Thank you for staying with us. You used to watch in the breakfast on plus TV Africa and right now We're talking about climate change and the need for sustainable practices in and Nigeria Well, we have our guest grace all the cheese is a co-founder and executive director at climate action Africa. Good morning, Matt Thank you for joining us Good morning. Thank you for having me. Okay, so let's talk climate change I'm sure a lot of people are asking what does Nigeria have to do with climate change Especially because we just went to cup 28 with the president and some other delegates from Nigeria and Most people are like climate change doesn't happen in Africa Weather is warm all around so while we have in this conversation climate change and we're also talking about sustainable practices So just you know, walk me through climate change first then we start to talk about the sustainable practices Yes, I mean climate change and the science of it really is just say that there's global warming There's this whole ecosystem that has to support the world and as we human activity So things like driving your car Putting on your generator cutting down wood to cook with oil and gas industry Manufacturing there are all these carbons and methane their emissions what they call greenhouse gases that go into the air and they keep affecting The global warming space and it's making it hotter So temperatures have gradually been increasing for about a hundred years now and last year actually was the hottest year in human history So everybody on the planet all organizations human activity is increasing greenhouse emissions Which is causing climate change So when I when I first asked and I said most people are wondering what does Nigeria have to do with climate change?  But how important is it for us to start to look at climate change? It is very important because as much as the data has shown that Africa has not contributed a lot to greenhouse gases because we are not as industrialized as the rest of the world It doesn't matter because right now the sun or the ecosystem within which planet earth exists It's not going to destroy one place and leave another place if the world is going to collapse Everybody's going to be affected by it, which is why climate action is actually global Climate change is global and climate action as well has to be global effort Nigeria's we think it doesn't affect them. I want us to go back and look at our land, right? I think about 70 percent of land in Nigeria now is being affected by desertification We have like Chad that is a major land and Almost a cultural heritage that supplies most of the Sahel with water which has shrunk by almost 90% in the last 30 to 50 years So these are all things that are affecting us acts the farmers were on the field They may not understand the science of climate change But as somebody will grow up on the farm and I have conversations with my mom I can tell you that they can feel it We're seeing even cocoa farmers coffee farmers who are complaining that this freak change in weather patterns and Climate is making their produce not come out as it should be they're not producing the same yields as before So it's affecting us whether we want to believe it or not that we need to take action Okay, so I have one cheeky question in Nigeria right now almost everyone from Abuja to Oweri To Annambra to Delta everybody's complaining about the heat, right? Oh my god It is so hot even here in Lagos. There is no wind nothing. It's just like you're breathing humid air really So could climate change affect this like the weather right now and you know all of the heat that we're experiencing Could that be as a result of climate change and maybe because we're not taking it seriously? It is as a matter of fact that is what it is last year Nigeria got about 45 degrees In some parts of the country and right now we're seeing 40 41 percent and it could get hotter Because as a matter of fact when they met in the Paris in Paris in 2015 for the coq 15 Price 15 agreement. It was agreed by global leaders that the world should not exceed 1.5 degrees in terms of temperature rise But last year we hit that mark and it was a prediction that we're not supposed to hit to 2016 I was supposed to take all this action to see that we don't hit that but we've hit that which means that places are gonna get Hotter is almost like I mean I live my house because it's ACI you go out in the morning for a walk And it's just stuff is like what is happening and that is climate change There is places are going to get hot even places that were not hot before we should start experience should start experiencing more heat and increasing temperature That's quite alarming because right now we need to start to look into this and take you seriously because like you said if If any part of the world is affected we're all still in this world together and you don't have another place You're running to so I think now let's start to talk about sustainable practices What are some sustainable practices we can start to you know Even incorporate to our everyday life to ensure that we're taking care of our planet because or we're taking care of this Ecosystem because basically that's what climate change is about We're probably doing things that we're not supposed to be doing and for that the ecosystem is just having like a revolt really So what are some sustainable practices that you would advise us to start in vibe? Thank you And I mean I'm going to go for passenger love later because that's like one of the biggest things We've seen that last year the energy transition program released a report that said the cooking industry in Nigeria was contributing about 22 percent to energy emissions, which means because 75 percent of Nigeria uses Wood, kerosene and clean methods. So one of the first things that we can start to do as a country is transition our cooking How do we ensure that 100 plus million Nigerians who use on clean cooking methods start using clean cooking methods to cook? I mean there are all these innovative products now that use solar energy to cook We have our gases that are better for the environment than charcoal Nigeria has lost I think almost how many Hectares of land to firewood cooking and that is those are part of the trees that should sustain Our environment and absorb carbon because that's what happens The ocean and the trees is what is supposed to absorb the emissions that go into the atmosphere But because we keep cutting down trees we keep destroying this ecosystem then it becomes worse Plants have plants around your environment plants as much as possible because it's it's it's what's gonna save us I want people to volunteer with projects that are around tree planting and other sustainable practices in your house as well What's your energy consumption? Do you really need to have five aces on at all the time? With this heat most of you're like all of the aces need to be on because it's so hot That's the sacrifice right now Yes, yes, let some places like let's choose them. I mean they're cleaner energy sources Like there are all these solar fans that consume less and they're all these cleaner Energy options that we could be using do you want to transition part of your house to solar energy?   There's so many things the list is endless and I think that everybody just needs to do Their own small part to ensure that you're keeping safe your community because it could really It really make or break what we see in the next couple of years, okay? So I've heard you know the list of things that we've said, but some people might argue that Going for this sustainable practices might be expensive because you talked about, you know trees were cutting down our trees So obviously the what's supposed to be giving us good oxygen. We're taking it away And it's not absorbing the carbon, but some people in the villages will tell you that that's all I have I don't even have money in this whole economic crisis of a nation that we're in How am I supposed to get money to start to look for a cleaner source? How how Why would I not choose, you know just cutting down the tree because it's faster. I just burn it quickly I cook my food. I have to put food in my belly So if I don't eat isn't it in fact, let me use let me use co-loc water I'm not pressing when you don't chop 90 think of ecosystem. So some people might actually argue that what's your response? I Think so that's that's the truth and I do understand that for the comments because again What's in poverty levels rise, which means sustainable sorts of options are becoming increasingly expensive But what I want to say is that it has this expensive for a reason, right? For example these innovators it's costing them a lot more to produce these things because They have to import a lot of things is becoming really expensive I think it has to be a two-way street the innovators and the manufacturers of sustainable solutions need to meet us halfway and We as well as the people need to meet them halfway Ensuring that we increase demand for some of these things because when you increase demand what will happen prices will drop Yeah And I think from the government side of things and even from the finance side of it both public and private sector We need to incentivize Clean credit and clean financing and incentivize some of these changes for example I know the company burn is a clean company clean cooking company that works in most of East and southern Africa They even pay people to use electric stoves to cook or order clean options because there are all the schemes around carbon credits and all that I know it's expensive But we need to increase the demand and we have to become innovative around how we price these products and you know How we make finance available for these people so that they can Increase production and we almost have like mass commercialization Because I mean it's easy for everybody to find wood or charcoal to cook But how easy is it for you to find some solar cooking solution from the shelf? It's that's that's where the problems are thank you Okay, so I know you talked about people trying to you know, just make sure they do this practices But I want to find out what's the role of the years because I know you start like especially with the Genesis There is so innovative. They're thinking, you know future forward, right? So what can we do to ensure this transition from this old traditional practices to the sustainable ones that you've listed I Think it's hard But one of the first things that we have to do is we have to come to this Realization that this is affecting us and some things are almost non Negotiable like clean cooking at this point We have a very short time to transition to clean cooking and I also think that we need to come together and start Itirating and looking at what what is the best way to maintain cultural heritage and tradition and also ensure a sustainable future Because what is the point really of keeping a practice that will hurt the future that your children will exist in? And we're having a lot of innovations now come up in the sector And I think that's something that could really help us and we also need to maybe go back to some policies and see how Communal policies to ensure that we are creating this balance within the ecosystem Preserving tradition and also ensuring that it is sustainable. Okay, you talked about clean cooking, right? Now some people would tell you that party gel off would fire with is the best so what happens When I cannot in my party gel off anymore, what happens like am I going to now start to just eat bland gel off But that's why I just wanted to make light of the situation. We you talked about policies, right? What policies do you think the government can put in place for us to transition?  This is how my parents, you know, I brought me up This is I'm a product of my environment. This is all I've ever known So you're telling me to move over to something else because you call it clean Who says it's it's clean who says I have to do that So are there policies that the government can put in place to ensure that people start to and it may be Incident, you know, just give like an incentive just like the one you talked about That can make people just move over to clean energy. I Think yes, there are already some policies in place So Nigeria has the energy transition plan that has been so supported by sustainable energy for all Nigeria actually has the climate change and adaptation plan for 2020 to 2030 that was enacted By the former administration their policies in place But now it's how to bring a lot more private sector and how to even mainstream this policy so that everybody's aware of it Do we even execute these policies? Exactly. So we need to be there needs to be investment in education and awareness of these policies to ensure that there is mass adoption It's almost like a mental re-engineering that has to happen so that there's behavioral change and we also have to incentivize Like I mentioned earlier, it's important that we incentivize this some of these policies I think that's what has been the missing link for For most of some of the policies that exist that needs to be insensitive because for us to actually create For us to actually create social change You could you have to either choose to punish or to incentivize and I don't think punishment is the way to go Yeah, because we're already being punished a lot by planet and Private change so we need to incentivize some of these policies to ensure that people can adopt it run a faster Okay All right, so do you have like any words that you can just use to challenge people to start to? Take care of the planet take care of our climate I Think I think the best way to put this or to say is is to understand that we don't have a second home I mean Elon and a few others and I think Bezos yeah, they're trying to go to Mars or something else I don't know how many of us in Nigeria can afford to get on one of those rides But this is what we have as a matter of fact, this is what we have Nigeria is all we have planet Earth is all we have so we have to be intentional I want you to even just think of the fact that 70% to 80% of us Leave off mother earth on this country because we are farmers. We are pastoralists.  We survive because some of the earth oxygen and all of that So there is no other option than for us to take care of it Then for us to listen to her crying and say that okay, how do we make this work? We need to go back to living in harmony with nature so that it can continue to preserve and protect us All right I think I for me I I love the fact that we talk about climate change because I am passionate about the environment So I wanted to ask how do people are there like partners because I want to believe there are people like you Who are championing these causes? So are there partners people we can partner with? Is there is there a way we can even do more besides the awareness Talking about this is one thing but doing it is another so are there maybe NGOs anything that we can actually partner with? Yes, yes, and yes, I mean, there's there's amazing amazing projects In abuja, for example, you have clean technology pop that they're always looking for volunteers to work with You have projects around. I think there's Isano Africa that is always doing something with farmers. We have farm crowding We have sun pump. There is even recyclers recyclers for our points. There are all these amazing organizations that are trying to do something to advance Climate action globally and in Nigeria that I think the youths can volunteer with you can donate to I remember from crowding actually used to crowd source for funds And I don't know how that went and I did not see the final report of that But then how do you donate to some of these exercises? How do you volunteer? How do you give your time? How do you even give your resources? So it must not be money But how do you just go sit on the table and co-create with these people if they invite you for strategy sessions? Go because your input about your community could shape how the design programs and policies and initiatives that better support us Okay, so I want to ask now the role of innovation technology I because I believe that technology is the way forward in fact technology is the future and the future is here So is there a role that technology plays in all of this with the climate change? Yes, yes, yes, and yes I think technology is going to be one of our fastest ways out of this and we're seeing Really amazing innovations come out from from from ground from roots here right in Nigeria and from abroad Um, for example, I mentioned sun pump earlier And they are like an off-grid solar pump for smallholder farmers enabling them to continue their work This farm crowded that is using data analytics real-time data to support how farmers Produce we're having technology that is also increasing like things around seed resistance From diseases to ensure that farmers can have better yield And this is not GMOs just to be just to be clear And we also have people that have solutions around flood forecasting and droughts and justification That early warning systems that can be able to pinpoint people to okay Maybe this is the action that you need to take. We have even now the even solutions for Carbon intensive housing like even the cement that you used to build your house could contribute to climate change So there are better options that technology is producing now And I think recently even the big tech like google they've launched through google maps They're trying to map out where we have maintained leaks on planet earth Which means where are the quotes quotes of this emissions and what can people do around that area? Or how can government even put more pressure on people in these areas to see that the stop whatever activity they're doing Or that the transition needs to better Enable sustainability of of the earth So there are all these amazing technologies that are coming up and people keep innovating and that's what we want to see Innovate around regenerative agriculture like I mentioned earlier 70 percent of Nigeria's arable land and farmland Is being threatened by desertification. How do we ensure that we can regenerate our soils for better for better production for better yield? Okay, so let let me bring you to Africa because when we started you talked about lichard drying up really and I wanted to find out is there are there ways that you know the african countries can collaborate together To find effective solution fine I know it's it's not just about africa because it's the world at large and If something is wrong in other parts of the world africa is also affected But let's start from where we are because we can say oh, yes We have these lofty ideas. We want to do this. We want to do that But you have to start from where you are So from here in Nigeria from here in africa are there ways, you know We can collaborate together to look for effective solutions that can work They might not be um, they might not be swift In the sense that people would just some people can't be resistant to certain things But can they collaborate to start to you know sensitize the people Create more awareness and then start to even work with the international communities on how we can find effective solutions Yes, yes, and yes, and I think As much as it's not just about africa It's easy about africa because nine of the 10 most vulnerable countries to climate change are actually in africa And africa is probably one of the most vulnerable at this point because we've not had adequate Infrastructure to support us in case of massive disasters I want us to imagine the rains and the storms that took europe in 2021 and 2022 If that happened in nigeria almost african cities would we have anything left? I wanted to just think about that So africa is really exposed at this point and vulnerable So it is about us and last year september We were really excited to see africans come together in nirobi for the african climate summit and have one voice and say This is what we want to see achieved on our continent when it comes to climate change So there's already the nirobi declaration that is a full body of work that shows the different calls to action and Commitments that africa can make to improving To attain the climate action for itself and the global community And this document is so powerful because it draws inspiration From the paris agreement from the unf triple c other frameworks and even from some a u frameworks to say that This is the way to go and in terms of what nigeria can do. Yes We can start collaborating on energy projects. We cannot do it alone. How do we leverage the resources of our neighbors? How do we even share our resources with our neighbors to ensure that we are creating a sustainable ecosystem? Because guess what if we protect ourselves and nigeria or cameroon is not protected and there's anything that happens there They're going to there's going to be an influx in nigeria So this is not the time because displacement is happening, right? They didn't come into nigeria and this is not the time for anybody to say I want to go at it alone that needs to be a lot of collaboration between government Between partners cross borders private sector. How can you working in energy in nigeria collaborate with the people in nigeria In cameroon in togo in bernard How do we come together to ensure that we are creating collective action because that's the way we're going to accelerate results Yeah, I love that. I think this is a Good way to just land it collaborating working with one another and just finding ways to protect The ecosystem finding ways to protect the climate anyways, I want to say thank you for joining us I really learned a lot from you and I'm sure our viewers are told my just like oh, yes I want to I've jotted out a few things that I want to start to imbibe into my daily life I want to say thank you so much grace ology. Thank you for coming and just bringing your wealth of knowledge to us Thank you so much Thank you so much for having me. All right. Have a nice thing You too. Bye Okay, we've been speaking with grace ology. She's a co-founder and executive director of climate action africa And we've just been talking about Climate change and the sustainable practices we can start to imbibe in our everyday lives Anyways, this is where we wrap it up. But first, let's just check out our quote of the day Okay, so our quote for today says don't worry about the pressure or the responsibility Just leave in it. Have fun and when everything seems to be going right Just stay humble and remember your family. Do not think about the pressure. Do not think about the responsibility It's okay to think about it. But don't worry about it. So that is the charge. Don't worry about it Just be humble think about your family. Enjoy. Have fun, right? You can only leave once That's that's one thing that we young people like to say you only leave one So enjoy leave in the moment. Anyways, this is where we wrap it up on the breakfast today It's been an amazing ride this week. Well, we'll do it again next week. See you on monday. My name is rome Paulson. Have an amazing weekend


Hello, welcome back to Exotic Wine Travel. I am your host, Matthew Orkey. Hi, I'm Sharon Tan. Welcome back to the show today. We are going to be talking about wines from the Salento Peninsula. We actually recently just got back from filming a travel log style video in the Salento Peninsula. It was supported by several producers and we're going to taste some of their wines today. I'm actually pretty excited. We have a couple of producers here that we actually visited. We got these bottles from Salento Wine Shop, so I want to thank them for sending them over. Any thoughts you want to give on our trip in the Salento Peninsula? Well, the Salento Peninsula era was used to be known for making lots of about wine in the past, but there is a very strong and determined quality revolution going on right now, and we discovered many gems that are worth sticking out. Yeah, in the past known for bulk wine, table wine, or plush easy drinking reds, but we did find some serious examples. We have two interesting producers here today actually, so funny because we have like kind of a basic everyday type wine, table wine, and we have more of a reserve wine. So let's get started. We're going to start out with the the Tenuta Emera Quale Rosso Salento IGP 2017. This is a table wine, actually meant to be a fun easy drinking wine. It's kind of going to get a flat little bottom there. Tenuta Emera, it's owned by Claudio Quorta who has actually three wineries, one in one in Campania called San Paolo. Tenuta Emera is in Salento and then they also have another winery called Cantina Moro, so it only makes one wine. So I know it's kind of confusing. That's the world of wine. Quale is named after his daughter, Alessandra Quorta. This is kind of her idea of making a simple everyday wine. This is made from merlot, primitivo, and negro amato. If you're experienced with their wines, you want to... So by the Alessandra word, this wine is meant to be like a democratic wine where she believes that wine, good wine, high quality wine, should be accessible to everybody, which is the reason why she made this wine. I love the entire portfolio, Claudio Quorta, because of the diversity. There are quite different styles and characters and nearly every single wine, among three wineries. And I think it's meant to be that way to reflect the teua, where it comes from, and also to provide different tiers of wine for different people with different budget and preferences. So I think they almost got the whole range of, I would say, the whole wine market cover with the entire really big portfolio. I'm actually a big fan of... I'm not a big fan of Greco de Tufo, but the Greco de Tufo from San Paolo is fantastic. Tenuta Emera, they focus mostly on negro amato, primitiva di mendoria. Let's get started here. I'm going to have a deep color. I think this clocks in at 13 and a half alcohol. Kind of like... Vanilla sweet spice. Not a super dark color. Yeah, not super dark color. Spicy, spicy, but you get this vanilla sweetness to it too. Red fruit, again, this is supposed to be... This is not supposed to be a serious black buster wine. This is supposed to be more kind of like a table wine.  Very brown and plush on the palate. It's a nice, like, foot wine. It's tangy. The tannins are soft, so people that aren't... that people don't like the dryest, stringency tannins, it's going to be easy drinking. But I would say there's enough seriousness here to... The white people are not going to keep this off the table, right? I think it's just a very balanced, very nice drinking wine because you can feel the plushness and the sweet fruit on the front palate, but what makes it kind of like serious and balanced is you get a tanniness on the finish. For me, it's really enjoyable. This is like a pasta wine, tomato sauce wine. Really enjoyable. For me, I'm like kind of like an 87-point range, which I think is very nice for a wine that's supposed to be under $10, easy to drink, no fuss. Yeah, if tasting this at a competition, I probably would give it a bronze for the well-balanced, characteristic. Next, we have more of a reserve specialty, geek wine. We have the Paloma di Archangelo Il Vino Malvasia Nerda 2015, the Paloma winery. We spent time with Miquelis, the third-generation winemaker in the village of Coutrofiano. If I... Yeah, I've got that right. They used to focus on bulk wines. They're actually made and labeled. It's called Matushko, which I thought was funny, and their dialect Matushko means get drunk. That's kind of their basic wine. Making easy, approachable wines. This is more of their reserve wine. What are your experiences with Paloma? I'm very excited for Miquelis to be leading the winery forward, because he's young, a very passionate guy and very intentional, you know, exactly. Like when he makes his wine, he knows what he wants to achieve, he knows what he wants to do with the vineyard moving forward, and you can see the quality development that he brings. So, Malvasia Nerda, this grape is usually blended into Negromaro in Siliccia Salantino, I think in the Salento IGTs, the Salento DOC as well. I think this is slightly off-dry, if I remember. 15% alcohol. It is a big boy wine. Malvasia Nerda is a very interesting variety. It's kind of floral. It's a red floral grape. I often find that a nose is pretty aromatic.  So, let's see. So, there's browning on the edges. Yeah, it's a little bit of color to it now.  Yeah, I find that the strut here is a little bit too worse, the compost side now. A little bit of browning on the edges. There's a little bit of Mediterranean oil. A little bit of pepper, I would have to say too. Yeah. Do you get any of the floral aspects that we get in Malvasia Nerda? I do. I do. I still do. Yeah. Pretty nice. Is it too cooked? Is it too ripe? No, the ripeness immediately comes through, but there is a balancing factor to it with the floral note and yeah. Let's give this a go. I think the entry pallet, the front pallet and the pallet, it's wonderful, almost silky, and then the tannins kicks in on the finish and also it shows the ripeness of this wine. There's a touch of residual sugar. I think this is about four grams. So, maybe it's a little bit less than that. It's big wine. People that like the big California wines are going to like this wine, surprisingly silky and big, but you know what, it's surprisingly tannins coming out of the bite. Yeah, I think that's what makes Malvasia Nerda very interesting. We have tasted this before. For me, this is not my style of wine, the big humongous red. There's a lot of people that are going to like this wine. I think most people are going to say it's easily like an 88, 89 point type of wine. For my personal pallet, I think it's very well made. I respect it tremendously. I usually don't like those bigger, heavier reds, but man, this shows the polish of what Salento fruit can give you and what the winemaking can do to round out the process. Yeah, and most importantly, Malvasia Nerda is a very interesting wine grape that you should definitely see go. So guys, I'm going to put the link to our travel video through Salento, through Traveling through the Food and Wine Salento. I think that you're going to really enjoy it. I'll put it in the description box. Check it out. And if you like this video, please subscribe to our YouTube channel, exotic wine travel. We'll see you at our next episode.


Let me perhaps make a few comments about the crisis of the euro and then end up with Observations about the country that I know best as they say in Brussels Let me remind you first of all that it is now almost three years Since what had begun as the biggest financial crisis of the West transformed itself into a European crisis and And it was that time that people realized What a currency without a state implies? Many unthinkables have happened in terms of policies since then In terms of bailouts that were not supposed to happen restructuring of debt that will be only imagination of anybody huge refinancing through the European central bank new forms of Closed bilateral cooperation in terms of fiscal and economic policy that bring us into new and uncharted Territory in the European Union new firewalls that were supposed not to be there Because people were afraid of horror of moral hazard and so on and so forth But yet despite all this series of unthinkables in the last two and a half years We are not near the end of the crisis of the Europe and While the economic situation especially in large parts of the European periphery is steadily deteriorating Now it seems that the majority of economies and policymakers I insist the majority of course not everybody agree what a solution would more or less imply in broader and Now we have ended up agreeing that one of the things you require is a banking union The other is a more advanced form of a fiscal union and most people then add up the political union Dimension to the first two now you might say that the devil lies in the detail We agree in principle although many of us do agree in principle about the need For all those three things yet. We find it extremely difficult to implement the measures that go along There is disagreement about the detail there is disagreement about the sequencing and And If I may go through a list of three or four simple reasons it seems to me Why we have such difficulty in agreeing The first of all first of all there is economic divergence which has widened inside the European Union Because of the crisis so the crisis has increased economic divergence inside the EU and the eurozone in particular What is happening? In fact if you think about it is that The periphery has been hit much harder than the center so now we are experiencing in the last few years a reversal of the old process of European integration as a convergence machine now This is divergence machine and In fact it can actually go on for a few years to come So if you have economic divergence You perceive and you live the crisis very differently Depending on whether you live in Germany, Finland, Austria, Greece, Ireland and Portugal So that makes it very difficult to agree There are also differences in terms of economic perceptions For example, there are differences between economists and policymakers as to where you place yourself on the spectrum Starting with stabilization on one end and growth on the other And that's very difficult, but of course your perception is colored to a very large extent by where you sit or stand The third point is that the stakes are very high Which means also that the bill For solving the crisis is potentially very high and if the bill is very high the question that follows is who pays the bill and How do you distribute pain and this is in fact one of the most difficult things We are facing in the European Union today when we were discussing about a European guarantee for bank deposits We assume that those who have Qua credit worthy will be under sign underwriting a check which Hopefully will never be cashed, but if it is cashed then the bill is huge And then you try to explain to Germans Finns, Austrians and others that this is a check They should sign for the benefit of other Europeans and that's not easy But there are two other reasons which I think are political reasons which make an agreement on the solution To the crisis very difficult One is that there is declining support for Europe Europe wide solutions inside countries Because there's growing populism there's growing nationalism as a result of the crisis and therefore Popular support for potential European solutions is much weaker now than it used to be three four five years ago and Then if you add to that something else and this is there's been a decline of trust between countries So European support is declining inside countries and trust between countries is also declining The combination of all those things make Europe agreements very difficult indeed Now the only thing that is keeping our Show on the road still is the realization by everybody concerned that the cost of failure May be beyond our capacity to imagine what it's going to be like Not only the cost of failure in economic or financial terms But also the cost of failure in political terms for European political integration as a whole So if I were to summarize the situation perhaps we are in today, I would say that economics dictates more integration But the political appetite is lacking and Which of the two Wins in the end is still an open question My guess is that if I were to take a bet is that we will end up with more integration Economic financial and political as the necessary price to pay for saving the euro But this is by no means to be taken for granted. It is still an open question now if we do end up with more integration and with euro intact then The next question that arises or arises at least in the minds of several people is whether we are likely to exit the crisis in one piece or whether there will be bits and pieces that fall off and When people talk about bits and pieces that fall off They usually have my first my count my own country in mind So there's been quite a bit of speculation Over the last year or so as to whether Greece would remain a member of the eurozone or not let me start with The good news and then move on to the bad news again good and bad Depends very much on what your interests and perceptions are of course But assuming that we all have the same interests and perceptions. Let me go through the good and bad news now Greece Was as you know the catalyst for the transformation of the international financial crisis into a European crisis in the end of 2009 Because at the time when markets began to realize that the next phase in the crisis was sovereign debt And also internal eurozone problems Greece appeared as the country with the worst combination of 30 deficits namely a budget deficit a current account deficit and the deficit of credibility Now the deficit of credibility we caught in Greece because our politicians more than they are counterparts in other countries had proved to be extremely economical with the truth and Very creative in the use of statistics. That's my diplomatic way of presenting the Greek problem Okay, so Greece became the catalyst for the crisis The reaction of most of its European partners at the time was that It was not a problem for the rest of Europe It was a problem for Greece to deal with in the same way that Germany's first reaction in 2008 and 2007 was that this was a crisis that did not affect Europe it was a problem for Americans to deal with then when the creek Problem erupted that again the first reaction was that not my problem yours So deal with it now both my compatriots and the rest of Europe did it for quite a while and Then when we finally ended up with the first bailout mechanism So Greece opened the way for new bailouts to be decided for other countries So in that respect we are pioneers if you wish Then The attitude I mean you read the communicates The attitude was that Greece was unique So it was a unique problem that required unique treatment nothing to do with our country Now of course soon the European Union discovered that there were other countries that had problems So the crisis was not confined within the boundaries of the Greek state But still many people Insisted that if Greece was not unique at least it was very different and more difficult than the others Which is perhaps true now. What's the good news? The good news is that? Greece has delivered a Much has much in terms of fiscal consolidation in the reduction in budget deficit that Greece Managed to get in two years is the biggest reduction in budget deficit that any OECD country has delivered for decades It was more than six percent of GDP in two years With GDP declining fast now we have cut down about eight percent of GDP deficit We are about one one and a half percent of primary deficit in our budget So fiscal consolidation Pretty remarkable. I think success if that is success Greece has also delivered in terms of internal devaluation which is what the IMF and the Commission was preaching So depending on how you measure things, but there's been an internal devaluation in terms of wages and salaries of the order of about 15 percent in the last two and a half years, which Not much for in a short period of time The other good thing is that Greece now has a coalition government, you know Coalitions and compromise are almost dirty words in Greek political vocabulary. We're not used to compromise compromise Is in fact a dirty word in Greek as it is for example to a large extent in French But it is not in German and it's not I think in English Compromise if you write on a Greek headline compromise that means bad you have done something wrong Because compromise means giving in So compromise and coalition now we have a coalition government consisting of three parties We haven't had coalition governments for decades. So we are trying to learn this game Which is not easy to learn in a short period of time under duress but We're making some progress and now we have a government That seems to be also more determined than its predecessors to move ahead not only in terms of fiscal measures But also in terms of structural reforms Structural reforms the problem in Greece of introducing structural reforms Especially reforms that affect the role of the state is that they will be Undermining the clientele basis of Greek quality and that's why it's difficult politically So the people who run a clientele system you are asking them now to dismantle it and they don't like it naturally, right So but we are making progress on that score as well And there is another piece of good news which is important and this is something that has changed in the last I would say three months in Europe until about June July a Significant part of the German political establishment to a much lesser extent in other countries were convinced That an exit from Greece from the Eurozone was a good thing Either because it was a lost cause they thought so you get rid of the weakest pupil or because an exit from Greece would Help to tell others how to behave because punishment may follow to others This has changed So in the last two or three months, there are very few people who argue along those lines So the predominant view now again with exceptions But the predominant view in Europe is that the exit of any country Greece or any other Risks creating domino effects that will lead to the end of the show So these are the good news. This is a good news the bad news is That the Greek economy more than the Spanish economy the Italian economy the Portuguese economy And you tell me whether it is also the Irish economy, but I think less so It's caught in a deadly trap of austerity and recession And it can't get out Then Greek GDP will have declined by 20 percent by the end of this year since the beginning of the crisis and It is and recession is expected to continue of the order of between four and six percent next year So, I mean this is Unprecedented scale this has not happened for 60 years Anywhere only Latvia the head. Yeah, the funny thing is it coming up in parentheses several commission officials with whom I have the pleasure of exchanging views Use Latvia as the example to follow and they say that Latvia turned over in two years Of course, I mean the price was 25 percent cut of GDP in two years and also a loss of about 10 percent of their population through a migration But it's supposed to be a successful story and they said you know the Latvians Took it without much Protest and I rushed to remind them that you know after 50 years of Soviet rule you know people are prepared to take anything peacefully and Luckily or unluckily Greece and Spain are not Latvia so The bad news for me is that Greece Is a country where the economy is imploding and Society may be at the brink of exploding and this is the big risk That unless the overall strategy Followed in trying to deal with the problem Changes My fear and I would stop there is that Greece may be leading the way to hell in Europe Followed closely by other European countries of the periphery and this is as far as I'm concerned the biggest risk We are facing today


Then this was a different kind of magic, but until tonight, I had no idea just how powerful it was. Lady, the Wizarding World of Harry Potter is introducing a new powerful dark art spell which has been cast on the Wizarding World of Harry Potter bringing a dynamic all new light projection experience to Universal Studios, Hollywood, and Universal Orlando Resort. The Dark Arts at Hogwarts Castle will illuminate Hogwarts Castle and the Wizarding World of Harry Potter nightly from April 13th to the 28th at Universal Studios, Hollywood, then return from May 25th to the 27th. Universal Orlando Resort experience will debut later this year with dates to be announced at a later time. The existing all new experience in the Wizarding World of Harry Potter will cast a mesmerizing display of light, music, and special effects unleashing the darkest creatures and villains including the powerful dark wizard Lord Voldemort. Eliminating a darker side of the Wizarding World, this spectacular new light projection experience will be a departure from previous the night time lights at Hogwarts Castle and the magic of Christmas at Hogwarts Castle. Dark Arts at Hogwarts Castle will bring more intense tones and drama that reflect the dark creatures and wizards that challenge goodness in the Wizarding World. This will be asked to summon their inner strength and bravery in the face of an all new consuming dark arts as some of the awe inspiring moments and creatures inspired by the films come to life within the majestic light display. As darkness falls on Hogwarts Castle, dementors, death eaters, and unspeakable creatures will transfer Hogwarts Castle into a sinister display of lights, music, and special effects. Even conjuring the visage of Lord Voldemort himself. The Dark Arts Hogwarts Castle will be accompanied by an exclusive musical arrangement that will emanate in a surround sound environment. It was conducted by prolific arranger William Ross and recorded by the London Symphony Orchestra in London based on the original scores composed for the film series created by Academy Award winning composer John Williams. Created by J.K. Rowling's compelling stories and characters that were brought to life in the Warner Bros films The Wizarding World of Harry Potter at Universal Studios Hollywood and Universal Orlando Resort is a masterful recreation faithful to the visual landscape of the fiction and films including as its iconic vocal point Hogwarts Castle. From its snow capped roofs and cobblestone streets to the historic British sensibilities that characterize the whismical look and feel of the land The Wizarding World of Harry Potter transports guests of all ages to the very places they watched on the silver screen. With so much to see and do at Universal Studios Hollywood, the all new 2019 season pass invites guests to experience the fun throughout the year for just $149 when purchased online. For more blackout dates and restrictions apply, visit Universal Studios Hollywood.com for more details.


Now, residents of Shulie in the Bagada area of Lagos have welcomed with great joy the community development project donated to them. The Edifice and Solar Street Lightning Project, which were donated by the Rotary Club of Bagada, are meant to illuminate and secure areas to forestall a breakdown of law and order. Speaking during the commission in the Governor Rotary International District 911-0, Yifei Ingwa EJZ, who urges Nigerians to support in developing communities, also says the donation will go a long way to help motorists navigate at night. EJZ speaks alongside the Rotary President. I'm here today to join hands with her to commission this Edifice. We have her back here to beautify this roundabout within the community and also give them street lights because I understand this place is always dark at night and it becomes a harbor for evil. But with what we have done here today, the community will feel safe, the people will feel safe and the motorists will have a more defined road to transport themselves. We are in partnership with the government, we are in partnership with the community and the only way we can lend a hand is to come to the community, to our grassroots and give them a little help that we can. Now, the Vice-Chairman of Koshofair Local Government as well as other Rotarians speak on the need for spirited Nigerians to do more to collaborate and promote grassroots development. We are the government, we can't do everything, we have limited resources, so they are actually assisting us and we are very grateful to Koshofair Local Government, we are even actively reaching out to the private sector because we definitely need their support. I would not say totally that private sectors are not helping the government but I also know that the economic situation is very harsh so it's impacting negatively on private sectors but however, I'll implore them to still do something for the society.


Welcome back! If you have reached to this video, I believe you have understood how to use ST's ecosystem and QBWB Bluetooth examples. In this video, we're going to extend our previous Bluetooth examples by trying a feature called Over-the-Air Firmware Update. Before we start, please check these prerequisites. Until now, when you modified the BLE example, you have updated this firmware application by using a physical connection, a connection between your nuclear board and your computer. Instead, it is possible to update the firmware by using wireless communication, and this is known as the Over-the-Air Firmware Update. In this video, we are going to use Bluetooth communication to demonstrate a firmware update. The linker script is a text file made up of a series of linker directives that tells the linker where the available memory is and how it should be used. When using the STM30Q IDE, this LD file is the linker script. If you open this, you'll see various texts and directives. For instance, the word origin specifies the start address of a memory. In this case, the linker script in the BLD heart rate example stated that the start address of the flash memory is 0x0800000, which means this heart rate example is going to be programmed in the start address. While using the Qube IDE, use the Build Analyzer tab to check where the firmware is occupied and how big it is. After resetting the microcontroller, each CPU runs separate applications. For instance, the code size of the BLD heart rate example is 17 kilobytes, and this example didn't have the OTA feature. This application code is programmed at the beginning of the flash memory, and CPU1 runs this code. Additionally, CPU2 executes the BLD stack and the FOSS, which stands for firmware upgrade services. Both applications are programmed at a dedicated flash address when using this 1 megabyte microcontroller. When the OTA feature is available on the STM32WB side, the memory allocation is slightly different. Instead of occupying the beginning of the flash memory, the user firmware application is located in the address 0x08007000. Now, a separate application called the OTA loader will be using the beginning of the flash memory. By using the OTA, the user can independently upgrade the user application, the BLD stack, or the FOSS. The OTA update procedure follows a client server architecture, where the STM32WB acts as an OTA server. The OTA is initiated by an external client, such as the mobile STBLE sensor app, or the STM32Q monitor RF. To use the OTA, there are three requirements from the STM32WB side. First, the OTA loader application must be programmed in the first six sectors in the flash memory. Second, in the user application, the OTA reboot characteristic is required. Additionally, a method to verify a valid user application can be used. From these examples, the user application stores a magic keyword inside the magic keyword address, which is 0x08007140. The OTA loader will use this address and read the magic keyword to verify whether a valid user application is downloaded. Lastly, a free area of the flash memory. This area acts as a temporary storage when a new firmware image is transferred from the client. I'll explain more about these in the next couple of slides. The OTA loader allows an OTA client to upgrade the firmware image. Compared to previous Bluetooth examples, CPU1 boots to the OTA loader after a reset. The CPU1 is running the OTA loader. The OTA loader will jump to the user application if there's no OTA request and the user application is valid. The OTA loader will check the magic number to determine this. If not, the OTA loader starts advertising to nearby OTA client devices for a Bluetooth connection. The OTA loader has the OTA service and characteristics. This BLE service is used to download a new firmware image. Now, we are going to download this OTA loader inside the STM32WB microcontroller. Before we start, use the STM32Q programmer to erase the flash memory. You shouldn't remove every sector of the flash because you want to leave the fuzz and the wireless stack. Then, navigate to this project directory to flash the OTA loader. I'll use a duplicated copy of the project with the STM32Q IDE for this demonstration. Take a moment to erase the flash memory. Let's build the BLE OTA example, which is the OTA loader application. I'm going to import the project to STM32Q IDE. While waiting for the project to be built, here are the key points. First, if you check the linker script, the OTA loader will be occupying the beginning of the flash memory, where that address is hex 0x0800000. Plus, the first six sectors will be used for the OTA loader. I have marked function names with an italic typeface and parentheses. Since we have erased the flash memory, the user application doesn't exist, and the magic keyword in the user application is invalid. Before the program counter points the main function, the system init function is executed first. This function calls the boot mode check to check what type of reboot request was created. I'll place breakpoints to check this. The debugging has started, and the OTA loader is now downloaded inside the beginning of the flash memory. If you don't have any breakpoints like now, the debugger will be halted from the beginning of the main function like this. The call stack on the left top corner also shows that the debugger is halted at the beginning of the main function. Let me place two breakpoints and start debugging. You can find aforementioned functions inside drivers, cmsys, system stm32wbxx.c file, the system init function, boot mode check function, and the check firmware app validity function. I'll place one breakpoint inside the boot mode check function like this. The reboot reason is stored at the beginning of the SRAM, which is hex address 0x2000000. The boot mode check function will read that SRAM data to check the request type. The debugger has halted at the first breakpoint. The call stack says the system init function is called after a reset. The next breakpoint will be placed inside the main function of the OTA loader. As the second breakpoint shows, the main function is called since there is no valid user application. The user application was erased using the queue programmer. As a result, the check firmware app validity function notices that the address of the magic keyword is outside the flash memory's address, meaning the user application is invalid. So, the OTA loader verified that the user application is invalid. Now, the main function is called and initializes the OTA service. Next, the delete sectors function is called for freeing the flash memory. After this, the STM32WB starts advertising waiting for an OTA client to be connected. We have now made the STM32WB advertise. Let's use the mobile app to transfer a firmware image. You'll notice an example file that has this underscore OTA written in the end. We are going to build two OTA applications, the heart rate OTA example and the P2P OTA example. Navigate to this directory and build it using the STM32Q IDE. OTA examples have a different linker script. Since the OTA loader is using the first six sectors of the flash memory, the user application starts in address 0x0 800 7000. This can be found from the flash memory starting address. Next, two OTA regions are defined. According to this linker script, the OTA region's address is fixed to 0x0 800 7140. Here, it has the address of the magic keyword value variable, and this is identical to the OTA region end. In the app.blc source file, you can find variables using these OTA regions. By using the STM32Q programmer, if you read memory 0x0 800 7140, the value is 0x0 800 B584. This is the address where the magic keyword is stored. Now back to the mobile app. Once it is successfully built, navigate to this directory where you can find the firmware image. Copy these to your mobile device and let's connect the smartphone to the STM32WB. After this step, we are ready to transfer this firmware image using Bluetooth. Turn on your BLE sensor app and scan nearby OTA server devices. Also, take a close look at six bytes of the Bluetooth MAC address, especially the first byte. A portable battery is connected to the nuclear board to show that this is a wireless demo. After selecting a nearby OTA server, select a firmware image you want to transfer. I'll select the heart rate OTA example. The address written in the app is the offset address by adding hex 0x7000 to the flash memory start address, which is 0x0 800 0 0 0. This becomes 0x0 800 7000 as expected. I'll fast forward the transferring part for now. Transferring the image is complete. The STM32WB now runs a heart rate OTA example. Let's connect this device. Intentionally, the OTA loader increments the MAC address so that the client is ensured to launch a new discovering phase to detect new services. You have done a great job following this exercise. Let me summarize what just happened. You have downloaded the OTA loader at the beginning of the flash memory after erasing the user application. So the OTA loader advertised BLE packets and your mobile phone was connected and transferred a firmware image, which was the heart rate OTA example. This heart rate OTA example has the proper magic keyword inside the flash memory, and this has the OTA reboot characteristic as well. As a result, the OTA loader jumps to the heart rate OTA application after receiving the firmware image. So what is this OTA reboot characteristic? The reboot characteristic is used for the user application to jump to the OTA loader. Both the heart rate OTA example and the P2P server OTA example have this reboot characteristic included. If the reboot characteristic is available on the user application side, the STBLE sensor app can discover this and provide an additional menu to run the OTA loader. Then let's use that menu to replace the heart rate example to a P2P server example. Press the OTA config menu on the bottom. Using the OTA reboot characteristic, the user application reboots and runs the OTA loader. The OTA loader has deleted the existing heart rate OTA example. It is now advertising and the mobile app can be connected to transfer a different firmware image. I'll send the P2P server OTA example this time. You have now replaced the firmware. Let's see whether the user application is working. To summarize, due to the OTA reboot characteristic, a reset was triggered to run the OTA loader. Then the OTA loader deleted the existing heart rate OTA example. The new P2P server OTA example was transferred into the free area of the flash memory. After this transmission, the P2P server OTA example was executed. The last exercise session will address how to modify a non-OTA example to an OTA example. This is a recap of the requirements. Since we want to modify the BLE example, let's focus on the second item. First, you have to modify the linker script. You need to change the start address of the flash memory. Also, the OTA tag section needs to be added to place the magic keyword-related variables. As a recap, we have compared the linker script. If you have modified the non-OTA example, the linker script will look like this, and you can check the variables located inside the correct memory area. Next, the OTA reboot characteristic has to be added. The UUID of this characteristic notifying the reboot request, the increased size of the characteristic, modifying the advertising packet, triggering the reset should be implemented. When handling the reboot request, this writes the reboot request type inside the beginning of SRAM 1, which is hex address 0x2000000. After this, the STM32WB readsets, and the OT loader calls the boot mode check function to read that request type. Lastly, the code related to the vector table offset register has to be removed. This is because the OT loader already sets the correct values for the vector table offset register. After removing this part, you have successfully created a BLE firmware with the OTA feature included. Great job following this video app. For more information about the OTA, please check these items, and I will be looking forward to seeing you in other sessions. Thank you.


Today, I will talk about the EV charging points. Basically, I will just explain a specific one that I find it in Europe. And basically, you can use it everywhere in Europe. I will also show the map, then you can imagine. I'm John Kurnas from KPMG Netherlands. I'm working as a senior consultant and mostly doing penetration tests on web applications, infrastructure, and sometimes also IoT and ICS. Sorry? Okay. All right. Great, great. Okay, this is my contact info. If you want to ask something or discuss about something on IoT or ICS, please don't hesitate. For a disclaimer, basically I did this research by myself and my company doesn't involve on that. So if someone wants to sue me, just sue me, not my company. And I'm a little bit nervous because this is the first presentation, recorded presentation for mine. So that's why I feel a little bit nervous. Please help me. So on agenda, we will talk about the introduction of the EV charging points. Then I will try to explain the threat that I find. Then the consequences we will discuss. Then we will go into the details and I will explain more details. Then I will show you just a small metasploit module that you can make a denial of service of this EV charging point. This is a basic small module, but you can use it. So let's start. So this is 100% SunSu Free InfoSecTol because probably you have a lot of quotes from SunSu on these presentations on these days. So I will just skip that for the introduction. So it's a little bit confusing because EV charging points, electric vehicle charging points are in somewhere between IoT and ICS-KDA. So basically, electric vehicle charging point is a device that you can supply electric energy to recharge your electric vehicle. And nowadays, manufacturers are trying to connect these devices to the internet and that makes a little bit trouble for them and also for the clients. And previous research done by, for charge point, it's another, let's say, manufacturer. This research done by Casper Skill Lab and for the Schneider EV Link positive technologies done a couple of research on that. So basically, the idea, they are relatively new on the field and they are just building to work. So security is not a concern in the beginning, but since they are connecting to the internet, now it's a problem. So based on these previous researches and also mine, we are considering the security maturity is quite immature on these devices. So basically, I completed an engagement for these devices, a couple of, last year, actually. And then when I was writing the report, I just wanted to check if I write the name correctly. I just googled the name of the device, as you can see over there, and it showed up on the first page. Then I said, what? Yeah, basically, I mean, you are not expecting these kind of devices are connected directly to the internet and indexed by the Google, right? So let's discuss about the threats. So after that, I checked Shodan and I realized with this map, so basically, on the beginning of 2018, there were 200 devices connected directly to the internet and indexed by Shodan. After, in the middle of 2018, it come up 300. And as you can see on the map, it's all around the Europe. So basically, if you create a smart map, you can travel around by using these charging points, you can travel around freely because basically, you can compromise the device on the internet and you can charge your car. And I will also show that later. So now, this is a new one. They are appearing on the US also now. Maybe, I don't know, at the end of this year or next year, you can also do it in here. So the consequences, so what? Basically, you can compromise the device and you can get root. So if you want to create your next mirai by using these devices, you can. And the details. So the first vulnerability that I find on these devices, authentication bypass with direct request, so the web applications of these devices mostly are not secure enough, so it's a quite straightforward vulnerability, as you can imagine. So application was not that good, it's basically broken. So the access control was only on the login page and the rest is not that secure. It wasn't covering by the authentication scheme, so it can be easily bypassed. So as you can see in here, there's a login screen over there for the setup.html page. It's the, let's say the first page that you, when you try to connect to the device after you find the IP, you'll see this. So I mean, you can also guess the password, of course, but I decided to take a look to the source code of the web application. And yeah, basically by first browsing, you can go to the other pages of the web application. I will show you later. Then you can have access on the other pages. Basically, it will also affect the management interface of that device. So when we check the source code, we are realizing there are a couple of pages except setup.html, like index.html, and also there's a Java file, upload.scaled.jar, and also a couple of, let's say, informational subpages like repository, device ID, and logs. You can also check the logs, but I'm not considering to check that because it's just an information disclosure. So I try to connect to the management interface by using, as you can see in here, upload.scaled.client, it's in index.html. So yeah, it was successful. So there were no authentication for this page specifically. So even if the device has some password for the setup.html page, you can just browse the other page, like index.html, then you can connect to the device and you can control the device. So basically, if you can see on the screens, there are two plugs, A and B, and you have to full control of these two plugs. So what can be done with this? And I don't know, you can put it to the remote start, click to the remote start, then you can charge your car freely. Then attacker may abuse this to get someone, let's say, power from that, and also charge the car. And what if they click to remote stop? Let's think about it, someone is connected to the EV charging point and charging their car and you are just clicking remote stop, and after he come from his work, his office, he's realizing the car has not been charged. And also, you have an option that you can disable the plug. So basically, if you click to disable, then the charging point will be turned off, so it will be disabled, it's sort of a denial of service. And sometimes, it's also another possibility that you can lock the connector, so when you lock the connector, it will just stop connecting to the device. So basically, it has some sort of a, I don't know how you call it, hook for the connector that because someone, we don't want someone steal the cable when we are charging. So if you lock that connector, someone else also would not plug in. So as you can see in here, these boats are now open, quite ready for charging, but if I click to the remote start, as you can see, it's starting to charging and also locking the device. And at the same time, you can also stop it. So let's come back to the source code, web application. Then you're realizing we have a Java code over there, right? So for downloading this Java application, also there is no authentication, so if there is authentication on the web application, you can freely download this application and then you have control for all these charging stations. You only need to supply, you only need to provide the IP address of the other charging points because Java application doesn't have any authentication, it just gets the IP, then you can control the other devices. So you can hack all these devices by using this Java application. So yeah, there I am downloading the Java application and I'm just running it, then it asks me IP address of the device, then you are connecting any device and you can freely control it. So the other vulnerability that I find on these devices is also quite straightforward, or as command injection on the web application and the thing is you need to provide the password for connecting the setup HTML. I mean, if there is a password and you couldn't guess it or you couldn't find it, it doesn't work, of course, but mostly these devices doesn't have any password, they are not setting this up. So the pink feature, of course, as you can imagine, is vulnerability OS command injection attacks and the attack surface, as you can see before, connected ones are already indexed by showdown, by Google. I know, yeah, it's really easy to find these devices, basically. So let's increase the attack surface. Most of the EV charging stations doesn't have any authentication on the setup page, so they are not, as I mentioned before, they are not setting up the passwords, mostly. And after accessing this setup HTML page, somehow, if you provide the password or if you find it without the password, it's really quite straightforward to exploit it by using the pink IP feature. So I am just using the back ticks to run my command. I just tried to create another page for the web application to see if my command works, then it works. And I realized I can run commands on these devices, basically. I just use the back ticks. As you know, everything you type between the back ticks are executed by the shell just before the main command. So main command was the pink, but when you are writing the back ticks, it was running the command that you write over there. So let's double the attack surface, increase attack surface. So using a default password is encouraged by the vendors, because it's written on the vendor's manual that I will show you later now. Let's check this. It's recommended leaving the default settings according to the table below. Default password is admin and password is one, two, three, four. It was in the owner's manual. And then I see it. It's also possible to find it online. And when I see it, it's it. So let's give some more details. So I tried to run some commands and I succeed. Then I created my reverse shell by using MSF Venom. The device was using the ARM processor, so I created for the ARM. And created the executable Linux file, because it was quite easy to run it. Then I tried a couple of times. Of course, I failed a couple of times before, then somehow it worked at some point. And I just also created a Python simple HTTP server to download my payload to the device. And also created a listener to get a connection back to me. And I used curl to download my payload to the device. And after a couple of trials, I succeeded. Then I run the executable Linux file, then I got the shell, like that. Quite smooth. And then I realized it's instantly a root shell. So yeah, the rest you can imagine. You can create your own boats by using these devices, or I don't know, you can use for something else. Then I reported that to ICS-Chert. In the middle of 2018, I reported, it took almost five months to get the response. After this discussion, ICS-Chert acknowledged and also discussed with the vendor. They fixed it somehow. They fixed it for not all the vulnerabilities, not for the remote code execution, because I think they couldn't do it. They told me they fixed it. I also tried again with an e-firmware. I did it again, at least I break the device again, so I couldn't get the shell back, but I just break the device. But they told me they fixed it. I already warned them. Yeah. So the bonus, as a bonus, I created a Metasploit module for denial of service because denial of service is quite easy. You just write a reboot by using it with Bactics, and that's all. So yeah, because I'm quite lazy, I didn't want to create a whole remote code execution module for that. So I just saved my POST request, and I created this module by using the POST request, and that's all. I'm planning to share the POC module end of DefCon. And this is all what I have. Thank you very much for joining me. And if you have any questions, or if you want to contact me, please don't hesitate. Thank you very much.


Hello, in this video I'm going to explain how to create an animated coroplete map in QGIS using the temporal controller. This video is part of the summer course at IHE Delft on creating data visualizations with graphs, maps and animations. You can find the free tutorial also at gisopencourseware.org. You can find the link in the description of this video. First we need a world map with country boundaries. Instead of using natural earth, this time we'll use the official UN world map. We can add it as an ArcGIS REST server. In the browser panel, configure the connection. The URL is also provided in the description of this video. Expand UN boundaries and then expand base layers. There you find country areas and drag the polygon layer to the map canvas. This is an online layer and it will take some time for it to load. When it's loaded we're going to export it to a geopackage to have it as a local file. Let's call the geopackage access to water and let's call the layer country boundaries. Click OK and now you can remove the online layer from the layers panel. For this exercise we're going to use data from our world in data.org. It's a great resource to find all kinds of data sets for sustainable development. If you go to the about page you will learn more about this initiative. The search box is very useful and we're going to search for improved water source and we're looking for the data set of the number of people without access to an improved water source. It is explained here what is meant with improved drinking water sources. This includes pipe water on premises, piped household water connection located inside the user's dwelling plot or yard and other improved drinking water sources such as public taps or standpipes, tube wells or boreholes, protected dug wells, protected springs and rainwater collection. Here we already see nice maps with the changes through time and you can click on table to see what kind of tabular data is available, which sources were used and a download tab where we can download the full CSV for playing around ourselves with this data. With CSV files it is good practice to always open it with a text editor to see the contents. Here we open it in notepad and we can see that there is a country, a code of three characters a year and the amount of people without access to improved water sources. After downloading we can drag the CSV into our geo package. Then we can drag it to the map canvas and we can open the attribute table to see if this import went well. And there we indeed see that this looks great. But for our calculation we also need population statistics because we need to normalize later. So we search in our world in data for population and we download population since 10,000 BC and we also download that full CSV to our hard drive. Let's check the data. This also has the country name, a three letter code, the year and the amount of people living in that year in that country. And we see that it covers the years that we need for our other data set. So we can calculate the percentage of people that have not access to improved water resources. So we can also import that in the geo package and we can save the whole project in the geo package before we continue. Let's call it access to water. We need to join the two tables and they have in common that they both have a field with the country code and the year. But we need to join based on the two fields and therefore we need to concatenate these. So in the field calculator create a new field code here as a text and concatenate code with year. So we will have the three letter code and the year. Check the result. Here indeed we have the new field and save the attribute table. Now we are going to repeat that for the table with the number without improved water so we can later join them. So here we create exactly the same field, code year as text and we concatenate code to year. The preview looks good. Click OK and there we see the three letter code and the year. This data set goes from 2000 to 2020. So now we can join both tables. Go to the layer properties and to the joins tab click the plus and there join the population table with code year in both join and target fields. And choose for the joint field population and remove population underscore from the prefix. Verify here that the settings are correct and click OK. Now we can see the result in the attribute table. We see now that we have the number of people without access to improved water resources and the total population in that year. Now we can calculate the percentage. Go to the field calculator and give the output field name percentage, which is a decimal number. Start with the bracket from fields and values double click on the number of people without divided by the total population and close the bracket and multiply it with 100 to get the percentage. The preview looks good. Click OK to apply it and here we see the results because we're going to use this in the temporal controller. Later we need to fix another thing here in the attribute table. The year field is a string but needs to be converted to date format. So we create a new field. We call it date and we give it the date field type. Only in that way the temporal controller will recognize it. We use the to date function to convert our string to a date. So we add the year string from the year field and we indicate the format, which is year, y, y, y, y. But it should be a string, so in single quotes and we close the bracket. And here in the preview we see that it's date format with the date added to it. And if we look at the results we see here that it added first of January of every year, which will work in the temporal controller. So I took it off editing and saved the results. Now we need to join those attributes to the countries. Because we have multiple years per country polygon, we have to use the join attributes by field value tool. As input layer we use the country boundaries, table field that will be joined ISO3CD. The common field in number without improved water is code and we're going to join percentage and date. And make sure to change here the join type to one too many. We save the result to a geo package, the existing one, and add as a layer name percentage without improved water. Now we run the tool and it added the layer. Let's check the result in the attribute table. And now we see that we have the date and the percentage in the last two fields. And that's exactly what we need for the animation. Now all the country polygons with different years are on top of each other. So we're going to set a filter to only look at one year before we're going to style it. In the layer properties you can do that in the query builder under source. Choose the date field and I click all to get all the dates and I create here an expression date equals and then on the year 2000. This will make sure that we're only looking at the polygons of the year 2000. And we're going to use that for the styling. Note that in the year 2000 some countries have missing data. If I hover my mouse over the filter it will show the expression. Now let's open the layer styling panel. Since this is a coroplete map we're going to change it to the graduated render. Percentage is the field that we use as value. Click classify to see the default ramp. By default it will use quantile but let's have a look at the histogram and we see that it has a very skewed distribution. So let's try natural breaks. And we also need a bit more classes. Let's change it to 7. And let's choose another ramp. From yellow via orange to red. So the more red the worse the condition. Since the data is very skewed I'm going to change the values here to the same ones that our world in data used in their visualization. Which I think reflects quite well the different ranges in the skewed distribution. You can simply edit the lower and upper value of the range and the legend is also adapted. Make sure that the classes are unselected and click on the color bar at symbol. Go to simple fill and here we change the stroke color to a gray. It's for the boundaries. Also make the stroke width smaller to 0.06 millimeters. As you see we have countries with no data in that year. So we're going to also use the country boundaries and make sure that it will be below with a gray value for countries that have no data. So we change the simple fill color to gray. And here we use 235, 235, 235. And you make sure that the stroke color is exactly the same as the stroke color that we had for the other layer. And also make the stroke width the same. Now as we can see we have a nice gray for the countries with no data and the borders are similar. Now also change the projection from the pseudo-mercator to the equal earth projection and save the project. Now the styling is complete we can remove the filter. Click clear and click OK. Now all the patterns are again drawn on top of each other for the different years. So it's time to start the temporal controller. Click right and go to properties and there go to the tab temporal in the layer properties. Activate the dynamic temporal control and change it to single field with date time. Because we have this date field that we indicate there and the event duration is one year that's the time step. Click OK to apply and now you see the clock symbol at the layer which means we can use the temporal controller. In the toolbar there's also a clock to activate the temporal controller panel. And if we click the play button we can then set the full range and make sure to set the step to one year. So now every time step is one year and we can see the animation. Now we need to add some map elements and we use the decorations for that. Let's first add a title. Let's call it share of the population without access to improved water source. Change the font to Calibri, Bold and size 16 and click OK. Change the background bar color to white. Keep the rest as default. Now we have the title on top of the map and it depends how we pan the map on what distance it is from the map. So if we want to design our map here for the animation that we're going to export we can play with the size of the panel of the temporal controller and the layer styling panel to get the right shape of our map canvas for the animation. Note that we are not interested in Antarctica so I have moved it in such a way that we get a nice coverage of the rest of the globe and the title. Let's add a legend in a print layout and make a screenshot that we can then use as a decorator. In the print layout we only add the legend and we uncheck the auto update box so we can add it and remove the layers that we don't need. Change the title and we use here percentage of population. Let's edit the last class and click somewhere in the blank to remove the handles and then we make a screenshot. Use Windows button shift S on Windows 11 and then drag a rectangle around the legend. Click on it and then click the save button to save it to a file. Save it to legend.png. Close the print layout and now go to view decorations image to add the legend as an image. Browse to the image, modify the size. 40 millimeters will do and we use a margin of 20 millimeters in the horizontal. We still need to add the data credits and the author so we go back to the decorations and to the copyright label. We enable the copyright label and we replace the text. Use the text that was provided by our world in data.org as the reference data. Keep it at bottom right and use a margin of 10 millimeter from the edge in horizontal. Change the font. I'm going to use Calibri, Italic and we keep the rest default. Click OK to apply. We still need to add a timer and one way of doing that is to add an expression to the title. So I want to see in and then the year of the time step. As an expression, we need to use format date to create a format in a year of the variable that represents the time step. And the variable is map start time. This is the updated time that is given for every time step. And I want to format it as year. So I do why, why, why, why in string. And then close the bracket and we see here in the preview that it looks correct. Click OK and it has added the expression. And then click OK and there we see it in the title. Now let's run the animation and see if the timer works. Yes, it's counting the years. So we're ready to export this as an animation and from QGIS you can export the frames. Then in GIMP we're going to create an animated GIF. To export the frames, click the disk button and then browse to the folder where you want to save it. Let's create a folder frames. Make sure it uses the map canvas extent and click save. Now for every year it will save a PNG file. When the export is complete, we're going to load the PNG frames in GIMP. GIMP is the open source equivalent of Photoshop and you can download it free from GIMP.org. When the export is completed we go to GIMP and there we can open the frames as layers, which means that they are all loaded in GIMP as layers on top of each other. That takes a while but when it's finished you go to filters, animation, and there you choose optimize for GIF. And now we can save this as an animated GIF by going to file, export as, browse to the folder and let's call it animation.gif. Based on the file extension it knows that we want a GIF, but we need to indicate that it's an animation. Remove the comment, check the box for as animation, change the delay to 300 milliseconds, and apply this for all frames. This gives a good speed for our animation. Click export and here is our animation. So in this video you've learned how to create an animation for a corrupt plasma.


The Lagos State government says it has done intervention works in about 1,600 roads across the states within a period of four years. Governor Bavadi de San Wulu discussed this during the inauguration of the Adiniji Adeli Road and Tapa Street Road in Lagos Island, local government area on Friday. He said his administration will continue to do the very best for residents as easy and short the greatest good was done for the greatest number of residents. According to San Wulu, the choice of the reconstruction and upgrade of Adiniji Adeli and O'Kake-Pokpo Tapa Streets to kick start phase one of the regeneration plan was because of their economic importance and the high level of traffic they convey. We should not slow down at all and all of the support you have given to us can assure you that we will not disappoint you. Can assure you working with all of our local government chairmen we will ensure that we continue to have purpose and meaningful development of our state in all areas. The government was optimistic that the delivery of the road will help improve connectivity within the access, unlock perennial traffic gridlock and reduction in travel time along the corridor while complementing the new Massey Children's Hospital. He advised motorists to drive safely and obey traffic laws to prevent avoidable road crashes that might lead to loss of lives and capacitating injuries in destruction of properties. And so this first one has been constructed by our LCD chairman, a very hardworking man. We are here really to commend and to say that in partnership with our chairman of our new government and LCD, we are jointly developing an ecosystem where we can make better, where we can use governance to improve both health, good education and economic activity of our people. Hello, hope you enjoyed the news. Please do subscribe to our YouTube channel and don't forget to hit the notification button so you get notified about fresh news updates.


Another type of enrichment we do is ice cups which is a small amount of squash and forage mix sprinkled in frozen and this is just something for them to do. Basically they have to pick the forage out, they have to crunch the ice, it's just something different, a different way of delivering a form of food. These are the ice cups look like, it's just squash with forage mix like I said. We give one ice cup per monkey and we just sort of stick it through the bars, not very fit. There we go, let go, like that, good girl, Ollie mate, good boy. Other enrichment we can do is stuff like these plastic bottles, drill some holes in, put forage mix, little bit of cereals and plain popcorn in and put hay in and this just helps and there's a little puzzle for them to figure out, get all the food out, we can do it with cardboard, through boxes, it's all the same stuff, there's different ways of delivering it. It's very efficient to just empty it out and pick the best bits out, not too bothered by people going past the window, that's interesting. No, if you stop out past the window then you get it.


Hi everyone, this is Gabby from Brain Education TV. If you're new to this channel, consider subscribing. We make weekly videos on wellness tips for the brain. And if you're already a subscriber, welcome back. In this video, I will talk about four ways to think more positively. Positive thinking is all about an emotional and mental attitude that focuses on the good. So let's get right into it. Negative thinking can be cultivated by these four ways. Number one, adjust your mindset. Your mindset governs the thoughts that flow in and out of your head and how you react to each of them. If your mindset is negative, then everything around you can also seem negative and worse than it actually is. You have the power to choose to focus on the positives or the negatives of any scenario. So if you choose to focus on the negatives, that can definitely bring you down. And vice versa, if you focus on the positives, you can see all your situations and the people in your life in a different way. So by adjusting your mindset and choosing to focus on the positives of your situations, you can reframe your mind and cultivate a more positive mindset. Number two, take control of your physical state. Positive thinking can affect your body just as much as your mind. You can control your physiology by taking pride in how you present yourself and most importantly, loving your body and loving yourself. You can do this by working on your posture, having a healthy spine, doing exercises for your body, and that will give nonverbal cues to people around you that you feel strong and positive. Number three, study your old habits and form new ones. So it will probably be hard for you to form new positive habits if you don't take note of your old habits. Try to realize how you react to negative situations.  Next time you're in a situation like this, learn about yourself and try to form new positive habits from what you've learned. You can then redirect your energy to creating new habits, especially in situations where you can react, you can try to react more positively with more words of encouragement, looking at the situation from both sides, and other things like that. Number four, choose your words wisely. The words you choose both in conversation and in your mind have a deep impact on your mindset. Try to get in the habit of using positive words that encourage happiness, health, and peace for yourself and others. Positive self-talk especially helps to regulate your mood and brightens your energy. A great example of practicing using positive words is whenever you feel down, place your hands on your heart and tell yourself the words you want to hear. So for example, close your eyes and say, I am worthy, I am loved, I am positive, I am safe, I am healthy, I am happy, and other words you may feel you need at that moment. Overall, positive thinking is a mental attitude that is conducive towards growth, happiness, health, and success. So what did you think of these four tips? Did you enjoy them? Have you heard them before? Do you have any questions or concerns? Please leave your comments down in the comment section below and I'll also link more information that you can read on on this topic. Okay, that's all on my four tips on how to think more positively. I hope you enjoyed and I'll see you in another video.