Good scripts always work. I mean, I think the rock made about 60 million dollars last year, and what does that dude do? He reads, he memorizes scripts and regurgitates them on camera. Okay, what does Jimmy Kimmel do? He asks questions created in advance, okay, and asks them in an entertaining way. So have your script, which means have your questions open big, close big, okay, and let the rest just take care of itself, and sales can get quite easy. What's up, everybody, and welcome to the show today. We drop great content each and every week, and we want to make sure that you guys get notified, and in order to do that, you're going to have to smash that subscribe button and hit that notification bell. And if you've gotten a lot of value out of this, make sure you give us a like and share our videos with your friends. You entice people by paying close attention to what your competitors are doing and differentiate yourself in a meaningful way, and then you convince people and close people through curiosity, whether that curiosity is on Facebook Messenger or on WhatsApp or on LinkedIn, it doesn't matter. The principles are the same. So mastering the principles are far more important than the tactics and the hacks and the strategies for all these different ways to get from point A to point B. And that's been our overarching theme in all of our programs over the last 10 years. Online dating has changed, how people market and sell their businesses have changed, but the principles stay the same because humans are not evolving faster than technology. Our DNA is not evolving that fast. So those same strategies will work over the telephone will work in direct mail will work online if you understand the principles behind it. Well, I was just gonna say and just like reading a book to get something different out of it as you have gained perspective and you're looking at it from a different position, what the way you view the world of 20 is going to change the way you view the world at 30, at least I would hope so. And because of that, these same principles that we're talking about, whether it's sales or persuasion, you're going to see them. It's going to be the same principle, but now you're viewing it through a different lens. You may appreciate it more because now you have more time spent with it and you have a better understanding of that principle. People will come through our programs and it's like, well, isn't that the same program the guy just took a few years ago? Well, yeah. Well, the guy came in and he had X problems and he worked through those and now because he's worked through those and sees life from a different advantage, he wants to take the same program because it's going to deliver a different perspective because he's changed. Yeah, for sure. So in starting out in your sales journey, were there skills or gaps in yourself that you felt that most people now starting out in sales need to really figure out to get started or do you really believe you just throw yourself in it and you start to make sense of it? Because many people I know that are listening to the show are like, I still don't know about sales. It's complicated. It seems like it's for other people who are extroverts or XYZ. We all have excuses and you are now on a different part of your journey in terms of learning sales. But if you think back to when you started, what would you tell yourself on that starting line? Well, you do have to jump in. You can't steer a parked car. Okay. I've been doing jiu-jitsu now four and a half years.   Yeah. Right. You've got to be willing to get punched in the mouth and sales. Hear that. No, get that objection. Okay, because there's two ways to learn, right? One is repetition. But the other is adrenaline, right? Emotion. And so, you know, the case and point is like, I'm sure y'all remember exactly where you were when you heard the news about the 9-11 tower attacks, right? I know exactly where I was. Right? That only happened one time. But the emotion, the chemical dump you created in your brain and your body seared that memory into your psyche forever. Okay. So when you get frustrated, when you think you have a sale and you've lost it, and then you take the time to unpack it, to unwind it, to watch the game feel like, where did I go wrong? You know, you don't make that mistake again if you care about what it is you're doing. Okay, I've got certain moves in Jiu Jitsu. I remember specifically when I failed and I sought somebody out and they showed me the fix. And it was, the fix is always very simple. It's literally a stitch in time saves nine. You know, Jiu Jitsu is very simple. There's just, you just do the 1000 different moves at the exact right, one of the 1000 moves at the exact right time and adjust it based on what injuries you're suffering from. But other than that, it's very simple. Right? And so, but as I learned those, I don't make that mistake again. Like, okay, and I remember who taught me the fix, right?   Listening to tapes and watching videos is fine. But you got to go engage.   You show up happy just to have a prospect.  And that comes in there like, you know what, he didn't know everything, but you know, the nice guy, I'll give him a chance. You know, I feel like he really is trying to help me.  So, so stay true, you know, but they always say, you know, people are more afraid of giving a speech than dying, right? So, so if they attend a funeral, they would rather be in the casket than delivering the eulogy, you know, but the key to delivering a speech, they say open big, close big. If you know how you're going to open and you know how you're going to close, assuming you know your material, right? It's the subject that you're well versed on, but if you know how to open, you know how to close, the stress really goes away, right? So, so role play this thing out, script it out, you know how to open. Okay, it's a 30 minute meeting. It's a one hour meeting, whatever it's one person, it's two people, it's 10 people. I know how, I know why we're here. I know how I'm going to open and I know where I want to take them. Everything else is filler, right? Because you have, you know, begin with the end in mind, open big, close big.  So I mean, how if I know how to open to create the response that's going to tilt the odds in my favor, you know, practice that if people get tired of it, but it, it always works. Right?  Oh my gosh, like what a script, right? That so then people say scripts don't work. No, bad scripts don't work. Good scripts always work. I mean, I think the rock made about $60 million last year. And what does that dude do? He reads, he memorizes scripts and regurgitates them on camera. Okay, what does Jimmy Kimmel do? He asks questions created in advance. Okay, and asks them in an entertaining way. So have your script, which means have your questions open big, close big, okay, and let the rest just take care of itself and sales can get quite easy. We drop great content each and every week and we want to make sure that you guys get notified and in order to do that, you're going to have to smash that subscribe button and hit that notification bell. And if you've gotten a lot of value out of this, make sure you give us a like and share our videos with your friends. Well, you bring up a great point that there's nothing better than experience. You can watch the YouTube videos and you could hear other people using that script, using that statement around an objection or getting to the close. And you're like, yeah, that makes sense. I totally see how that works. And then the second you're on the phone, you stumble over it. It doesn't fit with your personality and delivery. And it doesn't work because you haven't field tested it.  Yes.  We'll watch YouTube videos on sales strategies. We'll trade them in our Slack and then I'll try to bring it into the call in the first few times. It doesn't work. It's someone else's line. It's someone else's strategy. And you have to work it into how you talk to people, how you relate to people. And it's going to change slightly, right? So you can't be tied. But that core is there. Exactly. And I think in today's day and age role as technology, I think we have to draw the line in the sand too of what is, what is actual training and experience. Because if you're nervous, you're going to perform to the level of your training and reading books or watching YouTube videos is not training. That is an understanding of the information so that you can then start training with it. People then they're like, Oh, I've read all the books or I watched six hours of YouTube videos. Let me add them. Okay. Now you're going to start training. No, I've been training. I watched six hours of it. No, no. That was you absorbing information. There is a direct light of that. And then and also for ourselves, we have a program called our core confidence program with directly why it was built so that people have a safe setting to practice some of these skills that allow them to deal with their emotions and and focus on the task at hand. Yeah. Much like sales. Yeah, you're going to have to get out there because the car isn't going to steer if it's it's in park. However, you're going to make a lot of errors getting out there. And you have to be comfortable with that. Yeah. You know, they say if it's a job worth doing, it's worth doing well. No, if a job is worth doing, it's worth doing poorly. It's worth, worth, worth sucking at and endure. Yes.  And you get after it.  All right. So for those in our audience who are starting out in their sales journey and want to learn more on how to work with you, what's the best place to find some information less? Man, just get my book. Get my book. You got to go old school, get off the technology, get pen and paper, go to 79stories.info. And you can link to my website from there once you're there. But get my book. It's it'll come from me. Don't go to Amazon because it won't be signed. I'll sign it for you. All right. If you pay extra, I won't sign it. Okay. You know, start there. Yeah. And it's called The Sales Whisperer Way. And it's a compilation of what I have stuck with. I write the weekly whisper. And it's a compilation of about 85 of those I've written over the years on sales and marketing and entrepreneurship and mindsets.  That's as good a place to start as any, because from there you'll see other other things that in the podcast and in free reports and whatever. But you know, you didn't actually read it, right?  Get it, read it. Put it to work. Put it to work, right? And maybe only read the first three chapters. If something hits you in chapter one, go apply that. Then come back and read chapter two. You know, it's all, you got to take action. Well, we love asking everyone of our guests what their X factor is. What's the skill set or mindset that not only makes you unique, but has unlocked immense success in your life? What do you think your X factor is, Wes? You know, I always say great salespeople have great empathy. Okay. And empathy is different than sympathy. Empathy is being, putting yourself in their shoes, seeing things from the perspective of your prospect. And I don't know how I've developed it, but I mean, I'll work with a chiropractor one hour. I'll work with a massage therapist the next.  So I don't know, I can put myself in their shoes, understand what their prospects are going through, the questions that they're asking, the worries and concerns, and been able to address them. So, you know, work on your empathy, your empathetic skills. So develop your empathy. Love it. Thank you for joining us, Wes. Hey man, thanks for having us. Good to see you.


Next up we have Kevin2600 doing the grand theft auto with a digital key hacking. Please give him a warm packing hacking village. Welcome. Yeah, thanks for attending my talk. It's my first time's DevCon speech, so bear with me. Yeah, so today I'd like to share with you my research results regarding one of the digital cocky system. Yeah, okay, let's do it. My name is Kevin. Yeah, you can follow me on Twitter, quick Kevin2600. I'm a security researcher from InGeek Security Consultants based in Shanghai, China, and we are focused on automotive securities. For my area, I'm focused on wireless and the embedded systems. Right, so yeah. Today's agenda going to be like this. First, I would run a very quick introduction on KeyFox 101, and then I will walk through the structure and functionality of this our target today, which is called the army key. It's like actually here. And then I will talk about how am I analyzing and what kind of attack factors I found for this army keys, right? So like for example, we got to talk about a phone physical layer, RF layer, and up to applications, and then eventually we can see how can we sniff in the Bluetooth traffic, and eventually we decrypt the encryptions. Okay, so introduction. So I think KeyFox is one of the most common items we can find in our pocket. It starts with a very simple.  In the early days, it's only just mechanical keys, and then they implement some kind of remote control. In the very beginning, they start with infrared, and then there's RF with a fixed code, and then RF with a rolling code. So they also have some kind of passive entry. So basically they put an RFID chip inside your car keys, so for authentication reason. Now here nowadays, they come a new game changer, because nowadays you can actually use in your mobile phone as your car keys. And for example here, the Tesla Model 3, if you buy in one of these, you're not going to have any physical keys. They could only give you RFID tag, and then also you can download the mobile phone app to actually to start engine unlock your cars. And Tesla is not the only one doing it. I think probably everybody is going to have this feature in the any other manufacturers. So let's talk a little bit about what has been done in the past. So in the past few years, many researchers have found the vulnerabilities dedicated to KeyFox. So for example, one of the loading codes, Algorithm KeyLock has been cracked, and some researcher has been working on a high-tech tool. Yeah, but for the latest, if you notice that in 2015, there's one of researchers who has found the vulnerability in BNW Connected Drive. And also another researcher from Pentas Partners, they found the issues on Wi-Fi access point from the Mitsubishi Outlanders. And those two are the new attack vectors. It's not just dedicated to KeyFox anymore. They actually, there's more technology involved. So yeah, let's talk, let's take a look at more details. And so this one is for the BNW Connected Drive. So basically, a German researcher, he found, he able to set up a fake base station to, and then the main issue here is the BNW rely on HTTP to communicate with backend server. So basically, the researcher can set up a big fake base station, and once he reversed engineer of entire protocols, he able to send and replay. Okay, and then another example here is the Pentas Partners researcher, they found the Wi-Fi access point provided by Mitsubishi Outlanders is so easy to crack. So they can connect to it and reverse engineer controlling protocols. So, and then they can just turn on and off at conditional heatings and even a long system, right? So those are the new attack vectors. So I say, if when the new trends, new technology, even when it being implemented, there are always going to be some kind of new hacks, right? Okay, so let's, let's walk through our main target today. Like this, that's very simple. Yeah, it's called an AMI Key, it's a digital car keys. It's invested by a company called Xiaomi in China. So basically, this one is able to enable people with the old model of the cars, which don't have those fancy features. So if you still want to use, to control your car doors with mobile phones, you can use it just connecting this little device to your car and then you're good to go, right? So, and here are some features, the highlights. So yeah, it's basically, it's rely on Brutus Low Energy and we can unlock, lock your cars. And the, now one of the interesting features here is the remote key sharing, right? And this, I think is a good feature, is really distinguishing with traditional car keys because if you want to share your cars with your friends, you can, you can do that in different countries, right? For AMI Key, they limited, they only can limit to up to 20 users.  You unlock it and then once you come back, you can lock and unlock it, do the normal thing, right? So here are just the components. You see, as you can see, it's very simple. You come with a blank key and also this is the actual main board here. We're going to look at more details in this, this one. And here is another square little box across key sensors. Yeah, sensors, yeah. So here's how you're going to get to that work. First, you, we download the application from AMI Key and then we do the normal process like we, we're duplicating the keys and then we, we need to scan in the bar code for the AMI Key and to, in order to get a activation code. Now once we get action code, activation code, when we put it in the application, then we activate it. Once it's activated, we can lock and unlock it, right?  So we, we need to do the same here. We need to register our AMI Key to the, to the cars, right? Very simple. Also, as AMI Key claim, they support many models of the cars. So, so as you can see, you, you find like Ford, Volkswagen, Toyota, Hyundai, yeah, all those cars. Pretty, pretty much, probably maybe everyone. Yeah, so now we take a look at more details, right? The, the, the first thing when you, when we talk about marketing, the word is engine, the, the embedded systems, most, the first stage is to, to do some recon, right? So we, at this stage, we try to get as much as possible, the information as much as possible. So first, um, I received these car keys. I, I'm not sure what's inside it. So I want to see more details, right? But sometimes the manufacturer may have some kind of protection mechanism, uh, preventing us to open it, right? If, if you open it, may, may, may damage the, er, er, erase the firmware automatically. We don't know yet. So what I will do is I go, I suggest we can, if we possible, we go to using some kind of x-ray machine, we take pictures, take a look inside, then we can make sure there's nothing to permit us to open it, right? So, yeah, that's the case. The AMI Key didn't have anything, uh, inside, so let's go ahead and open it. Okay, so now we, once we open it, we see actually there's actually two boards inside. One, the yellow board here, and then there's a green one here. So, uh, the middle one here is just backside of the, backside of the, uh, the green board. So we can use this, uh, connector to connect into each other, right? So, yeah. Um, so, if any of us have done much, uh, reverse engineer embedded system, then we would know the first steps. We like to just take a look the, uh, to find out the, the model of the chip, right? So, for this one, um, it's called CC2640. Once I, I googled it, and I found out this, okay, this is actually the BDLE module to all the produce. And the other, the green board is from NSP, and that's the one to actually, uh, emulate the, uh, lock and unlock command through RF. And also, uh, when, when, when we're dealing with our wireless devices, usually, uh, they will come with the FCC ID. But since this one is only dedicated to Chinese market, they're using a similar system called a C, uh, CMIT ID. Well, it's, it's really just same, same, same thing, right? So, now there's one thing interesting. Remember I mentioned that there's a square, uh, little square box there. It's called, uh, sensors. Now, I don't know why they, they have there, because I would not, I read the manuals, I read, uh, our official website, and even just for the official applications, there's no, no sign of how can we use it and what, what are really for, what, what are really for. So, yeah, functionalities are known. Um, but still, I, I like to find out more. Um, so I take, uh, open it, um, even using the, uh, produce to connect into it. Um, yeah, as you can see, it is really, you mentioned that this is a smart key sensor and then we can find out your ID here, but still we don't know what to do with it, right? So I look at it a little bit more. Um, I check out the data sheet, I try to connect into it, uh, through your art board or through, uh, try to talk to the spy. Um, but still, not much useful information, but anyway, uh, since this, uh, key sensor here not, not, we will not bother, uh, you won't affect any other general, uh, normal operations. So I'll just leave that for the, for the moment. Maybe in the future I find out more details. I can always just come back to, to, to do more research. Okay, so let's take a look at, uh, uh, our, uh, module at the green board. So on the back side of it, is there's a crystal here. We can, we can see the, um, the value is a 13.56 MHz. So when, when known, we can do a very simple math. We can find out the B rate, uh, and potential of the frequency range, right? Very simple. And now we need a way to verify it. So I set up a very simple SDR, uh, environment. We're just using a, uh, hacker IF here and then connect to antenna and I just keep pressing the button to see if we can find anything. Right? So yes, um, we can see clearly, uh, it is within the 433 MHz, uh, ISN band range, right? There's a, there's peaks here. Um, yeah. Um, oh, I also take a look at, uh, uh, yellow, uh, yellow board. This is a, uh, Bluetooth board. Uh, now when I connect into it, using light blue or not enough connected, it doesn't matter. Um, the, what we can see here is the, uh, you constantly broadcast these MAC address, right? So basically maybe it is, uh, I can see, okay, this is maybe the way we can track you because this is a unique MAC address here. And also, uh, most interesting thing is those, uh, you, what kind of UID they have provided, right? Uh, okay. So, if we wanted to do more interactive with your, uh, I mean key here, we, we not just, we, we can also use in, uh, some tool called GATU and then in Linux. Um, yeah. So here's a picture. I connect into it. I list all the UID here. So, if you've ever done, uh, Bluetooth hacking, then you will know the UID is actually the, uh, one of the most, uh, important, uh, information you need to find out. And, yeah. So, and also if we want to see more details, um, we can enable the, um, function for Android phones that which is in develop, in developer mode, we can actually dump all the, uh, BTLE traffic, and then we can, uh, wrote this log file into a wire shock and start to analyze every steps of the, uh, traffic, right? So if you come here, I request the battery level and then we'll just tell you how, how many battery still left, right? So, okay. The mobile application is going to be like this. Uh, uh, part of it is actually in Chinese, but it's actually, it's, I don't know, translate and it's very simple. First, you need, you need to contact, connect to your car, uh, a mickey. And then once you connect it, there's a couple function here, just, uh, lock or unlock it, right? And also there's a key sharing feature here. So, let's take a look more. Um, just like, uh, every, probably everyone else, they don't bother to hardening your APK files, so it's easy. We can just, uh, actual, uh, a Java by code. I almost like reading the source code here. So, for example, this type, uh, here is just, um, how, how they generate those UIDs. Uh, okay.  Um, yeah, so, uh, okay, um, so here they, they leak, leak some, uh, sensitive information inside their code. So basically this, this, they have this web page inside the code, but when I tried to access it, it actually mentioned, this is like, uh, their internal systems is, uh, if you are not employee, you shouldn't be access it. So, so what, what's the point you live there, right? Uh, and then also, well, if you, you're able to understand Chinese, this is, they, they, they left some, so way, so many, uh, in finding comments like, what the hell here? Yeah, yeah. He actually say, what the hell? I don't know. Maybe he, he's in a, uh, she or he not in a very good mood. Uh, okay. Now, now even getting more, uh, uh, more fun. So when I try, when we try to, uh, try to, to investigate some, uh, systems, we usually, uh, do some, uh, main and middle, uh, using main and proxy or a verb, we can do the same. Uh, the, the, actually the first thing I, I expected, I expected is, uh, to see if the application has enabled, uh, search pending or not. But turns out we don't need, uh, all the, uh, uh, spotters to, to all of the last because it is completely rely on HTTP, right? Um, so, so we all understand, once, once your software go HTTP, so everything is going to be in plain text. So, yeah, if we able to see if in, in, in your network, and then we able to find out some information regarding your devices. For example, this is key information, uh, you probably not can see, but it's actually IMEI numbers. Uh, yeah. So the leaking, uh, are you able to find out some information? So here's one more.  Um, in order to, in case you are, uh, lost your, uh, password, you can always have a way to get it back. So, yeah, you, if they go through all this process through HTTP, you, you will, when we sniffing it, we are able to find out, uh, um, all your answers. So maybe in the future we can, yeah, find a way to hijacking your, your, uh, account. Right. So, uh, there's a summary here. Really, uh, I mean key application, communicate with back and server, complete real-time HTTP. So, yeah, no more PRAC. Um, but there's more here. Uh, I was going to talk about later. Um, I'll show you how actually it can, leading us to compromising, uh, the, the, the I mean key. So, there must be some encryption, right? Because, uh, in their manual, they actually put, uh, specific mention, um, their product is using Brutus, uh, 4.0 technology, but they are using very, very secure, unique, uh, I mean, own proprietary inquiries. So, all right, cool. Um, this picture I, I borrowed from, uh, uh, their official website. As you can see, they, they put all the fancy words there, right? Maybe just, I don't know, try to scale you off maybe. Right.  Oh, wow, they, they are, they, they are send much, uh, efforts in their product, right? But anyway, that's, that's, yeah. Let, let's, let's find out if this is true or not. So first, I'd like to do some physical access. Now remember, um, the I mean key by request, we have to left the key inside the car. Right. So, maybe those theft will not, um, can, a simple way to do just breaking your glass by force and get your key. They have the key. However, they cannot connect in to your key to, to, to, to, to start engine, for example. Um, but what we can do here is we, we get a blank key, um, we replace the chip, uh, from an RF module, from an ARMY key to, to the, uh, brand key one. And then that way we can actually just re-unlocking your, uh, uh, the low vehicles. Right. So here I would like to play, uh, very simple, uh, uh, video just to prove my point that I will work. Yeah. The car is right now is locked. Um, yeah. So no, we just using a blank key with the chip replaced. Yeah. Very simple. Yeah. It's, it's working. However, this process, uh, it involves, uh, kind of violence. You need to actually break in, uh, just let me go back to the, uh, you, you need to, to break in the glass. Right. So I don't like this, uh, method, but it actually works. So, okay, let's do some RF jamming, right? Um, so when, when we start, um, I start to research a little bit more, and I found out that that's quite popular in the theft world, maybe. L, l, l, those thefts like to using the device called car key jammer. So basically, uh, they can actually make a lot of, uh, money from it, even just by selling those, uh, key file jammers. So the way the works is very simple. When, when the, the theft will just simply wait in the car park. Uh, they, they, they can't turn on a key jammer. And then say some written lawyer, maybe in a rush, they've, uh, they just simply press the lock button and then you run away. They, they didn't notice that actually your car, it doesn't actually lock. So the, the theft and then you can just go, go, get in, um, take, take your goods from you. Right. So, but since I mean key is a smart key, right? So I wonder, does the only key smart enough to detect, to avoid in this kind of, uh, attack? So, um, turns out maybe it's not. Because, um, I mean key is actually one way communication. It's really just use same, uh, you're using your mobile phone, send a command to the Bluetooth board and Bluetooth will send trigger, uh, uh, your green RF module to, to send, uh, unlocking or lock command here. There's no, uh, response from, from a green board say if it's, it's working or not. So here I, I gonna play another very simple, um, demo, right? So yeah, okay, just go over it quick. Yeah, well, you see when I press the, the button here, we can see the, the, the signal is, so that means that, that, that everything's working fine, okay. Um, sorry, just go too quick. And then I, I using, uh, uh, yard sticker to sending out the, uh, the jamming signals, right? And we're back to the, the sponsor analyzer, we can see clearly as, uh, your frequency band is already occupied. Now, let's see again when, when we press the, uh, button here, the LED, you gonna light up, means that, uh, RF module is working, it's sending out the signal, but actually it's, it's not working. And from application, um, we have no sign of it. So we, we cannot tell if it's working or not, right? Really. So, yeah. The amicur would not able to help to avoid the jamming attack. Okay. Right. Now, so what's next? Uh, next, uh, I really, I, I recommend you check out the semi-concursor talk. He, he gave a presentation, uh, a couple years ago regarding, uh, called, uh, drive it like you're hacking it. So basically he found a way, uh, called a roller jammer so you can use it not to bypass the, uh, uh, key-roading, uh, a road-roading code, uh, this, uh, mechanism. Um, yeah. However, um, the amicur, the RF module is, is going to be varied from different models. So because, um, for example, the one I, I, I have is a talk dedicated to Honda. Um, but it doesn't mean if my, uh, you, you want to play with the, uh, uh, maybe Volkswagen, they have different RF module here. So which means if I, I, my, but my goal here is actually come, I want to complete, complete, uh, compromise the key. But if they have different modules, I, I won't have the source to buy every one of them. So yeah, I, I did, I, so I start this stage, but yeah, I recommend, I recommend this if you want each one to hack more in RF. Um, yeah, but let's, let's look at the key sharing, right? Since this is a very cool features. Um, the way it works is very simple. We can create, uh, uh, a name for the key you want to share. And then there's a timing here. You can, you can set, uh, permanently or you can, uh, say, uh, the time, set a little time limit. And then the key, as I mentioned, it's only up to 20 users. And once you reach that point, uh, the application will not allow you to go any further. So once you create the, the, the key you want to share, then there's the own, uh, couple ways you can distribute it to the, to the, to your friends, right? So one is that you can just, it will generate a barcode. You can just scan it and then get the key. And then there's, you can send the key through, uh, text message, or you can just copy control, uh, copy to, to your friend. And there's one, one interesting way here is actually you can send your key to your, uh, through WeChat. Now WeChat, okay, WeChat is one of the popular, uh, IM software in China. So probably everyone has one of them. So once, so, so basically once your friend get those keys, you can simply, again, you type into the activation window and simply activate it and, and then you're good to go. So what could possibly go wrong here? Remember I mentioned that, uh, there are traffic completely on HTTP. So basically when, when, when they send out, uh, there's, uh, uh, interesting behavior begin, uh, in the very first stage, when they try to distribute your code to, to your friend, they're actually going to send the code, the complete code in plain text to one of the website. And then website will respond with a shorter, uh, URL. So maybe that, that way it's easier to, to share instead of a very, a very long key, right? Now really inside the URL, just, you're going to return back an, uh, entire key anyway. So yeah, if we can do some man in the middle and we can simply sniff it and we got the key. Now from client side of it, we can also do, um, uh, when we, when we receive the, the key you send by the owner, it's actually there's a barcode here. Uh, we can, once we decode it, then we get another URL here and really again is, we have all the, uh, actual keys inside. So that means if we sniffing it, we're able to unlocking cars. So here I, uh, just play one more video to, for the, for the, for my point here. Oh, sorry. Yeah. So yeah, here you get the key for, uh, by sniffing it. There's no man in the middle. So, and then, and then you can, we can just type this URL to the browser and we're leading us to, uh, active activation page for the army key applications. Now once we register, we set any name will work. Just set a simple name for your key to remember. Okay. Um, we got it. We got it working. We, we try to, to lock and lock the light up. So that means if we simply by sniffing your code, key code, that will work. Right? So, yeah. Okay. Um, yeah. Again, we, we can see, let's say no from it. So just, yeah, it will work. Now.  We want to cancel it, right? Okay. Ah, sorry. We're just, haha. Uh, yeah. So let's see, uh, the cancel, cancel, when we try to cancel the car, this key, what, what will happen? So, right? I tried, I gonna cancel it. So, alright. Cancel it. So now, you see, you see, if we're still able to, to lock and lock your keys, what happens? So I could, maybe it's because we're connected to it. So I, now I disconnected it and reconnected again. Still connected.  So what the hell going on here? Let's go back to the, uh, uh, owner's application. You see, you actually mentioned here is the way the work, the update, you, we need to, uh, from the owner's side, we have to, uh, to sync night with, uh, um, the key in order to update the cancellation. You see what I mean here? The logic is really, if you lost your cars, you lost your keys, how can you can reconnect your key to cancel it? Right? So you're never able to cancel it. Um, so if you cannot cancel it, what about, let's just wait until expire. Right? Will that work? Uh, yeah, another video. So when, when I try to do, uh, try to, to research a little bit on timing, I try to bypass this. So by, by doing that, I, uh, unpopulated set, set about the time back to a few days ago to achieve, uh, it will not work. Right? So, so here's the, uh, career set, the car is already expired. And the time, uh, it's like 1.30, the time, uh, the car expired, expired. Right? No. Even the car, it's career set, it's expired, but still work, it's still connected to it. Um, yeah, locking, unlock command works. But what's, what's going on here? Even the car owners on the screen says it's already expired, but actually it was still, from user side, we still can able to, uh, operate in like, I mean keys. Right? Yeah, still work. So, um, just further to confirm, the time is 1.40 now, 1.43. So, yeah, it's already, it should, it should be just expired. So, again, in order to let the timing actually expired, we have to connect into L army keys. Right? We have to update this information to your army key. Now again, if, if you, if you share a key, you know, people, uh, other people have your key and they have your car, how can you connect into, to, to, to, to, to, to say it's expired? You can't. So, that means you're expired, you, the key will never expired. Right? So, I think they have done very funny, uh, logic, um, this kind of, uh, key shareings. Okay. So, what about booties? They, as they keep mention, they have very strong secure, uh, encryptions. Let's find out if that's true. Uh, so, again, I, when I analyze it, it's from the beginning. Uh, this, uh, I will, I will see some traffic. They keep sending, uh, same, same, uh, same command to, uh, direct request to the, uh, particular UID. Not UID, we'll response you some kind of random number here. But for now we don't know what that is, what that's do. So, and then the following will be another 70 bytes of the long, long, uh, random strings. Again, we have no idea what's that, what, what's that.  Right? Um, now, sometimes, they, job can be easier because they always constantly write a fixed code. So once we have this fixed code, probably much, just can, it's, can over. Um, but now, um, amicky, they actually send in two, uh, fixed code here. I, I think this, uh, one is actually simulating that they'll press the button, the other one is to release it. So actually it's two movement here. Um, the reason why I know this is a, uh, unlocking command because I, I actually press three times and I see three identical card, uh, uh, same, same code, um, uh, inside of this lock file. So, can, are we, is it going over yet? Can we just simply write these two code to the UID and get it unlocked car? Unfortunately, the first attempt failed. So what's going on? What happened is there is, uh, they, they, actually in, in order to lock and unlock your amicky, you, there's some kind of logins, uh, process involved. So you have to lock in first, then do the rest of it. So, um, I take a look at the code again. Um, we, I check the code here, it's called a locking record package. So from here we, we were able to find out how much, uh, what kind of parameter we need to, um, to provide to, to, to create a locking packet, right? So then I check the, uh, that's super secure algorithm. What we see here is XOR, our over the place. So really there just rely on XOR to, uh, with the different parameters. That's their secret, uh, formula, right? So, here's how this is the locking protocols. Remember the first, uh, I mentioned that you, uh, in the very beginning they will send, uh, fixed, uh, command to, to key and it will get back some kind of, uh, random value. And that's the seed to, to get it from new key to, to encrypt it with your, uh, to, to generate another encryption code. So once we have an encryption code, we're able to create, uh, locking packets to log into it. And that's where you see a lot, very long 70 bytes. And that's, uh, uh, locking packets there. So once we are logging in, we can send, uh, those two fixed commands to unlock the car. And if, if we success, we will gonna, we, we, we're going to get a response packet that was to, uh, OXAA. Um, yeah, so here it's really that we need to find out where's the, how do we find out this, uh, encryption code? So once we look at the code again, we will be able to see, uh, it's actually the, the way it works is the, we get a random key from the ME, a key, random value here. Um, and then we act, again it's XOR with the secret key here. The secret key is a fixed random, uh, D word number again from the device initializations. Um, but turns out it's the secret key, they only, only one byte. Right? Um, now here's the locking packet and they, they have all these, uh, parameters that we're gonna need to create one, to create a, a locking packet. Right? So I notice one of the here is called encrypted data. Right? Uh, so, uh, date. So I check the date, how they generate the date. As you can see, they, they actually see the, uh, characters. So, and then they have a secret, uh, method here. So you're using current character, current of date to minus 2000 and then you get the, uh, the key value and then you, uh, convert to the, uh, OX, uh, convert to the hex and that is your one byte equation key. Right? So, for that we can, uh, so for example, uh, for example, uh, this year is 2018, we minus 2000, we get 18 and convert to, to hex and we get 12. So that is our, uh, encryption key here. Um, and, and then once we do that, we can, um, create our, uh, with our, our, our value was need from Bluetooth, through Bluetooth traffic, we're able to create our own locking packet. So here's the, um, I probably cannot see the query, but yeah. So, uh, the Python code, very simple PLC here to, uh, communicate to, to create our own packets and then try to unlock the code. So, but it's interesting here, seeing, I, it's a surprise I didn't expect is that we, remember I mentioned if, in order to get a code work, I suppose to see, uh, AA back, but in the response, I, I, I, I actually just see the OX 6T6. So what's going on here? Um, I spent, I spent many nights to, to, to try to figure out what's going on. Uh, the algorithm is so easy to understand why it's still not work. Eventually, um, we take a look the, uh, uh, the firmware that, uh, provided inside the IPK file is, is for, for the Bluetooth module. And we, we find out that OX 6T6 code is actually means, um, um, that, that error code, that error code it indicates. Um, here is, we actually need to, uh, fully, we actually need to have this put everything back in one piece. Remember when I do the research, I take the, those two boards apart, right? So if, uh, apparently, uh, uh, I mean key has firmware function here, error code says here, if you, we take the part, it will not work, right? So we have to put, put it back together. Okay. That's, that's fine. We put it back together. Yeah. We, we got the locking pockets working fine. So, now, remember, um, as, those, uh, locking pockets, we, we got, it's actually from the, uh, uh, Bluetooth log file dump. Um, in, in, in the protocol, we, we know, we're not able to do that. So an easy way with, in order to get those information is to, to sniff in the pocket. So, but that's easy to do. We can use in, uh, by using this application here called a TI SMART RF, SMART sniff. So you can see we sniff all the, um, those 70 bytes of the encryption, uh, uh, data and also the command not, uh, unlocking the, all cards. So yeah, again, we, we can get exactly the same details with the, from, from the dump files, right? So once we have those info, enough information, we, we, we can just create our, uh, the, the, the login pockets, right? So really, um, the one byte encryption key is not secure, right? And O S O R again is not secure. And if we can easily to get, to get access to those information, it's not secure.  Uh, just prove my point. It will work here. Right? Yeah. So I have a running, this person, I send this three times. As you can see, we log in successfully and then we send it unlocking commands and you will just burp, burp three times. And that, that means that's where everything is working fine. Right? Yeah. Okay. Right. So, as a responsible disclosure, I like to contact the, the Avengers, uh, maybe just tell them, uh, or maybe just apply a CV if possible. However, uh, I can't tell them a couple of times through the telephone numbers here and emails. I got no reply at all. Right? So, yeah. Anyway, this conclusion here is that security by obscurity is not, definitely not going to work. Um, yeah, we really, we have to test our product, uh, uh, in a good way before actually going on the market. Right? So, yeah, that's my puns and thank you. Thanks.


Hey guys, um, yeah, there's nothing here. That's because, uh... It's a random, weird white void room. Yeah, this is the murder room. Ooh! That's a hot mug, guys! Before I moved into the new place, Mark and I went and saw Scream, and we wanted to do a review of it, because this is one of Mark's all-time favorite movies. Yeah, it's... Admittedly, the first time I watched it was not this version. I watched Scary Movie first. It muddied the waters for me watching it the first time. I didn't really understand it. I thought it was like, okay. But re-watching it again with Mark, I was able to see a lot more of the references, the images, and just the kind of the plateaus and the stakes that this movie set in terms of being a meta horror movie. For the record, Scary Movie, I also watched before other important movies. Scary Movie ruined usual suspects for me. The end of that movie where you find out that Doofy's not a... Doofy guy walks away. I never actually made that reference.   So Scary Movie ruined one of the best twists in modern film. Admittedly, there are a lot of parts while watching Scream that I can't help but refer to Scary Movie. Essentially, Doofy. Doofy, every time I see him, it's Doofy. He's Doofy. Doofy, yeah. Hello, and all I hear is, Don't bother me while I'm playing my moves! Also, like the news scene at the beginning, I had, like, they're panning by everybody in my head. I just go to that scene as Scary Movie, where the black guy is like, We're putting live for black TV! White folks are dead!  Let's roll, Jack! Let's go, motherfucker! I just worked with that guy, by the way. That actual guy? The actor from the news, Brad, was in that last movie. Scream really is one of my favorite movies. 1996. I saw it when I was 12, the first time, in theaters. It blew me away from the get- I had already watched, My parents didn't even watch a lot of Shia movies. I watched, I had watched everything it was referencing. I get why you didn't like it. Why it didn't have the same effect on you watching it later, because by the time you're watching it later, I know what you did last summer. Valentine. Funny enough, I hadn't even watched any of those movies. Jason X, which, as we talked about, like, was deliberately ref, like, they changed that movie to make it more Leg Scream. Like, everything Scream did kind of became commonplace. Yeah, it became, like, the status quo in terms of what you were doing, in terms, it updated the horror genre so much. And it was essentially doing what New Nightmare, I tried to do. And it, yeah, directed by this as well. And there's a lot of references, not only to his own work, but to other works. The work is subtle. Like, a lot of the shots in this film are very subtle in terms of setting up payoffs. There's a lot of kind of tongue-in-cheek moments. It's just the whole idea of horror movies in general.  In your dreams. And dreams. So good. Throws the TV down. So good. Like, that's not just, like, tongue-in-cheek. That's not just doing it for placeholder's sake. That's actually really smart. It's an organic reference that works wonderfully. I didn't get it because I hadn't seen the Nightmare movies. But having watched it now, I was like, oh, like, this is a true homage to horror in general, as well as poking fun at it. Yeah. But in a respectful way. I was going to say, it treats it with someone who's just, like, right from the get-go with pulling the psycho bit with Drew Barrymore's character, who's a huge star in 1986. Massive. Just a big star.  They string her up by her own intestines.  Oh, yeah. Even the music. Like, music's done by Marco Bellotrami, too, which is, like, so good. Like, and whenever his music does appear, because there's all this really kind of obscure music. Yeah, there's a lot of 90s rock in this movie. Yeah, and then all of a sudden, Nick Cave with right-right hand comes in. It's like, oh, hey, that's not... Oh, oh, now we're going after that. There's some weird music in this movie. That first scene, like, it sets you up so great. It's got all these wonderful moments. It hits you with things like just the horror knowledge. I mean, I knew what it was, but I don't know if any of my friends, the first time they saw Scream, knew that Pam Voorhees was the killer in the first Jason, or could have told you out of their head. Yeah, I think. Because everyone... It's Jason. It's Jason. It's Jason.  Not just to get this film, but to properly enjoy what this film is trying to do. And then, you know, we kill our main girl again.  Like way, way darker than anything else in the movie. Oh, no. But we move on to, you know, we're setting up the high school kids. I think it is a deliberate joke.  And then even, like, fricking The Fawz. The Fawz isn't it? The weirdest goddamn principle who's clearly got some baggage. He touches their face. It's like, don't worry, Sidney. This will be over real soon. And then he tells everyone he loves them on The Fawz. I love you all.  And the mask, like The Fawz has this weird thing where he's only in like, does he have a scene outside of that office? Other than when he walks around before going right back to his office. Like, he's literally, it's like that for one day. Probably. And the West Craven reference there being a guy wearing Freddy Krueger's outfit going by the name Fred. This movie's just loaded with horror references and things like, the first time Sidney gets a phone call, she says she doesn't like horror movies because it's always some big breasted bimbo who would rather run upstairs instead of going out the front door like she should. And then the film organically has her not be able to go out the front door and has to run upstairs. And same with Q's too in terms of the door. She opens up the door. There's the music Q you think that someone's behind it. There's not. But they don't. And then they pay that off like 10 minutes later. And then they do that again, reverse at the end of the movie. It would do you as the one who opens up the door. But then it's evil looking Johnny Depp. And I'm in now watching into the second time and having a lot more horror film knowledge and just having watched a lot of Craven's work, I understand these references more. And I guess you can generally watch it as a general horror movie. But this is much more catered towards those who are fans of horror films.  Let's do the whole screen series before we actually review FBJ. I swear, this is like Terry Gilliam's Don Quixote. It'll happen. And I'll be mediocre. But no, this movie like everything, it hits the things, it gives you these red herrings all over. I love that Randy literally gives away the end of the movie. Yes, he does. He literally says the dad is a red herring. It's definitely Billy. Like he says those words and it's so good. I think for me it's his, it's the age is still there. I don't, I didn't watch this is the proper time. I didn't, it's kind of like for watching Blair Witch Project.  And again, for Scream, there are elements that again, I do appreciate and I just understand them and I appreciate them more. Now there are still parts though that kind of age it for me. In terms of the acting, I understand the purpose. But by God, can I never take Fred Willard? No. Matthew Lillard. No, Matthew Lillard. Yeah, he's shaggy. I can take him seriously throughout the whole movie. It's like if I saw this guy at a high school, it'd be like, motherfucker, I'm calling the cops on you.  I love him though in the movie. He does the I'll be right back thing twice. Oh yeah, really good. He's the, that's part. It's a Scream, baby. Oh, the, yeah. Which again, it's a scary movie. But wait, there's more. Some of the actors are just trying way too hard. Maybe that was the direction that they were given. The over-traumaticism of it has not aged in its favor for me. Like if someone were to watch this now, even with the hard movie knowledge that we have, they would still be like, all right. It feels like even just down to, we were talking about the foley half of this movie. Like you hear footsteps loud when people are walking around. Scissors. You hear the loudest scissors of all time.   And the acting style of that is, is one of them. But I mean, I think they're all trying to just, you know, play high school kids. None of them have been high school kids. Like, you know, but I'll be honest, I don't care. I'll watch and have Campbell. They know it too. Like that DOP and like they're just, just framing on her. Great, great. Light hitting the eyes. I really do think that this is, I mean, it's the best horror movie in the nineties in my opinion. Like I really think I, I love movies like Candy Man.   This movie revitalized it. It brought horror back and unfortunately created a whole bunch of clones. Yeah. At the drive-in right after we didn't stay because we got to literally. Yeah. By literally doing what it did to revitalize it, it in a sense created a whole new genre of exploitable horror films. Yeah. Like just the whole team. It brought up that thing. It rekindled that 80s slasher thing, but with the new sensibilities and the new way of doing it. And we get, you know, like I said, I know what you did last summer at that franchise. They did, you know, Valentine is very much a Scream clone.  And then eventually would morph into the low budget indie, or indie style kind of horror movie that we see now, which is essentially almost gone full circle in terms of what Scream is, in terms of its over-dramaticism, as well as exploitable marketing and franchising. Yeah.  Oh, they make a lot of sequel jokes in this. He's like, we're going to be here for the sequel because everyone knows you got to have a sequel. Yep. And they did. Three sequels in a TV series.  There's going to be a fifth movie, is there not? Yeah, apparently they're doing a fifth one. Kevin Lambson's writing it. Okay, I know what you're writing it. Yes. So let's say yours. Seven fucking, it's a seven.  For me, it's a five because I appreciate it, but I can't, I don't have any want to re-watch it. I have that exact same feeling of, okay, I've seen it. I'm literally still thinking I'm going to go like, I'm going to be like, go home tell my wife who hasn't seen the first Scream movie. She hasn't. She's going to come tonight, but we have kids. And for those who are, I can understand the enjoyment of it. And the fact that it's an hour and like 35 minutes, that helps. That helps. It goes real fast. There's not a lot of time to drag. But I will be honest, I would rather watch Scary Movie.  I think it's scary movies. We got to watch that one too.   The humor in that movie is definitely like, Oh, there's no way you can make that movie now. You can't make Doofy anymore. Mrs. Man, hard no. Most of the racist jokes. Most of the sexist jokes. Most of the gay jokes. Most of the feminist jokes. Like it's literally a movie filled with, you know, Triggering. But I mean, that's triggered the movie. It came out in, you know, 2000s. 2000s went to and 2001, 2002 went anything.   Oh, Wild. That would not fly anymore.  Yeah, they were there.  But that's something for a different day. For sure.  I like all the sequels. The third one leaves a little lacking.  When he, when, Who is it? Jenna Jamison? No, Jenna McCartney.  And he's just getting into a car. Yeah, basically. Like they made this movie knowing that they were going to make a third, a second one. But that's still, that's huge. Yeah. That he's just, he's just in it for one minute. He's in the third one. I don't remember if he's in the fourth one. No, I think he dies in the third one. Does he? I thought he died. He might die in the second one. The third one's got the line though. It's Jenny McCartney, not Jenna Jamison. Where he says, Yeah, we changed the script. He's even got a new name. And she's like, What's that? And then the screen voice comes out.  And I'm like, It's great. It's a great line. This movie has tons of those.  And I'll get you like a fish.  No, there's a lot of good ones. And like I said, I can understand it. I can appreciate it. And I do enjoy it. Just maybe again, for me, seeing it at a different time. But it still is a pivotal film. Like Mark is right. It is a quintessential film of horror for the 90s. It's hard. And it revitalizes it. It's 94 Citizen Kane is what it is. All right guys. So that's it for us. I hope you enjoyed this video. If you did, leave a like. And if you're interested in more, subscribe. And let us know if you'd like to see us review the screen movies. Let us know if you'd like to watch the scary movie. Because I'm honestly like, I'm actually way more on board.  Oh yeah. After three, it just jumps off the cliff. I'm not even sure three is good. Three is my favorite. That's the first one that airplane guys did. Yeah. And so yeah, we'll see. Anyways, all right. So we'll see you guys on the next one. See you. Thanks for watching the video. My name is Nitz. And you might remember me from the animated cult classic TV show Undergrads. It's been a while, but I'm happy to say the click is finally getting back together in an all new movie, thanks to a successful Kickstarter campaign. But we are still asking for your support. To see any and all updates about the upcoming Undergrads movie, be sure to check out and like the Bring Back Undergrads Facebook page. And with any luck, we'll see you guys soon.


Going on everybody got Kyle and Shawn here with late sports cards. I've been three boxes for Michael M I got a inception tops chrome update hobby and chrome black baseball start with the Tops update good luck. Mr. Michael After this guys, I have Aaron with a couple boxes and then Harper with a couple choice So probably about 20 minutes or so on the queue Maybe even a bit less if anybody wants to get an order in you can get it going pretty quick here Appreciate you guys We also do have fours coming in later starting at five o'clock with Sunday fun day group breaks and says night with a Sunday fun day football mixer Always a good time for some jaker tonight Jake and Sam are trying to figure out who Mike Gisicki was yesterday in the chat Wasn't Jake? Yeah, so I don't know who it is I'm bandit before I'm pretty sure I thought it was Jake as a child I thought it was Jake told me the terrible gritty and I banned them Yes, I guess our bad. Yeah, I guess it's a new new kiseki. There's a lot of you know 52 accounts. Yeah, we thought it was Jake so so you're cool. Oops. Oops. Yeah, definitely one Jake. No, he was here The sweaty one on us. Yeah, right? Good. You know, it's Jake.  Holy cow Yeah, I think I'll I think I'll bark you playing fortnight with him and he'll hear he'll go off And then I'll call and say something. Oh, yeah, I'm good and it'll go off because that dog's just in the background Respectful, yeah, that's because the dog's telling Jake to take him out You know what I'm saying? I don't even have months. No It sits in that cave All right, good luck on the choice or the um update And a refractor hosé quas a oscar colas refractor insert Jose Ramirez refractor, there's casus update Got a fuchsia that'll be my co-full mark to 399 fuchsia for the cubbies action stars of tani prism tommy listella And refractor. I'll meet his Diaz Max Scherzer insert J rod on the all-star insert Lamont wade refractor. There's a gunner action stars rookie Titans vato and blue auto is going to be starling marté on the uh veteran auto Or the met slow color match there to 150 Starling marté and a uh, nullan gorman refractor debut Judge bladay. There's a refractor rookie joey orteez It's a prism of brice miller adly rushman Yandy on the all-star game. There's a refractor rookie montesero Oh, nice. We've got a rookie uh photo variation. That one's kodai sangha I'll work right there on the uh met starting pitcher variation Nice kodai variation rookie At a prism rookie andrenardi and mike clevenger All right, just a little bit more update and then we'll be on to um, we'll do inception next Thorne walker on the insert rookie Corey seager all-star game refractor james paxton josh young future stars Seth lugo and michael bush on the back Alrighty there that'll do it for you michael on the first one Let's do an inception now and I sit on the kodai sangha short print I don't think I've seen that one yet. It's one of the few I haven't on the uh short print I'm good luck on inception And next up guys, we have erin and then harper It'll be about 20 minutes or so if anybody wants to get an order in now You can get it going for you all pretty soon an hour till uh, throw some football Yeah, I was not expecting that football yesterday. I uh When I came in I had no idea and then jay told me and I was like, oh, we got three games today. Okay It's a green rookie. Nolan jones got a blue chef g 225 nice one there alca young winner and a rookie kodai sangha tristan casas rookie Garrett michel Got hobby bias And our auto is gonna be number to 25. It's jordan ds on the rookie out of there for the eights slow orange 225 Jordan ds rookie's in emerging stars out Alrighty there mr. Michael that'll do it for your nope. Never mind. There's one more One more tops chrome black tops chrome black baseball Blend it in with the Thing over there, you know One more michael getting ahead of myself Getting ahead of myself It's a michael vargas rookie Got nice mic trout to 150 on the purple mini diamond It's a cool-looking parallel there Mini diamond trout and a edward julian on the rookie Is gonna be a base auto starling marty What are the odds of that update starling marty and a chrome black starling marty On the base auto there Alrighty already mr. Michael that will do it for your um three box mixer there had update hobby inception and Black will get those right out see my friend


A chief ten of the all-progressive Congress in Cano State, Abdul Salam Zahra, says only the unity between all political gladiators in the state and country can put an end to insecurity in the country. Abdul Salam stated that division among the various ethno-religious and other containing groups are major causes of the crisis the country is witnessing today. It says for the country to achieve peace and progress, everyone was put in Nigeria first. He also noted that the menace of drug abuse must be checked if we must win the battle against banditry.


Aloha. Happy Friday. I'm Kaui Lucas with Toa'i is my mainland. Lots going on in the world of sovereignty and indigenous struggles of late, and so to explore those themes a little bit today, I have Heylani Sinodapalli, who is the founder of Protest Na'i'au Puni, and we'll just jump in and talk about the Na'i'au Puni. I have done shows exploring Na'i'au Puni with Katie Camelamela, who was a participant, and now we are in this uncomfortable and interesting situation where the Department of Interior has clearly defined these rather narrow parameters for if we want to have a nation-to-nation relationship, what it has to be, and it seems like there are certain pockets of the Hawaiian community that are trying to cut all the edges so we fit in that box, but it's terribly complicated. Heylani, please. Let's talk about the article that came out just a couple days ago in the Honolulu Star Advertiser. Radification of Hawaiian Constitution gains Kokua, from whom and not from everyone, right? Right, right. It's going to be the same. They're probably mostly homestead associations, and the Shah, CMHA. CMHA has a lot of member organizations. That's the Council for Native Hawaiian Advancement. It was founded by Robin Danner. It's now being head by Michel Calhane. This is all propaganda for their nation-building scam. Right now, the DOI rule has been finalized. It's a rule that provides for no lands for Hawaiians except for the island of Kau'olave. No restitution for Hawaiians for the overthrow, the illegal overthrow of the Hawaiian kingdom in 1893, and basically is a violation of our human right to self-determination as a people. That's been finalized in September, and what that does is create a pathway so that an entity can become a federally recognized nation, a.k.a. tribe. And what they're doing is they're taking Robin Danner, John Whitehead Sr., Michel Calhane, and all of their little cronies are taking this Na'i Aupuni Constitution that was drafted in February of this year by unelected delegates. It was funded totally by Office of Hawaiian Affairs, which is a state agency, and it was created and basically run by with state monies. And all of them got stipends, by the way. The Constitution was written in, and I got this straight from Brendan Lee, in 10 days. A Constitution was written in 10 days. That in itself tells you that Constitution is basically not even worth the paper it's written on. How can we use or push a Constitution that was written in 10 days behind locked gates? And not from people who are trained in constitutional law. Not at all. Somebody came in and gave some talks on what constitutions are and can be. I understand. And it was funny because their speaker who came and spoke on the Constitution said, first thing he said, the fact that there's people outside protesting this is a very bad sign. But, you know, and then eight Kanaka Maori, including myself, got arrested outside the gates when we tried to enter into the convention and share our concerns. So they're taking this Constitution that has, it's basically paid and brought by OHA, a state agency, and is supported by the Democratic Party. They're taking this Constitution and they're trying to push it out into the community. They're taking it into safe spaces in the community. A few days ago, they took it out to Kapolei. They had a Constitution workshop there. I've been to one myself. You know, it's not very enlightening.  And then they're also fundraising. They have a grant that they have been pushing to Native American nations, tribes, and also to nonprofit organizations that support these Native American movements. They're pushing this grant for two million dollars to ratify their Constitution. This Constitution that they're seeing in their grant represents a cross-section of the Kanaka Maori people and represents who we are. It represents Mana'o from the independence and federal recognition. It's really draw-dropping to claim that an unelected body. Exactly. It definitely does not represent us and it doesn't represent our Mana'o and the diversity of our people. We have, and they're running on the conclusion that there is, oh, what's the alternative? Right? And that's where Aha Aloha Aina comes in. We are the alternative. I am a member of the Aha Aloha Aina and a convener. We're kind of a leaderless organization. We're really from the grassroots. We work with the community. So I don't like to push myself out there as a leader, but I do work in the Aha Aloha Aina. We've convened over 30 AHAs in the community. We have a graphic on the attendance at these meetings. Oh, okay. Well, we don't have the graphic. Oh, well. It'll be up in some sort of social media. On my Facebook page at the very least. So there have been meetings. The Aha Aloha Aina is this very, very grassroots. They have refused to take money from anybody. From state or federal governments. Right. So it's just everybody really giving because they feel passionately about that and because it feels like it's the clean right thing to do. So not just on Oahu, meetings on five islands, I believe. And there was like over like 2,200 people as of October. I think it's up to 2,400 now. So we're continually going out into the communities. And the reason why we don't take any state or federal monies is because we do not... With money comes strings. With money comes certain things that we need to do in return. So we don't take any state or federal monies. So concrete big issues as far as the Na'i Alpuni Constitution for people who haven't actually read it or followed it. So it applies to ethnic Hawaiians or political Hawaiians? Ethnic Hawaiians, yes. Only. Okay. Let's be clear. So it does not address any of the overthrow. It does not address the citizens of the kingdom. It does not address the political Hawaiians. Political Hawaiians. Yes. Yeah. So it's a race-based basically process. But I can't say that I don't support Hawaiians coming first because I believe that with the overthrow of the Hawaiian kingdom and with the colonization of the Hawaiian islands, Hawaiians have suffered the most. We have felt the brunt of the overthrow. And it's been 123 years. And we're still on the bottom of every statistic in Hawaii. So we are the people suffering. And you look at our situation today, it's pretty bleak. And which brings me to the point of all the monies that they spent on this whole federal recognition campaign, including their push for our caucus bill, the Office of Hawaiian Affairs has spent over $33 million on their campaign for federal recognition, which has gone nowhere, absolutely nowhere. And you look at the people who got monies from these campaigns. It's usually the same. It's all their friends. It's all their supporters. And it's a very select group of people. Natya Pune got $2.6 million. And they had $200,000 left over at the end of it. I was there at the court case when Judicial Watch had sued the Natya Pune organization for creating a race-based vote. They wanted to stop it. And in that court case, the OHA lawyers said that Natya Pune was dissolved and that they were returning the $200,000 back to OHA. I have yet to, there's, I know Trustee Akana is trying to find out what happened to that $2,000 if it was ever returned. But what's interesting is that the Aloha, so Natya Pune is dissolved supposedly, right? And Aloha Lahue is in the new organization that they created. It's a group of people that came from the Natya Pune OHA that want to move the Natya Pune Constitution forward and want to ratify it. And so they created another organization. And they have an account with the Tides Foundation, which Emelah Luli, who is a Natya Pune delegate, sits on the board. So they created an account there. Who is the Tides Foundation though? Do you know what I mean? Is it a 501C3 or C4? Yeah, yeah. I believe it's, that's kind of like what they do is they help out organizations and they help them do fundraising and so forth. So they have about $265,000 in that account. And it looks very suspicious because where did that $200,000 come from? And then, you know, so we're thinking that, I mean, I don't want to say it, but it looks very suspicious. There's missing $200,000 from the Natya Pune OHA. And all of a sudden, the Tides Foundation has $265,000. I know $50,000 of it came from Pelotron, which is a company that works with the U.S. military. It's like they're taking military monies as well. They basically have no scruples in terms of who they take money from, what they say they will say and do anything to push this Constitution forward. What do you think is their driving? I mean, I've been on the other side so long. Good question. Like what? Yeah. Why are they doing that? I tried to get that forum, the AHA-Aloha-Aina forum. It was like, I'm not really, okay, we don't get any land. No. And it's race-based and there's no real political gain here that I can see, except that we're relinquishing the opportunity to redress historic rights. Right. Relinquishing. Forever. Right. So where's the game? Yeah. I think for them, it's obviously money with some kind of federally recognized nation, even though we're not going to have any land, there's going to be that opportunity to bypass state laws and city and county laws and basically kind of bypass all of them and just create their own kind of corporate partnerships. Without land, it just doesn't seem to make any sense. Yeah. Well, these guys are the guys that are making monies off the grants as we speak. Ah, off the grants. Yeah. So it's about grants. It's about monies. Okay. Let's take a little break and then come back and then maybe talk about some of the associations between the Hawaiian resistance and what's happening in North Dakota. Sure. Aloha, everybody. My name is Mark Shklav. I'd like you to join me for my program. Law Across the Sea on ThinkTechHawaii.com. Aloha. Hi, I'm Stacy Hayashi and you can catch me on Mondays at 11 on ThinkTechHawaii. Stacy to the rescue. See you then. Hi, this is Jane Sugimura. I'm the co-host for Condo Insider and we're on ThinkTechHawaii every Thursday at 3 o'clock. And we're here to talk about condominium living and issues that affect condominium residents and owners. And I hope you'll join us every week on Thursday. Aloha. Hello, this is Martin de Speng. I want to get you excited about my new show, which is humane architecture for Hawaii and beyond. We're going to broadcast on Tuesdays, 5 p.m. here on ThinkTechHawaii. Aloha, welcome back to Hawaii is my mainland. I'm Kaui Lucas and with me here today is Helani Sonoda-Pale, who is the founder of Protest Na'i Haupuni and one of the core members of the AHA Aloha Aina, which is a grassroots movement, really truly grassroots movement that is trying to infuse integrity into the process of Hawaiian nationhood, where a lot of other organizations seem to be willing to just sort of say, well, you know, nothing's going to happen. We just have to go ahead and be part of the U.S. system. So there is another way to think about it. Right, right. I think education is the key. And that's a big part of what the AHA Aloha Aina is as well. We do education in the community. We share with them that this is not the only path available to us. And we don't buy into that whole boogeyman. This is the last moment. We need to do it now or never, kind of explanation. I think the Hawaiian people need to be educated. We need to take the time to go out there and educate our people. And that's exactly what Ngai Aupuni and Kanai Olovalo has not done. They spent and wasted millions of dollars. And all they've done is propaganda and absolutely no education. And that is a travesty because that's all Hawaiian trust monies. Imagine if they took that $33 million that they wasted on this path to federal recognition and they went out and they actually educated Hawaiians on the overthrow, on what happened, on where we're going to go from here and what are our options. What really are our options? And if the option of independence is not one of the options, then we really don't have any options. Independence needs to be a choice as part of what that right to self-determination is. It's a human right recognized by the United Nations. It was basically a right given to indigenous peoples, 500 million indigenous peoples around the world in 2007 by the United Nations in something called UNDRIP, United Nations Declaration on the Rights of Indigenous Peoples. And in that declaration specifically states that indigenous peoples have the right to self-determination to pursue their political, economic, cultural future. So, in that case, to have the choice of where we want to go, we need to have the choice of independence as a real choice and not as a choice as put on the table so that they can debunk it. And that's what happened at Ngāiāpuni. They said, oh well you know all these people are independents but they absolutely did not take the independence faction seriously. They didn't take the, they basically put them in a corner and they didn't take it seriously. Basically what the path that they're going on, and they were in denial, denial, denial from the beginning that this process is not being tailored towards federal recognition and now we know that it is because they're taking this constitution and tailoring it and getting it ready for ratification and set up for the Department of Interior rule. Independence was not something that was on the table, really on the table. It was just put out there to say, hey, you know, we're considering it but it wasn't really considered seriously. So at that forum when the Robin Donner and Michelle Kauhoney were talking about, oh well having a nation within a nation or a federal recognition doesn't extinguish the possibility of hewing independence and I didn't understand that. That is totally false. So there is not one example of one federally recognized tribe or nation that has achieved independence, not at all.  So it really does hinder any kind of pathway towards independence and when you look at our history, we were never really incorporated into the United States, legally, by the laws of the US or by any law, really. Where is the treaty? Yeah, there was no treaty of annexation. We were annexed via a joint resolution of the House and Senate, the New Orleans resolution and even that wasn't an illegal act by the US. We were supposed to be annexed as with a treaty of annexation, not a reso. A reso only requires a 50% majority vote or, you know, 51% vote or more to pass, whereas a treaty requires the three-fourths vote to pass Congress and they weren't able to get the three-fourths vote, so they passed the resolution. So in terms of are we even part of the United States, we're really not. And what this does, and there's another level to this whole Department of Interior rule, is it finally incorporates us into the United States. So that's the insidious layer that when you spend time really going through the documents you find out, but if I'm reading the Star Advertiser, I really don't get that, or even Civil Beat, I don't know, Civil Beat's done a better job actually, but it's those really big issues for Native Hawaiians that don't seem to be getting enough daylight. Right, right. Yeah, and that's unfortunate. I mean we need more writers, we need more people to put articles out there and tell our side of the story. And it all comes down, this whole push for the Department of Interior rule and the Yopuni Constitution comes down to the two million acres of land that the state currently holds in trust for us. And because in the U.S. Congress, recognized in 1993, we never relinquished our rights to those lands or sovereignty over those lands. And therefore, this is a way, this is a process where they will relinquish, where a group of sellout Hawaiians like Robin Danner and Michelle Kaohane, Brendan Lee, John Whitehead Sr. will take, will basically sign that paper and say, hey, we relinquish all of this for federal recognition of a paper nation with no lands. And I don't know how they can really honestly believe that we can survive on Ko'olave. There's no hospital, there's no schools. There's no water, what are we talking about? There's no water. Right, it's just mind-boggling to think that that's all we're entitled to. And the Department of Interior has released a memo, I think it was in 2014, that basically outlined, hey, Hawaiians, you guys aren't entitled to any federally held lands. All the bases are sits on stolen Hawaiian lands, right, all the U.S. bases. The Northwestern Hawaiian Islands, 88 million acres. Let's not start on that one. That's all federally held lands that we will not be entitled to. You know, that's off the table and they specifically state in that memo, all you'll be entitled to is the Ko'olave. So, hey, Allani, this week also some of the Kōrāhoi and activist group have been spending time in North Dakota and I've been seeing more and more sort of interactions. Can you talk about that and why is that important? Why are Hawaiians fair? It's really important, I think. We stand in solidarity with North Dakota, Lakota and Sioux tribes of Standing Rock. We both have similar histories in terms of being colonized by the United States. I think it serves a couple purposes, but really when you look at how they're being treated, they're a federally recognized nation with a land base that's shrinking. It really brings it home. This is what we want for our people. Is this really what we want for Hawaiians, for Kanaka Maui? Yeah, do we want to be treated like that? Right. And also it's important to be standing in solidarity with them. We need to support them and they have supported us. A lot of us have made connections and created networks with Native American tribes around the U.S. The reason why we know that the Ngāiāpunī Constitution grant, the Lohālāhui grant that Robin Donner, Waihe'e senior, and Norma Wong is pushing throughout the Native American tribes is because we're friends with them and so they come back and tell us, hey, I got this grant and what should I do with it? I got this request for monies. So we've been kind of building those connections and those networks with them and I think even more so standing in solidarity with them. So explain how that grant money works. So who is getting the grant and what are they using it for? They're asking for $2 million from Native American tribes and organizations that support these tribes. To make Hawai'i a tribe. To ratify their constitution. They have a whole timeline. I saw the grant. They're looking at ratifying the constitution in October of 2017 and so they're hoping to, you know, once they ratify that constitution, that's one of the, in the Department of Interior rule, that was one of the requirements that they need to have a constitution that was ratified by no less than 30,000 kanaka Māori of blood, right? 50% or? No, and 9,000 of them have to be 50% or more. 9,000, okay. So by going to Standing Rock and talking to the Native Americans there and explaining to them that this isn't a process that we actually want. Is there some hope that there will be some support for independence or? Yeah, I think we have already built, many of our leaders that have gone up there are building that momentum and support and those networks for our movement as well. And you can see that a lot.  You know, we had Dr. Kalamani Hale go up there and she started the Council for Healers, Healer Council. Andre Perez is another leader in our movement. He's up there, you know, doing whatever he can doing training. Hale, there is so much going on. I do hope that you will come back and give us more updates in the future. Sure, of course. Thank you so much for trying to bring a little more clarity and having the other side come up to the service a little bit. Of course, thank you for having me.


studio. You have obviously heard the news by now the death of Kobe Bryant this morning in a helicopter crash in suburban Los Angeles along with his 13-year-old daughter and three others. Frank the suddenness of it absolutely hits you when last night the context we were talking about LeBron passing him on the all-time scoring list and today he's gone. Yeah and LeBron had brought up the fact that it's happening in Philadelphia where Kobe Bryant went to high school lower Marion came into the NBA as a child prodigy essentially and to be leaving us at the age of 41 still so young so much life still ahead of him. Well here's what has currently been reported so far. Kobe was traveling via helicopter to a travel basketball game with his 13-year-old daughter Gianna when the helicopter crashed in Calabasas, California near Los Angeles just after 10 a.m. Pacific time. Also on the helicopter where another child on the team as well as that child's parent the Los Angeles County Sheriff's Department confirming Kobe's death and said there were no survivors. And again it's hard to think Frank of the man in terms of the player and the 20-year-old legend that he became when you look at what's left behind. Yeah and you think about a player like this. I mean first of all it's simply devastating and shocking news really for everyone involved. There are five people who lost their lives including Kobe's daughter and a teammate of hers of two young girls perishing this horrible crash. But I think people need to realize you know Kobe Bryant you know one of the ultimate competitors one of the greatest players you need to understand how beloved of a figure he was in the city of Los Angeles certainly among Laker fans that's about as big as it gets a five-time champion he was loved in that city. Well let's get some thoughts around the NBA were joined by legendary broadcaster Marv Albert and Marv you've called so many of Kobe's games and great moments I just want to get your thoughts on what's transpired today. Well Bob my first reaction as I'm sure you and Frank felt the same thing you hear news like this and it's just it's just so sad and it it brought back memories of talking to Kobe at Staples earlier in his career when he said you know the traffic is just so crazy in LA so I'm going to go by helicopter he lived far out maybe a couple hours out so he was actually flying from helicopter practically every home game at Staples during the course of his 20 year career and as Frank said shocking is is one of the words you use but you just at first you don't believe it you double check it when you when you see it and I'm sure that's what everybody was saying is that true Kobe and his daughter now so it's just a horrible day. Marv this is Frank I solo you've called a lot of games with a lot of great players a lot of those Michael Jordan games when you went in we're going to broadcast the game featuring Kobe Bryant did you always kind of have this feeling I might see something pretty special tonight because Kobe Bryant is playing yes no no question and as you know he was one of those players because of his greatness over his career there would be games where he would not be hitting shots and he'd be 0 for 10 0 for 11 but it didn't matter you know he was going to shoot his way back into it and you just as you said you just didn't know what you would see that that particular night but what I was always so impressed about with Kobe was as highly intensity that he come out with and at first he wasn't a very good defensive player he was strictly offense but he became a good defensive player and he also after having let's say a complicated relationship with his teammate Shaquille O'Neal after that kind of settle down and then when Shaq was traded he became a mentor to so many of the young players on the Lakers so everything seemed to change with Kobe over the years although he kept breaking records along the way with his days you know and also had other interests as you know he even won an Academy Award where he came up with the best animated short film for his dear basketball so this is not just a guy who was playing a sport he had other things going too. Yeah Marv that speaks volumes about him closing the chapter on the NBA and immediately transitioning on to something else and winning that Academy Award it's kind of what we expected from Kobe right that he wasn't just going to be that X player sitting around that he had a lot more things that he wanted to accomplish. Yeah even in talking to him you know over the years you can tell it wasn't although he was so concentrated on basketball he was so intense about it that there were other interests even the fact that he grew up in Italy his dad was Joe Jelly being Brian who played in the NBA for the 76ers and then played overseas Kobe every once in a while would break into fluent Italian you know and how many players can do that aside from the ones who have been playing you know overseas but yeah he had so many interests you could talk to him about a lot of different things he was a different type of guy most unusual to see that from an athlete. Well so many great memories about Kobe Bryant today Marv we thank you for the time and sharing your stories hope to see you soon. OK thanks very much guys. You know Frank I'm listening to Marvin I'm thinking about what he's talking about the effect he had on players when he was young and learning to kind of be a good all around NBA player and then the mentorship that he showed later to players on the Lakers but with his competitive nature and his will to win that had to have a ripple effect across the NBA. It did and you have to remember too with Kobe Bryant you know all of his peers had tremendous respect for him as a player and a competitor. So did the coaches in the NBA. You're going to hear that a little later on. Just you know everybody wanted to coach Kobe Bryant because you knew he was going to play injured. He was going to go out there and compete all the time. He was going to help you win. And you brought up a great point about transitioning into a different part of his life. Last February I got to moderate a Q&A with Kobe Bryant at the NBA store as part of a serious XM NBA radio. And he talked so much about his daughter and her career. And we had that you know the video of him with his daughter Gigi at the Nets game on December 21st and you know you see it now and it's it's beyond where it's just devastating. What did you what was your takeaway from that. Just that you know he was able to understand like I've already lived like this important kind of you know public part of my life where I was a superstar. I'm now going to focus on my kids which all parents should do. And the fact that he was able to do it but still kind of remain this major star and you know and he became a huge advocate by the way for women's sports women's basketball the WNBA. And now this was going to kind of be the next phase of his life. And it's like I said it's just too sad. Yeah the shocking news started coming out shortly before 3 p.m. here on the East Coast and quickly spread from our sports family to the entire world. Not everyone was a Lakers fan but everyone was a Kobe fan a fan of a skill and a fan of his ferocious intensity. Kobe has inspired a generation of NBA players and while his life was cut far too short his legacy will live on for decades to come. Kobe Bryant again was 41 years old.


Now, ahead of the 2023 General Elections, INEC has registered 111,762 fresh voters in Adama State. Resident Electro-Commissioner in charge of Adama State Barrister Kassim, Gaidam, announced the development, stressing that 83,395 have completed the registration. Barrister Gaidam assured that people of the state that the commission has approved the decentralization of CVR to registration areas and woods on a rational basis. He also appreciates the matured responses from the electorate. The RSA, however, advised those yet to register to do so as the CVR will be suspended around June, preparatory to processing data in readiness for the elections. With the commencement of the continuous voter association exercise, faced online and later on the 19th of July 2021 in person at the state office and annual offices, according to 12 local government areas of the state, as on 7th of March 2022, a total of 111 registrants were recorded with 83,395,000 having completed their registration. All the milestones recorded include 2,903 reviews, 9,502 actual information updates, 14,000 transplants, 3,427 PVC collections. And about fresh news updates.