All right. Hello, guys. Welcome, everyone. Thank you for coming to my talk, to my TED talk. Sorry. It was one of those. So today we're going to talk a little bit about security. It's not going to be a deeply technical talk. It's more like to discuss what it means to apply these new concepts of security we're seeing all over the show this couple of days to the embedded world. What does it mean to migrate to these new ways of thinking about software development and software management? Just a quick introduction over at Pantacore. We basically do container technology for embedded systems. We try to push, we have all of our customers or people who were trying to imagine their next generation architectures of embedded systems, trying to figure out how to go from legacy monolithic stacks to things that are more modular, faster, more agile, easier to manage, easier to evolve over time. There's a lot of ideas out there on what are the best practices to achieve that. But the context of this presentation in particular is not what we do over at Pantacore in particular with containers, but rather how does this modern way of managing embedded systems have some kind of affectation to the reality of security that is becoming more and more important every day. So the title of this presentation is Uncovering Software Providence in Embedded Systems, which reads real nice, I think, sounds kind of poetic. What does that mean? So uncovering software provenance in embedded systems. So provenance. What is provenance? The idea here is that at the end of the presentation, it's not going to be a super long presentation, but we'll have time at the end to have, I think, a good conversation about what maybe you guys see either at companies you work with or if you have customers and you do consultancy work for embedded systems and these kind of things, like what your customers are starting to talk about. I'll talk from the point of view of the people we work with. So provenance is interesting. It's the place of origin of something. Somebody put it very nicely, the chronology of ownership of something. What is the place of origin? Where did it come from? What am I actually looking at? This is very relevant in the world of software, particularly in the world of open source software. Why? Because everything is just a million things stacked on top of each other. A lot of the times we don't even know what it is. Most systems are running, you could say. And that has become more and more of a trend over the last few years as containers have become ubiquitous in the cloud, for example. Then we have gone more towards this black box model where it's not clear exactly. It's not that it's not clear, but there are holes, let's say. It lives gaps in our ability to truly have fully deterministic systems, knowledge of what's running on those systems. For embedded in particular, this is interesting. We think about what has happened at the cloud. Containers have been great. We've sacrificed, however, that sort of security at the point of development or point of origin for super fast DevOps. That works for the cloud. The cloud is much more easy to also manage if there are issues, if there are problems, it's much more ephemeral. It's just fast. You can deal with these issues at a much higher velocity. If you're thinking about the embedded world, however, then that's a complete different problem segment. The embedded world is not like the cloud. If a device fails, if a washing machine dies, that's problematic. It costs $100 to send a technician out. You cannot just turn it off and on like you could do with a cloud instance. Back in the day, embedded used to be much simpler. It was about more fixed function devices, single purpose. Do one thing, do it right. A power control system or maybe you're all thermostat just did one thing, did it right. It wasn't connected. Those things were not like all over the cloud and accessible from everywhere. None of that. Before it was a simpler world. That has slowly changed. Embedded has not moved at the same speed that, let's say, higher levels of the stack like cloud development have moved. But now we're starting to enter that world where containers are making a push, making a play in the embedded world. Devices are no longer fixed function only. Devices are not completely ergapped anymore. Things are connected. The software stacks are much larger. We're talking about potentially multiple different functions, features inside of a unique device. Everything is sort of like split around in microservices. It starts to be a little bit more like that. You think, let's say, of a washing machine to go back to the same example. Then it's no longer just a program. Maybe it's a thing that sends a lot of telemetry up to a cloud somewhere so the manufacturer can know where and where on the drum, for example, so he can learn about the ways that I wash my clothes. How often do I do it? Do I use liquid detergent? Do I use powder soap? All of these things. There's a lot more going on in our devices than there was going on 10 years ago or 15 years ago. That's great. But it brings a problem. We open the door to a lot of unknown code, you could say, that it's going to be running on devices that it becomes a very complex problem. The bigger the software stack, the harder it is to keep complete tabs on what's running there, really uncovering that software provenance, the name of the talk. What happens? How does this affect, you know, how does this play into the security of the embedded world? Security for embedded. A lot of people will disagree. Someone will agree. It has always been relevant, but not massively important. It has been relevant, but, you know, it's a dime a dozen, all kinds of security issues. Everybody always has in their mind projects that have failed, things that have been taken over. For example, we're going to talk later about the last year, the colonial pipeline, the ransomware attack that probably screwed a bunch of you guys here in the US. But, you know, before legacy, like I was saying, legacy embedded systems were monolithic mashups of a ton of software. And it didn't matter that much what you would do there, because maybe these things were not connected and so on. And the smaller it was, the easier it was to really understand what was running. But now everything is connected. The systems are massive. The surface of attack has multiplied. Simple as that. Surface of attack has multiplied. And when we talk about IoT devices or smart home or whatever you want to call it, and I'm talking more towards the user facing part of the problem, not necessarily, you know, an assembly line factor robot, but like more user facing things. As things became massively connected, that attack surface massively increased. So up to what point is it okay to oversee that security problem at the user level? It becomes more and more important to actually make, let's say, provide that confidence to the end user. Devices are safe. Simple as that.  But that's a decision you made. You wanted to listen to you. It's fine. What about the other devices you didn't explicitly say, right? Yes, please listen to what I'm saying, right? So, you know, and these are tons of them out there, you know, like there's been a million cases of children's toys with cameras and so on that get compromised, right? For example, right? So a little pet over pops up over there, right? And then, you know, content finds its way to the dark web and you don't want to be that content producer. I mean, that's not the type of influencer you want to be, right? So should we be worried about the safety of our data, private information? Of course, right? We're all worried about that, right? We're just not too aware, right? Users are becoming more and more aware now a little bit more, but more education needs to take place, right? Plenty of big, big hacks come to come to mind, right? Let's see. But the most important thing, let's say, most relevant thing that has happened over the past couple of years was the colonial pipeline ransomware attack last year, May, I think, something like that. I imagine some of you might be familiar with that. If you try to load gas during those days, maybe the, I don't remember if it was the southern states or northern, but it was like 12, 15 states or something like that that were heavily impacted in the gas flow, right? To the east. Okay. And then, you know, mass panic ensued, everybody was loading their stuff, so that created shortages and then price skyrocketed in those states, and it was like, it was down for four or five days, right? Then they ended up paying 75 Bitcoin, it was like 4 million at the time of writing. At the time it was actually paid, Bitcoin had crashed, that's another issue, but not the topic of the stock, right? But the point is, you know, there was nothing to, right? A critical infrastructure piece of the country failed because of a security issue, right? How do you catch those things before they happen? Okay, after they happen, you're like, okay, well, they took it over, okay, fine, let's do a post mortem, let's find out what was the vulnerability, let's patch these things, let's figure it out. But how do we mitigate ahead of the event, right? The potential vulnerabilities that might be on a trusted pipeline of software, let's say, right? Or a known pipeline of software, so that maybe we prevent things like this, right? We see also all the time, you know how bottlenecks spread all over routers?  A few years ago, there was, not a few years ago, last year there was something with Deutsche Telecom, a bunch of routers went down, right? Okay, that was a bottleneck that went a little bit haywire, just expanded it all over the place, and it just killed the devices. It probably wasn't meant to kill the devices even, just to go in them and actually, well, continue spreading that bottleneck. The, let's say, the trojan wasn't great, it killed the routers, right? In itself, of course, but it left a lot of people without internet. Deutsche Telecom was sort of dead for a few days, right? And these things are happening more and more and more, right? So how do we mitigate, at the point of the vulnerability, become disclosed, or becoming available, or at the point of a security team, just finding out that maybe there's a surface of attack over there, and how do we reduce that time gap of action, right? To really prevent the issue from escalating to something like this, right? That's the part that is hard, right? So the colonial pipeline incident resulted in the federal government, right? Having a very quick response, they had to say something to figure out, you know, like, they had to say, okay, I'm here, I'm going to fix it, don't worry guys, right? So Biden came out and signed the very famous, in the show, the software bill of materials executive order, right? This was in May of last year, about five days after it was, after the ransom was paid, yeah, May 2021, five days after the ransomware was paid, an executive order was issued, right? That amongst a bunch of things, right? It basically creates a bit of a framework for which device-centric companies or, you know, technology companies have to adhere to if their hardware is in critical parts of the federal government, right? So it doesn't apply to everyone, doesn't apply to consumer hardware, technically, right? But it's the first step, you know, towards a, and some of you might have even more detail or might have read the whole thing top to bottom many times, maybe drafted it, who knows, right? But you know, one of the key points is, in particular, this one, right? The providence of open source software used within any portion of a product, right? That's usually the hardest part, because if you have a product that's a hundred percent proprietary software, you know, built for purpose, then you're kind of in control, right? You're kind of in control.  You know what's coming from where, right? We're talking about open source software, which is now pervasive to every part of everything in our lives, right? We're all using open source software, we don't know it, you know that, right? It starts to become important to understand what issues can it bring, right? But the real issues are the ones that you're not even aware that might exist. You might be making, let's say, the colonial pipeline, right? So some control systems that regulate opening and closing, I'm just making this up, right? But, you know, that might have some old version of some library, let's say, open as a cell, right? And maybe that helped really, you never thought about that, right? And that thing resulted in some kind of compromise path that actually allowed those guys to take over the entire system, right? Or to go back to the to the scenario of your home, right? Maybe you don't care too much about a washing machine being compromised, right? But at the end of the day, the washing machine is in your home network, right? So maybe that's an attack entry to the rest of your home network. You might have other equipment in your home network, like closer good cameras or something that you're like, no, this is air gap. My video is not going out to the internet. But maybe somebody enters your home network through another piece of equipment, like a washing machine, that might have a little library that was compromised, right? How do you discover these things? Well, it's not enough only to have a software bill of materials. Software bill of materials is great because it lists the components. It gives you at least a starting point to try and address the problem, right? But it's not the only... It's not the complete solution, right? It's just the starting point. So what does S-bombs have to do with embedded IoT? How can we apply some of those concepts? What can we take from them, right? So there's a harmful... It's a handful, not harmful. There's a handful of vendors out there that have been creating for the cloud side, you know, code inside, dependency graphs and dependency management, you know, dependency discovery tools, basically, to address what it means to create your software bill of materials, right? And they've been connecting that to very interesting systems that allow you to have automated insights, alarms-based, and vulnerabilities being discovered, right? All these kind of things, how the things work together, right? And really go down to the tiny little details of where might a vulnerability surface to the higher level of your stack, right? The cloud has... It's certainly... The cloud is always a little bit, let's say, more advanced in the adoption of this sort of like forward-looking technologies, right? That doesn't mean that they cannot apply to Embedded 2, however, right? Now, the thing, remember what I said at the beginning, historically, Embedded has always been about monolithic systems, right? Systems that are a mashup of features, right, that is not very modular, not very agile, not very easy for you to understand the blocks that make it up, right? As we go into a more, let's say, advanced future for Embedded as well, right? Then Embedded starts to adopt some of this container technology, right? So we can leverage some of what has been done in the cloud to have the way to get ahead of some of these issues, vulnerability is popping up, right? Not after the pipeline has been taken over, but before, right? So at the end of the day, we can consume some of these technologies and if we mix this up with interesting, let's say, well, software management techniques, distributed architecture for modular software delivery, these kind of things, then we can start connecting the dots and being a little bit more secure ahead of the potential event, right? For example, there's this guy's, one of the logos I showed, Rivenera, right? I've been looking at these guys for some of the projects we're doing with some customers and this is interesting, right? Basically, there's an inventory of the software that makes up each one of the software components, right? They don't deal directly with containers, but if you have a component list, for example, your main data software build materials, if you're, let's say, contracting with the federal government, right? Then it's easy to block that into this thing, right? And give you alerts, give you vulnerabilities as they come, as they surface through any of the security channels, any new CVE that touches this, this, or that, okay, well, there's a system, all of that is indexed, all of that goes into a very beautiful, nice database, API driven, you can connect it to any system, right? So as you start having this kind of tools, right? Then it becomes much easier to connect it to downstream software management pipelines, right? The same way that you would do on the cloud, right? If you had this connected to, you know, to, let's say cloud infrastructure, then you could very easily flag containers that actually have those part of the components. That's what Sneak and these other guys do for actual Docker containers and the like, right? You connect those two things, you can very quickly say, you know, application, A, B, C, whatever, this service deployment or deployment level are vulnerable for this, this, and that, right? Those alarms could be raised, but we could go even one step further, right? On the embedded world is really, as I remember what I said before, if a cloud server gets compromised, at best you're gonna have data, you might end up with data loss, but you know, if you're doing your things right, maybe it's not data loss, maybe it's just, you know, downtime for the service, let's call it, right? But the colonial pipeline, that one, there's no way you can just fix it, right? If it's gone, it's gone, right? So we can connect these things with the software like cycle management tools, with the software updates, software delivery mechanisms we have, right? And maybe the instantaneous mitigation of some kind, right? These are all ideas, of course, of what can happen in the future, like we're not doing any of this, well I mean, we are with some customers exploring this because they're beginning to ask about it, right? These are customers that before maybe didn't care too much about it, they just thought it's okay to just have a security team and they'll sort of keep an eye out on things and then we'll see what happens, right? But it's becoming more complex, right? So they're starting to think, okay, what can we do to think a security as part of the architecture early on, right? Not as an afterthought, right? Security after the fact is always wrong, right? So this is what I was just saying, right? So what if we start to automate some of those systems, right? If we start to take the smart insights from code, from dependency management and so on, maybe we can start to the determination of the origin versus mitigation during runtime, right? We might be able to determine quickly when something comes and try to mitigate it on the runtime with automated tools, right? You might be able to bring down parts of the service yourself, right? You might be able to bring down the, let's say again, colonial pipeline, bring down the delivery of gas yourself before it became vulnerability that somebody else could do for the complete ransomware attack. So you might kill it so that you can fix it, for example, but that might happen automatically, right? It might be something that just air gaps the thing and says, no, it's off the internet, it's off whatever, right? We'll go and fix it now, right? That prevents, of course, somebody else taking over the system, right? So that's automatic mitigation or risk management, you could say, right? Like we said before, as opposed to cloud, real hardware cannot fail, right? So this is not a, there is no room for error with this, right? You have to be better every time, no other answer, right? Also, we have to deal with this kind of thing, right? User-level tampering of advice is always a possibility, right? We cannot get too much ahead of that, but we can identify it, right? If something happened and software changed on the device, we could probably identify it, right? We can identify, there's all kinds of technologies for this nowadays, right? Security verification, secure boot, root of trust, you know, signature, whatever you want to call it, there's all kinds of tools for that, right? So we can connect all those things to have a really automated way of managing this problem, right? So signing software, of course, is nothing new, right? The most important part, right, is maintaining trust across the entire software, right? Remember what we said before, we have all the systems that can give us alarms when new vulnerabilities come to the table, right? But we also have to be able to have a very strict, let's say, enforceable model for our device software to always be considered correct, to be trusted, right? So embedded is starting to leverage a lot of those tools. Our move to modular, to containerization, there are several companies that are doing containers for embedded now, are leveraging these kinds of tools. Everything is signed, everything is tested, everything is a root of trust, a very nice chain of verification, right? This is nothing new, but it's actually, it wasn't there before too much, right? At the best, you had some signatures of complete software stacks and things like that, but it was a little, let's say, laser, not everyone did it, right? Simple as that, not everyone did it, right? Not everybody had the skills, the budget, whatever it was, right? To really go that deep into the trust and to maintain in the trust of the entire vertical staff of embedded devices, right? So as we move into containers, well, an immutable software payload is much easy to become deterministic from the point of view of trust. Like it's much easier to validate, to verify if that immutable container or whatever is what you expect it to be, right? But also to identify if that container has any of those vulnerabilities we mentioned before, you're connecting to any of those pipelines, revenue or sneak, any of those guys, then you can identify, right? And you can identify which devices of your device fleet might be susceptible, might be at risk, right? What might be at risk? So we do automatic mitigation, right? Let's see here. So in our company, Pantacor, what we do, I mean, we take a view of defining the entire state with a very deterministic document that just outlines everything that is on the system, right? With that, we can cross-reference with what the sources of those things can be from a container point of view, or kernel trees where it was built, all these kind of things, right? We call this state revisions. It is our answer not to the problem, but it's just how we lay out systems in our world and how we introduce a degree of security and trust to those customers that work with us, right? It is by no means, you know, a one panacea that will fix anything, no, not at all. All I'm saying is that, you know, for the people we work with, well, we try to create the security trust pipelines based on these type of solutions, right? So as we said before, you know, verification of software is nothing new. We take a view that in our world, embedded systems should all be very modular, like software should always be delivered as immutable payloads. Everything can be very measured, very connected one to the other in a pipeline of trust, right? Our technology to achieve this, of course, is called Pantowiser. That's beyond the point. We basically deliver containers and have everything signed from a very nice root of trust. This is just your normal secure boot type of implementation. But because of this, we have a view of what every device in the field is running at each container level. So it can be connected to the systems where the provenance of that software might raise the right flags to help mitigate those problems before they happen, right? So I don't think there's a complete solution to this problem yet. Like the whole embedded market hasn't really landed into we're going to do things this way or that way, but I think, and you can probably see that in the show floor upstairs, there's so much investment in dependency graphing and code insights, right? There's like 15 startups over there that have a lot of money in the pockets, right? And they're trying to solve that problem for the cloud. So let's use that. Let's use that for embedded, right? Let's use the same technology to deploy software and let's apply the same concepts to keep that software secure, to keep those devices secure, right? This is exactly what we were saying just now, right? So vulnerability alarms coming up from your building materials checks, right? The orchestrator identified vulnerable devices, maybe mitigate by turning some parts of the software off, right? Or taking the entire device off the network for a while, right? These are things that we're doing a subset of that. This is more like what is the idea towards the future, right? Right now, the most we do at the moment is flag some of these potentially vulnerable containers and then you pass that on to the security team of the customer, right? It's available for them to do whatever they want, but in my mind, I think, well, we could connect that to much more automated systems, right? We work a lot, for example, with router, with CPs, HomeGateways and basically Telco, right? And like how much money, the amount of money you can save at Telco if you can prevent that from spreading before it happens, right? That's ridiculous, right? I mean, it's really important stuff, right? So we should be much smarter. We should be much better at this. Think about this problem. Have more conversations like this, right? And just, well, find how to start mitigating those problems, right? So embedded can and must address this, like it says over there at the end, right? It is not just the job of the cloud to keep data secure, no, it is the job of embedded to keep those devices that we put so much trust in secure, right? I don't want my house to be compromised. I don't want my gas to go away, right? And that's it, right? So that's actually my final slide. The whole point of this is to trigger a bit of a conversation or thought process in your own heads later, not necessarily now, but just think about it, right? Because it's important, right? There's a lot of work being done that is just, there's a lot of embedded equipment that is still built in the way that it was done 15, 20 years ago, right? It's just kind of throw away or just mash up of things and now those things are getting connected. It's a huge risk, right? We've been seeing that huge risk for the past few years. I don't think we've seen the worst of the backfiring that that creates, right? We've seen some of these as scenarios, but I think we're going to see a lot more, right? Because everybody talks about IoT.  But, you know, the next washing machine you buy two, three years from now will be connected, right? Everything is going to be connected from that point of view. Not necessarily, oh, it's super smart. It has big screens or anything. No, but it's connected. It's sending some telemetry. It's taking updates, right? It may be not connected to the user itself. You don't see it as a super smart device, but it's certainly connected. Your network can be compromised. Everything can be compromised from any one of those entry points, right? So it's a big problem and we have to start thinking about it. So thank you for that. Let's discuss if you guys have any questions or just want to bring ideas to the table, right? Happy to chat. Yep. Well, I mean, so that's the thing. There are two concepts that depend on who you ask. They will give you a different answer. What is IoT or what is embedded, right? You know, the reality embedded is everything that is not general purpose. Let's call it that way, right? And the same applies to IoT. Nobody really knows what IoT is. IoT just means something that is connected. It's my definition of it. If something is connected, you could consider it to be IoT. It might be a little microcontroller-based sensor or it might be a huge server somewhere. I'll call it IoT. It's connected to a network. It's available. It's reachable, right? So to your question there, what I'm talking about here applies more to higher-level stacks, right? You could say the embedded that is bigger, the embedded that is not microcontroller-based, right? So the embedded that is actually embedded Linux-based, right? Things that are a little bit more complex, multi-feature devices, right? Things that are not only fixed function. I was talking about the washing machine, right? Why was I talking about the washing machine? It's a good example. Washing machines 10 years ago or five years ago, three years ago, you know, 99% of them were just very simplistic microcontroller-based systems. Turn this on, turn that off. Some power control, that's it. Next generations are moving a lot of those functions to higher compute capacity devices, things that are actually running full-fledged operating systems, a little embedded Linux board, right? So these problems start to become apparent over there because now the features are sort of being split, right, in ways that it becomes harder and harder to maintain that entire confidence in the system, right? So no, it's not about microcontrollers, although that's important, too, right? But it's a, let's say, it's less complex or less big, right, problem to address if we're talking about a fixed-feature microcontroller-based device, right? Does that answer your question a little bit? Or at least that's my way of thinking. Maybe I'm wrong. Yes, yes, higher-level stuff. I mean, we're talking about higher-level stuff, so we're talking about Linux stuff, right? Embedded Linux stuff, something that can run Linux, but we're not, I'm not talking, or at least what we do at Pentacore, we don't work with higher-level embedded devices, like we're not really into the Raspberry Pi Plus parts of the world. We're rather towards a slightly lower parts of the world. We're talking about devices that are 1632 megabytes of Nor Flash, 64 megabytes of Nan Flash. I mean, the core of what we do is containerization for those low-spec devices, right? But that's the problem segment we have observed. I'm sure there's bigger things out there and maybe other ways to address those problems, but at least in our problem segment, well, that's what it looks like. Any other insights? Or, yeah, that's a fantastic question that maybe somebody else in the audience can answer. I'm not sure. I'm not sure. I mean, if you have a complete compromise at the root of trust of the device, be it a two-device or something, a TPM, whatever, like whatever that root of trust is, well, I don't know if there's an easy way to mitigate that. Maybe somebody else knows. Exactly. And that brings in the place of mitigation ahead of the problem, right? You might flag something that's weird there, cut it off, right, type of mitigation strategies, right? Yeah. Yeah, I mean, so there's a million ways that the problem about security is that it's not a complete problem, right? I mean, it goes in all possible directions. And there's all kinds of technologies out there that help you mitigate parts of this problem. Like Ricardo was saying, I mean, you can do attestation if the problem is a compromise root of trust. You can certainly do that. You can have trust on mediated access to particular memory regions or subsystems or buses inside the system, whatever it might be. That nothing is a panacea, however. I mean, the most important thing is try to identify those vulnerabilities before they're exploited from a central point of view, right? It's not try to identify what has been compromised, what might be vulnerable, right? And then enact some policies to address that. That's also not going to fix everything, right? But it's at the very least important for us as the architects of that sort of next generation, right? To think about that while we architect those next generation devices, right? It's important, right? No, they are in use. I mean, again, it once again depends on the industry. Some industries just don't have the budget for that. As simple as that, low cost stuff. But if you go to higher cost stuff, which is still deeply embedded, then you will start finding roots of trust. I mean, a root of trust is not necessarily a TPM. A TPM is actually a huge component that provides a lot of features, right? But you might have a little TUF type of thing that's just a very steady root of trust, right? I mean, there's all levels of things you can do, right? We are seeing it more pervasive. I mean, it becomes more available, let's say. And just like your colleague next to you was talking about, ARM trust zone is available in most SOCs, right? Yeah, I think I've heard a lot of it. Exactly. It's a solution for trust. Right. But not everybody leverages. We work with a lot of customers that could leverage trust zone, for example, but they don't care, right? Simple as that, right? It falls sometimes to us to try and evangelize a little bit the importance of it, right? But in their mind, it's like, it's okay, even though there's no extra cost. Well, I mean, there's no extra bump cost. There might be an extra software cost, right? For the development or implementation of that. But the embedded world also suffers from the fact that it's very fast-paced. Everybody, everyone always needs to get a new version of their hardware out there, right? So, you know, it's a complicated segment, but the tools are available. And again, it's up to us to educate, right? Those product engineering teams what are potential best practices for the future, right? All right, I think that's it. Let's not take more time from the previous speaker. I think we're five from the time. So, good. Thank you for coming, guys. If you want to know a little bit more about what we do, we can go to booth B33 at the sponsorship floor. Thank you.


What's up everybody? Jason here for jazby's case breaks.com picketing number four of 2019 flawless football just sold out It is a two box brief case break number four again. Happy new release day. Happy flawless day We did have to sell out around number block that sold pretty quickly for just the Giants in this break and here are the customers Yes, I guess they're all just digital. I thought and here you go customers that are in the break itself I thought that they were kind of like e-pack kind of like upper deck does where you can get the digital card But you can also redeem it for a physical card, but I guess I haven't really read into it I'm gonna read into it today, but people are saying the blockchain for flawless is all just digital though So you just buy sell trade in their digital website or digital world, I guess It's my knowledge. It's I don't know if you can get a physical card, but don't quote me I'll read about it today It's been out for a little bit though. I know they do digital blockchain auctions for like crazy high-end cards like every week or every two weeks, but I Don't know if that's the same of these ones when it comes to can you get the physical card or not? But I'm sure they're still gonna sell pretty well though Think so Joseph. I mean everybody will hack into anything. I know very enough if they can It's definitely flawless right willing all right here's the first blockchain Good luck patch autographs Ruby. So let me quickly go to the checklist Go to the peas and patch autograph Rubies are out of fives card number 68 That's Russell Wilson There you go Seahawks going to Eric And those are out of five and if you guys need to look at the checklist here you go I like the official version of carbon connection, but Gruber check has also has them Seattle Very nice. And like I said right here At your digital collection showcase your cards to the world's sell slash auction cards All right next one we got for my Eagles Six out of 20 quad relic mile Sanders rookie showcase And we got a triple relic Daniel Jones Kyler Murray and Dwayne Haskins 19 out of 25 So that'll be a triple randomizer between the Cardinals Danny Retzgins DJ and Daniel Jones Giants, which will be random number blocks. So if the Giants were to win Spot number nine, which is Fred would get this So randomized that at the end of the break We got Tariq Cohen three out of 20 three-color patch for the Bears Joey with that one We have Derek Brooks one two three four five color patch call it Damn 13 out of 25 Buck in here. It's going to Steve. We have Clay Matthews three out of ten Rams going to Jeremy Anderson. Whoo. Whoo. Whoo. Ryan check this out, buddy Mile Sanders one two three four color patch seven out of 25 There you go Very nice And we have a one out of five Ladain Lee and Tomlinson and that's Chargers and Jets So that's gonna be a randomizer Chargers, which would be Eric and Jets, which is Wayne One out of five Hall of Fame signatures. There you go. So we'll have to randomize that as well All right, let's go with this one right here Well, those are miles Sanders relic now you get the patch auto. Yes, those two are the same I guess We got an Alvin Kamara 11 out of 20 Little Ruby for the Saints going to Nancy we have a Nike swoosh two out of two will Greer Carolina Panthers Which is going to Jeremy Tillman very nice and we got It's green and it is Kyler Murray three out of five encased autograph For the Cardinals who bought them straight up Danny very nice That was a nice briefcase Next one. I've got a blockchain Jeremy, this is Pikachu number four And we got Ricky shadow signatures Ruby card number seven Marquise Brown Hollywood Brown for the Baltimore Ravens and Ruby We'll actually be out of five There you go. Nice Baltimore that's going to Aaron continue on You got Deontay Johnson out of 20 Steelers going to Michael Gallucci and we got Josh Allen one two three four color patch one out of 15 For the bills When a Dom then we got Harry Carson for the Giants 12 out of 15 That's a random number block hit To Going to sin in we got a Eastern stick nice patches in there for the Chargers 25 out of 25 Chargers going to Eric Then we got a Alejandro Villanueva five out of five Star swatch signatures for the Pittsburgh Steelers Another one for you Michael Gallucci. We got Earl Campbell one out of 20 Houston Oilers Which would be going to the Tennessee Titans EA with that one? Nice three color patch Right there and then we got a two out of two Josh Allen Four color patch and looks a little dirty as well. That's awesome Definitely game used Bill's going to Dom There you go. Nice. All right. Good luck guys last three hits Seven out of seven diamond Jerry Rice 49ers going to Gary we got 16 out of 20 Stefan digs Minnesota Vikings going to Jeremy and the last one here 19 out of 20 Oakland Raiders Josh Jacobs little rookie patch autograph Pedro with the Raiders Very nice, and there you go everybody that was the break this as well as pick your team number four On jazzy's case breaks calm, but I did two random eyes this year triple swatch and Autograph of LT between the Chargers and Jets And I'm sure number five is either sold out or about to sell out So we'll break that open next and that might be my last break and then Joe should be getting here So here we go Let's get a dice roll for both. All right, so this one is Giants Redskins Cardinals and then this one is going to be Chargers Jets roll it four and a three lucky number seven seven times one two three four five six and seven Cardinals winning that one as well There you go Cardinals after seven times one of Danny and Last one here seven times one two three four five six and seven Stain with the Jets, how about that? That's gonna be going to Wayne and the New York Jets There you go guys pick a team number four in the books looks like number five may be sold out So coming up next in a separate video jazzy's case breaks calm


We're back ladies and gentlemen is detective agent, and I'm here to catch the crux I've been gone for a few weeks the cricks have been creeping and crawling all over the place So for the day, I'm gonna be operative agents. Hmm. Is that me right here? I need to watch this video. Oh, sorry Is that me right here? Elms got caught NBA 2k 21 is right around the corner and that gives plenty of people incentive to just Not gonna lie. There'd be times where I think to myself Am I capping too hard? But some of these people man, they have no conscience not gonna lie to you I haven't searched before there's a good chance that nobody's done this and I'm just about to bust nobody and if that's the case I'm gonna lose my job detective agent man straight up FBI. I'm real FBI agent guys remember that Hey, if y'all new to the channel man, you haven't already subscribe. What we got? I don't know. We're trying to get to 1.5 right around the corner You not subscribe you watching the video hit the button now once you done that top link in the description my second channel Gotta subscribe to that one. Oh, have I been zooming out instead of zooming in guys? I'm bad at my job my fault So this is zoom in Subscribe to my second channel link at the top of the description hop on YouTube real quick search up mba 2k 21 Gameplay crooks here today ladies and gentlemen. Oh, you're about to get busted It's your final free day, buddy top rank. We got the infamous Hunzee back at it again mba 2k 21 official gameplay footage ps5 Xbox So this video we're looking for just enough evidence to bust these guys I'm having too much fun with these zooms not gonna lie. I might need a professional zoomer real quick Let me call one. Are you not home right now? Could you I need some I need your help this big big stuff here I need your help. Please come Huh, you probably didn't mean that let's look at our first suspect here Well, he can't be a suspect till we have evidence, but you know, sometimes you don't need evidence You could just make up reasonable doubt What cut that out the video detective agent. Let's watch our first video I'm not I'm not he's known for scamming so I'm not big a shout out to why 2k sports for providing the footage Exactly like this now. I'm gonna show you some gameplay everything like that of what 2k 21 could look like I know we all have high hopes for 2k 21 And I'm really really excited to see what they can do this year because I'm expecting a great basketball game Now this is not for sure mba 2k 21. This is just a concept of what?  You've been busted in the title here I was led to believe this was official Was it not official now now because 2k 21 reason you're playing copyrighted music in the background You try make me make no money. I'm seeing you. I was gonna find this video now This is some NCAA footage now this we might be getting in 2k 21 No, we're not if you don't know the double a just changed the rule so that players can make money off of their name So that means that huh video game companies are allowed to use their name in Video games and basically make NCAA video games Hunze number one thing you have to do today today today is to disable re-sample in Sony Vegas We'll lead show them a tutorial. Hi, I don't want to confuse you too much like just just focus and follow along Just go up right here Very simple click the button right here boom very simple go all the way down to the bottom very simple click it Make sure it's disabled very simple and then click okay That's it. It's not hard stuff and it's gonna make the ghosting look so much better. I'm trying to help out your videos I need you to start bamboozling more people so that I could bust you in a bigger scandal and catch your boss I think that's how it works in the movies double a into What's going on here today? Okay, so I need some this is some big stuff. I need your help with You're actually already doing it I need cinematic zooms when I say we're like when I when I say I busted you I need you to zoom in high quality though Could you do that for me on your face? Yeah? Yeah, there's a lot of date. I'm looking at right now, but hunze looks to me like You're a fraud That way I think I was good. Let's try it again do one more take. I'm looking at the evidence here hunze It looks like You're a fraud Yeah, that was good. Thank you so much. Appreciate that. Hey, just so you guys don't get absolutely bamboozled Y'all have to be careful who y'all watching your footage from you feel me? This is the rule of thumb. All right moving on as we move on from this point forward If it's on YouTube for more than an hour It is fake or 2k released it themselves and now if 2k release it themselves You could actually just watch it on 2k's channel or go to like a respected person like Chris smooth You got no Chris move not gonna drop no fake gameplay You won't notice the real thing if hunze was the one to release some leaked footage Even if it's on your phone you're recording like a screen like a TV They would strike your channel down so fast you wouldn't know what hits you and there'd be no point of detective age And I'm here to catch the frauds. There's gonna be some league gameplay guys in the next couple months, right? And it's gonna be on the internet very briefly before it gets struck it Yeah, I'm saying you gotta you gotta know where to look and honestly I feel like you find some more on Twitter than you will on YouTube But I will give hunze the detective agent speaking hunze did not cap and say that this was official footage He's just playing it role like he's on the tippity pole He's tips on the line bam boozled us with a good quality title first look demo official gameplay when we got to the video He didn't try and convince us. It was real unlike his fake glitch videos in which he does that all the time Okay, I need some more evidence 2k 21 That would be the whole and that would be really cool to see so this is what it could look like now This is some really fluid gameplay if you just take a look at how these players are moving Everything like that. This looks really really good. Now if 2k 21 can look anything like this Preliminary you have a caveman brain. I explained this on our podcast link in the description I went in depth, but let me give you a brief synopsis of why if 2k 21 next in look like this You would all hate it because 2k 13 look like this not graphically, but in terms of the animations in the gameplay 2k looks unrealistic because it's relying on your garbage input to see what do I do in the game? What do I do in this? They're just trying to make it look as real as possible Everything is already predetermined in 2k 13 Everything was predetermined if 2k looked like this the input delay would be so massive that when you click something on your controller You did your little dribble move it would take centuries to complete that move in the game The only time 2k should look like this Hunzey Once you pay close attention is if you leave your goddamn controller down and it loads into AI versus AI game Then I don't mind it looking like that. I'd be super happy. You see how real this looks Oh, my god.  I'm sweating now guys. I Take my job real seriously. Detective agent. Let's look for some more evidence NBA 2k 21 full gameplay NCAA concept. Oh, okay. Okay. This is fine Now is he gonna bam boozle some people? Yes, but it's just a really click-baity title He put concept in the title. He's not bam boozling to the degree of a Hunzey I'm gonna leave you alone. Why 2k NBA 2k 21 leak next-gen gameplay insane quality. Oh Hold on of course. I knew it. Yo, the second I saw this footage blow up on Twitter I was like, I know people's gonna cap about this on YouTube. Bye tomorrow. Bye tomorrow. What do you know, man? Look look here. Look here. Look here. Look here. Why is there no audio? Come on. Come on. There was literally audio in the original clip. Did you somehow make the video worse? How was that possible? How did you do that? That actually takes effort Did you know that to make the video this much worse for those wondering where this gameplay is from toast it explained it on Twitter It's basically like a whole bunch of Gambling addicts just bet on these games. It's like virtual basketball. So it's it looks real It's all simulation and people just sit there betting on this bull for some reason I guess since the NBA is not around people's getting real desperate right about now And I'm not gonna lie graphically aside from their faces like the bodies and everything they might have they might all have very thick Asses but aside from that like graphically bro the textures it looks solid, man It's they're not spamming sweat like 2k the lighting engine the way it reflects off the floor looks mad realistic It doesn't look overly cinematic. It looks real. You can't tell that cuz YouTube processing is garbage So it's already processed as I'm watching it and then it's gonna process again while y'all watch it And it's not gonna look as clear as it did on Twitter He didn't even try and like commentate over it or convince us of anything He was just like I'm gonna take this clip remove the audio upload it with this juicy title right here and get 2700 views Which is actually not as much as I thought he was gonna get man as I scroll through all these videos I'm not gonna lie to y'all. I'm impressed. I've jet-ass thought that I was gonna find Hundreds hundreds of examples of people just capping out their mind But no, it's just people trying to use juicy titles like swante NBA 2k 21 leaked gameplay footage 2k 21 pie charts my career build Oh, no, he capping for sure. He don't have not not hold on swante here to save y'all the headache man Okay, I'm here. Okay bring you the truth. All right. And also, um Ronnie 2k talks about 2k 21 And we don't go over some of those sound bites because the quality is in one Anywho as you can see this boy here, right? Owen B. Jones. Okay, this guy, right? So many people are sitting me this tiktok, right? Look at this 1.4 million views 1.2 million views one point Like hold on Who's fall are y'all falling for this stuff? Y'all been doing this for how long you've been playing video games for y'all still falling for this stuff This detective agent. I'm trying to save y'all from the inevitable doom. That is your expectations Look at this. Do you mean what I mean?  And how would Owen B. Jones have been the only one in the world to get this exclusive content? Who is he guys there is gonna be plenty of leaked gameplay You want to know how you're gonna find it when 2k has an event like but they're obviously they might all be canceled now I'm not sure usually like at a gamescom at packs at eat three around those times You might be able to find some phone footage, right? But this looks like somebody's goddamn home So unless it's a QA tester or something like that, which I highly doubt then this is not real man the verdict Detective agent here decides. There's not enough evidence to prosecute Am I I don't really know my job description is so I rate what swante is doing He's just he doing exactly what this video is doing I'm gonna have a juicy title But it's not gonna be a lie and I'm gonna get some views off of it That's how this YouTube works fellas now It's even funnier when someone does it on Twitter because there's actually no apparent benefit to getting Twitter retweets Except that it might make you feel better NBA 2k 21 g league gameplay leaked on the PS5 It's the same gameplay guys the Inversion of this with audio exists on Twitter. Are you all so lazy that you all stole it from the same youtuber who was Incompetent, okay, so this is what I'm talking about when I when I'm talking about these animations here Just so you guys have a good idea. I need it some visual evidence here We're gonna do a breakdown here from detect. Oh, that's quality. We don't want to touch that He's gonna drive left. He beats this guy. He's in bad defensive position. That's fine But look as he continues to drive.  But in this situation here, this NYC guy doesn't have much options when this guy decided to go up for the shot It was already determined and then he doesn't get this is gonna happen So you're gonna lose your mind when LeBron is driving. That's the problem with 2k 13 spin dunk spin dunk spin dunk Spin dunk was so overpowered because it would give you such a retardedly favorable animation that when you play game battles Or in any amateur circuit that move was bang if you did it in game you forfeited the game Oh man, do not go back to the times of pre-determined animations I will lose my mind and stop playing 2k Refuse 2k 13 was one of the worst 2k's all time and and some people like have good memories because Jay-Z was on the soundtrack Who cares Jay-Z's on Spotify and every other app go there and listen to him. I get serious about this stuff guys Agents are here man. I apologize ahead of time. I'm always right. I'm an officer of the law This is not g league gameplay. Obviously these are not g league teams Obviously, this is just random cities playing simulated games and what looks very smooth and realistic if we're being honest Even graphically looks so goddamn real. It's truly impressive. Look at that. All of that is impressive All of this is impressive. The fact that they were able to do this just for gambling addicts. That's crazy to me But this is obviously not g league gameplay. Obviously. These are not g league teams. That'd be the first sign Let's scroll into the comments. He has two comments What is this anyway? Why are the player movements look so real that fire Taz Taz total stat right there Hey, Paris wave.  Get him out of here.  Yup. This was the mo cap stuff. This is the mo cap stuff right here. He's not capping This is what we refer to in the industry as wholesome clickbait bait Actually, this is not even 2k21 This is old 2k.  Alright, as you guys can see man Wait, what's that original video? How does this only have 20,000 views man? This is from crypto Oh, I feel like I've met him before tax animations, you know, I'm saying cuz you know Everybody know about the dance. You feel how are you doing this? Get it bro. So this first thing I'm gonna do first. I'm gonna make the basket, you know, when I hit it green How are you doing this green girl? You gotta you gotta hit that mark one time. So Guys, how is he doing this first of all?  The hell is that an entire motion capture studio in one marker list suit enabling creators at all levels to turn any space into a professional motion capture stage Now, what do you do with these animations though?  He added the TNT mod. You know, I'm saying the presentation mod He did a court mod kind of like infamous did Well, like Venice Beach and all that you videos link down below in the description and stuff like that I can't even be mad at the clickbait if he's the person who made this month. That's impressive You know I'm saying all he really did was change 2k Tony 2k21 Now if he's not the one who made this mod that he pushing it a little bit, but I would like to Anthony Davis you moving like this and like that Why take them always getting dunked on his okay, I just wanted to piss off one person from Boston at least Hey, I want to play this mod is this mod available. I want to play it right now immediately this instant thumbs up for J.R. Smith uncontested airball No, not J.R.  You're good.  Look at this man That's just a good quality title right there's nothing wrong with that Graphics for each NBA 2k game has continued to get better and better with each console generation Who's this guy? I've never seen some new folks in the 2k community. You gotta love to see it Oh, man. Nah, he wilding right now. That's too far right here 2k 21 prelude leaked. Oh, man It's the same goddamn o&b footage. It. Ayaya. Yeah, yo guys from now on All right, that's how we gonna do it right if the footage lasts over six hours on the internet It is not real Okay, unless to came themselves released it. I know 2k allows most things like they don't mind when people sit there Criticize the game. They don't mind when people say this that the third whatever but they do mind when things get leaked I swear to God. We almost saw Chris move get strike the few years go over it We saw players like shaking big it was somebody big at the time man They got strike too fruit showing for leaking something early this detect. I want y'all to be safe I want your expectations to not be so sky-high to everybody's disappointed man That's a lesson in life lower your expectations don't gas yourself too much or you get hate the final product Be skeptical do some investigative analysis and come to your own goddamn conclusion man All right, so this one I'm talking about like a month ago There was a leak on Twitter randomly out of nowhere five affiliations in 2k 21 not this got to be cap Right, and it was over like 2k 21 for some reason was already 3% off even though it hasn't even released yet It was like a goddamn 10 year old wrote this out not not a billion five multi billion dollar Corporation got their best guy on the case to help sell the game This is what it came out looking like in NBA 2k 21 for the first time ever look You're supposed to use a comma right there already grammar incorrect multi billion by the way Players get access to all 12 teams in WNBA women's in just in case you I didn't know the WNBA was NBA fans and Access to all 68 college teams in the NCAA the NCAA will be available in play now Play now it doesn't have a dash and a my career path and the W hues and twice in the goddamn same sentence man I'm not an English teacher, but I know the multi billion multi billion guys come on a 12 year old wrote this out 12 Let's stop Let's stop for a moment and just like let's not jump to conclusions because although grinding was just asking a question there There was plenty of people that genuinely were like And I was like guys how many times you can fall for the same trap man There is gonna be times where even I'm like man There's a chance it's like 10% maybe 40% chance that shit right there is real, but I'm a detective I'll continue to detect Detect the cap. Hey fellas, man. If you guys you knew you haven't already drop a like Subscribe to the channel second channel link in the description podcast link in the description ampie link in the description Man appreciate y'all. I'll catch you guys in the next one. I'm out


Some viewers may find the following video disturbing viewer discretion is advised. Here's the surprisingly black history of veganism If your only mental picture of veganism is white ladies and little lemon knocking back shots of wheatgrass, then you're way off In fact, you may be surprised to find out that this new veganism trend is actually not that new and it's not all that white either In fact, veganism can be traced back over 2,000 years to the ancient cultures in India the Mediterranean basin and drumroll please Africa Originally there were plants and people were eating plants.  That's what looked good to us. That's what our bodies were made to eat So the veganism of today is actually more of a nod to the traditions of Africa rather than a recent phenomenon But if you still think the veganism is more for Becky than for B, here's another study for you And there you have it folks veganism is for everyone


We developed a novel method called DNA fragment mass fingerprinting, DFMF, to rapidly identify and distinguish different DNA sequences. This technique utilizes aqueous micro droplets to accelerate deoxyribonuclease I, DNAs I, mediated DNA fragmentation, which can be achieved in under one millisecond. Furthermore, this method employs a cosine correlation measure to compare the master charge ratio, MZ, of each fragment's peak relative intensity and base pair sequence similarity. This allows for the rapid identification of single nucleotide mutations, such as those found in the sickle selenemia mutation, with a similarity score of 90%. Additionally, this method can also differentiate two adjacent bases in the sequence with a similarity score of 62%, which is significantly lower than the 98% similarity score required for gel electrophoresis or direct mass detection by mass spectrometry. In comparison to traditional genotyping methods, such as quantitative real-time polymerase chain reaction, DFMF can complete the identification process within minutes without requiring additional reagents or complex experimental procedures. Finally, this method has been successfully used to differenti.