In this video, we will be discussing the five insane true stories that will change how you think about World War Two. The revolutionary ideas of Nikola Tesla inspired modern electric car manufacturers. He also inspired World War Two era Japan to even higher levels of insanity when he uttered two little words, death and ray. After famously inventing an earthquake machine, alternating current and even drones, Nikola Tesla claimed in 1934 that he had a death beam that could wipe out entire armies. This was never proven and most of the world didn't seem to take the idea very seriously except for Japan, who took it seriously enough to give their scientists the dramatic sum of one million yen to build one of these things. In 1943, work began at the Shimada City Research Facility on developing a high power magnetron that, if not as capable as Tesla had boasted, could at least incapacitate an aircraft. A number of Japan's leading physicists were involved in this activity, including Sin Itiro Tomonaga, a future Nobel Prize winner. He was involved in the appropriately titled Project Power, which by the end of the war had produced a legit death ray prototype capable of killing at a distance of up to half a mile. The catch. The target had to stand perfectly still for five to ten minutes. So this doomsday device would have been effective only against the extremely lazy. The prototype wasn't particularly cool looking either. It was just a magnetron, equipment mostly used for radars back then, and a 75 foot mirror, which is generally not something you'd try to haul to a battlefield. Still, it was a work in progress and it did work.  Japan never got a chance to use their death ray during battle. We have no idea what happened to the prototype, but we can only hope some American soldier snuck it home and used it to cook hamburgers from a mile away on the 4th of July. The fourth insane true story is the story about the amazing deception called Operation Mincemeat, the British devised with the help of a dead body. Operation Mincemeat was a spectacular deception created by British intelligence to fool the Germans regarding the true target for the Allied invasion of Sicily. A dead body would be planted off the coast of Spain, carrying secret documents which appeared to reveal that the targets for the upcoming invasion would be Greece and Sardinia, with Sicily only intended as a trick. To ensure that the Germans believed the deception, it was necessary to create a detailed false identity for the body, which was that of a homeless labourer. The secret operation involved dressing this corpse as a major in the Royal Marines and giving it the false identity of William Martin. Appropriate identification documents and other papers would give the body a level of credibility. These included a photograph of Major Martin's fiancée, a receipt for an engagement ring, a theatre ticket stub and other evidence. Early on April 30th of 1943, the body of Major Martin was launched into the sea from the British submarine and left to drift just over a mile off the southern Spanish coast. Once recovered by the Spanish authorities, the secret documents carried on the body were secretly opened, photographed and passed via Nazi sympathisers to German intelligence officers in Spain. The Germans acted swiftly on the false information by doubling the number of troops sent to Sardinia, while many additional German divisions were also transferred to Greece and the Balkans. The Allied invasion of Sicily was launched on July 9th 1943 and proved a huge surprise to the German defenders. In just over a month, the island was fully captured by the Allies and the lack of enemy reinforcements had proven to be a deciding factor in the success. After Operation Mincemeat, Germans got their hands on some actual papers from the D-Day invasion from another body that was discovered. The Germans thought back to Operation Mincemeat and figured it was another diversion attempt and decided to ignore it. The third insane true story is that the Nazis had an arctic base that was making material to help build an atomic bomb and 11 men took it out. February 28th will mark the 81st anniversary of one of the most dramatic and important military missions of World War II. After handing the 11 Norwegian commandos their suicide capsules, Norwegian Royal Army Colonel Life Tronstad informed his soldiers, I cannot tell you why this mission is so important, but if you succeed, it will live in Norway's memory for a hundred years. This sounds like some badass Kirk Douglas movie, in fact it is, but it's exactly what happened during Operation Gunnicide on February of 1943. When the Germans invaded Norway in the early 1940s, they took over a factory in Telemark that produced heavy water, which is needed to make plutonium for an atomic bomb. The Allies sent 30 British Army officers to sabotage the plant, but a combination of awful weather and the Gestapo killed the entire group. So the Allies sent something even more deadly than 30 Brits, 11 Norwegians. As if the mission wasn't insane enough, the Germans then decided to strengthen the plant's defences, plant land mines and add more guards all over the factory. The only way to get into the factory was a Nazi held bridge over a 660 foot ice gorge, or at least the Germans thought that was the only way in. The Norwegians simply climbed down the supposedly unscalable ice gorge and snuck into the factory. They laid the explosives and were about to light the fuse and escape, but, and this is not a joke, the factories Norwegian caretaker whom they were holding at gunpoint declared that he'd lost his glasses and refused to leave until they were found. Naturally, the resistance fighters put the plan on hold until they'd located his glasses. Not only did the commandos complete their mission without casualties, but they released the caretaker and another civilian as soon as the fuses were lit. The winter sabotage of the Vmork chemical plant in Telemark County of Nazi occupied Norway was one of the most dramatic and important military missions of World War II. It put the German nuclear scientists months behind and allowed the United States to overtake the Germans in the quest to produce the first atomic bomb. If you're enjoying this video, then smash the subscribe button. This is the second insane true story the Nazis considered using mosquitoes as biological weapons during the Second World War. Towards the end of the war, German scientists at an institute in Dukau conducted research into how malaria-infected insects could be kept alive for long enough to be released into enemy territory. The fact that they didn't use any biological weapons is all thanks to one individual who single-handedly disrupted this Nazi superplot. This individual was Adolf Hitler himself. Perhaps we should explain. In 1943, a high-ranking Nazi scientist recommended America must be attacked simultaneously with various human and animal epidemic pathogens as well as plant pests. And they totally could have done it. The Nazis had already carried out a series of bizarre insect-related tests, at one point even toying with the idea of releasing up to 40 million weaponized potato beetles over England's crops. There's an alternate reality where Beatlemania refers to the time half of Britain starved because of Nazi bugs. And the number one insane true story of World War II was that Japan and Germany planned to send a dirty bomb to America delivered by kamikaze submarines. In the days before Germany surrendered to Allied forces, the Nazis ordered a U-234 submarine to take whatever remaining weapons and materials were left in their arsenal to Japan. One of the materials that was being shipped was uranium, the essential ingredient for creating an atomic bomb. The likely plan was to get the Japanese engineers to build a dirty bomb. A dirty bomb is a bomb with radioactive material attached to a normal bomb or explosion. Their plan was to deliver the dirty bomb to the United States west coast. This would have caused tremendous damage on the west coast. To actually get the dirty bomb to America, the Japanese would have used I-400 class submarines which launched kamikaze aircraft via catapults. Japan had a whole bunch of those equipped with planes decorated in fake US markings for extra confusion. Obviously none of that happened. Some believe the uranium did technically get to Japan, just not in the way they expected. According to a former official of the Manhattan Project, after the U-234 submarine was captured en route to Japan thanks to code breakers, the German uranium ended up going into the American atom bomb program. The US then dropped it on Hiroshima. The US was low on uranium when this little radioactive gift fell in its lap, so it was arranged for it to be conveniently misplaced. This is still officially denied because apparently the US won the war with Nazi uranium wouldn't look great in history books. Click here to watch the next video. Also, please smash the subscribe button and if you made it this far, click on the like button.


All right let's do it. Okay make sure we're streaming. Are we streaming? Are we live? Hello. Let's like take forever. There we go. Link should just be automatic. Don't you guys think? Yeah, wait not yet. I'm getting into it. Okay, great. Everything's going. All right. Hello everyone. Welcome to Wednesday. I had some very unfortunate news to share with everyone. You are all slacking on the extra credit. This is the NSA Code Breaker Challenge. Look at that. 71 on the list of schools. Four of you have completed test zero. That's great. 11 of you. Four of you have completed test one. Amazing. Let's get those numbers up. Get that extra credit. Beat the University of Arizona at least. There's 700 of you. Average. You can't average based on this. Now that that's over. People have questions? You? Yes. Yeah, we're gonna finish that today. Are you excited for that? Yes. Yeah. You want to know the World Cup winner, right? Awesome. Cool. We'll definitely do that. Yes. Louder. How do we do the extra credit that we talked about? It is on the course. It is in the syllabus. We talked about it on Monday, so you can go check out that recording. But we have, yeah, we added the NSA Code Breaker Challenge as an extra credit. So follow these steps. Four people have already done it correctly and added me as a follower so I can see the progress. So go to these steps and crush everyone else. Yeah.  Guess not. Okay. Cool. Okay. But first, before we go back and finish our World Cup challenge, we are going to finish and talk about, yeah, why we want to reverse engineer and what are some examples of reverse engineering? So you've been doing this, right? You've been learning about how to look at programs dynamically through GDB. You've looked at how to statically analyze programs. So one of the key things that you will be doing in the reverse engineering specifically challenges that you're doing is you're trying to guess the license key. So you're trying to reverse engineer what is a valid license key in that binary. So the checking logic is all baked into that binary and you need to derive what input, working backwards, what input can pass this license check. And this was a real skill and a real thing that happened. So if you think does anybody remember an age before the internet or is this all? We were born after the internet. Well, I'm just asking maybe some people. I knew a guy in my PhD who was from Nepal and had to hike three days to a village that had electricity. And so his first time using a computer was at college. So people have different backgrounds. Also, I don't remember how old you are. So it's hard for me to do that math in my head. So it's easier to ask. Okay. Awesome. Great. Now that I feel like a caveman. So back in the day, before there was internet access everywhere, or before you could even assume that everything had internet access, you had to be able to install software. And the software had to check if you had a valid license or not. Usually the license would be on the box, or you could buy license keys. Windows was famous for this. You had to have a key in order to install Windows like with Windows XP. And so how would they do this without access to the internet? So if you have internet, how would you do this license check? Let's say you're building this software for a company that's hired you, they're paying you a lot of money. How do you do it? Yeah. So keep track on some database somewhere on your system. And then when they install, you put in some license key that then goes and checks with the back end database and say, does this license key have access? You may also do things like, how many times has this key been activated before? And maybe reject it if it's too many. So yeah, you could do this with the internet. But if you didn't have that, you have to have other ways of doing this. So what they did was they, a lot of companies, and you could actually, we'll get into crypto. And there are ways that you can kind of do this with crypto. But a lot of companies didn't bother with that. And they would just take in input, perform some secret algorithm that performed computations on that data. And then that way, it would validate the result. And this way, the company could generate keys that would pass those results, where it would be difficult for pirates or other people who are trying to get access to the software without paying to do. The entire point of what we're doing and what you're learning is that what you put in binary code is not safe and is not secret. So this is, hello. So this is something that you have to understand about binary code. There's nothing secret or safe in there. You can, people can always figure out in reverse engineer what's there. So this gave rise to a group of people who are able to reverse engineer and understand these algorithms. And also the rise of KeyGen software where you could just generate keys that would pass checks. Here's a cool, actually recognize some of these, a WinRaw. So the various different software. So this is software that you find on the internet. These were usually dial up internet. Yeah. So it actually made a WinRaw KeyGen. Everything. Yeah, this is a universal KeyGen generator, Windows 7, a Windows 7 anytime key upgrade, seek and destroy, Nest HQ, Vegas Pro 11. Yeah, we can look at it again. Kaspersky, that's funny. Autodesk. So if you've used like AutoCAD and stuff, because those have a request and an activation, some of them are based on the name. So you put in a name, it would derive some calculation and check that with the key. So this was a whole industry. And if you downloaded one of these KeyGen's, you may also be infected yourself with whatever malicious software they decided that they wanted to run, because you're essentially trusting some random person on the internet to run code on your computer just so you can get some software for free. So let's watch this video. I have no idea what this is going to be about. I didn't watch it. Okay, best KeyGen song ever. Thank you. I have no idea. So if you want to get more into KeyGen soundtracks, then you can, but this specifically, this must have been specifically for this KeyGen software. Okay, that was fun. So there's a whole class of reverse engineering challenges called crack knees. So this is basically a binary that does some check on input and is looking for specific input. And your goal is to generate the possible input, find one input out of all of that that passes checks. This is actually the World Cup thing that we're going to get back to that we did yesterday is a version of a crack knee. And so yeah, you are to think about as you're performing the reverse engineering tasks and the challenges that you're tackling these, you're literally like inheriting this vast array and history of people who are doing reverse engineering stuff. Now there's all kinds of cool stuff that after these KeyGen's became very popular, software developers started thinking, okay, do we really want to have all of this because they're able to easily fix this. So one thing they would do is crack the software. So by cracking the software, you'd figure out how to binary patch the software and change bytes in the program. So like, let's say when it detected a failed KeyGen check, it would rather than jump to the failure case, just jump to the success case. That way anything you typed in would be successful. Or you could legally purchase the software. Very funny. I can't remember which game it was, but there was some game where they released some DRM with the game that would check for your key file. Like if you didn't have a valid key, you could go ahead and play it, but like at level four or five, there'd just be no door to get to the next level and you'd be stuck there forever. So the idea is these pirates that were trying to crack the game, fix the first check, but didn't realize there was a check much later in the game that allowed you to have access. And so people were curiously frustrated at not being able to play games for free. But there's a whole lot of techniques. So the DRM, it means digital rights management. So the idea of how do you control what people do with software that you give them? There's a lot of, it's basically like a cat and mouse game where you come up with some scheme, people break it, new scheme, break it, new scheme. There are all kinds of techniques like anti debugging techniques. How can you tell if somebody is debugging you?  I can do whatever I want with this software. And if you're creating some DRM stuff, you would not want people to be able to do anything they want with your system. Another thing is obfuscation. So this is where you take the original code and you obfuscate it in some way to make it much more difficult to reverse engineer. So one technique for that is actually rather than, so you take the X86 code, rather than having the binary have X86 code, you obfuscate the normal program into a different program that interprets the data and executes it on the machine. So you're translating from, if you think about, anybody have an M1, like an Apple Silicon laptop? Yeah. So that has an ARM processor on it that runs ARM binaries. You can still run X8664 binaries because it translates those binaries when you run them from X8664 into ARM at runtime. It's essentially what these programs do. The other thing you can do is actually remove the DRM outside of the CPU. So does anybody use fingerprint readers for their phone or face scanners? Yeah, many people. Yeah. So if you gave me your phone right now, if I hacked your phone, could I get access to your facial scans? No, why not? Yeah. So it's physically somewhere, so it's not on the CPU. It's not in memory. It's in a different dedicated hardware component. So I think Apple calls it the secure enclave. ARM based systems have this trust zone thing where they have things. Guys, thank you. So we have the secure enclave. We have trust zones. The idea is move it out of the CPU so that it's protected by hardware. You can have a lot of secret keys that get there. Yeah. Oh, yeah. It's an idea that's been a long time in the making. I think getting it to the level where it's performance and works well is difficult. Anytime you're doing hardware, if there's any hardware problems, you'll have massive, and you have a security breach, you have massive problems. Cool. Other types of systems for reverse engineering? I think we talked about this with Minecraft last week. We talked about reverse engineering. So people want to modify and change games. They have to reverse engineer to understand how to interact with those games. The good side of this is making things better and making things fun.  So you'd get a character set that up and just while you're at school, it would go and get loot for you and you'd check the results when you got home. But that was all from reverse engineering to game. Actually, one of the very first times I remember playing with this was the original Diablo. They had some tool that would look at the memory of the process, like any Windows process. And so what you do is look at the memory and you could have a thing to show you what changed. So you look at the memory, use a health potion to see what changed and what got higher and then you could freeze that memory location to that value so you could have infinite health. All kinds of stuff. But the dark side is that people use this to cheat in online games with like aim hacks and wall hacks. All this kind of stuff is all about reverse engineering the game and how it's working. Yeah. So lots of applications for reverse engineering. Questions on that? Yes. Good question. So the question was if somebody obfuscates the code, how do you know that they haven't, let's say, altered it or done it? Like how do you trust that code? I think part of the problem in the part, yeah, you say something. So I think it's more philosophically, we'll talk about hashtags later. I think the key question is, even if they're not obfuscating, how do you know there's not like a backdoor or something in the code? Right? So you'd have to be able to analyze the binary anyways to detect that. But there are ways to do that. But yeah, it becomes more of a trust thing. Right? So it's like how do you, if somebody's, if somebody's giving you a binary, do you even trust them in the first place? And the second place, if it's obfuscated, you have to trust them even more. But this obfuscation is used a ton. A lot of malware uses it, but also commercial software. Like there's commercial tools you can buy and apply on your software system, and they will output an obfuscated binary that is a pain to decompile or reverse engineering. Any other questions about reverse engineering? Yep. Why don't you just ask your questions as I'm transitioning there. Yeah. So the question is, okay, so I'll answer this specifically and we'll get there because whatever comes, we will finish reverse engineering this world binary together. It does not have a ton of those operations in it. So let's let me make sure I have this.  Always fun. Fun times. There we go. Okay. So I think the key underlying question to your question, right, is, and I've, oops, and I've seen this a few times. It's how do I, so I'm reverse engineering. I'm figuring out what this thing does. Then what do I do with that information? So I've seen some people that do this all by hand that like, we'll use online calculators, they'll reverse things, XOR things. You can find stuff that will XOR things. I, you could definitely do it. You can actually 100% do all of this on paper if you wanted to. You actually don't need a computer for any of this. Some of you are raising your hands. It's slightly terrifying me because you are taking a, what kind of a course is this? A pen and paper course, a penmanship with you guys are missing your feathers and your bottles of ink apparently. Right. There's a computer science course. You can program things. You should use that superpower of programming at any point you can to save you time and effort, including in doing things like performing calculations like that. So my suggestion is to write code that does this. And part of the reason that we, you wrote way back in module one when you were doing web requests with Python is to dip your toe and get familiar with Python. You can use any language you want, but Python is a great language for doing this kind of like one-off little thing. So for instance, if I was demo.py, why is that so big? Let's do this. Okay. So if I was doing something like I wanted to, oftentimes I would define a function. So if I wanted to say like, uh, oh wow, that is really too bad to read, huh? Okay. Okay. No, no window. Let's do a good one. Sorry. I'm trying to remember how to increase the font size. Let's go XOR by three. Is a terrible example function because I'd never hard code something like this. They have a parameter pass to it. But if I said something like 4D in data, so looping through all elements here, I also am going to return something. Let's call it a string for right now equals to a string. And then I'd say something like new character is equal to 4D XOR zero X three. So most languages have the XOR functionality and it performs almost like what you'd expect. You do have to be careful. One of the key things if I have Python and I have 255 plus what's that value going to be? I don't have to say the actual one. It'll be the big, big number, right? Big number. I can keep adding zeros. It'll still be a big number. What if I did this in like C or with assembly with registers? What's the problem I have to think about with registers and see the size, the size of the registers, right? I can only keep track of 64 bits of information. So this is one of the things that can bite you when you're reverse engineering something from a binary and you try to code it in a language like Python. If you're not very clear about dealing with the overflows, but you can actually do this very well by doing something like ending it with, if this was a, let's say a 32 bit number, that'd be what? How many bytes? One, two, three, four. Hey, you lost me. What is it doing? Dude, this thing is like frightening me. No, it's looking at me now, but it was like taking a break. I didn't tell that robot to go take a break. Okay. You can do something like this to limit the results to only be, this would be one, two, three, four. So 32 bits would be the max there by ending it with all ones. You're limiting the results to only be 32 bits. This is a tip that that comes up, but back to our function. So we have a new character. So we take, or gives us the, from a character, the ordinal from zero to 255 of that character x or it with three append it to, but it's an order right now. So I need to call the character function to turn it back into a character. And now I can do things like prints does actually is going to look like, but we'll see. So it's doing it here, a hex dash C, which I showed before to actually look at the hex files. Yeah. So this to the new line. So that's that first string all x or by three. So now I have a function to do this. I could have that function be right past the arguments of what it's going to x or and then I could use that function in order to reverse, which makes things a lot easier and repeatable. Python has a great reverse function where you can reverse a list or a string, which may not, may or may not be handy. Cool stuff. Okay. So we get back to our friend, the World Cup. Any other questions before we dive in there? We have 49 minutes. Do you think we can do it?  Look at how many of us there are. There's tens of people online and all of you in this class. No, we can do it. We have enough knowledge. Okay. We were looking at this in IDA. If I remember correctly, applications IDA. And we're actually exactly back to where we were. Let me take five seconds, font, make the font look bigger, better. Can you read that in the back? Yeah. Cool. Okay. Oh yeah. I remember where we were. See, you know how I know where we were? Because we wrote comments and we defined function names like this is known country name. Right. So we looked at that. That was so groups was our input. So it's first reading in our input for each group groups was a value on the stack. So it's a multi dimensional character. So it's an array of eight 32 bite size characters. And we are so predicting group F gets group I 32. So this is what's reading at most 32 bites into each of those arrays on the stack. We have is known country name. So this checks and this remember went through that group of countries to see and uses string compare to see if that's a known string name or not. If now one thing we will definitely need to do is look at the documentation of stir comp. Anyone know it off the top of their head? Yeah, stir calm. What's the return value? How do we interpret that? So returns an integer less than equal to or greater than zero. If s one is found is less than or is greater than. Oh, this is terribly worded. So it should be so equal to so return something equal to zero if s one matches s two. So it returns zero when they are the same, which is something we need to remember because we're looking at how this is used. So if it's the same, it returns zero. And then this function returns what? So when when does is known country name return one? And when does it return zero? Say it again. So stir comp if group and one of these country names is equal. What is stir comp return zero? So then if not zero would be what true, which is one, which will return one. So the whole function returns one if it's known and zero if it's unknown. Great. Good thing for us to know. Let's also check that this is very clearly an int or a Boolean technically, I wonder if there's a bool type Boolean. There we go. So go back here, file it. I'm low byte. I don't like that. Let's call this an int because that shouldn't that. There we go. Hey, it looks so much better. Okay. So this is weird. So, oh, okay, okay, okay. Great. So is known country name now? When does it return one? When it's in a known name that's in the list and it returns zero if it's not. So if it is in the list, that would be one. And not in the list return zero, which won't do that. So this seems like it's kind of like numb incorrect, or something like that, because it's being decremented every time that it's not in the list. Is that everyone agree? Like kind of there. This is like weird logic. This is where obviously the binary nature of what we're doing something as a one or a zero really shows its face because we had, if you remember all the way down to the depths, we had a string compare, which was returning a zero if they're correct. But then the function that it's calling that returns a one if string compare returns zero. And now we're looking at this and now a string compare or this is known country name returns zero, it will decrement this. So this is a seems like some number incorrect counter. I also don't understand why it's negative, but it is subtracting it in here. So who knows. So what I'm doing here is verifying if the decompilation is correct by going directly to the assembly code, because I know that the assembly code is always the arbiter of truth. Okay. So we actually know like exactly what this is doing, right? Like before we had no idea. Now we know. So now let's check this next for loop. Okay. For J equals zero, J is less than seven, less than or equal to seven J plus plus. So J is going to loop from zero to seven. And it's checking if the string length of groups J is greater than two. So groups was our input. So it's checking if it's greater than two. It is then going. Wow. And it's doing a lot of checks. Okay. Let's ignore this for now, but we'll keep in mind. So what's the next case? Otherwise, num incorrect minus minus. Okay. Let's go forward a little bit. If num incorrect is greater than seven. So we got, but it's also subtracting from num incorrect. This is like super weird behavior. I forgot that this was this weird in this specific instance, but that's life. Sometimes people do weird things. Okay. If it's greater than seven, and then it outputs predict the winner. It's so weird that it did this. F gets into S 32 standard in. Okay. So it's asking us to break the winner. So S is our winner. It's checking that it also is a known country name and the string length of the winner is greater than two. And winner zero is equal to now. This looks more, more simple. What does this check? Yeah. So this is winner is just a character array. So winner zero is the first bite of that. And you all have been looking at ASCII a lot. If I turn this into H in hex by hitting H and turning it into hex, this looks much more like something that we care about and it's ASCII value. And if I, I guess R is the button to turn it into a character. So now we can actually see, oh, this is checking if winner zero is a, who anyone want to guess what this next letter is before we turn into ASCII. R and what's the last one going to be G. Yeah. But it's not even checking the rest, but so it's checking that it's Argentina, right? So or probably like we know that that's a country on the list and we know that it is this ARG. So somebody online is saying maybe num incorrect starts at the maximum number of possible correct. I think that's true except num incorrect here starts at zero. That's what's very weird, which I guess makes sense because you've gotten zero correct, but why would you start at zero and then go around and go negative? It's a very weird way of doing this. I still don't understand the logic of what it's doing there, but this is great. So we've already figured out what to do at least at this stage, right? So we have an idea of what winner that we need to put. We needed to double check that Argentina is actually a known country name and not something else. Okay. Should we try to look? So what's the other bit of code here that we haven't really dug into? Yeah. The whatever it's doing here, right? Of these groups. So okay. How do we break this down? So let's check. Okay. So what kind of looks like when you're looking at it almost like a series of equations. Like V three is equal to not not J and groups zero zero groups. What was groups again? It was our country name, our guesses who would win each group stage. And this is hard coded groups zero zero is 78. Well, what if we look at that as a character capital N? And if groups one one is lowercase n and groups two zero is capital A three one lowercase e four zero five zero two six two seven zero. Okay. So and then looking at the back we can see what's kind of happening here. Num incorrect plus equal v 15 plus v 16 where v 16 is J is equal equal to seven. What's J? What was it? Yeah, the loop the loop increment value. So on the very last one, J is equal to seven and groups J zero is equal to you 15 is 14 plus 13 and 14 is J is six. And groups six two is equal to eight. I think what's happening here. My intuition is, we're doing this loop over it, but then we have like a switch statement in the middle or something that was checking like if J is zero, meaning it's the first element, then check zero zero is N. If J is one, then check one one and how it got compiled and just got compiled into this insane statements for all these things. And then each one is using this and incrementing it and then I think num incorrect is getting added. But on, if we think about it each loop, how many, what values can J have? Yeah, zero through seven. So either J is going to be seven, it'll be six, it'll be five, it'll be four, it'll be three, it'll be two, it'll be one, or it will be not J, which will be zero. So can we get input to pass these checks? Yeah, so we need a country name for group zero that starts with an N. And what about to pass this check? Second group, the second letter starts with a lowercase N. Do we know which names are valid? Yeah. So now we can actually, now we have a plan forward. We need to, if we extract all the country names, then we can write a Python script that goes through the country names and finds one where the first letter is capital N. We can find one where the second letter is a lowercase N. We can find one where the first one is a capital A. We can just use Argentina here, but whatever, like again, like I mentioned, we want to script these things, not just, you know, I don't know, do it by paper. One where the second character is an E and so on. So we have our constraints here. We have our data. We can search through our data for things to hatch and then that will generate input that should pass. And we'll just know for the last one, what should we pass it to predict the winner? Argentina. Cool. All right. So the question should be, how do I get this out of there? Right? Kind of a pain. So there's actually a lot of techniques you could do. One nice thing is we can see here that each character, there's the string, the country name followed by a zero. There's actually all kinds of ways to do this. This is where, I don't know, do you want me to show you some cool editor stuff so I can convince you that Emax is better than Vim? Yeah, cool. Okay. So one trick I've used, you can actually, the nice thing about this is it's just copy pasteable. So I can just copy all of these countries, just this raw text. Maybe we'll do it a couple of different ways. Copy, open up my handy dandy Emax, Emax, rural cup. Do I already have a solve? I like calling them solve.py. The owners like to call them x.py for exploit, but it's more of a reversing. So I feel like solve is better. But let's do that. Okay. Open it up. Okay. So now I have all of the text that was in there in here. Oh no, it doesn't have my Emax set up. We will try to do all this. Okay. Emax has this really cool feature of defining macros of what you're doing. So what I'm going to do is start defining a macro. I'm going to search for the first single quote character, go forward backwards, delete all of that. I will then go to the next single quote character backwards, kill the rest of the line, go to the next line, go to the start of that, end the macro, and then just repeat it over and over again. And then I've got all the countries like this already. Then we want it in Python. So I can go back to the start here. Oops, I keep typing in the wrong character because my keys aren't quite set up exactly with the way I want. But then I can do a similar thing here. Start a macro, double quote, end of line, double quote, comma, space, delete that and then end the macro and just rerun it for everything here. So now I have my countries all here. Kind of cool. So like very quickly, turning it from that list of data into a list like this, you should also be able to, Ida is kind of crazy, I mean, not crazy, but Ida has a lot of functionality. So there for sure is a way to export all this data. Let's see, let's learn together. Export segments. If anybody knows this off the top of their head, aka Connor, export data. There's for sure a way, I just do not recall it. Maybe some file, produce file, dump database type info, none of those. As you can see, I have the way that I do it. So I usually don't look up other ways to do it. Right click, we'll try right clipping, clicking, copy, we just did that. Thank you. That's useless. Okay. I'm gonna let Connor look into that while I go do something else. Where's the thing? Okay. So I'm not that far. Okay. So I have my countries here. I'm going to do a lazy Python script and not worry about a main file or anything. This is kind of one of the things you need to deal with when you're on a time crunch of like a CTF challenge.  Don't let's not worry about making it beautiful. But as you get burned over and over, you start realizing, hey, maybe if I make it work, not terribly, I won't waste my time when it breaks in the future. Okay. So I need to look for things. I'm again, so I could write something that loops through all of these, looks for something where the first character is an end, the second character is a lowercase end. I could look, I could define that, I could search eight different times. Again, I'm a computer scientist. I don't like repeating myself and just writing the same code over and over. So I'm going to write a function because what am I going to try to do here? Find country by and it will be the character and the offset. Right. So a function and I'm even going to, I just, I guess went on a rant talking about why you wouldn't want to code nicely here. But example, I want find country by if I say n and zero, then it should return like, what's the company that starts with that? Another one's right. So that way I can easily translate each of these constraints into one call to this function. And that way, if I mess up this function of how I'm checking things, I can fix it in one place rather than fixing it in all eight places. Okay. So for C in countries, I guess I can be nicer country in countries. If, oh, sorry, can you see that? If country offset is equal to character. What do I do? What if there's more than one? What was it? Who cares? Why do we not care? We shouldn't just default to who cares? That would be a terrible way to go through life. But why do we not care in this scenario? There's only one check and the check doesn't care if it's the first one, the second one, the third one, the 10th, the 20th check, right? It just is looking for the first check. So return country. What happens if we don't do it? What if we get through all the countries? Should I return try again? This will be super annoying though, because if we don't get it and we just see the string, it'll try the string, we'll try it. It won't work. Why don't we say that we never expect this to fail? I'm going to assert false, meaning that if you ever hit this point, blow up, because I know that something was wrong. Either how I did this function, the data that I gave to this function, or one of my parameters. Because fundamentally, it should never reach this state. If it reaches this state, our understanding of what the program that we were reversing should do is incorrect, or our code is incorrect. But we don't want to get into a case where we return none, or return the empty string, or return something else that will screw everything up. All right, and then let's do... Okay, so we got our cool function, and I just used the Emacs key and deleted that. There we go. Nope, that's not right. Okay, find country. Now, answers. Is that right? Spell grind? Answers? Or is that how I feel like that we're wrong? Did I spell it correctly? Okay, I feel like I've been up here for too long. Either had too much or not enough caffeine. Okay, so we want to find country by N as the zero with character. Other one was lowercase N as which character? Yeah, the offset, I guess I should say, not which character because that's clearly going to mess us up. A as the zero with E as the offset one. That is a three. Keeping you on your toes. It's also a lowercase three, or lowercase E, zero. This may be another case where I'd actually write a macro instead of doing this, so I wouldn't mess this up. That would help us avoid these errors.  So it's nice to have a lot of the co-coder thing, like the pair programmers, which is like a lot of one-to-many pair programming. B zero, A two, zero, cool. So we calculate that, print it all out. Should we try it? One, two, three, four, five, six, seven, eight. This is going to help us when getting this output into the program. It's kind of annoying because it's in the list and we want to copy paste it. Do we like copying and pasting things? No, because we're hackers. We don't like doing that. So let's go back to our thing. Four A in. Now we're printing it all out. And what was our final answer? Now what if we piped this to the program? Did we just solve this? A, there we go. Got to the successful one. Pretty cool. We just reversed that program. We figured out exactly what input it wanted. And funny enough, did we even care about what that number incorrect was doing? No, because who cares? I don't know. We always gave it correct input. There may be a way we could have given it input that still works. Maybe we just give it the NE or something, but I don't know. Who cares of dealing with that crap if we give it the exact input that it's expecting? And everything works. Okay, great. Somebody said on the Twitch that you should be able to, in IDA, back to our handy dandy data, be able to do shift E. Ah, there we go. Cool. Okay. So let me see here. Shift E for export, I would say. Let's see. Heck string, string literal. Yeah, the problem is these are all like the actual raw bytes, and you'd need to get them into some other form. I wonder if there's a, yeah, somebody let me know if there's a better way to actually, oh, you can do, what was that? As raw bytes, but getting that like into a Python program from raw bytes is kind of annoying, right? So like, oh, raw bytes. Oh, this would be, but it's still have the zero byte in there between them. That's what makes it annoying. But yeah, you can see these bytes, you can get them in there. I don't know why it's not continuing after there. That's weird. So we can save data to a clipboard or if I export it. Yes. Anyways, you'll have to play with it, figure stuff out. Questions? You didn't even think we'd do it in time. We did it way earlier. We were like right there at the end. Let's see. Some tips with reverse engineering. I think one big tip is to, like I talked about getting too deep on things. I'd also say one of the great things about reverse engineering is don't get locked into one modality and only do things statically. We didn't debug anything dynamically, but we could have like, if this num incorrect turned out to be super important, we would have been diving into the debugger, giving it some input, some correct incorrect tracing it, seeing what happens with this value. Frequently, I go back and forth between the two tools. There's a lot of tips. Reverse engineering's great. It can be great and frustrating because the answer is literally right here. There's no special data. There's nothing to guess. It's just like you figuring out this binary of what it's doing and what it's asking for. Any other questions or things you want? Yeah, doing this, but I guess do you want another 20 minutes to work on the challenges? Yeah? All right, good stuff. You're dismissed.


Hi, my name is Belgica and I am an actress and I am finally making an IMDB account. I'm going to tell you why I hadn't made one, why I am now making one, and why now I know it's important. I'm a newbie to IMDB, so I'm going to be telling you a lot about IMDB, not just today but moving forward. I'm going to give you my process through it because I haven't been able to find that much information, the information that I do find. I'm going to share with you, leave a lot of links so you can also do your own research. And if you know a lot about IMDB and you want to leave me feedback, please do. I would love it, appreciate it, go check out my IMDB. And I'm going to be talking a lot about all of that in a second, but first I wanted to tell you that I'm going to be doing Vlogmas this year. I've never done it and so I'm going to be posting a video from December 1st to December 25th. I have a lot of time on my hands as do many of us. And this holiday season is going to be really hard. One, I wanted something to distract me and to fulfill me and something fun and creative to take part in and give myself this challenge, this discipline.  I'm going to be telling you about the acting things that I do, vlog during self-tape audition, more about the casting websites that I use, how many gigs I got this year, how much money I spent, a lot of information about acting. So if you're not already subscribed, I would really appreciate it. Click the notification bell, of course. I would so appreciate any feedback you have, whether you're subscribed or not. Actually like the video when you like it. So I know, hey, this video has more likes than the other ones, more than usual. So I know people really like this. And then after Vlogmas in January, I'm going to go back to my schedule of Monday, Thursday, Saturday posting videos. So I would appreciate your feedback and I recently did a video about Thanksgiving. Hello and welcome to Live Hacks for Millennials. Today we will go over how to celebrate Thanksgiving safely. And now you're trying to decide if you should go over to your siblings, parents, and if you're lucky, your abuelitas. And I really had so much fun creating that. Tell me if you like that so I can make more like that. And I will do those vlogs where I show you how I created that skit or my DIY demo reel, creating my own work because that is very important, especially right now. If you're like me and you're not submitting yourself and you're not accepting jobs unless they are very, very COVID conscious. And let's get started on the IMDb. The biggest reason why I'm making this video today, I actually started creating my IMDb a few months ago. But the reason, the main reason why this is happening today is because I am currently taking an acting class. And within that acting class, we were also talking about the business side of acting, which is such a big part of being an actor as a career. And IMDb came up. Basically what my instructor said was you need an IMDb. That is where people, casting directors, directors, that's where they're going to search for you. I know that a lot of casting directors do. They look for your representation there, your contact information. And my instructor laid it out as, you know, it's $20 a month or $150 for the whole year if you do end up paying for the whole year. So it really isn't that much money. But because I already have so many different subscriptions to so many different things, and I haven't been making a lot of money from acting this year, or the how much I spend versus how much I make, I don't want to do another subscription right now. But with the holidays coming up Christmas, I did add acting subscriptions to my wish list. So hopefully that will help with that because that's something that I will use all year. Now, the reason why I had not created an IMDb account is because I didn't want to spend that $20 a month and didn't see the value in it. I didn't think I needed it for anything. And now that I am actively searching for agents, I can of course see the information there of who other people are represented by in New York, in Georgia, in LA. Now I am using it more for research for that. And I want to have a better presence online. So because I am an actress, I want people to be able to search me on IMDb. If I ever send in an audition for somebody and they want to see what other things I've been in, they might just Google me and get my YouTube channel and not get much about what I have actually been in. But if they Google me and see my IMDb page, they can see my reel there, they can see my resume, they can see all of my credits or the credits that I have included there, because that's another thing. That's another reason why I hadn't created an IMDb account that I don't have that many amazing, incredible credits. And I've realized, hey, I don't have to have that many crazy credits as long as the credits that I do have on there and the reel and my talent is represented on there and they can find out more about me. That will be a great place to start and I will be able to get more and more jobs because for 2021, I have some big goals of career things that I want to accomplish. Okay, so one of the things that I was confused about because IMDb Pro does have a 30 day free trial and after that free trial, of course you're getting charged $20 every month. One of the things I was confused about was does your profile disappear, your information on your profile disappear when you cancel it? Yes and no. So your profile will still be there if you cancel it but there's certain things if you edit them in as far as I've been able to understand. So far, I have my IMDb profile created and I have some photos from production, behind the scene photos and I have some credits on there, just a couple. Right now, well right now I only have the Ted Bundy one and I am going to be adding more. I'm contacting the other people that I have worked with and asked them if they put it on IMDb, you know, other short films, other series, online web series, et cetera. Right now, this is what my profile looks like. I need to create a bio. I was wondering about what to include in my bio for IMDb and I'm going to look at some of my friend's profiles and see what they have on their bios and then come up with a bio of my own because I want people to know about me and I'm also going to include in my bio that I do have a YouTube channel. So if somebody is looking to hire me for a hosting job, they can see that I'm a pretty chill person on camera and see what I look like and what I talk, how I talk when I'm just talking naturally without a script. And another thing that I want to do today is add some demo reels, some voiceover reels and acting reels to my IMDb and what I'm going to do is go ahead and put whatever I have saved on my computer, whatever demo reel I have saved on my computer. I'm going to go ahead and put it on my IMDb account. That way they can see older work that I have done and then newer work as well. Well, that's it. That's all I'm going to focus on today, finishing up my bio and adding my reels to my IMDb because I already have my agent information, of course, photos, the one credit so far and I'll see if I can add at least one more today but I will definitely have this whipped up into shape by January. I'm currently drafting a bio and I'm trying to decide how it sounds and what it looks like exactly. So you guys will have to go to my IMDb to see what my final bio is and if you want to see an example, but I was reading a few different people. So Will Westwater is another YouTuber, an acting YouTuber and I saw his and he doesn't have an actual bio. He just has a mini bio that says, Will Westwater is an actor known for Into the Dark 2018, L.A. Sfinest 2019 and right in progress 2020 but nothing about himself. And then Mary Faith has a full bio, very cute talks about how she became, you know, got into acting and where she's from and what she went to school for. And then Joanna, hers is super funny as well, also talks about where she's from, what she studied, how she got into acting. Timothy Hulls doesn't have a bio, he just has a known for part. So it looks like that's also a mini bio. So some of my friends or some of the people that I know have a bio, you guys can leave me comments if you do go and take a look at my bio, leave me a comment and tell me if there's anything I can improve about it. So the biggest benefits of having an IMDb account of course is that when somebody searches you, somebody that wants to hire you, somebody that wants to learn more about how talented you are to see if they should consider you now or in the future. Wait, what was I saying? The reason why I have decided to create this IMDb page is to look more professional. And that's the biggest thing I am going to continue to share with you guys my learning curve on IMDb, how I am using it, how it's benefiting me, I am going to, I have been and I'm going to continue to do research on there for new agents in different places, different states, cities. And I will take you guys along with that on Vlogmas. I'll definitely keep updating you guys throughout the month of December and beyond. I'll make videos about IMDb and other acting related things. Thank you so much for watching. Please leave me any tips about IMDb that you know or if you've ever seen a really good IM video on IMDb or article that I can read. More information, go ahead and take a look at my IMDb and let me know how I can improve it. I would really appreciate the feedback, of course. And at the end of every video, I feature another channel. This is today's feature. If you would like to be featured on my next video, make sure you're subscribed, like this video and leave me a comment.


All our dorks. What's up y'all? Hope you're here and ready for a live feed early in the day. Sunday Funday, we're always a little early on Sunday Funday. Are we? Yeah. Oh. So these are just nephews. They've never even said the word resin before. No, my brother. Oh, and brother. Just regular nephews. Just regular. Just regular. What's up, Paula Wall and Nita? All right. So, Jeff will be teaching all the things. I will be showing them.  I'm not touching anything this time. They can pour on how they want. They can do whatever they want. This, it, we're outside. It's not as hot as it was the other day, but it is humid a little bit. Hi, Miss Vallejos, Linda, Lori, Kelly Quincy. So, Jeff's premixing out the resin for them because we didn't bring enough buckets. Hi, Mary Jane. We are having a great time, Robin. What colors did you pick, Steve? I went with turquoise, gold, and snow white. Sounds beautiful, beautiful. They'll be that way. So, what colors did you choose? I did blue. Wait, use this one blue. This is Lucas, by the way. Yeah, this, I'm not gonna say the first word. By this blue? Phthalo. Same thing. This is violet blue. Phthalo, violet, right. Hi, Petra. What did y'all choose? What did you choose? Say your names. Oh, I'm Blake, and I chose blue. And I chose blue. You're gonna upset every artist in there that's not blue. That is definitely Tiffany. Breakfast of Tiffany's and something else, right? Yeah. I'm Gavin. I got ATG Fireball and Platinum. That'll be good together. It's gonna be some nice pieces, some nice work. Yeah, we've never poured outside, so this will be a first. Yeah, we're gonna see how that works. Kooja is joining us and Popdanny's here. Hello. What's up, Lori Taylor? Hey, Rona. Children, I will separate you two. How's the stream? Does everything look okay, y'all? High suit, what? Y'all? Y'all and bananas. My southern flare comes out. Okay, good. Everything was looking great. We're on Jeff's phone, so it should look great. Right, Diane? All right, this is where it gets messy. Thank you, Lori. She just ordered using our ATD code. All right, what I'm gonna do is I'm just gonna pour this on here and you're just gonna kind of spread it around. Don't ruin it.  You don't want to use your hand.  That's what the alcohol rag is. Alcohol rag already drenched. Everybody's armed with their ATD sticks created by Steve and their colors. Moe, stay with me. I am videographing with baby on board videography. That's a thing. That's not eScience. That's a word. Hi, Vamp. What's up, Barbara? I think, Lori, I'll be sending those out when I get back into town. Manana. There you go. Just make it all, just cover all what's not. Cover all what's not. Yes. It's an E-word, damn it.  No, Sue, not an actual baby. This actual baby. Shelly, I don't know how we're gonna do with the dust and everything because we're pouring outside. We're gonna find that out together. But it's too cold inside because, understandably, the AC is kicking. You know what I'm thinking about keeping it dust-free? It is lifting those and keep them under the canopy. Maybe we'll keep it out instead of down here. Yeah, we'll see. So we'll tie ropes up here and have a, like, a sealing thing. Like a net? Yes. Brilliant. Thanks, you guys. I'm so glad. All right, now. You guys are using our coats. It looks good on us. Is this the step you use when you get a shot? Yeah, like, after? Yes. Oh my God. Stacking them. Congratulations. It is teamwork. Joe says love, Lucas. Thanks, Paula Wall. Anita says, I want to say a big thank you to you and Jeff. Well, you're welcome, Anita. I hope, I don't know what for, but, oh, I will let them know. All right, so what you guys, these guys are gonna start first. Thanks, Kat. Open your, open your jars. All you're gonna do. That's awesome, Diane. Yes, Sue. They are twins. What you're doing? Through the eyebrows. You're scooping the pigment. Yes. And that's what that is. Hey, V, when you're instructing, speaking, will you speak up? All the way down to the corners. Sorry, y'all. I'll speak up. No one's said anything about it, but I just wanted to, yeah, twice as cute. That's what they said. You can't open it. Can you get it? I only have one hand. I appreciate it, y'all. What's that, Eric? Oh, and Mark.  Start stirring. Better than that. And then they'll... Vamp, I hope you're feeling okay. I mean, pick the rag out. Wipe it off. There you go. Whatever you do. Yep, a little bit more aggressive. If you put paint in, if you take that thing in there, put it in there, do not put that back there. Use one stick for color. And then mix the color. You want to just drip it in there. Perfect. Okay, mix the paint. One stick for color. Yeah, just stir it up a little bit so that you get all the goodies incorporated. And then it's not gonna need a lot of paint, so just like scoop it up a little bit. And, yeah, that's a good amount for this amount of resin, so we're just gonna put that over here. Now, it's very important that you don't put your stick back in the color after it's in the resin. Yeah, that's enough. Okay, you're gonna do the other one the same way. Okay. But you got no... mix it with that one, but you're calling for it. Yeah. And use a different stick on the other. Perfect. What's up, Rona? Eva? Fifth surgery in three years. Hey, I'm Tess Bananas. Hi, Mary. Oh, Sid Mara. Thanks, Anita. They said love your dance. They said love your dance. Yeah, that one's a little thicker, but do it basically the same way. Probably you could just pick it up out of there. Yeah, perfect. You can get this out of your way. Love the garden. Isn't it nice? It's a still life, still life artist dream idea. Yep. Lori says, just family is too cute. Love how his dad is so into it. Pop, they love you.  Sure, the corners. Just scrape the corners. Like you would a cake, you know, to get all the things mixed. Yep. Just drag it around the bottom of the cup and the sides of the cup. What's up, ideas? This stuff, we can sit here and kind of not have a... Three-year-old. Hi, sweet pea. Yeah, it is very quiet compared to the city. But they're still basically in the city, just in a woodsy part of the city. He has one. He's got three. He's got an X-more resin. That much for the bowl. See, because you're not going to use a lot of bowl. Ideas said, hi, Jeff and Jeff's fam. All right.  Okay, and this is one thing to remember. If you want a line, pour it outside of the canvas, like out here, till you get that little fine line coming out, and then drag it into it, and then just put it where you want it. That'll be a real nice effect. Robin says, wow, I need to have dad teach a class. Got it down, pop. Just mix it up. Just over here. Sherry Stonecoats, resin is heat-resistant up to 500 degrees, and it is FDA-proofed. We are in Kansas. Oh, thanks Anita. Strong picnic. Hey, Jeffrey, he can only do the same way for the white, right? Erica, does he need more? Or just the same scoop for the white? Yeah, same scoop. It'd be fine. He did it. Eva says dad's a pro. Oh, excellent dude. He loves to share what he knows, Sue, for sure. Try to drip it on. Yeah, just do what you do, man. I'm going to do another GEO soon, Mary. Hi, Pat from Oregon. You're in Kansas and Moons Toto. Yep. Is the feet okay, y'all? Gotta love that Tiffany boo. Look out, Mo. Come here. I know that Tiffany is something else. Those two colors are great together. I'd almost steal some of his gold and put it in that one. Turquoise? I think that's enough. Yeah. What this will do is also it thins it out, so then it does that kind of stuff. Tilt it. Don't worry about it getting on anything. I would blow on it, man. You could blow on it, you could tilt it. That's what she said. Blow on it. Blow across it like a real fine bubble. Give me a pup. Absolutely, Laura. We ordered extra of it.  I hope you feel better, Mary Jane. Tuck all valuables in your pocket. Okay, blow on it or pick it up and let it go. That purple looks so great.  You see what it's doing there? You look at that. Yes, sir. That's a great color. You're cooking, bro. Now tilt it. You can do something, too. You can do it now and then add the blue later or you can add the blue now. I'm gonna get a close-up of that color though. Yeah, I would blow on it. Like right here where it's really thick. I'm trying to keep all the things in place. Yeah, heat it up for me. Heat it up a little bit for myself. Then I'll blow. Watch those keys. I'm a little itchy. Ideas that he just got a night job specifically to pay for resin. Oh, nice. E and J next summer will hang out. Absolutely. Blow across it. Take something here. Put it down. Take some of that red and put it over this. It still looks so kind of. Actually, I'll put a little bit more silver brown. Those two colors look so good together. That part right there is my favorite. Cryptic art got its first taste of resin today. Like in the mouth. I've done it, too. Everyone's done it. Hi, Donna. Now we just got started. Don't worry about it. The boys are just experimenting. That looks so fine. Those colors are great. It almost looks like it's glowing. I love your runoff, too. You ready Steve? Scary. Okay, blow. All the way across. No. Look. Move the paint. Blow into the paint. There you go. See it moving. Get closer. Get closer. I don't want to hit you. You're not. No one's going to smush your face in it. You're pretty down. Diane says you guys are looking amazing. Ellen said, just ready to jump in. You have to use hands. That's good. I know. I don't have gloves on for a reason. So I don't get it. Okay. Colors are just stunning. Yeah, sit it down so you don't. I know. I got to hold Jeff back for sure. And this is what's happening with this. Let me see that thing. Watch this. If you take it, get it heated up enough. Look at that fade. I will have to do an ATD gathering next summer. For sure, for sure. And if you want, you can take your hand and you can do a swirl. Tilt it. It's, the possibilities are endless. Pop's pushing it around. Got the circles going. There you go. Just with an egg in the middle. Yeah. I just said an egg. Right. Steve's been watching the vid. Sorry y'all. What's that? How fun is that? In there, tilt it. Do a big tilt. When it starts going off, just stop. And then go the other way. Yeah. You might need to get that up a little bit. Is it back y'all? How fun is that? It looks like it would be good to do. All right, ideas? I don't know. Do you want a student in a particular way? See? I don't know. I don't know. Ew. I would do that. That looks so... I wouldn't put my hands through it. That's really soft. You do have a little dude right there. That's the other way. Where? Right there. Bubble? I don't know if it's a bubble or a thing. That would be a thing. Yeah, I know. I think it's a... I keep thinking it touched my pants. Yeah, right? Hi, Crystal. We do that a lot. It looks so... Right, Vamp? I was saying the same. It'll just kind of muddy together, so... Love the negative space. Steve, I would tilt it so that that top looks like that bottom, starting around the bottom like that. I would take... I would take this one into... The whole thing's going to do that. Somewhere.  Keep that up and let it do that. To clean your money and all the colors together. You can heat that up and leave it. Yeah, and it looks... Uh, thanks, Laura. I would take the silver and run a line through here. Like, see where there's none of this? Or actually, just take the same colors. Right, Andrea. I was thinking that. I think it is the same colors. Do you want to co-seat, co-heat it throughout the whole piece? See where there's this base of the next up? I'm going to have to borrow this color combination from you, sir. I'm taking this. I like the run-off though. I think I would rather have run-off. Well, you can heat this up and tilt it and have more of that run-off. Yeah, run-off is always fun. A lot of people save those and make jewelry. I told you not to touch it. I'm just kidding. It's your hour. It looks good. Oh, it looks great. Stop, dude. Like, it looks amazing. I'm done. You're good. Because it'll keep moving once it starts to dry. Where are we going to put these? Are we going to take them down to the basement or is it too bold in there? Okay. Hi, Jenny. How are you?  See that stuff? See what I'm doing? Probably easier to use your pants. You just had to frame it, huh? Diane says put them in the oven. We've got a meal open in the oven. But we have that vintage, Evan. Hi, Lucy. Mary says they all look great. Look, if you don't get this corner, dude, you'll look there's something right there. You've got to cover the whole corner. Moose here. And then down here in the bottom, it's dripping. Where did you go? See right here where you're going to touch them? Bye, Mary Jane. And then it's just the gold? He was wondering if the middle part was dry. Right? Kuja is all set. You could pick that stuff up and put it in a mold. There in that bag over there. I just made it really. Laura Taylor, thank you. Bea, I need you to get a pampin on. Laura Taylor. Bea, Laura Taylor. What did she do? The norm? Her amazing. What are you going to do? Thank you so much, Laura. She said, awesome teachers. Good job, Pops. Pop, you're making us a dollar? I think these guys for the first time did excellent. Look at that. Mixed up. Beautiful. There you go. You got the pie. So just fill them up. Just set it down. Yeah. I like this. It looks like it's exploding a little bit. Yeah, it's running this way. But I like this, that it's stretching right here. Thanks, Lucy. You could do a solid color. You could do a mixed color. You could do half and half. I'm glad I finally got there, Anna. And if you ran out, somebody else can focus on that. Can you like mix them together with this? You can. Yeah, I would put a little bit in the other one. Like you could put them, you could pour them at the same time into one and it'll look like it's running into the colors. Level that out. How does it look, Anna? Does it look different than in the pictures? You got a little ying-ying now. And you can pour this on top of this or this on top of this one and swirl the colors together. I love how that did right there. This, the slight striations right there. It looks like a wave of gold. Or just work, my dude. Hi, Kimmy. Laura, I don't know what happened to Lars and Philly Phil. I haven't seen them in a while.  That looks so fun. I was trying to get it so like he's up to help, but I almost got it. Well, you can do another one. Oh yeah, round two, baby. Wait, I don't think I have enough to focus on. Yeah, Lars was sick. I really like how soft that purple turned out. Put some of that in and not your mask. Which one? Oh yeah. Or you can fill that one out. Out of color. Do you know what's funny? That'll stay on top. I like a hard line of gold in my work. Just close my mind and I'll separate it. Like that? Haven't seen Lars on Facebook either. I have his email. I'm going to reach out to him and make sure he's all right. Margaret, we're definitely having a good time. Let's zoom in and see all the fun stuff. I'm definitely going to borrow this color combo. Steve is still working on his. Luckily with this stone coat, you have an hour or more of working time. Let's check out Lucas's with a K. If this was the black classic we used. With the veins in it. Love how soft that purple is. But it's still so sparkly. They want to know about your ring pop. Oh, this ring. This is an opener. Bottle opener. And this is my fishing knife. Which is made by D.Y. She makes knives and they put.  And they usually use turquoise. And this is my house key. And we've started a skull club. So all the kids have skull keys for their home. That purple is so sparkly. It's a great purple. He's being lucas. Overflow that a little bit. I just wanted to see the color. I like the way that I would stop there. This was platinum or aluminum? Uh, platinum. It's a great color. It looks like it has so much stuff in it. Good stuff guys. Good stuffing. Good stuffing. Let me get back around over here. Oh, we're leaving tomorrow. I hope not, Sweet Pea. I hope everything's going good. What is the soft purple color? That is violet blue. Yes, let it sit. It's that one. He's using phthalo. Around here's where I would see violet blue. Can you open that for me? I want to show them what it looks like in the light. I will have this color. It's brand new from Just Resin. Just released along with the Tiffany. Yeah, that Tiffany. That Tiffany's going to go off the shelf. Yeah. Oh, that's a bubble. Y'all, these are rad. I know when you did these coupons. Maybe it's awesome because it's not in the fireball? Come on. I know that fireball is something that our followers love. They actually made that color just for our channel. It's great to eat. We need to put some heat on these guys though. Get ready to mold. Yeah. Yeah, just in the mold. And Steve needs to mold these. You pour those in there? I'm going to lightly go over those. It doesn't need a lot of heat. What do you have? I want them all in your pocket. What's that like? Oh, I don't even know where those molds are. I think they're in the car. We'll do some quick set with that stuff. Yeah, who do you think? Hi, glitter pubes. Yeah, Lori, I'll have it. I'll have the stuff soon. Greetings from Spain. Hey, we've got Spain in the house. He's busy, but he's excited about it. Mary, yeah, the quick set would be good to do pendants. You have about a 15 minute working time and it sets up within two hours. Really clear, bubble-free, very nice. Thanks, Sherry. Maybe there's still something in there. Yeah. Hi, Donna Parker. Oh, yes, Deborah, we are having family time with all the nephews, Pop and Jeff's brother. Flower explosion. Yep, so now we're going to put these in a dust-free zone so that nothing else will come in them. Get into them. Not ATD after dark, it is family time. Yes, Deborah, that makes us all cousins. Right, Van? I caught myself. If you guys missed Steve from the other night, he's here. He's back to entertain you. Yeah. He's back to bother the whole whole planet. Ooh, look at this guy. Right, Donna? Kind of Desmar from Cape Town. Yeah, they do. So, you guys, we are going to make sure that these stay into a dust-free zone and this will be our post for the day, but we will be posting a prerecorded feed tomorrow because we'll be driving back to Dallas. Oh, my God, no, I can't. But we'll be back on our regularly scheduled time two days at two and every other day at eight. The drip salt is all the way around here. So, what's our pleasure, Fran? You can use your hands, Steve. Okay. I'm just going to get the most out of it. What noise does it make? That's mine. They're not very heavy.  We will definitely drive safe, y'all. Thank you so much. That's what I'm talking about. Be ready to say bye to everybody. Hey, nerdy gal. I am too, Anna. Which blue, Lucy? One, two, or three? Diane, I'm not boring today, but we're going to post. We're still going to post every day. Oh, two is phthalo blue. You can also, if you guys don't like that heat gun, you can also use the torch. Right, Mary. I do too. Hi, Just Resin. We just debuted some of your new Maze and Colors. Nerdy gal, this is resin. We use mostly just resin paints today and a little bit of Artisue. And we use Stone Coat resin. You totally should try it, Nerdy gal. It is definitely worth trying. It's a great medium to work with. Steve, yours is a dragon. Hi, Toby. Is she a dragon? There's his mouth, there's his eyes. There's his body. When you do that, there's his legs. There's his tail. Would you say it was? Yes, it has one thing in it. Well, there's a hair. Jeff says talent flows like resin in the fan. Oh, you know why? I know why. Well, I appreciate your being here, Nerdy gal. Good job. Come here. We're going. Come here. Come here. Hi, sis. You say hi to the people? Juliana wants to do one? Yeah, I know. I'm new on Pima on my feet now.  Anyways, y'all, thanks for tuning in and we'll see you all later. Don't forget to subscribe. I can't even word right now. Subscribe and check out all the things. Send me an email if you have any questions. We're on every day at eight, except for on Tuesdays. We're on it too. So yeah, we'll see you all tomorrow. Can I say bye-bye? Bye, y'all. So everything. Diane, tell Paula I said bye.


I suppose, but from what I know about a master's... Amosist. Amosist. Well, it's just that I had to hope. The same thing that I hoped. That I'd be practicing my specialty in a teaching hospital. Do you have a specialty? Internal medicine. Just finished my residency. I know. You hoped you'd be doing nothing but that. When they first made me head up an Amy Clinic, I wanted to kick somebody's... Well, I found out it's not all that bad. You know, you're doing something important for the whole hospital. Crucial these days. And there's a lot of personal satisfaction. The job's not that hard to master. It's got lots of built-in problems, but you can work them out all right. When you know the tricks. The place to start is with the Amosist Implementation Guide and algorithm books available from Ambulatory Care Division. I bred it. The way I understand it, then, the Amosist system is a way of treating more patients by using FURMDs, while by using specially trained medics to take care of the minor stuff, cold, back aches, so on. It's the only way we have of concentrating our physicians, whether needed the most, on the more serious cases. This is how it works here. A patient comes in, one who's obviously not in an emergency, comes to the reception desk. From here, he goes to medical records where he picks up his records folder and a blank triage note. From there, the patient goes to the triage section. Here, a screener asks the questions in the triage manual to determine if the patient's complaint looks like something that can be handled by the Amic Clinic or whether the patient should go to one of the specialty clinics. He fills out the triage note and sends the patient on his way. The screener's like a traffic cop making sure everyone goes to the right place. Then, if the complaint's something the Amosist has been taught to take care of, the patient has his vital signs checked and recorded and sees the Amosist. This is the heart of the operation. How well the Amosist and the algorithms work determine how well the system works. I know this sounds over dramatic, but how well the whole hospital works. Using these algorithms, the Amosist can take care of up to 70% of the common complaints down to issuing prescriptions. However, it is critical that the Amosists see only patients with chief complaints they are trained to evaluate. URI, gastrointestinal disorders, cough, skin rashes, ear pain, extremity pain. What if it turns out to be something he can't handle? Then it's like a computer that's fed information, it's not programmed to handle. The patient is kicked out. He's sent to you or one of the other Amosist positions. He becomes a doctor's patient instead of the Amosist. Well, so that's my job, huh? I just sit around twiddling my thumbs waiting for something the common can't handle. No, actually, Jim, I'm going to be perfectly frank with you. This was not my idea of an ideal assignment when I first heard of it. And now I'm really wondering why you need a full-time physician here. I mean the way I see it. Well, well, this system's handling things my mother could take care of. I mean, and here I am, out of my specialty, looking at cases that... Well, they're not totally routine, but they sure aren't fascinating either. I mean, I feel kind of useless. Why? Why put a full-time doctor here anyway? I wish the Amy Clinic did run itself. Amy Clinic can deal with about 65 or 70% of the walk-in business the hospital handles. But the system tells us which ones need to go directly to a doctor and which can be handled by the Amy Clinic. It breaks down this way. Of 100 patients that walk in here, about 30 will be triaged directly to a doctor. The other 70 will be directed through the Amy Clinic. Now, that 70, about 15, will need to be seen and treated totally by a doctor. About 55 will be initially evaluated by Amosus. The initial triage encounter determines which Amy patient goes first to a physician and which to an Amosus. The algorithm will require a doctor to verbally consult on about 20 of those cases and actually examine about 10% of them. With the Amy Clinic, you'll be seeing only those cases that really need your attention. And overall, you'll be making a bigger contribution to this hospital's healthcare system than any one doctor can make on his own, just treating one patient at a time. You'll be responsible for seeing that hundreds of people get good healthcare. And to do that, you'll have to make decisions only a doctor can make, setting the standards for the clinic and seeing that they're maintained. And sometimes even simple decisions aren't simple. Come on, I'll show you what I mean. Take this reception desk, for example. The problem is the same everywhere. You've got to have someone to greet patients, to get them started into the system correctly. But how to do it can vary from clinic to clinic. Here, we had to knock out a wall before this reception desk could be found by the patients. And we found out that the receptionists had to be a separate job. We've actually got several people trained for the job, including our screeners. But we never let a screener be a receptionist and screen patients at the same time. Then patients would have to wait to be screened. And that's dangerous. And you'll be dealing with people and their personalities a lot. That corpsman over there is our senior aimist. He wasn't an easy position to fill. He needed someone who was personable, who likes to work with other people. But you also need someone who can work in a highly structured job and who's intelligent. A lot of his work and that of the aimist he supervises will be routine. But it's up to you to convince him or her it's important. Well, don't the people who work here get all their training and pep talks and things like that before they come here? Well, of course there is the instruction. They'll get at the Academy of Health Sciences. There your people will be taught such things as how an algorithm works, the basics of diseases, and how to write prescriptions. Remember, this is theory. When they return to you, it's your job to teach them the practice. Well, I didn't know about that. How am I supposed to do it? Well, you'll find out the ways that work best for you, but I can give you some suggestions. Come on. In the first place, you'll find your people will do better at the Academy if you'll prepare them with a good medical vocabulary. I have them study this notebook combined with a few hours of classroom work. They'll have a good head start by the time they get to the Academy. Plus, and this is where some good psychology comes in handy, I try to convince them that what they're going to learn makes them professionals, experts, that they're getting specialized knowledge that'll set them apart from most corpsmen. Okay, but what about after they get back from the Academy? Well, that's when you get into the difference between theory and practice. The Academy will teach them how to feed information into the algorithm and come out with the appropriate action, but you'll have to make sure they get the right information to feed into it. And that means, one, gathering the right historical information about a patient, and two, examining a patient correctly. The Academy will only spend about two weeks with your people. You'll have to spend about 12 weeks teaching them the things the Academy just can't. Let's finish our coffee and then I'll show you something. Hi, Specialist Jennings. What's the problem? Hi, Doctor. Eddie here's got an earache. Eddie, this is Dr. Lewis. Dr. Lewis, Eddie Davis. Mind if we take a look? You mind, Eddie? How would you describe that ear drum? Well, the bony landmarks are fine. There's an air fluid level. Not inflamed? No, sir. Thanks. I agree with you. That's all, Eddie. Now, what would you say about that boy's ear? Serisotitis. Right. You can make that diagnosis on the basis of your experience. Our corpsman in there can make the same diagnosis with the help of his algorithms, but only if he decides the color of the ear drum is normal. If he called it inflamed, the algorithm would give a different result and the treatment would be different. That's why I was asking him about the inflammation. It's your job to make sure all examinations have reproducible results. And when someone says inflamed, he's talking about the same appearance everyone else on your staff is talking about when they say inflamed. In other words, we've all got to be speaking the same language. Right. And you can standardize that language with special classes and videotapes available through Health Services Command. It's the same thing getting a patient's history. You can't just ask someone if he's been exposed to a strep throat. To the patient, that might just mean exposure to any type of sore throat. While you're talking about exposure to a strep throat that's been culture proven. I can understand that. The aim is to stand the patient, have to be speaking the same language too. Right. But more than that, they've got to be speaking the language of the algorithms. And you're the one who decides what that language is. You don't make up the algorithms, but you make any changes in them. And it's your responsibility to make sure everyone on your staff takes a patient's history and examines the patient the same way. The best way to do it, the way I've done it at least, is to examine every patient a student aim assist examines for about the first three weeks. Check everything they do.  Make sure what he found out was correct. That he used the right language and that he followed the algorithm properly. And take back frequently to make sure your staff is maintaining whatever performance standards you set. There are other methods you can use. Have frequent in-service training sessions. You can bring in lecturers. Just remember to make sure that they understand that a lecture they give to an aim assist should be different from a lecture they might give to your physicians. The lecturers shouldn't be too sophisticated. And they should be on topics that will help your aim assist in evaluating the types of complaints they're trained to handle. Have frequent meetings with your staff. Talk with them to see if they're having any problems you don't know about. You might get some good ideas on how to change algorithms or even the clinic structures so everyone can function better. Or make up a medical case on paper and see if everyone comes to the same endpoint on his algorithm. Or use a recorded interview to test their ability to pick up historical data from interviews. Or use periodic quizzes and tests to make sure your staff is still on the ball. It seems like a lot of checking and I can see that it's probably important. But I mean, don't aim assist get tired of it. I know I'd get pretty hacked off by somebody looking over my shoulder all the time. Especially if I were seeing the same cases day after day. I know it's a lot like working on an assembly line. Amisus is very restricted in what he can do. After a while it comes routine. He becomes overconfident and first treating patients without the algorithms. But that's dangerous and too expensive in time and tests. So what do you do? You counter the boardroom.  You counter the boardroom by giving them a sense of pride. You point out to them that they're treating more patients and maybe better too than most doctors could. But it will only work if they do it by the book. You can't get rid of the assembly line feeling altogether. But at least you can make them feel like you're working on an assembly line to make Ferraris. You know, a lot of your job is like that. Psychology, knowing how to handle people. Both those that work under you and over you. How do you mean? Well, first of all, Amisus system can't handle everyone. It's designed for just what it says. Acute minor illnesses. But what constitutes an acute minor illness and what's a more serious condition depends on what the triage manual and the algorithms say. That's already worked out, isn't it? Sure. When I took over, I adapted the manuals to work out the best system I could. But when I leave, when you take over, it's not my responsibility anymore. It's yours. You might not like the system I device. You might want to change it. Or you might wind up, Amisus MD, at a different installation someday. But the requirements are entirely different. There's no absolutely standard manual. You can't have a triage manual that refers a patient to OB-GYN if your installation doesn't have one. Okay, I see that. But I'm still not sure what you're getting at. What I'm getting at is this. The idea of an Amisus system is to handle as many patients as possible without sending them to the other clinics that are already understaffed and too crowded.  You with me?  And the best thing to do is say, fine, how about you helping me figure a way to change the triage and Amisus MD so we can handle more of the cases we've been sending to you? You see, it's a lot like a PR job. You should stay in contact with the heads of all the clinics. Remind them how much you're helping them to make sure that they know your help depends on their cooperation. Don't make changes casually. A seemingly simple change in the triage manuals can affect clinics you never even thought of. If your allergy clinic suggests sending patients to ENT, check with ENT first. There has to be a formalized method of making any changes. Get everyone to agree to them in writing. What if you can't get them to agree? That's when you've got to remember that your clinic is one that benefits the entire hospital. If it doesn't run smoothly the way you think it should, the entire hospital will suffer. And that's a lot of clout you're carrying and make sure the hospital commander realizes that. Ambulatory care, especially walk-in care, generates a lot of higher command interest. Your commander will want a system that provides good care and few complaints. And he's the one that can get the various clinic chiefs to work together. Without your commander's support, the system can't work. That's it then. No, I wish it were. But even after you've got your staff trained and set up, after you've got the triage and algorithm manuals adapted to your satisfaction and got everyone else involved to agree to it, after you've got the support of your commander, the job's just beginning. I'm not sure I want to hear this, but go ahead. Okay. Take what we were discussing over coffee, the triage manual. It does no good to have even a perfect manual as if it isn't being followed. You've got to audit the screener's work every day. Seems like that could take up most of your time. Depends on how you do it. First of all, I have every screener make a record of what he does by writing on the triage slip the answers he gets to each triage question. Then I have the senior screener audit 25% of each screener's work using the carbon copies. That's what this is. Then I audit 10% of the triage slips the senior screener said were correct. I see if the senior screener's doing his job, which is to make sure all the other screeners are doing theirs. What do you do if you find mistakes? It depends on what kind of mistakes. If it's just that the triage note format is wrong, then that's easy to correct. If people are being sent to the wrong clinics, it may require more training. One thing you can be sure of is that you'll find some mistakes. No operation works perfectly. But you have to set some standard, say 2%. That's a realistic error rate in our clinic. You'll have to work it out yourself. The same thing applies to auditing the results of treatment by aimesses. You can't audit everything they do, but try to sit in on as many of their examinations and review as many of their checklist as possible. They ought to be doing the job right 90% of the time. When you find mistakes, try to find out where and the algorithms are occurring. Are they getting the history wrong, the physical? Is the algorithm not being followed? If you find everyone making the same mistake, then you need to have another training session. They didn't understand it the first time. Or else you're asking them to do something that can't be done. Can you audit the aimesses the same way you do the screeners? Sure. Train someone to help you in the auditing of the reports the aimesses turn in.  One thing, though, every time you make a change in the system, make a new rule, take extra carefully to make sure it's being carried out until you're confident everyone understands it. You got any other tricks of the trade? Sure. I'll show you. Look around. What do you notice? Not much. You don't seem too busy. But we are. That's the point. We keep patients moving. There's a lot of planning that's gone into the layout here to minimize any bottlenecks. We've got separate waiting rooms for each stop along the way. We keep patients moving, and they're happier. It's psychology again.  They'll all swear they've been here two hours when they've only been here 30 minutes. I wish there was some way we could prove otherwise. You think there isn't? I'll show you the handiest tool since the x-ray. It's the time clock. We've got them all over the place here. Every time a patient goes to a new station, his record is stamped. That way you can tell what really happened. And the time clock lets us locate our bottlenecks. Here at the screeners, for example, time clock should show that from his arrival in the clinic, it takes a patient 15 minutes or less to finish being screened. Any longer may jeopardize patients with serious illnesses. Of course, you might have to change your operation based on your time clock data. You might find, for example, that things get bogged down at a certain time of day. So you might want to change the schedules of your staff to have more people working some hours than at others. The point is that if you and your senior amethyst keep track of your time clock data, you'll be able to make your workloads more acceptable at the same time that you're making your patients happier. Something the matter? Well, I'm just thinking. The job's a lot better in some ways than I thought. There's more responsibility and more effectiveness. But it's also going to keep me a lot busier than I imagined. I'm just wondering if I'll be spending so much time administering that I'll lose touch with doctoring. Surprising as it may seem, we've already thought of that. It's not going to do you or this hospital any good if we change you from doctor into administrator. It's a requirement that you continue your medical education. You should attend lectures and conferences in the hospital. You might even arrange to rotate in areas in the hospital outside the Amy Clinic from time to time. I do, but I've trained other physicians and everything I've shown you today so they can cover for me while I'm away. The Amy Clinic needs a full-time physician in charge to make sure the system operates the way it was designed to. But that shouldn't mean you're a prisoner here. Just make sure you've got the commander's support for getting out once in a while. You've told me just about everything there is to do is there a list of don'ts. As a matter of fact, there is. Health Services Command has found these to be the most common problems in all Amy Clinics. I'll leave this with you. The most common problems are unsupervised aim assist, improper or no triage manual. Aim assist receiving patients he's not trained to handle. No permanent physician in charge. No audit of triage or aim assist procedures. Failure by aim assist MD to gain supportive commander. Lack of understanding by aim assist MD of the requirements and procedures of his job. Failure of aim assist to utilize and follow the algorithms. You can see most of these problems relate directly to what I've been telling you today. Use the tricks of the trade I've shown you and you shouldn't have any major problems. Remember the really important difference between a well and a poorly run Amy Clinic is the physician in charge. Well-designed system gives him the tools he needs to provide good medical care. If you don't use them, it's your fault. But use those tools and you'll be making a bigger contribution to health care at this post than any single doctor.