Well, this was an interesting week and welcome if you're new here happy Friday So it is Friday. So, you know what that means. It is way in day WW workshop day the end of the month So I have my overall total weight loss for the month to share and some extremely exciting news like extremely exciting news So make sure that you are subscribed and that your bell is turned on so you don't miss a single video Give this one a thumbs up if you love these way in videos. It really helps out my channel So I very much appreciate it and let's jump into this week's weigh-in workshop topic and this exciting news So let's talk about my week Like I said, it was quite an interesting week a lot of just different things happened that affected my overall week But on a high note, I did do jazzer size five times this last week five Which is incredible kind of on the low end of that I'm pretty sore my body has needed the last couple of days to recover from all of that exercise I was doing back-to-back jazzer size days which takes a toll because it is such an intense crazy workout So I'm still feeling the soreness kind of the after effects of those extra workouts, which I am so glad that I did I'm so happy that I have exceeded my exercise goal and I have five more days planned this next week So I'm going to try to stick with it at least four times a week five would even be better Jazz or size sessions. So I'm really proud of myself for that this week was busy with life Like I said just a lot of things going on in my personal life nothing bad But just a lot of things going on so I ended up eating out for a few meals this week, which is very uncommon for me I normally only eat out once a week on Saturday when I use my calories or my points I generally don't eat out during the week But it kind of ended up happening this week Which I stayed within my calories and points that I allotted for the day But it's never good for me to eat out multiple times during the day with sodium and you know, just it's not the healthiest options I like to eat a much cleaner diet So I noticed some of the side effects of that as far as the way that I was feeling the way that my body was feeling So that happened and then some exciting news happened this week Actually, it's been in the making for quite a while In fact, so many of you Suggested that I do this so I did a little research into it Wanting to decide if it was a good decision for me If it was something that I would enjoy doing and that would be beneficial to me and you in the future And I decided that yeah, this is definitely something I'm interested in I'm passionate about I've been looking into it for a few weeks But I took the plunge and I am in the process and I'm pretty far in the process I've been really committed and and very interested and involved and Intensely spending time in this but I am in the process of getting my certification to be a nutrition coach. You guys I'm so excited. I'm learning all things nutrition, which is amazing a lot of it I already knew from my extensive research, but a lot of it is new and exciting and things I never knew and I'm incredibly Excited for this next adventure in my life It's going to benefit you guys because I'll be able to share more information with you I have a lot of things in the works that you can take advantage of this education that I'm getting so that happened this week So I spent a lot of time on the but on the couch doing my school work Which I'm not complaining about but those inactive or less active days were pretty inactive because I was doing a lot of studying So all of that kind of happened this week, but overall I had a really good week I'm excited about my nutrition coaching certification and life is really good you guys. It's really really good So my week overall was good. It was just different There was just a lot of things thrown my way and I handled them really well Which I'm really proud of myself for doing speaking of food and choices I want to jump right into this week's workshop topic And that is what happens in your body when you choose healthier foods If you're new to my channel, I made a transition over to a clean approach to WW Almost six months ago. Well, just about six months ago. I've done a one month and six month video update I'll link those down below for you guys where I talk about how I'm feeling and how my body is feeling Following a more clean approach to the program and this topic just ties right into that and there are some great Excellent tips that WW shared. There are so many reasons we make the food choices that we make We may reach for that warm chocolate chip cookie because it makes us feel better in the in it It tastes really good, of course, but it makes us feel better. It satisfies a need Maybe we're stressed out or we're tired or we're hungry or we're craving something sweet We may reach for those strawberries because they're cut up and ready to go and we open our refrigerator They are the very first thing that we see we need to be mindful of what food choices will be more beneficial to our bodies So I want to share with you guys some ideas that WW has for our overall goal So we want to focus on this so these are the foods that we could be choosing So there are four examples that I'm going to share with you today If your focus for your overall body is to focus on heart Health you may want to reach for lean proteins nuts foods that are low in saturated fat If your focus is trying to feel full and satisfied focus on foods that are high in fiber fiber Is so important in a diet for many reasons some we won't discuss here But fiber is very very important. It keeps you full it makes you feel satiated and it just helps with your overall body Function so if you're looking for a little boost of fiber you can reach for fruits vegetables Lagoon what if you're looking to maintain your lean muscle mass or even grow your lean muscle mass? You definitely want to focus on protein. I have a protein goal every single day as you guys know It is the number one macro nutrient that I meet every single day without exception That is a must for me because I do want to lean out my body. I want to build muscle I want to tone up. I want to do all the things that protein helps with so reach for protein dense foods eggs meats non-fat Greek yogurt try to stay away from fake protein sources or Minimal fake protein sources and what I mean by fake protein sources are things like protein bars and protein shakes and that type of thing I limit myself to one per day because my goal is to get the majority of my protein from real food the eggs the meats The nuts the dairy that type of thing You'll see me eat a lot of cottage cheese yogurt things that are going to give me a good dose of protein But a real whole foods now if you want to eat protein bars throughout the day That's of course entirely up to you But for me I find that my weight loss is better my overall health the way I feel is better if I focus on real foods That are dense with protein and number four if your focus is on supporting your bone health reach for things like dairy Fish nuts leafy greens and fortified cereals these things are really going to help you with your bone health It's amazing that the true saying is you are what you eat the foods that we put into our body is how our body Responds and how our body feels and this is so true I shared these tips and tricks in my one month and six months update on clean eating again I'm gonna link those down below for you guys definitely check them out I think if this week we should focus on choosing What as far as our bodies health do we want to focus on and making sure that we're choosing foods that help meet that goal? So for me, I'm going to focus on lean muscle mass building lean muscle mass toning up So I'm gonna be of course looking at my protein I'm going to again limit my fake protein to one time per day and I'm gonna really focus on protein Dense real food. I do that most of the time anyways But I'm going to make just a mindful effort this week to really focus on that So I love this topic it goes hand-in-hand with a lot of what I've talked about here on my channel and Basically the bottom line to remember is you are what you eat So choose foods that make you feel better healthier stronger and the best version of yourself So let's talk about weigh-in like I mentioned this week through me a few curve balls From eating out a little bit more getting in some extra exercise and starting my nutrition certification And with all of that I still managed to lose point four now you guys know I am not entirely focused on that number on the scale. I feel good about how this week went I feel good about the extra exercise I feel good about doing something for my mind something for my body and my soul and for you guys that makes me feel good So I am focused on kind of the nonscale victories and the point four is still a loss and with that point four I lost every single week all five weeks in the month of July So I am so incredibly happy about that and my overall weight loss for the month of July was five point two Pounds so I am right on track to where I need to be to hit my 50 pounds lost by the end of 2020 In fact, I am at 41 point four pounds loss, which is so incredibly exciting. I definitely feel it I'm noticing it in my clothes I'm noticing it even in my endurance at Jazzercise and just the way I feel doing the workouts So I'm proud of myself for the point four. Is it two or three pounds? Nope. Do I care? Nope I'm happy with my point four loss and my overall five point two for the month of July So I do have a few goals for August my goals for August are to lose six pounds I'd like to up my weight loss a little bit Continue with Jazzercise at least three four or five times a week three is the very minimum I'm shooting more for four or five times. I'm going to do a little bit of calorie cycling through the month of August I'm reformulating how I'm working my calories and my points and I just have all the goals for August I can't wait to see how it works out. So down in the comments Let me know how your guys's July went was your way in this week what you expected Did you gain? Did you lose what part of your overall body health are you going to focus on for the upcoming week? Let me know what you're going to focus on and how you're going to achieve that goal If you're new to my channel welcome, I do away in video every single Friday So I would love to have you come over and join my community So make sure that you're subscribed and your bell notification is turned on that way you're not missing a single video Give this one a big thumbs up if you love these way in videos in these car chats and of course leave your comments down below I can't wait to hear from you guys. I hope you have a wonderful Friday a wonderful weekend And let's kick some butt you guys August starts tomorrow. Let's do the dang thing


Hello, my presentation is about agro-processing and horticultural exports from Africa. This is a joint work with Will Martin. He is here to answer all the difficult questions and comments. This figure shows the structure of Africa's exports by broad economic sector. We observe that the share of agriculture is relatively small at around 10 percent and which decreased somewhat for the past two decades. It's a bit surprising because many believe that African countries is a large exporter of agriculture. Within agriculture, we find quite a different picture between the world agriculture and African agriculture. In terms of world agriculture, the share of bulk products decreased from around 25 percent to 17 percent. The share of agro-processed agriculture and horticultural exports expanded by 21 percent to around 71 percent and 12 percent respectively. When we look at the structure of agricultural exports in Africa, the picture is quite different. The share of bulk exports account for still a large amount at around 42 percent, but it decreased from 60 percent. The share of processed agriculture expanded to around 35 percent, but this figure is still just a half of world average. What is interesting is the sharp expansion of horticultural exports, which reached around 22 percent in 2014. Relatively low share of processed agriculture export in total agricultural export in African countries may reflect relatively low level of income in African countries. This figure shows the relationship between the share of processed agriculture in total agriculture in terms of value added. We find close to linear relationship between the per capita and the share of processed agriculture, confirming that as the economy grows, the share of processed agriculture grows. When we look at African countries, protein in green, Africa appears to be following relatively, following broadly the similar pattern. Similarly, we look at the share of processed agriculture export in total agricultural export. We also find the positive relationship, but at the decreasing rate between the per capita income and the share of processed agriculture export. African countries is following broadly similar pattern. Now we turn to harmonized system 6-digit level data, which is the finest data in which internationally comparable data are available. The first column shows the number of exports which are shipped from our 10 African countries. We observe that the structure of African agriculture may be relatively diversified because these countries are shipping many products. However, when we look at the major of concentration, we find quite a different picture. Second column shows the share of top item shipped by each country is relatively large. For instance, for Ghana, just one product. Cocoa beans represent as high as 59% of total agriculture export. The last column shows numbers equivalent for high fundal index, that is our major of diversification. For instance, the number for half index for HOPI7, that means the structure of HOPI and exports is characterized by only 7 items which are equally distributed. The diversification figure for South Africa is 44, that means African economy structure is more diversified, while the number of Ghana is 3, less diversified. Then we look at how much the changing structure of agriculture exports is driven by new products. We construct the major of new products as defined, which were the bottom two export items in the initial year, which are about one decade ago, depending on the country, but which made the top 20 in 2013. We find that the new product, the share of new products are relatively large for some countries. For instance, 47% for Ethiopia and 69% for Rwanda. As we have seen, a small number of country, a small number of items are very important for many African countries. Israel and Russia made the same point, arguing that exports from African countries are dominated by a small number of big hit. Osman and Roderick also argues policies that encourage entrepreneurs to discover successful exports of the future are worthwhile. The case of Ethiopia's cut flowers can be cited as an example of a big hit. Ethiopia's cut flower was just one of bottom 2% items a decade ago, but Ethiopia emerged as the second largest African cut flower export after Kenya. There are a number of key factors. Ethiopia has a comparative advantage with favorable agro-climatic conditions and abundant labor. The success is characterized by private entrepreneurship experimentation supported by government programs such as duty-free import of machinery and tax incentives and credit. Cut flower venture was initially initiated by two domestic entrepreneurs but later attracted large foreign direct investment. They secured market access through international auction market and the right weight of flowers made a transportation viable overcoming Ethiopia's constraint of landlockedness. Now I turn to the implication of policy reforms. The impact of policy reforms is heavily influenced by the destination of Africa's export and the initial protection structure. We see that the largest destination of Africa's export, agriculture export, is EU accounting for 40% followed by Africa accounting for 19%. But when we look at process agriculture, the proportion of export shipped to Africa of 35% is disproportionately large, perhaps reflecting lower fixed cost to ship to Africa market and the existence of local market which is tailored to local consumption pattern and taste. This table shows the Valoran equivalent protection. The first column show that African exports face about 7.0% of protection. Second column shows the protection that Africa imports on its import is at about 12.2%. The fourth column show the exports that Africa face towards against EU market is low at 0.8%, reflecting the preferential access of Africa to EU market. Finally, the protection of intra-Africa trade is relatively large at 10.1%. Especially the protection of process agriculture is large at around 12.6%, reflecting clear tariff escalation pattern within Africa. At the global level, when we look at the data at the more disaggregated level, we also find tariff escalation within the same value change. For instance, party rise of protection 1.2% is smaller than process rise of 5.7%, and the protection of live animals of 1.3% is much lower for the meat product of 33.7%. Finally, using global trade analysis setup model, we conduct a series of simulation analysis. Simulation one experiment what would happen if African trade partners would reduce, would eliminate tariff escalation. The results show that total agriculture would expand by 39%, and the expansion of process agriculture is especially large by 114%. Simulation two, investigate what would happen if Africa loses preferential access to EU market. Africa's total agriculture and process agriculture would decrease by 5.5% and 12%. The larger amount of the reduction of process agriculture appears to reflect larger preference margin in EU market for processed goods. Simulation three, investigate what happens if Africa removes protection within Africa. Africa's export and for total agriculture and process agriculture would expand by 5.1% and by 13% respectively. The larger amount of expansion of process agriculture appears to reflect the elimination of tariff escalation resulting from liberalization. Simulation four, investigate what happens if African countries increased the productivity of processed agriculture goods by 10%. The results show processed agriculture would expand by 30%, highlighting the importance of increasing productivity to tap into export market. Finally, simulation five, investigate what happens if Africa reduced its own protection for both agriculture and non-agriculture. The results shows expansion of export by 7.5%. The positive impact appears to reflect the reduction of intermediate costs resulting from this simulation. We turn to policy questions. Tariff escalation in the same value chains by African trading partners hard agro processing exports. Thus policies imposed by Africa's trading partners matter. Preferential access to EU markets is important. Regional integration can be used to promote further Africa's trade liberalization. In terms of domestic policies, it seems to be important to create an environment without these intensives for export. In particular, it seems to me important for firms to have access to intermediate at world prices. Investment in trade logistics is also important because unbundling of global value change involves the logistics for the transfer of materials and knowledge. Also, costs associated with high transportation costs and inputs may make processing activities un-economical. Horticulture exports are perishable and particularly vulnerable to delays in shipping. We view that good policies lead to more and efficient process agricultural exports. But we view adding values should not be an independent goal because if it is related to tax raw materials, this may lead to value-substracting restrictions on export of raw materials and it may hurt the owner of raw materials who tend to be poor. In conclusion, high-valued agricultural exports could play an important role in increasing overall exports. We observe that Africa has been moving already toward high-valued agricultural products. But to tap fully the potential of high-valued agricultural exports, it is important to encourage experimentation of entrepreneurs to find future big hit while minimizing these intensives to export. At the same time, it is important to invest on trade logistics such as transport and trade facilitation. Finally, we view that seeking policy reforms that also encourage exports of other goods and services is important. Relying on only high-valued agricultural exports is limited because the current share of agricultural exports in total Africa is relatively small at around 10%. Thank you.


Hey everybody, welcome to my kitchen.  My roommates are animals and Kiwi So this is gonna serve as my load for this demonstration today. I want to talk about how can we Manipulate the load to manipulate what our body is doing how can we offset a load to change how our bodies are positioned and now you can probably see me already if I hold the load up high and Directly in line with me, but off to the right You can see my body start to list this way lists like you know like a pole is leaning like the leaning tower of Pisa, right? I am still Straight, but I am tilting If I move to the other side You see I move the other way now why is this so this this weight is now part of my body But gravity works by pulling straight down regardless, so if I kept my position from before and I just let it and I didn't control with any muscles I it would just pull me over, right? So I keep my muscles to keep me together And I manipulate my positions. So how does this work? You'll notice if the weight is on my right. I well wherever the weight is you'll notice I shift away from it That's the biggest rule So that's the rule of the goblet squat or the plate squat, right? I put loads in front of my body to teach me how to sit back And that's why that stuff is so effective, but I can do the same kind of thing if I need to control Let's say a shift if I am Too far in my right leg I might actually put the weight in my right arm or on my right side I might hold one kettlebell up here and Then when I squat I'll have to keep my hips over to the left more I'll have to keep my body over to the left more to balance this counterweight here Now Sometimes I'm gonna throw a little wrench in this. This isn't gonna be the most simple video. Sorry Sometimes we shift to the right because we need to feel our right heel because we're really good at feeling our right heel And that's just because our body is really asymmetrical and it's more comfortable to do there And we can manage the water and the air that's in our body better that way But if I really never feel my leg if I'm if I'm you know oftentimes if someone's squatting I might say do you feel both your legs pretty evenly or both your quads pretty evenly and if they say no I might actually I might try either one of these right I might say well if you're shifting. Let's try to shift you away or Let's put this over here and let's load this side So now the weight is over here more of the weight comes down here I have to cue this on to help balance me But I also have to propel off of the leg that's underneath the weight and I just come down and I push back up Now You're never gonna know what's going on Okay, you can look and you can see stuff and we try to simplify things for teaching purposes, but all of those all of those changes that you give yourself are just guesses and It's okay, right? what we do as People who try to change squats is we test the squat and we say I don't like that part about it Let's do this and then we try something and then we say okay What does that squat look like and then we say that was better or that was worse? All we're doing is we test and we retest we test we intervene and we retest So play around with it. You can load on one side. You can load on the other side. You can load to the front That's a great one that helps a lot You could even load to the back But that's just gonna be really ridiculous and I don't think I'd ever do it for anyone because it just throws them forward and just Smashes all your biomechanics makes everything really difficult You can do all of these things by holding a weight low or Some moderate distance or even up high or even overhead All sorts of things that you can try feel free to give something a shot And if you have any questions if you have any, you know, I it's hard to cover everything on a topic like this So if you have any questions if these rules weren't simple enough, just leave a comment below


Welcome folks, this is Tom O'Brien of TFNN, we go five days a week, we go 10 hours a day, we go 24 hours a day on the internet at TFNN.com, always remember folks, whatever you think about, you bring about whatever you focus on grows, hope everyone's having a great day, safe day, let's make it a great night folks, and let's make it a great week. Don't make assumptions, ask for what you want, find the courage to ask for what you want, others have the right to tell you yes or no, but you always have the right. Likewise, you have the right to ask folks what they want and they have the right to say yes or no. Mock it wise, let's take a look at it out here, we have the Dow Industrial closed down 128, Nasdaq off 82, S&P's down 12.5, Gold contract down $9.30 trading at 14.14 cents an ounce, Silver off 19 cents, $16.43 an ounce, Light Sweet Crude up 4 cents, $55.92 a barrel, notes and bonds, you get the 10 a year down 7.6, $30 off 18, both of them folks, bottom blind pullback, not enough volume, haven't broken swing points, they still want higher price, lower yield, King dollar, that's where the fight is out here, King dollar up 88.6, trading $97.540, that's laying right next to its high of May which is $97.15, I expect you're going to see it get hit, the Euro is trading at a 111 price point, the yen is at $108.67 and the pound is at $124 to $1 US dollar, our phone number is<PHONE_NUMBER>, give us a call folks, well I know it's going on in your world, in the world of the S&P's, let's take a look at them, we take a look at the spy, what you're going to see with the spy is this folks, spy closed at $299.97, we have slew of numbers that have come out after the close, we'll go through those numbers, let me just pull this up here for a second, there we go, what you're going to see is that the spy right now is laying out here at the 300 mark, 303 is the ABC structure on the way up, NDX100, if you want to see something that is wild man holy cow, coming into the close, this was wild as you can get, so if we pull this back a little, what you're going to see is this, right now the NDX100, these are the futures, the futures trade, 20 bucks a point folks, Amazon come out with their numbers, this dove down to 7917, okay, and then give it three minutes later and we're at 7985, okay, so bottom line, we just move 60 points top side once again, why, because Google is up, Intel is up, Starbucks is up, gold contract, what do we have with the gold contract, gold contract out here, back down, we come down $9.30, bottom line, we'll see how this handles tomorrow, it's always dangerous coming into the Friday when gold has been going south, we're at 1414 an ounce, and what that's going to be about of course is it's all about King dollar, and it does look to me that good old King dollar is going to try to at least test that high of May tomorrow, 97715 is the number, now let's go over to Amazon, we take a look at Amazon first, Amazon come out with their numbers, Amazon closed at $1973, right now it's 1948, this thing was already another 30 points lower folks, so bottom line, just hang tight for a bit, this is going to be trading all over the place, the earnings per share, the sales estimate had been 62.5 billion, they did 63.4 billion, the earnings per share $5.57, they missed that, they did $5.22, let's go over to Google, we take a look at Google, Google closed at $11.32, that's trading at $1206, so bottom line, and if we take a look at this, when you're going to see what the Google deal, just I felt that it was kind of going to come into this gap up here, why? Because the way it was trading out here today was rejecting the lower price, so the gaps in the bottom of that gap is $11.75, and $11.92 is the top, so that's going to jump up to that level, so let's see what Google has to say, the estimate Google revenue estimate was $30.84 billion, man they did a lot, they almost did another billion, they did $900 million more, $31.71 billion, that's what they did, let's see, revenue where is here, there we go, okay, so let's see, cost per click, cost per click is still going down, oh that's interesting, the estimate cost per click, they thought it was going to go down 19%, it only went down 11, operating income, oh my God, that's pretty amazing, they're operating income folks, quarter over quarter is up 39%, huge, earnings per share, I have no idea what they have in this earnings per share number folks, but once we dissect this we'll find out, last year they did $4.54, this year they did $14.21, so you're talking about a monster number year over year, no doubt about that, SBUX, let's go take a look at Starbucks and see what Starbucks is doing out here, Starbucks closed at $90.98, this is trading right now at 96, whoa baby that's a number man, 96, look at this man, this is something else, this has been a one-way deal on Starbucks in an incredible way, look at this, 2007 Starbucks was $3.53 and you know it's amazing about that too, if you remember I was talking about this quite a bit because the people that, this is what companies just in general like really know how to basically move their own stock, they gave their employees what looked like a good deal but it wasn't a good deal, they just wanted to get rid of huge amounts of stock which they ended up doing, not all, you didn't have to take the deal but a lot of employees did and that was a bad deal as it took, they gave it, they gave the employees different incentives and I remember this so well because I go to Starbucks so much I was telling everyone of those employees do not take it, do not take it, you know I don't know who took and who didn't but I'll tell you something, the ones that didn't just made a fortune because the bottom line is that we're at $99 right now, $98 and so Starbucks what they're saying is this, their comp sales, they're raising their forecast, their comp sales was plus 6%, they were looking for plus 4.2%, earnings per share, they were looking at 73 cents, they did 78 cents and if this is, we start looking at this if this is the growth, you know, they're in China but there's another coffee company, I forget the name of it, you see them many more times than Starbucks but guess what, they have a lot of growth in front of them if in fact that that's what that is. Intel, let's go just take a look at Intel, Intel out here also just come out with numbers, Intel closed at 52.16, that's trading 54.46 so you can see the type of juice that's putting in that NDX100, that NDX100 wants to go. Don't be too surprised if by the end of the show is that, you know, that Amazon has come back up. Stay right there folks, come right back when I'm at Mr. Basil Chapman.


The Angkor Wat temples are the majestic remains of the once mighty Khmer Empire that ruled the country that today we know as Cambodia. From the 9th to the 15th century, the Angkor Empire was the greatest civilization in Southeast Asia and at the heart of this kingdom was the capital city of Angkor Thong. Spread over 200 kilometers, the Angkor Wat is perhaps the largest temple complex in the world. Of these, the most spectacular and well known is Angkor Wat. But centuries of neglect had nearly destroyed the beautiful temples. The ravages of time, the destruction by war and the amazing life force of the rainforest kept the Angkor Wat temples hidden from the world. Between 1986 and 1993, the archaeological survey of India was among the few agencies in the world to remain in Angkor in spite of the war that raged about them. The ASI continued its task of repair and maintenance, working in extreme conditions and under continued threat from the Khmer Rouge. Specialists from India, the ASI and engineers from IIT Chennai are working to restore Ta Pram to its original splendor. The project officers from the ASI are aware that this perhaps is one of the most difficult and challenging restoration works ever undertaken. The Samudramanthan panel is one of the spectacular success stories of the restoration effort. It is believed to be the largest continuous barrelief in the world. The restoration of the Samudramanthan panel is an example of what can be achieved when two nations join hands in the cause of conservation. With the discovery and restoration of the Angkor Wat, tourism is the biggest foreign exchange earner for the country and Cambodia is now poised to take giant strides of progress and prosperity. And a partner in its endeavor is the ASI and India.


What is going on guys? It's your boy DPJ here today with another Destiny video and today I'm going to be opening 10 plus Radiant Treasure packages now yesterday I opened my first three one of the week you get from doing your first heroic strike I believe it is and I got this skin the exotic ornament for the telesto and I'll show you guys it looks incredible It's actually a Queen's skin it's called the Queen's command look how badass that looks now I've got 12 more of these things to open hopefully I can get some badass But if you guys do enjoy the video at the end if you couldn't leave a like that'd be absolutely epic Let's try and reach 5,000 likes that would be insane if we could but let's just get straight into it Okay, so from the first Radiant Treasure, okay, so I've got the crucible assassin days of iron ornament a booster and silver dust What is that ornament for? The tre- I ain't got the trespasser Typical absolutely typical now. Um, how much base I've got here three six I got actually I may have to move. I don't know if these go to your postmaster. Hopefully they do The ornaments because I'll run out of space there pretty quickly Let's move on What we're gonna get now? I don't even know what that says, but let's see what it's for that is for the Kavos tough now. I've actually got that weapon right here. So let's take a quick look at it It's this one right there.  Let's see what else we get Brutal type now is this the one for The truth Shit, let me see what this looks like But a nice truth right here need to level this up actually pretty badass For the gold one to be honest. I've fed a gold one, but it's still I'm quite happy with that Okay, let's move on see what we get nine to go. It's actually exciting to be honest Born in fire. Is that for the sword? I think that could be for the here the young how young wolves how my apologies Yes, I've got that as well. Let's take a look at that born in fire. Let's see quit that bad boy Sick That is amazing. That is amazing. Okay, moving on. Oh damn. I got the finger where I wanted that. I really wanted that I got a more silver doors. I think you get silver dust with everything you get here Didn't get the prototype again. What's that then? Oh, you are kidding me Did I just get that again? I did not apply it. I can't even remember it.   I dismantled that get some silver Don't need true to be a true. I don't need truth. I don't need to to be honest This man's gonna give you five silver dust Okay, there we go seven to go Okay, so the special ups Special ups is for the me down multi tool. Have I got that on me? I Don't think I've got the middle on me to army, but I will have them just quickly grab it out of my vote. They should not Take a second. Where's my me down multi tool? Um There is right No, it's not a me down. What am I talking about? It's right there. Okay, move to your hunter. Okay, so let's see Special ups big black me the movie tool. That is incredible. That is absolutely incredible Wow, that's amazing six to go I'm loving this. I'm loving this Born-in-fire. I've just had that again. That is for the and the young wolves howl don't need to To be honest don't need to of them now. I know you can't if you once you apply it I don't know if you can change it without losing it. I'm just not sure that so I forget any duplicates I'm just gonna hope for all duplicate weapons as well fall in assassin. I'm pretty sure that's for them Out of trespass Shit, I won't get rid of them, but still oh my life. I'm getting duplicates here. I'm getting plenty of duplicates here Don't need to them do not need to have them. Give me that silver dust three two go I'm quite happy what I've got so far to be honest like Meteorite, what's that full? Nemesis star they're heavy machine with another weapon. I don't have another weapon I don't have crazy Special ups Special this is for the middle tool again. I've only got one of these. I don't need to got one more Radiant treasure remaining. Let's see what I get. Give me some. I don't have please. I Kind of collapsed. What's that for the infective? Have I got that on me? I Don't like will have in a quick second Where's my infective then that must be on yesterday's right now on my titan, so it's moved up to my hunter If it's gonna move it's probably won't because there we go. It's coming The boat's been a bit slow, but let's see. Let's see what this one looks like. That's not bad It's not bad. It's not as good as this one But still I'm quite happy with it. I'm not if you apply this do you lose that? That's what I'm not sure about I can deactivate it No, what no, I'm not even gonna risk it just in case I lose it I'm sure we'll find out sooner or later. But guys that is it. That was actually let me show you the emails if you haven't seen it And let me quickly show you that That's pretty badass. I'm putting on Get rid of one of these because Good looking back up. There's nothing in my postmaster. So I haven't lost nothing So yes guys that is it for another video. Hope you enjoyed it if you did do drop a like I do appreciate the support 5000 likes would be absolutely insane Again, thanks for stopping by and I'll catch you on that next one. Peace out till next time. Peace


Okay, so we just got in to Aspen. It is Thursday, so I do have a few meetings. I actually have a call right now interview with a potential summer intern, which is really exciting. So I'm going to do that, do some work, probably get something to eat, and then maybe unpack a little bit. We're not doing much today. Today was more of like a travel day. So I'm here with Celsius. So I'm doing a partnership and an appearance with Celsius here. And then I'm also doing a Goldberg partnership. I was going to say endorphins, but it's definitely not that I think I just got frostbite in my face. Should I drink this water? Don't drink it. Your face is all in it. Good morning vlog. We are finally up and trying to get ready to go skiing. We ended up going out last night. I was not expecting to go out at all. Then I ended up being really fun, really fun. I am definitely a little bit hungover, but really excited to ski and get outside. So today is sort of the main event and the reason why I came here. It's the Palm, what's it called? Tree festival. That was called the palm crew festival. It was palm tree crew. Okay, like a palm tree crew festival and I'm going with Celsius. I think I'm also going to stop by the revolve surf lodge installation thing.  We're going to go to snow lodge too. I think with revolve quickly. And yeah, I think it's going to be a long day, but glad that we're going to go ski a little bit before the events start. I'll probably switch to vlogging on my iPhone because I don't want to bring my big camera out, but really excited about this weekend and yeah. Okay guys, the ski outfit is on. I'm full ski bunny mode. This has been the longest, shortest, most fun trip ever. I feel like I've not talked to the camera in a second. I've been going out and then waking up early to ski every morning. It's been crazy. It's been such a fun little weekend in Aspen. This place is so special and honestly, it's just so cool for me to do partnerships and work while I'm here in a place that like I grew up coming to racing. So it's just really, really fun. My brother also came up. My brother goes to Boulder and he came up to hang for the weekend and ski and he brought bee. You guys probably remember I got my brother with my parents a dog for Christmas. I'm obsessed with him. Justin came. How are you feeling after the weekend? You didn't really go out that much though. No, not that much. But I think we're gonna go walk around now and get something to eat just in the town and then we're flying out later tonight. I'm really looking forward to getting back to L.A. just because I was kind of last week in the process of moving into my new apartment and we also moved into the new office this week and I did not vlog last week just because I was so busy between moving into my place and moving into the new office. But I'm really, really looking forward to vlogging like a week in my life in L.A. now that I'm pretty much all set up. Some of my furniture actually got delivered the day that I left for Aspen. So I'm really excited to show you guys my L.A. place and sort of how I decorate it. So yeah, just gonna have a week in the office this week and then we have a very exciting drop for Dairy Boy. The drop is on the 8th so you guys can look out for that. We're gonna be rolling out the campaign all week and then I have a photo shoot next week. I have two photo shoots next week. I'm gonna be vlogging all of that for you guys. I'm actually really excited to be vlogging those and then yeah, Indian Wells is coming up which is so fun. So yeah, just wanted to touch base with you guys because I feel like I've literally not talked to vlog the whole weekend. We're gonna go for a little walk and grab something to eat.


Hello everyone. My name is John Hammond and welcome back to the YouTube video. Today I'm looking at a little bit more of the Google CTF that went on this past weekend and I want to showcase a challenge that is kind of similar to the stuff that we've seen just before. It's going to be looking at another web challenge but let me pull that up and we'll hop over to my screen here so I can showcase the LogMeIn challenge. So Google CTF was using dynamic scoring and this is a web challenge that got pulled down to about 87 points so it's not in the 50 point like easy baby beginner category although that was still really tough for Google CTF because this is a hard legitimate crazy cool capture the flag competition but this challenge prompt just says log in to get the flag we have an attachment to download so I'll go ahead and click on that looks like it's just a zip file that got pulled down and we have a web page to go explore. First of all this website is hilarious I cannot stop laughing at it like life like you've never seen it before for half the price this product and company reverse that is revolutionary a major step in the right direction our consultants are to help you to get the right result if we can't help you then we can't help anyone I love this is hilarious absolutely boilerplate website that you see in a cheesy capture the flag competition copy paste 2020 the about page I can't stop laughing at meet the team this is our lead tech support person Mike listen to these amazing testimonials from our premium customer I've been a customer for a while thanks Michelle all right there is a flag location that we can go access but oh we must be logged in to access that okay so I see a profile page but I obviously can't access that either unless I'm logged in so there's a login page I can go ahead and try like admin admin just as a simple default thing and that actually logged me in which is funny and Google will tell me hey change your password data breach on the site approved admin admin yeah that's been exposed already okay thanks appreciate that I don't need that last pass get out of here thanks I can go to the flag page but only Michelle's account has the flag so that doesn't help me somehow I need to be able to log in as Michelle even though I've logged in as admin quote unquote if I could log out I could try to log in as Michelle but I don't know her password so that will tell me nope invalid username or password okay so that's me poking around on the webpage let me actually go look at the source code and we've downloaded that already so I'll hop on over to my terminal I'll move that in the downloads folder it started with like a seven and it was a big big hash thing so let me move that to log me in dot zip and oh sorry I need to actually include that big hash there I'll go ahead and unzip that and now I have an app.js file let me open that up and looks like we have the source code to this webpage so it's seemingly written in node this is javascript here node allowing javascript to run server side and it looks like we're using the express engine to go ahead and actually serve these pages we have a mysql database kind of being used here so we require that library and we use cookie session cookie parser and body parser and we have defined the flag value but that's probably redacted that's why they're just using this ellipsis here and the target user okay we saw that already has to be michelle looks like michelle is the only one that can actually see or read the flag we're getting uuid okay so we can have some identification numbers we start up the express engine let that run and we're using cookie parser with a session v value and okay okay that's also redacted seemingly and we use body parser with extended set to true that's peculiar actually um I noticed and we've had some conversations about it over in the comments for the pasteurized video or the pasteurized video the first thing that I did with google ctf and the gimmick that we're able to go ahead and send those http parameters or the variables that we pass along on the web page the reason we can pass those as an object is because this extended value for body parser is set to true let me uh let me see if I can find any documentation on that body parser extended true or false looks like there's a thing url encoded extended equals true does the same for url encoded requests the extended true value precisely that request body will contain values of any type instead of just strings and there are some articles about this so let me zoom in on this real quick looks like that is the exact same knowledge and segment sentence that I just read okay chrome I zoomed in a little bit too much that can parse data like text and json what do these other pages say extended body parser url encoded my face is kind of in the way and this page is doing weird things the extended option allows choosing between the parsing url encoded data with query string library when false or the qs library when true the extended syntax allows for rich objects and arrays to be encoded in the url encoded format allowing for json like experience with url encoding gotcha gotcha okay same thing here okay sorry I wanted to go down that rabbit hole just to kind of offer some background and more understanding as to what that is and what it's doing and why that's peculiar and we will also be using that sort of thing in this video so app.use looks like that's going to end up requiring the session username and flag oh it's just pulling out okay what it's what it's grabbing from the session response and request here and some forwarding protocol with hgtps yeah is it running with hgtps it is funky middleware csrf tokens oh did we actually have a csrf token like if i view the source of this web page i just hit control you on my keyboard i actually noticed kind of tinkering with this there is a hidden element or an input type that is a csrf or a cross-site request forgery token but it doesn't have a value set like if i were to go ahead and open up my network tab if i send in like hey please subscribe cool cool cool i get this login post request that i just sent along with my please sub and please sub username and password but csrf is actually nothing i thought that was interesting it didn't have a value for the cross-site request forgery token whatever no cache off middleware authorization okay okay that's just making sure that we're logged in when we need to be we have some routes for log out about me etc there's the flag it's just going to render whatever template is there log in we'll retrieve these and oh okay this is it interacting with the database so maybe this will be interesting select all from users where username equals question mark and question mark and we're filling that in with the username and password objects that are sent these look like parameterized sentences or excuse me parameterized queries parameterized statements where we can actually just fill in these values and hopefully avoid sequel injection because it's kind of parameterized and prepared after the fact good good good if username lowercase is equal to target user then it sets the flag to the flag value otherwise it says okay only michelle's account has the flag and that's what we saw when we logged in as admin so that is interesting that logic there because this is javascript i just recently showcased one of the previous videos on prototype pollution maybe that could be an alternative because this username object could be something oh that's pulled from the database maybe that's a thing we would just need to be able to log in which we are but then we would need to overwrite or change the prototype of this to lowercase value and set that to michelle then we could try and do that flag value that's an option and that's a thing um but i want to kind of pivot back to our body parser url encoded trick and gimmick because maybe we could try and bypass a login if we actually sent an object through right so let me see if i can do that with curl this will kind of be a kind of a guess we're like shooting from the hip here let's use the post method so curl tack x and i'll specify data of username to equal like john and i'll specify another argument for a password equal password whatever that will return for me it says invalid username or password that's totally fine we expected that but if i were to change this and use that htp object or pass them like an array or thing here will that give me any extra results error invalid username or password no that's not right alert times okay um how about password anything whatever we'll just fill in a value for that see if that will actually do something different oh unknown error error error bad field error unknown column anything in the where clause that's peculiar how is that happening we can take a look back at the source code here where's that login function select all from users where username is equal to this thing and password is equal to this thing so password we've just passed in but now it's an object and we pulled it out of that is it reading that like a column password is equal to anything where is it is it huh that'll like parameterize out like password is equal to anything is equal to that or does that just take the place of that column username is equal to anything and password is equal to what if i use something where i know a column actually exists like username password username is equal to that how does that look no invalid username or password can i use that sorry i'm just fumbling around on my keyboard what if i set that for anything no i want to use a real thing username username of username that still prompts me to log in do i need to use like admin still invalid username or password okay how about password username can still gets me a login admin admin that still does weird stuff okay what does that need to be username is equal to admin username equals or user earn oh wait a second if we set username to michelle michelle is that the right spelling yeah it is username username equals michelle that also fails we still have our login prompt password of username is equal admin can i set that to like nothing password still requires a login what about username password of password is equal to that no okay there's got to be something that does this username is equal to michelle and password of username oh wait what just happened there we set going back to our code we set username to michelle and use and we're using this object here to denote a column what and username is equal to and username is equal to password how did that work did i actually log in if i use that curl tack l will that send me along there nope i can't post that so that post method is going to keep with it let me just do a simple python script here so classic shebang line user bin environment python and then let's import requests because we're going to be doing some request things let's grab this url from that web page i just copy and pasted that i'm actually going to remove that login suffix there so i can do requests actually let me create a session because if we're going to log in requests dot session and then for good practice let's go ahead and close that we'll set that our like response variable to equal to s dot post of the url with the login page and data can equal username set to i guess michelle in that case and password can be like literally anything i think let's go ahead and print out that r.txt see if that gets us anywhere that still requires me to log in because i didn't do any funky object passing there in that syntax let me set that to html so it's a little bit easier for you to read there we go um so password as an object needs to have something set username can be set to anything there we go okay but and that doesn't matter what it is so password is equally i'm still a little confused as to how that's working but i guess whatever and an auth bypass as an auth bypass so let's now because we're logged in just go ahead and s dot get url over to that flag location that we know is there we can see that so let's go to flag and move that r.txt there we go ctf a premium effort deserves a premium flag that's nice that's cute okay cool we can submit that and get some points i want to learn a little bit more as to how and why that's working so again i always offer like transparency and truthfulness and hopefully honesty and hopefully that jives well with you guys i don't want this to be a boring stupid thing we're like john you're just showcasing someone else's write up yeah maybe that's boring but we're all trying to learn i'm trying to learn especially so that i mean that whole tidbit of knowing that that body parser extended equals true thing like allows this kind of gimmick to happen where we can pass an object along through but how does that look when it's going to be taking the place of this original parameterize like sequel query here u and p are the objects that we pass through are they also just being set to something like i want to see if some write-ups cover that so if you wanted to see the solution to the ctf challenge i mean like this is it you could do any other field that will pass through and that should and that should still work um maybe did that did that not work spit that guy out does they have to be password and username yeah so that fails password of username because we set that to a value that already exists maybe that's why maybe it has to be something that's valid so if i were to log in with admin that doesn't work why password password to be anything still doesn't work but when i use michelle and i set the username to anything that works so i want to figure out how that is happening okay enough tangent sorry for for those of you that wanted to see the solution to the challenge it's that syntax it's using username to that target user and then passing in kind of a key for this object because we're passing in password as an object value no longer just a regular string because that body parser has extended set to true we can use that syntax where we're specifying a different column and you saw that when i just ran a test of like anything we got that funky error bad field error unknown column anything in the where clause so because this is taking place in the where clause i wonder if it's doing like if it's changing this let's look at some of the write-ups and explore this a little bit more but if you wanted to stop watching because okay cool we got the flag you can totally do that let's go to ctftime let's take a look at the google caps the flag event and i'll click on these event tasks and write-ups here and i want to look for log me in so i have no shame and let's open up literally all of these write-ups see what this guy does see what this guy does that opens it in a new window and i don't want it to i'll just remove all those okay log me in let's kind of learn a little bit from the pros this is the web page that we saw we logged in with admin admin but only michelle's account can get this so we observed the session cookie oh the cookie actually oh yeah that's that's what it sets and you could see that in the source code here when it pulled that out with the locals and things it's grabbing the session and that's apparently just something that's actually set in the cookie the app.js attached in the description contains the same flaw as the pasteurized challenge where we're using that body parser extended equals true so you could specify actual objects and set values in there or set keys where you could be using an actual column name from the database the administrator user is different from admin that work this allows us to log in as michelle without providing a password and retrieving the flag from the cookie okay so they did the exact same thing where they're setting michelle as a username and the password is going to be a valid password value set there will be an actual valid column name well that do the exact same thing id that logs in just fine how about password that doesn't log in just fine i want to understand why that's happening the username does so anything that's not the column already it's already being queried okay this challenge exploits the fact that we send an array which when parsed makes a sql server execute a similar query to this select all from users where username is equal to michelle and password single like back tick password is equal to one how does that work what are these back ticks and that's that okay so i guess i understand that that syntax happens but like my sql pass object that is just inserting into the database with the names that are being set there but if they aren't using names what happens that i guess is the closest thing that we've seen though thus far to an actual answer but all right i know this is becoming a long video and me wandering around the internet probably isn't all that entertaining so we can stop this pretty soon but i'm just kind of exploring everyone else's write-ups to see what's going on here hello is set to a if we're using that body parser object you can see that objects are converted into a comma separated attributes we know that username is supposed to be michelle but we do not know the password so what we can do is try and pass an object in the place of a password with the known attribute that would make sense i think that's the most logical thing where we're using okay username is going to be michelle and password comma username is going to equal michelle so and password will probably evaluate the true because that's just existing as a column and the username is going to equal that thing maybe that's how it should be parameterized out does that how it is that how it looks like in the syntax so going back to it we would have username set to michelle and password username equals michelle or that's so funky and password okay that's enough that's enough of me musing at that i know this video got super boring and stupid at the end that's my process of learning and exploring and walking through and trying to see and learn a little bit about this but i really really do recommend going to check out these write-ups especially after a capture the flag competition i'm really excited to go look through some of the stuff for the f word ctf that went on this past weekend so okay thanks for watching everybody i hope you didn't mind me falling down the rabbit hole there at the end that's me shooting from the hip and just trying to explore and learn and tinker with this but i i think the real takeaway is that with that body parser extended set to true there might be some interesting things you can do and and gimmicks and wrenches you can throw with passing in an http like object or array there or something different than a regular string so that's enough thanks so much for watching everybody i hope you enjoyed this video if you did please do press that like button do the youtube algorithm things maybe leave a comment maybe subscribe super duper grateful if you do thanks so much for watching everybody i'll see you in the next video take care


If you have any kind of womb issue, then eat a salad like this every day. It may take you some time to get used to it, but it's your medicine and your body will thank you.