You're twice as sure with two great names, Frigidaire and General Motors. Frigidaire presents Herbert Marshall as The Man Called X. Wherever there is mystery, intrigue, romance in all the strange and dangerous places of the world, there you will find The Man Called X. Now Frigidaire presents Herbert Marshall as Ken Thurston, The Man Called X. Three months ago in a wind-battered tent clinging precariously to the snow-clad slopes of Mount Lambo Parbat in Bhutan, a letter was written. Tonight in the hotel room in Chongqing, China, a telephone rings. The connection between them will listen. Good. Put them on. Yes, sir. Hello, Chief. Helping. I will, Chief, until you change my mind for me. I change your mind. Sure. By forwarding Bill Conrad letter to me. That's right. They are tackling Mount Lambo Parbat over in Bhutan. I'm going to pay him a visit. Ken, if you need a vacation... Ever heard of Citicosis, Chief? Citicosis? What in blazes is that? A parrot fever, you know. Oh, sure, sir. A nearly 100% fatal tropical disease. Bill writes he's come across some on Lambo Parbat. Sir, what? What's... Plenty. I think. Remember a few years back when we thought the enemy was experimenting in biological warfare? Oh, sure, they were worried. Yeah. And we were looking for a certain specialist in tropical diseases. Specialist. But the plane never got there. So where's we there? And Bhutan happens to lie almost midway between the two cities. What? Yep. No, Ken, sounds like pretty fever. It can be found anywhere. You're so right. But there's one thing I forgot to tell you. There are no parrots on Lambo Parbat. Mountains all the time. I get busy from high places. If...  You should have thought of that before stowing away on this plane, Pagon. You wouldn't take me with you, sir. How else could I supply you with my invaluable assistance? And how was it to know you were going someplace like this? Look at that. Look at that thing over there. Must be 10 miles high. Nothing but snow and stuff on it. That's, uh, Mount Labataba. Hang on. Mount Labataba? Mr. Rex, you're falling.  We're going to land. Won't that pile of rocks? We'll be crushed to death. Not on that landing strip, we won't. Well, you mean ahead there? Beside the prison or something? That's the castle of Salal Chaudar. Backer of the climbing expedition. Bill Conrad's on. But why are we going to see him? To find out what he and Bill can tell us about Professor Reader. And about Citicosis. Huh? Hold your hat. We're going in. Go in and pay our respects. It's cold out here. Nothing but icicles should live in such a place. Hey, what was that? Thunder. You always hear it around these mountain peaks. Winds, no thunder. You know too much.  At least you think the people would be hospital enough to meet us. I don't know about people, Pegon, but there's a young lady coming this way. A young... Hey, you're right. Some cute cookie. You are fools.  Huh? Wow. Go back. Return where you came from before you too fall victim to the spirit of the snows. That a standard pitch you get to all arriving guests? Wise men do not make light of serious warning, Saeib. Your friend Dr. Conrad is proof of that. Bill, what about him? He would not listen either, Saeib, and now Dr. Conrad is dead. And I'll tell you first and Saeib how deeply we regret you're making such a long journey only to find your friend gone forever. Bill Conrad will be missed by more than me, Sir Lyall. Right, sir. And the good doctor could be missed by all humanity. I felt fortunate indeed when he volunteered for my expedition. Your expedition, Huxford? John Huxford is the real leader, first and Saeib. I merely supplied the financial backing. I see. You said, uh, Bill slipped and fell in a crevasse. So it would appear, though none of the sort happened, we merely missed him for his tenth one night. The next morning, my ward, Marlise, discovered his body. Is that not so, my dear? Yes. Yes, that is right, sir Lyall. Just another link in the chain of ill fortune that's followed this expedition. You've been having tough luck, Huxford? Well, we've lost some valuable scientific instruments. Conrad's death was a major blow, of course, but I'm referring specifically to a strange, virulent malady that's been attacking our native bearers and helpers. Oh, what's that? It's a mysterious fever, practically always fatal. Nothing we've tried works out, and we've lost so many men, the others refused to accompany us any longer. They claim that Lomba Parbat is being guarded from desecration by foreigners, being guarded by the spirit of the Snows. Yes, yes, yes. However, we've convinced half a dozen or so that their superstitions are foolish. They're at the base camp now, preparing for another drive upon the summit. They will never reach it. Never. Marlise. The superstitions are not foolish. The spirit of the Snows is enraged. Marlise. Ask the Lomba if you will not believe me. Ask the Lomba. He will tell you. Lomba? Yes. He is the first Shol Toe of the Temple of Buddha near the camp. He keeps filling the heads of my natives with his nonsense, trying to keep them away from the mountain. And now Marlise, badly upset by your friend's death, is beginning to believe it. There doesn't seem to be much nonsense about parrot fever, Salal. Parrot fever? What gave you the idea that it's a ticosis? That's what I understand that someone went into it up here. A professor, Reader. Reader? No. No. What is he, Thistan Said? I only know Reader by reputation, Salal. But I've heard the professor's quite an authority on tropical diseases. In this case, your informant was quite wrong. The disease is definitely not parrot fever. Pretty sure of it, aren't you? Thistan, I once studied medicine at the Sarban in Paris. And though I live in the snows of Lomba-Parbat, I too am quite an authority on tropical diseases. I'm doing out here riding those overgrown goats anyway. Here you go, and we're going to visit the base camp for the climbers. But it was so comfortable back in the castle. Besides, what's all this business about? Fever, spirits, parrots? Not sure yet. But I got a hunch that something's brewing up here. Something that might affect the whole world. You mean this spirit in the snow? Uh, more like the spirit of war. Huh? Oh, look! Tent! Yeah, it's the base camp. But Mr. Axe, there's nobody there. Probably in that tent over there, getting out of the wind. Hello! Anyone around? Nobody's home. Must have gone to a movie or something. Come on, let's take a look. Hello in there! Hello! See? Just like I said, nobody home. Double feature, maybe. Let's go in the tent and make sure. You see? Only some piles of old blankets. Those blankets! They got faces. Yeah. Those were natives, Pager. Mr. Axe. Look at them. Amatiated skin or, uh, raspberry marks on their faces and hands. But what happened? What does it mean? It means that Salar was wrong. The base camp's been wiped out and sub-zero weathered by a tropical disease. Citicosis. That noise! Yeah, I was wrong, too. There are parrots on Lomba Parbat. How to continue with Frigidaire's man-called ex, starring Herbert Marshall. In response to a mysterious letter from his friend Dr. Bill Conrad, Ken Thurston has gone to Far-off Bhutan. There he learns Conrad is dead and finds a seeming paradox in nature. Burian Tropic Disease Citicosis, parrot fever, has wiped out the camp of a mountain-climbing expedition on the wintry slopes of Mount Lomba Parbat. Now Ken and Pagon stand on the desolate camp, watching a screeching parrot waddle away to the snow. You mean that parrot bird killed all those men dead? Pagon, somebody helped spread a deadly virus among them. But who would do a thing like that? And why? Maybe a certain professor of reader can answer that. Readers here, all right, must be. Somewhere on Lomba Parbat. Still trying to turn the world into a wholesale slaughterhouse. For the unbelievers of this world, oh evil ones. Mr. Rex, look. Yeah, we've got company. But he's got his gang with him. They're pointing those rifles at us. Who is he, anyways? Pagon, I think you're looking at the Lama Sholto. Yes, unbeliever, I am Lama Sholto, guardian of the temple. Too bad you didn't spend your time guarding the men of this camp. Looks like they really needed it. The curse of the angry spirit struck them down. As if it's going to strike you who brought the shadow to this land. You are coming with us now, the place of sacrifice at the temple of the spirit of the snow. Mr. Rex, what does he mean? Pagon, I think he means to take us for a ride. Oh, no. I don't like this being tied down on a stone bench. And that stage over there with a big ugly bird on it. Yeah, a statue of Buddha with a parrot's beak. The Lama goes in for demonology. Show's about to begin, Pagon. Watch the Lama.  What's he doing that for? Quiet, listen, listen. We point upon you of Padmasambhava in our hour of greatest need. Seven heavens tell us, Almighty One, what we must do, that the anger in your heart may dissolve after somebody spells the mist on Lama, Padmasambhava. What is your desire, Mighty One? Will you speak to us? Will your voice be heard? I shall speak, Shalto. My voice shall be heard. Mr. Rex, that bird is talking. Quiet, will you? But what? It must be appeased. The sacrifice must be made. Deliver their souls to me. Now just a minute, boys. Let's get one thing straight. The only spirit that needs appeasing around here is the spirit of humanity.  They'll help to destroy it. Blasphemer. Unholy blasphemer.  Allow me to silence these miserable tongues. Speak, Mighty One. Proceed with the sacrifice. Mr. Rex, Mr. Rex, look. He's got a knife. He's going to slice us dead. Ooh, ooh, ooh. Do something, Mr. Rex, do something.  But he shot me with that knife. He, hey, that Lama's guy's gone. He's come down here. Yeah, behind those curtains on the desk. The shots scare him off. They did? Lucky for him, my hands were tied. I have shown him a couple of things or two. Maybe you'll get your chance. Sounds like he might be coming back. Huh? Coming back? Oh, no, no. Thurston. Thurston, are you in here? That's right, Huxford. Over here. The English guy. Yeah. Thurston, you're all right. Then I fired in time. How did you get the inspiration, Huxford? I cut the ropes. I rode out to the base camp, saw those beggars. That's your... Followed here. When it looked like things were going to get rough, well, I thought I'd better try something. There, there you are. Thanks. That's much better. What the blazes was that voice business? Had my hair doing tricks, believe me. Are you kidding? More like a microphone and speaker behind that curtain. So that's it. In this fake spirit bloke, most of it...  What's the matter, Huxford? Trigger happy? Someone just poked a gun out from behind that curtain. But I think I parted the blight, huh? Let's take a look. Good Lord! He had a gun, all right. Still frozen in his hand. But, Mr. Thurston, it's that loud chowder. You mean he was playing this spirit ghost? Why don't you try asking the parrot sitting on his shoulder? We're all packed. Nothing to do but give this place the brush up. Not quite, Pagan. We've got to make sure that phony spirit of the snows is finally laid to rest. What kind of a crack is this? Chowder got bumped off, didn't he? Sure. But the llama, my lease and Huxford are still around, aren't they?  Listen, Chowder's pistol was frozen in his hand. That means bigger mortise had set in. That user doesn't happen until quite a time after death and Huxford had just shot him. So what? So we're going to find out why. Back at the temple of Buddha. Why are we taking this dark passage anyhow? Because it started behind those curtains, Pagan. I want to find out where that llama was going. But miles under the ground, what can be down here? Look along that cross-cut and see for yourself. Hey, look at that. Cages. Cages with parrots in them. What are they doing down here? There's a door in that wall. I think we'll find the answer inside. Look at this place. A junk shop for bottles and old gas burners. Pagan, it's as modern as research laboratories I've ever seen. What are all these racks full of this tubes and... Don't touch them! What's the matter with them?  Citicose's cultures. Professor Reader was experimenting here with that stuff. That's what killed those natives. He was using human beings as guinea pigs. Trying to develop a weapon for biological warfare. So you have discovered the real answer at last, Mr. X? Mr. Fershen, the girl's here again. Hello, my lease. Decided to be in on the finish? There is little use in starting something if one does not see it end. So I followed you here. Mr. X, she's the professor. How about that, my lease? No. No, Mr. Thurston. I was the one who found Dr. Conrad's letter the day after he died and sent it to you. Then I began to suspect that he'd been murdered. I grew afraid. That is why I tried to warn you away. Then that crack-butted llama must be the guy. Wrong again, Pagon. It's John Huxford. That right, Huxford? Quite right, Thurston. He's got a gun! Yes. I was doing quite well with my little experiments here until you came along. Your mountain climbing provided a small excuse for bringing in scientific equipment and supplies. I suppose call that tumble so you'll get rid of it. Exactly. But how did you tumble, Thurston? Why would a mountain climber in Bhutan be interested in Citicosis? You were. And your melodrama in the temple backfired. You thought Salal would make a perfect alibi, but you forgot one thing. Rigor Mortis. Rigor Mortis? Sure. It proved that he'd been killed much earlier.  And you couldn't have known he was there unless you would put him there yourself. One can't be perfect in everything, Thurston. At least those test tubes and their cultures are perfect. There are nations, you know, that will pay me millions for them. Yeah, too bad you'll never get a way to sell them.   That's what I figured. You made one more mistake, Huxford. You forgot the glass is breakable.   Let me out of here. Not so fast, Huxford. Nice work, Mr. Egg. Yes. Yes, you have, Professor Rader, Mr. Thurston. But what good will it do us? You heard what he said. That virus is deadly. Yeah, but there's nothing deadly about distilled water. Distilled water? That's what it says on the rack. I took that tube from. Huxford was too panic-splicken to notice. Phew.  Well, but Mr. Thurston, are you sure he was that spirit in the snows? Yeah, Pegon. I'll guarantee it. I only wish it was easy to get rid of another spirit. A spirit of war. That's the deadliest of all viruses in the world today. One that could spread like a plague all over the globe. That's the disease we've got to get under control before it destroys us. Our Herbert Marshall. Thanks for being with us.  Next week, our story is called The Rane of Shalakar. And Mr. X runs into two of the strangest characters in his entire career, plenty of suspense, too. And as usual, Leon Balasker will be along as Pegon Zeltschmer. Just one last thought, friends. A lot of people in the world have learned that freedom is something that can be lost. Let's protect that freedom by being good citizens, by taking an active interest in government. Your help is vital because, remember, freedom is everybody's job. That's all. Oh, and be sure to join us next week when again I return as the man called X. Good night. Frigidaire's man called X is directed by Jack Johnstone, with music composed and conducted by Johnny Green. Tonight's story was written by Sidney Marshall. So until next week, same time, same station, this is Wendell Niles speaking for Frigidaire, made only by General Motors. All characters and incidents used on this program are fictitious. Any resemblance to actual persons or incidents is purely coincidental. Remember, every Sunday night brings you two popular dramatic shows on CBS, the man called X, and the adventures of Sam Spade. Yes, for the best in entertainment, tune in and stay tuned in to CBS, the biggest show in town.


Narcissists are energy vampires. Energy vampires will make you feel very tired. They will leave you completely exhausted, drained of your resources or reserves.  They will always put you under pressure or tension. Energy vampires are not just people that you don't like. They're not just people that you disagree with. They will exploit you for your energy. And most often, you won't even know it until it's too late. Narcissists are energy vampires. They share many of the same traits. They are self-absorbed and lack empathy. They are very manipulative. They have a persistent determination to not change their attitude or position on something, even in spite of good arguments or reasons to do so. They believe that they are entitled and deserving of privileges or special treatment. They expect you to be ready to react to their commands without a delay.  They use you to let out all of their emotions and take it out on you. They have had a bad day. They will be angry towards you, even though you may not have done anything wrong. They use you to get rid of all of their problems, anger, frustration and sadness. But they don't care about how it affects you. They always have to be the victim in every situation.  They will find a fault or mistake that you have made that you are the problem. They cannot take responsibility for their faults or mistakes. They cannot hold themselves accountable. They will blame you for their problems. If you try to confront them, they will manipulate you into feeling guilty. This will then allow them to persuade or lead you into doing something for them. Such as doing a favour for them or providing them with more emotional support. Why do they have to do this? Why do they have to drain you of your energy? The reason why narcissists are energy vampires is due to their low self-esteem. They lack confidence in their own worth or abilities. They feel as though they are not enough, which leads them to seek validation from you as a coping mechanism. That is why they require so much emotional support from you. That is why they are so needy and clingy and can't leave you alone. But they are not with you to give anything to you. They are self-absorbed. They are preoccupied with their own feelings, interests or situation. And that is why they will only talk about themselves. They will never listen to anything that you have to say. They lack empathy. So they are unable to share your feelings or experiences. They are unable to imagine what it would be like to be in your situation. They can only pretend to care about you. And they will only do that when it benefits them. They will always expect you to put them first. They will always expect you to treat them as being more important than anything else. If you don't give in to their constant need for your attention, they will be very angry or upset with you. Energy vampires want to have power and influence over you. They want to feel as though they are superior to you. They may often talk a lot and in an unpleasant or offensive way. They may often talk before thinking about what they are saying or why they are saying it. They may talk very loud as though they feel that no one is hearing them. The reason for this is because they are actually deeply insecure about themselves. They are afraid of appearing weak or as though they lack good sense or judgment. They are more compensate for this by intimidating you and making an effort to have power and influence over you. They have to put you down to feel good about themselves. But they secretly believe that you are above them. Energy vampires love to create chaos and drama. They love to be the center of attention. They have an exaggerated sense of their own importance or abilities. They love to make people feel sorry for them. They thrive in times of intense difficulty or danger. They have a hysterotic trait of making a mountain out of a molehill. They will often engage in overreactive behavior where they make too much out of a minor issue. They can make a slight difficulty seem like a serious problem. They enjoy gossiping about other people's private lives. They enjoy causing trouble. It helps to distract themselves from the emptiness they feel inside. And they will do whatever it takes just to feel something, even if it's negative. Energy vampires will constantly criticize you. They will always try to make you feel bad about yourself. They will take advantage of your insecurities and use them to cause you distress. They will psychologically manipulate you. They will try to change your behavior or perception of yourself or other people through indirect deceptive one-hand tactics. They have a hidden agenda of always wanting things to work out in their favor. They will specifically target kind parent people. When you display empathy or compassion to an energy vampire, they will use it against you. Although you may be unwilling, they will persuade you to do something you don't want to do by using force or threats. They will demand so much more than you are able to give. You need to separate yourself from these energy vampires. You need to set healthy boundaries. If someone is draining you of your energy, they do not belong in your life. If you are around them long enough, they will cause serious harm to you. It will begin to affect your psychological and emotional well-being. Recognize the signs that you are dealing with an energy vampire. And become aware of what you don't want to do or what is not okay for you. When you do this, you will instantly notice that you begin to feel free. You will have more energy to take care of yourself and do the things that you want to do. You will have more energy to live the life that you want to live. Thank you for watching and I'll talk to you soon.


According to reports, Sowido residents are not willing to pay for their electricity and they don't care how Escom will recoup the R-17 billion owed by the people who live in SA's largest township on Wednesday morning. As load shedding hit the township of 1.3 million residents, small businesses were losing money, and children had been sent home by their teachers, who said they couldn't teach in a blackout. While some people paid their electricity bills and knew that their non-paying neighbors were contributing to the crisis, others were steadfast in their refusal to pay for the power they use. One of the residents said this is no longer an Escom issue, it's everyone's responsibility to pay for electricity every month.


Hi and how are you all today? Let us do a very interesting question today. It says show how root 5 can be represented on the number line. Now to show how to find root 5 for any given positive real number geometrically we will be using geometrical method for it. For this mark a distance of 5 units from a fixed point A. Let us name this point as A and mark a distance mark a point B at a distance of 5 units from point A such that AB is equal to 5 units. Now from B mark a distance of 1 unit of 1 unit and mark the new point as C. Now find the midpoint of AC and mark a point O on it. Draw a semicircle with centre O and radius equal to OC. So draw a line perpendicular to OC passing through point B and intersecting the semicircle at point D. So perpendicular means the angle BC or CBD should be equal to 90 degrees. Right? And then BD is equal to root 5. Right? So in this way we can represent root 5 on a number line. Let me write down the steps of constructions for you so that by any point you will not forget how you did it. First of all mark the distance of 5 units since we need to represent root 5. So we will mark a distance of 5 units from a fixed point where AC is representing our number line. Right? So 5 units means you can take any unit to this, obtain a point B such that AB is equal to 5 units. Right? Second step you did was from B mark a distance of 1 unit and mark the new point. Right? Third step it will be find the midpoint of AC and name it as O. Then what you did exactly? Taking OC as the radius, draw a semi-right. Then fifth point says draw a line perpendicular to AC passing through and intersecting the semicircle BD is equal to root 5. Right? So this entire process completes the question that was given to us. Try to make your figure as neatly as possible. Bye for now.


Hi, good afternoon, welcome to my session. In this session, I will first work you through the basic concept and technology of U2S and then I will reveal potential security stress introduced by U2S to the right of the canton. Then I will give some mitigation and comparison. About me, my name is Wang Hai from China and I work for Alibaba Group, which is one of the largest e-commerce companies in China. And my research focus is IoT, Internet of Things, vehicle to everything, and trusted computing and cyber-physics systems. I was a speaker of Red Hat USA 2017, resonating ultrasound to smart devices to mess with the VR device or iPhone or drones. And I was a speaker of Breckin Europe 2015 about GPS poofing and Wi-Fi's poofing creation. It's very tricky, thanks. I am also a founder of an open source mirror site which I have called Tuna, yeah, Tuna. And this is my email address. This mirror is easy to remember, it's hard to remember. It only has to remember the eight, oh, zero to eight. It's very easy to remember. And now the mirror, like in its turn-off interview here, you can find this output is one, only one bar of this kind of cof, very interesting. Our TDDRT is in driver mode, very likely. Oh, okay, the introduction to U2F. So what is U2F? It's called the universal factor. As we know, two-factor authentication is considered to be the most secure way to put user's account in a safe mode. So what is FIDO? Because we also call it FIDO-USF. FIDO means Fast Identity Alliance, Open Standard Alliance, founded by Google and I think Ubico. Now the U2F device is manufactured, including Ubico, based in Sweden. And naturally, it's a proud German company, I think. I'm a freaking Chinese company. Now what the U2F has many benefits over the traditional key, because for example, they have native support for Chrome browser and other browsers are supported on the way, like Firefox. You can at least use a platform to do U2F authentication. And it is driver-free because it uses USB-HID protocol, basically like the keyboard or mouse. And it's also the physics layer or the rule message layer that can be run around the BTLE, means Bluetooth, go energy and NFC. And this is a brief history of U2F. In 2010, Ubico Google created U2F. And 20 for me, the U2F technical specifications is put into the FIDO labs. And for 2014, the support for Gmail and Chrome starts. And the 2016 U2F government. And I think 2017, I remember the early of 2017, Facebook supports U2F as well. And now the portfolio, I think Facebook, Dropbox, GitHub, all of them now supports U2F. And for open source projects, like GitLab. And where's the problem, GitLab, GitLab is there. Yeah. And GitLab and WordPress now supports U2F by a simple plugin you install it. So what is the principle of U2F? It's nothing new, I think. It's basically the public, private key system. As for the reliable party, you can think it as Gmail, Facebook, or other cloud service or whatever. And for the client, you can consider it to be the browser. And the U2F device, you can think, is only this big. So the reliable party, it has the record of your public key. So when the second factor authentication starts, the reliable party sends the key handle and the application ID and the challenge down to the client. So the key handle, basically, you can think it as an index to your privacy, storing your USB device. And FID, basically, FID are the domain name of your HTTPS site. And the client, after the client received those parameters, they check the application ID first. Then the client simply for all the parameters to your U2F device. The U2F device has a microcontroller to handle the USB protocol. So first, the U2F device look out for the private key associated with the key handle H. Then the counter design, which I will be talking later about the counter issue. The counter increase by one. Then the counter, the other parameters assigned by the security element, which is a cryptographic chip, I think. They return a signature from the security element. Then all the parameters are sent back to the client. The client then voids the cloud. Then the cloud checks the signature and finishes the whole verification. This is a central of the Dropbox. I fired up the Chrome web debug console. This is the challenge. They voted for, they voted for the browser to this device. Now this is a snapshot. I think I can show you in the realm. First, I cut this key. It's an open source one. I first register it with like CCC, DPD. Next. Then it's performed. My device is not to grab. I have to put the, oh, oh, there's a new feature. It didn't sound beautiful. And the technical data includes the origin, the name and the challenge. And response data is from my key. And then I log in with the big puzzle. And also it has to press the button. Then the second factor authentication is successful. The response data, the signature data and the counter and my user presence can touch between parameters. On the background, there is a V2F2.5 which is an open source project and V2F2 later for debugging. I think the demo.utilical.com is actually left aside. It's very useful for basic technical explanation. And one of my friends built a V2F0 open source key, this one for me. So the design is very simple. It only has eight components. This is the button for user presence. And this is the LED. And this is for electric protection. And this is microcontroller. And this is the security element. The security element is for HTML, ATCC 508A. It has 16 slots for public key and private key storage. Now the question comes. If the storage capacity is 16, it's that means we have only 16 websites to buy this single key. So the final V2F has a support for infinite key numbers, key numbers. So what do they do? So let me do some basic explanation. The security element, the chain, stores public key and private key pairs. And the on-chip operations for key generation and the data signing. And also stores key portion from outside from your computer to the security element. And it has a program of limited storage. So the solution is use a single device secret which comes to the master key. And we use a key derivation, a kind of public key vacuum, to regenerate all the essential private key from one single master key. This is from the Fido U2F standard file. A U2F device, the key handle, remember the key handle H, doesn't have to be the index to the private key. Instead the key can store for the orange and the hash and to the irons to retrieve the private key. So as for the open source project, U2F0, it's labeled version of formula, source this formula. Remember the key handle is sent from the cloud to your device. And it has the nums, is a random number. And the private key, after you receive the nums, the U2F0, the microcontroller, get these nums. And the MID which is the website domain. And the device key is stored on these two. They do an HMAP. This HMAP operation is inside this security element. So they regenerate the private key. Then the HMAP part, the private key can do another HMAP to the verification of the whole process. So it's very neat and easy to handle. And for the biblical company, they don't have the essential open source code for auditions. So they provided a diagram, basically the same test code. For the web part, it's a regular U2F operation. You get an MID, you get a private key, you do an HMAP, you send it to the signature. But the blue part is the key to the validation process. So what should we be worried about handling this process? Someone asked in the UBICO forum in 2016, a member, he says, I was given an UBQ.  Is this possible? Or a similar question was asked in 2014. And the answer that is my coming of future. But in 2016, biblical guys said, there's no way to accept this. You have to trust us. So I was very paranoid. So I do some experiment. So my proposed attack scenario is, first, the attacker extracts the master key during the manufacturing process of this UBQ. This U2F is an open source project. Then attack the clone, this U2F key. In this case, we are integrating with a software U2F implementation called V2F.py. Then the attacker gives a U2F key to a victim. Then I assume the victim used this key to grant this pool of other services. Then the attacker gets another password from a phishing or other or torturing or something. Then, okay, this is a scenario. And after some cartographic experiment and some simple calling, I come up with these results. This is the regular authentication process. I use this key to authenticate with the demo site. It's a regular process. Then I unplug it, use the U2F.py. I integrate it with the QRM mechanism with U2F.py. Then the login was successful. I tried another website called Gmail. No big deal. It's the same principle. Then try to use this loop. Because it's long, so it's not that scary. I long this key during the manufacture process. And you can have it. And the last one is an Australian email wire or fast mail. It's very fast, so I use it as a fast mail. The first part is no big deal. It's not just like other things. But I try to roll the anti-chloric counter back by one. Now the anti-chloric counter is two. I can control it and roll it back to one. And the login process still works. So the fast mail didn't check the anti-chloric counter. And I send the email to them. Okay, what is anti-chloric counter? So first, inside the sturdy element, this is a sentence from the division of 1886508A. It says the counter is a high-endurace moroponic counter, which means you can't control it using your phone. And let's say the victim or the user now has a state of counter of 100. But the next time he authenticates with a cloud, the counter goes by one to 101. So the cloud only has to check whether the new counter is larger than any of the recorded powers. So if an attacker clogged this key, he has two ways. First, he just gets a very large counter, let's say 900. But this scenario is not so good because the victim will surely be aware of it because he has to press 801 times to let his key be bigger than the victim of the attacker's 900. So if the attacker is smart enough, he can do the best try of 102. Just patiently to do every check. So as for Google and Facebook, they didn't give a warning when this scenario happens. So our key findings have two basic key findings. First is the security model. And in traditional key model, I think, this is basically about the ultimate trust. Let's say if you have a bank account, we trust the bank ultimately. So we also trust the key issued by everything issued by the bank. So we also trust the traditional debt caregivers with security. But in these keys, like this one is open source, this one is commercial of the COTS key. So these are general problems just with key. You can buy from other website or give them from a friend. So these keys bring us a new problem to this security model. We should dongle the trust level from the ultimate, which means our most important can be called the pathographic chip network. Dongle it to manufacturer trust level, which means we, after we receive this key, we should at least do a key regeneration process or to generate our key from an ACAT computer and write the key to the USB device. Actually, the OpenPGP card has this thought. And actually, Chrome Congress should develop a new key. For example, Google and Facebook, when the rolling back event occurs, I think they don't give users a bell warning. And as for fast mail, they didn't check at all. So I report this issue to them and they confirm. So with the mitigation from the service provider side, first, we should dongle as I mentioned. And the third one is we should now implant the Chrome detection. First, of course, we could wear the user's body. And second, I think, it's a very easy way to do it because when the rolling back event was detected, the website can revoke this key pair. And maybe we think this is not a very convenient way, user-friendly way to use it, but it's too factor. You just do the factor. You still can use your phone to do an SMS notification or email. So I think the revoke is not that non-useful for me. So the conclusion is I think this can be classified as a supply chain basically because during this manufacturer process, either when the manufacturer itself or the related supply chain providers they can do something bad to your cryptographic device. Actually, do you remember I just said the cryptographic, the security element, the graphic chips can do a key to import process. Actually, in this open source project I found there is some sort of time I can export the master key from the generation port. So whether you use the security element or not, this issue should be well considered as a supply chain risk. Secondly, I think as far as I know we give a first reward example of this kind of attack. Before, we only have some foreign complaints, but this time we have an experiment. I think it's not that bad, but I think it's a reward example. And we found that unaccompaniment is not well implemented in some websites. I think the best practice is to work and revoke. These are my friends in this research providing ideas to our association. And in the future, I think in a few weeks before, FIDO has a new standard called FIDO2. They are providing new authentication to passwordless authentication, but I don't have the time to take a look at this future. The second, a phishing website, which is built to try to extract the master key reversing the HMAG function. A friend or a teacher, a professor of mine, he's a preprographic master. He says that HMAG reversion is not that difficult. I don't know many of these could be... So I think if you can use this open source version, you can draw it back to the original from there. The original from there only uses 16 keys slots inside the security element. So you can only bind these keys to 16 websites since it's security now. So thank you. Any questions? Can't it try as well? Received? As far as I know, I only tried with three-fourths, so not that much. Maybe Google now has some new ways to control. Okay, a second question. You mentioned that there is an admin chip on the board that you use, or maybe on the UP key too, and I'm not sure, but do you think it's possible to desolder the chip and reset it for reasons and flesh your own property? You can say there's a fault to resets the key. Yes, I think the problem is that the manufacturer can cover the key by flashing or generating it on a chip. If I reset the chip after I've bothered it or desoldered it, do my own generation I should be safe if I understand the problem? Yeah, but the key generation process is not an easy process. You have to send a lot of, I think, the inner commands to the function of the chip. So I think it is only by fault. It's not that easy to do a regeneration. Okay. Actually, some years ago, there is side-channel tech on UP key, and later they fixed it by another... The side-channel tech basically is the power. You use an acidic scope to narrow the voltage during the AES or other pathographic operation. Someone, I remember at least three years ago, doing this side-channel tech, but they fixed it. Okay? Yeah, main engine cut-ups. Any questions? Thank you guys.


I've been really lucky in my career you know to in my my childhood to have a lot of really good quality coaches and and play alongside some really talented players during my time here at the Wanderers but but growing up you know without without my parents my dad my mum and you know their sacrifice a five o'clock driving through peak hour to drive me to training because I didn't have a car back then and you massively took it for granted back then you wish you could just thank him every single day and and but you look back now and you think you couldn't have really done it without them I asked my dad you know I was 16 I think and I was about to get my my first car my piece my license when I was 17 and he was saying to me this could be in the last few trips we do together driving to Sydney Olympic training at the time obviously I've had an NYL season when I was 18 19 and through all those successes with that first NYL year when we won it they were always behind me and then once I signed my first pro contract that was that meant so much to to not only me but to them the sacrifices kind of paid off in a sense and I remember when I was young he said to me well something in particular moment where I was nine ten years old I believe and I was driving who's driving me to an academy he said like all the other kids are just training as well you know if you just want to do the same amount as them or you're only just gonna be I guess as good as them so it's up to you whether you want to do more he goes I'll tell you like I'll drive you over I'll be your taxi he said but it's up to you at the end of the day and that was really at nine ten years old and that's when I knew that I listened to him I said you know what I want to do and I want to do it myself and I want to do it for my family even at that age I remember that vividly and it means a lot to me too


So who am I? Actually, this picture came from the Ruby Midwest that I met PJ at. A lot of people started saying that I look like 10-10. And since that Ruby Midwest, my ad is on most websites and Twitter is 10-10. On Twitter, it had AdKron. Had that since I was like 10 years old, which according to PJs, like a couple years ago. Is that better? I own and own is a big term. I freelance mainly for four years. I really love it. And I also have been doing a podcast called Disaster Life for four years. And it's been a whole lot of fun. I invited conferences to interview people, but not often to speak. And kind of like Johnny. Johnny has seven kids for you guys that don't know. I like to spawn lots of processes too. That's my family. I have five kids. If anybody else has quite a few kids, you understand that this picture is kind of a magical feat. Everybody's smiling. Most of them have their eyes open. In about five seconds after this, it was like Dante's in front of me. No one poked me. He punched me in the face. And so it was great. But I realized after spying lots of processes that we really are a relapse. This talk's not about relapse though. I just thought it was fitting. And that's actually what most of our family pictures look like. Somebody's scared. People laughing. But really this talk is about being a hippie. And what does it mean to be a hippie? Well, festivals, obviously. And that kind of conferences. So we're all part of the way there.  And making your own things. Like clothes, jewelry, full-tolerant applications. So I guess full-tolerant applications. Let's start out. I'll get to the meat of this now. You might have kind of an idea of where I'm going now that I'm talking about living with freedom. But recently I was working on some application and I had to write a password reset system for the application. And this is kind of what I had. It's pretty simplified. But I have a supervisor with a password reset and it talks to the database. And I started thinking about that data and what you store when you go to a password reset. So someone comes into the site, they ask for the password to be reset. You set a token, a token to be temporary. And I didn't want to pull in another dependency, a key value store. So I just threw it in the database. But I wasn't really happy with it because I knew that that data was just going to go away in a short period of time. I didn't like that column sitting around like Josh said. I don't, null columns aren't great unless you have a reason for it. And this was going to spend 90% of its time null, hopefully. And it's very short lived data too. And the database null is that fast. I'm not saying it's going to be that slow, but I kind of did a kick out of shaving just in the middle of seconds off of things. So if I could get rid of that, that would be really awesome. So I think Josh already left. Is Josh here? Oh, Josh, I put this slide in for you. Josh, the database is not your friend. I'm not saying to get rid of your database, although that might be an idea. So I started learning Elixir on and off a long time ago. And throughout, I saw some talks by Sasha and he often has picture of blue background, yellow squares of processes. So I'm going to make that with some sticky notes on my wall to give off this. And because this to me is what I thought of when I thought of using Elixir or lanes, all these little processes talking to each other. But I think Sasha has something missing whenever he puts this picture up there. There's nothing here. They might do things, but there's no data. And I heard you can store data in processes. Does anybody know what these are? Anybody have a car that you could put these in? No, nobody's going to admit that. All right. I don't believe all of you. So this is what I thought of. These are still all much processes that have some data in them. And you can use that data, but really, I mean, it's worth putting all this work in. People have made it in cash. They made Redis. They made a lot of different things that you just pull in and use. It wouldn't be that bad. So why waste your time to put this into your Elixir program yourself? And I said, because of TDOS, I hope you guys can read that. I don't mean distributed denial of service, although I might have played off of that intentionally to try to build up some emotion in people. But it's an acronym that I use for dependencies. So you have libraries and other things that you have to pull in that may or may not be being maintained. So I wanted to reduce dependencies. Deployment, which Paul talked about deployment. I didn't want to figure out how to configure something else. I didn't want to make two new things talk to each other. And then something else to monitor and pay attention to all the time. Is it up? Is it down? Is it taking up too much memory? And I needed less knowledge and less experts if I could stay in one location. Another option is optimization. I mean, what's faster than going out to your database? And I frequently get in-memory key value store. Remember GTIs, Redis? What's faster than that? How about not having a wire protocol? Not having to change data from one format to another just so you can pass it around. So you can get rid of that. What's faster than an in-memory database? Your current application having it in memory? That works out pretty well. Security. And this is where a lot of people are like, well, what are you talking about?  So I have a report open or I have this new software and we're already going to hopefully keep up with the Elixir releases, the early releases after moving along in our application. And a lot of these external dependencies get forgotten. So you miss the security output on Redis, which actually, I'm not trying to knock on Redis, but when I looked up some stuff about this, Redis had a security problem that they put out that they had when they said check the change log and there was a link and you click the change log link and it went to Reddit and that's where their change log was and it just made me feel a little uncomfortable that Reddit is where they said it's where their change log. It's not in their repo or anything. And I also looked up Shodan or shodan.com is a search engine for Internet of Things. It's also a really great search engine for finding open databases. And if you type in Redis in the US alone, recently I did a search and it came up with 6,550 insecure instances of Redis and a lot of them had a key store that was called Crackit or something similar to that. I should have written that down. And that came from a problem in Redis that was a couple of years old. So people still had broken Redis instances from a couple of years ago and it just pushed back to me and said well I hope I didn't install it on a base because it probably did. And then the closer that I can get to not having these external dependencies, the closer I can get to a Unicurnal system. So a Unicurnal is a machine image and when you deploy it's a lot like deploying to an embedded system and it's a pared down Linux kernel that has nothing really your app is the OS. Sometimes you don't have a lot of system calls and Elixir and Erlang really live themselves well in this. You can hop in remotely and get into IES and have kind of time on your system. So you don't need many services. You can be more secure. And last but does anybody know this guy? Speaking of that conference. Who knows who this is? Somebody. Uncle Bob Uncle Bob gave a talk at Ruby Midwest in 2011 and it's called architecture of the lost years. And as I was thinking through this I popped back to that talk which for the most part I just thought was entertaining more than informative. But apparently it's made me learn a few things over the years. And he said put off persistence as long as possible. You're probably not going to need it. And I'm paraphrasing a little bit about it guys. He's nuts. I still think that. But so I was like well okay I've got a database I don't really want to reach to it. I didn't go for that external dependency. I really wanted it for you. I want to see if I can loop it out of the database. So I started talking to a friend about it and he said that doesn't sound like a hippie. You sound like a hoarder and I thought oh what? That makes no sense to me. He's like you know what that kind of hoarder? This kind of hoarder. I don't want to maintain that application. No way. So we settled on it. And really it's this kind of hoarder. Those are old video games. I think I might be comfortable living from there. But the thing is to be this kind of hoarder you have to figure out what you're dealing with. You need to classify your jump. You need to make sure you're putting it in the right place. And then you need to protect it because I'm sure there's some people that might break into that house too. I'm going to make sure it's good. So first thing I wanted to think about was what are the types of data? And I came up with two. There's permit and there's temporary data. So permit and data I came up with two ideas. There's static permit and data which is config files or things that you would actually store in code. Things that in order to update you would probably do exploit. They're not. They're rarely changing. Hopefully every week you're not changing where IP addresses are or anything like that. So those things are, they're not good for a game base. They're not really good for res. They might as well stay in some static files. And then there's permit changing. Medical history, comments on a blog, users last name. It does change, but probably not that often. So those are pretty decent things for you to store into a database. And then temporary data. And I was actually asking people like, with temporary data what does that mean to you? And I kept getting these three words. Temporal, transient, ephemeral. Well, at least all the same thing and people would argue back and forth.  So the first one, temporal is relating to time. And that seemed like a pretty good thing to store in the process, like weather. I actually thought that the password reset token is semi related to this. I mean most people don't ask for a password reset token and then come back six months later and reset their passwords. It's usually a fairly immediate thing. Unless you're like me and you remember your password right after you request the token. Transient is lasting only for a short time. So at first I thought the word transient was like transporting. But then for a short time a lot is cache. Cache would be a great piece of transient data. And I thought this because when I looked up ephemeral it said lasting for a very short time. People argued with me over these being different. I was like, well they're pretty much the same me. So we decided that ephemeral was things being transported. They're very short periods of time. So, alright. Got our app. Got some background information. So how do we actually store data? And that's agent to the rescue. Agents are, if anybody's not used them, it's based on a GIN server. And it's a great for storing simple data structures. No conversion required protocols. Right inside. And it's pretty quick. So that's what I pulled out. I have a password reset. And a password reset horde and a supervisor. And I probably should have swapped these so that the horde is where the data is to work. That's our agent. I probably should have swapped them so I could start out first. But this isn't software. It's a picture and it's too hard to swap. So now the thing is about this is we are likely to have failure somewhere in this system. And with a single supervisor like this, a password reset has a business logic in it. Which is where we're most likely to have failure. If it fails too many times, then that supervisor will end up shutting everything down. And that's not really what we're left with. Let's go ahead and look through the code of an agent. So the agent, whenever the server starts, the function up there that's passed in, the return value of that function is your starting data that is inside of your agent. And so we're going to get an empty map. Because a key does storage the map. I don't need anything big. I just need a key to the user. So in ad, somebody had an agent up here yesterday and they had an update there. And that's what I started with too until I learned about cast. It's so update and an agent, you tell it to update the data and then you wait for it to send it back to you. It's a call. But cast, the second argument there is function to put the token and the user that's passed in into our state inside of our agent. So it's saved. It's set in forget. I don't care. Just go ahead and put it there. And with a password reset, even if there's a problem and you lose it, somebody can come back and click that button again. So that's not going to heal. And then we have get user. So again, we just fetch out of the map based off the token that's passed in. So a crash from the state. And then a remove. Because after they reset the crash from the token, we don't want that token to be reused over and over. Somebody else gets their email and clicks that. Change the password. But like I said we could have crashes. So what about crashes? Does anybody know this book? Alright, so this is all about the agent. I wanted to be able to live that. Let it fail. And so I had to find a new hero. Agent wasn't going to do it for me. And this little guy down here in the very bottom he's the protagonist in this book. And his name is hero protagonist. So I just had to put it up there because we got crashing right here. So my hero is Jen Silver. And I changed the supervisor patterns here. And this is really important on how this works is that I have some failover data. I have Horde and I have password reset. So Horde here is what is about to change. And failover data is something new. And you'll notice that we have a separate level of a supervisor in here. And since we have a separate level supervisors by default have a certain number of resets in a certain amount of time. And it's three resets in five seconds before they just fail everything. So in our case now we have three resets in five seconds from the supervisor for this. And if it dies that top supervisor will restart this one and do it again. So now I can have nine resets in 30 seconds. And we still from that password reset I'm always going to return okay to the user anytime they ask for anything. So I can cast everything. I can put everything in the background. And there the selection of the user. So response times when I tested this went from 120 milliseconds, which is very good to 56 microseconds. So that's way better right now. And the thing about GenServer is it allows you to have custom termination logic. But let's show the failover. It's a lot like what we had before. My failover data starts out with an empty map. I'm still using agent here, cast to add state. The function for dumping the state normally takes the state in but we don't care what it is we're just going to override it. And then loading the state back out. But here's the secret sauce here is the GenServer. So the GenServer I'm leaving most of the code out. There's a whole lot of boilerplate in there and then the add remove and get user are based off of the agent that we had before because there's not a whole lot of change. But in the init, instead of setting data in this guy to an empty map when he's restarted we instead use the failover storage that was back here and we say hey I want your state so I ask for it. I get that state but then I'm terminating and this is what GenServer gave me over agent is on terminate I get the last state that happened if there is an exception if the supervisor shuts it down for whatever reason and I dump that state in the failover storage so when the supervisor starts me back up I get that init again and he gives me that back. So the big thing here is you can do many other things in this terminate callback and munch that data you could write it off to a file so that if this is failing over and over you then have something to use hey maybe it's failing because my data is bad let's go see what that data is. But again I had failure and I really didn't want that hoard even though it's going to dump its data off I wanted to give an extra layer and this is really the crux of all of this. If you want to start living like a heavier order and being free of these constraints you still have to watch out for yourself and watch out for yourself you want to keep things that are going to fail often and push those to the bottom of your supervision trees. Whenever you're designing the things near the bottom I should have told you earlier that we can reload over and over based on the supervisors so I have more chances of failure before I have a problem and I ran into this and the reason why this has saved me is a database where he said shut down the server and came back up and I ended up shutting down my whole application and I didn't know for a little while but after I had this in it gave it enough time that that server could come back and tested shutting it down some chaos monkey type stuff and it worked out really well. So you have more chances for failure and then the only thing you have to deal with is catastrophic failure so what happens when somebody unclubs the server or something else on the server just shuts down so I don't get the term a callback and that there are ways to handle it but I'm not going to go over those today because there are some other connections here we have expiration so I wanted the password reset token to all of my labs for 24 hours and I've since moved on to the password reset token generated as a signed key, an encryption key and I don't even have a story but this is the bandit for other data that I've been using but expiration wise too if you wanted to stay within Elixir itself there is a library called cachex that I found it builds a cache with time to live functionality and it's very configurable it's been pretty fantastic to use I haven't been able to dig into everything that it does but it's got it's got some really good stuff I suggest checking it out the other thing you can do is distribute your data so using Amnesia or just another Elixir process on another machine like if you're already low balance you can push your failover out to other machines on a regular basis and that way if your whole machine goes down when it comes back up it asks the other machine to give me that and it does add a wired protocol back in but it's it's all still a regular Elixir and you're not pulling in new things and really if you want a good understanding of how to deal with really distributed data and deletes last year at Elixir Conf EU Chris McCord gave a talk on Phoenix 1.2 where he discusses Phoenix presence and how they implemented all that and it's a very good list to dig into it's probably way more complicated than the data that I wanted to store so I might keep all that in the database because and then binary data so binary data garbage collection is pretty well documented this can be an issue within early it's done differently if you there are 64 bytes of magic number anything under 64 bytes is stored on the heap just like every other process and whenever that process goes away that data goes away it's just cleaned up if it's over 64 bytes it gets stored what's called PROC bit and it's reference counted and the reason why is whenever you try to break binary part instead of it copying a data over it puts the pointer to original 64 byte or larger binary data to a section and so since it's reference counted has a completely separate garbage collection from the rest of Elixir garbage collection and it will shut down your system pretty easily I've read into that garbage collection doesn't kick off until you have a memory pressure is what it says in the early documentation I found out it's about 90% of my system memory and usually before the garbage collection can finish my system crashes it doesn't have a memory so be careful if you try to store any binary data at all make sure it's under 64 or really pay attention to what you're doing with it store domain objects instead of storing binary you convert it into some domain knowledge and store that to work well better for you so the next step in order to be a little more fault tolerant is ETS and DTS, Erlang Term Storage has been brought up a few times I've heard people talking about it and disk Erlang Term Storage so you can still store native Elixir things in there but the great thing about using those two in combination for your failover is that they use the same API so I can take the same module and inject whether it's using ETS or ETS and use the ETS for failover or more more data right into this and ETS for my regular memory and just write it off to disk which also gives us that if I crash I have a known state somewhere on the drive that I can look at Amnesia, I don't haven't dug in a whole lot into it if you go Elixir school has a little section on the top that has four questions that tell you when you might want to choose Amnesia over ETS and so that it's more distributed and has some different failover issues built into it that you can deal with and then really my next step that I think is I want to write an application with NoDB and I really think that everybody should try that you should try this I have an invoicing application that is all Elixir and I think I'm going to rewrite it with No Database hopefully I don't lose my invoices if I do have some really happy customers so let's go over what it was, how to live like a quarter, so agent's pretty good for temporal data things that you don't care about you can load back up pretty easily current weather so it would be a fantastic place to put that and the reason why I put it the only reason why you wouldn't want to use an agent is if you need some kind of termination callback it does not give that to you even though agent feels like a great thing you can just hurry up and jam a bunch of stuff in and I run it in too very quickly that it's better for prototyping than having to let it crash and failover mentality so GenServer is your friend because it gives you that ability to do failover you can feel more confident that your data is there and then it's going to be taken care of make sure you push logic to the bottom, logic is where your problems are going to be you're probably not going to have as many crashes because you're trying to store into a map or your data so push anything that's going to fail to the bottom of your super engine tree to give you more research for those hyzen books failover data up tops, keep data stored in the top of your tree that's the safest place for it to be, the bottom of your tree is the stuff that fails all the time stuff at the top is the stuff that's going to stick around whenever you run into problems keep data in its own process so throughout all of this I had put I moved the calls to the database out into that back end process so that the friend could respond to the user's right way and I found out that when the database goes down I was losing data even if it was restarting and that's because it was restarting in that single app but if you push the process or the business logic out to its own process and not have that stored data using tasks is a fantastic way the restarts will not affect your data it's completely boxed in on its own so if you have DTS you can back up to your database Josh you should probably do that because the top thing here is probably the only resource that you really need because all will be listed here github.com such binary noggin slash live like a hippie there's an index file and it will have all of these links and errors that will link to the architecture of the lost years that you can talk by and I've heard this a few times because I already have slides for the zen of Erling this article is actually the inspiration for me to say why do I need to be able to talk to people like every time they bring up a database they're putting into this and I figure if him and Uncle Bob will say why don't I need a database, why don't I need a database for that and then I'll link to Cachex which would be beautiful and then I'd like to thank the Lipser days for having me come out and this great conference I think all of you and these guys help me out, I look for Erling, he's been writing Erling for a really long time Adam runs the St. Louis group and Craig will check out my slides over and over but I'd like to thank him so I guess I have time for questions or you can just come and see me and talk to me afterwards I don't know why they had to put the thing at the top or is it past the address and I thought it was pretty obvious but any questions? yeah I told you that you guys see that? alright so so quarter so I had to set up Amos at X Maple because I typed for Erling so that means that I can't type so I asked you to put it in the password reset and anybody see what's going on there? oh thank you here we go so you can see it is using Ecto and it's storing the reset password into the database there, there's the reset password token and this is the using database first pass and I mean if it crash here I don't care if the date is in the database it's pretty nice when I want to complete I can't remove the order reset, complete and give it a new password, a new password that's super secure and so I will we should mod program so this is the database version and then this is all actually in that repo so you can pull it up and complete it yourself we do this again there's sys.getState so we start out our failover storage is an empty map, not doing anything bigger and our password reset is also an empty map when we start out so it's hard to spell X Maple so I got nothing returned back if I check the state now this is a password reset and the failover storage is still empty now because I only place it in failover storage when I fail so I actually store the entire user, I never have to go back to the database again whenever they come back to the reset password thank you so our reset now if we look at our failover storage it has that data in it and if we go back to our port when it started up it should ask that failover storage for it in time so now I have a process that can get killed, we start it


I'm Enderpreet. I work as a project manager with Fosse. So I'll be talking about DAC based virtual labs. Okay. So you know what is DAC? A DAC system. Nobody's from electrically electronics. Okay. So DAC is basically a data acquisition system. Okay. So they are usually micro controller based systems. Okay. And why do we need them? So we know that things around are mostly analog. What we speak. Okay. That is also analog signal. But the computer cannot understand that. So that has to be converted to digital. And if we want to also give back the output and to some analog device so it has to be again converted from digital to analog. So analog to digital and digital to analog. So that's what real world data is usually analog. And computer understands digital signals. So that's where data acquisition systems are used mostly. And they are used in most of the industries. Like process control, manufacturing and so on. So they have port compatibility. They find application in several domains. And how complex they are, that depends on the application. So it could be a simple micro controller ordinal based board. Or it could have a huge sequence of micro controllers talking to each other and then in turn talking to a computer. Okay. So why this project? So this project is funded by MHRD. And several IITs and other colleges are taking part in this. But why DAC based virtual lab? So DAC cards, we know that they find huge application in the market. Okay. Now currently NI is one of the big players in this market. It is a proprietary it is a company. So it provides proprietary hardware and software. Okay. So they obviously charge heavily for the hardware and also the software. Now where the problem comes is that sometimes they do give hardware and after a few years the software becomes obsolete. So they'll say that we don't provide lower compatibility, back compatibility with the hardware. So either the software is obsolete or hardware they do stop giving support and so on. So what we plan to do is build a virtual lab. Okay. Use an open source data acquisition framework and provide access to inputs and outputs of these data acquisition cards over internet. So basically what a virtual lab is? Do you know that? So why do we do experiments? We learn theory and we do experiments. Right. So to get practical knowledge. Right. So virtual labs are to give practical knowledge to you over internet. So there are some colleges which cannot afford expensive hardware. So that's why MHRD has funded this project wherein the colleges, universities who have that hardware can give access to people anywhere in the country for that matter anywhere in the world over internet. Okay. So we have such virtual labs in IIT Bombay some in other IITs also.  Right. So this DAC based virtual lab will give you access to a data acquisition system over internet. So basically we want to see what are the available open source DAC cards against the NIE based DAC cards. Okay. So if we want to ask somebody that you use this open source DAC card, we have to tell that okay this can be replaced by you can replace the NIE based card with our open source solution. So that's the objective. So we have some of the DAC cards available. These are the few Advantec, AdLink, NIE based. So NIE does provide drivers for some of them on Linux. But again, we have to see that how much can we access them, how much can we tweak them through open source software. So the workflow required here would be you look for the drivers available for the DAC cards then in case drivers are not available, write them in CC++ and then access these through Sylab, OpenModelica or Julia. So Sylab, Shamika already spoke about Julia, Mana spoke about OpenModelica is also one more open source software. It's a tool simulation tool. So we are looking for solutions for either of these. XCOS on desktop and XCOS on web. To start with, have you heard of LabView in my presentation or before that? Okay. So NIE is the one that runs LabView. It's by National Instruments. Okay. It is a GUI based tool. You can take the blocks, drop them on the editor and then simulate them. Also it provides access to data acquisition cards, several hardware devices. Okay. So we here again for the VirtualApps project look forward to develop a software which can replace LabView. XCOS, Shamika spoke about it. It is, it comes with which tool? Sylab. Okay. So MATLAB has Simulink. Have you heard of Simulink? So XCOS is Simulink equivalent, which comes with Sylab. So we are using this XCOS to provide an equivalent of LabView. So VirtualApps, I already spoke about that we want to give access to experiments over internet to the people and it is funded by MHRD. LabView also I told you that it is, it comes from NI. There is a web publishing feature in LabView. So you just go in one of the menu and you have a diagram. It is called the virtual instrument VI in LabView. So you just click that web publishing tool and it is available on internet. So through a web browser anyone can use it. Okay. So we are looking for a similar equivalent. So we name this software, the one we are developing as Sandi. We'll call it as XCOS-based Sandi. And we are looking for interns to work on the following two things XCOS on web and XCOS on desktop. So the way we have ESEN on desktop and web, this is something similar. So this is how it looks on web. So this work was solely done by Aditya. We are looking for more interns for this. You can see there are some blocks. You drag and drop the blocks, you connect them and there will be a simulator button which will simulate the diagram. So it could be mathematical operations, electrical controls and so on. Whatever is available in Sylab. In Sylab XCOS. Now for the web version you see that this is on the browser. You can drag, drop, connect. Now the way it will work is we have to port that and make it available on the browser. Then we have to, once we press simulate, the diagram should be able to be exported to XML, send it to the server. Server will do the processing and give it back to the browser, the result. So that's how the workflow will be. So we need skills for browser version mostly on JavaScript and XML. Okay. Because the equivalent library MX Graph is already available. So we can use that directly. Now this is how it looks on the desktop. Very similar, right? But not so beautiful as LabVIEW makes it look. So we just want it to be a bit customized. Also in XCOS, when we run a diagram and if there are, this is a plot. The blue color thing. This is a plot. It's a graphic window. Basically, when you run it, you'll be able to see the graph. Okay. So if there are multiple graphs, they'll pop up in different windows. So one of the tasks would be to weave these windows together. Okay. So back in XCOS mostly uses C++ and Java. We need to make it look more user friendly. Then we have to stitch the graphic windows together and we need to add more properties to the available blocks and if possible, some more blocks. So skills we are looking for are Java swing and knowledge of C++. So again, some of the interns have already started working on this. And for the server and I talked about conversion, XML, and then that XCOS can understand and vice versa. So for that we need web technologies, knowledge of Java, C++. So hope to see you then.


That's a really good question and I think it goes back down to In my opinion comes back down to you. What's your what's your philosophy with your business? Right, so it comes back down to what what does your business stand for? right because if Someone asks me right Leo. What what does your Academy specializing? If I'm able to answer that Then that not then that for me means that I have a belief in what I'm doing a Lot of the coaches we speak to you ask them. What do you specialize in? Oh, I specialize in one-to-one. Oh, I specialize in group, but they what they won't they don't narrow down Exactly what problem they solve for clients So if you don't if you're not solving a problem for your clients, then You know your clients will never really be able to trust you I believe When you make the transition with your business, right? Because essentially When you have a philosophy you're taking that client through a journey Right so Where when they start from you the development they're making until you know when they leave your program Which hopefully they leave to go on to better and greater things But if that client has a belief in what you're offering then When you transition your business Whether that be your transitioning and the structure of the program or the payment system then It's a no-brainer for parents parents will be like, okay, that's fine. We'll do it But when you don't even know what your program stands for what your business represents Then it's easy for parents to take the exit because they're like, do you know what? You know, we're gonna go and just do something else Because because it also comes down to so if you're client from the first moment they start training with you if you're not On point to the point where if you don't speak to the parent on a sales for them You don't actually explain and break down from the beginning what your program does Then you can't go halfway down when that client's been with you for three or four or five months and say right We're transitioning to now a monthly payment Because in that parents mind they're gonna think oh, do you know what he just wants more money from me You


We continue today with Chapter 26, The Sacrifice of Oneness. In the quote, dynamics of attack is sacrifice a key idea. It is the pivot upon which all compromise, all desperate attempts to strike a bargain and all conflicts achieve a seeming balance. It is the symbol of the central theme that somebody must lose. Its focus on the body is apparent, for it is always an attempt to limit loss. The body is itself a sacrifice, a giving up of power in the name of saving just a little for yourself. To see a brother in another body, separate from yours, is the expression of a wish to see a little part of him and sacrifice the rest. Look at the world and you will see nothing attached to anything beyond itself. All seeming entities can come a little nearer or go a little farther off, but cannot join. The world you see is based on quote, sacrifice of oneness. It is a picture of complete disunity and total lack of joining. Around each entity is built a wall so seeming solid that it looks as if what is inside can never reach without, and what is out can never reach and join with what is locked away within the wall. Each part must sacrifice the other part to keep itself complete. For if they joined, each one would lose its own identity, and by their separation are their selves maintained. The little that the body fences off becomes the self, preserved through sacrifice of all the rest. And all the rest must lose this little part, remaining incomplete to keep its own identity intact. In this perception of yourself, the body's loss would be a sacrifice indeed. For sight of bodies becomes a sign that sacrifice is limited, and something still remains for you alone. And for this little to belong to you are limits placed on everything outside, just as they are on everything you think is yours. For giving and receiving are the same, and to accept the limits of a body is to impose these limits on each brother whom you see. For you must see him as you see yourself. The body is a loss, and can be made to sacrifice. And while you see your brother as a body, apart from you, and separate in his cell, you are demanding sacrifice of him and you. What greater sacrifice could be demanded than that God's Son perceive himself without his Father, and his Father be without his Son? Yet every sacrifice demands that they be separate and without the other. The memory of God must be denied if any sacrifice is asked of anyone. What witness to the wholeness of God's Son is seen within a world of separate bodies, however much he witnesses to truth. He is invisible in such a world, nor can his song of union and of love be heard at all. Yet it is given him to make the world recede before his song, and sight of him replace the body's eyes. Those who would see the witnesses to truth instead of to illusion merely ask that they might see a purpose in the world that gives it sense and makes it meaningful. Without your special function has this world no meaning for you. Yet it can become a treasure house as rich and limitless as heaven itself. No instant passes here in which your brother's holiness cannot be seen to add a limitless supply to every meager scrap and tiny crumb of happiness that you allot yourself. You can lose sight of oneness, but cannot make the sacrifice of its reality. Nor can you lose what you would sacrifice, nor keep the Holy Spirit from his task of showing you that it has not been lost. Here, then, the song your brother sings to you and let the world recede and take the rest his witness offers on behalf of peace. But judge him not, for you will hear no song of liberation for yourself, nor see what is given him to witness to that you may see it and rejoice with him. Make not his holiness a sacrifice to your belief in sin.  Yet every instant can you be reborn and given life again. His holiness gives life to you who cannot die because his sinlessness is known to God and can no more be sacrificed by you than can the light in you be blotted out because he sees it not. You who would make a sacrifice of life and make your eyes and ears bear witness to the death of God and of his holy son, think not that you have power to make of them what God willed not they be. In heaven, God's son is not imprisoned in a body nor is sacrificed in solitude to sin. And as he is in heaven, so must he be eternally and everywhere. He is the same forever, born again each instant, untouched by time, and far beyond the reach of any sacrifice of life or death. For neither did he make, and only one was given him by one who knows his gifts can never suffer sacrifice and loss. God's justice rests in gentleness upon his son and keeps him safe from all injustice the world would lay upon him. Could it be that you could make his sins reality and sacrifice his father's will for him? Condemn him not by seeing him within the rotting prison where he sees himself. It is your special function to ensure the door be opened that he may come forth to shine on you and give you back the gift of freedom by receiving it of you. What is the Holy Spirit's special function but to release the Holy Son of God from the imprisonment he made to keep himself from justice? Could your function be a task apart and separate from his own? And from the workbook, Lesson 200. There is no peace except the peace of God. Seek you no further. You will not find peace except the peace of God. Accept this fact and save yourself the agony of yet more bitter disappointments. Bleak despair and sense of icy hopelessness and doubt. Seek you no further. There is nothing else for you to find except the peace of God unless you seek for misery and pain. This is the final point to which each one must come at last. To lay aside all hope of finding happiness where there is none, of being saved by what can only hurt, of making peace of chaos, joy of pain, and heaven out of hell. Attempt no more to win through losing nor to die to live. You cannot but be asking for defeat. Yet you can ask as easily for love, for happiness, and for eternal life in peace that has no ending. Ask for this and you can only win. To ask for what you have already must succeed. To ask that what is false be true can only fail. Forgive yourself for vain imaginings and seek no longer what you cannot find. For what could be more foolish than to seek and seek and seek again for hell when you have but to look with open eyes to find that heaven lies before you through a door that opens easily to welcome you. Come home. You have not found your happiness in foreign places and in alien forms that have no meaning to you, though you sought to make them meaningful. This world is not where you belong. You are a stranger here, but it is given you to find the means whereby the world no longer seems to be a prison house or jail for anyone. Freedom is given you where you be held but chains and iron doors. But you must change your mind about the purpose of the world if you would find escape.  You made him not, no more yourself, and as you free the one, the other is accepted as he is. What does forgiveness do? In truth it has no function and does nothing. For it is unknown in heaven. It is only hell where it is needed and where it must serve a mighty function. Is not the escape of God's beloved Son from evil dreams that he imagines yet believes are true a worthy purpose? Who could hope for more while there appears to be a choice to make between success and failure, love and fear? There is no peace except the peace of God because he has one son who cannot make a world in opposition to God's will and to his own which is the same as his. What could he hope to find in such a world? It cannot have reality because it never was created. It is here that he would seek for peace. Or must he see that as he looks on it the world can but deceive? Yet can he learn to look on it another way and find the peace of God? Peace is the bridge that everyone will cross to leave this world behind. But peace begins within the world perceived as different and leading from this fresh perception to the gate of heaven and the way beyond. Peace is the answer to conflicting goals, to senseless journeys, frantic vain pursuits and meaningless endeavors. Now the way is easy, sloping gently toward the bridge where freedom lies within the peace of God. Let us not lose our way again today. We go to heaven and the path is straight. Only if we attempt to wander can there be delay and lead us wasted time on thorny byways. God alone is sure and he will guide our footsteps. He will not desert his son in need or let him stray forever from his home. The father calls, the son will hear. And that is all there is to what appears to be a world apart from God where bodies have reality. Now is there silence. Seek no further. You have come to where the road is carpeted with leaves of false desires fallen from the trees of hopelessness you sought before. Now are they underfoot and you look up and on toward heaven with the body's eyes but serving for an instant longer now. Peace is already recognized at last and you can feel its soft embrace around your heart and mind with comfort and with love. Today we seek no idols. Peace cannot be found in them. The peace of God is ours and only this will we accept and want. Peace be to us today for we have found a simple happy way to leave the world of ambiguity and to replace our shifting goals and solitary dreams with a single purpose and companionship. For peace is union if it be of God. We seek no further. We are close to home and draw still nearer every time we say, There is no peace except the peace of God and I am glad and thankful it is so. Amen.


This is stock number 10108. We are here at Summit Automotive in Fond du Lac, Wisconsin. You're new and used sports car headquarters. Today we're checking out this super clean 2013 BMW Z4. This vehicle has the three liter twin turbocharged six cylinder motor which pumps out 300 horsepower. Black sapphire metallic is the color. We shoot all of our videos in 1080p so if you have HD capabilities on your computer tablet or smartphone device turn them on right now because it is like you're right here looking at the vehicle with me. And definitely your best way to check out the vehicle without actually being here. Very clean down this side. I didn't see any dents or dings. Driver's side rim is in relatively pretty nice condition. It has Bridgestone Potenza tires. These are 22540R18s and they have a decent amount of tread left. I'd say probably about half. Maybe a little bit more. The hood is in excellent condition. Has the LED running lights. Projector lamp headlamps. Didn't see any major dents, dings or scuffs or scrapes on that front bumper. Passengers side of the hood is in nice condition as well. And the passenger side rim. No major scuffs or scrapes on that. Very clean down this side. You know it's just how clean the body is, how reflective that paint is. We take these HD videos so if you are far away or even if you're close by and just cannot make the trip down, you can still see the car, hear the car and have confidence in the vehicle that you're looking at before you even get here. Once again very clean down this side. Didn't see any dents or dings. His back rim. Excellent condition. Brakes look like they're in nice shape. And the back tires just as much tread as the front tires. We'll show you how this convertible top works in just a second here. But I want to make sure that you can see the top and the rear deck lid before I put the top down. Rear bumpers in really nice shape as well. Has the dual rear exhaust. Passengers side quarters in nice shape too. And for full disclosure this back rim is in excellent shape as well. Inside you get the walnut colored leather interior. There are no rips, there are no tears. Both these seats are heated. Both of these seats are power. We have factory floor mats throughout. I'm going to show you how this convertible top works. So you got to press this button right here. And that'll put your windows down. And then you just hold it. This whole thing goes up like that. The rear trunk goes up. The only thing is you got to hold it the entire time. So I apologize if this isn't the best quality of how that works. But once it's all the way down you see it's nice and clean. Now we can get a better look at the interior. Power windows, power locks, power mirrors. Inside you can see that this vehicle only has 16,073 miles. You get an outside temperature display. A little chilly for the top down today but that's okay. We're just doing a video. Auto headlamps, leather wrap steering wheel, radio controls, information controls, bluetooth controls.  You got your stability control, sport or comfort mode. Then you got your dial to control everything on the radio. Passenger side carpeting and floor mat are very clean. Passenger side seat. No rips or tears on that. This car has never been smoked in. Smells very clean. You can see the interior is just in excellent condition. It does have the SOS system, map lights and then your home link buttons are in the bottom of the mirror there. We'll take a quick look under the hood. Personally I'd like to thank you for checking out the video today. Hopefully from this video you'll be able to tell just how clean this car is all the way around inside and out. I think it's in excellent shape and would highly recommend it from a quality and condition standpoint. Under the hood we have the three liter twin turbocharged six cylinder motor engine base. Very clean runs, very smooth. This car has been fully safe and inspected by our service shop. It has a fresh oil and filter change. All the fluids have been checked and topped off. The vehicle has been gone through mechanically 100% and is 100% ready to go. To see more pictures of this car, one of our other 450 new and used cars, trucks, SUVs, minivans, Wranglers, you name it, we got it. Go to our website www.SummitAuto.com. Full pictures and descriptions of every single vehicle from two locations all at SummitAuto.com. If you want to check out more HD videos you can go to youtube.com. Remember to like, subscribe and share on this video and all the videos that you see there. In fact in a second you will see a link to subscribe to our YouTube channel on your left. A link to more used sports car videos like this one on your right. If you've not been to our website on the bottom, a link to this vehicle on our website, click those, check us out. We really look forward to helping you with this super clean 2013 BMW Z4 S-Drive 35i. Thanks again.