we're going to be talking about hacking smart safes today. I've said the words safe hacking before and people are always like what are you talking about? Practicing safe hacking? I'm not sure what that means. Not related to that whatsoever. These are physical safes that have smart devices on them. Really quick, just as an introduction, I'm Dan Petro, this is Oscar Salzar, we're both associates, Oscar's senior associate. At Bishop Fox we do pen testing for a number of things, these sorts of internet of things, devices included. So I guess without further ado we can get into the meat of the talk. So this is the CompuSafe Galileo as a particular brand of smart safe that we happen to come across. So I want to kind of start this off with an apology I guess. We tried really, really hard to get one of these things here on stage at DEF CON. But the thing is a tank and just logistically would not have worked out whatsoever. It's 380 pounds, it's actually not that big. It's only like maybe three feet tall or something like that. So for 380 pounds for such a small object like it's just completely immense, you cannot lift it basically. You have to like roll it around. And these things don't have ramps. If you notice, like these stages, it was going to cost like $400 from the labor union to carry it onto the stage. And then another $400 to carry it off. Not to mention like shipping costs. It was complete nightmare and we eventually had to give up on it. So just really sorry we wanted to have one here on stage but it was not in the cards. So that kind of tells you a little bit about like what this safe is. Just like it could legitimately stand a bomb blast. The thing is a tank. Yeah, and essentially this thing handles money, right? You put money into the slot reader, the money dispenser things at the top. It's like a reverse ATM essentially. You put money in. The money then is no longer yours. You don't own that money. It actually gets deposited into your bank account. And so because of that process, the safe itself can't be opened by the managers. So it has a set of like authentication and authorization where a manager can have, you know, create new users and employees can put money in. But this is meant to be kind of in retail stores. Yeah, so it's not meant to be something that you as a consumer would have in your house, right? It's like a cash management solution meant for business like retail outlets, right? So this would be something that would be sitting underneath the cash register like at stores you probably go to. Like they're out there in the wild, right? And so this would be something that would take money from the till like after like an employee has too much money rather than leaving in the till or having them count it in a way that can have lots of accounting problems. You like insert the money into the safe and it can wait there until like the carrier service actually carries it away. Right. And so the carrier service essentially will come and pick up the money at some either designated amount of time or when the safe reaches a certain amount of money and they'll take it away. And in order for them to take the money out of the safe it requires both the manager and the carrier service, the armored car service to both sign into the application. That's an important point to mention is that because the money for the safe is deposited into the store's account once money is inserted into it, that informs two things. One, it informs the security model behind the safe. So like as Oscar said, the store manager is not actually allowed to open the top drawer of the safe where the cash is because the cash is no longer his money, right? Once the cash is inside that safe it's already deposited into the bank's account, that's the bank's money, just temporarily sitting around inside of that safe. So the way that the security model is worked out is it's like a nuclear launch facility, which is what we have here, right? So like two people have to simultaneously put in their keys and turn them right. So both the carrier service have to authenticate to the safe, they have to type in their code or in practice they have this little touch memory thing that we'll talk about. And in addition to that the store manager also has to put in their code. So we did this assessment as part of essentially a customer came to us, they had a point of sale system that they wanted us to review and this safe was part of that point of sale system. We worked with the vendors to disclose the vulnerability and Brinks has informed us that they are in the process of releasing a patch and we have actually tested a patch that Fire King created that fixes one of the specific issues that was used to create this attack chain. Yeah, let's see. Also, so we have a safe that we had purchased off of eBay with remarkably no questions asked. And that was the one that we were trying to bring here in person. I guess there's another little anecdote to share with you about just how kind of crazy and massive the thing is. So we got this thing shipped, it has to ship me a freight and it gets to our office over at Bishop Fox and I'm like all super happy, finally the safe is here, I'm going to get to mess with it.   Why would you expect that I have a forklift? I didn't expect to need a forklift.  Even just like getting it like 10 feet from the truck like into our office. So nothing about this has been easy basically. Yeah, and so we're kind of disclosing all this information for you know educational purposes, informational purposes only. Don't try this at home. This is you know. Definitely don't try this at your neighbor's home. Yeah, you can try it in your own home if you own your own safe maybe. Alright, so we're actually going to go ahead and do a demonstration now. Yeah, this is where we hope we have audio. We don't. Let's see. I'm definitely plugged in. So let's see if we can get audio. I hear it now. Okay, let's play this and see if we don't blow everyone's ears out. I think that's a reasonable level. Traditional safes like just about everything nowadays have technologically evolved into computerized smart safes which are currently being used by countless businesses across the country. A safe by definition is inherently safe. People trust them with their most valuable possessions and businesses trust them with cash, large amounts of cash. You would think that smart safes are even more trustworthy and secure than the old fashion kind, right? But how smart are they really? For the most part, smart safes seem pretty secure. However, one particular model has a serious design flaw. The Brinks CompuSafe LAO has a USB port on the safes exterior. This enables a malicious user to automate an attack on the safes computer and quickly opens its doors. All someone needs to do is plug a program thumb drive into that port and voila. To learn more, visit our website at www.bishopfonds.com So that was an awesome video. That's totally on our YouTube channel. Some company named Graphic or Grabbock, I'm not sure exactly how to say it, made that. They do like graphic design and info sack. Like seriously, that was awesome. Shout out to those guys. They made this sweet cartoon and everything for it. That goes really quickly through some of the major vulnerabilities that we identified with the safe. We're going to talk individually about every single step along that line. If you freeze frame through that video, you can kind of see the exploit chain as it were. But we'll go through a bit more depth here. What we want to talk about a little bit is how this is actually a combination of a bunch of different issues. This is kind of a long attack chain that ends with the safe opening. But each individual piece by itself doesn't lead to a full compromise. So this is kind of hardware, software, configurations, networking. All of those things kind of are required in order to perform this type of exploit. I think that's maybe even something worth mentioning in terms of the Internet of Things. These are all areas that we as packers are used to. These are issues that we're used to dealing with. But now that you have these other devices that are coming out with people that are very used to making toasters, and they're not used to making toasters that are secure against attacks over the Internet, that these are all issues that are going to be coming up in everyday devices that we didn't use to make things seem obvious and almost laughable to us. But keep in mind that these are issues that are going to be coming forward more often. These are types of things that we see across all types of Internet of Things devices. We recently saw the news about the cars that can be hacked. That's something that was a space before that never had to worry about security in that fashion other than car alarm. Now you have to protect against attacks and attacks. Some of these objects like cars and airplanes get a lot of press and maybe they should right but everyday objects and things implanted inside of businesses and homes also need a lot of attention as well. This is a picture of the outside of the safe. The front panel has a touch screen and this is on the left panel of that touch screen. The way that the service pickups authenticate to it, like to say if you are going to be picking up actually had no idea what this even was until I had to Google it because I was like wondering what on earth this connector was and like it's like magnetic thing that maybe talks over some cryptographic protocol or maybe something like that and that's how like the drivers basically authenticate to the safe to say hey I'm here to pick up cash. I really wish we were up here talking about how we reverse engineered some really cool thing and like we were doing stuff with this contact key but that's not really what this talk is about. This talks about the exposed USB port on the side of the safe. Right next to it. Immediately right next to it. Yeah. That port is not like it's not behind a panel of some kind. It's not like hidden underneath something. You don't need to like open the door to get to it. It's just right on the side of the safe. So having an exposed USB is a pretty big deal in terms of being able to plug into the device. We saw this. We immediately plugged in a mouse and we saw a cursor pop up on the screen and we're like all right. I like where this is going. Yeah. Immediately liked where that was going. Yeah. And so we're like okay. So we're plugging in a mouse. We're moving it around. We're plugging in like unplugging that. We're plugging in the keyboard. We're typing some stuff and we're like I'm plugging that and plugging in the mouse again and it starts getting quite cumbersome. So we make like a quick trip. We're like okay we've got to solve this problem and so we go to. Best buy. And we buy a USB dongle. Like a hub that allows us to connect multiple devices. Like a problem solved. Great news. And so we plug that in and start working our way through. Shortly afterwards we actually remove the four Phillips head screws from the side of the display. So what you're seeing here is the front panel, the entire touch screen just unhinges and moves forward. Yeah. There's just four Phillips head screws. Not like security screws. They're not like epoxied in. It's not like behind. Just regular Phillips head screws. Unhinge the whole thing. You can get access to some computer innards there as well. Yeah. So this is actually a picture from the top down. They also had the same epiphany as we did. They bought a USB hub and velcroed it into the inside of the safe as well. Yeah. It's literally velcroed in. I think it's almost like a microcosm of what happened with like the safe, right?  We needed two USB ports in the front. And we only ran one in.  Run out to Best Buy. Velcro in a USB hub and just call it a day. And so this is actually really important because the touch screen itself is just a USB head device, right? It's just like a touch. That's what it is. So the fact that like you can unhinge this and just get direct access to that USB is really important because that's like built into the design of the safe, right?  And if you can just unhinge the front panel and get access to that USB then that's like good hardware access right there. That one's not showing up.   This one is like so this is the third USB port basically coming out of the side of the safe. This one is less important because like it's in the back and like these things are not meant to be easily accessed. Like they're bolted to the ground so it's not like you can like pull it out to move it. It's probably in some sort of an enclosure. Yeah, I mean if you're getting to the point where you're kind of pulling the hole safe out to connect to the USB it's going to be pretty obvious you're not going to be able to kind of do that in a sneaky fashion so yeah, I'm too bad. Right, so these USB drives had full drivers enabled right. This has had the ability to plug in a keyboard, a mouse that immediately recognized it. We were able to plug in a thumb drive as well to get access to storage. Yeah, USB mass storage, USB head, basically full drivers enabled. There's nothing like restricted in any way. There wasn't some sort of like a USB device whitelisting or like nothing like that basically. You just plug in and it just works. Yeah, so one of the big things is you can actually boot off of the USB. So at the bottom of the touch panel there's a button that allows you to reboot the device. It's a big red button. Right like underneath it so if you're looking at the touch screen it's just like right underneath it and as soon as you hit it like the big Windows XP like would you like to log out, reboot or turn off like comes up. Before we pressed it we were like is it going to inject the money? What does that button do? It's unlabeled and it's just a big red button. So it was beautiful. Yeah, so right from there you can just reboot the machine. You don't need to have access to authenticate. You just touch the button, you can reboot the machine right from there and then plugging in a USB hard drive, you just boot from USB and then do whatever you want to the safe from there basically. So that's actually a really important attack combined with this. Yeah, and so the whole database or the whole safe essentially works off of this one database and it's an MX access database 4.0 which is a little bit old. You start to hear rumbling snickering like ugh. So it's password protected but it's not encrypted. So if you try to access it using MSXS then you'll get prompted with a password. It's kind of like an opt-in password policy. If you open it on Mac or Linux it doesn't prompt you for it at all. Yeah, that's just access as fault basically, right? That's just how the old versions work. They just decided to stick a password in plain text, the header of the file and just cross their fingers and hope that no one reads it. Yeah, I think the very, very early versions had a plain text password in the header and then they started kind of encoding it more and more and more. Because of security. So version 4.0 it's encoded but completely reversible as well so you can get the plain text password out of it. Yeah, so you could just not use Windows and it just opens up the file just fine. Yeah, so this also handles, this database handles all the authentication authorization. It's where all of your user information is stored, has credentials in there. It stores all the logs about access to the safe so when you go and put money in and make a deposit and when the armored car, people come and pull the money out, all of that is logged into this database. So gaining access to this database is basically the keys of the castle, right? Once you're able to access this database or modify this database, you're able to essentially open a door. So you can imagine a world where like a safe were designed with like a crypto chip on the inside of it like burnt into piece of hardware that can't be like modified where it would like do some sort of cryptographic challenge response like protocol that way like if the computer were to be like hijacked and like you couldn't man in the middle of that connection you couldn't do replay attacks or whatever and that's just not how this works. And like that's just not how this works at all. There's just the safe is essentially a COM port attached to the XP box that's beneath this thing and just sends the like unlock command and then just unlocks, right? So compromise of the OS itself. Yeah. You compromise the OS, you compromise the whole thing. Yeah. So we have a second demonstration here. Oh, actually, no, this is just a breakout. I'm used to the slides. Sorry. I'm getting ahead of myself. Go ahead. So when we first plugged in the keyboard and mouse, right, we're in this kiosk mode for the safe. We're trying to break out of the kiosk mode. We try the regular things, right? We try like control shift escape. We try alt tab. We try alt of four. We try, you know, the windows key a couple of combinations and nothing seems to work. And so start feeling a little frustrated and decide that kind of the Hulk smash technique will work and just start pounding on the keyboard. And highly manual like keyboard fuzzing. Yeah. Technical term. And it actually works. So something pops up and allows us to break out of the sandbox. And we're like, all right, this is awesome. Unfortunately, the kiosk mode on the application kind of reasserts itself every once in a while. So like push in front of everything. It's like 60 seconds. It just like forces itself back to the foreground. So we're like halfway into breaking out of this sandbox. We have explore running already. And then everything falls behind the kiosk mode again. Like, all right. And so we start trying to smash on the keyboard again.  This is how we hack. Yeah. Just like the movies. Just like the movies. And unfortunately, we can't get it to reproduce. So we have to find a more reliable exploit. And so this is what we ended up coming up with. So the way that this safe works is there's a... So there's a tutorial system on the safe. If you want to add a user or learn about how to deposit money into the safe, there's a tutorial button. So you click on this tutorial button. It brings you to a bunch of videos that will allow you to learn how to properly operate the safe. However, they're all flash videos. So right clicking on the flash object there allows you to pull up flash settings. You go to the about configuration. Also something worth mentioning on those flash videos, one of the awesome things about... They have like a... Help videos about basically to do anything with the safe, including like how to log in as a manager. And in the like how to log in as a manager video that's like on the safe, it says like about half way through it, like, don't forget. Like if you forget your password, the default is one, two, three, four, five. And like our safe still had that, like enabled on it, which was pretty good. Though importantly, this is just a store manager who doesn't have access to the safe door. So even though that's there, like it doesn't really get us anything. Yeah. So once we were able to go to the Internet Explorer, the about config for Adobe, it pops up Internet Explorer. So it tries to go to Adobe.com in Internet Explorer 6. Yeah. And from there, you're able to kind of go through the bypass, like go through the motions, right? Internet Explorer to Explorer, Explorer to let's say CMD, and you have, you're running as administrators. Yeah. So once you get out to Internet Explorer, basically you can break out into the operating system. It's pretty much game over from there. So yeah, it is running Windows XP. It's like an embedded version of XP. So at least hypothetically it's getting like remote back ports. But like still, it's probably not great. Though it should be worth mentioning that like Windows 10 would not have saved the safe, right? Like there's a lot of other issues. The fact that it was XP tended not to be terribly important to the entire exploit chain. Like there could have been a lot of other like permissions maybe. Like maybe the application could have been running as a lower privileged user. That way you couldn't like break out and to run other commands, but like that's not. So that was helpful at least, right? The fact that we could just modify arbitrary things in the operating system. Yeah. And so, yeah. Opening the Internet Explorer is actually what Fire King did as the patch, right? To break the exploit chain to prevent us from going through the process of escaping the keyless mode. So once you have access to the command line, you're able to do things like add users to the database, right? Since we have the credentials for the MS Access database that are stored in the headers. We're able to add around service accounts and service accounts don't have the same requirements as a manager, right? If you're a service technician and you come and you have to work on the safe, you're the only person that needs to be logging in. Yeah, there aren't actually any service accounts already enabled on safes by default. So we just have to add ourselves like two new service accounts into the safe. We just call them like hack one and hack two. Curiously, you still need two service accounts? Like presumably because like they don't want just one service person to be able to open up the safe, right? You need to have like two people simultaneously like okay fine. So we'll just add two accounts and then log in with both accounts. Which is a little strange because. Yeah. So in the video you'll probably see that. Like it actually has to like log in with two different accounts. Yeah, if you're going to work on one of these safes, you have to add your own account anyways. So there's no reason why you couldn't add two, I guess. All right, so we're going to go play through the video of the actual exploit now. We'll kind of pause it every once in a while and describe what's going on. We need audio on the computer again if that is not already done. See if that works. Sweet, it works. Yeah. So this is the safe. It's essentially we created a script on a teensy. I don't know if you guys are familiar with teensy. I think in the printed materials we said USB rubber ducky. Turns out that the ducky doesn't do mouse movements. It's only keyboard. So we wanted to switch away from that. So unfortunately the printed materials are out of day. We couldn't fix them in time. It's no big deal. Basically we had to switch to a teensy which is an Arduino board instead that does mouse and keyboard. Yeah. And so basically the way that this works is we wrote up a script that's a macro, a blind macro essentially. The code is like move to these coordinates, click, move to these coordinates, right click, type in this stuff and essentially created a macro that had no feedback from the system. And when we were recording this video actually we ran the recording software on the safe itself. And it actually slowed everything down so much that we had to rewrite the whole script because all the timings were off at that point. So yeah, this is essentially the way the breakout works. Went into the tutorial section. We opened up flash. You right click on that guy. Internet Explorer comes up. It's all running real slow because it's trying to run video capture software like from the safe as well. Yeah. So then we open up a new page and make it a system 32 directory. And from here we're, you know, open up the command. So this is awesome by the way. So the teensy doesn't actually have any capability to like store files on it. So if we want to run something we have to like open up notepad and type out a script in VB. That's what it's doing right now, right? Yeah. So the VB script basically creates the new users in the database. It closes up all the applications that we're running that we use to break out of the kiosk mode.  So right after that's completed the teensy finishes the open like types in the passwords for the accounts that we put in. The primary thing that all this is doing basically is having the VB script that interfaces with the MS access database and adds two new service accounts into the back end of it. And all of this is without us touching the safe. So this is plug in the teensy walk away and 60 seconds later. Yeah. All the drivers by the way for like interfacing with the MS access from VB is like totally already enabled on the safe. So this is the door opening. Those are the canisters that have all the money. So that was the main exploit chain that we used. There are other things that we identified while looking through the system. So passwords were stored, hashed in the database with another column immediately beside it with the plain text credentials. Yeah. That was a really, I just have this mental picture in my head of like the developers writing a safe software right and they like have plain text passwords in the database and the manager comes by and says like, you can't do that. That's insecure.  But again, that one's not being terribly relevant to like our exploit chain, like to get access to it because all the credentials that are in there that you would steal are like the store manager accounts and like cashier accounts that don't have access to the caches. Yeah, the armored car guys don't have credentials stored in these databases that use their authentication keys. So you would only have access to manager accounts or something like that, which wouldn't open the safe. So also kind of turns out you don't need a mouse. You can perform all the actions. It's a touch screen after all, but right click is essentially just a click and hold, which is I think just a feature of the touch display and not so much feature of the software itself. So if you really wanted to, you could do the whole thing right from the touch screen, just like go to the flash video and hold and press and then like pull up an on screen keyboard, it would be horrible, right? We didn't actually ever bother to go through that chain because it would take like a day or something. I can imagine trying to automate that by like putting some device like on top of the safe that like press the buttons for it would be horrible. It would be horrible. The USB board is basically just like there to help streamline the entire exploit. And so I think Dan touched on this a little bit earlier, but the way that the safe operates is there is essentially a com port that sends the open door command to, you know, the solenoids or whatever that connects to the safe doors. So if you were to kind of use that instead, right, you could have just as easily have hooked into the DLL and issued the open door command. There's literally a DLL with an open door as a function. We're like, we didn't even bother with it, didn't need to as it turned out. Like the way that we exploited it was just like adding an account and logging in and using the application, right? But of course one could simply just like send direct com port traffic to that, like implement your own common driver. That would be a lot like cleaner perhaps as an exploit, but we just didn't need to. So that sounded hard and we didn't feel like doing hard things. All right, so I guess we kind of touched it a little bit earlier as well. The Internet of Things is happening, right? There's smart devices that are, or devices that typically haven't been connected to the Internet that are in this rush to become smart, get connected to the network, get connected to your home, give you feedback. The idea I think is just we got to make this work as soon as possible. Everyone's doing this. We got to get this out before anybody else does. That's the state of most like large software developing houses, right? They're just barely struggling to get things to work, let alone getting them to work well and let alone getting them to fail well. So like as like this moves forward to everyday household or business devices like this is only going to be something we see more of. And a lot of it's hardware companies moving into the space of software, right? They typically have been working on, you know, these safes that have been around for centuries or they've been working on these cars or a light bulb or a toaster or whatever. They've never had to have a development team and a security team. And so as that starts to happen more and more, I think that we'll be seeing a lot more. I think it's really easy to be flipping about it right and be like, come on, do we really need a smart safe? Like the old mechanical ones are doing just fine. But like that's kind of being approved about it, right? Like this is going to happen. This is the future whether you like it or not. And so we as security people can either help or not. Like these sort of smart devices were in a way that like the promise that we as technology people made to the rest of the world that we said all this technology was going to transform like households and devices in the world and like this is partly what that means, right? So like let's not try to shut that down instead try to you know help these devices out as we go forward into that world. And I think that's everything. That's about it. Thanks. I am told that we have a microphone that we're going to do for questions. So I don't know where that is. I expect to see a goon like frantically running around with a microphone at any moment now. Until that point maybe I could just like repeat a question. I saw at least a hand here. I could like repeat it to the crowd. Auto run. USB out to run. Try it. Auto run. Oh, auto run. Yeah, so there's a difference between auto run and auto play as it turns out. So the question was about USB auto run, right? So if you plug in like a USB device like it will come up with a prompt that's auto play that will say what would you like to do with this device? It doesn't do auto run which is the like run the first executable you see on this like CD. That would be like really easy and that was the first thing we tried. But no, that did not work unfortunately. And so also the pop up when it says like what executable would you like to run on here? That comes up behind the application, right? So you still need a way to exit out of the full screen application or for that to happen. Looks like we have a microphone finally. So it's in the front here if you're looking to ask a question. Hello, my name is Fred Smith and I was wondering if you had a written, everything you talked about in a written format or online that I could access? Like this entire presentation, is it written down somewhere that I could access? The content of the presentation? Yes. I think that they've been writing it out over there. I don't know. I'm sure it will be available on the DEF CON website. I hope so. So you mentioned the USB port on the back that you said was hard to access because of the physical access. Did you ever actually try your TNC board on that port to see if it would work? Yeah, that one works as well. In fact the back, the rear USB port seems to be powered a bit more.  I think just the back one has more power. But they're otherwise completely hooked up. Did you ever connect to the network ports to see what those do? No, we never hooked it up to the network. Yeah. At least the one that we have sitting around in the office. We saw a talk yesterday where they used a TNC in twin-dook mode so they could do mass storage and keyboard stuff. So basically you just stick it in the laptop and basically set up a new wireless access profile and all this crazy stuff to basically put on the machine. So you think that would have worked as well for this? Will that even have to get past the kiosk mode? Yes. So once you bypass the kiosk, you're running as administrator. So you could easily think of a scenario where instead of having it just immediately open the safe, you upload a piece of software that will, let's say, open the door later or run any configuration files that you want. Yeah, for our purposes we just wanted to demonstrate opening the door so that was like the first thing that we did. Thanks. First of all, thanks for an excellent presentation. That looked like it was a lot of fun to tinker with. Did you mention that it's a Brink safe and you mentioned another company along the way fire somebody rather than catch the name of that worked around and closed the exploit chain, if you will, Internet Explorer. You demonstrated or at least alluded to several other avenues by which you could compromise this ridiculously poorly designed safe. Did they tip to address the rest of this sort of obvious low hanging fruit there? Are we going to see you next year doing this talk again about how you loaded the DLL and called the appropriate unlock? You're definitely not going to see us next year. At least not hit this, maybe something else. Next week? Yeah, we worked with the vendors involved to try to get a fix for that exact exploit chain. And they've been informed of the other things and they're working on addressing this. So you may have aware it's on their to-do list somewhere, eventually. Fun. Hi. You had mentioned the possibility of replay attacks over just the comport to the actual safe. Did you guys look at that protocol and say, is it the same command to all of the safes? Is there an actual key for each one? Do you break it for one? There's ostensibly, we didn't like, so we tried looking at the comport traffic just a little bit and I was kind of crossing my fingers and hoping there'd be like a four-byte message that would just be like unlock. And it was not that easy. It was like back and forth protocol. It was just hard and I'm not even going to look into it, basically.  So it's definitely something that presumably could be done but we didn't really look into it. Yeah. Presumably there's not a key involved there or if there is, they're the same or we don't really know, I guess. Thanks. I wasn't sure if I heard it correctly. It sounded like in the beginning you mentioned something about this thing having a full-time network connectivity and normal operation like cell data, anything like that or just hardware. It's just hardware. So it's meant to talk back to the bank, right? So it knows how much money you have at any time. So as you deposit money into it, that money gets deposited into your bank account and because of that it's always connected. Was there any evidence of support for other network methods like cell modems, that sort of thing? No, I don't think there's cell phone. It's all wired. Like a phone jack for like old dial up I think as well if you had that in your store. But I didn't see any evidence of any cell phone or other kind of wireless. A lot of point of sale systems still run off of phone jacks basically. Did you get the impression that if the network connection was in place it would have reported your actions as you were functioning? Logs and such are definitely sent out over the network, right? So it could hypothetically but if you have complete control over the operating system then you could just modify that to not report your like opening the safe or not report opening the door. Yeah, so I mean you're running as administrator and once you break out of the kiosk mode that wouldn't be logged, right? And you could shut down the network while you worked on whatever you wanted to and then plug the back in afterwards if you wanted to. Thanks. Thanks. Did the vendor, it seems like the USB port facilitated everything? Did the vendor say there was a business need for that USB port on the front? Yeah, there's definitely something to be said about like usability versus security in that respect, right? Because it's useful, right? Being able to like have a mouse and keyboard present there, right?   And so having like an external like device that you could like reboot into the BIOS and whatever like that's handy, right? You can then recover from that situation. So you kind of have a tradeoff between security and usability there, right? You want to have a safe that like fails open in this sense, right? Like if the hard drive fails, then you can still open it anyway, or do you want to have a safe that fails closed? And that's kind of a business decision to be made. Thank you. Thanks. Since it gives provisional credit to the financial institution, could you see customer information? Like account numbers? I didn't hear that. When they put the money in the safe, it gives the provisional credit to the bank. Could you see account numbers? Account numbers? I don't. The customer account number. No, we didn't look too much into the actual mechanism of like how it like specifically sends your money. Like they very well could just be some web servers that says like deposit this money into this account. And if you like change the account, then like bad thing. No idea. That's all just pure speculation basically. I would assume that they would have something baked into there. We would know what account you are. I mean it has to know what account you are. What was the fix offered by the vendor? So they essentially broke the attack chain by preventing Internet Explorer from opening. Kind of blacklist Internet Explorer. So they're going to like flash and right clicking and go down about configuration wouldn't float up that portion and we wouldn't be able to escape out that way. But would you still be able to do something with a USB drive in that case that completely block it? Yeah so the same attacks where you would plug in a USB and like boot from it and do that kind of attack would still be possible. But you would have to figure out how to reverse engineer the software first essentially. You could just reboot it with the red button right? I'm sorry? You could just reboot it with the red button right? Yeah you can reboot the device yes. You do need physical access right? So that's true you need physical access to basically do the entire hack. But at the same time you need physical access to actually carry away the cash. So like that's kind of required anyway. I'm just saying if you can plug in the USB you can also click that red button right? Exactly that's correct. So I mean there are other fixes that would be able to help against like a boot from USB attack. Like trying to put a password on a BIOS to lock down the BIOS so you can't boot from USB. Maybe encrypting the file system. A whole number of things right? You can play into the usability of the safe right? If everybody has to boot into BIOS and plug in a keyboard and type in the password and do all that stuff that might not be a reasonable solution. And as they're essentially embedded devices it's not necessarily easy to update the software as well. Thank you. Especially at the BIOS level. Do I see any other questions? Yeah. So if you have like the USB drive that can act as a keyboard or a mouse or whatever. Why do you actually need to like open Internet Explorer? Why can't you just send commands as a keyboard and do it in the background without any visible... So there are some things that are already locked down right? So if you try to hit like Alt Tab like that just doesn't work. That's like in the Windows registry like been disabled as a keyboard. So like going to Internet Explorer is basically a way of escaping out of the kiosk sandbox because their application is just a regular Windows program running in full screen mode. So there's no way to like run arbitrary commands just because there's no button to press to get there right? So the first step in being able to run arbitrary commands is escaping out of that sandbox like pulling up Internet Explorer which then runs regular Explorer which then runs a command prompt. So if you were to like try to type commands the application itself would register all your typing and so you wouldn't be running and you can't run it in the background. So if you were to type in the keyboard to like type in your username and password if you were to plug in the keyboard that's how you could log in as well. So you can do like the run command to execute? Right, you can press the Windows button. The Windows button is disabled as well. So you can't just hit the run command. Thank you. Do you guys have any plans on researching how the money gets deposited in the bank through the network? Yeah, I don't know if we're going to be doing too much additional research on that. I think we'll probably be moving on to something else pretty soon but we're still working with the vendors to address the rest of the issues. Okay. Because with what we're doing we're going to be doing the same thing with stealing the cash. There's only this much cash you can steal but if you can like replay and keep adding money to the account Right. So are you saying like if you were to essentially falsify how much money was in the account? Yeah, since you have access as an administrator you have access like if you're able to essentially get access from the security of the of the safe itself is at that point compromised. So the security is based on keeping you in the kiosk mode. So yeah. Right. So if the hard drive isn't encrypted and you can boot from USB couldn't you just like boot to a live CD and then edit the registry to break out of the sandbox? Yeah and you can absolutely just boot from Linux. Like that's something that is pretty straightforward. Maybe making like a Minecraft server that would run on the safe or something like that but the specs on it are just quite good enough. Certainly not a client maybe a server. But yeah you can run arbitrary software like boot from another device and run a non-windows operating system and then maybe even if the hard drive are encrypted just clobber the hard drive with an entirely new image. So that's why in addition to things like full disk encryption you would also want something like password like on the BIOS right? And that point it would actually usually BIOS level like BIOS passwords are kind of chuckle that because you just like remove the CMOS battery or something like that. But in this situation the computer is inside the safe right? So you can't just do that. So it would actually be a reasonable defense. All right cool thanks. Anyone else? Considering the the whole complicated solution the safe manufacturer they just locking it and all that thing. Wasn't it simple just to place all the innards just behind lock and key and that's it? Why just leave the port exposed and not just lock it in? Yeah so again it kind of just boils down to usability it seems like having access to an exposed USB port makes it easy for a technician to come in and do their work. But they could have just as easily had the technician you know remove the front panel into the back USB or do something else. Yeah. Or you give them just a key to each technician and that's it. Thank you. Thanks. Yeah real quick I'm hoping you sort of thought this out in the fantasy world. What would be like your fantasy real world heist involving this capability and then what if anything can you extrapolate to other smart safes? I think that we want to emphasize that like enable theft right? Like we're providing the information like for pen testers that like if you're a pen tester and you have one of these safes right I think you'd be abundantly clear like how to reproduce our findings to be able to like do this on your own but like you know going through some actual like theft scenario isn't you know something we really want to encourage. Okay looks like we're out of time so thanks a lot. Alright thanks everyone.


Hello all happy women's day. It's been very pleasure to meet you all So today it's been we are being going to discuss about the women's health It's been very much important as they have been not a part of a family They are a whole family. So they are the one taking care of whole family, but they have been not taking care of themselves So today I'm just going to give some five tips. So which has been needed to improve your health. So as like We have been developing country even though we have been having a nutritional deficiencies in women So the anemia it's been like not only with the last 10 years 15 years more than 50 years We have been dealing with anemia still now. We have been just struggling not we have been at that stage So mainly women who has been not only in the age of school going not enough age of adult Not an age of aged population in a geriatric So in the starting age till the end age of the life So we have been facing the anemic status in women and also with the other deficiency status Which has been unknown which has been untested mainly So women as I've been mentioned so we have been taking care of the whole family not the art ourselves So you have to test for the simple thyroid Because it will be starting with the simple symptoms, but we have been ignoring that it will end up in more complications So so you have to test with the basic test which has been needed to improve your health So what are the dietary tips what I have to Share with you has been with mainly the women who has been having the leftover foods Is being end up in obesity. So that is the first thing you have to leave Because what are the leftover foods we have been having we used to stored in refrigerator? Obviously, there will be more of Bacterial growth in that and apart from that how much the quantity we have been consuming We have been measuring that So that will end up in obesity and obesity is the all the reasons that will end up in all other complications Like hyperlipidemia Diabetes thyroid disorder. So everything has been interlinked. So all women have to focus on the fresh eating foods So that should be a main focus and my secondary tips has been with Focus on how much quantity you've been having what the quality of the food you have been having So you've been taking care of the family in case of like you've been giving a fruits to the children But we have been not consuming for ourselves. That sheet is the only thing you have to focus mainly fruit Is been having good amount of vitamins and minerals So how much ever you've been including on daily diet that will improve the fiber intake as well as improve your iron status also So focus on the fresh fruits seasonal fruits not in a form of a juices Just try to have a fresh fruits that would be better and next thing Choose some healthy dietary options. They'll see even the snacking options you've been choosing It should not be of a deep fried one. It should be the steamed preparation Even you've been having a snacking that should be consist of some amount of protein Because protein is a nutrient that is very much lack in our Indian diet and due to the vegetarian population So we have been lacking good amount of dietary source of a protein So how you can able to improve your protein in a vegetarian source? You can include some Paneer you can include some soya in the atta also You can mix some soya and we can make our rotis in a healthy way And even in a form of a snacking options You can choose for some moong dal as a roasted channa or some sort of sprouts Even the sprout chat also can give to the children's try to choose some healthy proteins that will improve the protein requirements in the body Next thing you have to focus on The cooking oil all women so they will be very much happy to make new dishes new recipes for their family but As like everyone we have been asking them so they won't ha they won't say like we won't go for out We will be have making a snacking options at home only But how much oil you have been using at your home? That is very much important for the whole family in a family of a four or three So if you have been using more than three litres or four litres, that's not a healthier diet at all Because once you have been making any sort of a deep fried items So you can able to know So this much of oil consistency has been there but on the whole in daily basis the subji the vegetables Which we have been preparing if you have been adding the oil in nexus So we can't able to see it on the subji is but the excess oil usage has been there on the daily routine So you have to focus on the oil usage on every month So per person you can use up to 500 ml to 750 ml as a part of your health The next thing you have to include some sort of a dry fruits in your diet Not in a form of a lettuce you can have a fresh dry fruits like almonds walnuts Some anjeer So these also will improve the calcium and the iron requirements as I've been told like the deficiencies are been there Not only with anemia. We have been having the calcium deficiency multivitamin deficiencies So you have to focus on some dry fruits On the whole so you have to be very much Equally give importance to the liquids the water as we women we have been working throughout the day So we have been ignoring the water. So water is a main nutrient to maintain your hydration So that is not a least part. It is very much important So you have to make sure you'll be having a good amount of water and apart from the water You have to include the other natural base of a liquids in a form of a coconut water butter milk Lime water soup you have to include in that way. So on the whole you have to choose some healthier options in a form of a less spicy less oily and with a fresh food not with a replaced like a Ref leftover food that should be discarded immediately not you have to store for two three days And it will again eat creating an issues. Stay healthy and stay happy


What's going on everyone, welcome to a brand new movie review. Today I'm discussing the brand new A24 film, First Reformed. Now this is a film that I've heard some good buzz coming out of some of the film festivals. It's also directed and written by Paul Schreider, the guy who wrote Taxi Driver and Raging Bull. So I didn't really know anything going on in this film.  And that's the best way to go into this film so I'm gonna stay very vague with this film and I will say this is a film I would recommend for indie junkies and A24 fans, especially if you like the ghost story. If you loved a ghost story you will love this film.  A ghost story I loved. Coming out of First Reformed though I will say I was a little bit taken away by the ending and especially the whole third act but as the more I've thought about it the more I've sat on it it definitely appreciate it more and more as the more I think about it. The thing I just want to get all the way first is I'm gonna say this right now this is Ethan Hawke's best performance and I don't just mean his best performance like he in his career no this is his best performance he will ever have and that's not going credit because this guy has a wonderful filmography but this is easily his best performance and a lot of it goes to just his performance his nuance and the script that Paul Schreider gave to him. Fantastic script. Amanda Seafreed fantastic young actress and she is fantastic in here as well but really this is Ethan Hawke's show it's very much a character study of his character and it's just so compelling from start to really the second act and the third actress really changes into this weird scenario but it also fits the tone of this film. This is a dark grim film that at times when the film ended this is the first time I've ever seen this besides a Marvel film when there's a post-credits scene. This is the first time I've ever seen this where the whole audience that I sat with when the film ended no one got up everyone was just it you just hear this giant just as everyone let a breath out once the film ended because the third act really just holds you tight and it's like okay do I think I know where it's gonna go do I not and the film didn't go in any directions that I thought it was gonna go it starts leading towards those but doesn't end up going there and I really appreciated what the film took in those aspects and I love A24 I love these wrist he films that they take and totally let the director do what they want to and some of their films work and some of their films don't I think this is not category it does and this film is also filmed in the same aspect ratio that ghost story was and it really worked for the film it did the same thing where it pulls you into the film and does something different with the story and the cinematography of the film is stunning it's the same thing that a ghost story did with the way it would move the camera and I appreciated that even more I keep saying appreciated because I really do appreciate a lot of the things that they took to make this film and I could tell just what way the film was in the dialogue and that the cinematography was all pouring onto the screen this is where I get to on this aspect of this film this film is not for everyone I would go as far to say that this film does diverge some of the messages that you feel like you're getting and again I appreciated the messages it gave some of them are a little bit too preaching a little bit too on the head and on the nose but maybe that's just the way I took it I think a lot of people are going to take the messages from this film very differently there's a couple messages I took from it some a little bit too rough some of it a little bit too much the heart which I appreciated those ones but the ones that were a little bit too clear on the noggin I think there's more to them and this is the film that I really think over time as people analyze it as people look into this film more and look in and all the symbolization I think this is a film that's going to be one of the best films of the year it's easily the best performance I've seen this year as well again one of the better films I've seen this year to again I think the messages can be a little bit too preachy at least it came off to me that way and one other person I was talking to with the film they said the same thing it is a very hard film to watch some of the imagery in here is very shocking at moments and I again this film knocked me on my ass it I haven't been knocked my ass in a while from an indie film and that's just I'm lost for words to be honest I was lost for words I did not know how I was gonna make this review and it's a tough film to review but that said Ethan Hawke gives a life-changing performance this is his best performance today in his best performance of his career Man of Cyphery proves that she is a very capable young actress and she gives us great performance as well cinematography is great great direction great camera movements and everything the writing is superb and everything about first reform is great in just it's one of those unique films that you get once a year and I think just like a ghost story was last year I think first reform will be for this year again message gets a little bit too preachy I think there's some more analyzing to do within this film that I can't wait to buy it on Blu-ray and really just watch it and pick what symbolism this is and symbolism this is so again if these are the type of films you like you're gonna love this film that's not maybe not in your wheelhouse so again this film is going out to a lot of different theaters I know if you're in an Arizona area it's in Camel view if it's not it's probably hitting up California and other areas as well so I do recommend seeing this film if you're into those type of indie films but that said I'm gonna get first reform in a minus and I really like this film I think I like ghost story a little bit more though because I actually got the message in the symbolism through that film this film that the message it gave me was a little bit weird and awkward and sometimes I feel like I pulled the other message that it was trying to diverge from but still really appreciate this film very well done and I hope to hear what you guys think about this film but guys most important thing is out again have you guys heard about this more have you not I want to hear you guys's thoughts and comments down below so let's talk about it plus leave me a comment tell me what your favorite a 24 film is that's gonna be fun right tons of great ones as other night make sure to hit that like and subscribe button especially if you're new come consider subscribing because I do tons of movie reviews like this I review pretty much every single film out there also if you guys want to talk more movies go to all my social media links love posting talking geeky stuff over there and if you guys want to get up on the latest movie news and maybe get win some tickets to go see with advanced movie screenings go check out sandwich John films down below cuz again there you can win advanced movie screens check out movie news and movie reviews but until next time guys you guys are seriously all the best and stay class


Azad how are you? Hello hero. Very good. Let's start here I have the benefit of knowing you guys as an investor and a board member quite intimately but for the audience I think it would be nice to give them a little bit of a flavor as to you know the the the genesis of in-farm and and what you guys do and some of the history of the the starting points. Sure and in-farm we at in-farm are growing a global network of urban farms rooted throughout cities in places such as supermarkets and restaurants and distribution centers to provide a diverse selection of premium produce in affordable prices everywhere. We started in-farm from a genuine passion to know where our food comes from. We wanted to know who grows it, where, what does it contain and we wanted to have ultimately just better food, more diverse, less contaminated with pesticides and all sort of nasty chemicals and we wanted to know that it is grown in a sustainable way that things not just on our health but also on the health of of our planet. And then we started with building a farm in our own living room. Okay. It was a very basic kind of tube hydroponic system. Yes. But the outcome was amazing. We did it in Berlin almost 10 years ago in the middle of the very frozen snowy winter and we had a lush farm inside the house. We ended up fitting not just ourselves but also our neighbors and we understood that there's something very strong about that. Something that many people would want and that's the idea of in-farm became. How can we create the tools that will allow or enable an urban farming revolution? And you guys have started that with real force. You're now in North America, you're in Asia, obviously across Europe. You're in 30 of some of the world's largest retailers, supermarkets. It's quite... It's the scent of the world's leading retail food chains that we work with in 11 countries now. So that's a pretty large jump and we'll come back to some of the power of the brand as you do scale. But in order from starting at an apartment in Berlin to where you are today there must be moments that are very challenging to scale a business from where you start with a very mission-driven agenda of sustainability and sustainable farming. Tell us a little bit about some of those challenges that along the way from that beginning to where you are today. Maybe there's a story or two that is worth sharing and how you've built this organization to where it is today. I'm sure there's a few challenges there. So when we started we knew that, as I said, we want to build tools and bring farming back closer to people with the agenda to cut the supply chain and to have our food grown much closer to us. Less food miles mean also less food waste. It means that you can grow a much larger selection of plants that usually are very sensitive and cannot be in the long supply chain. But the interesting thing was actually when we first build a farm inside of a supermarket. We didn't know back then that we'll have the retailers as our main partners in crime to have this revolution rolling. And we thought that we will be more of a tech company that is selling farms to businesses and maybe even to individuals. The first farm was built and we posted a short video of the making off of the farm. And this video became viral with millions of views and hundreds of thousands of shares. And very shortly we started to get phone calls from retailers around the world. All of them want to provide this experience and this product to their consumers. The first place that we worked with, the name is Metro, it's a wholesale that is servicing catering restaurants and hotels. Also came back to us a couple of weeks after the farm was already operating, selling really good. We were completely sold out every week. But they said, you know what? People want to know your story. Please take over the brand. And so already selling, we slowly started to learn what does it mean and what do we want our brand to stand for. And I think that we understood quite early that we want to bring something new. We tapped into a space that is unbranded and also untransparent. And we wanted to offer a complete different approach to that. We wanted people that are holding our plant in the supermarket to feel trust and to know that we are offering a complete transparency. That we are thinking about the environment, that we are not using any nasty chemicals and pesticides, and that we pick our cultivators on a criteria that puts taste and quality and health at the priority. I think we all benefit from, you know, the commitment that you, that InFarm has in a very authentic way to delivering that to the end consumer. And it feels like, you know, the retailers are also in tune with the ultimate consumer who wants that. I also know that, you know, the company culture has a lot to do with, you know, the InFarm brand.  I think there's also a very distinct inward commitment to what InFarm means to, you know, to the people who work at InFarm. Maybe you can share some of that with us. Yes, absolutely. So when we build our brand ID, we really bring, built it from the inside out. So having this amazing team of today, more than 1,000 enthusiastic purpose driven InFarmers, we thought it would be most powerful to actually talk with everybody and identify our common values and vision and take this and manifest it into a visual identity and a textual identity that is ultimately the InFarm brand. And so when we're talking about the brand that InFarm, it's really the values that drive every decision making, that drives the culture in the company, meaning what kind of qualities help you to thrive at InFarm. How do we work together? We have people from more than 17 countries around the world coming from very different backgrounds and expertise. And it was very important for us to basically write up all the things that we believe in and really help each other to work together and also bring this commitment into everything we do. What are some of those things that you have written up? Tell us a little bit more about the details of, you know, the things that are important when you think about, you know, when you're writing these things up. What are they? So we're obviously a company that is forward-thinking. We don't want to only think about the next step, but we are looking always into the future and how we can have a real impact to make this future brighter and better. We are very much appreciate diversity and the differences between us. We're also bringing this idea of diversity to our approach to crop science. Already now, we offer a product catalogue that is for sure leading the industry, and we are all the time expending it. So we put a lot of effort into growing more and more varieties. Right now we have all the leafy greens and herbs, this year tomatoes that you tried there recently and mushrooms, but looking into the future, we want also to grow staple crops, and we want to offer the entire fruit and vegetable to people. More things are around, of course, transparency, being authentic, being real, showing where we are, and also being real about what it takes to get to where we want to. And these are all things that you would find in farm, in all the teams, in all the departments, people will tell it to you, and it helps them to always take the right decisions. So that's a very good and important place to put your effort on. And when you have such a distinct mission-driven brand, one of the things that is crucial in business building is the talent. You talked about diversity. Do you think that gives in farm an advantage, all the attributes that you just talked about, in terms of attracting some of the world's best talent, you've become a global and international organization, do you think that's the commitment that you have had to the brand? Do you think that's helping you on that end of attracting? Attracting talent, yes, absolutely. I think, first of all, the purpose, so the vision is the one most attractive thing for talents, and if you'll ask almost every person in the team, they will say that this is the reason why they joined us, but I absolutely sure that a culture of inclusiveness, and feeling that your voice is heard, doesn't matter where are you in the system, it's something that is making people proud that they are part of the industry. It's not easy to work in a scale-up that needs to show resiliency even in such times like the last two years that we all went through. You need to believe in the company, you need to believe in the real intention, and you need to understand your individual impact. Makes a lot of sense. Maybe on the flip side, there's also your investors. I am one of them, but beyond, you know, Atomico, what do you think investors, does it attract a certain type of investor? What are your expectations on them, what are their expectations to you beyond creating value as an investment? What do you think that, is there a unique kind of relationship that you think you build with your investors given what you're trying to accomplish? Yeah, absolutely. I think that a business like Info really attracts very specific investors, so it doesn't work for anybody. And to be honest, when we started, people even told us not to mention words like sustainability to investors and try to only think about the very current numbers and the product. And it took us some time to understand that also in the community of investors, you have many different kinds. And actually, if talking about culture, your teams really helped us to kind of understand and frame our beliefs in a way that will help us to better communicate internally and externally. So we have very special relationships with each of our investors, and they are all sharing the same kind of vision and willingness to create a better world. So definitely purpose-driven investors are important in a business like ours. I think as far as speaking from an investor hat, I think you guys, given how committed you are to some of the things that you've shared, it definitely presses us to raise our bar as well, which is I think the reality of the dynamic, speaking from an investor perspective. I mean, obviously, we think there's a huge market opportunity and there's a lot of great kind of commercial elements to the business that you guys have worked on. And maybe that's also an interesting area to share with the audience in terms of the modularity piece and some of the inherent kind of creativity that you've brought to the table. But I feel like that's something that you guys have done very well to spread the wealth of your mission to those that are also participants as investors. So I think that's a really, really powerful thing that you guys are continuing to do. On that point, I think it's interesting, there's certain kind of elements of the business itself that are unique. Now that you're international, and I think that part of it has to do with the form factor of how you guys have approached it, what is unique in terms of the in-farm method, if you may, of either or through its kind of the hardware, the software. There's a lot of interesting components that are maybe worth touching on and sharing. So I would say if I need to focus on one element that makes in-farm unique is the fact that we do everything in a modular way. So we've created a modular farming technique that gives us a huge advantage with entering any market quickly in a capital efficient way and profitably. It also means that each of our farming units is kind of a climate machine. It gives the best conditions to every crop it hosts. So we have tomatoes, lettuces, mushrooms, all growing together under the same roof. And the other thing is that it's all cloud connected. So as much as we deploy more and more farms, we have more and more growing data coming from it, which gives us the advantage of all the time perfecting our growing protocols, bringing better quality while reducing our using of resources. And we can do it in a way that gives us the option to really personalize the offer to the consumers. So we can grow completely different selection in Berlin versus Tokyo, or we can grow the same things. But it's all very much data driven and produced on demand. The amount of data is incredible. And the impact that that has in terms of efficiency and less waste, less water, it's incredible. So I can appreciate that firsthand. But you also publish a lot of this stuff and you're very open sourced about it. And so I think that's also something that is unique to Berlin. Maybe generally we are using 95% less water. We're using 95% less land. And we're not using any pesticides, as I said. But yes, the motivation is all the time to open more, to be more transparent and give all the information from seed to your plate, basically. And we see it as a very important mission for us, not just to give information about our things, but being kind of a catalyst in this food system. And to encourage other companies and other retailers to push the boundaries and become more transparent, more sustainable and more responsible to the food that we eat. Yes. I think there's the two sides of the coin of really pressing that agenda forward. But also In Farm is a business that you guys take seriously. And it's a growing business that's successful. So there's two sides of that one coin, which I think is also the power of the In Farm brand. We have to give a very good product, right? In good economics, that's the basic. 100%. What do you think the future of food is? Tell us, as In Farm, as yourself, as one of the founders of the farm, what is the future of food? And how does In Farm play a part in that? So two-part question. Yeah, so we believe that food should act like medicine. We should all have access to healthy food, fresh food, very diverse that give us, you know, the diversification of nutrients, tastes and colors. And we hope that we will build a food system that can ultimately produce, especially for you, for example, heroes, so you know that you're getting, once a week, you're getting the box of the things that you like the most that are best to your health, that are best to your mind, and that it all comes in an affordable and the easy way. Fantastic. That's the future that we see. Maybe final question for you. What is success for In Farm and for you, ultimately, along that lines of, you know, the future of food? But what does success look like at the end? Success looks like a network of farms globally that can grow lots of things, but can also host other entrepreneurs, food manufacturers, lots of other food companies, and perhaps even going into pharma or other places where plants are needed to be provided in a way that is always keeping the quality and the volumes with no fluctuations. So we hope that this network that we're building will be able to adopt other ideas and other business models in a way that will make our world better. Yes, and I think you guys have a distinct interest in enabling other people to do what you do as well. So it's an incredibly inclusive thought process that the three of you have brought to us. And in my mind, when I think about In Farm, I think about integrity. That's kind of what, to me, the brand suggests. And it's never-ending process, right? It's not perfect, but you guys are always striving to make it better, and I think that that's a really positive, purpose-driven agenda that you have. But equally, I think you guys really do a wonderful job and focus and commit to building a business. And I think it's very hard to find those two together in many places that we oftentimes look as investors. So I feel very fortunate, and I'm sure that people who are participants, either as investors or as employees, that you get to be a part of something that has the balance of both. So from obviously a person who has a vested interest, I would still say that the brand power has a few things associated with it that aren't just about being altruistic. So that's great. And let's do more. I think we're at time. Thank you very much all of us. It was a pleasure.


What we have is a growing number of circuits. And so the question becomes for a city like Mumbai, what are the multiple circuits on which that city is located? And there probably are 78 for a city like Mumbai. In doing that, one also begins to understand, what are the other cities on each of those circuits that are part of this globalized infrastructure? And my fantasy, and it is a fantasy, is that the leadership, both the political leadership, corporate leadership, civic leadership of these cities that are located in one particular circuit that they can start working together, I think of these specialized, multiple circuits in which a city is located. And the diversity of cities on each of those circuits is kind of its instruction for a new type of governance, but also early governance. Now, because of this platform that is built, there is a distributed circuit. And there is a whole series, not just of political issues, but of economic issues that come about. One quick way of putting it is that the global city is a place where inequality grows. And I want to just share some figure from Manhattan. Manhattan being the extreme zone within New York City, all cities, as far as I'm aware of, have inequality, and they have always had it. There are times, though, when inequality grows dramatically. This is one of those times. Now, in the case of Manhattan, I'll just read quickly through some of these figures. You can see that in 1980, when this cycle of globalization is just about to take off, top 20% of earners in Manhattan were just talking to people who actually have a job. That doesn't include everybody in Manhattan. Made 21 times what the bottom fifth made. Now, Manhattan, at that point, ranked number 17 in terms of inequality in the country, all the countries in the United States. In 1990, the top 20% in Manhattan made 32 times what the bottom 20% made. And today, the top 20% made 52 times what the lowest 20% made. And now, Manhattan today has a proud position being number one of all the counties in the United States in terms of inequality. I don't want to speak about, I'm not an expert on all of these issues, but it does seem to me that if it's happening in its including in London, including in Paris and in Frankfurt and in Oslo and in Copenhagen, we see this trend not as extreme as in the United States, but the trends are there. I would give a very high time believing that this is not happening in Mumbai. In other words, yes, globalization brings an enormous amount of dynamism to the picture of cities, to the economy of cities, but it comes with a price, and we've got to recognize that. Now, one of the trends that I find in my work on several global cities, but not in Mumbai, is that what tends to shrink is the standard as economic sectors, the middle sectors, and the middle level of jobs. They don't disappear, but they tend not to be particularly dynamic. They are not growing. What grows is a top 20% of an extremely rich, known middle class and a bottom of a mix of low wage workers and workers with jobs that now pay less than they used to pay. I think these are all very serious issues that need to be dealt with. Component in all of this is the growth of a new kind of informal economy. In the case of the global north cities, whether that is Paris, whether that is Berlin, whether that is London, or New York, this new informal economy is very visible because governments in those countries have managed to regulate jobs and to sort of eliminate older informal economies. This new informal economy is not somehow an agronism in these cities. This new informal economy is part of the advanced urban economy. Not all of it, but quite a bit of it is. In the cities of the global south, this new informal economy is submerged under the older informal economy, and hence it's much less visible, but the research that I know about in the city of South Africa, for instance, suggests that you also there have this new informal economy that is part of advanced capitalism. That, I think, feeds in a place like Manhattan, so it's lower, you know, it's growing in equality. I want to now quickly move because I am being disciplined in terms of time here to a series of data where Mumbai is part of the story. Now, the expertise in the room here about Mumbai is much larger than the team of people. I was part of that team who worked on this study. The study is interesting. We looked at the 65 top sort of cities that some of them are full-fledged local cities. Others are more cities with global city functions. Now, this is just, Mumbai is not on the top 20. This is just a quick framing, and what I do like is that London is number one now. This is not the only study that shows that. But as you can see, the top 20 is a whole mix of cities. I should explain that we used 100 data points aggregated into six major variables, and I'm happy to put the full study on the website.


Hello, and welcome to this presentation of the STM32L4 basic extended controller area network interface. It will cover the main features of this interface, which is widely used to connect multiple devices to the microcontroller. The controller area network, or CAN, is a standard serial differential bus broadcast interface, allowing the microcontroller to communicate with external devices connected to the same network bus. The CAN interface is highly configurable, allowing nodes to easily connect using two wires. Applications benefit from the low-cost, robust, and direct asynchronous serial interface. The STM32 CAN peripheral supports the basic extended CAN protocol versions 2.0, A, and B active, with a maximum bitrate of 1 megabit per second. The BX CAN includes three transmit mailboxes with a configurable transmit priority option, and two receive FIFOs with three stages with fourteen scalable filter banks. This allows the CAN to efficiently manage a high number of incoming and outgoing messages with a minimum CPU load. The BX CAN peripheral also manages four dedicated interrupt vectors. The BX CAN has three main operating modes, initialization, normal, and sleep. After a hardware reset, the BX CAN is in sleep mode, which operates at a lower power. Note, in sleep mode, the internal pull-up is active on pin CAN-TX. The BX CAN enters initialization mode via software to allow the configuration of the peripheral. Before entering normal mode, the BX CAN must synchronize with the CAN bus, so it waits until the bus is idle. This means eleven consecutive recessive bits have been monitored on pin CAN-RX. When the CAN is in normal mode, the user can select whether to run in operation or test mode. The BX CAN supports three test modes. In silent mode, the BX CAN is able to receive valid frames, but it sends only recessive bits on the CAN bus, and it cannot start a transmission. Silent mode can be used to analyze traffic on a CAN bus without affecting it by the transmission of dominant bits. In loopback mode, the BX CAN treats its own transmitted messages as received messages and stores them, if they pass acceptance filtering, in a received mailbox. Loopback mode is provided for self-test functions. Combined loopback and silent mode. In this mode, the BX CAN can be tested in loopback mode, but without affecting a running CAN system connected to the CAN-TX and CAN-RX pins. This simplified block diagram of the CAN shows its basic functional and control features. Three types of registers. Control configuration registers, filter configuration registers, and status registers. Three transmit mailboxes are provided to the software for setting up messages. The transmission scheduler decides which mailbox has priority to be transmitted first. The BX CAN provides 14 scalable and configurable identifier filters for selecting the incoming messages the application needs and discarding the others. To receive FIFOs, FIFO 0 and FIFO 1 are used by hardware to store incoming messages. Each FIFO can store three complete messages. The FIFOs are managed completely by hardware. This simplified block diagram of the BX CAN in dual CAN configuration shows the shared 28 acceptance filters between the two BX CAN modules. The user can assign each filter to either FIFO 0 or FIFO 1 and configure each filter for identifier mask or list mode. Note that this dual CAN configuration is only available for STM32-L496 for A6 devices. The controller area network CAN bus was originally designed for automotive applications, but is now also used in many other contexts. Here is a summary of CAN interrupt events. Transmit, receive buffers for FIFO 0 and FIFO 1 and error and status change interrupts. Here is an overview of the CAN low power configuration modes. The device is not able to perform any communications in stop, standby or shutdown modes. It is important to ensure that all CAN traffic is completed before the peripheral enters stop or powered down modes. For additional information, refer to the training modules for these peripherals which may affect BX CAN behavior. Reset and clock controller or RCC for more information about the CAN clock control and enable reset. Interrupts for more information about the mapping of the BX CANs interrupts. General purpose IOs or GPIO for more information about the BX CANs input and output pins. There are few dedicated application notes with the CAN topic. To learn more about the CAN interface, you can visit a wide range of webpages discussing CAN interface issues and bus monitoring tools. Many digital oscilloscopes support direct reading and analysis of data performed on the CAN bus.


Alright, you are still watching Waze. So this is where I'm come. Today is the International Day of Peace. It's observed globally on September 21st. The United Nations General Assembly marks the day by promoting ideas of peace amongst nation and people by observing non-violence and ceasefire for 24 hours. This year's theme is end racism, build peace. The UN General Assembly has declared this as a day devoted to strengthening the ideals of peace through observing a 24-hour or 24 hours of non-violence and ceasefire. I love this particular year. Cease and racism. I love this particular year. Let's start with the fact that your English name is peace. I forgot that you are called peace. Actually, I gave myself that name. My parents only gave me one name, Osayuame. So I added peace. And I think I was in the spirit when I added peace. You must have been in the spirit. You manifest it. What's in there? I'm saying that the name has really tamed me. The name has connected with me. Because some people wonder how I'm able to forgive, move on sometimes. So I just think maybe God was seeing ahead and said, you know what, let me add peace to this name. English name is Grace, but I know they forgive. No, but you have Grace. Look at my voice. What am I saying? But I don't share that Grace. Grace comes in different capacity. She will give me lecture now. I can't express myself. Don't you give it to me. It's peace day. So namaste. Namaste. It's my day. In case you love me. One peace day. Let's share the grace. You know, as my name can out. So just indulge me because I'm going to be peaceful all day today. No problem.  I'm ready for the trouble. And out the window the peace goes. No matter what you do for a person in need. All right. So my news is quite interesting today. And it was tagged every day for the thief and one day for the owner. Very interesting story. Very interesting indeed. I mean, I would usually not go for stories like this. But I found it quite interesting. So there's this viral video, you know, on Instagram about a suspect. Oh, where me, Olufemi. I don't know if they can show the video. But Olufemi was intercepted by policemen on their stop and search duties. Along Gibara, Odoa Kurero. So he was riding on a motorcycle with a school bag containing different denominations of Naira Nooks. He could not explain the source of the money, nor give an accurate account of the total amount of the money in his bag. Later he confessed that he had stolen this money from a church offering for business. At CAC Church in Arakheji, in Oshun states. And the money was sorted and counted by the police. And it came to the amount of 220,000 Naira, 20,115 to be exact. So he stole including people's prayer requests and offered money. So imagine you took both people's prayer requests and their money. It was entrusted because you cannot stay from God and get away from it. Well, no, not well. Assuming people are given. So the church, they gave the money to the church to God. So you stole and they say one day for the owner. And the police people were on duty. But I want to ask you something though. Is this his first time stealing? Well, we don't know all of that detail. But it's possible that he could have been. Because for you to go and take off a whole box. But I want to ask though, for how long has this stealing been happening? The truth of it is that you can't know. But like they said, there's always one day for the owner. You could have been getting away with different things. You know, sometimes these things even start from childhood.  Picking things here and here until you keep progressing. And then you go for the bigger ones. And then one day, the owner. I like that one. One day for the owner. But someone who's a joker saw same quotation on not anything to do with this guy. Say in 99 days for the thief and one day for the owner. And you know comment section on that. Someone came and said, then it seems to me that the thief is enjoying more than the owner. If the thief had it for one day. The owner has to wait for one day. And the owner only has it for one day. But then again, it also points to the fact that people are desperate. And they would do anything. Anything, including going to the church. To steal prayer points. To steal prayer points and offering. I think it's about to become an assistant. I like the stories. Okay. Mine is good news. I don't even know if we have a write-off for it. But once I found it, I know her as Kiki. Bukumi. Everybody knows her as Kiki. She, okay, it's Bukumi Adiaga Ilori. Announced her... You said when Crystal learns this, you know, for this room. Announced her pregnancy just yesterday. And social media went crazy. If anybody knows Kiki is a joy giver. She has content for youngs. Content for days. I personally have been looking at it, you know, judging from her style changing and puffiness of the face. Of the nose. That I think this girl is hiding something, but I'm not a room watcher. So I complimented her two weeks ago and said, that's Kiki. What I admire about you is that you have content in your archives. That for the next three years, if you don't do anything and you don't leave your house, you will be able to give out, give them, give them without anybody realizing it. But again, when she was releasing the news about being pregnant, she released a single called Luru Ko Jaisu. And she was professing goodness into this one child's life. Oluwa Shin, Shin no, I've maybe not messed the name up. But it reminded me of the Jabez prayer. Although Jabez had experienced something negative before he actually said the prayer. So what is most interesting to me is that number one, a thousand and one people knew she was pregnant. Nobody shared it on social media. They respected her boundaries. They respected her wishes. And she was so kind and friendly enough that even though she's in America, she was taking pictures with people and telling them, please don't post. And nobody posted until she actually said she was pregnant.  I love that part. But for me, the thing is that I was at a wedding. A wedding I wore the Lilac dress. Kiki was the emcee. Wasn't that the one that she had the ruffle in front of her? She posted a picture about yesterday. She said this is the wedding that they ride with bumps into my stomach and I was like, these people don't know there's a shine in here somewhere. It's not even that. She was also, she hosted dot media. She hosted dot media. That's what I'm saying. That's what I'm saying. So that's the terms that she pulled that she fell off the stage. And the event that I attended at the wedding, she was, so the energy. When she got blessed. Yes, she's blessed. I'm kind of like giving, do I give her energy? But Kiki, I watch her and I'm like, how does she do it? She's on another level.  It was such a beautiful video. Alright, so on that note, my story, I shouldn't have even taken a story because I thought it was lovely. You don't want to spoil my story. I don't want to spoil my mood. This is your bad news kind of story. Okay. The president of the Federal Republic of Nigeria advocates respect for free speech. Okay. I found this very contradictory. So the president, Major General Muhammad Bihari, retired on Wednesday, urged fellow African nations and United Nations members to uphold free speech. This was, as he called for the protection of vulnerable communities against misinformation, which he said had driven most of the armed conflicts in Africa and around the world. Bihari made this comment during the last address as the president of Nigeria because this is his last address as the president of Nigeria at the 77th session of the United Nations General Assembly that is currently holding in New York. So I love the fact that he's talking about free speech. I just want us to just make sure we take it a notch higher as the elections are coming. People will be making noise. There will be arresting people yesterday. In the video and TikTok of one of the human rights lawyers that was jailed, right, that has been released. So I'm just saying to you guys that it's not enough for us to just say, okay, say all the right things. Let our actions begin to profess and, I mean, and no, let it show that we are actually advocating for free freedom of speech when it comes to Nigeria. I believe very quickly. I believe it was when the army was the military ruler that he said freedom of speech, but freedom after speech is what I can't guarantee. Don't let them treat you into saying something that would take your freedom away after speech. Absolutely. So on that note, let's discuss lawlessness and we have our guests with us. Stay with us. We'll be right back.