Hello and thank you all for coming. This is awesome. I did not imagine this awesome of a turnout so thank you for being here. And as most of you probably saw this is my first time speaking at DEF CON so I'm super excited to be here. So you might notice this is a really like fun slide. I have this throwback title and these pastel colors. Part of that is because I am going to throw a lot at you in this talk and we're going to try and keep it as fun as possible. So all of the information here is actually public information so hopefully you'll be able to take some things you learn here and learn more outside if you want to. So this talk is actually going to focus more on cellular core networks than radio access networks as much as is reasonable just so you know what we're getting into here. So you might have seen some of you. My Schmuckon talk which is on a similar topic but it does diverge in several ways so you'll still get new content even if you've seen that. So who am I? Well I'm Tracy and I'm clearly very loud. Hold on. I'm a vulnerability researcher at Trenchant formerly known as azimuth security and I previously split my time doing reverse engineering and embedded development. Well most of that was actually telco focused and I have about ten years of experience. So what are we going to cover here? What have you all signed up for? Well just to lay out our plan here I'm going to be talking about network architecture mitigations and public vulnerabilities or attacks for 2G in the form of GSM, GPRS, 3G in the form of UMTS, LTE, 4G and 5G in the form of new radio. So let's talk about this visually. Now I stole this image directly from the Wikipedia page for cellular networks. It's wonderful and it's a great Wikipedia page. But you'll see I've added our path forward here just so you can visualize where we are. Now you see along the bottom we have the year and along the top those are the different generations. Now internally to this graphic you'll see different terms and a lot of times people will actually conflate those terms with the generation but I'm actually going to try my best here to differentiate those two things because internally here we have things like GSM that's actually the implementation of the 2G cellular specification. So first let's cover a few basic cellular concepts. So we have a PSTN which is our public switched telephone network and that's your land line that is made up of copper telephone lines and it's circuit switched initially analog. So when I say circuit switched what do I mean? Well for me again I'm a little bit visual so having this beautiful picture of the Marvelous Mrs. Maisel helps me think about the concept of circuit switched. It's end to end unbroken communication lines. And we have our public data network, our PDN. And that's going to come into play more later on once we have our IP networks start adding to these telco networks. So let's jump in. Let's take a look at where we are in our timeline here. We're in the 90s with our implementation of GSM for 2G. And an interesting thing about this is that 1G actually wasn't dubbed 1G until after 2G started having a specification. So 2G in the form of GSM here but 2G is where we get calls, SMS, yeah we have texting, no data yet. And we have Etsy and GSM standardization. And this is interesting and it's still relevant. So I did want to bring up that for example in the US T-Mobile still uses 2G as their fall back and it's still predominant all over Europe. So let's take a look at our network architecture. We have our mobile station which is really just the device you speak into. It's any mobile device with cellular functionality for 2G. And this is your device. And this is going to feed into our radio access network. Now our radio access network is actually like what most people think about when they think about a cellular network. It has our antennas, our radios, our base band units. And in GSM it's actually the same as our base station subsystem. In our base station subsystem we're going to have our base transceiver station. And a lot of you have probably heard of base stations. Right? Well our base transceiver station communicates with our base station controller. Base station controller is a controller. It's going to communicate with one or more base transceiver stations. And that makes up our front part of our network. From there it's going to hand things off from our radio access network into our core network. So we have our front part which is our user end point. Hand things off to our base transceiver station. Hand things off to our base station controller. Which then communicates on to our mobile switching center. Our mobile switching center is going to handle most of the, well I'd say most of the functionality. Most of the mobility functionality.  And before I show them on the screen because it's a little bit much. Really the best way to think about it is a bunch of databases that contain information about users. Things like our home location register. And this is just a database of information about a local user. Meaning a non-roaming user. This is going to be things like their activity, status, location, etc. So it makes sense that if we have this for our home location register we're going to have a visitor location register. Right? We need the same information for visiting users. But this is a little bit more temporary. And then we have our authentication center. And our authentication center has things like secret keys for your SIM, your PID, and your puke, etc. We're going to have our EIR, our equipment identity register. And really what this does is says this is a list of valid equipment that can be on this network. So when a device goes from one mobile switching center's territory to another, there's obviously going to be a lot of communication between especially your visitor location register and your home location register. You're roaming and you're non-roaming users. So let's take a look at it all together. Whatever. We're rolling. So the user speaks into their 2G capable device. And that comprises our mobile station. The mobile station then sends the signal on to our base transceiver station, which then is handled properly by the base station controller. That portion of our network makes up our radio access network. Next it's going to hand things off to our core network in the form of our mobile switching center, which has all of these different registers. And then our global or gateway mobile switching center, which then reaches out to general external networks, things like our PSTF. So let's talk about some fun things. Now we have the basics established. Let's talk about attacks. So GSM does not have mutual authentication. And you probably have heard of things like IMZ catchers, right? So there are lots of things you can do with IMZ catchers. One most important is to understand that you can do a full person in the middle attack. And this is done by means of a rogue base transceiver station. And that is going to keep coming up. So fun fact about the base transceiver station is it actually is the entity that determines the encryption scheme so it can totally be like JK don't use any encryption. And fun fact, everything beyond the base transceiver station is actually sent in clear text anyway. There are also things that you can do like jamming, using a signal generator a specific frequency to interfere with either the user end point or your base transceiver station, as well as known weak encryption schemes. So let's move on to GPRS might be my favorite. Who knows? No, GPRS is great. You see how it doesn't really neatly fit into the timeline. It's got that weird cut out. Well, that's because it's really like 2.5G. And this is interesting because it is general packet radio service. This is where we take our GSM, our circuit switch functionality and add IP functionality. We get things like multimedia messages, push to talk over cellular and we have these two network architectures essentially living in the same network. So let's take a look at what that looks like. We still have our mobile station. You know, the same thing. Sometimes there are different terms applied to it, but we'll stick with mobile station. There's our BSS, our base station subsystem. That's going to remain the same with our base transceiver station and our base station controller. And then we have our MSC. And this functionality is pretty much the same as before. Wonderful. It still feeds into our gateway MSC. So this looks pretty familiar, right? Well, let's take a look at the new part. What's new for this? So we start adding our shiny packet switch features and the whole front end stays the same. But now we get GPRS support nodes. And these are pretty neat. We have things like our serving GPRS support node which has locations, security, access controls, packet routing and transfer, mobility management, authentication, handle signaling packets. And it's doing a lot of heavy lifting here. And it communicates with other serving GPRS support nodes or equivalent in the same network and reaches out to our gateway GPRS support node. Now this is a GGSN. So lots of people, including myself, say things like GPRS gateway support node or gateway GPRS support node. I'll try and be consistent. I make no promises. And it is like a router, firewall, gateway all in one, usually just viewed as a router. And it's our last top before our public data network. It assigns IP addresses for devices internal to that core network. So let's see it all together, right? That top part is going to look the same as before. We have our mobile station, our radio access network which has our base transceiver station, base station controller. And then it hands things off to our circuit switched portion still in our mobile switching center and our global mobile switching center. Now you notice something here that's slightly different though. It's those registers we talked about, right? Well now our circuit switched and our packet switched portions both need to consult those registers. So they're shared between the mobile switching center and the serving GPRS support node. And in our packet switched portion, we have our serving GPRS support node and our gateway GPRS support node. And that makes up our core network. So clearly there should be some lessons learned from 2G GSM. Let's take a look at those. We have some mutual authentication but only for the packet switched portion. We have authentication between the mobile station and the SGSN. So you can see on the network diagram where that lives. Some level of ciphering and some amount of identity verification.  Bit by bit we're getting better. There we go. And now let's talk about some fun attack vectors. Now look, we still have that same rogue BTS problem. And then there's this company called P1 Security who I adore and they've done some really neat research on telco networks. And one of the things that they have found is actual implementations of GPRS out in the wild with zero encryption anywhere in the network, most notably in Italy and Denmark. And there's a Nokia GSM attack that was actually pretty slick. It was able to be taken down or restarted, you know, which disrupted the GPRS network connectivity for a whole area of users. So remember where our GGSN sits, right? It's our gateway support node. So it sits right on the edge of this core network and reaches out to the internet. So this was done by sending non-standard IP options in a packet. And it happened by just sending this packet from the internet. It took down this whole area of users. And I will, okay. So I'm not picking on Cisco, I swear. But their threat bulletins were actually excellent in trying to find some of this information. A lot of core network features are not, you know, it's core infrastructure. They don't want to release things, but Cisco actually did a lot. So this gateway GPRS support node of the ASR 5000 series doesn't actually handle wireless session protocol packets correctly. So an attacker could craft a packet such that they could bypass a portal page, which means that they wouldn't have to pay to use this carrier. On the same device, it also does not verify or validate, I should say, HTTP traffic properly if there is one or more packets with additional bytes at the end of the packet. If you have specific padding, it just doesn't verify and it can go straight through the GGSN. All right, so let's talk about 3G. We start getting things like video chat. We're moving on to a new signaling method and there's much more internet functionality. Visually, it's kind of weird here, right? Our UMTS implementation is around the same time as GPRS is going on. So they're a little bit in tandem and here is where I'll mention the fact that none of these actual generations are standalone, right? All of these things are being used mostly at the same time. All of these things are still relevant. So let's look at a UMTS network diagram. And we're going to keep most of 2.5G. We still have those registers, our mobile switching centers, and the GPRS support nodes. We still need our base station subsystem, but now our mobile station, it's going to get a little bit rebranded to our user endpoint. This is actually the term that I prefer, so I will continue to use user endpoint here. But it is effectively the same thing as your mobile station. Our RAN, okay, cool. Well, UMTS has to be special, so they're going to apply this term, UMTS terrestrial RAN. It can't just be like every other RAN. And that's also known as our radio network subsystem. We also have our radio network controller. And this is in charge of all of our node bees connected to it. And it handles mobility management, radio management, and adds some encryption. It honestly looks a lot like our base station controller from before, right? And our mobile switching center states it changes functionality slightly, but we're going to sort of gloss over that till we get to something further on. So we have our mobile station which now is our user endpoint. We have our base transceiver station, and this has been now rebranded to our node bee. Our node bee then communicates with our radio network controller, which then hand things on to our core network, which looks pretty much the same. This is our radio access network portion, the previously circuit switched portion, and our packet switched portion. So what are some mitigations? Well, technically, we now have true mutual authentication. So this is mostly an attempt at MZ catcher mitigation. There's literal guidance. I love this. Not to keep the same temporary identifier for long periods of time, but there's not actually like in the specification a definition for that. There's a lot more confidentiality expected in our radio access link portion. And some signaling plate and user plane confidentiality. And security now it gets to be shown to the user. So if I am in 3G and go down to 2G, I should now see that on my phone, usually in like a little icon or something, right? Sorry. I have beautiful nails, but they're totally impractical. So looking at this attack vectors for 3G in the form of UMTS. Well, we still have this rogue node bee, formerly our base transceiver station. That still happens. It's getting a little bit harder, right? It has to be a little bit more targeted now. And there are downgrade attacks. And this downgrade attacks are still pretty relevant and they are going to continue to be relevant. And this is when a rogue node bee forces a device to temporarily downgrade its communication standard to a previous generation. So my example of 3G to 2G earlier could have been that, right? We have remote MZ attacks as well. And this happens because there are integrity keys between our user endpoint and our radio network controller. But those are actually generated in the core network itself. So the core network generates these keys and then hands them off to our radio network controllers unencrypted. And sometimes radio network controllers communicate this unencrypted as well. There's also HLR overloading. This is a neat one. There is a re-synchronization that happens between your user endpoint and your HLR, this home location register. And remember that to get to that HLR, you have to go through these other devices as well. And those devices do some heavy lifting. So what an attacker can do is repeatedly send this sequence value for re-synchronization and in doing so tie up the SGSN. So another thing that an attacker can do with this specific attack is a variant where they get a list of MZs for a particular mobile network operator, from a particular carrier. And then an attacker generates this radio resource control connection request. And that's for each MZ on this list of valid MZs for the specific carrier. Cool. And each request, the HLR, the home location register is going to say, okay, that's valid. So it starts computing some authentication vectors which really is a pretty heavy process for it. That means that nothing that's actually valid can get through to that HLR. And it takes down the functionality for legitimate equipment to reach out to it. Again, there's a Cisco SGSN, actually GGSN in this case, the ASR 5000 series. And it doesn't properly handle TCP packets. So an attacker could reboot the session management on this device on the GPRS gateway support node, causing a denial of service for all communications with this gateway device. Right? Remember that this is the last top between this core network and the wild internet. So let's move on to LTE, long term evolution. And this is in the late odds. So this is fun. I'm going to refer to it kind of as 3.95G. Because initially, you know, these standard committees were like, no, this is not officially 4G. It doesn't meet REL 8 or REL 9. But then after some careful marketing, they were like, okay, fine, we'll consider it 4G. It will just be like 4G LTE. So now 4G but then sometimes things are called real 4G, 4G advanced, things like that. But this is where we get the evolved packet core or system architecture evolution. This, this E in LTE is going to be everywhere. They're very into evolution. And we get fully IP based. So there's no more separation between our circuit switch portion and our IP portion. So let's take a look at what that actually looks like. We have our user end point. We have our E node B now, right? It's evolved. And our node B pretty much did the same thing. We have our mobility management entity, which is a lot like our radio network controller actually. It does bearer activation and deactivation, paging, authentication with your user end point and directs things to the appropriate other devices. Now we have this HSS. I tried to make it legible. That's what happens. Well, we have our HSS, our home subscriber server. And this is taking that home location register and our authentication register piece and putting them together. We also have our signal gateway, our SGW. And this, you'll notice in the network architecture, it looks a lot like our SGSN did, right? Our serving GPRS support node. It routes and forwards data packets. We also have our PDN gateway now. Our public data network gateway. And again, you'll notice that it looks a lot like our GGSN. It's the exit for outgoing and entry into the cellular network from the outside. It does our policy enforcement, our LI packet filtering, charging support, et cetera. And then right above it, we have this policy and charging rules function. I'm only going to briefly mention it because it really usually is part of that PGW, that PDN gateway. So what are some lessons learned from before that we can apply? Well, still trying at E node B security here. There's now some configuration that has to be authenticated and authorized to radio access elements. The IMEI, your mobile equipment identifier is not sent to the E node B until there is some level of security established now, which is actually a big improvement. There is now mobility management split apart in its own entity. And this is interesting and you'll see this through all of the network diagrams I'm showing. A lot of times things just end up being the same functions and getting reformatted, right? We're taking things like our HLR and our AC and combining them and taking other things and splitting them apart. So what are some attack vectors? Okay, there's this super cool paper called LTE inspector. And I put this here for LTE instead of 4G for obvious reasons. And they detail a lot of attacks. It's a very good paper. One of which is an authentication relay attack wherein someone can impersonate a victim cellular device and reach the core network without possessing any legitimate creds. There's also paging channel hijacking attack. Now paging channel is probably going to come up a few times here. It's a very interesting attack vector. I'm happy to talk about this after, I swear. And what happens here is we use our all time favorite E node B that is malicious, right? This malicious E node B utilizes the same frequency as our legitimate E node B and then broadcasts out these fake or empty paging messages. And this has to be done at the same paging cycle as our user endpoint and at a high frequency. But that's still not like too bad for an attack vector, right? So then a user endpoint, fun fact, only responds to the first message it's received here. So what happens is if that we have that malicious E node B broadcasting out these fake or empty paging messages, a user endpoint can't receive any valid ones from the mobility management entity paging. And from that, let me explain what that means actually. Let me take you along with this. So what that means is they would stop getting any notification of calls or SMS and if fabricated messages could be injected. So the next attack is sort of based on that with this panic attack. So paging messages are pretty important. When there's something important that happens in an area, your phone will reach out and be like, oh hey, like tornado warning, amber alert, things like that, legitimate reasons why your phone would alert you, right? Well, an attacker can inject fake paging messages to arbitrary neighboring user endpoints using these and cause a psychological attack, cause panic in a specific area through these paging channels. There are also some actual implementation errors. So let's dive in with some identifiers. I think I mentioned your IMEI. There are some identifiers, a lot of people in this room are probably familiar with your IMZ or IMEI. Well, internal to the core network, there are a lot of other temporary identifiers that get passed around as well. One of those for LTE is your GUTI, your globally unique temporary identifier. There was an interesting talk at network and distributed system security symposium in 2018 where implementation errors actually led to this supposedly temporary identifier being permanent. So this would allow an attacker to determine other identifiers. There's some great info leaks from this and whether a target user is actually nearby. There is also another Cisco device, I swear, not picking on them. So there's this Cisco public data network gateway, 2200 series and there happen to be maybe some issues here. Let's look at those issues. Well, there's an issue processing malformed header info. Okay. Like SIP headers, general headers. Hmm. Well, there's a problem parsing over long messages. Okay. Well, there's actually a problem processing SIP test request messages. Well, maybe that's okay in a real network. Hmm. They also have a problem handling session attributes and SIP packets in general and MGCP packets. So using any or all of these means what an attacker can do is deny service for the PGW. So what that happens through these means would be that this PDN, this public data network gateway, actually wouldn't establish any new TCP connections and will stop receiving TCP connections. On top of that, no new SIP connections will occur, though current calls won't drop. So a user wouldn't actually necessarily know this until further on. It also fails to connect to other services, things like SSH or HTTP or Telnet, which is often a type of service that would be used to service this device. So let's move on, let's cut that device a break and move on to 20 teens. It's finally time for 4G, for like real 4G. So this is LTE Advanced or LTE Advanced Pro. We get IPv6 expansions, adaptive modulation, time varying channels, Volte, and something you might have heard of, this IP multimedia sub system. Let's look at the network architecture and it looks the same, right? We have the same from LTE. We have our user endpoint, our EnodeB, our mobility management entity, our home subscriber server, our signaling gateway, our public data network gateway, and our policy and charging rules function. So let's move on to some mitigations. Clearly we've had some lessons learned from all of these things, right? Well, now all radio interface data shall be encrypted. Previously, the specification said that it should be, now it must be. There's also this aka procedure. This is an authentication and keying procedure. And this happens in order to have that mutual authentication between our user endpoint and our evolved packet core. There are different session keys between things. There are additional mitigations that your mobile network operator may implement or should implement based on the standard. So some attack vectors. Look, we still have this risk of IMZ catchers and this Cisco ASR 5000 PDN gateway. Now, there is a pre-auth remote attack that can stop ICMP traffic because of vector packet processing. What an attacker can do is send a malformed encapsulating security payload packet and stop all of ICMP over IPsec. It also handles GTP headers improperly. So GTP, I love, but it's this GPRS tunneling protocol. It's pretty key to a lot of the internal communications of that core network. And this PDN gateway doesn't actually validate it properly. So sending a crafted GTP packet to this Cisco PGW will target the session manager and the session manager can get restarted unexpectedly and deny service to a bunch of users. And again, I'm going to shout out to P1 security. They gave a talk at Hackbox and noted that some vendor that they won't disclose has MME keys that are just hard coded and they don't change regardless. They also found that there is an MML interface on a PDN gateway. So again, our last hop before the wild internet that is just totally exposed to the wide internet, this whole MML interface. So again, I highly recommend reading their research. It's very cool. So let's move on to 5G, right? Like this is now, it matters, everyone's interested. Let's talk about this change. This is where our network architecture is going to change significantly. A lot of times up until now we've seen things get shifted around, but it mostly does the same functionality. This is where things change because we get network function virtualization. And that happens because a lot of these functions are running on cot servers. So we also have this management and orchestration that is needed in the core network. So it's officially part of our core network. And this happens because we have all these things virtualized. We're just sending API calls and we need some kind of driver and that's this orchestration piece. We also have the concept of network slicing. And this is just creating logical networks over the same physical infrastructure. So a lot of that arises from the need that in 5G we no longer expect everything to be IP based. So we have different types of devices all converging in the same network. So we need different quality of service for these different devices. So network slicing allows us to have things like your smart meter, your car, your voice call, which all have different user expectations and network demands to be able to have those. OPS also our A node B becomes our G node B. So here is where we are in our timeline again. Shiny new radio. Let's take a look at this network architecture. Well first let me explain. There's a lot of new acronyms. We mostly have that E node B becoming our G node B. We also have access and mobility management function. Our AMF. And this is similar to our mobility management entity. Does subscriber mobility registration, some security. We have our SMF, our session management function. And this does session management. We have data network profiles, user plane function selection. If it is IP based, it will determine it's IP. Our user plane function and this also would have been part of our MME, our mobility management entity. And it is our anchor point for NG RAM, which is this version of RAM. It's just the same radio access network with a new label. We have our UDM, our unified data management. This is going to do a lot of that orchestration that I mentioned. It has access authorization, registration, mobility management, some data network profiles as well. And it mostly communicates with that AMF, the access and mobility management function. And our SMF, our session management function to determine what users can do or access. We also have our policy control function. Now this is slightly different than our PCRF before. This does dynamic policy decisions and conditions. Are there things in the network that affect the user conditions in the network or what can the user do? So visually, let's step through this. Because some parts of this are still the same. We still have our user end point. And now we have our G node B, but it's still, you know, receiving that signal from the phone. We have our user plane function at the end of that row. We have mobility and quality of service flow, policy enforcement. Above that we have our AMF, our access and mobility management function. We have our SMF. We have our SMF doing session management, communicating with that AMF. We also have our PCF, our policy control function. And above that we have our UDM, our unified data management. And you'll see that it communicates below with our AMF and our SMF, our access and mobility management function and our session management function. So it communicates a lot determining what users can do or access or a different quality of services. Oh also, our public data network is now often just referred to as our data network. And sometimes our radio access network is also just referred to as our access network. So what are some mitigations? 5G obviously has had a lot of eyes on it. And a lot of folks even considering security up front, I should say. So instead of just our MZ, now for 5G, we have our Suki and our Suppy. Our Suppy is our subscription permanent identifier. Another 15 decimal string. And we have our Suki, our subscription of subscriber concealed identifier. So these two identifiers combined are what get partially what get handed around through the network. But this was a means to defeat MZ catchers and not just rely on that one identifier being compromised. There's security and mobility separated in the core network. Larger keys. There are additional means to protect user messages. There is a counter to mitigate replay attacks. And there's this security anchor function. Now I didn't put that in the diagram because it's often actually co-located with your access and mobility management function. But it also allows for devices to move between different networks without having to renegotiate the full AKA, that full authentication and keying procedure. Now I know that sounds like maybe that's not the best idea. But part of this came about, if you think about our HLO, our overloading where we could have that start creating these authentication vectors and that would tie up a whole device, this was actually a mitigation to help prevent things like that. So some fun attack vectors. No key is head of product management security. Patrick Rude actually said at a talk that because there are so many different types of devices connected to 5G networks, there are 200 times more attack vectors than 4G. I think we're going to find out. So let's talk about this specific attack and I have so, so many references and I realize that these slides are being released, I swear. There is this very interesting attack where an attacker can sniff this AKA procedure. So this authentication and keying protocol, it's actually transmitted in plain text over the air. So this can be used by an attacker to determine the target subscriber's presence in a specific cell. How that happens is there is, we place a sniffing tool and monitor for an authorization request. From that, there's this response with this RAND and an AUT, right, these two values. From that value, an attacker can craft a message, putting those together, broadcast that out. And what happens is it's going to broadcast that out to a whole area. When it's not, the target user end point, it's going to fail some MAC checks, makes sense. But what happens when it actually hits the target victim's user end point is it'll pass that MAC check and it'll fail a sequence number. So it doesn't sound very sexy, but what you get from that is knowing whether a specific user is actually in a specific cell. Some more fun attacks. So there is a attach request injection. It's not, there are these attach requests that are sent unencrypted to the network. It's not integrity protected. And there's a point in the registration process that can be tampered with because registration process is actually not stopped if there is a failure, if there's an integrity verification failure. So the attach request can pretty easily be modified along the way. There's a battery draining attack and this is, I believe this is also a paging channel. So there are power saving mode, operation, like messages that can be sent from your mobility management entity, which here is our AMF, our access and mobility management function. So that would be a valid use. What an attacker can do is actually turn that option off and say that that can't go through. So then your mobility management entity, here are access mobility management function, can't send through a message that says turn power saving mode on, which means that the battery then drains five times faster. It's being used for things like signaling measurements and other modem activity. Yes, sending out form packets can still trigger crashes in the core. There are some fun stream reuse attacks where an attacker can masquerade as a valid network function, send multiple TCP streams and lead to stream ID exhaustion. Can also send a malicious stream close identifier in that same connection and cause a server crash still. And this is a fun one. It is documented pretty heavily in a paper I have in my references. There was this paper that did a bunch of processing of standard specification documentation with machine learning to find and end to end vulnerabilities and they found some very interesting things. One thing was some issues with paging, this attached procedure and some service requests. And what they found was that there were some issues with this mobility management entity, those specific messages and there was a confirmation by China Unicom that this has, this is a real concern. It's not just theoretical. Maybe it definitely happened. This was documented on CNVD and CNNVD at some point apparently, but it's very hard to find. So I encourage you to go find more. There's also some interesting recommended reading on this with piercer and torpedo if you're interested. So I know that was a whole lot. We have covered far and wide a lot of cellular technology. There are a lot of acronyms and I tried my best to break this down for you. But it's a lot. There's no way around it. We've covered 2G in the form of GSM. We covered GPRS, 3G in the form of UMTS, LTE, we covered 4G, we covered 5G in the form of new radio. We have done a lot here and I recognize that. So please if you guys want to have any future conversations with me, I highly recommend it. These slides will be out there. I do happen to have a 65 minute version of this talk that I also will probably be putting out there if you're interested, which you'll have a little bit more on the radio access network portion. Yeah. Here are some references. I don't actually know. Yeah. I'm about to get the hook. So I don't think we have time for questions. But I appreciate your time. Yeah.


There seems to be a war for your mind. Oh my god. I literally physically did not feel good in my body and I was like I got to get out of here as quick as possible. Today we're going to talk about the war for your mind that is currently going on. And I want to tell you a real quick story of kind of how this became something that I was aware of. So the other day last week I was in the paint store and I don't watch the news. I don't watch TV. I don't even have any TV stations that could come in. Got Netflix and YouTube. That's basically all I watch on my TV in my house. And I was inside of the paint store and I won't tell you what station it was on or any of this stuff. But what it was on was it was on a very popular talk show. I won't tell you which one it is. And it happened to be on a station that the talk show was talking about a lot of things that were very politicized. And every time we would go to the commercials the commercials would have a news flash like little break that would happen. And it was another thing that was going on right. And what I became aware of in this moment obviously I've known it. But to be able to actually see it I was in there for about three to four minutes. And I was like I wonder what they're actually going to be talking about. And it was so blatantly obvious to me that this station was trying to push their propaganda to make you think and feel a certain way. Now I'm not saying what station was any of those things but I'll tell you is no matter what side it is whether it's the left or the right whatever it is they are trying to have a war for your mind by throwing out propaganda in things and making the world seem a lot worse than it actually is. And within three to four minutes of being in there I became very uncomfortable because I was like I can literally feel how other people that don't know this is going on can think that the world is absolutely terrible right now.  And I've got to pick a side of what side I'm on. You know I've got to be on this side and when I pick a side this is important to know when I pick a quote unquote side that puts me on one side which means that there is always an enemy which is the other side. And it was so obvious that this one side was trying to push their agenda and push their agenda and push their agenda into somebody who is not aware of what is going on. They are going to be extremely easily influenced into number one thinking the way this side thinks. Number two seeing that there was a side that is against them that they need to be fearful of and number three think that this world is going to absolute crap. So there's a couple of things I want to pack out you know pull out of that and unpack. The first thing why is the news so negative and I've done episodes on this before in the past. The news is so negative because as a human our brains naturally go towards what is negative a.k.a. what is wrong. Why is that important because 10, 20, 30, 100,000 years ago when we focus on what was wrong we were able to fix it which then meant that we would stay alive because what was wrong 100,000 years ago could mean death if we don't fix it. So now what happens is the news in this media not even just the news now it's also just the media these stations then they disguise them as talk shows. They disguise them as TV stations. They disguise them as all of these different shows they put out there are out there putting fear and fear and fear and fear into people. And the reason why is because when you're fearful you're going to watch more because you want to find the solution to this problem. And the more that you watch these stations the more money that they're going to make off of ad revenue. If you watch them you're going they're going to get more ad revenue. The more millions of people that watch their shows their TV stations their news stations their you know talk shows all of those things the more people that watch them well they're going to make more money. So that's the first thing. So you've got to be very clear as to what you're watching and to be very clear is this something that is supporting me growing into the person that I want to be or is this something that's actually holding me back and keeping me in a fearful state. Just simple way to diagnose just ask yourself this question what I'm feeling what I'm watching right now. How does it make me feel right if you're watching TV and the news happens to pop up and you say how does this make me feel. And you're like I feel really worried I feel very fearful and I don't feel very positive about the direction of the world. Turn it off like get it off as soon as possible because that's not helping you create the life that you want.  Right. So the first thing to be very aware of is that they are putting fear into every person's out there because it's an easy way to control. The second thing that you have to realize is this and I'm once again before I go any further I'm not saying that the world doesn't have problems. The world definitely has problems in the world will always have some problems in some sort of way. There's 7.5 billion people on this planet. Are there a few bad apples out there.  Absolutely. There will never be nothing bad. I don't believe that will ever get to that point. What I'm saying is it is seems way worse than it actually is based off of number one. All of the cameras now exist in the world because everybody's got a camera inside of the pocket. The number two how it can be pushed over and over and over again through every platform through the news through social media through everything that you could possibly see. So our is the world perfect. No will it ever be. No but it's nowhere near as bad as they make it seem right. So that's the first thing to be very aware of. The second thing as to why would the media I don't even just say the news anymore. Why would the media the stuff you see on TV talk shows all of these things. Why would they put so much negativity and so much fear based stuff out there. Reason why is because the easiest way to control people is through fear guilt and shame. You say again the easiest way to control somebody is fear guilt and shame. Think about what's been going on the past year and how much fear guilt and shame has been put out into the media.  I don't I'm not part of any side just so you guys know I don't believe in any specific side. I don't think that there is a side to just go for. But when somebody picks a side as I said earlier once you pick a side you now have a side that you're against right. If I'm rooting for one basketball team if I'm watching a game and the Miami Heat are playing and I'm a heat fan. They're playing another team that other team I want to lose. So if I'm on one side whether that's the left or the right or whatever it is that people believe in at this point. I want the other side to lose and when I want the other side to lose. I'm losing and the reason why is because when you can when we're split up and divided. It's the phrase that we've all heard united we stand divided we fall. If we divide as humans we are easy to control. We are easy. I don't have a side right. I don't I don't have a specific side that's that that that I believe in or they think is right or wrong. I think there's different sides of both from but there's another thing that also is very important as well that people don't take into account. Is that you're seeing the world through your lens of the world based off of everything that has happened to you in your past right. You're seeing the world you think the way that you think you believe what you believe based off of the way that you are raised in circumstances that were presented to you in your life. Let me say that again. You think the way that you think and you believe what you believe based off of the way that you are raised and circumstances that life presented you with. So someone who doesn't believe the exact same thing that you believe and think the exact same way that you think is because of the way they were raised and the circumstances that life presented them with. So that's very important to realize. Who's to say that if instead of having your life, you had their life, that you wouldn't think exactly the same as them. So what I want you to realize is that we need to stop looking at other people and saying that's the enemy, I'm different than them. This is my side, that's another side. The only thing that we should be doing at this point is focusing on how we can love the other people. Now this is really interesting because I put up a video on Instagram talking about this the other day. And most people will in full agreement. Yes, we need to figure out a way to love more, to love more, to love more because the opposite of love is fear. Think about how much, if I don't like the other side, whatever that side is, it's coming from a place of fear, right? Love is the only thing that's gonna get us through all of this, right? There is no other way. Battling and picking sides will not solve our problems. Look at our government, if you're in the United States.  Oh, there's this side, there's this side. There's battling, all they're doing. There's no love at all in all of that, right? Closing off will not solve our problems. There is no other side that you can be on. The only side that you can be on right now or ever is human. You are a human, no matter where you're from, no matter what you look like, no matter what you believe in, no matter any of those stuff, none of those things matter.  When we are divided, we are easily conquered. If you look around and you don't see the things in this world that you currently, if there's certain aspects of this world that you don't like, I completely understand that. But fighting is not going to create something better. What's going to create something better? Figuring out a way to love more, right? To unite, not to divide. When people are united is when things happen. But when we say that's evil, this person's evil, that side's evil, what happens? We get divided. And when you divide, nothing's gonna actually happen. Nothing good is going to actually happen. Look at the past 100 years of how much division has happened in the past 100, 200 years, right? Does it look like it's going in the right direction? Probably not. If you watch the news, it looks like it's going in the wrong direction really fast, actually, right? But anything that you've tried to do in the past and put somebody into a box and anything that's happened has put somebody into a box of this is what you believe, this is what I believe, this is what they believe, divides people. And when you are divided, you are easily conquered. So what we need to do is figure out a way to love more. Let me give you an example of what I mean. As I said a few minutes ago, people believe what they believe and they think what they think based off of what has happened to them in the past, what life has brought to them and what they were taught, right? So I might look at somebody and say, you know what? I don't necessarily believe the exact same things that they believe, but does that mean I can't love them or find some sort of love for them? It might be hard sometimes, but it doesn't mean it's impossible. It means it's something that we got to work towards, right? So you look and you've heard the phrase, love your neighbor, right? Love your neighbor, love your neighbor. When we're divided, nothing's gonna happen that's gonna be good. But when we unite and we can work through our problems, we can work through things that are going on, that's when things actually start to change, right? So if I look at somebody and I say, okay, this person, I don't agree with much of what they said. Actually, I don't agree with most of what they said, but I didn't have their life. I didn't have their circumstances. I didn't have any of the things that they had. So if I was in their exact same shoes and I went through the exact same life that they had, would I think the same as them? And there's a possibility that I would, which means that how can I say I'm better than them and that my opinion and my stance is better than them? I can look at them and I can say, you know what? I don't agree with them, not 100%. There's some things that we definitely on other sides, but I can love them either way. Why can I love them? Because number one, I'm an empathetic person. We all have empathy and we can always be empathetic towards other people and what they've been through in their lives, right? Number two, if I want things to actually change, I need to be able to look at someone who doesn't agree the same thing as me and say, I can still love them through this. I can figure out a way for us to work together. That's the only way that this is going to work. And I can say, okay, if I come from a place of love when I go and speak to this person, they're more receptive to listening to me and to listening to my side.  And what they can do, they're going to build up their walls and they're going to push their side further. So if we really want to have an intelligent, intellectual, you know, adult conversation, maybe I should come from a place of love first and not a place from division and hatred towards them, come from a place of love and that would make them more receptive to actually listening to what it is that I have to say. Maybe that's a way that we can actually get them to change. Because if what they have been taught and what life has presented them with, what if I come from a place of love and present them with a different option and present them with something different? Maybe then that would change them in some story. Maybe it wouldn't. But in reality, I know that if we come from a place of love and everything that we do, life is going to be a lot better. And that's the thing that the world is missing. So what I want you to realize is that right now, there seems to be a war for your mind. You're in control of all of the things that you watch, all of the things that you listen to, all of the people that you hang out with, the music that you listen to, the media that you consume, whether that's visually, auditorily, the people that you hang out with, you're in control of all of those things and all of those things brainwash you in some sort of way. The question is, is it brainwashing you to become the person that you want to become? Or is it brainwashing you to hold you back and not get you to move forward? All I know is that when I walked into that paint store and I saw those three to four minutes, I was like, oh my God, I literally physically did not feel good in my body. And I was like, I got to get out of here as quick as possible because number one, I could see what it was doing to me. And number two, I could see what it's doing to other people who aren't necessarily paying attention and who don't have this knowledge as well. So just be, number one, come from a place of love. Be very loving in everything that you do. And number two, realize you're in control of the information that comes into your head. Be in control of it. Be very diligent about what you allow to come in your head. Number three, look at everyone else around you and realize that if I pick a side and if I become divisive, we're easily conquered. The only way that we're going to change this world and to becoming the world that we want to be is we have to first become that change. If we want people to get along more than they're getting along now, we need to first be the people who start getting along with people. If we want people to be more loving, we need to first be the people that are more loving. Gandhi said it, still makes sense. Be the change you want to see in the world. What do you need to do and change within yourself to be the change that you want to see in the world? What change do you want to see in the world and how can you take that and put it inside of you? There's a war for your mind going on. Be in control of what's actually coming into your head. Be in control of every thought that you think, every action that you take and come from a place of love in every single thing that you do. And I promise you, that'll be the first step towards a better world. Hey, thanks so much for watching this video. If you want to learn even more about mastering your mind, click right here and watch this video as well. Typically the people who follow me tend to be more optimistic versus pessimistic. 78% of the people who follow me think that the world is a ****. Yeah, I was super surprised by that.


Hello everyone! I'm back too! Tonya, could battles be later? And today... Oh no, they're there! Okay, we're good. Sweet, okay, so we are recreating the battle of Pelennor Fields. I've used pretty much all of the armies I could for this. Let's have a look. Starting... I mean, that's supposed to be Ministerith, but obviously, you know, that's the closest we can get. We've got this area, which is filled with Urikai, even though, you know, they're orcs, but it's as close as a kite again. It's not the ringsie. We've got troves. We've got catapults as well. There should be crossbows, so they have some sort of range. Oh, we also have the army of the dead, which are these guys. They're gonna probably take the longest to get there. Of course, with them, we have a Aragon, Gimli, who's seen better days, and Legolas, so that's cool. And then over here, we have the Easterlings. Close as I could kind of get. You know, there you have it. As well as there are Olyphans, and over here to our makeshift Gondor, we have Gondor Soldiers. These are Bowmen, and I think there's also dudes with swords and shields. Leading them, courageously from behind, is Gandalf the Grey, because we apparently don't have Gandalf the White, so... And these guys are set to guard, which means they won't rush in and attack. However, if a target comes close enough, they will run at the target. So Gandalf, I think, is set to attack, so he's gonna probably run just like a bustle through these guys, like, Come on! Kill him! Now, the strange thing with Ultimate Epic Valor Simulator 2 is that there's no cavalry. But thanks to mods, they brought them back. So we have 2,000 foot soldiers, and then we have 4,000 cavalry. So these are the ones from the first game that had to be brought in by mods. It's crazy! Oh, why did I just put it in normally? And leading the Mordor forces is Sauron! And of course, the Witch King, who's got a lovely little club there and a sword. Aren't you a pet? But yeah, this guy is probably the biggest difference. We'll just see how powerful it is, but I don't know! The favour is heavily weighed in Mordor's favour, just because there's 306,000 of them. And for the good guys, there's only 74,000. We'll see just how strong the heroes are in comparison to everything else. But I don't know, let's kick it off and see what they do. Oh, look at them go! They are making their way slowly over! That's because I've picked P! Oh, there they go! So, the majority of them, yes, they're all rushing forward. Okay, there's some... Oh, god, the arrows are already raining down from go on! They'll blot out that sun. Look at them! Where's Gandalf? He's going to be trying to barge his way through, I'm sure. Is he here? No? Gandalf? Gandalf? Yeah, I have no idea where Gandalf is! He'll be slowly, like, getting his way through. Oh no, hold on! No, no, that's nothing. Okay, the arrows are firing! Oh, there's Gandalf! Gandalf, no! Gandalf, it's not forbidden! Don't do it! Oh no, I think we're about to see a dead Gandalf, dude! Oh, maybe! Oh, I don't know! He's doing his best! He's holding the line! Yes! He has been absolutely sworn by Oricai! But, you know, he's providing a well and truly needed position of advantage for them. So, they're not running forward anymore. So, that leads me to believe that he's still in there. He's still doing good! They've sort of spaced themselves out a bit here. They're like, oh, okay. Gandalf, are you still there? Oh yes! Look at him go! He's making a pile of bodies! They just can't seem to hurt him! I bet, I'm assuming he'll eventually die. He will eventually. I think the reason why these guys haven't run forward is because these are also crossbowmen. Oh, yep, yep. And they sound beautiful as they fire their crossbows. That's why there's a big gap here because they can't get through anymore because the crossbows. Tell you what, that's some heck of a range on those crossbows. Oh, we've got Rohan coming in. I don't know where the olifons are. Oh, there they are! They're coming this way. However, where is... Oh, hold on, hold on, hold on. Oh, they're going around, they're going around. They've found a little bit of a way. Oh, no! The oryx have found a way to get past Gandalf! And they are now assaulting the Gondorian soldiers! Holding the line! There's only so much Gandalf could do! Is he still there? Oh, no! Oh, no, he must have fallen! What has he? No, he hasn't. I don't think he has. They seem to be... There he is! He's still going! He's coming strong, but there's just so much. They've actually managed to get past. Here we go! Oh, what! What! Oh, there's a troll! The troll!  This is interesting. So, they're being quite good about this. They're not all rushing in. They're sort of... Some of them are seeing that the attack can go... Okay! I will run towards the red mist! And oryx are coming over there, there. Oh, my god, they separated them. No! The dudes! Interesting, interesting, but... Is Rohan coming in? Have Rohan... No, they're not. They're almost here. They're almost there.  You're supposed to run quick. What are you doing? Why are you slower than the dudes? Oh, here we go! Here we go! Yes! They're taking some of the pressure, I think, away, but at the same time... Yeah, it's not looking good for those guys either.  There is still so many of these guys. Hold on! Hold on, they're going around the back. I don't know why, but they might have spotted something. Oh, there it is! The army of the dead. Okay, but they're going... Oh, yes! They're doing what I thought they would do! Oh, that's so cool! The elephants taking the beaten now! Is Gandalf still here? I hope he is. How are Gandalf's forces doing? Oh, it is red everywhere. Oh, no. Oh, no, there's going to be nothing left to save, guys. Oh, no, never mind. I think they're actually pushing them back. They are! Oh, I mean, I guess that's kind of okay. Oh, the elephants are just smashing them on the side of the cliffs. Oh, that's not so good. Oh, no. Oh, these guys... Oh, these are the only arches. The only... Wait, where's the swordsman? There's a f... There isn't any. There's no more. Oh, no. Oh, no. All the hand-to-hand combat dudes were over here. Oh, no, they've been killed! I think? Is there some left? No, the final stragglers! No! Okay, now there's... Oh, god, the elephants in the mix. Oh, what? How many did they kill there? They killed so many!  They need to take out down those elephants, but, um... I don't know how strong these things are. Are they just killing so many? Oh, it's a dark day for humanity, for mankind. The orcs are now coming in. I don't... Is Gandalf still down there? It's not looking promising. I think he might have died. Yeah, yeah, I think he's gone. Crushed underfoot. Gandalf's not looking too hot, guys. Oh, no. There's just so many arrows. Are they deflecting arrows? I have no idea. Yes. The horses didn't do anything, guys. They just all got shot by the crossbows. Maybe I've given the orcs too many crossbows. Maybe we need to tone down the crossbow. And now they're all... Oh, God. Okay, I see the dead. I see the dead over there, but there is nothing left of Gandalf. You know what? I'll put Gandalf at the top of the mountain. So he's got a long way to run down. But, uh, yeah, this is it.  Not a single elephant has died that I'm aware of. Maybe I'll turn... I think there's 20 of them, so I'll tone down those guys. But, yeah, yeah, it's the end. The last... That's dude's probably going to be this guy. They are just running in and absolutely annihilating. Maybe our archives are too strong. Maybe I should just do regular orcs. Uh, yeah. Yeah, and... Oh, no. Oh, he's not going to be the last survivor. No! It's this dude! Guys, we've severely hindered the forces of Mordor. We've halved the number of elephants. We've also given Gandalf, you know, a better chance. He's up there at the top. We've also taken 90,000 orcs out. And by 90,000, I mean archer orcs. So we've only got 10,000 of those. So over time, you know, every second, hundreds, if not thousands of arrows, aren't firing anymore. So that should play a big role. Maybe we'll see Sauron and the Witch King do something this time.  So I'm really excited. Let's go! Fight! Oh, off they go! Look at them run! Run to Gandalf! Oh, this is brilliant. We should just keep this on. This is great. Okay, the horses are already running. Are they making their way to Gandalf? Yes, the orcs are. That's good, that's good. There's still some crossbows in there. The ponies! The riders of Rohan! Off they go! Uh, there's Sauron. That's good. I'm glad we could actually see- It's like, focus on them. I should have kept it like this, actually. Gondalf holding strong over there. This is great. Oh, the Witch King looking to run in! Leading the best way! From the back! Horses slowly charging. They're going around. I don't know why they're going around. Oh, where are those? Oh! Oh, right. Okay, yep. I see- Oh! Gondalf's already firing. They're already firing. Holding strong, firing down upon... God, how many is it? It's like 10,000. It's like a- Oh, look! There's Gimli! They're going to go out and let go of us! How about dying side by side with a friend? Oh, there's the Witch King. Ah, this is brilliant. I love this. Uh, I don't know. I think that's Aragon there. Slowly seeing Aragon. Oh, the blood. The blood is there. There's Gimli with the ghosts. I hope they have good stats. I really do, because they seem to have just died. Oh, we're getting kills trickling in! For the good guys. Already 1,000 kills! Sauron. I don't know what he's doing. Oh, he's just watching. Like the eye he really is. The horses taking a weird formation, spacing out. Not a single kill for the bad guys. And 2,000 kills for the good guys. They are doing tremendously well. All the trolls there as well can't forget those guys. They've got massive air of effect damage. It'd be interesting to see where Gondalf's making his way. They haven't made yet. Easterlings coming in with the Mamul. Mamul? Some Mamul kills, I think they're called. Again, almost. Yes, 5,000 kills! And not a single good guy has died. This is brilliant. There's Legolas still running in. This is great. Rohan really doesn't know how to do the horses. Oh, 5 good guys have been killed so far. 8, 9, and 10. That's 10 good guys killed. 4, 10,000 bad guys. That's all the archers basically. Oh, there's too many of them. Oh, there we go. What are we doing horses? We've just spread out the entire map. And there it is! The clash of the good guys. 100 people killed now of the good guys. And 12,000 bad guys killed. Sauron? Where is he? Where is he? Oh, he seems to have gone the wrong way. Okay, ghosts still coming in. Haven't done anything yet. Oh, there's Ganon! Look at him go! He's just running down the cliff side. He looks like a blade. A blade. Okay. Okay, yeah. Kills stacking up for the good guys now. We've hit 600 and we've almost killed 20,000. The Rohan are just very unorganized and don't even know what they're coming or going. Don't know what they're doing. 24,000 killed for 1,000 human souls. Okay, I'm going to take control. I don't know where they are. They're this way. They're finally finding their footing. They're like, oh, we should be over there. The soldiers are much better organized than the cavalry. Cavalry don't even know what they're doing. There is 32,000 dead for sick. Oh, there's a catapult. Bam! I don't even know. They're hitting their own dudes. Okay, this is good. They've got the high ground. This is brilliant for them. There is a few catapults still shooting towards them, I think, unless they've been picked off by the archers. But it's the trolls that are going to make the difference here. There's a battle on multiple fronts. We've got the hilltop here, keeping them all at bay. Oh, God, look. There's, oh, the right side, the right wing. Oh, it's not looking good. They're being overrun on the left. Oh, and then the elephants are coming. The elephants are there. That's not so good. Uh-oh, uh-oh. They're really spreading their forces out. They're going to be outnumbered and they're about to be attacked from the back.  The archers can try and give some supporting fire, but it's not looking good. My milk. Yes, look at its butt. Slowly climbing. There we go. Another lovely shot of just so many things just falling. Gandalf, he got down. He's over there somewhere. Finally, Rohan has turned the forces of Sauron around. Look at him go. Look at him getting stuck in there. What a lad. What a charred. The ponies, the ponies are still not knowing what they're- They're getting there slowly but surely. Ghosts have not arrived yet, so I'm assuming- Oh no, they're starting to fire there. There they were. Okay, they're really spreading out now. Spreading out the forces thin. There we go. Turning them around, taking some pressure off of Gondor. But is it enough? The elephants have already made it. This left flank is strong, man. It's really, really strong. I don't even know what- I think this is them turning around to take on Rohan, which is great because if they do that, the archers can keep on firing. Elephant kind of just stuck. Doesn't know what it's doing, but that's good. Who's this? It's Gimli. It's Gimli. He's killing things. He's actually doing stuff. Oh yeah, look at that. They're just helping them. The amount of deaths. Oh, Sauron, where's he going? Where's he going? Oh, he's still at the front. Ponies. There we are. There we are. That's good. That's good. That's good. Doing something. Is this Gandalf again? It is Gandalf again. He's just keeping them at bay. Oh, an elephant's dead. Killed by the undead. This is brilliant. This is what we like to see. You're rooting for the good guys. You want to just see the elephants having no idea what to do. Oh, we got some crossbows. They do exist, but they're in a much lower number now. Oh, God. Really whittling them down. We'll see. We'll see. Maybe the other forces, you know, when the ghosts come, they can really take the pressure off. Can a single Gandorian soldier survive? Sauron has not seen any combat yet. Horses. Plenty of horses. Just dying. But, you know, they've... Oh, they've turned Sauron around. He's decided to go backwards. Ghosts still incoming. I want to see Legolas. Where's the Aragon? We're not focused on those guys. We saw a glimpse of Gimli. Oh, they are thin now. Very, very thin. Oh, the horses. It's the Rohirrim. The Rohan soldiers are doing good work here. Look how far they've pushed them back. They've done amazing work. Okay, who's this? Who's this? Who's this? There's somebody here, I think. Oh, it's the Witch King. Oh, no, it's not. It's Gimli. Yes. Go, Gimli. Yeah, look at him go. Nineteen, eighteen. Oh, it's brilliant. I want to know where the rest of them are, though. Where's Legolas? Look at him go. Oh, what, dude? Oh, where'd you go? There he is. Who else? Who else? Is there anyone else running in? They're turning them around. Oh, they're all coming down off the cliff. There's one ghost keeping him company, apparently. Being his bodyguard. Look at that. Look at them go. What a legend. All right, but oh, they're turning around. Have they killed everything? Oh, they just got stuck up here, those guys. I don't know where they were going. Oh, God, an elephant's in the mix now. There's a lot of archers, but not too many orcs left. They are just falling down, dying. Look at that, just pushing them up. We're winning. And there's an elephant just being attacked by a arrows. They seem to be flinging off them, though. The arrows are doing nothing. Oh, oh, I did not know this. I did not know the arrows cannot affect the elephant. So this elephant has just got to run amok. And that's not looking good because, yeah. The, oh, God, no, they need to turn and fire. Don't pay attention to the elephant's distraction. Oh, oh, no. Oh, no. This, this is the end, I think. I have a feeling they're going to kill a few. But yeah, it's not looking good. Not looking good at all. Here we go. We've got 23,000 men killed, 125,000 of the bad guys killed. But a lot of them are just distracted shooting him and they're not doing anything to him. There's so much blood at the bottom. And Rohan has been completely destroyed, I think. Yep, Rohan got killed. Apparently they're not as good as the Gondorian soldiers. Oh, no. Oh, God, I think it's the end of Gondor. It's a lot closer, this one. A lot closer. But we're seeing how this would really end. And it's not looking good for the good guys. I've got to admit, they killed a lot more. And that's it. The ghosts are piling up. They're using the paths. That's very good. The last strike. Oh, God, that's alive! Saved by the ghosts. Oh, there's Sauron. He's still there. Dude's getting closer. There's Gimli. The only hero I think he's still alive except for Gandalf. And apparently they're coming down from the cliff, so I have no idea how that happened. Oh, there's Gandalf. I see his pointy hat. He's stuck. He's queuing. He's queuing. Yep, there he is. You'll never, you'll never see me. Oh, we should just never let. Nor is he seen. Oh, there's Gimli. Oh, no, that's Aragon. Aragon getting in there. Brilliant. He's still alive. I don't know where Legolas is though. Yep, there's the front lines. The ghosts and the oryx. Are we seeing anyone here? No more ghosts? Oh, my God. Oh, Sauron. Oh, that looks so cool. That was such a cool shot. He is, I mean, it depends how strong he is. Because he might get lots of fire. And that's obviously going to take away from every bit, like all the others being attacked. So if he just draws the fire, then everything, yeah, everything else won't have that happen to it. Oh, there's Aragon. Yes. Look at him go. What a hero. He's still alive. He's still kicking, getting stuck in there. That is realistic. Motherings just absolutely covered in blood. Oh, my God. You know, he's being tactical. He's, he's be backed up by the ghosts and he's slowly killing them one by one as they trickle down. However, I don't know how much of a good tactic this is. You know, they, they do have the high ground. They're retaking Condor for the dead. Yes. Look at him go. They're just falling around him. He lures them in. And he goes back. Oh, no. Yes. Yes. They're up to the crossbowman. Oh, rinsed. Here we go. Look at him over all the dead boys. Like, wait, where's Condor? Where's Condor? Look at that guy. He's picking it. He has no idea what to do. Is he going to get killed? There it is. What a legend. And now Aragon doesn't know what to do. Humans are all gone. Oh, oh, there you go. He's doing it still. You say one by one. Wait, how many? There's only 104 remaining. 97 troops remaining? They've done it. These are literally the only remaining orcs. We still have 42,000 of the ghosts. Wow. Yep. They're literally just running them down. Yes. That's right. Run away. We did it. We won. But at what cost? Rohan has been defeated. Condor has been defeated. The only ones who have survived are Legolas, Gimli, Aragon, and Gandalf. The Witch King died. Sauron, I'm assuming, has also fallen to the ghost somewhere. Oh my god, who's running after him? Oh my god, it's Gandalf. It's Gandalf. He wants the last kill. He wants the glory. He's way faster than the ghost. Look at him go. This is it. This is the end for this orc. He knows it. What a terrifying image. An old man running towards him with a stick. Go, Gandalf. You got this. Pace yourself. Cardio. It's Cardio. Oh my god.  He's going to get him now. He's going to be over. There's one more last sprint. The orc's stuck. And oh, he's going to get him. Victory. Well done. Gondorian won. Just like he said in the book. Anyway, guys, if you enjoyed the video, leave a like. And until next time, I'll see you guys later. Oh, bye-bye.


Good evening friends, this is your host to welcome you through the creaking door into the inner sanctum Well, I put it myself over to a traveling freak show this afternoon You see how the competition was doing Ran into an old schoolmate fascinating fellow we once voted him most likely to succeed He did and how? He's a high man in the snake pit A frightful accident happened near the squirrel cage the peanut concessionaire went up in flames Yeah, some joke had given him a heart for it But before I left the the owner offered me a very lucrative job Pick any cage you like he said I Told him I'd think it over sometime When I got my mind back Tonight's inner sanctum mystery the corpse is lonely was written by John Robert and Stars Larry Haynes and the role of smithy with Barbara Weeks as Julie And now for tonight's anguish We're on the ground level of an old abandoned lighthouse on Jelico strip a Narrow isle at two miles off the North Atlantic mainland It's the exact instant a sputtering fuse his is close to a wooden box that reads danger dynamite Near the box lying days the two figures Julie a boy and a girl Julie The boy rises staggers unsteady to reach it out frantically toward the unconscious girl. Hey get up Julie will be blown the pets The hundred-year-old lighthouse lies toppled in a crazy pile of shattered stone One figure lies outside it Flung clear of the wreckage in a freakish whim of the fates one figure the boy Blood spurts from head wounds and mixes with the sand under him His eyes open slowly And he stares in a slow circle Away from the lighthouse as if trying to find it his eyes fix on nothing Julie Joey I can't see I can't see I'm blind All right, my story on the wind Yes The short happy story of Sneddy Lonegan it began with an old green bottle on the beach Only yesterday The not all day casting for seabass and an old rowboat rigged up with an outboard motor Well, I'd had enough I ran the boat up on the beach Except for the seagulls. I was alone. I thought It was a beach at the tip of nowhere a four-mile walk from town I just dropped my anchor when I saw the old green bottle lying on the edge of the beach like it had just been washed to sure There was something inside it rolled up And the metal stopper that took every ounce of strength I had trying to pull it free Let me give you a hand Who are you? Sharky You don't need to look so green.  Well But wait, where'd you come from just now? I didn't see I was watching you from up on the dunes. Hand me that bottle There just takes a little muscle now. Let's see what you found kid She'd have paper looks more like old parts. Yeah Coin with it Old green coin looks Portuguese to me. No, no It's American It's an old gold coin where what do you know? $50 gold piece at that Yeah, what does the paper say? Well, it's old script hard to make up. Don't give me that stall make it up Well, wait it for yourself. I don't I don't read. Oh, come on kid. Come on. No need to get your back up. I can Make out the words One third to the lady Jane One third to the croaker And one third to the sea One third to the lady Jane One third to the croaker One third to the sea What is that double-talk me? I don't know There's a signature on it Captain crow That's a that's all there is And I sticking out all over your face kid. Oh, what do you mean? There's more on the back of that paper. Give it to me Part of a map This is the third of the map that went into the bottle you fetched out of the sea The second piece went to some lady Jane and another third to the croaker You get the three-thirds together and you got a map leading to a lot more than gold Now look mr. Sharky. I found the bottle and you're horning it. Oh kid. I'm not horning in I'm taking over map gold piece Right in sharky's jeans Yeah, you don't like it.  I'm gonna hike to town. Tell the sheriff. You bet your life I am kid. I never yet saw a dead man walk to town any town Yeah You're gonna kill me Sharky no the map is all yours. That's why you're blabbering around town.   He stole from me out of his pocket.  I don't like liars.  All right It's an old gold coin There's a letter and part of a map part of a map that leads to more gold coins Was that the way Sharky figured it? Yes, and that's how I figure it We're partners. Mr. What's your name? Smitty We're partners Smitty Now help me dig a hole for Sharky partnership is out Julie. I'm on my own. This rifle says otherwise I Just traded in Sharky for you handsome I dig that hole and start chasing down the gold The gentler sex Whoever coined that phrase never met Julie Well, I went right to the one source that could tell me the most about Captain Crow the signer of the old letter I found My informant was a peg-legged old man called Uncle Cale the village record keeper Captain Crow, huh? Funny you should come inquiring about him. Well, uh, I'm writing a book on New England History there there was a Captain Crow It was until the county hung him 20 years ago about the time I lost this leg How come you say why? Well piracy was only one of the reasons Crow had put out the signal flare lit off an old Jelico lighthouse so that pass and ships had ran into the rocks and sink. Oh, I I guess Captain Crow's scheme Met at him quite a lot. I reckon it did Everything floating to shore with salvage and Crow knew just where to lay waiting for it What went down Crow went down after diving suit. Yep, and grappling irons. Oh, I suppose he came by a lot of gold that way Yeah, I can't say he didn't There was talk once about a gold shipment that never got past them rocks off in Jelico lighthouse. Uh-huh. I Uh, I ran into a couple of funny names connected with Captain Crow I wonder if they make any sense to you and fire away Lady Jane and the Croker Lady Jane and the Croker Now where did you come by them around they mean something? They're right here in my records in the last will and testament old Captain Crow made out before the hung him I Remember reading them names like it was only yesterday. Can I uh, can I see the will? Yeah, I guess you can you'll be in the book right there. I'll go scout it up I've got it right here And my old Captain Crow himself and I see what it says ships clock grappling irons a diver suit windlass a rocker a picture of Lady Jane And there's one of your questions answered son a picture of Lady Jane Yep, a hand-painted picture of a sailing boat went to his sister right here in the village the way he wanted it Hester Crow's got the picture now hanging over a mantle What about the Croker? The Croker is written down here as a stuffed parrot stuffed parrot Who did Captain Crow leave that to his brother Tom? Yeah, Tom's got that stuffed bird sitting on the table in his parlor right now. I've seen it there See you want to hear the rest of what crow divided around in his will no, no thanks. I I know all I want to know Thanks Hester Crow and Tom Crow The surviving brother and sister of old Captain Crow I had two stops to make To pick up a painting of a ship and a stuffed parrot Yeah Pick them up somehow Buy them if I could steal them if I had to Hester Crow's cottage faced the scene as a deserted corner of the village Picking my way up a short flower path to the weather beaten front door.  It's kill or be killed How'd you know to go after Hester Crow was outside the window listening to you pump that record keeper?  I couldn't And I'll have to do it for you. I'll get that Lady Jane picture down rip off the back well Is it there or isn't it? It's there Another one third of a map that proves the letter in that bottle with the McCoy.  I'll go get that stuff bird.  I guess tears Outside the town limits here Where you from inland away a fall river on the bum sort of I'm between jobs and thought I'd like to get a little fishing in before locating again fish biting some What line you in when you work? No line, especially soda jerking odd jobs Been into the village lately Yeah, I thought I'd look it over why there's no reason especially You got any objection to look at it over some more me showing you around Do I have to maybe you do Got no reason not to want to have yet. Oh, no, why'd you ask that? There's no reason especially Old Hester crow died mysteriously last night with that shot and bother you any Didn't even know the old lady. Did you know I didn't if you're ready now we'll go and if I'm not ready now Then I'll have to take you in Son, you're Julie I don't see nobody show show From over the dunes Julie showed I Watched to come down the dunes a Rifle aimed and ready Pointing at the olive skin little guy and piloted the motorboat for the sheriff Sheriff change his mind handsome. He's dead He came to arrest me for the murder of Hester crow. That's all your knees knocking from up there Good thing for us the sheriff came along good thing and how they got a real motorboat now in a pilot with it You there. What's your name? What do we need a motorboat and pilot for get to Jellico lighthouse and get that gold Jellico lighthouse? Yeah, here's the third of that map that was sold in the stuff parrot Put the three pieces together and read it for yourself. What happens to the owner of the stuff parroted crow You just gotta know, huh? Read the map According to the directions in arrows There's something buried in the foundation of the Jellico lighthouse and there's something gold To get at it We'd have to take the whole structure down that means wrecking equipment. It's too big a job for you sure quit easy What's wrong with dynamite in the lighthouse? How do we get the dynamite by getting it? Pedro come here. Yes, you know that you want to stay alive. Oh, yes, yes, you know that Then tell us where to layer our hands on a box of dynamite. What's in your head Pedro do not know Pedro had better know Pedro did know We watched Pedro steal a box of dynamite from the private here the county construction company. I Have stole the box of dynamite, so you have Let's get out here. It's straight for the Jellico lighthouse Pedro as fast as you can push this tongue The Jellico lighthouse is over there, Senora on that little island see I throw the light on it I see it the lighthouse is abandoned, isn't it? Oh, see Senora for a long time. There is nobody in it Stop the boat here here In the middle of the water right here Turn around Pedro for four do as I say surely Pedro's house is one of you's got to go handsome. I Can't keep an eye on both of you in the dark and on that island at the same time I'm only a helpless woman Which would be smithy you are Pedro Go ahead make it me You'll kill me anyway sooner or later. Maybe I won't Ready for a Pedro see Senora if I have to die. I am ready Thank you, Senor for trying to save page We planted the dynamite in the ground level of the Jellico lighthouse during the lashing day Pencil strips of moon shining on Julie's face look like Tigris stripes There was a crazy gloating burning in her eyes. Is it all right handsome?  Let's not get out of here.  I couldn't bring her to a drag myself out in time I'm here now on the beach Blinded by the blast Writing my story on the wind Son you find that code yet Uncle Calo, how'd you know to come here? I was the one who sent you here You sent me oh Sure You gave me the lead on On what lady Jane and the croaker meant more than that I Was the one who drew up that letter and map and put it into that old rum bottle for some Scavenger to find on the beach. I don't get it old captain Crowe never had me gold It was me that made you think he had by forging them writings on an old paper I tore out of a book by hiding pieces of a map in the back of that picture and in the stuff parrot Why did you do all that payment for my leg? The leg I lost all sounds crazy I lost my leg in the service of the county, but not a cent come to me for the loss I was to get my pension from the county board Except for two votes going again it two votes That's the crow and Ed Crowe voted against you. They did may they squirm everlastingly in their graves Your scheme was to get them murdered by someone who was after the pieces were mapped you planted in their homes Yeah, and it worked Jim dandy What? Why did you come here now?  Someone Waiting to meet me where I'm going she Swap chalky for me I got rid of her once but I'm afraid She's gonna get me this time What do you bet now that he's crossed the great divide smithy's troubles begin to multiply Julie won't take no for an answer especially now that you know smithy's a real gone guy Did somebody say uncle Kale gambled a $50 coin and hit the crack part But what do you say we close this merriment with a moral everybody When bottle washes out of the sea don't pull the stopper sucker You might blow your own top Be with us again next week at this same time for another inner sanctum mystery This program was heard in the United States over CBS the Columbia broadcasting system and has been Re-broadcast for service men and women overseas This is the United States armed forces radio service voice of information and education


What is going on guys welcome back to the channel critical overload here to talk about halloween ends in this video here today? So recently I got done watching the halloween kills extended cut. I'm gonna rewatch it again. Just to have a better experience as I had some distractions around me while I was watching it but jumping into the topic of the halloween ends discussion so in the Commentary I guess because I didn't listen to a commentary But David Gordon Green apparently made some comments about the radio tower from halloween kills playing a sick Being a something of significance that plays into halloween ends. So I Know in the past there has been Discussions about this. I I've seen the talks of Brain waves and how we could have or just how frequencies could affect the brain I've seen that talked about over the years of my lifetime and With the whole radio tower and the fact the movies titled cave dweller There's a chance that maybe he is Michael Myers That being has been living near a cave by the radio tower for the past four years during that time jump between halloween kills And how he ends and that's where the radio tower come into significance Or could this radio tower actually be what they used to unlock some of the answers as to what is keeping Michael Myers going? What's making him tick? What is the source of his evil? Because if they do that that would also be a way to kind of slightly turn a piece of dialogue from the original film That I don't know the exact words but I know dr. Loomis was the one who said it They could turn a bit of that dialogue into slight foreshadowing with the whatever they come up with if this again is used as a source of what keeps Michael Myers going and Maybe there's something that happens along the way where we find out that Michael Myers is in fact being affected by Something going on at the at the radio tower that we see in halloween kills, which we actually see that a couple times I know we see it during the flashback the 1978 flashback Which again was brilliantly done in terms of how they recreated that Myers house. We see it there I think we also see it again with him and Cameron during an interaction between we're not with Michael and Cameron at one point with Cameron and a few other times in halloween kills So the radio tower playing a significant role or having some significance for halloween ends that could also be where Michael dies in the sense of maybe something happens where Michael ends up Going on top of the tower and he falls to his death and we just never see or hear from him again Maybe the way they do it though is just something that's very up in the air Even though you see this this man who's till from what they're telling us is not supernatural Even though you see him fall from that high up depending on how high up he is Maybe there's some comments made afterwards and like some slight voiceovers from other characters Talking about how you know evil is never really dead and then you the audience are left to wonder Did he die from that fall and you know for you never get your answer because they're not going to revisit this timeline ever again This could be where Laurie Strode dies this could be where Allison Nelson dies The radio tower could just be a moment in the film where Michael decides You know I'm gonna disconnect all types of communication possible between Haddonfield and whatever's nearby you won't be able to Reach out for help to anyone There's a whole lot of stuff that this radio tower could be playing significance with if they do decide to use it as a source of his Origins in a way, then what I think they should do is not explain too much Leave the I would want them to take a more elevated route I would say kind of like with the shining with hereditary and with a lot of other modern more modern horror movies like Mostly from 824 where you have all of the ingredients and you the audience Can put together any coherent narrative of your own that makes sense based off and backed up by the clues that are Provided along the way throughout the film You don't have to have a once a one answer to what makes Michael Myers tick You could have all the same ingredients though and it could all be backed up by those ingredients and all the clues That are left along the way in Halloween ends They don't have to come right out and tell us, you know, this is how the radio tower is connected to Michael Myers This is what's happening to him. This is how it's affecting him This is why he's been like this since the age of six. This is what prompted him to kill his sister They don't have to go that in depth They could just leave it all up to you the audience to interpret and it could just be another way to just keep the Conversation going just does not have anything ceasing as far as like conversations about what is keeping Michael Myers going What is what is keeping him going? What is making him tick? Why is he the way that he is because even when you give out those answers like with Halloween 6 the curse of Michael Myers You're kind of putting to bed all the talks of well, what makes him tick with Halloween 6 I feel like the more you were discussing out coming out of that though was that did that really make any sense? Did they did they explain that well versus with Halloween ends if you just leave it all up to interpretation? but everything that you give us to go off of puts us in a Scenario where we can have many different In results for people to consider as to what it is about the radio tower that contributes to what keeps Michael Myers going If they take that route that you leave just another room of discussion open You know, you don't close the door on discussions about Michael Myers origins completely But you have provided enough for us to understand that that plays a key factor Some of the events that unfold throughout the film could also tell us yes This is what is happening, but you don't outwardly come out and have a character give you a Overflow of exposition dumping I would say or just over explaining it to the point where now well It's not up to interpretation This is what it is and you know, you might have a section of people who don't like it Versus some people who might like like me who might point out how that doesn't really make sense because you probably should have done it like this But still backing it up with the same clues Which is why it's probably best if you just leave it up to interpretation which could lead us to a plethora of different logical explanations that you didn't outwardly explicitly say but It could be backed up by the clues that you give us along the way in Halloween ends the radio tower and what Significance it could be again It could just be a location in the film where something big happens Maybe Allison has because I've talked about how Allison should be the final person standing when it comes to The legacy of the strolled women it should not be Lori strolled It doesn't mean Lori strolled has to die or anything like that But I feel like Allison should be the one doing the killing blow or putting into action Whatever whatever takes Myers out of commission whether that be us actually seeing him die or us just seeing him presumably die But then it's left up for you to doubt if he actually died or not I think that should still come from Allison. She should be the one taking back the narrative taking back Whatever trauma she has been enduring over the past four years PTSD and getting revenge getting justice for not only her mother Her father, but also her grandmother who again, she doesn't have to live or die for this to happen I just think the person who should have the final say against Michael Myers should be the youngest out of this batch Which is Allison who can go on into her adulthood into the rest of her life? Confidence knowing that her grandmother was not crazy her grandmother prepared her and she protected her grandmother Or she did something that just lived up to her legacy if Lori dies But let me know what you guys think about this down in the comment section below What do you think the radio tower significant is if you haven't already of course make sure you subscribe turn on post notification I missed the video in the description. I have links to my social media accounts my Facebook Twitter and Instagram You can message me there of course to let me know if there's any movies news or if you'd like me to cover in the future With all that in my guys, I will see you in the next video