Good evening. This is Frank Knight. The Lone Gene Watch on my wrist. The Lone Gene Watches at your jewelers are examples of 85 years of experience in the art of fine watchmaking. How could you look in our factory? You'd find many machines of advanced design, the need for which was dictated by experience. Many are unique with Lone Gene, designed and made in the Lone Gene Factory and found nowhere else. But machines alone could never make a watch of Lone Gene quality. Today, as always, essential parts of every Lone Gene Watch are given that final touch of perfection, that precious extra hand finishing that distinguishes the truly fine watch. With the Lone Gene Watches not so made, it could not have won its grand prizes. The gold medals, its observatory awards, its countless honors in fields of precise timing. Today, more than ever, throughout the world, no other name on a watch means so much as Lone Gene, the world's most honored watch. The Lone Gene Chronoscope each week looks for the truth in the important issues of the hour and here to discuss these issues are our co-editors. Mr. Henry Haslett, a political economist of respected judgment and contributing editor of Newsweek magazine and Mr. William Bradford Huey, editor of the American Mercury. Our distinguished guest for this evening is Mr. Alan Blair Klein, president of the American Farm Bureau Federation. In this spontaneous and unrehearsed discussion, the opinions are necessarily those of the speakers. Mr. Klein, you are the American Farm Bureau Federation is the largest farm organization in the country, isn't it? That is right. I'd like to find out what you think of the present bills that the House and the Senate has just passed. Do you think there are better or worse than the present law? Well, now I take it that what you're talking about is a word defense measure and not some peculiar agricultural proposition. Yes, that is the control bill. Well, so far as the war production measure concerned, it has been our firm conviction that the price control regulations go too far, that many other provisions of the bills are essential and that the Senate bill is somewhat better than that of the House. Why do you think that the Senate bill is a little better than the House? Well, take a specific example. We believe that the indirect controls are far superior to the direct controls. We wish to control inflation and the Senate goes a little further in the authority provided for credit controls. Mr. Klein, tonight we're talking to a lot of people who are worried about the price of farm products. You are head of one of the most powerful lobbyists in America, aren't you? Well, accepting for the federal lobby.  I would admit that. You are a farmer and you are interested in the welfare of farmers. Yes, and we think that the welfare of farmers and the welfare of the rest of us are pretty close to the same thing. But essentially you are interested in higher and higher prices for farm products. We're interested in the terms of trade. We want the farmer to be able to do well and if other things are cheap, farm prices can be cheap. If other things are high, farm prices have to be higher, we go broke. Well, you've done a, pardon me, you've done a rather remarkable thing, your organization. You are not only against price control for farmers, but you are against price control for everybody, aren't you? I mean, you don't want to control the other fellow's prices any more than you want to see farm prices. Certainly not. We think that the price control thing, it actually crosses up some of the most fundamental things which have contributed to America's production record. And we are convinced that this production record simply couldn't take place if you took out all the freedom of choice involved in the individuals buying things on his own. Well, you think if this meat price rollback had gone through in the form in which Mr. DeSalle had proposed it, it would have brought about shortages of meat in the country? Well, I noticed that the Department of Agriculture figures on cattle on feed and the corn belt indicated they're 8% less now than a year ago and yet cattle numbers in the country are high. This is simply the proposition of a lot of farmers in the corn belt trying to figure out how to make a living. Now, the farmers in the farm belt, sir, speaking of price control, you've accepted government control of farming in America as a reality, haven't you? Yes, to a limited extent. The argument is just over the extent of government control in this country now, isn't it? It's over the extent and, after all, if one is a realist, he knows that laissez-faire is in the past and that there are controls in business, there are controls in labor and that agricultural prices are still the free interest. All of your farmers, both Republicans and Democrats, now admit that the government is properly informing. Well, I don't know any outfit that differentiates less between Republicans and Democrats when it comes to public policy. I'm glad you believe that the government ought to help you and the government ought to stabilize your prices and the government ought to help assure you of what you consider a fair price for your products. At the same time, we think that if the government was to guarantee high and profitable prices to farmers, this is completely inconsistent with high standards of living and agriculture. Would you say that we now have a certain amount of socialism in American agriculture? Well, socialism is a kind of a loaded term. We've got a certain amount of the kind of responsibility on the part of the national government which some people define as socialism, but I think we think better if we use some other term. Well, you've been arguing for a free price system recently, the American Farm Bureau Federation. A relatively free price system. Well, what do you think that that would achieve and where does the relativity come in? Well, let us go back 80 years. The leadership in production was in Great Britain, in distribution, banking, and so forth, transportation, communication. Currently, it's in the United States. We think that there's some fundamental change has taken place and the leadership came to the United States and that if you take the function of price out, that it's somehow interrelated with the kind of freedom of choice and incentive system without which the American system simply wouldn't be the American way. Well, I'm sorry, Bill. I just wanted to ask this, but a lot of people in this country, perhaps most people in this country, believe today that if you took price controls off, prices would soar. Now, do you believe that? The fact of the matter is that I believe that we could have a considerable little depression in this country if the government really wanted it without price control. Do you think that the prices of farm products are too high now? Well, relatively, the prices of farm products are just not in a bad shape. The fact of the matter is that a lot of people go back to June 1st last year, but we were in quite a little agricultural swamp June 1st. Several billion dollars below the net income which we had had in 48 prints. You mean the farm these people were? That's right. Would you care to predict whether specific items such as meat will go higher from today, or do you think that the price of meat will fall? It is very difficult to do this thing. I would say this, that the most important question involved in that is whether we get a bill we can pay nationally, and whether we divide the program to pay the bill. This means taxes. But what does this mean to the housewife and in the average American city? What does she have to look forward to now? Do you think that her dollar will buy more groceries or less from this point on? Well, a lot of it depends, you see, on whether the dollar is good. If everything is cheap, then it's dollars that have gone wrong. If everything is high priced, it's dollars that have gone wrong. Doesn't some of it depend on the farm lobby, sir? Well, no. The efficacy of the farm lobby. Let me make this point. The strongest farm organization in America, this is American Farm Bureau. We have spent the last three years arguing with the politicians who wanted to give us higher guaranteed prices than we were willing to accept, as we just aren't guilty on this problem. You mean you've been down in Washington arguing for lower guarantees? This is in the record. Well, I would like to have you expand on this particular point. Your reason for thinking that prices would not run away if price controls were taken off is, I understand it, that price control is irrelevant to the problem of inflation. That's quite right. In other words, that inflation is caused by something else, by the increase in money and credit. Isn't that the position of the Farm Bureau? Increase of money and credit and unbalanced federal budget and paying the bill with new money. This cheapens everybody's money. Well, what would you have the federal government do about money and credit? Well, the first thing, well, they're out money and credit. The first thing is they guard the money. If the traditional method has been to just unbalance the federal budget and then print some new money and pay the bill. We print bonds, sell them to banks, but it does the same thing. This tradition. You'd have to overcome this one by getting a bill we could pay, as we're free to do, but we got to do it. And second, we've got to have an intelligent management of the money supply. This is the cheap money policy. This is the business where after Korea, we furnished an unlimited reserve to the banks. We convinced people that money was going to... Goods are going to be high priced, so they'd want to buy it, and then we furnished them the money through the banks. I'd like to ask just two more questions, sir. And they involve generalizations. You tell me that up till now, the American farmer has made a certain surrender, a certain amount of surrenders and freedom, in order to get a certain amount of security from the government. Now, do American farmers want to surrender more of their freedom to get more security today? Or is the trend in the other direction that you want more freedom? I would say that the best hope that I could hold out, and again, there are many farmers and they're individualists to a certain extent, is that we would sort of consolidate our gains where we are and learn to live with what we have and begin to appreciate the problems involved in really creating an individual responsibility in the country consistent with the survival of freedom, the basic freedoms. Farmers are thinking about freedom today then, and they are thinking about encroachments of federal authority on that freedom. There's no doubt about that. How about the freedom of the consumer too? Do you feel that if this present price bill is extended as the prospect is that we're going to run into rationing? We're going to have rationing in the next year? Well, if the price control bill remains as inefficient as it has currently been, and what I mean by that is that it doesn't really try to hold down prices, then you won't have to have rationing. But if at any point, let us say on meat, we decided to lower it 30% from what people were willing to pay, you've decided not to use price to distribute the commodity and you must use coupons. I have just one other question, certainly about time is about up, but the battle has been going on in Washington and we understand that the President has been fighting four more controls and you've been fighting for fewer. Now, have you been supported more by the Republicans or by the Democrats in Congress for what you were trying to get? That's a very difficult question, but I would say that we had been insufficiently supported by either. The Republicans have not supported your program? They certainly haven't done a very good job of it. As a matter of fact, if we want to capitalize on our traditions, we can have things freely available in the marketplace and if we don't, I think they're going to get scarce and we'll have to ration them. But you did make the statement that you were not aided by an effective opposition to the administration in Washington. That is a fair statement. Well, I'm sorry. I'm afraid our time is up. Thank you very much, Mr. Klein, for being with us tonight. The editorial board for this edition of the Lone Jean Chronoscope was Mr. Henry Haslett and Mr. William Bradford Huey. Our guest was Mr. Alan Blair Klein, President of the American Farm Bureau Federation. Throughout the world, no other name on a watch means so much as Lone Jean, the world's most honored watch. Honored for excellence and elegance by ten World's Fair Grand Prizes, twenty-eight gold medal awards, and highest honors for accuracy from the leading government observatories of the world. Whenever you have an occasion to purchase a watch for yourself or as a gift, it's well to remember that if you pay seventy-one fifty or more for a watch, you're paying the price of a Lone Jean, and you should insist on getting a Lone Jean. World honored for excellence, elegance, greater accuracy, and long life. Lone Jean, the world's most honored watch, sold and serviced by more than four thousand leading jewelers from coast to coast, who proudly display the emblem, Agency for Lone Jean Wet Nor Watches. Next week at this same time over the CVS television network, the Lone Jean Wet Nor Watch Company will again present the Lone Jean Chronoscope, the television journal of the important issues of the hour, and our guest will be Mr. Paul G. Hoffman. This is Frank Knight speaking for Lone Jean, the world's most honored watch, and Wet Nor, a distinguished companion to the world's honored Lone Jean. Both products of the Lone Jean Wet Nor Watch Company since 1866, maker of watches of the highest character. This is CVS, the Columbia Broadcasting System.


As previously mentioned, the usage for the past simple tense is when you want to talk about completed actions in the past at a definite time frame. So we have sentences like, Mark worked last night. He worked in the past. When was it? Last night. We can also ask questions. When did Mark work? Although the time isn't mentioned in the question, what we're implying is the time will be mentioned in the answer. And by saying when did Mark work, we're indicating that it is in the past, rather than saying when does Mark work, which would bring us back up into the present.


YouTube what's up, man? We are back. This is the rematch regs money game you guys asked it and before We get into the video. I want you guys to comment a couple things one Give me your top five wide receivers give me your top five below. What is your list? Who is your top five wide receivers ever and does Larry Fitzgerald make that list? That's my question for you number two I want to know this. I want to know what team should I play with in my next regs money game I don't want the chiefs or the Niners. I know they're great. I know They're the best teams on the game don't really want to play with them until mid-tier team as you see this gameplay I play with the Cardinals. I have a pair of peaches. I have to Patrick Peterson's autograph jerseys hanging up in my room right now Larry Fitzgerald is one of my favorite players ever Especially one of my favorite players ever that wasn't on the Eagles and actually I drew a picture of him now This picture is actually probably about 15 years old now. It's about time I'm in line to draw another Larry Fitzgerald picture But I'll tell you guys if you want to see more of my artwork head to my Instagram If you want to see more of these money games head to my twitch We stream every night live some mad and getting ready for man 21 keeping that momentum going So let's see if I can help Larry Fitzgerald turn back the clock Get my revenge from last game and get this win in a regs money game action Here we go We're facing the Houston Texans and the Texans are probably the fourth best team on the game behind the Ravens behind the 49ers and behind the chiefs the Texans are there to have the shine watch and JJ Watt DeAndre Hopkins bunch of pieces to work with but I feel the same way about the Cardinals They got short fast wide receivers. They have Kyler Murray who gets sacked on the first play now Kyler Murray has a skate artist, but I'll be honest with you not playing with the skate artist playing so much Right because I'm really not used to it.  So a skateboarders for me I gotta get back using the use to using it and maybe more mud things of that nature There he is Larry Fitzgerald probably Gonna have one of the bigger games that you can have with Larry Fitzgerald I have him at the Y receiver position as we get a fourth and fourth down early We get locked up right there JJ Watt that that edge threat just coming around making a sack But like I said, we have Larry Fitzgerald actually as we give up a touchdown on the first play That's my deep half. I moved them a little bit too close. He got burned over the top Like I said, I'm used to Taylor Mays and Sean Taylor being able to cover that ground right there Buddha Baker was not able to cover that ground My son I have fits not at the Y receiver position But at the tight end position and when I audible he goes the tight end So for me if you want to know how to do that I have a video on how to get four wide receivers and trade why flex in tight offset and some other Formation so check out my video inventory for that information, but what we're down by seven second dry We're feeling good hit that man Larry Fitzgerald. I'll tell you these wide receivers are a little bit different than God one in Evans They're not gonna win their one-on-one matchups. They're gonna get pressed. They're really not physical, but this guy is that's why this game I had to mix up the playbook had to focus on that why was there that tight end position a little bit more than I have in the Past so gonna try to feed fits the ball because I know even though he has 83 speed He's the guy that's gonna win that one-on-one matchup rather than these fast guys with no route running and right here We're gonna hit him again.  So we got a chance to take the lead right back where we were We're looking for the in route that time everybody was boxed. I had that out route wasn't looking there at the particular time So nothing to go here second and 16 We're gonna step up like I said, I'm not playing like I don't have escape artists fat feet in the pocket and JJ Watts gets to the Kyler Murray third and 19 But he's gonna forget about that running back out of the backfield Kenyon Drake pick up a couple yards That's a rod I put in the field just to maybe get me back in field will range right there But I picked up the first down give the ball back to him Kenyon Drake We are closing in the end of the first half. What can Kyler Murray do? He can find Larry Fitzgerald back of the end zone touchdown double move fake to the corner went back to the post And you know, mr. Fitzgerald is gonna create separation on those double move routes Touchdown 14 to 7 so he's covering the fast wire receivers. He's bumping them getting physical with them But he cannot contain the future Hall of Famer Larry Fitz now Remember I told you guys name your top five wire receivers put that in my list below by the end of this video I'll give you mine right there. He hits this fade, but he's running out of time 24 seconds left Nothing left he can do in bounds. He runs around throws a ball out of bounds right here with the shine Watson So he's one play left 17 seconds. He's actually gonna hit this fade to the Andre Hopkins Boom, but the time is gonna run out. He's gonna go for the spike, but not quite Second half action. We're gonna get into it right now. He does get the ball.  We're feeling good. I need Chandler Jones to make some type of imprint on this game Have you heard me call his name? Have you seen him do nothing? No Patrick Peterson as well I mean, I guess he's kind of avoiding that side of the field the right side But for me, I need somebody to do something is he has this little corner out right here And it brings me like where do you guys think the Cardinals will finish this year too? I mean, I think they're in a tough division big fade over there to Kenny Stills They're in a tough division, but I think they're gonna be one of the more improved teams in an NFL this year No, where for him to go right here.  Listen, go get the quarterback on fourth down best advice I can give you right there with turnover on downs. We got a chance to seal the game right here So we're gonna try to find fit some more when try to find fits open up some lanes for our fast guys to get the ball Right here. We hit the out route Andy is a Bella Routing them on it out route right there. It's been open a little bit. I see it open Sometimes I miss it to throw it, but I definitely see it open from time to time Once again, try to take off a Kyler Murray right here get to a big dirt and long He's gonna try to blitz. We actually block it up perfectly and Kyler Murray escapes Looking like Michael Vick, but no, it's Kyler Murray getting out of bounds in field ball range This game is pretty much cooked if I take some time and kick my field ball Scrambling out again hitting Larry Fitzgerald over the middle right there Kyler Murray looking like a baseball player that he is next play We're gonna go for the wheel route, but Justin Reeves sniffed it out and picks me off Terrible turnover. We had the game sealed with the field goal, but we throw a pick make things interesting. We like them sweaty So we just got to hold them out the end zone. We feel fine. We had the defense in place We're doing okay. All we got to do is make them run some clock I'm cool with him running run all you want because the clock is gonna run out as he dumps it off here I just try to make sure he doesn't go out of bounds and he tries to go back to the middle and gets clocked Right there taking this to the two-minute warning He has all three timeouts, but the time is running out. There's that man Chandler Jones one of the best pass brushes in an NFL second in 18. He's gonna go for this crossing route Oh, that was a beautiful though Just over the outstretched fingers of Patrick Peterson First in 10 under a minute left in the game drag route to willful or another burner on the Texans tackled by Patrick Peterson Second in six who's he looking for he rolls out nowhere to go He's actually gonna take this sack right there big play. He has to call timeout 28 seconds left Looking for another drag route keep him in bounds good tackle Buddha Buddha Buddha Buddha fourth down I'm he's gonna run. He's gonna pick it up, but that's okay. Make some uses last timeout. I feel good I feel fine 17 seconds left. He's going up top for the streak and of course my deep half doesn't get back I don't know what my safeties were doing in this game I need to go back to mutt with the 9-up speed safeties because when I bring these 88 speed dudes in the box too close They can't get back and cover the deep half So that's our second streak we gave up and we give up the lead. We're tied right now 10 seconds left in half trying to make something shake roll out with Kyler Murray try to find somebody get a couple yards Get out of bounds give myself one more chance. I'll tell you looking back at this play right here I don't know what Kyler Murray's dope power is but if I had the 99 I might have had that right there, but it's knocked away and we're going to overtime back to back games Overtime back to back games. I'm getting the ball in overtime versus guy.  I'm get a first down right here on a read option Just moving the chains. That's all I gotta play smarter Can't go for a wild fourth down like I did last time a lot of pressure on me here Dump it off the Fitzgerald just creating a separation big body shields off the defender second and eight dump it off over here to kenya Andraic I'll tell you guys that told you last game that running back option route is really really tough against man coverage Once again, we're looking for fits on the in route nowhere to go I roll out and I try to throw the ball away, but I'm I run out of bounds Second and 12 we're looking for somebody else. Absolutely. Nobody open right here does a good job wrapped up sack terrible sack 45-yard line close to field or is I want to dump this off right here Back in field range. Are we gonna go for this fourth down now? I got to play smart I went for it last time this time. I'm gonna take my three put his back up against the wall See what type of drive he can come up with Going on here to try to get a feel for the tie or a touchdown the wind They'll new overtime rules are awesome So let's try to play some defense and it starts with a run and it starts with a 10-yard run 15-yard run Good job by me on my safety's not giving up Baja first play on a run next play Just takes off with the Sean Watson right up the middle for a cool 18 yards Pretty much in field range already another inside zone jukes my linebacker And we're definitely in field range to tie the game right now So now we just got to keep them out the end zone another inside zone all sudden Arizona forgot how to play any type of defense I feel like Another finally somebody made a tackle only a three-yard gain right there drops back looking to pass right here nowhere to go He hits the flat, but a big tackle by Offered right there followed up third and two nowhere to go Chandler Jones gets him. No, he doesn't hold away What's he he's running away? How slow is my team right now first down the Sean Watson? He's getting close to the end zone goes up top knocked away by my boys one interception right there Honestly, don't know a second down looking for somewhere to go with the ball And we're gonna send this by really once again the Sean Watson's faster than everybody in my front seven right now Third down. He's gonna run the ball. We're gonna stop it.  I'm not moving my safety's too far I don't want to give up an outside streak. I'm gonna sit on my linebacker move asset move Buddha Baker out Make sure I don't give up the outside streak. I know I'd he's gonna want to go to Hopkins I want to bait Hopkins. I want him to do the Hopkins and pick it off That's what I want right here because that's what I'd be looking for is my moneymaker in end zone, but no He thought that was open, but we user pick him for the G G's Now I'll tell you guys that was a great game and rex action this guy me and him went back and forth We definitely are one-on-one right now try to finish up the series soon But like I said comment on your top five wide receivers for me Randy Moss Jerry Rice Terrell Owens Calvin Johnson Larry Fitzgerald right there. That's my five comment below Who's your five and what team should I use in the next game?


We were looking at this Saturday. We have our Christmas in July and for the Christmas in July we'll be actually being doing two sessions instead of one like we normally do. We'll have our normal morning section from 9 to 1 and we'll have an evening session from 5 to 9. We have canned goods such as canned green beans, pickles, all kinds of value added such as baked breads, salsas, all that. We also have handcrafts. We have signed homemade signs. We have crocheted articles. We have sewing products for this. We'll also be doing senior vouchers from 10 to noon and right now we have several senior vouchers left. So if any person is at least 60 years old and qualifies they need to come and apply. We have about 40 left and I have to turn them back in at the end of the month. We also have WIC vouchers and we'll start taking WIC vouchers this week. They will be issued Monday at the health department and I think Monday from 9.30 to 3.30 the health department will be issuing the WIC.


So we've seen the mystery that when we try to understand the row vibrational spectrum of diatomic molecules, like this one shown for carbon monoxide, even though we think we understand many of the details of this spectrum, the fundamental vibrational frequency for carbon monoxide is 2170 wave numbers, and we think that would show up right where the gap appears in the middle of the spectrum, but that gap actually shows up at a value that's different than 2170 wave numbers. So we need to understand why that happens. The reason that happens turns out to be because of the non-harmonicity, the anharmonicity of the carbon monoxide molecule. So carbon monoxide molecules, diatomic molecules in general, actual real molecules, are not perfectly harmonic oscillators. They're somewhat anharmonic. So remember when we first started talking about the harmonic oscillator, this curve is what the potential energy looks like for a real molecule. There's some bond length that we call the equilibrium bond length where the energy is lowest, and then the energy rises on either side of that. That problem was a little too difficult for us to want the challenge to insert that equation into Schrodinger's equation. So we took a simpler approach and said we'll pretend that the energy instead looks like a parabola. So the pink curve that I've just drawn here is the one that we actually inserted into the Schrodinger equation and is an approximation for the real curve that works pretty well at low energies, but it begins to work less and less well as the energy increases. But we're not always interested in the energy at the bottom of the curve. In fact, we know that the harmonic oscillator has a zero point energy. So the lowest energy level might be here, might be somewhere in this curve. So for the lowest energy level, it might work okay. The next energy level up, the next energy level up, the higher we climb in this well, the worse the estimates of the energies get when we use the harmonic oscillator model to predict the energy because the real potential energy curve becomes more and more different as we climb that well. In particular, this K in the harmonic oscillator model that described the curvature of this parabola, a large value of K would be a steeper curve, a small value of K would be a softer, looser curve. You can see that as the energies go up, the real curve, this green curve, the real potential energy curve is getting softer and softer and softer. So as we go to higher energy levels, we might want a somewhat shallower parabola or a somewhat shallower one still. So the further up this energy well we go, the smaller the value of K should go. So in other words, as the energy levels increase, the value of K that we should be using as our harmonic oscillator approximation to this well is going to decrease. And since the vibrational frequency that we're using to predict the spectrum of the molecule, that depends on K. So as K is dropping, that vibrational energy, that vibrational frequency would be dropping as well. So actually our harmonic oscillator prediction for the vibrational frequency is going to be off by a little bit and it's going to be off by more for the upper energy levels than the lower energy levels. So the next question is how do we go about coming up with a better approximation than the harmonic oscillator approximation to make better predictions of the experimental properties of carbon monoxide and other diatomic molecules? We can consider several approaches. One is we could use the correct, the actual potential energy function. If I could write down for you the actual potential energy function of this green curve as opposed to the pink approximate harmonic oscillator approximation, we could plug that into Schrodinger's equation, solve Schrodinger's equation, come up with new way functions, energies, repeat all the work we've already done. The bad news or good news, if that doesn't sound like fun, is that we can't do this. I can't write down for you what the correct potential energy function is. And even if I could, we wouldn't be able to solve Schrodinger's equation for it, at least not in a simple form on the blackboard. So the second approach we can consider taking is coming up with some more approximate models, some additional approximate models for the potential energy function. After all, that's what we've done so far. We said the real problem is too hard to solve. Let's solve this simpler problem instead. Let's come up with a model that maybe isn't quite as bad as the harmonic oscillator is a little more accurate. But for example, we could say the potential energy, instead of saying remember where this one-half kx squared came from, it was some constant term, some linear term that disappeared, some quadratic term. If I continue that power series, I could say there's an additional term, I'll just call it k prime, that might depend on the bond displacement cubed. And I can continue that series as long as I want. So that looks like a better approximation of the potential energy function, even if I don't know the real answer. The bad news for that function would be so if if the quadratic function looks like this pink curve, a cubic function, once I include a cubic term, that's going to look like, remember what cubic functions look like, it's going to look like this. So it's going to go up in this direction, but it's going to go down in that direction. That might indeed do a better job of approximating the real function, it gets softer and softer as it goes up, but eventually it's going to turn around and dive down to negative infinity.  And in fact, those energy levels are going to be lower than the energy levels in this well. So that has some problems that approach. That doesn't mean we can't come up with some other approximation. We could say we could come up with some equations that aren't polynomial power series equations. In fact, one very common and not terribly complicated equation that can be used is this one that's called the Morse potential. So this potential energy function in fact does have the correct shape. So potential energy as a function of position, this one minus an exponential squared multiplied by some constant that represents the amount of energy it takes to break that covalent bond. That function looks an awful lot like the correct function and you can do a pretty good job of modeling the covalent bond in a harmonic oscillator or an anharmonic oscillator with this Morse potential. You can actually plug it into Schrodinger's equation, solve Schrodinger's equation, come up with wave functions and energies and they are reasonable approximations. Again, that's a little more involved that we're then we're going to get it in this particular course. So instead, we're going to take a a third approach, which is instead of using an approximate potential energy and continuing to do quantum mechanics, we're going to take a purely empirical approach. Forget about quantum mechanics. Take what we've learned from the quantum mechanics we were able to do, which is that the energy levels are evenly spaced, 1 half h nu or 3 halves h nu or 5 halves h nu. That's what the harmonic oscillator model told us. As a way of building in and harmonicity, we'll just take that general trend that the higher we go in this energy level, the higher we go in this energy well, the softer the potential energy function becomes, the smaller the force constant becomes, the lower the vibrational frequency gets. So instead of multiplying by the same vibrational frequency, we can think of it as multiplying by a number that keeps decreasing as the value of n goes up, or we could do the following. We could say, let's use this as our initial approximation, n plus a half h nu, and then let's subtract something from it. We know that those energies should decrease. The correct energy level should be a little below the prediction that the harmonic oscillator made. So if I draw that picture in a little more detail, so instead of 1 half h nu, 3 halves h nu, 5 halves h nu, we want each one of those to be shifted down by a little bit. And we want that correction to be larger for the upper levels, moderate and smaller as we go down the ladder. So these energy levels are harmonic oscillator or an harmonic oscillator. So we want a correction that's changing in size as we go up the ladder. One way to do that would be to have, take our quantum number n plus a half, subtract not n plus a half, but n plus a half squared times h nu multiplied by a correction factor, x sub e. So this correction factor, we call the anharmonicity correction or the anharmonicity factor. And that's a purely empirical, purely experimental measurement based correction to the observed energy. So what we would do is say quantum mechanics told us that, or at least the harmonic oscillator model plus quantum mechanics told us that this point should come at 2170 wave numbers. In fact, we see it at 2143 wave numbers. That suggests that the size of this correction we need to make in order for the energy levels to have the values that we observe them to have. And for this carbon monoxide molecule in particular, if I give you the value of x sub e, that's a pretty small correction. It's 0.0061. There's some a little bit of advantage in thinking of the value of x sub e, because you'll notice that this term h nu and this term h nu, those are both a quantum of vibrational excitation. And this is just telling me essentially a fractional term for how much I'm correcting the harmonic oscillator model to build in the anharmonicity. So this tells me that that anharmonicity correction is down in the vicinity of roughly a percent or so. More commonly, however, we quote the value not of x directly, but x times the vibrational frequency. And if we're working in wave numbers, that anharmonicity correction multiplied by the fundamental vibrational frequency in units of wave numbers, that works out to be roughly 13 wave numbers. So we can see that when we throw in the anharmonicity correction to try to correct for the errors in the harmonic oscillator model, that correction is on the order of roughly 10 or so wave numbers as corrections on top of this 2170 wave numbers. And if I include various factors of n, that ends up correcting these energies from 2170 down to a few multiples of 10, 2143 wave numbers. So this empirical approach is very commonly the approach that's used to treat anharmonicity in practical real-world diatomic molecules. You've made enough measurements of the properties of the molecules. You don't have to, it's best not to treat them with the harmonic oscillator model, because that ends up making some errors. And this anharmonicity correction ends up being able to give you the correct predictions for the spectroscopy of those molecules.


So, I'm talking about a thing called TOSPO virus. I call it TOSPO virus, so you'll find out what that means in the future. This is my little trek through the sweetest of the Wi-Fi fruits, which is the Wi-Fi pineapple. It is kind of geared towards a workshop. Is anybody actually doing this as a workshop, or are we just sitting around? All right, so we've got a couple of people here, do you have pineapples? That's going to make it really hard, so you kind of need pineapples for it. So yeah, anybody doing this as a workshop, it's going to make it really short if nobody is doing it because then we don't have to wait for anybody. Yeah, it's just story time. Cool? Anybody? Anybody back there? We got one? Oh, you got one? Do we have a, do you throw one up there? Do we have a second one? Because we really need two. Thank you so very much. Yeah, is there anything important on it? Because we are going to flash it back down. We're going to downgrade it. If you were here for the previous talk, you may have heard that like all of this stuff kind of got fixed. Doesn't care? Cool? Not up for it. Not up for it? Okay. All right. That can happen at any point in time. Is there anybody that works in affirmative action here? So I'll keep going. That's my man servant over there. So the workshop layout is going to be like introductions. You'll find out a little bit about me very little. Yes, sir? Yeah, just like two would be great though. You know what? I mean, I've got two and we can re-flash those. That's really easy. I think that'll work. You? No. No, we need two. You got to listen. This thing's working, right?  So yeah, we'll go through some setup which will be these guys setting up. They will be our, I guess, guinea pigs which is wonderful. Thank you for volunteering yourselves. We're going to disclose some vulnerabilities which have kind of already been disclosed a little bit and we're going to do some exploitation of those vulnerabilities. We're going to overview, have a very, very, very tiny little overview of viruses which is like literally one slide but important. And then we're going to introduce you to TOSPO virus itself. And we will go through the process of using TOSPO virus and then we will recover some data over the air which is quite fun, I think. So introductions. Myself, I am Catatonic Prime. I'm sometimes caught making good decisions about alcohol but not often, especially at Defcon. Did anybody else drink too much last night? Yeah, yeah, yeah, that's, I also wrote the TOSPO virus itself. This is actual Reverend. He's my manservant. He's a Windows sys admin. He's been hanging out with me and he provided all of the comments to make it easier for people to read. If you do get a copy of these materials, they will be available sometime after the talk. We'll put them up on GitHub or whatever. So what you need, if you looked at the website, is you will need a laptop. You need a working version of Metalsploit. Collie works just fine for this. And you need a partner. Remember two devices. And somebody needs to be device number one. So I guess since it's just you two, both of you give us your social security numbers. The one with the lowest is the one that is device number one. You guys must be very close. So we should have, did you turn one of these guys on? That guy's on? They're both on? Okay. So you guys, if anybody else wants to follow along over there, you are welcome to. You can jump in almost at any time. But these things are going to go away because I think we're going to share one over. But if you guys could from, if you're using a virtual machine, do this from your virtual machine. The materials need to be in your Linux distro, not on your host. So yeah, connect to one of these guys.  Like I'm begging you. Do not de-auth and do mean things or like intercept and it just makes me sad. Yeah, you especially. As soon as, when you showed your demo earlier, I was like, oh fuck, I should have put that in. That looks glorious. It's nice and fast. So we will take a couple of minutes. Anybody have any questions yet? No? Okay. Yeah, it's all the boring stuff at the beginning. Yeah. How about I ask you guys some questions? Where are you from? Who here is from the great state of California? Hippies. Who here loves guns? I don't see any of the California people raising their hands. Oh, man, yeah, just come, I did not think of any of that until now. I swear. You guys ready yet? Tick tock. Tick tock. Yeah. We do have two hours. It's going to be really long. We're going to take time. Feel free to ask questions at any point in time, especially since we don't have a lot of people that we're managing. That's probably going to be just nice and smooth. You can ask anything at any time. Oh, man, I wish that we had. We have a jacuzzi in our room that is filled with ice, beer, and liquor. And we got, I think, maybe halfway through it, more than half. Oh, we just, oh my God. So if any of you pray, we do have a guy that went to the hospital and he clocked in with a .422.  You got to, yeah, my understanding is he said the hospital did say that was the highest that they've ever seen, and that's in Las Vegas. So yeah, he was texting, right? He was texting? Okay, so his hands work, but we don't know if he can speak. It's going to be terrible in posterity. When I come back and I'm like, no, he can't speak. Dang it. Yes, sir? Oh, you know, I was like, I could use Shaw. And then I was like, man. That's good enough, yeah? You guys set? Set? Everybody set? Okay. Anybody back there waiting? Nope. They're doing their own thing, having fun. That's cool. That's great. All right, so we're moving on. Some of the stuff that you got to do, once you get those course materials, you got to unpack them. You got to move some stuff into the right places. You got to install the back door that we do for you. Just run scripts, pull the exploits from exploit DB and just execute, right? Always works. Tick-tock, tick-tock. This is the slowest part. And then later we get in some more of the fun stuff. Oh, yeah. Any time, man. Whenever you're ready. So did anybody get their pineapple on last year during Darren and Seb's talk here? Did it just like go completely, completely dead? Yeah, I was testing the exploit out on you. I didn't own one yet. And I was literally standing right next to you.  And I was literally standing there with my laptop because there was no seating. With it bent up like this. And I'm looking over the guy's shoulder. And it's not working. The exploit's just not working. So I'm messing with it. I was like, this thing should work. It worked. So I done all my testing in a virtual machine, an X86 virtual machine with all the Wi-Fi pineapple stuff copied over into it. What happened was I had bashing that virtual machine. Wi-Fi pineapple just has busy box. And so one of my commands was growing up. So it was working. The payload just wasn't running. And I got so mad about it, I just RMRFed it. My bad. Dandy public apology there. Yeah, the rest of them got pretty bad treatment too. But at least they got a nice entertaining screen. You're saying that you're going to buy this guy a beer, right? Absolutely. So now it's like five people here. Yeah, that's what I was saying. Oh, free beer. Yeah. You guys all say, you just got to type what's on the screen. I think we got to call the guy who can text still. I do feel really bad for him, though. I hope he's OK. It is exciting once it comes around. I know, right? I am a little curious. I did look at something earlier. I was walking around with my pineapple running what I will be showing off today. And I did see that it connected to at least one which said pineapple five version 1.2.0 you can hunt me. And I was curious if that was yours. No? Oh, OK. I don't have a hunting product. Oh, yeah. I thought about that. Sure. This year I'm completely crowd sourcing. It's just been other people that I've given it to. Just in case my laptop eats battery and I forget, then it's going to shut down in the middle and that would suck. Here's some teamwork occurring over here. Anybody else here know how to type? Anybody know how to use Linux? It did something. He said it did something. Oh, you guys know. So you get into the Metalsploit framework. You know where that's located? You're good? Cool. Great. Oh, you got another one? OK, cool. Great. The password was TOSPO virus. TOSPO, yeah. Oh, TOSPO with a P. Something upside down B or D, something. OK, so once you get that all done, we actually need to probably downgrade your pineapple because this does not work on the latest firmware. So you can do that by finishing configuring your device and then you can copy it. That will open up SSH. You can copy your bin over. You can copy the old firmware, which is included in the course materials with backdoors. And you just, yeah, run these commands. Ta-da. All of the vulnerabilities that I use have been patched. So they are all mitigated. Where are you here in the previous talk? OK, so at the end of the previous talk, they were mentioning that now when you configure a new device, when you get a new device that has the latest firmware, you have to go through a process of proving that you own it. And the way that you do that is you use Ethernet and you turn off the radios. Because as it turns out, leaving the radios on, it leaves some attack surface open. So, yeah, now they've forced you to turn the radios off by flipping dip switches. Then you can continue, flip the dip switches back on when it's time and finish configuring your device so that somebody else doesn't do it for you. Yeah. Me too. I didn't do it. I didn't do it either. It does take a couple of minutes. Flash, you get your commands in at least. Say that it's writing firmware, rebooting, et cetera. Man-servant. Go help them. God, I'm so glad that I have them. I don't know what I would do in my life without them. Oh, yeah. You know what? In the course materials is also the HTML. Yeah. There's like a lab document in there. You can open that. It has every command that we run. You can literally copy, paste into a terminal. If you can type like three keys, two of them at the same time, you're set. That's the tough part. Or right-clicking is also successful, unless you're missing a middle finger. No. What? Whoa, you're...  That's what middle finger privilege sounds like. Do-do-do-do. That's the third one doing. Has anybody here... Or anybody else here done any exploits on the pineapple? Their own? Has anybody run Myscript? Yeah. Has anybody run McGrewscript here? He released it? No. You're not that famous, man. Oh, my God. I did. I am considering integrating it later. It's very... It's highly effective. It'll make it... It's looking so good. I think it'll make a good addition. Anybody here know how you can identify a pineapple over the air? Like, if you get beacon frames? Like, what's a good option for that? Like, how to tell? Anybody? I was just connected to them. No, no, no. The SSIDs in them? Anybody know about their SSIDs? For the OUI? Yeah, sorry, the MAC address, yes. Yes. Yeah, so the SSID... Yeah, that's one way. Once they're configured and they don't have the SSID... Sorry, I didn't mean SSID. It meant BSSID, the MAC address, the OUI. Yeah, it's like, I believe, 031337. Is somebody... Anybody? Yeah, so if you see those, those are probably pineapples when you're at DEF CON. Yeah, so I mean, it could be a good thing to play with with this, is instead of looking for SSIDs, you look for those and might help with searching and finding them. Are you guys set? All right. Yes? Maybe I should do it. Yeah, this part is boring. So you guys are good. You got the lab at least. I'm going to move on. So the vulnerabilities, hey, fun stuff, right? This is what people really want to hear about. Yeah. So like I said, as far as I know, all of these have been mitigated in version 2.4. That's the latest version. It's actually 2.4.0. Those changes were put out by Seb just last week. And all of the vulnerabilities, the first one, I don't usually like to count this as a vulnerability. It happens to be super useful in this case. It's default usernames and passwords. Yeah. You know, okay, boring. Anybody know what the default password for a pineapple is? We know they're yummy, sir, but what is the password? Yeah. So yeah, default username is root. Default password is pineapples are yummy. Then there's a week proof of ownership challenge. They covered that a little bit at the end of the previous talk. We'll talk about it a little bit more and give you some closer numbers.  Predictable anti-CRS RF tokens. This is what I actually count as the vulnerability. They do not release their CSERF token to you until after the device is fully configured and you successfully log in. But as it turns out, you can do some other stuff. It's easy and fun. And then a little bit later, I picked up a login anti-CSERF bypass as well in pre-configuration devices. So you can just skip all of that other stuff and just get to the chase, which we will talk about that as well. And all of these have been fixed. Once you get authentication, once you get session, that's good. You want to target component system configuration functions.php and you want to be able to run commands there. This is built in. It's by design. So target that. That's your command injection point. So the weak challenge, we're going to skip the default passwords, right? Because we already covered that. No need to put a slide for it. A weak challenge. The challenge allows you to reset the password. There are four LEDs on a Wi-Fi pineapple. I believe it's what? Green, blue, red, yellow, or amber. And there's three possible states on, off, or blinking. So, hey, that's like a theoretical of 81 possible solutions, which if you were actually hitting them really fast and getting them wrong like I've done, you can get about two per second, approximately. And you should, in theory, I think, get them in half of that time. So that's 80 divided by two divided by two or approximately 20 seconds to compromising the password and resetting it, which will allow you to login and complete all of the rest of the setup. Or if you get them wrong a lot like I have, you'll notice the green one is literally always on. So there's only 27 possible solutions, which leads you down to being able to compromise the device in seven seconds. This is very important because all of these vulnerabilities only apply to pre-configuration devices. So once they're configured, they're kind of, they're a lot better off with the exception of some ARP spoofing. So, yeah. Pardon me. I should get some aspirin, too. So yeah, seven seconds to compromise. Very important. Once you get a successful login, so either by resetting the password or using the default credentials, once you are successfully logged in, you will generate a CSERF token, an anti-CSERF token, and that is based entirely, yeah, muscles don't work good. I mean, I've played football for like years. Yeah, yeah, we're good. Good Lord. I'll leave it the way I got it. I was caught back. So once you generate your anti-CSERF token, it is generated as the shawl one of the session ID, which on these devices is quite interesting because if you use a cookie with a session ID that did not already exist, it will make that session for you. I was talking to some other guy and he was like, oh, my God, session fixation, and I was like, eh, I don't know, is it? Is it? So if somebody knows about that and would like to chat about it later, yeah, I see this guy looking confused. I'm with him. I don't think so, either. But if somebody has a fancy idea about that, let's talk. I would love to hear ideas, and we can try them out. We have devices. So that will create a session with a specific token, in this case, my session will be to a token like this, which then gives us access to execute commands. Because anti-CSERF is passed, you have a logged in session, you can now run commands on the device, you are root on the device effectively. So doing all of this a little bit faster, there's a faulty check in the authentication stack and the header stuff that they include, and it looks for a string called include CSS styles.php, but it doesn't look for it being the end of the string, and also the beginning of the string, it looks for it anywhere in the string. So if we do a little directory traversal trick, we can just include that at the beginning, back up a little bit, and then presto, we can execute commands without doing any login at all, or any root forcing at all. The virus does not use this, but I imagine it could. Activity for the astute student. So the exploit chain kind of looks like this, or could look like this, you could adjust it to make it better for you however you wanted. You choose your starting point, you choose an exploit method. In our case, we just stay on the top side and the TOSPO virus land, but it would be pretty easy to put these in an actual chain instead of having that decision at the beginning. So just try one if it fails, try the last one, and then hopefully you'll get there. So once you have done this, there are a couple of ideas like, well, what should you do with it? I think that you should install a service. I think that you should install an SSH backdoor. I believe yours was doing this, but you added a user. So in the previous exploit last year, it did a lot of very bad things. It attempted to make it as difficult as possible to recover. It removed the whole web interface. It tried to remove anything that could reflash it and all this sort of stuff. This year, I settled for just adding a user and SSHing in, but the code's available, do what you want afterwards. So it could be a good thing to add the user. I add an SSH authorized key instead. I found that to be easier at the time even though it's really big, and part of that has to do with preventing people from cracking the Shaw later, if you use a weak password for it when you add the user. I like keys a little bit better in this way. Then you can also do maybe like a little encrypted packet disclosure with some stuff for the WPA protected managed interface. Once you've finished configuring a device, let's say that it's been infected by the virus, then you still want to be able to gain access to it. The question is how do you spot them? How do you know which ones are infected? You could just connect to anything. One of the OUIs for Wi-Fi pineapple might as well connect and see if it has the back door on it. Or you could just wait for it to tell you. I like that a little bit better. All of these things combined is what makes up TOSPO virus. We'll talk a little bit about that after. This was geared towards being a workshop for people to do all of this stuff. Do you guys get set up? You haven't been listening to me, have you? I was hoping that you were just ignoring all of the vulnerability stuff. So there's some... I need some Metasploit modules for these. If it was a workshop, you can just load these up. They're super easy to use. Exactly these commands. Presto, you're in. You can modify your password. You can start completing the configuration a little bit or just change the password to whatever you want. Run this command again. Exploit. Boom. You're in. You can change the password, do whatever. You can play around with it a little bit and it'll get you in every time as long as it's a pre-configuration device. So, yes. I'm going to move along. I hear that we are having much a little less time than we were expecting to, which is cool. So if you were doing the workshop, you'd want to grab your SSID and the SSID of your partner. So everybody should have their SSIDs because you're going to share that a politeness thing because well, we'll talk about that later. And on the first device, if you pick a device, you'd say on this device enable SSH that'll let you copy files over and get things started. So talking about viruses, they really only have two primitives. They have a search function and they have a copy and replicate function.  I always thought there was like better than this, but nope. Turns out if you just like little black book computer viruses, this is it. Worms are very similar. They just do these things in an automated fashion without any human interaction so it can happen automatically. I think 1988 Morris Worm, stuff like that just uses an exploit, exploit, exploit and just keeps jumping around. Oh, or Code Red if you want to be like slightly more newer or like Stuxnet if you want to be even newer. Of course works is as we discussed you can identify Wi-Fi pineapples by their SSIDs. You can detect pre-configuration ones definitely by their SSID. It looks a lot like pineapple 5 and I can't spell. Underscore something, something, something, which are the last four digits of the MAC address. Once it sees one of these, once it sees one of these, uses IWList scan to find that. Once it sees one, it will seek to use the default credentials. If that fails, it will attempt to brute force the puzzle, reset the password to the default so it's easy for them to be like, huh, that's weird, maybe the default still works, glitch, whatever. I don't know, I was hoping to not interfere too much with the user experience or using their device because then they'll just reflash it. Once it gains access, it backdoors it, adds an SSH key, adds an RSA key, which it does only for public only. It also generates its own SSH key, so the device that it's on creates an SSH key that it will use to infect victims, which is only for that particular device, and every device will do that, so that is a unique part, but all of them carry like a master backdoor key that they add, so they actually end up adding two keys, and they install a service.  A minute later, look for another one, see it, own it, only now you have two doing it, because yeah, it does that. It's pretty fun. And that is the automated fashion that makes TOSPO virus actually technically a worm. So if you were participating, yes, still behind, we'll run through it real quick, I can run through it pretty fast and at least show it you would, yes, if you're going through it, you could CD into TOSPO virus, you can edit stuff, there's a whitelist in there, you set up the whitelist so that you're not rude to your neighbors in the wireless village, and you're not infecting other people's devices without authorization, because that is, you know, I hear it's a problem, or something, something US federal code or something, I don't know. Yeah, I never heard of it. And I'm not a lawyer, so I have no advice. You can build it, this takes TOSPO virus and actually shrinks it down, it goes through like some little obfuscator that I pulled off, makes it slightly harder to read, not too much harder, you could pump it through as much as you would like, I think that would be a great thing to add in a little extra anti-reversing or, you know, make it polymorphic or metamorphic or something that would be sweet, just so that people get some weird samples when they start looking at each other's. You could also install a root kit like a backdoor to hide the virus. I did not choose to, I was originally going to let this loose without telling anybody about it at all.  It's cool. But yeah, I chatted with Seb and Darren, and they were such nice and I was like, oh man, I can't do that. I'm not that kind of person. I would not do that. I'm so glad that you're here. So yeah, then you basically create a seed device and just copy the directory over, make a directory, copy the files over, install the service yourself, and a minute later, you'll see that it should jump over to the second device that's in its whitelist, whitelist, whitelist. Then you can confirm that by using the master backdoor key, which is TOSPO virus backdoor, TVBD, and that should just let you pop right into the device as root and presto you have access as you would expect. Then you can go back, reflash device number one, which was the seed device. It will now be clean and if you wait approximately two minutes, then it should jump back. So that's what we're going to do next by using SSH. We'll come to that in a second. Would anybody like to see this actually work? That would be cool, right? I agree. So let's just try to run through it real quick. I need to flash a couple devices from right now.  You said that earlier. Yeah, you gave me that number like a while ago. Your info's not good. I was just doing that.  Oh my god. This resolution is ridiculous. What has happened here? Oh god. I can't computer. Oh, that doesn't look good. I heard this was a problem at DEF CON. Demos. Yeah, I know, right? Why do... What do I know? I heard that's a problem at DEF CON too. Okay, that would be great. Thank you. Yeah. Am I crazy? No, right? Like who needs wires? Yeah, right? Yeah.  I thought it was going to be a workshop. I thought other people were going to be doing this.  There's nothing to see here. Literally. Not anymore. I literally just lost the device. That is super bizarre. I think the window solution is to reboot. I apologize while I read. God. This is my first time being in front of like one of the people ever and clothed. Yeah, should just do DEF CON comedy. I don't think I'm as funny as those guys. So... What's that weird buzzing sound? Sounds like somebody's playing with a vibrator. Oh, I see the microphone. Let's not do that. It's cool. Did we actually bring our device back up? Come on, windows, don't fail me. I'm so unfortunate.  Great, we're set. Oh, my God, this resolution. I say web development. I really mean like exploits. It's the same thing. Has anybody ever added a web interface to something that never was supposed to have it? It's okay, be honest. I just want to know what it was. That's all. I was really concerned there for a moment. Pause. I wonder if it went away when I put my machine to sleep. I don't know. Let's turn this on. Good Lord. Make sure that we... You got to do everything from bridge to adapter. Oh, thank God, there it is. Yay, back on track. So now I've told everybody about the vulnerability, so I'm going to spin up a box for you right now. Feel free. Later. Did you get that one? Problems at Defcon. Yay. I heard you're not supposed to bring laptops to Defcon or cell phones. I also heard it was canceled. I actually thought it was. I saw that picture of the Cosmopolitan, and I was like, ah, man, Defcon's over. It takes a minute to reboot. Oh, to reflash it. No, because she's configured it. That's right. That one thing we talked about earlier? Oh, man. Yeah, I'm hungover. I wish it was better for you. It's just like a crowd of my father out here. I'm so disappointed. That guy knows what I'm talking about. Is it the long hair? That's everything. So for those of you who haven't caught up with what's happening over here, they didn't have the root password to reflash it to downgrade it. So post configuration devices, these things don't affect it. We can't reset it. Yeah, you can flip the last switch up and then reboot it with an IP address of <IP_ADDRESS> and then so forth and so on. They have an image. They have an image. Sorry? What? People are yelling at me? It's coming up. Blue flashy light for anybody who cares. That means it's booting. Hopefully it keeps doing that unlike my other one in the hotel. Or rather, hopefully it stops doing that unlike my other one at the hotel. Yeah. It's not good. There he goes. I don't have metal splite on this machine because I was expecting other people to do this once more. Oh, wait. Workshop as a workshop. Yeah. I told you to do what you did. Yeah. It's all those people. I know, right? That's right. The father's up here. I think that's right. If I read free passwords. There's an end user license agreement? Oh, I had no idea. Usually when I do this, I do use the metal splite modules in which case, no, I definitely do not read the end user license agreement. Yeah. Sounds great. Let's do this. I guess it is flash time configuring it now. The vibrator is still going. Somebody has got, like, incredible endurance. They must be so proud. Yeah. I can't handle this. I think of another production device in which you can put contents. You have to read that one. Something we'll cover later. Yeah, a new device. Let's cover that device later. Pineapples are yummy. That's right. Yeah, that's right. There we go. So here's the virus being copied over. You can see that there are also two keys in there. One of them is the disclosure key. The other one is the SSH key. Let me just pass forward. Somewhere in here. I forgot what I'm supposed to do now. Oh, yeah, that's the one.  They think they're so goddamn smart.  He's a Windows sys admin. Andy loves it. Just realized I did not fix my white list. I should just make sure that that's uh... Let it go. Yeah, that's true, right? That's true. You know what? Let's do that. Who needs a white list like this? Let's just do something more like... Yeah. Yeah, everybody here is consenting to Wi-Fi Pineapple stuff, right? Yeah, all right. See? Native to me. All right, so my device here is configured now. Should have the virus on it. We can pop into it real quick just to double-check. I'll take a look at the time, see about when it's going to fire off looks like in another 45 seconds. Or it's doing it now. I'll just wait for the network to come back. Is it done? I've ruined it for you. Oh, hey, look, it came back. I wonder what it was doing. Well, that was weird. Network disappeared for a little bit, but it came back. So, uh... So, yeah, I believe that my devices hopefully just jumped over. We can kind of go check. Oh, man. I think somebody else turned one on. Did you guys just finish? I don't suggest doing this in, like, the chill-out area. Not suggesting that at all. I hear, though, if you do, turning off IPv4 is really entertaining. So, there's a couple of extra files up here that weren't here originally. If we take a quick look at these, we should be able to get at the open-out CD. Take a quick look at what probably got owned. This is not one of mine. Whoops. Whoever has Pineapple 5, B1, BF, if you could check out your root directory for a TOSPO directory, you might want to just see if it's there. This might be the new one over here, too, though. Yeah? Did you guys get it spun up? Flashed? Reflashed? No. Okay, well, then. That's... So, yeah, in theory, it jumped over somewhere. Which is maybe good enough. Let's move on now.  You can see how it kind of works. You get it loaded and as soon as it finds a device, it drops for a little bit, but it restores all previous network state. That's the goal of that was to keep people just like, all right. Yeah. Once it is infected, it likes to share some information. Once a device gets post-configured, after you've configured it, your SSID, you've got a password in slash etsy slash config slash wireless, and it likes to go and scrape that password out of there for you. It will just make a copy of that. And then it runs it through OpenSSL with one of the keys. It's a tvd.pub, which is an RSA public key. It is only 256-bit, but we take all of that data and shove it into a probe request using IWListScan, because that command is awesome. It's super simple. It's available on everything, especially wireless router type things. You can fit 32 bytes into the SSID, but with the RSA encryption tacked in there, you actually only get about 20 bytes that you can put in, so it's super low bandwidth. It only goes out once a minute. You could probably expand it to have your own encapsulation and do complete exfiltration in this way, but the goal for me was to not disclose people's Wi-Fi, pineapple passwords that they get in post-configuration throughout the whole con for everybody, except for the devices. Yeah. So, yes, I chose to use RSA 256. I figured it was good for three days. Maybe I'm not a cryptographer. So, would anybody like to see what that looks like? I need a USB, mini USB, because I ran down here. Does anybody have a thing that connects to one of these alpha cards? God, I owe everybody a beer in the audience. No, no, no. This guy right here. Look at an alpha card.  Oh, it's doing something special down below. Oh, yeah, thank you. I know it wasn't yours. Yeah. I heard a very authoritative answer of yes over there. I think that guy knows what he's talking about. Staffcon. It just makes it better. I forgot what I was doing. Oh, so to help with this, since these packets are encrypted, they look kind of nasty and I don't like fishing for them in Wireshark, but I'll show you what they look like in Wireshark. Okay. Oh, thank God. Yeah, that's got to go. Good thing I have Wireshark right here. Yeah, I know. Running Wireshark as root is totally cool. I love it. Their dissectors are so perfect. Everything. Yeah, everything. No volns, no volns.  God. Oh, Mon-Zero. Yeah, yeah, thank you. I want to connect, too. My screen is so tiny. I'm going back to my room and drinking. This is fancy. I'm scared. Yeah, yours worked like immediately. Mine's like a... I wonder if I got a bad card. Is this mine? No. You actually have a bad card somewhere and I just lose it. And then it ends up in the wrong place at the worst time. I know I should just ditch it. Someday. That's the way it's made. I just passed it through. Sorry? Here. I know what usually adds it now. I'm here for like another 10 minutes or something. Hey.  Does anybody know how to use Aramon? Yeah, I think, yeah. Let's try it again. Seeing prayers. This one will probably work. Or not. Yeah. Anybody else want to try this? Yeah. I mean, I got... That's cool. D-Message. Yeah, I unplugged it. I tried again. This would be so much easier if you guys were doing it. So I'd be up here yelling at you.   We did it last night. The night before. It worked great. Yeah, we did. Just to show that... I want to scrape the packets up. I need those packets. Yeah, how are you doing? How about you guys? Is there anybody in here who can sniff packets right now? Who would like to come over and join? They're busy. I know, right? It's a wonderful experience. You got it? Bring it up here. Yeah, this is now your time. Congratulations. Cool. Right, I'm liking that. It's going to take a long time for me anyways. This card is in the worst spot for the VGA adapter. It literally does not fit. Because the USB is in the way. Alright. Don't try any typing. It's like right next to it. It's my new machine. I know, right? Your mouse pad is soft. It's so difficult for me to use. So you're aware of it. Is there a way for me to yank this thing to the other screen? Yank most of my whiskey in this class. Yeah, I do. I think it's under administration. It's just pressed buttons. Oh, that scotch. It's not just me. Heavy lane one? Oh, bang. But is it true? It's true. This is going to be painful for me. Ah, yes, thank you. Now we're talking. Yeah, we are. So, yeah. Oh, deos? Oh, yeah. Nobody needs networks. Let's see if we can find a probe request in here somewhere. Somewhere, somewhere, somewhere, somewhere. If somebody sees a probe request, let me know. Oh, oh. That's a response, guys. English. I'm going to use the filter. I just forget what it is. How's the responses? You can just keep saying that. It's like I wouldn't know the difference. I wouldn't know the difference. Quests to send. Oh, sort by info. That sounds great. I wrote a Python script for it. Shrinking and mousing. Oh, my God.  I think we have another volunteer to come up. I know, right? This makes it a workshop. Man. I think a response would work fine because I think the subtype is four. And I just forget, like, I'm feeling bad about sorting now. Why is there so much in this room? See if we can yank one of these guys. Oh, your mouse. God. Okay, okay, okay. I'll take this guy. Oh, yeah, there's a lot. Just sit around. I don't want to stop the capture. It's fast enough. Nice machine, dude. Except for the mouse pad. All right, so here we have probe requests. You can put it in any probe request that has a length of 32. Here, my mouse is killing me. So we will just filter down to those. So here are our exfiltrated password packets.  They have a length of 32 bytes. They do not actually contain the password. I wish that there was a way for me to copy this to another machine that maybe had the public key on it so that we could decrypt it. Mind if I plug in a USB? Nothing can go wrong. Right now, I'm indebted to you. I'll sell you my man-servant. No way, me. I'm going to copy some files. You're going to get a copy of the virus. You're cool with that, right? Oh, root, right.  I forget what interface was it. It's a little Python script to do all the filtering for me because I'm lazy. And it works way better than... Oh, I made that wrong one.  I can type three keys. So since it transmits every minute or so, we wait. And at one point, it will find the encrypted packets. It will give you the AP that it came from. You take a guess at which SSID it actually belongs to because it doesn't actually know that. They're slightly different. And then you end up with the password that is the password to that SSID decrypted using the public key, which he now has, so anything that happens, it was him. I very much appreciate all of y'all's patience.  I love you too, Darren. So, yes, that pretty much wraps that all up. I think we're getting pretty close. Or maybe like a little 30 minutes early, any questions? I have had plenty of time to talk about all of this and nobody has been participating. Would anybody like to go spread this around?  Yeah? Well, you have a copy of it now on... Oh, look, hey, more. So when they come in, let me give you the ending notes. Sir, thank you. Not mine. My lawyer will contact you shortly. This is... That's it. It's probably going to go up on Reverend's GitHub, because I don't want people bugging me about it, even though I wrote it. So, thank you very much to Acfi for being so generous with They suggested that I even do any of the presentation stuff at all. I wasn't going to do that. Like I said, just spread it. To authorized devices. Only. Thanks to DevCon, etc. The Wi-Fi Village, thanks to this guy who has given me more than he should have. That other guy whose father hates him as well. My dad loves me, actually. But I feel bad for that guy. Any questions? If not, I think we're done. Thank you so very much. Have a wonderful day.


Hey guys, Drew with GeoArm and I am back to talk to you about the 2GIG GC2e and getting the cellular communicator, the 2GIG LTE A-A or the LTE-V, whichever one it is that you're working with, Verizon or AT&T, this is the same installation video form, no matter what. So what we're going to do first, getting this going, is we're going to go ahead and pop the cover on the device, get that out of the way here, and we're also going to need to undo our two screws here, like so. So they're spring loaded so you back them out. By the way, you need to make sure that your system is powered down when you're doing this, mine is powered down, but in order to do that you need to make sure backup battery and power supplies are disconnected. You should have a blank screen, there should be nothing. We're going to go ahead and open it like this after we've backed those two screws out and then we'll get it cracked open here. Once it's open, then we should be able to go ahead and get the cell communicator installed. So when you look inside of here, you'll see a few different things going on here. See a lot of different slots, you see my wiring, everything's in here the way it should be. So what we're going to do is we're going to grab our cellular communicator. This is the actual cell device itself. What we're going to do now is we're going to go ahead and we're going to get connected to this little pin connection down here. So what you do is you just slide it right on top, make sure that it's lining up with the pins, and then just push down. It clicks right in place. Now at that point, you're going to grab your bag that has the screws in them, and you're going to tighten it down. It comes with little wire nut or screw nuts as well to make the connection tighter. I'm not going to use those just for time here, but what you would do is you just take your screws, you get it tightened in place here. Once that's tightened down, you move on to the next one, I'm sorry about that. Once that's tightened down, you're also going to notice that this device has come with two separate antennas. You are going to need to connect both of these antennas.  So the connections for the antennas go right here, so you'd go one here, push it down and get it clicked in place, and then do the same thing with the other one. Once those are clicked in place, then what you're going to do is go ahead and get it secured back to the back plate like so. Get your screws tightened down, okay. Once you've got these screws tightened down and in place, you're going to go ahead and put your front plate back on, and that just snaps on like so, and then boom. So we're looking good here. We have our cellular communicator installed, we back-fed our antennas. This thing at this point is ready to go ahead and get connected and activated. You just give us a call. You would need to go ahead and get your IMEI number, which is located on the side right here. So just write that down, and once you have that number, give us a call and we'll be able to get this activated and put to monitor. If you guys have any questions or have any suggestions, anything at all, please leave the message below. You guys take care and have a great day. Make sure to subscribe to our YouTube page and click the Show More tab underneath the video where you can view valuable links pertaining to this product, similar how-to videos, and our low-cost, no-contract alarm monitoring services.


Who says you can't have it all? Not Appalachian Wireless, we know what you want. Appalachian Wireless offers the hottest smartphones and unlimited data plans, all on the region's number one network. Pikeville Medical Center announced Friday around 130 positions have been cut at the hospital. The hospital's president and CEO Donovan Blackburn told EKB News the eliminations were due to overstaffing and PMC was experiencing a financial crisis. Southeast Kentucky Chamber of Commerce president and CEO Jordan Gibson says while Pikeville Medical Center is still the largest employer in Pike County with over 3,000 people still working there, it will put somewhat of a financial burden on the region. If you look at 130 people working in our community, going to the store, buying groceries, paying rent, buying cars, going out and supporting all the local businesses in the community, just assuming that all those people were making minimum wage jobs, working full time, that's at least a million and a half dollars gone out of the community right now. Some of those people may have been making more than that. I would really estimate closer to two, three, four million dollars. When contacted today, PMC CEO Donovan Blackburn said he understands the layoffs will have a negative effect, but the potential impact would have been worse if the hospital had not taken action now. Sheila Salyer was an x-ray technician at Pikeville Medical Center for 29 years. She was among those laid off from the hospital. She says the situation is very difficult for her and her family because after this month, her family will no longer have insurance and will be losing a huge chunk of their income. I'm 62, so I'm not eligible for a full social security retirement yet. So my income, if I take it, will have to be based on a reduced social security. Also it means that I have no insurance as of July 1st. My husband has an illness and he takes several medications that probably will cost us probably around $1,000 a month. Those affected by the layoffs were given a two week severance package and the opportunity to keep their insurance coverage throughout the month of June. In Pikeville, Shelby Porter, EKB News.


TLO what's poppin? We are on kickkick.com. We are not live, but you can leave a like comment subscribe turn on your post notification bells Let's continue to grow the family from Chicago to the UK. This is a Above me where you can catch any of the live highlights if there's anything good They will be here. Don't forget. We also got the patreon. This is an up-to-date list of everything. That's on there currently We upload every day one Monday through Friday. I still owe them a movie too, man I'm trying to get around to it man. I'll be trying to find the time for it, man Don't forget. We got merch as well Check it out. If you can this is the cheapest shirt on there if you can purchase if not I get it But at least go to the website and look And don't forget we got the discord as well man discord plays a big part on kick We're going back on kick next week or maybe tomorrow Might be on there tomorrow anyway a Case almost too gruesome to mention Tina Nash Disturbing This channel crazy. I couldn't even finish the last video. Let's get into it This case takes place in 2011 in the United Kingdom in a small town called Hale Hale is located in the southwest of England in a county called Cornwall Which is one of the most beautiful parts of the United Kingdom if you ever happen to be in the UK I would strongly recommend a visit Tina Nash was a 32 year old woman who lived in Tina Nash look good She look nice. Okay. Hale and was a mother of two her two children had different fathers And she had separated from both of them in 2009 Tina would meet her soon-to-be boyfriend in a nightclub A man named Shane Jenkins, but if you meet somebody in a nightclub, I'm gonna let you know right now It's not gonna work There's no way you find in loving a nightclub. I'm sorry to had actually met a few it might be good in the beginning But two years before this meeting But it's rare Tina's friends had told her to stay well away from him And even went as far as to describe Shane as a psychopath This evaluation of Shane wasn't without substance as around this time He had been arrested and imprisoned for stomping on someone's head repeatedly Causing serious brain damage. So Tina listened to her friends warning and stayed well away But at this second meeting in 2009 She claimed that Shane seemed to be more mature now and was charming to be around She assumed that he had now grown up and was a changed man The two exchanged their numbers and began talking before too long They started a relationship and according to Tina things were going well in the first couple of months She told her friends that Shane seemed to care for her and made her feel safe But this would soon change After the honeymoon period of the relationship came to an end Shane began to show his true colors He became increasingly more violent as time would go on if Shane was intoxicated Or if she did something to annoy him He would lash out and call her names and would even spit in her face The two would frequent bars Nobody can come up out of abuse once a dude or a woman hits you That's forever. They're gonna always do it and clubs together and on almost every occasion Shane would pick a fight with a stranger and beat them eventually things would escalate further Shane began to hit Tina in front of her children One time he punched her numerous times got on top of her and tried to push his thumbs into her eye I'ma let anybody know off top Right now me and my baby mama. I don't like her like that But if anybody ever put their hands on my baby mama in front of my child They might as well just you know, I'm saying relocate because I'm on your ass forever You're never gonna be able to go outside Take it how you want to us and his reason for doing this was because Tina had caught him sleeping with one of her friends And she told him to leave thankfully Tina was able to kick Shane away from her and he did not continue the attack There were numerous warning signs showing what type of person Shane was but somehow he was able to keep the relationship going Around eight months or so into their relationship Shane beat Tina so bad that she required hospital care She gave an account of what happened to the police and following the attack Shane was arrested and charged But before he was taken to court he had convinced Tina to forgive him She told the police that her statement that she had provided to them was fabricated and that her injuries were due to her Falling and hurting herself badly She told the police that she no longer wished to pursue the case further and so the charges against Shane were dropped Due to this attack social services became involved But Tina was able to keep them off her back Which put the children in danger on the evening of the 20th of April 2011 Shane and Tina spent their day together with her children and they were all getting along very well Tina thought to herself that Shane recently had been acting like he was when they had first met She was hoping that his aggressive side would be a thing of the past That night at around 10 p.m. Tina was upstairs in her bedroom trying to sleep When she overheard Shane having a conversation in the back garden with one of the neighbors Shane was telling this neighbor that he had been prescribed some sleeping pills known as valium Shane asked the neighbor if they would like to take some Shane then walked back into the house to grab their neighbor some pills Worried that this could get the social services on her back again Tina ran downstairs to tell Shane not to give the neighbor any pills this defiance against Shane angered him greatly He aggressively swore at Tina and told her to leave him alone Feeling fed up and disappointed Tina went back to her bedroom and went to sleep then My name is Shannon She tried to move but she couldn't Then Tina woke up. She tried to move but she couldn't she also tried to look around the room But she wasn't able to see Tina is quoted as saying I try to get up But I couldn't move I wriggled, but I felt like a caterpillar stuck in a cocoon There's like sleep paralysis. I wriggled but my arms were trapped by my side and something was covering my face Tina had been wrapped up in her duvet so tightly. She couldn't even wriggle free All of a sudden Tina then felt a person with two large hands begin to strangle her through the duvet And of course this person was Shane. He strangled her so hard that she lost consciousness After the two had a brief argument over the pills and Tina had gone to sleep Shane had crept into the room Gotten on top of Tina and punched her repeatedly until she lost consciousness And then tightly wrapped her in the duvet After I was about to say dang Tina's a heavy sleeper. How did he wrap her in the duvet that tightly? He knocked her out for a few moments past Tina a walk again She tried her best to scream for help, but her throat had been damaged from being choked She was still cocooned in the duvet and was unable to see yet again She tried to wriggle free but Shane realized that she had a walk in and began to choke her until she lost consciousness again Tina regained consciousness for the fourth time, but this time she could barely even breathe Shane was still in the room and he realized that she had a walk in again Tina could hear him coming towards her again and Managed to muster up the strength to sit up right and once she did she said the words. I'm sorry Shane I love you But during these words was enough to stop Shane from attacking her again He unwrapped her from the duvet allowing her to move But she still couldn't see anything Every single time Shane had attacked Tina He never said a word but after unwrapping her from the duvet Shane said your eye is hanging out of your head You're never going to see your kids ever again Stunned as to what Shane had just said Tina slowly brought her hand up to her face At this point she felt no pain, so she was confused as to what he was talking about But as her hand reached her cheek she felt her eyeball hanging from her socket She then reached over to her other eye. This one was bulging from her skull and was incredibly swollen Whilst Tina was unconscious Shane had dug his fingers into her eyes and gouged them out Shane then told Tina all of this is your fault all this over some tablets Thinking this must be some bad. I didn't know people actually did that in real life I thought that was like in a movie third thing like what Shane is on something different Dream Tina again lifted her hand to her cheek only to be reminded what was happening to her was indeed real She was now blind in both eyes Shane was telling the truth. She would never again be able to see her children Tina's children were still in the house. She begged Shane not to harm them She was also worried that they would wake up and see her in this state that she was in Shane continued to shout telling her that the fate she had suffered was entirely her fault Shane then picked Tina up and carried her into the bathroom and dumped her into a bath filled with cold water Resulting in her head being submerged the cold water against the exposed nerves in her eyes caused an unbearable amount of pain And as a result Tina began to vomit and defecate Tina begged Shane can't even control her bodily functions as she was in that much pain Imagine a root canal times a hundred to let her and her children go and that if he would She would tell the police that she was a victim of a random attack and that he had nothing to do with it Shane just continued to tell her that this was her own fault And that she would not be allowed to leave the house The pain Tina was experiencing was so intense that she continued to vomit Tina was able to get out of the bath and make her way downstairs Only to hear Shane snoring on the sofa Tina knew where a hammer was in her kitchen And was sure she would be able to feel around and find it She contemplated whether or not she should try and retrieve the hammer and attack Shane with it while he slept Realizing that this was a bad idea She decided against it Tina just sat and wiped her nose But as she did she noticed it was particularly runny And that the snot was string-like and sticky as she continued to pull She made a disturbing realization the sticky and string-like substance was not her mucus Tina had been pulling on her optic nerves And was now holding them in her hands Hours passed by until Shane walked from his slumber at approximately 7 a.m By this point Tina had been held captive for over eight hours in an immense amount of pain and fear Shane got up walked over to Tina and knelt down beside her He began to stroke the now dried up eyeball that was hanging down her face And told her again that this was all her fault After hours of begging Shane eventually allowed Tina to make a call to a man named Paul Paul was one of Tina's ex-partners and was also the father to one of her children Upon hearing Tina's voice on the phone Paul knew something was horribly wrong And so he sped over to Tina's house as quickly as he could and walked upstairs to where Tina and the children were Shane tried to explain to Paul that two women had attacked her as she was walking home Paul went into the children's bedroom first to check they were both okay And then not knowing the severity of the situation brought them into Tina's bedroom Where she was laying naked covered in her own vomit with both of her eyes gouged and hanging out Tina heard Paul and her children entering the room She turned her head and desperately tried to hide her face from her kids who are now in the room with her But as she did Tina felt one of her eyes fall onto the bed Paul quickly called the ambulance paramedics arrived on the scene and administered some much needed pain relief After 12 grueling hours Tina was finally safe at the hospital Tina's worst Fears were confirmed They told her that there was nothing that they could do to save her vision She also explained that shin was the one responsible The police tried to locate shin who was now on the run An investigation was soon underway to discover what exactly happened Shin had tried to hide some of the evidence that would prove that he was the one who did this to Tina The police found sheets drenched with blood from Tina's eyes at the bottom of the garden The police also discovered that the wooden panels under the bed in which Tina was sleeping were broken Shin had used so much force pushing his thumbs into Tina's eyes that he had actually broken the panels So this is what happened Whilst Tina had been asleep Shin had gotten on top of her and punched her repeatedly until she lost consciousness He then dug his fingers into her eyes as hard as he could before wrapping her in the duvet Tina then woke up confused and was choked several times causing her to drift in and out of consciousness As well as suffering the horrific injuries to her eyes Tina had also suffered a broken jaw and nose A couple of days later shin's location was discovered and he was apprehended by the police Tina Covered in hospital and was assigned a carer to help her with the raising of her children The trial would begin on the 10th of May 2012 Shin's defense team put forward the case that Shin was suffering from mental health issues And that on this night Tina was the one who had been violent The lawyer stated that Shin had no intention of harming Tina Having the audacity to make the claim that the two had engaged in a struggle And that Shin had accidentally fallen on Tina causing her eyes to be gouged out Thankfully the court could see through this rather odd story And Shin was sentenced to life in prison with a minimum term of six years shortly