Hey Virgo, welcome back to the channel. This is Kelly from House of Virgo. If you're new, please smash that like button and do subscribe. If you want to get a personal reading with me, there is a link in the description box below the video where you can go ahead and book a reading. I do offer right now text message reading, so if you need something pretty darn quick, definitely check that out. I would like to give a shout out to our newest members here on my channel. Thank you guys for joining. Okay, it looks like we still have the same. Okay, so let's get into your reading. Thank you for becoming a member of my channel. And yeah, all right, let's get into this. So you're starting here Virgo with heart with a key, welcoming love, meeting the one, open your heart, getting together and perfect. So we're going to take a look, you know, at February and see what messages. Oh okay, this is new. So you have both receiving what you need, progression, arriving, moving on, some closure issues, and what else? Virgo sun, moon, rising, and Venus. Okay, and you've got the golden mirror, self-absorbed, narcissist, one-sided relationship, love bombing. Virgo, moving on from a relationship, coming to terms, with some type of relationship that maybe is just not something for you, could very well be that. You could be meeting somebody new as well, so do keep your your mind and your heart open, that looks like it's on the table. Now with boat, I do feel like you could mean maybe you'll meet somebody with a boat, but I do feel like you are, you're getting something that you really need and it may not be something that perhaps you want, but you are, I, you know how they always say like be careful what you wish for, so because you just might get it, I feel like for you Virgo, in the month of February, it's more or less you're going to be receiving something that you need okay to progress, and you also have the golden mirror right, so there could be some type of connection with there's yeah some kind of one-sided relationship, and I feel like Spirit wants you to talk about this okay, there's some type of a breakup or something is ending here or discord or there's trouble or some kind of struggle, someone that you're dealing with, don't like it Virgo, don't like it, this person is an absolute ish stain, this person is empty, like they have this emptiness, repressed emotions, delaying with the ace of cups in the reverse, something not getting off the ground, and maybe you're coming to terms with a particular person in your life who is very self-centered, wants everything on their time, wants a relationship the way they want it, they're constantly looking at themselves in the mirror and just completely in love with themselves, you see the heart in the mirror there, so here you go seven of ones in the reverse, this is giving up Virgo, you are exhausted, overwhelmed, you're protecting your heart, so either you're going to break up with someone that you've been connecting with because of self-centered or selfishness, or this person maybe they're always like looking at themselves in the camera, you're exhausted here in February, you're giving up, you're done, you don't, it looks like you don't want to work on something, you're not feeling this love for someone here, this person is extremely overprotective, repressing their feelings, they're not sharing, it's all about them, what they can get from you, not what they can give to the relationship, two sorts, in reverse, lesser of two evils, no right choice here, completely confused, information overload, maybe feeling a bit indecisive, or you've been feeling that way and it looks like, you know what Virgo, if you've got someone in your life where it's not a 50-50 or you're each not giving 100, or maybe you've been giving 150 and this person's only giving, you know, they're half of that, or you're trying to make up the difference for someone, I see trying to hold the, you're trying to keep the boat afloat and it looks like February, you're not doing that, it's basically like I'm done with this person, if they can't meet me halfway on something, yeah, you're not going to deal with it and this person is like a love bomber, here you have the king of cups in the reverse, coldness, this person comes across as, you know, they give bad advice, emotional manipulator, very moody, they have compassion for self, not so much for you and they're all about their inner feelings, how they feel, what they're getting, what they're not getting, so it looks like, you know, it's the way to start off Virgo, so if you're in a relationship with someone currently or if you meet someone going into February and you are sensing this, because that's what that two swords in the reverse is, this is like information overload, if you're sensing this about this person, break it off, don't even, don't entertain it, don't even move forward, I feel like the person here love bombs in order to get something in return from you, okay, that's their energy going forward, let's see anything else you can tell Virgo about this, self-absorbed, very insecure, understand that, very, very insecure, yep, and this person is pretty much someone who is all about their pleasures, so for some of you this could be someone who's coming back into your life as well or just making a beeline and start love bombing you in February, I feel like you gotta, I don't know, it looks like to me, like you're not, you're just maybe even freeing yourself, this person's a fool, whoops, this person's like a complete fool, they act like a fool, they behave like a fool, they're careless, they're super excited to get, so I feel like the energy, like Quarious Energy here, I feel like this person gets like super excited about the newness of a relationship and maybe in other relationships, like they don't, oh gosh, it's kind of like a kid in a candy store, they just take, take, take, take all the sweetness and the goodness that they can get until they're like sick to their stomach and then they're like, they've drained the candy store and now, now they want something salty, then you know what I mean, like I feel like this person is just, it might be a traveler or a wanderer, my father used to sing this song to me, I was a kid, it's from the 50s, it's called The Wanderer, I don't know if you remember that, yeah, see, and then they like, I feel like this person is going to come in and start love bombing you in February and then get whatever they can or whatever they feel they need and then put up like these boundaries, take off, they got what they need, okay, let's go, yeah, look at that, they want here, so that's, it's not good energy for this person and it's not going to be, if it's, you know, it says narcissists, so whether they are diagnosed or this person is just extremely self-absorbed, their intentions here are to just come in with this passion, a very impulsive, look, you've got adventure, fearlessness, that's the same thing here with the fool, they're in and they're out, they don't stick, they're like a nomad, they're just, they wander from place to place, they go in with that passion, you know, but they're, it's all, yeah, we're gonna just kind of leave that, I feel like it's really important if, like I said, if you haven't already done this, if you're doing this now, pay attention to someone that's giving to get in return, it's extremely transactional, extremely, and I do see you giving up though, so, you know, I do see you giving up, I do see you being like completely exhausted with this energy and just like, it's just whatever, there's nothing here for me, that's your energy here, there's nothing here for me, all right, so let's move on, so you've got some great other things happening here, welcoming love, meeting the one, opening your heart, getting together with someone, receiving what you need, like I said, progression, moving on, okay, so let's start with heart with a key, oh look, you have the king of pentacles, beautiful, that's a very stable energy, either you're giving to yourself or you could be connecting with someone who is an earth sign, let's see, oops, okay, oh, okay, so I kind of feel like this person is maybe a bit humble or shy, they don't, they have private achievements, like they don't put themselves out there to, they're not attention seeking, okay, a little bit of an ego in the sense of like because they lack a bit of confidence, then they try to have, you know, they kind of like compensate with this ego thing, I don't see that this person is very popular, they're low-key, this is someone who is very low-key, and you know, kind of like you in a way, a lot of Virgos can be very low-key, it's just like Virgos especially will put themselves out there just a little, but they're just not, unless they have placements anywhere else, the reservation that Virgos have generally keep them grounded, but I like this energy with this temperance card, someone who's very moderate, you know, they find, try to find meaning in things, things, they're very sensible and patient, and they like things to mean something, I'm picking up a bit sentimental, this person could be a bit sentimental as well, but generous, generous with their time, with their energy, maybe even with their money, not miserly or anything like that, but very generous and kind, this person could be very wealthy as well, they might work in security, a business person, quite disciplined, it's very stable, oh my gosh yeah, could be another Virgo, this person just kind of comes in with like single as a Pringle, financially independent, they have some luxuries attached to them, very self-sufficient, let's see what else do you have coming in, so you're meeting somebody new in February, if you haven't already, so in lieu of the other cards, I feel like this person is really good at bringing calmness, they don't get overly anxious about things, I mean they have their anxieties, like everything and any, like everybody, okay, but they kind of keep that to themselves, they don't like, won't like, they would not want to worry you, they have their own deep-seated fears, you know, but they're really good at like reaching out and bringing hope and getting the help that they need if they need help with things, and I feel like this person, if you have, like they have this strength about them, they're very compassionate, and if you have your own sufferings or things like that, like they have a good ear, they're very good listener, so that's really good Virgo, this is, and so when I'm saying getting what you need, look this isn't coming across to me as someone who is there's a lack of passion, it doesn't mean it's not there, it's just that this, this person comes into your life bringing harmony, balance, peace, you know, and I feel like for you, Virgo, having a partner that can actually sit and talk with you and you guys can exchange ideas and learn from each other, and there's like a spiritual connection between the two of you, it's very satisfying, okay, there's something here about stability, this person does not come showing up here as like a player or someone who is just, you know, the way that other person was showing up, it's, they're very stable, single, no, there's no messing around, but I can tell you like, there might even be an element of like, this is so damn stable, it's boring, you might feel that way, however, it doesn't stay that way, okay, the more you and this person connect, oh here's a devil energy, yeah, this person is very, they're very sexual, but they, they kind of like, that comes a little bit later with them, okay, it's not the first thing that they show, right, once you uncover or that you get closer to this person, it's going to be on, it definitely is going to be on, like, they're, I feel like this person likes to build foundations first before they start moving the furniture and the bed into the bedroom, do you know what I mean, and I feel like this person, it's going to move quickly into a very physical kind of relationship, this person, I don't even, you know what, not even maybe as sexual as this person can be very sensual, you know, that lead up to, they have like a sleight of hand kind of energy about them, I see you marrying this person, Virgo, or at least becoming a solid, having a solid partnership with this person in February, so it could be Capricorn, could be Virgo, could be Taurus, not in the reverse, so this person shows up very stable, wow, this is a lot of luck, this is like, wow, just what you need. Karma coming to you, good positive karma, you read, like there's a turning point here, like it's fated to be major change, now this card says a return to beginning only at a, a return to beginning only at a higher level in the spiral of life, so you're starting over but at a different level with someone, now is it somebody new, yeah it's meeting the one for sure, you could already be connecting with this person in February, what else does Virgo need to know, I feel like it's going to really be in your favor to connect with this person and allow a relationship to develop, so it's kind of like you are, maybe some of you might be dating and you meet these two different people, if you're single and you don't have anyone in your life and one of them is just, oh, so self-absorbed, it's like all they think about is their needs and then you meet somebody else who's like the complete opposite of that, where they're just very calm and relaxing and very peaceful and they are, they like to travel perhaps, so they do some, they work business or something, I feel like it looks like in February you're going to, the camera is like just not wanting to cooperate today, it looks like in February you are going to, you get those red flag signals and I feel like you, you choose to be with the one who has this familiarity, might be a lot like yourself, there's innocence and sincerity with this person and they're very sincere, very kind, okay, some of you, this could be a reconciliation with someone that maybe you were with before when you were younger, okay, after you move away from a relationship or someone that you meet that's very self-absorbed, okay, so I feel like it's very positive for you, look at that, you've got the nine of cups, so this is like a wish come true for you, total fulfillment, contentment, satisfaction, emotional stability, gratitude, strength, compassion, completion, optimism, the suffering ends here, so I feel like you're going to find some stuff out, now if you're already dealing with someone who's extremely self-centered and full of themselves, you may be deciding to just end that and let that go and let somebody new in, who doesn't excite you as much at first, they don't love bomb and you know the love bombing can really get you kind of caught up and so that's, it's positive that they don't, it's after the relationship is established and grounded that you know, so for example like this self-absorbed person will just show up and like they want to, they like affection is off the charts, they want to marry you right away or they want to be like, move in with you right away, like that whole love bombing, they set up these visions and ideas and plans with you so quickly and they take you up as high as you could possibly go and then they drop off and leave you up there by yourself, right?   I'm not really trapped, I can move forward, yeah, so I like this energy and I like that you, I feel like you're getting out of this or calling this when you see it and saying I don't have to make, like you can make the decision, you know, I don't have to accept this, oh, this self-absorbed one-sided relationship, I don't have to, there's other opportunities, there's other it's basically like, you know what, there's other ships in the sea, look at it, and there's one in particular that's over here that's going to be showing up, it could be overseas, you might live overseas from each other, all right let's see what else is showing up here, oh look at that, there's so much boat energy happening, yep, look somebody comes and picks you up, you get on that boat, you leave behind, release the baggage and you move on, I love this, OMG movement balance solutions, harmony, healing, empathy, I love this, I don't know where I'm going but I know I'm going and I'm making that change, I'm making that transition, someone's coming to see you, you reduce from the eight to the six, someone's coming to see you, someone's coming in, Virgo, getting rid of that baggage, nope, just bringing the carry on, that's all I need, I don't need anything else but my carry on, yep you're in this reevaluation mode, definitely, foundations are being built, you're progressing, yep, you're you're also progressing from, I don't have to accept the first love offer that comes in, I can pick and choose, I can look at my options here and that's absolute freedom, when you have the freedom to choose, you know, never never, never go shopping when you're hungry, you need to be satiated first, right before you, in order to make a well-rounded decision because when you're hungry or when you're you're desperate for love or when you're in a position of needing like it's just having this need, you will often just take whatever comes, whatever's on the shelf, right, and without even thinking about it because you're hungry, because you have that need, but it looks to me like you, in February, you're like, you know, let me just, let me go grab a burger or something, let me go get something to eat first and then take a look at my options, I want to make a well-informed decision about who I want to let in my life or who is going to come in, you know, so I love that you have this now here, I know some of you are already there and that's great but to be able to look and see the difference between these two people is really like that's gold, okay, so you have the page of cups, happy surprise coming in, absolutely, this is, I feel like this is something that you intuitively, I feel like some of you intuitively know that this is coming for you, that this opportunity to have a potential progressive relationship going forward and I see it happening, I see a lot of exchanges of communication with you or receiving some kind of message from someone and feeling very happy, yep, just what I was saying, messages, feeling very happy about the exchange and messaging are messages that you have limitless potential, excitement, that freedom, discovering one another, okay, and this is all about you having the freedom to choose to either respond or to not respond, that's the gist of the reading, yeah, there's two other people here but one you're letting go, one you're welcoming in, two people who are two different people who are coming in and you're making a decision about what's best for you, I love it, you know what I mean, I love it, I just, I don't know where I go, I just feel like February has a lot of options, you have choices, at least two to begin here, all right, let me see, what are your love messages coming forward here, okay, so it's a soulmate coming in, okay, and this is a destined partnership with this person over here is what I feel, okay, new love happening here or recommitment to love is developing which is what I was saying, this person here could be from your past that you are reconnecting with, yeah, there you go, past life, love, so for some of you it definitely is, okay, and your last message for that is to go slow, take time to get to know each other for the first time or again and for some of you it's really this person's energy, they'll go slow, they'll take the time to get to know you, they're not in a rush which is I think great, you know, anybody who's in a rush is like, oh somebody didn't eat before they went shopping and I feel like that's what this person is over here, this self-absorbed person, they don't take their time, they just grab, like if they see you on a shelf they're just going to grab you until they get their fill and then you're back on the shelf, you know, maybe that's something you've experienced in your life, perhaps not, maybe you've never experienced that, I hope you never have because it's horrible, horrible feeling, um, I hope that you're that Virgo that's like takes a step back and just kind of observes and be and you know it's like okay this person's promising me the moon, they ain't even got a job, what the heck, let's take a look at the new person coming in, let's see what their Chinese sign is and yeah yesterday I don't know what I was talking about or um yeah Sunday I was trying, couldn't remember what Chinese year we were in and I think I said rabbit or something, I don't remember what I said but everybody was commenting, no it's the year of the dragon and I knew, I know that I do know that so I don't know, I don't know what's going on there, so yes we are in the year of the dragon, happy lunar new year to everyone, okay all right the new person coming in, year of the horse, year of the snake, oh horse again and this could be you, it could also be them, year of the dragon, wow I love this, look at this, how beautiful that dragon, almost looks like a butterfly, there you are Virgo, just sitting there reading your book and all of a sudden here comes the dragon year, year of the tiger, year of the pig, year of the dog, year of the rabbit, and year of the rat, okay so hopefully you are compatible with those signs, those Chinese signs, let's see what else, okay there you go, earth sign, yeah it's an earth sign coming in, Virgo Taurus Capricorn, so I want you to understand something, I know some of you are like I will never date an earth sign again, now listen, you have to understand like could you imagine if someone said that about you, we all have our strengths and our weaknesses and sometimes we can operate more out of our strengths and less out of our weaknesses and other times it can be reversed, so if you were with an earth sign before and it was a very horrible experience there's a lot of factors that could have played into that a lot and you have to really take an assessment, because I know you as an earth sign you're a really good person, I know that you are, okay, so I think it's really important if an earth sign comes in it's like Will Smith said don't let someone from your past don't let the new person pay for what someone else did, take your time to understand who the person is that's coming in but I do feel like it's an earth sign, and what else do you have, oh okay, somebody might be pregnant or getting pregnant, now if that's not you that's fine it could be somebody that you're connected to in your family or a friend you might know about a pregnancy you may or you might not know about it and it might come up in February you find out, okay, you also have vacation so you're going to be traveling soon, oh you also have date night get ready to be wind and dined, for some of you there might be a look at the heart, there might be a Valentine's date with an earth sign showing up, nice Virgo, I would be tremendously happy for you, tremendously, okay let's get some initials and see if we can find out who's coming in and what their initial might be or who you're connecting with, all right, right off the bat they're giving me August 21st, now I know that's Leo, for some of you this person could be on the cusp of Leo Virgo, okay, which and it could be you but I will say that I love these cards, the king of pentacles does represent the third deccan of Leo and the second deccan of Virgo, okay, that's in the weeks in the month during that time so this person could be a Leo Virgo, or it's you, okay keep that in mind, we also have the letter J, so somebody's initial could be a J, oh their name could be Joe, Joseph Jose, we have the age 33, all right, okay, Joa, J-O-A, are we just in A, we have the letter F, we have someone's born in the month of June, we have a letter T, the letter E, I'm hearing Jennifer, Jeff, definitely, or Jaffa, somebody's last name might be Jaffa, okay, oh that's so loud, August 31st, someone's born in 76, that's actually the year of the dragon, another A, someone likes to drive ATFs, someone is 44 years of age, we have the letter X, someone's born in the year of the ox, okay, and for some of you this is an X from a long time ago, oh now it's twisting over here to a W, someone's in Washington, um yeah so I've just heard someone lives in Washington, on 1985 someone is 39, you know somebody left a comment under my last video, they said constructive criticism, love your readings but these charms and the letters and initials are just no good, and you know I just hid the user from my channel because I want to stress that this is, this is, YouTube is a creator's channel, okay, it's art so to speak, right, I mean the tower readings are tower readings but the point is that um first of all nobody's asking for anyone's constructive criticism, you know, um you're free to be expressive here and to share what we like to share and to uh communicate in some type of an art form or however we like to communicate here, you know, so you know I didn't get upset because there's trolls out there and these doomsday scrollers and these people that just have absolutely no life, um and I just think you know, don't you, why don't you go make your own channel or something, the whole constructive feedback is great, you can send me an email, if you're like you know what, you know if you have an idea but I'm not looking to be criticized here, if you have an idea of something that we could bring to the channel or that I could bring that would just be much more fun, that's always welcome, absolutely, but to give constructive criticism that's not constructive, that's bad behavior, that's just complete criticism because he didn't give any follow-up to how to improve it, it was just a dig, you know, so if you're that person who's listening to my channel and you feel like that's the kind of behavior you want to show, I will completely ban you from the channel, completely, I have no problem doing that, you should see the list I have of people that I've blocked and banned from my channel because of that type of BS, you know, anyway I felt the need to say that, let's move on, okay, so someone is 54 years of age, someone's born in, oh I'm sorry I was gonna say 85 but no, someone is 58, okay, we've got the letter R, somebody's name starts with an R, now did I say Rafa or Jaffa, now I'm hearing Rafa, they just said after dinner mint, all right, September 3rd, September 2nd, okay, August 28th and oh they just gave me, okay, the charm just kind of showed up in my hand, so I'm gonna show it to you, love me, love me, love me, say that you love me, so does anybody like that song, because that just popped into my head, that song, love me, you Virgo might receive a conversation heart from someone around Valentine's Day that has the word love or love me on it, that's so cute, I love that, I love you, love me, I love you, let's see what other charms you have, and you know like I said, if you are dealing with a very narcissistic, self-absorbed shit stain, looks like you're gonna be letting that person go in February if you haven't already, and if you're not dealing with that person, they may be showing up here in February and it's really important that you take a cold hard look at the facts, evidence about that person, okay, before you make any decisions, right, because there's no relationships or a two-way street, okay, so you have some kissy lips here, you also have a cactus, okay, so somebody might live in an area where there's a lot of cactus and you have Chanel number five perfumes, you might be receiving if you are someone that likes to receive perfumes and maybe lipsticks and stuff like that, you might be receiving that or getting that for yourself for Valentine's Day or it's because something that you're putting on some very bright lipstick, maybe in February you're gonna start wearing it or start wearing Chanel number five, I'm picking up some Arizona energy, Nevada, New Mexico I'm picking up, all of the very southern states, maybe even Texas, southern areas, I don't know where else there is cactus, I don't know in any other parts of the world only because I'm just naive to that but yeah I do feel like there is some kind of connection, maybe you live there or you have a connection with someone, maybe Southern California, somewhere along the lines, maybe Nevada, somewhere down there, there's a connection to someone in those areas, okay, this person showing up here, this new this king of pentacles, masculine or feminine, all right Virgo, so I'm gonna leave that there for you, this again will play out for the month of February, I hope that that was enjoyable, if you need a personal reading with me please go ahead and book that, the link is in the description box below and please do become a member of my channel, it's $2.99 a month you get really cool badges, if you were a member before just rejoin and you will keep your status, you get really cool emojis and when you join I'll give shout outs to you right here on the channel all right you guys have a fantastic evening day and I'll see you all back here tomorrow, bye. Hey you guys, thank you so much for watching my readings, if you like to get a personal reading please feel free to click the link in the description box below to go ahead and follow that link and book you're reading, please remember to book, subscribe, like, do all the great things, and I hope that you guys have a fantastic, blessed, loving, and light filled life, thank you, bye!


Today is the first of December Tuesday, it's the second day of the COP. We've gone into negotiations and a few of the heads of state are still around and doing announcements of various kinds. I'm not going to talk about today's events today, but I'm going to talk about the issue of one and a half degrees which came up by the Climate Vulnerable Forum countries yesterday and we're getting a lot of support but we're also getting a lot of pushback and I'm going to try and answer some of the questions that we keep getting. The answer to that is that while two degrees is going to certainly protect most people, most ecosystems and most countries, it's not going to protect all. And the ones that aren't going to be protected are the poorest people in the poorest countries in the world and there are approximately 100 million of them living in low-lying islands, low-lying coastal areas and mid-continental drought prone areas. And if we were to accept two degrees as a global goal, then we will have to accept at the same time that we are writing these people off. We are telling them that we cannot protect you. We will protect us but we will not protect you. And that's a very bad thing for leaders to have to say, but if they decide to say it, they must realize the consequence of their actions and their decision. So that's why we're asking for one and a half as opposed to two. We accept that it's very difficult. At the moment we are headed for well over three degrees. If you take into account all the promises made in the climate change action plans of countries, which they call INDCs, it takes us down to 2.7 degrees, nowhere near even two degrees, let alone one and a half degrees. So it's very difficult. We understand that and we accept that. On the other hand, difficult is not impossible. We do not believe it's impossible. We believe there's enough money, there's enough technology to do it. There simply isn't enough political will to do it. And Paris is about generating political will. We got speeches yesterday of political will. Those speeches have 12 days to translate themselves into an agreement that can be written down on paper and everybody can agree to by Friday of next week. And that's what we're trying to do here is to generate the political will, hold our political leaders to account, and make them realize that they should be doing the right thing and not just the politically expedient. At the moment, the one and a half degrees is proposed by the combination of the least developed countries group who are about 49 countries, the small island developing states who negotiate as the alliance of small island states who are about 40 plus countries and the continent of Africa, which is about 50 plus countries. These three groups together are about 100 countries. And there are a number of others in the Climate Vulnerable Forum who are not belonging to these three groups who add up to 106 countries as of today. That is actually a significant majority of the UNFCC, which has 194 countries. But they're not the important ones. The important countries which are the rich countries like the United States and Europe and the fast developing large countries like China, India, Brazil do not support one and a half degrees. And so it's an uphill battle. If it was a democracy, we would have won by now, but it's not a democracy. It's where the power comes and we are not the powerful. We hope we can persuade the powerful to change their decision by Friday of next week. I think we can. I think if we galvanize support from civil society, which we are getting today, Climate Action Network for the third time in its history is going to award something called the ray of the day. They do a fossil of the day every day for countries that are bad in the negotiations. They're going to do a ray of today, a ray of for the climate vulnerable forum countries, which will be received by Philippines. Unprecedented action from civil society. They did a demonstration yesterday. And as I said in my vlog yesterday, we have a hand sign with the one right hand one circle for the zero and left hand five one point five to survive. It's our slogan and it's catching on and people are doing it. And we hope that we'll be able to persuade leaders by Friday next week that it's the right thing to do.


Thank you very much. Well, thank you very much. I know you've made Ed Rollins very happy. And I can tell you that George and I are very happy also, and tell you how happy. Welcome here to the White House. You've already met a few converts from the other two branches of government. I'm very excited today because Ed Rollins is allowing me to speak for the executive branch. Welcome to the Republican Party. Welcome to the party of the open door. We're happy to have you, and we're richer, very much so, for your presence. You have our admiration also. Many of you hold public office, and you were longtime Democrats, and you changed parties at considerable risk. It was an act of courage and an act of conscience. When Churchill, Winston Churchill, did what you did in his country, he said, some men change principle for party, and some change party for principle. He was one of the latter, as you are. And you have our thanks. I was thinking this morning about political independence, and I remember the story of President Kennedy, and how he asked an aide how he planned to vote in an important election back there in Massachusetts. And the aide hesitated. He didn't want to admit he just couldn't, in good conscience, vote for the Democratic candidate. And Kennedy said, say it. Of course, you're going to vote for the Republican. Sometimes party loyalty asks too much. Well, sometimes it does.  They have enough troubles. And we don't want to add to them, well, maybe later. But as a fellow convert, let me tell you what, in my view, you've joined. You've joined the party of ideas, a party that has positive and coherent programs to deal with the great problems of our time. You've joined the party of the working man and woman. Let the other party have the entrenched interests and the power brokers and special interest politics. We don't have any of that. We just have the people and more and more people who won't be held down by any government plans but who are going to break free to follow their dreams. And that's the great opportunity party that we're building together. You've joined the party that can speak of and glory in the best of American tradition and American culture because it believes in those traditions and that culture. You've joined a party that looks at our vast and imperfect nation and sees that it's precious and to be protected, a party that still feels the old tug of the immigrant's love for America, the pure, unalloyed love of those who've experienced less free places and who adored America for giving them freedom and opportunity. You've also joined the party of the young. I don't mean to brag about, but 59% of those aged 18 to 24 voted for the Republican National ticket in 1984. Many people see this as a trend. There is a rumor that our young people just kind of related to the youthfulness of the top of our ticket. I not only heard that rumor, I spread it. You've joined a party that was once rather sedate. That party was, or that was until the current leaders and shapers of the GOP started lobbing around intellectual hand grenades and insisting that America stop talking about economic justice and start creating the conditions that make it possible and stop ignoring or just talking about ways to deal with the greater foreign policy challenge of our time, the militarist expansionist intentions of communism, and start doing something about it. And the supply ciders, the neocons, the new right, the new Republican majority, whatever you call them, they took the grand old party and made it the grand new party. With great new power, the GNP, speaking of which we also turned the economy around.  You're not joining a perfect party. We began in greatness more than 100 years ago, and we've known considerable greatness since. And yes, we've made our mistakes. There've been good ideas that we embraced too slowly and movements that we rejected outright when at their core there was really some good. And I have to tell you that it's still, I know what you've gone through and what you feel because it's still, I find it a little strange when I keep going on here saying we so much. For a long time I was saying they about the Republican party. But more often than not, we've been on the right side and fought the good fight and it's wonderful to see our new recruits. And it's wonderful to be fighting for a second American revolution of hope and opportunity for all the American people. Now members of the press and the back there and many others are interested know who the new Republicans are. Well, their judge, Berland Rashir, a lifelong Democrat who switched parties because in his words, I feel many black leaders have lost faith in our two party system, but I have faith in the people. The judge is one of the first black Texas Republican elected officials since reconstruction. And there's an Italian immigrant who taught himself English, earned a college degree in America and was a loyal Democrat all his life. But after being elected to his state assembly, he switched parties and became a Republican. All that in the year 1984 in the state of New York and with the name Ferraro. We welcome Arnoldo A. Ferraro to the Republican party. Then there is Dexter Laytenin, a member of the Florida state legislature and a decorated Vietnam veteran who was wounded in action. He too was a longtime Democrat, but he became a Republican in March. He told us, I grew weary of trying to convince the Democrats that crime should not pay and that crime victims matter. Well, I have to tell you, when I was governor of California and had a majority of the Democrats in both houses of the legislature and then through a couple of special elections and coincidences, we wound up with a one vote majority in the legislature. And in that year, with that one vote in each house which allowed us to put the majority on the committees and appoint the chairman of the committees, we passed 41 anti-crime bills, every one of which had been in the legislature for quite a period of time and buried in the committees until they became Republican committees. Well, these that I've named are just a few. You're not isolated cases. You're part of a great national change, a national movement that is sweeping the electorate. You're representative of something that's going on across the country, the millions of grassroots Democrats and independents who have been voting for the Republican Party because they feel it represents what they believe about America and the future. You and people such as Andy Ireland, Bob Stump and Phil Graham are part of a change that is sweeping the country. You're familiar with all the polls. The most recent was in the New York Times last Wednesday. I don't normally read the New York Times for fun. But there it was on the front page, quote, about the same number of people now identify themselves as Republicans as call themselves Democrats, end quote. Remember when they called us the minority party? Sweet it is. I just want to add one thing, not for those in this room but for those who may listen later. It's that in America, a lot of people are sort of born into a political party. Their families belong to the same party for generation after generation. And it seems like heresy or a renunciation of who you are and where you're from to switch. Well, this kind of fidelity to traditions and old ties is good. Americans are a faithful people. But the thing is, all of you have demonstrated when the party you were born into changes, when the party you were born into no longer represents the hopes and aspirations of the people you came from, well, then that party left you. You didn't leave it. And that has happened. I cast my first vote as a Democrat in 1932. And the Democratic Party platform in that year called for a 25% reduction in government spending. It called for the elimination of needless bureaus and agencies and departments of government. It called for a return to states and local communities, the authority and autonomy. They said it had been unjustly seized by the federal government. And I think your evidence today that there is a different party today that runs on that platform. And that is the Republican Party. I, you went to a new party, becoming a faithful member of that new party.  As I've said, it's a reaffirmation of the dreams that your parents and grandparents dreamed.   If we ever leave you, you will be right to leave us. We're richer for your presence. The future of this party is in your hands and the hands of your friends and relatives and fellow Republicans, which leaves me, as I look at you, very optimistic about the future of the GOP and very optimistic about the future of America. I just have one little personal thing I have to say here, talking about my own conversion. I campaigned for a while as a Democrat for Republican candidates. And finally, I was pretty much accepted as a Republican and was speaking at a Republican fundraiser. And right in the middle of my speech, a woman stood up out in the middle of the audience and she said, have you re-registered yet? And I said, no, but I'm going to. She said, I'm a registrar. And she came right down the street. Put it there on a podium and I signed up and then said, now, where was I? Well, welcome aboard. Welcome home. Thank you. God bless you all. And converts make the best kind.


4 Top Tips For Getting Your TEFL Certificate On The Road The nomadic lifestyle is getting more and more appealing for many people wanting to escape the dry 925 trap back home. More and more people are packing their bags and heading off traveling around the world, making a living on the go. A great way to afford this lifestyle is teaching English, either online, at a physical school, or to private students abroad. Because this is getting increasingly popular, online English platforms, employers and English students are now expecting their teachers to be TEFL certified. But how do you find the time to study when on the road? Taking an online TEFL course might just be the answer to your problems. Here are 4 Tips For Getting Your TEFL Certificate On The Road And For Staying Motivated To Study 1. Set a start and an end date. While ITTT's online TEFL and TESOL courses give you at least 6 months to complete the course, it's recommended to work through your units regularly so you build on your skills and don't forget anything from previous units. Grab your calendar and set yourself a goal when you want to have your course completed.  In 2 and 3 months seems to be a good amount of time depending on your lifestyle. 2. Download the units in PDF format and print them. More often than not, you won't always find a reliable internet connection when traveling. This can obviously be a problem when you study online and need to access your units through the online platform. One way to plan ahead and make sure you can study anywhere at any time is to simply download the units in PDF format and have them on your device. All ITTT course units can easily be downloaded or printed out if desired. This way, you can study during a flight or a long bus ride through a remote region for example. 3. Create a routine and a stack to it. Your traveling nomads being on the road and experiencing new countries is a lifestyle and a regular routine is often non-existent. However, it's recommended to study at the same time every day as this makes it a lot easier to stack to it and continuously work through your course. Having a routine will also allow you to manage your time better once you've done all your work, you have all the time in the world to go out and explore without having to feel bad for not having completed your work. 4. Take what you've learned and put it into practice. If you are already traveling, you can easily practice all the things you are learning during your TEFL course. For example, speak with locals whose native language isn't English and pay attention to common mistakes. How do they form English sentences? What words do they use often, what words don't they use? Do they struggle with paying attention to these little things acts as a valuable tool when working through your online TEFL course? Are you ready to take an online TEFL TESOL course? Apply now for your TEFL TESOL certification course and start teaching in a matter of months. Speak with an ITTT advisor today to put together your personal plan for teaching English abroad. Let us an email or call us toll-free at 1-800-490-0531 to speak with an ITTT advisor today.


One welcome to Defconn safe mode from crazy Vegas parties last year to me sitting alone in my room right now and sipping wartime Wow, it's been a crazy year But it's literally like Vegas in my house right now because cocktails are acceptable at any hour and I have no idea What time of the day it is things I've changed drastically in this time when everything is getting cancelled I'm so delighted that at least we still have Defconn welcome to the new normal. Thanks for joining it Before we start we would like to add a disclaimer that all content over here is specifically for demonstration purpose and or everything is informative and we have performed all of it on demo environments Now before moving ahead, we would like to introduce ourselves. So just a little bit about us My name is Devan Khan and I work as a security consultant within CCQ. I have multiple areas of interest But the most recent one being IOT and radio hacking I have also contributed in the development of NICE that is non-intrusive confidence engine for multi factor authentication mechanism And I am also working on instant messaging and secret storage protocol It is the first thought that I have ever given and therefore just a heads up to you guys The talk would be pretty big news friendly and we'd go over a lot of basic topics as well now passing on to my co-presenter Thank you, everyone. Hello, everyone. My name is Shruti Lohani I'm a computer scientist working in IOT research and development at Nexus in France I have three plus years of experience in IOT development for smart home Autonomous vehicles in the Radvogeo location precisely. I have previously contributed to some international projects like Eterishi and I'm also part of the theme for my contribution to the development of end-to-end IOT platform Which is a new research institute in Europe I'm also an independent researcher and very passionate about IOT development secure smart system teaching and women empowerment Well, now moving on to the agenda for our talk today We will begin with the idea of connected wall and how it all started It's like a brief boring history including introduction for our talk Well, it will be followed by the section discussing its security parameters You will see how unaware we are surrounded with the billions of devices with some stars And then we will move to the section of attacks and expedition scenario where we will be understanding a few basic concepts prior to our main demonstration We will also cover some tool During this demonstration and later discuss the crucial points Stealing how we can protect a smart world from those discuss attacks needs an organization developer or project designer Lastly, we will go over the demonstration I will demonstrate a small tool that we have developed which can be very useful in protecting IOT consumers Or making them aware of any attacks they might be unwillingly facing on the connected world But I connected work. Okay. So are you telling me that anyone on the internet can talk to my fridge? Well today in an era of COVID-19 pandemic We all are working from home aiming to stay connected worldwide during the time of social isolation even including the stock Completely online and where we are missing the real interaction We just grow and no access in the presenters like us Really nervous but thanks to internet of things from wearable devices Unhortable technologies to health related accessories IOT is everywhere has shifted from our futuristic concept to the central focus area of every industry Changing from manufacturing and retail to healthcare and real estate But the question is how exactly it all started the Internet of Things Emerged as the largest digital megatrend Bridging the physical and visual worlds with the fourth industrial revolution or to say industry 4.0 From the first revolution triggered by the construction of railways We are now aiming for increasing the networking of people machines and objects over the internet We understand that internet of things is basically a network of things which are simply launches like devices Weakers or every items in electronics with the only target of achieving an activity to enable connection and Exchange of data between the things to make a life simple Showcase in its talent IOT has facilitated things from eating and body copying to turning off the lights when we go to sleep at night I swear to God that thing has made me so lazy This is the reason my dependability has been exponentially increasing just like the go-and-grab From 1 million down to the expected 50.1 billion in 2020 There is a massive explosion in the usage of IOT devices From smart homes, smart healthcare, smart city and what not we want everything to be smarter now and this means I literally have no idea how to even say this on the right But moving on to how safe my world is, I'll pass on to you Devan All right So what if I just tell you that the S in IOT actually stands for security? Yes, that is true So talking about how safe my world is with billions of devices connecting the whole world We care a lot about functioning, right? We want things to be done in just one click We want things faster with less or almost no effort Better the functioning soon be clicked to buy in Amazon, Alibaba or wherever you guys shop But we need to understand that there is a need for security on so many levels So we should first look and compare the threat models in terms of classic web application and then in terms of IOT devices Over here we see a simple web app server connected to a SQL database Then we have a third party web service and cloud storage They all have their own corporate trust boundary and when to trust boundary and then we talk about the human user The human user is actually directly interacting with the web application And then they all are being separated by separate privilege levels and their own trust So as you can see definitely in no way I'm saying that web applications are extremely similar. Trust me I would never say that They can definitely and more certainly are more complex than the basic diagram which I'm showing here However, we get more clarity when I try to compare it to a simple IOT application All right, so in this next diagram So as you can see over here in this IOT threat model, this is like a very simple IOT architecture I have not even gone into more complex ones We aren't even talking about embedded devices in airplanes and the complex architectures We're literally talking about a very simple architecture here Specifically focusing only on smart and connected homes. I would say these are more of consumer IOT and less of enterprise IOT So in this case what we are looking at is a connected user But the user is so a connected user is basically a user who is interacting with their smart device Then in this case, we have segregated the network into separate sections So as you can see we have proximity network So in a proximity network you can sit in to have physicals So we basically consider a proximity network to have physical sensors devices and the IOT gateway itself So basically that would generally be in Inside your house then devices are connected to the proximity network by let's say a smart ring Which the user might wear or any smart device which the user might have in their home Then apart from that the user also interacts with the mobile app So a user basically has two avenues over here one is in some cases to directly Interact with the embedded sensor of their smart watch or device And then the another one is the mobile app or any web interface Apart from that proximity network, we also talk about the cloud network However for IOT devices prior to going to cloud we also have to consider Ed servers as that is what separates them from most of the classic weather IOT's preferred microservices architecture compared to most Olympic standard apps Ed servers decreases the overall latency and increases the device efficiency However, it might add some more attacks of this in the overall architecture Let's just talk about a couple of attacks scenarios over here now So you can see that in the proximity network where the devices communicate over BLE co-app Laura van as these are close range protocols and the devices are in proximity Therefore in proximity network our main threat actors are generally the pre-installed malicious IOT devices As they might try to replay or intercept the existing traffic They might also exfiltrate that traffic out through the IOT gateway Okay, now moving on to the mobile interface We might have more attack surfaces generally like let's say a malicious device Sorry a malicious application on the user's device Which might try to directly interact with the device file system and processes In order to extract sensitive user specific data from the IOT device application Okay So let me just come back to this So the main is to show this threat model here is that generally when we consider IOT threat models We tend to focus on external threat actors like an attacker Compromising third-party cloud services or like a malicious app on the device or like a malicious IOT device in the home ecosystem So basically when talking about IOT, these are the attack services we most care about But what about the attack services that we least care about? What about those benign users on your home network who exist on your home network? Who also have updated operating systems who have updated browser versions? They're just casually running JavaScript All right So in terms of IOT devices specifically for connected home devices A common pattern has been noticed that the device manufacturers tend to give the least priority device security on local area network As the devices are not directly accessible to the external network Therefore it is generally assumed to be secure without physical access as in most cases The designer is just considered that physical access to be the only possible gateway to the private network That is why these devices have a variety of open ports and unauthenticated Http interfaces running on them which can be directly controlled by anyone who is present on the home network The best example of this was google home's unauthenticated Http API, which was literally patched in 2019 And it gave anyone on the local network to Perform multiple actions like rebooting the device or making any sort of modifications which a normal user could have When talking about this particular attack surface It is considered that if an attacker has physical access to the device Then the network based attack is among the lowest concern and physically Physical attacker access might open up some other serious concerns. So this one is given less less priority However, what if this was not the only attack tree for the exploitation of these http interfaces All an attack in needs is a single public gateway to break into the private network For a long time home private networks have been pretty secure as not everyone is running servers on their local Let's just be honest about that for a minute apart from developers and other people Not everybody is running or hosting an application on their local host networks However, with the advent of IoT technology IoT has literally given an exponential rise to a variety of web interfaces running on the user's private network In most cases the user is totally unaware of all the accessible IPs and even open ports on their devices The question is what if an attacker was able to proxy into the private network through a public gate now moving ahead to our Next section attacks an exfiltration scenario. We would first like you all to do a very simple exercise I'd like you all to fire up your terminal and make a simple request that is perform this following ns lookup Now if it returns a local IP Then there is a very high chance that you might be vulnerable to something called dns rewinding attacks Now look at what exactly the attack looks like but for that we need a quick refresher of how exactly dns works Well, we all know that a dns is like a Tetris directory of the internet It translates the domain name like this.com google.com to ip addresses So browser can load internet resources These IP addresses are given to each device on the internet and they are necessary to find appropriate internet device It's like a street address is used for a particular home to find that particular home in that particular location So to understand how this translation is done Let us imagine a situation where a user is trying to access a website called shopperscoreexample.com Because you know she's bored in this quarantine and one of them to shop at least So as a user types shop underscore example.com into a web browser The query will traverse into the internet asking what was the IP address of shop underscore example.com And it will be received by a dns recursive resolver Well, the next step is that if the recursive resolver has no answer Then the request will be passed on to the dns root name server asking the same question at what is the IP address of shop underscore example.com The root server will then respond with the address of a tld tld is top level domain server like dot com or dot net which stores the information for its domain In this case, it will be dot com once the address of tld is received the resolver that makes a request to the dot com tld The tld server will behave like a root server I know this guy who might know this guy and will respond with the IP address of the domain's name server The recursive resolver they ask the domain name server Where is the shop underscore example.com and then finally the name server will return IP address What shop underscore example.com to the resolver by tld And lastly the user's browser will have the requested IP address Now the browser lowers the address of the website It is able to make the request for the shop underscore example.com must be present after for instance Where the web server on the receiving the request will actually respond with that requested webpage You know, like the like 60% off Who doesn't like that? but We saw the complete flow to understand how dns work instead of going through all this way and to improve the performance And reliability of data request this information is temporarily stored in the locations like browser Operating system or recursive resolver This is all being as caching and the set amount of time for storing is known as time to live in short ttl as i said before So let's take another situation into consideration. Okay, so I just from the previous slide. I'd just like to focus on one thing trying to live Please make a note, but it'll be useful later. So Let's take another situation into consideration Let's say that the user is trying to access some webpage and there are some annoying ads on the webpage Among those there is one malicious ad waiting for the user's attention Since this ad has to be loaded from another domain our browser has to fetch it But loading a random JavaScript from some random domain will give the attacker access to load anything in our browser An authority to make requests to maybe our bank dot com or access pages For let's say maybe from our smartphone devices But you know what there is something called same origin policy Which is actually a policy implemented by the browsers and which led the browser restrict This kind of behavior as they restrict and limit any sort of http request which originates from one domain to access Resources that are hosted on or served on another domain. So To be specific, let's see an example. Okay, so let's take a quick look At an example of how the same origin policy is able to protect resources from being accessed by malicious JavaScript running on websites across origins So in this example, we have a secrets file. That is secrets.txt, which is located at test instance Running on port 8053. That is accessible over http And we will see how the same origin policy can protect this resource from being accessed by a malicious JavaScript running on a malicious version In this case, we are considering example dot com to be that malicious origin So when we try to perform an xhr request So in the first example, it is of a totally different origin because hey the host That is example dot com as well as the port is totally different from the test instance Okay, so here you can see that the browser's same origin policy was able to block the malicious website from accessing the resource As it said, they do not have the same origin give them having totally different host as well as port Okay, now we'll be looking at a different example So in this particular example These two resources have the same host that is testinstance.com But they have they happen to have this the totally different port numbers one The secrets was actually on 8053. Whereas this resource is on 8056 and we can observe that Okay, and in this case when we try to perform a xml http request or basically a cross site JavaScript Fetch we will be able to see okay, so As these still happen to have different port numbers, although they have the same host The resource is still not able to access the secrets.txt Because the browser still considers this to be a totally different origin because of them having totally different ports Now we will look at a standard example. This The page is testinstance.com and it has the same 8053 port as our secrets. So this happened to match all the criteria that is required for The same origin right then in that case we'll just try to see that How exactly same origin policy would allow this one to Access the secret so in this case as you can see this Was able to pass the same origin policy view to exactly the same Host the same protocol as well as the same port number because of which it was able to access the resource Which was hosted Secret which was actually located at secrets.txt. So that basically sums up the example of the same origin policy Oh, the question that arises here is if SOP is actually preventing this kind of attack then what is the threat? Well DNS rebinding DNS rebinding is a class of exploit in which the attacker initiates repeated dns queries to a domain under their control And see the scenario where the user is comfortably surfing over the internet to access our web page continuing some advertisement Among those ads there is one malicious ad as they once stated before As the web page is loaded the browser will request the malicious dns server Wearing the ip address of malicious ads.com When receiving this request the attacker control dns server responds with the real ip Let's say <IP_ADDRESS> And it also sets the ttl value on their response to be zero minutes or a few seconds So that the user's machine won't cache for long now. Let's wait for some time Now the malicious javascript makes another request to malicious ads.com And since the ttl is exceeded the ip of malicious ads.com isn't found in the browser cache Therefore the browser will again request the ip from the dns server But what wait this time on the user's subsequent dns request instead of the real ip the malicious ads.com The name server of you know malicious ads.com will respond with the ip of 10 001 Which happens to be an ip whether the user's local space and belongs to an iota device or the user's network The user's browser will receive this malicious dns response and will use this provided ip to make their ttl request Which were intended for malicious ads.com Because technically there is no change for the browser according to the non-functioning because based on sop Browser just sees the same name and goes oh, we have the same name So we are friends from now and allows all queries from the c4 agent irrespective of the ip's But the std to request and now send to the small unprojected web server running on the user's The same network where all your smart devices are connected and thus making your smart home unsafe And that's behaving as a proxy between your private and public world dns rebinding attack if actually bypass network firewalls security controls such as ports and make your be revised on your local network vulnerable and available to an attack from anywhere outside your protected internet Yeah, let's do technically Now it's time to add Okay, so in this example the first thing that we'll be talking about is a router interface that allows anyone on the network to access The router controls once they have authenticated however even further the authentication This allows users in the home network to access the home page to be a list of all the connected devices So let's see how a user on this private network can become vulnerable to the industry binding attack By just navigating to website that looks totally benign in this case cute videos because you know what who does not like cute animals So as you can see in the developer options In the network request you can see even before the page was loaded the militia Charleston page initiated a port scan the local network in order to identify the router interface Router is an easily identifiable target in most of the cases Because standard IP of their default gateways and therefore it is easy to scan Compared to other devices. So here it has already identified <IP_ADDRESS> And now automatically it has started sending the JavaScript on the page has already started sending multiple requests From the page to the external url And now this page is basically just waiting for the dns to be dns regards to be updated So this video is already 11 minutes long and that's like already enough time for an attacker to Perform the dns reminding attack. So by the time the attacker So by the time you're even watching first 22nd of the video the attacker has already been able to rebind and has been sent internal request to <IP_ADDRESS> And now we'll move to the attackers panel. So over here you can see a web socket connection has been made based on Which the attacker would be able to actually access Things on the internal network So now you can see the remote address has been updated from the attacker's IP address to the internal IP address and based on That the attacker is now able to any request that is being performed to the origin by the JavaScript is actually Helping the attacker to communicate with the internal services that is running on your router So now we'll just try some generic passwords Oh in this case we just tried the admin admin and that definitely worked because A lot of routers whether we want to accept or not are still working on default passwords So this gives any attacker multiple functionalities like setting the functionality of the router Modifying passwords and this also allows them to enable up and which might make them vulnerable to multiple other vulnerabilities apart from this. It also allows the attacker to Remotely reset or reboot the device. Also, it gives an attacker full functionality to like modify your dns servers And thus serving you all the malicious websites that they want to Also, they can just proxy your entire network and that would help them to take over other malicious devices as other multiple devices on your network as well So that would be in short pretty bad and over here as you can see all those requests So in this case password update page that was being fetched by the attackers So all these requests for actually being made to the external attacker is origin However, the remote address was routed to <IP_ADDRESS>, which was the router's IP So by the time you're busy watching the Qtog Your entire router and the network has been taken over All right, so for the second demonstration, we will be looking at a papy monitor So based on the router's exploitation, the attacker already got to know more information about what all other devices exist on the local network In this case, the attack was able to identify. There's a baby monitor running on <IP_ADDRESS> So for our demonstration purpose There is a baby monitor and there is the baby crewed just to show you its life. There you go So this baby monitor software had a couple of functionalities like it Can connect to multiple other cameras on the same network and this feed is accessible to anyone on the local network So you can select all of the cameras as you can see there are three cameras here Apart from that, it has Functionalities to send commands to different cameras like getting images and it also has options of privacy toggle Then you can see camera 3 is disabled. So it also gives an option to specifically put an IP and find the camera if in case it is disabled Moving on to the attack. We will be using the tool singularity. We'll put in the IP the port and then we'll be going for Hook and control because we actually want to watch the video right And the time interval is set to seven seconds and we start the attack Let's look at the developer console So this way we can see that every seven seconds a request is being sent and it is waiting for a dns update And there you go as the dns update Was made and in this case. Let's move on to the attackers window Here you can see that the attacker there you go. So the attacker is actually able to get a live feed, right? Also, the attacker can try to now perform Queries and in order to identify what all other IPs might be there on the network So this would be really helpful for an attacker So the attacker can also try to exploit things like maybe a command injection Which is definitely the case over here. So we'll just try to perform a curl request from the camera's interface to an external webhook that the attacker controls in order to see if we'll be able to extract more information by performing cat As well in order to extract sensitive files and also to perform curl to the external endpoint of the attacker which would be like very helpful in order to Set up a connection so that the attacker can then Use the camera more like a bot So over here you can see that the ping request was successful Then the information was also extracted then here you can see that there was an incoming request to the attackers The webhook from The baby monitor itself as you can see over here the request is coming from grouped So this basically shows that okay, the attacker's command the curl command which the attacker executed was successful So now the attacker can actually exfiltrate a lot of information by exploiting the command execution of vulnerability so That's how we see if you like the attacker can exploit it in this particular case So for the third demonstration, we'll be looking at a smart home panel So this is not at all a hypothetical scenario. This is something which we have seen very commonly So this device is actually a smart home panel Which is kept unauthenticated because it is supposed to be accessible only on a local area network And it is supposed to be placed inside of a tablet and then it can be behave more like a control panel that it can access all these functionalities as you can see over here the lights thermostats and everything from a single control panel So that is why these kind of devices are like pretty common On a local area network and they are generally kept unauthenticated talking about a rebind attack on this particular device will be Again using the tool called singularity and in this case will be doing hook and control So so over here. We can see once the dns has been updated to <IP_ADDRESS> 1 1 That is the IP of the smart panel in this case Then all the requests from the attackers domain were actually made to the result IP of the smart home panel On the port 8081 and that would basically allow an attacker to establish the web socket connection So as you can see over here the dns rebinding attack is successful So now You can look at the attacker's panel So the attacker over here is able to take a direct control of the smart home panel remotely and now the attacker can literally set it to night mode day mode And over here the attacker also has the ability to enable or disable your lamps So now for this application we explicitly specified and Disable host check and made it one level just for the demonstration purpose But if we could just make that minor tweak in the configuration and enable host error validation So you can see if we have enabled it and now we will be Reconfiguring the application. So now in this case, let's try to again perform the same attack after enabling host error validation So we are going to perform the exact same attack on the application Let's see what exactly happens this time so over here the Attack is probably again going to say that it was successful So you can see it shows that it was successful moving on to the attacker's window. Let's see How exactly host error would prevent so when it is tried to access the attacker is presented a screen showing inverted host error because There was a clear mismatch between the host headers So this was actually prevented by the applications built in host error validation Okay, so We have already seen that how someone can actually exploit this but now the main question that is Okay, this attack is already known, right? So why does it still exist? So let's just talk about what are the main reasons because of which it is still there So one of the main reasons is already devices are available at cheap prices with almost less or no security Because there has been an explosion of very cheap and smart devices and the vendors Who focus more on adding functionality compared to security measures They do not undergo ferro pen testing or any security compliance check at all We see a smart device providing such a smart feature at low cost. We add it to our cart and purchase us right away We as a customer do not understand that the cheap cost also comes out of price That is paid by the lack of research development and security measures Moreover the industry binding bugs have a history of being dismissed by developers and product designers and many times It is left as an unaddressed issue because many of them are not aware of this threat Apart from this any specific mitigation for removal might go against the traditional procedure of DNS functioning or sometimes it might break A lot of legacy applications Okay, so the next question that we ask is what individuals and organizations can do So some of the common ways an individual organization can prevent such kind of things would be to The ISP should actually consider it configure their DNS servers in a way that would block DNS responses Which contain local IP addresses additionally The device passwords should be changed and the firmware should be updated So this is something very specific for individuals Like they should not keep their device passwords as default because as we already shown Showed in the demo how a router was exploited was mostly because of default passwords being used also One of the good things that an organization should do would be to make developers more aware of such threat vectors as well There should be they should perform extensive penetration testing of devices before rolling them out also Investing in threat modeling to identify such issues in the initial stages would be a great effort Additionally internal network segmentation. So basically for anyone who is actually trying to have IoT devices on their network They should have multiple routes in internal network categorized for IoT devices Now we move on to roles of developers and pen testers. So talking about developer and pen testers roles Pen testers It would be great to actually know about this attack and to perform this kind of attack in almost all their Red teaming instances because this is a type of attack Which would actually help them to bypass the firewall restrictions bypass SOP and still being able to get into a private network And then pivot to other devices after that for developers. We would suggest host header validation is one of the most efficient ways of handling an attack like this also The developers should make sure that they provide proper authentication for all the local services additionally instead of creating standard default passwords all Passwords should be uniquely generated that would actually prevent a lot of Wonder abilities related to the industry binding attacks But we saw how host header validation could prevent such attacks and the roles of Organization individuals and developers in the permission of the industry binding attack scenarios So I have to word about us exactly we have created a browser extension called security Which intends to detect such attacks and keep a user safe while browsing such malicious effect So let's see what we have with this tool Security is a simple extension tool that monitors malicious behavior of domains Which intend to scan the consumer's local network for internal IPs and port scans Our extension provides a list of ports and IP addresses Scanned by any host and also notifies the consumer if it detects any remaining attack Or if any website stands your private network But the question is does it prevent rebinding attacks? Yes Once the attack is detected the extension will automatically block the further request from the requested URL Thus preventing the attacker from using the consumer browser as a proxy for further intervention Moreover in this extension we have integrated the shodan Which helps us in identifying the information like IP and hosting for the possible malicious domains And perform a port scan on the attacker's domain We have also provided an option of manually blocking all htp request based on user provided URL patterns We can simply use a block list feature of this tool Which will prevent such sites from scanning your local network or to perform a da s divine attack However, while working from home and testing this code We observed that there are some instances where we do not want to flag the domain as potentially malicious Specifically in cases where I'm working on a VPN and therefore the extension keeps me flagging all internal IP requests as a potential attack So for that we have also created an allow list to bypass monitoring Let's start talk about how this extension works precisely So how the extension is identifying internal access scans the dns IP Transactions are done through the chromes web requested here The request object on the target IP is fetched and checked for the private scanning permissions The extension notifies whenever the case occurs on scan private IPs and only displays the details from the ticket from the data object How is it identifying revining attacks? Similarly utilizing the request IP IP, we detect revining functions take that IP and originating data To process for detecting if revining occurs or not For which it first validates against a set of projects compliant to rfc1918 and compares against the target hosting It validates if the hosting resolves to a private IP and if hosting is itself it's not a private IP When found true for these all set of conditions It then flags the revining astro and notifies the user with details displayed in the table on click Let's see how it is blocking the shdb So in our extensions block functionality We first check the valid import from the user for the domain name and then provide this valid pattern or url to the chromes web request block request function in order to prevent fetching this particular hosting Post permissions and content script matching are based on a set of URLs Defined by match patterns which permits a variety of schemes like shdb, htps, file or ftp and also the wildcard characters But how are we using shodan api for host info? We are using the standard shodan api to fetch details about the malicious host The api is used to resolve the hosting to the corresponding IP address Which then is used to perform shodan host lookup for fetching open ports and any other information That shodan has about the malicious host Okay, so let's see how the allow list is implemented similar to block list We used match patterns for generating the allow list based on the user input And then that is compared against the set of standard private IPs to not flag them as potentially malicious therefore preventing notifications and for same blocking Now coming to the major feature of our extension That is how secure IoT is preventing the DNS revining attack in addition to modifying all the information features So once the revining is detected from the detect revining function The block revine function blocks the further request made by the attacker's request URL on the internal IP address list That is automatically reviving the attack and detects filtration Let's Now we can move to the demonstration and see how the tool works We are still working on this tool and into our feature list Like sending monitoring updates to the user's big mobile device and other smart assistant devices on the home network We also plan to further improve and add support for other browsers like findbox And of course some beauty filters because we understand that user experience should be given So now moving on let us see the implementation So here is the extension. We'll now just try to scan As you can see it will display scan results and you can now see the list of details of the scanners to be IP support and Instam Like we can use the search for specific names like certain book number or a specific IP Apart from the scan, we have other features Like this one where we can see the information about the host, what ports are open, location, etc Okay, let us now see the reviving detection feature for that. We will now execute revining attack And see if our tool is able to function as a scope proposal. So we will do a simple fetch and vet We need to wait for a little only long And once we are done, we can see that it is displayed in our tools Okay, so we can see the revining attack is successful Also, our tool has more to find us and it's time to check the details. So here we can see the details IP domain timestamp Moving on to other features Let us see how our block and allow list work So we will go to the block or allow section and add the pattern you want to block from loading We can test it with say revine dot it and say Now we will go to the revine dot it page. We were using and reloaded what works. So the revine is Blocked we can take another example. Let's say blogger.com We will add this one as well and try to block it and hit the save to see if it is blocked or not They'll go back and reload the page for the blogger And it is blocked. We can also test this case for Iframes also much relatable to the example of the malicious card that we have seen before so you can see that is blocked by the extension And this will prevent any subsides from loading any malicious scripts Now moving on to the allow list feature where we can specifically tell the extension that it should not flagging request from this domain And we are doing it for revine dot it So we will type revine it here and save to allow it Okay, so let's reload the revine dot it page and scan again And we can see that it does not notify as it lets the revine scan For that we can see that we have no details So Now we can scan from some other side to see if the function is normal. So let's check here It will scan and notify us with a display of details Let's see if it works exactly So this is it and we can see the details here Okay, now we will be seeing how the extension is preventing attacks. So as you can see, this is a router. It is hosted here Now we'll be trying to perform A hook and control in the revine dot it and see how it is preventing So let's inspect And start attack we can see here all the requests while doing the revine attack Okay, so we can see there was a successful socket connection and our extension is able to detect the dns ribbon name But the next thing there is extension data is to block this. Oh, no, it blocked the URL. So let's check So for that Let us go to the attacker's panel and We can see what exactly happened so Here the attacker will try to load The panel and we can check if he is able to load actually or not So it's trying to fetch the page and we can see in the inspect That the extension is blocking all for the request to the page So all the requests are getting rejected by extension Therefore we can see that even though the attacker is trying to fetch the information that he won't be able to And we'll just keep on meeting. So that basically concludes our talk We'll soon be launching the code for security on our github after some modifications and bug fixes And that's it. So thanks a lot for making it to the end and stay safe