all. I was going to watch it last night to have something to talk about. And then... I had an episode of Prime Suspect to watch. I did. I did watch it. Can you convince me to watch it? No. He upset me with the Orient Express. Do you see people who aren't French putting on French accents? I just... See, it's a who-done-it. It's the red herrings. And that stuff doesn't really... Maybe Fanulla is impressed by people putting on French accents out of sailing lines. It was all done in England. All green screened. And I just find that who-done-it and the big reveal, it's all very like... It's like playing Cluedone. I know that's probably what it is, but they're talking about making more of them.  This is the second one now. Yes. I've said... The reason I didn't... He thinks it's going to be a universe. You know how you serve your universe? He wants an Agatha Christie universe. Why not? The thing is... I like Agatha Christie. I've watched Death on the Nile.  Do you want... If this is anything like the Orient Express, Murder on the Orient Express, which is the first one that he did... It is probably very like it. I really needed him not to be in it. I don't think he... He didn't pull Poirot off for me. And I have watched the Poirot in different... TV series. David... It's just the set-up. It's like, why is he there? You know, he's there for the whole thing. He's there for a wedding. He's there for... I saw the trailer. The trailer didn't really... I know, but if you watch it... This is the Agatha Christie one. I mean, look at Miss Marble. I absolutely love a good Miss Marble. Well, that's the next part of the universe. That old lady has been around more deaths than I do. I don't know. You're like, why would anybody hang around with her? Mid-summer murders. Why would anybody go to mid-summer? Apparently everybody dies there. A lot of... Exactly. A lot of the critics liked it. A lot of the public liked it. I don't know. So there will be a franchise. He does the visual though. That's what he does.  But I don't know. The murder on the Orient Express did not... But you could see it's all CGI and green screened. All of it is. Switch is kind of obvious. Anyway, that was it. Okay. Right. We'll take the break. And then what we will come back to is because I think Mary will be interested to see what you think of or to hear what you think of pieces of her. It's on Netflix. We'll be back with that. And so much more besides, including 1,000 pounds, Euro, at half-eleven. Stay where you are. The Ninetal Noon Show is brought to you by Letter Kenny Credit Union with monster loans available up to 60,000 Euro for all occasions. Visit letterkennycu.ie. Let's call out his name. This Easter, our award-winning Tesco Finest Irish Angus Car-Re-Rip Roast is half-priced. That's great value. However you got it, she ins from our finest sides, now two for five Euro, including finest potato gratin, 400 gram. And to top you off, 33% off over 200 selected wines, including Pastino Five Reserve Ariaca 75 CL. Shop all of our top offers online today at tesco.ie. Easter at Tesco. It's yours for the making. Enjoy alcohol responsibly. Are you passionate about customer service? Then Concentrics wants to hear from you. Right now, Concentrics is recruiting work-at-home customer service advisors to join our growing global business in Donegal. If you're looking for an exciting opportunity where you can learn, learn and grow, apply today by searching Donegal at jobs.concentrics.com. At ESB Networks, we're connecting Ireland to a clean electric future. And as part of the National Smart Metering Program, we're now installing smart electricity meters in your area. Your new smart meter will reduce the need for estimated bills, help you to manage your electricity usage more efficiently, and enable you to access smart electricity products and services. We'll contact you before your meter is installed. Find out more at ESBnetworks.ie slash Smart Meter. For a huge selection of furniture, all in one showroom, pull in to grow furnishings in Neter, Kenny. Sofas, beds, wardrobes, tables and chairs. Also a range of carpet, vinyl, rugs and laminated flooring. If it's time for a change, it's time for a visit to Grow Furnishings. Grove Deliver, throughout Donegal, Derry and Tarone. Be inspired at Grow Furnishings, Kill Toy Road, Letter Kenny. Come and join us for a super night's entertainment. Okey dokey, the draw drum is being rolled off here, which I would feel it's going to be done on there as well. It seems an awful waste of your energy. I just want to make sure it's all mixed up. It's all mixed up. Plus it's fun. You were loving it. I do love my trombola. It is beautiful. Do you want to just lean slightly to the right? No, don't move. There you are. Look at the trombola. There it is. What's the difference between that and a draw drum? You can move back again now. I will do. I like the word trombola. That's what I was thinking. It makes it sound more posh. It does. It makes it sound like I know what I'm talking about. Eight minutes to go until someone wins 1,000 euro. Okay, so pieces of her, I added this to the watch list actually, because it seemed to be something worth watching from there. Yeah, I haven't finished it yet now. I'm more than half way through it, but it is a story that has kind of been told before in the sense that you have this lady and she's leading a very quiet life and all of a sudden then something happens and we find out that there's more tour than meets the eye. But I don't think I've seen it where it has been about a woman and not about a man, so it's a little bit of a different thing to it. It reminds me there was a film Longo and a guy that was running a diner. A guy that played Jesus Christ. Do you remember his name? I can't think of his name, which is not unusual. You don't even try in Mel Gibson's film. That Jesus, no. No, no. Yes. Yeah, Cavalli or something was his name, wasn't it? Yeah, he was the lead on Person of Interest. Yeah, yeah. That guy. He did a movie very similar to this, but this is an eight-parter and basically what it is is this lady and she's living in a small town.  She does rehab and counselling and then there's an incident in a diner in which she kind of ends up getting an awful lot of publicity for which then suddenly opens up the floodgates and we realise that she's actually been living in this town kind of under an assumed name, but she has a daughter, a daughter who is 30, who has no idea of any of this background. The daughter seems to be having flashbacks about what happened back at some point in their lives, even though she doesn't seem to think so. The daughter is sort of giving up on her original career and she's kind of back home and sort of slobbing on the couch type of an idea. That's sort of a thing of it that she's kind of giving up on love, giving up on life the whole thing and all of a sudden this happens and suddenly then her whole life is turned upside down. Tony Colette is in it and people will know her from six cents. TV show, hostages, loved her in that because she was so good in this and she's really the only one that's in it that you would recognize. So there's a lot of really drama mystery. It is a drama mystery in the sense that you're not a hundred percent sure whether she is good or bad. Okay. So there seems to be you know what I mean? There seems to be an element of there's bits with the FBI are coming into it and not coming into it. She has an ex-husband. He seems to be he comes into it and he's kind of doing stuff.  Are they good people? Bad people? Exactly where she lands is a little bit iffy. There seems to be like a group that she was part of back in the day. It's unclear whether she was infiltrating it or whether she was genuinely a member of the group. So it's there's very much a lot of kind of story threads that all kind of like blending together. So yeah, I would definitely say that you would enjoy it. I mean, it's not like I said, it's a story that this is a story of kind of her before. But it is. Yeah, it is good. And Tony Coletti as well. I always call her Coletti was Coletti. Tony Coletti is very, you know, it's interesting. I find it interesting now where they seem to be bringing, you know, women of a certain age and putting them into these kind of action roles now. You know what I mean? She's fighting. She's doing all kinds of stuff in this and you're kind of like, well, it's good. And she's an excellent actress anyway. She's very fantastic. All right, what so far are you giving it out of 10? It's obviously capturing your interest. You're going to see it out. I'm thinking seven. Yeah, that's exactly what I was thinking. Sounds really good. So it's on Netflix with Tony Coletti or as we heard her call Tony Coletti. I would have gone with her. I don't know. Greg, we are serious recording the new Peaky Blinders. However, we missed the first episode and it's not coming on to Netflix until June. Is there any way we can watch it anywhere as we can't watch it until we see episode one? Listen, VPN it. I don't know. Do the BBC still look for? Look for your locations? No, for your your licence. Your TV licence. That'll be there. Oh, no. I don't know. I think if you are tempted, if you're going to watch it all legally, I think maybe the BBC might let you watch that on the dodgy link. Well, if you can get through to the BBC, I player you. That's about the only way. That's where it is. And you stretch the word legally there. Geographically. Well, hold on a second. Going around Geoblocks is not illegal. I never understand what isn't. I think you're right. Yeah, we've talked about this before. Yeah. Yeah, there's this. Yeah, look it. The thing is, the only other way to do it in is to go to whatever is your browser and type in watch season five episode one Peaky Blinders online free. That's usually and then good luck to you and don't have anybody around you because you will get the dodgy pop-ups and make sure your AVG make sure your AVG or whatever you use as your security is up to date. It wouldn't be the worst offence. No, no, no. I'm going to watch Peaky Blinders from the beginning because I have no recollection of it at all. So I might as well just catch up and watch it all. I always find, I think Kieran is a bit, I find him a bit marmite. I either love him or you don't like him. I get you. I get you.  See how you feel. Right. We're going to take a break after that 1,000 euro is going to be given away on the program. The 9 till noon show with letter, Kenny Credit Union is your bank leaving town. Letter, Kenny Credit Union is now offering myCU current account and debit mastercard bringing full banking features with no appointment necessary to open your account Take It to the Limit is a celebration of the Eagles by Johnny Brady, Simon Casey, Nigel Connell and the Sharon Family. You can hear Take It to the Limit for one night only at the Millennium Forum Dairy on April 14th. That's Johnny Brady, Simon Casey, Nigel Connell and the Sharon Family Band. As they perform Take It to the Limit a celebration of the Eagles on 30 April the 14th. Tickets 28 pounds. On sale now from the Theatre Box Office or online at MillenniumForum.com. Take It to the Limit is a celebration of the Eagles by Johnny Brady, Sharon Family Band. Get Ready for Brighter Days with Foy and Company. The Ballet Buffet and Letter Kenny stores have everything you need to get your outdoor spaces ready for summer. Foy stock all the leading paint brands and wallpapers all available for nationwide delivery from garden sheds and furniture to outdoor dining and decking. The Foy and Company team will guide you through the process of selecting the right paint for your indoor or outdoor space. Book your free online or in-store color consultation today. At Foy's.ie Flanagan's massive half-brize store clear-out sale is now on in Wankrana. There's 50% of Irish-made sofas, tables, beds, wardrobes, rugs and occasional furniture. Pay today and take it away. See Flanagan's.ie If you've got magic moments or great memories captured on your smartphone, now is a great time to have them printed at McGee's.ie. Simply upload your favorite photos, choose your size and finish, and McGee's will take care of the rest with the results delivered to your door. Prices are from just 12 cent and there's also creative options available. Preserve your memories today at McGee's.ie Forward Emphasis International based in Mallonhead are actively recruiting for customer service advisors with both permanent remote working and hybrid opportunities available. Experience and contact centers or insurance services is desirable but not essential as full training is needed. Fully funded financial services qualifications delivering attractive career path opportunities are available. Please visit their website www.forwardemphasis.ie or apply via their careers page. Join the team at Homeland Letter Kenny for their Garden Super Saturday series for the month of April. This Saturday April 9th special guest Garth Austin will host a garden clinic. The Homeland team will showcase outdoor garden power services. There is also buy two get one free on roses and climbing plants. There will also be a chance to win a Stigia battery hedge trimmer on the day. Looking forward to seeing you this Saturday at Homeland Letter Kenny. OK, if you want to watch the draw for a thousand-year-old cash go on to our YouTube channel now Highland Radio Ireland or if you want to watch it on Facebook Highland Radio or Highland Radio News & Sport 1000 Euros being given away now another 1000 Euro on John's show and then next week on this program will it be between 11 and 12? I would think so. We will do the draw for the holiday 10,000 Euro of a holiday to Oh, actually it's on Thursday. Is it Thursday? Yes, because Friday is good Friday. OK, Thursday that's OK. Right. So when when you know like on the prices right or any of those shows Michael off new look do you know the Michael and the bikini Yeah, do you know what were the ones that used to do that there? That's an iron. You've won an iron. What was the I forgot what they were probably dollars. Yeah, what were they on sale of the century Yeah, yeah, yeah or like you always see them on movies in like a boat show. Yeah. And they're selling the same boat. That's your job. Michael that's a long way winded way of selling that. Is there a bikini for me? I think so. I would like the ongoing use of my eyes and I'm not sure they would survive that site. Bunch of smugglers would be bad enough. Let alone a bikini. We're bound to be breached. Right. Okay, right. So the trombola is behind you. So let's get into that. We'll move that to one side. I'm spinning it. Michael should pull it out. Yes. Well, let's choose our language carefully. Okay. All right. It's being rotated as we speak. What? No. Quick close the door. I know. I know. I know. I know. I know. I know. Close the door. I know. What's happening? Oh, that's it done. Right. Now look at me, Michael. Yes. Take your left hand and insert it. Okay. Dig deep. Or actually take one from the top. Why, you know, maybe the person on the top should win. I don't know. You've gone right around and I've grabbed one. Right. You've grabbed it. Okay. And you've produced it. You're handing it to Finula. And the number is even number. Okay. The number is one seven zero zero. So that will go back in, but not for now. We'll keep that out for the moment. Okay. You can take your seat there, Michael. If you wish. And back to where you were previously is good. So we are now reaching out to one seven zero zero, the person. And hopefully listen, they'll come on out. It'd be nice to tell them there's one on there. We shall see. Okay. So just to remind you folks, if you bought a ticket already, you are in with another chance to win a thousand euro. The winner of this one thousand euro is going to go back into the trombola. And next Thursday, we're going to be drawing the holiday of a lifetime or multiple holidays of a year. If you like, ten thousand euro holiday voucher plus five thousand euro cash for you to use, if you wish, as spending money, fifteen thousand euro, its value in total. And the website remains open for you to buy your tickets now. You can go on and do that. Right. Okay. Exciting stuff for you. I love giving things away. Oh, and this is so exciting. Every time I think of it, I think of a new place that I want to go. I've always wanted to go like drive across America. Yeah. Totally could do this. Well, I would do Canada. Yeah. I do a two grand American kind of a trip. But then I would sort of leave it there and try and get away maybe a little bit more short-haul, more often. Oh, yeah. And now, although I did Kenya one time in four days. So you can totally do. You can do Africa in four days. I just want Michael, you're much of a traveler. No, I'm not a traveler. So if I had a lot of cash like that, it would be probably just comic books and just kind of stuff. And maybe go to a comic. Oh, Comic Con. San Diego. Yeah. Oh, I'd love to do that. Yeah. Yeah. 100%. Yeah. I would like to go to Comic Con. Yeah. That would be awesome. Or any of them. Yeah. Like the big one obviously. But yeah, any of them. Okay. So this is okay. Right. But can I tell you that the person who won this ticket is from letter Kenny and the ticket number was 1700. The winner of a thousand Euro in cash is Evelyn Campbell. Oh, congratulations. Evelyn. Hopefully you're listening, Evelyn. You are from letter Kenny. She knows that. I'm just letting everybody else know. And you've won one thousand Euro in cash and we will be in touch with you to organise delivery of same. Now your ticket is here in front of Nudde. Should we put it back in the drawer to the live. I wonder. Yeah. Okay. There it goes. The locks coming on. And you know I love my spin. Another spin. Mixing it all up again. Right. Okay. Yeah. I did. Yeah. Okay. Oh, sorry. Oh, right. Didn't realise that. Of course. The line is now reopened for those who have not entered. I know. You're on John show. You can all, you can all take us between now and then. I didn't realise that. Thanks for the heads up, Caroline. So you can go online highlandradio.com buy your tickets there and to be with a chance of and do you know Evelyn's in with a chance of winning that. I know again. Okay. Right. Evelyn, good morning to you. It's Greg here on Highland Radio. You've won the one thousand Euro cash prize on the 90 noon show this morning. Congratulations Evelyn. Thanks very much. Are we treat for you? Thank you. That's great. Thank you for entering. Did you enter today or when did you enter or if you had to take it for a while? No, I had to take it for a while. Okay. Yeah. Had it before the last one anyway. Brilliant. Well, listen, we have just drawn your ticket out live on the radio. It's ticket one seven zero zero. It's back in the draw drum. So you're also in with a chance to winning a thousand year on John Breson show with a chance of winning that prize, the big prize next Thursday. But for now, you've got a thousand Euro to spend on yourself on other people. Whatever you so wish, Evelyn, it is yours. I deserve a kiss. Beg your pardon? I deserve a kiss. Okay. Is there someone in the background saying it's theirs? Is that what was happening though? Yeah. Well done, Evelyn. Are you a lucky person generally speaking in competitions? No. No, not really. We're good. We want to try to debate. Oh, is that all? All right. Okay. Well, sure. I can understand what you might forget about that trip of a lifetime, Evelyn. Well done. Lovely to speak to you. You sound like a lovely person. So I'm delighted that you've won. Thank you. All right, Evelyn, take care. That's Evelyn Campbell, the winner of that. So the lines are back, not the lines. It's predominantly the website is what we want you to use. The ringing us in is for those of you who don't have access to the internet and all of you. But you can go on to our website, click the icon, Highland Radio, the holiday icon, click in by one ticket for 10 euro, they get cheaper the more you buy, six for 50, 10 for 80. And you can attribute them to different people if you want to gift them or whatever it is. And obviously, I want you to only do so if it's a bit of fun for you and you have the money and you want a chance to win a fantastic prize. So if you can't use the website for whatever reason, call us and we will accommodate you 07491 25,000. Okay. Right. No. Okay. It's all very exciting. This is going to be a real anti-climax now because we're practicing to Michael Waffle. The worst anti-climax ever. So we go to the cinema this time. Will I put on a French accent? No. Would that help? Would that help? No. I said French, Greg. Oh, yeah. Okay. Is that not Italian? No, no, no. All right. Then Morbius is it? Yes. We were talking about universes. Universe. It's not Marvel Studios that made this one. It's the Sony company who owned the Spider-Man character and the other Spider-Man characters. You're starting to lose me here now. Okay, yeah. So you need to stop talking. It's bad enough talking about universes, but when you talk about different film companies that own different elements of it. Well, most of the people out there will know what I'm chatting about. They'll know about it. Do I throw it at you? So anyway. So this is a story about a Marvel superhero that you probably have never heard of. He's a scientist. It's played by Jared Leto, who I'll always remember as Jordan Calilano from my so-called life back in the 1990s. Bless. Bless.  And guess what, Greg? He accidentally turns himself into a vampire. There you go. Fantastic idea. It is really, isn't it? And Matt Smith, who is probably best known for playing the doctor. He flies spiders, and now it's bats. And now it's bats, yes. So he is the friend who's the bad guy in this, Matt Smith, who played the doctor and doctor who. This movie has got something like, checks my notes, 17% on Rotten Tomatoes from Critics. Critics don't like this. It is 70% from fans. OK. But I definitely am siding with the critics on this one. Yeah. The movie is not bad. Excuse me. It's not a terrible movie. It's not one of those oh, so bad you have to watch it, like Fantastic Four was in 2015. Rather, it's a sort of lukewarm, lackluster, almost storyless film about this guy who gets into a couple of fights. The movie, I used the term bad guy earlier, but really the film doesn't have a villain. It doesn't have a villain. He doesn't really, he does some bad things, but he's not really a villain. And a lot of these movies and a lot of stories, think of all the Bond films. It's always about the villain. You need a good villain. So this film doesn't have one. It doesn't have much of a story. It has some great looking fight scenes. Is it a set up for more? Oh, yeah.  It depends on your audience that, because some audience go, wow, right? That's, you know, my lips are wet for this now. And others go, well, I needed something a bit more for this experience. This is from the, I know you don't want to chat about Sony's and all this. No, I'm joking. I know you're joking. But they made the Venom movies. Now the Venom, the two Venom movies are great fun, particularly the second one which doubled down on everything that was good about the first one. So the hope was, and my hope was going into Morbius was that, oh, maybe it'll be a bit like Venom and it'll be a good crack. But it's not. The fun of this escaped me, completely eluded me. I didn't, it's only 90 minutes, but it still drags. It feels like it just, it just feels like a long movie because you're constantly waiting for the story to start and then the credits come up and you're like, oh, there never was a story. Is this primarily a cinema release? Oh, yeah, completely. It's only in the cinema, yeah. Very short for one of these types of films, it seems. Yeah, very short for one of these. Okay. And I don't think sometimes when that happens, and again, I'm thinking of Fantastic Four, Josh Trank's movie from 2015, usually it can mean there was problems behind the scenes, but not in this case. This movie now, although there was no problems, it was delayed numerous times. This movie was supposed to come out just before the pandemic. So it's like two years old. Okay. That doesn't, neither here nor there. Do we know if the sequel to this is already in production or was being produced at the same time? There's been no word of a sequel. I think it's underperforming, I think, at the box office. I think we'll know a bit better maybe in a week's time what's happening. I would be surprised if there's a sequel, to be honest, because I don't think it's got enough traction to continue, but I could be wrong. See, I mentioned Death in the Night a little bit earlier on. It pulled in like over a hundred million in America, but I think it went straight to Disney here. I'm not sure if it got as good. Is there a danger that the audience are starting to think, you know, that they could start thinking, well, that's more of a Disney or Amazon film than a cinema film, and then could start judging it in a different context. It could maybe start to chip away at cinema. Box office. Yeah. I think that is a definite concern, especially now when we've all got the larger television screens and people have surround sound. You know what I mean? And you can get an amazing experience watching a movie. I think there needs to be more definition between that is cinema and that's streaming or a bit of lag or something. Well, it's interesting because watching on Wednesday, watching Morbius and then watching the second episode of Marvel's Moon Night, and that is a TV project, but in every way, Moon Night is more spectacular. It looks amazing. It's got a better story. It's got better everything. And again, it's Marvel Studios. The one thing you have to handle for Marvel and the reason why I really like them so much and I would never go and see this Morbius. You know what I mean? I didn't think it would be your... I love a comic book movie so it should be like top on the thing. But the thing that makes Marvel so good is they really throw money at the problem. And you just... There is an expectation that every comic book... You always end up with a really high quality product. You may not particularly like the story. You may fight. You know what I mean? This might be for you as anything is, but there's never... I don't think there's any of them that I would like to see. The production value is lower. They didn't look amazing. It looks amazing. And they're also always pushing maybe actually even pushing the envelope in terms of what you can do with CGI or in terms of action. Yeah. And that's what it is. With Doctor Strange, the next one we know from the last... We know the next one is going to be visually very exciting because they have done that before. They've like created things on screen. Yeah, I know. But then the thing is again, you know, I think 7 out of 10 people who've watched it enjoy it. It's the cinema. It's the popcorn.  The fans. There will be a fan base that will be highly motivated to vote this high online. See, this is loyalty, isn't it? Yeah, there is. Like this is about... This is like the Oscars and the Flash winning the big gold. There's probably a telegram group saying, right, I know it's a bit of a turkey, but get on rotten tomatoes and give it four out of five. Do you say telegram? Yeah, you know, these... Instagram. No telegrams like, you know, secret... For movies like this, you cannot be... Like, even the other day I was sitting around doing something and I watched one of the Avengers movies again. Love it. And it does lose something on the TV. Of course it does. You know what I mean?  When you know it's going to be a movie that's going to have a lot of explosions, a lot of fight scenes, a lot of stuff like that in it, you go, to me, not seeing that originally in the movies if it's a bit more drama. And even if you have a really good surround sound system, you don't bang it up like you would in the cinema. And Morbius looks amazing. I mean, the fight scenes and the visuals, like when they're doing the fight scenes, they do that thing where they slow everything down to stills. So when he's fighting the bad guy, and it's not really bad guy, it looks amazing on the big screen and you're glad you're in the cinema to see it. I just wish there was a better story, that's all. Just a better story. And I'm very excited to see that.  It's like, come on, Jerry. Power Spinner Force is a must-see. Tommy from the original series moves to Chicago to take over the city's drug scene. OK. Tommy was actually probably one of the weaker characters for me in power. No, that's just my opinion because I've seen him in so much stuff. I have, I think I've yet to see the last series of power. So I must watch that. Someone says what they mean by that. Watch the documentary about Nicky Graham on Channel 4, very sad. I would imagine it was very sad. She seemed like a very troubled young lady. Troubled, but also a very, you know, engaging, happy. I mean, she was hugely popular and a big brother and what happened. I'm surprised neither of you watched the Jimmy Savile documentary on Netflix. I knew. I knew. I knew.  The first episode last night, it's a story we kind of very familiar with. If you know what I mean. Is this about the cover-up more than what he did? Well, the first episode is really, you know, how this person was created, how involved he was with the likes of the Royal Family, the media. I want to see that. He comes across really well in the first episode. Oh. If you could call a halt to it after the first episode, you'd be like, oh, they really should put that in. But I can see what they would really. But also, I think if you look more deeply into it, it's like, you know, you can do really do anything if you know the right people. You know, if you're in a certain sort, you can really get away with anything. And he believed he could. He genuinely did. And he was- Untouchable. He was dropping comments that point directly to that. So I'm on episode one. I don't think there's only two, actually. Yeah, there's only two next ones. I wouldn't watch it because my take was that it's about this that is fascinating to me because he was so big inside the BBC and so respected by so many people. Netflix is international now, so you know- Well, that's it, you see. They have to set the seat. If you're in America watching this, you would be saying not possible. Oh, yeah. That's what was on Twitter last night. The Americans were reacting to this and they were like, what is this? Okay. Listen, we talked so much waffle on this item. It's my absolute pleasure now to raise the bar, the standards in welcoming on Bishop Alan McGockey and the Bishop of Ruffo.  Thank you very much indeed for joining us. I hope I do raise the standards. Well, you- Minimum- Minimum quadruple- You're putting that up to me here. You quadruple the minimum. Listen, we're talking about something coming up on TV tonight. It's the pilgrimage, the road to the Scottish Isles. It's a documentary airing tonight, as I mentioned, and for the next two Fridays at 9 p.m. on BBC Two. Now, tell us your involvement in this, Bishop, please. Well, our interest is that tonight on this first episode, they are walking Schley Column Kill. They're basically and the team of people who walked with me over the last two years were very much in the background guiding them as regards, roots and supporting their arrival in Donegal and their journey through Donegal and into Derry. So that's our big interest is that certainly tonight Donegal and the Schley Column Kill are going to be front and centre. Yeah. What an opportunity to showcase the beauty of it. I mean, you as a very active outdoors person, you know, you know, like the back of your hand, but there might be, there's an element of pride there that others are going to see what we have access to. Well, they told us right before they came that they reckon on this first run on BBC Two, there'll be maybe two million viewers. And then when this thing is, is, you know, when it goes around the world, it's multiple millions. So there'll be an awful lot of people are going to see Donegal and they're going to hear about Schley Column Kill and that whole heritage, which is just really exciting for us. Yeah. And as you say, it's the reach. It's absolutely massive. Are you in this? No. No. You're not in this, but you're familiar. No, there are other celebrities like that, the cricketer, you know, NNB News Cricket, they've heard of Monty Panazar and Lawrence Llewyn Bowen. He's the one with the hair. He's the interior designer. Louis Klein, Nick Hewer, Scarlett Moffat, of course, who's very popular. Shazia Muraza, Will Bailey, the only person missing from that list is Bishop Alan McGuckian, really. And I was, I was kind of standing around the edges. He said, I don't know what was wrong with them. Okay. Well, listen, we're looking forward to it. I'm sure you are too. Are you familiar with the program? Is there a spiritual element to it, Bishop? Well, I have seen bits of it before. Yes. If you remember, some years ago, there was one where Dana was the Irish person on it. And I gather that people, you know, agnostics and Sikhs and Muslims and all these, they have serious conversations. And there is. No, it's a, but it's, it's a, yeah, there's a kind of a personal exploring thing on it. Okay. Excellent. And it's all intertwined really. Listen, thank you for, for helping us to, to flag it and let people be aware of it. Bishop, I really do appreciate your time. Thank you. Great. Thank you very much. Indeed. Lovely to see you and speak with you. Okay. Back with a wrap up from Michael and Phelan after these. So, we'll be focusing on the success of Creven community and Enterprise Center in Terman. I'll be speaking to center manager, Mary de Hardie. And I'll also be catching up with Karnik Carlin. Community operations manager with Gigabel and Neil Sullivan, founder of Halffield Green, who are both based at the co-working plus G tech digital hub located within the center that was officially opened last week. So join me, Cure and Donald for business matters on Sunday evening after the six o'clock news. The business matters podcast is also download at www.heidelvideo.com. Business matters in association with the Faculty of Business at ATU Donegal. Looking for a career in financial services? Consider the Level 9 MA in Governance, Compliance and Data Protection. Take the next step in your career and contact the exec ed coordinator on 9186206 or email execedexeced at lyit.ie today. On the farm, if you need some machinery parts, contact Tinney's Agri Spares in Etter Kenney. Specialists in parts for Sammy, Lamborghini, John Deere and Zetter. Also stocking a full range of service and wearing parts for Coon, Bailers and Moors. And a full range of agricultural lubricants at unbeatable prices. On the farm, get it sorted at Tinney's Agri Spares, let grow at Etter Kenney. Call 9-1-22374. Centra, we have great offers, like Centra Extra Lean Mint, 330g, only 3 euro. Pringle Selected Range, 165g, 1 euro, 50 each. And in our Italian wine sale, San Valentino Pino Grigio, better than half price, only 7 euro.  A massive spring bed sale is now on a grow furnishings, your local easy living store. For one week only, there's extra discounts on all beds and mattresses. There's 20% off all silly beds, along with surus, nimbus and stratus mattresses. And there's free delivery to Daigal, Derry and Taroam. That's right now at Grow Furnishings, Kiltoy Road, Letter Kenney. Highland Radio weather updates with Ireland West Airport, Gatwick Spac. You can now fly Delhi to London Gatwick with Erlingis. The perfect gateway to explore South London. Ireland West Airport, you're flying. OK, so showers will be wintery in nature today with hail sleet and some snow flories. Temperatures 69 degrees, but temperatures dropping to just two to three degrees in showers. Moderate to fresh north and northwest breezes, gusty around showers. Now, just to let you know, by the way, I'm a serious note that there's been a road drift traffic collision in the gap from Balabafe to Donegal town. So we're being told at this point to ask you to avoid the area if possible. And actually just had an update, too, from Connor. Thank you, Connor, for that, by the way. He's stuck in traffic in the gap. That is because of an RTC. Adam is doing a bake-off for Temple Street and Cromland Hospitals. They're having tea and buns in the parish hall in Castle Finn from 10 a.m. to 2 p.m. tomorrow morning. So if you want to support a local young person, Adam, and Temple Street and Cromland Hospitals, there's tea and buns in the parish hall in Castle Finn from 10 a.m. till 2 p.m. tomorrow. But again, just to let you know, there are delays in the gap at the moment because of an RTC. We'll keep you updated on the news, but primarily my thoughts are with those involved, and hopefully everyone will be OK. Right, 08, 660, 25,000. You've been keeping us really busy on the phone lines all day. We really do appreciate it. We've about two minutes. We're still in the company of Michael and Fnullis. So I'll let you guys agree it out. Well, do you want to talk about what's coming up this weekend? Because I think it's nice that we flag stuff. Knives out. This is with James Bond in it, isn't it? Yes. Daniel Craig. Yes. What's on TV, is it? Is it? I don't know. It's on the list. Oh, it's on the list. Is this an old list? It's not on my list. No, my list is that. I've got all the old Knives Amazon from today. Yeah. That's a different one. Knives out is different. Different. Knives out is on one of them. Because actually, we had it. You could have made the link for me and got me out of that hole. He mentioned Knives. Something about Knives is on this weekend. It's on your list. I wasn't sure whether Michael might have put Knives out on his list. Dairy Girls, actually. Maybe let's give Dairy Girls a mention. Well, Dairy Girls, the final series is starting on Tuesday. So it's going to be at 9 o'clock. I have to say I did enjoy it. And I didn't think I would enjoy it. No, no. I actually did. No, no. I did really enjoy it. And I didn't think I would enjoy it because I'm not normally into Irish comedy. I know what you mean. And I find it just doesn't tickle my fancy. But actually, I have to say I just thought some of this was, there's a few characters in this that are just so well-written. And they're not even the lead characters. There's nothing wrong with the Four Girls and the guy that does it. But you know, there's a none in it. And she's absolutely worth anything just to watch her act. Are you surprised they're pulling the pins so early in this? I could have presumed it. Not really, because I'd say they're going to have trouble now, first of all, with my fellow Oren Maureen, who is now in Bridgerton. Kira. Yes, yes, that's it. Oren Maureen. Nicola. Oren Maureen. Nicola, kind of keeping the cast together when something's so popular. I'd say that's going to be an issue. And I don't know what the others have been doing, but I'm assuming that they've been doing others. OK, plus quit while you're in betweeners. Quit while you're ahead. No, leave. Faulty towers. How about it, exactly? Leave three series that are highly regarded. No, I think there's a lot of such stuff. And also, there's only so much of this, I think, you can do. In the sense of what's really good about it is the way it kind of blends, and particularly for somebody like me that wasn't born a rare to grew up with the trouble surrounding them. It just really, for me, as an outsider looking in it like that, it just really seemed to blend it in as part of their life. I don't know, OK. But you'd wonder how long you can kind of keep that going. That's Tuesday, Channel 4. Michael, thank you so much. I love it. And I really appreciated what you did with the tremola and the beauty that you brought to it. And I appreciate you not taking your shirt off to expose. I know the bikini you put on anyway in the hope that we'd ask you. And, Finula, as always, thank you very much indeed. Thank you. That item back with you next Friday, 11 o'clock. We're back with you on Monday morning at 9. Stay tuned. John Breslin, with £1,000 in his hand, is coming up after the news at 12. Have a fantastic weekend, everyone. The Night on Noon Show is brought to you by


Welcome back to In the Studio at Davis Media Access. I'm your host today Madeline Hamaguchi. And I have some special guests with me today from the Davis Shakespeare Festival. Gabi Batista is the development director and Kyle Stoner is an actor in this season. So we're just going to jump right into it. A lot of people come up and ask us about what is the Davis Shakespeare Festival or they say to us. I know there was a Davis Shakespeare Festival in town. So Gabi can you tell us a little bit about, I guess, what is the Davis Shakespeare Festival? What do we do? Good question. Well, the Davis Shakespeare Festival is a festival that goes on through the summer and it actually lasts from mid-June till the end of October. And it's the idea of during the summertime the community can tend to feel empty because students are out, summertime, kids are busy, families are vacationing and sometimes that can leave the town of Davis feeling a little bit lonely. But the idea of the festival about nine years ago was to create an event in which people could go to in Davis to keep the town alive, to keep the town busy and bustling and the vision is to eventually create a destination location for people that live either in Davis or people that live in the surrounding areas to just come and enjoy some theater, enjoy the community, what's around in Davis. I mean, Davis has so much to offer in terms of art and music and culture and I mean it's becoming a well-known establishment even in the recent years. So we have been very excited to be a part of that especially during the summer season. We would call it the slower season but now we even find that it's getting busier now in the recent years. The summer extension is happening with UC Davis and there's newer businesses that are coming through town and so we're actually seeing more community come together even in the summer months and we're very excited to welcome people in and show them our shows and actually educate our audiences with classical plays and off the beaten path musicals and then putting a spin on our Shakespeare shows which are always very exciting. We love to modernize our Shakespeare and even do an outreach with children to teach them that Shakespeare is tangible, it's very colloquial and you can really relate to it even today. Right, it's current, you can understand it because it talks about core human aspects of life. Exactly, yeah. You know, you were mentioning a little bit about the classical plays and the different kinds of plays that the Shakespeare Festival does. And I've noticed that Davis Shakespeare is part of kind of a theater company boom it seems in Davis.  So can you tell us a little bit, like, how these classical plays sort of work with Davis to represent? So, like, the mid-summer night's dream last year, for example, that brought in various aspects of Davis in terms of the culture, the town, even how people dress, how people talk, stuff like that. Yeah. It's really exciting to find that now we have a lot of theater companies, I mean, there's been theater companies in Davis that we've been inspired by and now we're finding that there's new developments that we're still inspired by because there's now a company that is doing new works and really challenging Davis to think outside of the box and to educate Davis even more on how important new works are. I think for a Davis Shakespeare Festival what we really love about classics is kind of putting that same or similar edge or approach to it as well. It's challenging the audience in a way of modernizing the text through the theme and through the style, the way we dress the actors, and Rob Salas, who usually directs the Shakespeare, really loves taking the Shakespeare play and modernizing it to a very specific theme. And last year was very special because it was Davis Centennial, so we really wanted to pay homage to that and celebrate Davis the way everyone else was last year as well. We really wanted to honor Davis and tip our hats off to, I don't know, to pay attention to the little things in Davis that you may not notice on the everyday basis, but just how many people ride their bikes and how many bikes that have quirky lights on them or the people that just bring so much character to this town because they've been here for so many years and they just appreciate the history and there are so many Davis locals that just are so proud of having generations just living here and appreciating the growth that has come from that. So we really wanted to specialize in that theme last year and just make it this fun whimsical bike town of mid-summer instead. So having Puck, who Kyle Stoner, played right on how many bikes did you ride on? About seven? Seven or eight, yeah. A lot. Yeah. And that was all sponsored and we borrowed those bikes from Whimsical Bike Man, who has a whole yard full of bikes. He's a cornerstone of Davis, yeah. So it felt like an honor to really focus on that and bring people from all corners of Davis to be a part of this show and it was a really special experience and I think coming from that show we really want to continue to honor Davis in the way that it's helped us out as a theater company so much to expand and grow. We want to make sure that people in Davis really feel honored as well at the fact that we really appreciate the community so we want to share what we design and create with them. And like you said, it goes through to this season and Kyle, could you tell us a little bit about the shows this season? We do have a musical. Yeah, so every year during the summer season we have two shows in repertory. So this year we're doing, on the 20th century is the musical we're doing and then every other day we switch out the show. So it's on the 20th century is the musical and then the play is called Mary Stewart. Cool. It was originally written in 1800 but we're doing an updated translation with modernized text but it's not a Shakespeare play but it's a classical play so we always try to do unique, usually unheard of musical and then a classical play in repertory during the summer season. So on the 20th century it's like a zany satire, it's kind of like this musical theater producer who's washed up but he's on a train from Chicago to New York and he has to essentially write a play and cast a star in the play by the time he gets to New York and it's just this really zany comedy that's kind of like melodrama and satire about them trying to scramble with crazy people on the train and stars and washed up producers and it's a really funny show and so we're doing that show and then on the flip side of the repertory season we're doing Mary Stewart which is a play that was written about a fictional meeting that never happened between Mary Stewart and Queen Elizabeth because Mary Stewart was imprisoned by Queen Elizabeth because of her right to be heir to the throne and so Queen Elizabeth imprisoned her and it's a big story in history but the play that was written in the 1800s added a fictional meeting where they actually met and the play is really cool because the text is beautiful but having these two like towering historical female figures like come together in the same scene is really interesting to watch because there's so much history behind each of them as real figures so it's a really cool play to explore like how their personalities clash and the palace intrigue that happens around the two of them and the revolution that's happening under Mary while she's being imprisoned and so the different thing about this season is that normally when we do the classical play it's generally been a comedy so this year Mary Stewart is a drama I mean there's comedy in it but it's a serious play and it's really interesting and engaging and compelling and so this year we're doing like Zany comedy paired with this drama and it's going to be a really cool season. Yeah that's going to be exciting and Shakespeare too. Yeah so we do the summer festivals those two shows in rep and then in the fall we're doing as you like it which is a comedy Shakespeare's comedy and it's basically about this woman who is banished from the city that she lives in her father's you know a very important man and I don't really know what the concept is going to be as far as design but the play itself is very funny they get banished to the forest and then she has to disguise herself as a man so that nobody in the forest takes advantage of her and then she finds the man that she fell in love with also in the forest but he thinks she's a guy so she's trying to make him fall in love with her by pretending that she's a girl but she is a girl but she's pretending to be a guy who's pretending to be a girl so it's like you know classic Shakespeare basically and it's got some really interesting characters there's the Jester touchstone who's one of the more interesting Shakespeare fools because he's very highly intelligent and sarcastic and and then jake wheeze who has the all the world's a stage speech that's from as you like it there's a lot of really cool things that happen in that play there's also a wrestling match right and you can see on the screen right now we're we have a website I say we David Shakespeare has a website and you can find out more information about each of these plays and a full plot synopsis and look at cast lists and also if you hover over the we're going to transition now and if you hover over the education tab and you click on camp Shakespeare this is another thing under our umbrella we have a few minutes so let's talk about this and then we'll talk a little bit more as well about how you can get involved so just a little short blurb about camp Shakespeare camp Shakespeare is a really great way for children from ages seven to actually even 18 to connect with our festival every season so we take the shows that we are currently doing and we teach them to any child that is interested in learning more about not only Shakespeare but just theatre in general how to design costumes or make a set or even stage combat or Victorian and Renaissance dancing so we take a lot of the elements of what goes into theatre and we bring it to to our kids during camp Shakespeare so we teach them all these elements and then we teach them the plays that are concurrently going on so it's exciting for those kids to get to read the text and get excited about the story and then when they come and see it at the Veterans Memorial Theatre they they light up they get so excited about what they're actually working on can actually look like what they see on stage so yeah and that's it does it it makes the festival more accessible to kids and in that same light as well kids can get involved and how do and in the last you know minute here how are some ways that people like grown-ups can get involved as well well we do have a very vast variety of opportunities to volunteer so usherings included if you're interested in costumes helping out with the set you can go on our website and under support us there's a volunteer link and you can fill out the form and tell us what your interests are and you can come be a part of our festival it's a great way to get to know our company and our family and enjoy your summer with us yeah that would be great yeah it sounds like your David Shakespeare is looking for different kinds of technicians and ushers and even even also monetary support donations you can see the website on the screen there so you can go there to find out all the information you need thank you so much you guys I wish we had more time but it's been great and I hope you come see the Shakespeare festival thank you and we'll see you next time on in the studio


So I don't think we really need to introduce our first speaker, but I'm going to do it anyway. And Jason, how long have I known you? Ten years. Yeah, easily, over ten years. First time I met Jason, you know how he does awkward hugs? Yeah. He did a handstand and hugged me that way. Yeah, that's awkward to a different level. And he liked it. Okay, I wasn't going to say that part. It was a little fun. Back. He drinks the most Diet Pepsi out of anybody on the planet Earth. If you cut me, I fizz. He awkwardly hugs everyone in the universe. Ball of positivity. Just a wonderful guy who helped me in welcoming Jason Street. Hello, everyone. Where you go? Okay, so this is my legal disclaimer. I always like to start off with the legal disclaimer. I'm not a lawyer, though I played one on the internet successfully before. So when I talk about certain things and it says, well, why would you do that? You're evil. That's bad. It's like, well, yeah. It's like, remember the kittens. I'm adorable.  There's always a contract. I don't do this stuff for free. So remember when we used those sections, just remember that. And I know we're at DEF CON, so that means probably one-third of you are feds. And I do a lot of fed bashing in here, but it's not because I don't like the feds. It's just they give so many great examples of bad security. How could I not use them? And that's not my fault. So sorry, hashtag sorry, not sorry. So let's get going into it. I'm on another list, I'm sure. So here it goes. Toe-toe, because I pony, I pony not. It's quite simply the top three things that I really love my victims, target clients to do, that I love for them to do that because it makes it easier for me to rob them.  And then a little bit of advanced some training and stuff that you can go and take back to your office. It's like, I don't do those talks where it's like, you know, it's like, here's just how it's broken. I like to help fix things too. My bio slide, this is like, if you want to go check me out on Twitter or you want to go visit my website, I do things, I hack things, and that's an actual picture that someone put up in their sock to warn them against me. And I told them, I said, congratulations, you've effectively stopped me and no one else. But I'm not going to be breaking into your building anytime soon. Congratulations. And especially at DepCon, you've seen a lot of really good technical talks. There's a lot of good hacking talks. There's a lot of good content here. And this is a good example of one of our problems with red teaming. It's like, I'm not a red teamer. It's like, so I'm going to make fun of them a little bit.  It's like, I'm coming in and I'm like, I'm breaking in. I'm going through the door. I'm going through the skylight. It's like, I'm punching people in faces and seeing their plans. It's like all these different things that they're doing, everything short of putting on my robe and wizard hat. It's like all these different kind of attack vectors. And when they get done, they write this report and their clients are like, thank goodness, we're okay. They're like, no, look at all the stuff I broke. No, no, no. You guys are like ninjas. Y'all did so much. I mean, of course we couldn't withstand that. Of course we couldn't do other. So we're protected because it's like, we don't have to worry about those kind of attack vectors. It's like, so that's the upper left-hand corner. They're like, that's what everybody thinks is going on. And so what I try to do to my clients, I do security awareness engagements. I'm trying to teach them to be more security aware. I'm not trying to break something. I'm trying to help build something.  And I'm not using Maltigo. I'm not using any other. ReconNG, none of that. I'm going to use two hours on Google. And I'm going to see what I can get. And then I'm going to walk into your building for the first time and see what I can walk into. And I've stolen computers that way from behind teller lines in banks. So it's effective. And what's even more effective is when you go to the client and you tell them, it's like, here's the report. And like, oh, wow. No, no. I had a shirt that said hacker on it and they still let me in your server room. There's a problem. You've got to address. And it's like, yeah, but you've got all this research. Like, no, that was 30 minutes on Google and Facebook on your employees' Twitter profile. And I was playing World of Warcraft at the same time. It's like, still haven't done Mekanon, so don't give me any spoilers. So I was like, that's what I tell them. It's like, so they don't have an excuse. There's no excuse for that. They have to take it seriously because they realize, I mean, I tell people, social engineering is so easy, even I can do it. It's like, and if I'm your common denominator, if I'm your threat model, you've got problems that you need to address. And that's what we need to start telling our clients and start telling our employers. It's like, not trying to show them how leaked we are, but tell them how bad the problem is and why it needs to get fixed. So, and the other issue, especially when it comes to our employers and companies, you look at the left and that's what your CEO expects. We need the fortress, you know? It's like, we need to build those, we need big, we need firewalls, we need bigger firewalls. We need, they need to be huge. China's APT is going to pay for it. It's like, that's what's going to happen, right? It's like, and then you go to them for a budget and what happens? Well, we'll give you that to the right. It's like, that's how much fun that you're going to have. I'm sure you'll make it work, you know? Stangers to go alone, take this and you're good. Which is a problem as well. So, we have to start balancing the budget. It's like, what happens when we don't have enough resources but we're still expected to secure everything. So, that's another conundrum that we're facing and once again, I say one of the biggest solutions on that is always going to be your users. It's always going to be the people. So, let's get more into, this is actually one of my offensive talks but I do get a little ranty. Sorry about that. So, one of the first things that I love, I love when I come into a company, employees are not empowered or educated to question the unusual. That's amazing. And we're talking good employees, we're talking people that are smart, they know what they're doing, they know how to do their job, but no one's ever told them that part of their job was security. So, therefore they didn't have to worry about that part. They're inside a secured building. The only thing worse than no security is a false sense of security. Because when you get past that guard with the badge reader or you get past this elevator lobby, it's like, well, you're safe. Good. Except for I go usually through the freight elevator and I'm inside your building and now you're not so safe, but you still think you are. And this leads to one of the engagements that I was on at the beginning of this year. And it was a location, it was like an undisclosed location because they're probably still upset with me maybe. And I went in and I had one of the USB Ninja cables. It's like just got the cool MG cable. I've not seen that one yet, the LMG cable. I can't wait to play with that one. But I got the USB Ninja cable and it's a lightning cable. It looks like a lightning charger cable and you can plug it into a machine. You don't even have your phone attached to it, but you can charge your iPhone too if you like it. And it comes with a detonator. It's not called a detonator, but I like to call it that way because it makes me sound cooler. And you got two different payloads by two different buttons. So I literally walk up to people in this one section, there's like eight of them sitting in this open office thing because we all love those. And I went up to them and I said, excuse me, I'm doing a USB rights check. We're making sure our domain policy doesn't allow you to actually charge your devices on your computers because you have certain outlets for that that you're supposed to be using. So I just need to do that check real quick. And so I plug the cable into their computer. There's no phone attached to it. It's just a cable. I plug it in. And I could, you know, I couldn't walk away or I can do something like that and do it all discreetly or like reaching my pocket and push the button and see what happens. Oh no, I pulled the detonator out. It's got a little box with an antenna and I'm like, I go boop. It doesn't really go boop, but it sounds cool when you say boop. It's like so boop. And all of a sudden notepad pops up on their screen. It automatically types out to test completed successfully. Thank you for your cooperation. Smiley emoji. Little odd, don't you think?  I mean, these people must have dealt with ghosts in the before because not one person out of eight questioned that. Not one person out of eight questioned a cable being plugged in and a payload deploying. That's a problem. That is not cool. It's like, I mean, and I was looking at sketch, I mean, I was dressed as one of the scariest things I can do as a business person. They should have realized something. And so that's a problem. We need to educate our users. We need to let them know that that's part of their responsibility. Now, one of the things I hate, not the CIA, I'm sorry guys that are in here, no, is open lobbies are very secured and very wide, you know, clean lobbies because it's hard for me to loiter. I don't know if that's really what the CIA lobby looks like. Can anybody tell me what it looks like? Just checking.  So it's like, so, I don't know if I'm ever going to actually see what that front lobby looks like. But yeah, it's like, those open spaces are horrible because where can I loiter to check out what the traffic patterns are like? It's like, how can I get reconnaissance? How can I actually try to do any kind of Wi-Fi attack or RFID attack? So this reminds me of another story. It's like, I was in Moscow, Russia in November, in November, going to a couple of hacker conferences and I was at the one in Moscow and six of friends knew I was in town and so I'm already on a list right now. Someone's like, is he on that list? I am, trust me. Any list that any Fed is thinking about putting me on, I'm already there, don't waste your time. So I go there and it's like in some friends room, Kaspersky was telling me, hey, you want to come down into the headquarters. And I'm like, I'm friends with Eugene. And I'm not joking, I really am friends with Eugene. It's like Metal Meta Conference. He was an awesome guy. Really funny. It's like, I said, yeah, I want to show up and then check out and see what the place looks like. So I get in there and I'm looking at you. I mean, I've got my hoodie on. It's freaking cold in Moscow, November, FYI. And so I get in there and I got my bag and there's this lobby and it's got some really cool open lobby and there's like two guards on either side of the receptionist desk area, but one's like really attentive, like right there by the where the employees go to badge in and there's also this really cool elephant dolly statue, you know, Salvador dolly statue, which is you should go check out on the internet. It's cool. There's these long leather couches and I'm like, awesome. And I can't help being bad. It's like, I'm not trying to rob them, but I always like to check to see what security is like and how it works. It's just one of those things that I do. I don't ever go anywhere with it, but it's like cool to figure out. I was like, where's the cameras? What's going on? So as literally, as soon as I get in there, I'm not going to the desk to the receptionist to log in. I just wanted to go and check to see what kind the security was like.  I don't know if his name is Ivan, but he looked like an Ivan. Okay. This guy was like huge. It's like he was like his shirt was like two times too small or muscles four times too big. I don't know which it's like Ivan starts walking over to me and he goes like comrade, can I help you get to the receptionist? Are you meeting someone? I don't know how to do a Russian accent. But I was like, I mean when you're that big, you don't have to be rude. He was very polite, very friendly and it's like just don't break me in half please, you know. And so I was like, so but I will tell you this right now as soon as he said that's like, oh yes I'm supposed to be here. Let's go and do whatever you need me to do right now. And that was perfect. That's what it's supposed to be. You're supposed to have your security that engage. They're not supposed to just be looking at a screen. They're not just supposed to be I went into this building one time and by badge, my visitor badge was printed on regular paper and I just walked by and not into security hey, what's going on? And they opened the door. That's not the way it's supposed to be. It's like you've got to make sure they're questioning, make sure they're looking for the proper IDs, make sure that they're paying attention of what the lobby looks like, what kind of foot traffic is going on.  So once again, you know, you can't talk about bad security without mentioning the TSA even once. And sorry for any TSA. I'm joking, TSA is not in here. It's like going to take security seriously for that. So one of the biggest problems is no egress filtering or internal monitoring. One of these things, one of the payloads that I have on my bash money, it's like, thank you hack five, it's like no plug, but it's like the payloads that I have is I plug it in and it telnets to tau.blinkylights.nl It's a wonderful payload because what happens in your command prompt, it runs ASCII Star Wars which is amazing. Not so amazing is why in the world is Bob in accounting able to telnet to the Netherlands without anybody wondering why that's going on. That's a problem. Why do we have this egress filtering problem? How can you lose 1.83 terabytes of data from your network, Sony and not have someone think about what's going on here? I mean the networking department should have at least said, hey, do we need to increase the bandwidth? You know, it's like someone should have noticed something. One terabyte of data should not go to Paraguay. It's like and not have someone question. That's all I'm saying. No offense to the Paraguayans. So that's one of the things we have to do. We have to do proper egress filtering. People go and say they keep assuming and they keep with this idea that our internal networks are safe. I'm sorry, the attack is coming from within the house. That's where it's at. Do not let just blind egress filtering. It's like make sure you're monitoring. Make sure you tell that all ports are allowed for all your users to connect outbound. Because who's actually going in and just like trying to like connect and just break it right into the firewall. No, you're sending an email. You're sending a malicious link. The user does all the work for you. They run the payload. Now you have them calling back to your command and control center with a secure connection and they're established inside your network. It was they started it. They didn't start the fire but it was the other guy. Still, it's bad. I'm full of these guys. I'm sorry.  Because if you're not, don't worry. Eventually I will be. That's not something you really want.  What a bummer. Okay. I go through. I mean I buy all the cool proxmars. I got the boss cloner. I got all these really cool RFID cloning tools. You've got one of the key fobs that don't do nothing but it looks like really cool when it lights up and people think you're serious. It's like I got all those tools and it's like and then I get to a door and boom there's a keypad. I'm like oh well this was unexpected. I guess I'll just wander around and act like I'm on the phone until someone can let me in. And so you have to have dual factor authentication. You have to have multi factor. And also trust me when you're having you can't just say you have dual factor authentication have RFID badge reader and then a keypad that has been so worn down with the number two and a four and a one and a three and go we're secure. I wonder what that passcode is. It's like you know what could that be? It's like you have to make sure that you're changing the keypads. You've got to make sure that you're using the right I mean it doesn't have to be that cool where it's like the changing the combinations and you need to know the algorithms. That would be cool if you could do that but it doesn't have to be that. Just something that doesn't so people can guess what the next passcode is going to be. And another thing about dual factor authentication it's like by going in and seeing the company. I saw just recently that made some mistakes but they also did something really amazing. They segmented their office building. It's like it was in this big high-rise office building but you could not get to the other section of the same suite without using a badge.  I'm not going that way. I go over here it's like oh maybe okay I'm just going to go to the break room and try to reorganize. And so I mean because that will stop at yours it's about delaying the attacks. I mean I eventually stole a woman's badge who left it on the desk and everything but still it took time and that's what you want. You want to be able to stall attackers time. It's like how many people here have a fireproof safe or fireproof? No one. They're fireproof up to 3 hours. They're fireproof up to 6 hours. They're fireproof up to 12 hours. It's like the more money you spend the more your safe can withstand a fire. Explain that to your executives. The more money they spend the longer you can withstand an attack before it gets detected, before it gets responded to. That's what you're looking at. You're not trying to stop the risk. You're trying to slow the attack as you can. So that would slow me down. That would slow me down. That whole attack surface by being segmented that was an opportunity moment. It's like I didn't plan for that. I mean look at me. I don't adult very well. I don't plan for much. I mean I just yoloed it and then I was stuck.  Everybody done that?  And then when someone opens up the door you don't even acknowledge you just walk right through like you're supposed to be there. That works very effective.  But we have to have multi-factor authentication. You have to have that segment. There's got to be steps. It can't just be I open the door I own everything. If you're not well for you you're going to have a bad day. Now another thing that I see a lot of is everybody that's got procedures. We all got policies of procedures. But how many people use them? And once again another great example it's like thank you U.S. Government Air Force. Two civilians somehow breached an Air Force base and were found only when one of them told the airmen she had been kidnapped right here in Nevada. But it's like what kind of problem do you have with your base security on an Air Force base that the guard didn't notice oh there's a guy driving in with no in a regular like a Honda Civic and very fast and very frustrated and there's a woman like you know up on the glass it's like it's okay. That's a problem. A lot of procedures failed on that do you think? A lot of procedures that failed. And this is not the first time that something like this has really badly happened on an Air Force bases. One of my favorite stories was during the height of the Cold War a Russian agent went into Germany on an Air Force base in Germany and he walked in took a went to the tarmac went to one of the jet fighters detached a missile from the plane then he wheelbarrowed. I don't know. I'm hoping he stole it. They didn't tell me. I didn't read the history. I don't know if he actually found it there or he brought it with him but I hope he stole it there.  We're in Germany.  But before he did, don't worry. It's like he put the red tag on the tip of the missile because German laws are German laws. You don't eff with those. Okay. So he had a he then drove that home disassembled the missile and piece by piece melded it back to Russia and they got a very efficient mail system. You got to handle that. Okay. And like every piece made it. We all have to agree some procedures failed. Some policies were probably not properly enforced. Those are issues and you can always say if that can happen to the Air Force it can happen to anybody. It's like especially if it's happening to the Air Force no if it's the Air Force. I don't have to worry about top secret clearance. Look at me. So it's like it's all good. So that's one of the things you have to talk about. You need to make sure that it doesn't matter how nice your policies and your procedures are on paper if they're not being enforced from the top up you don't have a policy. If your CEO has an exemption on the password reset policy congratulations you don't have a security policy. If your executives think that those rules and those security policies don't apply to them I've got a surprise for you the people they report to they think it doesn't matter to them either. And the people that report to them they don't think it matters either. So by the time you finish within six months no one is actually following the policy except for Bob in the mail room going like I'm supposed to do this you know it's like there's my stapler I'm good you know it's like no fits of bobs or people in the mail room are counting but still that's what you got to do you've got to make sure that up on high the executives follow the same security policies as everybody else does. That's important. So now I went through that really quick because I want to get to some really good stuff not just to be funny okay hopefully I did get some chuckles I was very happy about that especially after the night I had I'm stressing myself but now we want to get to the serious stuff those are some of the things that I did or didn't do to get into a building or break in or rob people so what can you take back to work I've got some questions I have questions for you to tell your employers or ask your employers or ask your users or ask your security team that maybe something needs to be done it's like some of the things that some changes that could be made these are some of the questions that are always uncomfortable and it's like some questions that you just may give you a fresh look at and that's what I'm hoping I'm doing is give you a fresh look at it one thing is Robert Hansen he was a malicious insider he was malicious in his intent and the execution of his compromise I can tell by some of the faces who the feds are that's awesome and it's like I can read faces to people but so he was a bad guy he was a really bad guy but then you've got some genius over at the TSA administration sorry no not sorry the TSA administration who allowed in a public publication published published the picture of the TSA keys does anybody need a copy of the TSA keys because you can 3D print them thank you Johnny Xmas it's like you can actually print them out now which one was an insider threat both both are insider threats we get so focused on looking for attackers looking for people that are doing something maliciously wrong we don't realize some people with the best intentions are totally hosing you down they are totally messing up your security system I had a thought once there it went so I was talking about more on insider threat so it's like we're going a little bit further on that and we'll slide that over to here this is an insider threat correct this is also a problem with policy this was a story that Joseph Cox released I'm going to go all the way here and see if the mic works okay knew the custom border patrol said the traveler and license plate image data hacked from its contractor was not found on the dark web because remember a contractor took it against their policy against the contractor's policy they had the data available on their internal network they moved it to their internal network then they were compromised and the contractor was like oh okay I guess we got to report that we got owned but everything's fine and the border control was like we searched the dark web you're good you know and I'm sure there was literally their PR guy was asking their tech guy what does that mean nothing but it makes it sound really cool when you get owned that you search the dark web because it's the dark web okay so that worked out well for them up to about maybe three hours later when a reporter searched the dark web and found over 300 gigs of the data available for download so what was your insider threat there your first one the employee that went against policy and downloaded the data onto the internal network another insider threat was the team that allowed that to happen in that contractor's company but what else Homeland Securities Response Team they failed you don't go and try to assure people unless you know facts it's like there's nothing more scarier than we're from the government we're here to help, don't worry that's almost as bad as saying I'm from the internet, I'm here to help you it's like that never usually ends well people so you gotta understand that those were all insider threats but hardly any of them were malicious and I got my other story, remember that one when I lost it, it's like here it is so we had an executive who worked at a bank branch and he was a great employee he was hard working, he was dedicated he really really wanted to do his job so much in fact he calculated how much time he was losing in the conference room and not being able to respond to emails not being able to see what was going on getting his emails on his computer or sending things out while he was in a meeting with sales or meeting with other people that he could have been responding at the same time and working and doing diligent work for his company that wonderful employee, legit good guy decided to put a linksus router underneath the conference table connect the internal network to the internet port and voila now he can connect and get his emails everything else that was wonderful until I was able to connect his access point and get access to everything else but he was not malicious he was not trying to do something harmful so you need to understand not all insider threats come from the bad guy sometimes it just comes from and I mean this in the funny way but also the nice way it just comes from human stupidity it's like sometimes we just go and I'm like you think? you think? maybe? yeah that's a bad thing so here's another thing that you need to ask who do your employees ask for identification from especially not that janitor guy he's a little sketch I'd definitely ask for him but who else? CEOs executives who would you ask for identification all of them yes I even threw a little surprise in there because if you look the security guards got an actual ID badge but you look at all of them my friend Ben Tin just told me this at a party here in Vegas which is the reason why I love summer camp is he gave me this story to share and I did tell him I wasn't going to give him credit for it but I just did so sorry but he found this one client that what they did was they played a game of where's Waldo it was amazing gamification for security awareness for their users around the company one employee would have a where's Waldo picture on his ID badge and he would wear that and it would be a valid badge for his login for other login information and if an employee spotted the where's Waldo they got a hundred dollar gift card anytime someone spotted Waldo they got a hundred dollars did people go and say I'm going to be more security conscious I want to make sure my company is protected I want to make sure that my data is protected I want to make sure there's no strange intruders in my building because there's safety problems there's privacy concerns no they said I want a hundred bucks let me start looking at these name tags they still are never going to care about your data but you can make them be concerned about security in other ways by showing you what's in it for them what are the positive aspects for them that's one of the things that you have to do and so that was an amazing thing I'm totally stealing that by the way but you know I made it public so too bad but yet that is a wonderful thing to do for your employees started where Waldo's competition here's another one what does your social media profile really say about you that's a key question it's like I don't run in-map anymore in-map is a great tool it's like I don't go and mess with the OSI model I mean I go with layer 8 right off the bat please don't make me do all number 7 like I said but after all those other layers that are really cool layers you got layer 8, the human layer I don't have to bypass your firewall if I can bypass your receptionist it's like if I can find out information from social media if I can I don't scan your network I don't scan your firewalls I scan Twitter I scan your about page I scan those kind of information because that's the information that I gather that convinces the person to click the link I had a CEO and I told the story before so I repeat again sorry it's like a lot of people have heard my stories before but one CEO hired me to do a pen test it's like a spearfishing attack it was about page and Twitter his Twitter profile to create the spearfishing that was all I used to target him and he was the one that hired me and he clicked the link within 12 hours of receiving the email it's like that's not a testament to what I can do it's a testament to how people aren't properly prepared for it and anybody can be susceptible it's like if I tell you that you've won a million dollars it's like all you have to do is change your name and compare $3,000 to Western Union to this wonderful person in Ghana it's like people are a little bit people are going like maybe not that one not clicking on that one but if I tell you that I'm your co-worker that I really enjoyed your going away party last Thursday night and I hope you enjoyed the vacation and Cabo San Lucas it's like with the family Josh and Trish and Brian it's like are you going to click on that link that I provided in there or the pictures that I took from your going away party are you going to click on those links possibly because we're not telling them to be cautious of those things we're not telling them to be curious about well why would they send it to me like this and they're saying that their email is coming from this address it's like my internal email address but it's responding to something else because I hovered over the link because all your employees hover over the links of the front page right good you're not liars that's awesome so yeah so you got to watch those things you got to teach your employees to be more suspicious and be careful what they post it's like I want to tweet my life I'm just trying to make other nations say it's happier and use less resources of tracking me but still a lot of people like to tweet their life you got to do it responsibly you got to do it obfuscation most of the time that I tweet somewhere it's like something that's cool I'm already gone it's like some people don't have that option some people are just broadcasting right out there I saw a bank on their Facebook page at their barbecue showing everybody what their badges look like and if you want to see why InfoSec drinks go do a search on Instagram for hashtag new job hashtag new badge that will make you cry okay it is sad it's like have a bottle of you know whiskey I don't drink alcohol it's like one of those big bottles of alcohol that's really strong it's like probably vodka right so it's like have them have that it's like when you start looking at those things now another thing is phishing is one of the leading causes of compromise but your employees really take it seriously we're talking about zero days still people everybody like bringing their barnophone to DEFCOM because I'm worried about the zero days the nature says it's going to attack me with yeah that'll happen keep waiting it's like everybody's worried about these zero days and I can still and I have friends that still find MSOA67 on their network that's 11 years old that's a 5,327th day why are we worried about those it's like you only worry about you know it's like that bad meme with the one girl and the guy and the other girl it's like you know everybody's looking at that zero day and here's the description what about me so I don't know no there's a zero day as soon as you get to two days two old were done it's like I'm sure IT compliance will take care of it that's a problem so you've got to understand that phishing is one of your severe problems because that's attacking human nature and one of the biggest things that I use to attack companies and organizations is human nature a false sense of security like it's never going to happen to me and curiosity and gentleness it's like oh I want to be kind I want to be helpful I'm an employee I'm supposed to help one of the best ones though is it's never going to happen to me was he something depressing go to the new search feature and search just for the sentence it was a quiet neighborhood there are some grisly things happening quiet neighborhoods people murders and deaths people going up to the neighbors and go like I didn't know about the hidden basement it's like he seemed like a really nice guy it's like those are really I want to live in a really loud urban area because those seem like a lot safer to me it's like those quiet neighborhoods are like really sketchy so it's like that's because we don't we never expected to happen to us it's always a quiet neighborhood until it's not it's always someone else that got compromised until it's not it's always someone else that clicked on the link until it's not he clicks on all the links we knew what's going to happen eventually okay so you have to watch out for those things test those things and we talk about testing things what about do you let your security systems make sure they are operating as intended because here's another mistake by the NSA where they improperly over over collected call data records for a second time last year documents show we're doing privacy concerns about the surveillance program due to expire in December I love that have you ever noticed that the NSA and Facebook almost the same have never accidentally given you a notification like oh by the way we're doing some changing settings and we accidentally made your profile a little bit more secure we accidentally blocked you down to private we accidentally made sure that your account says no when it's that mistake it's like woohoo wide open sorry about that Instagram it's like everybody can see everything how did that happen our marketers think us but it's like you may not so you have to test those who has a firewall and has sent malicious packets to it who has an IDS system that sent something besides an e-car to it who's got an IPS system who's got an IPS system to see it's working who's actually testing who's activating ransomware not in your environment don't worry I'm not thinking crazy I know it's F-con okay I'm not thinking crazy but who puts it on a segmented network and then runs it on their endpoint solution to see if it actually stops the ransomware it actually stops the compromise are you testing those devices and I don't mean having the sales engineer come in to show you all the bells and whistles all the flips and the flops and it's like there you go look how protected you are we discovered all these different things oh you're lucky you came to us in time we're done I'll see you later in about three months it's like but you were contacting me every day for a year but I know but we're good now it's like you're secure so you've got to test those products you can't just assume they're going to be done by default anybody who ever put a snort installation it's like you're going to have a bad day and one of the last things I want to talk about is what measures do you have that helps you justify your budget and your actions because guess what I got some bad news for you it's like the better you are the less you're seen there's nothing more comforting than going into a management budget meeting at the end of the year and telling your CFO hey you notice how you didn't really notice anything going on in the company this year if you give us two million dollars more next year we'll make sure you see nothing going on next year it's like a mob hit man hey got a nice network hate to see something happen to it you know it's like give me a little bit more on the big I can make this work that's a problem we have to show them something we have to show them numbers we have to show them metrics and you have them and you're not using them you got to create these charts you got to create numbers I mean everybody loves pie it's like give them pie charts it's like make them get these metrics how many quarantine emails did you get from your email gateway how many viruses were detected in your network how many firewall alerts did you get how many IPS rules went out how many actions that you had to investigate those are all numbers and when you want to get really scary you start looking at your internal networks like how many servers do you have patched currently how many servers how many workstations do you have patched separately how quickly do the data come out for your antivirus network how quickly do they get rolled out how quickly do the Microsoft patches you know it's patched Tuesday so that means it's a reverse Wednesday by this point Monday it's like that's how that works right it's like so do you have those things out and if it's Java you're just doing it every other day but still get those alerts get those numbers put those out there because your executives are not going to understand that per se but it's tangible it shows them numbers it shows that you're doing something okay because when they go by your cubes and they see you know the Game of Thrones action figures and the Nerf guns sometimes they may question themselves it's like why do we have these guys here after all you know it's like you've got to show them results you got to show them that you're doing something and they're getting their money's worth and one of the last things I want to leave it at is educate and empower your users how many people have noticed this is my 10th year speaking at DEF CON it's like I am a broken record I'm waiting for people to acknowledge it so finally I decided after 10 years I'm just going to up and confess it I only have one major message and that your people are your solution not your liability fix them stop trying to offset your failings and your misconfigurations and you're not properly teaching your employees onto them and take ownership of it we need to educate our users we need to make them understand that they are part of the solution not part of the problem stop trying to create technology to fix your users start getting your users on board to protect your technology and everybody succeeds so that was the rant part I promised so get right there for a second I promised Chris I'd be under 50 or he would under punishment of death and I think he was actually not joking so I've got 7 more minutes of questions or some questions you and then you what kind of metrics do I look for when doing a phishing campaign or the phishing or all the different kinds of phishing all those kinds that are all in and squishy but yes one of the key things is mostly just the numbers and one thing that I've seen done in the past and I highly recommend not to is you make sure you never record the name to executives about who actually clicked it's like every person that clicks on their first email test should be reeducated they said oh you clicked on the link we need to reeducate you need to go through another class the second time I think they should be done through a more stringent class and they should have restricted access and this is the one that's going to make everybody love me it's like on the third one they should be fired or extremely penalized it's like people keep letting do you let a delivery driver wreck your delivery van more than three times without you thinking you made an unwise choice I mean he keeps getting an accident turning left should we make him where he just only has to turn right or maybe we should get another delivery driver it's the third car cars are like what 50 grand computers are $300 million target thank you for telling us what that is but we're still letting them click the links and go unpunished about it so there needs to be education but there needs to be enforcement yes what's your question yes he asked insurance companies cyber insurance companies you know all the cybers will actually have policies that give you discounts for doing security awareness for your things I don't know I'm not one of those guys who's going to come up here and act like I know all the different answers to all the questions if I don't know something I'm going to tell you I don't know I know Jake Coons does risk based security and he is a way better person that would be able to answer that question you can check them on Twitter I think is the letter J Coons KLUNS and ask him that it's like that's a way better source than I am on questions like that any other questions no you just told us you didn't know the answer Jason screw you it's like no here goes one yes 10 years long I'm a veteran of the cyber wars I would say yes it's like he asked it's like is it getting better is the landscape getting better is security getting better is the community going out better and yes I think it's actually getting better I think we're doing better and reaching out and understanding what the problem is it's hard to tell when you go to certain conferences and all you see are blinky boxes it's like I mean oh look at this blinky box we turn the red lights to blue 10,000 times more AI and machine learning in this one protected by the blockchain it's like that can be a problem but understand that I think it's getting better because we're understanding that it's not just technology I think more people are looking into trying to do social engineering I think another good one is like with the social engineering village doing a conference in February in Orlando it's like they're trying to help train their users and trying to get people to understand that that's the human element that is your biggest point of failure in your network and how to protect against it yes that was a plug but you know I really trolled that guy really bad so I felt bad yes yes yes it's like when you want to use the character statistic train do lunch and learns train your he asks is like was there any other way besides the Waldo what else could we do to help train our users in a positive way do gamification it's like but that's part of the gamification but I will say this do lunch and learns teach your users how to reconfigure their wireless router online their home router how to teach them how to change their privacy settings and and see what their children are doing on facebook and instagram the sick talks and snapchat and whatever it is out there that everybody's doing that I'm too not cool enough for it's like do those show them those lessons and guess what's going to happen they're still not going to care about your data but they're going to bring that security consciousness back to work and they're like I'm not going to fall for this game at home I'm not going to do it here either so teach them how to protect themselves teach them how to protect themselves at home where it matters to them it's like and they will protect your data when they're at work I got one minute any quick question that I can like overlong and make chris mad at me after all yes one more sorry chris what would I do with people that are purposely doing open all the emails because they think they're protected by the I would fire them it's like there was a huge twitter drama and stuff on that because I was like how dare you and I'm like no it's like and policies don't matter procedures won't matter if there is not an enforcement employees are going to do only what is required for them to keep their job the reason why they're clicking on so many links is because you're not telling them for them one of the responsibilities they have to keep their job is to be secure as soon as you educate on that that's one of their job responsibilities that's one of the things they need to do to stay employed and feed and clothe their children guess what they will start taking it seriously it's like and until that you're not going to have it I'm done I won't drop the mic he told me not to thank you