Hi up Johnny here and on this semantic Monday we are going to be learning how to build some of the vehicles for firefights Okay today folks we are building the GCPS Hornet This can also be the main base to build your plague hornet by adding the extra plague items Or indeed the new marauder Okay, so first off we're going to build the transportation hold These two bits Go together like so again as you're sure you've heard me on All these videos always worth dry fitting everything first Just so you can see if there's any snags Any bits of flash that you may have missed There you go. So they go together like that and then this piece here it's like a ammo box or something that sits on the inside, but what it actually does is holds the flying base When you are using the cargo hold in place You see that then sits in there like that, which gives you a longer recess to put your flying base in and then these two end sections go on Like so You want to make sure You're putting these in at the same time so that they can Still open and close without glue So what I would do So glue one in to start with that in place Then take your doors You'll see Little slots there push one in that side in that side Just hold them in place with your hand While you put this end section on That should just sit nicely In those two lugs And around there And now you'll see The doors still open so they stay open like so and stay closed as well Not too much movement on those And that's that done and then the next section is the main section of the aircraft two pieces Go together like that a bit of glue all along the edges And in those little plugs Now this point before I cut those I'll just see because this goes in here if you're worth Putting that in before you fully close that up just so there's no Snag like so And then cut that in place the same again with these two But what you want to do before you glue these Because I nearly missed it then is take your back propeller You can see it's different to the two side ones slightly smaller and slightly thicker This wants to sit so that these two plugs See and these two recesses here and again you can leave glue from that part and then it does that move up and down It's more prominent with the side wings which we'll come to in a little bit Probably see those move It's nice to do a bit of to have Then we can take the front and back sections and they just Go together like that with this piece over the two of them These those two together like that Glue along here and you say that just sits in there Make sure that's definitely clamped down nicely And the wing sections You have the propellers sit in there like that And in this piece You see these two holes here line up with the holes on the back there and they just sit And there is a left and a right So you'll notice when you try and try fit those You want into the it's fits nicely along here And you'll see again that you have the movement of the propeller If when you come to glue it in Careful you don't get glue too close to these sections here So all I'm going to do piece of glue where both those holes are And nowhere else and that will be enough to hold it in place Like that And then you should repeat the process on the other side And then with the hole that is left On the wing You have these end sections These go On there Just make sure you've got the right one for the right side You'll notice straight away that that one doesn't fit because it's proud there So you then you know that's the shorter side of the three dots that goes to the top like that That in place like that Stick it like that That will dry nicely While we do the same on the other side And here we go And once these pieces are dry You can then be fit to the aircraft There's two holes that line up there And what you also want to make sure is that you've got your little air vents that sit on there like that One on that side One on that side That just clips in And the same again on the other side You just take a little bit of wiggle room sometimes or you might find that there's just a bit of flash that you've missed that just needs shaving off or persuading in with a bit of brute force Which is done for the back wings These slots here start in to the longer side here You'll see that there'll be a unique difference between the two And that helps identify which of these wing sections they go on So this one's got a hole in the middle And this one's got a lug in the middle So I know that these two go together like that And then this one has the little notch missing at the very end And this has a little lug at the very end That way you don't get your left and right mixed up And then these just slot into the sides along here Now these go so for the slightly longer section with these sort of grill pattern goes to the top So I know that is that side And this one is for this side Again if you try and do them the wrong way around they probably won't quite line up And then it's a good indication that you've got them the wrong way So again why it's always worth dry fitting first thing So the next section And if you are wanting to just use the transport holder and this cargo section You can leave these legs off or you can put them on if they don't interfere in any way It's just the landing gear for the hornet And it's an aesthetic choice really as to whether you want to leave them off or put them on But basically what you're looking to do These sections Get the right one Slot into those holes there Some glue down Got a push And then repeat the process on the other side There you go Nice satisfying pop when it goes in You'll see on if you flip this over These bits that you've just put on They are only a half circle lug So you know that this half circle here fits in over the top like that So that is your landing gear in place Should you want to leave the landing gear off These sections are plates that just slot over Remember that gap that was there They just sit in there like that to cover it So there's no hole Then we have a choice to make about some front weapons So you've got two options there that are already built And then this one requires a little bit of assembly You take this section here You can see that So then you see this little lug here and this little lug You know that they line up and fit in together like that And then the same again But on a smaller scale You've got these three little lugs to take the barrels like so And then any of these options Turn it over again Or just sit in the end there I'm just going to glue this one in And what I have just noticed with this piece is it is PVC is this one So you will just need a dab of super glue rather than plastic glue There we go Leave those two off one side And then the pieces that you're left with Bring them all over Tiny fiddly bits Gun mounts And arms for crew Should you wish to install sort of pintle mounted guns into the Cargo Bay here These little arms They just sit You've got the right one On those little pegs there And then you build the gun Much like you do for the one with the mule It's got the sort of two halves The trigger And guard end And then the barrel end And then that also On to the other side Like so And then You've got a couple of GCPS troops Knocking about in your spares box Use those with these arms And you can have Somebody stood in here Shooting out Then once you've completed all the Build process All that's left is to take The crew compartment And your ship And you'll see these four Holes that you've made there Line up with these four pegs And then clip in a bit of force Like so One complete hornet And see What I mean about leaving these Free to move around Which adds a nice bit of dynamics to it There we have it That is the GCPS Hornet build The Plague Hornet kit Is the same build But you have Plague looking sections That you put in instead of the GCPS ones And you have additional things that you add on extra Hope you enjoyed that And I'll see you again soon


Hello everyone and welcome back to UCAT Festival TV. You'll all be watching this on the morning of the final day of the conference. It's been fantastic thus far and I'm really excited to have the opportunity to speak to my next guest, Professor Michael Draper and Alison Braddock from Swansea. How are you both doing? Brilliant, thank you very much Colin. It's great to be on TV. Yeah, very well. Fascinating festival. Absolutely, yeah. It has been a wonderful three days and people will be watching this just prior to I suppose the last session or thereabouts. How have you both enjoyed the festival thus far? Oh, it's been amazing. I mean the sessions have been really diverse, really practical, really useful. I've just come off a panel session with colleagues from across the UK from different institutions, which was chaired by, I say chaired very well by Emily McIntosh from Middlesex University, basically talking about the relationship between personal tutoring and student services. I think we had over 150 delegates attend that particular session and the questions just kept on coming and coming. We could have gone on far longer and it was a fascinating discussion.  But the level of the questioning was very insightful and people really wanted to know how they could improve personal tutoring within their institution. You tell us the questions. They really do care about students, the people attend this conference. Absolutely. That was a great session. I'm not surprised given like the caliber of people involved in the two organizations and I'm delighted that I suppose delegates will also have the opportunity to watch back because everything is being recorded, which is one of the benefits to the virtual environment. And what about you, Alison, any particular highlights? Absolutely. I attended a session by Catherine Mann from the University of Melbourne about advising by design. And she explained how the design methodology worked and most of us in universities strive to include the student voice. We talk a great deal about partnership and co-creation. But for me, this is a methodology that you can use so that right from the beginning before you come up with initiatives, policies and strategies, you are co-creating them with the students and you can bring in the diversity of students to ensure that you are making the opportunities fully inclusive. Alison and I had a catch-up at 12 noon today after the session and we've all decided to press the go button on that for our institution. Alison was so enthusiastic about it and I caught the enthusiasm and said, this is going to work. It sounds really good to me. I think it's transformational. I really do. Well, that's exactly I suppose what you're hoping to get from a conference or a festival. And I suppose the timing has almost worked nicely in some respects because everyone is gearing up for the next academic year and suddenly you've kind of had this influx of new kind of great ideas and ideas around best practice. You've met new colleagues. So it's actually worked really well. I feel there's definitely things that I've taken that I can already see myself implementing. And sometimes I feel if I go to a conference over the summer, I maybe lose a little bit or I come back and somebody's on annual leave. But I feel this year I might be able to really implement some of the things that I really would like to. So it's good to hear that that seems to have been the case all around. Yeah, absolutely. I think personal tutoring is probably one of the most important relationships between an institution and their students. I think given the situation around COVID, given that there's going to be more blended learning, that relationship is going to be even more important going forward. So I think the more that we can engage with the agenda that UCAS has set and of course institutions are also setting around person tutoring and academic mentoring, the better it will be for student experience. Absolutely. And now both of you are going to be involved in the UCAS 2021 conference, which we are hoping there have been wonderful aspects to the virtual world, but we are hoping it will be in person and that we will all be able to gather together. Maybe you could tell me a little bit about what we can look forward to in Swansea next year. Right. Well, there will certainly be a warm welcome in the hillsides. I mean, that's Wales for you. We're along the song and hospitality. I suppose other countries may claim to that as well, but a very warm welcome in Wales. Swansea is a dynamic institution. We've grown, I think over the last decade, quite rapidly, progressively but in a controlled manner so that we can make sure the student experience is absolutely right. We currently have around 22,000 students in total. And obviously we hope to retain those students going forward, which we will make sure that we do with the student experience that we offer. It is our centenary year as well, which will be playing over into 2021, so there will be celebrations around that. And I think when you come to Wales, when you come to Swansea, you'll see the perfect physical location of our institution. Not many institutions can claim to be on the beach. Well, one campus is almost on the beach. But the Singleton campus, where the conference will take place, is separated from the beach and the Mumbles village, which most people know, simply by a dual carriageway over which there is a walkover. Behind us is the brilliant and beautiful Singleton Park ornamental dark gardens, which are lovely. And of course, Mumbles, I think he is very well known as a village, but we are the gateway to the wonderful Gower Peninsula, the first area of outstanding natural beauty made in the UK. And rightly so, we have some world-class beaches, and I mean world-class beaches, stunning landscapes and stunning history as well. Both prehistoric on the Gower Peninsula, and also within Swansea itself, where not many people may know this, but we were known for our copper industry in the past. The reason why Nelson's fleet at Trafalgar did so well against certain countries, not naming, was because they were copper bottomed. And so the manoeuvrability of the boats through the water was made possible by the copper produced in Swansea. Not many people may know that, but I will pass over to Alison because I think that's really cool. I just say I hope it will be a physical conference because we're planning lots of exciting aspects which introduce delegates to Welsh culture. So Croeso Egid and Welsh food and unmissable Welsh singing. I am, I am. That was extended to my Welsh, by the way, which Alison- Oh, Bentegeti. Yes, see, there you go. But the theme of the conference, just to come back to the conference that we're going to be hosting for UCAT in 2021, is all about directed independent regulated learning by students. As most people will probably realize, the key part of the step up from schools to ecologists into institutions, higher education institutions is around that step into independent learning by students. And really, how do we best support students so that they progress through their levels of study through level four, level five, level six undergraduate students so that they achieve an outcome, not just an academic outcome, but also an outcome in terms of their personal development, which is what they want. And I think it's important to have that conversations past a person tutoring relationship, academic mentoring relationship to establish what it is a student wants. And not everybody wants a first. Not everybody wants a two one. Most people will be satisfied with a two two depending on where they come from. So having that conversation and coming to some agreed outcomes for the student, which a student is aspiring to and perhaps stretching those outcomes of this as well. Well, you've sold me on it certainly I can tell you that I've growing up in Cork, we used to get S for C rather than channel four so I already know how beautiful Wales is on screen and I really look forward to seeing it in person. And I think that the theme of the conference sounds fantastic so I hope you know to meet you both in in Swansea next year I want to thank both of you for taking the time to chat to me today. And I think it's going to be a fantastic event in 2021. Thank you very much color we really do look forward to it.


Yeah Lomelo ball has been ruled out for the rest of the season he has a fractured right ankle I'm told the Hornets pretty much ruled him out yesterday and it's devastating for him he barely played this season quite frankly. He dealt with three ankle sprains in his left ankle he had a grade two ankle sprain in the preseason and it just never got better. He re-aggrated multiple times and then on Monday night he has a non-contact injury right there and it's the right ankle that he fractures. He's looking at a pretty extensive rehab could be about a couple months three months of rehab time for him that will go into the off season because Charlotte's year will end with the last regular season game. They went seven and twenty without him this season and that's just the type of year that's been for them. And so now when you look into the lottery balls of Victor Wominoyama sweepstakes Scoot Henderson sweepstakes the Thompson twins sweepstakes that's really what the Hornets season could be about. They do have open roster spot we'll see what veteran point guard they might sign. I'm curious from Chandler's perspective you were that young player at one point that was looked upon as a franchise cornerstone type of guy in Houston and just the year that they've had. How do you assess Lamella ball season. I mean it's really uneven year. It's hard to really gauge it. But how do you assess the year and how do you go. How do you move on from here.  He knew the expectations were low for the team but this is this is a this is a definitely a devastating season because as a young kid right there you want to hoop. Like I was my career was riddled by injuries but I didn't really start till my fifth and sixth year to have this happen so young. It's frustrating because you know he's trying to do all the right things. You know he works hard. You know he's working on his craft. He's a talented player with a really bright future. And this is just devastating because he's on a bad team. He's not winning any time soon. And now for him to not even get out to do what he loves and to hoop is definitely is going to be an adjustment for him. But hopefully he takes this time to shut him down. They lose every game possible and try and get Victor. And he's got a heck of a teammate next year when he's at full strength. Bad luck for both ball brothers on this one. Shoms thank you as always. Enjoy the rest of your week. We will we will see you Monday morning.


You might consider yourself an advanced player and that's good I want you to be high on confidence But I want to do a skill assessment and see if you can actually do all of these exercises These are soccer training drills for beginners Here I want to do some soccer training drills for beginners and what I want to do in this video is kind of a physical and technical assessment because I'm not calling you out because when I was a kid or when I was younger I did the exact same thing For some reason when we are young or we're not that advanced. We're just starting out We think we are better than we are You're watching professional football on the TV and you say You know what? I think my skills as good as those guys or I think I could play at that level But you don't realize how far away you are. No, I'm not saying that to discourage you I'm just saying that because I want you to learn to be self-aware of your weaknesses So you can improve them as you get better and better you realize you have so much more and more to improve the quote is The more I learn the less I know and that's so true when it comes to soccer So what I want to do right now is first a physical assessment I just want you to try these things and if you can do these things Then hey, maybe you're not a beginner.  I'm doing this To encourage you to be self-aware of your weaknesses so you can improve them. Okay first test. Can you actually touch your toes? Full bend straight legs. Can you touch your toes? Yes? No, be honest with yourself Something you should definitely look into work on improving Can you do a full squat? Okay, so sit down full squat Without being hunched over Sit between your legs not up here Hey, what's up? I hope you're finding this content helpful Watch this all the way to the end if you want to find out which subscriber got this video's special shout out Not like this. Can you sit down in a full squat and I need to do a better job? I still have to work on this Push the knees apart chest up. Can you do a full squat? No, maybe you need to work on your mobility What about just a plank position push-up position? Can you hold this with good form for 10 seconds?  You see kids do push-ups or even grown grown adults doing push-ups like this That is not a push-up. That's not gonna develop your chest. That's not gonna develop any strength Can you do 10 push-ups? Good form control chest to the ground. I'm not resting here. I'm just tapping Pushing up full extension and again. Okay, can you do 10 push-ups? Can you go on one foot and hold good balance here? Not down like this bending the knee Back leg behind you. Can you just hold this for 30 seconds? Strong strong knee strong ankle chest is up.  Can you do it on both feet? Usually one is worse than the other And I can feel my left knee needs a little bit of work Okay, coming down here And again, can you hold this? Strong balance strong tight ankles tight not wobbling Just still for 30 seconds. Okay, so a little physical Just basic body control Soccer football you need to be an athlete as well as a footballer as well as a technician Okay, so that's a little physical skill assessment or physical ability assessment How do you fare with that? Some things to work on and you can improve all those areas Let's talk technical In my opinion if you cannot juggle to at least a hundred Alternating you're still beginner level technically Can you do at least 20 25 on each body part? Right foot left foot Sorry, both thighs One time can you do 25 on the head? Okay, technical assessment as far as ball control. Can you do those things a little bit of dribbling and I'm saying all these things and If you feel that hey, I didn't consider myself a beginner, but I can't even do these things That's okay I'm just saying this to make you humble. I'm not saying this to bring down your confidence Because I want you to improve more than anyone else. I want you to write in the comments How much I helped you improve and I can't do that if I'm lying to you if I'm not real with you Okay, so I'm gonna be real with you. Please be real with yourself Just a little dribbling assessment Can you do a cone dribble with one touch only? left foot and Right foot. Okay, so bending the knees good control Without touching the cones. Okay, not like this one touch in between the cones a little dribbling assessment for you and both feet both feet Shooting assessment Let's see. Don't have to be far away, but see if you can actually make the ball go where you want it to go with both feet so can you hit Bottom right. Let's say at least at least corners bottom right bottom left Can you hit? top right Top left. Maybe I'm a beginner Bar down. We'll take it. Okay, right foot. What about left foot? And again, not from far away But just seeing if you can actually push the ball where you want it to go and I need to work On my top corner The left just a technical skill assessment now if you're a beginner or you're advanced and we're doing the shooting with your weak foot And you can't do it and you say well, I'm an advanced player But I just have a weak foot. I want to change that mentality come back Maybe your advanced player, but you have a beginner weak foot. Okay practice that and then I'm gonna get someone in the comments that says oh But messy messy can't use his right. He only uses his left One, you're not messy to he can if he has a chance on his weaker foot his weaker foot He will finish that chance. He just prefers to use that foot the left foot the strong foot in the game That's really fine. You can favor one foot, but you have to have the ability to strike the ball with both feet So this is a little technical physical assessment to see if you're a beginner I hope you like this video if you did, please like comment below This is the featured subscriber for this video if you'd like to be featured in future videos Hit that like button drop a comment below and let me know how my videos have helped you improve and achieve more in this sport


All right, next up we have My Little AWS IR Sandbox by Michael Wiley. Please welcome Michael. Thank you very much. I'm not getting the slides. Awesome. Okay, a couple of familiar faces from 10 minutes ago. That's good, thank you. So, about me getting for those who weren't in here, I'm the director of cybersecurity services at Richie Mae Technology Solutions. Recently joined their team to help them build up their information security best practices. I do a whole plethora of cloud security, cyber security, GRC, et cetera. And so I built this talk because we've internally built our own little IR sandboxes and there's a lot involved with that. And so I'll kind of explain how we did it and what we do here. But a couple statistics, I always like to start my slides with what's the point of the talk. And so I think 92.4% of malware being delivered via email is one of the key pieces of why we started building our sandboxes out. We get a lot of cases where there's different malware or phishing attempts that come in and we needed something to quickly test these things out. 75% of businesses hit by ransomware were running endpoint protection. So even with your EDR solution, Silence, Carbon Black, Macv, whatever you have in your environment, we still saw the need to be able to test things that got past that. And the average cost for ransomware, instance, was 133K in 2017. Obviously there was some with a lot more. Atlanta ended up spending $2.6 million or more in their incident response situations. There was the giant shipping companies that spent billions of dollars in their ransomware incidents. And then there's the small businesses that probably spend a couple thousand dollars in those cases. But we're seeing a lot of money around these malicious files and things that get past the endpoint protection. And so it's always great to just double check before you go ahead and open a Word document or PDF. So in these situations where there's something suspicious going on, we wanted an area that we could quickly and expensively test this out. And so if we look at what's being delivered into mailboxes, we can see that Microsoft Office documents and archives like zip files make up a big portion of that. And then a lot of PDF files as well. And there's a couple of different techniques that we're seeing that I don't have time to go into detail on right now, but I talked some about this on Friday and to more about how phishing attempts are getting past different email gateways. So when we get some of these files or whether it's phishing or whatever it is that's a little malicious, we wanted it to be able to solve some of these problems.  So if something got infected, we didn't want it to go and spread out. We possibly examine email links and their attachments. So if we saw some type of link and it looked legitimate, but we really wanted to investigate it without detonating it on the endpoint. To validate documents for phishing attempts, there's a lot of scenarios that emails look legitimate and they bypass security gateways. They bypass the end user or maybe there was something that was a little fishy and that's why they wanted to take a look at it. You wanna learn about your enemy and their tactics. So even if you do see something and it had grammatical errors and there was pixelated graphics and it's pretty obvious that it's not legitimate, you still may wanna learn about your enemy or who's targeting you. Or maybe it's just a mass distribution of this malware or a phishing attempt. You wanna look at that and say, well, why did it get past my email gateway? Why did it get past my DNS protection? Why did it get past my inbox or my endpoint protection? All these tools and this layered defense that I have, it's still got to the end user and it's in their inbox. So how can we adjust our security to strategy and our controls to better protect against this next time? Because if Sally and HR got this email, it's gonna come in next time and someone else is gonna get it and someone else is gonna get it and someone else is gonna get it unless we do something. And I think that was an old approach of let's go look at the IP address or the email address and we'll block it and be done with it. And so a lot of junior people now have to coach on this and say that's an old strategy and there's a lot of flaws with that. It might block them from sending another email, but they probably didn't send it to Sally and HR wait 24 hours, then they're gonna send it to Bob and accounts receivable and so on.  So you can't just block an IP address or an email address. We have to go a little further than that and look at the actual technique, tactic and procedure, the TTPs. You might wanna prove your security controls as I said, after you find out why they're bypassing all your other controls, you may build security awareness programs around it. So when we get new malware and we're seeing new techniques each month, we may say here's a new technique they're using. So one common one we're seeing in the mortgage industry, the mortgage lenders is that they are, the people are spoofing escrow officers. And if you've ever bought a house or been involved with that, you can see the escrow officers are very involved in the transaction. And so they're trying to spoof the escrow officer with a DocuSign e-signature and that's the most popular tool out there for these mortgage lenders. So they say, click on this link or here's the secure document, you have to click on this, ends up being a PDF and they say for security reasons, we've encrypted it and put a password on it. And so that also bypasses endpoint protection and email gateways and other stuff because it's not only an encrypted or compressed file, it needs a password. And so then they'll put the password either in plain text or they'll put it in an image that the email gateway can't even see that. So they're bypassing a lot of stuff in those cases. So we may wanna build a security awareness program around this or our own phishing campaign around this and maybe using GoFish or FishMe or some other tool and you can test your users to make sure that they're actually doing what you recommend. And then you could demonstrate malicious activity. So when you're trying to get executive buy-in and you're trying to sell something you go to the executives and get them to pay for it, you can show them some of these different techniques or how ransomware works in a isolated environment that's not gonna impact the rest of your users here. And then so traditional sandboxes, you can go out there and I'm not inventing a new sandbox at all by any means. I'm actually taking a lot of pieces from many other security professionals out there and kind of blending it. So there's hybrid analysis, there's malware which has been down for I don't know how long but it's still up there. It was a good one when it was up. Cuckoo, it's a little bit difficult to set up. You could use VMware virtual box, that's generally a recommendation but what we're seeing a lot of is that good malware especially targeted stuff with APTs. They are bypassing a lot of these malware or they're doing some security checks to see are you running a virtual environment?  Then you go run it on an actual bare bone system and it detonates because it's looking at the whether it's the VMware MAC address or the NIT cards or VMware tools. It's doing a lot of different checks to see if you're trying to reverse engineer the malware. Remnicks from Sands and there's a bunch of other traditional ones out there but some of the concerns that I had with these sandboxes when some of my team pitched the different solutions was they're complex to set up and configure. Cuckoo, I spent hours on and couldn't get it to work properly the way I wanted it to. Some of the analysis tools published by nearest communities so virus total, hybrid analysis. If you upload a document there it is available for the community and there's a premium version you can pay for and I think there's an opt out there but other tools that you may use as well as directly going to some of these sites you upload a document it's there for the community to look at and to analyze. And those situations could you imagine a proprietary document that looks fishy and so you upload it and all of a sudden you're leaking that out to the whole world. Also some of these tools if you're publishing a binary of the document now the bad guys and the malware creators know that the signatures and virus total and they need to now more fit and adjust it so it can continue to work. So you're basically telling them I found your stuff I think it's suspicious and I'm posting it out there to get analysis on and now they say got it now I'm gonna rewrite my techniques here. And then there's so I needed something that had dynamic analysis as well as some static analysis because I don't fully trust automated tools. I think AI and machine learning is an awesome field of study. I just don't think it's doing what a lot of people are advertising it has and we still need that human eye to say this is legitimate or it's bad and there's a lot of variables that a machine can't quite do yet. And so I also need advanced malware that had or I was trying to get around some of the anti-reverse engineering techniques. So sometimes these pieces of malware that I'm collecting they look for internet access. So if I have an isolated virtual machine that's disconnected from the network it goes out to the DNS check if it fails it's gonna say I'm not gonna do anything I'm not letting you look at this I know I'm not connected to the internet. Other times they'll look as I mentioned to VMware and Nix, the Mac address they'll look for the tools that you install. There's if there's a number of files that are missing from desktop. So if you just create a virtual machine vanilla, Windows XP or Windows 7 or Windows 10 or whatever you're using and you have no files on the desktop or documents and no favorites, nothing there they're checking those and if it's less than a certain number of threshold the malware will not detonate. It says I know I'm in a virtual machine it's not reasonable for someone to have a machine that has no files on it. If it's an actual user there's gonna be a desktop with a thousand things on it. So they look for that as well. Sometimes they'll also look for tools like Wireshark it'll look in C programs, Wireshark and it'll look for the Wireshark.exe file. So I needed a lot of different techniques that I can kind of bypass this or make sure that the pieces of malware weren't going to detect that I was trying to detect them. So my, our sandbox requirements in this case I want it to be easy to set up and tear down for the rest of my team so I didn't have to have this complex cuckoo setup. I needed to be low cost so I could spin it up quickly and if I want to make changes it wasn't going to cost a lot of money and I could get even internal teams from some of our clients to use. I needed to be isolated obviously I didn't want to go out and detonate malware and have it spread if I didn't know what it did and it need to be accessible from anywhere. A lot of times I'm in San Diego or Los Angeles or Canada and I'm traveling and visiting different clients and if I get a case I have to look at some malware I don't want to have to say sorry I have to wait till I get back to my office in the Los Angeles in 40 days and then I'll take a look at your malware by then it's going to be all over the place. I needed those static dynamic tools the ability to share it with junior members of my team so some of the newer guys that didn't have quite the skill set that I do I wanted to be easy enough for them to launch it quickly analyze malware and they could always send me reports to look at a little bit further but they could detonate the malware or the phishing attempts in this isolated box and then we'd be able to respond quickly so I couldn't have two, three, four hours or 40 days before I was able to get my reports I needed to make my decisions very quickly. So here's some of the tools I'll leave this up for a little bit if anyone wants a picture and I can publish the slides later but here's some of the tools I picked there's a lot out there but this is a collection that I find really good and I'm using a Windows box because I'm assuming that my targets are mostly going to be Windows and I want to have these tools on there so I couldn't use certain things that are Linux or Unix based only. So Wireshark obviously for the full packet capture and this is one that's going to change in the near future it's there but I'm also concerned that it will be caught by some malware and they won't detonate and I am experimenting currently one of the future versions for this talk I want to have this in AWS which it is right now but I want to do inline packet capture and it's a little bit difficult in AWS because I can't go put a wire tap or a packet squirrel between there because it's in Amazon's data center so I'm experimenting with some different ways of using IP tables to funnel data through a Linux box and then go to my Windows and I can still do full packet capture inline without impacting the device that I'm actually working on. I use Process Explorer because Windows Explorer isn't good enough and looking at the process there I get a little more detail of Process Explorer. Process Monitor sometimes I'll pull up it gives me file system monitoring as well as registry monitoring but for registries I really like RedShot and what that will do is it'll take a snapshot of the registry. I launch my malware I take another shot of the registry and it compares and contrasts the two versions and it'll show me registry keys added, deleted, modified. It's a huge list of file but at least you have any change that's been done to the registry. I also really like and this is a recent addition to my sandbox is LogMD and so LogMD they call it the malicious file and discovery tool and really what it does is Windows does not log enough by default and so what it will do is it gives you recommendations based off of CIS best practices, the Windows logging cheat sheet, the US government baselines as well as the Australian Cyber Security Defense Force their best practices and then what your computer set for. So my first launch of that it'll give me just what I should be logging compared to what I am logging because Windows won't even tell me if I failed to log in correctly, right by default. So I have to turn all these logs on the advanced logging, retention, PowerShell logging all the things that turn on so that's my checklist. Once I get that set up then it'll also query different information for me so it'll give me a lot more data on login attempts or PowerShell scripts run and it's great logging tool. I need a disassembler so I can look at some binaries and find out what they're doing. TRID is a file identifier. I normally just use file inside of Linux, the command but since we're running Windows I need something that's going to try and identify the type of file. UPX it's a common packer for malware and so it'll help me unpack it if it's packed with UPX. I can use different memory dump tools I'm experimenting with this at the moment over the next couple of months to figure out better options for this. Strings, one of my favorite tools on there you can get strings for Windows as part of SysInternals. It'll scan a file and tell you any strings that are inside this and I've found at least four zero day vulnerabilities and tax software just using strings. It's one of my favorite tools out there. PE viewer, it looks at executable files and analyzes them for you. There's quite a few of those. Resource Hacker, it'll try and look for DLLs or other libraries that the malware, the file and question might be calling. We've got PDF ID. So in certain cases where you have a PDF file it's going to parse through that because the tool strings doesn't do a great job. There's a lot of things that are compressed and inflated and et cetera. And so that's a better tool than strings if it's a PDF file. File Analyzer, it'll look at the executable information PCU is another executable tool. Dependency Walker, that's a great one that's going to look for DLL calls. And if it's a piece of tool that says it's like a game but yet it's all of a sudden requesting registry changes and other libraries that are unusual that's going to give you an ID and say this DLL shouldn't be being called by a game. It makes no sense. A couple other PE tools at the bottom there. Some additional tools that a lot of people that write these blogs for malware analysis don't call out but I'd say I install Chrome and Firefox. A lot of times I don't want to have just IE. This is one check that a lot of malware will do and say do they have other browsers installed? They're making an assumption that most people aren't just going to have internet explorer and so if you just have internet explorer they might say this isn't a real computer. Silenced Protect and Optics, Carbon Black has one out there but the thing I like about Silenced Protect and Optics is that they're Cyber Force, they're a company in Irvine I think and they will sell you one or five user licenses. So I put this in my sandbox if I don't have 100 endpoints. I just want one license, I throw it up in Amazon on my EC2 instance and I could do my analysis without buying 100 endpoints from Carbon Black and I put it in learning mode so it's not blocking anything, it's just analyzing stuff and it gives me a little more input of something maybe I missed. Adobe Reader, another check that malware will do to see if you are a legitimate box. Microsoft Office, this is the one I forgot in version one of my sandbox and then I opened up someone at an email and I tried to open the office document and I thought oh that makes sense, I need word, right? So you have to have Office Suite on there. Multiple files and folders in the user profiles, I mentioned documents, all kinds of stuff, you could put fake files in there, they just have to have content in your profile and then you can rename your analysis tool. So don't leave it default, you can change the executable name so it doesn't look like that. If you ever seen talks or they say change MemeCats to MemeDogs, it's the same type of concept, you're just modifying the hash and or the name of the file so it doesn't get picked up by some of these pieces of malware. A bunch of online tools for shortcuts, I don't just have all the devices on or all the tools on my system, I will use get file hash to grab the hash of this file in question, I then put it to virus total. In this case, I'm not giving them the binary or the actual file, instead I'm giving them the hash, the fingerprint of the file and seeing if it's been found before. And in this case, I'm not sharing more information with the malware creator or the community than I need to. I'm all for sharing with the community but I don't want more information to get out there that doesn't need to, especially my analysis phase.  The other one at the bottom which I really enjoy is CloudShark, oops. CloudShark and packet total, you could take your PCAPs, upload it and it'll do a quick analysis for you to look for malicious traffic or URLs. And as I mentioned logging, you absolutely have to have logging on there. There's not enough logging done by default inside of Windows, so you've got to turn that on. LogMD as I mentioned or the Windows log checklist, those are great places to go. And you could take a look at that. Even the CI's benchmarks, you could start there, it's just not enough. I would absolutely say LogMD will give you a lot more information to log. So you log, use Windows or LogMD, you run it the first time with a dash one and it'll go ahead and give you your, whether you're compliance and which different standards you're in compliance with or out of compliance with. And so I love this at this part. It'll tell me my computer, if I'm doing successful or failed logings or if I'm not logging at all. And it'll compare me to the different baselines of CIS, the US government's, is it's a compliance baseline or something like that. The Australian cyber defense security or whatever they are, it'll give me all of those. And then the Windows logging cheat sheet, it'll just show me all of them, the different logs of what I'm doing it or not. But you want all these logings turned on if you're looking at malware or suspicious activity. So what I do is I've created and you can absolutely take this home or to your office and you can start doing this. Set up an AWS account. You set up an isolated VPC. You don't want to be doing this in your production network. You then create EC2 instance with at least four gigs of RAM. You're paying by the hour so you could even do more than that. But I found four gigs is pretty adequate and it's legitimate. A lot of you systems still have four gigs or eight gigs of RAM. So it's enough to pass the malware checks.  I set the background to red because when I'm doing remote desktop into the system and it might be a production system or a client system, I want an absolute indication I'm on the right box. And if it's got the default blue background, I might be installing malware on a production server not paying attention. So I put that red background, make it very clear of the system that I'm on. And then I create an image for it so I can use it again in AMI. Deploy the instance. And one thing you do when you use Wireshark or whatever analysis tools, you have to exclude port 3389. Otherwise, Wireshark just tons of stuff from your own login session to it. So this is essentially what it comes down to, what my box looks like with all my tools. I started adding a whole lot more documents on the desktop and the profile since then, but I have other tax software, maybe QuickBooks, whatever you can think of to make it look more legitimate and a bunch of stuff on there that it's not just a vanilla box. So it's the future things that I'm gonna work on for the next iteration and future talks. And you could check out the Richie Mae tech blog and I'll have definitely something on this within the next probably 30 days or so, maybe 60. And I wanna add additional tools to it. I really want inline packet capture so I don't have that running on my system. I don't want the malware or the phishing to look and see that the device is on promiscuous mode. So I wanna remove Wireshark. And then I also wanna have these P-Caps fed into Sericata or Bro with an Elk stack. So I'm doing off system logging because the malware could be corrupting my logs, deleting my logs, messing with those. So I wanna get those logs off and running it through some type of tool that's looking for signatures. It's maybe taking stuff from MITRE or TTPs or whatever they are. And that way I have a second thing that's looking at my logs, my P-Caps to see if there's any malicious activity. So that's all I have for this. Are we on questions or outside? Couple questions? Probably got three minutes for questions if anyone has any. In the back. Yeah, I have a question. A lot of things you can solve the back end phishing is just basically could create a PPC where you send all of your all-year-old instance data over to log and then you can collect a capture that way. I have it. So it would be on a system that's in line so that the traffic's going through there and then passing through or how is it gonna work in AWS? A quick picture. Yeah. So would it be something similar like that? Okay. There's something like that. Do you know how to use someone who tells them it is? Absolutely. I'd love to get it off the EC2 instance. I just feel like it's way too obvious that wire sharks on there and that it's putting the NIC in permissions mode and I just, I feel like that's a red flag to anyone riding malware. Absolutely. Thank you. Any other questions? All right. We'll be around in the hall if you have any questions. Enjoy to work on. Thank you for your time.


Welcome to Talk Story with John Wahing. Do we have a special show for you today? Let me first of all, we're doing this show on a Thursday. This is a Thursday before my usual time slot on Monday, and the reason why we're doing it is today is the last day of the Hawaii State Legislature. Now, most discussions post-legislative session deal with what passed and what didn't, and the regular scorecard approach. And for the viewers out there, you're going to be able to get that. The media will be full of it starting from tomorrow and Monday and so forth, all the scorecards. This is a special show for the political junkies. We have with us today Blake Oshiro, who is a Vice President with Capital Consultants, which means that he spends his entire day, every day during the course of the session, dealing with our legislators. But even more interesting, prior to becoming Vice President of Capital Consultants, Blake also was a member of that legislative in the House of Representatives. You were a majority leader? Correct, for three years. Which is a very powerful position. So, welcome. Thank you very much, Governor. We would love to have you here. Right as we speak, drama is happening in paradise. Yes, it is quite a tumultuous day for the last day of the legislative session, which normally is a lot more just ceremonial than everybody's saying or goodbyes. This time you're going to see some changes on both sides, the Senate and the House, and it's quite major shifts, actually. And it's unusual. Very unusual. I was thinking, doing my entire career, I don't remember when change, well, first of all, it was very rare that change happened, now midterm, right, so the first session of the two-year term for the House, I think that maybe Jimmy Aki's presidency and the change was probably the last time that happened. But it only happened with one House. Yeah, yeah. This is something more interesting. So, first of all, we'll start with the House of Representatives. Yes. Where you were a majority leader. And now the current majority leader, Scott Psyche, is poised to, as I understand it, replace the Speaker of the House, Josuke. Correct. Give me something. So, you know, this is probably a long-standing background on the dynamics between the House members. You know, if you may recall, about five years ago was when Josuke came into power. Right. And he had actually, at that time, replaced Calvin Sey, who was the Speaker for 12 years, but he previously had replaced Joe. Were you with the majority leader for Calvin or for Joe? Correct. For Calvin. For Calvin, for three years. Okay, so you got replaced. Correct, yes, yes. So, you know, Joe was in power, then Calvin came into power, then Joe came back into power, and now it's going to be Scott Psyche. All of those changes, from Joe to Calvin, Calvin back to Joe, are largely attributable to Scott Psyche and Sylvia Luk. Those shifts and the balance of power occurred during those factions. So, now Scott Psyche, who has been part of all of this for all these years, is finally going to be front and center, publicly the Speaker. Correct. So, no longer can you sit behind the screen and manipulate the Emperor games. You actually got to be out front. Yeah, yeah. And the speakership is, you know, it's a difficult position because you have 51 members.  And so, when people talk about this idea of herding cats, that's really what it's like. And it's a bunch of cats, right? It's a big bunch. You know, in the Senate, it's half the number. It's 25. And it's a lot of herding cats. But those tend to think of themselves more like lions, right? They have a different mentality about themselves and about their position because basically there's only 25 of them compared to 51 in the House. Right. So, you know, Dicky Wong, who is, Richard Wong was a very famous Senate president, as you know. And he used to tell me that the president's job and the speakers was being a social worker. He says that people mistake what the qualification for that job is. It's listening to other people's problems all day long. Yeah, it is. It's a lot of management of personalities when you're the speaker and or the majority leader. You're really doing a lot of traffic cop stuff.  But on the day-to-day, hundreds of other bills that are moving through the process, they're really more like a traffic cop. And it really is the committee chairs, yeah, kind of doing their thing. And oftentimes committee chairs get into their own kind of turf battles. Sounds like you enjoyed it. Yeah. It was quite interesting.  Sometimes you're playing a mediator. Sometimes you just started the arbitrator and judge and say, no, this is the way it is. So why does someone want to become speaker? I think there really is an opportunity to change the direction of the chamber and of the state. And you really do have a lot of influence in terms of the high priority items and agenda items. And that's in large part where the leadership... And one of the high priority items this session, or at least one of the big issues this session, was the funding for the Mass Transit Project here on Oahu. Correct. Which takes us to what happened with that particular issue and how the leadership changes fit into all of this. So as I understand it, the House came up with one position, which is normal. And then in the Senate, on the Senate side of this scenario, the Senate as a body, the Senate president, the traffic cop in the Senate and others wanted to actually fund the city. I don't know, they probably had some conditions, but they wanted to give a 10-year extension to the excise tax. But the ways and means chairman, Jill Takuta, apparently didn't agree with her body. Correct. She was resistant to the idea of giving the city a free 10-year pass, was how she called it, giving them what they wanted without accountability. And so you had the tension of the people that supported rail, wanted them to have the full funding, and this is the other people feeling like there needed to be somebody holding the city accountable. And that was the tension you kind of saw coming to a head in the bill. Which takes us to Jill, because the last time there was this dramatic shift with the ways and means chairman in my memory occurred with Ben Kytonam. But it occurred after the second half of the two-year session. Which, by the way, I should let people know. Normally the state legislature counts sessions as a two-year process. Correct, yes. And so what we're dealing with today is actually the ending of just half of this two-year process. But nevertheless, in the past, the Senate waited until Ben served the full two-year process, and then they changed it. They did the same kind of thing. But this is right in the middle of the session. How unprecedented is that? It's fairly unusual. A lot of the reorganization happens after the election when you have a new slew of legislators coming in, and then people count the numbers, and then they kind of see where things lie in terms of the organization. For it to happen at the end of session, you may recall two sessions ago on the, you know, the second to the last day was when Ron Kochi became Senate president, taking over from Donna Kim. And that was unprecedented. That was very, very unusual. And so I just now begin to wonder if we're starting to see this sort of end of session sort of time and opportunity to reorg is now going to be the new norm. Could very well be. You know, it's interesting to me, but that change in the middle of doing things is usually reserved for city councils, or county councils where there aren't really distinct time frames. And so Kochi, as you know, both Kochi and former president Senator Kim were members of the county councils. So they were actually kind of aware of doing things like that. And usually, at least in my 11 years in the legislature, every session kind of ends with a lot of people being unhappy. If you think about it, there's hundreds of bills. At the end, all of them are not going to pass. Somebody's going to end up not happy. A handful of people will end up upset. Sometimes the emotion is higher than others. But I think in this session what you saw was emotions were at a really high, high peak. And that was why you saw these shifts kind of occurring just at the end. You know, whether you're for it or against it, the bill really was the thing that sort of brought to light the fractures between the House and the Senate, and also the fractures within each chamber. And it became such a hot issue that that's where people ended up having to pick sides. And once you picked the side, then the only thing you could do was try to force it on the other guys. Well, one of the things that may happen which would be unfortunate is that it might be a creation of instability. I mean, in the past, every session, people are unhappy with this, or that project didn't get funded and the like. But it's usually, you tolerate it. It's part of the game. But when you get to this point where you actually start taking people out, all those little slights get to be more important than they might have otherwise been. And so, you know, I think we all should have some concern. This may become, unfortunately, maybe more in the future. Maybe it doesn't matter anymore. Yeah, I mean, I'm hoping not. There's a thing to be said about the stability of the institution and the need for there to be some reliability on transition between one session to the next session and carrying things over. You know, sometimes change is good, but sometimes abrupt change may not necessarily be the best medicine for the problem. You know, since this is a show for us political junkies, one of the normal situations is that when you reorganize a body, or you organize a body, generally speaking, the speaker or the president and the ways he means chairman or the finance chairman, that's two critical positions. And they usually walk in lockstep. But it didn't seem like this was happening in this particular case. Is that correct? I mean, was there, why would these two positions actually be either challenged or challenged by the leadership of the institution? Yeah, I think it really goes back to some of the underlying sort of fractures within each body, right? For those of your political junkie watchers, you know, no speaker or president comes into power purely on their own. They come together because different factions form, combining to create the requisite numbers, 26 in the House and 13 in the Senate. And based off of that, that's how you determine your structure. And so oftentimes what you need to do is make sure that your two factions, usually the head, the speaker or the president, and the money chair are kind of in different factions because you're bringing together two different groups in order to rise above. Sometimes that's not always the case. I would say like under Calvin Sey's watch when he had Marcus Oshiro, Marcus was his kind of number one lieutenant and so therefore, you know, he and Calvin were very, very close. But you know, in the Senate, Joe's faction was different than Ron's faction. And we're going to come back to talk about this inside of politics right after this short break. But stay with us, folks. This is the most exciting program. Thank you. Hi, I'm Carol Cox. I'm the new host of Eyes on Hawaii. Make sure you stay in the know on Hawaii. Join us on Tuesdays at 12 noon. We will see you then. Aloha. At DiveHeart, we believe freedom is all of these and more regardless of your ability. DiveHeart wants to help you escape the bonds of this world and defy gravity. Since 2001, DiveHeart has helped children, adults and veterans of all abilities go where they have never gone before. DiveHeart has helped them transition to their new normal. Search diveheart.org and share our mission with others. And in the process, help people of all abilities imagine the possibilities in their lives. Dive live talk shows from noon to 5 p.m. every weekday and then streams our earlier shows all night long. Great content for Hawaii from Think Tech. Welcome back to Talk Story with John Waihe and my guests. Representative, Vice President, Blake Oshiro. Former Majority Leader. By the way, if you've got a question, our number here is<PHONE_NUMBER>. Okay, so all of this is happening. All of these factions are floating around. Exciting stuff. Where's Joe Suki and Marcus Oshiro in the house? That's the old faction. That's the ruling faction of yesteryear, right? Yeah, Calvin Sey. Calvin Sey, Calvin Sey. Calvin and Marcus, they still have their little group. Their little group, unfortunately, the numbers have dwindled down a little bit. And so they're largely left a little bit on the sidelines. So they weren't part of any of this? No, no. I think there was an attempt in the last minute to see if they could combine with somebody. But seeing as how Scott Psyche had the numbers, I think the numbers were the numbers. It probably went the way that water should flow, which is downhill. But it would have been so historically interesting if Calvin made a return, right? Wouldn't that be kind of like, whoa, what happened here? Yes. Because he replaces Suki, Suki comes back with things. It would have been like, it's not to be. But yeah, they're still there. They're still doing their thing. But they just weren't able to really be a big significant factor in this view. Okay, so now what happens? I mean, if we have new leadership, is there any kind of sense that you might have the change in direction that might occur? On the city level, city council level, when Ernie Martin was chairman of the council, there was a lot of friction with the mayor's office, or at least appearance-wise. Now with Ron Minore being chairman of the city council, there seems to be a deliberate attempt to work with the administration. Yes. Will the relationships change as a result of this reorganization? Will it mean they'll be closer to the governor, farther apart from the executive branch, or no change at all? I don't know if I foresee much change happening, actually. You know, Rep Psyche and Sylvia Luke, they have been cohorts for a long time. Yeah, we get back to the idea of the speaker and the ways in which they are being close. Correct. I doubt there will be any time where you see publicly them diverging on anything. In the Senate, now that it appears to be Senator De La Cruz taking over, he is also with Ron Cochise's group, and so I would also expect that you would see those two sort of walking hand in hand. So we get back to a more traditional model of organization. Correct. And so I think that there will be, at least on appearance's sake, from the outside. It'll look like the two chambers, the two power positions, are kind of walking together. Whether those two positions will now be able to bridge between them and the House in the Senate, that has to be seen. Vis-a-vis the administration. Correct. Well, you know, what's interesting to me was that the governor seemed so hands-off. And frankly, in my own experience, I don't know if I could have stayed away from this, but I am a junkie. I mean, this show is a personal indulgence. Okay, it's a personal indulgence. It's one for me. But I don't know if I could have stayed out of it, but he seemed to have stayed out of the fray. And I wonder whether, as a result of these changes, he'd get more involved in the future or less involved. You know, this is just my speculation based off of his behavior in the past three years. I would say it's not going to change much. You know, he, good or bad, some people interpret it as a bad thing. Some people interpret it as a good thing. He just has respect for the legislative process. And so he rarely, rarely intervenes in that process. You rarely see him coming down with a directive or any sort of indication of what direction he wants to see an issue take. So he kind of hands over his budget and then he identifies his priorities and sort of whatever happens happens.  He lets us run in our lane and do whatever we need to do. Sometimes they end up crossing hairs a little and that confuses the legislature. But the governor has a very almost sort of deliberative sort of respect for that body and its process to let it do whatever it's going to do. So on one side, the good way of looking at it is he respects the process. The criticism is that he's not really providing clear leadership. So it depends on the issue. Well, you know, what's interesting is that all of this sort of saw the rise of certain people on the executive branch. It seems like that I don't know whether this means that the governor intends to take a more active role in the future, but he just brought on, I guess, Danny Shee. Danny Shee, who has been around actually since he and I, when the young Democrats together. So he's passed Medicaid age, I think. Not one of the young guys anywhere, but he's brought in. If Dan's talent is actually pulling stuff together, prioritizing and interfering, if you will. You know, it's going to be interesting to see how that all fits. It will. I think there is some new faces up there on the fifth floor, and we'll see how it all kind of shakes out. I think now that you're going to have Psyche there, you'll have De La Cruz controlling the money on the Senate side. It'll be a new dynamic. De La Cruz controlling the money. I mean, forgive me, Senator, but De La Cruz forgiving the money is like putting the fox in the henhouse. Well, he is always looking for the economic development opportunity. The guy is extremely creative. He comes up with ideas about how to spur economic development that to me are amazing. And worthy of conversation. He is not a bean counter. That's my point. He's definitely not a bean counter. He is an issues person. He tries to, as you say, support economic development. Yeah, and he likes to see projects and handle projects and see them bloom. He's not one to just kind of say... Well, he's usually the guy that the ways and means chairman is restraining. Yes. So this is going to be interesting. It is. It will be interesting dynamic. Yeah. And I actually think it might be positive. Well, anyway, the other interesting individual that's come out risen up is Senator Cahilly. You know, his father died. And I think it was Governor Abercrombie that put him, you know, appointed him in office. And then he won his own term. But he seemed to have been for a really sophomore player in the state Senate. Kind of a busy, active, you know. Yes. One of those, what's the name of the bunny? Yeah. With the battery. Yeah. He had a much more front-facing role this session. You know, he was very proactive and out front on a lot of issues. And so he's one to definitely watch and see how it's going to come along. I think he's going to be seeing how the heel fits into all of this. And as a result, whether that means that we'll see a continuation. Or maybe even a resurgence of neighbor island power in all of this. Because it seems like a lot of money went to the big island. Yeah. Yeah. Yeah. I mean, it's interesting. You'll have Ron Kochi continuing from, you know, from Kauai. And now you're going to have, on the House side, it's going to be Psyche, Urban Honolulu and Luke, who is New Uwano. So it'll be an interesting dynamic once again to see this sort of. Real, real fast because we are running out of time. What happened to death with dignity? Just real quick. So the bill made it out of the Senate in a pretty strong vote of only three nos and 22 eyes. Unfortunately, when it got to the House, there was just a lot of reluctance. I wouldn't say there was strong opposition. It wasn't where people were jumping up and down and saying they didn't want the bill. I think there was just a lot of hesitation as to whether this is the right time. Yes, no. Will there be a special session? I think there will be. And will the death with dignity bill have a chance to come up in the special session? No. In a special session, they have to start off with a new bill, three readings on both sides. So I don't see them reviving an old bill and putting it back in the hopper. Ladies and gentlemen, thank you for joining us. And especially thank you to Representative, Vice President, Lake Oshiro, for this insider's view of what's happening in our Hawaii State Legislature.


with 624. On today's schedule we had 624 and 378. We also, if we can get to them and we have the language, we'll try to get to 828, which is the campaign finance law and the OPR bill. We have, if we're at that point with those, but we'll start with 624. And then, if we really have time, we will continue our discussion of nutrient management plans that is over. Are you doing that case? I don't think. He said, I don't know if he has time right now to do it. I said, if you have time, I don't know. And Chris, you know that Chris over there. You can just tell Senator Ash, just do that to him. Just do that. That looks better than what he asked us. Verify, verify that he owes me $50. And remind? No, we're not. Okay. 624, do you want to show this? It's so subtle. I missed it. Where's it by this subtle as having a pool? Right. Chris Winders almost fell out of his chair. And his little poodle too. Yes, you're right. You all have draft 2.1 amendment of H624. Yes, yes. Awesome. Excuse me for the record, Betsy and Raspel, the state of council. This draft amendment would do two things. There are two separate instances of amendment to H624, which is currently in regard to the protection of information in the statewide voter checklist. The first instance of amendment would make that technical amendment that we discussed, which would amend the Public Records Act exemption for what is protected information regarding statewide voter checklist info. And so you see, if you look at the bill as passed the house, the current law says that the following voter information, the month and day of birth. Is that in the bottom of page 3? Top of page 4 is actually where you find it, but it's here right now in the chair. It starts at the bottom of page 3. You're right. In the Public Records Act in section 2, 1BSA 317 sub-C31, this voter info is confidential. Voters month and day of birth, driver's license or non-driver ID number, telephone number you would add, e-mail address. Bottom of page 3 going on top of page 4. In the bill as passed the house. Yes. It isn't a strike law. So my bottom of page 3 is pressed out. No, you're using Michelangelo. Yeah, I was going to say the unanticipational version. Oh yeah, I know you're fine right there. Thank you. So it's in the last four of the social, and then the current law goes on to say, contained in an application to the statewide voter checklist, or in the actual statewide voter checklist. Well, we don't have applications to the statewide voter checklist. What we technically have, where voters put all this info, is in a voter registration application. Right. So it's just correcting that. To say that that voter information that a person provides when they register to vote in their voter registration application is what is a confidential except for public inspection and copying. And then the public records act. So this is a technical cleanup. So it will say, social security number contained in a voter registration application for the statewide voter checklist. You got it. That takes care of that. The second thing that this amendment would do, have you discussed the vote tabulator issue? So the second thing this would do is strike out the effective date, section three, and replace it with a new section three and a new section four for the effective date. The new section three, however, would amend the provision of law regarding political subdivisions used to vote tabulators. So the current law provides, and we're looking back now at the draft 2.1 amendment, in section new section three, that's proposed. The current law provides that a BCA can vote to require the political subdivision for which it's selected to use vote tabulators in its elections. At the top of page two of draft 2.1 amendment, you'll see, however, in current law subsection B, that some towns are required to use vote tabulators. A town with a thousand or more registered voters, as of December 31 in an even numbered year, shall use vote tabulators for the registering and counting of votes in subsequent general elections. So they're required, towns of that certain size, larger towns, if you will, are required to use vote tabulators in general elections. And then subsection C provides in current law how the use of vote tabulators is paid for. But the new subsection D is what would be added here at the bottom of page two to say, notwithstanding a town's use of vote tabulators under this section, or any other provision of law, just in case, for example, a charter requires the use of vote tabulators. The secretary of state may suspend the use of vote tabulators and require the hand count of votes in an election if the secretary determines. There are reasonable grounds of belief that the vote tabulators to be used in that election may have been rendered inoperable. And if so, upon such a determination, the secretary shall alert the clerks of the effective municipalities that his or her decision as soon as practicable. That would be the new language there, the new effective date, again on passage. I'm going to just send that amendment to the bill title so that it would be about the protection of info on the statewide voter checklist as it currently stands and the use of vote tabulators. Is it important to say any time period within which this should happen? Like if it happens four months, well, we wouldn't know four months before because they don't check them then. They only check them two weeks, ten days, and then the morning after. Just before. So this really is an emergency procedure. Plus you might have, yeah, it could be August for the primary. Right. Yeah. Any comments? Any questions for Betsy first about these two amendments? I'm going to address this one. Any comments by anybody? Please support them. Yeah. Josh. I'm reading it for the first time, but it appeared to have an objection. Josh in the morning. And the afternoon. Lucky me. Likewise. I just want to say thanks to Betsy and the secretary's office for helping through this. So does anybody have any other comments on the bill or the amendment? Maybe if I could just say that there is some concern that language would feed into the errors that live out there, that we're not doing this job well. And I don't think that's not my intent at all. And we tried to craft the language to work and be, you know, not setting off those fireworks. So just for people's knowledge, we should be sensitive to that. I've been to a public forum where people were quite animated that we were not protecting our process. And I think we are protecting our process, but just those skate patches. And I think it's, I mean, we can, for those of us who go to public meetings or who write articles or anything like that. We had a whole session a while ago on what we were, what was being done to protect our, the integrity of our voting. So I think it might be nice at some point for us to maybe even do an article about that. It would be great. I'll edit this actually for you coming from you to go around the state to compliment the work the secretary of state has done at HG. Oh, I do articles, but I never send them anywhere except at my place. Nobody, in your capacity as chair of Senate GovOps, it actually, to instill further confidence in our voting system. I can think about that. It would have to be a little more formal than I make my articles. Actually, I think they'd appreciate the information. My articles tend to be the way I talk. Don't you think that would be helpful? I swear. I tried to avoid swearing. Even I don't swear in line. I want to thank Senator Pearson for the addition. I think it's a good one. I appreciate that you listen to our concerns about the crowd that gets really worked up about voting machines and things like that. And just point out we are having legitimate concerns sometimes, but they don't quite bind to the fact that we're addressing those concerns. There is a cyber security forum tomorrow at 4-6 at the Pavilion Auditorium. For anyone who's interested, I think Orca is going to be there to record it. So we'll have that to send out to people so they can really be informed about what it is we're doing to protect the security for elections. Good. Anything you can to recap? And I did see this committee meeting on this issue on my local community television last weekend. I said, ooh, comb your hair. So, just a question on format here. Wouldn't it be easier to make this a strike off than to have these two amendments that the amendment almost looks longer than that? I think they're almost always, if there's more than one amendment, I think it's usually easier to present. Thank you. I can do that one. You have your next hearing with Becky and I can bring it back down. I should be able to convert it in that time. She's just that good. Is that good? So, Ben, and then we'll, we can vote on it then. Yeah. Sounds good. Okay. All right. Okay. Thank you. And yes, thank you Senator Pierson for bringing that forward. Good work. Yes. Good work. Okay. And she said that she only has one time left to use. No, no, no, no. Stay with me. Yeah, those are double shots. Thank you. I think these tagline machines are great. Yeah, they're great. As long as our vendor is great. As long as our vendor is great. All right. And it gives the constables some other activity. The constables are ever ready by the side of the tabulator. They are. And the justice service. Justice is a base. Hard to work. Our constable, we don't even have constables anymore. We do. We do too. The only one I've ever known in Burlington was Jess Oskie. She was the constable. Really? Jess was? Really? I'd like to see her with a vicious dog.  Yeah, they do dogs all the time. No, no. If your constable is your animal control officer, then they do. Most constables are. They get called out on a lot of animals. You have. She didn't have anything to do with it. She told me. Our constables stood around the town meeting. There used to be a requirement for the constable to be present at the ballot box. What happened? Let's talk. Functions. Functions. Can we move to artificial intelligence? No. Speaking of that. Do you want to go through yours first? Perfect. Unless you want to. No, no. I'm fine. Whatever. As long as you're here and you don't have to be someplace else right away. Yeah, that's fine. All right. Let's do it. So we'll go then to 828. Great. 828. Great. Okay.  We do. Awesome. Awesome. We do it. Thank you, Gail. Oh my gosh. They're already in my car holders. Okay. Thank you. Thank you. Okay. Yeah. So thanks for the feedback. Center Pearson on what happened in here discussing H828, which is in regard to disclosures in campaign finance law. I believe I've incorporated what you decided from your conversation yesterday, namely to get rid of the campaign finance violation curing language and just to make a couple tweaks to the Facebook language. However, I wanted to address one other issue that I added in here for your consideration, and that's on page 2 and potentially amending the definition of mass media activity. Now to tee this up, your conversation has been about the identification requirements in electioneering communications. Electioneering communication, when that term is used, there's a requirement that you identify in the electioneering communication, basically who paid for it. When there's a mass media activity that triggers another disclosure requirement in your campaign finance law. It's another form of disclosure, but it addresses a different issue. When there's a mass media activity totaling $500 or more that's made within 45 days before an election, there has to be a special mass media report that's filed with the Secretary of State and with a copy of that report going to each candidate whose name or likeness is included in the activity without the candidate's knowledge. So there's two different forms of disclosure and they have similar but not the same definitions. The one thing that I noticed is if you look at page 1 and look at our current law definition of electioneering communication, it talks about communications that are referring to candidates and either attacking or opposing them and it goes on to say including these types of communications. It'll say including communications published in a newspaper or periodical or broadcast on radio or television or over the internet is one of them. Just keep that in mind over the internet and then if you turn to the top of page 2 it also includes now mass electronic or digital communications. The House has proposed to substitute mass electronic or digital communications for mass emails and you had not wanted to change that. The issue that is a potential issue that it seems in the mass media activity definition is that as it's defined it means currently under current law a TV commercial on page 2 here. I have a draft that starts on page 3 it appears. The printer was acting up. I was trying to follow you and I couldn't find where they put it so. Sorry. I see it just. I see it. So if we're looking at on page 2 of draft. 3.2. Mass media activity under current law means a TV commercial radio commercial and then it goes on to say mass mailing mass electronic or digital communication and then literature drops newspaper periodical ads for local phone banks. The thing about the mass media activity is that while it uses mass electronic or digital communication and that matches what you would do to the definition of electioneering communication. The issue that seems is that electioneering communication also addresses communications over the Internet. So it just raised in my mind the question of whether there's a difference between communications over the Internet and mass electronic or digital communications. Why include an electioneering communication reference to the Internet and electronic or digital communications that seems to imply that those are considered two different things. So to try to make the two definitions consistent and make sure that you're capturing Internet ads. I'm wondering if it seems like you should add reference to Internet ads and the definition of mass media activity. Sounds reasonable to me. Any director of elections? Okay, so that's just that. I know for it, we'll send director of elections to the director just to add to that. I think what was discussed in the House too, and it speaks to your point, was that expanding from email to electronic communication, they were really just thinking about mass texting. What can that happen? That speaks to that. Those aren't necessarily related to that. That's the way I would go. Alright, thanks for that. Otherwise, it's the same language for adding in that extra local candidate report for those people who spend, the candidates who spend at least 500 bucks or more or roll over on page three addressing your 2972 no changes on that page three. But the only changes on page four regarding the Facebook portion, if you will. The former draft said if it's not possible to meet the ID requirements of this section, I understand you want to say if it's not practicable. So that word was changed. And then online, 13, it used to say that if you click the link, it takes the reader directly to a web page or social media page. That provides all the ID information as required. And I understood that you decided to take out the word directly, just that it would take you to that page and where the info has to be provided. Otherwise, those were the only changes from the previous draft you reviewed. I wasn't here to hear your discussion, but I think you understand the changes about non-natural person to individual. And on page five, it's just that in 2973 on page five, I think that's the only section of the campaign finance law that referred to non-natural persons when we otherwise use individuals and just be consistent to use that individual phrase. I know some pretty unnatural persons. Exactly. And then the effective date section would be on passage. So these new ID requirements and the new definition of mass media activity would take effect on passage. But there's that carve out for the local candidates report, taking effect on the beginning of the next election cycle, which is a little off because for most of our local elections, they're not on our standard to your general election cycle, although justices of peace elections are, because by the Constitution, they happen at the general election. So I don't know if that makes sense from an administrative perspective to have the local candidates report new report requirements take effect beginning to your general election cycle. That's where it is now, though. It seems like it would work to think of any local elections that would be scheduled early January, for example. Senator Clarkson pointed out, I think, about that time, local specialties, the mass majority are the next day in the week. If I could go either way, I could get that good an hour and so on. It seems like this way we don't risk interrupting someone mid whatever, although it's not exactly a big change. I don't carry my way. Josh? Madam Chair, just from the exchange general's perspective, just to give a little lead time so that there's opportunity to do outreach and education, especially for local races, would be beneficial. That's a good point. I agree. I think so, but not having really thought through, you know, but so many times, of course, too. Yeah. Last up there, finance guide, for instance, to our website. Yeah. Sorry. We don't talk to people anyway. I fail to hear you. I'm concurring that it would give us time to update our guide or can't define its guide on our website. That's it. Okay. And you're going to have to update it anyway for these elections if this is on-passage.  I mean, so if you're going to update it, you might as well... Are we on this? Yes. I mean, it strikes me as a modest update to include the municipal crowd if we want it, given that you have to update everything else also. Can I concur? I'm sure. No, it just seems to make sense to do it all on-passage. It's just, I guess, my point. I think your point was not the time to update the website but time to inform local candidates that their requirements have changed. And if I may, without despair from the local candidates, they typically are the most sophisticated on-camping finance laws. They're the ones that aren't thinking about it. But, I mean, we'll certainly work with folks regardless of what they decide. I'm happy enough to leave it with that. And I... Because local also, I believe, affects county, which is state's attorney and just those sheriffs. And so they now would be required to... They're all on your side. Oh, they're currently on... And they're currently required to file this for days. No, they're on your reporting side. They're on our reporting side. This really is just very... I don't know, just applies. Okay. Okay, I'm fine. Okay. So, Will, when you update it for all this electronic communication and the ad, the clicks and the radios, I'm just curious because I sort of... Is that... That will be all available on your website fairly soon once it's all passed? Yes. Okay, I think we're actually going to have looked at... Yeah, and this... There isn't really a change. It's helping just make it more clear. Yeah, I would... Well, I think... Right, but the media bonds, you know, I just... They're already there. All right, no, I'm just curious. One of the massive medias... I've been dependent on the... Okay, that's it. Right. Okay. Okay. Are we... Does anybody have any more comments on H828? H8 to consider it? I move that we pass... H... Draft... Oh, I move that we adopt draft 3.2 of H828. Clarkson? Yes. Pearson? Yes. No. No. White? Yes. Right. Stick it out for those multiple guys. There we go. Yeah. You better stick out for you, then. I'm sure the cards... the thank you cards will come flooding in. Yeah. Okay. Thank you. Thank you. Here, if you'd like to... It's not commercial, so... I don't... No, I'll think of it. I'll see if I can... All right. Can we go to the OPR bill? I move to the Refinery page. Pickup copies. Pick up copies. Oh, oh. We need the... Oh, the thumbs up guy. Yeah. Appreciate it. Yeah. Right. It works out darn hard. Let's go on. Yup. Yup. Hopefully we're going to... Next week, I'm going to be 65, so... Oh, my God. It's going to be here. You won't be able to get any of this. I don't think so. I'm going to get one. You're going to get my shoes. That'd be nice. Oh, I will. No, I wear Birkenstock. Oh, sandals. You're differentiating sandals from shoes. Yeah, shoes and socks.