Good morning. How are you doing? Sorry about that. We're having some dildo issues. It's a common problem doing talks like this. Thanks coming on. I think the first thing I want to say is this talk is definitely not suitable for children, so if there are any juniors in the room, now would be a really good time to go.  Now, there's definitely also a health warning on this talk, so please, if you'd like to be offended, cover your eyes, cover your ears, leave. With that in mind, let's go and learn some stuff. This talk comes in two parts. There's a part that starts which is most definitely suitable for work and then there's part two which really isn't. So anyway, let's move on. I want to start with looking at the security of digital video recorders for your CCTV. The reason for this will become clear as we progress.  All these techniques will become really useful as we progress into slightly less savoury devices. It's probably the way to go. Now, we started off looking at digital video recorders some 18 months ago. We started looking initially at an MV Power DVR which records the footage from your CCTV system you put up at home. This is an amazing device. It port forwards using UPNP by default so it opens up port 80 inbound from the public internet. No tell net though, but bear in mind this is before we started hearing of Mirai. This is pretty creepy actually. You can start looking for them quite easily, find them on showdown. At the time we found 44,000 of them pretty straightforward. And it was pretty bad. Andrew, tell me a little bit more about that web interface. So the web interface had authentication on it, but it was really broken. All it did is it set two cookies, password and username, but it didn't care what the values were in there. Any value. So the username could be not my username and not my password and you're into it. So at that point you can view the footage through the web without the username and password. This is already quite bad, but it got even worse. Once we got access to the firmware on it we found there was this particular command shell and then you should put command after it and you're running commands as root on the DVR through the web, 44,000 of them. Yeah, that's really quite bad. We've got no idea why that would be in there. But then it kind of got worse, not from a kind of owning the box kind of way, but a privacy aspect. Within the firmware we found that the device every three seconds was taking a still of channel one of the camera and emailing it to this email address. So the guy got in contact with us and he said, oh, this is pre-production. It was never meant to be released. So we sent him frame by frame, Rick rolled in with a kids TV series, about 44,000 frames I think it was. It was good fun. He wasn't really into disclosure until we Rick rolled in, but there we go, now we're in a good place. Now that got us into DVRs and then 12 months ago we started to see Mirai and we saw the big effect at Brian Krebs' website was DDoS. People started looking at it. The source code was released and there was some amazing work done by Brian Krebs and lots of other security researchers looking at the source code, found some really, really cool stuff. However, once the source code was taken apart there were 63 sets of default root telnet credentials discovered and an effort was made to try and attribute those and pick up the particular devices in question. Now I think what people did is they compared the default credentials they found with lists of known default credential sets and tried to match them up and a lot of devices were misattributed. Now we went through the list and we went through with our knowledge of DVRs and started looking at all these and discovered actually Mirai, the original Mirai was just about DVRs and IP cameras. Now the IP cameras it affected happened to have DVR functionality. So they were running a DVR helper process and that's what was causing the problems. So the initial disclosures you saw about Mirai affecting VoIP phones, routers, printers, it was wrong. It was all about DVRs and that's where we started getting interested. So we wanted to see what more we could do. So Mirai, beautifully, beautifully simple just using root telnet credentials. We wanted to know a bit more. See what Mirai had missed along the way. It was simple, it was brilliant, but what else could we find there? So we bought over 30 different DVRs, lots and lots of them and started reverse engineering them, pulling the hardware apart, looking at the firmware, seeing what bugs Mirai had missed. We found loads and loads of vulnerabilities. We found lots of DVRs that no one knew could be part of Mirai. We found additional telnet credentials that you could add to the list of 63 known credentials. We discovered one vendor, they'd done brilliant things. They'd taken the telnet port and moved it to port one, two, three, two, three, get in. And then we also found a way to make Mirai persist to blow up beyond the power of reboot. But the problem is, whilst you could use it to fix Mirai and heal Mirai from infected DVRs remotely, by publishing a route to persistence, we felt that would probably result in worse problems. So we're not going to disclose that, I'm afraid. What we are going to also talk about is how you can use a shell on telnet, there's a shell on other ports. We're going to show you directory traversal and we're going to finish up with remote command ejection as well. So there's all sorts of really crazy vulnerabilities in these DVRs. The first one we found, this made me laugh, is XM, that's Zhong Mai. The XM remote control applications called XMI. And you can log into it using a daily changing SU password that's supposed to be kept private, but a Nigerian CCDV installer put it on his LinkedIn profile. That was kind of a bad day. So you just need to know that and you've got route on the DVR. Other crazy things.  We found a load of other vulnerabilities too and also a rather interesting shell. Andrea, I think it's time for you to have a go now. Yeah, so I'll show you how we actually reverse these DVRs. What I'm going to do is I'm going to switch you to this camera that's looking at one of the DVRs we've got here. So there's a common factor in nearly all of these Mirai vulnerable DVRs and that's they run a chip made by a company called High Silicone. So that's the main processor set here. The board, if you flip it over, it's got an SPI flash chip on the other side so you can see this chip here. That's where it stores the firmware. It's also got a serial console on it, which you can see these three wires connected to there. It's kind of a very typical piece of embedded hardware. Now to get the firmware off it, there was a number of different ways and it depends on how well protected the devices were. Some of them it was as simple as connecting to the serial port. Unfortunately this one isn't. So what we had to do is we had to use a technique to break out of U-boot and dump the memory that way. I'll just show you how it works. It's pretty easy to do. So if we jump through to a console, what you can see on the screen here is I've booted the device and this serial console showing me what it's spitting out. And you can see at the bottom there it says uncompressing Linux and you don't get a console into Linux. So we can't do anything at that point. There's no way of me interacting with the device. But we can actually break out of this, get into U-boot which is the boot loader and then dump the memory really, really quickly and easily. And the technique we're going to use to do that, thanks for moving the dildo, the technique we're going to use for that's called glitching. And all we do when we're glitching is we just short one of the data pins from the memory to ground. And the reason that we do that is it stops the memory chip being read. And if you stop the memory chip being read at exactly the right moment in time, U-boot will stop because it can't load the kernel and you get access to the console. Now the timing of this is a touch sensitive. So it may not work, but let's see what happens. So I've power cycled it and you're starting to get output and I'm going to short the pin now. And you can see instead of getting that uncompressing Linux, it now says high silicon and hash. We can type question mark to get the help come up and we get this big long list of commands. Now if we want to dump the memory off the device for U-boot, this is painfully slow but it nearly always works. MD is memory display. So we do MD zero, that's the base address in 100. I hit go and we're dumping the memory as ASCII to the screen. So all we need to do now is capture that into a file and there's a little Python script that takes that file because you've got all that fluff that we don't need and then it puts it into a binary file. It takes about nine hours for a 16 meg chip because you've got a slow connection all this but it gives us access to the firmware. Once we've got access to the firmware, we can unpack it, we can see what the hash password is and we can crack that and get access to the device. So we started looking at this in more detail. So what I'm going to do is I'm just going to reboot it again. And this does take a second. So we're just going to get it back up and running. And we found quite quickly it was running Telnet, it was running a web interface, it was running RTSP for the video and a few other bits and bobs. We've got the Telnet password. It was literally sat there in the mirror I creds. So it's root XC3511. Just give this a minute to boot when it beeps, it will be done. I should make polite conversation now, shouldn't I? So it does take a second to come back up again. Once it beeps, there we go. So now I can log in as root XC3511 and we've got a root shell on this device. So it's just Telnet straight into it. They don't document it. I mean, people don't Telnet into their DVRs. You can't modify the file system. There's nothing useful you can do but it lets us examine how it works. So what we found was a lot of vendors when they found out about Mirai was they shut Telnet off. That sounds like a good idea, doesn't it? Telnet should just go. So they'd stop running Telnet. But the device has also got another port open on it which is 9527. So 9527 and we've got this quite curious console here. Now it's asking for a username and a password and it's not the root XC3511 that we saw before. It's the username and password that the user sets for the web interface which is going to be admin and blank by default. So on nearly all of these devices admin and blank and we've now got this kind of test console on the device. Again, we type shell and then we've got access to run commands as we want. So we just cat it ETC password. So again, even if they shut Telnet, we've got this other root into the device and you can't close this port off on this device. It doesn't have IP tables so you can't firewall it and this is part of the big binary that runs on it. So the question is how would we get that password if someone had changed it? Well, it gets even better because this thing has got unauthenticated directory traversal allowing us to access all of the files on the device. So I'm just going to jump through to here. So it stores your hashed password for the web interface and of course, just with a simple get request with a couple of dot dots there. Give that a second. It runs a little bit slowly and there at the bottom there, you've got the admin password hashed and dumped. So this is absolutely and completely broken. There's just so much wrong with it. But still even deeper it gets worse. So via the web interface, how many are exposed to these? Hundreds of thousands. Yeah, I think we clocked about 720,000 on showdown. It has unauthenticated buffer overflow via the web interface. So at the moment we can ping it, we can do what we want, but we simply make a request with a long string and initially we thought this was just going to be, this was just going to be a denial of service, but it turns out that you can use it for remote code execution as well. So we're just going to tell that into the device just so we can monitor what's going on. So I run PS and you can see there's two processes there. DVR Helper and Sophia. This is a huge binary. It does that port 9527. It does the web interface. It processes the video. It does face detection. All in one binary, one monolithic mass. So by just sending this get request like that, we come back here, run PS again and you can see that Sophia's vanished. So now your CCTV DVR has stopped recording. So just by exposing it to the web it's died. We've also got control of the program counter. Of course they're not turned on ASLR or anything like that, so it's not particularly hard to exploit that. There are a couple of quirks. But yeah, all in all, these devices are absolutely ruined. They are terrible. So we've got remote code execution on nearly three quarters of a million DVRs on the public internet. If you thought Mirai was bad in the first place, this is just terrible. It also made me chuckle. You can also restart the Telnet demon through the console 9527. So even vendors that have fixed the firmware and disable Telnet, you can re-enable it and start Mirai all over again. This is just nuts. So all of the chips are made by a company called High Silicon and it's really difficult to write all of the code that processes video does face detection and so on. So there's a company that we mentioned earlier called Zhong Mai and what they do is they produce these binaries but people want to put their own logos on to it and things like that. So what they do is they have this tool called Makepack and we found this wiki completely open to the internet and it allows you to do these things like change the logo, change passwords and so on. So this kind of pulled everything together and told us why we found 30, 40 different DVRs that had exactly the same vulnerability on it. So what we're using, on every single one of these we've looked at so far, they've had this same message. So if you go to the IP of it and you type in er.htm, all of them have this message. The machine is suspected to be using a prior to the program of Zhong Mai. So we don't know, has anyone actually bought this software or are these big names actually pirating the software? We've just got no idea. Just to point out there, so we saw when Andrew made the request, he was looking at the ASCII representation of Hex of capital A is 41. And there we go, GDB, scrape memory and there we see everything's overflowing. Fantastic. Control the program counter and we've got code execution. Get in. We've got absolutely no idea what this thing is. This is another one of their apps called Look at the Mail and we really don't know what it's for. We have no idea. Anyway, moving on a bit. What we took from this is that Mirai was beautifully simple. It was amazing that such a simple root telnet credential issue could take down very large websites. But what got us was the fact that because it was so simple a lot of other really important vulnerabilities were missed. So what we tried to do is try and fill those holes. Now Zhong Mai fixed initial problem, but they didn't fix it properly. So it's very easy just to recreate Mirai over again. There's a huge botnet that's got potential to be exploited out there right now. It's not good. It's really quite nasty. All right, we're going to move on now. If anyone isn't comfortable with what we're about to talk about, we are going to be talking about adult toys. So if you're not comfortable with that, please don't. Please just leave the room. Anyway, we're going to move on. This is going to explain to you why my Amazon recommendations are absolutely screwed. If you buy adult toys on Amazon, you get some really weird recommendations. Some other things that we learned as well. Yeah, we're going to show you how you can do stuff that we showed you on DVRs to get a shell on a dildo. Anyway, now what I will say as security researchers, this is the first time we've really done any work on adult toys. And there are a couple of really important things that we learned along the way. The first problem is that if you publish security research on your website, you get a lot of hits. We got 77,000 hits on our blog in an hour, and we accidentally dosed our own website with a computer. One of the other issues as well is that when you're blogging about stories that involve this, the way that Twitter will pick up the first image from a link that you embed, so if you post a blog, I think actually it was Motherboard Vice published this. And Twitter picked up the wrong image from their blog, so Motherboard Vice tweeted a picture of a woman's cervix, which was kind of bad. You need to be really careful when you're blogging. This is the whole area of what's known as tele-deal donics, which was coined about 40 years ago. The idea of augmented reality using smart toys to improve experiences. It's a scary place. And I'll start at the very beginning with a story we published a couple of years ago. This is the Love Ents Nora. The idea is you have a smart app. It connects the app over Bluetooth and then whoever you want to connect to has one of these and maybe the other ones. And then you can have a remote control video session and people can control your toy and vice versa. I didn't realize you can actually have group sessions as well. So wow, okay.  We started having a bit of a poke around, having a play, see what we could find with it. The first thing we discovered that it can render stills from your video feed and when it goes through the process of rendering from a bitmap to a JPEG, it creates a temporary image and writes that's a really, really bad place to put temporary image files. Yeah, that's not so good. The other issue we found this isn't really so much of a problem. We found a lot of pairing issues with all of these smart sex toys we looked at. It has a default Bluetooth pin of four zeros. The good news is though, it's only in a parable state for about a minute after you power on. So yes, you could in theory take remote control of someone's sex toy over Bluetooth, but it's probably a little impractical to do so. I also want to tell you about a story. A new guy started with us three weeks ago now. And one of my colleagues was working on one of the smart sex toys. He was working on close up, taking the hardware off, getting the firmware out of it.  At which point, everything goes very, very quiet. Everyone turns and looks at him and says, Alex, is this something you want to share with us? Oh no, no, I've got it for research. Really? Okay. He actually shared it with us as well. This is it. This is not one we bought. We've got his butt plug anyway. So most of the toys that we look at had pairing issues with Bluetooth. Now if we think about the risk profile, I don't think it's particularly significant because they're generally local RF attacks. So you've got to be physically within RF range of somebody. So I don't think these are particularly significant, but it's still worth pointing out. You can actually take over and hijack someone's butt plug because the pairing process is a bit screwed. It just pairs without a pin. So if anyone's within Bluetooth range, you can hijack their butt plug. It's also worth noting, we found another bug as well. Within the FAQ the vendors often state that we encrypt everything, it's supposed to be secured, it's great, and that gives you lots of confidence. Unfortunately, that bug was in plain text, which wasn't so good. So it was being stored and processed in a way that really wasn't very good. Now we disclosed this to Levent's and we did it privately and they came back and said some stuff. But what's really weird is they've got a new version of the app, which is called BodyChat, which does SSL, it's really secure, it's really good. It's only some old users of the app that have this problem, the old wearables app. I don't understand why they don't just pull the old weird. Very, very odd discussion. We've still got some stuff to work on, the next thing we want to do is pull the firmer off the butt plug. Unfortunately Alex says he wants it back. Okay, fair enough. He doesn't know where that's been in the last couple of days. Anyway. It's also worthwhile noting as well, if you want to do some research on anything that's smart, go and use the FCC website because you can pull internal photographs and get the chipsets from them, it's really good. So on that one we found the TX and RX was really straightforward to use. It saves you a lot of time when you're reverse engineering because you don't have to buy the product first. You can go and use the FCC website and it's all on there for you. So this afternoon we might have a bit of a go at this and see what we can do, see if we can pull the firmware off it. Another piece of research. This wasn't us. This is a guy called Alberto Segura. He published it three weeks ago. We had no idea it was going out there. It was published a day before we did a talk about this. There is also a new version of this, the cam girl version, which is interesting. He looked at the Chrome plugin that the user is supposed to use and discovered a bunch of security flaws. It was also really dodgy the way that you actually installed it. So this is absolutely brilliant. On the Lovent's website, what they actually recommend is you download their own build of Chromium with the plugin built into it. It's unsigned and you need to turn off your antivirus to install it.  And yet you don't want to use it. Now what Alberto found is that there is XSS all over the place and also you've got the ability to take remote control using the API of someone's sex toy. And you can also carry out denial of service attacks so you can knock the cam girl offline. But you have to know their email address, which is going to be pretty tough to find, right? Except their API has got a call that allows you to enumerate their email address and enumerate whether they're a cam girl or not. Wow. How useful is that? You can also take control of the device through the API again. All you have to know is the email address of the user, I believe. Some research that was published last year. You might remember WeVib that did a main stage talk in DEF CON. There was a search called Follower and another one called Got Milk did a really cool reverse on WeVib and found all sorts of issues to do with the way that the We've Died by device was collecting excessive information. And what was really interesting is over the last couple of months, I believe the settlement was for 3.7 million Canadian, which was used to compensate users. They've just been taking too much data. But what freaked me out, if you can pop the slides up. We had a look. So this is an organization, a business that's just been taking to task over excessive data collection. And we had a quick look at the permissions on the Android app and even today it's still collecting network based location. Wow. What do you have to do to convince people? They've just settled out of court. Yet they're still collecting location data. Why? That's crazy. Another device we found, this is the Lilo, which is over here. A stimulator and again, complete lack of pairing security, which isn't so good. We're going to be having a go at the controller later today. It uses JTAG spy by wire. Nice needs to use. You can get the screenshots from FCC. You'll see there's the link, so we've got a good chance of getting the firmware off there. This is a bit odd. This is a Kiru Onyx. This is a flashlight. We've borrowed from my bag. I'm sure you'll know what these things does. And actually not too bad. We didn't find too much wrong with it, although we did discover that the pairing link, so if you share this link with somebody else, this is how you can set up a session. The link never expires like that. Yeah, we won't go into that. What are the issues here? We've got a pairing pin problem. Again, it's really low risk. Actually, I'm more worried about that link. It doesn't expire. That's not good. What I want to point out with all this is that there is not much in the term, not much in terms of interactivity with the toy. This is good. Because if there aren't many sensors, there isn't much data gathering going on. Because it means that compromise of these devices isn't that significant. It's not involving anything more than is it buzzing, is it not, how is it buzzing? So that's not so serious. But as I'm sure you've seen from recent media coverage, smart sex dolls are on their way. This is one from a company called Real Doll. Again, we've got jaws, ears, eyes, all collecting much more data. Now, I have to say, it does a great job of it when we start to see sex dolls. Will they become satient? Will they actually realize what's about to come? If you saw this, the security robot that committed suicide, I think the sex dolls are probably going to do something very similar where they realize what's coming, don't you think? So I want to move on to now, which is a story we published about three, four months ago, which was the first sex toy we found with interesting feedback, operator, camera, endoscope with stuff in the end. And it's really quite scary. We did a bunch of research on this and found a stack of quite worrying security holes. The first one is that it works over wifi, so all the rest of the toys generally have a bluetooth, this one is wifi. And unlike most IoT devices, which only act as an access point until you've configured it, this stays as an access point. And of course that means there's some interesting things that you can do as an access point. It shows up on wiggle, so you can actually geolocate these devices. Now in fairness, we only found two and one of them, I think was in a sex shop in the Akihabara district of Tokyo. But yes, you can geolocate sex toys, which is just a bit freaky. Yeah, that makes me feel very uncomfortable. We also then started looking at the Android app and this is where things got really weird. Can you flick up the APK for us, please? So we pulled the APK apart and had a bit of a look and discovered that it had a lot of classes that dealt with a sky viper drone. And we realized after a while that actually what had been happening is it looks like the dildo manufacturer had simply used the code from a camera drone to control their dildo. And there are classes in there that deal with propeller speed. What? It's just crazy. It's got a static pre-shared key so you can geolocate these. The key you can't be changed as far as I know. The key is 8-8, which is just brilliant. I actually had a chat with the guys at Sky Viper who were quite surprised that code that they used in their drone was being reused in a dildo. I don't think they owned the IP on the code, which is why that happened, although they're later drones, it's their own IP and they have control over it. So you also found within the APK hard-coded IP address, hard-coded port 192.168.11. Port 80. Andrew would you like to see if you can open it up? Unfortunately it's rebooted. The worst thing about, well maybe not the worst thing about this, it reboots all the time. So we're just waiting for the AP to come on back up on it and then we'll show you how you kind of get onto it. So yeah, it's got default credentials of admin and blank to log into the web interface. So once you're on the Wi-Fi with all the data as you would normally and then you can start looking through the camera. It kind of gets more interesting though because we don't just want to control it as a normal device, we want to take it further and actually root the dildo. This is something I hadn't said until about six months ago, which is quite cool. Yeah, it's also worth noting because it works over Wi-Fi. Unlike the Bluetooth devices, which is a one-to-one pairing process, so if someone else is paired with it then, you know, there's one to many, so it's a Wi-Fi access point. So you can have multiple people join the access point concurrently. So even if the legitimate user is using it, someone else can jump onto it unauthenticated and take control. Has it come up yet? Yeah, it's come up. Oh, good. Great. Sorry, I don't know why I get so excited by doing this. Right, so if we bring it up like this, it might take a second with the web interface to start up. It's still waiting a little bit. Come on. Okay, we're connected to it. Hopefully the web will come up. Come on. Never do live demos. Yeah, this is probably the least reliable live demo that we do. It's really, really fragile. Okay, let's move on. We'll come back to that. Oh, wait. Hang on, hang on. There we go. It's working. It's up. It's also very slow. It's very slow, yeah. So we're actually bringing up the IP camera interface. It is starting to that. We'll move on to the next slide and we'll keep on talking for a bit. There we go. So we can go to image stream mode. And we're now looking through the camera on the front of it. Which is great. Say hello. But yeah, there's loads and loads of functionality in here that we just wouldn't expect to see. So you go through here and you've got things like alarm settings. So it can actually be motion activated and then if it were connected to the internet it would allow you to send stills, which is just crazy. So as I said, we wanted to take that to a root shell. So what we always do with embedded devices is start looking for command injection. But unfortunately, we didn't have any way of getting output from this device. So what we thought we'd do is we'd rip it apart and start looking at it and getting the firmware off it. So we're going back to what we did with the DVR. But this time we're doing it with a dildo. I'm going to bring up the camera again so you can see. Now I think it'd be fair to say that my colleague Dave never let him take your dildo apart. Because he's not very good at it. But taking it apart, what we see is we've got a very similar thing to a DVR. You've got a Wi-Fi sock here on a little module. On the other side of the board we have that little chip there again that you can see. It's an SPI flash chip that we can read. So we pulled the firmware off it by clipping onto it and then we can inspect how the device operates. We also got on the side here a serial console. So again we can connect to it and see what happens. And what we found with a lot of playing about was within the record settings here when you have recording enabled and you're saving it to an SMB share as I often want to do with my dildo you could put command injection here so you could just run commands on it. So at that point we were able to arbitrary add users and do things like that and of course enable tellnet on a dildo. Do you want to do it live? Yeah so what we've done is we've kind of weaponised this. Well weaponised is that maybe? That's not a great word isn't it? Let's go a bit softer on that. I need to stop talking. So what we've done is we've scripted this and it's a simple python script and what it does is it adds a new user we restart tellnet then we log into it and we can view the video. So let's give this a go and see if it works. So it's trying to turn on tellnet it does take a little while to do this so what should we do while it's doing that? I think it took about two minutes last time didn't it? Did it take two minutes? The other thing that's really freaky is the functionality you find because they've essentially taken a consumer grade router they've got loads of additional functionality in there so it's got the function for example to do Skype which I was a bit shocked about and also deep in the the web code we've found an IP address that it looks to be reporting back to we can't prove it we can't see it's actually working but there are unusual characteristics in there which suggest there you go. Once it's popped the shell it starts up this page that dumps loads of other information so we've got a video stream and if we jump back on to where I was running the Python there we've now got a root shell on the Dildo which is absolutely brilliant I mean can it get any better than that? Oh careers where are they going to go? Yeah down the toilet I think So there you go you can actually go for some of the code here and if you look through you'll see references really? There are references to Skype in here we've found references to email addresses we've found references to calls to unusual IP addresses in the Far East this is all just a bit odd yeah I found a way to go for it Sorry Should just be there on it? Yeah it's just, oh no it's not So the point we're trying to make there is there's lots of really useful skills you can learn to do with hardware reverse engineering that's what you use them for can sometimes be quite odd we happen to choose an adult toy because it was interesting and different we found code injection on it we found you could re-enable telnet on it just like we did with the mirror worm and also finally once we've been to the firm where we found the root password which is recan4debug which we did try to crack but it weren't going to get through that in time were we? No You want to route? You can run our python script if you wish it's all there, it's all blogged as well it's on the website too, there's a full write up if you want to know how to do this disclosure was a train wreck as it is with most adult toy vendors we got no response from these guys we did try reasonably hard, I think we probably could have tried harder but we reached out to them on the email address that they published for contact and we got no response at all I just want to leave you with a thought that why on earth would you put a camera in a dildo, surely that's asking for trouble it's just bizarre I want to move on to the serious bit now because I think we could be accused of being a bit pure with some of these toys but actually there is a very serious message behind all of this pornography is a very big business and if you don't believe me go and see Emma Follmer's porn hub has toys are out there, people don't talk about it but there are a lot of toys out there this is a big area of business a lot of these toys sell in big numbers and I think we laugh about it we're a bit surprised that these vulnerabilities exist we're a bit surprised that we're seeing vulnerabilities that we've seen resolved on mainstream devices 10 plus years ago we're just a bit surprised and we feel a little uncomfortable so we laugh but I'm going to quote someone who says please stop laughing and actually I think he's right and that quote comes from Renderman who runs the internet at Dong's website and he does a lot of really really good stuff we can all as security researchers help improve things in this market I think we find disclosures often ignored but you'll find that Renderman can help you reach out to vendors and help you to get in touch with them help them to respond now just think about it for a minute people have had very personal data stolen very personal photographs stolen in other ways maybe through Snapchat for example and other things that has driven people to commit terrible acts such as suicide they've felt they've been extorted they've been held to ransom over data which is really scary I think there should be an offence of online rape I don't think the legal statutes in many territories actually consider this to be rape but I think it is and I think our lawmakers need to step up and I think they need to raise the bar so that people do steal these images they can be prosecuted it's very difficult to do there are some really good people out there driving hard into this territory trying to get the law to catch up but it's scary and it's nasty and it's horrible and people have died through similar instances the conclusion for me was that IoT adult toys have got a long way to go in terms of security we're seeing the basics are missing it's not just missing pinning it's missing SSL it's enumeration it's weak APIs it's everything but I think what we can all do to help improve the security of adult sex toys is frankly go screw up your Amazon recommendations just like I did go and get a toy have a play with them security flaws are disclose them and help the industry up their game so we see everyone have more confidence in their adult toys that's Andrew's twitter handle that's me that's the company blog we blog about stuff like this hardware hacking every day of the week go follow you'll find it really interesting thanks very much I hope you weren't too put off by it


Hey, what's up coaches.  It's gonna pop up right here Text me there if you live internationally send me an email at this email address right here and I can set up a zoom call with you All right, and here's why I want to talk with you though It's because a lot of coaches that struggle with marketing and sales once they figure it out They can start getting way more clients. All right, so once this is a skill that you acquire It makes your business infinitely more easy to run right now if you're struggling with marketing and sales Watch this video because I think this is going to help you and if you want more help like I said text me All right, so here's the thing that we have to do number one You have to really believe in what you're selling and this is the thing that I know a lot of coaches struggle with They don't really know what they're selling. They think they're selling lessons or private training get on to a call with a parent They get nervous they shut down. They don't know what to say They feel like they have to talk too much about themselves or they think they have to be really qualified or overly qualified To coach and make money with sports and that is very false All right, when you know what you're offering then you can be calm When you speak you can slow down. You are not in a rush You know what questions to ask and you know the type of client that you want to train Right when you don't know what you're offering then you're willing to train anybody And if you're willing to train anybody then you're not going to be known in your town to be Expert the the specialists that's in your area You're just going to be the guy who's a jack of all trades and it is impossible and I'm serious when I say this It is impossible to scale a business if you're the jack of all trades. You have to specialize All right, you've got to specialize So first got to know what you're offering. All right, you got to be confident in that and that might be you Reorganizing and restructuring your business to now be more specific with who you want to train All right, the second thing is you can't be afraid to talk about money All right, if you're afraid to talk about money with clients, then they're not going to pay you All right, so you can't be afraid to Say this is what the investment is. This is what the commitment is All right when when those words come out of your mouth you have to have conviction you have to Get the other person the other in the line to believe in what you're saying So they're not like man, that's too much or oh like he sounds really nervous about talking About money, so why should we pay him? All right when you're confident speaking about the investment and Confidence speaking about the commitment of your program. It is so much easier to sell and here's how I know this It's because when I started my business, I was the complete about complete opposite I had no idea what I was doing over the calls with parents and I would get super nervous I would stutter I had no idea what I was selling and I hated sales I just for some reason I don't know what it was. I hated sales and I got very nervous talking to parents on the phone Once I started to learn and once I started to change what I was offering and started to figure out Well, man, this is what I'm actually selling. I thought I was selling this but no I'm actually selling this once I figured that out and I started to become Comfortable talking about money with parents sales became easier. All right And I would say I saw a huge change in like a six to twelve month period of time where I was like All right, this is so much easier now So I wanted to get on more calls and that's the thing is when you get better at sales and get better at marketing you want to take on more calls because you have more belief in what you're doing and The thing is is if I told you right now. Hey, like here's how you get 20 more calls over the next Seven days if you're not confident talking to people. You're not gonna want to get on those calls All right, but if you're really confident and you know what you're saying then when you get on these calls You're like, yeah, I want to take 20 calls tomorrow. All right You'll have that hunger to grow and scale your business when all right? You get really confident over the phone now if this is an area that you're struggling with will shoot me a text If you live internationally send me an email here and that's it for today's video I hope this helps you start to get confidence with your sales And the only way your sales calls the only way you can do that is by getting more reps and by learning. All right, that's it. Catch you later


Prior to this PhD I was working with various non-governmental organizations in Kenya and I was working in underprivileged communities in the slums of Nairobi and in northeast in Kenya. So throughout this whole experience what I noticed was these underprivileged communities did not have access to quality education and in some areas they you know they it was even worse because they did not have access to quality education and the teachers had moved out because of insecurity. So I started thinking about what other alternative options are out there that could help complement their schooling experiences. My research is about an independent educational technology initiative that has been set up by a UK based organization in Uganda and I am looking at the impact it has had on local communities where it's been set up in underprivileged communities. In 2016 I went and did my research in India with Professor Sugata Mitra on the self-organized learning environment and the findings that I got from that were really inspiring because young people were using this initiative. It's very similar to to what I'm researching right now but he calls them the school in the cloud so he he got a grant from Ted and he set up this you know open spaces computers that are placed in you know glass buildings in different places and the findings were really inspiring and how young people were using it and this is how I got interested in it. What I hope to achieve is to make a contribution towards education in East Africa and my findings I'm hoping will be able to help various organizations that are setting up initiatives within the same context and similar context to you know consider the various contextual factors before setting up such initiatives.


This study examined the effectiveness of hydroxyapatite as a treatment for dental hypersensitivity by evaluating its ability to block dental tubules and reduce dentin permeability. In vitro experiments demonstrated that hydroxyapatite can effectively occlude dental tubules and reduce dentin permeability, resulting in reduced sensitivity. These findings suggest that hydroxyapatite may be a viable option for treating dental hypersensitivity. This article was authored by Hashmed Kool, Muhammad Asad Gaffer, Muhammad Kaleem, and others.


Hey folks, welcome to another fantastic unboxing today. We are unboxing the assault on Exum This is the brand new firefight two-player starter set. It's a fantastic way to get into firefight You and a friend can pick it up and you've got two armies ready around to go and all of the rules So without further ado, let's crack it open First of all, give you a brief overview there of the back of the box See just how many miniatures you get and the rulebook and all the dice and thing that you need to get started Straight away, you can see that we've started employing Tetris champions to pack our boxes You cannot physically get any more miniatures in this box. That's how good value these starter sets are Just move that to one side and let's get straight into massive great big bags of beautiful plastic vehicles. This is the first time we've put vehicles into a two-player starter set like this and That's why it's so cramped, so heavy and such great value So you get a tunneller for the vehement and you get a stern hammer for the forge farbers Pop some of those up on screen for those that are not familiar with these Fantastic kits really really nice to build. It's a couple of building videos on our YouTube You just search for how to build you know to find Instructions for both these vehicles really easy to put together And then So much hard plastic Get all this out And take a look so you've got 25 vehement Here they can be built as crawlers or stalkers Open one of these for you to have a proper look. We are slowly now starting to put images of the frames Up on our website with the listing descriptions starting with Kings of war.  I'll pop those up on screen for you Why is these bits will go everywhere? And two tunnel runners. These are fantastic looking vehicles really fun design Great in game as well for getting getting some firepower up the table Of course, you get your dice as well Firefight played with D8 much like dead. So Gives you that little bit more variation in in the dice roll having those extra two to dice from a straightforward D6 And I really like games that use D8. I think it's a fantastic Fantastic move in terms of games mechanics and your command dice as well and then Paperwise we get a fantastic getting started guide. We started doing these in our two-player sets now. So this has How to assemble your first models is all the instructions for the models here the rules for what is specifically in this set Little quick reference guide and Getting started campaign. So you're able to set up a game and get to get playing really quickly and easily And also get a Couple of counter sheets, all your counters and tokens that you might need for the game then lastly You get this great big Fantastic all-in-one rulebook. So this has All the rules that you need to get started and it also has all your force list as well Have a quick flick through you'll see lots of nice law and background there at the back and then and then into the Rules for all the factions So everything all in one book Lots and lots of different options for lots of different factions and then if we flick through towards the front you've then got missions and scenarios Keywords and then of course the main rules and How to play the game all nicely laid out in easy to easy to manage and all in one book So there we go guys that is the assault on Exum firefight two-player starter set We have two two two-player starter sets now for firefight we have this one on the Battle of Kabat and that means you've got options now for However, you want to get started with with different factions your vehement and forge fathers in this one And you've got marauders and enforcers in the other set So lots of different options never been a better time to get started in firefight Don't forget to keep an eye out for some fantastic unboxing videos and Videos in general coming up on our YouTube channel in the future But from me this might well be one of my last videos. I am leaving Mantik so sad time Going on to passengers new but I've had a wonderful time creating these videos and engaging with you guys in the community And just want to thank you guys and thank Mantik for a fantastic time And but yeah, keep an eye out for some more great videos and we'll keep pushing these out there in the future and Start playing firefight


So this is The corn belt you can see this is corn production across counties in the United States and you can see that there's an awful lot of corn grown in North Central Sare and There is My clicker working Yeah, there we go. Okay, so has the corn belt lost a third of its topsoil This is not the question is not whether it has lost a depth of one-third of the depth of the topsoil whether it has lost all of the topsoil over a third of the land and a couple of researchers from Massachusetts Took a lot of satellite data and a little bit of on-the-ground data and they decided that every place that has a slope like this sort of a hill has Lost a fair amount of its topsoil and every places a trough is lost generally less But some of those troughs have lost a lot because they wrote water is flowing through those troughs And so in the picture on the left here the red areas Like the red thing are the tops of little hills and the blue areas are the bottoms of little hills and the spaces Outlined in black. They think have lost all of their topsoil And So if you're if the slope if you see this arrow that dropped over here Yellow arrow is showing that if the slope on your soil is two and a half degrees You've lost like 50% of that soil has lost all of its topsoil There's not a lot of slope involved here to get to that point so if you're on these really level places you're farming in topsoil and but if you're in those high High slope places like three or four degrees of slope. You're probably farming in clay Probably not optimal so You know if you repair that slowly you're kind of risking everything as you're not gonna is not gonna be easy to keep up with the degradation the way we Are farming and so the dirt erosion of civilizations famous book if you haven't read it We'd probably enjoy it and then dirt, but you know, even though you have dirt you can move on to soil So gay brown has shown us that you can Move from dirt to soil.  He I had four catastrophic years trying to farm property in North Dakota He had two years of hail which destroyed everything in his that he had planted after it had sprouted And then he had a year of drought and then he had another year of hail And at that point he couldn't get loans from the farmer from the bank anymore And so he would like turn the cattle loose in the fields to graze down sorghum because he couldn't afford a bailing water and bailing twine. He was broke and That began his regenerative journey. He couldn't till anymore. He couldn't Apply for light he's broke and This work so But that takes a while. It's that's four years of disasters for gay browns three years for conversion to a officially to a organic process or, you know, organic label process, so I was interested in Can you do this like really really fast and you do this in a year and you do this in a season? Like what would it take to do that? so this is a proposal to repair degraded soil in one winter season and I don't know that this works, but this is a talk about ideas and it's a work in progress talk will be Producing final results next year at this time. I hope so You know about the soil damage soil damage comes from a lot of physical activity Tilling and rain and wind and stuff. There's also a bunch of chemical impairments from Organic matter oxidizing for harvesting minerals. We're eluting minerals. That means that they're getting dissolved in the water and flowing away herbicides pesticides and waste and and so That's all the physical and chemical stuff, but then there's these biological effects the biological effects are really interesting So if you have a monoculture, then you lose all the symbiosis between the plants if you've oxidized the soil organic matter That by telling now you have hungry microbes all over the place. Remember the kind of Mental image is that there are two elephants worth of microbes in every acre of soil And so you're not feeding them when you've degraded all the soil organic matter. You have two hungry elephants dying of starvation fertilizer also starves the microbes because Plants have this fascinating ability to request Nutrients from microbes and they actually produce sugars that they send down into the roots They also produce hormones that go down in the roots and they tell the fungi and the Microbiome done there what they need so if they need zinc They'll send different stuff into the soil and ask for a zinc and then microbes will send it back And then they have enough zinc they'll ask for whatever is limiting now So there's this incredible on-demand system This is an economy that works better than any human economy you've ever seen in history. It's a fantastic achievement and yet We interfere with it by adding fertilizer that tells the plant I've got enough zinc I've got enough magnesium. I've got enough of whatever I don't need to talk to the plug to the fungi I don't need to build that economy I don't need to have these partners that are reaching six feet into the soil to reach whatever they need and so I'll just starve them out because I'm already happy. I've got my You know universal basic fertilizer income here, and I don't need anything else so Anyway, the fertilizer is starving the microbes herbicides are poisoning the microbes and also farmers and pesticides are killing beneficial insects and also Beneficial farmers so is there an affordable exponential way to fix this instead of like Going out and finding soil from someplace else in the world and trucking it in can we do something else to make this work? and so my previous management trials have been Taking these plots of land that red stuff in the front is Amaranth There's also corn and soybean or corn and cowpeas and okra back there And I've been using scads of coffee ground leaf mode leaf mold Compost and putting that down. I've also used a lot of trace minerals at different times So I've been adding cobalt and molybdenum and copper and whatever else the soil assays told me I needed and Comparing that to a basic NPK fertilizer regimen as directed by University misery extension. Sorry and And and then raising the same crops on both sides That's what the pairing is there and then with minimal watering There's not a irrigation system here and then doing an elemental survey of the edible stuff that came out of those plants because remember I'm a physician first and I'm supposed to heal people and I don't think that metformin is quite cutting it so All this compost and this is a pile of coffee grounds and leaves Getting till turned by a little tractor and my my nephew So the soil organic matters risen from like two percent or less to five percent or more And so that's great. The oddball thing that's happened Which is we've lowered the nickel level in most of these plants So the nickel level is actually at a point where it would be toxic for some people some people have a sensitivity to nickel and For those people I have crops that if they're grown on the NPK side They're toxic and if they're going on the commit their regenerative side, they're not toxic because they threshold the nickel drops below the threshold that would cause trouble If I see heavy metals, it's always on the NPK side. So I see cadmium or antimony or some Crazy thing that we don't want. It's always on the NPK side it's never on the organic side the regenerative side and I have a better microbiome and now I have a better microbiome and But this is a half inch of compost annually, which is 13,000 gallons per acre per year That's 30 tons per acre and that's not really a very practical plate to scale up So can you grow the compost from seed? So there's occasionally done the cover crop thing so this is a cover crop wheat and Cover crop wheat is growing much more densely on the the near side of this picture I actually couldn't cut that with a with a mower. I had to go out with a scythe Slice it down and then in the till it in That's the regenerative side. The other side is the NPK side. It was flying with a mower We just cut through it with a mechanical mower So If we do grow the compost in place, of course, we're not destroying disturbing the soil anymore and that's one of our you know five principles or six principles of Generative management according to Gabe Brown and The cover crop is going to block the wind and rain channel the rain into the soil shade the soil from the sun add soil organic matter first from the root mass second from the leaf mass, but then extra Benefit pretty important also the microbial mass. So those microbes that it's going to grow while it's Harvesting unlike even in the winter are going to add to the soil organic matter It's going to suppress weeds or microbes and even maybe tap into mineral reservoirs down deep But will that work me make that will that work quickly enough and grow enough material if the soil is already half sterile from the previous management strategies of dumping pesticides and herbicides and fertilizer on it Will there be herbicide residues that cause trouble and Would it help to have to harness the power of epigenetics? so These are ideas that are going to come together in just a minute In the teaming with series of Books from Jeff lo and fells who seems to devote a lot of time to the cannabis This this particular latest addition in the series Describes endophytic bacteria. So an endophytic bacteria is involved in a rhizophagey cycle. There's a lot of big words Rhizos are roots page is eating the plants are eating the bacteria through their roots They strip off the outer wall of the bacteria. That is an important nutritional source for the plant the bacteria changes from being You know some rod shape to being a blob because it's lost its cell wall. It's no longer being held together the way it used to be That enters a plant cell it reproduces in the plant cell kind of like It's also benefiting from having all these sugars and things shipped down to it And so the bacteria is reproducing in the plant invades all through the plant goes up into the seeds and the fruit and leaves in every place and then some of those bacteria make it back down to the root and they get shoved out of the root and Guess what happens when it gets shoved out of the root? You get a root hair. That's how root hairs form Practically all of our plants as far as we can tell and this is a more general thing than in mycorrhizal fungi So brassicas like cabbage and broccoli and stuff. Those are all brassicas. They don't have relationships with sit with our muscular mycorrhizal fungi Amaranth doesn't have relationships with mycorrhizal fungi, but all these plants are gonna have relationships with endophytes The endophyte is all through the plant Help it plant plant can shove it out and make it do interesting new things. That's a significant source of nutrients So you got a garden who's also One of our hosts here today And a different track his PhD thesis is about training bacterial communities To digest atrazine So he's got an herbicide and he thinks that if you expose a compost pile to the herbicide The compost pile will learn or select for or something something happens that Ramps up the ability of that compost pile to digest that herbicide Okay, so that's interesting too. Maybe we could use that and then You can organically create a genetically modified organism. This is the Epigenetic idea so epigenetics is a process where when you stress an organism whether it's a starving mom in Netherlands in World War two or a plant in the field But the DNA on that plant will get changed cytosine residues get methylated So there's actually a change in the DNA or there's a change in a protein that's a near the DNA That turns off or turns on genes So it's genetically modified in place and when you raise a plant in your garden and Take the seeds from that plant Those seeds are genetically modified to work really well in your garden If you buy your seeds from Maine or Oregon They are not going to be genetically modified to work Well in Nebraska or Missouri so the closer you can raise those seeds to the place where you're going to plant them the more Genetically modified. They are going to be to for your setting All right, so Next interesting idea is that seed pellets can carry microbes you could infuse a seed pellet Which is going to be a seed with a wrapper of clay and compost around it. Maybe other things biochar, maybe and You can infuse that with some of these microbes So we've just given you a bunch of microbes to think about and special seeds to think about So there are issues with it. So the pellet has to stay together while it's waiting to be planted.   So the fast region materials were to take coffee grounds and leaves and Mix them up in a tumbler composter and then every week we'd give it to a more and more toxic dose of four different herbicides that my partner farmer is using on his nearby fields. So we're exposing this Compost pile to 2 4d Atrazine we fascinate and glyphosate. I kind of thought we'd kill all the worms, but they didn't Plenty of worms growing in this compost pile this time in this tumbler.  It's been exposed to a lot of stuff And I have no idea if it's really digesting atrazine or not, but it's been exposed to a lot of atrazine Next set is a symbiotic compost So I thought I'll take coffee grounds and leaves and we'll put those in a compost pile and then when I harvested Some cover crop that I'm going to use I'll put that in there, too And it'll carry in with it the endophytes those bacteria that were supposed to be added And now I'll have a special wheat a special pea and a special Camelina Compost so the wheat the winter wheat I have the winter pea that I have in the Camelina That I have will live through the winter no matter what happens This two degrees cold spell is about to hit. It's okay. They'll be fine And then we have a big kiln that make biochar. We'll talk about that more tomorrow But anyway, you take the biochar civet get some ultra fine material And there's really fine material that you could use to hold things in the in the seed ball And so then the intervention plan is to add these locally grown seeds So we've also planted the Camelina harvest of the seeds And so now we're going to take those put them in a mixer make seed balls and make the seed balls using Kind of water run through each of those compost to try and grab some of the endophytes This is not quite the best possible plan, but this is what I proposed And then there's a bunch of treatments and so there's different strategies for you know, whether to put down nothing put down the seeds with the With spray on our seeds with the pigment or So a bunch of different strategies and we're trying to figure out something that's affordable, right?  You should be able to do this as simply as possible So there's a bunch of technical problems that emerge. Of course, once you get into the details The biochar of the pH is from 9 to 11. This is easily alkaline enough to kill everything that I'm going to add to it Including the seed So you can neutralize that with sulfuric acid But this changes the whole nature of the project fair amount It's no longer something you would do with, you know, turn your children loose with it No, you need to glove up and have protective personal personal protective equipment Uh, you know, that that's not gonna work The clay is also all the clays that I had except for cat litter cat litter is neutral But if you go by bentonite clay like Wyoming bentonite sodium bentonite clay or vol clay, which is calcium bentonite, which you can get in 50 pound bags at buckeyes But those pHs are more than 9 too. So those are also too alkaline Uh, it turns out you can buy a very expensive Red sea ball clay from amazon, but it's expensive. That's not going to scale well I'd also started by saying well, we're going to take these plant residual plant Plant residues and put them in the compost to get the endofites As a dumb idea the much better to grow the plants in the compost just let the plants Raise them up in the compost so you have a compost full of plant with piece Plants compost full of camalina plants Compost full of wheat plants and the endofites are necessarily in the compost all through the root system They're all around the root system. So that's a much better way to make sure that you're actually growing them into fights Uh, the camalina seeds are too small to be the center of a seed ball So you have to put them on the outside so it makes them more of a seed bomb Um, the seed pellet integrity is difficult to maintain. It's into fracture Other people have managed to do this, but they don't tell you How they do it usually there's very little literature about how exactly they do this But what there is suggested you need more than 50 clay And so we've got to figure out the clay thing and the clumsy there's a You can choose the wrong mixer. It turns out I tried that once so, uh And then there's all these other binder problems. So Anyway, uh, you can try and deal with those We got some logistic problems the drought delayed The drought killed soybeans that were supposed to be growing in the two-acre field where our trials supposed to happen the Death of the soybeans caused the farmer to lose interest in maintaining other things happening in the field with the result that we grew a lot of polymer amaranth and um And crabgrass and they went to see before they got sprayed with five percent so So we had like, you know a number of ugly problems happening in the two-acre field And so I wound up adding a lot of very small Parallel plot trials on my farm to try to fill in what we're going to be gaps in our experience here and then, uh And then the predation issue turned up the amazon to see if all the thing Works so the first trial was these three bins on the on the left got Plant residues thrown into the bins that are supposed to be composting. Don't do that do this instead This is camelina and in wheat and peas and stuff growing in the compost pile. That's a good idea. That's going to work Um The tiny camelina seeds that there really are too tiny to be the center of a seed ball The seed seed bomb clay works great. The voids predation is just expensive and it doesn't isn't going to scale um At least not purchased from amazon Um, the mixer if you decide you need a mixer, you don't want the big blue loaves mixer. It's great for Crushing biochar in the powder, but it's not very good for mixing a seed ball The yard mix is great if you decide you need to make seed balls use that the power button is on the front It's got a nice big flat space underneath. You can take out the mixing paddles that would use for Um mixing cement or mortar and it's a good size. You can make hundreds and hundreds of maybe thousands of seed balls in there pretty fast and you just Put in some clay put in some compost put in the seeds Start it tumbling and then start spraying water at it Little misty water and it'll it'll work Um Before the mice after the mice so the seed bomb clay is what worked so This uh tray full of all kinds of things that I was trying. I thought you know, i buy our charl Discourage the might no they hate it all So that's that that was over one night of uh, you know observations. So they just destroyed it. Now I got another um uh The ball clay I mentioned the calcium bentonite ball clay This is really good for batching your pond if you've got a leak in the dam You pour this stuff in there it swells up to like 10 times its original size and plugs all the leaks That's great for plug for the dam is terrible for a seed ball And it actually stopped anything from growing it's a little bit hard to tell in that picture but There are a few wheat plants On the picture on your right But there are no peas so this whole this whole at least there's two rows here of Ball clay and there's nothing going on there um This side is with an anti herbicidal tea and this side is without an anti herbicidal title tea This is on a small plot that I where I had Just drenched this thing with 2 4d And uh turned out not to matter so those post-emergent herbicides Really are post-emergent you put them on and then plant the week later. They don't do anything so So, you know, maybe the simple solution is Just spray stuff that you want on there instead of trying to make the seed pellets so if I Revising my plan to start again right now, which I probably will I would add radish as a cover crop because the camelina is so tiny such a tiny delicate plant that it doesn't provide any Significant root mass and so it's not going to add much carbon to the soil So if I'm really trying to repair soil in one season, I would put radishes in there Even though they're probably going to get killed Overwinter, but if you plant them in the early enough in the fall, they'll make some radish and then um I'd go to the cover crop and local soil for epigenetic seeds like I did We got a cover crop in compost for symbiotic microbes, which I didn't but I'm doing now Evaluate the herbicide residual issue which may or may not be an issue I use a seed drill or shallow planting Uh To get the seeds planted. I would use the compost tea sprays. I would carefully select my weather Now try a plant when there's going to be rain and crimp the cover crop and plant crash crop into it So we'll be doing that um this spring lord willing and Go from there


Sometimes you will want to group certain parts of your regular expression to either capture it or repeat it. So to accomplish this you will need to use something called a grouping operator. The grouping operators have multiple functions. They are used to group things together by placing part of a regular expression inside round bracket or parenthesis. You can group that part of the rejects together. This allows you to apply a quantifier to the entire group or to restrict alternation to the part of the rejects. And then that sub-patterns will then create what's called a capture group which stores the value of that sub-expression in a special variable. Rejects will treat a grouped sequences as a unit just like any other programming languages which treat a parenthesized expression as a unit. Now the second function of the grouping operator is to remember and capture the sub-matches. Match information is normally written as an array. Array index 0 will contain the complete match and the subsequent indexes will contain the sub-matches. Here one thing to note is when the sub-match is for a repeating group only the last successful match will be remembered. I will show this in the demo part. Now let's look at a regular expression to match an IP address as an example. I think no need to tell you that an IPv4 IP address always consists of four groups of numbers separated by literal dot and that numbers are always between 0 to 255. So let's build a regular expression to match an IPv4 address. Alright so here I have added some valid and invalid IP addresses in the input text as you know that backslash d is used to match the digit between 0 to 9. So in the rejects part let me add backslash d. Now here what I want is I want to match a digit at least one time but not more than three times. So here I need to use a repetition quantifier. So in repetition quantifier let me add 1,3 in curly brace followed by a literal dot. Now next either I can repeat it two times to match the next two numbers or I can group those in parenthesis like this. And then I want to repeat this preceding pattern that grouping exactly three times. So let me add the repetition quantifier like this and lastly we want to repeat the numeric pattern one last time but now without dot. So as you can see that our rejects is ready now. Matching an IP address is a good example of a tradeoff between rejects complexity and exetness. Now this rejects of course matching an IP addresses but what if I add this IP address? Did you see this is totally an invalid IP address but it still matches. So to restrict all four numbers in the IP address from 0 to 255 we need to use another rejects. So let us write it. So here first branch will match the number from 250 to 255 and the second will match 200 to 249 and the third branch will match anything between 0 to 199 followed by a literal dot. And now this entire pattern I want to be matched three times. So here we have to use grouping to use a repetition quantifier against a complete group like this. And now the same numeric pattern we need to repeat it one last time over here but this time without dot. So yes now it matches the valid IP address from the given input string. So here we have a working rejects and a basic understanding of how to use grouping in the rejects. And with this it's the end of module 2 and in this module we had learned how to use quantifiers in rejects and how they can be useful. And then we had learned how to use shortcuts to show the rejects expression. And then we had learned how to use anchors and boundaries. And in the last we learned how to do grouping and matches sub pattern in regular expression. Now in the next module we will see some practical use cases of regular expression. So stay tuned.


Hi. I'm Zor. Welcome to Unisor Education. We continue talking about units of measurements and today we will talk about how we measure mass of objects. Well, we have already spoken about seconds as the unit of time and meters as the unit of lengths. Now, it's been a decision actually of physicists to use the units of measurements based on certain natural physical constants which do not really depend, the value of which does not depend on whatever we are doing. So it's not supposed to be something artificial, it's supposed to be based on something objective. And that's why we have defined second the unit of time. That was the first unit which needed to be defined as the time for certain atom of cesium to make oscillations in certain number. Number was 9192 631 770. So the atom of cesium, if it transforms from one state to another and the states are supposed to be defined properly, we are not talking about what kind of states, but it's like agitated state and normal ground state. So number of these oscillations is exactly the time which is equal to one second. So we have defined the second and similarly we have defined the unit of measurement as being the distance covered by light in vacuum during 299, was 72458 of a second. So second is already defined. That's the time which takes the atom of cesium to make these many oscillations. And now since second is defined, this piece of a second needed for the light in vacuum to cover the distance in one meter. So meter is also defined. Now the logic is to always define the next unit of measurement in terms of some physical constant and already defined previously defined units. So we have a very strict hierarchical kind of construction. So we defined something like a second based only on some phenomenon. Then we have defined it lengths based on some phenomenon and already defined second. And now we will define the unit of mass which is called kilogram based on already defined units, time and lengths and some physical constant. So again, that's the general direction. Okay, now let's talk about how it was actually defined. Well, in 1889 actually they have decided to make a standard kilogram. Now before that the unit called gram existed and that was basically the mass of one cubicle centimeter of water. By the way, centimeter is already defined now at least. But the problem is, I mean, you can't really have a precise measure based on cubicle centimeter of water. Well, it depends on the water, temperature, et cetera, et cetera. It's not really constant. In 1889 they have decided to make an object, a real object which has a mass of one kilogram and they did it. Remember how they did the unit of measurement, the meter as a metal rod somewhere in the 19th century and put it in some laboratory? Well, later on they have decided to get all this particular standard because it's not precise. Same thing with this. They have made kilogram, put it in the same place, the same laboratory near Paris, it's sever, I think it's called. And well, 100 years later in 20th century they basically found that it's not exactly a kilogram. There are some micrograms difference or something like this. I don't know how they have discovered it, but basically it's obvious that things do change and the standard which we made ourselves cannot really be a real standard. We have to really base it on some physical constant. Now, which one? Now, this lecture is kind of more difficult to understand than the previous. The previous one with meter, that was kind of easy. Speed of light measured the time, one fraction, whatever the fraction is, or a second and that's the length covered by the light. With kilogram it was difficult. The first suggestion was let's measure exactly the mass of one particular atom of silicon, I believe. Well, silicon is basically abundant. That's sand basically, it's a silicon. So, let's take one particular atom and have a certain number of these atoms. If we know the weight, not the weight, the mass of one particular atom then we can multiply it so many times to have one kilogram and then we can say, okay, kilogram is the mass of so many atoms of silicon. Quite frankly for me personally that would be a very natural understanding of how we define the kilogram. For some reason that was rejected by physicists. Maybe one of the reason is that there are other isotopes of silicon, silicon 29 and silicon 30 with different number of neutrons in the nucleus. And maybe it's difficult to separate. I don't really know the reason. It was rejected. So, they decided to go along in my personal view a more kind of sophisticated way and they still did. I mean, they have decided to have some other physical constant, not the mass of atom, but some other physical constant which maybe was easier to measure, reproduce or whatever. I'm not really sure why. So, what is this? Okay, when we were talking about waves we were talking about the energy, the way it carries with it. And in particular there was an effect when the energy was carried in chunks called photons. And the energy of one photon was equal to some kind of a constant called Planck's constant times mu which is frequency of the wave, electromagnetic wave. So, this is the constant and this constant was calculated as being equal to 6.6267015 times 10 to minus 34 joules times second. Okay, so, now they have decided that this constant is better suited for definition of the mass. Well, first of all, what is joule? Joule is the energy measure and it's a kilogram meter second, I use s, second square. That's the force times distance, right? So, that's the definition of joule. And so, basically it's a kilogram here. The meter we know what meter is, we have already defined meter and second also we defined properly. Which means that if kilogram is defined then everything is defined and we have this constant. So, again, they made the reverse. Let's say that this constant is exactly equals to this particular number because, again, if we start from kilogram we can never have an exact number here. But if we start from the number, this number we will have the standard which fits this particular number for a kilogram. So, that's what the typical process of defining the new process of defining the units based on some constant is. So, the unit is such that we'll give exactly this constant as far as the calculations are concerned. So, first this constant was obtained experimentally with whatever units they had at the time. Whatever kilogram they have, whatever meter and whatever second. Now, since we are redefining this from the constant back to the unit we are saying, okay, our unit is such that delivers this particular number as a Planck's constant. Well, basically that's it. We have to define it which means we have to know how to, you know, have some experiment which delivers certain things based on this particular Planck's constant because we have postulated this Planck's constant. So, we know exactly what is the energy. If we know the energy, we can find what is the kilogram, basically. What is the mass of whatever we are dealing with. So, again, this is a very important philosophical change of defining units not based on our own kind of definition. I don't know, we have made an object and say this is a standard. We are taking a certain constant to be exactly some such a number and from this we derive the unit of measurement. Same thing as with time when we were saying that a certain number of oscillation is equal to one second. Same thing with lengths when we were saying that the distance covered by light in one fraction, whatever the fraction is of a second is the meter. Same thing here. Kilogram is whatever delivers this particular value to the Planck's constant. Now, the relationship between the energy here and the mass is very simple. That's Einstein's equation in relativity theory. So, these two, it's quantum physics and this is the theory of relativity. It's all something which is not really covered by this course. I just use the formulas basically as given. It's much more complicated parts of the physics. But anyway, the relationship between page and energy, relationship between energy and mass and that's how we get the mass unit. Now, if we have defined what is a kilogram obviously we have gram which is one thousandth of a kilogram. We have milligram which is one thousandth of a gram which is one millionth of a kilogram. We have microgram which is another thousand. Nanogram which is another thousand. Picogram which is another thousand of the previous. Every time we just divide it by a thousand. Now, going into multiples, we have a ton. By the way, the ton, there is a ton in the United States which is spelled like this. Now, this ton is spelled like this. So, this is exactly one thousand kilogram. And there is a kiloton, abbreviation is ton. There is a kiloton, there is a megaton and there is a gigaton. So, it's a thousand tons, million tons and billion tons. Alright, so basically that's it about mass. Again, don't miss the logic of this. First, we define something in time, unit of time which is a second. Using the second and speed of light we have defined the lengths. Now, using the second as a unit of time and meter as a unit of distance, we have defined unit of mass, kilogram, by postulating the Planck's constant. And that's always like this. We always preserve this logical connection. We define something and then based on this we define something. It's like proving theorems. We have axioms. Axioms are in this case equivalent to world constants, physical constants, natural constants. Then we have derived first kind of set of theorems from these axioms. Then the theorems from the theorems, etc., etc., by building the logical construction. Here is exactly the same thing. That's it for today. Thank you very much and good luck.


Stephanie Germanata, who we all know as Lady Gaga, has become what I would call one of the biggest stars of our time. It might have taken her a while to rise to the top, but now at the age of 33, she has built an empire and does it all.  Lady Gaga currently owns more than one property, and her main home that was featured in the doc is an impressive mansion in Malibu. Lady Gaga's sanctuary in Malibu, as she likes to call it, is apparently also where Bradley Cooper offered her the star and role of Allie in his movie, A Star Is Born. Lady Gaga ended up winning an Oscar for Best Song from that movie, and I'm totally not surprised. I love the entire soundtrack of that movie, and I've seen it multiple times, it just doesn't get old. Lady Gaga is a singer, songwriter, and actress, and the woman is clearly multi-talented. At the moment, she has 38.2 million followers on Instagram.  With all the crazy outfit she's rocked in the past, you can count on Gaga skipping a walk-in closet, and instead having a full room for her clothes. I don't think she would've kept her meat dress though, because that would've been a little nasty. But we'll talk more about her closet in a little while. Although there's a lot that's unknown about Lady Gaga's finances, her net worth is estimated at $300 million. With that kind of money, you already know the artist is definitely living in her dream house, or houses. Hey guys, it's Kara, and today we're doing another house tour here on Famous Entertainment. We're gonna look at where Lady Gaga calls home, including her main mansion in Malibu, her place in NYC, and whatever else we can find. If you like these videos, make sure you're subscribed and ring that bell to be notified when we post, so you can always be up to date. We've also done house tours on the likes of Selena Gomez and Lana Del Rey, and we'll have links to those at the end of this. Go follow me on Instagram if you haven't, because I love connecting with you guys. I've also been reading all your comments, and I'm gonna be responding to some at the end of this. I need you to let me know who to do next in the comments down below, and whose home you'd like to see. Now let's get into this video. First off, Lady Gaga has more than one property under her belt. One interesting purchase she made was the former home of late musician Frank Zappa. The identity of the buyer was private, but rumor is that it was Gaga who bought the place, and sources on the web confirm it. Lady Gaga bought this place in 2018 for 5.25 million, which is a huge difference from the price Mr. Zappa paid back in the 70s. He paid around 75K. This home is on just over half an acre of land, and the Tudor style house is over 6,700 square feet, with six beds and seven baths. There's also an attached staff apartment, and two detached guest houses. Frank was certainly a one of a kind artist, and his house reflected that. There are one of a kind features all over the house, like the dragon mural in the dining room, and portable windows and doors taken from submarines. We know Lady Gaga seems to love things that are unique and different, so maybe that's one reason she wanted this house. There was also a double height art gallery and a recording studio Frank used to use. Outside the home you'll find multiple patios and decks, a greenhouse, a swimming pool, a rooftop tennis court, and rooftop gardens. Lady Gaga may have bought this place as far as we know she isn't living there. It could have just been a super cool investment property, and maybe she has some plans for it in the future. Let's move on to Gaga's real estate in the Big Apple. She's a New York native and has called NYC home for a really long time. She revealed in an interview with Vogue that she got rid of her previous house there, stating it was too hectic every day outside on the street. Well, that's how I feel about NYC too. Anyway, it seemed Lady Gaga couldn't stay away from the city for long, considering last year she bought a new home there. She started her house hunting right after her star is born co-star Bradley Cooper, bought a multi-million dollar penthouse there. Not sure what's up with that timing, but she ended up finding a place. Lady Gaga's new NYC mansion is located in the trendy area of West Chelsea and it's split over five floors, including a cellar and a rooftop terrace. In NYC, that kind of space is a true miracle. The home is 11,000 square feet with an additional 2,000 square feet of outdoor space. There are five bedrooms and 12 baths, some of which are powder rooms. All of the bedrooms in this NYC mansion have ensuite bathrooms, but the master bedroom is something even more impressive. Gaga's master suite takes up its own floor of the house and has two bathrooms, a kitchenette and a giant walking closet and dressing room. The living room is massive, sitting at 26 by 23 feet and has a modern looking glass fireplace as well. The previous owner was a designer himself, so of course the decoration of the place is something special. There are beautiful chandeliers, plenty of double height glass windows, walls of mirrors and more. Definitely fancy. Other features of Lady Gaga's NYC mansion include a garage, a personal gym, a wine cellar, home movie theater and a pool with an attached steam room and sauna. There's also a hot tub on the rooftop terrace and you already know you're getting perfect views of the NYC skyline from there. Although NYC might be a little too hectic for the mega famous star now, Lady Gaga probably always feels drawn to the city because it was her home and where she grew up. Now she has a huge mansion to enjoy when she's there, a big difference from the apartment she lived in as a kid. Alright, can you describe NYC in three adjectives? Gritty, fun and bright. Finally onto the main attraction, Lady Gaga's Malibu home. This was the place we saw her living in her dock 5'2". She purchased the place back in 2014 and it's located in Malibu, overlooking Zuma Beach offering some of the best ocean views. It's a one-of-a-kind property covering six acres and the house is over 10,000 square feet. Her home is also where Bradley Cooper offered her the leading role alongside him in A Star Is Born. He saw her perform the song La Vie en Rose at a benefit in a friend's backyard and knew she was the right choice. He set up a meeting Lady Gaga invited Bradley over to her home the next day and the rest was history. Gaga said about her home, this is my sanctuary, my oasis of peace. I call it my gypsy palace. A lot of these photos are from before Lady Gaga made the place her own so since then she's of course fit the place with her own unique style. The home was listed at almost 25 million but apparently Gaga bought it for 23 mil. Either way the price tag seems about right for the size of this estate. For a house this big you'd be surprised to know there are only three bedrooms. Lady Gaga actually converted several bedrooms into space for her wardrobe. In her room full of clothes she has plenty of custom designs like a cape from Alexander McQueen and pieces from Versace. In a separate chamber she said that she has racks upon racks of leather and feathers and sequins and a lot of black. Her dressing room even has a fridge inside. Gaga's master suite has a full gym, two fireplaces and a private outdoor terrace with views of the ocean. Not to mention there are his and hers bathrooms with heated stone flooring and his and hers walk-in closets. I guess that's just even more closet space for Gaga. Lady Gaga also said how much she loves pink and how it's a relaxing color to her.  The previous owner of this mansion was Dan Rominelli who was part of the Warner Brothers team and worked on all of the Batman merch. So when he built the home in 2005 he added a Batcave lair. This special lair is accessed through a secret door and passageway from the living room and includes an 800 bottle wine cellar, home movie theater and bar and even a two-lane bowling alley. Lady Gaga's mansion has plenty of other amazing features a lot of which are outside. Of course there's a large saltwater pool and hot tub and there are beautiful rose gardens across the property too. Much of the space outside is dedicated to horses and Gaga has a few for all. There's a barn with stalls for up to eight horses, a tack and feed room, a large riding arena, four grass pens and two large grazing pastures. Not to mention there are riding trails throughout the property. Seeing all the features of Lady Gaga's home and all of the peaceful outdoor space on the estate it's no surprise she calls this place her sanctuary. So now we've seen Lady Gaga's luxury home in Chelsea, New York, her primary estate in Malibu which is a beautiful mansion and more. It's no doubt that Lady Gaga has made some big investments with her properties but the star can obviously afford it and it seems like she really loves her homes. I'm not sure if she owns any more real estate but if there's something I miss let me know in the comments. I want to know what you guys think. Did you guys like Lady Gaga's $23 million mansion or no? I think that her property is beautiful and it's definitely a bonus with all of that land and space for horses. I'm sure she writes most of her amazing music at her Malibu sanctuary. Okay guys now I'll be reading some of your comments from previous videos. On our Kim K House sort team mermaid set, Taylor Swift should be the next home. Thanks mermaid we've actually just done a Taylor Swift house tour and she has so many homes so stay tuned for that. Next on our Will Smith house tour it's me miss Ruby said. Beautiful home, the fact that it's all custom. I love the meditation room. I'd call it my prayer room but same setup. I agree miss Ruby. I think a meditation or prayer room is a perfect idea. I'd love to have one of my own as well. And finally on our Justin and Hailey Bieber house tour vid, Jenny C said. Justin's house is dope. Thanks Jenny. I love hearing what you guys think about these celeb homes. All right guys that's all I could find on Lady Gaga's homes. Which place did you like the best? Her upscale NYC house or her main mansion in Malibu? Let me know in the comments and let me know some other celebrity houses you'd like to see. Follow me on Instagram if you want to chat more and I'll see you next time with some more videos. Bye.