Proudly we hail! From New York City where the American stage begins, here is another program of the cast of Outstanding Players. Public service time has been made available by this station to bring you this story as Proudly we hail the United States Army. Presentation is entitled, Night Holds a Surprise. It holds a lesson in international relations and a salute to the efforts often unsung of the Military Police Corps. Our first act curtain will rise in just one moment, but first... You know a man with a good eye to the future makes a good soldier. And that's why so many bright young men and women are joining the United States Army now. For Army life is an exciting career and there's plenty of room up at the top. And today American soldiers get the finest technical training in the world. Every man is a specialist, a master at his job and the Army sees to it that every man is trained to do his job and do it right. Because the Army is growing so fast, today's soldiers are being promoted fast. Now you work hard, sure, but believe me, the rewards are really well worth it. The Army needs healthy, intelligent young men and women, volunteers from 18 to 34. So if you've got what it takes, plan ahead to get ahead. Now that's sound advice for you, you high school graduates. And here's how you can act on that advice. Your United States Army is offering a bright future in such interesting technical fields as radio, radar, electronics, mechanics, photography and many, many others. In all, there are over 100 courses to choose from. Now perhaps you're not qualified in any of these urgently needed skills. Well, I got the answer to that one. Your Army, through its Reserve for You training program, will train you in the course of your choice.  How's that? Great opportunity. Your opportunity to plan ahead to get ahead. So for full information, visit your nearest United States Army Recruiting Station, ask all about the Reserve for You training program. Remember, there's no obligation. And now your United States Army presents the proudly we hail production, Night Holds a Surprise. Hello. Good afternoon, Mr. Sarko. What can I do for you? I see. I see. I believe we have to know in a few days. Thank you indeed for your kindness in calling. Good-bye, calling. Good-bye, calling. Good-bye, calling. Good-bye, calling. Good-bye. Smooth as you say. How long do you figure it is going to last, Reinhardt? There's no reason why it won't last indefinitely. It's perfect, Blind. You've got a contract trucking business under another name, this export office under the name on your passport. You get the info on what is being shipped in here to the Orient when you contract to deliver it, and if it's interesting, we steal it. I consider it most injudicious to speak all these matters. Yes, yes. But the reason I am speaking is I have something on my mind. What? You and me. We're taking too much risk doing these jobs ourselves. We've been over all this before, Louis. Every additional man brought in the deal is another mouth, an eating mouth, and a talking mouth. The risk we take is slight. Our jobs have been spread over the whole Far East, no two in the same place. I still don't like it. You have a streak of indolence, Louis. You must learn to overcome it. And I do not like tonight. A job right here in Yokohama, it is too close to home. Remember one thing, Louis. Yes, what? I am running this show. Remember it. In front of Yokohama Hotel, car six repeat. Investigate disturbance in front of Yokohama Hotel. Well, that's not us. Unfortunately, not. Yeah. Things have sure been quiet tonight. Perhaps it is quiet which precedes storm. Yeah, I hope so. Gee, Frank, wouldn't it be something if we could crack a big case? Oh, if big case presented self for cracking would be most opportune indeed. Yeah? Long overdue promotion might be hastening, enabling long postponed marriage to take place. Are you thinking about getting married? Huh? Thinking, yes. Oh, no kidding. See some gal your folks picked out? Miyoshi-san combines happy choice of honorable parents with own desires for Oksan. In other words, they picked her out, but you think it's die-jobe. Precisely. Well, I just had my promotion. Of which you need not to remind me. Since I am only just now recovering from stomach ache produced by celebration, I'll say. There was some party, huh? Indeed, those American hot dogs swear. Still not us. Erasuno. However, even on dull night, I congratulate self for obtaining present assignment. I have chance to improve knowledge of English language, present company to help. Oh, you're not so bad yourself. You know, when they told me I was going to be assigned to a car with a Japanese policeman, I sure never thought it would be like this. How so, Jim-san? Well, heck, I thought he wouldn't be able to speak and we'd be riding around all the time with nothing to talk about. Sometimes talk is about nothing, but always we talk. Must confess to having similar doubts about a job. See, the way it works, that's just great. Save so much time.  You'd have to do the same. This way, we all... No sweat. Most small problems settled on spot. Hey, what is this? Honorable Mutual Admiration Society? Oh, yes, sir. Car 7. Car 7. Proceed to corner of... Combine moi. You have official business? Of course. I have an order to pick up 10 crates for delivery to Tokyo. You have orders? Come inside. I see you have a light. You can examine them. Let me see. This is my order. Anone! Hey! Hey gun! Hey gun! Hey gun! Hey gun! Hey gun! What happened? The poor fool came at me. I had to shoot him. I don't like it!  Jim! Yeah, what? What is stuff over there? Where? Over there by warehouse. I don't see anything. Oh, yeah. You mean by the door? Yes. Not customary to leave stuff outside at night like that. Maybe we better take a look. Okay. You stay here. Right. Find anything? Nothing or so much. Oh, I guess... I guess I gave you wrong steer. What was it?  A paint, too. Here. Look, I... I brought the stencils. Oh. I guess one of the workmen left them outside when they checked out. It's funny, though. They have a household good. Shipped from the states to a sergeant. Marco Browner camp drew. What is wrong with that? Nothing, I guess. Except that if their stuff was sent from the states, it should have been marked back there. Well, perhaps sergeant was transferred before arrival of the belongings. I guess so. Well, I'll put him back. I'll be looking for him in the morning. Oh, Jim, Jim, we have a call. Ah, four here. Roger. All right, let's go. File a complete report later. Got anything new for us? Yeah, just kidding. Say again? Roger, we're on our way. That's only a few blocks. Yeah. Now 34 is where we discovered stencils. Yeah, you're right. I wonder if there's a connection. Look at that truck going up the street. Right. I saw a tear end. Could not read the number. Me, too. Too dark. We better not waste time going after it until we find out what cooks inside. Right. I'll take the front you cover the back. I'll wait a minute until you're set. Roger. You'll find some light. It's a flashlight. It doesn't do much good. The place is so big. Here, Jim, son. Better look around for the watchman. You take this side. I'll take the other. Right. Over here. What do you find? The watchman. He is shot. Shot in the shoulder. Is he all right? Oh, pulse is weak. Very weak. I'll see if I can stop this bleeding with the pressure. Oh, God, I never had a chance. A night stick against a gun. Oh, dirty business. I stay here. You call the ambulance and the report. Right. I think applied pressure to try to stop the bleeding, and I waited outside for the ambulance. That's it, Lieutenant. It's too bad you didn't get the number of that truck. Looks like it was the one that thieves were in. Well, we sure couldn't see it, sir. And we didn't know then what we'd find inside. I didn't think too much about it at the time, either, because a lot of trucks used to come up the street to get across the canal. It's sort of a shortcut to the main road to Tokyo. You said used to? Oh, yeah. But then the bridge washed out a couple of months ago. They stopped using this road. I see. Say, that truck must still be up in there. How so? Well, the bridge is out, and it's a sort of dead end now. There was another street leading to the center of town but a steamship company is building a warehouse down there and it's blocked off temporarily. Guess the guys in the truck didn't know about that, or else they got excited when we showed up and took off. They couldn't get back past here because when we got out, we were in a hurry and we left the jeep where you see it now. Couldn't get a bicycle through the space that's left. You're right. Wait here a minute. I'll be right back. Hey, Jimson. Yeah? Maybe we get a chance to crack a big case, ne? You said it. You are listening to the proudly we hail production. Night holds a surprise and we will return in just one moment to act two. You know, in the world of music, the melody plus a good arrangement and a good performer most often determines a song's success. In drama, well, the play is a thing. Plus, of course, good actors to deliver the lines. And in whatever occupation you choose, training and teamwork are the reasons for success. If you're a young man of service age, you can be trained for success in the course of your choice by enrolling now in the United States Army's new technical training program. There are over 64 courses to choose from. In such fields as radar, guided missiles, automotive maintenance and, well, the medical services. These are only a few. And if you act now, you can make your application and rest assured that you have a class-based set aside in your name. If you're a high school graduate, we suggest you investigate this outstanding opportunity right now.  You are listening to proudly we hail and now we present act two of Night Holds a Surprise. Watch it, please. We've got to get this man out of here. You're taking a watchman out. I observe. Oh, here comes Lieutenant. I've just been checking with Inspector Matsuko of the Yokohama Central Police. How large is the area in which this truck might be located? Well, Jihara can tell you that, sir. He's got a map of Yokohama engraved on his brain. Oh, thank you for flattering remarks, Jimson. I know area slightly, perhaps roughly 10 blocks square. Many small streets. Some too small for a large vehicle to negotiate. All end at canal or rear of dock area. Think you can find this truck? We'd sure like to try, sir. Okay. We've got another car to take your regular patrol over. We'll set up a road block here by the warehouse. You go back in there and see if you can flush them out and keep in radio contact with headquarters. Yes, sir. Good luck. Come on, Frank, let's go. What is it now? I don't know. There used to be a road here. It looks like it is closed off. First, we almost drowned ourselves in a canal. Now we run into a construction project. Back up. Yes, sir. You hadn't been in such a hurry to get away back there. We'd be at the hideout by now. Yes, yes. And if I had not been in such a hurry, that police jeep would have our numbers. It would be broadcast all over Japan, but now... You don't know that they don't have them anyhow. There must be some way out of here. Yes. See, Frank, I don't know. I guess our idea wasn't so hot after all. It doesn't seem as though you could hide anything as large as a truck in a small area like this one. Unless confederates in neighborhood. But this, I doubt. I believe this route taken in desperation not planned ahead. Well, we better find them pretty soon. Robbers playing hide and seek, ne? But the cops triumph in end. You've been reading too many detective stories. Car four. Car four. Car four here. Not yet. Hey, Jim. Yeah? Quick, round that corner. The truck? What truck, Jim-san? Hope is same. Always the cautious one. There. There, ahead. Step on the siren. Right. It's stopping. Can you see the number? Not yet. Car four calling. Car four, we are at... Hey, Frank, where are we? Second alley behind the dock area A. Second alley behind dock area A. We've sighted a truck and they've stopped. It's similar to the one we're looking for. We're getting out now to investigate. Right. Over. You want to question the driver? Okay. I'll take a look in the back and cover you. What is your business in this area, Frank? I am a contract trucker unloading... What's his story, Frank? He has a bill of lading. Says he's part of contract truckers unloading the SS Breckenridge. What's he doing back here? Well, I lost my way. Says he lost his way. Check in the back, Jim. Authority is for 16 pieces. Right. Right side down here. Looks like about to... Hey. What is the matter? This paint. It's still wet. And this stencil here. This crate's going to camp Drew to a Sergeant Marco Brown. Marco Brown? His name on stencils found earlier. All right, get down off that cab you two. There's going to be a lot of questions for you to answer. Hey, watch it, Frank! I don't want you down. Quick, out of them! Hold her fire! I think you've got one of the tires. Yeah, but they're double ones on those big babies. They won't do much good. They are heading back toward the warehouse. Street block. There. We'll stop them. I hope so. Car 4 calling. Car 4 calling. Okay, 4. Go ahead. The truck we stopped is attempting to escape. It's headed back toward warehouse 34. License number T-17803. Repeat. T-17803. Roger. Got it. Car 4 calling. We have just picked up truck. Directly ahead, the 300 yards are rapidly overtaking same. Roger. Roger. Almost up to him now. Hey, that guy's laying out the side. Watch out, Frank. He's got our windshield. Frank, you okay? You're okay. Better windshield than tire. Yeah. Better call in a report. Right. Car 4. Car 4 calling. Car 4 here. Car 4 calling. Hey, Jim. Yeah. Second bullet has enlarged in the radio. Where? Radio smashed as well as windshield. Hey. Yeah. If you're pleased to keep eyes on the road, we'll describe damage in utmost detail if so desired. Yeah, okay. Here we are on all now. Yeah, and we've lost sight of the truck completely. To follow main road is only cause. At least with superior speed, if truck does not turn off, we will overtake. I hope so. Anyhow, if the guy's in that truck here, it'll only alert him. Oh, good idea. Hey, Jim. He's started way up ahead. Yeah, I believe it is. It's pretty far off, but... Well, that's the right model, anyhow. He's parked the wrong side of road. Occupants most likely departed. Yeah. That's the one all right. Look at that license number. Oh, let's go.  Okay, we better check the cab, Frank. Yes. Well, cab is empty. Well, that's what we figured. What now? I have a suggestion. Go ahead. Observe. Bluff behind us. Yeah? Say. Hey, are those caves up there? Right. There's hundreds of them. If they've gone in there, we'll never get them out. If the Jimson desires to attempt, I may be of sight assistance. Don't tell me you know your way around in there. Scorsi. That is a little. When you say that, it means you can find your way around in the dark. What are we waiting for? See? It's bigger in here than I thought. Entrances made the role for protection. Sure you know what you're doing. Oh, follow me. Caves constructed during war to house small subcontractors making airplane parts. In police academy, we study maps of same. Make tempting hideaway for wrongdoers. Many passageways in the rear exits. You think you can find these guys? It's a regular labyrinth. We must gamble that this is hideout. If refuge taken here in mere desperation could be anywhere. But if caves are permanent dumping ground for loot, no possible location. Okay, let's try it. They send out another car to look for us. I'll see the jeep and know we're somewhere in here anyhow. Right. And if this is hideout, we may desire reinforcements. Yeah. We don't know how many of them there are besides the two that were in the truck. This way, Jimson. Stool down. Sealing the roll here. You're not kidding. Hey, we're going uphill now. Exactly. There is small room on the lower level which I anticipate as hideout location. Hopefully they are unaware of trapdoor constructed in ceiling. We may effect surprise entrance like St. Nicholas. Quiet now. We near location. Hear voices. Gamble may have paid off. Here is trapdoor. Should be ring here to lift door. I want to be tiresome, Luis. And leaving the truck down there on the road is like putting out sand in the tunnel where we are. And how else were we to get to the getaway car? Hey, did you see all those crates stacked up in there? Observed same. And since truck was not unroaded, it is indication that this was not first job. There's enough evidence down there to send them both up for good. Also observe apparently no confederates. We've got the advantage of surprise. Yes, yes. We'll open door a crack once more. When we observe both, with attention directed in opposite direction, we'll take right. Let us get out of here. You think we're going to leave here tonight when every vehicle in the area will doubt this be stopped and searched? And we have unquestionably been identified.  I am going. There is an answer to that. You would not use that gun. No. Drop the gun, please. Nice going, Frank, son. Don't hit me. Don't hit me. Without gun, courage departs rapidly. Yeah. You okay, Frank? Yes, quite, quite. Oh, yeah. Those guys don't look so hot. Hey, for a little guy, you're okay in a free-for-all. Jimson is very kind. Not so bad yourself. What's time to call it night, Jimson? Right. And what a night. Inspector Matsuko, a happy man tonight. And why not? Those guys with records, as long as your arm? Ah, so. Inspector Matsuko is not the only guy around here that's happy. You've been grinning like the Cheshire cat yourself ever since we let the station. What'd he say to you? He'd say, hopes Miyoshi-san and I'd be very happy. Hey, that's great. Congratulations. Oh, pleased to keep hands on the wheel and eyes on the road. Ask anybody what they want most out of life, and a great majority of the answers can be boiled down to just one word, happiness. Well, happiness is a lot of different things to a lot of different people, but basically you might say that it's the achievement of your goals. To be happy is to be successful in whatever you do. And in today's highly specialized world, training is the key to success. If you're a young man of service age, you can get free training without thousands of dollars by enrolling now in your United States Army's technical training program. Under this plan, you can enter the course of your choice and be trained in such interesting fields as x-ray operation, photography, automotive maintenance, and communication. In all, there are about 88 courses to choose from. So for complete information on how you can benefit from this program, visit your local United States Army Recruiting Station. This has been another program on Proudly We Hail, presented transcribed in cooperation with this radio station. Proudly We Hail is produced by the Recruiting Publicity Center for the United States Army, and this is Richard Hayes speaking. Inviting you to tune in to the same station next week for another interesting story on Proudly We Hail.


My name is Javi Kutselen. I'm professor of international world technology at Sachs University of Applied Science and I am presenting the customer of this project. The assignment was derived from a larger project called Greensauce. Greensauce is a project lasting almost for six years in total. It's supported by the government of foreign affairs, including companies from the Netherlands and also counterparts in South Africa. The role to support a company is that they have to supply the components. In fact, Greensauce is a concept. It's a concept of harvesting rainwater by means of collecting it under artificial pitch, by means of some kind of grates. And that water is being filtered by a membrane system and then offered to primary and secondary schools as drinking water. So in fact what we are doing is combining drinking water with sport. The subtitle of Greensauce is also sports for water. I am Michael Kloetman. I'm studying mechanical engineering and we worked on this project the last 20 weeks. I am Nick Groep. I'm from Hagsbergen and my previous study was mechanical engineer but in a lower level than I do now. I don't know if it was really technical. I was more the social guy in the group I think. Hello, I'm Supreet Sudhama. I'm from India. Go abroad for the studies. For example Erasmus or European Project Semester. It would help you a lot because you are going to share your ideas. You are going to share all your cultures. You are going to speak a lot of things. You are going to meet a lot of people and you are going to socialize yourself. That makes you open up yourself so that I feel that it's a very good job. Hello, my name is Luis Pérez Martínez. I'm from Cartagena, Spain and I study now telecommunication engineering and specialty of telematics. So my background is more informatic with telecommunication. My role in the project is head of monitoring part because our project is a filter water system so it was very important to see in real time if the systems work properly and what are the values. It is about rainwater harvesting so in South Africa it has been already installed right now. Around 4 to 5 it has been installed. And now this is about the pitch. So we have the soccer pitch over here. It's about when it rains under this soccer pitch all the dirty water is going to be stored and all the dirty water is going to be pumped to the filtration system over here and then it is going to provide good water to drink. That's really cool.


So we're here with the open EPC, so who are you? So I'm Dragosh Vingerzana, I'm co-founder and city of a spin-off company of a big research institute in Germany. And what are you showing here? Yeah, here we have an entire mobile core network on a simple raspberry point. So we're thinking everything that big operators are having in big data centers. And we're showing that actually we can have it on a very efficient platform and power it over USB in practice. So what is it that you have? That's like LTE broadcasting solution or what is it? Yeah, so it's actually you can establish a small mobile network on remote islands or for public safety purposes and so on. And here's the whole mobile network, here we have the base station. So here's the LTE base station. It also works with 2G, 3G and Wi-Fi base stations. And this basically connects to a phone that is inside of this Faraday box. And yeah, we close it up so we don't need to use the local mobile networks. Inside there actually we have a standard Galaxy S4 device. And yeah, we're just putting it outside of the box. What is it? You know when they have real LTE radio we're not gonna use the networks here. And this is another Raspberry Pi actually. That just shows us what happens inside the box. So we don't have to open it and what's inside stays isolated from an RF perspective. So the Raspberry Pi is an ARM 11 CPU right? It's not even a very high performance. I think it's actually an ARM 7. ARM 7, yeah. So yeah, no actually it's really really low power and everything. And how do you make it work? Efficient software. Efficient software? Yeah, efficient Linux software. You rewrite everything or you just use the same software that's used on big machines? Exactly. So we took a team of 10 researchers and we gave them a challenge. And yeah, they did what typically big network equipment providers would do with hundreds of engineers. So what is OpenEPC? It's the entire platform, the entire software platform. So it's open? Is it open source? No, unfortunately it's not open source but we do license the source code. So who are your customers? Here it is. Here it is what we have. These are the components that we have in the core network. And in this Raspberry Pi actually we implement the entire mobile network as you can see here. So that we have all the functional elements that we have in the normal network. In this demo we are using just FTE but it's capable also of 2G and 3G at one point. And has the latest sort of 5G core network features. So who are your customers? Our customers are the special purposes guys. So public safety, IoT operators that make something really different from the standard equipment providers would give you. So what do you think about ARM, the ecosystem? Oh it's great, I mean we're typically running this on a cloud platform but to be able to go down on such a very low platform and to demonstrate that even such a very very small and USB power device can provide 10 to 15 Mbps it's just awesome. So you could optimize for any of these ARM networking solutions coming out, 64 bit, stuff like that right? Well with that are you working on this? I think a bit per second and the wire speed performance, this is really just power efficiency at its best. It's just a demo right? Yeah, it's just power efficiency at its best and if you need it it's basically it goes into... Let me just turn it on a little bit so that actually it will attach to the network. So this goes into the direction of creating mobile mobile networks because we can bundle the core network with the cell and put it for example in every vehicles and so on. So for disaster relief this would be an ideal and cost efficient and energy efficient solution.


Goooood morning, I think still just. Look, it is a great honour to host my very good friend, our Prime Minister, Marape, here today, and return the hospitality that I received when I visited Paul Moasby and Wewack earlier this year and had the great honour of being the first person from outside Papua New Guinea to address the parliament. in Port Moorsby. Australia and Papua New Guinea share a very special relationship. It is 50 years since the decision was made in December 1973 by the Whitlam Labor Government to grant independence to Papua New Guinea. And since then that relationship with that shared history has meant that we have developed still so close but as equals, as equals and as partners. And today we take that partnership to a new level. As close neighbours and regional leaders our security and prosperity are bound together. We help each other in times of need and we respond together to the needs of the Pacific family. Since coming to government we have boosted our support for Papua New Guinea's economic ambitions and infrastructure, health, education and labour mobility. And we have made progress on improving visa processing and access. It's down from more than 50 days down to under 14 now, just this year. Most recently we've worked together to help the Solomon Islands deliver security for its successful Pacific Games that were held in Honiara. Today we have fulfilled our commitment to elevate our partnership by signing a legally binding bilateral security agreement. This is a comprehensive and a historic agreement. It will make it easier for Australia to help PNG address its internal security needs and for Australia and Papua New Guinea to support each other's security and the region's stability. Policing and domestic security are priorities for my friend Prime Minister Marapo. They are essential for the economic development of PNG and for the welfare of the people of that great nation, which the Prime Minister always reminds me as a nation of 800 languages.  We have listened to the Prime Minister's priorities and I can announce today a new package of support for policing infrastructure and training for the Royal PNG constabulary, as well as new support for the judiciary, correctional services and combating gender-based violence. We are also announcing today that Australia will support PNG to establish a Police Recruit and Investigations Training Centre to help Papua New Guinea build a larger, more capable police force and provide training to other Pacific police forces. This security agreement is a natural progression in our security partnership. It builds on our comprehensive strategic and economic partnership. It reinforces our mutual respect for each other's sovereignty, independence and territorial integrity. And of course, if you stand on Sabai Island in the Torres Strait, you can literally see Papua New Guinea and if you're a good swimmer, you might be able to swim there as well. I look forward very much to hosting Prime Minister Marape on February 8 as a guest of government and him addressing a joint city of parliament, which will be the first addressed by a leader to our parliament since President Widodo at the beginning of 2020. So this will be the first in four years. It will return the honour that I received in January of being the first phone leader to address that parliament. And I've written to the Speaker today and with the support as well of the leader of the opposition, we look forward to welcoming Prime Minister Marape for that joint city of parliament. Papua New Guinea can always count on Australia. We share a future and together we're building a partnership that will deliver peace, prosperity and opportunity for our people and for our region. Prime Minister Marape. Thank you. Thank you very much, my good friend, brother, the Prime Minister of Australia, the Honourable Albanese. Today is a good moment in which both leaders representing our two people, our two governments, one more time entrancing our shared history, our deep bond and our two countries' closeness, one more time deeper in the security agreement that we just signed. I want to say thank you very much for the warm hospitality. Prime Minister Albanese and your team has run it to me and my delegation. But this is not just one moment in which Australia has been hospitable to Papua New Guinea. We became sovereign nations from the hands of Australia when the Australian flag was lowered for the first time in the afternoon of September 15, 1975, and when PNG's flag was hosted for the first time in September 16, 1975. Australia, 50 years ago this date, we would be seven days into our own self-government. It was December 1, 1973 that the Labour-Witlam Government granted the Somare Panku Government the self-government authority, and from there our march to sovereignty took place, and two years later in September 16, 1975, we became independent. The construct of what is modern-day Papua New Guinea has a lot of input by Australia right from day one. In fact, even before day one, the strikes of our judiciary, the strikes of our public service, the strikes of our education system, the sovereign borders we have today was a construct of what became Papua New Guinea under Australia's sovereignty. And today, 48 years on, we've had our own travel together as two nations, brother and sister nations. I am happy that my friend Prime Minister Albanesi under his words and my words, we have now signed what is a historic bilateral security agreement not only look into one spectrum of security, but encompasses quite a broad spectrum of security that covers not just police, but looks into judiciary, has a working relationship with our defence, also look into the economic security of our people, as well as every other aspects that deals with our national prosperity and our national well-being. And I want to thank all Australian taxpayers, and it is not just in the personal interest of Prime Minister Albanesi to forge a deeper working relationship with Australia and PNG. You've always given support to us. What happens up north of your borders has deep, shared effect benefit consequences on our region. We have emerged as joint leaders in our part of planet Earth. In the world of many relationships out there, we choose to ensure we go deeper and strengthen our own bond with Australia because it is home for us. I was telling Australian Prime Minister earlier in our meeting, we have many plate tectonics at anchor PNG together, but the biggest is the Australian plate below that holds our part of PNG and the Australian continent together. That just simply depicts that we are joined at a heaps forever and going forward. It is in our latest interest that we construct a future today. And the signing of the strategic security agreement between Australia and Papua New Guinea is a step in constructing what will be our said future as it has been our said past. And I want to appreciate Prime Minister Albanesi's leadership. When we invited you to address our parliament on the 12th of January this year, you became the first foreign leader to address our national parliament. That was not coincidental. It was meant to be. It would have been an Australian Prime Minister to address our parliament. It happened to be you, my friend. And I'm just happy that you are giving me an opportunity to address your parliament on the 8th of February in 2024 to emerging Australians and emerging Papua New Guineans. We can never compromise our two nations' closeness, our two nations' cultures, our two nations' history. More importantly, as we lead us gel together, it is an indication to citizens of Australia and Papua New Guinea, business of Australia and Papua New Guinea, public service of Australia and Papua New Guinea, that it is in our combined interest to work together going forward into the future. And I just look forward to that moment to address the parliament. But thank you very much for the opportunity for us to sign the security agreement. It will then be worked upon to consolidate our two national interests, our two countries' people, and of course government-to-government working relationships going forward. Thank you, sir. Ashley Raipa. Tomi Samarape. Papua New Guinea has wanted to be a friend to all enemy to none, but you've now signed a defence agreement with the United States, this security agreement with Australia. So can we take this as a sign that you're in fact picking a side in the strategic competition between the United States and China? It's never picking a side. Every relationship has its own peculiar views. Our common foreign policy, I beg your pardon, is a foreign policy as friends to all enemies to none remains. And it's never picking a side. We have specific aspects of relations with every nation. We choose to. With Australia, with USA, those are the relations that we picked. And it's never at the expense of our relationships elsewhere. Thank you. Prime Minister Marrape, on security. Bougainville is the region's biggest potential security flashpoint. Four years ago, 97.7% of Bougainvillians voted for independence from PNG.  And to Mr Albanese, Australia's party to the Bougainville peace agreement, should PNG respect the overwhelming free vote of Bougainvillians and allow Bougainville its independence? I'll say very clearly answer first before Mr Marrape. I respect PNG sovereignty and those issues are a matter for Papua New Guinea. All right. Australia was part of the peace process. New Zealand was part of the peace process in 2001 when we reached the Bougainville peace agreement. The process is on foot. The final leg of the peace process, means the National Parliament will rectify, in the words of the peace agreement, rectify the results. And so the two sides, the National Government and the Autonomous Bougainville Government, have a handle on the peace agreement process. It is a peace agreement process, meaning for a peaceful solution to the Bougainville issue. The political question, the political process is another part of the conversation. We are on time, on schedule, to honour the 2001 peace process, the ratification process to protect presidents. Thanks. David? Thanks, Prime Minister. Prime Minister Marrape, can I just clarify? Is it your expectation that this agreement that's been signed today will be ratified or will need to be ratified by the Parliament or will it be binding on signature? And can I also ask, just in the details of the security pact, is there any clause whatsoever that implies any sort of exclusive rights for Australia here? Does it exclude Papua New Guinea signing similar agreements with any other country? Or is that not the case? Mr Albanese, on that subject, can I ask, did Australia, as was reported earlier this year, push for any exclusionary language in this treaty during the negotiation process? If you don't mind, my friend, there is no exclusivity in between this one. This one gives respect to PNG and Australia's own security need and our own peculiar aspects of our security. Let's me forget, we saw small investments from Australian investments in PNG right now. The biggest hold of investors are Australian investors in our country. Security in all aspects is important for PNG as much as it's for Australia. There's no exclusivity. Australia has given us respect to our relationship elsewhere. This is a dovetail in a manner in which it protects our own national interests to have economic and secret relationship elsewhere. But more importantly, the design in a manner in which Australia wants to get involved in PNG. PNG invited them to come in. It was not Australia forcing its way in. PNG invited Australia and we had two teams sitting on the table. The construct is mutually satisfying, respects Australian sovereignty as much as Australia respects PNG sovereignty in what we've signed. So I'm satisfied. He's satisfied. Australian people should be satisfied. PNG people should be satisfied. That is no need for us to go to my own parliament. The constitutional process was deployed. All elements of legal requirements have been satisfactory, dispensable. My sickness and my colleague's sickness is as good as it is. Where to go now? We have our closures inside. That's for us to have a review in this one. And as every agreement, there's enough room for improvement but there's enough basis for us to get to work to ensure that it pays dividend to the benefit of Papua New Guinea as much as our responsibility to ensure security is improved up there in PNG. Thanks, Prime Minister. This is a legally binding agreement. The approach, as Prime Minister Marapa has said, came from Papua New Guinea and we worked through in a way that we both got exactly what we wanted from this process. This will assist not just external security for both PNG and Australia but will assist as well with the internal security arrangements within Papua New Guinea with the provisions that are there on issues such as assistance with police training and with those facilities and infrastructure. It's a very comprehensive agreement. It comes in effect now and that is very important and I believe will have overwhelming support. Prime Minister Marapa generously spoke about the support that Australia has given Papua New Guinea historically when it has come to defence relationships. But I'll make this concluding point. All Australians should give thanks to the people of Papua New Guinea for the assistance that was given to our Australian diggers during World War II. PNG citizens gave their lives protecting Australian defence personnel and of course that was at a time where the territorial integrity of PNG was a part of, if you like, Australia in terms of the relations. But the people of Papua New Guinea and when I attended Wewack in the north there and went to the base that is there as well, you see throughout Papua New Guinea not the least of which the history of the Kokodra Trail where there's a memorial in pretty close to my electorate in the inner west of Sydney in the electorate next door in Reid. This is a relationship that was forged literally with giving lives of both Australians and Papua New Guineans for each other, for our interests going forward. And that's why we have no closer friend than Papua New Guinea and what today does is cement that relationship. Thanks very much.


Not a songwriter or singing just covers and stuff. I do a lot of musical stuff. I was in Legative London for the summer. Oh, I was in that that was with much of a stage school. I did a cast of Dirk Hi, that was an alley theater. My granddaughters are much of you. Are they see I only did the show I was doing my Distinction with rush for my diploma was rush for musical theater So that's my first time ever doing a show with them and it's very good So it was it was really good. Right. Well, we're gonna we're gonna talk up to the news And then what we'll do is we will we'll come back with you singing so An introduction you're what is that what you're looking to do is this you do you want to do at full time?


He walked out to his mailbox on a cold winter day and opened the mail to find just one letter.  But here's the problem, I did not know when Santa is going to arrive, so I better start on this list right away. I ran inside my house to my gaming setup and went for the first hunt on the list, the iconic Deli Bird. This made perfect sense since it carried around a Santa bag and has a move called present. For this hunt, I'd have to make my way to Paudella's highest peak. The trick to getting a bunch of these Deli Birds to show up is to make a shiny flying sandwich. As soon as I made it, tons of them started to spawn. Look at them just running around with gifts. They honestly feel like Santa's little helpers. Now spotting the shiny won't play too hard because the color is purple. So I did a couple of picnic resets which despawns the hordes of this Pokemon and then when you put it away, it spawns in with a bunch of new ones which should make this hunt pretty easy, right? Okay, well maybe this wasn't as easy as I thought. It actually should have showed up by now. So to increase my shiny luck, I had to figure something out. And then I took a train to New York City and looked around the Hudson Yard Mall which was decorated with tons of Christmas lights. I then spotted the Mall Santa Claus and sat next to him and asked him to give me a shiny Deli Bird. And I don't know if I pushed my luck with him but I also asked if I could have more subscribers. And here's what Santa Claus actually had to say. After I got back home, I got right back to work with picnic resetting for Deli Bird. Reset after reset with the full hope that Mall Santa and you subscribing would show me luck and then BAM it was right there.  I made my way over to it and caught it in a nice premiere ball knocking off the first Pokemon on Santa's list. Now that I caught it was anything going to happen and no updates from Santa on his arrival yet. Maybe I need to catch another shiny Pokemon on the list. Deli Bird represented gifts so those gifts need a place to go under a tree which is why we're going to Glaciado Mountains to get ourselves the next Pokemon, snow Ver. I personally like to go to this exact spot on the mountain in order to find it because it has such a nice view. Now to increase the amount of spawns that show up for snow ver we're going to have to eat a shiny grass sandwich. Because of this you can see the amount of snow ver that shows up and it's quite a bit more. Luckily the shiny version of snow ver has a blue color to it instead of its typical green. For this hunt I wanted to run around the area to despawn the Pokemon while spawning a new Pokemon but while doing this if you go too fast you may accidentally despawn a shiny so I had to be very careful. I kept this up for a while without any shiny Pokemon showing up so I had to figure out how to increase my luck in real life. Snow Ver is known as the Frosted Tree Pokemon so I immediately had an idea. Why not head over to the Rockefeller Center in New York City? Why you may ask? Because one of the biggest Christmas trees ever is located right over there. While I was there I looked up at the tree and this was truly one of the most perfect and magical moments I could have hoped for. And all I could see was a giant snow ver while I looked at the tree. After that it was now time to go back to the hunt. Now that my shiny luck increased I made my way back to the Glaciato Mountains and started spawning in the snow ver. I kept going and going until finally there it was and the best part is that it's even snowing what a magical way to see snow ver. It's like a Christmas miracle. I looked through my Pokeballs to decide which one would match it so I went with the dive ball to catch it. But isn't there something that you can also put on trees? Like pine cones. There's just something about pine cones that scream holiday season because you can always find them on reeds and on garlands and the smell just makes me feel all comfy at home. And luckily for us Pokemon put a pine cone in the game called Pine Cove. Now usually these pine cones are found in trees making them really annoying and hard to hunt. However there is a trick known as the date or time skipping method that is super overpowered.  I pretty much did this until I got a pine cone mass outbreak in the East province area 3 to show up. Isn't this so much better than hitting a tree over and over again until a shiny appears? I think so. Now as you can see we have so many in front of us. Luckily for us we are looking for the golden pine cone. Now for mass outbreaks to maximize your shiny chances you have to knock out 60 Pokemon and then start to do a picnic reset. So I began knocking out some pine cone and while knocking them out I was thinking about how to maximize the IRL shiny luck to get one. Hi babe are you shopping right now? Yeah. I have a few items I need you to pick up for me. Welcome to Philly Craftsio we're going to be making our own pine cone using this giant pine cone. So step one you want to go ahead and spray paint this entire pine cone. Look at that technique beautiful. Once it's all nice and not really dry but you know semi dry you're going to get your two googly eyes you're going to get your glue and you're going to put that right on there just like that. So I'm going to take this eyeball and I'm going to there's one ta-da and just like that we've made our Walmart pine cone. I'm going to call him piney. I brought piney with me and continued to knock out more pinecose and luck was on my side because before I even knocked out 60 of them a shiny pinecose showed up. But here's the problem you have to be careful because it can explode. So I had to put it to sleep with hypnosis that only had a 70% chance. Would it work? I pressed the move and it fell asleep. I then threw my ultra ball at it but it could break out. I watched the ball shake ball to the floor and then I caught it. Pinecone out the way it was time to move on to the next hunt and I have to ask the question what is Christmas without snow and luckily for us we have a Pokemon that embodies the snowflake itself. Cryogonal the next Pokemon on Santa's shiny hunting list. This Pokemon is located close to the Glaciato Gym along the side of Pau Dea's highest peak. I ate an ice sandwich to start this hunt. However the amount of them that spawn wasn't too much not having a bunch of snowflake spawn in a snowy biome is definitely a problem. So I had to do the mass outbreak trick to get them to show up. But before that welcome back to Philly Crafts U. Today we are creating our very own homemade cryogonal or the Walmart cryogonal. Take a piece of paper and cut it into a square by folding it over here. Then fold the triangle then fold it again for another triangle and then just fold it again into another triangle. Then what you want to do is get your scissors and just start chopping on the sides of it for whatever design you want to make. Open it up and bam you have your own snowflake.  I'm actually going to call him Ed. This is Ed the cryogonal. Comment snowflake emojis down below to show Ed some love. Seriously he needs love. After creating my good luck charm it was now time to hit the mass outbreak. Now while we're knocking out Pokemon in this mass outbreak let me tell you how to identify the correct Shawnee snowflake. You have to look for the one with orange eyes and the blue snowflake color is going to be much more saturated like this. And after knocking out a couple of them it finally happened. The unique snowflake just like Ed showed up. I ran over to it and caught it in a dive ball. And with that another Pokemon was checked off Santa's list. But how long exactly was it going to be till Santa arrived? Was he coming by reindeer? Maybe that's why the next Shawnee hunt on Santa's list was Stantler. Now this location to hunt this is between two sort of biomes with the main part of Pau Dea, the starting area and the canyon area. So right in between there. For this hunt I'm going to be using a normal sandwich. Unfortunately there are other Pokemon that show up in the area like Lit Leo. It got to the point where I actually found a Shawnee one amongst all the Stantlers that started to spawn in the area while I was hunting that. But that wasn't exactly the target and I couldn't stop there to admire the Christmas lion. I had to keep looking but there was no green reindeer in sight. And here's where things got even worse. While I was picnic resetting my hand just started going into auto mode. And just like that I skipped a Shawnee Stantler. I was devastated and felt like I could never do this. So in order to get one to spawn I once again had to enhance my IRL Shawnee luck. I looked on Google to see if there were any reindeer close by to me but there was nothing. So I had one victim that I could turn into a reindeer. My dog Travis. So I went to Amazon and bought my dog some reindeer ears and this really cool outfit that has a Santa that rides on his back. I put the outfit on my dog and just like that I now turned him into a reindeer for Shawnee luck. Right after this I went back to Shawnee hunting and then there it was. I took off my hand from autopilot mode so I wouldn't end up despawning it out like the last time. I focused on the green deer and ran to it. And threw a friend ball at it which I only had one of. And I got it. And with that the Shawnee reindeer hunt was over. But I remembered that when I hung out with the mall Santa that he was shaking some bells on him. So this next hunt made so much sense. Chingling. Now in order to find Chingling you have to head over to Kitakami in the Teal Mask DLC. I ate a psychic sandwich and went over to the crystal pool and infernal pass area to look for them.  Making it hard to actually hunt down my target. So I did the mass outbreak method to get them to spawn and I began looking for them by knocking them out. Now the Shawnee for this one is rough because it's slightly different in the ribbon around it. So you really gotta look carefully to avoid making errors when you are hunting this down. So to not even make an error like my last hunt I went into my attic and immediately enhanced my Shawnee luck. By grabbing some bells that I found up there. As soon as I got them I immediately headed back down to my office and went and put them on my tree to enhance their good luck. By the way let me know how you would make your own homemade Chingling in the comments down below. Back to hunting. I kept knocking out every single Chingling until I reached the max amount of 60 and then started to do my picnic reset. So at this point I had to be really careful to not miss it. With time running out from doing the picnic resets over and over I had to make sure I would spot it in time. And then with 28 seconds left there it was. I had to double check just in case the sun or any of the environments or the shading were to confuse me. But I looked and it was good. It was exactly that special jingle bell that always looked so happy. The Shawnee Chingling was finally mine. Without wasting any more time I threw a premiere ball at it and that was another Pokemon off of Santa's list. However there was a strange Pokemon still on the list. Iron Bundle? The Paradox version of Delibird? What did this mean? What could symbolize this? Was this supposed to be the future of Christmas? I had no idea what to use in real life to help enhance my luck. So while I was in New York City I found these giant metal Christmas ornaments that looked like what Iron Bundle is holding except it's red. But you can just imagine what it would look like in blue. I reached out my hand to get all the good luck from it and now it's time to hunt. To get this Pokemon we have to head to area zero. But for this hunt I had to switch my Nintendo Switch because this one had Pokemon Violet on it. And Iron Bundle is a Pokemon Violet exclusive only. Now to get to this Pokemon we have to head to the lowest floor in area zero. Which is research station number four.  And it'll be the only Pokemon that'll spawn here. I personally like flying over right from the fourth research station down this way until you land on this crystal which faces this other crystal. And when you approach it a bunch of Iron Bundle start to show up.   Hopefully the shiny doesn't spawn here and fall to its death because that would be very unlucky and I've already been unlucky in this video. So I kept walking back and forth on that location over and over again. New spawns after new spawns kept showing up while the other Iron Bundles kept falling down. This was all that was left on Santa's list and I had to get this before he showed up. And then before I knew it the shiny Iron Bundle appeared. It's completely desaturated from the other ones and personally not my favorite shiny but it made my way over to it as fast as I could. But before selecting what Pokeball I wanted to use I really wanted to reflect on this journey. Not only did this hunt make me catch some amazing shiny Pokemon but I actually got to touch grass and enjoy some real moments. Being able to see the Rockefeller Christmas tree, having romantic moments with my wife, exploring the festivities in New York City and being able to try my hand at arts and crafts after many years of not doing this. I was so excited to see what gift I would get from Santa so I had to throw the Quick Ball to catch this Pokemon. And with that off the list I just had to wait for Santa to show up. I waited for hours for him to show up but nothing. Unfortunately he didn't show up so I decided to fall asleep. But what Philly didn't know is that night when he went to sleep there was Christmas magic in the air.


Azov commander explains how long war in Ukraine will last. Many Ukrainians wonder how long the war against Russia will last. This question was answered by the commander of the Azov Brigade, Denis Prokopenko. Prokopenko notes that the uncertainty and the chance that the fighting will continue for years are weighing on civilians and sometimes even on the military. He says that Russia will never let Ukraine go from its realm of geopolitical influence according to RBC Ukraine. The war will continue as long as we are able to resist. Any truce or agreement is just another time out to accumulate resources for further offensive. Our ability to mobilize all the necessary resources at a critical moment and work on the verge of extraordinary capabilities should not gradually turn into initiative-free stability the military writes. Russian informational and psychological attacks aimed at demoralizing the Ukrainian society are pouring fuel on the fire. They say that Ukraine will not be able to withstand a long marathon. The army and volunteers will get tired and break down. The defender notes. He also says that no one knows the exact day, month or year when we will win and be able to return to our families. But we are confident that no matter how long the war lasts, we have our trusted brothers in arms by our side, love for our country in our hearts and weapons in our hands. And all this will not let us retreat. And neither today nor in a year or ten years Prokopenko continues.


Should pregnant women avoid shower gel? A recent report from the Royal College of Obstetricians and Gynecologists highlighted the challenges of dealing with potential but unproven risks to child health during pregnancy. The report's authors acknowledged that most exposures to environmental chemicals experienced by pregnant women probably pose minimal risk. To be on the safe side though, they suggested a safety first approach that includes, amongst other things, minimizing the use of shower gel, using fresh food whenever possible and not purchasing new cars whilst pregnant. The report is based on growing concerns that the cocktail of chemicals we are exposed to may present risks we are currently unaware of. Certainly, laboratory researchers are covering new information on how some chemicals in everyday products interact with our bodies, and some of these interactions may affect unborn babies more than we previously thought. But much of this research is still far from conclusive when it comes to real effects in people, which leaves pregnant women in something of a quandary. Should you stop doing something that seems harmless and might even be good for you simply because some day the science might show that it wasn't as healthy as you thought. The problem arises in part because we're better at generating data these days than we are at knowing what to do with it. We can measure the minutest amount of a chemical someone is exposed to, and we can research the many ways our bodies interact with these chemicals. But in many cases, we're struggling to stitch the information together to say how relevant it is. It's a bit like discovering for the first time how sausages are made. We don't like what we see, but we can't work out whether that makes sausages dangerous or just distasteful. And this uncertainty makes the risk-benefit trade-offs we face every day tough. How do we find the right balance between what makes our lives better and what makes them worse? And how do we make sure that a decision not to do something like use shower gel or purchase prepackaged foods doesn't lead to a bigger risk than the one we thought we were avoiding? Of course, we're surrounded by things that may cause us harm and someone needs to be making sure we had the best information possible to reduce that harm as far as we can. For substances that seem safe, but may not be, some of that responsibility lies with scientists working to understand possible risks and effective ways of avoiding them. And of course, people potentially at risk should probably be kept in the loop as this research progresses. But we also have to be mindful of the risks of deciding not to do something without thinking through the consequences. So should pregnant women avoid shower gel? Probably not, unless they believe the advantages of using something else or nothing at all are substantially higher, but at the same time we need to make sure that someone somewhere is doing the right research, so that if there are risks, people can make informed trade-offs rather than running blind.


Understand how to achieve impact. There are a lot of wonderful youth projects organised in Europe every year that provide learning opportunities and even change the lives of young people. Often, however, a wider impact is lacking because the visibility of the project to the outside world is poor and the outcomes aren't picked up. That's why the dissemination and exploitation of results is a crucial element in any Erasmus Plus project and in particular for structured dialogue projects where youth participation is the key goal. Creating impact with a project is like throwing a stone into the water. If you throw it nonchalantly in, it will only make a little splash. But if you throw it in a more forceful way, it will ricochet across the water and make waves. That's why creating an impact doesn't start when you disseminate the outcomes of your project. It starts at the drawing board when you're designing the project. There are a number of strategic questions to ask yourself to help you understand the potential impact of your project and plan accordingly. You need to have a good understanding of what the objectives of the project are, what the expected outcomes and results are, who the target group of your message is and what type of message works best for that target group. There are different levels of making waves micro, meso, macro, according to the type of project or the type of act is involved. Most youth projects have the greatest impact at the micro level. The participants of the project, young people in the youth organizations, the local community and partner organizations directly linked to the project. Meso-level impact targets the youth sector more widely as opposed to the individual project. Youth workers, multipliers, other organizations active in the youth sector. Macro level impact is about feeding policy developments at national or European level or at the level of the European program rather than at the level of the individual project. This can be achieved by linking your project to specific national or European events or participatory processes such as the structured dialogue. Visibility means giving your project exposure throughout its different stages. Carrying out a project is a valid reason in itself to let the outside world know about your activities, your organization and the Erasmus Plus program. Dissemination means sharing information about the results of the project with key actors. You can use a wide variety of media to document your project results and send them to the most appropriate target groups. Exploitation means making sure the outcomes and products of the projects are effectively used. Go one step further and make sure your product makes a difference and is used in other projects or policies. For a project that aims at youth participation in decision making, it is crucial that decision makers take the results into account in their work. This can be done by setting up a dialogue between young people and decision makers and by lobby and advocacy actions. Target the policy makers who are open to dialogue and are in a position to do something with what you tell them. Ensure that the young people are well prepared to engage in a dialogue with decision makers. Make sure they know who they're talking to and what processes they're participating in. Expectations on both sides should be clear and the format should fit the purpose of the dialogue. If the youngsters have engaged with their peers, they will feel empowered to act as representatives. You can set up a consultation, organize focus groups or include a discussion in your regular activities with the young people. In many countries, the EU structured dialogue is implemented through a core group of youth ambassadors. This is a model that can also be applied at other levels. Working together with representative youth structures such as youth councils and youth organizations or youth authorities can help. They often have the knowledge and network that can help you plan and achieve the impact you are looking for. They can also pick up the outcomes in their own actions or youth policymaking. Involving young people, experts and decision makers in a regular dialogue over a longer period of time can increase the chances of the dialogue you set up leading to results. This allows for a relationship of trust to grow between the different participants in the dialogue. Ideas and recommendations can be looked at again or feedback given after implementation.


Hi everyone, Joe for jaspyscasewrakes.com, coming at you with 2020-2021 Panini Impeccable Soccer, one box, pick your team number 11. Now if you bought at least two teams, you'll get an entry to try to win some Prism Premier League cereal boxes, those tiny little rectangular boxes right there, that's a pretty good prize. Winter take all, all three boxes. Final box of the case, there it is, pick your team 11. Many thanks to the people who picked their teams, appreciate it. Most of the teams were picked up straight up, so I appreciate that, thank you. So there's a few teams that were, a handful of teams that were number blocked, it was Man United, Tottenham, Liverpool and Sheffield. So we did that in a separate video, but here are the final results here, set that right over here. There it is, there's the case hit that we were looking for, we'll do that last, I did get that. We'll use the king of diamonds to help us out here, slow play of the hits a little bit. Good luck, In. Out of five, Miquel Antonio, nice for Weston. Nick Elv got Westham United straight up. And out of fives and under, all aboard the Big Hit Express, whoo-hoo. 13 out of 75, Robin Cook leads. That'll be for Robert. There's Giants tied at one, bottom of the top of the eighth. Damn it. Pops out. We've got Paul Pogba, nice, 30 out of 49 for Manchester United. Man United is one of my rivals and a number block team, so that goes to Man United zero. And that'll be for Robert Runkle. Chris doesn't like the new Westham coach? Oh, there is a redemption, there's a redemption right there. There's Nico Williams, one out of 99, Impressions Autograph. The Liverpool youngster going to Liverpool one. That's for you, Chris. Chris Maxwell. The international break is over and I think a lot of the leagues will be starting up again. I think it's starting tomorrow. We got Aaron Wanda Saka. We had a different autograph of him in the previous break. This one's in Impeccable Stars Autograph, 31 out of 99, Man United one, another one for Chris Maxwell. So if you're not familiar with number blocks, we go by that digit right there. 31 out of 99. So Chris would get one out of whatever, 11, 21, 31, 41, 51, 61, 71, 81, so on and so forth. And back here is for Arsenal, that's Lee Dixon. Canvas creations, 86 out of 99. Nice on-card autograph for Wilhash and Arsenal, the Gunners. There he is, yeah, Lee Dixon. He's been an Arsenal man for the longest time and nowadays, Lee Dixon, does he do, yeah, he's on TV now, isn't he? So you probably know this guy's voice pretty well. There you go, Wil. Oh, this one's on this side. All right, let's slide that card underneath. Good luck. Redemption is Canvas creation. So it's going to look a lot like this and it's going to be E, Eto, Samuel, I don't know, it would be first name first, EB, EB, Everiche, Eze. And Eze is for Crystal Palace, that's right, he's a 23-year-old Crystal Palace player, youngster. The England under 21s could make it to the big club, the senior team someday. So Crystal Palace, that'll be for Nick L and a free top loader as well. Now the case hit, one per case, piece of metal, could be silver, could be gold, I feel like the metal piece is out of place as well. Let's see what's going to be for, yeah, it's out of place, but it's Shay Adams for Southampton. They didn't wait for the glue to dry, and I don't think it's moving off that card. Nicholas L for Southampton, Nick, what I'm going to do is I'm going to see if I can send you, a lot of times they want to, I'll send you the UPC code plus, sometimes they ask for this stamped number right here as well. Maybe they could repair that for you, so we'll send that along to you as well. All right, so sorry about that, but there was a case hit, a piece of fine, fine silver going to Nick L. Anyone else? Thank you very much for getting into the break, for filling this case up, and keep your eye out for more soccer on jaspeakcasebreaks.com. I'm a big soccer supporter and I love ripping the soccer, so always be down to do that with you. We'll see you next time for the next one, jaspeakcasebreaks.com.


How you know you're dating a narcissist. You will know that you're dating a narcissist because they will pull you into their fun house. They will pull you into their amusement facility which is equipped with various devices designed to surprise chance and amuse you. It's a thrill ride, a roller coaster, it has ups and downs. It's never consistent. It's unpredictable. You never know what's going to happen next. It incorporates aspects of a playful obstacle course where you have to jump through hoops. You have to go through an elaborate and complicated procedure in order to achieve an objective. You have to do a series of difficult and pleasant and annoying things in order to please them or in order to get what you want. But in the beginning they made it seem like it was fun because that's all it really is when you're with a narcissist. That's all that it amounts to but it's also designed to confuse you because in their fun house there's a series of rooms and passageways many of which have sloping or moving floors distorting mirrors and other devices. It's designed to make it difficult for you to find your way out of it and that's when it's no longer fun because you want to get out. You want the games to stop but you can't find your way out because this is what narcissists do once they've gotten you addicted to them and it can be difficult to tell if you're actually dealing with a narcissist because they will mirror other people. They will play the victim. They will act like you've done something to them so that they can seem the same as other people so that they can remain undetected because then it's more under the radar. It doesn't bring too much attention to them because they know that what they're doing isn't normal. They know that it isn't socially acceptable and they know that most people wouldn't agree to it if they knew what it was so they have to hide the sky to conceal who they really are and what they're really trying to do and instead put on an act and perform well enough so that it's still effective because for them to pull you into it they have to make it fun and exciting initially. They have to use future faking. They have to use a detailed vision of the future to facilitate the bonding and connection. They keep you hooked by making the kinds of future promises you want to hear whether it's marriage or having children or even just traveling together but they will always hold you off. They will deliberately delay doing something. They won't do it immediately. They will resist. They will prevent you from advancing or approaching and they will only give you a limited amount of the entertainment but they will lead you to believe that something is coming. If you just hold on, if you just wait a little longer because there's all of these twists and turns, there's so many surprising changes. There's curves and frequent changes of direction to where you never know what's going to happen next but they will use money or their physical appearance to deduce you to keep you stuck, to keep you lost in this little world that they have created for you, to get you involved in a difficult and confusing situation because there's so many twists and turns.  They stand out by doing things that most people wouldn't do. They do more than what you might desire from them. They exceed your expectations because they really want to leave an impact. They want to have a strong and permanent influence on you and you may be fine with that in the beginning because you don't realize what you're being pulled into because in the beginning it's fun. You're having a good time. They're not doing anything bad but then when it finally happens you don't see it because as time goes by they stop doing the things that they used to do. They forget your birthday. They won't take you on trips but in the beginning they put in so much effort and they make it seem like it was real so that's what pulled you in. That's what got you lost in their world and once they know they've got you locked in there they flee. They clear out and depart quickly. They leave you there by yourself because they change up on the things that they were doing for you before and they start demanding things from you but they're always demanding things that they're not even giving to you. They want your love and emotion but they don't want to commit. They just want your soul and you never expected it to be like this. If you had known you would never have gotten involved with them in the first place so now you want to leave because you realize that things aren't as they appear but when you've got one foot out the door that's when the narcissist will love you the most. That's when they will bring back the false character because they can see that they're scaring you. They can see that you see that something's not right. They know that their behaviors are disagreeable and unpleasant.  They bring back the false character and then they try to make you feel comfortable again by giving you another taste of what made you become attracted to them in the first place and this is how you know you're dating a narcissist because it's very inconsistent. They're constantly appearing and disappearing. They're hot and cold. You never know where you stand with them because they love you one minute and hit you the next but you got pulled into it because it was fun in the beginning because maybe at the time you didn't have much else to do so you had fun and that's what left an impact on you because while they were being fake it was a real experience for you but you need to recognize that they have an agenda. They have different motives which are very different from who they're pretending to be because that's who they really are. They're crazy.  They were trying to engage with you for enjoyment and recreation rather than for a serious or practical purpose. They knowingly used your emotions in order to get validation from you and that is why they dealt with you in a way that liked seriousness good sense with deeper meaning because they just wanted you all to themselves even while they were treating you badly cruelly and unfairly but this is how you should know that there is no future with them because even though they got this far with you they still ended up mistreating you they still messed it up because they're unable to control their actions. It's a pattern of behavior that they cannot control and it will always produce the same results at the end. Thank you for watching. If you found this video helpful please give it a thumbs up, share your thoughts in the comment section, hit the subscribe button to receive the notifications. If you would like to support the channel you can donate at paypal.me slash narc-survivor. You could book one on one with me on my website. It's narc-survivor.uk. Thank you for watching and I'll talk to you soon.


Welcome to the five o'clock, track three. Unfortunately, Orange Psy cannot be here today. However, we are going to try to stream, I'm sorry, play his presentation for you guys. All right, enjoy. Hi, sorry I couldn't be on the stage because of the issue of visa. I hope one day we can meet fast to fast in Vegas. About 10 years ago, I failed my air grease and course at university. But I'm not here to talk about the hash table. This is a big achievement for me. And Orange, today my topic is less dance in the cache, destabilizing hash table on Microsoft IIS. Before the talk, I would like to give you a showcase. If there is a super secret area, which is protected by a super secure password, you cannot look in only if you know this long password. However, under the design of IIS, all of these passwords are valid and can look into the system. Amazing, right? I guess you might have several questions in your mind. This is one of the attacks I will present today. And you will learn the details later. Hi, I'm Orange, and now the Principal Security Researcher at Devcore. I am a zero day researcher and focusing on web and application security. My job is to discover the most severe bugs and attacks service that can impact the world ahead of the bad guys. My research has also received several awards, such as the best server sidebar of pounding awards and the champion of pound to own. If you are interested, we'll come to follow my Twitter or chat with me later. This is the online today. First, we will introduce several essential concepts. Those concepts are important to let you into Microsoft IIS internals and our topic today. After having a good understanding of IIS internal and the cache mechanism, we will elaborate on our research followed by three different types of vulnerabilities. Also, we will demonstrate how we applied attacks to Microsoft exchange server as a showcase. Of course, we will provide mitigations, recommendations, and future works to those components. So first, what is the hash table? Hash table is the most fundamental data structure in computer science and its purpose is to store data. No matter what the data is, hash table can hold the data in memory very well. Hash table is especially good at handling the key value pair and can operate data with a high performance. Due to those benefits, hash table is used extensively in computer infrastructures, such as the operating system, programming language, database, or web server. Here is an example of the hash table usage in programming language. Programming language uses the hash table widely. However, you don't know because they wrap the hash table into a more high level structure such as the array, dictionary, or object. So if you are a developer, you must have used hash table. As the internal, I assume that everyone here is a good student at university. So I skip the hash table internal this time. First, for what is the hash folding attack? Also, we are not going to talk about this attack only. We still give it a slot because I believe that the hash folding attack is the best cast to learn the mindset of how an attacker abuse the hash table. The idea of hash folding attack is to drop all the records into the same bucket. Since the hash algorithm is public, an attacker can predict its hash and make all records fall into the same bucket. At the time, the attacker degenerate the hash table which can store numbers records into a single link list. For example, the attacker has craft several malicious records on the left side. The hash function in the middle will process and convert the record into an index. The first record is converted to the index four and put into the corresponding bucket. The second is also put into the same bucket. The third, the fourth. The fifth. And the attacker can drop all records into the same bucket. And the table now becomes a single link list. So the hash folding attack can make the table always sit on on the world's cast. That means for inserting n records, the time complexity comes to n squared. We should all agree that n squared is in a terrible performance. Okay, with a good understanding of the hash table, let's discuss the relationship between the hash table and IIS. First, IIS loves hash table. As the well-known and the only web server in Windows, IIS uses the hash table extensively in X architecture to store information such as HTTP header, server variables, configuration, and cache. Due to the massive use of this data structure, Microsoft has designed its own hash table implementation from a very early stage. The following two are all the implementation that will be used in IIS. One is called tree hash table and the other is called LKR hash table. The tree hash table should be the most common like the simple code in your textbooks. It use the link list to resolve the collision and rehash the table when it's in an unhealthy state. The rehash is a series of rebuilding process. It first enlarges the table, recalculates all records, and repostation them to their new index. As for what hash function is used, we will have a future discussion later. The other table is the LKR hash, an implementation that aims to build a scalable and high-concurrent hash table under the multi-threading and multi-core environment. The name LKR is an acronym for the name of the creators. This implementation was also patterned by Microsoft in 1999. The LKR hash is the successor of linear hashing, which is used another beta algorithm to resolve the expensive rehash to enhance the performance. The creators put a lot of effort to make this implementation portable, flexible, and usable. The application can define its own table-related functions to adapt to multiple products across Microsoft. It's interesting to note that part of the creators are also the AIS developer, which should be the reason why we fight loss of this implementation in AIS. Now we have a complete understanding of the hash table. It's time to go deep into our research. In this section, we will show the AIS internals and define the scope we really cared about. We will first explain our mindset and idea to uncover bugs. We are mainly focusing on the hash table implementation and its usage. Since most of the hash tables are used in AIS are cache-related, we also study and look into ex-mechanism. Because Microsoft has designed its own hash table without open source, the implementation should be an unexplored area to discover bugs. So in this context, we hunt not only for memory corruption, but also logic bugs. Here I would like to highlight the bug CVE 2006-3017, it's a logic bug in the onset function of PHP. The hash table implementation didn't distinguish the key type of an array so that an attacker can delete arbitrary elements with an index number. When I saw this bug, it amassed me and I believe this is just a bug I'm looking for. Of course, we also look for the algorithm complexity problems such as the hash building attack. However, since it's already a 20 years old attack, most of the low handing fruit should be disappeared. So in this context, we put more effort into the implementation. As for the usage, we mentioned that the LKR hash is designed to be a portable, flexible, and easy to use algorithm that can be applied to any situation. The convention requires the application to configure its own table-related function during initialization. This kind of extensibility gives us more opportunities to uncover bugs. When I saw this, I was curious that is the particular function good? Is the key calculation good? Or how does the function select the correct record when a collision happens? These types of questions all interested me. So in this context, we care more about the relationship between the record, the key, and the function. When an HTTP request is coming, the kernel HTTP.sys will first handle the connection and dispatch the request. The kernel checks if there is an active IIS worker. If not, it knocks the IIS service to spawn a new process. The WIS windows activation service first reads the configuration to note several specific caches for the process initialization. And spawn the worker process. Several IIS components are loaded here. The worker then loads the modules which are defined in the configuration. IIS by default loads several modules for different purpose, such as the compression, redirection, authentication, and the cache. Among all modules, the following four are the global cache provider to manage the cache between modules. Each module is responsible for handling a different cache, such as the cache for static file, the cache for configuration, and the cache for Windows token. Once the modules are loaded, the worker enters the request lifecycle. The lifecycle is an event loop that process all the notifications from the request. There are several events in a lifecycle. A module can subscribe to its interesting events to complete its logic. There are also global events that a module can subscribe to. For example, the cache provider subscribes to the event cache cleanup and the cache operation to manage the cache between modules. So our research is not only focusing on the cache between the request lifecycle, but also the global cache providers, especially those four are our golden targets. The following section is about our research and the bugs. In this section, we will first elaborate on our idea and the direction we are trying to find bugs. We will attach three different types of vulnerabilities to prove our idea works. Our bugs include a hash-fueling DOS, a cache poisoning, and authentication bypass. We will also talk about the exploitation of how we maximize the severity to make these bugs impactful. Of course, a real-world authentication bypass on Microsoft Exchange Server will be detailed and demonstrate. Okay, the first cache we would like to share is the hash-fueling DOS. First, we would like to give you a spoiler that all hash tables implement by Microsoft are affected by hash-fueling attack. The tree hash table is vulnerable by default, and the LKR hash is vulnerable only if a pooled hash function is configured. However, vulnerable is not equal to exploitable. Besides finding the entrance point, we still have several obstacles to overcome. We find that URI cache module seems to be a good target. The purpose of this module is to cache configuration for URLs. Because grid configuration is costly, so cache is the best strategy. In this module, every HTTP access triggers the cache operation. And the most important thing is that the module uses tree hash table as its cache storage. Well, an accessible by default tree hash table sounds good to us. This is the time chart of every thousand new records in tree hash table. Because it's not open-sourced, we must reverse the structure and code the table dynamically to get the dataset. The line in blue is the time of inserting random records, and the line in orange is the records with collisions. You should be able to figure out there's a huge difference between the two lines. However, the jitters along 35,000 and 75,000 are real. What's the jitter? So radically, the line screws in orange should be in linear time. So what actually makes the time increase unsmoothly? The answer is rehash. This is the part of the insert operation. The implementation first traverses the link list to ensure no duplicates and do its internal job. However, after the internal app operation, there is a call to the function rehash table if needed. The function checks the number of records and rehash the table if the number is greater than two times of the threshold. The threshold is selected from a list of prime numbers. And once rehashed, the function enlarges the table by the next prime number and remaps all records to their corresponding bucket. This is a huge and expensive operation, and that's the reason why the chart increased unsmoothly. To exploit that, there are still several questions to be solved. For example, how much of the cache key we can control? Or how to construct the coalition catalog? There are several elements in a cache key, and the only element we can control is the URL path, which reflected at the end of the cache key. The implementation will first convert all the tags to our cache and send a key to the hash function. The hash function simply multiplies each byte of the cache key by 101. And the sounds then are. The function also uses an lcg to scramble the result. However, is this hash function good? This is the answer from Alec and Zary in their Olsen talk at 28c3. This multiply then add method is a variant of djb hash. And this algorithm has been proven that collidable by equivalent substrings. When two keys have the same hash, such as the ps and q2, they must be equal no matter what you add before or after that. For example, after you add the later a, the hash of ps a and q2 a are still equal. By knowing this feature, it's not difficult to understand that two equivalent substrings can be combined to form different keys, such as the ps ps, ps q2, q2 ps, and q2 q2. They all share the same hash. Since you can repeat the string many times, constructing the payload is easy. You just need to find a few strings with the same hash and arrange them in combinations. So all of these share the same hash value. This is handy for our exploitation. However, there is a fatal flaw in this attack. That is too weak. To get a noticeable slowdown, you must have sent about 35,000 requests at least. For our one request at one record exploiting, it's too slow. And the hospital ridiculous is that there is a catch scavenger to recycle records regularly. The scavenger is a set to delete unused records every 30 seconds. Those two obstacles makes our attack not so practical. To overcome this, we have to dive into the implementation more. During our investigation, we find an interesting behavior that can rescue our attack. The implementation will standard key recursively. It trace all sub directories as new records and ask all of them to the table. For example, in our imagination, the URL will only trigger one search and one insert operation. However, each sub directory will also be checked as a new record so that the URL will trigger multiple insert operations. What's more interesting is that all new keys will be packed with a newer record. The scavenger is nice to do more records and only deletes them one by one instead of killing all of them in a batch. So the only question left is how to construct the coalition in this new context. Because all sub directories are trade-offs independent keys, we have to construct a payload that satisfies all the following equations. It may be a little hard to imagine how to make this happen through our previous equivalent feature. But if we make all the results to be zero, then things come much easier. Zero multiplied anything is zero, and zero plus zero is also zero. So we can satisfy all the equations if we make the hash of each sub directory to zero. So we can prepare a set of zero hashes and amplify the attack 10 times at least by a slight modification. The result is that we can make a server unresponsive with about 13 connections per second. This is not an unreasonable number because IIS can handle thousands of connections easily and concurrent. Because this bug affects the windows by default, we also award a good amount of bounty. Let's check out the demo. We first double-check and ensure the server has 8 cores and 32 gigabytes of RAM. The window in the lower left is the script that monitors the status of the IIS. It's a while loop and checks the server every second. OK, we first run the render test. We send render test to the IIS. You can see the loading is less than 10%. OK, we now run the collision mode. As you can see, the CPU is not under high loading. OK, 100% CPU load. OK, as you can see, the monitor enters the timeout loop. Here we speed a little bit up. OK, as you can see, the server is unavailable and can't handle any requests anymore. OK, the second test is the catch poisoning attack. There are two types of response catch in IIS. One is the static catch support by the kernel, such as the picture, the CSS, and the JavaScript resources. The other is dynamic catch, which is usually used to catch responses that rarely change. For example, the product information of an online shop or the news announcement of NCNS. The benefit of the dynamic catch is that you can reduce the number of the database assets. Dynamic catch is handled by the HTTP catch module, and you can configure the catch by the output catching component. To use the catch, you must first set out your own rule. The rule can best on several connections, such as the file extension, the query stream, or the HTTP header. Here we set out a rule for the extension of SPX and catch the result best on the ID. So the root cause of the catch poisoning is that the module used a bad parser to handle the query stream. Assign that you have already set out a rule to catch a specific parameter. An inconsistency between the module and the backend may lead IIS to catch the wrong result. In the real world, the most common backend is SP.NET, and a simple HTTP parameter pollution can rule them all. For the key do be cast in the query stream, the module only uses the first occurrence as the catch key. However, the SP.NET concatenate all together. These inconsistent parser behaviors cause the IIS to catch the wrong response. For example, if a patch just prints out your name best on the ID, the attacker can poison the result by repeating the ID on the URL. The IIS only recognize the orange as the catch key. However, the SP.NET will concatenate both values and show them all. So the result is that the next time the user answers the patch, he got hacked. OK, our last cast is the authentication bypass. Back to our opening, a super secret area which is protected by a super strong password. Under the design of the IIS, all of these passwords are valid. I guess you might have several questions and be thinking, post the root codes, or how do I get those passwords? Or suspect this must be an edge cast. What kind of the scenario is vulnerable? First, look on is an expensive operation. To not reduce the performance, IIS catches all tokens for password best authentication by default. The implementation uses the LKR hash instead of the tree hash table and configures a scavenger to delete unused record every 15 minutes. As we mentioned, LKR hash is highly customized. During initialization, the module defines several functions, such as the hash function, the logic of how to extract the key from the record, and how to decide which one is the correct record when the collision happened. And this is the hash function defined by the token cache module. It simply uses the DJB to hash the username and the password and then makes them together by XOR. And this is the function used to decide which one is the correct record when the collision happens. The function first checks whether the logon method of both records are equal or not, and then compare the username and compare the username again. You may be wondering, why did this function compare the username twice? I guess the original intent of IIS was to compare the password. However, the developer copied and passed the code but forgot to repress the name to the password. It's a big fail. The failure creates an inconsistency between the hash calculation and the cache comparison. The hash calculation invokes both the username and the password. However, when the collision occurs, the table only compares the username to get the correct entry. Since we can adjust the field of the password to change the hash, if the hash hits a record that is already in the table, the module will return that to us the directory. So the result is that you can reuse another user's login token with random passwords. However, there are still a few prerequisites. First, each password attempt only has the success rate of $3.2 billion because the hash is a 32-bit integer. The other prerequisites is that there must be a successful login before our attack. But once the login is done and the token is cached in the memory, you have unlimited attempts during the 15-minute time window. Both of the above prerequisites makes this bug unusable. It's just like playing the lottery in the space of the 32-bit integer. So to make this bug a more severe vulnerability, we have developed several ways to win the lottery. The first enhancement is to increase the probability of the collision. A vulnerability that requires user interaction is too late. So for the second, we must find a way to exploit without user interaction. The last is to defeat the restriction of the 15-minute time window. We figure out a way to cache the token forever. OK, the first is to increase the probability.  The LKR hash even used an LCG to make the result more random. But just because of this LCG, we can lower the key space because the LCG is not one-to-one mapping under the key space of 32-bit integer. So there must be results that will never appear. So we can pre-compute a dictionary that excludes the password whose hash is not in the results. This development can reduce a number of the key space. Although there are still billion possible records, we have increased our success rate by 13% at least. The second enhancement is to regain the initially. There is a feature called connect us that is usually used in the virtual hosting because the vendor has to separate IIS process for their customers. With this feature, each IIS process can be under a different user context. Under the feature, IIS will auto log on the user to specify while responding the new process. This token will also be cached. That means we can reuse the customer's identity and no longer to wait for user interaction. In this case, we have regained the initially. To prove it works, we did a test in our lab environment. Windows Server can handle about 1,000 and 800 logging attempts per second. Because every attempt costs nothing, you can run this all day. And the success rate is about 4.2%. This is already higher than the SSR in your GATRA games. And you can also run it for longer, 5 days for 20%, 12 days for 50%, and the success rate of running for 24 days can get 100%. We have reproduced in our lab environment and can get a password in about five days. The last enhancement is to defeat the tiny window. Our idea is simple. In modern software architecture, it's common to see the pattern of a background demon monitors the system's health. Our several Chrome jobs access the internal APIs regularly. So we can assign a situation that a credential is attached with the Chrome job. And the gap between each access is less than 15 minutes. In this assumption, the token will be cached forever. OK, I know it's very ideal. Is there any real cash? Sure, let's talk about the exchange server again. There is a service called Active Monitoring, which is enabled by default and responsible for monitoring all services. It checks the OWA and ActiveSafe service every 10 minutes with the test credential. Thanks for the health check. The token of the credential will be cached forever. So you can try as many as you like until you get a successful looking. And the password is also usable to log into the OWA. The account for the health check has its own mailbox too. This is useful for further exploitations, such as phishing or training another post-ORS RCE together. That's our last catch. Let's talk about the mitigations and future works. For the design of the hash table, it's recommended to use the pseudo-random functions such as the SIP hash or a highway hash that can reduce the collision and make the attacker more custom. For the design of the cache, inconsistency is still the key. Just like our cache today, the cache poisoning due to the different password behaviors and authentication bypass due to the un-keyed password. Since the hash floating attack is by design attack, there are several work-arounds to mitigate the problem, such as the input size limitation or a state to randomize the hash. Each solution has its limitation, so the last recommendation is to learn the attacker and defense from the history. There are still several cool future works in my mind, such as using Tyler's timing attack to reduce the key space. However, since I am lazy, we'll come to pick them up if you are interested. This is the end of my presentation. If you have any questions, here is my contact information. Thank you again for being here. Thanks.