What's going on y'all? Welcome to the single guy channel. My name is Lloyd So we're gonna talk about a subject that I see on the internet all the time I get emails about this and why do women leave good men? I mean, let's be honest men leave good women women leave good men But why is it? Let's we've all been there. You probably are thinking of a certain example maybe someone in your life a friend loved one whoever it was who they did everything seemingly right in the relationship and You know the girl still ended up leaving them. Well, okay I can't predict every single situation there are times women will make a legitimate mistake for weird crazy reasons Maybe she's insecure. Maybe she's not ready for it right then and there Maybe she sabotages everything on purpose in their life women do this all the time by the way They sabotage a good thing, but are there times where a guy who seems like a great guy has everything going on? Will an intelligent well-mannered mature women leave this person and the answer unfortunately is yes I have seen this happen, you know There was a smart girl who was with a guy who I knew who they stayed together for a very long time And this guy did everything for he was a very nice person, you know, he took care of the kids He do the chores every single day everything she asked he would do He was like basically the perfect husband and all shapes and manners in terms of that and she still Left him and to be honest. She really didn't feel that bad for him They were together for like maybe 10 15 years or something like that and when they did leave and he was totally devastated And you know, he took him he's still Still recovering from it. Why is it that she did that, you know, why would she put him through something like that? It wasn't fun for her as well, too Why would she go through that? Is she just a really evil not good person? I Don't know. I don't I'm not gonna say whether she was good or bad But I can't tell you why it happened. Do I think could have been handled better? Absolutely, though, you know, like these things happen. You could probably think of an example in your own life Why do these things happen? So what I'm gonna be talking about in this video is I'm gonna be talking about Why these things go down and what you can do to make sure that the situation that happened with my friend Never happens with you, you know, it really pained me to see more guys being put in this position because it's happening more and more You know when it comes to relationships Marriages especially two out of three divorces are instituted or instigated by the woman meaning the woman is going to the guy and Demanding a divorce and a lot of times the guy's blindsided like my friend was and he has no idea No idea why this happened even though he seemingly did everything correct Okay, it really comes down to Desire if he's doing everything right, you know, most women say they want a kind generous Caring affectionate, you know supportive Husband and all that stuff when you actually Look at all of those qualities, you know, my my friends seem to have them There's something missing from this list of qualities that women are looking for okay Yeah, maybe his confidence could have been a little better, but it wasn't bad enough that it was a It was something to be worried about it was they don't talk about What it means to be a man Women are into men they desire men But when you start doing everything that your partner or you start your girlfriend or your wife or whoever It tells you all the time and you're just this kind of obedient docile little puppy you stop being a man and Although you might make her happy in that moment Although you might avoid an argument although you might make Mike your make your day just slightly better at that time You are slowly killing your desirability.  That's why they're staying with him They're staying with him because he's acting like a man or he is a man. They see him as a man They see him as someone that they desire they do not see a guy who does everything they tell me They can walk all over him disrespect him Continuously especially in public They can't respect that guy and as a result they won't sleep with him in a relationship in a marriage in all those things You have a decision at certain times to either be liked or respected Too many guys are picking. I want to be liked I want my wife or my girlfriend to like I don't want her to get mad at me I just don't want to get in trouble the I don't want to get in trouble guys You might win that battle you might escape an argument But you're losing the war Again and again every single day with every decision that you make that goes in that favor And a lot of times you know what these situations are Sometimes she's getting out of line sometimes the person that you're with is acting totally and appropriately Do you just let it slide? Do you let her talk badly to you? You have a decision to make at that point. This is my opinion In relationships and in love and in and all that stuff I would go for I would go for respect I would try and be someone that you your wife your girlfriend can respect Men prefer respect women tend to prefer love Okay, and there's a reason for that because women will sleep with and desire men that they respect and They won't with guys that they that they like or you know, they can love you They can recognize that you're a good father. They can recognize that you're doing all these nice things for them A good parent a good friend that does not make you into someone that they desire And as a result when they spend time with someone who they are continually not seeing as a man who they are continually not Respecting who they disrespect on a regular basis. They become angry and bitter They're like I've spent all my good years with this guy from age 25 to 38 I've been with this guy all my good years were used up being with him I could have I could have gotten a better man. I could have gotten somebody else I could have been happier and I've used up these 15 or 13 whatever years being with someone who You know, I'm just not really into so no matter how nice the guys They still get kind of bitter and resentful and they don't feel sorry for me It's it's a very cold and unfortunate position to be in but here's how you avoid it The way you avoid it is by doing what I was saying Which was when you have a choice whether to be liked or respected I would always go for respect and this doesn't mean yelling back at them. This doesn't mean shouting Hey, you need to respect me. Hey, I'm a man.  It's not your responsibility to solve all of her problems It's not your responsibility to constantly be making her happy Make yourself happy first if you're happy the relationship will be happy And if you're still happy and she's not happy at the end of the day, you are the one that needs to walk away It's not your I'm not into fixing women. That's not my job People need to fix themselves and if they can't find a way to fix themselves They need to be with somebody who's going to help them do that and it's not going to be me Okay, if you're in the business of doing that if you're in the business of constantly trying to make the people around you Happy all the frickin time. You're going to make yourself crazy and they're not going to respect you This is true of friends. This is true of you know, even even family members people need to figure themselves out So I know that we have grown up in a situation and I see this happening all the time with men Where they learn permission seeking behaviors from women in authoritative positions like when you're in school You raise your hand to go to the bathroom You ask permission to to do anything with your mom You're trying to not get you're trying to not get in trouble with these authoritative female figures And so we apply that principle into marriage. Oh if I just listen to my wife and do whatever she says, it'll be perfect No That's exactly the way to lose her That's exactly the way that you thinking that you're being a good little boy Is going to make her run for the frickin hills. She'll never want to sleep with you and she'll never want to be with you She's gonna try and at a certain point. She's gonna break and just want to leave So and I know this is a harsh truth. I know there might be some people who feel like they've been lied to You have been lied to unfortunately with society. They don't tell you the truth about this.  Now if she does become family, then she gets upgraded to third, okay? So if you're in this position you guys, please I understand it's a tough truth to to kind of get through your head or maybe you kind of already knew this and you just Wanted confirmation that's okay too But if you're here right now, I offer you a choice You have a decision to make either you can continually lose the bat Continually win every single battle, but lose the war and as a result lose your relationship and you know Be unhappy Or you can do what it takes to maybe temporarily lose a few battles Make yourself the number one priority in your life make yourself happy And eventually you're going to win the war and you're going to have a great relationship And you're going to do amazingly well with women because all my clients all my students they understand this To a to a core like there's no There's no confusion about this issue. Once you see it and it's clear It becomes it becomes very very easy to implement So being an authentic man being an authentic your authentic self and living your life that way That's how you're going to solve this issue and that's why you know Even though I hear messages and stories and all these things with my friends I am absolutely 100 not worried about it because I know i'm going to do whatever it takes to make myself happy And as a result that's when relationships are going to succeed So thanks for watching you guys if you made it and consider subscribing I come out videos like this every single week Good luck out there


Now if you're looking for new irons right now then these two are likely to be on your list if you're looking for optimal in terms of forgiveness and ball speed just as much help as you can possibly get with that iron in hand. You see it's fair to say that every brand right now has got an iron or a club that fits what you're looking for in terms of performance attributes and in these two the focus really is on ball speed it's on ultimate forgiveness it's on an iron that would be certainly classed in that game improvement category. The two irons are from tight list it's a new T350 and the other has been around a little while longer it's tailor-made and it's their stealth iron. So once again we'll be putting these very much in our head-to-head and Trackman will determine what is the difference between these two in terms of data parameters but we first got to highlight what the differences are in terms of specification and the big one being the loft so although the T350 is aimed as a game improvement iron it's not gone down that route of strong lofted irons the seven iron is 30.5 degrees whereas on the other hand tailor-made and stealth have gone into that strong loft category and the stealth model is astonishingly 28 degrees as a seven iron so clearly we're already expecting to see some differences in terms of distance. But if you do watch this channel regularly you know we pay well very little attention to what a manufacturer says we pay very little attention to what loft says because what we found is over the years is that well there are very much a number of factors that go into making a golf club perform and only one of them contributing factors has been the loft so it'll be interesting to see that what is it two and a half degrees stronger loft in terms of the stealth what will it do in terms of performance so what you'd expect to see lower spinning further distance I think that's the two obvious things lower launching and then the descent angle shouldn't be as great as what we see in the opposite with the T350 which should be higher launching hoping to generate a bit more spin hoping to get more of a descent angle we shall see and Trackman will give us the answers very surely. The key for me is first of all there's a bit of a price difference in these two but they're definitely aimed at the same player the stealth is definitely a chunkier version but as two manufacturers they both class these as game improvement models but I would suggest the T350 is far more refined in its size and profile and looking down the the sole width definitely visually the stealth looks bigger to me and then when I switch them both over that's a difficult one to be honest with you there are a lot of similarities sat behind the ball in terms of that top line and then obviously there's the shelf appeal elements some images up on screen for you now I don't know which way you'd be drawn I love what Taylor made did with the stealth lineup this year full stop but having said that for me I'd perhaps be drawn to that shiny finish on the T350 right now which as I've said in my initial review of this product is a real standout product in the T series lineup which has been fantastic from titleist I have to say different shafts but ultimately we're looking for just a similar weight similar flat or same flex but what do they do and what are the real noticeable differences when we put these in a head to head well first of all first ball hit with the T350 what is noticeable and as you move down the line in the T series lineup you go from a real sort of great soft feeling the T150 T100s T150s I think it's gradually louder and the T350 sort of peaks in terms of that noise level and once again you go into that sort of clickier sound that you sometimes get in this iron and hopefully you pick that up again now it's not a big deal for everybody for me it's not the best sound in iron in my opinion I prefer it to sound different having said that it is what it is and it's pretty much what I'd say it is how I expected it to sound here you go real nice crisp that last one in particular good strike it's a confidence inspiring sound is what I'll say that ball feels like it's fizzed off the face interesting enough 30.5 degrees seems to launch the ball really high for me and what I'm seeing is a fairly long carry good launch in ball then switch up straight into the style and this is why I like doing these head to head side by side because this is where you see and here at least the real differences between the two now the interesting bit for me and I hope you picked it up is straight away the sound is totally different and I would be swayed towards the stealth I don't know what they did this year in terms of this stealth model but I think they did a great job in terms of sound and feel and I'm pretty sure you could have heard the difference between the two it's not hugely different and neither of them would be you know they're a long way from being forged irons and butter soft that's not something we're going to mention within this review but again for me what seems visible in the few shots that I've hit and obviously prior to doing this recording trackman data there is a visual difference in terms of ball flight in that the stealth is more of a lower penetrating ball flight in that two and a half degrees of loft is visible the interesting thing is what you've got a what we've got a look at with trackman is how much difference does that have in terms of carry distance and maybe more importantly what does whole negative impact does it have on descent angle because the problem is strong lofted irons is if you get that just a little bit too strong in terms of the loft you can be a little bit flat in terms of the ball flight which has a negative impact on descent angle and if you've not got spinning there then well you've got a bit of a problem in stopping balls on greens right I mean in terms of the two irons forgiveness is something that I really do fail to quantify all I do know is you hit the ball somewhere in and around that clubface and the things absolutely fizz off them the notable differences side by side is purely just the sound and feel element and for that I'd be swayed towards a stealth but from a looks perspective I'd be going at that T 350 I ain't gonna go on anymore we ain't gonna hit any more shots we're just gonna go straight into trackman and see if we can find out what separates these two irons in terms of performance today's video is brought to you in partnership with hot golf the online golf mega store bringing you the hottest deals in golf and of course the clubs featured in today's video find the link to the hot golf website in the description below and check out some incredible giveaways and offers well if you've been tuning into the channel of late you'll have seen plenty of heads and I hopefully you're enjoying them as much as I am filming them but if you've got any suggestions as pretty much these videos have come from as to probably you'd like to see side by side then please stick a comment in the section down below and we'll do our best to oblige this is probably the weirdest set of numbers in terms of a comparison video I've probably done because there are so many anomalies in there it is just why this whole idea of one club does one thing one club does another thing based on loft it does this and strength of loft can do so many negative things but does it really let me explain let's get the numbers on screen for you now two comparisons keep it nice and simple and then try and break down what yeah what is this all about so the carry distance 168 on the weaker lofted T 350 160 on the stealth a club at speed of 78.7 versus 80.3 there's some explanation there slightly faster club head speed with the tight list they had different shafts in and I've seen this kind of anomaly interesting enough in that I was swinging this AMT shaft even up same weight and flex seemed to generate a better club head speed in my hands so we've got to bear that in mind but the ball speed of 113 versus 112 means that from an efficiency point of view the stealth was doing a little bit better in terms of ball speed but again that's that strength loft you're going to spin number which we'd have expected to see in my opinion at least anyway a higher number on the T 350 and in fact we don't we see far better numbers on the stealth an average of four and a half versus 36 this is where I almost expect to see that in reverse because of like I say that strength of loft and then you've got the launch angle being 19.7 on the 350 versus 18.5 on the stealth so okay that's what we expected to see a higher launch in ball with the 350 land angle 44.5 44.4 so nothing to split them there peak height 89 versus 84 and to be honest with you not a lot to split them there so work that out well basically we've got a carry distance with both that we is surprising in many ways I expected the stealth to be longer and like I said that spin number is very difficult to quantify because we expected something very different and then in all the other parameters the performance is pretty much similar like I said descent angle peak height ball speed very very similar indeed but see other things that have gone into it in in terms of that additional launch angle that we've seen from the T 350 there's allowed for me that carry distance to be just that little bit further but there is no doubt that within this line up you're starting to see and I said line up from both now you're starting to see the compromises that you have to make when you want to go into this kind of category at the end of it all I'll throw up some numbers for you it's important that you see these because there are some variables in the carry distances within both and we've got a sort of 160 carriers being the shortest carry with the 350 the longest being 172.9 so it's 12 yards difference there and in the stealth we've got a 154 versus 165 so again a 10-yard difference so you don't get in my opinion the consistency out of this kind of iron in terms of front to back dispersion and that is a real thing that it's just this genre of clubs right now that's still not been resolved in the bulkier end of things but having said that is that really what you're looking for and is it more about help with launch and ball speeds then this kind of thing will definitely do a job and help you so trap man's an interesting thing it's you know I mean a lot of people pay no attention to data I understand that but a lot of people rely heavily on it and I think you know if you really want a true tale and that's what you got to look at and forget what the loft of a club is forget a category that club is put in then go in and try them for yourselves and more importantly as we've seen just with this clubhead speed thing this morning is make sure you try plenty of different shaft options and get the one that is best fitted for you and hence why I would always encourage custom fit if you're going to shell out this kind of money right that's me done another head-to-head finished as I said earlier post some comments down below let me know what you thought of this one and if you want to see some more then please point me in the right direction I'll do my best to oblige thanks ever for watching and I'll see you all soon


3, 1, 9, 7.5, can you only set the time once, I have it, 25.2, yeah, Quadrant 480.8, ready, 480.6, send it to, oh, that should have been, shell G-50, shell G-50, very fun, load it, charge the lever, charge the lever, load it out there, ready, chop, I see right, 3, Quadrant again, Quadrant 480.8, very fun, there we go, escorts, family at GP 11, I'll copy over,


Trini girl natural hi everyone welcome back to my channel today I'm doing one of my favorite videos my seasonal starch video. So I'm just going to give you a quick flashback FYI blurb review mini review of all the new products that I used this summer So if you honestly what I've been up to product wise stay tuned. So usually I go by cleansers conditioners etc But I'm trying something a little bit different this time So I'm going to repeat by brands this time and then go through cleanser the conditioner Conditioner styler and so on within each brand So let's get right to it. I'm starting off with Boston bloom. So I do have a review on that Coming soon. So I'm not going to give too much detail But I'm going to do a quick blurb Then I like it. I not like it. Maybe give you a peek at the ingredients and kind of keep it pushing So let's go signing off with this Boston bloom gentle herbal cleanser. This is my new hg shampoo. So yay for that These are the ingredients if you can see it Ingredients it has rassau clay, which is very conditioning as well as cleansing And of course it has like peppermint and other great stuff as well. So peppermint helps to eliminate growth and so on So my hair was super clean and super soft and moisturized after using this It felt like if I conditioned my hair, but it definitely felt clean. So a new winner new hg Definitely will be purchased. Yeah. Yeah. Yeah And next my next new try from Boston bloom is the brownie root hair mask These are the ingredients So you just heard how I talked about the shampoo Must you know that reaction by about 10 and you have this dc? This is another new hg The shampoo was amazing, but the conditioner was amazing My hair was super soft and moisturized even after rinsing after rinsing my hair still has so much Slip you would have thought I still had a conditioner in there If you look at my demo of me using these products, you'll see just how much slip and moisture and how amazing this was after using So this is a definitely purchase for me as well I love it. Love it. Love it. Love it new hg status hg So I got two new hgs in one day. So that's good. The whole line has a pretty mild fresh scent. So it's not super fruity. It's not Cakey or anything like that. I can just say it's kind of mild and kind of fresh if you don't like super strong scents This might be a good one to try if you don't like sweet fruity scents This might be a good one to try as well. Next, I'm hurrying. We have the easly even from basket bloom So unfortunately, this is where things went a little bit south for me. So I really love the previous easly even This one was really nice, but it wasn't a super wow for me. So the moisture was there pining. I guess as Great leave-ins. So it's a great leave-in especially if you like really creamy really moisturizing really rich leave-ins But I don't think I'll be repurchasing this one. Then we have the silky aloe cup putting again from basket bloom That's why I decided to go by line because it would have been too weird going back and forth So this one does say has aloe vera gel first But when I used it, it felt like you can see it's really really thick like really thick kind of too thick for my hair I felt like if it wasn't really penetrating Porosity or maybe a few hairs and stuff then definitely give this a try It just wasn't from my hair. It was kind of buttery almost waxy. So that was really for me I can give you a quick demo of that. So feel thick look out my hands can barely move Like it's so thick And it was like you see how kind of heavy and oily it is on my hands The brami mask as you can see it's not going anywhere. So it is a pretty thick cream But somehow it's pretty thick my hair loved it. So as you can see I guess it penetrates pretty easily So that's probably why it's thick but it still penetrates really well So even if you don't like thick um The conditioners don't worry because it spreads really well and penetrates really quickly. I mean it's amazing amazing Next we have this more moisture cream This one she said was like similar to the old easley bin, but I didn't find it similar at all Now I use this after About the conditioners so it was almost I think I used it right after shampooing And it just wasn't enough to get my hair to recover after shampooing So this is good for recovering right after shampooing. I guess it is a conditioner, but conditioning supreme But this even though it says more moisture cream just Didn't have enough moisture to get me back my head and it feels soft after I applied it. It just felt Still a lot of texture. This is the texture of it. It is heavy heavy like a lot of her stuff I guess But um, you can see this one isn't really going going in as fast as it needs to it's still wet in But even rubbing it on my skin. I can feel it. It's kind of thick on my skin But it just feels kind of thick. So I have to put this on my skin and it didn't dry sticky your tacky.  And last but not least is this basket bloom twilly hair gel My hair felt really moisturized and soft and I had a really cute little curl pattern going with this It's my conditioner only so it didn't That's already clumped what you long it but my hair was super moisturized and shiny and everything and I really liked it Did I like it enough to repurchase it? Maybe I guess just depending on the sales and stuff Maybe if I need to buy one more thing to get to free shipping or something I would buy it So it's almost like a gel cream It isn't that you kind of used to it Like camellia rose and stuff. It's more of a gel cream So there isn't much tap to it. I guess there's a little bit, but there isn't much It's more like a gel cream But it's a light gel But it did give me then last week. So it did give me a great excellent soft hold as well as moisture and shine So I definitely opened to repurchasing it. I had a really great happy hair week And I guess for me that's the final test that I have a good hair week or not And my hair week was definitely there with that gel Next I have another gel the caravada high definition gel This one was similar to the baskin bloom My hands are running out of clean space. I feel like I'm using a lot of products in this demo for you guys It was similar to the baskin bloom in terms of it being more like a cream gel But like, you know, I'm super tacky not super, you know But it did do a really good job of like Like my curls I would say So it didn't necessarily plump them or make sure the curls I was there I could feel the gel kind of wrapping around them and Separating them, I guess you would say so, you know, it did do a really good job And my hair was elongated moisturized um defined and soft so Pretty much everything I looked for in the gel. So this is also something I could see myself buying again So when I repurchase it, I would say yes, if the sale is there, if your price is right, I would repurchase this I wouldn't repurchase it for full price, but I would repurchase it like I think I got it on a sale that was like a 50% off or something I would repurchase it at maybe 50 40% off. It has a light slightly fruity scent So I like that about it as well. So next we get into sultana curls Which I also do have a fair amount of products from sultana curls that I tried this summer I tried a lot of deep conditioners and conditioners, but I did kind of like leave them to stuff as well So let's get into it. So I tried the sultana curls for the spear bicep and hair repair So again, this is something that's fairly new and people were everything about it on instagram any negative reviews These are the ingredients slightly negative review of it. Just wasn't an instant applicator for me It was whipped way, but somehow it just didn't instantly penetrate my hair I like my deep conditioners to instantly penetrate So after I let it sit for like 25 minutes, and I think I steamed my hair my hair was super soft after that But when I just put it on I packed I wasn't sure anything was going to happen So it's a sitter for me with my algeolar porosity. So for that reason I probably won't repurchase it because I just like things to move quickly and after elastic elastic does that This is the I see if I can show you Let's see what this does So you can see that It just isn't super Penetrating and you have to kind of work at it. So for my algeolar porosity here, it was just not quite penetrating enough Immediately with heat and everything it did do its job But even then while me more I would say I probably prefer that with elastic or elastic So I don't think I would repurchase this. It is a nice deep conditioner in terms of ingredients It didn't have as much humectants as I like in my deep conditioner and I kind of tell it my hair So even after it sat in my hair was super soft It didn't feel as hydrating from the inside out as it does with like Curl elastic and some other deep conditioners I think it's great for most people is great for everybody else who try on instagram that I know of I'm the only person I know of that It wasn't a new age tree super well had to happen again for me I really like to see some honey some molasses at least some fruit extracts or glycerin in my deep conditioner And I don't really see those in this one. Next is the sotanicals winter green conditioning supreme And I use this as a leave-in and I really enjoyed it as a leave-in It was really softening so my hair was super soft and moisturized It wasn't the most defining ever But my hair had bounced somehow and it was giving my hair bounces like Rake and it was like boom it was like okay. I see conditioners as leave-in. I don't use them as conditioners So from a leave-in perspective it wasn't quite ashy I can see this being kind of ashy or up there for in-self conditioners if You're into pricey in-self conditioners, but for me in-self conditioners It's like trust me perfectly undone Giovanni if I'm feeling fancy I don't really spend money on them just because I like to use a lot, but I definitely recommend this product If you like witcher leave-ins or as a conditioner, it's great for those purposes So next is that I can't believe it's not honey hair caramel So I recently did a review on this so you can check it out for like full details. I was hydrating But it wasn't softening for me It definitely didn't add easy tangling because after and seeing my hair was Didn't really have much slip to it. It hides it. For me moisture involves some emollients as well as my texture is kind of why I re-enroll I did a little bit of softening ingredient as well to kind of smooth my physical and soften my hair So for me it would be great to mix in with my regular de-conditioners to kind of improve them But on its own as a de-conditioner it wouldn't work for me But if your hair is silky or if you don't need that extra softening like your hair Naturally feel soft to the touch then you might be fine with this If you don't need a lot of extra slip or something you might be fine with this by itself But I think if you took this and mixed it with a conditioning supreme you'd have the best de-conditioner in the world or something So if I could see myself wasting that conditioning supreme I would try to let you know but somebody tried somebody in the congregation tried and let me know but Between how hydrating this is and how many humectants it has and how soft named the conditioning supreme is I think together it would be like a really Super duper dual. It was also very drippy and very sticky So I'm very messy. Just a drippy and sticky made it messy. So That's another reason why I'm not really inclined to try it again by itself But I have another fellow one of this and I'm definitely going to be mixing it into conditioners to make those conditioners Gene team with me. So next time another product from Sultanica's the freshest curly finding even So let's leave it was everything. I loved it. Loved it. Loved it. It is my new HD leaving So I beat back to Sultanica's slip and slide not proof here glide It just feels more moisturizing more defining I'm probably even smells better just I love the texture more and everything So it's like a proof here glide to get through. I still love it. But this one just So this is my new HD leaving from Sultanica's these are the ingredients So it does have some defining ingredients in there It does have some humectants in there with the beet sugar defining ingredient being the cellulose gum It has slippery and high up. So the slip is great It's just a win-win perfect. I love it. I love the scent. I love the texture. I love everything about it. It smells Nice and sweet not cakey, but kind of fruity again any kind of texture Next from Sultanica's one. I didn't really work for me for a boosting jelly and ooh child Ooh child. I wanted to love this, but I couldn't love it. My hair was so dry It just didn't do anything for me at all. I can't even tell you where it went wrong So of course cabama dries my hair out. So maybe that's where it went wrong Just having the cabama was enough to totally kill it Yeah, I just don't see anything in here that is super moisturizing for me So I'm like looking for the humectant not really seeing it There just wasn't enough moisture and moisturizing ingredients in here for me And it's supposed to be a coil boosting jelly, which is supposed to be for coils. So Let me give it more moisture boo more moisture He just didn't do anything for me didn't he longer it didn't be fine and moisturized I don't even think I could say how any hold to it. It was it had a slight crunch against So this is the texture of it. It strikes me as slightly I'm running out of space It feels like heavy slightly heavy, so I'm rubbing it in and I can feel like a layer like you know So it's not super heavy. I was still called a light gel But I can feel that it's a little bit heavier than the other gels that I Dabled and it leaves more of that kind of sticky-ish kind of feeling on your hand than the other gels that I dabled The skin tells it's good.  I have this rapper's delight So one of my friends said she loves it and she loves it even more than the hair sorrow Now this is my friend who seems to be my hair opposite by the way, so I really just stopped listening to her This is the same friend who likes the aloe with pudding and the afro repair The spare So I'm just not listening to her. But anyway, so she recommended this to me. So I tried it out I didn't really hate it. It just doesn't really do anything for me So it's not a hair. A lot of people think that spritzes are just fancy water And I spritzes are not just fancy water. I like spritzes that hydrate and reduce frizz Moisturized softening stuff and this I can't really tell you what it does for me So it's not horrible, but I'm not going to repurchase it. I really like the hair sorrow The hair sorrow really moisturizes my hair. So that's the one I'm going to stick with From sultanicals at least until it's a hairspray. So next we're finally on to she sent it So unfortunately, I have to be starting with one I didn't really love So this is the she sent coconut quench Co-wash and not from she says that I didn't ask to be loved. It still wasn't horrible. It wasn't great It's fine if you just put it on your roots and rinse it out But it did leave my anatomy still from she sent it So I'm definitely going to stick to the blueberry co-wash from them And unfortunately, I won't repurchase it, but it did cleanse some moisture, but Not enough So I'm going to use it out. I'm going to stick to my blueberry co-wash There she sent the sugar peach super moisture conditioner This is back to great. I love this. So I use it for conditioner only wash and go I don't think I have any pictures of it because I did it and I was in a rush and I didn't film it But I was a happy camp when I used it It was very moisturizing it defined my clothes had great slip Um everything smelled great, of course, you know, everything of her smells kind of light and candy-ish. This is the texture It's actually not tripping. So that's good for she sent it So if you're looking for a nice light moisturizer conditioner, I think this is probably my favorite I want to say my hair conditioner from she sent it although I spent a while since I used to others But if you like the apple and the other she said the conditions and you haven't tried this Definitely give this a try back to the coconut quench line that I have some issues with This is the coconut quench combing cream I usually have to leave him I think I was just kind of okay. So I don't think I'd repurchase it But it wasn't horrible. But when she sent it, I expect it to make me feel Joyful and blissful and excited and happy and you know, the bar is really high when I'm using she sent it And this was just okay. If you're curious, I like the cocoa cream. We've been from she sent it. I like the cranberry cocktail Even from she sent it and I took a pile line conditioner from she senders leaving This is some of the ones that I would like I would use and repurchase but this one isn't on that list So, you know, it looks pretty similar to all this stuff. I guess it's not super ready Then give me good moisture. Next I have this moisture mist and I would say Didn't do much for me. I guess it's moisturizing and whatever, but it goes on pretty light. It just Didn't do enough For me to repurchase it. It was more on the fancy water side of things than on the Leave in space that I love side of things. So that was it from she sent it I think I tried from cameo rose. I guess so that's interesting I mean, I still use can make her and stuff this summer, but in terms of like all new Items, this is the only new one I tried the moroccan pear conditioning custard People did rave about it and I was just curious like it was like pretty much the only thing or one of the few things I haven't tried from this pink line. This is the oil thing either, but I'm not interested not at all But I have a lot of people rave about this conditioner a lot. So I wanted to give it a try I probably didn't know some of the ingredients and it wasn't quite for me But being a PJ being curious, they just kind of wore me down and it wasn't sale I tried it and I decided to try it out. It goes water and then pear oil It does have allergies lower down like after looking at oil and cherry oil and different things But it doesn't quite have enough humectants for me. And you know me. I need more humectants in my life than this So I used to again as a conditional only wash and go and I hear it did look nice when it was wet, but it didn't really dry Well, it's dry kind of frizzy and my hair just didn't seem to have absorbed enough moisture from this product So not going to repurchase It was nice as a conditioner It just wasn't nice enough. It wasn't hydrating enough for me for my ultra low porosity. My hair didn't feel soft and so on I wouldn't even say it's that moisturized, but I guess it didn't penetrate enough to Work for me because when my hair dried it was kind of frizzy In terms of the texture, I guess you see one cream by now you see them all, but this is the texture and it smells Almost like a ginger cleanse to me, which is interesting because I didn't it didn't say ginger or anything But it smelled kind of like that to me. And next I have the smile organics. Um, white peony leave-in conditioner So I did like this leave-in because it was moisturizing now. I don't use this to leave at it Using as a refreshing spray. So it does add moisture to my hair And it does control frizz. So I do like it for that So I think I don't like a really strong kind of cheek cologne scent that I'm not a fan of Let me know if anybody else uses this and what do you think of the scent For me, especially the original line at least I only tried two things so far But both of them the sensor too strong for me at least this isn't horrible in terms of the scent A cheap cologne, but it's not horrible cheap cologne. I didn't like it but I still de-conditioned the scent at all That's not like bugged to me. So this is an improvement on that, but it's still too strong for me to Enjoy I still don't actually enjoy the scent but in terms of moisture and definition. So this works really well So I do recommend it especially if you're not Too concerned about scents. So that was it from kind of like the main natural hair brands I have two little bonus products at the very end last year. So I have the eco stylus port Which I tried recently. I did a review on and I did enjoy using this It didn't have good hold much better hold than the chosen waves because that's actually What easily lasts me the week. It didn't have good moisture. I think this is the most moisturizing eco stylus So that's something the scent it smells almost like some kind of fresh laundry laundry scent Smells like that. It's a typical eco styler texture. I have this yes the current conditioner So I picked this up on target a while ago. I'm trying to use it So much of self-conditioners. I conditioned my hair midweek for some reason I don't say course because that's midweek. You need to reset your hair and you need to You don't want to shampoo or cleanse but you just want to condition So I would use things like this. I'm kind of fancy your conditioners And I'm not using for conditioner only I would use them to condition my hair in those cases So one of those cases finally came up and I was able to do this out and use it I did enjoy it. It did give me moisture and slip So as you can see it is a pretty solid white But it is typical kind of conditioner even now I can feel the slip. So yay for that And it did give me good moisture and everything so I was happy can't forget what I needed to do in terms of just moisturizing my hair And some slip and kind of resetting it when I put this again. I would say yes Not sure when because I don't have these kind of cases very often. I might use this once Every three months or something. So how does this compare to the smoother silk and ultra moist? I think the Giovanni ultra moist is probably still the best but I I've used it in a while so probably I have to try it again and come here But I do think it's probably better than the Giovanni smoother silk But the Giovanni smoother silk will always be a staple for me just because I can get in the huge garland size So it's just economical. So plus it's great on my hair So that's how it's going to be a staple for me. It's moisturizing good slip. Maybe not as Moisturizing as this but I can get it in a huge size. So it's really economical So I'm finally done. I hope you enjoyed this video What you like what you use what you try what you want to try What you want more information on let's just talk products down below And I hope this was informative and helpful to entertain me and I'll see you on the next one. Bye


Let's first talk about the responses in the university campuses. You've been associated with so many universities, and in Jalal Nair University in particular, where we've seen courage in the part of students, but also terrible brutality, crushing of dissent. Could you talk to us about this new law for freedom of speech on the campus and what education is meant to be, what is the university space meant to be? You know, I think, like what I was saying earlier, that there is a new relationship that is embedded in the idea of the citizen and the state. We have to understand that there are institutions also that are required in this new relationship that emerge in this new relationship. And one of the institutions which is fundamental are universities, or is the institution of universities. And we have to understand, which not everybody understands, is that the university is very different from the kinds of institutions of learning and scholarship that existed earlier. You had Gurukuls, you had Muts, you had Madrasas and all the rest of it. Where learning meant being familiar with certain texts, knowing the language and reciting those texts, being familiar with ideas. Philosophical discussions took place, but very often took place on the margins of these institutions. The fundamental change from all those institutions and today's university is that the university is the only institution in which there is absolutely free thinking. There has to be free thinking, otherwise it's not a university. What is the point of a university? It is to teach people to think. Together with thinking it is to teach people to ask questions. Because as everybody knows, the only way in which knowledge advances is if people ask questions of that knowledge, start challenging and questioning that knowledge, existing knowledge, then new knowledge comes up. The authority figure has to own that authority every single day. Every single day? And with every single response to a question. Absolutely, absolutely. Now if you have a system that says you don't ask questions or what I am teaching you is all that you need to know, then you're really annulling the whole university system. The university system must challenge knowledge, must ask questions. Now it's true that in most societies this period when young minds are in universities is the period in which this happens. After that you go into jobs, you go into other things and there are very few who have the luxury of going on questioning and going on asking questions and adding to knowledge. That is really a small fraction of society. But nevertheless that experience of asking questions, learning how to ask questions is very important. You don't just ask any old question. You ask a question which is implicitly something that will draw forth information, knowledge and evidence of connections and so on and so forth. That ability to ask questions is very important in any profession. Whether you're going to be a school teacher or a doctor or a lawyer or an engineer or a computer expert, whatever it may be, the ability to ask questions is fundamental. Now when you start destroying that in the institution that is meant to teach you how to do it, then you've destroyed the institution and you have destroyed the intellectual potential of your next generation. And when you have people saying, students are meant to study, they really mean study their textbooks, seek information and answers from figures of authority. But not, is it possible, what I'm trying to ask is, is it possible to ask the kind of questions you are referring to without asking questions of the world around them outside the campus in which case, political questions? Yes, political in its widest sense. You know, my political one isn't referring only to left politics as is very often. Political parties. Yes, or political parties. It is political in the widest sense of the world that we're living in. The world that surrounds us. Yes, this is what I meant, that the awareness of asking questions refers to absolutely everything that we're living with and in. That is absolutely very essential. And if you can't do that. And it's not just asking questions about the world you're living in, but also asking questions about the texts you're reading and the books you're reading. I mean, after all, 1968 did take place almost uniformly over the world with students saying that we think we're not really reading and studying the kinds of things we should be studying. And there was a change in courses and syllabi in many universities. Now that kind of dialogue that goes on with those who are teaching and those who are studying is absolutely essential. And this is what we were aiming at in GNU, that students used to stop one in the middle of a lecture and say, I'm sorry, I don't understand or I don't agree. And then you had a discussion, which meant that there was much more clarity on the subject, both from the point of view of the person who was teaching it and the person who was listening to the lecture. Now it's that kind of questioning with a purpose, questioning with the intention of understanding the problem much more than one does normally. That is crucial in a university. But that also then means that if you're going to be questioning what you're being taught or how you're being taught or that kind of thing and you're questioning the world around you, then you're also questioning the system that's governing you. And that's where the problem comes in. When you start questioning the system that's governing you, those that are doing the governing start getting anxious and want to stop it. But the questions also lead to certain commitments. So if you have, your questions have led you to an understanding that everyone must have access to education.  Hence the emphasis on public education. So say lower fees. So then that is an issue you take up. So when we're talking, we're using the word political, we are referring to issues like that. Or you see all around you that cast flourishes and in all kinds of new geysers. And the questions you're asking will again lead you to, and everybody's not necessarily in agreement. I think we also want to say that it's not students as a kind of homogeneous voice. No, no, not at all. In fact, this is again where diversity is very important. And this is where you can only question if you say, no, I'm not in agreement. And the next person says, well, so what is your opinion? And then you start questioning the first opinion. And this is age old. I mean, I keep on saying that, you know, the foundational procedure in Indian philosophy is so similar to the Socratic method, which is that you first put across the view of your opponent, then you put your view across, then you suggest that there is a debate between the two and see if there can be a solution. What is referred to as Purva Paksha, Prathipaksha, Siddhanta, which everybody who does any kind of philosophical study has to go through this process of debate, discussion, and then finding a solution or not finding a solution and saying, well, the debate continues to be open. Absolutely. So questioning debate, and that would be, these are the essentials in the educational process and in the side of the university. Moving on to what is happening to campuses right now with the protests against the CAA and the NPR and the NRC, we're going to talk about the police on the streets. But we're also going to have to talk about the police in the campus. Sometimes they've been called in when they shouldn't have been. Sometimes they're not called in when they need to be called in. Sometimes they're just there and not doing anything. With all your experience in Jane, you say, would you tell us what would be a kind of guideline that we should insist on as far as the police are concerned and the police presence on campus is concerned? You know, my view on this has always been that there's really no need for the police. If you have a situation where people are in dialogue with each other, and like, you know, we used to, the first ten years of Jane, you for example, there were gay rows all the time. Even I was gay out. I enjoyed it immensely because it turned into a kind of tutorial meeting and we had endless discussions as a result of... I hope all those who are gay out were listening to this carefully. And then there was a time when the situation became very explosive and the police was called in.  And debate. Absolutely, and through debate. And if there is need for security, if there is some form of insecurity, it should be within that community. The community is very important in a university. The university has to think of itself as a community. Otherwise there is a resort to constantly ringing up the police and saying, please come and bash up whoever is creating trouble. That's not the way to run a university. You don't want mobs coming in. You don't want police sitting around. What then is destroying this community or has been assaulting this idea of the community? I think it's partly that the people who are now running the universities by and large don't know what a university is. They treat it as any old institution and they're treating it again like gurukuls and madrasas. That we know what is to be taught and only that will be taught and students have to be subservient. Now that's not teaching, that's not education. Nobody has to be subservient. There has to be an exchange. And that notion of knowledge as a process of exchange from which exchange further knowledge develops is absent today. And the second thing I think of course is that our institutions are now, if I may use the word infiltrated, by people who are essentially concerned with the narrowly based political side of life rather than what should be the concern of those running a university. I think the quality of people has changed and that is also partly responsible for this change. And I'm very disturbed because I can see a situation in which most universities will probably be annulled as universities. They'll become teaching shops and that's it. Perhaps we should be clear about what this narrowly political, because so often we hear the larger political outlook being trashed and saying this is not what a university should partake of. No, I think a university needs to know about. It needs to know about the narrowly political, yes, very much so. It needs to know about the political at all levels because after all it is an institution in society and every institution in society needs to know what are the different levels by which it is being surrounded and how does one cope with these levels. So there's a certain level of narrowly political where the domination is of, to put it mildly, unlettered goodness and there's another level of the political where there is much more thoughtful consideration of what kind of society are we, what is the kind of society we want to be, is this going to lead to something positive, is this going to help us in our search for knowledge or not. These are levels.


Sadhguru, I believe that talent is something which is grossly exaggerated in success. It's… when I was in medical school, I used to teach martial art. That was my passion. And every time a Bruce Lee's movie was released, all these school kids would come and join in hoards to martial art schools. We used to call it Bruce Lee's phenomenon. You have gone after two weeks. Yes.  And interestingly, Swamiji, after six months, they are never there. The guys who go up to the black belt and, you know, do something very good in martial art are the ones who joined the school without any skills, without any talent, who worked very, very hard for everything they had to sweat it out. But in the end, they are the ones who succeed. How do you explain this phenomenon? See, for variety of reasons, let me not go beyond this. For variety of reasons, a certain individual could be born with a certain flair, physical flair, mental flair, emotional flair, style. You know, five-year-old child, one has style, other is clumsy, okay? So the one with the style is not going to become necessarily a fashion thing. Somebody else who seems to be clumsy may grow into something else. Like you don't know when a woman is pregnant, the child within that womb, whether it's a sage or a sorcerer, not the woman now. The mother does not know whether she is producing a sage or a sorcerer or what. This is because I use the word coherence because of modern science is using that word. Who you are here right now, as you sit here, this is physics. Every subatomic particle is in constant contact with everything. What you call as cosmos is living life and it's a live mind. You have captured only one small part of it. If you work with only that one small part of what you have captured, both as life and as intelligence, you will function at a certain level. If you apply yourself to break the barriers of your limitations that you've set for yourself, then there's an intelligence beyond anybody's understanding, beyond anybody's estimate which is available to you. Once this is available to you, people think you're superhuman. No, this is not about being superhuman. This is about realizing that being human is super. The immensity of being human has not been realized. So we are always making a kind of a mathematical calculation. Okay, if this person has this much IQ, maybe this is what he will become. This is what Newton's law that everything that moves on this planet works to your mathematical precision or a geometric precision. That is, if you take a pendulum, the length of the pendulum will decide how it will swing. If you take a projectile, depending upon its mass, velocity and the trajectory, it will go to a certain place. That is not how the cosmos is working, because what you think is physical and not physical is all mixed up within this.   This, if you allow it, if you do not identify it with any form, with your physical form or with other different identities that you take on, it has a way of being cohesive or collaborative with everything around. When we say somebody worked hard, all he is trying to do is stretch his boundary of identity, isn't it? He's trying to stretch his boundary. If he succeeds to stretch his boundary, something that was… he never thought possible or imagined that is within his competence or capability becomes his. Miraculously, I can show you hundreds of people who come to me, we prepare them for a certain period and then we initiate them. In twenty-four hours, you will see the shape of their face will change. Genetics are altered. In twenty-four hours' time, you can see the photographic images, they have actually changed dramatically overnight, simply because of a certain extension of their identity. So, in the Indian spiritual values, when you say spiritual, you must understand this. This is not about looking up or looking down. When we say spiritual, we're talking about transcending the limitations of physical. So, right now, the physical is here as if it's a solid entity in people's experience. But modern physics is telling you and medical science is beginning to tell you, or if people don't understand, if they just hold their nose for two minutes, they understand that they are not an independent existence. It is in transaction, not just in terms of breath. Even on the level of subatomic particles, it's in constant transaction. If this transaction becomes even minutely conscious, suddenly, you have immense capabilities that you never thought were possible. Biological identity is the most limiting identity that you have because it limits to the area of your body. Now, when you strive, you break this. It doesn't matter in what way you strive. Most people strive in unconscious, unscientific, simply out of striving, they do things. But there are ways to strive scientifically in a proper way. There are tools to strive with specific direction to break the limitations of who we are. If you break this boundary, the subatomic particles are transacting. The intelligence is transacting. Only you're missing the whole game. If you don't miss the game, if you are in the game of life, not in the game of thoughts and emotions, you're in the game of life, suddenly, just about anything you want you can do, not this or that. I'm saying anything a human being can do, simply if he breaks his barriers. And these barriers are many levels, but the most fundamental thing is the identity.


So, our first speaker of today is Dr. Zerker Holtmans. She has an impressive amount of publications, actually. I stopped counting at the 45th when the list was going on and on and on. Pretty impressive. She also was previously a speaker at many different and other conferences, including the Blackhead Conference. And today she's going to speak about SS7 and diameter and the security aspects of both of these LTE protocols. The title of the talk is Mobile Data Interception from the Interconnection Link. Please welcome her with a lot of applause. Thanks a lot. As I said, my name is Zerker Holtmans. I work for Nokia BellApps. That's a research brand of Nokia. I've been doing mobile security for 17 years. So, everybody of you sitting here who has an LTE phone or LTE-enabled phone has a piece of something I designed in it. That's quite a nice feeling, actually. So, this is not only my work. It's also from my colleague Janne Ekman who works in our testing department who sets up test networks so that we don't crash accidentally operators' networks when we make an update. And actually, with our competitor, Kassel McDade from Adaptive Mobile, so we have been working actually together on this one, I will explain later how that has happened. So I will talk about mobile data interception from the Interconnection Link. And well, let's start with the practicalities. So this is something that's not so visible in public. Some of you might have been in 2014 here or 2008 when Tobias Engel or Carsten Nol presented their attacks. So for those who have not been there, so we are here in Leipzig. You are connected now to Vodafone, Deutsche Telekom or Telefonika. And the meeting attendees here are international. So you will also have people from UK connected from, usually have a subscription from three, from France, from Orange, from Poland, maybe from Plus or MTS when they are coming from Russia. I'm from Finland, well, I live nowadays in Finland. So my colleagues and families, they have Eliza, Talia or DNA subscription. And there is a big difference to credit card system. In the credit card world, there is one big sort of mother company. But for telecommunication operators, these are different legal entities in different countries. Still you can just pop up in the network, switch your phone on and you can get data or make voice calls or SMS and you are charged to your home bell and it works. So that's actually something to think about because it's not happening automatically. And the reason why this is actually working is because there is something called interconnection link or IPX network. It's not the internet. It has touching points with the internet but it's a private, separate network which enables mobile data communication or in general telecommunication. So and actually why this is such an important network because we are all connected to it. Everybody here who has a switched on phone is connected to it and not just your phones. It's also tablets which, if they are cellular enabled, for example, there's a tablet with Android, let's say, to AT&T and Anchorage. There's a connected scale, let's say, to Verizon in US. Or there we have a car which can connect a car which made from telephonic car in South America. In the bottom you see there a gas meter from British Telecom which is also cellular enabled. Then we have their fire alarm from Telstra. I heard they might need a fire alarm in case of a burning platform arrived there at their shores. I heard something like that has arrived there. Our industrial optimization sort of assembly lines which might have connectivity, cellular connectivity and of course classical phones. So you see they're all kind of different operating system, all kind of different hardware and they are connected to a local operator and while that they are connected to the interconnection network. So they can be reached from the interconnection network in case something arrives for them. To understand the security of interconnection we need to go back a bit. So 1981 the interconnection network was established between four countries, Nordic countries. And you see there a beautiful picture of the Nordic mobile telephony of the Nordic Nokia dogman as we used to say. So it's sort of this size and it's about five kilograms so I didn't bring it. Very beautiful piece of hardware. And it was a closed and private network. So that was the main security feature of that network. It was closed and private and nobody could get in. Only the people that know each other. It was running the signalling system number seven protocol. And that was a huge success and they extended and extended it and more and more operators joined Latvia and so on. And nowadays we have all kinds of applications using it.  And now we move towards the LTDiarmies protocols. And so just to give you an idea sort of that's how it started. Probably Finland, Sweden, Norway, Denmark. And that's how they started. They probably went together in a sauna having some good beer and say, hey, let's do it. And they managed to do it. That's how it nowadays looks like, sort of more has grown a bit. So we have that's 2G and 2.5G, then we add 3G, a bit of 4G. And now we have all the 5G. So it has gotten a bit more complex. So and it's a sort of organically grown structures. And the thing is everything is connected with everything else. So you see GSM networks, really old networks, connect to LTE networks and the other way around. So sometimes there are nodes in the middle, sometimes not. So it's very, very sort of inhomogeneous to call it that way. So back to security. I mean the main security feature of this jungle was that it's closed and private. Now let's revisit this assumption sort of 35 years later and see what has happened. It's still closed and private. I'm afraid to say no, there are different angles to close and private. On the top you see there are three. I could have chosen any European operator. That's not particularly to three. It's just in the European Union, the European Union wanted to encourage competition so that mobile virtual network operator have very easy to establish their business. So for example, supermarket chains are now selling here subscriptions, for example, in Germany. So they rent their services from a traditional operator. And all operators in the European Union are forced to rent out the services that they have themselves, which includes roaming, to anybody who is basically come and ask and has a proper business model. That makes it also very, or it makes it easier for nasty guys to buy the interconnection access. In the middle, there are cell phone reports, cell phone interception. These are from the dark net from a company called Interceptor, but they have a horrible service, so I wouldn't recommend that company. They are not answering to emails or anything, but they are claiming to rent out these kind of services. So the access can also gain from the dark net by just rent buying it. Here on the bottom, we see a screenshot from Shoden. You see here this GGSN. You might not know which note this is, but I can tell you GGSN has no reason to be on the internet. It shouldn't be there. I don't know why it is there. Maybe it's a honeypot, so I don't suggest to hack that. So you never know what comes back. Then we have on the right-hand side here a GPRS air cell. Air cell is a big operator in India, and they seem to have their GPRS notes on the internet. The protocol here is SNMP, that's a simple network management protocol, and it's used, and above that there's a telnet login. My personal assumption is that somebody was on call duty to fix the network and didn't want to go into office, so he just set himself up this telnet access so he could easily configure the stuff from home. But these things happen. That's life. But well, of course, telnet login, you throw in a sort of password cracker and see what you have. Admin, admin is always worth a try. Then there, this map is a bit older. That's from the WikiLeaks, from the SnowdenLeaks, and it's showing the countries which the NSA says they have access to the phone network. It's probably no longer up to date. I think the situation, in particular in Europe, has improved substantially since then. And on the top, there's an article from the Intercept where the GCHQ, basically the British spy, hacked belgacom, but that was the GPRS transport protocol. So I think it's fair to say that there are points where the network is no longer that close and private, so hackers, they may just rent a service, they hack their way in. Having power in some countries, the line between government and telecommunication providers, not so strict, let's call it that way. And if the government wants to have access, they just get access. Of course, there's a classical bribing of an employee that always works. Just a amount of question, probably a amount of money. You can become an operator, or you can do social engineering that has also been seen. But that's a quite rare case, actually. Social engineering is not so common. But the other ones are sort of more likely. So let's do a brief recap. As a seven, that's the old protocol. And there are attacks. These are the attacks that exist for the old signaling system number seven, which is still most commonly used on the interconnection link. We have their location tracking that was published, I think, in 2008, very coarse granularity by Tobias. Then we have eavesdropping, fraud, denial of service on the user network. Credential theft that are the cryptographic keys that are stored also in your SIM card that are used for confidentiality and authentication. Data session hijacking, but that's not SS7, that's actually GTP protocol. Unblocking of stolen phones, that is an implementation specific attack, not from our notes, I'm happy to say. SMS interception, basically that's pretty risky, because of all the one-time passwords thefts. Because nowadays, many password reset systems send you a one-time code, and the attacker can actually trigger this sending of the one-time code. So depending on the system used, it's more or less vulnerable to it. And there are even on YouTube videos how that works. So this is basically a situation for SS7. Those attacks were sort of done by P1, positive technologies, cast and all Tobias Engel, and I'm focusing more on diameter security. So that's basically the SS7, the old protocol. And that's the status of the security for the IPX network. The SS7 is still most commonly used, but things slowly move forward. The communication is sometimes direct, sometimes intermediate nodes involved, depending, for example, we are here now in Germany. I don't think there exists a specific cable from Germany, let's say, to Tuvalu, that's a Pacific island. I think of 2,000 people living there, something like that. But they have their own operator. So I don't think there exists an explicit cable from here to there. So there are probably some intermediate nodes involved if you make a phone call to Tuvalu. But some operators also have direct personal pipes with their most common partners. For example, in Frankfurt, it's such a big hub. Also nowadays, some deploy SS7 firewalls. I think there was a big achievement of the presentation done here in 2014 that really something happened afterwards. The first firewall products came up and also operators started to deploy it. So not all have them, but it's better now. But there's no form of transport security, no IPsec, no TLS, no DTLS, no MAP security, no source authentication or confidentiality protection, and no integrity. That's how it is. No fun, but that's it. So diameter, new rule, new protocol, new game, everything is better. Let's see. All will be better with LT and diameter. I've heard that from one company. I'm not going to say which company that was. When I was saying, well, all will be different. We have a different protocol, but it's doing roughly the same things. As the user, you still move from A to place B. You move from one antenna to the next antenna. So the logic for handover and subscriber profile management and things like that, they are pretty similar. They're not exactly the same. But they're pretty similar. So it's possible that some things are just sort of converted. Let's call it that way. Attacks that are reality. I've seen myself some attacks quite many, actually. I've been doing traces analysis, looking at the traces. I'm trying to figure out what the heck is that. And there's one important question one needs to ask. Why should attacker stop just because we have a different protocol? Come on. They make money with it. Or they are governments, intelligence communities. This is for them, it's all you can eat data. Give me all your data. They track VIPs. I don't know. And there are these kind of service companies. Basically, you have to know that some governments have their own agencies which do stuff. And other governments, they just hire service companies because it's cheaper. Because a service company sell to several governments, that means they can offer per government the things cheaper. Also, governments have budgets. So there are these kind of service companies. Also, they are just entities which make money from it, fraud. And also, military uses mobile network data for target localization. For example, in The Intercept, it was published that, I think they called it drones paper, that about 70% of the data for target localization for the drones, where they use their drone strikes, comes from mobile telephone networks. Which I find pretty, coming from the telco industry, sort of pretty dis, makes me a bit upset. Because they weren't designed for it. They were designed for user mobility and making phone calls. They are not a military weapon, but they are used for it. Yeah, even the German Bundeswehr was observed doing something with the Afghan phone network. So attacks are moving forward. Let's see how the status is with diameter. I'm from research. And when I started looking into interconnection attacks, my manager said, SS7 is old stuff. Don't look at it. Look forward. OK, I'm research. I look forward. I started first, OK, how would SS7 work? And then I looked forward. In particularly, I looked at the diameter protocol as a successor of SS7. And then we looked at sort of where are similarities for attacks. And we started basically with location tracking. It's sort of relatively easily done. Then you have downgrading attacks that basically, because as I said, they are old networks and new networks. And they have to talk to each other. So basically, the attacker comes just say, hey, I'm an old network. I only speak SS7. Can you please translate the stuff for me? And actually, then there are translation boxes which translate the whole attack into the new protocol. Very convenient for an attacker. So the attacker doesn't even have to learn the new protocol. It's very nice if you have a translator. I hope I don't speak too fast for the translators. Then we have denial of service attacks and fraud. Denial of service attacks are also, in that sense, very easy. Because denial of service attack, the attacker can just push the attack towards the network. And he doesn't care if the answer message is correctly routed. So he can spoof the origin. He can use the origin of a partner. Because he can just push the message and doesn't care and just sees, OK, things go down. Worked. So denial of service attacks are very easy in that sense that you can spoof the sources. SMS and one-time password interception is very some because of this kind of password usage. SMS was just a few bits of space in the protocol that somebody thought, OK, let's use it for texting. And it was never designed for security. And yeah, well, there we go. And then we have subscriber profile modifications. So the subscriber profile is basically an entry in the database, in the main database of the operator, which says if you have prepaid, postpaid, if you are GPUS, if you're allowed to roam, what's your phone number, what's your identity, and so on. So if you meddle with that, you can imagine that it can cause quite some hiccups. Then there was by Positive Technology on denial of service and Imzi retrieval. And also at the Black Hat, Hendrik and Daniel presented denial of service. I think Daniel presented it because Hendrik I think had a car accident. But he's OK. And now we are presenting basically data interception for GPS and LTE. Just as a reminder, there are usually some restrictions when things work and when they not work. So that's important. Not all networks are vulnerable. That's very important to understand. So to the talk now, to data interception. And I'm afraid I have to give you a very tiny crash course for LTE networks. But I keep it really to a sort of acceptable level. Let's go that way. So the background, as I said, this was done together with one of our competitors, Adaptive Mobile. And the GSMA is the operator organization, which enables basically roaming, where we also have a security group. And there we discuss the security and what we can do to improve it and so on. And Adaptive Mobile reported on a GPRS traffic interception attack that they saw in live network. And then at the same time, I was working with some colleagues on subscriber profile modification using the diameter protocol. And then we discussed it. I was thinking, hey, we could combine those attacks, the ideas of those attacks, and get a potential data interception for LTE. But we weren't 100% sure about the constraints. But it was clear for us from the beginning that there are probably some constraints that it only works in some configuration. So then I called my colleague, Janne, because we have a test network. As a big network company, we roll out updates for the operators. And as updates have the tendency sometimes to screw up things, we have a test network where we basically copy the exact network of the operator where we go to roll out the software. And we also copy the configurations. So Janne knew the configurations, so what are typically the configurations, and so on. And there we also tested those attacks. So there we figured out what are the constraints so that these attacks could work. So GPRS said basically how it worked, that the attacker was modifying in the SGSN, was saying sort of to the home network, please check if there's a new access point network. And when the user then requests the session, what then happens that this gray cloud there connects to the attacker and asks for the access point. It gets us back, and then the user connects to the access point provided. So that's the basic idea. You don't need to understand all the detailed command codes. But that was the idea. So now a little crash curse in mobile networks. So that's you phone. But you're behind that phone, but somewhere there. You connect to an operator, antenna, radio access network. OK, you have friends, and you have gadgets. These are your friends and gadgets. OK, you move from, let's say, from one antenna area to another antenna area. So you need somebody to take care of your mobility. You don't need to remember the whole abbreviation, just remember M-like mobility. So this guy is basically taking care that you're tracking your mobility, where you move, and so on. So it's a mobility management entity. Then we have a database where it's stored, prepaid, postpaid, all the little details. And the application server. The application server you need when you want to make voice over LTE calls. And here's the database where you're subscriber. DHSS, I put there DHSS, because if that thing is down, then the whole network is down. That's the most important box in an operator network. The MME, there are several of them, and they are for regional level. So if an MME goes down, some region is affected. But if the HSS goes down, the whole network is dead. Meaning that the operator has no income, and he's pretty upset. The network has a H, that's diameter H node, so it's the E in the middle, so. And then there are the operators. That look basically the same. So we make here these assumptions that we have two LTE networks talking to each other. We are not going on all the interworking cases with GFs, GSMN, whatever. So let's keep it easy. That's the easy version, believe me. So as explained with the two-value example, those two network might have a direct cable. Let's say if they are sort of sitting very close to each other, but there might also be one or more of the interconnection providers sitting in between. So now we have all the hardware together, and then there are interfaces, as they are called. So we have the most important and most busy interface is the S6A interface that's between the mobility and the database, because the mobility node needs to know what's allowed to grant to you, what kind of network connectivity you are allowed, are you allowed to use LTE, are you not allowed to use LTE, what are your constraints, what are your credentials, and so on. So there's a lot of data traffic on that one. And then there's the SH interface, which is usually internal, but I come to that. And of course, you also have that enrollment case. So when you are, let's say, here now in, have subscription from, if you have a subscription, let's say, from Germany, and you are then connected to an MME, let's say, in France, then the S6A will be used, for example, to fetch your cryptographic credentials to provide your confidentiality, also while you are traveling in France. Somewhere the French network needs to get your cryptographic keys, so that they can protect your communication on the air interface. The SH interface, in some scenarios, some configuration scenarios, it might also go over the interconnection link, and I will come back to that, so. Configuration vulnerability is settings that are not uncommon and have been observed. The price pressure on the mobile network market, it's pretty tough. And so what they do, operators, which make, they use equipment for different purposes, and they're opening up interface, and so on. And one typical scenario is if you have a big operator, which has subsidiaries in many countries, they buy a first one box. They place it in one country, and then they use it from all countries. Just to see if the service flies, if the user likes it, and so on. And then if it's running well, it's sort of all to deploy it in other networks. Makes sense. Business-wise, that makes perfect sense. If it doesn't fly, it can just swap one server, and the investment was not so big. So, but that also means that they open up the link to this server over the interconnection link. And that has been seen for application servers. And similar, there's a problem with the DNS resolution. Of course, it's cheaper to have one box instead of two boxes. So we have internal traffic, which is for the core network internal. And then we have external traffic, like internet traffic DNS resolution. And some operators just put it on the same node because it's cheaper. Yeah. Also, actually, that's not the configuration vulnerability, but I thought I mentioned that anyway. There's the assumption that the attacker is able to set up an EPC APN. So that's more an assumption on the attacker. The attack that I'm going to present has several steps. Step one, classical data acquisition. This can be quite sort of done well before, it can be done half a year before. You don't need to do it directly beforehand. So you can do it just before, can it do it now and then do it in the attack half a year later. The IMZ, you know each other by phone numbers, but the IMZ is the subscriber identity that's used by the telephone network. So the phone network usually doesn't use the MS-ISDN, your phone number, it use the IMZ for all the messages. So the attacker needs the IMZ to get things running. So we focus on the SH interface. There's something called user data request. It just gives you a profile back. And the profile contains the IMZ, the MP, the whole subscriber profile, all the details the attacker needs, easy. It's a standard feature, it just requires that the attacker impersonates an application server. And that's actually how it looks like on Wireshark. So just for your information, I'm not going to the details of the Wireshark. In case the SH interface not open, we can also use the S6C interface, but not many operators actually using that one either. So the attacker has choice of attack possibilities and actually this attack works the same way for SS7. So the attacker might also do basically the same stuff in SS7. So I presented the details of that in Paris, something may. And also the attacker can do other things, S6A, but they also already need the IMZ. It can make an update location request. This is the most common message over the interconnection that you basically for synchronization purposes, you impersonate an MME and say, please send me a subscriber profile, I need an update. Well, the network is so nice. And this is all possible because there's no source authentication. Other way to get the IMZ then this SMS attack is for example, that you set up a false base station or a wireless LAN access point and one aim. It's okay, I need to speed up a bit, sorry. So APN placing, the attack works that you place in subscriber profile, your fake bad APN and then the user connects to it. That's the basic idea. So how to get the APN there? One way is again using SH interface, profile update requests. This is a network node synchronize with each other. And there's a message called profile update request. And with that you can update the APN in that case. So because you know from the previous step how the subscriber profile looks like, then you can update it because you know how it looks like. You just change some values, tiny bit value. APN details, let me say you can change the APNs for GPRS or for Evolve Packet Core EPC. That's how this kind of update looks like in Wireshark. And also you can use the S6A interface which is a bit bothersome because you cannot stop the SH interface but S6A interface.  If the HSS has reset, then to avoid that somebody needs to manually all update all access points network after HSS reset, it basically the MMEs can update the APN data. So what they should only do that after reset. So there's a logic behind that how you could detect this kind of attack. So this is also possible. So the attackers actually set of possibilities. And also you can update the subscriber profile in the MME that's a mobility node. So there are several points where you can update the profile and then the user connects. So how does that happen? So user connects that's the UEs, that's the user equipment, that's 3GP terminal. It attaches to the HSS, update location and then before without synchronization. That has the attacker basically try an error. You don't know. And then if he has updated basically in the HSS and the MME, what happens then that the MME connects the user to the fake APN. And this only works for one of the constraints I explained before. And actually you say, hey, I have an APN setting in my phone. Why is that not used? Well, that comes from the old times when you still had to configure your APN settings manually. So the MME just assumes you made the typo and you are wrong.  So as industrial research, I cannot just complain this is bad. I also have to fix it. You're from the IT community most of your, let's, hey, it's easy. Let's use IPsec and we have source authentication. Everybody's happy. Well, I wish it would be so easy. IPsec is even standardized for diameter, but it's not all IP. We have, who remembers his third transport protocol, SCCP? Yeah, we still have it living there. And there's the political question. We talk about an international network all across the world. Who would be trustworthy enough to host the root certificate and the key generation worldwide? I know who, Banco Vaticano.  So no way we are going to have, maybe we get something on a regional level one day that's possible. And then there are operators in, that just don't have the money or expertise in two value, which I mentioned before, they have something 47 employees. They don't have a security expert, I'm pretty sure. Maybe they have one, I don't know. Also still, it's no protection against some governments or renting out the service companies or hack nodes or things like that. But IPsec would still be a good idea if there's not already a secure pipe in place. But it's also important that the partners have a similar understanding on hardening and so on. So that's also. For this specific attack, the SH interface, it's an internal network interface. You shouldn't put it, open it up on the interconnection. At the nodes in between, you can also filter out SH traffic. If you really need to do it, secure it properly. DNS, proper internal, external resolution. And for the update location stuff, the SXA potentially block or velocity check, so how fast the user can travel. I'm nearly done. Counter measures on general level. Monitor what's going on. Pen test the network. It's not very common that mobile phone networks are pen tested. Tenant monitoring. What are those mobile virtual operators really doing in your network? Do you really know? Do they stick to the service? You know, it's like this, I accept. And then you just hope they do what they're supposed to do. Share your experiences, that's a bit critical because network operators are always afraid that they might get into trouble with their license. So when they're this close, they have been sort of somehow hacked. They're always a bit afraid, sort of, okay, what does that mean for my license next year and so on. Some things can already be done with business rules. So if you have partners which send you a lot of bad messages, you might want to increase the fees for those partners. So some stuff can be done with business rules. Filter, filter, filter on the network side. Signaling file on SMS home routing, not everybody is doing that. I hope the operator knows which one, I mean. A very specific one there in mind. Then we have the GSMA documents which describe explicitly what you can do and layered security from user level. So don't necessarily assume that the pipe is secure if you can add some security on top of it, do it. I mean, if you have app-based security, even if it's not good, it might help somewhat. And note hardening procedures, they exist, so let's use them. Summary. All networks are attacked that I ever saw, so but not all are equally vulnerable.  The attacks are reality, but still mostly as a seven, but diameter is sort of popping up slowly. It's independent of phone or platform. The interception attacks that are presented depends strongly on what actually is really configured in the network and how it works. But there are networks that are vulnerable. On the general question, if diameter is better or worse than as a seven, if nothing is done, well, it's bad, but I think we have now a unique opportunity to do things better, and I think now it's actually on the right track, so I know that last week, several operators called the IPX provider and asking, do your filter SH traffic? So this conference here really did some improvement to the security. So to all of you and also to the people here and to all these guys working here, so thank you a lot. This really sort of kicked off something in the operator community. So basically, questions on the floor. Thank you for the very nice talk. I think we can actually give that thank you back for some more applause. Thanks a lot. All right, we have lots of time for questions. Please lie upon the microphones. If you have a question, microphone number one. Hi. Are there any other legitimate uses of remote arrays of HSS profiles? I guess it's like setting cold bearing and cold waiting options, but are there legitimate options? What updates are used for them from hearing partners? In the subscriber profiles, everything relates to your subscription. There is also cold bearing. There is special services, which you're allowed to use. If you have postpaid, if you have prepaid, if your phone number is there. If you have proximity security, which beerers you are allowed to use. So there's all kind of technical details in there. But basically, you can do easy denial of service. You can do fraud with meddling there. So the subscriber profile offers a lot of opportunities. Let's call it that way for our attackers. So basically the question is, is there any legitimate uses for visiting networks to update your profile at home? Yes, of course, of course.  But actually, not the visited network doesn't need your whole subscriber profile. And that's the point, yeah. At least it shouldn't change your APN, for example. Yeah, it might be that you want to have local connectivity, because it might be better. So there might be a good reason for giving you this new APN so that your traffic doesn't need to re-route it over the ocean and back. So there are good reasons for doing it. But you might want to keep a control of who is doing what on your network. All right, thank you. Mike for number two, your question. Hey, there's a bit of a gap in public knowledge about SS7 attacks in the wild. Can you just talk about how frequently you see these attacks and in what parts of the world? They're everywhere in the world. So we are doing as a company, we also do sort of assessments of network. And we see operates all the world under attack. It's not bound to a geographical region. Some regions have this type of attack a bit more. Some others have a bit other types of attack a bit more. But they all, the most commonly observed attack is usually location tracking followed by credential theft. So these are everywhere in the world. But not as said, we see them at the border of the network. And they are filtered then out. So not all of those attacks, usually when people monitor it, they also filter in the same go. So you see them all over the world. And every operator has some chunk of attack traffic. But I've been noted that actually, that operators that deploy signaling firewalls have much less malicious traffic, for example, than operators that just look the first time into that traffic. Let's call it that way. So also attackers seem to sort of more or less, I wouldn't say give up, but well. So filtering really helps in several levels. And there is one question from the IRC. Yes, thank you. The IRC wants to know, how many years do you expect will be needed to prevent these attacks? Well, the internet's not safe today. I think mobile networks are going through the same evolution process as the internet went. So I mean, the beginning with the internet was the ARPA network, where you have username password. I knew it then you were in. And I think this network is basically rushing through the same steps. So how to say? I mean, I just do what I can. And it's also an investment question. I mean, security costs money. And obviously, everybody expects security to come for free and also users. So there has to be a balance somewhere. So I don't think, for example, that these 2,000 people in Tuvalu are willing to pay, let's say, 50 bucks more for their subscription per month. That's just not feasible. And still, people there want to be able to call out. So we must find solutions also for these kind of cases.  So I don't think we will ever have 100% secure networks. As we don't have 100% secure internet, even with HTTPS and whatever we have, IP second. Microphone number six, what's your question? I see that there's a big problem of backward compatibility. Do you have a schedule when you will turn off old GSM infrastructure, like 2G, or doesn't it exist? Well, mobile network nodes, for example, from countries which are more progressive, which roll out newest technologies, these nodes are sometimes not scrapped, those radio towers that you see in the roofs. They are sometimes sold, for example, to Africa, second-hand equipment. There's a big second-hand equipment market. And because they look at how much an African subscriber can pay for their subscription per month, so the infrastructure is just not allowed to cost much money. So the GSM will live for a while. It will continue for a while. Also, there are operators which see GSM as a very cheap way to offer IoT connectivity, because if you have to pay as much for a subscription for, let's say, your tablet, for your scale, your car, and so on, you don't want to pay for everything of that, let's say, 30 bucks per month. So these should have a cheaper subscription. But how can you offer as an operator cheaper subscription, which basically means you reuse your old stuff? Especially if it's not time-critical communication. So you recycle your GSM return of investment as much as possible. That's just business logic on both sides. So I suppose we will live with GSM for a while. Microphone number four, what's your question? Are there practical documentation and configuration examples for smaller providers who might not have the resources you have, which are publicly accessible? We discussed in GSM A how to do things for them, and one that the IPX providers might take more responsibility, because very often those very tiny eye-lens are shown. They're connected to one satellite operator, and then it basically goes into the IPX network. And basically, if you just have this link then from this IPX provider, and the IPX provider, then takes care of the security. Security has a service, basically. Thank you. Okay, I'm seeing no one else line up anymore. So thanks for answering all the questions. Yeah, thanks. And thanks for your time.


We are right now packaging up with a company where you can spend crypto and fly in a helicopter to the Grand Canyon and on the way back, shoot machine guns out of it. So we're making it fun and we get this. It's not a big deal to buy any asset, real estate, shares, yachts, private jets, whatever, wherever you want. You know what can be used for illegal activity and actually is used for illegal activity?  I do think that our government is quite confused. This is madness and needs to stop, so shame on the U.S. I think that crypto is not illegal in the United States.