All right, we're going to get this thing started because I want to get home before midnight. I'm Jim Christie. I'm a special agent with the Air Force Office Special Investigations and I'm currently assigned to the Defense Cyber Crime Center. What we're going to do this evening, we have multiple federal agencies represented here as well as the Sydney Australia Police Department and kind of what we're going to do is kind of what we've done in the past. So what we're going to do is do a quick little bio on each of our panelists, let them make an opening statement and then we're just going to open it up to questions from the floor. So first Jason Beckett, Jason Beckett, raise your hand please, there's the director of the state electronic evidence branch for the special services group of the New South Wales Police Department, Sydney Australia, former inspector with the special services group. He went to the corporate world as a godless contractor for a while and then came back to the government in 2003. Holds numerous degrees and he's just a nice guy too and you'll have to pardon that southern accent that he has. Tim Fowler, NCIS and Tim is active duty marine special agent, has worked as a cyber agent for the Naval Criminal Investigative Service in Washington DC for the last six years. Tim has 19 years active duty experience and in 2004 Tim was awarded the bronze star with combat valor device by the secretary of the Navy for his media exploitation efforts in Iraq. So thank you. He begged me not to say all that. Andy Freed from our favorite agency, the IRS, Andy is a, usually there's a target on the other side of it so somebody's, Andy is a senior special agent with Treasury, Inspector General for Tax Administration, System Intrusion, Network Attachment, holy god that's a SINARC, 17 years experience with Treasury and I actually met Andy back in 86 when he first went to work for IRS and he had just left the Kennedy Space Center where as a security guy he actually developed the forensic software that everybody in law enforcement used in those days and as we point out to him it wasn't forensically sound in those days so we now buy commercial products. But most of the people that were wrongfully accused have been released by now. Bob Hopper, National White Crawler Crime Center raise your hand so they see you. Manages the computer crime section, Hop manages as an instructor cadre, manages the instructor cadre for NW3C in West Virginia, does anybody ever go out to West Virginia? Hop just retired about a year ago with nearly 30 years experience with the Arizona Department of Public Safety and 37 years in law enforcement. Hop's a law enforcement career, you know he did lots of drugs, oh no you investigated drugs and air smuggling, okay. Thanks for coming Bob, Tim Huff, FBI cart, got his computer and information systems degree from Jacksonville University and was a U.S. naval officer from 85 to 96. Then we kicked him out of the service and he went to work for the FBI because they'll take anybody. He was assigned to Pittsburgh field office in 1997 and is the chief of the FBI's computer analysis response team and he's the unit chief for those guys. Dave Thomas and I can't find your bio Dave, oh Mike Jacobs, oh man somebody messed with him up, Mike Jacobs, SRA, got groupies, cool. Mike joined SRA in October 2002 as a senior advisor following his retirement from federal government service 38 years. In March 2003 he was appointed to the director's SRA's cyber and national security program.  Prior to that, Mike was the information assurance director at national security agency, NSA, no such agency. Under his leadership, NSA became implementing, okay, yeah, you can read it online. Thank you, it was getting long. Ken Privet, raise your hand Ken, okay, this is a test to see if they know who they are. U.S. Postal Service Inspector General, Ken presently works as a special agent in charge of the computer crime unit for U.S. Postal Office Inspector in General, conducts computer intrusion investigations and provides computer forensic support to a force of over 450 agents. I met Ken probably about 10, 12 years ago, he was the Naval Criminal Investigative Service, NCIS agent, he defected, went to defense criminal investigative service and DOD kicked him out and he went to postal, he went postal. Dave Thomas, FBI was designated as special agent back in 1989. Mr. Thomas was appointed chief of the Cyber Division Criminal Computer Intrusion Unit in 2001 and he's directing the FBI's efforts in many large scale cyber investigations and some of you may know him personally, following a rights advisement. And last but not, oh, we got Jerry Dixon, I'm sorry, and Jerry, you didn't give me a bio, so he's a fed cert, so when we go through, if you tell him what you do and why you do it and who you do it to. Dr. Linton Wells is the principal deputy assistant secretary of defense for networks and information integration, been my boss multiple times through the years and you'll see more of him later. Okay, now if we could start at this end of the table and if you'd make your two minute short statement, advertising your agency, please. I'm Ken Perivitt and I work with the Postal Service Inspector General's Office on the Aging and Charging Computer Crimes Unit and just one thing to say, if anybody owns any postal systems out there, if you could just write the IP on your card and just pass it up to the front, I'd appreciate it. Thank you. 9 o'clock in Vegas, what are you people doing here? I'm with you, I should be, I don't know. This is like my eighth DEF CON, fourth time, third time Meet the Fed. My agency basically is a tax agency for those of you that are not inside the U.S. and basically what we do in my group is we're primarily the internal security people in that position. We do a lot of the computer intrusions, network denial, service attacks and phishing sites. That's pretty much what I do now, full time. My name is Tim Fowler and again I work for the Naval Crime Investigative Service specifically for the Cyber Department. Naval Crime Investigative Service is a civilian law enforcement agency, federal law enforcement agency and specifically with the Cyber Department we work computer crime investigations, both criminal, counterintelligence, counterterrorism, operations and investigations. So we work the full scope of the cyber field, but that's pretty much it. Well actually we do stuff that even make Mark Herman jealous sometimes. G'day, my name is Jason Beckett, I'm from Mississippi, the very southern accent, the land down under. Even though we are from what I've been called a backward country, we are actually the third largest law enforcement agency in the world. As a result we have one of the largest forensic labs in the southern hemisphere. We're both a sworn and unsworn section, most of our staff come ex-military or academia or for a variety of other commercial and consulting organisations. We look at the full gambit of computer security and computer forensics for New South Wales and most of the high end investigations for Australia. Mike Jacobs with SR International, SR International is a system integrator. Its principal client is the federal government and we have a pretty large practice in the information assurance domain. And one of the things I've been doing in each of the DEF CONs that I've come out to is try to recruit additional talent. And last year it was T-shirts for resumes. This year the recruiting budget is down. This year we have fancy NSA refrigerator magnets for resumes. These are rather special refrigerator magnets. You can apply them either to your refrigerator, your desk or your metal headboard. It's up to you. But we'll have a half a dozen of them for a half a dozen resumes. And the transmitter only works about 300 yards. Hi, I'm Bob Hopper with the, how many of you, but raise your hand if you've ever heard of the National White Collar Crime Center, all those people that raise your hands are probably cops. Make a note of that. We are a non-profit DOJ funded corporation that provides free, at no cost training to law enforcement all over the United States. My focus with the computer crime section is to provide computer forensics training and cyber investigations training. We move police officers from entry level to through advanced level training with computer forensics all over the United States. I don't have any magnets to give you. My name is Tim Huff. I'm with the computer analysis response team with the FBI. We do computer forensics for the bureau. We also help out state and local whenever we're requested. We have about 90 different sites across the country. Doing computer forensics, we have about 250 to 300 examiners right now. We're still expanding. We also have the regional computer forensic labs, 14 of those across the country where we provide personnel for those sites as well. Lynn Wells from the Office of Secretary of Defense. First off, to a factoid, which is that in the next five years, roughly 40% of the Department of Defense's civilian acquisition workforce is going to become eligible for retirement. There will be enormous opportunities for people with imagination, talent, and initiative which represents most of you out here in the audience. Just think. Pardon? It depends on what you're doing, actually. Anyway, so there are opportunities. And at the same time, the network is becoming critically important to the department. In fact, there's probably going to be a report released in the next few weeks that's going to call it the most important single integrating thing in the Department of Defense. So there's a lot of opportunities, again, for those of you out here to come learn more about us and really help us draw on your skill sets. Thanks. Good evening, Dave Thomas from the FBI. This reminds me, being growing up in the state of Tennessee, this reminds me of a large-scale temp revival. So if any of you feel the power and the spirit moving you, we're empowered to take confession 24 hours a day, so please come on forward. My job within the FBI is, I'm in charge of all counterterrorism, counterintelligence and criminal computer intrusion investigations for the FBI. I also have our cyber action teams, which deploy worldwide in the event of any cyber emergency. Thank you. We appreciate you coming. Jerry Dixon, I run the U.S. Cert Operations. Basically, we do the federal incident response and coordination across the federal agencies. We work with a lot of the critical infrastructure under operators. Obviously, we do a lot in the vulnerability management disclosure area as well. Some of you, we've talked to, you know, since starting with Black Hat. So if you have vulnerabilities, definitely look us up, especially if you're not getting the progress that you'd like to see from some of the vendors. We can, a lot of times, we can assist with that. And we do have jobs posted out there on USAJobs.gov. So we're always looking for some good talent. Okay. Before we start with the questions, we thought Turnaround is a fair play. You guys play Spot the Fed. So we're going to play a little game here ourselves. It's going to be called Spot the Lamer. Okay. So, these two guys are going to pick out the top six lamers that they find in the audience.  Quickly. Quickly. Marcus, send your daughter up. We're going to do that. We'll do that for you. We had a whole mess. Okay. Just line up right here. How many do we have here? Okay. One, two, three, four, five, six. We got six. Okay. I get to ask the first question, and then each panelist will get to answer a question, and you just point to the person you want to answer the question.  No? No. Okay. Next question. Ken? Number two, have you ever participated in a Star Trek marathon? No sir, I'm a Star Wars fan. Number five, have you ever gone to a family reunion to pick up chicks? Only boys in a family, it's worse. Number four, have you recompiled your kernel yet today? Number two, do you have a copy of Frack in your bathroom? Number six, do you live in your parents' basement? Second floor. You're up there. Second floor. Number four, are your best friends on our IRC channel? Your best friends. Your only friends. Number three, can you speak fluent hex? Number one, what does LMAO mean? Number three, did you ever get caught playing with a three inch floppy? Number five, can you name the entire Skywalker family? Okay, now we're going to let you guys vote. So if you think number one is the lame, or let me hear it. Okay you can sit down. No, no, no, no. Come on back. Only number one can sit down. Number two. When you get the Marines, they wait for it. Number two, you can sit down. Number three, you can stay. Number four can sit down. Number five can stay. Number six can sit down. Now we're down to the last two. Okay, we'll go in reverse order. We have a special prize for you. We have a NSA mug and a free vacation. At this point it's up to you guys. There are only one microphone so that everybody can hear you. So if you want to line up behind the microphone and ask a question, you can direct it at any particular agency like IRS. Am I going to get audited this year? I hope so. Okay, yes sir. I guess I'd like to primarily direct this to the FBI, but of course everybody, I'd like to hear anything any of you have to say. This is a question that I just asked the EFF less than an hour ago. I'm really fascinated to hear your guys' side of this. Right now what is being done or what are you guys thinking about doing to force corporations when they're sending our personal financial data overseas to third-party companies to force them to be accountable for our personal financial data? We are the data owners. They're just the stewards of our data. We're not in the business of course to force companies to do anything. If that's something that you feel very strongly about which is what you do then you should talk to your congressman, talk to your senators and have legislation passed to prevent that. That's the right way to do it. Can you guys investigate though? If you want to ask a question you'll have to get in the flipping line. This is the puzzle. Don't make him angry by the way. The problem I have is I just moved into this apartment complex and every day I go to the post office box and they have a trash can right there and I have found numerous letters and at least first class mail in there. I've even seen a bill thrown in the trash can. I know you guys are federal agents so isn't that a federal offense for throwing mail in the trash can right there by the box? Not of its your own. That's correct. Are you the one that threw it in the trash? If it's not my trash, I understand that one. I'll see you in a second. See me afterwards, please. That's not a good thing. That's a bad thing. Mail in the trash that hasn't been opened is a bad thing. This is for Mr. Jacobs. Do you have any teenagers living in your basement? I have a follow up on that. Are they yours? I didn't hear the subject. Do I have what living in my basement? Teenagers. Not anymore, thank God. So I see that we've got a lot of different agencies up here. I'm curious about your take on how you guys overlap and then your opinion on are we set up correctly right now from a governmental standpoint to combat cybercrime? What for a lab? Come on, panel. I didn't have you up here for nothing. I'm sorry. I didn't hear all of it. Is that a point towards the lab? No, I mean you have a lot of different jurisdictional boundaries, right? And so I mean to us in terms of consumers or corporations that are combating cybercrime, how do you guys align against the problem? What degree do you overlap and then really organizationally are we set up correctly at the federal government level to combat it effectively? I'll start off with that. The FBI is the lead agency for all counterterrorism, counterintelligence investigations that revolve around cybercrime. Other agencies would feed information they get into us. For criminal cybercrime, it goes across multiple agencies, U.S. Secret Service, Postal, everyone on this table. We react very well, work together, we coordinate, DHS, FBI has people there full-time. We have people full-time. We have joint terrorism task forces and every FBI field office which has almost every agency or probably every agency here represented. So the government within the United States works very well and very closely together. All of us have known each other for a long time, which is the reason we're on this panel today, but it works very, very well in the U.S. I think just from an international perspective as well, we've dealt with just about every one of these agencies from either with a local issue or an issue that they've had in our country and the relationship works very well. One of the reasons I'm here is to keep the relationship going. Okay, so just to redirect that a little bit, are there any redundancies in terms of responsibility now or is there a need for any greater centralization of authority? I guess I'm speaking to the Department of Homeland Security in terms of coordination. I mean, centralization of authority in this country probably isn't a good thing. Yes, there is overlap. I mean, several agencies have concurrent jurisdiction, but we work it out. We have de-confliction mechanisms. Okay. All right, thank you. Let me comment on that just real quickly from a state and local law enforcement perspective just because that's where I just came from. There are a number of states around the United States post 9-11 that have made an incredible effort to ramp up their ability to communicate at all levels. I'm most familiar with Arizona because that's where I came from, but there are any number of states out there that are doing at the state and local level. They're in the United States now? Pardon? Arizona's part of the U.S. now? Actually, yeah, just barely. Well, that's more of a state than West by God, Virginia. All right, this is a question primarily for people that are doing enforcement and actually going after people who are doing cracking on systems. With the topic that was brought up for the discussion, it talks about Boyd's theories on getting inside someone's decision loop and following up after someone and getting in on the weaknesses on their system. For the crackers that are out here in the audience, a great deal of them actually, that's their bread and butter, they get into the weakness of a system. My question for those of you that are doing enforcement is where are the weaknesses that you can discuss for the crackers, where you can get inside their decision loops and you can actually come in and catch them that way? Anything you can share? Perhaps some of the audience could explain how they got caught. Actually, I wouldn't mind doing that. I wasn't really caught. I actually properly reported certain events through the proper channels and went ahead and had a counter-terrorism investigation conducted. Didn't find out until four years later through a frame information act. However, I don't know. I think a short answer was... The question kind of like went over the head like... Could you be more specific? No, no. What was the question again? You're supposed to be asking. I think the other gentleman asked. I think how we get involved in computer intrusions. From the IRS standpoint, strictly the IRS standpoint, I can tell you that the only intrusions that we generally will work are those involved in other crimes that primarily deal with fishing, impersonation, or threats. So generally, when we get involved in a case, we find out that at some point an intrusion was made and that's where we get the link in. I hope that answers the other gentleman's question. I just know from personal incidents, usually it's not the intrusion that's caught. It usually goes very undetected. But anyways, I have a question. Traditionally, Nita Fed has always been a big recruitment thing for different federal agencies of different governments and everything. Why would anybody from the scientific community want to work under the current Bush administration slash regime for an administration that continually tries to silence a lot of the scientific community? What incentives are there for us to come work for you? We make a lot of money, we have a lot of fun. Just so you know I'm not a Democrat. I have a question for our FBI friends. Can you tell us who the most wanted cyber criminal is and what did they do? J. H. Afani. J. H. Afani is the only computer intrusion person ever on an FBI wanted poster. He was the mastermind of the FoodNet investigation, which was the denial of service attacks against his competitors. And he's currently at large. J. H. Afani. He's Moroccan. I got a question for y'all. I'm not sure who exactly this is directed to. But there have been a lot of reports in the last few years of people, hackers wouldn't exactly be the correct term, but I guess we can use that for lack of a better one, that have found weaknesses in systems and applications, most commonly online systems, web systems, through no malicious intent, you know, that may have been looking at something and stumbled upon it. Now, back in the late 90s, memory serves me well. Most of these people, when they reported, at least from what I hear, they reported it directly through the company. The company basically thanked them for finding a problem and fixed it. But now it seems like when they report these issues, they are immediately charged with hacking the systems, cracking into them, and federal charges are brought against them. I'm just wondering from your perspective how you distinguish between a legitimate error that's found in a website versus malicious intent. Or is that distinguish, distinction made, or do you just prosecute fully? I'm not. Do you have a specific example of someone who's arrested for doing that? I can't think of one off the top of my head, no. Because I don't know of anyone specifically that, through a legitimate purpose, found a vulnerability and reported it to a company that then was arrested by the FBI. Absolutely. Okay, that would be a good follow-up question then. Thank you. Let's say that a vulnerability is found then. What would be the correct way, safe way to report that? Who should be reported to? Sir. Report it to your local law enforcement. If you've done, I mean, you have to be careful when you're looking at, again, is did you just accidentally discover vulnerability or were you probing a system trying to find one? There is a fine line there. You can walk between what is legal and what is not. Right.  I think if you take a look, I mean, just from October until now, there's been what, over 5,800 vulnerabilities identified.  And I can't think of any one of those so far that's been reported to, you know, the U.S. or the DHS where somebody's, you know, been prosecuted.  So, you know, again, I don't know of any specific examples in that one or part of it. Okay. Thank you. Well, I obviously have a question because I'm up here, but it's good. I have dealt with a few attacks. I've seen some people break in and through forensics. We've discovered who it was and a lot of the time they're in countries that you don't think that we could prosecute like North Korea or Russia or China. I'm wondering what is being done to capture these people and have we had any success? Yes. We've had outstanding success. 80% of what we work is international with the FBI. We work cooperatively with the Russian government. We work cooperatively with China. We work cooperatively with, we have an MOU in place in South Korea. I just came back from investigations where we've done in several Eastern European countries. So, we have a very outstanding relationship with most countries around the world. All right. So, this is kind of a strange question. I'm in a band called Preteen Porn Star and I own the domain named preteenpornstar.com. Periodically, we get emails that are in really bad English, terrible spelling, asking us for, you know, are we trading pictures or whatnot of, you know, underage people. And at some point, they'll always go into perfect English and say, I know this is illegal, but it's sort of a question. We kind of ignore the emails, but I'm wondering, are those cops hunting? If they were, we wouldn't tell you so. But no, that isn't the way law enforcement works. I mean, we're not going to solicit that. Now you're talking about entrapping someone. There is so much child pornography and sexual exploitation of children out there going on that we get and see on a daily basis to go out and create a phishing scheme, if you will, to try to look for someone who's not even predisposed to do it. No one up here has the resources to do that. That type of activity, though, should be reported. So I should forward those to you guys when it happens. Absolutely. Okay. Thanks a lot. It gets us hits, man. Don't know if I could beat that one. I'm just wondering, does anybody have a neck beard? Neck beard. Come on in the audience. Someone has a neck beard, right? Give that man another drink somewhere else. Refresh his drink. I have a quick question. Actually, two questions. Smaller companies, usually, they don't have too much budget to spend on the security if they discover something. They say smaller companies always go to local law enforcement, they say this is over my head. This is over our head. So here's the content for FBI. And the FBI will just tell them, you have to really lose so much money before we will take care of you. So what is the best way to get around for the smaller company if they think they are being attacked or anything like that? Probably the best way is to report it to the Internet Prod Complaint Center, which we have where we process 200,000 complaints a month. Your small complaint is if it's aggregated against complaints across the United States and sometimes worldwide, may show us that the level of that incident is actually high enough that we would actually go out and investigate that. So I would encourage you to report those incidents. And again, the Internet Prod Complaint Center online has a website in the form for doing that. Okay. And second question. If they are still suspecting something is going on, is that the right suggestion to actually get them to say, to actually ask them to install this key logger so they can prove to them, prove to whoever is going to investigate. This is why I did, and the versus is not what I did. I'm sorry, I didn't get the question. Should I actually recommend them to install the key logger so they can actually show all the activities they have done versus the one they have not done? Should the person you reported to, should you ask them to? Yeah, the companies. They would have to come to you with specific legal authority to get your consent to do that. But if any federal agency or state local for that matter shows up, then they will tell you what the investigative alternatives are of what they could do and what the legal authorities are, they could do that. Okay. Yeah, but the problem is they have to wait for the law enforcement to actually tell them what to do. I think that's the problem.  I see. I just want to protect the evidence or show the evidence in the long run.  I see. Okay, all right, thanks. Meet the Fed is kind of cool. It's nice to see faces, but it's on a national level. Besides going out and breaking the law locally, how can I meet the Fed in my area? I recognize you and I think you have. How are you guys doing? First of all, I'd like to say I spot a Fed, but wait a minute, a couple of people want to answer his question for him. I mean, just quickly, if most of you belong to companies or work for corporations, there are avenues out there for you to meet your federal law enforcement people. We have within the FBI InfraGuard with over 14,000 members. We have the InfraGuard website, but it's a place where other companies can get together and discuss vulnerabilities issues that's going on. Secret Service has their electronic crimes task forces in almost every city across the country. So there's multiple avenues out there that if you want to develop a relationship with local law enforcement officers that you can. You may or may not. I know you guys' official position is to enforce law as it is, but I just kind of wanted opinion from the panel as to if they think the DMCA goes too far and reverse engineering should be legal or not. I mean, it depends on what are you reverse engineering? Excuse me? What are you reverse engineering? I'm saying software in general. To me, it's not really wrong to point out the vulnerabilities and things that other people did. And I think the DMCA has kind of gone backwards on that whole concept. We appreciate your opinion. Well, but I was actually asking for an opinion.  You're going to enforce the law as it exists. So why the hell do you ask the question? You got this on tape, right? I didn't hear you, actually. All right. Do your agencies have trouble with investigations being compromised by the actions of corporate security and IT people, people that do their own investigation before they allow you to do yours? Yes. Any specifics, details, examples? How often does it happen, perhaps? It happens whenever a corporation doesn't report it immediately and then gets some kind of guidance as far as how to preserve the data so it can be maintained in a forensic manner and then testified to in court later on. If they go and do their own investigation, they're going to change things from when the incident actually occurred. If we get a pristine or exact copy right after this incident happens, then we can go with that. If they get in there and fiddle with it themselves and then later on find they can't do what they need to do and then hand it over to us, a lot of things have changed. We can't testify to things we didn't do ourselves. In many cases, we've seen cases where the individual organization or agency or company has done their own investigation, think they have fixed the problem and then finally decided to report it once we did the deep forensics on it. We found that they hadn't fixed the problem. They had tainted evidence and they were still at risk the whole time that they had this... they thought that they were fixed. Is this something you run into on a daily basis or is it more rare than that? I just wonder if that... is that a large percentage of what you deal with is compromised that way to where you're unable to do your job or is that not a very big problem? I think we can recover. It doesn't kill the case. It makes it much more difficult to work, but in most cases it doesn't end the investigation. Good evening. This is a follow-up to the comment of the gentleman from the Office of the Secretary of Defense. If we have... if this is true and there's a whole swat of time in coming up, the skill sets that are needed from our computer science-guided NCS programs, are you happy with the crop that you have here or do we have to move more to trade school kind of stuff like the Chinese do in our overseas? And this is actually a question to all of the panel. What do you expect from a computer science undergraduate and graduate education that can work in your agencies? I think a lot of the students we get from the Scholarship for Service programs are really hot. I mean, these guys are really sharp. In fact, I have a couple of them that are here with us today and they're tremendous and I need more of them and what I need them to do is to tow the line before they come to work for us so they're clearable. Thank you. I would echo that. I just hired two little geniuses straight out of college. But one of the... we have the same challenge.  Maybe I'll have a follow-up question there. A few useful index questions and so on. The latest qualifier from the jobs for the federal agency. People have told me they didn't register for selective service, they cannot become postmen anymore. Is that still the situation? You run a follow-up, a few federal laws and then you're eligible for employment in any of your agencies? Not forever. Not forever. But if you were doing it last week, you would probably be ineligible. You could be president. Either. Do you... Give him a magnet. Do you in fact pay taxes, though? I do, sir. Yes. On everything I make, actually. But I've also been a... I'm actually still a security consultant and I've done some work for the government and one thing that I've been very unimpressed with is the level of engagement of the open-source security community in the government. I'm impressed with the SE Linux project and at one point, as some of you may know, you were helping to fund OpenBSD. Something happened there and some of that funding went away. MITRE, CVE, things like that are a step in that direction, but I wonder at a government-wide level is there an understanding that all of this intelligence that you guys are sharing, if you would share that with those of us in the security community in the outside world and I also think it's a budgetary responsibility thing when I see these deep pocket contracts that you guys have with certain vendors in the Atlanta and D.C. area whenever open-source alternatives exist for these tools that will do everything that these tools will do and this is the days of cuts in funding and fewer and fewer resources for you guys. So share with us. Share with SourceForge. Share with the security community that you guys have got to help the security community as a whole instead of throwing money at these vendors. And I guess that's a question. So I'm waiting for a government-wide open-source security initiative and I'd like to reap the benefits of that as with the rest of us in the security community. So first off, there's a lot of great tools. As you know, since you've been a security consultant to the government, there's a lot of tools that get developed from a lot of the folks that support the government and a lot of that gets distributed and a lot of that turns into just take a look at some of the work with Snort back in the day. I think probably a lot of people here saw the picture on Insecure Org of President Bush down at the, I believe it was the NSA sitting next to the screen with Snort and map output and a bunch of other cool stuff. Right, right, right, securitywizardry.com But we all kind of saw that and were like those guys are really doing the same stuff we are but in my experience, all I saw was I came in and did some work for some assessment work for an agency and they had a big stupid contract with a vendor that they tried to scan hundreds of thousands of systems with this particular tool and it didn't work and they weren't meeting their FSMA compliance and all that stuff. Before you go too far down the path there I mean there's a lot of efforts, you know, science technology within DHS there's an engagement with a lot of open-source software out there. I mean there's a lot of efforts underway so I mean if you want to discuss a little bit more after this because I know we're running out of time here hit me up, I'd love to discuss it further. Yeah, just would like to see more of that I guess is what we're saying. DoD just had a major open technology development initiative also in the last, what, three weeks or so. Hi, I know that you guys are all up here recruiting or most of you are can you talk about ways that people who aren't formally trained in security or who don't have computer science degrees might have a way to see your various agencies, those that are interested in being feds but don't have the acronym at the end of their name or the degree to go along with it. Well let me start off with the Defense Cyber Crime Center. Most of the folks who come to work for us have no background with the government, no clearances before they get there and they come in as contractors so we're looking for talented folks that are trainable. We're going to teach you how to do the job. Without college degrees? Without college degrees? I'm looking for talented people. I just spent five and a half hours last night with somebody who didn't have a high school degree one of the most talented women. They've got an expertise, we can use the expertise. It's degrees, right? Can I get a magnet now and send you my resume later? All right. I do have a serious question though. So from the paradigm of a letter of authorization what would you include, what points would you see fit to be included for a private security contractor who is going to do an assessment and audit or a penetration test so that they kind of have you know CYA factor for themselves? That is they're hired by a company they have the authority and they're going to do this work, an assessment for a company but within that the MOU or the LOA they want to have some points covered what would those be? Before any company or any client engages someone to do that kind of work they establish and agree to rules of engagement that defines the parameters that the analyst is going to be allowed to deal with. Now that to a degree as long as you stay within those rules of engagement those parameters you are protected but it's an agreement between the parties that this is the nature of the work you're doing these are the limitations in the nature of the work you're doing and this is what the expectations are of what you produce as a result of the work you're doing. But within that agreement are there some specific and I don't mean from a civil court criminal court perspective are there some ironclad phrases or memorandums that you would want to have in that contract to protect yourself? Sure. The contract vehicles can be very specific. The do's and don'ts are going to be there in the rules of engagement. Okay. So you don't have any specifics that you think that should absolutely be germane to that kind of a...  Alright. Looks like we have two minutes so... Yeah. First of all I want to say it's kind of interesting to hear the service for scholarship statement because I'm going into that program so I'm excited about that. But my question is actually more for the FBI guys. We're doing a lot of training in my university on forensic stuff in general. How many or have you run into cases where these guys actually follow proper forensic protocol doing their investigation into a problem and then turn it over to you. And how many legal problems does that bring up if they actually do follow the proper protocols and stuff? Proper procedure for forensic protocols are determined by the agency organization that has a forensic lab. And most cases nowadays they need an accredited lab by some accrediting body which FBI is going through right now for our headquarters labs. I have not run to any occurrence yet where an organization has followed their proper protocol and then handed it over to us and we've had a problem. Mainly because the basic precepts of forensics is make a copy of what you got and don't change it. After that everything is pretty much easy. We can always take that image and reconstruct and go with it. We would prefer not to be told about it later on once they can't figure out what to do. We can always do parallel efforts but we'll get what we get and we'll try and help wherever we can as far as the forensic aspects of it. Law enforcement doesn't control crime scenes. We're used to being flexible. Unfortunately we just got the X. So I appreciate everybody coming. I think some folks up here have got things to trade. We're not giving them away. So you got to trade for this stuff. So thanks everybody for coming.


This video will cover the second part of the following objective from the endocrine system, list the major endocrine organs and the hormones they secrete, then for each hormone discuss its effects on target cells. In previous videos we have discussed the role of the hypothalamus, pituitary gland, thyroid gland, and parathyroid glands. This video will focus on the adrenal glands, which are a pair of pyramid-shaped organs located superior to the kidneys. The adrenal glands are also known as the suprarenal glands, indicating their location superior to the kidneys. Adrenal, referring to kidneys, or suprarenal or adrenal glands, are these pyramid-shaped glands located superior to the kidneys. The adrenal glands produce stress-response hormones. The adrenal glands are organized into two distinct regions that produce different hormones. The outer layer is the cortex, and the adrenal cortex produces the steroid glucocorticoid hormone cortisol, whereas deep within the adrenal gland, a region known as the adrenal medulla, produces epinephrine, also known as adrenaline. Epinephrine is released in response to the sympathetic nervous system, and this is rapidly released in an alarm phase response to stress. In contrast, cortisol, the steroid hormone produced from the adrenal cortex, is released in response to a hormone, the tropic hormone from the anterior pituitary known as ACTH, or adrenal corticotropic hormone, stimulates the adrenal cortex to release the glucocorticoid steroid hormone cortisol. Both of these stress-response hormones will stimulate an increase in blood glucose levels as one of their ways of helping the body cope with stress. In the hypothalamic pituitary adrenal axis, or HPA axis, the hypothalamus responds to stress by releasing CRH, the corticotropin-releasing hormone, into the hypothysyl portal circuit, the blood flowing into the anterior pituitary. CRH then binds to receptors on the surface of cells in the anterior pituitary, and stimulates the release of ACTH, adrenal corticotropic hormone. ACTH then travels in the blood to the adrenal cortex, and binds to receptors on the surface of cells in the adrenal cortex, where it stimulates the production of glucocorticoids. The primary glucocorticoid is cortisol, and this is a long-term stress-response hormone that will function to increase blood glucose levels. Hence the name glucocorticoid is produced by the adrenal cortex, and stimulates an increased blood glucose level. And a synonym for glucocorticoid is cortisol. On the top left we can see the chemical structure of cortisol, the major glucocorticoid in humans, which is a steroid hormone produced from cholesterol. On the top right we can see the chemical structure of epinephrine, also known as adrenaline, which is the major catecholamine hormone produced by the adrenal medulla in response to sympathetic nervous system activity. Norepinephrine is also produced by the adrenal medulla in response to the sympathetic nervous system, and these are both the catecholamine hormones. Epinephrine and norepinephrine are produced rapidly in response to sympathetic nervous system activity as an alarm phase of the stress response, which works to increase the heart rate, and also works to increase blood glucose levels, helps to mobilize energy reserves in order to help cells in the body respond to stress. Cortisol is produced in response to a hormonal stimulus in response to ACTH, adrenal corticotropic hormone from the anterior pituitary. ACTH binds to receptors on the surface of cells in the zona fasciculata, the middle layer of three layers in the adrenal cortex, and these cells in the zona fasciculata then synthesize cortisol, and cortisol then travels throughout the blood binding to receptors called glucocorticoid receptors, which are in cells all throughout the body. Cortisol will help produce a long-term resistance phase response to stress. One of the effects is that it increases blood glucose levels, hence the name glucocorticoid, cortisol is produced in the cortex and increases glucose levels, so glucocorticoid cortisol increases blood glucose levels. Cortisol also has the effect of increasing appetite, and it will also have an anti-inflammatory effect, which is important because we can take advantage of this medically using medications that bind to the glucocorticoid receptor. We can inhibit the immune system in autoimmune diseases and other disorders of excessive inflammation. There are three layers of the adrenal cortex. We can see the superficial layer is zona glomerulosa, which produces the mineral corticoid hormone aldosterone, another steroid hormone. Aldosterone binds to receptors within cells in the kidney and will stimulate the reabsorption of sodium as a mechanism contributing to increase blood volume and blood pressure. Then the deepest layer of the adrenal cortex is called zona reticularis, which contains cells that produce androgen hormones, including dehydroepidendosterone, abbreviated DHEA, which can stimulate masculinization effects by binding to the same receptor as testosterone, the androgen receptor. In women, DHEA has an important role during puberty. DHEA will stimulate maturation of the hair follicles during puberty. Here we can see the histology of the adrenal gland with the deep layer, the adrenal medulla, where there are large veins and arteries, large blood vessels inside of the adrenal medulla. Then the outer layer of the adrenal cortex contains the cells that produce the steroid hormones, including the major glucocorticoid hormone cortisol. And then surrounding the entire adrenal gland is a capsule. There's a capsule of connective tissue with a dense fibrous layer and then surrounding that fibrous layer is a loose layer containing adipose tissue. Here we see a higher magnification view of the adrenal gland. You can see a large blood vessel inside of the medulla of the adrenal gland and then surrounding the adrenal medulla, you can see the adrenal cortex. Here's another low magnification image of the adrenal gland. You can see numerous blood vessels in the adrenal medulla and then surrounding the adrenal medulla is the adrenal cortex. You can see the staining pattern of the adrenal cortex is lighter compared to the staining pattern in the adrenal medulla. This is a result of the cells in the adrenal cortex producing lipid hormones, the steroid hormones such as cortisol. Here's a higher magnification view focused on the layers of the adrenal cortex. The most superficial layer, zona glomerulosa, contains cells that produce aldosterone. The middle layer, the largest layer, zona fasciculata, contains the cells that produce cortisol. And then the deepest layer, zona reticularis, contains the cells that produce DHEA, the androgen hormone. A negative feedback homeostatic control mechanism regulates the production of the glucocorticoid cortisol from the adrenal cortex. Cortisol binds to glucocorticoid receptors within cells in the hypothalamus and inhibits the release of CRH, the corticotropin-releasing hormone. This leads to a decreased production of ACTH, leading to decreased production of glucocorticoids helping to maintain a stable homeostatic concentration of glucocorticoids. In response to stress, the hypothalamus will increase the production of CRH and that will produce more ACTH leading to more glucocorticoid release helping to respond to stress. But the homeostatic set point will then be returned back to the baseline once the stressor has been removed. An abnormally elevated level of glucocorticoid signaling leads to Cushing's syndrome. This could be the result of a tumor that produces excess of ACTH levels leading to excess cortisol produced in the adrenal gland. Or it could be excessive use of anti-inflammatory medications that are similar to cortisol and also stimulate the same glucocorticoid receptor. An example of a medication like this would be prednisone. These are commonly prescribed in order to inhibit the inflammation that is contributing to autoimmune diseases. Cushing's syndrome results from excess cortisol signaling, excessive glucocorticoid receptor signaling and it will stimulate many of the normal effects that cortisol would have. Cortisol normally stimulates an increased appetite and so in Cushing's syndrome an increased appetite is one of the symptoms. Hyperglycemia, high blood glucose levels is a symptom of Cushing's syndrome because one of the major effects of cortisol is to stimulate gluconeogenesis, the production of glucose. Hypertension, high blood pressure is another symptom of Cushing's syndrome. Cortisol stimulates an increase in blood pressure. Weight gain is another symptom of Cushing's syndrome in part as a result from increased appetite but also because of the way that cortisol affects your metabolism.  In Cushing's syndrome this leads to deposition of fat, increased deposition of fat and there is abnormal localization of these depositions of fat including facial distribution as well as a region on the back often causes a hump of adipose tissue to accumulate on the back. Fatigue and weakness are symptoms of Cushing's syndrome in part because cortisol will stimulate the breakdown of protein, protein catabolism as a mechanism to fuel gluconeogenesis to produce more glucose and excessive hair production as we can see in the image on the left as well as stria, stria are the red mark, stretch marks that we can see on the skin. These are other symptoms of Cushing's syndrome as well as the moon face, the characteristic deposition of fat giving a rounded appearance to the face that we can see in the picture in the top right. The opposite of Cushing's syndrome is seen with Addison's disease where there is low cortisol. Cushing's disease results from an autoimmune attack of the adrenal cortex which destroys the cells in the zona fasciculata that produce cortisol. This causes an abnormally low cortisol level which leads to a decrease in the appetite, hypoglycemia that is low blood glucose levels, hypotension, low blood pressure, weight loss, fatigue and weakness. So you get fatigue and weakness largely because of a decreased appetite, a low energy intake, also low energy available for cells because there is low blood glucose levels, low blood pressure. These are contributing to the fatigue and weakness because the cells are essentially starving for energy. Another symptom of Addison's disease is hyperpigmentation and this symptom can be seen in the pictures of patients with Addison's disease shown here. This hyperpigmentation results from abnormally high levels of ACTH, adrenal corticotropic hormone. ACTH has a chemical structure similar to another hormone, melanocyte stimulating hormone. Melanocyte stimulating hormone has the normal effect of stimulating melanocyte activity leading to the production of melanin, the pigment that gives the skin color. However in Addison's disease because the negative feedback that maintains the homeostatic level of cortisol is disrupted, excessive ACTH is produced and there is no cortisol to provide a negative feedback. And ACTH has a structure similar enough that it can still bind to the melanocyte stimulating hormone receptor and therefore it stimulates the production of melanin leading to hyperpigmentation.


Hello, welcome back. This is Christian. In this lesson, we're going to implement the function to insert a new node before an existing node in a singly-ling list using Python. So here's an example. Let's say if you want to answer the frog in front of the mouse, okay? So typically the way you do is you create two nodes, one to point to the current node as you traverse down the list. And then we have another node called previous or previous node that points to the previous node. So these two nodes will be incremented sequentially down the list until the current node finds the matching key. Once you find the key, then we want to do two operations. First, we want to set the current new node, which is the new node here. The next pointer is going to be assigned with the current node. So it points to this current node. And then we're going to point the previous next node to the current node. And so in this way, we're actually breaking this bond, this link right here, okay? If you don't do that, you might break the bond. Now, of course, some people might like to do just with one additional node where you can check for the next dot next as the current node, and then you don't have to have an extra node here. But I mean, that's okay. You can do it in several ways. I like to do this way because you have two nodes to deal with and you always focus on the current node, okay? So this is one case where you insert a node between two nodes. There's another case where the first node might be the key. So if that's the case, then we have to do a prepend. So the process is the same as a prepend. And I think I have a diagram for this as well. So yeah, it'll be like this. Let's say that the target is the dog and since it's the first node, then we want to do the operation where it's similar to, kind of similar to before. We want to assign the new nodes next pointer to the current node. In this case, it's the head. And then since this is the head, we want to update the head node to point to the new node. So the new node will come, it's new head. If you don't do the update, you've got to get the head pointing to the second node and that's incorrect, okay? A little bit tricky, but, you know, lots of trials and errors we asked you to, but let's go and see how this is done in Python. Okay, so back here on the IDE, here's a beautiful list of all these emojis here. Okay, I'm going to close this window over here, a little bit too many panels. All right, okay, so let's, let me let me close this one now. It's a little bit distracting. Okay, let's go to our list over here and we're going to insert a node, a function right below here. Maybe right here, we call it insert before key. We will take this self, the key and the new item to be inserted. And then we're going to say, again, a base case itself.head is no or none. They don't return nothing, okay? So that's, we can skip that. Again, you don't need to do this, but it's kind of common because I want to check down here anyway, right? Because I check in the loop anyway. Anyway, so if you notice in the previous one, when you insert after, notice we sent the key to a search function up here and the search function will return the node matching that particular key, right? And then we just sort of after that. In this case, we can't do that because you know, even if you found the current key, we still need to know what the previous node is, right? So in a way, we have to kind of do this manually ourselves, which is not too difficult. So first let's create a new node. It's going to be assigned to the new node instance of the node class. And then we're going to create two additional nodes to the current node. This is assigned with the head node up on the head. And then we have a previous node, we'll be pointing to none yet, okay? It's not assigned yet. So the idea is that we're going to traverse the list. So we'll say while the current node is not equal to null or none. That means it's not the end of the list yet. Then right away, you want to do this. We're going to do a previous node. This is going to be assigned to the current node. And then the current node is going to be a point assigned to with the next node, which is the current.next, okay? So you make sure you do that before you forget because that can cause your code to be infinite loop. So what about here? Then we need to check to see if the current node is the key, right? If the current node, the item is indeed the key. That's so that we found it. And then two things can happen, right? So the first thing is, of course, we want to set the new nodes next right away to the current node, okay? And then now we have the two special cases. If the current node is the head node, that means that we have to assign then the head to this current node. Otherwise, we just call the previous.next assigned to the new node, right? So we're to special case.  So that means that if the previous node, how do we know this? If the previous node is none, that means that we have never, you know, touched the previous node at all. So as we run it for the very first time, it matches the first node already and we found it. So if that's the case, then the previous node will always be null, right? Otherwise, we would have set it down here already. So it's not true, okay? If that's the case, then we actually, what did I do? We found it, we just set itself down head to the new node and then we're done. Else, that means we're gonna move to the previous node. And it'll be the previous node.next assigned with the new node, okay? And that's it, right? Otherwise, if it's the head node that the head doesn't have, if the head is indeed null, yeah, if you do it incorrectly, you're gonna get, yeah, it's gonna be, it's gonna be correct. So we want to make sure we do it correctly. Okay, and then finally down here, make sure we update this self that size one. And then we can just do a return here is one. Okay, we return or we can do a break to break out of the loop, doesn't really matter. Some people don't like too many return statements in the function, some don't mind. You know, some people prefer just to have one return statements in function. That's something that you can debate at a different time. Some people like to have a very pure object oriented approach where there's only one return statements. I don't know, I'm not a pure, so whichever is convenient, which is best, you can use that, okay? But it is, can be very confusing if you have a lot of return statements. So I mean, don't overdo it. And we're simple one like this, it's fine. Okay, so if that's the case, then I think we should be good to go. So let's give it a test and see if it works. Let's go over here and let's say that one, I wanted to copy this right below here. Alice is growing. And so I wanna print, maybe I put a message here. I'll do insert after. Okay, maybe I should do this as well up here, you know, this here, do insert before. I should do this after as well, right? Not sure why I have two of these, what do I have? Oh, I'm sorry, okay, the tail and the head, okay, that's fine. So focus on this one here, okay, this is, this is gonna be before, so before. Okay, so I wanna pick a different animal or they got the lion. So I have my emojis right here, you wanna look at it. This is the site I used to get all the emojis from, getemoji.com, very beautiful site. So I'm gonna use the rooster select here.  Let's go with, let's go with the rooster. It looks pretty good to me. And so we're gonna replace the lion with the rooster.  So before the cat, all right? So let's see what this looks like. And let's give it a try. Oh, here we go. Let me make this a little bit taller over here. All right, so here we have, this is the one right here, okay? The previous list looks like this. This is just the reverse, right? So the list for this function like 23 is actually this one here. So we have the cat right here and we're gonna insert before the cat. So as you can see the new list down here, there's a cat and here's the rooster before the cat. Okay, so it looked good. All right, so let's do another one. This time we're gonna print, again, make sure we test that, test this before the head, okay? So the head is the frog. So let me copy the frog, put it down here. And let's pick another animal before the frog. Let's pick a, I don't know, a lobster. That looks good to me. And the lobster goes before the frog. So lobster should be number one. And here we go. And there it is down here. It's kind of hard to see, but you can see it's down here. Okay, maybe I should clear this. Sorry, one more time. Boom, there it is. All right, so here's the frog and before the lobster is indeed now the fun. Excellent. All right, so this is the implementation again. It really looked very, you know, not that difficult.  All right, so in the next video, we're going to do a delete and we'll delete the note at the tail of the list or at the head. I don't know which one yet, but we'll do one of those. Thank you.


Now, we are going to see how to upload a document or a text version of the document in the lessons. Just log in with the course, go to one lesson, I have already created a lesson. Here below the video, I just want a PDF document of that video or related to that video some contents I have to display on the portal. If it is less than 500kb, you can upload it in the asset and give the link here. Since asset can accept only the documents within 500kb, if it is more than 500kb, you can just go to that course, go to the drive of that course, you can just create a folder text document for your reference, you can add all the text document whichever you are giving it in your lecture. Here upload the file, I am just uploading some file, you can upload it, try it click and get link, copy this link and paste it here. You can now able to see this tab text version above the video. Since I have not shared this document with this ID, with the course ID, I am not able to access this. So just when you are uploading this file, after uploading, right click and share this document to the admin ID of the course, here my admin ID is online courses portal. So I have given this and click this get shareable link, click this drop down in more option, public on the web, save, then send, then after this give the link, paste the link there, click this text version. Now you will be able to see this document here. Since I have not shared with the admin ID, it refers me for a permission, if you are not sharing this, every student will be able to give this message as refers to access and they will be sending emails, so it will be a confusion for you. So just whenever you are uploading a document, just share it with the admin ID of the course and then give the link here, so it will be easy for them to view the text version of the document above the video.


This is the fourth story in Impact Comics from E.C., right? Impact number 3 from 1955. And it looks like it's the story of the main cover. Okay, and this story is written by Al Feldstein. The pencils and inks is by Graham Ingalls, and the colors is by Mary Severn. Okay, so let's read this last story in Impact Comics number three. And it's the lemonade stand one. Look at that. Look at that. Beautiful. Sam Crowder Group. Candy, cigars, cigarettes, and there's a girl that's set up. Haha. The owner of the store is not liking it, right? That's the old man in front of the on the cover. Cool. Let's read the intro to it. Let's read the intro to it. Cute? Cute? That was what Harris, the tobacco salesman, called the dirty-faced kid cute the fool. A lot he knew, and Sam knew what Harris was thinking. In Harris's eye, a lot of other, a lot of others, Sam Crowder was a mean, penny-pinching old crap, as if Sam cared. What they all thought. In the slums, you pinch pennies or you starve.  He earned the living, didn't he? Nobody took advantage of Sam Crowder. So Sam Crowder, there's his name on the storefront, right? And this is the girl selling lemonades for five cents for a big glass and three cents for a small glass. Look at the glass size is there too, right? Cool, cool, cool. There's the old man. Where are those two guys? This guy's enjoying himself. Well, competition, eh? Crowder? How come you see?  Going soft in your old age, he says? The cigar man? The day I go soft, I'll be bankrupt. Competition? Bah! Her and her good fairy. Good fairy? What good fairy? Look at the old man. Never mind. You salesman, you were supposed to be here yesterday. I'm almost out of cigars. It's about time you showed up. The old man says. And you loafers, how many times do I have to tell you not to hang around my store? Ah, quit racing your motor, motor pop. It's a free country. Why don't you, why don't you smile once in a while? You might even get to like it. The two guys say. Beautiful artwork. Beautiful artwork. I'll take a glass of lemonade. Any? Make it a big one. The old man says. The competition seems to do all right, Crowder. I can understand why you're sore, but after all, a little girl. So what if she's a little girl? You're just like the rest. You never think that I've got to live too, the old man says. Say, you really are sore. If she's cutting in your soil fountain business that much, how come you haven't gotten rid of her? The salesman says. How come? Don't you think I've tried? I pay taxes. But do you get the protection? Not me. A dirty-faced kid comes along and everybody goes soft and as mush, the old man says. But the police. The police. You think that's the answer? Huh? Well, let me tell you about the police. They're on her side. They have been right from the start, the old man says. The police. Huh. Harris was so smart. Maybe you could figure it out. So Sam told him the whole story. Right from that morning, two weeks back, when she, when he'd come to open a store, and there she, she'd been. What the? The old man says. I can just picture him. What the? You. Who told you you could sell lemonade here? The old man says.  Relax. You don't have to scare the kid half to death. Or do you enjoy being mean? The cop says. Look at her. She's like scared. See, right off. Sam's been, been in the wrong. Sam had a reputation for being mean. Without it, the whole neighborhood might take advantage of him. But that made no, never mind. Please. I, I didn't know I was doing anything wrong. She says. Oh, she's got tears coming out. That's a tear-jerker. Look at that. Look at that. Look at that. The little kid cries. She gets to do whatever she wants. I won't bother anybody. I just want to earn some money. It's for mom. She, she's not feeling so good. And we, we haven't had much money since daddy died. Oh. Well, Crowder, do you want me to run her off? You're within your rights. If you do, just say the word. Or do you think it would be a good idea to act human just once? As if Sam hadn't known what Murphy, Murphy really meant. A cop could make plenty trouble for you if he wanted to. But that wasn't why Sam turned away. Did I ask you? The old man says. Please, Mr. I can, I can see that you're mad. I didn't mean to make you mad. That little girl says. Ah, look at all the people lined up to bi-laminate. The way they grinned at Sam, it wasn't that they cared about the dirty kid. Sam knew them. They just didn't like him. That was why Sam had walked away. You should have seen them when Sam had gone inside. I'll take a big glass, little girl. Make that two big glasses, kid. Ha-ha. Everybody by him. The cop smiled. The kid, her name was Annie, did quite a business. They bought from her just to spite Sam and Murphy, the cop. You'd have thought he was part owner of that stand. Later, he checked on that stand like it was a bank. And next morning, when that good fairy business came up, he acted as if he'd really believed it. Mr. Murphy, Mr. Murphy, look. What's this? What's this? What's going on here? What's all the excitement? What are you two trying to do? Rune my business completely? Simmer down, Crowder. Nobody's trying to hurt you. The cop says. Mr. Crowder, look. My lemonade jar. It's full. So it's full. So what? The old man says. So it wasn't full last night. Annie brought some more lemonade with her. But she doesn't need it. The way she figured, a good fairy came last night and filled the jar for her. A what? The old man says. All right. All right. So it hadn't been the right thing to say. Could you believe a blame Sam for being surprised? Murphy didn't have to get so mad. I said a good fairy, Crowder. Annie's sure. Annie's sure of it. The cop says, dragging the old man away. And she's going to stay sure. You're not going to spoil things for her, Crowder. Understand? One word from you. And what?  I know my rights. Don't you manhandle me, the old man says. Okay, just remember, Crowder. Maybe you're proud of being the meanest character in the neighborhood. But you're not going to spoil things for that kid. Mean? Am I? How else do you get along in this world? The old man says. I suppose you like me to get all soft and gooey, wouldn't you? When you're soft, people walk all over you. The old man says. How would you know? Just keep away from that kid, Crowder. His beautiful artwork. Look at that. Just beautiful. Just an aside. Got a feeling McFarton took a lot of artistic liberty with his faces. Right? Or learned a lot from the masters of how to draw faces. That's what you gotta do. That's what you gotta do. Keep away? Sure, Sam kept away. But nobody else did. Word get around. Every morning, there was a full picture of lemonade. That's all Sam's customers talked about. Look at that. So that's the little girl. I wonder who really who really does fill her picture for her. And it's all pissed. So you've heard about her too. Fine thing, isn't it?  The little brat? A lot. A lot. The law cares if I lose money. The old man says. This is a fun, fun operation. It's gotta be. Let's check it out. Let's check it out. Her and her fairy tales. She probably fills the picture herself. She's smart. Too smart. What'll it be? The old man says. He's taken orders. It was going to be two ice cream sodas. But we've changed our minds, the couple say. Two lemonades, little girl. The more Sam complained, the more Sam complained, the more his customers bought from the kid. They certainly were easy to fool. That sure was good lemonade, Annie. Of course it was. Anything the good fairies make just has to be good, she says. Awesome. Awesome. So that was the story Sam told Harris, the topical salesman, the whole thing. And the way Harris looked at Sam, you'd have thought Sam had killed someone. So that's what it's all about, the salesman says. That's what it's all about. And you don't have to look at me like that, the old man says. In this life, you make sure that people know they can't take advantage of you. If you're smart, and I'm smart. Yeah, sure, Mr. Crowder. Sure, the salesman says. Harris despised Sam too. It was obvious. Well, let him. One thing was certain. He'd never tried to get the better of Sam. He knew Sam's reputation. And Sam knew that Harris was just trying to get back at him when he left and stopped outside. I'll have a lemonade, Annie. And after I finish it, I'll have another, the salesman says. A lot of Sam, a lot Sam cared what Harris thought. By closing time, Sam had forgotten all about it. Outside, Annie was closing down her stand too, covering it with paper. Sam nickered that Murphy. He even walked Annie home nights.  Sam locked the store and watched Murphy and Annie disappear around the corner. Then he moved stealthily, warily, to Annie's little stand and lifted the paper. Beautiful artwork. Look at that. Beautiful. And filled her picture with lemonade. And walked on home, smiling inside. Who'd figure Sam was the one? Everyone knew Sam wasn't the kid. Kind.  Yes, Sam was Annie's good fairy. It was the only way he could help her. After all, he had a reputation to maintain. Haha. The end. Awesome. Awesome. I actually thought this was a flim-fun operation that the old man and the girl were working together. Awesome. Awesome. That was fun. That was fun. What a great series. What a great series.


Good afternoon. My name is Carl Mess, and today I'm going to share with you my social enterprise called Compete for Community Investment. Now, there are two key takeaways I want you to have from this presentation today. One, that we want to promote sustainability, and two, that we want to provide funding for sustainable development projects in your community. Now, the picture on the left here is a picture of what a successful modern economy looks like. Well, the picture on the right is what that economy has to work with, and that is one right environment. Now, I can sit here all day and talk about sustainability with you guys, but I want to highlight one underlying factor, which is that there's a lack of an incentive to act sustainably currently. Now, what I propose is that we make sustainability fun. Now, this might sound a little bit weird or a little bit crazy, but it is possible through the competition that brings a community of people together. Now, I see this competition being very similar to fantasy football, but instead of picking football players, you will pick five companies that you believe are the most sustainable. Now, at the end of the competition, the team that has garnered the most points will win, and what they will win is the opportunity to allocate the prize money to the sustainable development project in the community of their choice. Now, I'm sure you're wondering, how are we possibly going to judge how sustainable a company is? Well, in a test run that we did with about 10 participants, we used the number of times that a company was referenced for being sustainable in the news. This on the board is a picture of what a sustainable team looks like, and as you can see, it was a really successful test run as there was a lot of points that were accumulated over the course of this mutual task. Now, a few things that we learned was that through the technology we used was Google Alerts, and we got a lot of alternative news sources for your references, and we foresee for the competition that we will be using mainstream news sources over the accumulation of a month long. Now, also a thing that we learned was that we want to allow people to change their roster on a daily basis, which will allow the user activity on a website to increase. Here we have a prototype of what the website could look like. I just want to highlight that on the middle section, you can see how you can compare your team to what the leaders are looking like to make a competitive, as well as on the bottom, there's information about what a sustainable community investment is and how we have done with previous sustainable community investments. Now, our target market is mostly millennials, so we did a survey at the Stavis where about 15% of justies responded, saying that they were willing to participate in sustainable activities. Now, that translates to about 500 Stavis students, 3.6 million college students nationwide, as well as 11 million millennials nationwide. We can also target professional sustainable networks. There's one out there called that, in fact, that has almost 100,000 users. Now, how are we going to capture this audience? One way is through college ambassadors. I want to pay a student on campuses across the nation to raise awareness about this game, as well as to pay them for the number of users they get to use this game. I'm thinking it will be about $5,000 to get the first 10,000 users. And for another route to market is social media marketing. We can use Facebook to target millennials as well as LinkedIn to target those professional sustainable networks. It will cost between $25,000 and $50,000 to get 10,000 users. Now, this is based off of how LinkedIn or Facebook, if you want to target a demographic of users, if a lot of other people are targeting that demographic of users, it bids off the price of advertising those users. So, that's why the price is variable. Also, community investment will be a very valuable way to spread the word about our competition in the future after we have made a few contributions to communities. So, our competitors, one that I want to know is called WEAC, and it's built by a college student on a campus in Zurich. And what they've found is that people are not just actively sustainably because they're activists. They are getting people that are not sustainable activists to act sustainably. And this is because they re-board people with points for paper, or seeing pictures of themselves actively sustainably on their social media website. EqualChoices.com is another company that's trying to use the idea of making sustainability fun to get people involved. Now, with 20,000 users, we can gain a lot of money through advertising revenue. Advertisers will want to target the demographic that we have because our demographic is going to be dense among a few more millennials that think sustainably. So, using some information that we found about how much money Facebook, LinkedIn, Yahoo, and Google make per user per year based on online revenue, we think we can get $50,000 to $200,000 in the first year. Now, costs, we already talked about marketing, but the website will be a little bit of a variable cost because we do not know yet how much money it will cost to implement technology to judge the sustainability of the competition and automatically award points to the teams. Also, we'll have to use some of our own money for prize money before we gain sponsorship through other companies. The future of this company is really bright. I see there's many options for judging sustainability. One such way is using the Global Reporting Initiative, which comes out in May, and basically it's just sustainability reporting. We can have people choose which companies they think are going to cut down their carbon emissions the most. As well as we can structure the competition in ways that makes it more interactive. We can allow people to be in leagues with their friends so that, say, you graduate college and you want to stay in touch with your friends, you can use this game to help facilitate that interaction. And finally, I just want to see the community investments grow, competition after competition, so it's a really meaningful contribution that we will be able to make, as well as potentially setting aside a month out of the year that could be deemed sustainability model. So with that, I just want to say thank you to everyone for being here today. Special thanks to Dustin Marga, our professors, who have done particularly helpful. My friend Constance Hilding, as well as I've done here, who has done a little mentoring for me. So with that, thank you. A little skeptical about the sustainability measures. Have you contemplated any other rules to measure? Tell me a little bit about those and why the rules are made. Is there something you want to do with other challenges? Yes, so the news references was kind of the most feasible and the easiest for us to test out. Like I said, the Global Reporting Initiative, we could make something out of competition out of that, but that only happens in May. We've also thought about social media, how the companies are all on social media, and which companies are being used for sustainability using like hashtags on Twitter and things of that nature. But this is the part of the company that we really need to grow and just kind of get more ideas to really solidify how we're going to judge how a sustainable company is. The challenge that I see is that it seems like it's a judgment of how companies are marketing themselves. Would you sustainable as both a rule measure or a sustainable? Exactly. So that's right. So you need to concern particularly for true believers who might be very interested in sustainability? I hear your concern there, and that's particularly a problem that the Global Reporting Initiative is trying to solve. There's no standard for what corporate social responsibility is at this moment. I'm thinking if we really use the news references a month long, so like 12 competitions a year, when I did my test on it was only a week long and we were able to get a lot of points generated that week. So I'm thinking a month would be pretty interesting. Can you dig in on your platform a little bit so I noticed on your box, it looked like you were building it as a web-based platform versus an app-based platform. Can you talk about it? Yes, a website is a lot cheaper and easier to get going on the front end and then adding an app afterwards is a good enough to go with you. So that's kind of what we're thinking. How often is that really realistic for where people are at in terms of how millennials will engage? It's a good thought. I believe a mobile website will kind of solve that problem for a mobile friend who's website should say. And in the long term, after we get more funding, things like an app will be a lot more feasible. Add that jack-in. Yes. Huge compared to the news I got. I'm just curious if you can say there's other long-term and from the very beginning, the numbers are going to be hard to use. Yes. I mean advertising is kind of the most solid way that we are firstly right now, but having a community of users having their email addresses could be very valuable information down the line. I know that people are very skeptical about using that type of information to sell to marketing companies, but we wouldn't be using that money to strictly profit more social companies. We would be using that money to pay for the community investments and things of that nature. Thanks, Robert.


Computers keep changing the world, but their power and safety is limited by their rigid design. The T2TILE project works for bigger and safer computing using living systems principles. Follow our progress here on T Tuesday Updates. This is the eleventh episode of T Tuesday Updates. Let's get into it. If you're just joining us, we're working on building a new kind of computer that you can just plug together as much of it as you need, rather than starting with a single box and saying that's your computer. You have more of a computing fabric that you can grow and all of the software and everything on it has to be incredibly robust to handle that. And that's a lot of work, but once we have that robust first software, then we can build things much, much larger and much, much safer than we have been able to before. Right now, last week in episode 10, I, like an incredible idiot, made a declaration that by episode 20, which is nine weeks from now, we will actually have manufactured some of these things. And I've been prototyping these things for a while now, and here's a prototype which we've seen a couple of times before, but now we're going to actually get a manufacturer and build a bunch of them. We were looking last week for what is a name of 133 tiles. I asked the folks that are here to take cracks at it.  Anesis, I don't read Greek from Christopher Nahanov on Twitter. B120 is a thing I made up on a suggestion from Hey Andy on slash R slash T2 tile on Reddit or R slash T2 tile. I'm not sure how one says it. Chunk, Episone, Hive, Honeycomb, Mosaic, Robus came in the YouTube comments as well as a suggestion that maybe doesn't need a name because once the grid gets bigger than this, and in some sense it doesn't need a name, but I kind of wanted to have a name. It's like Chunk or something like that, but I don't know, something that's either a little bit cool or at least it has a little bit of flavor to it. I'm not entirely happy with any of the thoughts we have now or any of the thoughts I have on my own, so I'm going to keep thinking about that as we go. From last week, the main event, of course, was the declaration that we're going to have 100 tiles plus 130 tiles. Anesis, a B120. That I can say B120 I think is going to survive as a technical description of what we're going to be able to build. Episode 20 is going to be on February 19th. That's two months away, and our goal for this week, as if we're pretending this whole thing is going to be possible, is to get scheduling, and then also we had some debugging left over from last time. Next week is Christmas Day on T Tuesday Update. I will have a brief message of some kind, probably put in the can a little bit earlier. It'll be short, but it'll exist. And possibly we may have picked a manufacturer, or at least we'll have some progress on that. And also we're trying to build one more prototype. Let's hope it's one more prototype. Okay, so as far as scheduling, I don't know enough to be able to actually put serious dates on these things, and they all seem so short, and you'll see why they seem so short in a minute, but just to run down what we have to deal with. So we've got to actually build the circuit boards. We have to build cases for these things. This is a 3D printed case that needs to be revised, at least in the corners, if nothing else, because we're changing the board over to having these brass standoffs or actual screw-down fittings of some sort. But that's not even it. In addition to the tile cases, we have the intertile connectors that plug these things that allow the tiles to plug into each other, power supplies, tons of stuff. So if you're into 3D printing, certainly use help here. This is the current case. This is flipped over, so it would print this way. So you can see what it is. These things are two buttons, one that goes in each of these holes pointing out, so that you end up just having a little nib popping out of these holes, I'm sorry, out of here and here. The two little holes that are push buttons, the one under west is the power supply, is the power button, the one next to south is the user activity button that we saw actually last week is connected to an analog channel now. And this is the spider web that I was using to clamp it on the back, which is kind of cool, but it's just not very strong, and that's why I want to go back to screws and good old-fashioned technology. But this is just the case. There's also the intertile connectors. This is... Man, I have to say, I never really got into 3D printing before, and it really is fun. Incredible time sink. So here, basically, this is the actual electronics of it. The intertile connector is really just two 16-pin keyed headers, you can see the little key there, that are joined by a tiny little circuit board that just connects the pins straight through. This is the standard intertile connector, or this is the board for it, and the idea is that this strap piece, this U-shaped piece here, goes underneath in between the two things and comes up, and then the top thing goes down on it, and then you plug this piece into the top and it locks it all together. It was great fun making these things. Okay, they're not pro, but they're sort of cool. But that's just the... And we're going to need a ton of these connectors. Each tile is going to need three to go together, so that's 133 times three, that's 400 of one kind of connector or the other. This is the basic kind. We also have this one, which has a flat top on it. Do I have an example of that here? Maybe I'm not sure that I do. That's the one that goes at the edge of a power zone, and it uses a different circuit board. We're going to use a different color plastic to print these or something, because we need to not confuse them. That's why one has a knobby head and the other one has a flared out head. These do not connect power through, so you put them all the way around the edge of a power zone so that only data and ground goes through, but not power. And then finally we have the power tab itself, which is, we have one of these right here. Actually, you can see it. So this is a power tab with one of the appropriate circuit boards on it, and it's the same as the other ones, except it has a snake to provide stress relief where the wires come out and connect up into the thing. And again, this thing all locks together just by jam-fitting or friction-fit, whatever. So we're going to have to make a lot of these and the box, the case itself, has to be redesigned at some point. So that's all coming up. All of this stuff. The main thing that I'm focusing on now that seems most pressing to me is how am I going to decide how to get these things built. I have two possibilities I'm going to talk about in a minute to lay down a bunch of money and work with them. One is all modern and on the internet. One's all old-fashioned and it's local. All of these tasks need to happen. Oh yeah, and oh by the way, we need a ton of new software as well. I did a fair bit of work on software. This week it's trying to, in the process of trying to debug this thing, spoiler alert, I still didn't get it completely working. But let's talk about the manufacturer event since that's really what's going on. Okay, so the first possibility is this online company Circuit Hub based in Massachusetts that has an extremely slick, at least when it works, and it works mostly, or considering how sophisticated the stuff they're doing, it's amazing it works as well as it does, that you upload your files. Well, I did it. I uploaded my files or I tried to and I got this importing. This might take a minute or two and in fact it was taking like 20 minutes. It was taking like an hour. Eventually I started Googling it and yeah, this has happened to other people and it says send mail, so I sent mail. And I can certainly say that the guys at the folk at Circuit Hub responded quickly and they looked into it and they got it working. And I think I suspect in my mind that they've got this unbelievable mass of Pearl scripts or something behind the scenes that are trying to rip through Kaikad files, Altium files, all of these different electronic design suites to figure out what they need to know to get all the parts out and the references and so forth and the thing locks up and then they get an email and some engineer looks at it and says, oh yeah, here's another case and they get it fixed. I mean, I have no idea. The problem is, is once the import gets done then you have to actually start assigning parts to the thing. Now I have a bill of materials. I have the parts that I've been putting on these things. Parts that I had available before are now no longer available. Some random capacitor, availability zero, minimum order quantity, MOQ 2000. Don't actually need 2000. In this case it wasn't that bad because there's a zillion other essentially equivalent capacitors. So it's just a matter of not noticing that one is a different rating or a different voltage or a different X5R is the capacitance dielectric material or something. I don't even know. And 1206 is the size and so forth. So it's mostly just a matter of trying not to make a mistake rather than it being any sort of conceptually difficult thing. And eventually I managed to sort it out and also some of the parts that were being proposed. These MOX connectors are the intertile headers. These things here that the intertile connectors plug into and they're incredibly expensive. These from MOX are, you know, between $0.53 and $0.75 depending on how you're getting. Every board needs six of them like that. So that's $3 plus up to like $9 depending on how much you're doing just for the connectors. The thing is, I got a big bag of them from Aliexpress a while ago that I've been using for these things that were more like 25 cents a piece or 20 cents a piece or something and they're fine. And Circuit Hub does provide a consign part option that you can buy the stuff and send it to them or they can buy it themselves through their distributors and so on. So that was kind of a lot of money. But nonetheless, eventually I got to where I could actually get a quote. And here's my quote for one board. $1,150 for one board. And this was the main shocker for me. I was doing this last week and if I did it last week like last Wednesday, it would ship on January 18th. Now remember, episode 20 is in February 19th. So this is half the time gone assuming I could have made the order a week ago. And I'm not ready to make the order. I haven't tested out, finalized anything.  But I'm going to try. I'm really going to try. And I'm going to make decisions. Now one thing I can do, of course, is you can slide this lead time slider to the left and the shipping date gets earlier and the price goes up even higher like that. I'd rather not go that route if I could avoid it. But getting one board is the most ridiculous case because they're expecting to do it. If we move it up to 150 boards, which is a whatever we're calling this thing, plus some spares. Now the prices, the price before was 1,000 each. Yeah, that's right. When you buy one, now the price is down to 46 bucks each, which is a lot better. And it sounds good. But don't forget that that's just the board. That doesn't include the Beaglebone Green, which is another 44 bucks. It doesn't include the display, which is about another 10 bucks. It doesn't include the case, the entire connectors, and on and on and on and on. But there's a worse problem. Once we get to 150 boards, all of a sudden switch one and switch two didn't have enough stock. And so here it is. As far as they knew, there was 120 of them that they could possibly buy. Each tile needs two of them, so 150 tiles needs 300 of these things and they didn't have that many. Now this is not like a capacitor. The switches and stuff are much more unique. I really don't want to have to go start testing out other ones and changing the board and so on. I want to get these. So I started looking around. Digikey, one of them, you know, big, big distributors of components. They don't even know this component, this particular switch from a company called Alps, which is a Japanese company. Mauser does know about it, and they have none available. And they've ordered 30,000 that aren't going to come until the future. Factory lead time, 26 weeks. I went back a couple of days later and it was this. The factory lead time is now over a year. If you don't have these things locked in, you're pretty well screwed. Well, but Arrow, another distributor, kind of a sort of up and coming one, it seems to me that they're trying hard. Free overnight shipping, all kinds of nice stuff. They had some, so I just put it in. I got 560. There was a price break at 500. 560 is essentially enough to make two chunks, whatever this thing is, with a little bit of attrition. They said it was going to ship by this Friday and it would be delivered Christmas Eve, if you believe that. But in fact, it has already shipped and in fact it's before you're going to see this tomorrow. At the time I saw this, it was in Hong Kong at the airport, but supposedly it's going to be here in just a few hours.  I mean, we're doing these amazing things. I mean, there's a downside to moving stuff around. The big space is this fast, but there's upsides too. So similarly, I've been starting to make purchases. I haven't bought these yet. This is another one of the big ticket items. The power supply I'm using, a pre-made module, which is more expensive, but it allows me to get away with not having to deal with high frequency scary stuff that I just don't have the electronics engineering experience to deal with. So that is enough, you know, 700 bucks right there and so on. So this is the circuit hub breakdown for this thing. The parts, the PC board, this is at 150.  You know, if I went to a PCB way or whatever, I'd be paying, you know, $2 of board tops and they've been pretty good quantity and so and 23 bucks for assembly and so forth. So this really seemed kind of a lot, but it's also a turnkey. They do all the work. There is the alternative. ETS, electronic technical services in Albuquerque. The reason I know about it is that they manufactured the board that's used in the NASA Swarmathon robots, which is the sort of competition for swarm robotics and so I knew people at UNM who recommended this guy, Robert Evans and so forth. So I've spoken to them and they do stuff and he's basically quoting me $10 a board if I bring him the boards and all the parts. He'll solder them, stuff them, get them going like that. So that's versus $23 a board for assembly from circuit hub, but then they do all the extra purchasing and all the screwing around. So it's kind of a sort of a modern hands-off versus old school and you go to the ETS website. It's a little old school. So that's what it's coming down to. Do I pick circuit hub? Do I pick ETS? ETS I have to do a lot more of the work or cells. I mean I've started to collect up. So for example, you can't just buy the components. You need to get the components mounted on reels like this. This is the R16 resistor. It's one of the resistors. There's 250 resistors on this thing. We've got to stop at a time. Won't be able to talk about the debugging this time, but I'm kind of leaning towards ETS. What do you think? The next update will be out in a week. That's Christmas Day. Happy holidays, whether it's your holiday or not. Like I said, we'll have something here quick when we get back. Thanks for watching.


This study compared the effectiveness of three plants, Mycelia champica L, Cinnamomum Bermaniae, and Mesuaferia L, against head lice. The plants were tested against the standard treatment, permethrin 1%, and coconut oil. The plants were found to be effective at killing head lice with Mycelia champica L. Being the most effective. Additionally, the plants caused no observable damage to the hair follicles or skin. This article was authored by D.C. Rosalina Sari, Iman Suryapratima, and Galutrasnani.