We're at the NRA's Whittington Center and with Tone New Mexico, it's about 52 square miles of open range and we're here competing in the Rocky Mountain Three-Gun World Shoot. Unlike kind of Table 1, Table 2, which is what the Marine Corps used to do, Three-Gun is a series of stages that the competitors don't know until they show up that can include any number of combinations between rifle, shotgun and pistol, any number of targets at any range. It's really a game of action shooting, trying to get fast and accurate combined into one. Training for each particular match depends on what skills we're lacking in. So we'll pinpoint several skills that we need to work on, whether it's long range accuracy movement between stages, transition between guns. The Marine Corps uses this to pinpoint our deficiencies in training. Because none of the stages are known to us until we actually show up at a match, what we have to do is break down our individual skill sets. Because we have three different guns, there's a lot of small things that need to get drilled individually. For example, reloading, our draw presentation on each gun, transitions between targets and movement. There's also a science behind gaming a stage, how to figure out how many steps you need to take, which position is going to be the most efficient. We try to do all those things individually in training before we come out to one of these big matches. The team showed improvement in multiple divisions and we have a lot of top finishes, including a fourth place finish from Sergeant Gill. There's a lot more to shooting than slinging up on the 500 and the prone. What we're really trying to do is see what the best shooters in the world are doing and see how we can bring some of those training methodologies back to the Marine Corps and hopefully improve our partnership doctrine.


Most of the Indian cities are Asthma. If you're having difficulty in breathing in a city, it's good to move out. Oh, but what do I do? I have a job. What do you do with the job if you're wheezing morning evening? Little less money in the village, breathing well is better in my opinion. You will see if you live in a place where there's fresh air, twenty-five to thirty percent of your Asthma will go down. Once we remove the outside problem, handling the inside problem becomes a possibility. You must do your life where it happens best for this one, within. Not because you can live better than somebody somewhere, not because you'll make a few bucks more somewhere else. No.


Scott, what do you got on this one? Here's what happened. He was fussing with his brother, William pushed him down. He fell into the dog bowl and it hurt his back. William jumped on top of him, put his arm down on top of him, grabbed his left hand, started hitting him in the face with it and saying, why are you hitting yourself? Why are you hitting yourself? Why are you hitting yourself? And then when he starts crying, then William says, who's your boss? Who's the boss of you? Say it, who's the boss of you? Who's the boss of you? And he says, you are. He says, you're right, I am.  And when he does, Harry grabs for his hand and when he does, he brings it off his fingers and his thumb and all he left is his index finger. So Harry grabs his index finger and he pulls it and William and he goes, that's why I'm gonna be the king. Chase, what do you got?


Working at Heights is one of the highest risk activities across the industry, and as roof tylers, we have to live with and manage that risk daily. Here are some key things to remember when working on a roof, so that we all get to go home safely every day. Step one, pre-job assessment. As they say, preparation and pre-starts prevent pretty poor performance, so a key to starting any job, large or small, is to go through a thorough pre-start process. As part of the pre-start, make sure your crew are qualified, trained and experienced in what they will be asked to do, and that everyone is clear on what's expected of them that day. Check the site for any hazards and risks that could affect you and make sure the best controls are put in place before you start working. Also, check the weather conditions for the day, because they could impact your work depending on what stage you are at on the roof. Make sure everyone in your crew is fully aware of and familiar with the emergency response plan in case someone does fall. On new builds, physical fall protection must be in place and secure before getting onto the roof. Remember, no fall protection, no start. If you are going to be working on a roof with a pitch that is steeper than normal, make sure the correct extra controls are in place to keep you safe. If you are not sure, check with your supervisor before getting up on the roof. One question or one quick check could save your life. Also, if you are working on a two-story building, make sure that all openings and penetrations inside the building are securely covered. Lastly, make sure you've set up a no-go zone to prevent injury to ground workers from falling materials. Step two, getting to and from the roof. Once you are good to go, take care as you get up onto the roof. It's important to wear footwear with good grip and that the treads are as clean as possible to prevent slipping. If you are using a ladder, make sure you use the right ladder for the height of roof you are going to be working on and that it's set up correctly at the right access points. If you're not sure, ask someone or check the safe use of ladders video from the Roofing Tile Association of Australia, available on your phone. Step three, working on the roof. On new builds, you're the most exposed to the risk of falling from the roof when you're first marking out and fixing the battens. So when you first get on the roof, check that the trusses are secure, fully braced off and safe to walk on. If trusses are wider than 600mm apart, additional controls are needed, so call your supervisor for advice. Whenever possible, walk on the bottom cord of the trusses while you're marking and laying your battens so the trusses themselves act as full protection for you. While you're fixing the battens, look out for anything wrong with the battens that could become a weak spot. Fix your battens, starting at the bottom of the roof and working your way up. This provides extra full protection as you move higher up the roof. As you walk around the roof, remember to only stand on the junction where the battens crosses the truss before the tiles are laid. And once the tiles are laid, stand on the tile overlap to prevent them from breaking and losing your balance. When working near the valleys, always walk on the battens or tiles, never on the valley irons themselves because they can be very slippery when wet. Rolling out sarking is always a two-person job. Always remember to place the shiny side down and take extra care when rolling it out. Once the tiles are laid and pointing begins, make sure you don't overfill your bedding buckets. No more than 15 kilograms is recommended. By remembering and following these key steps when tiling a roof, we can all go home safely every day.


My name is Fyodor from Insecure.org and the M-Map project. I'd like to thank you all for coming and of course DEF CON for inviting me. I'm a big supporter of community conferences like DEF CON where people can go if they have a passion for the technology, amateur hobbyists who might really love this stuff but don't have a company that will pay thousands of dollars for a ticket. For example, the DEF CON admissions forum has a question saying, hey, is your willingness to speak contingent on whether Black Hat accepts you?  This talk was prepared for DEF CON and if anything the contingencies are the other way around. So, thanks. Anyway, I'm very glad to be here and I first want to warn all of you that this talk is not about cross-site scripting attacks on social networks, or hijacking Twitter feeds, or anything like that. It's about port scanning and more port scanning.  Because for me to talk about something else would be sort of like Dan Kaminski doing a talk which doesn't involve DNS in some way. I mean, sure, I may throw in some OS detection or NMAP scripting engine action, just as Dan may take his DNS and use it to tunnel YouTube in order to rickroll some poor schmuck. But in both cases, we're just expanding on our core topics. And my topic, as you can see from the title slide, is about internet scanning. I spent a lot of time this summer scanning tens of millions of hosts on the internet collecting data. And when I tell people that, they're often like, why? And to me, I think scanning is its own reward and you don't really need any particular reason. But in this case, I did have some concrete goals for the project. One of them is collecting empirical data that I can use to enhance NMAP and add cool new features. And I'm going to talk about some of those features in this presentation. Second is I want to show how you can use that data for knowledgeable people to make your scans more effective. Basically, there are a lot of people who make assumptions on how networks are structured and populated and use those to decide what sort of scans are going to work best. But these assumptions are often based on, hey, how would I set it up? And they're not always reflective of other networks. So when you can find empirical data that meets what you need, then that often works best. And if you can't find the data, a goal of this talk is to help show you how you can do scans like this and potentially collect it. I also wanted to detect and resolve NMAP bugs and performance issues. The idea is that when you scan tens of millions of hosts, you're basically putting NMAP through a lot of different situations. It's pretty much any networking situation you can imagine and see how NMAP reacts to it. And I fixed a crash bug. I fixed a deadlock bug. There were a number of cases where I was like, this is going too slow. There's got to be a way to speed it up. And so then I looked through and try and figure out why it's slow and improve that. I also want to demonstrate techniques that can be good for routine scans, as well as the wide-scale scanning that you may do. The idea is that if a scan works well for 25 million hosts, then surely it'll probably work well for you for just a 25,000 or whatever you might be doing. Now let's look at the challenges to launching such a scan. First of all, I want to mention that instead of doing one humongous scan, I did a lot of smaller but still large targeted scans, each of which were designed to collect a certain piece of data which would be useful. And the question is, how should you figure out what IPs to scan? I have a lot of options. You could take BGP and look at what networks are routable and use those DNS zone files, registry allocations like ARIN and RIPE. But in the end I decided to use NMAP's own random IP generation script feature. Here we take NMAP, we say generate 25,200,000 IPs, and in this case I did the extra 200,000 because of potential duplicates. We say do a list scan, so don't actually scan the machines, just list them out for me, because I'll scan them later. Don't do reverse DNS because that would take a long time and we don't need the data. I use grep and awk to grab the IPs. I sort them, remove the duplicates, grab the first 25 million, and then I have a 25 million IP list that I can use for the scans. So that's sort of the type of way I generated the random numbers. But once you have what targets you want to scan, the next question is what sort of source you're going to use. And here I had a lot of ideas, some crazier than others. The first one was P2P scanning. I was going to distribute a client which would be called NMAPster, and people would download it and it would scan for them and let them know and upload the results for collection. But I decided that a key goal of this was to make NMAP faster and more efficient for people's normal day-to-day scans. And so I decided it was better to focus on just using NMAP itself rather than building custom software for this project that may get around performance issues and the like. Another big concern was a legal one. I knew that when you're scanning this many hosts, it's going to raise a few eyebrows. And I certainly don't want to get kicked off my ISP again. And being arrested would be much worse. So I thought, how can I do this but not collect too much heat? And so the solution I decided on was to go through my neighbor's open wireless access point. No, I'm just kidding about that. I decided it would be completely unethical and inappropriate and she didn't have enough bandwidth to make it reliable. So I decided to use an ISP I used for co-location and do the scans from there. I thought maybe it'd go under the radar. But it didn't.  They thought maybe I was infected by one of the most virulent internet worms they'd ever seen. They said, your machine is going crazy. It's probing thousands of machines per second all over the internet. They were talking about shutting me down. And I was like, oh no, this is no good. But then I said, hey, you know, don't worry, I'm not affected. I'm doing this on purpose. And that didn't help either, in my case at all. Basically, they figured I must be some sort of spammer or worse if that's even possible. So then I was like, uh-oh, I'm totally busted. I'm going to have to cancel the project, stop the scans, write a whole new talk on the cross-site scripting vulnerabilities, and give that instead. Fortunately, though, it turned out that they were end-map users. So I said, hey, the scan is to make end-map more efficient and effective.  So I was real happy about that. I had to slow it down quite a bit so it didn't melt their switches anymore. But other than that, they were cool. Unfortunately, the US Department of Defense was not quite so accommodating. They didn't like my scans at all. They said, hey, you're scanning sensitive military installations. This has got to stop. And I thought, hey, I'd be happy to use end-maps exclude file option to skip those networks. But they wouldn't even give me the networks because that's sensitive military information too. So whatever. The next issue, I mean, it has been making me a little nervous now. They are the military when planes fly overhead. But nothing too bad so far. The next issue were firewalls. For many of these scans, just pure internet results was all I needed. But for other ones, it would be nice to get a view behind companies firewalls because they often have different ports open. The network looks a lot different behind there. And I'm happy to say that I was able to get through a number of these firewalls, not through some sort of advanced fragmentation attack. But I used a technique known as asking them for the data, which works pretty well, at least with some of them. But there are a lot of big companies who scan their networks every day with NMAP. And we're happy to contribute some data to make it work better. Another challenge is performance and accuracy. And this was different than many other types of the challenges because I wasn't trying to find a quick hack workaround type of thing. Instead, this was a key goal, was to improve NMAP's performance. And so I took this as a challenge to see where I could improve. But even so, it could be disheartening at times. Like, I did a UDP scan with the 65,000 ports, and I told it to scan 2048 hosts in a group. And you can see here, it's taken four days. It's on the first 2048, and I have negative 688 hours remaining. When your time estimate leads to integer overflow and goes negative, that's never an encouraging sign. This particular scan is still running right now, and maybe for a while. DEF CON 2009, I'll let you know how that one's going. But fortunately, some of our other scans finished a lot earlier. So that's sort of the introduction to the different scans we were doing and why. So now let's get to some more practical advice that can be concrete details and let you know how you can use this to help your scans. And the good first place to start is host discovery. Because the first thing you want to do in network reconnaissance generally is host discovery, where you scan the network and try and figure out which hosts are actually available on the network so that you don't waste a huge amount of time scanning IPs that have no host listening on them at all. But a challenge there is deciding what methods to use for discovery. There was a time when pretty much all the hosts would respond to an ICMP echo request or ping packet. Unfortunately, that time was a decade ago. So now a lot more companies block those ping packets and you need something more effective. Now NMAP by default will also send an ACK packet to port 80 which helps in eliciting responses. But even with that, I don't think it's comprehensive enough if you're scanning the internet or even some sorts of internal scans. So let's look at some of the different methods that you can use. TCP, we have two types of probes. We have the SYN probe and we have the ACK probe and they're both useful against different types of firewalls. The SYN probe is likely to get through stateful firewalls when they're configured to allow incoming connections because they'll say, hey, this is a SYN packet, it's initiating the connection, let it through. But those same firewalls, if you send an ACK packet, they say, hey, this doesn't correspond to any existing connection. It's not acknowledging any legitimate data, so they'll just drop it and it'll be ineffective. However, against stateless firewalls, you have the opposite problem. They may try to block incoming packets to certain ports and they look at the SYN flag to detect that it's an incoming packet and they'll drop it. However, you send the ACK packet against those ones and they have no way to know. They have no state to say whether there's an established connection there or not, so they have to let it through. So I have a quick example we can do. Basically, let's say we're going to do Nmap, do a ping scan. We're going to do a SYN probe to port 80, no reverse DNS, and this time we'll just use sun.com. And it responds pretty quickly and says the host is up, so we got a SYN ACK or a reset back. Now we'll do the same one with an ACK probe against the same host and it takes a bit longer and eventually it times out and says no response was received. And so you want to think to yourself, hey, is their firewall a stateful firewall or is it a stateless firewall? And if you think about it for a minute, you'll hopefully come to the conclusion that it's a stateful firewall because it allowed the SYN packet in, but the ACK packet, it was able to detect, hey, that's bogus, I'm going to block that sucker. So now let's say we've seen the SYN probes and the ACK probes and the question is which one do you want to use because the SYN probes worked against some hosts with the stateful firewalls but the ACK worked against others. And the answer is that, hey, this is not an either or situation. You should use both probes against various ports to have a maximum chance that at least one of them will get through and generate a response that proves that the host is online. So then the next question is what ports should I use? You have 65,000 options there and you often don't know which ones are going to work best. So here I did some of that empirical data stuff and I scanned hundreds of thousands of machines and I detected the ones that had a heavy firewall, the ones that blocked the vast majority of the ports, because the ones without a firewall, those don't matter because you're going to be able to detect those anyway with a decent discovery. It's the ones that block all but a few ports that are hard to find. And so out of those, I looked at the most commonly responsive ports. They don't have to be open. They can be closed and send a reset and that works just as well. And you see here many of the normal suspects, ACP, SMTP, SSH. Some people look at this list and say, hey, where are the windows ports? 135, 139, those are really common. But remember that I was only doing this based on heavily firewalled hosts.  So what I would advise is use some of these with SIN probes and then some of the other ones with ACS. Next we have UDP host discovery. And that one's simpler. Your strategy there is you want to find closed ports because an open UDP port normally won't even respond to the probe. It'll just be like, well, I just got a blank packet, don't know what to do with it, just ignore it. Whereas closed ports will generally send a port unreachable packet, which discloses that the host is live. So I pick a high numbered closed port usually and then sometimes I'll do 53 as well because DNS is so popular with UDP that sometimes people allow it into their whole parts of their network and so that can be effective as well. There's also ICMP host discovery methods offered by NMAP. And here the thing is some administrators, like say Google.com, will say we're going to explicitly allow echo requests because we don't consider ping packets a threat, but only hackers use netmask request and timestamp request so we're going to block those. However, you also have administrators who kind of do the opposite. They say, oh, I don't want those evil hackers to be able to ping me, so they'll block the ping requests, but then they'll forget that you can do the same thing with these other two. So my suggestion is usually do an echo request plus one of these other two. Normally works pretty well. We also have a new feature relatively called protocol ping, which basically sends IP packets with various protocol headers and tries to expect a protocol unreachable message if the host is live. And that can be useful. I haven't actually done the test to see which protocols are most commonly useful for this particular type of probe, but by default we do ICMP, IGMP, and IP tunneled in IP. So now I've talked about a lot of different discovery techniques and which ones you might want to use, but your question might be, really, how valuable is this? It's going to take longer to scan if you add a bunch of discovery techniques. And so you have a legitimate question in how much of a difference will it really make. And again, instead of just guessing or making assumptions, a good thing to do is test. In this example, I generate 50,000 IPs, and then you can see I use the default ping scan, and it chugs along, and it finds 3,348 hosts up in about 1,600 seconds, which is about 27 minutes. And so that's a lot of machines, and it looks pretty successful. But then I take that exact same list of 50,000 hosts, and I add a bunch more discovery techniques.  We set the source port to 53 in order to masquerade as DNS, and it goes through, and this time it finds 4,473 hosts up, but it does take a bit longer. So you have to ask yourself, you know, look at the data. Here it took almost three times as long, but we found 34% more hosts. And I think in most cases, if you want a comprehensive scan, you're going to find that to be worthwhile. So now I just have a plea, basically, about upgrading your end map. And part of it is I'm sick of bug reports, but it's like, yes, we fixed that in 2003. There are a lot of people who just don't seem to upgrade all that often, and then they complain, or they'll say, hey, the problem with end map is it's obsolete. It tells you what port numbers are open, but you don't know what services are behind them, and nowadays everyone has, they'll tunnel everything over HTTP in order to get through firewalls or whatnot, and it's like, hey, we added version detection in 2003, you know, just upgrade. In addition, I made a number of improvements to the performance of the system recently, which you'll find valuable if you upgrade. And then the question is, what version should you upgrade to? Version 4.68 is the latest release on our download page. If you want to get even newer, we have our subversion source code repository releases, and you can find information at this URL or just go to the web page and you can track it down. But for all the goods in this presentation, you'll want to use the BHDC08, Black Hat DEF CON release, which you can find at this location, and that contains the top ports feature and some of the other ones that I'm going to be talking about. So speaking of top ports, this was another one of my big scans, and here I wanted to determine the most commonly open TCP and UDP ports. And again, I got some data also contributed from organizations to look at representation of internal networks. And then I took that data and I augmented the Nmap Services file, which lists all the services known by Nmap, and that enabled me to add a number of cool features. First, let's talk about the default scan ports. In Nmap 4.68, Nmap would scan all the ports up to 1,024, plus it would scan all the ones it has a name for. But the issue is that the IANA gave names to a bunch of ports many, many, many years ago, many of which aren't even used really anymore. And at the same time, there are some ports that you see open more often that turned out to not have names. So with the new Nmap, since it now has this frequency data, it's able to just scan the top 1,000 ports for each protocol. So you get better results in many cases since it has all these ports that the old one didn't have and it doesn't waste time scanning these ports that don't actually respond generally. And at the same time, it's a lot faster because it's only scanning a little more than half the ports. So you'll find a little increase in your scan times from that. But what it really makes a difference is the fast scan. That's the traditional hyphen capital F option of Nmap, which used to just say scan all the ports with a name. But the major problem with that is, hey, by default, we had 1,700 TCP ports. With fast scan, we had 1,200. You know, that's not really fast. That's kind of a small difference, but nothing dramatic. But that's all Nmap could do because it didn't really know what ports were common. It only knew which ones it had a name for. With the new services file, Nmap just scans the top 100 ports for each protocol. And so you get usually an order of magnitude, an increase in speed, which is helpful for TCP, but it's even more helpful in many cases for UDP because I've seen a lot of people who basically don't even do their UDP scanning because they say, oh, it takes too long and it's hard to disambiguate the filtered versus the open ports and so they just pretend it doesn't exist. But the attackers aren't going to pretend it doesn't exist. And so it's really important to figure out what's going on with this protocol. And now let's look at an example of the difference that this makes. Here I'm doing a scan. I say SU for UDP scan, V to do the version detection, and that's important for UDP scans because of that open versus filtered problem. Normally when Nmap gets no response, it doesn't know if the port's filtered or open. And in the case of scanme.nmap.org, that's the case with all of the ports. So it's like, great, I got a report that said all the ports are either open or filtered. That's no good. And so with version detection, Nmap has a database of probes that you can send to each port and hopefully get a response which proves without a doubt that the port is open. I say do a fast scan, use aggressive timing against this machine that I maintain for people to scan. And with 4.68, that took an hour and two minutes. It did find the right data, but that's still a long time to wait. With the Black Hat DefCon release, that same command took six minutes and 29 seconds because it was only scanning the most important ports and it knew what those were and it did find the open port. Then I optimized a bit more. I said also add the version intensity zero flag, which says only send these UDP probes for protocols that you know commonly listen on a certain port. So for 53, it'll only try DNS for 161, only SNMP. And with that, that reduced the time to 13 seconds. So the moral of the story is hey, if you know what you're doing, know what data you really need, you can optimize your scan a bit and make it a lot faster. In this case, we got exactly the same data, but instead of waiting an hour, we waited 13 seconds, which helps a lot. Two features which are kind of derivative of those is the top ports feature, which says hey, you don't want to just have to choose between the default of a thousand ports or a fast scan of 100. You can specify arbitrarily how many ports you want to scan. And that leads you to the question of what will work best to the top ports option. And so I used empirical data again to say out of all these big scans, how many of the open ports would I have found with different top ports values? So if you just scan the top 10 ports, which just goes really, really lightning fast, you get almost half the TCP ports. With 100, which is the fast scan, you get 73% of them. Whereas with a thousand, which is the default, you get 93%. So that's pretty good to get 93% of the ports, but you're only scanning less than 2% of the total 65,000 port space. So what I think a lot of pen testers will do is say hey, I'm starting this engagement, but I need some data to start with, so they'll start a fast scan to scan the top 100 ports really quickly and get that data and start working on it. And while they're working on the initial data, they'll have their super comprehensive all ports, no ping scan going. And then at the end of the scan of the big one, they can just diff the results and see if there were any new ports that the initial quick scan missed. Just in case you're interested, these are the top 10 open TCP ports I found. This differs from the previous chart because that was just responsive ports that could be open or closed. 80 is the top, no surprise. As a security guy, it's kind of depressing to see Telnet open more often than SSH. A lot of that switches in routers and various devices. And here, of course, you do get the Microsoft ports because we're looking at open. Similarly, I have the data for UDP. Microsoft kind of dominates this chart, although you see some of the other normal suspects like SNMP and NTP. And here's the UDP effectiveness of the different top ports values. With UDP, you get even a greater percentage open with a smaller value. So here, you get 90% with the top 100 ports, whereas before, we only got 73 with TCP. Here's another feature that we've added recently that I have to admit I have mixed feelings about. I'm kind of proud of NMAP's congestion control and other technologies to try and figure out what scan speed will work best. But there are a lot of people who say, hey, I just want to specify a certain rate and have you scan at that speed. And don't worry about if there are any packet drops or latency issues or whatnot. Just go at the speed I say so that I know exactly when it'll finish. And it was basically for that one reason that a lot of people used scan-rand and unicorn scan and that type of scanner. So finally, I broke down and was like, hey, it's an easy feature to add and even I found it to be pretty useful at times. And in fact, I used it during most of my internet scanning. And then a feature that's even more new came about when the ISP call came saying I was melting their switches. And so that's a maximum rate to say NMAP don't scan more than 300 packets per second or whatever you specify. And so that made the ISP guys a bit happy. So here's an example of putting it all together. Looking at kind of a typical type of the scans that I was doing and what options I was using. I would say NMAP. I would give it the source IP address that I wanted to use for that particular scan. I would specify debugging mode. Although really I found I used the runtime interaction feature more often. When NMAP is running, some people don't know you can press D and the debugging level will increase and press it a few times and you'll really be scrolling the screen but you'll see exactly what NMAP's doing right at that time. Then you can press capital D to turn it down say hey, I'm done looking at this. I don't want to fill up my log files. Turn it off for now. I specified a low max scan delay because I didn't want to wait a long time for hosts that were rate limiting. I did the log file feature with the new feature that says use strf time of values so that it automatically puts the time and date in there. I give it the name of the file I want to read from. I say don't do more than one retry for this case since I really want to do a big scan and make it go fast. Randomize the hosts in the scan group. Do all the ports. Here's the host discovery options. I specified a reasonably big max host group because that's more efficient for large scans. Here I'm saying scan at at least 175 packets per second but don't scan at more than 300. So that's sort of an example of a command that I sort of changed and improved over time until I found one that worked pretty well. So now with the time I have left I saved some to talk about some NMAP news because some of these are features that are new and cool that may not reflect exactly relate to the large-scale scanning but they're actually too cool to leave out. So there are a few new features in NMAP that I really wanted to talk about. One is the NMAP scripting engine which is a thing that modularizes NMAP and lets you say hey I want to write a little script that interrogates ports in a certain way. In this case we do the HTML title for the websites it finds and there are now more than 50 scripts shipped with NMAP. Everything from like who is data to brute forcing, POP3, passwords. There are all sorts of crazy things you can do with it. I do have a quick demo of the NMAP scripting engine. Let me see if I can find it. It's a long command so I kind of cheated and put the actual command here saying NMAP-V in verbose mode don't ping, do a UDP probe for port 53 aggressive timing and we're going to do three scripts which I thought were kind of timely because they relate to Dan's DNS bug that he'll be talking about on Sunday. And so one of them just checks if a DNS server allows recursion. The second one checks if it randomizes its source port numbers and the third one checks if it has a transaction ID that's randomized. So those are the bugs that people want to fix in order to reduce the cache poisoning issues. And in this case I'm going to run it against one of Black Hat's authoritative name servers and also one of the authoritative name servers for Shmoo.com, the guys who put on the great ShmooCon conference. And so it does the port scan then it does the NMAP scripting engine it takes it a little while but then it gives you your results right next to the port number. It says that the Black Hat one basically refused recursion in both cases so it wasn't able to interrogate them further. The ShmooCon, it was recursive but I'm happy to report that it was great in source port randomization and it was great in transaction ID randomization. Now I was going to show one of the many examples that fail miserably and maybe have a little challenge game to see who can poison the cache first but decided maybe that wouldn't be the most responsible thing. Plus I've got a lot more good stuff to cover. One of the things I'm excited about is the new ZNMAP GUI and a lot of people give me crap like what I don't need no GUI I've been using NMAP 10 years and I know all of its 113 options by heart and I have to admit they have a point when you look at the old NMAP FE which frankly kind of sucked it basically just displayed your NMAP output and instead of typing SS you press the button for SIN scan whereas ZNMAP is a much more powerful interface and I'll give a quick demo of that basically just like NMAP FE it could show you your normal output it also has a tab that can say hey show me what each host has opened or look at the service level and say show me the ones with HTTP or SSH and then it has a new experimental feature that we're adding and we only have in the subversion right now which basically says hey if you're going to call the dangToolNMAP network mapper it ought to at least draw you a map yeah thank you this is certainly the best feature for an eye candy perspective and it can be pretty neat it basically takes the scan that you did and it puts it in the center, the source host and then in concentric circles around the center it shows each hop on the network and the machines that you've scanned and you can take one and say hey show me what more data on this particular scan show me the ports that are open you can scan new machines and they'll get added to the graph and in terms of the biggest eye candy aspect it's if you want to re-center the graph on a certain host that maybe makes it easier to read yes so maybe once in a while that'll convince people to actual open the GUI and try it out it also has a side benefit for me which is there are a lot of Windows users out there who have no idea how to do a command line scan or what command line even means there's so many males saying hey I double clicked on nmap.exe and it put this strange black box on the screen which then disappeared obviously nmap's totally broken so maybe this will help them but on the other hand maybe those people shouldn't be using nmap at all we have a second generation OS detection system which basically took all the things I learned with the first seven years of OS detection and improved it and we're now up to 1500 signatures with the new system so I'm hoping that'll help in terms of granularity you know it nmap users basically can find every device you can possibly imagine so sure you've got your normal Windows and Linux versions and the like but they find game consoles and PBXs and network power devices and all sorts of crazy things so let's get on to go through the submissions and see what people have version detection a lot of people like I said still don't know about it but hopefully the people who go to DEFCON do a feature that is sometimes not known as well as it could be is the reason feature basically if nmap tells you say a state is filtered you don't necessarily know is that because it sent me an ICMP host unreachable packet is that because it got no response well the way to figure out what nmap's doing more is use hyphen hyphen reason and then you can see hey this one's open because we got a SINAC this one's closed because we got a reset and that's a real good way to help understand what nmap's really doing and when that doesn't give you enough information there's the packet trace option so say in this previous scan I wasn't sure whether port 25 mail and 113 is it the destination host that's sending those reset packets and I'm actually reaching it or is it a firewall sending some of them in between or is it a different case for each well by looking at the packet trace option from a quick scan of just those two ports so you don't flood your screen too much you can look at things like the sequence number and windows number what options they use IPID and that can often help figure out if it's the same host in both cases sending the packet it's useful when you're trying to understand the firewalls and filtering systems in place advanced trace route it's trace route which isn't all that exciting but at least it does it better because nmap already knows what sorts of probes are likely to get through and it's also faster because nmap can do it in parallel I made a number of performance and accuracy improvements there's a whole section on the man page showing all the different options you can use to figure out what might help TCP and IP header options let's you specify things like source routing the record route option and some of you might be saying source routing maybe that worked 15 years ago but come on there's no way that would ever work nowadays but that's actually proved untrue in a number of cases I was talking to a guy recently who was doing a test of a network and he was on a separate VLAN that could only contact a series of servers on their network but he couldn't contact all the client machines for the company just basically a little DMZ they enabled that they allowed access to from the conference room so he basically took one of those servers and said I want to lose source route through that server to the destination machine and he was able to get around that restriction that way which I thought was pretty cool another neat feature is called Ncat and I shouldn't call it a feature because it's actually a whole new tool that I hope to ship with Nmap and it's basically a modern interpretation of the Ncat that we all know and love it basically supports virtually all of Ncat's 1.10 features except the port scanner because I have another tool I like to use for that but it also suggests supports a lot of other cool new things like SSL both for communicating between Ncat instances and to SSL ACP servers it supports IPv6 it works on macOS 10 on Windows on Linux on Unix it does connection brokering so if you set up a Ncat listener in brokering mode then all of your machines behind Nats that want to connect to that Ncat can do so through the broker they can connect to that port and then talk to each other for command and control or whatever port redirection there are a lot of different tools for doing that now if you look around and get a specific tool but it's something I want to do often enough that I wanted to have it built in it can do proxying either as a client and do your stuff through a series of proxies or it can act as a proxy once you get onto the machine start it up as a proxy and then you can proxy through it to other machines shell execution access control because you don't want anyone else connecting to your your Ncat and it's something I've wanted for a long time and has been in development since 2005 right now it's currently dev lead is Chris Catterjohn one of the summer of code students and I think he may be here are you here Chris hey let's give a hand to Chris Chris has also added a lot of the other features I demoed particularly the IP option Ping discovery mode that was his idea and he put that in we have Ndiff which is a simple tool but it does something that a lot of people have wanted for a long time which is taking two scans and diffing them so say I run a company network I scan every day all the hosts in my cron tab I can then call Ndiff and say mail me the changes since yesterday so any new ports became open any new machines on the network any machines went down this will let you know and we have a python proof of concept right now in RSVN and we're rewriting it in C since it proved to be useful and people want it the C version will work even better another thing is my map book which I've been working on for years so long that people have been comparing it to Duke Nukem forever in the like greatest paperware so I was like dang it I'm not going to go to Def Con and Black Hat empty handed again especially after last year telling people oh it's almost done so I work pretty hard to get it ready and I'm happy to say that I finally have it now and did a pre-release here thanks I hope it does a good job at not just telling you what options there are for Nmap but also how to use them effectively to scan your networks and so I last minute printed 170 copies and brought them here so I could tell people about them in my talk and they could go pick them up but I'm afraid they were sold like after an hour this morning and so they're all gone now but I hope as soon as I can I'm going to get it on Amazon and the like and also half of it is already available online for free at nmap.org and that's also where I'll be putting the details of the launch of the book and you can also join the nmap hackers list if you're not a member it's a pretty low volume list I think I've sent three messages this year as opposed to nmap dev which gets thousands of them but nmap hackers you can join and I'll send you the latest news when it's ready I also wanted to do a slide because sometimes I get way more credit than I deserve for nmap just because I created it way back but it's actually a project that's very fortunate to have tons and tons of contributors and I couldn't do it without them this is an example of just the people who've contributed significantly since version 4.50 which was nine months ago so you can see that the nmap project is really lucky to have a lot of volunteers who help out greatly now with that out of the way I think I have time for maybe two or three questions before we'll go to the question room if anyone has more so who's got a question for me yeah I don't feel very good about Germany and the UK and other countries that have put laws which tend to people suggest may ban tools like nmap that can be used for good things even though attackers might use them as well and I think that's really dangerous I mean the typical analogy is banning a hammer you know by blocking it you ensure that the good guys aren't able to use it to improve their networks and personally since I like to give talks in places like Germany and England that can be a potential issue because I hate to get busted in Germany and these laws say things like what's it designed for what's the motivation and so how do I convince a judge that my motivation was good when you know I can't even read the law so those are definitely a scary issue and things that I'm glad that groups are trying to fight even though we've had some losses there do I have another question I can hardly see because of a giant bright light shining at me oh good point the reason option we sort of always have that field there so it won't have any performance impact at all to add that so in many cases just like hyphen v hyphen t4 it becomes one of the things I almost always use alright so if anyone has any other questions I'm going to be in room 103 which is just across the hall and I'd be happy to answer them there thank you very much


What's up everybody? Jason here for jasperjaysrace.com 2022 pro set sports multi sport five box half case break random letter number two Just sold out and this is a random letter first letter of first name plus instead of selling all 20 spots We're gonna give away five free spots so As an example of course if you get randomized letter L, and we pull a Lionel Messi that'll get you'll get that card of course So here's the dice roller. Here's the customer names. These are all the customer names that bought in we're gonna randomize those first and The top five get a free extra spot in the break. Then we're gonna paste the five names in here That'll make 20. They won't use the same dice roller for the names and letters for the break So let's roll it five into two seven times. Good luck one two three four five six seven seven times five into two seven Steve Birch Richard Steve Steve and Steve look at that. That was five into two seven times So top five get free extra spots free free free Free and free Steve Birch killed it Kill the Steve Birch seven times right there So now we're gonna use this seven times for the list of names and numbers super charger Well, I was gonna pack filler it or do a team random for it After I was done with my two breaks on the schedule is so is this 2021 is that the right 2021 prison football team all? So if if you want to grab teams that you're specifically wanting to chase I would take them now because if not, I'm gonna put them in a team random But I mean, that's a chance but I was gonna team random because it looks like we kind of got stuck at 13 so If there's any of those teams you want to take straight up before I put them in a team random you definitely can But there you go. So Steve Birch right there We put your guys names five times and then obviously there's a list there. So again, we're gonna go seven times here We go one two three four five six seven Seven times Steve Birch at the top down to Steve Birch at the bottom seven times seven Seven one two three four five six Seven five down to K or S down to K All right, so Steve you got S Richard with the VW Y combo Jason with B Brad with T Nestor with E Steve Birch of J Richard with R R Aaron Billsie with L Anthony with F Steve Birch with IG the OQ all other combo as well as M Nestor with a and then Steve Birch with D H C PZ combo N and K Anyway, so yeah chat. Um, no many came on said 14. He died to you that day. I Really hurt you man. I I guess I would have felt a little hurt to the wrestles if I was a Seahawks fan, but the same time I mean, I guess You know obviously if they're not gonna be contending you know, I Guess I mean he did help see I don't know sense, right? He gave you guys future draft picks and got players traded for him, but I Guess you could I guess you could feel where he goes. I mean I hated Kevin Daraff for a very long time You know after he left okc and then joined the Warriors like you know that I heard me a lot, but After a while kind of understood, you know, I mean he really wants to win But I don't know how it would have done with the Warriors, but you know Sometimes it obviously is time for a change of scenery. I guess I don't know But they screwed that one up though Thunder should have easily beat the Warriors that year in 2015 or was it 2015 2016? They were up 3-1 FM Yeah, that's that's weird though. I mean He didn't have anything against Pete Carroll, right? Nothing against like ownership or nothing like that I mean, I'm sure he loved the city of Seattle He'd like isn't he like a part owner of like the future like He's like a owner of the soccer team or the future basketball team there potentially I'm assuming no trades in ragas Dude Chad, did you I don't think anybody talked about this right? Did Joe talk about that? I Sent Joe that video really late or Really early in the morning or when it was I think it was really early in the morning when I when you know Dana White talked about Dana White talked about you know, obviously almost bringing Tom Brady and and drunk to the to the Raiders and then That whole clip from like his barbershop episode made so much sense Everybody thought he was talking about Garoppolo with the 49ers, but yet he meant that's a Derek Carr.   You're sticking with this. Oh, man. That was so funny All right, here we go But I don't think Joe replied back You know, you didn't see that chat. Oh, man, I gotta send it to you It was like episode of barbershop He kind of confessed that there was a couple teams interested in him and one of them actually was like really close But then at the last minute they called off they called the deal off and that oh man, it's a funny clip I gotta show it to you But now we know he was talking about Derek Carr Jenny Finch three of three softballer right there. I remember her but um it's just funny too because Justin Herbert the other day was being interviewed and he was talking about like, you know when you got when you got The Russell Wilson's and and you got the Patrick Mahomes in your division You know, you got to be on your a-game and then we're like, okay I guess Derek Carr is not good enough to be named the Derek Carrs. I Personally don't like Derek Carr much I feel like he's kind of an a-hole Mike Tyson so Jenny was gonna go to letter J, which is Steve and Mike Tyson Steve as well for letter M There you go Great first box. I just said it to you chat. I'm IG. Yeah, right. I mean You would say Herbert even only in his 30 years better than Carr, would you? I would You have to say Russell Wilson is better than him, right? And Patrick Mahomes is definitely better than him So yeah, he has to be the worst, right? Dick Buccas nice letter D Steve Burch 15 Joe Montaignea Letter J also Steve Burch Yeah, yeah, that's what I'm saying in any of the division. He might be one of the best But you got Buster Douglas letter B going to Jason and how about Bailey? Bailey Nice autograph. They're not numbered. It looks like but still very nice letter P is going to Steve Burch That's one of your free spots letter PZ combo Michelle we two of five Letter M going to Steve Burch Lawrence Taylor and Harry Carson that is letter L Aaron Billingsley letter H Steve Burch So that'll be a little randomizer here at the end our last box guys Also, too, guys, remember this was a promo break. So we're gonna cross that out right now We'll paste your guys names as well Antoine Grisband is six letter a going to Nestor and Last one here. We got a magic Johnson. That's letter Sorry letter M Two of three letter M is Steve Burch All right, so I think we pulled the crazy crazy ones in the first half But this is still pretty nice second half though So before we do that randomizer magic Johnson Antoine Grisband Michelle we Bailey Buster Douglas little Joe Montana digbuckus Mike Tyson Jenny Finch And of course, like I said letter L and letter H will be battling for this dualistic Let's get a dice roll Let's get a new list and Taylor Carson roll it Three and a four seven times. Good luck one two three four five six seven Going to Lawrence Taylor after seven times three to four Lawrence Taylor that's letter L, which is Aaron Billingsley. I appreciate it guys So again, let me also show you guys in this video. I've been forgetting in a lot of them, but I have I Have been posting of course all the promo breaks. We've been selling out But if you look closely here guys, the most recent one I put in there was mosaic pack prism pack pristine pack filler Boondis Liga and jazzy's hockey three boxer. So you guys will be the new addition here now You'll be that and then this is 20 22 pro set sports five box Random letter number two and also let me cross that out of you here for you guys as well so Pro-set sports is now off the board and Then also to come in up next is pristine and we're also going to knock that off the board So we're just an impeccable and fanatics jerseys away from giving away 3500 bucks and break credit guys Appreciate it guys jazby's case breaks.com


Good morning and welcome to this session on Building a Sustainable Ocean Recovery. My name is Jim Leep. I'm the co-director of the Center for Ocean Solutions at Stanford University. I want to welcome you to this session convened by the Friends of Ocean Action as part of the World Economic Forum's fourth Sustainable Development Impact Summit this year online, virtually for the first time. Friends of Ocean Action was launched two and a half years ago in the wake of the first UN Ocean Conference. And in those two and a half years it has become a unique platform in the ocean community. It is a connector bringing existing initiatives together in common cause. It is also a catalyst of new collaborations. Over these couple of years, the Friends of Ocean Action has brought industry and governments together to tackle the challenge of ocean plastic. It has helped spur commitments to crack the challenge of reducing greenhouse gas emissions from shipping. It is mobilizing heads of state, leading companies, technologists, and NGOs to close the Pacific to illegal fishing. 2020 this year was of course supposed to be the super year for the ocean. We were supposed to be gathering together in person in a string of international convenings in the UN Ocean Conference in Lisbon, in the our ocean conference in Coror, Palau, the CBD cop in Dalian, in the climate cop in Glasgow. That promised to be a year that could really make a difference. And the COVID pandemic has disrupted that schedule, but it has brought home also the urgency of finding a way to make a difference. So even meeting this way, we have to be sure that this year and the year that follows are indeed super. And we are using this time to rise to the challenge of putting the world on a path to resilience both in the ocean and in society. And that's the mission of this session is to come together and promote develop actionable solutions for a healthy ocean that must be an integral part in the global response and recovery from the COVID pandemic. To take us into that, we have some extraordinary speakers for this opening plenary session, and then we will then go into breakouts. The plenary is live streamed. We will start with keynote speakers and then go to a panel discussion. We'll have some discussion around among the members of the panel on that if time allows questions from the audience. So please put your questions into the chat box. We will then go into breakouts. You will be automatically assigned, which is why there will be a number next to your name. It tells you which group you will be directed into. Those three breakouts will look at sustainable ocean production to nourish billions, capital to finance a sustainable ocean economy, and ocean and community resilience. We start appropriately with Peter Thompson. As president of UN General Assembly, Peter led the convening of the first ever UN Ocean Conference in 2017 that has propelled our progress. And he is now the Secretary General Special Envoy for the Ocean and the Chair of the Friends of Ocean Action. Peter, the floor is yours. Thank you very much, Jim. And Prime Minister, very good to see you. Excellencies, ladies and gentlemen. All courtesies observed and greetings to everyone gathered here with us in cyberspace. And whatever your circumstances in these trying times, I hope that you and your families are safe and well. In spite of my crocky voice, my wife has just put her head through the door to say that our covered tests have just come through and we're negative. So this family is okay. I want to thank the Friends of Ocean Action for organizing today's high-level gathering and congratulations to the friends for all that they've achieved on SDG 14's behalf to date. And we look forward to the Friends of Ocean Action attaining even higher levels of momentum and success in the coming years. Why are the Sustainable Development Goals and the Paris Climate Agreement so important to us all? Basically, taken together, they represent humanity's best effort at creating a plan for a secure future for the human species. The plan was universally agreed to by the member states of the United Nations in 2015. Even though we are currently failing in implementing it at the pace required, it remains our best plan. And it is our generational responsibility to see it faithfully through. You've heard me often enough say that at the Climate Change Cup in Madrid last December, the Secretary General of the United Nations, Antonio Guterres, stated that we are knowingly destroying the life support systems of our planet. I ask you to ponder the implications of that statement and the fact that his words were based on the best scientific information that we have on the subject, namely the reports to the IPCC and EBS. The current rate of global biodiversity loss is estimated to be between 100 to 1,000 times higher than the naturally occurring background extinction rate. And this is scientifically forecast to be the continuing direction in coming years if we don't change our ways. So that is why all of us have this existential responsibility to stay true to the plan, to work for sustainability and resilience, and to change our patterns of consumption, production and habitat destruction so that biodiversity will be protected, so that the ocean's health is restored and we avoid the worst of the looming climate crisis. Ladies and gentlemen, I'd like to say some words about the Blue-Green Recovery Road that we must surely take out of the pandemic that we're currently living through. And I want to make the point that the Sustainable Blue Economy is one of the most reliable stepping stones along the road opening up ahead. By way of example, I commend to you one of the recent reports issued by the high-level panel for Sustainable Ocean Economy, entitled A Sustainable Ocean Economy for 2050 Approximating its Benefits and Costs. The report provides very positive findings, including the fact that after expert economic analysis, sustainable ocean-based investments yield returns at least five times greater than their costs. I ask you to consider those findings within the context of our times. The trillions of dollars now being earmarked for recovery and stimulus packages can be a crucial lever for shifting from past models of pollution and overexploitation of finite planetary resources to a sustainable route, delivering on our agreed plan and bringing us to a carbon neutral world that we need and so desire. In support of this new route, the high-level panel's report proposes five priority opportunities for immediate investment of stimulus funds to support a sustainable and equitable blue recovery from the COVID pandemic. And I commend them to your thoughts and discussions today. Here are the five. Invest in coastal and marine ecosystem restoration and protection. Invest in sewage and wastewater infrastructure for coastal communities, it's a favor of mine. Thirdly, invest in sustainable community-led, non-fed marine agriculture, for example, shellfish and seaweed. Fourthly, incentivize zero-emission marine transport. And fifthly, incentivize sustainable ocean-based renewable energy. Now ladies and gentlemen, I'd like to just close my remarks now with some quick words about the UN Ocean Conference. As you know, the UN has mandated the holding of the next UN Ocean Conference to be held in Lisbon and to be co-hosted by the governments of Kenya and Portugal. Because of the pandemic, the holding of the conference has been postponed until 2021, with confirmed dates to be announced once the course of the pandemic is clearer. In the meantime, step-by-step preparations for the conference, and in fact, I've just come off a call for it with the Portuguese government, are proceeding. And I'm confident that like the first UN Ocean Conference in 2017, the Lisbon one will be another global game changer in favor of SDG-14's successful attainment. So I look forward to seeing you all, virtually or in person, in Lisbon next year. Now ladies and gentlemen, it's my great pleasure and privilege to introduce the Prime Minister of Saint Lucia, the Honorable Alan Michael Shastane. The Prime Minister currently serves as Saint Lucia's Minister for Finance, Economic Growth, Job Creation, External Affairs, and the Public Service. He's a busy man. He holds a master's degree in Development Banking, respectively from Bishops University in Quebec and the American University in Washington, DC. And for the purposes of our gathering today, I'd like to emphasize that Prime Minister Shastane has had extensive experience in the tourism field. Having in the past served as Saint Lucia's Director of Tourism, as Managing Director of Cocoa Resorts, and as a former President of the Saint Lucia Hotel and Tourism Association. Prime Minister Shastane, you have the floor, sir. Thank you very much, Peter. First of all, I know that you were attempting to make me feel very welcome with the picture you have behind you, a beautiful shot it looks like of one of our petons in Saint Lucia. So thank you very much for that. I want to say that there's some really good news on the front here in the OECS and in CARICOM. So CARICOM now has finalized an exercise last year in which we now have appropriately demarcated all of our blue economy space. So, in fact, the boundaries between all of us now have been settled. And that's a very important first step because that now gives us the legal ability to start now looking to commercialize our space. Sadly, for a region of the world where the amount of blue economy that we have in terms of land space is substantially larger than what we have in physical space, we still don't look enough to try to manage and to develop the blue economy to the extent that we have. Here in Saint Lucia we've seen two initiatives, one clearly a young gentleman who has gotten a tremendous amount of accolades for converting sagacem into a fertilizer and sagacem continues to play havoc with our beaches and our primary economy tourism. And secondly that we've seen a new industry called CMOS to Peter's point where this is a renewable product in the ocean that is doing extremely well. I think that we've seen almost a thousand percent increase in sales of CMOS. And I think that we're only at the tip of the potential of what that product offers. But before we can even get to the blue ocean there are some other issues that are ailing the small island developing states. And Peter very familiar with them from where he came from before. And the problem is that we've now had three major shocks, the financial crisis, climate change in terms of hurricanes and now the pandemic. And the combination of these things have literally depleted the financial resources of our countries. Saint Lucia's debt to GDP in four years I was able to bring it down to 59%. So 1% below the prudential level set by the IMF. In a matter of six months that's gone from 60% to 85%. And depending on what the growth rate is actually going to be this year because we're projecting a 26% decline in our GDP. And if it's worse than that it means that the debt to GDP is going to go up even higher. And certainly right now no one knows with any level of certainty what's going to happen next year. Most of us would have hoped by this point that we would have seen a more convincing return to our economies and that we could say with some kind of confidence that the global economy would be recovering significantly and we would only see a marginal decline from the previous year. And certainly would be maybe two to three years away from getting back to our pre-COVID size economies. Today I don't think any of us can say that with any level of certainty. And the implications of that is that we saw a 50% decline in our tax revenues. Tax revenues which I call free capital. I don't have to go and borrow that. That's money that the government has earned through taxation. 50%, $600 million.  And while the borrowing has been an extremely concessional race through the IMF and the World Bank and through CDB and our own central bank, we're talking about five to 10-year moratoriums, half a percent to a maximum of one and a half percent interest over 20 to 40 years. Very concessional. So I don't think the country is going to have any difficulty in paying for the debt. But the problem is is that the more debt we take on, given the fiscal rules that we have of measuring the wealth of my country by per capita debt to GDP, sorry, and per capita income, we're in problems. And I say this and I bring this up at this particular juncture because there's no conversation that we can currently have that can take place until we resolve this issue because the states are not going to have the resources to invest themselves to take advantage of the blue economy. Putting pressure on small island developing states to become totally carbon neutral when we know that we're not the ones that are making and inflicting the pain on globally is a heavy burden. So I can say to you as a prime minister, looking at LNG gas as an example is a significant reduction in carbon emissions, but can produce energy at a much cheaper cost than right now that what any form of green energy can. And LNG comes with the ability of getting persons to make the investment without me having to make the investment. The same can't be said of green energy. So we have to resolve this problem that's not going away. We said it during climate change after 2017 when we had Hurricanes, Irma and Maria, that there is a requirement for us to invest in resilience. And investing in resilience means my debt to GDP goes up. The return on that investment is simply building resilience. It's not building capacity, building a bridge higher. It carries the same number of cars. Now the matters become even worse because we've had to immediately borrow money with whatever fiscal space that we had created. It's now gone. So we need help if we're going to create an institution within the Caribbean that can help us now examine the opportunities with the blue economy. I agree with Peter that this is only going to be successful if the citizens of our countries benefit from this opportunity. So it means that we have to create an incubator. We have to create an equity fund to invest in these areas. Otherwise what we're doing here today is just talk because the reality is, is that the expectations of what we can do to meet this new opportunity are limited now and are becoming even less to us moving down the road. So we have said four things. OECD needs to move immediately to using a vulnerability index to measure small island developing states access to concessional funding. Cannot use per capita GDP as that criteria. The evidence of the financial crisis, the evidence of climate change, and now the evidence of the pandemic show that per capita GDP is a meaningless number because in absolute terms it's a limited number because of our populations. The second thing that we've continued to ask for is a change in the governance structures of the IFIs. I mean the British government gave solution to Caribbean when Cameron was Prime Minister $300 million. Seven years later we might be able to see the expenditure starting maybe in January. That's absurd free money and that's the governance structure and even now with the pandemic when we said okay let's repurpose some of our loans in anticipation of a very heavy hurricane season which has manifested. Here we are in October more than halfway through the hurricane season and we've not been able to repurpose those loans to do what? To fix up shelters because now we can put less people in the existing shelters because of COVID and to use some of the money for desilting. October. Now if everyone sitting at the table can't use common sense to some extent and bypass some of these governance structures to actually solve a problem and if that's going to be the continual behavior that we're going to have we're not going anywhere. The third thing that we've said is a dedicated fund for the SIDS. You have the Green Climate Fund it's now in its second tranche the first time nothing for the SIDS. Every time we have to go and apply it's a new a new level that you have to use to become an agent you have to become a promoter you have to become this in order to be able to get the monies. We're spending more time trying to get the administrative hurdles than actually getting the funds to be able to achieve something. And the fourth thing that we clearly said even before the pandemic is how we're going to deal with the debt. In our opinion the debt that you're accumulating for resilience either has to be amortized over a longer period of time and only proportionately brought on to your books or it needs to be a below the balance sheet item. So it's not a matter of us not paying for it but it's simply the ability of us absorbing that kind of money and even now with the pandemic imagine having to absorb 600 million dollars from in three months. It's crazy even though the funds are on a concessional basis so I just want to say gentlemen and ladies that from a small island developing state I see a tremendous opportunity in the blue economy not only in terms of some of the things that David has spoken about but Peter's spoken about but also the things that we've spoken about. We have the cruise ship economy if in fact the Caribbean treated our space as a singular space and we created a system in which we could license people coming into our area. Prime Minister if I may as an old friend I support everything that you have just said there. In a world where the international energy agency has said we can produce 18 times global demand for electricity through offshore wind and you know that's the Caribbean right there and having got your electricity that we can for every boat that runs into or out of a Caribbean island it should be running on electricity the way the huge ferries of the Baltica. So you know the solutions are there but you put your finger on it with the finance side and that's one of the main areas of discussion this this evening or this morning I guess in America and with those words first I want to thank you so much you're such a great advocate for SIDS but you're such also a great advocate for logic as to how we're going to make these solutions actually happen and with those words I'll hand back to our moderator Jim Leep but I really look forward to discussions coming up in the panels. Thank you so much for your words Prime Minister. Thank you Peter. Thank you Peter and thank you Prime Minister we couldn't have asked for a better this first opening remarks to tee up the discussion that follows I am bringing home vividly just the practical realities of how these several crises are affecting a country like St. Lucia and the connected importance of both the innovations and technology and society and governance and at the same time innovations and finance to make those reforms possible so we really appreciate you being here with us and setting us on on the path for this conversation and we now have a great panel to take us into those into those issues. We have three panelists who we will hear from here in Plenary and then as I mentioned we will go into breakouts at the top of the hour. The first is M. Sanjian who's the Chief Executive Officer of Conservation International as you might guess from his background one of the world's leading international conservation organizations. The second is Barkha Masai who is a World Economic Forum Global Shaper which is a fancy way of saying that she is a serious leader in her own country of Port Louis of Mauritius and based in Port Louis and well beyond and the third is John Quill Hackenburg who is the Head of Sustainable Business from Infosys the legendary IT company. So let's plunge into a first set of observations from the panel and then we'll get into a bit of discussion from there. I'm Sanjian I'm going to start with you. So I mean we've heard from the speakers about the central importance of the oceans to post COVID recovery. Can you begin to set out for us the sort of core what you see as the core elements of that recovery agenda? Well thank you I'm great to be here and I'm blown away by the words that we just heard from the Prime Minister I mean I could have I honestly could listen to him for a long time he had such clarity of thought and purpose and all of the stuff that we discuss in kind of these forums somewhat esoteric somewhat removed from the real challenges that people are facing on the ground was really brought to bear through through his words and you just clearly see the passion and the struggle that he is facing. You know let me point to three key areas that I think that we ought to spend some time focusing on that would clearly be key ingredients of a build better recovery. You know yes this was supposed to be a super year for conservation for biodiversity. I think the one thing that this year certainly has achieved unfortunately but still achieved is that I don't think anyone is taking nature for the importance of nature has been made made incredibly clear to us either in small personal ways or kind of at the global the global scale but it still tends to be a terrestrial led conversation. I'm struck at by at how much momentum there is with carbon and forest conservation and restoration on the terrestrial side but the oceans are really really lagging we just don't have that 20 years to catch up. So let me point to three sort of core areas. The first is the importance of marine protected areas and the link back of marine protected areas to economies from tourism to resilience for coastlines to obviously fisheries you know at large. We have only a fraction of the ocean protected I don't want to get into exactly what that number is because it depends on how you count it but I think that there's quite good consensus that we need at least 30% of the planet under some form of strong conservation management and when it comes to the oceans we're nowhere near it. So we for example partnering with several other organizations including Pew and Minduru and the GEF to really focus on 18 million square kilometers of ocean about 5% of what we need and really on a on a quick push to try to get that over the next 10 years. The second is fisheries and when I talk about fisheries I am specifically focusing on community-based fisheries the off-market fisheries that over half the planet depends on and over half the fishers whose livelihoods completely depend on it. As you think about the recovery as we start working through the recovery that is the place to really lean in. You know I'm just thinking about this because emphasis is in the conversation but you know when when Modi shut down India initially with this quite draconian 21 days of lockdown and I'm not going into whether it worked or not he did make a certain point which I thought was very very very good. He basically said that if we don't lock down India for 21 days we're gonna we're gonna push it back by 21 years and what he meant by that really is that most of the planet you know still relies very much on a rural economy where I am confident that all of the money that is going into the recovery certainly in the United States is going towards the big industries the key sectors that are city-based the rural economy is getting completely left behind and that's where the oceans and the fisheries and the fisher communities particularly these community-based fisheries communities comes into play. You know if that rural urban migration that has been going on as long as I've been alive for the first time I bet has reversed and that means that for that one family who sent someone into the city to make money in order to send that first person to school that's now been pushed back by an entire generation regardless of how quickly the recovery happens so that's why community-based fisheries has to have enormous amount of support from us because it is a fast pathway for those rural economies and then finally blue carbon nature-based solutions to climate both on the adaptation side but also on the mitigation side we are surging ahead on the terrestrial side I mean just my organization alone in terms of partnerships with Mastercard or Apple or or P&G massive commitments to protect nature for climate but virtually all of it is on the terrestrial side just this week actually last week we had the first blue carbon project this was in Suspata Columbia that received the carbon verification standards the first carbon verification standards in the world for blue carbon that just happened last week so I think that if we want to see what I think is the largest transfer of wealth from from the rich to the not so rich that we're going to see in conservation which is essentially driven by the need to protect forests and carbon-rich environments we also need to stimulate the nature-based climate solutions that are coming from the oceans from mangroves coral reefs coastal communities so thank you thank you very much that's a perfect tea up for for this discussion so Barkha I want to turn to you your country has witnessed terrible environmental disasters over the last several months with the big oil spill has been also hard hit by the pandemic and yet you are have been continuing to lead and and speak out for the importance of social sustainable ocean management at the center of the response to those crises and I wonder if you could talk a little bit better from that perspective I mean what does a blue recovery look like in Mauritius and in the broader region well thank you thank you Jim and thanks for having me on the panel and I would just like to point out that prior to joining this panel I spoke to fellow shapers from the Victoria hub in Seychelles from the Rodrigues hub and from the Portless hub so this is very much the voice of young people from the Indian Ocean when we talk about blue recovery initially at the start of the year we were thinking let us tie through the COVID-19 pandemic and then the MV Warkascio vessel crashed headlong into one of our most important coral reefs in Mauritius and later broke apart spilling at least 1000 tons of bunker fuel and other toxins into a very ecologically sensitive area it is a very very tragic event and I believe it is perhaps a turning point in the history of Mauritius and its impacts will only be known after a few months they will keep unfolding but there are at least four lessons that we can take from this lesson in from this tragedy that we will have to use to build back better the first is what this has shown is the absolute need to center agile governance as a key pillar of promoting the blue economy at the moment there are so many exciting developments that are happening in various hubs in various technological hubs whether we're talking about autonomous vehicles satellite data um biotech or synthetic biology all of these innovations are crucial to steering to clearing the path for a blue economy that is sustainable exciting and also inclusive however the public sector does not necessarily match the pace of that innovation and we needed to do that this is the first point the second point is building a blue economy based on people-driven innovation I'm sure that you have heard the moment local people in Mauritius heard that oil was leaking out of the MV Bacchuscio they rushed to the coast and they started cutting their own hair in an attempt to build booms to contain the oil spill they were makeshift booms but online there was also mobilization with people trying to come up with different models different ideas the diaspora united and all this wealth of ideas needs to have an outlet if in the space of a crisis people can come up with ideas imagine what they can do if you give them the space to build a blue economy that is centered on their ideas this is something we have also witnessed as a shaper with with seeing blue an initiative that a shaper led where young people from coastal communities came up with such brilliant ideas which needed to be plugged into policy which needed to be supported by the right systems which needed to be supported by mentorship and funds at the moment the response to the Bacchuscio is also fixed on one citizen led data collection effort to assess the ongoing impacts and local knowledge has been critical so we cannot have a blue economy a recovery for a blue based on a blue economy unless you have the people right at the center the third point is data data and more data but i believe young kill will speak about it so a lot of the questions that are being asked is that are being asked are that how could a vessel of this magnitude just crash into a reef how can we don't know about vessels how can we don't know about our oceans now that we have so much technology at our disposal there is no excuse whatsoever for coastal countries for people in coastal countries not to know what is in the waters this is absolutely crucial that we bring science led policy and that it is made in such a transparent manner that people can get involved and the final thing jim the fourth lesson that we learned from this very sad event is the necessity to invest further in regenerative technology at this point in time we are we are heading to a point where regenerative technology was seen something as a oh i've given up there's nothing more to be done so this is not something we should be considering but what we've seen the impact in the mangroves the impact on the local coast the southeast coast we will need to be investing in that and finally jim um the prime minister of st luccia made a lot of important points that strongly resonated with me as someone from a small island developing state at the start of the pandemic there was a sense of purpose and people thought okay climate change we have an initial drop in emissions we recognize that inequality is a big deal unless everyone is safe nobody is safe by diversity we recognize the need to protect wildlife otherwise the risk of zoonotic diseases will increase but then all of that was reversed after the initial drop in emissions we had record high emissions after the initial recognition of inequality we realized that there has been pandemic profiteering obscene pandemic profiteering a high level of public debt which will affect my generation in particular loss of jobs and income and biodiversity which has had the living planet report which is very very depressing but all of this goes to show that there has been an individualization of responsibility which is a very damaging myth we need people to design systems the public sector to set them up and the private sector to optimize and use them thank you jim parker thank you i think you've brought into sharp sharp relief the the multiple dimensions of rising to this challenge and and actually at the difficulty of sustaining that sense of common purpose that characterized the early days of the pandemic so um so thank you for that uh drunkel i want to turn to you um i think over the last six months all of us have become more digital in our daily lives uh for better or for worse um but we certainly have a keen interest in in how the emerging power of digital technology can make a difference on the challenges um we're talking about here um what opportunities do you see for a digital technology to help advance uh ocean health and build a more resilience uh ocean and society yeah thanks jim so it's it's it's a brilliant question i think what struck me about the opening part of this whole debate is how do we make this tangible and not keep it at high level ivory child discussions right so there's so many brilliant solutions out there like at grassroots level in different countries and different geographies with different um societal aims and goals and and so i so if we take i'll take a couple of examples of companies that i've mentored over the last um couple of years so one is for example saffi saffi pads they they create um sanitation products for women from banana stem fibers that would be one example and i'll come back to that in a minute ocean bottle they they use recycled plastic from the ocean to create beautifully designed water bottles these grassroots startups are amazing supported by investment funds like catapult ocean and and that's brilliant now where i see digitalization come in is number one to join these stories together so so how do we start communicating all these amazing things we we heard from the prime minister of st luccia about sargasso and and the opportunities there and to start up there three years ago i was in mexico and to loom having exactly the same conversation so is is mexico and st luccia talking um you know how do we start to drive these conversations so that um we start to see that the power of um that's greater than one single organization or one idea so digitalization in that regard gives the opportunity for connectivity and digital ecosystems to share knowledge and the second thing it does and i think this is crucial based upon the announcement of the common esg metrics i believe so far that as we've measured esg the e has been really prominent and the s and g have have not been they've kind of taken a vaccine and i think they need to be considered in equal importance so that when there is an idea it needs to be supporting the local society and it also needs to be supporting for example diversity in in the gene as a simple example so by having that common set of metrics against which large corporates can sign up and agree to that means there is a single direction which many companies in the digital ecosystem can contribute to that's critical otherwise we're going to have lots of grassroots ideas that have wonderful traction in a very localized space but we need to we need to exponentially grow this very very quickly the other thing with digitalization coming back to your point bark about data for sure date data's key um but it's also about providing transparency so exposing and and promoting transparency of for example supply chains across across the oceans um whether that's shipping whether that's fishing whatever it might be that transparency and visibility is something that large tech large digitalization can provide and technologies with microservices that that connect into the the smaller ideas means that you can bring this together to have a greater power so so i i feel that digitalization from a corporate level provides communication and provides measurements and progress and it also provides the ability to have exponential progress great thank you john cool um there are there are so many threads we could pull out of this conversation and we have limited time but i want to i want to pull one and coming from silicon valley not surprising perhaps which one i choose um but i want to pick up on your your remarks on technology and and circle back to the panel on on how that thread could run through the several things we're talking about and sanjana i'll start with you um i mean you would of the several things you emphasize i mean one was the the vital role of small scale fishers um in in rural economies and in rural food security and their centrality to building a resilient economy as you think about that ambition i mean what thoughts do you have about the role technology can play in technological innovation can play in helping us to create a brighter future for those communities you can also talk about mpa's if you like um but great if you could start with small scale fishers thank you uh so look i think everyone would agree that technology has a enormous role to play um i think we've all been i did my graduate work in in in silicon valley as well in that part of the world and you know when i was in grad school we were stunned at the leaps that were happening in technology i'm still stunned at it i'm also somewhat disappointed about how little it's been applied into conservation and particularly real world conservation problems at scale so you know outside of the study of the very very big so being able to see the planet from space and being able to map it um whether it's a gis arc info asry system or google earth type of system you know that's one big innovation the other one is the study of the very very small being able to get into sort of the dna and understand lineages parentage population structures etc there hasn't been bigger breakthroughs outside of those two in tech you know conservation in the field still feels very much like the same conservation in the field that i was used to 30 years ago whereas everything else from communications to banking to how i order my food how i travel when i travel again or not has has completely been revolutionized so we've been waiting for this revolution and the problem is it almost always starts and ends with drums um so the so the challenge with the tech is not that the tech isn't there but the the folks who focus on tech aren't talking to the people on the ground who are dealing with kind of the real world challenges and then asking how do you really scale it so sometimes the tech is so far advanced that when you actually try to apply it in a place you quickly run into into a challenge um uh and other times you know you by applying tech you actually take jobs away from people who you could be employing in another way now i don't want to be negative about this by any any stretch of the imagination you know in kiribati you know tech has been used amazingly to protect phoenix islands protected area with with specific targeting of ships that have violated the marine protected area for tuna um there are some amazing systems that are watching the oceans new ones are being developed all the time with understanding you know um marine carbon in a much more detailed way on rixala and others uh you know working on it through national geographic so i'm a big proponent of it but i am also really making a plea that the folks who are thinking and working on those solutions understand the enormous barrier to applying it in the places that we need to say uh west papua coastal mozambique west africa coastal libaria where the challenges if you if you just create the solution without the ability to implement and sustain that implementation or implementation over time um it chokes out it only becomes a cool example yeah okay no great thank you um joncle i'm going to come to you on the affordability in the second but uh but first um barca i mean you actually one of the points you highlighted was the importance of of data and of putting data in the hands of local communities so they know the resources that are at stake so they're in a position to manage those resources better um can you speak a little bit more to that what's what's that going to take i mean what are your ideas about how that happens and part responding to the concerns that san jim has raised thank you for for circling back to that point jim um and actually as san jay was was um making his intervention it it really hit me that indeed we should be marrying technology and conservation not politics and conservation um because a lot of um ocean-related ventures tend to be driven by heavily politicized agendas using data and putting it in the hands of communities whether it's in a very um granular form of getting everyone to keep tracking the change of the coastline the accumulation of um oil as has been the case in Mauritius um or building observatories in strategic points whether using all the SIDS as networks to to build those observatories it is it is really really crucial to to um treat it as a public good and treat it with care obviously there are some um some pieces of information that uh for defense purposes cannot be shared but data on the ocean should be a public good and why that is also important is when we have been drafting blue economy strategies and this is not new countries have been drafting blue economy strategies for over a decade now um many sectors in the blue economy are very capital intensive technology intensive which presents a barrier to the communities that are supposed to access the benefits of the blue economy but having data identifying the gaps where local knowledge could be plugged in or even those gaps where local innovation could be used to to find a solution would actually help us build a more inclusive blue economy so at the moment I am very excited to see how the data collection by local citizens in Mauritius is going to play out and I believe this could be a case study um in the future or putting people right in the middle of something which we would say is something that can only be handled by experts but actually is making use of local knowledge so we shall see how that goes perfect thank you so so John cool back to you I mean as I think um we're actually both comments highlight one of the clear challenges is has been you know what are business models that actually support the development and dissemination of deployment of technologies that can be used by communities who are trying to manage their resources so and do you have ideas from your vantage point or examples for your vantage point of of how people have cracked that challenge and and begun to step up to some of the needs that's that Parker describes it's a really good question I'd say I'd actually like to go back to the point that um why are we so far behind with ocean when we're fine with the earth and we're so far ahead and I think it's because I think generally people don't understand what water does and how important it is we all live on the earth every single day it's only those in island states that are living and breathing and feeling the impact of ocean so I think to to to bring that back to the point of affordability and moving things forward is is time that understanding of well why is water critical to my business my household my life my life my my future and that needs to be completely cracked and exposed and the point at which water then becomes a crisis for a given industry is then when when things start to shift so you're seeing in for example the consumer goods industry with the the loop model that was we talked about last year at this summit and it's a brilliant example that goes down to end consumer that says well actually you can have recycled bottles for your shampoo or maybe you don't even need to have water in your detergent the first place you could add you could add that afterwards so it's the understanding of what is in you know what is water and how important it is that's first of all number one and the technology is not necessarily IT technologies but the the technologies physical technologies to extract water from the original product is super key so I'd say loop is a brilliant brilliant example that's gathering pace in with Nestle with Unilever and the lights and PNG and on a on a digital perspective I think I think blockchain kind of got too big for its boots everybody thought blockchain was going to be this holy grail of amazingness but actually the reality is for those on the front line those farmers fishermen they they don't benefit from it at all it's the corporates and the consumers who feel like yes we've done something good for the world so so we need to strip back everything use technology like blockchain like traceability solutions through integration to just expose very simply how everything is connected together and why it's important comes back to education and and simple technologies like QR code technology or traceability digital fingerprint ID is much cheaper to implement and can actually impact the end fisherman or farmer okay now thank you very much and I'm really sorry that we are out of time because there's a lot to talk about here and while I started with tech I mean just let me highlight that that we have also highlighted here the vital importance of governance of finding ways to forge common purpose on these challenges and and on finding ways to mobilize the cash or the capital that will make meeting these challenges possible