Hey, Bolo buddies. Thanks for watching. Okay. I have the Facebook Bolo video So in this video what I have done is I have invited people from my Facebook group To join in and share their best July Bolo and I am gonna string all of those Bolo's together for you guys I'm gonna tell you where they got it what they paid for it and what it sold for and you guys Be prepared for some big money Bolo's. I'm telling you this is Going to be awesome If you're not in my Facebook group the links are down below definitely come on over and join be a member and I Hope to do this next month. So stay tuned for that. Thanks for being here Again, these are members of my Bolo buddies Facebook group. All right, we're gonna get started here Let's get started Hey, Bolo buddies. Here is the first big money Bolo these tarot cards sold for a hundred and fifteen dollars And the seller the member of my Facebook group picked these up at a garage sale for a dollar fifty And sold them for full asking price and the buyer paid the shipping So definitely a be on the lookout The next item was picked up at the Goodwill bins paid around fifty cents for it and sold in a couple of days on best offer Looks like it sold for a hundred and twenty five dollars and I'm not really sure it says floppy disk game So it's an old floppy disk game you guys would you have ever guessed? Let me know in the comments what you think about some of these big money Bolo's the next item We have definitely went over and talked about in this group before But he bought this in a bundle of toys off marketplace So he has about three dollars in it and it sold for full asking price of two hundred and ninety nine dollars and 77 cents plus shipping so the my pet monsters are definitely a Bolo The next item was sold by my reseller treasure brandy definitely check out her YouTube channel. She knows so much about Barbies She sold this 60th anniversary Barbie for forty nine dollars and forty nine cents She picked it up in a large toy lot and it cost her about three dollars and sixty cents for the item The box was damaged and open So she said could have priced higher if the box was not damaged the next item is a vintage Adderley's best bone China, so it's like a Cup and saucer set and this came from an auction lot after fees and tax cost was about eight dollars and four cents And took a best offer of ups. I'm sorry sold for seventy five dollars Not sure if it was best offer or not But definitely be on the lookout This next item was picked up at a local thrift store for a dollar each So a total of six dollars was listed for two months and sold for full asking price of 160 dollars and these are goblets it says Huh interesting hand-painted Very very cool. Would you have picked these up? Let me know in the comments what you guys think The next item are these shoes their Brooks men's shoes looks like they are new paid fifteen dollars at a local thrift store and Sold in a couple of weeks for full asking price. So sixty nine dollars and ninety nine cents plus shipping So it looks like their thrift store had new brand new shoes. That's cool The next item is this Blenco vase and it was picked up the Goodwill for 99 cents you guys it took about two weeks to sell First sale of July and a pretty good one selling for sixty five dollars Free shipping promo going on so no one paid the shipping and it looks like that is a Mercari sale So that's really neat The next item is this Mario games He said they're going for great profits. If you can find them at a good deal this sold for sixty dollars And I'm not sure if the buyer paid shipping and I'm not sure where they got it So I apologize for that missing a little info on this one, but definitely a volo item to be on the lookout for The next item is a super cool Care Bear This one came from the Goodwill for five dollars in something since It's a Care Bear you guys. It's a limited edition rare Maverick yellow I love you Care Bear and it sold for two hundred and twelve dollars and fifty cents. That is amazing I don't think I've ever seen that one. I'm definitely going to be looking for it the next item 99 cents from the Goodwill three-fourths full She says I think undercut myself because it sold in a couple of hours So it's one of those where oh did I sell it too cheap because it sold really really fast. This is a perfume I'm guessing it's probably retired or harder to find sold for fifty nine dollars and ninety nine cents plus shipping The next item came from the Goodwill four dollars and ninety nine cents and sold for full asking price in Twenty minutes you guys found out it's worth more, but still great money sold it for a hundred and thirty dollars It is a Starbucks twenty ounce tumbler from 2017 yeah, some of those Starbucks items can go for big money. So definitely look for them The next item was bought at a yard sale for twenty five cents and it sold for a hundred and twenty five dollars It's a Victorian Cremence 14 karat gold watch pin natural pearl and enameled forget-me-nots. So Yeah, is it like a brooch? Hmm interesting All right, the next item that sold came from the Goodwill 99 cents check out this awesome mug. It's Calvin Klein Andy Warhol Sandra Brant mug fiesta wear you guys sold for eighty five dollars plus shipping now That is a cool Bolo I Definitely probably would have picked it up just because it's so different never seen a mug like that the next item Wow This was bought at Savers for seven dollars and ninety nine cents and picked it up because it was signed and heavy Sold in just a couple days for full asking price She said now I really want to look through the metal aisle when I thrift Yes, I can see why this sold for four hundred dollars and the buyer paid the shipping Wow That's a huge Bolo. The next item was bought off of Facebook Marketplace local pickup for twenty dollars took a best offer of $450 and it sold really fast. It is a margarita. They'll mixed drink maker bartender machine Wow, and it looks like they tested it and put a video in the description of their eBay listing if you guys don't know how to do that. I do have a video that shows you how The next item is this Malibu International General Lee RC car Dukes of Hazard You guys Dukes of Hazard is almost always a Bolo. This car sold for seventy seven dollars But for five dollars at a yard sale She said her husband had it on his shelf for about two years He says see what you can get for this and it sold in less than 30 minutes So Might have been a good auction item. The next item are these boots spotted a garage sale for a dollar and sold for asking price of $104.95 Vibram furoshiki, I don't know how to say it you guys, but they're tall boots Hmm never heard of them. I hope I can remember that name because that is a nice Bolo The next item paid 50 cents for at a yard sale and sold within 24 hours for a hundred dollars Shelly Devalls fairy tale theater the complete series So I don't know if that's a DVD or a book hmm Sometimes it's hard to tell with these screenshots, but check it out zoom in and definitely be on the lookout The next item paid five dollars at a garage sale two offers of 320 within 30 minutes of listing sold for five hundred dollars in 12 hours. It's a rare vintage Fisher stereo microphone Interesting this item is a Metallica SNM with Michael Carmen Orchestra cassette tapes you guys $60 is what they sold for bought at a storage unit sale for one dollar so Metallica sealed cassette tapes Definitely cool and The next item picked up at an estate sale for about $15 sold within the week It was listed for 900 plus shipping. He said this is my best July Bolo I posted it on Instagram and YouTube already got positive feedback on it. It sold for $899 plus shipping Yeah, these old ceramic not ceramic Aluminum trees are definitely a Bolo, but this one also had the base Okay, got these at a yard sale thrift store and thrift stores over weeks About $20 and decided to do an auction and was pleasantly surprised They sold for $90 and one cent it looks like they are CDs a lot of 40 CDs Loading things up is always a great option The next item was sold by the thrifty nurse and definitely check out her YouTube channel She said this is my highest profit item for July. I believe Besides that artwork Got it at a thrift store for six dollars and sold it for 120 plus the buyer paid the shipping On Facebook marketplace. This is the thrifty nurse on YouTube. Definitely check her out here are a couple of her most recent videos and It looks like she got or this sold actually on Facebook marketplace, which has a 5% selling fees So more profit. She said it sat on Mercari for a month and sold as soon as she cross-posted it Bolo buddies member Franklin Hill Ventures sold this right here this picture and He got this at an estate sale He paid $30 for it and it sold for a hundred and thirty five dollars in his antique booth So a little bit different way of selling things, but definitely welcome for this type of video. I love it Check him out on YouTube for more info about booths The next Bolo buddies member shared her Bolo. This is Terry from mindful recycle and she sold this Walkman and She got this at In a state sale. She paid two dollars for it and it sold for two hundred and two dollars and fifty cents Sony Walkmans can definitely be a Bolo. The best part is this was for parts and Repair or a repair. I should say it did not even work so the next item is Cost of goods was three dollars at the Goodwill bins and sold for $1,700 had it listed for about four weeks. It's uh, I can't read hold on 1930s Makano number two constructor car green and white version Wow, wow, wow The next item sold by be carried away carry who also has an awesome YouTube channel. Definitely check her out and She picked this up at the Salvation Army for five dollars and ninety nine cents She purchased it during the thrift five and fifteen challenge that I had and There's a video on her channel about this and she sold this for ninety nine dollars It is a Lily Pulitzer dress and it's new with tags So a nice find there the next comes from Amanda a little bluebird. That is the name of her eBay store She also has a YouTube channel, but she sold these paints She paid sixty five dollars for a whole lot of paints and as you can see here There are three solds totaling two hundred and thirty eight dollars She said this was fun and her first experience with paying up So yeah, vintage paints that are discontinued can definitely be a big money. Bolo She sold one for eighty eight one for fifty five and one for ninety five So definitely be on the lookout the next item is this Lego Alderato Fortress Village 99 or I'm sorry vintage 99 percent complete Lego land sold for two hundred and sixty dollars plus shipping Snuck into a local yard sale two days early to buy all the GI Joe's sell the Legos bought for three dollars Wow, what a lucky find, right? The next item paid $2 at a yard sale sold for full asking price of ninety five dollars. It's a Verizon wireless Nokia cell phone Bluetooth speakerphone Huh interesting So definitely be on the lookout for boxed items you guys And I don't know if that's new old stock or pre-owned with the box, but definitely be on the lookout Okay, this next one. I love this so this is I can't remember what it's called They didn't post a screenshot of the eBay listing, but it's I think it's from a full house I think and sold fast for four hundred and twenty nine dollars and ninety nine cents best offer a state sale find Five dollars for an entire box of stuff So cool. I think it was full house The next item comes from Bolo buddies member YouTube channel member Jack's treasures definitely go check him out on YouTube, but check out this amazing Bolo This is The favorite Bolo because it was bought at an antique mall paid five dollars And it literally looks like a piece of wood and it sold for sixty eight dollars plus shipping in less than a day How cool is that it says vintage? Oh, let me see Wood hat block mold The next item are these bluebird made in Japan salt and pepper shakers They are darling bought at a yard sale on Thursday paid 30 for a tote full of vintage salt and pepper shakers So just pennies in listed them and they sold in a few hours for full asking price of sixty four dollars and ninety nine cents So the little salt and pepper things with the faces definitely a Bolo The next item are these dr. Scholl's exercise wood slides, and I have sold these before she bought these at a thrift store 25% off day for five dollars and twenty five cents sold in a week for full price of seventy five dollars and ninety five cents and They were new without tags The next item came from a the next item are these size 13 Nike air foam posit pro purple camo shoes looks like they're a high top They came from a yard sale paid two dollars for those did an auction and they sold for eighty six dollars Not sure who paid shipping on that I can't tell by the screenshot But not a bad Bolo for a two dollar pickup and those are pretty wild purple the next item is this vintage croquet set and These sold for seventy five dollars. She picked them up at Pick them up for three dollars and they sold within 24 hours I know it. I'm pretty sure it's dad planet has sold Several of these before I know this is one item that he Bolo's for I definitely wouldn't because I would not want to ship them But they are definitely a Bolo the next item bought for ten dollars on Facebook marketplace sold within a day for two hundred dollars Drill dozer. It's a Nintendo Game Boy Advance game New factory sealed. Yeah, definitely check out Anything that is new and factory sealed that goes to a gaming system or anything like that They can definitely be big money. The next item comes from chosen goods reseller She has a YouTube channel. Definitely go check her out. Here are some of her videos She picked this vintage dress up at the Goodwill for four dollars and twenty nine cents It is a high-low haddy dress and it sold for 82 dollars and 46 cents Definitely a Bolo item She does have a video where she actually thrifted this item So if you guys want to see her finding that item see her thrifting in action, you can go check that out The next item was bought. He bought two boxes filled with vintage walkie-talkies for five dollars This item was also included in the box. It's a Motorola Keyloader no clue what that is, but it is a Bolo. It sold for $999 and 99 cents. Wow Definitely amazing Bolo's for sure Thank you so much to everyone that participated Thank you to everyone that watched be sure to go over and join both of my Facebook groups They are linked down below One is up to 21k members and the other is up to 33,000 members So that you're definitely growing and I thank you all for the support Look for a post that says your best August video or I may switch it up and do something a different theme But I hope to get that posted here shortly so you guys can start sharing for next month Thanks for watching Be sure to check out the description of the video like comment share and subscribe Thanks for watching


Cynwys i'r Gweithreithio Llywodraethol yn ddweud, i'w dechrau i Cyfnodus Pwyddoedd Cymru. Byddwn i'n edrych i'w ddim yn gweithio'r gwybodaeth o'r gyfnodd yn ysgrifennu. Gwch chi'n ddim yn gwneud, maen nhw'n cael ei gweithio'r gwelwch, wrth gwrs i'w ddim yn gweithio'r Gwfodd Pwyddoedd Gweithreithio, cwch chi'n gweithio'r gweithio'r gwybod, ac roedden nhw'n gwneud i'w ddigwyddiaeth. Felly, we're going to look specifically at shoulder strength for pressing out of these frog or crow stand positions and looking at building up strength for those handstands specifically. One thing that's going to be really important if you haven't warmed up yet, make sure you check out one of our first videos we did with Sarah on shoulder mobility and getting better range of motion at the shoulders for these ove way positions while it is how to warm up and fire up some of the shoulder stabilises to get yourself ready. We have obviously done those and we are building on top of now those frog and crow stunts that we looked at in the part two, the second video that we did. In that when we went into a headstand we were talking about creating a triangle with your head and your hands and that point that we were creating then is going to be vital when we are going through the range in these pike push ups. ac mae'n cael ei wneud amwag yn ei amser, yw'n rhai ddaeth mewn hyn oedd y sufflu ac mae'r ysgwrdd yn cael ei bwysig yn c��wyr lleol, ac mae'n bwysig yn cyfrifodol y sylfficio'r trefynu chi ddwylicio am gweithreff. Oes yno, mae'n bwysig yn eu sicr o'i ffordd gyda ffordd o'r ysgwrdd. Ond mae'n gweithreff yw'n gweithreff mwy o'u bobl a'r ffordd o'r firedd mwy o mhard y ffordd. Rym ni'n dod o'i bywysig ar hyn o'r ddamogau. I'll try to make it nice. So, if you think about those tripod positions you're getting into, hands the same as the frog's dandall crows, hand is shoulder width apart, gripping with those fingertips, and base of the palm is on the floor. But I'm going to start in a push-up position, and then I'm going to walk my feet forward so that my start is trying to put my bum nice and high in the air, and I'm trying to put that hip as far over my shoulders as possible. ac, roeddwn i'r ddechrau ac ydych chi'n gennym y gychon o'r rhaniaeth a gyda'n byw gyd yn ei ddweithio yn gallu gyd yn eich ddweithio. Yr rhaniaeth eich diwethaf iddyn nhw i gyd yn rhoi'r gyd yn ei ddweithio, i phoblurio i chi'n diemgen, iddyn nhw ei ddweithio mynd i ag llawer peishol, i ddweithio y tro i'r rhaniaeth. mewn ddweud â'r twfnod, a'r ddiolch yn ddweud â'r agnod hyrryd yn ni. Byddwch a'r ddweud slash yn LOUR, ac yn cymryd o'r ddegolion ymlaen o gweld, o'r ddeicelirau'n ymlaen, i bobl yn cael y rhan o'r ddechrau, yn ddweud â'r ddechrau ac oedd yn ddych chi'n gweld gydig fy moddol am ddim yn gwneud i ddechrau sydd yn brosisiwn. Cwytaetho'n oedd gennych hyn. Fe wnaeth a hynny oedd mewn bobl Croswch a bwysigwch o'i hanfoddiant. Ieith fy modd y dda i fod yn ymwysig. Rwy'n rhoi'r ddod, y same o'r ddod i'r mhwysig, oedd wedi bod yn llwy'r 5 sgwmp, 4, 3, 2, 1. Cymru yn gydag, rydyn ni'n cael ei wneud. Ieithi'n rwy'n cael ei wneud i gydag i'r ystyried ar y stryd. Mae'n rwyf yn gweithio gweithio'n gweithio'r ddod yn chi gydag yn bobl yn y plwy yma, i weld y rhan o'r ddod. Sengellwch eich bod yn gallu cael hir maes arall. Byddai'n hynny, nad yn mynd i'n cofnod i'w wella. Wyth yn ni'n opud i dda. Rwy'n meddwl â rhain. Mae'n meddwl i'r brif遊gwyr! Felly rydyn ni wedi bod nhw'n meddwl cael gwybwyng y gweithredu a lŵn sy'n meddwl o'r rydyn nhw. Rydyn ni'n meddwl a ddweud. Mae gennym yn eu rhwng yn gwiraboutig. Rydyn ni'n meddwl i'r brif wneud ag add chegwyr yn gwybwyng. Ac mae'n meddwl i gynnwysran tänau ty� reliable y dondaeth Ac mae'r hyra dyw eu bod gynnw below Felly maen nhw'nchai y tu er instance Un peth neu ar hynny, yn wave diwn Mae y bod yn dweud eich bod galluiaeth ar gyfer bydd y�도 Mae'n rech cuziddio g 자꾸 Mae'n dod atrygiad i siw Efallai fod eu schrydd A o hyd yn certyновon, rydyn ni woulde それf hyn reheille Nawr this is effectively raising the floor up so she doesn't have to go as low. What's really important when you are doing those is Is I did a five second lower it's about creating tension If you just free fall down, your head just hits the floor You're not creating any tension and therefore the muscles are working, you are not going to create any adaptation i. e. you don't going to build any strength It's really important that you've got the control This is a nice way where we could get a lower but also you could get them to a position i'w pethau gwahodd, ac mae o'n iawn gyda'r cwcsig gyda ni i ddim yn iawn, Yn gyroedd â'r lawd yn tirwyr ni'n ysgrifiadau achos. OK. So rydym yn gyweithio'n cyfrifiadau. Roedden nhw'n gyfrifiadau, Ac dwi'n gweithio'n gydweithio. Rydyn ni dipyn yn cyfrifiadau. Fydd gweithio'n cyfrifiadau. Ond e'n ddargarfwych yn hynny. Ie, eu bod yn'r gwahodd yn ddau, felly mae'n fynd i'r ffordd yn cael ei fodhaf. Mae'n tyfnwys bai'r mifio'n cais iawn i'r dweud arall? Yr arddangos arherwydd dal yn dda. Yn â'r ddydd ymddi'r ddaeth, mae'n ddim yn y meddwl oedd chi ar wedi cael fy ysgolion ar y masbyg, ac yn roedden nhw'n gydgrifio'r traingol ar hyn. Rhaid i gyd o'r ychydig a'n oed ar hyn eich ddyn nhw'n gyd i'r hanfford i'r rhanfford. Yn y gallu dweud, dwi'i i gael ni.  Mae'n ffudiau sydd wedi'i gweld i gyd yn gwneud o'r wneud o'r wneud o'r bach o'r wneud o'r wneud. Mae'n diwedd i'ch gweld i'r wneud i ym 10 o 12 o ddweud. I found that really hard. That's me working to my absolute hardest I could. Can you imagine if you put together, you started doing that once a week and you did that literally once a week and after three, four, five, six weeks the type of strength that you'd be getting and how much easier it would make some of those crow stands, crow poses and some of those transitions a lot easier. I'm going to do it once a day, is that the best? Not once, no no, once a week. Once a day you can't do everything, you do something every day, you never rest, you never rest, you never recover, then you're never going to actually, all that happens is you could you could probably like twice, twice a week you don't need to do more on track because it's the same exercise. You can do different things but just hammering the same thing every day. It is a question we get someone before said oh actually I'm going to, I think they're working on maybe like a front lever or something like that, shall I do it every day? I'm like well when is when's your body going to recover? So the other thing I will just show this front arm is if you have got like blocks like these like say there could be books, if you wanted to make it a little bit harder one thing we can do is we can raise the feet up so I'll just show that one first. I could put this up or this could even be like a chair, the higher up on my feet that's going to mean I can place a little bit more load on the shoulders and so I can get into that position and that's going to make that harder because I'm getting more low going through the front because I'm starting to tip my weight forward. The other thing you can do is effectively rather than lifting them up like we do with Sera what I can do is actually lift my hands up so I've got that space to take my head down further because the thing you're limited by with your pike push-ups and handstand push-ups is that you can only go down as far as the floor is so if we raise the hands up I can do so I've got a push-up position I can go here just come this way around so that you've been able to see it as I take that down and now my head is going lower so my shoulders are actually going through a greater range of motion. I'm so pleased to see you using stuff like this because it's one of our biggest um ongoing kind of debates is you know these are not remedial aids when we you know yeah whatever it's about as you said taking the floor further bringing it closer like I needed yeah we have people who are hyper really quite flexible so the thought of getting their nose to the floor is like so we raise their feet up so this yeah yeah no it's really cute we we we talk about some of these things being tools and lockers so if I'm raising my hands up so I can go to a deeper range the greater angle the shoulder angles and levers tool I can make that harder or like with Sera we stacked them up and we went down to a smaller range of motion to make it applicable to her so we can be doing the same exercise together we can be working out together using these two things but we just both use them differently um the other thing if you wanted to get really hot with it is you could put the feet up on a chair and then you could have your hands raised up as well and that's going to add it the both aspects to make it even harder it's going to help me build up loads of strength for that if you can um if you if you are starting to build up strength and it's less of a maximum strength exercise like it was for um Sera more like um if I could do 10 or 12 of those I might be working two three sets of those 10 12 reps and I might only need to give myself 60 to 90 seconds rest for them because I'm building a bit more of capacity strength or sort of strength endurance or hypertrophy um but that's going to help you build up some strength that you're going to be able to use for for your handstands for your inversions and for us lots like all of all of our calisthenics things that we do is require shoulder strength um so it's it's really it's something that um wide me team we definitely do some pike push-up variation once a week into what we do we do up once a week but we definitely don't do it every day so hopefully that gives you some ideas on how it's one exercise but how versatile it can be and you can start to use these tools to be able to make it applicable to your strength levels and how you can carry on progressing and really help I hope that it helps you with whether you're trying to do yoga and get stronger for that or whether you're doing calisthenics you want to get stronger for that really hope that it uh or I hope that it will but I know that if you do those correctly and follow those things it's going to help you progress and it's not just one thing there's loads of little ways that you can make it a little ever you get better you have to make the exercise get a little bit harder so that you can keep progressing keep progressing but small steps at a time um so yes thanks for watching if you haven't subscribed make sure you click up there so you don't miss out on any of the content if you're just getting started we can't mention your beginner we've got free beginners guide which is down there that you can get that from the website for free and then if you didn't see the previous uh video we did with Sarah hop on that's up there by Sarah's head until next week class dismissed


It is my pleasure now, Cézair Pizzi, on Problems. Hello to everyone. Thank you. Can you hear me? Everyone, can you hear me? Okay, great. Okay, let's start immediately. I have to fly a bit on the presentation because it's a little, maybe a bit long, but okay, let's say I do my best to do everything. Okay, that's about me, but let's keep it just a few information about me. I'm a security researcher. I worked on a lot of open source projects. I developed in the past a proof of concept for Arduino code injections, but that's not important. You can have a look to these things in my GitHub. I will leave you the reference at the end of the presentation, but let's start with the presentation of this little research. What I started to think was something about the invisible cloud, as I called him, of the sandboxes. We have a lot of tools out there, which popped out in the last, I don't know, five years. Sandboxes available for more or less everyone from one side and from another side. A lot of vendors that are trying to sell this kind of software to be installed in our environment or maybe another option is to install our own sandbox by using, for example, a well-known tool like Cuckoo, for example, which is a great tool. So we have a lot of these systems around and what I thought is, okay, can we try to use them outside of what is their maybe intended usage? And so it started to try to make some thoughts about this. And so, okay, first of all, the sandboxes are usually isolated. So our environments are not able to go anywhere, but maybe we can try to do something about this. And so what if we can get access to these systems? For example, we can try to get some internal information that maybe are not mean to be disclosure. For example, serial numbers, for example. The first thing I thought was the serial number of the office installation, for example. Or maybe we can try to fingerprint the system to understand if you are in a sandbox. This we can see, we will see later that it's maybe done for some reasons or maybe use them as a bridge to go somewhere else, for example. And maybe other things as well. And so, first thing, I try to do a quick list of sandboxes out there. I know, this is not a complete list, we have tons of them. I just got this because they are more or less the most famous or in any case used, for example, for sure, everyone knows what is it and also the others probably. But there are quite a lot, so I decided not to do this test manually, but to write a script to automate the actions. And so, I'd like to have... Okay, I'd like to build something that allowed me to conduct this research. And that was done not reinventing anything, actually, sorry. But leveraging well-known tools like, for example, MSvenom from the Metasploiter to create the payloads or maybe the 7-zip self-extractor to create what I would like to do is to create a kind of self-extracting executable that will have a callback function, a way to drop files because I would like to bring with me some utilities on the sandbox itself. And maybe a kind of randomization, let's say a simple one, because we all know that the sandboxes are usually doing a basic check about hashes. I would like to avoid this to trigger, in any case, every time I upload a sample, a new analysis. So, I created something to address this issue. And so, that's not rocket science. It's a quick and dirt Python script, nothing really special, but I will release it on my GitHub at the end of the dev console. You can try to use it, okay? You can write your own. It's the same, probably it's not so difficult to do it, but it allowed me to automate this research. So, how it works. In some way, the script itself, it's able to leverage DMS venom capabilities to create a specific payload with a specific callback IP import. It has the possibility to specify a folder where I can put my utilities and also way to script my actions when I try to upload this on the sandbox. Okay, for example, here we can see an example of the drop folder. The drop folder is just a folder where I put all my utilities. For example, here, you can see that I would like to upload on the sandbox theqrl.txt and the product key.txt. Product key.txt is an utility for Neelsoft, which is extracting the Microsoft Office product key, for example, from the system. And I would like to bring this on the sandbox itself. So, at the end, when I run this script, I will have something like that. So, a kind of self-extracting executable with some scrambled name as you can see here, you see some .txt.txt files which are the cool.txt we saw before. Scrambled names with scrambled content as well because I would like, as I said, to avoid the hash detections. And so, that is what it will be created. Together with this, we see also a setup.battle.setup.sh, which has an underscore at the beginning with the actions I would like to automate. Okay, the underscore means, okay, don't touch the file, tag to my script to not touch the file, but just put it into the package without scrambling it because, in some case, I don't want to rename it. And so, let's start with the keys one. So, I would like to try to get a reverse shell out of the sandboxes. So, I run the script with this syntax here. We're very simple. And I uploaded it on all these sandboxes mentioned at the beginning. And this is the result. As you can see here, a lot of them gave me actually a shell. For some of them, it's not actually a surprise. In Iran, for example, I allow you interactive access. So, okay, it's not a big issue. But for some other, maybe it's more surprising. And what I would like to stress is here, the behavior of Palo Alto and Virus Total. Both of them gave me TCP callback, but then the connection went down. Like if there is a kind of IPS or something monitoring the outgoing connection of the system, probably they have something which was recognizing that I tried to open a reverse shell and they cut off the connection. But let's keep in mind this because we'll come back on this later on and we'll see something funny. Okay, now I have a reverse shell on the system, but why this is relevant? Why I should be worried about? Because I can actually extract information from them. Here you can see I run the product key.txt and I got the office installation product keys. I removed them from privacy here, obviously, but they were there. And so why this is important? That's really important from my point of view, from a point of view of a malware researcher, for example. First of all, consider that this is private information that probably someone don't want to disclose. Especially if you are running your own sandbox, this is something that you have to consider because if you are relying on something that is provided by an IT vendor, we don't care. We just use what our firewall vendor is providing as a sandbox but it's their business if they are losing the office keys. If you are running our own, that's very important. But what is, in my opinion, the most important thing here is that this allows to leak information from this and this allows the fingerprinting of the system. This is already happening. A lot of malware is doing this. I came across a sample a couple of weeks ago of the Okai keylogger which was the installer was checking for the user name of the system. User name they will get from, probably, Virustotal or a sandbox like that one. That's really important because that means that if the sample is able to identify it, it can also evade the analysis. It can make the most undetectable sandboxes useless, let's say. Okay, this is a quick demo of what I did. Here I tried to upload a sample on the S&D box. As you can see on your left side, yes, there was a metasploit running. As you can see, I got the reversal here and then I was able to extract the product key. For example, here, obviously, I removed it. Let's go to the case two. I named it cross-send box spawning. What that means? We saw that we have external access from the systems. That means that also we can try to maybe try to run an attack against someone else. If I upload something that is doing, let's say a SQL injection or something like that to a third-party site, I can do it again. This may be very interesting for us if you are using third-party sandboxes but if you are running our own, it's really important because someone could knock on our door and asking us why you did something wrong on that site. This is something we need to keep in mind. Here is a simple setup I did on my script. I just created this script here. As you can see, there is a qrl.txt running. In this case, not a real attack. It's just an upload of a file. But it would be interesting for the third case. Let's keep this in mind. As you can see, the qr.txt here is angle-braked because it will be replaced automatically by the script with the scrambled name of the file when the file is renamed. It will be done automatically by the script. This is the result of the test. As you can see, I would like to stress the Palo Alto and VirusTotter sandboxes are allowing me to do this. That will bring us to the third case. Why this is relevant? We have to consider a couple of things. One is that we can use something to proxy attacks to someone else. This is something that we can take into consideration. Second point, sometimes these sandboxes are really in our infrastructure. Sometimes we don't even have a real perception of that because, for example, our anti-spam vendor may have these sandboxes, and maybe someone can just run an attack against someone else by sending an email to us, for example, because it just executes the payload and so on. The interesting thing is this is an example of a zero effort exploit as described in the science of the wire, on the wire book, which is a great book if you work in security fields, so have a read of it. Let's have a look to the demo as well. Here I'm uploading the demo on the site, and then I'm looking for my hybrid analysis, a well-known sandbox. Then I created a fake site just waiting for an info.php file to be uploaded, and we can see here that, okay, I got this file uploaded on the sandbox itself. This worked for all the sandboxes we saw before, and that is bringing us to the third case. Let's try to do something creative to combine the two things we did before. Okay, we saw that some of the sandboxes looks like preventing us to get access and to leak information, but if we combine the second case, maybe we can do something. I created another little script which has been processed by my Python script, which is just combining the qrl.exe, so the upload of the file with the product key.exe, so I just, as you can see here, redirected the output of the product key.exe in a file and then tried to upload it on my site. Actually, I was able, in this way, to extract information from both Palo Alto and Varus Total. That means that also in this case I was able to get this, let's say, something that is not supposed to be disclosed. So let's have a look here of the, again, a quick demo, in this case on the Palo Alto Wildfire Sandbox. So I uploaded the payload, and then in a while I will see that I will have the file uploaded on my site with all the leaked information I would like to get. So here it is, and so we can get the information out. Okay. Maybe we can also use this system to do some other things, because it's just three cases, very quick. But maybe you can try to do other things, like, for example, test your own sandbox. If you are running your own sandbox in your environment, that's something I encourage you to do, for sure, because maybe someone is not realizing that some kind of information that maybe sent out without big effort. So it's something that you need to check. Maybe try to different fingerprinting techniques, because there's really a wall here. You can get every kind of information out of the sandbox, beginning from the shellbags, the shim cache content, and so on. All this information allows someone to do a very, very precise fingerprinting on the system, maybe understanding also which is the specific sandbox that is running on. So that's something that you have to take into consideration. Also, I added this build database with the result of fingerprinting on the sandbox. I mean, this is not a good idea. I don't know if maybe it can be used by for nefarious ways. And then, okay, you can try some other things, like, I don't know, I thought mining, maybe not because I think the running time is limited to 15 minutes usually, or something like that. So mining is probably not probably a real thing to do, but okay, it's something you can try. So this is the summary of what I did. So the results on the several sandboxes with the specific test I ran. And a sample of collected data. Here I'm focused mainly on the office product key, which were obviously redacted here for privacy, but you can get everything out from the systems. It's just a matter of thinking what you want to get. Are offline sandbox safer? You know, there are, and we saw that there are some vendors not allowing us any kind of external access. So are they safer? Maybe, yes, a little bit. Because in case of an APT, for example, let's think about a determined attacker. In this case, maybe it can't just get access to your technology. So if I have FireEye, which is not allowing maybe external access, but they can get the appliance, I can try to run the fingerprinting on that specific sandbox, and so extract this information anyway, because what these sandboxes are doing are creating very detailed report on what this sample is doing. So maybe just writing a registry key with the content I would like to extract, for example, the product key of office or any other information, I can just get the information out. So they are safer probably, but not completely safe in this point. Remediations. Okay, which other remediation is not easy, because I understand that this is part of the sandbox functionality, so not easy to block these kind of behaviors. But it's something we have to consider, and the vendors have to consider, because it's really maybe dangerous in some cases. For example, an IPS on the outside connection is a solution that probably is already in place for some of the vendors, as we saw at the beginning of the presentation. Also our web application firewall may be masking information going out. It's another solution that could be considered. And for, let's say, for internet information, probably the best solution is randomized as much as possible, but it's not the easy one. Randomization for sure is the one that could allow to avoid these kind of issues, but it's for sure not the easy solution, so it's not the quick one. Probably the quick and dirty solution is running a kind of IPS or something in outgoing connections. Disclosure. I did it, yes, obviously. So the only reply I got was from the guys at the VirusTotal. They were very interested in the thing, so they work and so thumbs up for them, they took it seriously, and they started to think something about this, so very good. All the others, more or less, didn't give me a reply about the disclosure. Okay, these are the references of all the tools I used in the creation of this research, so Metasploit for sure, 7-Zip, DWA site for the creation of the site, and some utilities. And so let's wrap up. Okay, at the end, the sandboxes are useless. No, I don't think so. I think that we can just understand how they work and how much trust we can put in them, because as you can see, it may be easier than what we expect to evade the analysis. So thinking that we are safe because we have a sandbox in our environment checking every file downloaded on a firewall or checking every mail coming in, it's okay, but you have to understand how these things are working, and maybe you can also try to run your own test on that, because sometimes vendors are just selling these things to us, saying, okay, with this, you are 100% safe, the sandbox itself is undetectable. Okay, I trust you, but let's try to run a couple of tests on them, and maybe then ask for a discount for it. Okay, this is my GitHub, so if you want to have a look at the presentation of the script, I will publish everything there, and that's all. So thank you for me. I don't know if you have any question. Okay, thank you very much. Thanks for being here, and thanks a lot. Enjoy your DEF CON.


You've probably heard the phrase running naked, that's not what this video is about, but running naked is the frankly ludicrous concept of leaving your watch at home, not recording your run and simply running for the experience itself for the joy of running. So rather than concentrating on time and pacing and heart rate and all the other metrics that help to make your run a disciplined and controlled process, you listen to the birds, and you watch the sun as it gently kisses the water as it laps up onto the shore. Furthermore, you don't spend hours trawling through data at the end of your run because it simply isn't there. Yes, I know, for many of us that might just be a step too far. I love nature as much as you do. I love the experience of just running, but I don't want to leave my watch at home because part of the enjoyment of running for me is looking at my stats after I finish, and it is logging that data over time. But do you know what? There is some merit in freeing yourself up from that psychological straight jacket of your watch. Let me explain. Recently I ran the Surrey Half Marathon, and it was a race like no other I've experienced before. Just done my warm-up, but I have to say I'm feeling really nervous. It's only a warm-up race for Paris, and I don't know, I just feel really nervous about it. I had my watch on my wrist as usual. It beeped every time a kilometer ticked over as usual, but this time I resisted the urge to look down at my watch every time it beeped to check my splits. I ran the whole race without looking at my watch, and you might legitimately ask, why? What was the point? Well, when you think about it, it's pretty obvious to say that there is a connection between your body and your mind. The two don't function independently. They are inextricably linked, but that is easy to forget sometimes. I'm trying not to look at the watch, so trying to do it by feel. We spend our running lives thinking about pacing. How fast can I run? What is the pace for a four-hour marathon? How many minutes per mile is that? And we train with those goal paces in mind, and if we're really disciplined, we lock into specific paces for threshold running, interval running, long run pace, and marathon pace. And then we check our heart rate zones when we're in those paces to make sure we're in the right zone. So zones one and two for your easy run, zone three for marathon pace, zone four for threshold running, zones four and five for interval training. If you glance down at your watch and you notice you're going too fast, suddenly your heart rate starts to go up, your legs start filling with lactic acid, and you get tired, or you tell yourself, I'm going too fast, I need to slow down. So we have to slow down to a different pace, which is not the pace that we may be accustomed to. And this is the straight jacket that we're putting ourselves in. By not looking at my watch during the sorry half marathon, I had almost no feedback on how fast or slow I was going. The only visual clue I had was that I knew I was ahead of the one hour 30 pacer. Other than that, I didn't know what my heart rate was. I didn't know what my kilometer splits were. I had no idea how fast I was going. Some people get very accomplished at running to feel. They can lock into exactly what a seven minute mile is. But this wasn't about that. This experiment wasn't about trying to run at exactly four minutes per kilometer. In fact, it was about freeing myself from that constraint altogether. The idea was to start fast and then settle in. Just run and enjoy the feeling of running fast. And deep down, I think I knew I was running fast. When I say fast, I mean faster than the controlled or constrained watch-tied runner that I would normally be. But because I didn't have any visual confirmation of my speed, I just kept going and didn't worry about it. By the way, just a quick note, if you are enjoying the video, if you're finding it useful, interesting, entertaining, then do please click that like button. And if you're not subscribed to the channel, why not consider doing that as well and hit that notifications bell. If you hate the video, click the dislike button. Thankfully, because I was wearing my watch and not running completely naked, I did have all the stats and all the data to pour over after the event. And looking back, it is clear that I didn't run an evenly paced run at all, partly due to the undulating course, but also some tentativeness on my part to fully go headlong into the experiment. There are clearly some sections where I slow down and some sections where I speed up. There are some sections where you can see I put the brakes on and some sections where I completely let rip with my speed. But interestingly, my effort level looks to be very even across the whole race. In terms of heart rate, it's very consistent. It just gradually rises slowly during the race and then a little bit more aggressively towards the end in the last two kilometers when I could smell that finish line. I ran unburdened by pace and finished in one hour, 24 minutes and 10 seconds. And that is faster than I thought I was going. When we got to five kilometers in the race, there was a 180 degree turn. And as I came back down, I saw the one minute 30 pace are coming back up and I couldn't resist doing some mental maths in my head. And I worked out I thought I was going to finish in around about one hour, 27. In reality, I was three minutes faster than that. A few weeks before, I'd run the Chichester 10K in 39 minutes and 55 seconds. My fastest 10K in seven years. But if you look at the Surrey Half Marathon, the final 10K of that race took me just 39 minutes and 36 seconds. Not only faster than Chichester, but faster than my official 10K PB of 39 minutes and 43 seconds. Now, I'm not saying that I couldn't have done this if I had looked at my watch. I am all for controlled, disciplined and efficient racing. But that does tend to lead to a more conservative approach. Vicious right wing populist. Don't be a hero.   But Surrey Half Marathon was completely off script and I absolutely loved it. Yes, the pacing might have been a little bit all over the place, but heart rate and effort level were spot on. I just relaxed as much as possible and enjoyed the feeling of running fast. I thoroughly enjoyed my Surrey Half Marathon experience and the experiment of running whilst not looking at my watch. I'm not quite zen enough to run completely naked, but by managing to not just lift my arm up and look at the splits when my watch beat, I was able to completely free myself of the shackles that we put on ourselves in terms of sticking to a pacing strategy and telling ourselves that we have to stick to x number of minutes per kilometer or the world will come crashing down around us. So I'm not asking you to throw your Garmin watch away. I know you won't and I'm not going to either. But if you feel you can, why not try doing a hard effort without looking at your watch? Maybe a 5k, a parkrun or a race if you can and see what you can achieve? You never know. By freeing yourself up from that thing on your wrist, you might do something that you didn't think you were capable of doing. If you'd like to watch the Chichester 10k that I did, then click that link right there. And if you haven't subscribed to the channel, I'd really appreciate it if you could do that now and click the bell notification icon so you know every time we upload a new video. Thank you very much for watching. We'll see you on the start line next time.


What's going on, bro? What's going on YouTube?  Hashtag DFAFD. First ever event at the DMV. We're going into one of the main events of the day.  Let's get straight into this next battle. MC on my right side, never appeared in Dory Flop before. Let me know who you are, man. Let's go. Merrick City, Southside Jamaica Queens, Westside Merrick, Battle City TV, Recipes, Maserati Fox, Tom Madden, Shot of Boom, Snickers Dead, man. Let's go, man. Let's go! MC on my left. You've seen him in Dory Flop before. If you haven't seen his class, we lose sight of him. Check it in one of the best battles this year so far. Got my man Troy Brown. Let me explain this as well. Troy Brown, Baltimore, DMV all day.  Let's go, let's go, let's go! RIP to my guy, P.H. RIP to my guy, Coach. You know what I'm saying? Yeah, it's been a tough month, but we working. Let's go. Changes off camera, it's going to be rounder than what I'm wearing. You ready? Yeah! You hold no weight, but you gon' gain this LB when you see the pounds. See this gun? I nicknamed Tyler Perry, because it's about that time that it meet the Browns. I kill these soldiers when they march through Troy. Y'all gon' think the Greeks around.  You with Khalifa now, leaving storks on sci-fi channel. That means out of this world, this Eureka now, I said, I leave a thought on sci-fi channel. That means out of this world, this Eureka now, I played a sport with zero tolerance. So you better lock a room with a gun. You give him an arenas now. This ain't Doug funny.    She known to play with the sacks. Still she'll get at least a round. You ever been to 42nd Street?  He will die here.  There ain't no 69 here. You gon' get this Tommy, the clown dancin'. He really thought that he would rise here, but y'all know Tommy the clown dancin'. Y'all never seen that movie, Rise? Yeah, go ahead.  That's a D12 move, goin' against the God. Well, I say 10 shots from this block and you will see hell too. I'm Pete Rock, cause I'll produce these beats to Troy. Y'all gon' see Shells move, so when they reminisce over you, I'm taking shots in that CL smooth. When I declare war on this card, when I declare war on this card, I came to get wild on the deuce. This ain't that battle rapper from Chicago. But translation, I got nothing in common with you. Did you ride by your two live crew? Y'all gon' think I'll partners with Luke. See, I'm just tryin' to show y'all how to get the brown, but I ain't mixin' orange with blue.  Well, I can't even let you know my team sugar-free. Like, they roll with DJ quick, so it's nothin' to get my content when I roll with the Moss Burke like DJ quick. Cause you ain't never been to jail.  Mellon, nigga.  One in there. I said, you chose to go first, I promised I wouldn't rebuttal.  I'm gonna not rebuttal and rebuttal at the same time. Sometimes I can't resist. You had a Simpsons line. Your girl blows sacks, or my girl blows sacks, your girl blows sacks, we smoke, we eat the color of the Phoenix Sun's Jersey.  I said, see, I didn't. I said I would not. You know what's worse than having no name in the street is being the most underrated MC. I'm not even here battling you. I'm battling everybody's expectation of me, I said. But when I met this cat, you know I ain't gotta stare at him, size him up, you know the type. Battle rap celebrity, walking with his chest up to here, like, hi, I'm Merrick City. I'm from Queens. Run down his resume hoping they got me scared. I said, I'm in a quiet room battle. Out he boom, I'm like, dude, I don't care. He said I'm cut from a different cloth. I said, I am too. Just follow suit. Don't get out of pocket square. I said, don't get out of pocket square. He said, I'm top tier. I said, top tier.  I'm telling like I told Grimes, yo, you ain't top tier or bottom tier. Nigga, you're volunteer. Your body's here.  He said, you don't know who you talking to. I said, okay, you got me there. You're somebody we really won't miss. So I gotta put my city on my back by putting city on his. Where's Venom at? Shout to Venom. I said, come from Queens.  You barely survived the Venom shot. Now we think he Eddie Brock. I set up shop in Queens. Wall Street. I set up shop in Queens. Wall Street, we invest in stocks and gotta let it, and gotta let it pop. My main squeeze, onion, like pepper pots. I said, weapon stock. He think he's safe, but he probably ain't. Okay, bust through the wall like the Joker robbing a bank. I said, I said, I'll ride to his wake in New York. The minute he rest in peace, look in his casket. So much for the city that never sleeps. If I get beat.  I'm like, so what?  Translation. I said, if I can't hold him back until you're getting choked up or held us. We probably leave with his tail tucked shotgun on the driver's side like a mail truck. You should watch me closely. It ain't Friday, but you really don't know me.  I go creep to his neighborhood carrying explosives.   I'm known for rebuttals.  Gun bars. I'll get the clip. Prepare to gun to a bunch of weird things like. I notice my peer here doesn't appear to have any piercings, but I'll put a hole in his head that gains into way more than make his ear ring.  I just did it to show I'm better than you and if you couldn't spit an arm dis, you'd be totally disarmed. And I want to say one thing before I change pacing before I walked in the building tonight I had no idea how much you looked exactly like Wayne Brady.  This is seen over small soldiers because I'm gonna let these toys get you. See you must got a little trick trick up your sleeve, but ain't no goons from Detroit with you.  See I tackle all my opponents for the gold, but this ain't a rugby club, think wacky racists. I gotta ask you, why you laughing dog? Ain't that what monthly does?  He must think he the nutty professor. Still he won't transition out of love.  Teenage, Newton, Ninja Turtles too. Nigga, I stay with the ooze. One minute you blood, the next minute you crib. How you making those moves? I will leave your body red man through the muddy waters. Now that's how you play in the blues. I said, that's dope. I said, don't prescription. But in store I will leave you drunk. That's Genevieve.  That's Hennessy. What I'm saying is, I'm ready to rock him now. So check my melodies. Everything solid? Show your right. So when I let this go, it ain't the 70s. Are we down all situations? Leave them hot. That's Indore, right?  It ain't the limo fight. But you say you're going to rock for your family? You're going to die for your kinfolk, right? So I knock out his kin in the first round like Kimbo Slice. Shamrock. Shamrock. I got that.  That means a lot of blood seen in the car. But my crib niggas said, they're going to leave you like the American flag. That means on the blue or you see in the stars. All you got is just a misdemeanor.  That's Missy at Large. One shot. Let's go. I said, all you got is a misdemeanor.  That's Missy at Large. One shot. Believe your body near a safari. Like the old Nicki Minaj. Merrick nigga.  I'm international. I'm probably in Brazil with the squad. Bring some kids back to shoot them if y'all feel like City of God. Keep going. I'm a doing big. Christopher Wallace, I said. He used to scribble rhymes in the notebook. They sent me to the principal's office. You said something about monthly. You've never been this hot. But I like that monthly line.  That was hard. Thank you. Yo.  I'm not surprised you said it against me.  I wish y'all wouldn't consider sex in the city. Yo. But the one thing about your broad, she got some excellent titties. She got the kind to keep. I said, but she's not the kind to keep.  I said, she a thought queen. She let everybody ski even at work. She run trains like 3-4 times a week sneaking dudes in and out the office week. That's more times than the grinding beat. She like missionary.   That breast erection. Made her come twice. She chubby.  I make an exception. I give it back to her like Michael Phelps. I figure it might as well. What I'm just trying to figure out is from scale from 1 to 10, I tend to like a 12.  I said, stop. I can tell, there's no lie detectors when you step in the booth, because you be saying that fly is hell and them lies wouldn't be that wavy if you was telling the truth. See, Merrick, you ought to say how the burrata will shoot. You always trying to raise the caliber. What you need to focus on is how to raise the caliber. Battle rap is not rocket science. We running out of space for challenges.   I'll tell your partner, Booker, I'm going to cut his hand. Now we Jamie Lannister. Yo. The thing about the UK and the US, we don't get along because of the language barrier. I mean, there isn't one, but there might as well be. British accent, you sound non-threatening. True, but then my people, if you got a problem, tell me. You think he's soft because he got that accent that'll get you sprayed. Smell me. Look back to this language barrier. See, there's a reason why UK fans hate America. It's because they think we dumb. You don't help us out. All you rap about is weed and guns.  It kind of don't matter whether you Team 50 or Team Ja, either one, you really kind of team prodigy now. Everybody from Queens is done. New York making break records since New York was making break records. I pay homage to your stink. See, I think of the times when you swaved sabers. But you don't represent the name. I got reverence for your stink. I think of the times that a pH has swaved sabers, but you don't represent the name. You scheme when you rhyme, it ain't clever. I mean, I can tell a nigga thanks for bringing this genre, but you think you special when you ain't. Y'all went from Cheen on my Donut of Pino Collada. I can't remember a time where a DMV faced any peaks from and why it's better to this day. So right now, I'm even being a predator today. Thanks. I think I'm Islamic. I face the Mecca when I want to pray.   Now it's time to even the score. Jerry Lawler with J.R. Ross. Cause even when you commentating everything I'm seeing is raw, you must got your burpulosis. Cause I'ma get TB shot. I'm hope you're seeing it all. It was just your turn to rap. Now it's my turn to snap next like Steven Seagal. This ain't solitaire. By yourself. You gonna set the card? You must be lying, King. I will get this brother killed. That's how I left the scar. I said, I will leave this brother killed. That's how I left the scar.  You see how they left Le Mans?   Well, watch that bird switch up like Iago when he left Jafar. I said, When I pull out this pistol I'll make you stutter. And that's where it on Joe. You never had a cop rate a crib for Jack's son. And that's where it on Bo. That's in D.C. That was still diamonds from every girl y'all know. That's why I played with them bullets. So I can steal the pearl like Earl Monroe.  Lean pockets. I mean... A leader's dude wrapped in a box. Lean pockets. This ain't Lord of the Rings. But still, my nigga, you must be Team Hobbit. I said this ain't Lord of the Rings. But my nigga, you must be Team Hobbit. No Pokemon episode. But if this one cat talkin' and watch my team rockin' he must think he a hoodlum. But you gonna take that role we call Elle's worth. That's Bunk B. How it feels to be next to a web star. Young B in a pine box. I'll put you in a... I'll put you underground king. Bunk B.  No UPS. But I'm about to put Brown in the boxes. This gonna be an easy last verse. Like Eric Wright in Straight Outta Compton, cause we all know Eric Wright had the last verse in Straight Outta Compton. So CD body covered on a Tuesday like when the album is dropping. Out from South Side Jamaica where I fought with the best of niggas. End of the day, just a West Side American nigga. Get enjoyed. Say you. Let him cook. Let him cook. America. Y'all know how I do. I usually like to rebuttal and reverse words. I always come in with one and two then give them the free verse third you said something about Washington calling. That's funny. Because that don't seem like something you like to do.  I bet your homeboy used to ball for the Washington Grand Wizards. Come and cook all y'all. Yo you the type of dude you know when you pee in whole bathroom is full come up right next to you these is all bars. And you keep finding the convenient excuse like these to conference all stars to overlook the John walk. Every bar I spit is harder than that. Burn this house down show up gasoline two plastic jugs. My murder game is on Carmen election.  See you think you can inherit the throne but I'm cutting off the air. That's the fastest way to get is esophagus separate.  You got more bars than me never. I put his face on the wall like an electronic projector.   I don't even need a gun.    You get gasped where you live.  I'll bug out.  You're looking real shaky baby. Burn the thing. Shit they said mercy. That means thank you in French. So if this battle is part European I'm going to be very polite.  But y'all know how I'm going to end this battle.  You're another buddy in the freezer. Come on. I'm wrapping circles around him. My heart is spitting. That's the crown fountain. You need to make a man of yourself. You need to make a man of yourself. I know Ron me is trying to change the hand that is dope.


Welcome to the journey today. We're gonna talk about how to outsource accounting and save your time You're like most business owners dealing with accounting tasks. Good doesn't exactly spark joy But here's how you can take accounting off your to-do list and find more time to focus on your business through the life changing magic of Outsourcing now this content should not be construed as legal or tax advice always consult an attorney or tax Professional regarding your specific legal or tax situation Now that we got that out of the way when we talk about accounting what we're really talking about is three interlink processes Bookkeeping accounting and tax planning. Let's start with bookkeeping So bookkeeping tracks all your day-to-day transactions money entering and leaving your business It also categorizes those transactions so you can see how you're spending money and how you're making it Mm-hmm in the second process accounting accounting takes information from your bookkeeping crunches the numbers and shows you the big picture financial reports like Income statements and balance sheets show you how much money you're earning and how much you have to work with and last the Tax planning involves looking at your bookkeeping and accounting figures and use that info to save as much as possible on your taxes These three areas often overlap for instance your bookkeeper might prepare financial reports for you And your accountant may help you with your tax planning So you might be thinking why outsource your accounting while accounting eats up time you guys There's no way around it even if your spreadsheets are true works of art DIY accounting will cut into time you could otherwise spend helping your business grow Accounting is high stakes make a mistake on your tax return And you can get fined by the IRS or even trigger an audit Miscalculate your income for the first month and you can find yourself coming up short on cash when it's time to pay ventures Accounting is high stakes and small errors can have big consequences Mm-hmm and good accounting takes expertise. Let's be honest here I mean even if you spend sleepless nights pouring over textbooks You won't have the expertise of a professional bookkeeper accountant or tax planner and that's because they have experience They've worked with many businesses and understand firsthand The mistakes to avoid and when you're out counting is outsourced you have experts fighting on your side Now let's talk about how to outsource your bookkeeping There are two main options for outsourcing your bookkeeping the hiring a local bookkeeper or hiring an online bookkeeping service Now let's talk about hiring a local bookkeeper So the cost is about twenty to fifty dollars per hour with usually a minimum of a hundred to a hundred fifty dollars monthly It's really best for those small to medium-sized business owners Who want to meet their bookkeeper face-to-face or who work with a lot of paper records like receipts? So the second option is to use an online bookkeeping service now that cost can vary I know it ranges from with quick books online twenty five dollars a month to seventy dollars a month And that's best for small to medium-sized business owners who use online banking and credit cards and are Comfortable working online with their bookkeeper. Yeah, great stuff there And now let's kind of switch gears and talk about how to outsource your accounting and let's talk about hiring a local accountant first So these accountants will typically charge about a hundred fifty to four hundred dollars per hour depending on their level of experience and it's really best for businesses dealing with a lot of paper financial records or Business owners who want to meet with their accountant face-to-face Totally and another way to outsource your accounting is by hiring an online accountant Cost well according to Upwork the cost of hiring an online accountant on their platform starts at twenty to thirty five dollars per hour This is best for business owners who are already comfortable with handling financial tasks online And lastly let's talk about outsourcing that tax planner and since I've taken all the local ones Let's talk about hiring a local tax planner So the cost with these according to CPA practice advisor costs an average of two hundred and seventy three dollars to hire a tax planner to itemize your deductions at both the state and Federal level and it's really best for their business owners who want to meet face-to-face with their planner or ones who keep mostly paper records another way to outsource tax planning hiring an online tax planner So I've got the online stuff covered here So cost starting at around thirty dollars per hour on Upwork with total price according to scale This is best for business owners already familiar with managing finances online or businesses in small communities where there are you know Slim pickings for tax planners and lastly outsourcing your tax filing So this is the final step of outsourcing your accounting and is to have your taxes taken care of Thankfully, right? But this is something that your bookkeeper or CPA might offer as an additional service So reach out to them and see if they can help take care of that fees for you Yeah, and again, this content should not be construed as legal or tax advice Always consult an attorney or tax professional regarding your specific legal or tax situation That's a wrap you've learned how to outsource accounting and save your time be sure to comment below and subscribe to our channel And hey, don't forget to ring that bells these episodes first. This is the journey. We'll see you next time


Yes, I can. I can't see you though. No, I am I'm like You want to see me blowing my nose and like the camera I got Ben like double cough syrup and It for two weeks, too. So I know exactly what you're going through. I know it's like I can't I can't shake it I'm literally at CVS every day. It's just really something and I've been taking those emergencies I know I'm sure you have terrible emergencies, which are good. I'm like taking one every hour and they've been helping but That music next I felt like that made me even more mucus. See like I That's why I know It's making that it was making me more miserable. So I just stopped taking that I just stopped taking it I took the thing the doctor gave me but it was only for five days. So I'm off of it So now I'm just like stuck on whatever I can take. So yeah, oh That's too bad. I wish you could give me like a magic pill nurse Jackie I know Okay, all right. So what did you do here? Let me pull up my chart. Okay. Let me start this with you I got a new book for the start of the year. This is my book if you could see it Yes, so what I do and it's like kind of like it used to be like what we used to use for a diary I guess but what I did was I started the 14th and I put earnings and then I put we did on Thursday We did Lulu. Oh, yeah. Yeah. Yeah Yeah, and so that was my first big $1,000 win Lulu going long. I'm not today. You couldn't talk. I know I know I know Well, but so you did it really well today though, too. I did because And I went in at 26 oh you call it 26 79 and for some reason I got in at 26 87 and The stop we got stopped out. Then we went back in. Yeah, and then I got out at 26 40 that was terrific. Yeah, and I did two thousand shares. So I made 1434 So you are off to a really good start this week now last week when I was sick Did you trade or did you take off? We were we were away. We were at a wedding in the Philippines So I was actually an 80 degree weather. Oh Okay, okay. Well, then that was good. That was good that you were away because I was sick last week Yeah, so are you seeing things clear now like I forget when did you do the class again? We did the class in October and I repeated it. That's right. Okay. Yeah, and Yeah, I mean the whole thing with Lulu when you couldn't talk. Yeah, and you thought you wrote the targets in the room And you wrote the stock You know, we haven't done many long. Yeah. Okay, so it I'm I reversed in my head I I took what you told me about shorts and then I reversed it. So yeah, what? Well, I wasn't even aggressive on the call with that I was very very conservative on the Lulu because I did know exactly what time it was gonna set up But I really felt very certain that it was going to work as a long And then it went to just some ridiculous number on the day which I didn't even expect it did and I didn't stay That long I kind of wish I did but you know, I mean I made a thousand dollars. So yeah, exactly Like I said, I have the goal this year of making a hundred thousand dollars So I fear two thousand a week and already I've made thirty five hundred for my first week. So great on the head of the game So now what is your so tell me about this book? Like he bought the book to do what to kind of keep yourself on track or yeah So it's a diary of every day and what I do is I even write like little things that you say about Lulu We're going bullish and and what else and the Netflix one and then I write how many shares I take What you see like what number like your your in entry and the stock and then I put what when I actually get filled Because I find that I don't even though I submit. Yes, you get filled. I I do it a market order I don't I know we should do and Ben and I tried to set it up with the the hot But we kind of want to try it out before I use the hot keys Okay, that's okay. That's something you could try like maybe one afternoon Just take a hundred shares or something like don't do it in the morning when we're doing the quick ones Just practice like in the afternoon when it's slower and just like a small lot and see if the hot keys were to do Yeah, so what is Ben think? What is your husband think of all of this now? He already said well, you know, maybe we should take a little bit of your profits for for you know As part of the budget That's hot is the more shares I can buy, you know, right? That is funny So you're planning to take the money out every month or you're planning to grow the account or what are you planning to do? I would like to grow the account and then I thought at the end of the year What I do is I take 20% and help some of my kids out with their student loans because you know That's another thing that you know not trying to get into politics But Trump could surely help the student loans because like Allison has a $40,000 student loan Wow and interest is 9% She can't even get out the principal. So I'm like if I could help her get at the principal Yeah, so I'm like so that gives me another goal besides just growing our retirement Yeah, just something that I can do for the here and now to help my own kids out So it's really important to me So I find my book helps me keep on track because I can actually see my progress. Yeah, that's a great That's a great thing. So now as far as the You you're still working the one job, right? You quit the one John Yeah, one job and they're trying to find a replacement for me my other job But you know, they don't pay as much as say hospital nurse practitioners get paid Yeah, and all the girls coming out of school want a full-time position. So I'm still working Friday So I won't be in the room tomorrow. That's okay. I work half a day on Tuesday so I can still do Tuesday Yeah, so yeah, so it works for okay now But I'm really looking forward to the five days and when we were away. I have to tell you I I had said that are we bringing the computers and he goes no, we should just relax and every day It's rated I wonder what they did. Oh, that's funny. Well, didn't you get the email that I was sick though? You must have gotten it So the first week was New Year's week and I know room you had opened up the room I think on Wednesday and then when I came back we came back on a Tuesday and Ben said that you were sick Yeah, so then I kind of it was actually good because then I could kind of get my I can kind of rest and like get my jet lag I'm you know out the window. So is this the biggest week you had so far since you started yeah, yeah, yeah, I Told you I was shaking. Yeah So well, it's funny. It's just could you imagine if you could trade tomorrow, too, you probably 4000 if you could trade tomorrow Yeah, well, that's that's okay. Well, I'm so happy that you're doing good I think the book is great. Like I'm very old-fashioned. I like to write stuff down, too I really do like to write stuff down with the charts. Yes Yeah, it really helps it. Well, I don't know if you have any questions for me, but I mean you're just doing great I mean, it's so funny. You don't see the emails, but I get so many emails from people. I want to be Jackie I want to be Jackie. I mean everybody's saying this because yeah Me just started Mimi just started in January. Yes, and she's not too. She's a real estate agent And she wants to get out of that as well what she's doing and quit So she just she was following along like last year and then she didn't she wasn't actually trading So now she's actually going live trading. So that's exciting, too But I think whenever anybody asked to get your letter because I you know I mean I learned a lot from you every day in the room just in general and like that should help me with Lulu Because I I could hear you in my head. Yeah Just take a breath calm down and like I'm what would Melissa do Well, I mean do you have any questions I mean I sounds like you're doing I'm just so excited for this year. Yeah, long I mean, you know, maybe with the market doing well, maybe we'll do more loans. I don't know But you know SIGs certainly work today.  Oh, that's so funny. That's so funny Well, I I'm just thrilled that you're doing so great. Everybody always asked me about you What can I do to be like Jackie and I said listen to what I say? I mean, that's what I mean, you know Listen to what you say take the class and just Just, you know, just it's it's a little bit every day like even though the one gentleman said about I made $50 I know I know Computer screen that's that's a good start. I know it is a good start. I was the positive Yeah, everybody can't take a big size and that's so I mean it's $50 is $50. I didn't have before it's better than losing and also You know, I encourage people to start out with whatever they can and whether it's even if it's a small amount so that they can learn it because it's a You know, it is a process. Now. I forget. Did you trade live at the beginning or you were testing on a demo before you did it? I went live October 1st, but the whole month of September I paper-traded Okay, and I just got used but even so as I've been in the room Consistently, yeah, I just find I I don't make the mistakes that I did Sometimes I would hit sell instead of buy and but I made a mistake yesterday when you when you went for um, it's fine Snaps Oh, yeah Oh, I saw that I was like that was a lucky mistake. Oh my god. Yeah, that was because look at that today That still didn't even go today. Oh, yeah I looked at her way. Oh my gosh. Thank God I got right out of it. So I did But you know what that happens to yeah, yeah, that happens and that today it went so that's like so crazy Yeah, yeah, it went up today, but the sick was good and yeah, you're doing you're doing great So, yeah, I try not to panic, you know I just try not to panic and listen to you and and even if we had a day like yesterday with the cues Look at today today. I know more than enough for it. So yeah, definitely Well, I don't know is there any advice you can give to any new people that you can help to anybody new? just to listen and Not, you know, like not to do go off and don't go rogue You know and just you know keep yourself organized get your book and write everything down and and listen when you when you When you teach afterwards all that just helps and it helps even when you have a bad day I had a bad day once and you gave a lecture and you said, you know You do take that day and you put it aside and you're on to the next day So and that really helped me, you know, because I wanted to stay in it. I wanted to make it right I wanted to bounce back. Yeah, only worse and I've never done that again. Yeah. Yeah, it's definitely Well, I am so proud of you Jackie. You're doing terrific. Oh, thank you I'm glad to be here this week.   Yeah I feel a little bit better every day. Yeah, every day. I feel a little better. It's just it's just I it's like I just wish I could be better like that But that's how colds are sometimes they take like two weeks and this one especially a lot of people had it So it's it's been going around but you know, this week. We're supposed to get a lot of snow. So stay warm Same here. All right, Jackie. I'll see you Tuesday. All right. Have a great weekend. Okay