Good morning afternoon evening. Good morning. Midday, mid-afternoon. Mid, the middle of the night. Benjamin's here. It's the middle of the night. Is he here? I haven't seen him yet, but we have Hillary. It's afternoon for her. And then for Kay and Thomas and my mom, Tommy, Chris, Kay, Jonathan, Betsy and then, yeah, anybody else? Yep. Everybody's saying happy birthday to me. Thank you guys. Thank you. We have a special guest who stopped by to see special happy birthday to the birthday girl. Is everybody ready for this? Uh-huh. Yeah, he's sure. Yeah. I don't know. Here we go. Birthday to you. Happy birthday to you. Happy birthday, Madam Presidents. Happy birthday to you and many more. I guess it's a, I'm a president now. And Sarah, we have a cupcake and wait, wait, wait, wait. A balloon. Oh, it didn't transfer over. If it floated, it's probably up on your ceiling. Well, thank you guys. Thank you. It is. Birthday. And thank you, Alia and everybody who cake. Oh, look, there's cake. I would eat this on screen, but probably very messy and I won't. I won't do that to you guys. Other people were chiming in. We had June. Hello, June and Dallas. Oh, Dallas, didn't he, isn't he, he just came into the, for the wiki true challenge discord. I remember his name. Am I remembering that correctly, Mindy? Yes. Yes, you are. And Karen Lowe. Thank you. Did I miss anybody in Alice? No, no, you can, you can see us, but we can't see you. We can see our chat. Unfortunately, you can absolutely see us. Yeah. Yeah, unfortunately. Why do I always move my chair instead of the camera so that I'm centered? I don't know. I try the camera. I'm always scared it's going to fall. Yeah, but I guess how is everybody doing? You know, everybody's doing well. Everybody got their coffee this morning. Okay, well, I guess we can, your gift for me is in the mail. Other than the fact that my friend Marilyn showed up to sing for you. Oh, it's in the mail. It's in the mail. Do you even have my dress? No. Okay, now we have a question of the week. Boy, do we have a question of the week? Oh, I'm sorry, Dallas. Dallas is a girl. I'm sorry, Dallas. I'm sorry. You know, Sarah, Sarah normally can tell the difference, but since she can't see people, it's not as easy to tell when you're just showing up as a text form. I just seek that people. Yeah, like we could see that Karen is possibly a girl. Possibly. Her picture is so tiny. Happy, happy birthday, Sarah, and welcome to the question of the week portion of the morning. Let me get my screen shared and go back. I think it was a good question of the week. It was a good question of the week. It was tons of them. I'm going back. What is the question anyway? The question is, if you had an epitaph, what would you say if you could write it yourself on your tombstone? There were some great answers. There were some great answers. I have a tombstone in our family that was put up many, many years after the people passed, and it lists all of their children, their wives, and their dates of death and birth, which is a genealogist's dream. And all the information is correct. I checked it. But some people left some interesting things. So let's see. In a moment, in a twinking of an eye at the last trump for the trumpet shall sound and the dead shall be raised incorruptible and we shall be changed. That is from Handel's Messiah.  A lot of people said that. Yeah. A lot of people said, see you later. Here lies Brian, who is very loved and a loving family member. That was just so sweet. He didn't go for the funny part. And he lived happily ever after to the end of his days. That's from Kathy Forbes. I'm not going to try and say it because it's Latin, but it says that if you can read this, you are too educated. Kind of funny. Devoted mother.  So she's going to have just the same old birthday, death date. So she's already decided Alexis has what she's going to have. Devoted mother, which is good. I could write, I'm not going to say that out loud. This is a little Arlington. That's from Alexis again. She was born in one country, grew up, got married and died in another country. Otherwise, she was quite boring. That's funny. I was hoping for a pyramid. Life is borrowed for a time for a single person. I'm at the end of a long line of ancestors. May I also be the beginning for one twice as long. Peter Lawrence. That was very, very nice. Spender day is doing weird things with strange people and loved every minute of it. I like that one. Yeah. I'm just a traveler on this earth, Steve Harris. Somebody just put up a cool picture of a cool tombstone. They saw when they were out looking for Norman Rockwell's tombstone. Edie King says he ate well. Slain by A-O-N for making the silly post. That's from Chris Fariello. But the best one I think is never jumbled chainsaws over a shark tank. I'm not here. This is an actual tombstone people from Carol Willie. Willie Owen from Christina Corbillani. I'm not here. Have a good day. Where are you? You're not there. I was a descendant. Now I'm an ancestor. My body lies, but still I roam. That's from Shelley Burmeister or Burmeister. Mama always told me not to look into the sun. But mama, that's where the fun is from Bruce Springsteen. He's gone to be with the Lord, Tommy Buck. Is she going to put this on? Sandra Vine says my profile pretty well says it all. Somebody run look at her profile real quick and see what it says. My profile says I do have a note on my profile that if I were to pass away, I give my wiki tree profile to people and that I'm going to roam the wiki tree servers as a ghost for the rest of its time. Weep not for me when I'm gone. Weep for yourselves who have to live in a world of suffering. Andrew Simpler or Simpierre. My tombstone was supposed to be a pyramid. Somebody actually posted that. On the same person? No. Yeah.  I've always heard life's a bee and then you never mind. Here lies Pam, beloved wife, mother, and she tried to be good. Pam, we believe that you're good. That's Pam, young, young. I told my husband and my daughter I wanted, she really was always right. That's funny. That's a conversation we have in our family all the time. Who's right? Who's wrong?  It would be funny if then her tombstone was to the right of him. Yes. Yes. The things on which way you look at it. If you look at it. Yeah, but you're facing to it now. But she could say I'm always left on the back. The coffee pot is empty now. I'm trying to get more French or something. Here lies Ed. He's dead. I've heard that one. What went wrong? I told, yeah, I told you I was ill. He was trying to get organized. She kept promise. Gone home to Jesus or she did what she could. Apologies to carry nation. Somebody knows the meaning behind that one. That'd be great. Try genealogy. You can't get fired and you can't quit. That's because you're always working on your genealogy. Mine's been written actually. This is from Alice Thompson. Mine's been written and it mentions my parents, my military history, and the contributions I made. Is it going to say 50,000 contributions to Wigitry? She was really loved by husband, family, and friends. That's very sweet, Alice. I am now officially extremely late from Norman Ryan. Nice meeting you here and welcome when we meet again there. Okay. Why? From Thomas Wickenden. Alice and she contributes many years volunteering to help loved by family and friends. How sweet. She claimed to be outspoken but she rarely was. Susan Starcella. I'll be back. I'll be back. Susan, you have to say it like... You have to be the voice. I'll be back. Far from the Beatles. In the end, love you take is equal to the love you make. Marietta Oliver. A decent plot at last. I like that. Everyone. Mine will have no dates and say Silva. 1055, see my Wigitry profile. There you go. You have to ask. You have to ask that your Wigitry profile, all your biography information stay intact. Otherwise it doesn't, does it?  Yeah. I want my profile to stay exactly as it is. Forever. Find a grave number. What's that? Karen Lose put her find a grave. She would list her find a grave number. Yeah, that's funny. Put it aside. It's correct. The question is, will you make your find a grave profile before you die? So you already know you're finding a grave profile. That's interesting. That's an interesting one. You already know your plot.  Yeah, I think I'm just going to get my, since I live in Canada and I was born in South Carolina and I lived in Chapel Hill, North Carolina and I have very strong ties to all three of these places. I'm going to get be cremated and I'm going to plant myself under a sapling in a national forest near each one of those sites. That's cool. And that way I will live again. As if we need me to live again. So Karen Lowe was just listing the find a grave ID for the person that Jonathan was talking about earlier. She wasn't saying that she was going to put her find a grave ID for her tombstone. No, but for anybody, yeah, apparently there's some not PG reading on the poem on John McCaffrey's epithet in Montreal. But Jonathan, Jonathan Boye. Mm hmm. Hey, and that's the question. Everybody's breaking the, the find a grave site trying to find that epithet. Mm hmm. It's broken. Yes. Okay. Well, that was the question of the week. That was. Do you guys know what you'll write on yours? Oh, and that is the standard. Oh, I really have no idea. I'm going to, I'm going to be, my epithet is going to be trees and near Ottawa, near Greenville, South Carolina and near Chapel Hill, North Carolina. Yeah, maybe if I have enough money, I just put my whole family tree on my. Those are cool. Like the ones that are lasered on there. My mom said mine would be finally. Oh, Joe. Mom. Montreal. I'm still trying to find it. So, so Louis asks about, oops. Mags wants her profile left as she wrote it. Any conflicts there? No.  Let me pull it up in your untimely demise. I think that's the wording that is used. Yes. Oh, you've read, you've read mine. Here it is. Here we go. Also, if usually people will send us, if they know somebody has passed away to the wiki tree team and we have measures in place to make sure it all stays as is. Yeah. In the event of my untimely demise, I want to be sure that none of my work is lost and that nothing needs to be deleted while I fully intend to be around to manage all my profiles for the next 50 years or so. In the event of my son death, I hereby give permission for all of my private profiles to be transferred to any of my family members or to any other wiki wonderful wiki careers who have collaborated with me. My own personal profile will be left to a one and Julie to tend and I plan to haunt the wiki tree servers once my body has left its Berkeley bounds bonds. Lewis, what have I ever done? What have I ever done to you, my friend? Oh, yes. Oh, there's a good one. Here lies a lover of blueberry pie and berries full of it. There's both the family members. That's funny. That's a good one. Okay, so I guess we can do our profiles of the week. Our next segment in, hold on, let me, I'm on the wrong. Hold on. Hold on one moment. So this week, we featured because it was National Wildlife Day. I'm waving at Mindy's mug. She has all of wiki tree on her mug. Yes. So, because it was World Wildlife Day, there we go. So we featured Steve Irwin was our main one and then we had a whole bunch of other ones. Let's go, let's go through them. So we all know, we probably all know Steve Irwin, the crocodile hunter. He came to his untimely demise in 2006. I can't believe it's been that long already since he's passed away. But he was a, he's loved, he loved wildlife since he was small. He caught his first venomous snake when he was six years old. Kind of crazy. And that's Steve Irwin. He met his wife. His wife is from the States because he did a whole bunch of stuff all over the place. I won't mention her name. I mean, it's in the profile since she's still living, but yeah. Now, and then now his family keeps his legacy on, which is also amazing. That is, so that's Steve Irwin, our crocodile hunter. Then we have our next one. Jean Audubon, John Audubon, or John Audubon, John James Audubon. Probably another one most people are familiar with. He painted, not painted. He did the, they're not, they're like prints of lots of different birds. He documented all of them. And fun fact, sometimes he would kill the birds to then document them and paint them or sketch them. He was an interesting guy, but his artwork is beautiful. And he was born in what is now Haiti, Saint Domingue. Next on the list is Diana Fosse. She liked the gorillas. She did extensive studies on gorilla groups, period of 18 years. And she passed away in Rwanda in 1985. What did it say about, I guess, because they're not really sure. She went to the forest in National Park. She didn't come back. I guess they found her body, but I guess they weren't 100% sure. Which day? She died, so. They do not know who killed her. She was murdered. Ooh, someone has to go on a, this feels like an episode of Unsolved Mysteries on Netflix. Next on our list is, I am sharing my screen, correct? No, you're not. God darn it, guys, you have to tell me. Now I'm upset. Let me go back. So we have our wildlife experts page. Steve Irwin's page. And then I guess you guys can see Audubon's paintings. Things when I was showing it. That's really cool. I know a lot about him because we did an exhibit on his stuff when I was working at a museum. So. And then we're currently at Jaques Consta... I don't know if I'm going to... Jaques? Const... How would you say that? Anybody want to... Jaques Cousteau. Thank you. Jaques Cousteau. And he was from France, obviously. Naval officer, conservationist, photographer. Studied the sea in all forms of life in the water. And another one who we don't have a for sure date on. He died of a heart attack. Why? So we have a date, but we have it as an about date. I guess we'll have to look into that. Yep. Here. He invented the aqua lung. Invention of the aqua lung was family. Led to the invention of the aqua lung. Super cool. You didn't grow up watching Jaques Cousteau's... What was the name of his TV shows? Is it in his... I don't... I don't think it's here. You know about the top of their head? Ready to go. He had a great TV show. That doesn't say it anywhere here. And if somebody knows it. So then we have Antoen van Hoof. Van Hoff? Van Hoof? He... Oh, the first part is in Dutch. So I can't read that. But he's... He became president of the burger zoo in Arnhem. And the zoo... Changed the zoo to a park where he had, you know, because the zoo is one thing, and then you have a park being another thing where it came more as a conservation effort. And they had... He had the animals in their natural habitat instead of cages. And it was the first safari park in Europe. Pretty cool. He passed away in 2004. Doesn't seem like we have his... I don't know if he married it all, but it's not there. Who's next? Sir... Sir Peter Scott. Great Scott. Great Scott. I didn't do Crikey first, the crocodile hunter. Crikey! I did in my head for you. Okay. Thank you. So we have Sir Peter Scott from England, son of the polar explorer Robert Scott, and Kathleen Bruce. He was in the Royal Navy during the Second World War. Second World War. And he was a noted ornithologist and conservationist and founder of the World Wide Fund for Nature. So he liked birds too, like Audubon. We have a couple more. We have Gerald Durell. He was born in India. He looked like the lemurs and the monkeys. He founded the Jersey Zoo in the Channel Islands. And he... Hold on. I had... That's Gerald Durell. I really like his photo with the lemurs, to be honest. And he was awarded the Order of the British Empire in 1982. So he did a lot. Who's next? Ernest Just. He was Just. Part of black history. So he was... He got his teaching degree when he was 16 years old. And his parents knew that the schools in the south, in the north, were better than the schools in the south, so they sent him to the north. And he graduated magna cum laude. And won numerous prizes in sociology, history, botany, and zoology. And he became the head of Howard University's zoology department. And he also has a children's book after him. And I think we have one more. Ian Player. Born in South Africa. A conservationist. And also the brother of famous golfer Gary Player. He spearheaded two key initiatives, Operation Rhino, that saved the few remaining white rhinos and the first wilderness areas to be zoned in South Africa and the African continent. So he's the rhino guy. And those are our wildlife experts. And sorry for being late and sharing my screen. So I guess they said the name of the show in the chat, I think. They did. That's incredible.  Was that his ship? The Jacques Cousteau's Odyssey was his ship. But I think he also may have had a little show about Underwater World called Odyssey as well. And his son carries on his great work of conservation and saving the sea and doing better things with his father's lung. He's been working on the rebreather, I believe, for divers now. So that's cool. Hilary says that she's been to the zoo several times. The fellow who did the suit versus... Yeah. Yeah, we had a lot of good profiles this week. So go check them out. And if you want to fix any of them up, because if you notice some of them didn't have a really well fleshed out biography, feel free. And that is our... There you go. Well, we got through those quick this morning. Yeah. Is anybody related to any of them? The closest I'm at is John James Audubon. Mike James. Yeah, it's not a direct line, though. I am actually directly related to Steve Irwin's wife. So... I think I'm most closely connected to Steve Irwin. So I think it's pretty cool. Somebody's helping you with the pronunciation of Van Hoof, which is actually Van Hoof. Oh, thank you. Rhymes was Loaf. Van Hoof. Thank you. Love to know how to pronounce things. And Gerald's Durell is actually Gerald from Hilary? I don't think... I think she just messed up. I think that was the zoo that she went to, Gerald Durell's... Oh, okay. Great, great, great. Okay, so now our photos of the week. Favorite, favorite time of the week. Let's go. So this week was Dress Up. Let's see how these people are dressed up. They look, they look cute. That's a nice picture. Mm-hmm. And we have got some long hair. Costume party. Oh, look, that's really cute. Like she's dressed up in like a suit. And these two have little stuffed animals. It was a civic club costume parties. Very interesting. They had a costume club. Dressed up smart. Hmm. How cute. Oh, that is really cute. Look at all them. Look, he's like dressed up as a queen of hearts or something. Yeah. And we've got some fairies and a drummer and... A fireman? Where do you see a fireman? Oh, there's a fireman. I see him. Oh, cute. How adorable. I love the farmer. Yeah. So it's a hot water bottle, second from the left. Who is... A hot water bottle? That's funny. Look at the person in the very back. Is that a hat or an umbrella? It looks like I think it's an umbrella. They're probably... Yeah. Maybe they... I don't know. It is an umbrella. I'm pretty sure it's an umbrella. That's cute. I like how they're all interacting with each other too. They probably can get them all to stand still at the same time. Dressed up for his graduation. Looks like he borrowed a lemur from that guy in the other picture. Oh. He threw it on his shoulder. Oh, my God. She has the rest of it. Where are you? Oh, no. How kind of fur do we think that is, though? I would be scared to say it's polar bear. Gosh. I don't want to... They're from Nebraska. I'd be curious, though. Jared, if you're watching, tell us. Where's Pip when we need him? Where's Pip? He's ironing his kilts. Maybe. Oh, this is cute. Jim and Vicki's wedding. They actually wore this to their wedding. Wow. This was in 1988. Fort Worth, Texas. Dick Whittington performance for the POWs. The song Short Shorts is in my head. Do you remember those short short songs from the commercials back in the day? That's cute. This is an oldie ballet? Maybe. Maybe ballet? She's dressed up. I don't think that's a costume, though. No. Imagine the work it took to get the hair to do that. Yeah. I can't... I probably wouldn't want to sit that long to get my hair done like that. But you wouldn't... Oh, I would. I would play with my hair. I'm happy.  Oh, yeah. I don't know if it's still for that long. Oh, my theater debut. Betsy Koh, that's cute. How cute. Her wand is sending sparks off to the right of her there. Choir Halloween party. That's fun. That looks fun, yeah. See what... lots of interesting costumes there. Oh, my Thomas! Thomas is in the chat, isn't he? I thought I saw him in the chat. Thanks, Thomas, for sharing that. That is cool. It looked like the numbers. There were numbers on the people, too. You could go back and find out who everybody was. That's cool to do. You zoom in. The bottom left, I saw numbers on the people. I think they were wearing them. Yeah, I think... Well, maybe because they probably had a costume contest. Oh, yeah, cool. That's what I'm assuming. Thomas, can you enlighten us? Yes. You'd have more when we were looking at this one. They look very dressed up. They look like they're in some sort of sorority thing, you know? Well, what... Some kind of election. Yeah, they're in some sort of group. Alice Ernestine... Alice Ernestine... That's a name. Justine Charpentier. Wow. Apparently, she shared this photo. There we go. Grandmother Alice is the one seated. So it was... They might be actresses on a play for school or a charity event or the set of a young ladies competing for the election of the Rosary, which is usually in August. The City Hall granted one... Virtuous... Virtuous young lady with a prize honoring her quality. So kind of like a pageant. You can see that. Very cool, very cool. Oh, that's cute. That's nice. And that was it. That was it. Let's see if there was anything in the... Did Thomas say anything about that photo? If he's still watching? Oh, look at that one. In her Easter best. Cute. There's another one we didn't see. Dieter. Thanks, Dieter. He's a wonderful player and for our wiki tree challenge. Thomas Kernaline is telling us that, yeah, he doesn't know much about that picture from the Playhouse party, but that he did think that there was a contest going on for the best. That's what I'm assuming with all the number badges. Yeah. So I was thinking that... So prisoners of war, Nazi Germany, doing a show for them or... For each other. Mm-hmm. Family photo. We didn't see that one either. Oh, let's see if we see. This is my... Doesn't say anything about the photo. Great grandmother. Yeah. No comments. The graduation photo. Got this one. Honey, we're all trying to read the small print. Yeah. So they picked that one because they haven't seen hair done like that in other photos. Mm-hmm. The flowers are pretty and she looks so proper and poised. She's afraid to move. Uh-huh. Mm-hmm. She's like, we saw that one. We did see that one too. Well, we didn't see this one. This is the... Yeah. Mary Ann's mother, when she graduated from high school, she was a valedictorian of her class at age 15. Wow. Mary Ann is always good about posting pictures. Go ahead. Mm-hmm. Oh, here's Thomas writing more of it. 1912 Halloween party. Very cool. Very cool. Saw that one. Oh, man, look at her hair. Oh, my gosh. I'm jealous. Okay, and that was it. Those were all the photos, guys. I hope we enjoyed it. We did. We were looking at the photos. We used to grow the girl's hair out long like that and then we'd make a braid and cut it off and donate it to the Cancer Society to make wigs. My sister did that one. She donated her hair. Okay. And now, we can kind of... a weeketry challenge. We're currently working on Katherine Wilson. She is kind of more of a social genealogist, so you've made a really great resource of links on Facebook for everything genealogy related. But funny thing is, she just recently deleted herself off of all the social media. She said that on Wednesday. Yes. So, how's it going so far, Mindy? It's actually going awesome, even better than I had expected, but it never ceases to amaze me how well people do on this challenge. They just all jump in there and want to help. Yeah, we've already gotten so many brick walls broken, right? This week, a lot of bounty points. Yep, don't want to give away any secret, but yeah, those points have been climbing. And we actually had a lot before the weekend even started, so people really jumped in there on Wednesday night, Thursday, and got things going. Hillary says she's working on the burger line. A lot of people, they're working away. I know, I saw the Discord hop in a little bit earlier. Yeah, that's pretty much it. Yep, per week. Catherine, and if you want to, you are more than welcome to help. Maybe you can't really get points at this point, but you are able to register for April. Already, right? April registration is open? Yes, it is. We know who all of our April contestants are? Contestants. No, we don't have a lineup out yet. I don't think. Hold on. We've got a spoiler in the chat. Uh-oh. Who spoiled it?  Oh, that's just, that's vague. Don't spill any secrets, Kay. I mean, if people really wanted to, they could go onto WikiTree and look, but we won't say it on the chat. But yeah. So Wednesday, we will be... Oh, my coffee just... Just got done. And I lied. I lied. We do have the April names out now. For week 14, we have Tim Janssen. Week 15, we have Sherry Passi. Of course, we're taking off week 16 for the spring clean-a-thon. Woo-hoo. And then 17, we're having Connie Knox. Well, it looks like I need to make that graphic for April. Yeah, Sarah. You do an awesome job of those. Thank you. So yeah. So if you want to get on the WikiTree challenge, you're able to register for April. You can register for the whole month or just a specific week if you want to. But it's not anything set in stone. So, but you'll get the badge and you'll can get points and help us out. Very cool. Yeah, next week we will be... On Wednesday, we'll be starting Pat Richley Erickson, who is dear Myrtle. She's... I know she's excited for... Everybody's excited. I was in a chat with some people a week or so ago, and all of them were excited that they were getting their stuff done. Mm-hmm. Fun, fun, fun. Yeah, Catherine was thrilled when we had her on Wednesday. We have a lot of cool people yet to come. We actually have a... Well, we did have... I don't know if he's still in here. Louis, he's a future guest star. Louis Kessler. Yes. He wrote a brilliant blog post about the WikiTree challenge yesterday. He definitely checked that out. He has lots of great comments. What's the name of his blog, Sarah? I don't know the name of the blog off the top of my head, but probably if you Google Louis Kessler genealogy, you might... Because I think it's long because it has... Behold. Behold, there we go. Because that's his software that he... Right? Yeah, he has a couple of really cool little double triangulator. There's a couple of little apps that he's written that are really fun. So, yeah. There it says he's lurking. He lurks. And here is... I can't post it in the chat, can I? No. The link? No. I can't post nothing in the chat. Period. What were you going to do to show his... His blog. It's... Genealogy.com forward slash blog. And the title of the one you're looking for is No Genealogy Should Miss the Wiki Tree Challenge. Yeah, I'll show... Go share the... my screen again. There you go. Oh, Genealogy Should Miss the Wiki Tree Challenge. Ta-da! He posts... He posts links all of the YouTube videos and all of our... everything. The March lineup. It's going to be great. Oh, he also has the April. I don't think I need... How did he... He really saw the post. Yeah, he was lurking on... And the G2G. Yeah. And he mentions our RootsTech special where we recapped the challenge, did a great job. Wonderful. Thank you, Lewis. We appreciate it. Yes, thank you. And... unless anybody has any questions, I might go off and... eat my cupcake. I like the way your cupcake changed color. I know. It's magical. Magic. It's internet magic. You were going to say the magic of television. You were going to say that. Maybe they'll also say the magic of the internet. But... the magic of the internet. Cheers. Transforming a vanilla cupcake into a chocolate cupcake. Cheers. Come on, Mindy. There you go. Cheers. Is that a new one? Do you make a new one? Because I was like, it has AJ on it. That's cute. For the wiki tree challenge. Oh, that's great. Max is laughing.  You need to send me your address. I need to send you a cup. I would love a mug. I don't need any more. I have so many mugs. I am a hoarder of mugs, but honestly, I don't even care. I am so not a hoarder of mugs. Mary, the first thing I did was attacked the mug cabinet. There were some big fights and almost breakups over that. Yeah. I was in Publix the other day and I saw a llama mug that she did. Dallas, we have a wiki tree tea spring site that you can go to and order your own wiki tree mug. Mindy makes her own special mug. She did that, but you're able to order a generic wiki tree with the wiki tree logo or with this. The one that Max has on, the enjoy genealogy shirt. You can get a mug with that. If you're really feeling crazy, you can do what Mindy did to make your own mug with stuff, but that's our store. I want to say we did have a winner of the t-shirt for last month and that was Maddie Hardman. Your mom, I mean, Joe, a very important person in our chat would like you to show us your mug, Sarah. Well, I just tried to hide it because it's maybe not the most PG, but my mom got me this one. You're going to get her fired, Joe. Yeah, I know. That's why I usually go like this when I'm drinking it. Kind of hide it. But, yeah, that's okay. So any questions, guys? Questions, comments? I have so many questions. I can't even begin to ask them all. Questions about what, though? Just life? Yes, everything. Alyssa, don't hide the mug. Well, on that note, I guess we will leave. So Wednesday, 8 p.m. Eastern time, we'll be recapping Catherine's week. We'll be starting Pat's week. And then next Saturday, as you know, every Saturday morning at 10 a.m. Eastern time, we'll be here with you. Bell's on. Maybe every time with the cupcake. But every time with coffee. Goodbye, everybody. Bye, everyone.


We're going to be talking about the properties of parallelograms, and we'll start with the definition of a parallelogram. Parallelogram is a quadrilateral with both pairs of opposite sides parallel. A good idea to show on your diagram if it's not already marked that A, B, parallel to D, C, put your parallel line mark there, and then to differentiate the other side with the two arrow marks to show that those two lines or two segments are parallel to each other. We're going to be filling in a lot of information about different quadrilaterals, so today we'll be adding some information into our parallelogram piece of the quadrilateral family tree. You might want to get that out. Keep in mind that we're going to be putting a lot of things in here, so you might want to write small. We'll start by about the opposite angles of parallelograms. Opposite angles are congruent. And when we say opposite angles, we have two sets of opposite angles. We know that B and D are opposite each other and therefore congruent, and then separately A and C are opposite each other and congruent. And again, we want to differentiate that we have two marks here versus the one mark because all four are not congruent. Just the opposite angles are going to be congruent, so you want to show that differentiation again. The second piece is talking about the sides. Opposite sides are congruent and parallel. We've already marked on our diagram that the opposite sides are parallel, but now we can also mark that the opposite sides, as well as being parallel, parallel are also congruent. So A, D is congruent to B, C, and A, B is congruent to D, C. Again, not all four pieces congruent to each other, just the opposite sides. The third piece here talks about consecutive angles and consecutive angles again are going to be any angle set that are next to each other that are adjacent. So D and C are consecutive, B and C are consecutive, A and B are consecutive, and as you guessed, A and D are also consecutive. We have four sets of consecutive angles. Important to remember, they're supplementary, not congruent. That means together they're going to add up to 180 degrees. So, for instance, if I am told that angle C is equal to 100, because consecutive angles are supplementary, I know that angle D would have to be equal to 80, and actually that's what we'll be doing in the next video. Go ahead and add these pieces to your quadrilateral family tree. I have three pieces, but actually they're four separate statements. Opposite sides parallel, opposite sides congruent, opposite angles congruent, and consecutive angles are supplementary. Notice that I left a little space here because we will be adding a few more properties to the parallelogram as we go along.


Fel cwmru cael chi oedd adeiladurol Cymreig ac oedd gwybod gwneud ysgol Llyfr individuallyll ar y cyflodol mawr yn wych. Rwy'n rhaid i'r cyflodol ond yn ymwneud gan y gweld cymoedd ar gyfer cyflodol. Roedd genno'r pïngsiadau gan gweithio'r Cwmru Cymreig yn ymwythnosol Llyfr responsible yma yn unig o kadais oedd yno. Dwy o chwych gwirionedd, i'r rhwng o'r 180 a leirio. Rwy'n oed yn amddangos cyffredeb oedd gan'r cyflodol Cymreig. In middle income countries, they amount on average to 1% of GDP per year. In high income countries, 0.1% of GDP because of the investment that has been made in risk reduction and resilience. And in low income countries, 0.3% of GDP, less than in middle income countries because the vulnerable are so poor. But these countries become trapped in a cycle of damage unable to finance the investments they need to escape from these losses. We observe a transition through time in infrastructure investment. Major losses as occurred in Japan here at the time of industrialization trigger investment in risk reduction. And that doesn't level off until risk gets down to a tolerable level of about 1% of GDP. The United States experienced a similar infrastructure transition. This picture here shows the 1927 floods on the Mississippi, the most damaging floods in American history, which stimulated major infrastructure investment, $14 billion of investment in the Mississippi system. But the need for investment doesn't stop there. Advanced economies have a growing stock of aging infrastructure, which needs investment in order to keep it in working condition. The American Society of Civil Engineers gave the U.S. infrastructure system a D plus in its scorecard for the quality of infrastructure. It estimates that $2.2 trillion of investment are required to keep this system up to scratch. And the OECD estimates in its outlook to 2030 that $50 trillion of investment are required worldwide in infrastructure systems. Infrastructure has been identified as a target for stimulating economic growth. And clearly infrastructure investment has an immediate demand side effect. But in the longer term infrastructure is also identified as being one of the key components of economic competitiveness. The need or tendency within business to drive down the margin between system capacity and demand is increasing the possibility of systemic and cascading failure as occurred in the northeast of the United States in the blackout there. And there's also increasing complexity in this system, which is increasing the possibility of major failures. But there's no reason why complexity should lead to failure. Civil aircraft have become increasingly complex, but actually the number of fatal accidents has gone down over the years. So we can design complex systems which are safe. Another area of complexity however has been in the regulation of infrastructure, in particular since privatisation. Regulation has taken place in silos with different sectors and hasn't taken account of the interdependencies. So there are analogies here with financial regulation where systemic risks and the possibility of cascading failure are overlooked. And those impacts can cascade worldwide. These are the Thai floods, 20% of world production of hard drives disrupted during those floods. Toyota's profits cut by 32%. And the political implications propagate worldwide as well. The Fukushima nuclear reactor plant failure led to a backlash against nuclear energy in Germany and acceleration of their transition to renewable energy, but paradoxically also an increase in imports of coal-fired power from Poland. This picture here published in 1889, The Man of Commerce, shows, depicts the web of railroad and water infrastructure as the bones and arteries of the human body. This infrastructure becomes embedded, locked into the fabric of development with profound implications for sustainability and in many respects very difficult to reverse. We know that the risks are growing and these systems cannot be addressed by individual action alone. So my question is, how can we make the business case for collective action in order to reduce risks?


Hi everyone, Joe for Jaspy's casewrakes.com coming at you with a quick random number block That's RNB random number block randomizer for this group of teams right here for pick your team 11 Limited football coming up a little bit later tonight. This is how it works. If you're not familiar with it Remember zero gets any in all redemptions Big thanks to this group right here. Thanks to the numbers right there Let's roll it randomize it three and a six nine times for names and numbers one two three seven eight And ninth and final time after nine we got Nicholas down to Roy and Three and a six nine times for the numbers one Two and ninth and final time. Good luck six down to zero once again zero gets any in all redemptions including one of one redemptions and That only applies to this group of teams in that bottom tab right there Very rare that I could probably count on when the all the years we've been doing this In all the years we've been doing this I think that's happened on like less than five times Nicholas with six Ken with one Nicholas with nine Chris with seven Christian with four J with two Kenneth with five Derek with eight JC with three and Roy with zero Let's sort by number right here And coming up in a separate video lead the break itself Jaspy's casewrakes.com


Oh my God. I'm out of laws for words. I'm confused. It doesn't look like it's doing anything. Is that straightener working? Hi beautiful, let's watch some videos together. It's been a long time and I shouldn't have left you, but I'm back now. And I'm back like I never left cause we jumping right into this video. Thank God we missed you Jay. I've never seen your videos before, but I missed you. Today's a protein treatment, silk press and trimming my ends cause it's been six months this time. Oh, I love a hair treatment day. I love it. I love it. I actually have no idea what her hair looks like yet, but she's going to do a protein treatment. She's going to do a silk press. Obviously the silk press is what we came here for though because we love a silk press. And last time I watched silk presses, you guys wanted more. So here you go. Today, obviously we're watching people do it themselves and not professional do it. So it'll be a little bit different today. Let's see if the silk press skills translate as well as they do on yourself as when a professional does it for you. By the way, disclaimer for today's video, I am not an expert in silk pressing. So everything I say is just my own thoughts, okay? Don't take everything too literally and also correct me if I'm wrong down below as I'm sure you will because you always tend to. Oh, her hair is beautiful. Oh my God. It's not super, super coily. It is a bit more on the wavy side, but it looks to be long.  Not exactly seeing the vibes yet, but I'm imagining I can see a little bit. It's very bright in this room, guys, by the way.  So sometimes I say different things than what it looks like to you. I thought I needed to explain that right now. I'm probably nobody cares. If you ever think that I'm saying things that don't make sense, which I often do and when I look back at the edit, I'm like, that made zero sense at all. That's just because I can't see my laptop screen. I should probably fix that. I advise that you cover your arms, put on gloves and put this solution in a spray bottle. It stinks, it's sticky and it can irritate your skin. Okay, so I can't see her hair, but her hand just went down to here to cover her hair with this spray, this protein spray. So I'm guessing her hair is extremely, extremely long. Her hair is luscious and beautiful. Oh, I cannot wait to see this hair straight. I love a transformation and I love seeing black women do their hair because it is just so good all the time. So you'll see me brushing the product through my hair, but I only do this once it's freshly applied. I don't go back later because the solution is way too sticky for that and you run the risk of causing breakage. Holy s***, her hair is beautiful. Oh, okay, sorry, I just scrolled ahead. Yo, the genetics are wild. Her hair looks so pretty. Oh my God, this hair is gonna be so long and straight and so luscious and so shiny. I cannot wait. So now that my hair is all dry and crunchy, that means it's time to go ahead and rinse out the protein solution. I'm just gonna remove the clips that I have here. And if you're wondering, I only clip my hair up because I have a bonnet dryer and this is the only way that I can fit my hair. By the way, prepping for your silk press is just as important as your technique when you're doing the silk press because you gotta make sure that hair is nice and soft and conditioned before you actually go in and blow dry it and straighten it. It'll really help the process be much easier for you and you'll get better results and you'll get longer lasting results too. I'm gonna take the clips out, rinse out the solution, apply step number two, the balance and moisturizer. Leave it in my hair for about five minutes and then I'll be back. So I have rinsed step two out of my hair and I actually followed it up with this moisture therapy shampoo from Chi as well as the thermal protective treatments kind of like a conditioner. A lot of black women love Chi. I've noticed that pretty much all the silk press videos I've watched over the years, people always whip out the Chi. I don't see many other people using it besides people with really coily dry hair. Let me know why everybody loves it so much. I'm pretty sure like a lot of the Chi products are basically just nearly straight up silicone and silicone is great. I love silicones but you know, let me know if there's other things that you just love about these products because I'm interested. And now it's time for some leave-in and a heat protectant. And I was trying to decide between it's a tin and the bio silk but I think I'm gonna go with it's a tin and for my heat protectant, I'm gonna use Tresemaine. This is the OG one. I've been using this so long, y'all. When my hair was relaxed, you know, fried, dyed, and laid to the side, I was using this one. So why would I give up on her now? You would absolutely love her super gloss spray.  This will keep your hair so soft and smooth and shiny and frizz-free for literally weeks, months. Depends how much you wash your hair but this is a miracle and it's a heat protectant as well. So perfect product. So boom, you know what? Every time I do a protein treatment, I'm just so like, the curls be curling afterwards. The curls do be curling.  I mean, those curls are in place. They are perfectly defined and she has no other product in her hair besides that one protein treatment. I'm amazed so far. So she's putting a whole lot of product in her hair which I love to see. I also love using products.  I make hair products and I obsess over using them. The more the merrier for me with curly hair, it's like you can't really go wrong because the curls just suck in all that moisture and those products and it just makes everything so much easier and the blow just gets so much better and so much silkier and so much softer and so much shinier when you use a lot of products. So for me, yeah, it's a must. So far, I'm loving what's going on. This is my OG. What is this? I don't even know what brand this is but I've had it forever. I wasn't expecting a blow dryer like that. I was expecting a really nicer blow dryer.   So I bought this universal one. I'm gonna start off with the red bear just because I wanna get the bulk of the drying done and then I can go through with either the Revlon blow drying brush or just this blow dryer to get kinda like that smooth blow out. Oh, okay. So she is using the Rev Air like suctioning blow dryer. I had one of those a long time ago. I don't know where it went. I think I gave it away to somebody. Who did I give that to? Like what a random thing to give to somebody. I liked it but just like was only for some specific hair types I feel like. I just like, I like the blowout process but it was a cool blow dryer is a cool idea but yeah, interesting. Probably should have done a smaller section. It's fine, I can fix it. It's still very poofy but it's a lot straighter. I don't know, I just feel like blow drying it with like a round brush would have been better. I feel like when you get a smoother blow dry before actually going in with the flat iron you just get longer lasting results. That's what people have told me. I mean, I don't have curly hair but that's what I've seen work for people. So I don't know. We whipped up the brush attachment I guess for the Rev Air. This is looking a little bit easier and also looking pretty good. It's getting straighter, we love to see it. I want the flat iron though. Where is the flat iron? Come on, let me see it.   It is lengthy. It is down to her butt. It is down there and it is looking good and healthy and I have to say I am very intrigued and I just cannot wait to see these results. I just want to fast forward but I'm watching it with you guys and we're in this journey together so let's just stick through it.  That's an interesting tip. I tend to use tail combs when I'm straightening hair but a poor bristle brush is also a great option for smoothing and adding extra shine to the hair and distributing oils throughout the hair. So now I'm just gonna take a little bit of this Chee and Frost Infra silk infusion. Let me look up what's in this Chee product. This thing, I swear, everybody loves it. I'm pretty sure all of the top three ingredients are silicone so it is extremely silicone-based, which makes sense. I'm not saying, I feel like when I say that it sounds like a bad thing, it's not. It's just interesting. Silicone helps with smoothness and softness. Basically, I like to think of it as putting a coating of like kind of a plastic-y material on the hair. That's not like actually what it is but that's just like how I enjoy it. I like thinking about it. So it definitely coats the hair and sometimes it can cause buildup depending if it's water soluble or not but silicone's got a bad rep over the years and people like to make silicone-free lines to just have a marketing edge but it's not true that it's bad for you at all. Yee! We have began the flat iron process and I am so happy about it. She has that flat iron that goes up to 1,000 degrees, that blue one that everybody has and that thing is hot as hell. Well listen, it gets the job done. I mean, it looks good. It is shiny as long as hell. I cannot wait. These after results, I wanna be there already. Shine, look at this shine. Whoa, that shine is magnificent. It's almost like I went to this whole line.  I can't watch the rest of this. Oh, it is looking too good. Wow. I look so different when my hair is straight versus like wearing it curly. You can't tell me that's real hair. Is that her real hair? What? So nice. Listen, that is a 30-inch bust down. You cannot convince me otherwise. That is not your real hair. That is a 30-inch motherf***er bust down and it is bustin' down.    The shears. Please don't use kitchen scissors.  Oh, sh***, we're cutting it. What are we about to do here? I don't know what I was expecting but I wasn't expecting to cut like three inches off. That's wild. I hope it looks good. Let me take a look. It looks pretty damn good to me. The fact that she just cut off three inches and it still looks that long is f***ing crazy. I just am so glad to be rid of these hands, y'all. Anybody want some dating? I mean, the way to perfect a silk press at the end is to give a haircut. Like every silk press needs a haircut at the end. It does. I'm sorry. There's always some fried ends there at the end of a silk press and just cutting them off just makes it so perfect and clean and satisfying. That before and after is insane. Her hair looks incredible. Beautiful. Wow, I am absolutely shocked at those results. Y'all came to see the silk press, so here we go. My hair had been in a twist out in a puff for weeks so I was like, it's time to shampoo. It's time to get myself nice and silky. We got some real curly, curly textured hair now. This is my sh**. I mean, the last one was great too, but like this, this is the thing that really gets me. All right, it all gets me, never mind.  But like, I just love a hair transformation. The more extreme, the better. Am I the only one? Let me know. I don't know. All right, she is prepping the hair, putting in the work. We're doing the cleansing. We're doing the deep conditioning masks to get it nice and prepped to do a really good silk press. I love learning from you guys. Even the little things. I love learning what curly hair people like to use on their hair and how they like to use them. I let this sit for about 20 to 25 minutes with a heated cap. Or if you don't have that, you can also use a blow dryer. I love that she's letting the hair mask sit with a bag on it. It really helps expand that cuticle. Heat makes that hair swell and that moisture can get inside of that hair strand even better when you have heat with your hair mask. It's a great idea. Do y'all see how poppy my curls are after this deep conditioner, honey? Just look at the showing. And yes, I did comb it through as well. I like to section my hair into fours when I'm blow drying my hair. I highly recommend this to you as well. This is something I always forget I can do with curly hair when I'm doing my own silk presses on people is braid the hair. Like I just forget that you can braid it and not even put a clip in and it'll just stay. I always think I need to do a clip. But you don't. You can just braid everything into small sections and it'll just stay perfectly like that. It just serves its purpose for me not to just do it completely wet on my own hair. Now it still is a little damp, but I just like to stretch it out a little bit. Okay, so this is an interesting technique that I don't see a lot in the videos that I react to lately is just stretching the hair out and not focusing on making it super straight. She's just really getting rid of like 80% of that curl, but not trying to blow it out necessarily if that makes sense. She's not trying to get a perfectly sleek blow out so that it's more manageable to then run through with the flat iron, which I think is a cool, interesting technique. Again, like I said earlier though, I feel like the more heat that's applied to a silk press the longer it lasts, I don't know if that's true. Again, I don't have curly hair, but just speculation and things I've heard from people over the years, that seems to be true. She is going in there, putting in the work though. I mean it's getting pretty straight. Her hair looks like it's very easily blow-dryable, straightenable. It is getting pretty darn straight just with that blow-dry technique that is kind of just kind of just going for it. She's just taking these big, big sections and boom, bam, bang, just going for it all at once. And the hair's looking shiny. I mean it's color treated, but it is still shiny as hell.  Now I'm going in with my nano-titanium flat iron. She's got a titanium flat iron. We're about to see a good hook press. Titanium and really curly hair. Oh, they are best friends. You can section off if you would like to, but I just went in and did parts. I mean, it took me a little longer because of this reason too. So don't be like me. Oh my God.   It is a disaster. You see a black girl doing it? Those sections are sharp and they are small and they are perfection.   Look at this.  How? Look at the way she does those edges too. I mean, what? She was basically just flat ironing her stem skin. Like what? What? She is taking her time. She is going all around the head. Little tiny sections. Basically I think one pass per section because that's all she really needs when you're doing tiny, tiny sections like that. This is just magical to watch and her hair is so shiny and healthy and hydrated. Wow. The way that it just moves when her head moves and she's got that. Oh, it's just perfect. Her hair looks better than somebody with like naturally straight hair. Like this, the way she straights it looks better than my hair would ever look naturally straight. It looks so fluffy and like, not fluffy, but just silk.  Am I getting my point across? Good. I'm using my one and a half inch beveless flat iron. They are ceramic. They are on, I think like 350 maybe. Yes. I just bought that flat iron. After watching silk press videos, I needed that flat iron.   By the way, I love that she's putting like a bevel in the hair. That was the only thing I was missing from this was like, please just give it a little bit of body, a little bit of movement. I like this stick straight look, but like, I don't know, a little bit of movement is just gonna really make this pop. I'm using these Velcro rollers. They came in different sizes. So I really like that, especially if, you know, I want to have more body than curl. It gave you a body. And because I already had layers, it really just set it all. I mean, do y'all see the drop? Do y'all see like the luster and shine? It is giving. I just love body. I love volume. I love body, I love body. Sexy hair is starting to come back and not just bone straight. So if you are the girl that loves this type of look, I think that doing the roller set after the flat iron would really be beneficial for you.  You just took the cake for, I think the prettiest finished result from the silk press I've ever seen. The before and after, I'm out of words. I love watching this. That body at the end was just perfect. Just the amount of movement and the volume.  Okay, so I'm gonna start off with freshly washed hair. You want your hair to be washed and zero product inside of it. What I use to wash my hair is the Aussie Mega Moist Shampoo. I just like to wash my hair with a regular shampoo first to get all my hair products out. And then I like to use this chi in for a shampoo. More of the chi. This is becoming an ad for chi. I mean, clearly it's good. So now my hair is just down, dripping. There's zero product in my hair. I'm just gonna comb it out.  And then the only product I like to put in my hair is this chi silk infusion. I usually use this more so whenever I am shaving my hair. I will actually put that in each section. I'm just gonna put a little bit throughout. Now it's time to blow dry. So I'm just gonna get this towel and like squeeze my hair and try to get as much of the excess water out so that my blow dry and it will blow dry quicker. That's interesting that she does that. Cause usually I have always tried to make sure that the hair is wet when I go to blow dry it. Like wet, wet, wet. Also when I put product in, just like wet, wet, wet, wet, wet, wet, wet. Because you want to lock in that moisture. So you don't really want to dry the hair out before you put the one, pause for this video in the funniest face of her. I'm sorry about that. Let's change the face. All right, here we go Jasmine. Sorry about that. I usually try to make it the wet as possible but I guess because her hair is not that curly you can probably get away with like not having it sopping wet. Okay, so when I blow dry my hair I like to use one of these, what are these called? That is a boar bristle round brush. It looks like a hybrid boar plus ceramic round brush. Interesting choice. I don't know. I've always used more like flat brushes when I do like a silk brush type of thing. Cause he's putting like body and volume in your hair. So like I tend to not use things that put more body and volume in the hair cause we already got all the body and volume. We're trying to deplete it. We're trying to get it flat. And I'm going to go ahead and split my hair into four sections. God, she has luxurious hair. This is about to be a transformation, like a major one. And then basically I'm just going to use this brush and then blow dry at the same time. Okay, so we're not actually using the round brush. Well, we are. We're basically just doing the same technique as the last girl where we're just trying to get where does some of that wave pattern. We're not actually like straightening the hair with the brush. Again, interesting. I think it's really interesting that people don't try to like blow out the hair before straightening. I guess that works the same, right? Let me know if anybody has like comments on that. Like is it worth trying to get it straight with the blow dryer or is it just faster and more effective just go in with the flyer on top of just like smoother hair than what you started with. There we go. All designed, blow dried, ready to be straightened. I just feel like you should leave it right here. Like this looks so good on you. I don't even think you need to straighten it. This is major. If you walked outside with this hair, boy, the compliments you would get, it'll be never ending. I mean, this looks so good. I don't even know where to put all of this. It's too much. And then here's it from the side. The jeans on her are insane.  So it is time to straighten my hair. And for this video, I'm actually using a different straightener than I have in my last videos that I've straightened my hair with. I actually saw this one on Instagram and there's also an adjustable temperature thing right here. This straightener goes up to 450 degrees but I'm straightening my hair at 380. I was looking it up online because I wanted to know what's too high for a straightener and apparently anything over 400 is damaging to the hair. 451 can damage and burn healthy, healthy thick hair. So that's why I'm not going to 450. To 450 for a hair straightener is insane. But I'm pretty sure that's what that titanium thing does. Let me see.  No wonder why people use a straightener on really curly hair. It goes up to 465 degrees. That seems crazy, but effective probably. Woo. I cannot wait till she gets the part where she starts straightening. I'm dying for it. I am really dying for it right now. So I'm just gonna comb it out, make sure there's still no tangles. Okay, and then this is where I use more of the Chi keratin silk infusion. I used to use the regular Chi silk infusion. It's the same bottle but in red and it doesn't have keratin. We're going with the same silk infusion, whatever Chi product that everybody else is using. I'm gonna get half of this and then I'm gonna use a really small fine tooth comb to follow along the straightener. So I'm just gonna get the comb, put it in, and then get the straightener, go above it, and then just go down, and then that's one pass. Is that straightener working? I'm confused. It doesn't look like it's doing anything. I was expecting like a whoa result, but it just looks the same. What? Super satisfying. Really, really, really satisfying. I love that she's putting a ton of tension on the hair before she actually like, clamps the iron in. You know, I think for people who don't really know how to straighten their hair well, it's super important that you put that tension on, pull that hair far from the scalp, and then get that iron in there. That's how you get it super straight.  I'm not like, hey, I can only go over my hair once because I know my hair can handle it.  And then we're just gonna keep repeating those steps throughout my whole head. I'm not totally convinced that going over your hair more times with a lower heat setting is less damaging than straightening your hair at a higher heat setting, but only going over the hair once. I mean, she is putting in the work into this. Wow, she is going around. I mean, it's supposed to take hours. I mean, I hope she wears this for a few weeks at a time. I don't know, but this is looking really good. And she is going to town on this hair and it is so satisfying and so beautiful to watch. It's so perfect and everything looks so well sectioned. Everything is, ugh.  Oh my God, each section is just perfectly divided.   I am thoroughly enjoying watching this. Yo, look how long my hair is. So does that look my hair? That's my belly button. That means it's longer than my... Another natural 30 inch bust down. I can't handle it today. I can't do it. Let's see how long it took. An hour and 10 minutes. That is not bad at all.   But since the outside is still hot but it's not as hot as the inside, it works pretty good. Putting that iron on your face like that is wild. Absolutely wild. I couldn't do it. Okay. So now I am done. This is the final look. It's so silky and straight. And then this is the ends. They're super long. I need a trim. Like I know that already. So don't tell me. Like I said, there's my belly button. I'm at a loss for words. I mean, this is hair goals. However, I do wish you just did a little bit of trim on the ends. I would just bring it to 100 or we're currently at 99. Like just a little trim would have brought it to 100 for me. Oh my God, this is so satisfying. Okay. So I just pushed the camera further away so you can actually see the length of my hair. It's so long. I'm excited. What the heck?  So that'll be fine. I literally never thought my hair would touch my butt. Oh man, but I do need to cut it.  But that's fine because I know it'll grow back and I know when I curl it again, it'll be much, much healthier.  Another perfect soak press at home. I'm really, really impressed today. So we definitely saw a few different techniques today but all worked like a charm. You guys all look incredible. It was so impressive. I just can't believe the talent that black women have with doing their own hair. I know I say that so much, but I can't express it enough. I'm just grateful you guys record these videos and I get to watch it and learn. And yeah, I think there's such a focus on learning how to style your hair yourself in the black community that it's just not the same with white people. Like there's no comparison at all. And it's so cool. It's so cool how hair styling is so celebrated in the black community. And I am forever inspired by everything you guys do. So thank you. And that's all for today. Thank you for watching. See you next time. Bye.


Welcome to our talk, 2021. Our January, back to the future of Windows vulnerabilities and the zero days we brought back with us. My name is Tomer Bar. I've been in the cyber security field for more than 15 years, currently leading SAVEBREACH Labs as Director of Security Research. My main focus is on vulnerability research and nation-state APT research. My name is Eran Sehgon. אני עשיתי בזמות סיברבסקיילה בו מלך 7 שנה עבורת כאן, אני עשיתי כבר כסמחה סיברבסקיילה בין גלגת סיגת השני שנה היחסה שלי נעבורת על רעשת ומאישה דיבייסטים ניתן במהד חיים דוד דוד שהם בו מישהו מהמסך והם מלך שאני עשיתי כאן In 2020, security researchers reported a record number of 1,000 windows vulnerabilities. We were curious what superpowers will we get from researching this huge number of vulnerabilities. Can we leverage our findings to discover zero days? We decided to go back in time to 2016 to search for patterns and automatically classify all the public vulnerabilities since then. We believe that only by connecting the dots to a bigger picture, we will be able to come back to 2021 with the success of achieving our goal. We will start with describing the research goals, assumptions, motivations, and approach. Then we will explain the challenge and our chosen solution, process, and infrastructure. We will detail the process step by step, provide a detailed and to an example from zero to zero day. We will present the six vulnerabilities and post-exploitation techniques we discovered. We will end our talk with a new proposed idea for discovering vulnerable windows machines and open a Q&A session. We defined three main goals. First, dive in and understand the root cause of each vulnerability and how Microsoft chose to address it. Second, automate and provide tools to ease the process from root cause to POC. Last but most important, discover new zero days based on a semi-automated process. Every research starts with assumptions. Let's describe them. The first assumption is that although Microsoft is a huge enterprise with thousands of developers, we believe that similar vulnerabilities will be mitigated by similar patching techniques. The second assumption is that Microsoft will try to fix each vulnerability with as minor as changes possible in order to avoid backward compatibility issues. This approach might be prone to patch bypasses. Last, it will be a good idea to search for zero days near a code that already been known as vulnerable. Probably the first thing you will do is to start checking if your assumptions are correct. We encountered recent public research on just one Anthos kernel function, which included five different vulnerabilities from various categories in a short block of code. We won't dive into the specific details of each vulnerability, but you can get the impression that our assumptions were fulfilled. Vulnerable code is a good place to search for new vulnerabilities. The vulnerabilities have different categories, but all are due to wrong bound checks or wrong handling of memory allocations. Now that we are more confident in the research idea, it was time to think about our research approach. Until now, patch diffing was done manually by comparing the differences of a vulnerable executable to its new code version after the fix. Furthermore, the main goal of this process was focus on understanding the root cause of a single vulnerability and building a one-day to exploit it. We aimed higher. We wanted to find zero days in the end, but is it possible to jump from root cause to zero days? We understood that in order to achieve it, we will need to build an automated process that will gather the insights from all the patches in a single searchable DB. Let's dive into our infrastructure implementation moving over to a run. We are required to take four steps in order to achieve our goal. The first step is to understand each one of the patches Microsoft released and infer the vulnerability root cause. Then we want to enrich the context of each vulnerability by correlating publicly available information about the vulnerability with each patch. The third step is to find a way to trigger the vulnerability. In other words, which actions lead to the vulnerable code? Finally, after gaining this valuable knowledge, we had to find ways to harness this knowledge for hunting zero days. Let's begin with step one. The automated process includes five sub steps. First, downloading all Windows 8 security-only updates since 2016. The reason we chose to download security updates of Windows 8 and not Windows 10 is because Windows 8 has security-only updates while Windows 10 doesn't. It is possible to discover all the vulnerabilities Microsoft ever fixed in Windows 8 since 2016 using the security updates. After we downloaded all Windows 8 security-only updates, the automated process extracts the KBs and compares the extracted files versus the older version of the same files using Bindiff Tool. Now the fun part begins. The changes are classified into groups and inserted into a database so we will be able to search for patterns. Each group represents a specific type of change and we will talk about these features in the next slides. To get some perspective on the scale we are talking about, here are a few numbers. You can see we have more than 100,000 unique functions. Each one of them may be a part of a patch, so it is clear that we need to understand which changes are interesting and which aren't. Inside the KB, some of the files are interesting while others aren't because a PE can get indirectly updated such as a change in one of its libraries. It has a huge effect. For example, GDI32 is one of the most vulnerable PEs in Windows. It has more than 26 statically linked libraries. Some of these libraries are statically linked to another libraries and so on. In addition, every PE in Windows 8 is part of a package and every time one of the PEs in the package has to be updated, the entire package is recompiled together and all the files are included in the KB. In order to detect which changes are interesting and which aren't, first, we need to understand which changes the compiler can do. It is not simple to distinguish between changes made by the developer and the changes made by the compiler because of three compilations. If you compile the same code twice, the compiler sometimes compiles it with different alignments of the code, reorder some instructions, and all other optimizations. We had to find ways to reduce the compiler noise. We chose to reduce the compiler noise using features. The features group similar changes together and allow us to look for vulnerability patterns. We developed 33 features. Most of them are in the function level, but other are in the executable level. Each feature is optimized differently. Some are optimized to have the lowest amount of false positives, while other give us the overview insights on the patch. There are two types of features, patch-related features and vulnerability-related features. Patch-related features group patches by the type of the change made by Microsoft, such as add a new function code. While vulnerability-related features group patches by vulnerability category, such as off by one, use after three, and so on. The beauty of the features line their simplicity. We'll provide some examples in the next slides. 2019, here we come. The first example of patch-related features is the number of excerpts. It is not directly linked to a specific vulnerability category. This feature compares the number of function calls between each patch function versus the unpatched version. In this example, ReadPropVariant added one excerpt to iStreamRead. Let's look into the overview of ReadPropVariant function. It is very easy to spot the change block. Let's zoom in to understand the root cause. As we can see, one call and three move operations were added. The root cause of this vulnerability is type confusion, due to the fact that ReadPropVariant reads a decimal from the file without resetting VT to VT decimal. This means that we can control the type of ReadPropVariant object. The patch added a call to iStreamRead and set VT to VT decimal to avoid type confusion. Let's jump back to 2018. An additional patch-related feature is number of conditions. It compares the patched and unpatched version to the file and looks for different amount of conditions in those functions. In this example, the patch added five new conditions to the function NTFS find files owned by SID, changing the number of conditions between 27 and 32. We can also see that we automatically add correlation between finding in our DB and public exploits. Zooming into the patch, we can see the five added code blocks in the patched file on the right. Their goal is to verify that the user has admin permissions by calling SEToken isAdmin and allowing the listing only if the user has listing permissions. Let's move to vulnerability-specific features. Tomer? Thank you, Eran. Until this point, we introduced patch-related features. Now, we represent how these patch-related features can be used to understand the vulnerability root cause. We will go over a few examples. The professor told us not to, but we are bound to break rules following our guidelines of learning from the past. We look at high-profile integer overflow vulnerability, the SMB ghost. The patch uses function rtlulongad in order to verify that the allocation size will not overflow before calling the allocation function. Is this a unique fix? Or should we expect Microsoft to use this fix method in other integer overflow vulnerabilities? Let's go back in time to the earliest patches we identified through binary diffing. We went back in time to 2016 Las Vegas Defcon 25. It seems that there is a searchable pattern for the integer overflow vulnerability category. The fix added xref to the several ulongarithmatic function before calling the vulnerable function. In this example, it calls the ulong multiply function in order to verify that the allocation size will not overflow before calling the allocation function. We constructed a list of ulong functions and added an intsafe feature. Our integer overflow feature returned with more than 200 results. We selected a vulnerability that as far as we know has not been publicly analyzed yet and see if the feature provide us with automated root cause analysis. We chose the anti-DLL patch from April 2020. The only function that was really changed was LDRP search resource section. And the change included adding both RTL ulong multiply and add functions. Indeed, the patch was implemented by verifying that the allocated mapping size will not overflow. This was done using the same ulong function for vulnerability we saw in the previous example. As far as we know this patch pattern used since 2016. So now we have a working integer overflow feature. Sometimes features are very simple but are still very effective searching for all added functions that include integrity level expand the category and provide several additional vulnerabilities. There are additional features that we've researched and found interesting. One feature is race condition vulnerabilities which are usually fixed by adding log functions. Another feature is directory traversal which are mitigated by detecting the dot dot slash in strings. We'll speak about it later. And finally symbolic link vulnerabilities which are very common and are usually mitigated by adding a check for the final path. Let's describe the second step. Patch Tuesday occurs on the second Tuesday of each month and includes a report for each patch vulnerability. The report includes important data such as name, CVE number defected OS vulnerability category and etc. It used to have a description until mid 2020. The information can help us focus on the relevant features and the related executables. We have created an automated process that uses the API for downloading of all published CVE data since mid 2016. Please note that Microsoft recently changed the API and released a new one. The correlation process consists of four steps. First, take the previously extracted patches files. Then query all CVE data using Microsoft's API. Then extract the vulnerable component name. We will refer it as VCN from vulnerability CVE name or description. And finally, correlate the CVE to the patch files based on four different correlation methods. First, we check if the VCN extracted from Microsoft's API is a Windows service. The list of Windows service names is available in the registry. As we can see, connected user experiences and telemetry is the name of Diartrex service. If the VCN is not a service name, we will check if the VCN is included in the file description of any of the system files. As we can see, compatibility appraiser, VCN is the description of the appraiser executable. The third method of correlation was built manually. We classified those VCNs based on our Windows internal knowledge. The last correlation is based on gather statistics. Past association helping understanding the correlation between VCNs and the vulnerable executable. In this example, error reporting was the VCN which was found in three patch Tuesday during 2020. If we search for files which were patched during these months and were not patched in other 22 months, we found eight possible patched files. Prince Spooler was the VCN in four monthly patches and was associated with 12 possible patched files. Next time, we will see this VCN as part of a future vulnerability report, we will be able to correlate them to those files. The four method automatically produced correlation of 90% of the CVEs. Now that we know more about the context of each patch, we can prioritize which changes are more interesting and which are less. Moving over to Iran. So we found the patch linked that to the corresponding CVE and found which type of vulnerability it was. Now, how do you find which PE can trigger that code? Who is calling that PE? And which functions are called? Our goal in step 3 is finding out how to trigger the vulnerable function and generate the code that will trigger it. There are two sub steps for this step. First, find which executables can trigger the vulnerable code. And the second generates the code with the correct input to trigger the vulnerability. We added new features that will extract all the function calls from all the PEs in Windows. And for all the versions in order to generate a call graph from or to any function in Windows. We are talking about a very large scale. We are talking about more than 6 million function calls. Our graph is just like the graphs in AIDA but across binaries and huge. With the data we collected now we can create a call graph across the entire Windows system. In the picture you can see a visual representation of the call graph we created in order to find which functions are called Unwrap XML invitation. Later on we will demonstrate how we are going to use this function in post-exploitation scenario. We support multiple ways to detect a function call from function to another. Low time linking, the common way to call for an external function run time linking such as get proc address and com servers and clients. We generate these graphs for Windows 8 and Windows 10 because after all we want to find zero days in Windows 10. In addition to creating the graphs we collected information we need to choose which functions are the most interesting. We do this by looking for a function which are close in terms of distance to the vulnerable function verifying whether or not the function is exported and even scraping the Internet. We collected information and code examples about each function from multiple sources such as MSDN documentation and scraping project in GitHub. Using existing examples from the Internet is much quicker than writing them ourselves, especially when we are talking about non-documented functions. But we found that even that wasn't enough. We are still missing lots of functions so we had to find additional ways to generate POCs. So we want to have the option to trigger all RPC servers quickly. RPC is a common inter-process communication. It can be over network or locally. RPC calls use ideal interface definition language to set up the communication between the clients and the servers. In order to communicate with an RPC server we have to include the corresponding IDL file. Therefore, we would like to extract from Windows as many IDLs as possible. Since the original version of RPC View supports extraction of a single interface IDL we use a modified RPC View tool to extract all IDLs with all the interfaces. The extracted IDL file includes dozens of structs and unions. Most of them raise compilation error due to order of definition. So we fix that as well. RPC View works on the running RPC servers so we had to start all of them. After running a script to automatically start Windows services we got 150 running services. After we extracted the IDL from the RPC View we used the automated process. For each interface the automation created a new project. Setting the relevant parameters for the code and compile it using MS Build. In the end we successfully automatically generated 127 working projects. We'll provide a specific example of how easy it is to exploit the task scheduler ALPC vulnerability using our semi-automated process calling some of the functions that the IDL exposes. We generate and compile a template project. The project includes two files. The IDL and the short generic template for setting the needed RPC parameters for compose a RPC binding. In this example they provided UUID the protocol the RPC endpoint name are relevant to the task scheduler RPC. This template allows us to call each RPC functions that we would like to trigger. After the automation created our project with all the dependencies comes the manual part writing the exploit itself. All we need to do is call the correct functions with the correct input and we'll get a working project. We'll get privileged escalation. In order to exploit this vulnerability we created an hardlink and did two RPC calls. The first RPC call creates a folder in the task scheduler folder and the second RPC call sets the permissions. This will trigger the task schedulers to set the permissions of our executables resulting privileged escalation to anti-system. Moving on to Tommy. Until this point we covered how we can understand the root cause and trigger a one day in scale. But how do we find zero days? We will use the xxc vulnerability as an end-to-end example to demonstrate the four step process from zero to zero day. We enrich our db with the vulnerability category named CWE for each vulnerability. Then when we queried our db for the different CWE categories we noticed the 611 category improper restriction of XML entity reference with six relevant vulnerabilities. Let's query to see more details about them. We eventually found eight patched vulnerabilities six of them with full details in our db. So we were curious what is this vulnerability category. As described by CWE using XML with an external entity allows remote file read. Sounds very interesting. Let's dig deeper in order to understand how xxc happens. xxc vulnerabilities occur in xml parcels. When the xml contains a reference to an external entity such an HTTP server, this external entity can get the content of local files. xxc vulnerabilities contain multiple parts. The upper entity is the input to the xml parser. The xml parser reads the content of the file system ini and then sends a request to the attacker server to get the rest of the xml. The second entity the lower one is the response of the server. When the xml parser parsed this response it generates an additional HTTP get request with the content of the file system ini. This is according to the standard of xml and in order to prevent this feature in the xml parser the dtd which stands for document type definition must be disabled. Let's analyze the patches and understand the root cause of these xxc vulnerabilities. The patch for CVE 2018 0878 added four conditions to a functions called loadRA ticket in the MSRA executable. We know that the MSRA executable is used for Windows remote assistance where a basic user can set an invitation ticket to advance user to log in to either agent and remotely assisting. This function probably loads the invitation ticket. The loadRA ticket creates the xml DOM document COM object and uses it to load and parse the xml invitation file. In the patch version of this function in order to disable the support for external properties, four properties were added, restrict document, excel script, externals and prohibit dtd. The rest stay the same calling put async and load functions. We also followed the xref to the user COM CLSIDs. We will get to it later. We wonder is there a pattern for xxc patching? So we developed a feature to search for all added library dtd patches and found three past patches. Let's verify the first patch in the upnp host. We can see that HR load documents now calls the restrict DOM document. Let's see who also calls this patch function. The ISAPI extension executable was patched by calling restrict DOM document before a call to load xml. This is a different function than the load function used by remote assistance. So there are probably other vulnerable function used by the same COM object. Digging deeper, we found the third vulnerable function set xml. At this point we understood the root cause and defined the conditions for exploiting the vulnerable code. Let's dig into the first condition. We developed a code to trigger COM object. First, we queried all CLSIDs from all the files in Windows 10. Then, for each CLSID, we enumerated all functions and interfaces. Then we generated source code which created each one of the COM objects. And finally we called all these functions with an xxc xml file as input. We automatically discovered the vulnerable COM objects through the filtration data by adding the vulnerable CLSID to it. As we can see, we found 4 COM interfaces and 16 vulnerable CLSIDs. We developed a new feature to detect all the locations that seems to be vulnerable to xxc. This feature is different from other features. It does not compare between unpatched and patch version. Instead, it searches for xxc condition in all Windows 10 executables. Eventually, we found 52 candidates. 25 of them are marked as possibly vulnerable. They will be vulnerable if one less condition is met. If we are able to control the input of the past xml. For example, we can see the nsarray patch function loadarrayticket which is patched, while at the same time, they load and sort array invitation history function might still be vulnerable. Let's see if we can control the input xml. At the bottom, we can see the patch xml DOM object that was used in the original vulnerability and was called from loadarrayticket. To our surprise, there is a second instance of the exact same vulnerability xml DOM object just a few commands above used by several functions including our possibly vulnerable function load and sort array invitation history. Load and sort array invitation history indeed uses the vulnerable load function. We can see that the file to be loaded is the parameter a2. The gettingVitationManager loaded function calls our vulnerable function with the xml file ra contact history from app data. This file is controlled by the user with no need for admin privileges. This is the history data read from a legitimate ra contact history xml file that we changed to contain the address 1111 as the previous IP requested remote assistance. Now, we know how to trigger the vulnerability. So let's begin with the fun stuff. On the bottom left we see the MS array that was run with offer array as a parameter. It can be reached also with double click on MS array. In Procmon you can see the read action of the raxport history file and it's also its content which includes the export code. On the right we can see the first DTD get request for xxcxml which reads a remote file ctos 10 machine and exfiltrate it to the ctos server using a second get request. Microsoft fixed this MS array vulnerability we found and assigned it the ID CVE 2021 34507. In total we discover six vulnerabilities. All were reported to Microsoft. We will go over them one by one. The most critical vulnerability we found was the vulnerability in the windows help. We sent a spear phishing mail with a compressed attachment of an html file we named the html file to include .chn twice. This forced the vulnerable process hh executable to pass it although it's plain html and not a chn file. We can choose almost any extension to this file and it will still be passed. We tested the attack on default fully patch windows 10 machine and got blocked by the mark of the web mechanism but when we compressed the attachment even without encryption it bypassed the sandbox and exfiltration was successful. The third vulnerability we found in MMC include several snappings. The link to a web address snapping expects an html file but if we will provide an xxc xml exploit instead it will be passed by mshtml dll we can see on the top right that it will read the remote file and exfiltrate it to the c2 server it will provide an error message which includes the content of the exfiltrated file to trigger the windows media player remote file read vulnerability you will only need to open the option screen and select the network tab this will trigger vulnerable passing of the xml file which we can control on the right you can see the stack trace. Please pay attention to the calling of the vulnerable load function from mshxml3 dll. Moving over to Iran In addition to finding vulnerabilities in native code we wanted to discover zero days in managed code so we added a feature that decompiles all .NET executables in windows 10 using ispy ispy decompiles each executable to a visual studio solution with c-shop files the files look very similar to the source code even the parameter names and function names are kept we search inside all the .NET files for known processes and functions that are vulnerable or configured to use .DTD all the .xml parsers with .DTD processing enabled are vulnerable to .xxc such as .xml text reader we found two .xxc vulnerabilities in official windows sdk executables we found vulnerabilities in .xsd a utility to generate schema from given source and another in .xsltc in order to exploit the vulnerability in .xsd it is required to execute it with a path to .xml file which contains the .xxc unlike .xsd .xsltc requires multiple parameter so it is a little bit more complex to trigger in addition to the vulnerabilities we found we found two .xxc post exploitation techniques we can use them to exploit text files using .dll signed by Microsoft instead of using suspicious network APIs this increase the odds for bypassing security controls the first one is peer group parse invitation it is documented function found in msdm and the root cause of the .xxc found in internal function named unwrap .xml invitation we traced back to find which function it is called from using our call graph we found multiple options but we could not find any attack vector that can trigger these functions without calling one of them ourselves the second post exploitation technique is found in .xsml in PLA .dll in order to trigger that function we used one of the examples provided by msdm so we had to change only few lines of code in June 2020 Microsoft released a fix to CVE 2020 1300 it is a directory traversal vulnerability you can see that they declared to have fix it on windows 8 among other windows versions based on our correlation capability between CVE report and the relevant patch files we understood that the patch provided partial coverage so we dug deeper using our directory traversal feature we searched for any function with ..slash or ..backslash as an argument we found that on June 2020 Microsoft indeed patched two files local SPL and win32 SPL but the patch to the printBRM engine was done only in August we compared the patch to the patch of windows 10 and found that on windows 10 all three files were patched in June does it mean that windows 8 was vulnerable to a one day for two months the printBRM engine executable was patched only in August and with the same patch logic used in windows 10 in June adding two WCSTR function for mitigating ..slash attacks the printBRM engine was not patched in June 2020 we verified that in windows 8 in June it was vulnerable to one day attack of CVE 2020 1300 the printBRM engine allowed importing of a CUB file if the CUB file contains a file name that contains ..slash Charles it will extract the file to an attacker controlled location such as system32 webm which is prone to DLL hijacking we proved that it was possible to have RCE on fully patch windows 8 between June and August 2020 with a one day we also found an additional unpatch to issue in 2020 this time the vulnerability provided arbitrary delete capabilities more research is needed in order to determine whether this is a new opportunity for finding low hand game force or just a coincidence Microsoft Response regarding the MSRA vulnerability the bug was fixed as part of July patch Tuesday regarding the other vulnerabilities no fix is currently planned since they don't meet Microsoft Service Bar we are encouraging you all to use and expand our tools that will be published today we think that the vulnerabilities we found are just the tip of the iceberg we would like to credit multiple researchers we based our research on top of their previous research thanks for joining moving on to the Q&A session