work? What was our end goal? And then we will go into the co-location detection, which was the first problem that we had to tackle. And after that we will get into the details of our key recovery attack and finally conclude with some discussion. So cloud computing. Cloud computing is outsourcing storage and computation needs to remote servers servers rather than local machines. In these cloud servers users share users rent virtual machines also called VMs and share the physical system. Sharing the physical system sounds extremely efficient, right? But it also sounds dangerous. So what about the security between these systems? Isolation. In the cloud Different operating systems as named here as guest OSs run in a sandbox environment inside the VM and the isolation between these VMs are maintained by the virtual machine manager also called the hypervisor. However, since the low-level resources are shared between these VMs, this can turn the scenario into a victim and spy where one of the VMs can spy on the other one. So is this isolation secure? Well, according to the recent literature, it is not. I would like to briefly mention three of the works. The first one. Hey, you get off my cloud. This is a seminal work by Ristampart et al. It was performed in 2009 and they showed that for the first time it is in fact possible to co-locate with a specific target in a public cloud. In this case, Amazon EC2. The second work is cross VM side channels and they're used to extract private keys. This is by Zang et al. It shows the feasibility of performing a cross VM attack destroying the isolation barriers between the virtual machines and it assumes a shared L1 cache, which is a strong assumption. And finally, PrimaProp on LSE by Liu Yerong and other researchers. It targets the last level cache. So this way, we can have an attack that works across cores and across VMs. And it attacks square of multiple exponentiation with and as well as sliding with no exponentiation. So in short, we have three motivation. We would like to collect fine-grained information on commercial cloud and in this case, we chose Amazon EC2 since it's the largest public cloud. In fact, it is so large that it has 10 times more computing power than the next 14 class services. Second, we would like to recover RSE keys and we selected Lipchik rate 1.6.2 as our target. It's the recently patched library and it is still widely used in the wild. So how do we know that it is still widely used by performing a quick scan in one of the Amazon EC2 regions? We discovered that 55% of the TLS hosts actually use outdated libraries that were not updated in the last two years. And finally, we want to do this in bulk. We do not rely on faulty random number generators or any misconfigurations. Before going into the details of co-location detection, I would like to make the distinction between the targeted attack and the bulk key recovery. In the targeted attack, the attacker goes after one specific target and therefore he has to make sure that he is in fact co-located with that target. But in the bulk key recovery scenario, the attacker only spins up multiple instances on the cloud and does not care who he is co-located with. So, as I mentioned earlier, RISCIM Partedal also performed co-location experiments in 2009. And when they did that, Amazon EC2 was much, much, much, much smaller. They launched multiple instances on the cloud and they checked if any of these instances were in fact co-located with each other. How do they perform the check? They use ping times between the instances to see if it points to possible co-location. They use the IP addresses of instances and hypervisors and they use disk drive performance to create a bottleneck and send signal between the VMs. Let's see how things are in 2016. In 2016, Amazon EC2 was much larger. Here, the pings are constant time, slower SSDs are replaced with high-speed, slower HDDs are replaced with high-speed SSDs and provisioned in a way that there is no bottleneck even though multiple users are heavily using their storage. And hypervisor IP is hidden. So, we can say that Amazon did their homework and they closed all the non-site channel attacks. So, we need new methods and therefore we developed two co-location detection methods. The first one is last-level cache covert channel. Now, remember that last-level cache is shared between cores. So, using this covert channel, we can communicate with VMs running on different cores. And the second one is software profiling in LSE. And since these are architectural site channels, they are difficult to prevent. So, let's start with the last-level cache covert channel. In most Intel caches, Intel CPUs, each core has its own private L1 and L2 cache and they have a shared L3 cache. So, by using prime and probe on a predetermined cache sets, different VMs co-located on the same machine can in fact create a covert channel. And figure here shows the histogram of last-level cache access times and the memory access times. As you can see, there is a clear distinction between the two and we can use this difference in access times to communicate between VMs. Now, drawbacks of this covert channel is it is noise-prone. Remember that we are doing this in public cloud, so we have many neighbors. In fact, on the instance type that we have used, we had a tank core machine with 20 threads running in parallel which meant that we had up to 20 co-located neighbors. Also, the variety of the load makes the noise harder filter. By variety, I mean that one of our neighbors could be running Apache web server while the other is doing media streaming. And we have observed during our experimentations that 40% of the last-level caches are highly noisy and not suitable for easy communication. Our second detection method is software profiling. We again use prime and probe to profile a portion of the last-level cache. We first create a baseline profile when the targeted code is not running and then we create another profile when the code is in fact running and compare these profiles. So, as I mentioned, we only profile a portion of the LLC. Keep in mind that in modern Intel CPUs, the last-level cache ranges between 3 megabytes and 30 megabytes. So scanning the whole last-level cache is not going to be practical. But luckily for us, with 4 kilobytes of regular pages, regular memory pages, we can get 12 bits of the address without being translated by the memory management unit. And since 6 bits of these 12 bits are byte offset and the remaining 6 are the set address, we have 32 candidates that the targeted data can go to. And since we have a tankware machine, we have 10 cache slices, which means that we have 320 set candidates where any targeted code can reside in. So we tested this method with our simplification of LibJCrypt and a yes-implementation, c-implementation of OpenSell. This is the result that we obtained when we targeted the multiplication function of RSA. Two graphs here show the difference of access times to specific cache sets, our candidate cache sets, x-axis represents the set number starting from 1 up to 320 and the y-axis shows the difference of clock cycles from the baseline profile. And as you can see, in both of these figures, which are taking from different virtual machines running in the same physical system, we can see that two of the cache sets were in fact used by the multiplication function and we can feel this use in both of them. So to recap things in co-location, for the targeted scenario, we can use the last level cache code channel or we can use the software profiling. On the bulk key recovery scenario, we do not need to use co-location detection. All the attacker has to do is to pin up multiple instances and collect traces from all of these instances. However, we can still use the software profiling to detect vulnerable software in the cases where you want to attack a specific version of a specific library. So let's now that we fixed the co-location detection problem, let's look into the details of the RSA key recovery attack. So we use prime and probe in the last level cache and how do we gain control over the last level cache? We use huge pages. Huge pages are a CPU feature that are allowed almost in any Intel CPU and all the public class that we have worked on so far. They are two megabyte memory pages. They reveal 20 bits of the address and since this address is the page offset, it is not translated by the memory management unit, meaning that when this address goes to the CPU and to the memory, the 21 bits of it will be constant and it will not be changed. Using this, we can create eviction sets. However, there is still one more problem. What about the cache slice selection? In Intel CPUs, in modern Intel CPUs, the last level cache is divided into different slices. So if you have a 10-core machine, you have 10 different slices in the last level cache while any of the slices can be accessed by any of the cores, it still provides an additional layer of abstraction for us. So without knowing the slice selection algorithm, we don't know which set slice pair our data will reside in. Even if we get the set number, we still don't know which slice it sits. And this can cause a slowdown of the attack significantly because instead of making 20 accesses to a primary set in a 20-way associated CPU, we would have to make 200 accesses to make sure that the data is in fact evicted. Our solution was to reverse engineer the cache slice selection algorithm for Intel Xeon 2060-17 version 2. It's a 10-core CPU. So using the slice selection algorithm, we could in fact create eviction sets easily and we only need 20 accesses which makes our attack fast and reliable. And this is the slice selection algorithm that we have recovered for the specific CPU. So our target crypto system, its Lipchikrips RSA implementation, it has 2048 bits of modular size, 5-bit sliding window and message blinding. Is this state-of-the-art? Well, it has been patched in February 2015 after the cache leakage was found and now the table accesses satisfy the constant execution flow. But as I mentioned before, it is still widely used. So our attack steps will be as follows. First, we will find the cache traces of the sliding window multiplicant accesses and then we will observe several explanations so that we can combine these traces and reduce the noise and we will align and process these observations. And alignment is an important problem here because we do not assume synchronicity with the victim. And finally, we run our error-correcting code to fix any remaining errors. So identifying the correct cache line for the multiplicant tables. Each slice has 2048 cache sets and since we have 10 slices in the last double cache, we have 20,000 cache sets. We are assuming that the victim is using regular 4 kilobyte pages which reveals 12 bits of the address which means that 32 can disinitialize and 320 in total. And we know that sets can be noisy since this is public cloud. In fact, they are so noisy that in some sets all we can see is this. And by this I mean y-axis represents the reload time difference between the base profile and the x-axis is just a time slot. So each vertical line here represents an access that was made by one of the co-located VMs, to possible 20 co-located VMs to this specific cache set. And this is another example. In here we have a much, much less noisy cache set. Even though there are some vertical lines, meaning that some other VMs access this set, it is much better than the previous one. So in our experiments we have observed this. Before the decryption starts, as you can see there are two peaks, co-located VMs made two accesses to this cache set. However, since the multiplication table is not in use by the RSA, there is not much else. But as soon as the first secret exponent is calculated, then we see heavy use of the set and that goes same for the second secret exponent. This confirms that the targeted cache set is in fact holds the multiplicant values. This is a row trace. Well, these are row traces that we have obtained in Amazon EC2. We have 11 different traces here. They all belong to the operations with the same secret key. And each vertical line represents an access, also meaning a reload time that is higher than the baseline profile. As you can see, it's completely unaligned. This is because we don't assume synchronicity with the target. And after alignment, we observe this. As you can see, it's still too noisy. Needs further processing and some filtering and noise reduction. We observe this where the red is the expected correct trace and the recovered trace is the blue. There is still very little remaining noise. In here, for example, you can see that both lines have four accesses, but in here we have three. We have only one access here, but we have two here. So it's still a bit noisy. So how do we perform the final key recovery? We combine traces and we know which cache set holds to which table value by measuring the distance from the table initialization. So that we know which cache sets hold X to the 5, X to the 7, X to the 9, etc. And then we recover D from noisy DP and DQ. And in order to do that, we use this algorithm that uses the public key of the target as well as the knowledge of the noisy DP and DQ to recover D in an efficient way. So in conclusion, we show that collocation can still be achieved in public clouds, in the largest public cloud in 2016. Caches provide a powerful site channel. It is, in fact, so powerful that we can perform key recoveries, even in cloud. As for countermeasures, there are many proposed hardware countermeasures. Most obvious is usage, less usage of cache, which is performance-wise not feasible. And as for software countermeasures, recent patches of well-maintained libraries actually do protect against these types of attacks. But as I mentioned before, software updating process has also a cost and users are not keen on updating their software. As for the crypto library authors, the constant execution flow is the most important thing here. There should be no secret-dependent branches or memory accesses or cache accesses that will leak any information. Before some press reaction, I would also like to point out that we have been in contact with Amazon Web Security Team before making this work public. They were very open and cooperative and they acknowledged that there is underlying physical leakage that is wide open. And shortly after this work, they encouraged their customers to use well-maintained and recently updated libraries to protect against these attacks. But as you would expect, 55% still not using new libraries. And a little bit. Thank you very much.


Right, hi I'm here at a fairly breezy pool of golf resort in Mallorca and I've only got one thing in mind that's to find out why this is currently by far the number one driver on tour right now. Well this is a paradigm with a slight difference in the fact that it's the Paradigm X and it's very much the most forgiving driver certainly aimed at more average golfers. It's got slight draw bias on it so there's every reason that this would favor my type of golf swing my type of ability. So we're going to go out on the golf course we're going to tee a few up and I'll see if the Paradigm X is not only the number one driver on tour but perhaps the number one driver for average golfers. Well that's staying in the air longer than I expected it to and to be honest you've done far better than I expected it to and why I say that is two things it wasn't the best of swings it wasn't the best of contacts it almost felt like I got a little bit of ground on the upswing there before ball it also sounds quite soft and that sound means that it doesn't feel like in your head at least that it zipped out there but it basically defied how it sounded how it felt and in a positive way because like I said I cannot believe that ball carried as far as it did which suggests the ball speeds were good even off and off centre hit if that makes sense so it's a very positive comment but I'm a little bit surprised just how well that thing did. Do you know again it's fairly early that's only the third drive of the day and what's again pleasing with this is when I first did the review of the Paradigm driver I was I was very much concentrated on the looks in terms of I wasn't a fan of the looks and maybe that literally put me off and I say in a number of videos about looks being really important to some golfers and not to others well for me it is I didn't like the look of it maybe that put me on a down before it even started in terms of the review I tried it against a number of drivers and it performed incredibly well it was very very consistent and again out to you this morning what I'm noting like I said only third driver shot of the day it's cold it's an early start I'm not swinging hard at this thing at all in fact quite the opposite end in terms of swing speed and this ball is traveling it's traveling far further than my sort of swing speed suggests which is similar to what I just said I know on that previous tee shot but that is the most noticeable thing right now that's the bit that is impressing me I'm not swinging very fast I'm not swinging really that well and yet the ball is still getting me down there and seems to be traveling a good distance at the same time that's the bit that is hugely surprising and a huge positive things are a bit different on this whole and really give me an opportunity to find out whether or not I could possibly game the paradigm X driver and what I mean by that is a heavily draw bias driver could be good for me in terms of straightening up what I like to see which is a bit a left to right shot but I'm also used to playing a left to right so I kind of you know my tee positioning alignment would be to hit a left to right so naturally on this hole I'm going straight at those bunkers with a little cut so what I want to find out is when it cuts will it stay straight what does it do in terms of affecting my natural sort of ball flight there you go at the bunker really solid ball I'm going to say at the moment slightly left to the bunker it's gone a whole long way I love the feel and that was a one thing I did pick up on the initial review of the paradigm was very positive about the sound and feel and I cannot deny the fact that the ball speeds out of this thing seem really really impressive because yet again it was inside left of the bunker didn't cut an ounce it's literally gone bullet straight and it's carried right over the pathway into what is the adjoining fairway so my alignment was where I would be ball didn't cut at all that could be a huge positive for me but the bigger one is again the noticeable ball speed and the noticeable carry distance that this thing is getting it's good you know I might be changing my mind big time in terms of paradigm right now right to the golf ball you just seen me hateful that was from a far different location and far different in terms of weather because I'm not sure if you can pick it up on the camera it is snowing right now at hollywell golf pool but that won't deter me I will finish this review of paradigm X and to be honest with you it's blown a bit of a holly it's typical winter conditions in the UK and probably more like what I'm used to so I can give you an almost even more fairer assessment of this golf club's performance right well here's a few more out in the cold and I'll give you my evaluation but that first one off the tee was first swing of the day and I can tell you where it's landed is a whole long way down the fairway now this is where for me it's a hole that I don't always play driver I hit the G430 off this tee box a few weeks back and I basically said it's because it was the most confidence I had in terms of the club in the bag and I feel the same way about the paradigm X so let's see if we can go across the corner with this thing and the answer is yes that's absolutely and that's into a wind into and off the left and trust me that has not moved in terms of no kind of movement in terms of spin neither left or right which is probably the most impressive thing and the thing that I love most about paradigm X is it's very much neutralizing my fade and I can aim straight down the middle or in this case straight across the corner you can see where I'm going with this one today's video is brought to you in partnership with chervo the premium Italian golf wear and sportswear brand by using some of the most innovative fabrics chervo produced clothing that is both stylish and incredibly comfortable to wear both on and off the golf course for more information visit the chervo website and I will of course provide a link in the description of this video right let's get back to the golf right a little bit of shelter before I attempt my next shot the interesting bit for me on this is the sort of shape and profile if I was being perfectly honest with you it's not ideal on my eye it's one of the things that I've already mentioned in terms of my previous reviews of paradigm is that from a looks perspective I'm not overly keen on that address position the other thing with the X model is obviously it's a little bit more draw biased and more offset address and again would normally put me off but both of those things are overcome based on just how good this thing is performing right now the kind of offset and the set up at address is very much like the big bertha b21 in my opinion which I gained for quite some time and again the only issue I had with that drive was that I found that I was sort of messing around a lot at the address position because I was trying to find a comfortable sort of position for me to see that ball at address I don't feel like I'm doing that with the paradigm X and to be honest with you the other big notable thing is I'm just swinging my kind of normal swing if you like so a cut swing but the ball isn't cutting so I'm really seeing the help of that draw bias but again when I played it with the b21 yes it negated the kind of fade a little bit but it also lowered the ball flight it was a bit shut the club face as well at times and I had the tendency to close one off and go left whereas with this I'm sitting in a neutral position the sort of standard position at address swinging my normal swing ball flight is really good and at the same time it's giving me a straight ball flight so all those things are hugely positive and I think that's why this club would appeal to the vast majority of average golfers and obviously because most of us have that cut fade in our swing right I'm going to try one more and I think that's enough to make a decision on this one right take a bit of cover to do the conclusion of this video and oh my word it's pretty horrendous albeit I feel as though the bad weather has followed me around whether I've been in Arizona out in Mallorca or now up in Hollywood but yeah pretty grim conditions but the thing I like about that like I said is the drive itself as well and truly been put through its paces in the kind of conditions at least and I'm used to which is more like this and I've got to say hugely impressive that last drive again super ball flight straight I mean that's the big deal for me straight is the keyword I would use on virtually everything that I've hit and don't forget that someone from someone who effectively fades the ball so ParadigmX is doing what it should do but it's doing it in a way that I think sounds fantastic feel is fantastic ball speed seemed really good we learned that from the initial test in a paradigm it's clear to see why this driver is definitely the number one in the world right now in terms of wins maybe not the ParadigmX but as a lineup Paradigm we've got a winning formula on their hands or Callaway have in the Paradigm lineup I'm literally struggling right now the wind and snow is bouncing off my face I'm going to call it a day hope you appreciate the effort that I've gone through and put this one together it's minus one with a wind chill of about minus five or six I'll see you tomorrow night