So, we have discussed displacement work quite extensively so far, derived the expression for displacement work and also went through a few examples illustrating the application of integral PDV. Notice that the most important thing is to actually identify the system. When you before you apply integral PDV, you must identify the system, then apply integral PDV to that system, especially to those parts of the system that are undergoing deformation. So, the P is the pressure in that part of the system which is undergoing deformation and the DV is the change in volume in that part of the system which is undergoing deformation that is very, very important and that is the reason why we went through many examples in the beginning when we discussed the definition of system to demonstrate how to properly define a system. So, that is very, very important, defining the system is very, very important. So, that deals with displacement work. Now, there are also other forms of work. We will discuss a few of these which are of relevance to engineering thermodynamics. The next one is shaft work. So, when we apply a torque T to a shaft and it turns through an angle theta, then the work done is given by, work done is nothing but the torque T times the angular displacement. Now, if under the action of this applied torque, the shaft begins to rotate at a speed of say n revolutions per minute or 2 pi n radians per minute, then the work done is nothing but T times 2 pi n joules per minute or in other words, the shaft power is given as 2 pi n times torque divided by 60 watts. When we supply a shaft power for let us say T seconds to a device, then the work that we have supplied is equal to 2 pi n torque times the duration divided by 60 joules. So, we will be making use of these expressions in examples that we encounter later on. Electrical work, we saw how a battery supplied electrical work. So, when a current of I amps is supplied from a source across a potential difference of V volts for a duration of T seconds, then the electrical work done by the source is given as V times I times T. So, it is a product of the voltage times the current times the duration for which the current is supplied. Spring work, we have already seen this when a linear spring of stiffness K Newton per meter is compressed by an amount of X meter work done on the spring. Notice that this is work done on the spring is half K X square or work interaction for the spring is minus half K X square. So, these are the forms of work that we are likely to encounter in our course. There are many other forms of work and expressions for these are available in standard literature, but these are the forms of work that we are going to that we are likely to encounter. Another one or another form of work is the so called paddle or stirring work. This occurs in many applications in mechanical engineering as well as chemical engineering where contents of a vessel have to be stirred to maintain a temperature or to maintain the composition homogeneous and so on. So, we have a paddle. So, this is called a paddle or a stirrer. So, shaft work is supplied to the paddle and the paddle is turned as you can see here and it ensures that the contents are maintained at the uniform temperature composition and so on. Now, we do not actually develop an expression for paddle work. Paddle work is either given or is an outcome of the analysis. So, we do not do anything more than that, but it is actually in our best interest to define the system in this manner because when you define the system in this manner what is that what crosses the system boundary is shaft work. In other words, we do not actually bother about how the paddle or how the work or the shaft work is transferred from the paddle to the gas inside. We do not worry about detail. We need not worry about details like that. If we define it like this, the only thing that crosses the system boundary is shaft work and we already have an expression for shaft work that we can use for the analysis. So, it is better to define the system in this manner for this particular situation. This concludes our discussion on work. So, we have looked at displacement work in great detail, tied it up to the definition of a system. We have looked at other forms of work also and that is about all we have to say on work. The next item that we take up is heat. In fact, heat is actually much easier to deal with because we do not even look at the details or develop any expression for heat. The heat transfer in the thermodynamic analysis is either given or you are asked to calculate it or in certain cases, we can take it to be zero because it is simply stated that there is no heat transfer. So, we take it to be zero. Nevertheless, we will just take a quick look at heat and heat transfer just to get an idea because some concepts from here will be essential later on when we start talking about heat transfer to engines and so on. So, heat transfer between two bodies takes place because of a temperature difference and a means of communication. So, there must be a temperature difference and there must be a means of communication between two bodies. If any one of them is absent, then heat transfer cannot take place. Heat is supplied to the system from a source which is at a higher temperature or heat is rejected by the system to a sink which is at a lower temperature. So, we can see that heat transfer always takes place from higher to lower temperature. So, when we supply heat to a system, we do so from a source at a higher temperature. When we reject heat from a system, we do so to a sink which is at a lower temperature than the system itself. In many engineering applications, the ambient is usually the sink to which heat is rejected. That is part of the problem or that is in fact, the problem which is which we are encountering today as devices operate and reject heat to the surroundings. Although the surroundings may be infinite, eventually after some point in time, temperature surroundings will begin to increase. So, we rejection of heat to the surroundings results in thermal pollution. In engineering thermodynamics, we are not actually interested in how this heat is transferred to the system. As I said before, the heat transferred to the system is either asked for or it is given to us. And the sign convention for heat is similar to what we did for work interaction. Remember, we are talking about engines. The engines are of interest to us in engineering thermodynamics. So, we supply heat to an engine so that it produces some useful work for us, which means that the sign convention for work is what done by a system is positive or done on the system is negative. Similarly, heat supplied to a system is positive, heat rejected by a system is negative or heat removed from a system is negative. That is the sign convention for heat. Now, once again depending on where we draw the system boundary, an interaction may be classified as heat interaction or work interaction. You may recall that we have insisted on the location of the system boundary because both heat and work or interactions of the system with the surroundings. The magnitude and sign of work as we have demonstrated before depends on where we draw the system boundary. Now, that becomes even broader depending on where we draw the boundary, something may be classified as a heat interaction or as a work interaction. So, for example, here we have a vessel in which there is a resistor. So, we supply current to the resistor and so the resistor undergoes omic heating and that heat is transferred to the gas or whatever is inside the vessel. Notice that there is no loss of heat from the vessel to the surrounding. So, this hatching indicates that the vessel is insulated and does not permit any transfer of heat across it. So, there is no heat going in or coming out from the ambient. So, here we supply heat due to omic heating, the temperature of the contents increase. So, when I draw a system like this which includes everything inside the vessel including the resistor, the only thing that crosses the system boundary is work and there is no heat interaction because we have an insulation. So, the heat interaction is zero and the work interaction is negative because electrical work is supplied to the system. When I do it like this, very clean, very simple, very nice. On the other hand, I may also choose to define a slightly more complicated system like this. So, this system includes just the gas, it excludes the resistor, but includes the gas in the vessel. For this system, notice that there is no work interaction because no part of the system boundary deforms, there is no shaft work, there is no electrical work. So, W is zero for this system. On the other hand, the omic heating from the resistor is actually transferred to the system. So, what is transferred, what crosses the system boundary in this case is heat. So, Q is positive. Remember, we are supplying heat to the system here. So, Q is positive and W is zero because no form of work interaction takes place for this system. So, this demonstrates clearly that depending on where we draw the system boundary, something may be classified as heat or work and depending on the manner in which we are supplying heat. So, which is why we laid such great emphasis on the definition of the system, looked at all the subtle aspects of the system and we went through so many examples to illustrate how to draw the system. So, before you begin any analysis, it is imperative to actually identify the system and then apply the equations to that system, integral PDV to that system, identify deforming parts of the system boundary, identify what crosses the system boundary, shaft work, electrical work, whatever, identify that and then go through the analysis. So, it is very, very important to define the system properly and keep track of the system boundary. So, let us summarize what we just said. Both heat and work are non-zero only when there is an interaction of the system with the surroundings. What is that? It is tempting and in fact, there is a misconception in this case that because there is omic heating and the contents are getting heated, there is a notion, misplaced notion that heat is supplied to the system. So, in this case, notice that heat does not cross the system boundary. Only work, electrical work crosses the system boundary. So, the heat transfer inside this vessel is inside the vessel that is not crossing the boundary. So, it cannot be classified as heat interaction. There is heat transferred between the resistor and the air or gas inside the vessel, but that is not a heat interaction of the system with the surroundings, which is a very important point. So, heat and work or non-zero only when the system interacts with the surroundings. If something, if heat transfer happens inside the system, that is not a heat interaction. So, any change that happens inside the system is only a conversion from one of the forms in which the system can store energy into another. So, basically, we are supplying electrical work and the electrical work is converted from work into temperature or energy of the system. So, that is what is taking place inside the system. What crosses the system boundary is what we define in thermodynamics as work or heat. So, one must be very, very careful with the terminology because heat is such a common terminology work is I mean work is such a common word, heat is such a common word used extensively. There is a danger that it can be misunderstood or misrepresented, but you must understand that in thermodynamics, both work and heat must cross the system boundary. So, what we will do in the next lecture is take up first law of thermodynamics for a system. So, we have not talked about work, we have not talked about heat, we will put both of these things together and write down first law of thermodynamics. So, work, heat and change in properties of the system is what we are going to discuss in the next lecture.


We've got some admirers here Jeff, that 105k stage this morning, were you disappointed that was camp? No, too much of a lottery in here really and well I just enjoy this shorter stage but I'll get a bit puffer than the 105k, it's a long way. In fact the car sounded pretty crisp. Yeah, it's going well, we fixed the wheel wheel leg this morning with the extra service and otherwise we've got no problems, I'm really happy. Oh good, look forward to the south of Moon then. Too right, see you in in the cargo. Yeah! Let's break it, Cluthor and we've been up on a stage up in these hills in the back here. It is cold, mightily cold. In fact the 105k stage that goes all the way looping around the Lammermore range and ends up down by Lake Onslow was cancelled this morning because the snow was too thick to get through. Even the four wheel drives in front of the cars couldn't get through it. So a much shorter day for the guys, some are happy about that some not so happy. Simon, we thought of you this morning and that 100k stage, were you a little disappointed it was cancelled? 100% disappointed, the fact that last year or four years ago when I was last here that that was the stage that I went off in and that was the end of the rally so yeah I would have loved to have gone through there and completed the stage and finished it. So yeah to my big disappointment and that is but I think that it's probably worked in our favour a little bit with the Dutson, the Dutson he's pushing really hard now and that would have been a stage that he probably had a bit of advantage on. So from that point of view I'm happy so it's a balance isn't it? John we thought of you this morning, not only for the work overnight but a 100k stage that might have given you some chance to make a bit. Were you disappointed? No, the cancellation of that 105k stage probably saved our bacon today. We came through that first stage okay. Second gear change on the transport, bang jammed in third gear. So took us an hour to change the gearbox on the side of the road and with that stage being cancelled allowed us enough time to change it and arrive at the next stage without any penalties so we're still penalty free. We've made a few more mods to the car. In the last stage we had the bonnet pin come out of the right hand side so we did half the stage with the bonnet up about a foot which was quite daunting to think that there was only one pin between being able to see and being who knows what. What else do I have out of screw come out of the roof bent that fell into my lap and I thought that it was a snake or a spider or something so I looked down and when I looked up we went on the road anymore. Do you want a tip? Do you want a wee tip? No snakes or spiders. No snakes, yeah well hopefully all our snakes and spiders are gone now but the wind blew our bonnet up when we were doing the gearbox we had the bonnet up and the wind so strong that it blew the bonnet up and smashed our new windscreen so we'll be on a windscreen 3 by the end of the day but hey that's how things have gone today well maybe tomorrow is going to be our day. I'd have to say your luck's actually holding quite well. Yeah I think I'm on par actually.


that we'll call the special meeting for the Sixth Junction Board of Trustees to order for Tuesday, February 17th. Does anybody have any agenda additions or changes for tonight? Seeing none, nobody's charming up. I don't have any, so no need to approve the agenda. Move into public to be heard. Now's the point in time of the meeting where if there's anybody in the public who wishes to say something to the Board of Trustees that is not on the agenda, now's the time to do so. Go ahead and pause 20 seconds in case there is anybody. Talk to my dog. No worries. I just wanted to make sure I wasn't like, you know, picking my teeth or anything. You know, so on that note, nobody had asked to speak to the Board. The only business item we have is an item for the executive session. So if somebody wanted to, or I'll just go ahead and I'll make the motion that the trustees enter into executive session to discuss the evaluation of a public official in accordance with one BSA section 313A3 and to include the HR director. Second. And is there any further discussion on that motion? Hearing none, all those in favor signify by saying aye. Aye. Aye. Aye. Anybody opposed? Great, so that passed unanimously. Kathy, I see your hands up. So I was just curious about if you expect an extra motion at the end of this. Nope, there will be no other motions. There will be no other decisions to be made. So as far as Kathy, as far as you're concerned, Marguerite, I assume you as well, we're all set. So you could send me times and motions to exit and adjourn and I will write up the minutes for you. Perfect, I appreciate that. Thank you. Good evening everyone. Bye bye Kathy, good to see you. Good to see you too. All right.


Thinking about becoming an online fitness coach, you're going to want to watch this. Our next caller is Caitlin from British Columbia. Caitlin, how's it going? How can we help you? Hi. Thank you so much for this opportunity. It's so cool to be able to ask you guys a question in live time. Before I get to my question, I just wanted to say thank you guys so much for the work that you do and the information that you share. I've been listening to Mind Pump since I started weightlifting two and a half years ago, and I have learned so much from you guys. So thank you so much for what you do. Thank you, Rad. Thank you. So my question is, I listened to your podcast with Jordan Shallow, the Muscle Science one, and I found that super fascinating. And I really like Shallow's approach. And so I've been thinking about taking his Prescript Level 1 course. But I wanted to hear from you guys, your advice on if there's any other online programs that would maybe cover some of the same principles that Shallow does, that the biomechanics and the anatomy and the programming and working with injuries that would be comparable. And for context, I'm not a certified trainer, but that's something that I'm thinking of maybe pursuing. And Jordan Shallow's course doesn't offer that certification yet. So I wanted to hear from you guys because I know you're always talking about the fitness industry will tell you this, but this is what's actually true and what you should actually be doing. So yeah, I wanted to hear from you guys. Yeah, DeFranco CPPS. Oh, that's a good one, right? All day long. I can't promote it enough only because there's a lot of certifications out there that are recommended as kind of introductory like an ASM or a lot of ACE and things that'll just at least be a national recognized certification. But CPPS, I think of all the ones that I've sat through and gone through myself breaks it down on the most applicable level. So it's just it gives you tools to then actually go and train a client and feel confident in that. Yeah. Caitlin, are you going to be a trainer in a big box gym or online coach? Like what's your goal? No, it'd be online. Okay. Okay.  But since you don't or you're not going to, you don't. So we can just recommend the ones that we think are the most valuable for online coaching. NCI exceptional, exceptional certification for online coaches. They also spend a lot of time teaching you how to build a business, which other certifications don't do at all. And if you're going to be an online coach, you need to learn how to build your business online. Otherwise, you can want to help as many people as you want. But if you can't build a business around it, well, then you're not going to be able to do it. Jordan Shallows Prescript, excellent, excellent certification. Joe DeFranco, CPPS certification, another excellent certification. Those would be the three that I would recommend off the top. I don't think national certification is a great investment. If you don't need the national certification, because I know CPPS and Prescript will cover what you're going to learn from NASM and then some. And then NCI is going to help you with the nutrition coaching component and the building your business component. And if you did like NCI and Prescript or a combination of those, you're going to be in really, really good position to build yourself a nice online coaching business. I think those three are perfect. The order I would do them in, maybe I would go either CPPS first or NCI first. Depending on your preference. Yeah. I think Shallows to me would be kind of the pinnacle of those three, right? Super comprehensive. Yeah. His is, I mean, if you're more into the nerdy stuff, you're going to love his the most because I think he goes real deep and that he's absolutely brilliant and that's why we partnered with him. So I definitely recommend that one for sure. You'll get more practical stuff, I think from NCI and CPPS. I think those ones will, and probably the most general for training clients would be Joe DeFranco's, the CPPS, but probably the most applicable to like training online clients would be NCI. Yeah. They're going to really teach you how to build your business too. Doug, we have links for NCI and Prescript, right? Places we can send her to. Yeah. So for Prescript, it's mindpumpl1.com. You can go over there and sign up for NCI. We do have our weekly coaching that we're doing. So that's under mindpumpnci.com. Okay. I believe we actually have a link for CPPS as well. I'll look for that. Okay. Yeah. So those would be the best ones. And then here's what else I think is going to, let me ask you this real quick. Before I do what I'm about to do, I want to make sure I make the right decision here, Caitlin. What made you want to be a trainer or a coach? Well, I have some people that I'm like unofficially helping right now because I have a home gym and they, there's things that come up that I feel like not equipped to help them with. And I really want to be able to help them in like a safe way to get stronger and not have injuries. They're keeping them from doing things in life. So that's, that's a big, that's the biggest reason why. Okay. And what has fitness done for you? Like obviously you, you work out and you found a passion for it. Like why, why do you want to make this as a career from that standpoint? Because I've really seen its importance and the value and how it's really allowed me to do things in life way better. And like without injuries or back pain, that's really common. And it's helped my, like my mind and it's, it's helped in like a lot of areas. And then there's a lot of spiritual lessons too in it, I find that I can learn. And so, and then when I see other people that are maybe hindered because they've got injuries or because they're not fit. And I just want to be able to help them be able to not be hindered like that. Okay. Well, you know, our favorite people in the world are coaches and trainers. I mean, we've made, that's not a secret. We know what you, the kind of work that you do and the impact that you make on people's lives far more impactful than what we do on the show. We reach a lot of people, but we're not making the impact that good coaches are. And so anytime I get the opportunity, I want to equip a potential trainer or coach with his, with his, as much information and good stuff as possible to really help you do a good job. So here's what I'm going to do, okay? Cause we also have things that can help you out and we have really good workout programs. We've, we've got a lot of experience you can learn from our workout programs. So here's what I'm going to give you, Caitlin, if you promise to pursue this as a career and really do a good job as a coach or trainer, I'm going to send you our maps anabolic maps performance maps aesthetic bundle. That's the RGB bundle. Those three cornerstone routines will show you some good general workout programming. And I'm also going to send you the prime bundle because maps prime and maps prime pro are probably the two most valuable programs that we have for trainers and coaches. They're going to teach you, uh, applicable correctional exercise, which is going to bring tremendous value to your potential clients. So we're going to send all of that over to you, but I want you to pay it forward. I want you to pursue this and do a damn good job. Okay. I want you to go change some lives. Okay. Wow. Thank you so much. No problem, Caitlin. Thanks for calling. Okay. Bye. Bye. I love hearing that. I know I just give away a bunch of stuff. It's almost Christmas.  She's 21. And look, here's the truth. The truth is it's a hard job. I don't mean a hard job. Like, uh, it's hard to help people. That's hard too. It's hard to make a career. It's not an easy job to get started for sure. It's just, it's just, you know, yeah, but here's the deal though.  You show me someone who has all those certifications, listens to our show consistently, has our programs as blueprints. And you got to be, you got to be pretty bad actually, not to be successful. I mean, those are, I think some of the best certifications out there. You're listening to us on the show to help you apply it to your clients and learn from all the mistakes we made in two decades.  And she, she doesn't sound like she's quiet and shy. Sound like she's got enough personality to talk to someone. She could be very successful. What I love about it, it's all complimentary. You know, even those other certifications we mentioned, like each one of them fills a need. And if you really, if she does her due diligence and does, you know, in fact, like sign up and for those certifications, she's going to set herself way above the rest. Yeah. I mean, think back to when we all first started.  Had you had those resources? Had you had the podcasts like, you know, like we have for these trainers and coaches? And had you had these programs available?  I was going to do it anyway, but it took me a long time to get good. Like I sucked for a long time because I didn't have access to these types of resources. I mean, that's a, that's quite a bit of an investment to do all of those, right? But I'll tell you right now that that investment right there, I would take a trainer with those three certifications, those programs, that experience listening to us with that all day over a PhD in our field. That's how, that's how powerful that.   Anyway, when you build your business and you don't need to do it all in one shot, you chip away at it, right? So, but you, if you can accumulate all that over the next year or two or so, um, watch out, I guarantee the, uh, the success that you'll have as a trainer is far greater than somebody who just went through, you know, six years of schooling, in our field. That, that, the applicable knowledge that you'll get from all that. That's the key right there. Yes. Absolutely.


Hi and welcome back. This is Pookey and today I'm going to be talking to you about some Healthy alternatives to self-harm. Now before I go into providing you with a great long list And you can find plenty of those kinds of things online I want you to take a step back and have a think a bit about the purpose of self-harm and what that's fulfilling So whether you are watching this video because you're someone who self-harms yourself Or if you are wanting to support someone who you care about Maybe you're a parent a teacher or a friend or a colleague Then we need to just take a step back take a moment and stop and think why self-harm Now that means having what can be quite difficult conversation and it's about saying what's in it for you What's in it for me when I self-harm and actually thinking back to the instances when you most recently self-harmed or when the person You're working with most recently self-harmed and you stop to think why was that good? What motivated you to do it again in what way did it make you feel better and that can feel like quite hard conversation to have because if It is someone who you care about and they're talking to you about how they hurt themselves and why that felt good That can be quite tricky to manage But in order to try and move forward and try and replace the unhealthy coping mechanisms with healthier ones We need to really understand what's going on there So there are quite a range of different reasons why someone might choose to self-harm Why they might find it to be a helpful coping mechanism and if we can understand those reasons then again We can begin to think about well What other ways why me might we be able to get a sort of similar feeling a similar response in our body In a way that doesn't actually cause us harm So we might be looking for example to distract ourselves It might be that we are struggling with very very difficult intrusive thoughts or memories There are experiences going around and around in our mind. We might have a lot of anxiety Anything basically that is really preoccupying us and is filling our head with difficult stuff might mean that we want to distract ourselves And in those instances self-harm can cause a distraction because for just a little while all you're thinking about is the self-harm So if distraction is the reason that someone was harming themselves then we might suggest other means of distraction And what works best will depend on the person in question But for some people it might be drawing singing writing watching TV going for a walk Anything that will otherwise take their mind off things and this will be a little bit of trial and error But if distraction is the key think of other things other activities that might help to distract the mind Another reason that many people give for self-harming is that the physical pain of self-harm is easiest to manage than the emotional pain If they're struggling with for example abuse or maybe they are having difficulties with relationships that are very hard to manage or they might be struggling with depression or anxiety Anything where there is kind of deep emotional pain and they're actually focusing on physical pain for a little while Might be easier to manage than that emotional pain And in those instances we want to think about other things that will give us a big feeling a Big kind of experience type feeling to focus on rather than causing actually inflicting physical pain and Here lots of people say that things like kind of heavy exercise might be really helpful So going for a run or doing aerobics or something like that that really kind of gets you very very active Other people say that things like having a cold shower or plunging their hands into ice might be really helpful But and another thing that can work really well is something that really kind of assaults the senses So like eating extra strong mints for example, some people evens to say brushing their teeth with a very minty toothpaste I've known people who have eaten like chili chewing gum Anything really that is kind of a whoa in the same You know give your body a bit of a shock really make you feel something So that you're taking your mind away from that emotional pain You're replacing it with a physical feeling of some kind Another reason that people often give for self-harm is that actually they find the process quite soothing quite calming That can be really hard to understand if you're not someone who has harmed themselves and found this response But if you're working with someone and they say that they find it makes them feel calm And they find it soothing then we want to think of what other activities Might help them to feel calm in a similar way without them hurting themselves So one of the things that can work really well here for some people is physical touch So there is a physiological response that helps us to calm and feel better When we actually kind of are physically held or holding someone so hugging after I think it's seven seconds Then we begin to release oxytocin and that can really help us to calm and feel better That can really really help if we're trying to calm panic for example It's always one to check with someone first because some people will panic in response to physical touch So you know find out what works with the person you're working with Other things that might help if we're looking to calm or sooth or sooth are things like taking a shower or having a bath Might be going for a nice walk being surrounded by nature listening to birdsong If you if it's someone who practices mindfulness, you might find that helpful Listening to calming music coloring all these kinds of calming soothing activities So this is just kind of a few brief examples But hopefully it begins to help you understand that instead of just randomly picking You know what might be a good alternative strategy? We need instead to think first why? Why is this person self-harming or if it's you why am I self-harming? What about it makes me feel good? What about it motivates me to do it again? What am I trying to achieve when I do it and then thinking about what other activities? Experiences etc might help me to get a similar feeling without actually hurting myself Once we've sort of begun to identify that and Remembering it might be lots of different reasons you might self-harm for a range of reasons So you might need a toolbox of different things that you turn to at different times for different reasons And once you began to identify those different tools first of all we need to practice them at a time of calm So we need to try them out when it's not the heat of the moment so that we can practice them So that then when we need them that muscle is practiced We have tried feeling calm when listening to music and our body is used to feeling calmer when we listen to this particular playlist or piece of music and say we feel that calmness kick in and we know how to do it We've practiced it and the other thing is to try and kind of journal how you get on So keeping a journal of when you self-harm what triggered it how you felt what you did and how you felt afterwards And then also when you tried these alternative approaches and how they made you feel because that can help us a To rule out the ones which don't work because they're not all going to work But also it can help us to find chinks. It can help us to find the things that do help Even just a little bit for a little time and then we can begin to try and use those more or find other similar things The key thing here though is to remember this is going to be a process So particularly if self-harm has been going on for some time It can take a little while to undo that and it can take a while to find the things that work And they might change over time as well and things might get better and then worse again But here you can really focus on the bits that go well So if there are nine times in a week when someone didn't manage to find an alternative and they self-harm But there was one time when actually they felt the urge to self-harm But they managed to do something else instead we focus on the one time and we think what went well then How can we try and make that two times next week? And we really kind of focus in on the positives and see what we can learn from them. I Hope that that's somewhat helpful. I hope it gives you good questions to start the journey yourself or with someone that you care about and you may find some of my other videos about self-harm helpful too and My new book my new book about self-harm. I promise I didn't do the video in order just to promote the book Although I will do a video about that. So my new book looks at I'm rubbish at this self-harm. It's about self-harm It's written from the perspective of a young person who self-harm and it talks about why people do it alternatives Yeah, it's for young people themselves. It's for their friends their family professionals working with them Yeah sales pitch over because I'm clearly rubbish at that, but it I mean I'm proud of it and also yeah my dog features Anyhow hope this was helpful if you would like to Subscribe then you will be kept up to date with my other videos And if you'd like to this, please give it a thumbs up and do take a moment to comment below If you've got suggestions or if you'd even just like to leave positive or I guess negative feedback about this Okay, until next time. Thank you. Bye. Bye You


This is Think Tech Hawaii. Community Matters here. My name is Mitch Yuan and welcome to our show Hawaii, The State of Clean Energy. I have the privilege of standing in for Maria Tomei who's the regular senior host and I'm usually the junior host on this program. So I'm jumping in at the deep end of the pool. So please bear with me. So today we'll be talking about wave energy. And if we've been driving around the streets of Honolulu the last few months, we've seen a lot of waving. So I'll let you off the hook. This was our little joke that we put together before we started the show. We're going to talk about wave energy in the ocean. And I'd like to welcome our guest, Dr. Pat Cross from the Hawaii Natural Energy Institute who is the Wave Energy Test Site program manager. So Pat, welcome to the show. Good to be here. So I'm still going to do my opening monologue here. One of the things we want to do is to highlight UH and H&EI technology because I don't think the general public understands or has good insight into what we are doing to try to solve problems that we have for society in general. And the university has very active programs and some of our guests that will be appearing here have been supporting new technologies to solve our problems and in this case it's energy and how we can capture energy from waves. So that's the end of my opening monologue. So Pat, first of all, how about giving us a little bit of background, your background before you came to H&EI? Sure. I was a career US Navy officer, submarine or oceanographer. Finished my last tour in the Navy was as the oceanographer for the submarine force here at Pearl Harbor. Right. And after that I worked for a small company doing mostly Navy funded underwater acoustics and autonomous vehicles and then had this opportunity to step into H&EI and run our efforts in wave energy. So how long have you been with us at H&EI, Pat? Five years. Five long years. Five long years. Well they go by quickly, don't they? And sort of generally before we get into this subject area, what kinds of projects generally have you been doing? Well what we're going to talk about today has definitely been the lion's share of my focus the whole five years. Really focused on supporting the Navy's wave energy test site. I've dabbled in a few other things relating to OTEC, ocean thermal energy, sea water air conditioning, worked for a little while in support of some photovoltaic research. But primarily it's been this wave energy focus and specifically focusing on supporting the Navy. So I know a little bit about Pat's projects, so they're really cool projects actually and the one we're going to talk to you about is UberCool. And so to start it off and show you, give you an impression so that we're just not talking heads up here, H&EI funded a short video produced by Royer Studios out of LA. It's professionally done. So can we roll our wave energy video please? The future for wave energy is potentially limitless. And while it's understandable to think that the generation of electricity from wave energy is something that works best in rough seas, such as the North Atlantic or the coast of the Northwestern United States, there's also strong potential for the use of wave energy generators in much less energetic environments throughout the world. Here we see the Azora, a wave energy prototype being prepared for deployment to the US Navy's wave energy test site located in Hawaii near Kaneohe Bay, O'ahu for testing through Spring 2016. Being developed by four independent companies whose projects have been approved and are supported by the US Department of Energy and the US Navy. The Hawaii Natural Energy Institute is responsible to the sponsors for data collection, analysis and reporting as a means of independently evaluating the technology's performance. H&EI is also carrying out environmental monitoring to assess potential impacts these devices may have on the environments where they're deployed. One of the planned five devices are what are called point absorbers, which are essentially an ocean buoy designed to move around in the waves and the different companies have different approaches to converting that movement into electrical generation. The Azora device is a pair of vertical spars with a large heavy heave plate at the bottom underwater and then a float that extends between the two vertical spars and moves with the waves and converts that movement to electricity. Here at the US Navy's wave energy test site known as WETS, the research will be used in ongoing efforts to advance the marine renewable energy industry. At present, it's still very difficult to capture wave energy and convert it into electricity in a way that is commercially competitive with other renewables or with fossil fuels. However, population and energy demand around coastlines are both very high worldwide and the wave resource is enormous, making wave energy technology an attractive long term proposition. Ultimately, the idea for a commercial future for wave energy would be arrays of devices, not single devices like will be tested here at a scale of say 500 kilowatts or a megawatt but lots of them. That's the way we're going to get toward commercialization of wave energy is deploying it in scale. WETS is the only grid connected wave energy test site in the United States and one of only a few in the entire world. The world's eyes are really on this test site and the results that we will produce here over the next few years so it's really, it's fun to be part of. Okay, I hope you all enjoyed that video and one of the things that struck me looking at it was the actual size of these buoys. And so, Pat, how about talking a little bit about the size of these kinds of buoys and what it takes to build them and move them and all that kind of stuff? Yeah, so the one that was in the video was the Azura from Northwest Energy Innovations and that thing weighed about 45 tons and it's about 50 feet in length or height depending on when it's in the vertical doing its thing, it's about 50 feet. So that sounds big but we've actually got some coming down the pipe that are much larger than that. There's one coming in the spring of 19 from an Irish company that's more than 10 times the size of that. 10 times? Wow. That's like a small ship. 800 and some tons. It is. It is. Yeah. Like a small ship. Very good. So one other thing I wanted to talk about before we pull up your slide is can you talk about the permitting and the layers of permitting that are required to put in a test site like this here in Hawaii? Yeah. So this is a good time to emphasize that this site is a Navy site. So the infrastructure was put in place with Navy funds so the Navy had to pursue an environmental assessment, actually two of them for the two different parts of the site. And the one that established the two new deeper test berths took close to three years of exhaustive effort with NOAA and with local cultural concerns and with the Marine Corps base and just a lot of entities weighing in. And so it's a long and cumbersome process. The good news about all that is that the Navy has undertaken that and passed the test basically and therefore the site is permitted which allows these developers of wave energy machines to come in and deploy their devices with a much simpler permitting process to go through. So months instead of years of permitting. So this allows us to attract these businesses to Hawaii because we have a capability that they need, permittings largely in place as you say. So what kind of economic activity is this generating for Hawaii, you know, ballpark? Yeah, I don't know if I can throw out any numbers but certainly we're still in fairly early stages. I feel like I've got enough gray hairs where we're not in early stages but we're still in the pretty early going so we've only dealt with a couple of devices so far. But just in dealing with those two we've really engaged with a few partners. The moorings themselves were put into place by Healy Tibbets, a local company. Almost all of our at sea work is done by Sea Engineering, another Hawaii company. So we're definitely making some infusions into the local economy but so far still on a fairly small scale. So from the point of view of UH resources, I mean it's more than just H&EI. What kind of other departments did we call upon? Like in Sowest, like the weather people, the forecasting people, can you kind of give us an over top level view of that? Sure, yeah. There are others at UH who are involved, particularly in ORE, Ocean Resources Engineering, which is an academic department in which resides our wave forecaster. So this is a researcher who is incorporating high resolution winds which also come out of Sowest at UH. So that's a UH run forecast model for the winds and for the waves and it's a very important part of what we do at WETS. But we also collaborate on the engineering side with other researchers in ORE and in mechanical engineering to some extent over in the College of Engineering. So yeah, there are others involved at UH and we hope, we like the idea in the future of involving more and more people at UH. So this is really good for our young people, our young engineers coming up through the ranks to look at this kind of engineering and get the experience that they otherwise wouldn't get. I mean, I would think that this is really attractive to them and interesting. I think so. In fact, just this fall semester we're now using some of our Navy funds to support a master's student and a PhD student who were attracted to just that. These guys are doing cool stuff actually in the water rather than purely theoretical and so yeah, I think that has a cool factor to a lot of young folks. So we're going to be cutting to a break but before we do that, can you just give us some idea of the level of funding that this requires and where basically the funding is coming from? I just tallied it up and to date we have drawn in a little over $18 million of Navy funding. It's really congressional funding that's coming through the Navy through our applied research lab at the university. So that's the DOD side but DOE also invested a considerable chunk of money in the Department of Energy. Not the Department of Education but the Department of Energy made the substantial initial investment to establish HNEI as a support entity to the development of this test site. So that brings me to the question of how many other test sites are out there like this and is there competition in this area or are we all cooperating? Not really. I guess you could consider a competition on some level but there are very few test sites globally. The big one in the world is still EMAC which is the European Marine Energy Center in Scotland. They have been in existence the longest and have tested the most wave and tidal energy devices there. Our site is the only one in the US and there's one in the UK and I'm aware of efforts to establish test sites in Korea, in Japan and in Spain and France is looking at one. So there are others in various stages of development but so far we're one of the few shows in town for an actual grid connected place to test wave energy converters. So are we ready for a break now? Yes? Yep. Well let's go for it and then we'll change the venue. We have a nice slide that we'll talk to in the second half of the show. Thanks. This is Think Tech Hawaii, raising public awareness. If you're not in control of how you see yourself then who is? Live Above the Influence.  I'm DeSoto Brown, the co-host of Human Humane Architecture which is seen on Think Tech Hawaii every other Tuesday at 4 p.m. And with the show's host Martin Desbang we discuss architecture here in the Hawaiian Islands and how it not only affects the way we live but other aspects of our life not only here in Hawaii but internationally as well. So join us for Human Humane Architecture every other Tuesday at 4 p.m. on Think Tech Hawaii. So welcome back to the second half. Rich, could you put up our one and only slide? We didn't want to kill everybody with death by PowerPoint so we have one slide that covers a lot of ground and I'm going to ask Pat to walk us through this slide. So starting at the whatever you want to say, just tell him where you want to be and then he can kind of zoom in on that part of the slide. Well, okay, sure. So this is a slide put together recently to just kind of capture everything about our work at the test site in one slide which of course is difficult to do but there's some highlights on here that basically in the upper left you have a little map that shows where the three test births are so that the test site consists of three births at 30, 60 and 80 meter water depth for testing different sizes of wave energy converters. Below that is a picture of the Azura which was shown in the video during its deployment and then below that is a photo of the lifesaver device which was the next in line so that one was deployed for about a year ending in April of 2017 but has stayed here in Hawaii as did the Azura so both of these devices actually have been deployed twice now so we learned some things in the first deployment and then got them back out there and I'll talk a little bit more about the lifesaver project in particular but we did some modifications to the Azura and redeployed it in an effort to improve its power performance and we have now deployed the lifesaver for its second time. The other the pictures of the boat there on the bottom of the screen right now are a vessel that our partners see engineering the local company I mentioned is outfitting we are we are funding them to outfit this as a dedicated vessel for the test site so that project is under underway and is actually nearing completion these pictures are a bit out of date but so that's being outfitted here in Hawaii so it's like I'll push the business side so that's business for our local shipyards yes yeah yeah that work is happening right in Honolulu so we still have some more pictures is that it I can talk to some of the other graphics on there if you're like well let's see at the top right the instrument there and the graph to its right kind of represent one of the bigger things we do in in terms of environmental monitoring which is which is acoustics so one of the permitting concerns about these things is do they make harmful sounds that could be damaging to marine mammals or fishes or other critters out there in the ocean so we collect acoustic data which to date with the two devices really has made the point that these things don't make a ton of noise so far we're well below any thresholds of concern but we'll continue to monitor that as larger devices with more power output come come along the graph with the bars there is just representing a another aspect of what we do to support the test site which is develop power matrices so so a wave energy converter unlike a wind turbine where you have a power curve with waves your power output it depends both on the period of the waves and the and the height of the waves so you have a power matrix and so that's we generate an independent power matrix for each device that gets deployed and I think that's probably good enough for the for the slide I just want to talk a little bit about the aggressive environment that these you know this equipment is deployed in I mean both you and I have a Navy background so we know what the sea does but let's talk a little bit about how well this heavy equipment stands up in the water the moorings and a little bit about corrosion and things like that is that I've given you three things to talk about well they all kind of come under the umbrella of it's really hard to work in the ocean but and it's really expensive to work in the ocean so yeah moorings that we've had we've had a number of problems and challenges to overcome already moorings of are one of them where we're spending a lot of our time right now rethinking some mooring systems but these it kind of illustrates where wave energy is now which is a long way from commercial viability and that that's you're really getting at the reasons why it's it's just expensive you've got a design a machine that can survive in storms but also operate efficiently in normal wave conditions and with stand corrosion and with stand biofouling and just it's a it's a it's a violent environment and keeping something that keeping something running in that environment and then when it does go down being able to service exactly that was my next greenly challenging because you have to send divers or remotely operated vehicles potentially any of those for you young guys out there that's really cool stuff I mean sending a remotely opera operated an ROV down there to check things out with cameras and all that kind of stuff and manipulating arms I mean that's really kind of fun technology to work on it is I didn't point it out on the slide but there was a picture of the ROV that that's the engineering has acquired also with our funds it's pretty state-of-the-art so I know our students in the engineering department at UH are doing a lot of work with robotics and underwater vehicles and all that kind of stuff you know I leave the office late at night and they're all out there all these kids are in the shop grinding away drilling building stuff I mean it's really nice to see that kind of enthusiasm and interest in these guys and then they put on their science their science shows in the courtyard and it's really fascinating to see the kinds of experiments or projects that they're working on so very good so kind of wrap up you brought a couple of models with you that I think will get into a little bit more depth with so if you like to go and talk about your models I brought a couple of show and tell items here basically but so I've already talked a little bit about the lifesaver and I wanted to emphasize a project so this has already been deployed for about a year at Wetz it operates by it has a top connection beneath each of these power takeoff mechanisms to the seabed it also has a secondary mooring system that keeps it on station so but as the thing tip it up a bit as the thing rocks on the waves direct drive winches there's basically winches in each of these that that winch in winch out and generate power that's how the device works in a nutshell so we're redeploying at this time to correct some issues that weren't done optimally the first time with the tautness of those connections they're a little bit too much play in them the first time and we had some issues with the hausers that held the thing in place so that caused some failures of those connect vertical connections so anyway we think we learned enough to make this a bit more reliable and a bit better in terms of power performance right the second time around but what's really cool is right here by this house the power for this particular device was just burned off in the first deployment we didn't do anything with it but now we've installed right here where there would be a fourth one of these power takeoffs it can host as many as five we've deployed a University of Washington sensor suite which has underwater cameras an acoustic camera sonar and and optical cameras treat with with strobe lights very sophisticated quite a software development behind it to make all those sensors work together and we also incorporated a sub-c inductive meaning wireless charging capability well how does that work so all this is lowered through the hull of the amp or sorry of the lifesaver the the system is called amp which is the adaptable monitoring package it's all lowered through the hull and sticks out and is sensing the ocean now as we speak so we just deployed this thing so we just redeployed the lifesaver with this feature and it is getting all of its power from the wave energy converter itself so we're not plugged into shore we're actually using wave power to do something of interest at sea and the subsea charging thing is of a lot of interest to a lot of people just that you mentioned autonomous vehicles and how do you get power to autonomous vehicles in general you don't you recover them and you charge their batteries and you put them back in so wouldn't it be cool if there was a mothership that they could go to and offload their data and charge up and that's so that's that's the root of that project i i'll just show this one briefly this is the one i mentioned from the irish company it's a wave energy converter that's coming to us in the spring and despite its small size irish spring irish spring good yes yes yeah that's your painted green and white despite the size you know they look comparable in size here i guess but this one is is huge right it's and it's called an oscillating water column so in this case the water surges in and the water line is about here mm-hmm and so this is all submerged and the waves surge in and out of these chambers forcing air through this air chamber out through a turbine here which is a 500 kilowatt turbine so just like the blow rock out on it is a man-made blowhole right blowhole yeah it is a halona blowhole only engineered to be efficient hopefully so that one is coming to us in the spring and we're very excited about it because it really represents a big step up in both size and power performance and there's a really good team behind it so that's coming soon okay so are we i think we're pretty close to wrapping up but do you have any final words like i have one little on my cheat sheet what's on the horizon so yeah well so i mentioned on the near horizon is this irish device but we have several other wave energy converters coming so there's a company called columbia power which is an american company which we may see by the early fall another american company called oscila power toward the end of the year and then two or three more behind them that are coming in 2020 and 2021 so we've got a number of wave energy converters coming right we've also got a big project to to redeploy our moorings and address some of the issues i mentioned that's also coming and then in the background kind of is ongoing power performance and acoustic monitoring and all that stuff so great yeah okay well pat thank you so much really appreciate it and to our audience out there especially you young engineers i hope this has given you some ideas of what you might be interested in doing with your career and helping hawaii become energy independent so with that i'd like to say aloha and we'll get back to waving yeah waving with great energy thank you


How many PDFs do you get every day? One, two, too many maybe. Today we have Ido from Checkpoint Security here and he will tell us how bad PDF files really are. Hello everyone, I'm Ido and today I'm here to present bad PDF. Our Windows credentials can be used, our Windows credentials can be leaked by manipulating PDF files. This research was conducted following publication regarding stealing Windows credentials by manipulating Microsoft Outlook. We wanted to show that the same can be done via PDFs. So the flow of this presentation will be to first talk about PDF in general and its file format, then talk about the attack, flow of this vector, present the proof of concept, and finally talk about mitigation and the impact of this attack. But first let's get this part out of the way, a bit about myself. I'm a security researcher at Checkpoint, previously served in the IAF's Air Intelligence Wing. My academic background includes a Bachelor of Science degree in Information System Engineering, and unfortunately I can't quite speak German so we're going to have to talk in English. So let's start by talking about PDF in general. PDF was first developed by Adobe in the 90s with many versions being released afterwards till this day. So written purpose was to allow you to present various types of data from text, images, web page links, etc. Regardless of the environment the file was opened in. Now as for the file structure, a PDF file has four main components. The first of those is the adder, which basically contains the version of the PDF file. For example, this adder notes that the PDF version is 1.3. Second is the body, which contains all the objects that makes up the PDF. And we will talk about those objects next. As we can see here we've got several different objects, page, contents, parent, and so on. Third is the xref, also known as the cross reference table. This table contains info for how to access the aforementioned objects. Again, this is an example xref. Finally, we've got a trailer. The trailer basically contains the metadata of the PDF, as we can see here. And here we've got the four parts together, making up the PDF. The adder, followed by the body, the xref table, and the trailer. Now I've mentioned objects, so let's go about this quickly. There are eight types of possible objects within a PDF file. Anything from numbers and strings to arrays, streams, and even another object. But the one that interests us the most for this attack is the dictionary object. So let's expand upon that one. A dictionary is an object representing a table, which contains pairs of other objects, keys and values, called entries. A page object is a dictionary representing a specific page within a PDF. It consists of several required and optional entries, which we'll see in a moment. Here we've got an example page object, as you can see. As the contents object, parent, and many others. Now, let's talk about the relevant entries for this research. First is the AA entry, also known as the action dictionary. This is an optional parent entry, which defines action to be performed in general. Usually comes with either the C or the A child entries. The O entry is a child entry that defines actions to be performed when the page is open. Similarly, the C entry defines the actions to be performed when the file is closed. Sorry.  The S entry describes the type of action to be performed. In this case, we see go to E, go to embedded. Go to embedded opens an external PDF file without notifying the user. And I think you can kind of guess where we're going with this. The F entry describes the location of the other PDF file. And finally, the D entry describes the location within that file to go to. So as you can see, we've got an action dictionary with an O entry, sorry. Where the F entry points to appendix.pdf, the D entry points to the contents of that page, and the S entry is basically go to embedded. So we've talked about PDF in general, how it is structured, and about the objects and entries relevant to our attack. So why do we go for here? Now we'll see how we can use this information in order to steal our victim's credentials. Here you can see the proof of concept that our team developed. We've used an action dictionary with O entry to get the exploit to execute upon opening the file. We then use the F, D and S entries to point the PDF reader to an arbitrary file on our SNB server. Injecting these five entries into a page object is all we have to do in order to weaponize the previously benign PDF file. So let's see what happens when this file is opened. As you can see, the exploit code now points to dummy.pdf on our malicious server. There are two things that we should note here. First, the remote file does not have to be a PDF file. It doesn't even have to have an extension as long as it actually exists on a remote server. And second, while this example right here abuses the go to action, go to embedded, the action, go to R, go to remote is just as vulnerable. Now, when the victim opens our PDF, the action dictionary we've injected into it activates, causing the PDF reader to request the arbitrary file we've specified, in this case, dummy.pdf, from our malicious server, in this case, again, <IP_ADDRESS>. This prompts the victim's Windows client to try and authenticate with our server using NTLM single Simon. As part of that protocol, the victim's NTLM details, domain name, username, NTLM hash, and others are sent to the remote SNB server. These details can easily be captured by the attacker, as you can see from this Wireshark example. In this example, a user named Alice attempted to authenticate with our SNB server, and we can clearly see a account name, a domain name, and the NTLM hash. We can then use publicly available tools in order to crack the victim's NTLM hash, thus obtaining the Windows credentials, which in turn can be used to, can be leveraged to spread further into the target network. So, to sum up what we've just seen, this is an exploit that requires very few lines of code. In fact, it could be written as a one-liner, but we've opted not to do so for the second readability. This means that even without any previous knowledge of PDF structure or vulnerabilities, an attacker can have a weaponized PDF file within minutes, less if he uses one of the many public implementations of this vulnerability, as we'll see in a bit. The victim has only opened the malicious PDF in order for the NTLM credentials, sorry, NTLM hash, and by extension, the Windows credentials to be linked to the attacker. And this is the biggest takeaway. It's all done without any security, alert, or evidence of the attack. There aren't any malicious processes running in the background, no changes to the registry, no residue, nothing. Now, let's see an example of an attack utilizing this exploit. Here we've got an attacker running Kali Linux and he's setting up Responder, which will basically be the SMB server for this purpose. The attacker then uses one of the public implementations of bad PDF in order to generate a malicious PDF file that points to his Responder service. And as you can see right here, this implementation uses the same proof-of-concept code that we just saw. Again, FDNS entries within an action dictionary. The attacker then hosts the file on the HTTPS server, and switches to the victims machine, which will now open the file. Let's open it again for a good measure. Switching back to the attacker's view, we can see that the NTLM hash was leaked several times as the victim went to the trouble of opening the file multiple times. But in the end, we've got the leaked hash right here. So, we've successfully captured the victim's NTLM hash. What do we do with it? Simple. Now we can crack it using one of the many publicly available tools. We can use Joender Reaper, Asket, OpCrac, or even Google Search for an online cracking tool. The actual cracking process is as simple as pasting the captured hash into the GUI, or the terminal, and running the tool in its default configuration. As you can see here, in this example, we've opted to use Joender Reaper, which comes pre-installed in Kali Linux. Again, very simple to use. The only argument was the file containing the captured hash. As you can see, cracking the NTLM hash of user gpn19 gave us their password, betpdf. Now, you may have noticed that the total cracking time on this example was roughly 13 minutes. The length of time required to actually crack the password will vary both with the complexity of the password and the strength of the machine running the cracking process. So, now that we've talked how this exploit works, let's think of a scenario where it could be used. The most naive scenario that comes to mind is the most obvious one. An attacker uses an exploit, in this case, betpdf, enticing a target to open the weaponized file, and steal the credentials. Having done that, and he's got initial foothold within the network, the attacker then deploys a payload, a bot, a virtual, a miner, and so on for using other exploits to spread laterally toward the network. Now, this is fine and everything, but we want a scenario a bit more unique to our exploit, so let's think of another one. Here the attack starts in a similar manner. The attacker entices a user, a victim, within the target network to open the malicious pdf file and steal the credentials. Except this time, the attacker uses the stolen credentials to access a file server and inject the exploit into a pdf that is viewable by every user within the network. That way, the attacker can harvest credentials from the entire network without being noticed. It's kind of scary. Now, let's take a look at a couple of the public implementations of betpdf. First one, I think we're familiar with this, Metasploit module. This module can generate a malicious pdf from scratch, and it can also inject the malicious code into an existing pdf. Let's take a quick look at that. You can see it's got the pre-made pdf here, and, again, the same PLC code. Other implementations can obviously be found in GitHub, and amongst those, there's one that really stood out that both generate a malicious pdf and runs the responder service for the attacker, so it doesn't have to do anything other than insert his own IP. Sorry. As we can see here, again, the same proof of concept code, and it also runs the responder. Now, let's talk about the impact of this research. In general, betpdf raised awareness to pdf vulnerabilities, getting published in many services, such as Blipping Computer, ZDNet, et cetera. We've also seen the rise of multiple tools implementing the result of our research, as we've just seen in both Metasploit module and GitHub repository. The betpdf hashtag was also trending around time of this publication, and, finally, this vulnerability was assigned CVE-2018-49-93. You can see example articles about the publication. As for mitigation, there are several ways to protect yourself against this stack. On the network level, you can deploy IP solutions, and I won't name-drop anything here, that will detect the weaponized pdfs, and it should be fine. On the OS level, you can apply Microsoft Options of Optional Security Enhancement, which basically prevents NTLM single-sign-on attempts from external sources. You can also patch over pdf reader. For example, Adobe Reader published an update on May last year, which was supposed to protect against it, but in February this year, it was apparent that this patch could be bypassed. So another CVE was assigned, and another patch was released. Foxit Reader, again, another major pdf reader, since version 2.1 is no longer vulnerable to this attack. So let's wrap things up. We've seen how simple minimal manipulation to a pdf file can lead to a victim's credentials leaked to the attacker. The attacker must only understand the structure of a pdf file in order to abuse this vulnerability, or, alternatively, he only needs to know how to serve GitHub. In addition, an attack using this vector leaves no evidence both doing and after the exploitation. To make things worse, an attacker can leverage this attack vector to cause even more serious damage within the target network. So that's bad pdf. Thank you. So thank you very much, Ido. If you have any questions, please raise your hands, and I will come over to you with the microphone so that everyone can hear your question. Okay, since no one has questions, again, thank you very much for your talk, and the insights to bad pdf. And for the rest of you, have a nice day.


BSU women looking for their fourth straight win. They host MSU Mankato. They're down one in the first, but Emily Berglin goes to work. Beats the keeper, sticks out for the equalizer. Now 1-1, stays that way the second. But Jacqueline Casso winds up and blasts one home for the goal. 2-1, Beavers, Mavericks equalized. But just before the horn, Emma Terrace, right out front lights the lamp. 3-2, BSU, then the dagger third period. Power play, Berglin to Abby Halesco. All alone for the one-timer. Four straight wins for the Beavers. They take game one, four to two. If you've enjoyed this segment of Lakeland News, please consider making a tax-deductible contribution to Lakeland Public Television.


Yeah, let's serve up some tennis on the Sportsman's zone. Barbados completed a successful trip to Jamaica, winning their Davis Cup World Group 2 playoff tie, which ended in Kingston on Sunday night. Here's Gerard Marsili, who had a close-up view of Sunday's final day. Alright, so it seems as if we have some issues with that rat Barbados winning the tie by three matches to two, it was one-one at the end of the opening day, which was Saturday. It started with Blaise Bicknell getting the better of Kuiper Marshall in three sets. Darian King, as he usually does, responded in the second singles robber to defeat Roland Phillips in a three-set thriller, 7-5 in the third for Darian King, and then King returned with Hayden Lewis on Sunday to win the doubles-end counter. He was thrashed by Blaise Bicknell in the third singles, the first reverse singles. It was 2-2, and it came down to Kuiper Marshall and Roland Phillips, and it was Marshall, the Barbadian who got the job done, 6-2 in the third. Joining us on Zoom, two members of the winning Barbados team, we're going to have, first of all, a chat with Darian King, an outstanding servant of Barbados tennis. Darian, first of all, it's a pleasure to have you on the Sports Mag Zone. Congratulations and a marvelous victory on Sunday night, two days of real exciting tennis, and you must still be over the moon after the performance of your entire team. Yes, definitely. I'm really thrilled with the effort from the team. I'm very proud of each and everyone, even being on the team. Everyone contributed very, very well. It's a huge tie, and for us to pull that victory out to stay in the group is obviously the goal, and I really commend everyone on the team. Well, first of all, let's talk about you, Darian, because your left knee was heavily strapped for the duration of the tie. There were many who felt, including myself, that probably you wouldn't have lasted the two days. Somehow you did, and you got two victories, one in doubles and one in singles. How are you feeling now? How is the knee? Yes, as I say, the minor setback was preparing for the day. We felt through some tournaments in California. Unfortunately, I had a terrible fault that I'm the result into tearing my right knee MCL and a strain in the PCL, but gladly for the tennis, Barbados Tennis Association, all the credit goes to them by getting me here early to seeing the best doctor, the best medical services, and for me to prepare for this tie. So I think all of this really, I owe it up to them, and I'm very happy that I could have partake to represent my country. And how are you feeling now, a day after two days of rigorous action? Meeting up, meeting up, but it's all for a good cause. We ended up coming up with the victory, which is what we came here for, to get the job done. Yeah, right now, just trying to relax and stay positive because this is not, this is the second time now going through a crazy injury like this. So obviously mentally is very hard, but now it's a little off time to try to recuperate. And as I said, thanks to the Association, they're going to keep trying to, in medical services and stuff, try to get me back to my high level again. Yeah, what's the prognosis in terms of how long this entire recovery is going to take? As far as Davis Coppe specifically is concerned, I think you won't be back in action until about September being back in group two, but what's the prognosis on the injury and how long it will take? Right now, they're saying I'm out for a couple of months, three months or something like that. But yeah, I had to withdraw from the tournament, coming tournament coming up Wednesday, I was supposed to actually play. But I think for my mind, I'm just going to take the rest and try to get back to the best of my ability and as I say, with the help of the team that supports me to get back out there as early as possible to represent again in September against whoever we draw. Yeah. All right, Darian, let's relive how you guys delivered on Sunday by meeting Jamaica in your group two playoff world Davis Coppe tie. One one after day one in the Davis Cup World Group two playoff tie between Jamaica and Barbados out of the Eric Bell National tennis center in Kingston, leaving all to play for on day two. It started with the match three, the doubles encounter, which favored Barbadian pair Hayden Lewis and Darian King, but the home pair of Blaise Bicknell and Roland Phillips got the upper hand, winning the first set six three. However, the Bajans rallied to win the next two set six four six four, taking the match two sets to one and a two one advantage in the tie. But the Blaise Bicknell even things again with a win over an injured Darian King, comfortably brushing aside the former world at one hundred and six six one six zero in March four, giving him a perfect singles record for the weekend. With the tie locked out to a piece, Roland Phillips returned to the court to try and secure a win for his country against Kaipo Marsha who had not competed since losing to Bicknell a day earlier. Despite rocking up eight double faults, Marsha held on for a six four first set to win. The 21 year old Bajan improved his service, but the Philips hit back to level the contest after running away with the second six one. Unfortunately, Mr Davis Cup could not build on that momentum and found himself four zero down in the third when the rain caused a lengthy delay. On the resumption, Marsha won the first point to secure a five love lead and inch closer to the promised land in front of what was now a significantly reduced crowd. Philips did manage to snatch two games, but could not stop the inevitable. Kaipo Marsha again coming up big to secure the two one victory and a three to win for Barbados. You have to give credit to the the Bajan team. Yeah, they came out. Well, I thought we had it when we leveled it all after Blaise came out firing. Yeah, it was spectacular how he played and we leveled it. I thought we would have closed it off with the final singles, but that wasn't to be. This kid came out fighting and you have to give him credit. It's unbelievable. I knew from the beginning it was going to be a hard, a hard fought type because Jamaica was a young team on up and up. We were more experienced team leveling off and all respect to Jamaica. They put up a very hard fight made it very difficult us and I made the victory even sweeter. Yeah, there you have it. Barbados defeating Jovenko by three matches to in their world group to Davis Cup playoff tie at the National tennis center air belt tennis center in Kingston. Daryon King is still with us. Daryon quickly when you look back at the weekend, there were so many matches that could have gone differently when you think about your own match with Roland Phillips on Saturday Europe five love in the third set and Phillips came back to five all when you think about the doubles match to start at Sunday where you saved a number of break points, particularly in that third set. You were down low 40 at one stage and somehow you pulled out that game. I think you were behind two one at that stage. When you think back at it all that the type of grit and determination that your team showed at the weekend, you must be extremely pleased. Crazy. I would say the effort that the guys put out there was was crazy. Even myself with the torn knee and stuff to go there just to represent my country to give it my all. I'm really proud of myself because I think I was really down and telling my captain stuff before even the tie was was commencing. I was like, I don't think I'll be able to play in stuff. But surrounded by these guys that kept me positive and stuff and for me to go out there and play that for a single obviously was tough. But as I said, I'm a really different player and I'm playing for my country and I'm playing for pride. So for me, I just knew to go out there give 100% and I was happy to go out there to tie it in the first on the first day. That both we weren't expecting it to be so tough because me and Hayden obviously have great history, winning a lot of big matches against a lot of tough opponents, but Blaz and Randy, all the credit to them as as the captain said in the interview before, they put up a great fight. To me, it was a great tie overall. And I'm just happy that Barbies came up with a win. I think it could have gone either way. But I'm glad it fell in our favor. So I mean, overall, it was a great tie, great experience for us and unlucky to the Jamaicans. But I mean, that's all that's how the sport is. It's only one winner. And but you just have to keep on the positive path that you're playing good tennis and just try to improve each and every match. Yeah, and quickly, because a number of the local fans, the Jamaican fans expressing surprise and in some cases, even disappointment that it was Roland Phillips and Blaz Bicknell who came up for the doubles given that they would both have to play in the reverse singles. Were you surprised as a Barbadian team that that was the unit the Jamaicans sent out or is that something you fully expected at one one? No, I think with this format obviously is very tough. You try to play your strongest players because you don't want to give an advantage to either opponent or anything. So I think that all of us were always going out there are biggest guns and I was not surprised at all.  As I say, it's Davis Cup. You're playing for your country. So I don't think that that's an excuse or as you say, strategic wise or whatever.  So that's the bittersweet of the game. I really enjoy the moment. You have to enjoy each and every moment of the game. It's tough sometimes, but sometimes it's very is that at some point. So for me, it's up and down, but I mean, as I say, that's how that's how the sport is. Yeah, Darian, I must admit that when I heard that you had a knee injury, I wondered if you got it from playing football for Watten in the Barbados Premier League because from time to time, you do represent them in the Barbados Premier League, don't you? Yes, I tried to go back and give back to my community. Obviously, I was raised in the football area in the football community and for me, every time I get a chance to settle down, keep my mind off of tennis, I go back. That's my second hand sport that I go back to to try to release some stress. So football, you know, definitely is one of my sports. So I definitely, I don't want to let it go, even if I'm finished with tennis. I think I would still continue playing football, but as I say, I just try to give back to the community because I think that's where, how I was born and raised and that's how we would start with my parents and stuff. And I mean, yeah, I enjoy the sport and I don't think that nothing can change. I don't think tennis, any other sport can change my love for football. Yeah, and your love, of course, for your wife, because you got married just over a month ago, didn't you? Yes, yes, yes, thank you. Big moves, huh? I know, I know. I mean, enjoying it, enjoying every moment. So as I say, a lot of new things are coming in and not new experiences and stuff, but I'm enjoying it, taking life moment by moment and I'm enjoying it. As you say, I'm getting older. So the best thing for me to do is to enjoy, enjoy each and every moment. Yeah, and I saw some PD after your final match yesterday, but we won't talk about that today, Darian. By the way, I understand that you are a very good cricketer as well and that there was an Everton Weeks record that you should have broken in high school cricket, but you didn't. And someone suggested to me that maybe it is because you didn't know. Maybe I didn't know. I didn't say I'm very thankful to God that I was multi-talented, but I don't think in my heart I was really leaning on the cricket. I think I was a rather football before the cricket. But how much did you score? That's mainly my first choice, but tennis, I think with my results and stuff coming so quickly, I think that's what pushed me there so quickly to choose tennis over football. But if it was all the sports, I think football would have been a chosen one. How much did you score in that match, Darian? I can't recall, but you have to tell me those statistics. I heard it was a big 100. I wouldn't doubt it. I think I've achieved so much in life. I'm very thankful for, but I'm not a man to keep the stats. I think that's you guys' job. I just like to go there and do my talent. All right, Darian, I tell you what, I probably could not win a game of you in tennis, even with your injured knee, but I bet I could get you out in cricket. Let's leave it at that. Congrats. Very well done at the weekend, Darian, and we'll catch up again. All the best going forward. Thank you very much, I appreciate you guys. All right, let's take a quick break here on the Sportsman's Zone, but when we return, we'll be speaking with the young man who finished the business for Barbados, 21-year-old Kaipa Marshall. He'll be joining us live after this. Yeah, back on the Sportsman's Zone, we're talking Davis got tennis, Barbados defeating Jamaica at the Arabel Center in Kingston on Sunday night to take their World Group 2 playoff tie by three matches to two. Kaipa Marshall landing the final blow, defeating Roland Phillips in three sets to take the tie for the Barbadians. Kaipa Marshall joins us live now on the Sportsman's Zone. Kaipo a year ago, it was Clement main guy in Bridgetown Barbados against Pacific Oceana. That time you were down four, five and a set, and it seemed as if you were done and dusted this time around with all that experience behind you, but also a Jamaican crowd against you and still somehow in another big moment, you find a way to get it done. Almost 24 hours later, what's the feeling? Last year they called you a hero, the new hero of Barbados Tennis. What are they calling you now? That's a great question. I'll have to wait and see what they come up with. But yeah, as you say, I'm super excited with the victory. Definitely last year being in the same position against Pacific Oceana in that match, it seemed like a huge hurdle because at that point I had not one of David Scott matches yet and getting over that hurdle back then really helped me this time here in Jamaica. There's a little bit different circumstances, as you said. It was an overseas match and I actually won the first set this time. I was up, so it was a little bit different feeling. I had to kind of learn how to close up the match and then I started off really well and then in the second set had a little bit of a dip and then it got a little complicated. I took a bathroom break and so myself was going to give it my all and that's exactly what I did. I got a good start to the third set and I was playing really well. I was really happy with my level and yeah, I'm just super happy with the win and I'm super grateful for the team behind me and all my supporters and everyone that's helped me get to this point. Yeah, good question. I noticed that you took a bathroom break at almost the end of every set. Is that something that's normal for Mr Marshall? I like to do that. I like to do that, especially if I lose the set. Definitely it's good for me to go in the bathroom and kind of splash some water in my face and kind of reset. Normally I don't like to do it after I win the set, but here in Jamaica I was sweating through my clothes pretty quickly, so that was definitely a factor. I like to change my clothes and put on a new fresh set of clothes and feel nice and dry and fresh. I'm ready to compete in the next set, so I think it was a good call on my part for sure. I did ask Darian after the first set if I should go to the bathroom and change or not because normally you don't really want to give up that momentum but I'm happy I did that. I think both times it kind of helped me kind of reset and refocus and go from there.  You made a lot of errors. You had a lot of double faults. One thing you said to me is that you started counting the double faults. So what I did for you yesterday, I probably should have told you before, is that I counted them for you. You had 12 of them in the match, eight in the first set, four in the second, none in the third and when you were not double faulting I would like to say for the most part you were cruising but what was happening on your serve all weekend? That's a great question. I changed my racket recently. I don't know if that has a factor to do with it or not. I'm kind of testing it out with different weights in different spots of the racket and it's the first time that I've done this before. Normally I just buy a heavier racket but this time I bought a little bit of a lighter racket and I decided to kind of experiment a little bit with the weight. I don't know if this is the reason but I mean I always felt good on my serve this week. I think that on Saturday I kind of just had a bad serving day. I definitely think it can happen and I'm super happy with the way I was able to turn it around the next day and you know I really got some good advice from Coach Damian Hapowit and from the entire team on how to kind of go about it and I kind of just dealt with the situation at hand and as you said I started the match with eight in the first set and that number kept dropping and dropping and I kept building my confidence and at the end of the match it definitely wasn't even a factor in the match anymore. I was really confident, really comfortable and it was just something that I kind of had to get over and and I'm happy that I was able to do that. Yeah I have a theory and I want you to tell me how close I am because when I looked at the match with Blaise Bicknell and the fact that you continued to make a lot of errors and the service mistakes as well with the double faults I felt that maybe you were pressing too much in that match but then against Roland Phillips I felt that at a point you realized that you didn't have to press as much to win the match and so you became a lot more willing to keep the rallies going for a lot longer and just wait on those moments to pull that forehand or the backhand which is a beautiful backhand you have by the way you should lend me it before you leave and I thought it was such an important adjustment and also even of the serve where you took a lot of pace of the first serve and went for the kicker and it seemed to really work. Yeah yeah I'm someone I normally like to go for my first serve I like to hit my first serve flat and kind of get a lot of free points off my first serve and that's what I expected to do coming out on Saturday against Blaise I knew that he was also going to come out with his big serve they know he has a very big game as well so it was a little bit of a different match Saturday and Sunday because obviously Blaise plays a little bit more aggressive he likes to use his serve and and hitting his big four and I was not so my thinking behind it was to kind of try to dominate my service games and I think that definitely made me go a little bit too over driven in my service games and that's when the the errors started to come in and and going up against Randy he's more of a kind of he likes the longer rallies and he plays a little bit longer points and I kind of changed the strategy in that match I told myself because I had played Randy before actually and it didn't go my way that time and I had to learn from that and kind of be a little bit more willing to extend the rallies and look for the right time to to pull the trigger and I think that's what I did really well yesterday and I'm really happy with my patience and and composure on the court. Yeah one final one I mean what do you feel that this will do for your young career? I mean two massive victories like this in the space of 12 months is is just amazing. Yeah yeah for sure this this victory is one I'm going to remember for the rest of my tennis career I'm definitely going to build off of it just as I did on on the one against Pacific Oceana that match helped me helped me so much in this past year and I feel if I continue to build on these kind of matches and it also builds my hunger to to keep winning these big matches for team Barbados so I definitely plan to to use this match as a stepping stone in in my professional career hopefully. This is my last semester at school in college and I would definitely be looking to play some professional tournaments and I really gave myself a chance to to really reach my potential in this sport as a sport that I have a lot of love for and I don't plan on stopping anytime soon and yeah I'm super driven and super excited for for what what is to come. All right congratulations kind of a brilliant job at the weekend and definitely a fantastic job yesterday. Yeah you were definitely brilliant in that fifth rubber you never know Barbados still in group two well maybe next year we could have another Caribbean clash like this although you're hoping I'm sure that you'll be in group one this time next year. Kaifu all the very best going forward. Thank you thank you so much really appreciate it. All right Kaifu Marshall what a performance yesterday to beat Jamaica's winningest Davis Cop player Roland Phillips and bring Barbados sweet sweet victory. Let's take a break on the sports mic zone we'll be back with more after this.