The broadcast is now starting. All attendees are in listen only mode Good morning traders. Welcome to the bookmap pro trader webinar series. Today. We have Faustal Plieze from Cybertrading University We've had him a couple times before here. So looking forward to the presentation Faustos the CEO of Cybertrading University and one of the early so's bandits who You know, they dominated trading the Nasdaq stocks back in the 1990s After semi-retiring as a successful trader in his early 20s Faustal develops his own trading school Faustal is a 12-time champion of the money shows traders challenging challenge, which I've seen him when as well And is known for his live trading events where he gets to prove how well his trading methods work in real time risk disclaimer trading futures equities and digital currencies involves risk of loss and is not suitable for all investors Past performance is not necessarily indicative of future results. Here's the contact information for bookmap if you're interested now Here's the contact information for Faustal As as usual here, I will copy and paste all of this into the chat for you. Okay, so here it is here and You should see it there so that you can access His his website his email. He has a free trial here And then special offers that he he offers from bookmap. Okay, so Let's just jump right in and without further ado. Let me just give it over here to Faustal All right. Thank you very much Bruce. Hold on. You just get to share the screen There we go. All right. All right. Welcome everybody. Welcome bookmap members Let me just get a little chat back if you guys could hear me a lot and clear Jeffrey Jerry. Good to see you. All right, everyone else Are you there Tom? All right. Good to see you Taz Perfect. All right. Good. Good. Good. Well, listen. I'd like to thank bookmap and Bruce to have me here again Let me tell you Regarding about the bookmap, I mean, you know, I want to get right into the training part of it But I think a lot of us should kind of understand the value of what why I'm here and why I'm Helping promoting bookmap and I just want to kind of just touch upon something very important I Don't need to do an intro Bruce did it. If you know my history, that's great You know, I want you to understand that I've been teaching for over 20 Years I live here in New York I was trained by the best traders in the world and I work for some of the best trading day trading firms in the world now The reason why I bring that up is that when I started I learned on something called Nasdaq workstation 2 and if you go to my website, you'll see I did a I'm a frequent guest on the nasdaq on their show talking about Nasdaq total view now I'm always getting approached on, you know, fasty. You gotta look at this platform fasty You gotta look at that platform fasty fasty. You gotta look at and honestly Every single one of them is a Lager. Okay, but I could tell you this I The way I was trained is that you have to follow the money that's basically it you just follow the money and Back then we had an internet machine and level 2 was technically was level 2 and it was good back then but it got outdated in the late 90s and You know and so I've been using nasdaq total view and I do a lot of presentations And when I when I start talking about it, it's a light bulb.  I tell people well, guess what there's something even better than nasdaq total view It's called book map and when book map originally approached me Actually, I didn't they didn't approach me I approached them because I've been trading for so many years and I have some unbelievable Traders in my room and they and one of my traders that also you got to check out this platform It's everything you teach.  I see hundreds of them. They're all junk. He goes. No, no, no, no You got to check this one out And the only reason why I checked it out is because some of the traders in my room are are high seven figure traders And they're like no fowse. I'm making a lot of money with this thing.  So I teamed up with book map and I am 100 1,000% Backing this product because it's we use it every single day. Honestly, I can't trade without it. I really can't Okay, there are other platforms that we use but what this does is just hands down unbelievable now What I'm about to show you everyone today Is I'm gonna, you know, I'm gonna show you how I use the platform How do how I utilize it and I know we have a lot of different types of traders here So I'll try to do the best I can to Commodate, you know, beginners, intermediates, advanced and experts, which is I have a question to ask everyone because I've been here a few times and I've got some very good feedback and I have not got so many very good feedback Due to a way I approach things. So and this is the only reason why I need to know exactly who's in this room So can everyone just give me a chat back in this room? Let me know. Are you a beginner on book map? Are you an intermediate advanced expert? Just want to get a kind of feel of The experience of book map people that are in here right now. Okay, Mark.  You just started Chuck Can't trade without a Tom. My god. You do like music to my ears Retail futures on traders beginner intermediate just started Okay, we only got about two advanced Eric and Robert advanced okay all right, so Kind of couple of advanced. All right so we do got a lot more beginners and intermediates which is great and that's why we hear and So I want to I want to go over the ways I utilize it And then hopefully some of you advanced people will kind of see a little bit more of the other things that we do with it Okay, so that that's that's that's very important to me. All right. So anyway, did anyone trade? I am RN did anybody see the stock I am RN Hey, great good to see you the cyber trader night as student of ours anybody here we traded yesterday, okay? No one traded this doc. Come on guys. What are you afraid? Don't be scared. No one's good No one's gonna get mad at you. No one's going Some of you did see it. Okay. Yeah, the stock went from like you could see here 11 o'clock Hold on me get my pointer out here. So you guys can follow along So the stock went from like $6 at 11 o'clock and then from 12 o'clock is shot to 18 Did nothing and then right at the close Which is where we trade the most the first hour in the last hour the stock ran from literally 14 It went all the way to almost $30 huge winner. Okay, and by the way, I'm not here to talk about the winners I know there's losers There was a fast talk with the winners but the losers listen the point is this I'm not here to brag and put feathers in my cap and tell you I'm the best What I'm here to do is is to explain to you Why did the stock go up and how do we know was gonna continue to go up because we utilize the book map platform? Okay, that's where it comes down to it and there's a lot more out there Okay, this is just one of several that we traded So I just want to kind of just let you know what our style is now first of all I know that there's futures traders forex traders Crypto's and day traders stock traders. I'm just gonna let you know guys Don't ask me about futures. Okay. Don't ask me a cryptocurrency this and that I am not any of those I'm not a jack-of-all trades. I am a day trader. I'm a stock day trader and that's what this presentation is about But you could see it you could utilize it for everything and me personally I always tell everybody Every single one of you should know how all the markets work Okay, especially if you're not making money within 30 days after trading that market You shouldn't be you should make consider doing a different market Not but before we do that on I want you to know. How do we find? I am RN now as a day trader I Don't care what I trade. I Don't want to know what I trade It just doesn't matter what I trade all I'm here to do is make money That's it. I'm here to make money and that's why I'm here to trade and that's what I'm like here to teach you guys I'm here to teach you guys how to go out there and find stocks And give you the least amount of risk with the high amount of reward and by utilizing the book map So remember the book map is The last tool of all the tools in the toolbox. Okay You can't use book map if you don't even know what you're trading You understand it's all about risk to reward. So Hope for some of you here if you ever watched us You know, listen, I'm on YouTube live every single morning for free everybody there And you'll see me you utilize and showing you the stocks I find and and what's going on in book map But this is my this is my little secret here. I Just trade I just go through the big percentage gainers and losers That's it and you could see like here.  There were all the stocks there There was a stock right here SQBG up a hundred and twenty-seven percent But it's a twenty-nine cent stock, you know, I'm saying so like I Don't like to trade stocks under a dollar because you do intensive a penny and I'm not I'm not a penny stock guy You know what I mean? Because it's kind of hard to see a lot of the orders out there But there were a lot of them out there that were good naked great stock Stocks that one moved, you know, if they're broke 24 cents now the stock is I mean once they break a dollar They're doing great and a KD Literally into almost a buck 60 today solo I mean NKLA that was another nice one up 26% So there were a lot of stocks in here that were up pretty big that had good volume now Huge pop just in minutes before 9 30 opening bell I am Rn How did we find I am Rn this stock ran to 30 look what happened here a 30 stock hovering hovering hovering and then all started picking some momentum And then then we got around 9 20 you got to three dollars four dollars and then bam We went to 11. All right right before the bell. By the way, do any of you guys trade in pre-market?  No, it doesn't work that way We actually start trading at 745 Eastern Standard Time To get the 8 o'clock move so and then the book map which is great because you can go back and you could look within 24 hours And see what happened yesterday so anyway Getting back to having a game plan What's the trend and Where the strongest price levels? That's all we're looking at Remember we're here to make money. That's all you have to remember so Let's look at the book map platform now now that we kind of found this stock now. We need to know exactly how to utilize it All right, so This might be a little advanced for some of you beginner's people here But hopefully I'm gonna hit the intermediate in advance, but let me kind of show you the value of the book map Yeah, Fausto. I mean just just go for it with the advanced You know, we'll go through the training in our daily webinars, etc. Okay. Okay, no problem. Yeah full full on here Okay, dive in please. Thank you. No problem. Okay, so You're both welcome. So anyway, I'm just trying to I'm just trying to hit all corners of it You'd be shocked. I still have people ask me today What is a limit order to market order and it in their trading the market?  I mean, but it happens so anyway are here in the book map you could see here We got the dots. We got the lines. We got everything. So the thing is this there there are it The heat map is just not just the most value part of the tool It's over here on the right. You got the COB at the CVP Now the COB what I utilize is this this basically tells me where all the orders are now all these orders are aggregated, okay, so, you know and and not only that I you know, I helped I helped Book map team up with trade station So you're gonna be getting some data feeds that are gonna be less money and also incorporate into your platform Which has been a great great great deal for book map and also for trade station So some of you probably know that some of these fees get expensive when you add all these ECN fees But anyway getting back to here. These right here are aggregated. What that means is this Remember, I told you about NASDAQ total view. Well, that's only one book. That is only one ECN Okay, there are other books out there. There is New York Stock Exchange Archipelago edgx bats, you know There are a lot of them. So you could aggregate more orders out there. So you're not seeing like you know 500 of 5000 shares on NASDAQ 300 shares on edgx, they're all aggregated, which is great Now the heat map obviously what with the first thing you look at is to get about the bowls and everything else The biggest most important thing you want to look at is at these red these these lines These lines right away that come to you come to you to kind of give you a Let you know where the orders are and which is right here. You could see the orders And you could see the you get these little These reds and greens so the greens are buys the reds of cells Okay, so you get to see, you know, when you're looking at a chart and you're looking at let me give you an example We bring naked over here. Okay, so you're looking at this, you know, you're looking at it. Okay No, I'm gonna fix my pointer here Marks these graphs are not easy to follow. That's my point.  No, okay, so These support and resistance levels are made from buyers and sellers Unfortunately Supports and resistance levels get broken all the time all the time How did they get broken because orders get executed, but you need to have a game plan Now when I hold on I gotta fix my book map here So I'm gonna bring a book map over here and I'm gonna click on the plus sign. I'm gonna I'm gonna naked and I'm also going to click on I don't want to go to pack I'm gonna look at six hours So it's gonna show me six hours of historical data. I'm gonna click subscribe and it's gonna load up the data right here Okay, so I'm just give it it. Let it just upload Okay, there we go So I'm gonna zoom I'm gonna move my mouse. I'm gonna zoom out. Okay, so you can see here at 9 30 You have Orders right here, okay now you'll notice that The darker reds are Orders that are out there and Then you'll have some blues and blacks means there's not too many orders out there Okay, the problem with this is this The COB is telling you what's out there now The when I show you The CVP This is telling you what was out there of the the duration of the stock which makes things a little bit easier Like right here. We're looking at NKLA, which I don't know if you guys know That's a stock we've been trading for the past week already. We're killing it with this stock And today's the first day that's on its way back up But the thing is how do you find these stocks? How do you trade them? Just like we're looking at zoom right now?  So the thing is we need to know how to follow the dominating market makers so The COB is a very important tool because it tells you exactly how many shares are outstanding now for me 300 shares is not a Substantial resistance not even a thousand but when you see 9,000 at 11 dollars 10,000 at 1120 that is a resistance levels. That's what makes her and then when you're looking down here at the bottom Where the support level was at 960, you know that and you see that big red line that was a major support level But then what I want to talk about is this You see how the line disappears right there That means a guy must have canceled his order He's not there and that's what the CV the CVP does. All right, so let me change the slide here I am I am R. Anna holds under 1150 resistance. Okay? So you can see right here how the stock went up The greens are the buys obviously the reds of the cells those are transactions the bigger the ball The more volume that's being traded which by the way, I'm gonna I'm gonna teach you something else what I do on book map To kind of eliminate a lot of these bowls because after a while then it just comes almost like a line But when you see right here, you got resistance levels You can see my little dot right here and you can see all these big orders out here look 12,000 shares here at $12 But you had another right here 6,000 But you know you can see the how it kind of dies out and then you got the support levels right here At $10 13,000 shares, but the big thing is the SVP The SVP there was six there was a hundred and sixty two thousand shares of the duration of the stock What does that really mean? Does that actually work? So those are those are transactions. So it's just a volume profile So right, okay Would that way that's all I was leaning to those of all that's volume that that has happened in transactions have taken place Am I am I right correct Bruce? Okay, but the thing is that is the that is the the Cumulation of the duration of how long I had this chart up for so if I do a a 24-hour chart It's gonna show me all those transactions took place. This one is only telling me. What's out there now? So sometimes, you know, you might see an order out there You might not see an order out there, but you might come up to a SVP order and like, you know what I might not see these big red bars out there Like over here, but then all of a sudden like, you know what they work that people own that stock for a while Let me kind of put it in layman terms Envision you you're building a building. Okay, and what do you have in a building? You got floors and ceilings, right? so Think about a floor and ceilings being built by concrete. Okay now when you walk a barrel of concrete You're pouring it. You're spurting it out. But if I stop and I keep pouring and pouring and pouring and pouring Guess what? That that that spot is going to be a very thick support level that's going to be broken now The difference between one and the other that's somebody pouring now That is someone who before poured before So if they're not still pouring out there anymore, he could it could still be a support level And that is the power of using the book map and how I use the cov and sdp Here's another example. This is actually a better example to explain it You see how m r m r n n. Um, hold on. Let me get my point there How it broke A support level right here at ten dollars Okay So you could see there's no buyers out here But there were a lot of transactions over almost a quarter million shares that were traded there But he's not there now. He was there a little bit not as much And then when you go down here, you got the reds and you could see how it kind of hit there and kind of candle itself out so You got to kind of use both Other than just only use one and that's why this that's why Like you have a major resistance levels right here at 11 of 30 000 shares and not only Is that guy out there? There were over a quarter million shares that were traded over the duration of that time zone that I had So let me kind of explain to you here on the book map Let me bring up a live feed of book map This always works So here we have Here we go. We're going to look at This one right here. Okay. So anyway And let me zoom out here. Okay. So basically you could see there's been a uh, let me go back further Okay, so you can see right here that from 9 30 this morning There's been this seller that's been sitting there All day at 69 dollars. Okay, you see that right there at 69 69 so I'll get you ready when I zoom in I use the mouse to roll in right roll out You had a major resistance levels here at 65 Busted through 65 and it went all the way to 69 Why did it stop at 69? because there was a there was a 20 000 shares seller out there, but do you notice the cvp? Says seven thousand does everybody know why it says seven there's more here and less there Anybody know why? because what because exactly what What bruce said these are transactions Right. There was only seven thousand of those shares sold. There's still 21 000 out there There's still 21 000 shares ready to be sold. Okay That is the reason for that. Hold on. Let me just x out of some of these things here because And let me just take some of these things out here So getting back to this There's still 21 000 shares are looking to be sold So it kind of goes both ways You kind of look at what happened in the past And seeing what actually got executed So So by the way, does anyone have any questions about that? Okay, it looks like There's a couple of questions here. Um Looks like the move has ordered down since it got filled tom said Right, but the guys is still out there. Remember You can't break through this resistance until you take out that 21 000 shares But only seven thousand of the duration of what i'm looking here, which is I think it's like a six hour one Only seven thousand shares of that 21 000 uh got executed Respond to selling 69 was too expensive Class of volume profit Y'all know the time you could be a little more specific on your answer, but the thing is this You have to kind of use both windows That could offset to know are these orders getting filled or not filled Because what's going to happen is this what happens if this stock breaks through 69? Right, what happens breaks with 69? Two things have to happen Somebody has to execute that 20 000 Which will come over here in the cvp or the guy's going to cancel Now we know when you break through A resistance level we go to the next resistance and that resistance becomes a support level So that's why when you notice as the day goes on This cvp number starts to grow Where the resistance levels don't until you break them Uh, I guess tom that's a question tom has a question for you bruce Oh, okay, um Let's see here Does dx feed load historical data? Yes, it does That is backfill data. Um, and when you bring up the chart, uh, just like fausto demonstrated there with uh with naked He put in six hours of backfill data tom That that comes with with the subscription So right here you can notice if I really want to I can go 24 hours Which is right here. You this is how you do that. So I click 24 hours So I click subscribe The problem is going to ask for a lot of data So it takes a little time to upload so which is awesome about this is that you know Sometimes you you think you trade a stock and the stock was very volatile yesterday and it might continue to today So sometimes yesterday's data is very very important when it comes to that. Let me, uh, let me find a a stock that we traded Today that's actually has some good volatility Uh, what do we got going on here? Yeah, this one's actually doing this one's got crazy volume Let me x out of this. Let me look at, uh GN us this one that we traded and Click over here. I'm gonna look at 24 hours Because that one's a lot that that things that stock went from 2 to 12 came back down a 2 and now it's back up to almost $4. So great volatility on that one Uh, okay, let's see if it loaded Still loading historical data See it's a lot of data That's the only bad thing about when you when you're trying to like look at sometimes you don't want to load up 24 hours data Um, but if you want to you could sometimes it because it you'll you'll you'll eat up a lot Still loading. Yeah.  You know or the transaction price. So it's only one level Uh here in book map, you can see I mean he zoomed out and looking at all the price levels They are all live any update in the order book is recorded. So we're now talking not about just you know hundreds of data points Now we're talking about millions Right, you see millions, okay So, uh, let me uh, let me X out of this And let me go back to just to show you how I kind of utilize it All right, so now the next thing I want to point out to regarding about using book map is that you see these bowls right here Okay, so if you right mouse click and you click the volume dots, okay Uh, what happens is the dots sometimes Make almost like a trend line and you know another a little tool that I do is um Is uh, I like to change this to let's say a thousand or sometimes You know, depending on the volatility of the stock, you know, I might even do 10 000, but let's just use a thousand for example Here, all right, so I click over here click on volume dots change it to A thousand click apply And you'll start seeing the dots now all of a sudden They change So I don't need to see every tick Okay, I like to I like to just focus on you know The big block orders and now you could see how the bowls obviously how they change Where you can see the green is a little bit smaller than a red and you can see a little bit more selling pressure So kind of it kind of it's If you ever look at let me bring this up really quick for you time in sales See time in sales right here So we're looking at You see how it's showing you like every single print on this so sometimes it's overwhelming and you know If you eliminate a lot of the you know Let's say there's ways of customizing your time in sales and say, you know what? I just want to see thousand share orders because what happens a time in sales is a very Important tool which by the way you do get it in the book map also But when you have a lot of data coming across it kind of like makes it very difficult To to see transactions are taking place All right, but uh getting back to this Getting back to this Zoom trade Okay And just kind of show you how things break out Just want to point to another one another big strategy that we have right here You see right here how the stock had a A bar right here and it tells you tells you how many shares and we're on the bid and ask right here as we move on You see how that or you see that green bar that green ball That guy got executed The guy got executed and then sure enough look at the stock goes to the next resistance Backed off a little bit, but the guy wasn't there anymore You could see it right there. He wasn't there anymore Guy very little busted right through it went to this guy right here A lot of orders got executed.  Remember your goal is to make money Your goal is not to lose money. It goes to make money. How do you have how do you have a goal to make money? You got to have a game plan You got to know where these buyers and sellers are and you got because remember you are just the ants on the floor You're just trying to make the crumbs And with the book map platform, you're getting those tools that are going to help you, you know Eliminate a lot of that a lot of that noise And not preparing what happened, you know in the past But most importantly how to predict the future, you know I I don't know if I could say this any better But I use this I use this um This theory every time I use my I do my my webinars And I'm gonna I'm gonna ask everybody Do you ever you ever? Feel like when you ever did a trade You feel like someone's watching you It's like every time you buy it The thing goes down and every time you sell it it goes up. Has that ever happened to anyone you ever feel that way? Just a couple of yeses or no anybody know what I'm talking about It's like dammit.  I gotta sell let me get out and then all of a sudden boom The thing goes up Ira Hathendold tom pole. Yes Paul says before book map. That's exactly where I was leading to But before I was gonna say that It's not that they're watching you You are not watching them And that's what book map does You're watching those orders out there Because at the end of the day, you're just guessing You're working on previous data That's telling you where to get in when to get out Forget about the previous data. You got to know where they're getting you got to know where they are And you have to keep in mind anybody here trading 5 5400 shares of zoom Anybody here trained 50 anybody trading on you know have a limit order right now Putting out. What is that a million dollars more than a million dollars worth of stock on an idea I don't think so and if you are you probably wouldn't be here, but you know what you could watch them Knowing that he's got an order out there Rated to sell That is how we utilize The book map at cyber trade university You follow the money But to follow the money You first have to know what's moving What's going to give you the least amount of risk with the high amount of reward Once you get that out of the way Understand the trend And then the next thing is Having the book map to know okay where you get in now I know we have a lot of students here from from cyber trade university and you guys know we very well and we do this all the time I would never Bring up a stock on book map I don't care what the stock is doing without even making sure knowing what i'm risking You understand you can't jump into a stock Without knowing what the stock is doing first You got to have a game plan You could you know You got to know what the risk to reward is Because some stocks are more volatile than others. I mean this stock look look at the stock right here. Um that we traded this We're trading right now And kla the stock went from 60 In in 45 minutes To 90 uh 690 nine dollars Okay, everyone likes a nine dollar move But could you forward chasing it at 69 and now the stock's at 65 imagine having a thousand shares of that stock a thousand shares How's that working out for you could you take a four thousand dollar loss? I don't think so And that's the way you have to look at it All right now, um by the way, does anyone have any questions? Anybody have any questions by the way? Yeah, there's a question jack is asking about Um, how you filter for your stocks in the in the morning looking at some of these big movers Okay, that's a great question. So let me bring up the a trading platform and show you what we're talking about So listen, you're more that guys you're more than welcome.  I traded this I traded that I traded this You know, what did you trade? You know that that to me? That's that's an ego that that doesn't make you money, right? What we teach is called the three tees The three tees are this tradeable friend and trap Does everybody got that? tradeable trend and trap so the first tea is going out there and making sure Is the stock got a good spread like we're looking at gnu s penny spread. Do we have good volume? You know 85 million shares. Could we get in and out of it?  So you're already down down A lot of money in that position. All right, so that's the first tea the second tea Okay, the second tea is trend You got to make sure you got a stock that's got a nice trend to it Making sure you're on the right side not the wrong side Once you accomplish that And by the way, this is what we do in our in our trading room because you can see there's a lot of stocks that are moving Look, this stocks up 300 percent. Would I trade it right now? Absolutely not. It's not going anywhere Winds okay, would I trade the stock? I mean only trade 300 000 shares. No, even though it's up 23 percent Look at the spread. It's like two dollars So going out there and trying to use book map for that Just wasting your time The third tea is once you find a stock that is tradable Less risk more reward then we go to the book map and then we check it out and say, okay. What's this stock doing? All right, any other any other questions? uh, let's see here, um, oh can you on the Uh, okay was on another stock that you had open that tom was requesting you look at the session range volume profile but You've since closed that that stock, um So let's see here, um Yeah, we have about like five more minutes. I know you guys, uh kind of a couple of questions so just Feel free to kind of tell me you guys if anybody has any other questions so we could kind of Be happy to answer them. I gotta because I actually I have to start a we have our own cyber expo That starts at 12 o'clock, which I got to get ready for Not like a full person in fact that's coming up.  So it's just it's really fantastic to watch and see how um, you know, you're applying your Uh, uh, you know your dome trading Now the book map, uh, and then looking at it and getting the bigger picture of like it historically It's like well, this is where this is where they were before they're still in the book Uh, maybe they added more. I mean For you it's just like almost like one big dome But uh, giving you the price structure and volume on it as well So well, you have you have to keep in mind, you know, uh, bruce that You know me for a long time. Okay, and then we just happened to just reconnected when book map came out and let me tell you like There's nothing That I could speak, you know and give the highest You know and thank you guys for coming out with this platform Because this is what I've been trying to build for 25 years and no one could build it But the problem that people have today Is that everyone wants to spend money on technology, but they don't want to learn how to trade. Okay, so you having the book map is worthless If you're not trading with people that are using it You know and knowing how to use it correctly Because you're going to sit there and just watch amazon all day. Okay Let me know how that works out for you. You know at the end of the day because it does it's You got to have a team of traders that are using it And that's what makes you better. So having the platform is one thing Frating with people that are very successful at it is another all right Uh, john says I I I've heard of this until I have uh, never heard of this until uh I heard a foul stolen and josh started using it john. Well, listen like I told you it's it's one of our One of our three t's that we use in our trading profile But like I told you guys I know we've got all different types of people in the market options forex futures You know the system works great, but unless you have someone that's using it all day long It's kind of wasting your time.  I mean, I know you're in new york city I mean you definitely have a tough day at being quarantined, but here I mean a lot of people a lot listen to us all over the world they don't understand I mean some of you envision and see it but Everybody wants to learn how to trade. I mean between the coronavirus and you know And everyone has to stay home and being laid off and everything It is just has been remarkable of the interest of people want to start learning how to trade And you know what you should you should start taking matters in your own hands And it's never too late to learn But you got to learn how to play the game. That's the most important part So I just want to finish off everybody. Uh, just this one last thing You know, if you want me see me have I use the book map in the remark conditions You could watch us on youtube live every morning at 9 a.m. And we also do at 2 30 But if you want to come and join me live in my professional trading room You know, everyone's more than welcome. We do live commentary. We use the platform exclusively And you'll see us how it looks like in the trading room. So, you know exactly why we're getting in and out of these positions You know about here to sell anybody and it'd be crazy, but listen, we just want to know who you are If you want to do that, it's just nine dollars for a one week trial And uh 49 after that So and like I said, if you don't want to continue you're more than happy to and it's money back guarantee But you'll have access to our trading videos on how we use book map You know, it's kind of hard to teach someone in 45 minutes how to make money We could just spark your interest But if you if you like what you hear you want to know the real truth about each trading And you want to see you see not me but watch the hundreds of people that are in our room to use it every day Then this is your chance to look into it. All right And by the way, if you do register at the end of the week, I will do a coaching class for everyone here Uh for the first 20 people obviously and then you know, and then we'll go from there and we'll talk about it Listen, the goal is is trying to find people that are successful at it that want to make money doing this We can find people that are successful at it. We'll we'll we'll do great. All right Uh any last minute questions. I got about another minute or two. Any anything else? um Well, Humphrey's uh saying here that uh, uh, he was looking more for kind of like how you You know trade a bit but and then Humphrey, I mean like uh, I think he he covered that he was showing you like, uh, you know Support new resistance uh areas there where that's where he wants to deal Uh, and then he's also showing like well, did it transact there? Uh, you know, are there are there are there are trades that took place there? And uh mixing that understanding of the volume transacting as well as are they still in the book there? Um, and then looking for you know, if if it if it's bullish and you start to see the buyers starting to come in Well, you're looking for it to go back up into Uh the the high liquidity that's on the offer And once again until you see a lot in the market we just show a couple of live things right now Personally, it's kind of slow time of the market. That's why we're doing these events right now Most of the action happens right at 8 a.m. In the morning and that's when you like State traders we only trade the first hour in the last hour. This is not a full-time job. All right and uh you know and listen, uh Regarding on some of the you know The comments in the trading room You know, listen, I know there's a lot of people out there that you know, uh You know using the word someone use bs out there The only way you're going to know this is come and check it out yourself and look at it All right The worst thing that could happen is that you learn something and you find out trading is not for you So before you actually go out there make a big investment get new computers new programs and everything You got to surround yourself with good traders and you got to do very well And you and if you really like this this platform, which you shouldn't like you should be drooling on it It should be very thankful every day for book math to even come out with it. Um You got to use it, right? You got to use it, right? Otherwise, you're just wasting your time And remember it's not You know an indicator. It's a software. It's different and that's what that people have to understand. All right All right guys, so um, thank you so much for being here bruce. Thank you for having me here It's always a pleasure. Uh, you know you having me on book map and uh, and and you know And thank everyone from your staff for coming out with this platform because it really has changed my life, too I've made so much money on this platform Uh, and there's not a day goes by. I can't live without it. You know, you know me I'm like, I'm probably your first phone call and say, hey, what's going on? We up? Are we down? What's going on? It's uh, it's definitely changed a lot. You know changed everybody. So To keep up the good work and everybody here. Thank you so much for coming here and just remember everybody To be successful in trading you have to learn before you could earn So don't lose this opportunity, you know with what's going on at the market You saw one of the biggest rallies out there go out there and maybe it's time for a new career What would you have to lose but you got to do it right the first time? Thanks everybody and uh, look forward to seeing you all in the trading room


Now we can introduce the concept of instantaneous acceleration. And that would be the acceleration at a specific instant of time. And we're referring to this compared to the average acceleration which was over a time span. Instantaneous is the default formula, so if you just hear it called acceleration or if you just see the symbol A, they're referring to the instantaneous acceleration. Now when we had average acceleration, we had it represented by the formula that the average acceleration was the change in velocity divided by the change in time. Or if we were going to graph that, it's the two points that you care about which span your time span, and it's the slope of the line connecting those two points on the velocity versus time graph. When you have instantaneous acceleration, we don't have two points to define our slope. We have one, and you can't find slope for a single point. There's two possibilities. If you have a graph where your point is on a straight section of the curve or you could have a graph where your point is on a curved section. When we talk about straight segments, what we're going to look at here is exactly parallel to what we did with the instantaneous velocity. So if you haven't watched that video, this would be a good time to go back and take a look at that one for the details. But our basic concept here is that the whole segment has the same slope, and therefore a whole segment has the same acceleration. So this green segment of the curve is a nice straight line, and we can use the end points of that segment to find the slope everywhere on that segment. So in this case, the time of two seconds is on that segment, and at that time we would have plus two meters per second squared for our acceleration, and the calculations here are exactly parallel to what we did back with velocity. Now if we take a look at this other segment over here that I've now marked in red, it's got a negative slope, and if you were actually to use the end points of the graph, you'd see that any point along there has an acceleration of minus one meter per second squared. And just like we saw with the velocities, anytime you've got a horizontal segment, the slope is zero, so there's no acceleration for that particular segment. If you've got a curved segment, again it's a little bit more complicated. You have to use the slope of the tangent to the curve. Now that's a line which is sort of coming along the graph as if where I'm going to have that thing. And once you've got that tangent down, you can estimate the slope of that tangent line from the graph. Otherwise you need to use calculus to be able to find the slope if you've got a curved segment. So that wraps up our introduction to instantaneous acceleration. If you're going to be doing the calc-based, watch the additional video that explains it in a little bit more detail.


Everybody forced here ripping 21 22 tops finest you a foot champions league soccer hobby eight bucks case number one It's random team style a few combos here. You can always find these results at latent sports cards.com There's a link and chat for you as well. Thank you for joining everybody and good luck. Let's start Let's do this. It's something big in the first case here Superfracture big auto maybe makes everybody for joining. I'll have some finest Stars now we got finest champions league Yeah, again, so it should it's two hits per minibox or per Her master box I should say and then so that should equal out to about one hit per minibox usually the cacu and Messy and fold in on the front. All right, here we go. All right Yeah, I love these are these are really clean-looking man quality looks fantastic. We've got a prize footballers is Concha chow Porto rookie I guess that's an insert. It might not just be a refractor. Oh Another disclaimer a lot of the pronunciations. I will mess up. I will do my best though. I'm not deliberately trying to say these names wrong There's a goncal base rookie refractor for sporting and a purple refractor Weston McKinney That is purple. Yeah, it's 299. There you go.  I promise. I'm gonna get better at these I Really will there's a Leo finest features Lucas in the matchup For Wolfsburg and a I'm gonna do onana rookie to 99 for Leela Am I saying that name right guys someone knows in chat. I know someone does Yeah, I'll go home and practice Lot's on we've got a Rebiger rookie and prize footballers in search is a lot on for AC leal. Okay, that's what that's what Lane was probably saying It was yeah, thank you Feel free to correct me at any time with names. I don't know how to say This rookie's there delights for Juventus on the refractor and a blue Vapor I think to 99 blue aqua vapor let's harrow Martinez for inter.  Let's harrow for inter Milan Ricky refractor a Hannibal man United and Jordan Henderson Liverpool blue aqua vapor there to 99 10 of 99 on that one Solid Henderson hit for Liverpool Havertz That is a Kyle Walker a Manchester City auto I'll Walker green 13 of 99 on Super Fractor. Let's see it We've already all rookie prize footballers fahti for Barcelona. That is a cool looking answer. I have to say price football Think they have insert autos like that Got a Stefan Tegas or T or Tiggs for Russia Dortmund rookie refractor I'm just gonna go watch soccer highlights make it home shoot Bellingham finest futures Borussia and purple refractor Kunde for Sevilla to 299 paydrey's latin Graylish prize footballers man City got a Moreeva for Leipzig rookie refractor green rookie refractor martin setriano for inter teen setriano Satriano, honeyball. That is a David Nariss refractor auto for IX Ajax as a People would people in the US probably say Got a prize footballer's deal up for man City rookie prize footballers purple rookie refractor. See say Sandra to 299 Club Rouge Ramos refractor Jude Bellingham for Borussia Nice one Dortmund Is he in Deadpool who is gospel? Finest futures you Sufa McCoco for Borussia Dortmunds and a refractor Edwin of Anders are I X Yes, I Was like a player It makes sense Deadpool's one of the movies you don't really remember the villain too much You just remember the the friends you made along the way Do the second one I was dying with a Brad Pitt cameo and all that Or they're gonna go like They're like putting together the team and there's the regular guy walks in Got Lukaku prize footballers Chelsea Got a Leroy Sonne green refractor to 99 for Bayern And just a regular guy walks in like oh, it's all flyers want to join you're in Refractors lots on a C Milan LA Galaxy legends lots on Ibrahim Refractor Otto Roberto Piccoli for Atalanta not numbered Piccoli makes me think of Piccolo from Dragon ball seats It's just the name or the instrument Piccolo prize footballers Phil Foden man City and Purple rookie refractor Felix Nemesha for Wolfsburg to 299 Refractor Jamal Muziala Bayern Finest futures Mohammed Kudus for I X and a Ray wave Karim Benzema scoring leader last year to 199 Nice Benzema for Real Madrid. That's pretty good scoring goals, and I think that's it Think that's it Sometimes is all you need to do though Listen with you. I asked the question What do you think the most unbreakable sports record of all time is pretty good for those you are Caleb Unbreakable sports record probably Cal Ripken jr's consecutive games FC Porto prize footballers rookie as con Conscious shower con shower, and I'm gonna have to touch up on that one Brazilian Portuguese names Those are tough gun Calves rookie refractor or sporting Purple refractor rookie for Barcelona Oscar Mingueza to 299 That's a good one probably Gretzky's points in a season's probably untouchable blue refractor Otto Danny Murphy for Liverpool full throwback there 150 Betsy's points in general is probably Maybe yeah, yeah Just in the 80s a little they put a crazy numbers in the 80s. Yeah Got a prize footballer son a for Bayern. Yeah, the the Ironman streak for Cal. That's not gonna ever be It's impossible Jonathan David rookie refractor for Leal and purple refractor Tim way for Leal 299 I think it was like I think it's not Has the longest streak right now And by his futures Lucas dementia for Wolfsburg and there was some Joe Thomas because I can There's a stat or something. I saw that Matt Olsen has like 230 consecutive games right now You have to play every game until 2037 And I just never happen. Yeah, so I don't ever happen either. There's no like there's never gonna be The pitchers don't pitch that much. Oh like the wins wins the wins or the losses. Yeah, or the complete games It's like 730 complete games He was like the only pitcher on the roster. Yeah, they didn't have any it's like that How many pictures you mean the picture the our our pitcher price footballers. Let's horror for enter Yeah, the Joe Thomas one is good too. There's a good one too. I saw on like reddit or something. It was like Um refractor rookie Cole Palmer for Man City and a ray wave is Mohammed Kudus for IX to 199 Like Messi's goals in a season. That's why I thought of it because you said the scoring leader last year and that like sparked it Margot refractor Otto Scholler show shorts here For man United rookie Otto Some color on one of these now a Lukaku looks gold to me. It is gold. It's the 50 price footballers for Chelsea Colors are a bit faint on these manufactured different. I think they think these are printed in Europe Prize footballers Barcelona is Fatsi on Su Fatsi Some people used to call me Fatsi refractor rookie I Think it's Teague's I think for Dortmund and A Ryan Graven birch blue aqua vapor to 99 for IX Graven birch Raven birch What was the Premier League team he was with most recently? Yes, Sam, you should know this. I don't you should Finest Futures Bellingham for Dortmund All right guys grab your group break spots for tonight Personals are gonna be full for tonight already guys Also keep that in mind You're working on getting caught up on those Alfonso Davies on the Bayern prize footballers Joshua Joshua said your name first. Oh, yeah refractor Benjamin Sesco for Salzburg and purple refractor Frankie D Young Barcelona to 299 What if he's related to Paul blue autos then bought men rookie for leal Blue rookie auto 150 big frozen fan This is a Jadon Sancho Manchester United Prize footballers inserts and Jordan Henderson purple for Liverpool Out of 299 had another think it was the blue vapor for him earlier Fractor is Louise Muriel for at the Lanza and finest futures a mod for man city Sorry, man United. Excuse me. Man United halfway through short here not refractor but a Price footballer is lots on for AC Milan We hit I think it was just one cal ripian today and it was in definitive Robinson Come a venga refractor for Real Madrid Gaze Namor green auto Aiden hazard There you go, Real Madrid 92 of 99 of the green refractor auto Nice hits Yeah, Holland is a is Dortmund in this thought I had a checklist about to get you a leak, but I don't have it up Got so was lie prize footballers For Leipzig and a ray wave honeyball Manchester United rookie to 199 Ray waves For nice color nice autos pretty much what fine. This is about rookie refractor as a Luca Suchich Salzburg finest futures page three Go and since shuriuns Paul Schultz Very nice haven't seen one of those yet. That's just too short of printed very nice Manchester United Paul Schultz Cool hard man. Centurions. That's a throwback right like a 1988 design. I Don't know if it says here. I think it says it in the checklist though, and again. That was a pagerie for Barcelona big names though Erling Holland Lionel Messi Namor Ronaldo There's a few others Zlots on price footballers insert for a C Milan and a prize footballers pure cinch Why is that one so different? It doesn't play a color blast Nice one Chelsea skulls. Okay. Thank you. Yeah, this one says pf Case it is it a case hit it didn't say that at all on the checklist Also help me with the Parallels Benzema refractor for Real Madrid Got gold auto Liverpool Naco Williams to 50 nice gold auto. It's good box Niko Williams Suba slide price footballers for Leipzig purple Liam de la Proquie man city It's 299 out of yummy refractor Salzburg or out of yummy and pagerie finest futures Insert Barcelona. See I just want to check something out guys on the checklist real quick Footballers fusion there's 20 20 cards Yes, you know Those are cool then it must be I mean, it's all big names. So it must be Yeah, it doesn't have odds or anything on the checklist, but the other one did the base obviously one of the bags We'll go with case it's Yeah, I was gonna say it looks it looks a lot nicer than the others. Yeah, there's a good Rolling we have a Lukaku price footballers for Chelsea Romelu Lukaku Tonali refractor AC Milan purple refractor new no Mendez rookie for PSG to 299 Refractor Otto Yusuf Demir Barcelona rookie Non-numbered on the Demir rookie Otto three's mom there Prize footballers Phil Foden man city Leventowski refractor Bayern Ronaldo Kudas future our finest futures IX and ray wave La Crosse for Wolfsburg La Croix. Yeah, it's really clean rich. The inserts are awesome. Yeah, the the quality is Fantastic a prize footballers grailish from man city guys. We have three more cases of this tonight Actually to start the afternoon actually start the evening breaks There's a lot Refractor Matisse delights or Matthias delights Juventus, and honestly is out for last year's finest baseball The quality on these is better rookie refractor Otto for Moriba for Leipzig Non-numbered and a ray wave rookie is Noah Mbamba for club Rouge long super factor Prize footballers Dilat for man city rookie there refractor Antonio Blanco for Real Madrid Rookie refractor The rookie logo on these is throwing me off. It's not like the baseball Mococo finest futures Borussia Dortmunds and Erling Holland purple refractor Borussia Dortmunds 42 of 299 There we go, there he is Where'd he where's he transferring to ease with man city and he is off to a hot start I Just I mean I just think I started There They should give him dual citizenship, so you play the whole cup Now with England though Not with them Nobody wants that that thunder right here already. There's that someone picking up the trash. What's going on? Longer prize footballers Bruno Fernandez man United Super Fractor Super Fractor Refractor kudos for I X Mohammed kudos Why Casper you're not a man city fan Although refractor Otto David Nairis another one for I X there. That's a second refractor Otto David Nairis Go Tottenham, baby Sonny de Bruyne prize footballers man city and purple Tim way The leal to 299 purple refractor Makes sense makes total sense then refractor Leo Messi There we go PSG Still looks weird honestly new no Mendez finest futures PSG rookie and a Tony Cruz Centurions again, these are a little shorter printed We go Tony Cruz for Barcelona. Oh, I'm a great excuse Real Madrid Got my gun got my Barcelona Madrid mix up. I'm gonna get yelled at now. Oh, yeah, I'm done Yeah, I'm done. I'm gonna get I'm gonna have like the people flares chasing me down at the next soccer game I soccer match I go to Zlatan AC Milan prize footballers Refractor Karim Benzema for Madrid Refractor Otto Rafael Leal for AC Milan Non-numbered and purple there he is. There's our guy. Chelsea Christian Pulisic 28 of 299 take us to the promised land Christian World Cup champs So was live prize footballers for Leipzig Incredibly Nicola Barrella or Barrella Barrella for inter dowsky, Patri, finest futures and Junior Dina at Bimbe PSG rookie green to 99 the green is like a lime green Maybe it is just lime green. What does it say here? What if it is just lime green? Neon green I like that the colors are different than in like baseball the US won the World Cup it would have like political implications Everybody should be honestly and you know people that didn't watch soccer before we should be talking smack the whole time Oh, yeah, the whole time I Would not celebrate. I don't think I would I'd be like Like no, I wasn't rooting for him. We got one of those Fusions coming up We got Graven birch prize footballers IX and The soba's lie prize footballers on the prize footballers fusion. What it's called. These are super cool, man nice soba's lie Or Leipzig, right? Refractor Demir rookie for Barcelona mainly because like it wouldn't mean nearly as much I Would be like, oh cool. Anyway, yeah, I'm gonna go watch the Colts play the Browns now And nice refractor auto for AC Milan Pietro Pelegrini AC Milan, I think one has had a few hits nice ones, too Well, yeah, you're Chelsea fan, of course you like him Prize footballers there he is He was hitched for Chelsea and a neon green a rookie a gun call. Oh, it in a CEO. It's one there Sporting Portugal refractor rookie Blanco for real Madrid to a sitch kind of all Kyle Jorge rookie finest features for Juventus Yeah, I think you'll do well with more playing time. Honestly. Oh, yeah cruise prize footballers for Madrid nice Tony cruise and Purple rookie refractor Felix the matchup for Wolfsburg to 299 see injured right now Rookie refractor man City cold Palmer that person looks 14 maybe face cold Palmer. So today, I'm not saying I'm not calling a baby he does have that that baby face and a rookie neon green auto Sydney Rebiger well, he's my beaker to 99. That's a nice hit for Leipzig Leipzig is done. Well There we go, he's the big one I learned I ripped a bunch of the stadium club Yeah, and top and top scrum UEFA and Sydney is the guy we go Gold macaroon Name our prize footballers PSG or a wave is an onana leal rookie to one ninety-nine but a Coonday refractor for Sevilla a rookie is a is it Javi Javi Javi Javi No, it's not got here. Yeah. Oh, that's our Martinez inter purple to 299 inter Milan Let's say as a pretty solid case. Let's do a quick recap Got two more guys. You have more at night time as well Starting 5 p.m. Eastern. Here are autos Pellegrie layout, honey man Wanted well Nerece Moriba Demir Nico Williams on the gold refractor auto it in his hard neon green auto Sven Boltman Shola short Short tier or short or short tier a probably not sure it could be short tire. I guess I Danny Murphy blue throwback there Roberto Piccolo David Nerece Kyle Walker and then lime green or neon green central tonali Luke Shaw neon green wave We had the purest it's price footballers fusion and a Sydney at Revigor and Leipzig and neon green auto to 299 ice rookie hit there. That's gonna do it everybody. Thanks again. We've got more finest coming up


So, about our next speaker, he's a security researcher focused on embedded systems, secure communications and mobile security, he was nominated by Forbes for the under 30 in technology and also has won a Oba's AppSex CTF. He has also found and disclosed responsibly multiple vulnerabilities and especially for you Nintendo fictionados, I want you to watch out for the next intro, which is really amazing and you will all love. Thank you very much. Damn it. Oof, what a trip. Welcome to my talk on hacking the new Nintendo Game and Watch Super Mario Brothers. My name is Thomas Roth and I'm a security researcher and trainer from Germany and you can find me on Twitter at Ghidra Ninja and also on YouTube at StacksMachine. Now this year marks the 35th anniversary of our favorite plumber, Super Mario. And to celebrate that, Nintendo launched a new game console called the Nintendo Game and Watch Super Mario Brothers. The console is lightweight and looks pretty nice and it comes pre-installed with three games and also this nice animated clock. The three games are Super Mario Brothers, the original NES game, Super Mario Brothers 2, The Lost Levels and also a reinterpretation of an old Game and Watch game called Ball. Now as you probably know, this is not the first retro console that Nintendo released. In 2016 they released the NES Classic and in 2017 they released the SNES Classic. Now these devices were super popular in the homebrew community because they make it really easy to add additional ROMs to it, they make it really easy to modify the firmware and so on and you can basically just plug them into your computer, install a simple software and you can do whatever you want with them. The reason for that is that they run Linux and have a pretty powerful ARM processor on the inside and so it's really, it's really a nice device to play with and so on and so when Nintendo announced this new console a lot of people were hoping for a similar experience of having a nice mobile homebrew device. Now if you were to make a Venn diagram of some of my biggest interests you would have reverse engineering, hardware hacking and retro computing and this new Game and Watch fits right in the middle of that and so when it was announced on the 3rd of September I knew that I needed to have one of those and given how hard the NES and the SNES Classic were to buy for a while I pre-ordered it on like four or five different sites, a couple of which got cancelled but I was pretty excited because I had three pre-orders and it was supposed to ship on the 13th of November and so I was really looking forward to this and I was having breakfast on the 12th of November when suddenly the doorbell rang and DHL delivered me the new Game and Watch one day before the official release. Now at that point in time there was no technical information available about the device whatsoever like if you searched for Game and Watch on Twitter you would only find the announcements or maybe a picture of the box of someone who also received it early but there were no teardowns, no pictures of the insides and most importantly nobody hacked had hacked it yet and this gave me as a hardware hacker the kind of unique opportunity to potentially be the first one to hack a new Nintendo console and so I just literally dropped everything else I was doing and started investigating the device. Now I should say that normally I stay pretty far away from any new console hacking mainly because of the piracy issues. I don't want to enable piracy, I don't want to deal with piracy and I don't want to build tools that enable other people to pirate stuff basically but given that on this device you cannot buy any more games and that all the games that are on there were basically already released over 30 years ago I was not really worried about piracy and felt pretty comfortable in sharing all the results of the investigation and also the basically the issues we found that allowed us to customize the device and so on and in this talk I want to walk you through how we managed to hack the device and how you can do it at home using relatively cheap hardware and yeah hope you enjoy it. Now let's start by looking at the device itself. The device is pretty lightweight and comes with a nicely sized case and so it really for me it sits really well on my hand and it has a nice 320 by 240 LCD display, a D-pad, A and B buttons and also three buttons to switch between the different game modes. On the right side we also have the power button and the USB-C port. Now before you get excited about the USB port I can already tell you that unfortunately Nintendo decided to not connect the data lines of the USB port and so you can really only use it for charging. Also because we are talking about Nintendo here they use their proprietary tri-point screws on the device and so to open it up you need one of those special tri-point bits.  After opening it up the first thing you probably notice is the battery and if you've ever opened up a Nintendo Switch Joy-Con before you might recognize the battery because it's the exact same one that's used in the Joy-Cons.  Next to the battery on the right side we have a small speaker which is not very good and underneath we have the main PCB with the processor the storage and so on and so forth. Let's take a look at those. Now the main processor of the device is an STM32 H7B0. This is a Cortex M7 from ST Microelectronics with 1.3 megabytes of RAM and 128 kilobytes of flash. It runs at 280 megahertz and is a pretty beefy microcontroller but it's much less powerful than the processor in the NES or SNES classic. Like this processor is really just a microcontroller and so it can't run Linux. It can't run let's say super complex software instead it will be programmed in some bare metal way and so we will have a bare metal firmware on the device. To the right of it you can also find a 1 megabyte SPI flash and so overall we have roughly 1.1 megabyte of storage on the device. Now most microcontrollers or basically all microcontrollers have a debugging port and if we take a look at the PCB you can see that there are five unpopulated contacts here and if you see a couple of contacts that are not populated close to your CPU it's very likely that it's the debugging port and luckily the datasheet for the STM32 is openly available and so we can check the pinouts in the datasheet and then use a multimeter to to see whether these pins are actually the debugging interface and turns out they actually are and so we can find the SWD debugging interface as well as VCC and ground exposed on these pins. Now this means that we can use a debugger so for example a J-Link or an ST-Link or whatever to connect to the device and because the the contacts are really easy to access you don't even have to solder like you can just hook up a couple of test pins and they will allow you to to easily hook up your debugger. Now the problem is on most devices the debugging interface will be locked during manufacturing. This is done to prevent people like us to basically do whatever with the device and to prevent us from being able to dump the firmware potentially reflash it and so on and so I was very curious to see whether we can actually connect to the debugging port and when starting up J-Link and trying to connect we can see it can actually successfully connect but when you take a closer look there's also a message that the device is active-reprotected. This is because the chip the STM32 chip features something called RDP protection level or readout protection level. This is basically the the security setting for the debugging interface and it has three levels. Level 0 means no protection is active, level 1 means that the flash memory is protected and so we can't dump the internal flash of the device however we can dump the RAM contents and we can also execute code from RAM. And then there's also level 2 which means that all debugging features are disabled. Now just because a chip is in level 2 doesn't mean that you have to give up. For example in our talk wallet.fail a couple of years ago we showed how to use fault injection to bypass the level 2 protection and downgrade a chip to level 1. However on the game and watch we are lucky and the interface is not fully disabled instead it's in level 1 and so we can still dump the RAM which is a pretty good entry point even though we can't dump the firmware yet. Now having dumped the RAM of the device I was pretty curious to see what's inside of it and one of my suspicions was that potentially the emulator that's hopefully running on the device loads the original Super Mario Bros. ROM into RAM and so I was wondering whether maybe we can find the ROM that the device uses in the RAM dump and so I open up the RAM dump in a in a hex editor and I also open up the original Super Mario Bros. ROM in a second window in a hex editor and try to find different parts of the original ROM in the RAM dump and it turns out that yes the NES ROM is loaded into RAM and it's always at the same address and so it's probably like during boot up it gets copied into RAM or something along those lines and so this is pretty cool to know because it tells us a couple of things. First off we know now that the debug port is enabled and working but that it's unfortunately at RDP level 1 and so we can only dump the RAM and we also know that the NES ROM is loaded into RAM and this means that the device runs a real NES emulator and so if we get lucky we can for example just replace the ROM that is used by the by the device and play for example our own NES game. Next was time to dump the flash chip of the device. For this I'm using a device called Mini Pro and I'm using one of these really useful So I see eight clips and so these ones you can simply clip onto the flash chip and then dump it. Now one warning though the flash chip on the device is running at 1.8 volts and so you want to make sure that your programmer also supports 1.8 volt operation. If you accidentally try to read it out at 3.3 volts you will break your flash. Trust me because it happened to me on one of my units. Now with this flash dump from the device we can start to analyze it and what I always like to do first is take a look at the entropy or the randomness of the flash dump and so using bin walk with the dash uppercase E option we get a nice entropy graph and in this case you can see we have a very high entropy over almost the whole flash contents and this mostly indicates that the flash contents are encrypted. It could also mean compression but if it's compressed you would often see more like dips in the entropy and in this case it's one very high entropy stream. We also notice that there are no repetitions whatsoever which also tells us that it's probably not like a simple XOR based encryption or so and instead something like AES or or something similar but just because the flash is encrypted doesn't mean we have to give up. On the contrary I think now it starts to get interesting because you actually have a challenge and it's not just plug-and-plug-and-play so to say. One of the biggest questions I had is is the flash actually verified like does the device boot even though the flash has been modified because if it does this would open up a lot of attack vectors basically as you will see and so to verify this I basically try to put zeros in random places in the flash image and so I put some at address zero some at hex 2000 and so on and then I checked whether the device would still boot up and with the most flash modifications it would still boot just fine. This tells us that even though the flash contents are encrypted they are not validated they are not checked something or anything and so the device and so we can potentially trick the device into accepting a modified flash image and this is really important to know as you will see in a couple of minutes. My next suspicion was that maybe the NES ROM we see in RAM is actually loaded from the external flash and so to to find out whether that's the case I again took the flash and I inserted zeros at multiple positions in the flash image flashed that over booted up the game dumped the RAM and then compared the NES ROM that I'm now dumping from RAM with the one that I dumped initially and checked whether they are equal because my suspicion was that maybe I can I can overwrite a couple of bytes in the encrypted flash and then I will modify the NES ROM and after doing this for like I don't know half an hour I got lucky and I modified four bytes in the flash image and four bytes in the RAM sorry in the ROM that was loaded into RAM changed and this tells us quite a bit it means that the ROM is loaded from flash into RAM and that the flash contents are not validated and what's also important is that we we changed four bytes in the flash and now four bytes in the decrypted image changed and this is very important to know because if we take a look at what we would expect to happen when we when we change the flash contents there are multiple outcomes and so for example here we have the spy flash contents on the left and the RAM contents on the right and so the RAM contents are basically the decrypted version of the spy flash contents now let's say we change four bytes in the encrypted flash image to zeros how would we expect the RAM contents to change for example if we would see that now 16 bytes in the RAM are changing this means that we are potentially looking at an encryption algorithm such as AES in electronic codebook mode because it's a block based encryption and so if we change four bytes in the input data a block size in this case 16 bytes in the output data would change the next possibility is that we change four bytes in the spy flash and all data afterwards will be changed and in this case we would look at some kind of chaining cipher such as AES in the CBC mode however if we change four bytes in the spy flash and only four bytes in the RAM changed we are looking at at something such as AES in counter mode and to understand this let's take a better look at how AES in CTR works AES CTR works by having your clear text and X or in it with an AES encryption stream that is generated from a key and nonce and a counter algorithm now the AES stream that will be used to X or your clear text will always be the same if key and nonce is the same this is why it's super important that if you use AES CTR you always select a unique nonce for each encryption if you encrypt similar data with the same nonce twice large parts of the resulting cipher text will be the same and so the clear text gets X or with the AES CTR stream and then we get our cipher text now if we know the clear text as we do because the clear text is the ROM that is loaded into RAM and we know the cipher text which we do because it's the contents of the encrypted flash we just dump we can basically reverse the operation and as a result we get the AES CTR stream that was used to encrypt the flash and now this means that we can take for example a custom ROM X or it with the AES CTR stream we just calculated and then generate our own encrypted flash image for example with a modified ROM and so I wrote a couple of Python scripts to try this and after a while I was running hacked Super Mario Brothers instead of Super Mario Brothers so we hacked the Nintendo Game and Watch one day before the official release and we can install modified Super Mario Brothers ROMs now you can find the scripts that are used for this on my github so it's in a repository called Game and Watch Hacking and I was super excited because it meant that I succeeded and that I basically hacked a Nintendo console one day before the official release unfortunately I finished the level but Toad wasn't as excited he told me that unfortunately our firmware is still in another castle and so on the Monday after the launch of the device I teamed up with Conrad Beckman a hardware hacker from Sweden who I met at the previous Congress and we started chatting and throwing ideas back and forth and so on and eventually we noticed that the device has a special RAM area called ITCM RAM which is a tightly-coupled instruction RAM that is normally used for very high performance routines such as interrupt handlers and so on and so it's in a very fast RAM area and we realized that we never actually looked at the contents of that ITCM RAM and so we dumped it from the device using the debugging port and it turns out that this ITCM RAM contains ARM code and so again the question is where does this ARM code come from does it maybe just like the NES ROM come from the external flash and so basically I repeated the whole the whole thing that we also did with the NES ROM and it just put zeros at the very beginning of the encrypted flash rebooted the device and dumped the ITCM ROM and I got super lucky on the first try already the ITCM contents changed and because the ITCM contains code not just data so earlier we only had the NES ROM which is just data but this time the RAM contains code this means that with the same extra trick we used before we could inject custom ITCM code into the external flash which would then be loaded into RAM when the device boots and because it's it's a persistent method we can then reboot the device and let it run without the debugger connected and so whatever code we load into this ITCM area will be able to actually read the flash and so we could potentially write some code that gets somehow called by the firmware and then copies the internal flash into RAM from where we then can retrieve it using the debugger now the problem is let's say we have a custom payload in somehow in this ITCM area we don't know which address of this ITCM code gets executed and so we don't know whether the firmware will jump to address 0 or address 200 or whatever but there's a really simple trick to still build a successful payload and it's called a knob slide a knob or no operation is an instruction that simply does nothing and if we fill most of the ITCM RAM with knobs and put our payload at the very end we build something that is basically a knob slide and so when the CPU indicated by Mario here jumps to a random address in that whole knob slide it will start executing knobs, knobs, knobs and slide down into our payload and execute it and so even if Mario jumps right in the middle of the knob slide he will always slide down the slide and end up in our payload and Conrad wrote this really really simple payload which is only like 10 instructions which basically just copies the internal flash into RAM from where we can then retrieve it using the debugger so woohoo super simple exploit we have a full firmware backup and a full flash backup and now we can really fiddle with everything on the device and we've actually released tools to do this yourself and so if you want to backup your Nintendo Game and Watch you can just go onto my github and download the Game and Watch backup repository which contains a lot of information on how to back it up it does it does check something and so on to ensure that you don't accidentally break your device and you can easily backup the original firmware install homebrew and then always go back to the original software we also have an awesome support community on this court and so if you ever need help you you will I think you will find success there and so far we haven't had a single bricked game and watch and so looks to be pretty stable and so I was pretty excited because the quest was over or is it if you ever claim on the internet that you successfully hacked an embedded device there will be exactly one response and one response only but does it run doom literally my Twitter DMs my YouTube comments and even my friends were spamming me with the challenge to get doom running on the device but to get doom running we first needed to bring up all the hardware and so we basically needed to create a way to develop and load homebrew onto the device now luckily for us most of the components on the board are very well documented and so there are no NDA components and so for example the processor has an open reference manual and open source library to use it the flash is a well known flash chip and so on and so forth and there are only a couple of very proprietary or custom components and so for example the LCD on the device is proprietary and we had to basically sniff the SPI bus that goes to the display to basically decode the the initialization of the of the display and so on and after a while we had the full hardware running we had LCD support we had audio support sleep support buttons and even flashing tools that allow you to simply use an SWD debugger to dump and rewrite the external flash and you can find all of these things on our github now if you want to mod your own game and watch all you need is a simple debugging adapter such as a cheap three dollar ST link a J-Link on S or a real ST link device and then you can get started we've also published a base project for anyone who wants to get started with building their own games for the game and watch and so it's really simple it's just a frame buffer you can draw to input is really simple and so on and as said we have a really helpful community now with all the hardware up and running I could finally start porting doom now I started by looking around for other ports of doom 2 and STM32 and I found this project by flop is called STM32 doom now the issue is STM32 doom is designed for board with 8 megabytes of RAM and also the data files for doom were stored on external USB drive on our platform we only have 1.3 megabytes of RAM 128 kilobytes of flash and only 1 megabyte of external flash and we have to fit all the level information all the code and so on in there now the doom level information is stored in so-called WAD what wears all my data files and these data files contain the sprites the textures the levels and so on now the what for doom 1 is roughly 4 megabytes in size and the what for doom 2 is 14 megabytes in size but we only have 1.1 megabyte of storage plus we have to fit all the code in there so obviously we needed to find a very very small doom what and as it turns out there's a thing called mini what which is a minimal doom I what which is basically all the bells and whistles stripped from the WAD file and everything replaced by simple outlines and so on and while it's not pretty I was pretty confident that I could get it working as it's only 250 kilobytes of storage down from 14 megabytes now in addition to that a lot of stuff on the chocolate doom port itself had to be changed and so for example I had to rip out all the file handling and add a custom file handler I had to add support for the gamut watch LCD button import support and I also had to get rid of a lot of things to get it running somewhat smoothly and so for example the infamous wipe effect had to go and I also had to remove sound support now the next issue was that once it was compiling it simply would not fit into RAM and crash all the time now on the device we have roughly 1.3 megabytes of RAM in different RAM areas and for example just the frame buffer that we obviously need takes up 154 kilobytes of that then we have 160 kilobytes of initialized data 320 kilobytes of uninitialized data and a ton of dynamic allocations that are done by chocolate doom and these dynamic allocations were a huge issue because the chocolate doom source code does a lot of small allocations which are only used for temporary data and so they get freed again and so on and so your dynamic memory gets very very fragmented very quickly and so eventually there's just not enough space to for example initialize the level and so to fix this I took the chocolate doom code and I changed a lot of the dynamic allocations to static allocations which also had the big advantage of making the error messages by the compiler much more meaningful because it would actually tell you hey this and this data does not fit into RAM and eventually after a lot of trial and error and copying as many of the original assets as possible into the minimal IWAT I got it I had doom running on the Nintendo Game and Watch Super Mario Brothers and I hopefully calmed the internet gods that forced me to do it now unfortunately the USB port is physically not connected to the processor and so it will not be possible to hack the device simply by plugging it into your computer however it's relatively simple to do this using one of these USB debuggers now the most requested type of homebrew software was obviously emulators and I'm proud to say that by now we actually have kind of a large collection of emulators running on the Nintendo Game and Watch and it all started with Conrad Beckman discovering the retro Go project which is an emulator collection for a device called the Odroid Go and the Odroid Go is a small handheld with similar input and size constraints as the Nintendo Game and Watch and so it's kind of cool to port this over because it basically already did all of the hard work so to say and retro Go comes with emulators for the NES for the Game Boy and the Game Boy Color and even for the Sega Master System and the Sega Game Gear and after a couple of days Conrad actually was able to show off his NES emulator running Zelda and other games such as Contra and so on on the Nintendo Game and Watch this is super fun and initially we only had really a basic emulator that you know could barely play and we had a lot of frame drops we didn't have nice scaling v-sync and so on but now after a couple of weeks it's really a nice device to use and to play with and so we also have and Game Boy emulator running and so you can play your favorite Game Boy games such as Pokemon, Super Mario Land and so on on the Nintendo Game and Watch if you own the corresponding ROM backups and we also experimented with different scaling algorithms to make the most out of the screen and so you can basically change the scaling algorithm that is used for the display depending on what you prefer and you can even change the palette for the different games we also have a nice game chooser menu which allows you to basically have multiple ROMs on the device that you can switch between we have safe state support and so you if you turn off the device it will save wherever you left off and you can even come back to your save game once the battery run out you can find the source code for all of that on the RetroGo repository from Conrad and it's really really awesome other people built for example emulators for the chip 8 system and so the chip 8 emulator comes with a nice collection of small arcade games and so on and it's really fun and really easy to develop for and so really give this a try if you own a Game and Watch and want to try homebrew on it. Team SureVegan is even working on an emulator for the original Game and Watch games and so this is really cool because it basically turns the Nintendo Game and Watch into an emulator for all Game and Watch games that were ever released and what was really amazing to me is how the community came together and so we were pretty open about the progress on Twitter and also Conrad was Twitch streaming a lot of the process and we opened up a discord where people could join who were interested in hacking on the device and it was amazing to see what came out of the community and so for example we now have a working storage upgrade that works both with homebrew but also with the original firmware and so instead of one megabyte of storage you can have 60 megabytes of flash and you just need to to replace a single chip which is pretty easy to do then for understanding the full hardware Daniel Cuthbert and Daniel Padilla provided us with high resolution x-ray images which allowed us to fully understand every single connection even of the BGA parts without desoldering anything then Jake Little of Upcycle Electronics traced on the x-rays and also using a multimeter every last trace on the PCB and he even created a schematic of the device which gives you all the details you need when you want to program something or so and was really really fun. Sender Wonderwell for example even created a custom backplate and now there are even projects that try to replace the original PCB with a custom PCB with an FPGA and an ESP32 and so it's really exciting to see what people come up with. Now I hope you enjoyed this talk and I hope to see you on our Discord if you want to join the fun and thank you for coming. Hi, wow that was a really amazing talk thank you very much Thomas. As announced in the beginning we do accept questions from you and we have quite a few. Let's see if we managed to make it through all of them. The first one is did you read the articles about Nintendo observing hackers like private investigators etc and are you somehow worried about this? Oh what's going on with my camera looks like Luigi messed around with my video setup here. Aha yeah I've read those articles but so I believe that in this case there is no piracy issue right like I'm not allowing anyone to play any new games if you wanted to dump a Super Mario ROM you would have done it 30 years ago or on the NES Classic or on the Switch or on any of the 100 consoles Nintendo launched in between and so I'm really not too worried about it to be honest. I also think that the aspect of the target audience is to be seen here so after the next question which is did you think that there is a reason why an external flash chip has been used? Yeah so the internal flash of the SM32 H7B0 is relatively small it's only 128 kilobytes and so they simply couldn't fit everything in like basically even just the frame buffer even just a frame buffer picture also is larger than the internal flash and so I think that's why they did it and I'm glad they did. Yeah sure and is the decryption done in software or is it a feature of the microcontroller? So the microcontroller has an integrated feature called OTF-DEC and basically the flash is directly mapped into memory and they have this chip peripheral called OTF-DEC that automatically provides the decryption and so on and so it's done all in hardware you can even retrieve the keys from hardware basically. Oh okay very nice and also and the next question is somehow related to that is in your opinion the encryption Nintendo has applied even worth the effort for them it feels like it's just there to give shareholders a false sense of security how what would you think about that? I think from my perspective they choose just the right encryption because it was a ton of fun to reverse engineer and try to bypass it and so it was an awesome challenge and so I think they did everything right but I also think in the end it's such a simple device and it's like if you take a look at what people are building on top of it with like games and all the kind of stuff I think they did everything right but probably it was just a tick mark of yeah we totally locked down JTEC and yeah but I think it's fun because again like it doesn't open up any piracy issues. Sure and the one thing is related to the knob slide which you very very well animated so wouldn't start of sub-routines be suitable as well for that for that goal the person asking says that a big push are four are five etc Instructions are quite recognizable how would yeah. Yeah so absolutely so the time from finding the data in the ITCM RAM and actually exploiting it was less than an hour and so if we would have tried to reverse engineer it would be more work like absolutely possible and also not difficult but just filling the RAM with knob took a couple of minutes and so it was really the easiest way in the fastest way without fiddling around in GDRA also. Okay cool thanks and this is more a remark than a question. The person says it's strange that an STs AN 5281 does not mention a single time that the data is not verified during encryption. I think it's more a fault on STs than Nintendo site. What would you think about that? Yeah, I would somewhat agree because in this case even if you don't have JTAG like an ARM thumb instruction is two to four bytes and so you you have relatively small space to brute force to potentially get an interesting branch instruction and so on. So I think it's yeah I mean it's it's not perfect but also doing verification is very expensive computational wise and so I think it should just be the firmware that actually verifies the contents of the external flash. Okay, so we I think we should two questions more and then we can go back to the studio. The there's a question about the AS encryption key. Have you managed to recover them? Yes we did but so there is an application of by ST and they do some crazy shifting around with the keys but I think even just today like an hour before the talk or so. A guy who's also or sorry I'm not sure this guy a person on our Discord actually managed to to rebuild the full encryption but we I personally was never interested in that because after you've downgraded to RDP zero the device you can just access the memory map flash and get the completely decrypted flash contents basically. Sure, thanks and last question about the LCD controller whether it's used by writing pixels over SPI or if it has some extra features maybe even backgrounds or sprites or something like that. So the the LCD itself doesn't have any special features. It has one SPI bus to configure it and then a parallel interface where you so it takes up a lot of pins but the chip itself has a hardware called LTC which is an LCD controller which provides two layers with alpha blending and some basic windowing and so on. Okay, cool, then thank you very very much for the great talk and the great intro and with that back to our main studio in the orbit. Thank you very much back to orbit.


Hi everyone, Daniela from K-array here. Today I'm in a beautiful theater and a pop band is ready to play, but where is the PA system? Well, if you're looking for big, heavy boxes, you're not going to spot it. The PA system, in fact, is composed of only extremely discreet, four-inch wide columns, supported and driven by self-powered subwoofers. This system is actually the combination of three compact portable systems KR802 merged together to create a larger system for this large theater. From an acoustical point of view, these columns are really unique, composed of only identical, closely spaced, full-range loudspeakers. These columns show true, pure line array characteristics. They are able to cover long distances uniformly, minimizing at the same time the amount of energy sent towards the ceiling and the floor, thanks to a very high directivity in the vertical plan. But why is that? Which are the physical principles and the practical applications of a true, pure line array? Well, we have covered all these in a webinar dedicated to pure array technology in live sound. If you want to know more, I really recommend that you watch the entire webinar, which, as always, is available on our website, www.k-array.com, in the K Academy section. Our webinars are free to watch and available in multiple languages, so I hope you enjoy it and see you for the next video.


Well, there's plenty to be distracted by in a classroom, but far too many children are distracted by hunger. At Murphy Elementary School in Grand Rapids, the staff has started a food shop to ensure that no student has to worry about if or when they'll have their next meal. Mel Meyer has that in this week's Golden Apple. The new Thunderhawk Connections program will help students and their families with more than just a good lunch, but other supplies to stay focused in school. We gotta go! Second Harvest, North Central Food Bank first approached Independent School District 318 two years ago about using a grant for a food shelf. It was previously unable to accommodate the needed space until this year. To have the Second Harvest Food Bank support, our families in need with a food pantry has been very valuable to us. There has been an overwhelming need for assistance in the district. The school's principal says 40 to 60% of families receive free or reduced price lunches. So although we might be 60%, it's actually higher because that 60% of the families filled out the application, turned it in and qualified. But even getting to lunch is part of the issue. If your major focus is, I'm hungry right now, math is kind of a secondary feature for you. Brian Fiddledyce says some of his students have had to ask him for food before. Three of his students have started to use a pantry for snack times. I'd have several students that don't have available snacks, perhaps haven't had breakfast. They'll frequently come to me looking for a little something to get them to the lunch period. The pantry will provide these basic necessities that families might not otherwise have.  These issues are happening across the district, according to Kathy Fanin, who works at Southwest Elementary. Over to I have families who are right now homeless or do not have food for their family. So that's where I come in and help with resources throughout our community. Other resources like the food bank may be overwhelming for some. I think sometimes people are nervous to go to that food bank in our community. It might be too big or a little bit scary. The School and Second Harvest hopes this discreet service expands to other schools over time. It's a huge need in the Itasca County area and hopefully we can grow it into other schools. In Grand Rapids, I'm Mal Meyer, Lakeland News. The grant will provide supplies for the next two to three months. The school will then have to look for sponsors or receive donations to run the free service. Great program, good to be able to highlight that on Lakeland News. It certainly is. If you've enjoyed this segment of Lakeland News, please consider making a tax deductible contribution to Lakeland Public Television.