All right, so Steven has been doing some research into banking How many people out there use things like quicken and things like that to fill out the spreadsheet for you? Yeah, okay, this is a security conference. So you all fail You can turn your mother's maiden name at the desk on your way out That stuff's always kind of giving me the creeps. That's why I use redacted and I fill everything in by hand and To validate that decision.  This is my seventh death con my first time on stage. I am super excited To be giving back to this community finally and share some share some knowledge What I've been working on for for about six months all told so Hacking banks Because that's where the money is What was my motivation? I think there's a lot of community overlap with Excuse me with the tech geeks and finance geeks a lot of people I work with Are finance geeks as well? I like to hack things that I Use I like the hack things that are in my own backyard. I want to make my life safer And and then you know improve the world around me through making my life safer and I don't write banking software I'm a pen tester by by by job So I'm just a guy with curl and Python and some curiosity And I'll kind of walk you through how I went from zero to this talk in the last six months Sitting at home. I'm using quick in I I Am security aware. I've got two facts are in all my accounts. I load up my bank account and quick in The password doesn't work with a two-factor. Well, surely typing the password without two factors. That's not gonna work. Nope. It does So what's going on here? Just plain text password. Is there a separate server? Is there a separate protocol? How is quick in another other desktop software talking to my bank? That's not just going through the webpage So let's talk about quick in Quick in is one of what the financial industry calls a personal financial management software You've probably seen these names. I run a lot of people raise their hand mint comms very popular Pfm is the industry term. I'll start throwing that around.  Sorry. I collect credit cards Some people collect baseball cards Some people have way too many domain names. I have way too many bank accounts. I they give you bonuses when you sign up and I like I like understanding like from a practical real Sense how how financial system works. So I've got let's say less than a hundred more than 20 bank accounts that I Want to manage and that's good.  They don't have to write myself That'll just keep track of my transactions every month. I use quick in personally. It's the devil. I know it's terrible I love to hate it. I don't recommend it. I don't recommend any of these I Wish I wish there was one that could recommend you So let's start from the user's experience. This is the quick in UI on the left-hand side You've got your list of bank accounts It also does loans and credit cards on the right-hand side You've got a big transaction list everything you you bought who you paid what you paid when it pretty pretty standard for balancing your checkbook So you first install a program like quick in and this is what happens.  It's quite a quite a large selection of banking products that we all use then You pick your bank name And it does basically a name to sort of URL lookup a DNS like lookup. That's called the branding service Then you pick out how you want to connect usually there's just one way sometimes there's multiple ways we'll go into that Then you type in your credentials into this totally not your bank's website Form where you put your plain text password It somehow finds your account you pick the one that you want to interact with in the app and While a lot starts downloading your transactions. That's what the user sees So what's going on in the background? There are three ways in which quick in and sort of other financial management software Talks to your bank The quick in these are the quick in brand names one's called web connect Web Connect is a fancy way for saying you go to your website you type in your creds You go download a file and you manually import it into the app It web connects easier to say express web connect is Quick in has a bot that does that for you It's all manual Direct connects what we're going to talk about. It's a programmatic structured Query language based on the OFX protocol that talks directly between your client and your bank So again in picture form You are the middleman on web connect An Intuit server is the middleman on express web connect and direct connect is you actually talking directly with your bank It's the minimal amount of trust relationship financial institution here is also the industry term for bank or credit card or Investment account or 401k. I'll start saying fi or financial institution from here on out now that you're in with the bank or lingo with me Another step here is account aggregators. These are important to understand So every bank if you have to actually connect and go download a file Well, they all do it a little differently So someone realized that there was a business here creating one unified API Their own proprietary API and then screen scraping as a service to all these other banks So there's a couple. These are the big names an account aggregation. Yoad leads the biggest. They've actually been around for like 20 years They also clean and normalize the data.  They they provide a good service And to the end user application developer, they provide a consistent API So like if you want to write your own banking app, you don't have to talk to thousands of different banks individually But they also add yet another layer of trust. So now my plain text password Goes from my computer to personal capital web application pfm To yodely and then to my financial institution where they do some screen scraping or maybe make that direct connection To ofx for me. I Have to trust that every one of these hops has my own financial best interest in mind and that they are all competent enough to protect a secret The first is easier to believe than the latter So hopefully you're seeing as I did that this whole architecture is Is lacking in least privilege And this is bullshit like these are our banks. These are a Joel These are these are our money Why do I have to give full read write access to third-party software? to To just you know balance my checkbook every month and trust some you know the latest financial app who's then giving my read write Password to a third party and then to another third party What's definitely needed here is some kind of OAuth tokenized app-based access control where I can say hey quicken You can you know you can go to You can go to my Bank of America account if you only have read only access And only for 30 days and then talk to me after 30 days and I'll re-up your privileges That's what we need that is not what we have in 2018 in banking personal finance So that's the end user perspective Let's get technical. I'm going to start at the specification level Walk you guys through how things could work and then we'll talk about implementations and Deployments and how things actually work The OFX protocol is an open spec. There's a group of companies that build it It's freely available for download and perusal and implementation You can go grab this spec right now and read along with me if you'd like OFX is this proto Web service. It was actually invented in 1997 So it's before like we even had rest as a term But it passes Passes messages that are structured over HTTP sends a request gets back a response It can do pretty much anything that a normal consumer would want to do with their bank You can you know checking savings account Your IRA credit card transactions you can do bill pay those those first Three on the left there kind of read only operations on the right writable operations Wiring money to foreign banks Transferring between counts accounts at your bank transferring to accounts of different banks It's up to each financial institution to sort of decide how much of the spec and the protocol that they they implement No one really implements them all As as we'll see it also does taxes I didn't really research into that too much but turbo tax that I use and a lot of people use Also pulls a data through this protocol And then that's kind of the data path and then there's sort of a config path within the protocol and other interesting side things So initial enrollment and password change can be done through effects Messaging from the bank to you notifications from you to the bank and lots of functionality that's sort of obviously there to Help transition a small bank a traditional bank into the digital age So you can download images and PDFs like within the protocol Sort of meant as like a scan of your bank statement instead of sending it to them to you in the mail You know it's an obvious like first step getting away from mailing you But it's just scanning a PDF and sending you the exact same thing This protocol is complex. It's got a 650 page Specification and it's actively developed and growing with that complexity. We all know comes in security. I Mentioned it goes over HTTP So here we're gonna actually look at some some captures of sorts This is the standard HTTP header You're doing a post request to a well-known URL request response as I said That URL is almost always some kind of Base path and then and then server handler. You remember CGI. That's it's it was definitely based off that this unique content type application X of X And Some servers not all servers do user agent filtering. So I'm I'm using the Intuit client app user agent here in these examples So I the same slide. I just dropped those HTTP headers make the text a little bigger And we can look at the real protocol It's got a header that mostly remains static. It tells us the version number, which is the most interesting part And then the body it looks like HTML, right? We've got we've got elements and tags It nested within each other. We got span elements. We got block level elements. It's actually sgml Which if you've never heard of neither at I Sgml was invented after HTML but before xmo So they were like, you know a little bit of rigidity So that you can parse it well, but not not a lot still still some wiggle room You you can tell it's not you can tell it's sgml because there's no closing tags on the span element Those those become required in xml It's hard to get an sgml parser today Python deprecated it in 2.6, which was years and years ago so that's that's interesting note and You'll notice plain text user ID. It's basically HTTP basic auth Every one of your request sends your username and password plain text in every request all over TLS So it's not it's not stiff TLS is required But no challenge response No, no session token. There is there is a session token mechanism of sorts. I have not seen it used and There's this financial ID that's sort of optional Sometimes you need to specify the the numeric value for the bank sometimes sometimes you don't and On the response there's a status code inside every block saying success or or unique error message So pretty pretty easy to parse very human readable and all outlined in a decently written spec So typical protocol flow. We saw this in GUI. This is the same thing over the wire The client makes a profile request which can be made anonymously Gets a bunch of capabilities from the server. Hey, do you support banking? Do you support investment? Then it sends a account info request getting the list of accounts that one has to be authenticated So it can look up your accounts then it sends a statement request getting all of your transactions Here's an example of the profile request that last one. We looked at was just the simplest Authentication now we actually are asking for some data back in the body This profile request anonymous sign-in Prof RQ you don't really have to pass any data at all and you get back a lot you get back a lot of interesting info From a server sitting on the internet Then anyone can query with anonymous credentials about what it what it supports This example, we've got the bank message set. It's telling me checking accounts and Savings accounts likely are available. This ex for prof Tells me that I can do money transfers Two different accounts. That's that's intro bank money transfers and Then also in the profile is information about the bank 1997 most banks didn't have websites yet So this was sort of seen as like the way you were going to talk to your bank and they might not have a website So the you know physical address of the bank an email So you can you can talk to someone at the bank that all that all comes back with this profile request so a timeline 1997 Microsoft who's making Microsoft money into it who's making quick-in and check-free who's since got bought out and it's not a common name All collaborated to make this protocol. They each have their own proprietary protocol which Your client had to use to talk the bank Presumably it was hard getting a bank to implement even one. So they merged together and And put their combined weight to to get the banks to actually run one of these OFX servers 2005 The FDIC sees a lot of banks are going online and says okay We should we should make sure the security here is is up to snuff. So FDIC the the US federal government deposit insurance corporation who make you know who pass a payout when when banks lose lose money Says okay guidance all banks should not must but strongly should use multi-factor authentication for any of their online access So in response to that a new version of the spec comes out 2006 Called 1.03 with MFA Which will go into They transition it to XML 2007 Brand-new beautiful spec with OAuth came out in November. It's eight months old No one has implemented it. It is not in the wild yet. I'm hopeful And you might notice there's a big gap here between 2006 and 2017 pure speculation, but 2009 Microsoft decides that Microsoft money their premier personal finance management software It's not worth it. They they drop it. They Team stops developing it and and two things happen Into it now sort of being the only player in town gets lazy and Starts charging people a hundred dollars a year for the exact same version of quick end 2010 2011 2012 no no software improvements whatsoever because they have no competition and they don't need to try but on the good side This is whole Community effort because people loved Microsoft money And so a lot of geeks started like posting on forums and putting up web pages and finding these Finding out about OFX and writing clients and that's what all of my work is built on is has these guys in sort of 2009 through 2011 who Wanted to replace Microsoft money with a bunch of Python scripts and Excel spreadsheets So let's talk about MFA Quick refresher that most everyone knows in this room multi-factor authentication something you know something you have and or something you are The point is to remove the brute force password attack or Theft of your password as valid attacks against against your account things that Individuals are quite susceptible to Banks have been doing to factor authentication for 50 years With your ATM card you have your card you have your pin number something you have something you know they're good at this In addition to multi-factor Sort of security community has has finally settled on the name to step authentication Better than than one factor, but not as good as multi-factor We see this a lot. We see this a lot in banks. We still see it with Twitter Getting an SMS code Instead of instead of something you physically have some sideband channel of information Again better better than one than one factor, but not as good as as two So 2006 MFA is Should not must by FDIC. What is what is the protocol the protocol implementers do? They have four different solutions in the specification one is this user cred One is this MFA challenge. They're both basically the Asking questions about your mother's maiden name that you all know and love in Fact the second one is hard-coded in the spec. These are the questions that you will ask as a server to the client 2018 we all realize these are both something, you know, these are things that are somewhat obvious or Easily available to learn about a person and moreover I have the like I have the cheat sheet before the test, right? Oh, okay I need to find out these 20 things about this person and then I can definitely log in their account, you know, there's zip code The other two forms a little better client UID off token I'll start on the right off token server generated Sort of GUID that Sends the client client us to send it back every time It's sort of key value-ish. It could be used to hold like TOTP like one-time password codes, but they don't they don't do that. Nobody uses it Client UID is what everyone is sort of standardized on As the second factor it is client generated GUID client sends it the first time server records it every time henceforth The client has to send that same UID otherwise the server will stop trusting them So it's tofu. It's trust on first use But actually People have like more than one computer and this is recognized in the spec and in the implementation guidelines Like people will have a desktop and a laptop people have phone. So it's actually trust on first four uses sometimes two But yeah, so like if you see it you've never seen this client and they make up an ID Well as long as you don't have more than like one or two already stored sure they're also the same person and That is the state of the art in multi-factor Authentication within the protocol that passes your money But I have good news Cuz that's in version 103 and no one's running 103 They're running 102 80% of the implementations in the wild are not running are running the version that was written in 1997 Um 20% are running the version that in theory can support multi-factor And no one is running the OAuth version Good news, so let's talk about the financial institutions these banks. We love we all know these big names Most of us probably have an account somewhere here. These are from like the the top 20 by assets of US banks City group JP Morgan Well as far go American Express for credit cards OFX is used is used by these guys OFX is is also used by YOLO You only live once federal credit union This is me participating in bank branch tourism. I Flew to California and then drove two hours to get this photo for you. I have a lot of bank accounts Well, that's not enough. Why don't you guys start a bank Jack Henry will help you Are you ready to start a bank? We have tips and advice Jack Henry's one of the major software providers of OFX more banks there are the More money they make the more software they sell start a bank So if anyone wants to start a bank like with me after this we can we'll see if we can hack it out tonight So I learned there are a lot of banks like a Lot us in Canada other countries are much more restrictive But there are there are according to into it 15,000 FIs financial institutions About according to OFX consortium 7,000 banks at one time have deployed in OFX server My personal scanning shows about 2,000 unique institutions on the internet right now That compresses down to 400 unique servers because there's actually a lot of service providers sort of like web hosting OFX hosting companies in the space But there are a lot of banks in the US and Canada many of these are the same company like when you have a target branded credit card That's an Fi when you have like a you know at the quiz nose branded credit card. That's considered a financial institution so That's it's not purely like separate business entities There is some indication that that difference between the 7,000 number and the 2,000 number is a decrease in popularity Of people running OFX servers which is sad, but also good because because it's insecure as a quick aside I got banned for life from Capital One It's another story for another time, but I was doing like these large cash transactions There was some Bitcoin in retrospect. Maybe it looked like money laundering or very successful drug dealing Totally legit though. I Tried opening an account. It's been five years. I'm still banned for life And I was a little worried like I was a bit like oh my god. I don't have a bank account And had I known like there's this 4,999 other people who are willing to take my money. So don't don't worry about getting banned from your bank So let's go into my my investigation This this now we're going to go into implementation and deployment. I want to do a survey I love show Dan. I love just like surveying the internet. I want to like, you know I want to find out how how big is the problem? How big is the problem space? I Want to ask these two questions? you know What financial institutions are even running these servers and what what software they're running two simple questions to ask Here's the point where I say my research was only reconnaissance. I am sending packets at live production Fortune 500 Company systems. I do not want to even accidentally take one down Or or gain unauthorized access. So I did very simple recon Like a new bring the host and sending get requests a new bring the host this that's the tricky part up front But this is great. Oh effects Community who has sort of kept the database of these servers for several years. Oh effects home org Is is the best one? They've got a they've got a great website. This is where you can find out how to talk to your bank directly A new cache keep stopped is you know, you Google you Google and you'll find them But oh effects that harm home is the is the best Commercial clients quick in they have what they call the branding service you you put in a name And it sends it off to their server and sends you back a URL For that for that bank name and the URLs look like that up at the top usually a sub domain Then some sub directory in the path and then some some server handler Interestingly, this is this is hard to mask and like it's hard to script this Because you're not looking for a port. You're looking for a web service at a path and that path can be anything So I haven't haven't come up with a good way of you know, sort of finding these out of the ether You sort of have to know they already exist Or you know call the bank and ask them So after I enumerated a large number of hosts We just do a proof of life like just just make a TLS connection and see if that thing's even alive a lot of this data Stale is from 2011. So it's kind of a archaeology adventure talking to servers, you know set up Five ten years ago What I find from a TLS connection Stale DNS 232 are still listed in DNS, but the IP doesn't doesn't accept a TCP connection Not a big deal like no exploit, but it's sort of like hinting at neglect hinting at okay So someone, you know didn't clean out their DNS. How long is that gonna live there? 15 that will accept a TLS connection, but tell you that their cert is bad and expired for years So we got 15 hosts that have Assumably my data is still on them But that no one's looking at no one is maintaining these these servers bigger red flag I've connected Let's send get slash and see what we get like, you know web server profiling 101 Get a lot of banners sure okay, so not the best, you know configuration didn't turn off that you're using IIS Start getting OFX banners. Hey, this is this is handy. This is the OFX server version Thanks build number version number data was released time. It was built Very useful for me to start planning my attack more the same Anybody knows something weird about that build date 2007 Okay Their web servers. Let's talk to the OFX servers. What's the simplest possible like valid protocol? It within spec that I can send an empty an empty tag an empty, you know base tag Let's start sending that Error Java Lang null points are exception Okay, parser error not handling Not handling not getting the elements that you think are always there. That's worth looking into This is like a three for the header is like it starts, but then it stops writing the header and Then the message has two spaces because I didn't send I didn't send a financial ID. So it's doing some sort of printf You know string replacement of data that I sent in and it's gonna reflect it back to me This database error quick Google tell Google search tells you it's it's an IBM DB2 database that returns that error You know straight from the database into the application server back to the client. No scrubbing. Oh Stack trace this is what I was looking for Get in warmer Stack trace with a full Qualified path on the local system to where the code is and where line of the code failed Yes That was like I mean I sent nothing. I sent I sent a header in eight characters So let's switch now. I want like real data like I want to I don't want to cause errors I don't want to just give me a profile just tell me about yourself like you know first first question on a first date Send the profile requests first part of every transaction that quicken's gonna do And here's that here's that session session token of sorts that I talked about I was signing in as an anonymous so first it shouldn't have given me a session token But it did and then it's a year long So this this server gives out year-long session tokens if I ever steal one then I can read your account You know password equivalent for for a year The profile Response thankfully tells me all about the password policy of that server because I have to send passwords So the client has to know how to validate This one minimum four characters Maximum four characters Not case sensitive No special characters allowed no spaces. I'll do the math for you It's about a million and a half total combinations If you could check ten a second online take you about two days To brute force the entire key space that is possible for all user names at this bank Thankfully, I don't remember what bank that is so I can't tell you that was just asking for anonymous information third and last sort of query I did was a give me an account list for Anonymous user which is you know specified in the spec you can send this anonymous user this well-known string I should definitely get an error, right? I should get either I don't think you know authentication failed or no accounts found simple easy to program to two error cases Here is what that request looks like this is the entire request very small just asking for account info and Here is the error message or error messages Same request sent to about 2000 different servers. This is a subset of the error messages. I got back How how many different implementations are running out there? How many different configurations? what sign-on invalid on supported operation for anonymous general error User ID password combination incorrect how many how many ways of it say like I failed login so Let's talk about the financial vendors. Who's who's building this software and how many implementations are there? This is a this is a great little chart not mine. It's from one of the financial software vendors explaining bank software Three parts you need to know on the left you have what they call the core The core is a database and batch processing it makes sure the bank knows how much money it has at the end of every day In the middle is middleware. That's every bank service customer-facing service that you're familiar with bill pay and Remote deposit and dealing with your ATM and Then user experience mobile web on on the right three pieces Every square on this diagram can be provided by a single vendor or the same vendor in the financial software world Imagine the combinations of complexity within the bank IT system when and this definitely happens every one of these squares is a different vendor These are not shrink wrap boxes or apt-get installs or you know app stores These are a high-touch call to talk to sales negotiated deals For online banking solutions a lot of these servers don't even have names They're just the solution provided by the company and OF axis is one very small part of this ecosystem Often a deployment like this Involves custom development per bank not custom deployment custom development Like code written just for Bank A and then different code written just for Bank B because you know abstraction doesn't exist I mean it's vendor lock-in obviously. It's a way. It's way for the vendor to To assure they'll be they'll get their re-up on the next contract Here's a list from Intuit on the banks that support sorry the vendors that support OFX This is their official list. I found nine more not on this list Assumably they're no longer like you know preferred partners or some such so we've got 30 plus different vendors of this singular protocol These are the big guys. I didn't have enough data unfortunately to give you like who's the biggest apples to apples comparison Just a couple names fis and fi serve their multi billion dollar companies They're the they're the Microsoft and the Googles of of banking software Then enterprise engineering and Q2 they're they're sort of the up-and-comers. They've they've established themselves as seeing a lot more servers with Advertising themselves as as these two companies It's a little small, but the enterprise engineering logo says The name to trust for financial data solutions. I Don't want to make fun of them, but it's on their website Which is not over HTTPS And they forgot to pay their Google platform API bill you can go there right now. It still looks like this We all have bad IT days like the people who build the website are not the people who build the ufx software I know but if you put the trusted name and financial software on every web page You should not have this page can't load Google Maps correctly Also there and then there's the hosting providers who play a big role So two-thirds of these of these fis are behind hosting providers now It's like everyone's going to the Amazon cloud and Azure everyone's everyone's you know going to hosting providers It's for a good reason right they can do it They can do a better job at security than your ma and pa like credit union in your town of 4,000 people Their security is better Not good, but better than the the self-hosted ones I don't fully understand all the back-end details between the ufx server because I'm just poking it from the front but a lot of these are batch jobs so like the the You know the your ufx server sits in some data center and it pulls and gets your transactions like every 24 hours So that's why if you're actually using quicken or something you often you don't see your your credit card Transactions ASAP it there's a there's a batch processing in the back-end a Bunch of different stacks of course across 35 development vendors This is mainly just server headers. There's a lot of is but there's plenty of Apache There's a whole long tail. Several of these are custom HTTP servers written by the the ufx provider And there's a ton of acquisition banks love M&A like like divestiture and and acquisition These are compilers and debuggers to banks like they just do this every day over and over again Spin this company out by the company back We do this in tech too. It's not it's not a bad thing, but we all if you've been through an acquisition You know like sometimes the new company totally forgets about the tool you wrote and it just atrophies So there's a ton of that and this industry this this is from FIS for these names up here had You know first party of x servers and then they got acquired and then and then things went downhill the vulnerabilities Some quick math. This is not like a PhD level algorithm that I applied But across this much complexity. I'm pretty sure there's a lot of Vulnerabilities and I mean as you saw like none of these are zero days and these are I got your money But from like sending a get request. There shouldn't be this much smoke That it shouldn't it this shouldn't be this much bad From the level of effort that I had to put in with a web browser and curl On the left that's a list of like stuff We already talked about on the right as things that I have time to talk about I have a bank that still uses my social security number as the username for OFX not for the website, but for the OFX protocol. I got to use my social security number Found some unregistered URLs you can you know, you can just you can you want to start a bank and Reflex it reflected cross-site scripting. I know it's not HTML and yet I got an XSS attack here Okay, let's play along at home So everything I did I hacked together in Python, but I wanted to give it to you guys so that you could try it too Professional pen testers for financial institutions for people writing the software. Let's like let's build a tool Let's let's make this better It's not action github. It'll be there in a couple of days But it is it is real and it exists and I'll show it to you now CLI tool that's going to go through and sort of do what what What I what I showed you takes a couple arguments the the URL the server you want to talk to Optionally the financial ID if you know it, it's not it's not always required You get this all from ofx home org you can find your bank And and run it against it right now send some queries does some analysis scroll back up and We sent that get to slash we sent the Posts to ofx path we sent the empty ofx Payload we we store those all Locally, and then we just scan through them from that profile data We're going to get financial institution make sure that's the real one you want to talk to their address Their info we're going to get that ofx sort of header version information running 102 This is a service provider LAN extra We're going to get the capabilities Sort of in this markdown format. It's a banking server. They do support transfers Fingerprint it's running Apache Tomcat couldn't figure out the web framework software fingerprint Finastra is the company That built the software it's called cavion figure that all out from what they told me couldn't get the version number And then a couple simple tests I fail MFA immediately because they're running 102 and their password policy is also not very good so I Sunday, maybe I should be up if not Monday you can check my Twitter and I'll I'll have I'll post as soon as a is up and available. You can download and you can run it.   I've talked to bankers. I've talked to bank it guys. They I mean they literally say We pay the system integrator they they install everything Five months later I call them again. They give us the upgrade That's that's the state of a lot of it in 2018 at your local financial institution It's an even sadder story for the consumer because this was 1997 like We had an open protocol with programmatic access to our finances No vendor lock-in like no no loss of privacy just you and your bank And it didn't it didn't go anywhere. It didn't it didn't take off like it should have like how much how much better it could our banking experience be today if Microsoft hadn't like you know stopped count stopped competing. I wish my bank would have started when it was younger But it's never too late to plan for retirement When you set up a server like have a plan on how you're gonna take it down When you deploy a teal-ass certificate like make a make a Google calendar like message to when you when you have to update it Monitor your finances monitor monitor your network Know know what you're running know every service you're running not just not just the front door This was only recon One protocol one end point in a rat's nest of bank middleware. I had fun. I'm gonna keep building off of this I'm gonna keep building out that tool if anyone wants to help PRs are welcome If anyone's from a bank and wants to you know wants to tell me more The views good stories I would love to talk to you all of you. Please take the research build off of it and and help make our personal finances More secure. Thank you


This book was given to me December 25th by sister Kate. I must try and write every day and after years It may be nice to look over. I must try to to improve a great deal this year. Every way commenced college today Fear I will have hard work, but I will try and do it well Not many students out today. I fear for the future of old OU. I cannot help feeling sad to think This is my last year at college many a pleasant hour have I spent within its walls Still, I will be so glad to be able to make something I've always had to be so careful of every scent. I have hard work to get my lessons today Sitting up all night does not agree with me. I cannot tell what is the matter with me this term I believe I have the blues half the time and cannot tell why have my last examination at 8 in the morning in logic I have reduction just as easy as can be. I stay and sweep my room then write an excuse and come home After dinner, I go to see the ride for girls and stay about an hour Then go to hornbees, but the girls are not at home. So I say only a few minutes stop up marshes coming back It's easy seeing I have a vacation sweet day of rest I do not know as I make it a day of rest as much as I should these longings after something higher and better Will they ever be satisfied? Monday should be well spent they say I certainly have worked hard enough in the morning I went down after paper and then wrote till 2 after that. I got my lesson in the greek testament Professor scott shows me my diploma today. I did not like the masculine endings What a sad thing it is to be a girl a letter from fb a postal card give scott my essay day of all days commencement day for the class of 73 They all do well Do not forget any of their pieces I was so very frightened before I went up on the stage that I thought I would fail completely I did much better than I feared They cheered me as I went up and I think that helped me I received two bouquets one from Emma and one from Kate Dana After we are dismissed so many come to congratulate me I get tired of them


Welcome to the anxious morning every weekday morning will take a few minutes to go over important lessons that you can use in your anxiety recovery journey The anxious morning brings you support education inspiration encouragement and empowerment Read or listen quietly on your own time free of the endless noisy scroll of social media Use the information to help you along the path to recovery from panic disorder Agoraphobia and other anxiety problems for more visit us at the anxious morning calm Worry and worrying is a common theme in our community You may label yourself an excessive worrier or tell me that you were unable to stop worrying about things Many things all the things Worry becomes a trap that for many feels inescapable and creates a somewhat torturous loop I have written and said many times that worry is not a plan worry is thinking Worry does not accurately predict or solve specific problems Worry does not create any specific future nor block a specific future worry exists only in our heads Worry for the most part is not required Seneca said nothing happens to the wise man against his expectation Now given my stance on worrying. Why would I bring this quote into the picture? It almost seems to encourage worry Seneca was one of the great stoics I've been a practicing stoic for years without ever really knowing it Stoic philosophy will arise now and then in the anxious morning because there are many recovery lessons to be taken from it And no being stoic does not mean being devoid of emotion. That's one of the big misconceptions about stoicism Seneca was not talking about specific worry or rumination Rather the stoics teach us that we should live in accordance with the natural order of things and the natural order of things Stuff goes wrong We make plans then sometimes they break we want things to go smoothly then sometimes they do not life happens Sometimes it is not what we want and it remains largely out of our control Stoicism teaches us that we must acknowledge this but that we also must acknowledge that we are inherently capable of handling it If things do go wrong in this light Seneca is not teaching us that we must worry He is teaching us that we must be simply aware and accepting of the fact that things can and sometimes do go wrong Being aware and accepting of this fact does not require an attempt to think our way out of that We can't no matter how hard we try Worry does not create or influence the future in any way. So it is a pointless exercise in every sense of the word Now what would Seneca or any of the great stoics do about this inconvenient truth about the universe? We live in they would take some time to consider in general that things may go wrong They may make practical plans to address some general conditions Then they would trust that regardless of what does or does not happen. They will handle it and be okay Take a moment to consider your worry habits today. What do you believe about worry? What do you think it is accomplishing might you shift from worry to planning then from planning to disengagement and acceptance? The trick in that sequence is learning to recognize when planning has reached its practical limit That takes time and requires that we navigate through the discomfort of leaving some plans Unmade when our fear is telling us that this is a mistake, but this exercise is well worth it You can't just decide to stop worrying But you can start to understand the role it plays in your life and its limitations That's a step in the right direction On Monday, we're going to visit the topic of exposure and exposure therapy for the first time Hey, if you're enjoying the podcast and you'd like to get a copy of it delivered every morning into your email inbox Including a full text transcription head on over to the anxious morning dot email and sign up for the newsletter And if you're listening on iTunes or Spotify or someplace where you can leave us a rating or review Take a moment and rate the podcast and maybe write a small review It really helps us out or just tell a friend about us. Thanks a lot


The ascending colon, the ascending colon is the part of the colon located between the cecum and the transverse colon. The ascending colon is smaller than calibrate then the cecum from where it starts. It passes upward, opposite the collet valve, to the under surface of the right lobe of the liver. From the right of the gallbladder, where it is lodged in a shallow depression, the collet impression, here it bends abruptly forward and to the left, forming the right collet flexure hepatic, where it becomes the transverse colon. It is retained in contact with the posterior wall of the abdomen by the peritoneum, which covers its anterior surface and sides. This posterior surface being connected by looseria alert tissue with yearly accuse, quadratus lumbarum, aponerotic origin of transversus abdominis, and with the front of the lower and lateral part of the right kidney. Sometimes the peritoneum completely invests it and forms the distinct but narrow merzo colon. It is in relation, in front, with the convolutions of the ilium and the abdominal walls. Parasympathetic innervation to the ascending colon is supplied by the vagus nerve. Sympathetic innervation is supplied by the thoracic planktonic nerves.


Hello everybody, hello panel. My name is Kira O'Farrell, I'm from Trinity and I'm here with my colleague Theresa Logan-Felin also from Trinity, Michelle Tuher from NUIG, Alison Egan from MIE and Anne Jordan who's just joined us who's been working in Trinity with us on this project and Anne is originally from WIT. So the title of our project is the Alignment and Development of an online programme for graduate teaching assistants. These are our colleagues, we're working with us. Therese Moylin is not able to be here but she's from IADT. So what's our project about? Well, in Trinity we've had an existing five ECTS module for our graduate teaching assistants which is called Teaching and Supporting Learning and it's been running for a number of years now. The issue with it was primarily that we couldn't reach enough of our graduate teaching assistants with it. We could only take on about 20 people at a time to have it right and typically it ran twice a year and as usual like we have far more teaching assistants than that and teaching assistants may not have been able to attend on the days we wanted to do it. So we're very grateful to have the opportunity to develop this into an online module which hopefully will be available to all the institutions through the National Forum. The idea is that it will be quite flexible, we're hoping it will be quite flexible. We'll use it as a five ECTS module because we've gone through that accreditation process already, we're going to use it as a blended module, we're going to top and tail it and we're going to do some more classes with it. It will be released as an online module and then it's up to each institution how they use it, if they want to do it for credit, if they don't want to credit it, it can be hopefully useful in itself as a piece of unaccredited professional development. We've done it in blocks, the idea is that hopefully you can either take it as a whole, there's seven blocks or that you can take it in pieces depending on your needs and the needs of your graduate teaching assistants. Our module was for graduate teaching assistants who were already teaching and some of the feedback that we got when we did the needs analysis of this was that we found that we had graduate teaching assistants who were about to go into the classroom who we weren't capturing because one of the things we wanted to do with our existing module was to get them to do some peer review and to get them to reflect on their teaching as they were doing it. So what we've done here is we've also included a wider audience of teaching assistants who are about to go into the classroom for the first time and haven't actually taught or who would like to explore that road. So that's what our project is. That's our work plan. The analysis stage was generally to March so we met, we discussed what we needed, we created some focus groups, we did data collection, data design and analysis. The design phase was April to June, we began the curriculum development, we did that with some existing graduate teaching assistants following your feedback after the first time we met. The instructional design process began and we're currently in the development stage where we're moving from Anna who is our academic developer is moving her scripts and her videos and her PowerPoints over to our online learning team who are designing them and putting an instructional design framework on it and creating it as the online interactive experience. We're still hoping to have reached implementation by this September. It's a fast pace but we're on track. Ideally the impetus is that we want to release it for new graduate teaching assistants who will be starting in October. So the idea is that we'll hopefully be able to release a pilot version by September by the end of September and then we'll evaluate that as the year goes on. So this is what we've completed. We've completed the project initiation and the analysis phase. Following feedback we did, we had mapped our existing module but we also began to see what other modules, what other offerings were out there in the field. There weren't too many but there were, NUIG had a module that they were using, Epigium. Other people had kind of just in time training so we were able to kind of map and see where the needs were. Within our institutions we had some, for example engineering have a small program so we were able to align with them and see where that mapped. We also did a literature search but that's ongoing and is continuing to do that as we go through the modules. We surveyed and focused, quite extensive. We had about 250 respondents in total between the focus groups and the surveys which was a mixture of graduate teaching assistants as well as institutions. We sent out an institution-wide survey to all of you and also some kind of key stakeholders I suppose within the university who we would have worked with before in terms of our TA program. From that we identified some gaps and we began to fill those gaps bearing in mind that the project was about I suppose the enhancements of an existing 5 E STS program. So we went with what we had and we just filled the gaps that the need analysis showed. So now we're currently designing it in the online environment as I said it will be the ideas that will probably most likely be blended by each institution as they get it. We've repurposed, as I said, reused some of the existing materials, we're filling the gaps and we're just about to hand over the second of seven domain-based learning blocks as we call them and I'll show an example to you now just in a minute. Once it's handed over it goes through a design phase so that's kind of the instruction design phase and that's a lovely iterative phase. We're really just in that entry on at the moment so it kind of goes back between the instructional designer and the academic developer and they work together to get it right. Okay what's next? We'll just continue in that iterative stage over the summer and as I said then come September we'll hopefully pilot and then begin to evaluate after that. These are some of the things that, to briefly, I presented at the last event where I talked about it in more detail about the survey and the focus groups but just to highlight a couple of areas where there were gaps, communications came up quite strongly as what both students and institutions wanted as part of a graduate teaching system programme. We didn't have a huge emphasis on that in our existing modules so we feel that communication is also part of the domains of the professional development plan so that was a gap that we had to fill. Lecturing, a lot of them wanted lecturing now. That was something that we talked a lot about. For me a graduate teaching system is more about small group teaching and supporting learning but they were very keen to find out a little bit more about how to construct a lecture. I suppose we've met that half way. We've included in the communication section and the design phase information on how to create an effective PowerPoint and how to structure your lesson plans. So it will be tools and skills hopefully that will be useful for lecturing without actually saying you're now going into a classroom and you'll be expected to lecture because they shouldn't be at this stage of their career. Lab management techniques was something that came up as well as it happens. We have in Trinity at the moment a project which was just completed which was an innovation grant and they have just completed a lab management manual which is online and interactive so we're going to be able to link to that as well which is good. Students as partners, this was something that's been really rewarding actually and very interesting. It was the student representative on the panel who gave us feedback on this. I had said that we were going to contact students and talk to existing graduate students and use them for the focus group and the design phase of it and the feedback that we got was what else can you do. It really got us thinking about how we can use students a little bit more. As it happened, we had a five-ease test. That module was starting around the same time as Ann was developing it so we invited the students on that programme to be part of this and they really have in many ways acted as co-designers on it. Unfortunately that programme is finished so but there's lots more opportunities hopefully down the road. NUIG, the students on their course will evaluate it next term and the existing students in Trinity also have given us resources that we can use. For example, real teaching philosophy statements that they have written as part of their programme or lesson plans, things like that so it's been a really good process. The other interesting thing was that we had in the survey that we did, we asked if any of the students would be willing to be contacted. We sent a survey around to existing GTAs in Trinity and a large number, almost 70 of them were, it was a very large number actually agreed and gave us their email so that's a lovely resource base that we can come back to again. We are already contacting if we need a science voice or if we need somebody to look at something and saying is this right for the science, we're contacting these people and saying would you mind having a quick look at that but hopefully we can make more use of that ongoing. So these are the blocks. We have seven blocks which will form the module. We have aligned them throughout I suppose to the domains. Initially we thought we'd have five blocks actually in the same names as the domains but we felt it was better to do this way. So they're the blocks. You can read them yourselves and this is what it's going to look like. So this is heart of the press so to speak, the online press. Now they have, my online colleagues have stressed that this isn't the final product so already now when I read these just yesterday I could see a few areas where we need to tweak so don't worry about the content so much but this is what it will look like. So when you go on to the home page this is what you'll see. You'll see the learning outcomes and introduction to the module and in this case the academics were involved in teaching that module so Anna and myself are there for the moment. Then down the left hand side is all the blocks. So if you click on the first block then you'll get to, well this is the design process that they use so you'll get to an introduction to prepare, to study, apply, reflect and recall and that's the stages that the learner will go through for each of the seven blocks. So click on the introduction and Jane Doe will be replaced with Anne in this case. Anne is about to do her recording. So what Anne has done is she's provided online learning with the script and with PowerPoints and the online then have made that into, they've created a multimedia interactive experience. Anne is about to record that so we haven't got to that stage where it's recorded yet. But Anne will give a brief introduction to the block, to what students are going to, to how students are going to learn in it and to the key parts of it. It's short, it's just a few minutes long and we'll explain what the learning objectives are for that block. Then when you get into the prepare stage it's just, I suppose the hook just to get the, just to get the teaching assistants thinking about what they're going to learn. So it can be a number of things. In this case they've just done a very short reflective question. So this is about the role of the teaching assistant this particular block. So what we've said is, you know, do you have the approval of your research supervisor if you're going to teach or if you want to teach? So for those of them thinking about that they now have to think well I need to go and contact my supervisor. I didn't realize I had to do that if I'm going to teach. And then when they contact their supervisor or their institutions they'll be told well in Trinity you can't teach in your first year for example. So when you click on this, if you click on you don't know then you'll get some more information about what to do or where to go. The next stage is the study part. And the study part is I suppose the content and the didactic part. So that's the lecture. Again everything is red. It's on audio and there's a PDF copy so it's inclusive. So that's what you see if you click on the study part. That's the start of the presentation. Again this is the role of the graduate teaching assistant. And each, there's typically about 20 minutes worth of listening for this part. So as Anne will speak or as it won't always be Anne we'll vary it but as the academic speaks the text comes up. So in this case it's talking about what the role of what graduate teaching assistants might be doing in the classroom and you click on these. The specific roles are highlighted here in a quadrant. You can also click on each quadrant to find out more information about it. So for example if you're not in the lab you might not necessarily click on the last one. If you are talking about managing tutorials or seminars you'll click on that you'll get more information. So that's 20 minutes of your didactic piece I suppose. Then you get to the apply section. And the apply section is I suppose asking you to think about how you'd put into practice what you've learned. So often might be the creation of a small artefact or to journal something. So in this case we're asking TAs to investigate any other training opportunities that are within their institution, in their faculty, or elsewhere and to sort of plan and think about how else they could supplement this throughout their whatever. The reflect section is what it says. Typically we will ask our students, our teaching assistants to think about what makes, to think about an aspect of that block. And they will be asked to maybe write about it in a learning journal or maybe to put to do a video blog or something like that. And then the recall section that would be more small quizzes just to make sure that they've got all the key information. So that's the design process that's used by the online learning team in Trinity. So we weren't in a position to change that design process but we actually think it's working quite well. The final part of that, am I running out of time? The final part of that is the extent and that's where we will link them to other resources, to videos, to reading. And there's also pre-reading at the beginning but I don't think that I said. So that's where we are, that's what informs their theory. And that's my last phase but basically to say the communication, we're just supposed to be communicating all the time with our stakeholders to let them know it's on the way. And the next stage is as of to the UK next week, isn't it Ann? Next week you're going to the UK tomorrow and she's presenting a poster about this. And I only saw the poster today but it's lovely and she's going to be talking about this and how we've developed and hopefully get some more feedback from the conference. So thank you.


What is going on everybody? It's Stas here. Welcome back to another video. So in this video, we're going to be talking about the top 10 stocks that I'm personally watching and looking to trade as well as some that you guys actually ended up calling out for this upcoming week. I guess you can say the third week of May in 2019. And if you did end up calling out a stock either in our Discord group chat or the comment section on Friday's video, I do appreciate that. And I think I'm going to get through every single one of those callouts. If not, I'm sorry if I didn't get to yours. And typically for those of you new viewers out there, every single Sunday, I'm uploading a video talking about a group of stocks that I'm watching and some that you call out in the call out section in the comment section that I'm watching for the upcoming week. So if you're interested in this type of content, feel free to subscribe to the channel, hit that notification bell so you're notified every single time that I do make a video and let's just get into it guys. So first of all, I want to just do a rundown of the entire market very, very quickly and literally under a minute. So the past week, we've been seeing a bunch of turmoil, a bunch of volatility, Trump hit China with new tariffs of really just increasing the tariffs from 10% to 25%. And this kind of came out of nowhere from over the past couple of months because over the past couple of months, as the market has been recovering, everybody out there, investors, traders, just generally everybody thought that there was a deal coming, a deal between China and Trump. He was leading us on kind of saying that there is going to be a deal talks with China are going well. And we got a bombshell on Twitter last Sunday, I believe saying that Trump was going to increase the tariffs from 10 to 25%. And this kind of caught a lot of people off guard. Hence why the market sold off pretty rapidly this past week from 2954. I believe it got as low as to down here 2830 ish. That was about a 434% sell off in the S&P 500, which are the 500 largest publicly traded United States companies. So guys, that's pretty much hit the rundown from last week. And if you guys want to see a more in depth video on this, go check out my video from Friday, the video before this, you'll see Trump and the Twitter icon in the thumbnail. So just be careful this upcoming week. Another thing, guys, you know, this volatility might continue. I personally think it's going to continue, especially if China does end up retaliating somehow. If we get some more bombshells from Trump on Twitter, I just personally think the market is still going to be very, very volatile. So without further ado, guys, let's just get into these 10 stocks. And again, if you enjoy the content here, if you're enjoying the video so far, feel free to go down below and hit that like button. It really supports me and supports the channel in general. So let's knock these stocks out, guys. So Microsoft ticker symbol MSFT is a stock that's been getting hit quite hard, not extremely hard, but a decent amount over the past week due to the massive sell off that we've had in the stock market, right?  They get hit pretty hard. So Microsoft ended up going from $132 per share down to about $123 to $124 per share. And if we're calculating a margin of profit here, that's about a 5%, 6% potential margin of profit that was opened if Microsoft is able to get back up to those all-time highs roughly at about $132. And another thing I want to just throw out there, let's say the market does end up selling off, a lot of these stocks we're going to be talking about are most likely going to do poorly as well. So this video, you kind of have to take it with a grain of salt because I don't know and nobody out there knows how the market is going to perform. And let's say the market sells off heavily this week and the next week, you know, a lot of these stocks might have no value unless they, unless you are, you know, shorting them. And I mean, and by no value, I mean, sure, you can take positions for the long term. But if you're looking to swing trade them in the short term, they might not provide as much value because again, if the markets are selling off, these stocks are selling off, right? You might not want to trade or swing trade a stock that's showing a downward trending pattern is what I'm saying, right? So kind of take these picks here with a grain of salt and understand how the market can influence these picks that I'm going to be talking about today. But from what we're seeing here, and let's say we assume or let's assume rather the markets go up this week miraculously, right? You know, Microsoft is looking pretty solid here and it's looking primed for a reversal. Again, we saw the pullback of about 5%. We're maintaining a higher low from the previous, meaning the uptrend is still intact. We're also holding the 180 simple moving average, this gold line you are seeing here, we're holding it as a support, right? So this is a very pretty easy pattern to decipher, right? We're pulling back uptrend is still intact. We're looking to fight the 50 SMA resistance now. If we break that and the market looks positive this week, Microsoft is due in my opinion for a nice little run. So Microsoft is the first one. And we're going to kind of bounce on to another large cap stock here, which is Apple guys. Apple has gotten squashed, I believe harder than a lot of the large cap stocks out there. And this is mostly because Apple does have some Chinese exposure, obviously, right? A lot of Chinese exposure, if we're being quite honest, right? China in general is one of the biggest markets for Apple. So we can see here, you know, from $213 per share that the stock was trading at after they reported earnings, we saw that big spike. This one's literally gotten down to, I believe, $192 per share, which opened up a vast 10% margin of profit. So literally almost double the amount of margin was opened in Apple as opposed to Microsoft. But what we're seeing here, guys, is we did break the 180 SMA support, which is kind of discouraging in terms of holding a support that we've been holding over the past couple of months. But excuse me, what I'm liking here in terms of Apple is that we are still holding this critical support of around $190, which was a resistance from back in the middle of November and towards the end of March in 2019, right? These are two levels of resistance. Since we've broken out of those levels, they've become new supports, right? So keep an eye this week, what I'm personally doing is I'm keeping an eye, are we going to hold $190? Are we going to continue this downtrend pattern and possibly break $190, where at that point, I'm not even going to be looking to swing trade or even take a trade position in Apple for the short term, right? Because at that point, we may be going back down to the mid-180s. If I draw this little trend line for you all here, take a look from the potential break here, we may be going back down to $185, which would be roughly the next support that we do see here on Apple. So if we do end up trucking back up into the $195 or rather the $200 level, rather we start to trend back up, the markets are looking like they're recovering, Apple could be a very good bounce back play here due to the beatdown that it's taken over these past couple of weeks. So now flipping the script a bit, TVIX is one that I'm very heavily watching as well. And this is kind of me playing both sides of the spectrum, like I've been talking about in these videos during the turmoil we've been seeing over the past couple of days. It's always good to have a pick that will do well when there's a lot of volatility and downside to the market, which is TVIX, right? Just like it's also good to have some picks like two that we just talked about Microsoft and Apple that would do well if the markets were to bounce back and let's say have a very strong green day. So TVIX guys is an ETF that I'm sure a lot of you all know by now if you're new to the channel, this is one that I always trade when we're having a bunch of volatility when the market is selling off. And it does well when the market is selling off and a lot when there's a lot of volatility, right? Specifically the S&P 500 and the VIX. These are two that you need to watch in terms of the performance of TVIX, right? And we can see, you know, over the past week, we went from literally 19 all the way up to about $32 when the market took that dip and we saw a bunch of volatility. So let's say the market continues to sell off, right? This is again playing the other side of the spectrum here on the negative side if the market continues to sell off. TVIX is going to be a very good play, right? But let's say the market bounces back and we start to head to all-time highs again. This is one that I'm not going to be watching and I'm going to be trading mostly Apple, Microsoft, some of these large cap stocks that have taken a beating over these past couple of days of selling off. So TVIX definitely one on the list. Roku is another one that I've been getting requests on. People have been asking me about Roku stock. And this is one that I track in terms of technicals, but I don't track too much in terms of the performance of the actual business. But from what I understand here on a brief surface, they reported fantastic earnings. Hence why the stock went from $62 all the way up to, let's say almost $90 per share. And I didn't really break down the earnings too much. If we can see here on the live news, we've seen some analysts raise their targets on stocks. That's pretty positive in some cases, right? This one raised at the 90, 90 here. This other one raised at the 70. So that's positive sentiment around the stock in general. Trying to see the earnings here. Earnings per share. Okay, take a look at that, guys. They were supposed to be in the red on EPS of $0.25 per share. They came in at $0.09 in the red in EPS. So that's amazing in terms of the beat. Sales came in at $206 million versus the $191 million expected. So they beat considerably on sales and almost a more than actually a double beat on EPS. So earnings in terms of the two key metrics that a lot of people watch EPS and sales, they were absolutely amazing, right? Hence why the stock went literally parabolic, right? From $62 up to nearly 90 per share. I believe it was a 30% move in that stock. So what is this move really doing on a technical basis? In my personal opinion, it's bringing the stock to a very overbought status. Take a look at the RSI here, the Relative Strength Index. We use this indicator to understand whether a stock is overbought or oversold based off of these two thresholds here, the 30 threshold and the 70 threshold. When these lines are getting closer to the 70 and surpassing the 70, that means there's a lot of buying overbought, overbought, right? It might not be the best time to hop in just based off of the one indicator, right? And on the flip side, if these lines are getting closer to 30 and they're getting below 30, that means it's oversold, people are selling, selling, selling and it may be a better opportunity to hop in, right? And we don't base our decisions. I don't base my decisions off of just one indicator, but I like using a bunch in unison to make my decisions, right? So Roku, we're noticing, in terms of RSI again, very overbought and in terms of previous levels of resistance and support on the three-year week, we can see, okay, we clearly broke out of $72 that ranged $72 to $75, which was the area of the all-time high before. And take a look at this. We ended up breaking out of the $55 level of support from a couple of weeks ago. So we pretty much broke out of this horizontal channel from $55 down or up to about $72. And now we're trending well above this. So what could potentially happen here, guys? Again, who knows? This one can definitely go up to $90 per share on this earnings hype. But what I would personally wait for is to see more of a retracement here, maybe back down into, let's say, the mid-70s, lower 70s, for it to retest this level here, which is a new support. Remember, we were trading in this horizontal channel, we broke out of it, out of the resistance of about $72, $73, $74, that rough area. Now, I would love to see a retest there and make it a new support, because, again, it's overbought, even on this three-year week chart. Would love to see a retracement to get the R side down a bit, the candlesticks down a bit, bring that MACD down a bit as well. And this will look like a pretty solid buying opportunity. Me, typically, when I'm looking at swing trading, especially swing trading, or even day trading, I take into account stocks that are very high, like this one. I kind of enter this or just view this with a very cautious state of mind, because if I'm considering putting money in at the top here, I'm telling myself, okay, me putting money here at the top, I'm literally betting my money that this one's going to continue to push to all-time highs, right? That's kind of more risky, in my opinion, than getting in on a confirmed pullback where, let's say, for this example, we got to $75, we were reversing to the upside, the R side was down a bit, technicals were looking a bit more attractive. That would be a more confirming scenario, in my opinion, for entering. So you just kind of have to understand that stocks that are extremely overbought, sure, they can pop up to higher levels, but if you're betting your money on that, that's a bit riskier, in my opinion, than getting in on a pullback. So Roku, that's pretty much the gist of it there. So ZYNE is another one that a subscriber ended up calling out. This is a pharmaceuticals company, which I don't really know much about here in terms of this particular stock, but just judging off of the technicals here and the previous price data that we're seeing, this one has gone absolutely crazy, right? A lot of the times you notice these pharmaceutical companies, these biopharma companies, they can go from penny stocks up to 20 bucks in the matter of a year, right? They get some new research, some new approvals, whatever the stock goes bananas, right, if the product hits. So this could be one of those that ended up happening too. Again, I don't personally know this company, I haven't done much research into it, but based off these technicals here, that's kind of what I'm assuming. So we saw, I didn't look at this, they ended up beating on earnings, they came in at negative 47, and they beat based off of negative 48 that was expected by the analysts. So that's pretty solid in terms of ZYN. What I'm also liking here is this kind of what we're seeing here is a triple top. Am I liking that? Not really, but what I am liking is if we do break that triple top, which we can see here again, if we zoom in on the five day five minute, we might be able to see it actually maybe on the 30 day 90 minute, we can kind of see this triple top, right? We can see a strong resistance at about $13.30. So I'm not liking this triple top or the beginning of this form of the triple top, because it's not quite yet a triple top until we start to see a rejection to the downside here. But if we see a break here is what I'm going to like a lot, because that's going to be a breakout, bullish breakout pattern to the upside, right? And we're already noticing how this could be a higher low from the previous, right? This can be a point in time where ZYNE is just tuning up to breakout, right? Because we're noticing the resistance, but we're also noticing a higher low from the previous and this higher low after the first rejection was a higher low from the previous as well. So everything is looking solid here. All we need to see is just a pop out of the 1330 level start to start to truck up until let's say the 1350 level for it to break out of that resistance and for it to continue the uptrend pattern. So not much to say this is another one that's pretty easy to analyze based off what we're seeing here. But with these ones that have gotten gone up like 800% over the past couple of weeks, these are ones to be cautious about, right? Because let's say something goes wrong. Again, I don't know about this company personally, but let's say something goes wrong. FDA does this, FDA does that, whatever ends up happening, companies like this, they can tank too, right? That's just the truth about it. So ZYNE, that's one that I'm personally watching. Thank you for the call out. CMG is the next one that we're looking at. And this is, just happens to be fun fact, one of my favorite fast food. I don't really consider it fast food. I guess you can say fast dining places to eat. And that is Chipotle Mexico Grill Mexican Grill, rather, also known as ticker symbol CMG. And this is a stock that's gone absolutely parabolic, just like ZYNE. This is gone from 382. And it's almost doubled up to about $740 per share, where at this point, what I'm noticing, you can't really deny the fact that there's a strong resistance at about $730 to about, excuse me, actually, it's more towards $720, right? We got that little miscellaneous pump up here to about $739. But from there, we got the tank on earnings, and we've been just hovering around that general area. So what I would say on CMG right now is, it's not really good to see this strong of a resistance, right? And judging off the past patterns here on CMG, you kind of notice something similar here where it plateaus for a little bit, maybe a week, a couple of weeks before popping up to a new level, right? So if we're looking at this past performance from the middle of February, you can say the same thing here, okay, when we were plateauing, maybe it's gearing up for a big sell-off, right? But from there, it popped up aggressively, right? So we're seeing the same type of plateau pattern where, at this point, either one of two things are going to happen. We're going to break out, right? We're going to start to head back up into the mid 700s. It can be a pattern that we're seeing here where we plateaued and we break out, or we can see something like this particular pattern that happened back in October. We saw the plateau, and instead of popping out a bullish move, we dumped, right? We saw quite a bit of a sell-off from there, right? So this is something that I'm watching, and we're also looking here at the 180SMA, which has been a support over the past couple of months. We touched it, we bounced above it as a good sign, but we're still having trouble getting out of that 720 level of resistance. So if we get rejected here, we especially break the 180SMA, that's not going to be too good of a sign for Chipotle Mexican Grill. We may be heading back down to the next support, which is going to be at about 670. We break that level. It might be a downhill tumble to $600 per share, but let's say we pop out. This one could continue making all-time highs, continue just rallying. But with a stock like this, guys, I'm being a bit cautious because literally it's doubled, almost doubled over the past couple of months. We're seeing a strong resistance here. And based off of whether the earnings were good or not, this can definitely fluctuate the stock. And we see a bunch of analysts raising it here. I forget if Chipotle did good or not on earnings, but let's say if they did have a good earnings report, which I'm assuming they did because a bunch of these analysts are raising their targets. This one can very well be just plateauing for a breakout, especially on a positive earning. So just keep an eye on that. Keep all of those in mind, especially with a stock like Chipotle. So Amazon is another one of those large cap stocks that got hit pretty badly, just like Microsoft and just like Apple. This is another one of the biggest companies in the world. This one's gone down from about 1962, roughly when we got that news about Warren Buffett, Berkshire buying Amazon, I believe. This was right around this time. Literally the stock has been going down. And we notice how it's holding a support now on the 180 SMA, very typical or not typical, similar rather to Apple and Microsoft. We got the pullback of about, let's say, 4% or 5%. So it got hit roughly the same as about roughly the same as what's it called Microsoft stock. And now basic, guys, basic. This is something very, very easy to see. If we just maintain the 180 SMA as a support, and we slowly start to truck back up on, let's say, a positive market move this Monday. And if it continues throughout the week, this could be a nice recovery play. And the resistance we're noticing now is at about 1915, where if we break that resistance and the 50 SMA, we can be very well on our ways to all-time highs. So Amazon right now, it's looking pretty solid. But this is again, one of those companies that can be very volatile, especially the stock here, if the market is selling off. And again, I'm uncertain on the market right now. I think there's a bunch more volatility in store. And if we do get hit, this can very well get hit as well, which would cause me really not to look to swing trade this one. Maybe they trade it, but swing trading it, if the pattern is looking like it's going downwards, if the markets are looking like they're going down, this could be one that you can end up losing money on, right? So Amazon ticker symbol AMZN, that is what I'm personally watching. So I got some requests to talk about some silver ETFs here. And by silver ETFs, I was assuming USLV and DSLV, which are two that I don't really trade too much to be completely honest. I haven't talked about these on the channel. And oh my gosh, probably like a couple of months at this point. And these are just silver ETFs that trade based upon S-I, right? Slash S-I, just like gold has futures, right? Slash GC, silver has futures as well. And based on the movement on silver here, we're noticing it's just been a straight downtrend, right? From the top at about 16-2, we got a double top there. We sold off, you know, we broke the moving average supports here. We see the bearish cross of the 50 SMA crossing, the 180 SMA. It's just been downhill since then. And we all know, right, these ETF combos, one goes up when the future is going down. And the other one goes up when the future is going up. So DSLV is one that is going up whenever, you know, the future is going down. So we notice how silver is going down, right? We're noticing the downtrend here, the rejection a couple of days ago at the 180 SMA. And now we're trending below the 50 SMA. This is leading me to believe that silver wants to continue this downtrend. And this can actually be a good entry right now on DSLV if we do get further confirmation that we're trucking down, you know, into the 1450s. Maybe if we break down below, you know, 1457, 1458, and we start to push down into maybe the high 1440s, this would be a good opportunity on DSLV, right? And we're looking at this one opening up a nice margin of about 4 or 5% or maintaining the 50 SMA here. And, again, if silver does sell off more, this one could be going up into the $35 level. And what we would need to see in terms of a pattern break, you know, a bullish pattern here on silver is for us to see, you know, these candlesticks breaking out of the moving average resistances here typically are especially rather this 180 SMA. We need to see that pop. And once we get that, if we get that, that's going to be a huge bullish move on DSLV, which is due for a nice little run here. We just need to wait and see when silver is going to complete that move. So UGAS is another one that somebody ended up calling out. This is ticker symbol UGAZ, another ETF that trades not on gold, not on silver, but it trades on natural gas, slash NG here. And natural gas, whenever this one's going up, UGAS is going up in price as well. And we're noticing here quite a reversal pattern on natural gas, right on the 30 day 90 minute, actually, let's go to the 90 day two hour chart, we'll be able to see it here. We notice how over the past 90 days, we've mostly been downtrending, right, the moving averages, the 50 SMA, the 180, both of these have been acting as resistances, right, the bearish cross, we've been just heading down and down and down until we hit $2.43. From there, we found the bottom, we popped up, right, we broke out of the simple moving average resistances, held them as new support levels, we're noticing a bullish cross now, we have a higher low here on natural gas from the previous, noting a reversing, you know, confirmation of the reversing pattern to the upside, that's looking all good right now. And another thing we got was a break out of the 260 resistance, right, this is a very good sign here, 260 resistance was broken above. Now, we're looking to hold that level as a new support, and if we do that, and we slowly start to pop back up into the mid 260s, this is going to be very good for you guys. So what I'm looking for guys is just simply for natural gas to continue this upwards push. If we were to break down into the 250s again, that's going to be a reversal pattern to the downside, might be time for D gas, right, but if we get back up to let's say the 270s, maybe 280s, right, you guys could be at play over the next couple of days. So I am liking this one based off of the reversal that we are seeing on natural gas. But remember, these are very volatile that can go up 10% one day down 10%. It's difficult to trade these consistently, right. So that is what I'm looking at in terms of you guys and natural gas. And the last one we're going to talk about today before I do wrap it up is Billy guys, good old Billy ticker symbol bi li. This is one that somebody ended up commenting. And this is very similar to the silver pattern. Remember, silver futures down trending, they were below the moving averages, they were not yet showing a bullish confirmation to the upside. This is very similar to Billy, right, we're noticing the bearish cross, just like on silver futures, we're noticing rejections at the moving averages, we're pushing down lower lows, all of that jazz. So not to spend too much time on this because I kind of broke down the same pattern on silver. You know, until I see a break out here on Billy, you know, this is one that I'm not really going to be looking to play. But what we're seeing here is we could be getting closer to the support of this little, you know, channel that we're seeing here, right, we're noticing we're getting close to that. If we bounce, let's say the 16 level and we slowly start to push back up, that could be a spot where maybe we'll see a bullish move on Billy. But until then, I'm just on the sidelines watching this one. So I hope you guys enjoyed this video. And by the way, it's Mother's Day today.  And if you enjoy the content, feel free to hit that like button, supports me, supports the channel in general. If you're new to the channel and you want to subscribe, hit that red button, hit that notification bell so you're notified every time that I do make a video. Drop a comment. Let me know what you guys think about these picks. What are your plans this upcoming week? Where is the market headed? I would love to know. So I appreciate all you guys watching. Again, it means a lot to me for watching the content, hitting that like button. It means a lot. So I'll catch you all in the next video. Have a great rest of your Mother's Day. Peace out.


Hello and welcome to the session. In this session we discuss the following question which says two stations do south of a leaning tower which leans towards the north at our distances c and d from its foot. If theta phi be the elevation of the top of the tower from these stations find its inclination to the horizontal. Let's proceed with the solution now. Consider this figure. Here we have taken let pq be the leaning tower and we have taken r and s to be the stations on the horizontal ground. These stations are towards the south of this leaning tower pq. It is also given that these stations are at distances of c and d from the foot of the leaning tower. So we have p r is equal to c and p s is equal to d. Theta and phi are the angles of elevations of the top of the star pq from the two stations. So we have angle qsp is equal to phi and angle qrp is equal to theta. First of all we would draw qt perpendicular to sx. So we have drawn this qt perpendicular to the horizontal ground sx. We take let the angle qpt be equal to alpha. Also we take let pt be equal to x and qt be equal to h. Now we consider the right triangle qpt in this triangle we have cot alpha is equal to the base that is pt upon the perpendicular which is qt. So cot alpha is equal to x upon h which means that x is equal to h cot alpha. We take this as equation 1. Next we consider the right triangle rqt. In this triangle we have cot theta is equal to the base rt upon the perpendicular qt which means cot theta is equal to c plus x upon h. Since we know that rt is equal to rp plus pt which is c plus x. So from here we get c plus x is equal to h cot theta that is x is equal to h cot theta minus c. Now from equation 1 we have x is equal to h cot alpha. So this means h cot alpha is equal to h cot theta minus c that is using equation 1. From here it follows h into cot alpha minus cot theta is equal to minus c. Or you can say h into cot theta minus cot alpha is equal to c which gives us h is equal to c upon cot theta minus cot alpha. Let this be equation 2. Next we consider the right triangle sqt. In this we have cot phi is equal to the base st upon the perpendicular qt which means cot phi is equal to d plus x since st is equal to sp plus pt that is d plus x upon qt which is h. This gives us d plus x is equal to h cot phi from where it follows that x is equal to h cot phi minus d. Again this means we have from equation 1 x equal to h cot alpha this means that we now get h cot alpha is equal to h cot phi minus d that is h into cot phi minus cot alpha is equal to d. This gives us h equal to d upon cot phi minus cot alpha. Let this be equation 3. So from equation 2 we have h equal to c upon cot theta minus cot alpha and from equation 3 we have h is equal to d upon cot phi minus cot alpha. Now from equations 2 and 3 we have c upon cot theta minus cot alpha is equal to d upon cot phi minus cot alpha. Now since in the equation we have to find the inclination of the leaning tower to the horizontal that is according to the figure we have the inclination of the leaning tower pq is alpha with the horizontal so we have to find out alpha. Now here cross multiplying we get c into cot phi minus cot alpha is equal to d into cot theta minus cot alpha which further gives us c into cot phi minus c into cot alpha is equal to d into cot theta minus d into cot alpha. This gives us c minus d into cot alpha is equal to c into cot phi minus d into cot theta. This further gives us cot alpha is equal to c into cot phi minus d into cot theta this whole upon c minus d. Now that we have to find the inclination of the leaning tower pq with the horizontal that is alpha. So we have now got cot alpha which means that alpha is equal to cot inverse of c into cot phi minus d into cot theta upon c minus d. So the inclination of the leaning tower with the horizontal is given by alpha equal to cot inverse c cot phi minus d cot theta upon c minus d. This is our final answer. This completes the session hope you have understood the solution of this question.


Back with you on the FanDuel Hurryup, that's Frank Stamble, I am Greg Sussman, and Frank, when we compile our list in the morning, we feel pretty good. We put the research in, we go over the stats, and when news breaks, we have to adjust. So, although my favorite running backs wide receivers are currently on the left side of your screen, the number one guy that we tell you to pick up, he's not, because Edo Smith is that player with Devonte Freeman hitting the IR as he needs surgery on his groin. If Edo Smith is out there, how important is it for you to go grab them? It's extremely important. Again, this is the top waiver wire ad of the week, especially at the running back position. You're looking at going as high as 30% of your fad budget. You have to ask yourself, Greg, if Tevin Coleman was a free agent in your league after drafts ended, Devonte Freeman obviously went in the second or third round wherever he draft, wherever he went. Tevin Coleman, how much would he have been added for off your waiver wire? That's how you have to look at it now because Tevin Coleman steps into that Devonte Freeman role, and Edo Smith steps into that Tevin Coleman role permanently, or, you know, at least for the rest of this season. But Edo Smith has scored a touchdown in three straight games. In the past two games that Devonte Freeman has missed, Edo Smith has played at least 42% of the snaps, so he's getting that role. It's, you know, 55 to 60% for Tevin Coleman, 40 to 45% for Edo Smith. So, obviously everyone's out there hurting at the running back position. If he's available, I'm going as high as 30% of my fad budget on Edo Smith, Greg. I completely agree. He's the number one guy that is out there, and you got to remember, Devonte Freeman no longer a thing. Edo Smith has scored in three consecutive games, and he looked like the better running back on Sunday compared to Tevin Coleman. If Edo's out there, you have to do what you can to go out and get him.


Polisport's universal front disc and bottom foreguard I've been tested and I'm going to tell you why they are one of my favorite protection accessories. Stay tuned. When Polisport designed the front disc guard they decided to make it more versatile than similar products from other brands by also protecting a widely disregarded and exposed area, the bottom of the forks. Once the bottom foreguard is installed the disc guard is easy to install and remove which is useful to do maintenance work on your brakes or simply to wash the bike.  This disc guard can also accommodate oversized discs and will fully protect the disc and brake caliper as well. It can't get better protected than this. However, this product isn't perfect and making a universal product brings some downsides. First, like every plastic disc guard it has an achilles heel. Although it will do a great job at deflecting most of the impact, on big lateral impacts it can come into contact with the brake disc. And second, the instruction sheet isn't helpful to be honest. I literally spent 15 minutes trying to figure out how to install the bottom foreguard on my bike. But fear not, I'll show you how to install the bottom fork and disc guards and even give you some tips about the installation. With the protections comes a bunch of bolts, bushings and inserts that can be overwhelming, but let's break this part by part. Let's start with the non-brake side bottom foreguard. Remove the bolt on the back securing the forks guard and the inner bolt securing the front wheel axle. Install the bottom fork guard and install the two bushings, one in the front and another on the back. Each bushing only fits correctly in one place, so do it trial by error if needed.  Now, let's move to the brake side and install the bottom fork guard. Start by installing the two threaded inserts in the bottom fork guard, with the cubed insert on the side and the t-shaped insert on top. Then, install the big bushing in front and the flat cylindrical bushing on the side. Now, remove the inner bolt securing the front wheel axle and the bottom bolt securing the brake caliper support. And finally, screw the longest bolt on the brake caliper support and screw the other long bolt on the front of the bottom fork guard. Now, to the disc guard. Installing it couldn't be easier. Place each of the two remaining and identical bushings on top and on the side. After positioning the brake disc guard in place, screw the smallest bolt on top and the remaining bolt on the side of the disc guard. When you're reinstalling the disc guard, don't push the side bolt securing the disc guard into the threaded insert. This will make the insert pop out of its place and you'll have to disassemble the whole bottom fork guard to reinstall it again. Start by slightly screwing the bolt until you feel it is threaded into the insert. If you want to remove the disc guard, but still keep the bottom fork guard, don't forget to screw the bolt on the threaded insert again, or it will be lost after the first couple of minutes. Keep in mind that this was the installation guide for the beta with ZF sash front forks, so it might vary according to the suspensions you have. Have you tried this product? Share on the comments below what you think about it. Thank you for watching and see you next time!