My name is Alberto. Like he told you, I'm from Spain. My accent is not the best. I'm here to speak about how to hack all the transfer network of a country, how to make black hacking, how to hack critical infrastructures. So let's begin. This is the index of the main topics I'm going to speak about in this speech. First of all, I want to introduce myself. This is me when I was three, and this thing's handsome, handsome for men. I'm from Valladolid. Valladolid is a city 200 kilometers on the north of Madrid. I'm 24 years old. I'm single. If anyone wants to, okay? No, I'm only like girls. Sorry. Okay, I study maths and system IT. I don't know how to say in English. Maybe it's the same, the career, system ITs. And Salamanca. Salamanca is another beautiful city in Spain. It's near from Madrid, two hours. This is Salamanca. It's so cute. And I want to introduce myself, telling to you how I learn English because this is very important to me. I was in a university city. Salamanca is a university city. In Salamanca, there are a lot of young people. But not only Spanish people. There are a lot of parties. This is the main square in Salamanca on Christmas. All the students go to the main squares and drink a little bit. In these parties, I met a lot of foreign girls, foreign people. So I want to appreciate you, appreciate the American girls. I want to appreciate the Irish girls. I want to appreciate the VISA people who are going there to learn English with me. I want to say thank you to all of you, all of your girls, because they really helped me to improve my English. Okay, so where did I get this material? I'm going to talk about some material that I'm going to be clear in this. I want to be clear in this. I did not do it. No, it's not a joke. Really? Okay. I just don't know the torrent that I found around. Okay. I don't have the knowledge to do those things. I was looking for porn. That's all. Okay, that's all. Perfect. Clear. This thing must be clear. Okay. Who do I think are the really guys who did it? Who did this research? I imagine that something like that. Someone like this guy. I get some pictures in the torrent and this picture was around and I thought this was the really guys who did all this stuff. Okay. Related research. There was a similar talk about the same topic that I'm going to talk this evening now. This is anatomy of a subway hack on DEF CON 16. It was a special, my name is Alberto, like he told you. I'm from Spain. My accent is not the best. I'm here to speak about how to hack all the transfer network of a country, how to make black hacking, how to hack critical infrastructures. Okay. So let's begin. This is the index of the main topics I'm going to speak about in this speech. Okay. First of all, I want to introduce myself. This is me when I was pre and this thing is handsome. I'm from Valladolid. Valladolid is a city 200 kilometers on the north of Madrid and I'm 24 years old. I'm single. If anyone wants to, okay. No.  Sorry. Okay. I study maths and IT, system IT. I don't know how to say in English. Maybe it's the same in the career. System IT. And Salamanca. Salamanca is another beautiful city in Spain. It's near from Madrid. Two hours. This is Salamanca. This is Salamanca. It's so cute. And I want to introduce myself. Telling to you how I learned English because this is very important to me. I was in a university city. Salamanca is a university city. In Salamanca there are a lot of young people. But not only Spanish people. There are a lot of parties. This is the main square in Salamanca on Christmas. All the students go to the main squares and drink a little bit. In this Paris I met a lot of foreign girls, foreign people. So I want to appreciate you, appreciate the American girls. I want to appreciate the Irish girls. I want to appreciate the visa people who are going there to learn English with me. I want to say thank you to all of you. All of your girls because they really helped me to improve my English. Okay. So where did I get this material? I'm going to talk about some material that I'm going to be clear in this. I want to be clear in this. I did not do it. No, it's not a joke. Really. Okay. I just don't load the torrent that I found around. Okay. I don't have the knowledge to do those things. I was looking for porn. The soul. Okay. That's all. Perfect. Clear. This thing must be clear. Okay. Who I think are the really guys who did it? Who did this research? I imagine that something like that. Someone like this guy. I get some pictures in the torrent and this picture was around. And I thought this was the really guys who did all this stuff. Okay. Related research. There was a similar talk about the same topic that I'm going to talk this evening now. This is an anatomy of a subway hack on DEF CON 16. It was a special talk because there was so many conflicts. You can see here. Can I read? Okay. Okay. I'm going to talk about something like that that I found in the torrent. Okay. Oops. Wait. First of all, the first target is a kind of machine who is in the subway station. I'm going to talk a little bit about that. I'm going to talk a little bit about that. I'm going to talk a little bit about that. First of all, the first target is a kind of machine who is in the subway stations. Okay. It's just informative machines. Only to see the best route to going from this station to this other station. The best route to anyway. The information. Information stuff. Only information. Politics information.   They say try me. This is not a real machine. Okay. This is just another machine that say try me. All of you, if you see a machine that say try me. You try, of course. So the finger machine. There were a lot of informative machines in the subway station like I told you before. Okay. The machine has informative function to search the fastest route or to receive info. That's all. That's all.  But then, okay, there are many, many ways to touch it. It's a touch screen machine. Okay. You touch the screen and there are so many ways to go to get some free internet time to surf on the internet, to check your Facebook, to check your emails. It's very easy. This is, so you have to touch this icon. Then you have to touch in this hyper wrinkle. Then you have to check to touch this thing. And then you have the Google for you. Okay. This is so easy. This is not important here. And there are some protection because they try to download executable X file. Okay. But there are so many restrictions. Canine. Okay. This stuff. But is there anything better than a cell? Okay. This, this, this web, this, this machine has a print option. Just say print to a file. Then you go to system 32 and you drag and drop to the CMD execution. That's all. Trivial, trivial. Okay. Then when the guys, the pretty guys that I showed you before, has a common cell, CMD, they connect to the FTP and download a server of a rat, a remote application tool. Okay. That was all. And here you have the black states or the rat, remote application tool to look at the files and all the stuff. That's perfect. But I want to be clear.  Okay. At first. It's just for informative function. The boys who did all this stuff thought that it's not important. There is no gc files. There is no gc application into these machines. But looking for gc files. Okay. The machine just see the router. Okay. First of all, the typical network scan to see if there are a lot of, a lot of, a lot of other hosts in the same, in the same network and this stuff. But there is only the router. The router was the only one who we can see. But the router has not the, the file, the file password. But it's okay. But we, they look at the application who was installed, installed in, in this machine. And they found this application. They said pingeador. Okay. It's like pinger. Ping to make a ping. ICMP ping. Okay. Pingeador. Pinger machine. I don't know what's that. So, I look around. They look around. There was, there was an interesting application called pingeador. There was a config file with the SQL server connection stream. Perfect. The IP. There was a public IP. Not internal IP. Perfect. Okay. But anyway, I say, what was that?  I'm pretty sure that this application is not, is not bad. Okay. It's harmless. A harmless application. But I am, how it works is he makes a ping to the, to the IP of the server and so on. The server has to connect and this is stuff. But here you have all the, all the tables. I make a string. There are strings to get the strings of the, of the, of the application. And I get the tables, the columns. I get some info about the people who develop this application. And finally, I realize that this application is used to control all the stats of all the country, of all the trains of all the country. Okay.   A machine just to, to, to look the faster road to go some, somewhere. But there is installed this kind of application. Why? Why? Stupid.  I had the connection stream. Use, they have the connection stream. User password and all of this. Okay. Whoa, whoa. Ah, okay. I, I don't see it here. I'm going to stay here. Okay. Possible bugs, possible bugs. Some parameters are sent to the application, but one of them called ID terminal is extracted from a text file, TXT file. Okay. So, okay. Just remember this is a SQL server. If we have the, enough privilege, we have, we, we are able to draw a, draw a database, uh, X, X, X XP, CMD cell, net user, to add a user and connect remotely to the system. Uh, just select all the statics of the, of the subway or just to get some info, some GC info about the frequency status, historial, all this stuff. Okay. I have a funny story because someday all these machines disappear. So these guys, uh, went to the, to unestate, some station to ask to a security man why this machine was not in his place, in his place that the machine used to be. And these guys say to me, say to them, okay, okay. Okay. Okay. I want it to be clear. If I say me, this is because it's so personal for me. I found this story. Okay. Yeah. Oh, it's true. My English is the worst. I'm sorry. I was to say. Okay. Let's go. Um, so I go there and the, the, the man told to me that, okay, this machine was removed like two, two weeks ago, but, um, uh, do you know I am a hacker? Oh yeah. You look like, your job is security, security man.  You don't have this cool hair dress. Uh, and, uh, he says, yeah, I know how, how way to go to check my email. I say, oh, your password is mine. Okay. He's more or less, he was this guy. Okay. Okay. Let's, let's continue. Getting cheapest way tickets. This is the kind of tickets using this city that I don't want to say the name. Uh, they try to read, uh, row. Okay. The tickets, the magnetic, uh, strip. They try to read, to, to read it in a, in a, in this thing, the credit car reader. Okay. But, uh, it doesn't work because if you, if you strip faster or not faster, that's different. The dump is different. And okay, it doesn't, it doesn't work. This is the sectors and prices. This is very important. Okay. In these cities, there are a lot of sectors. You can see A, B1, B2. You can see it. Down in the, in the left, in the right. Okay. If you want to travel further, you have to pay more. It's typical. Okay. Um, this is the, those are the, the prices to travel. Okay.   There's a lot of price, a lot of prices and sectors. But you can read, tercera edad. It's like retired people, old people. Okay. The old people, the people who is older than 65 years old, they just pay 11, 11 euros in all sectors. Cool. For them. This is the monthly pass. Okay. There are two important things in this, in this pass that, uh, okay. This is important thing, this number. Well, it's not a number. These letters and numbers, Q, this thing. And the bar code. Do you see the bar code? The bar code. And this pass. Okay. There are two important things. Okay. When I want to, uh, and another thing that's important too. Do you see B2? In the middle, in the head of Lisa Simpson, B2 is the, the, the sector. Okay. Three things. The sector, this number, this string, and the bar code. Okay. The bar code in the past is, is used to renew the monthly ticket. Okay. So I have the, the bar code. I introduce the bar code into the machines and then I pay and I get the new ticket of this month. Okay. The bar code has a, this format. But they realize that the bar code is a character and the past number. I showed you before. Okay. This is the bar code. So if you, if we change this character, we can get the older, older, older people, older people ticket. So, so cheap. We can travel with the, with the older people ticket and we can generate in the machines is not to clone. This is not, I'm, they are, they, they was playing for the, for the tickets. Okay. But they has not 65 years old. So everybody knows that we do fast, fasting, fasting tool, contest application tool, the bar pin through there or, I don't know, IDRA to make fasting, fasting things. But the new fasting techniques for them was fasting man was a guy with bar code in the machines to get, was the real character that he has to use to get the older ticket. Okay. So finally, like after try a lot of bar codes, introducing the bar codes in the machines. Okay. Finally, we got this ticket. This is a 65 years old ticket that we, that they generate in the machines. Okay. We can, they can generate any, any, any number. This is the past, it's hacker. Oh, nice. I did not realize until now. Okay. So they, thank you. They can travel in all the sectors only paying the 11 euros. Okay. So, nice. Okay. Castle this. The ticket is yellow. Do you see it? Yellow ticket. The usual ticket is orange or white. So if someone of the staff look at you when you are introducing the ticket in the machine to enter in the subway or and this, this ticket works with the subway, with the buses, with the local trains, with all this stuff. So if someone, someone of the staff is looking at you when you are introducing your ticket in the machines to go to the, to the subway, they say, hey, come here. So there are our friends, I told you before, had some casualties, 93 euros because this guy look at him when he was introducing the tickets. So, but our friends that was so, so smart, make some improvements in the tickets. Okay. They just put the, the magnetic strip, strip, strip, the magnetic strip and paste it in a usual, in a usual ticket. So finally, FID, next target. Okay. And there is a new FID system in the subway, it works with a zone only, a sector, okay, in the middle of the, of the town only. Okay, but FID is used by the staff. Okay. The staff holds, he set FID in the, in the, in the neck, like you with the, with the batch, with the batches. Okay. So it's easy to get close to them to ask a question. They are so kind. They are so kind. Yep. So if we mix an ultra book or any other computer and a touch stack, this is a reader of RFID tax, just a reader. And you're going for a visit. This is, this I think, I don't know because I'm not the guy, but I think that this is the cigarette box. And you can put the, the touch stack inside the cigarette box and going with the cigarette box, asking for a question. Oh, sorry. Where is the faster way to go to book? Bye. Okay. And then you have the doom of the RFID and you just, it's RFID hacking. Okay. To process the information, to get the, the password of its, of its, okay, to get the password and clone it. And finally, you have a RFID key chain and you can access to all the sectors with this sheet. Okay. I love the, the word sheet. In English, so sheet. Okay. Thank you. Security cameras. Next target. There is a big camera circuit in all the transport network. Okay. All the transport network is, is recorded all the time. There are several control centers like this. You can see that was the operating system used by the, by the staff. Okay. XP. And there is a wireless network. There is wireless network. So many APs in all the transport network. Okay. What? Nice. But, but, wait. The SSID are hidden. Okay. Let's go. Okay. There are a lot of antennas. So many, pardon. So many antennas, planar, omnidirectional. Okay. That's okay. And there is, there are APs that are accessible from everyone. Why? Man in the middle. So easy. Okay. But our guys was nice guys. The guys I saw you before. So they did not, did not do anything with this. So they did not, did not do anything with these things. They used another AP. Okay. Once inside. There was, there was not the, the HCP. Oh. But, Wireshark is our friend. ARP too, of course. So the guys just have to, had to wait to get an ARP packet to know what's the range of the IPs to manually put themselves, this IP, this subway, this, yeah. Okay. First of all, ARP scan. They found three hosts. There was our friend, our AP friend. The router and some other host. Port scanner of the host. Typical network pen testing. Typical. I'm not a magician. They was not a magician. So a router. The router was, I don't know if you see, do you see the, the ports open? Yeah? No? Okay. Wait. 21, 23, 80, and... 1998. Nice. Okay. This is the router, but this is the other host. This is my favorite. 23, 443. Oh, nice. And 50,000. Strange. Okay. They saw 443. So they accessed to this host by throw, through it, 80 DPS. And that's what they found. Oh. Invalid certificate. Okay. Self sign certificate. This is there. Wait. SPC, SPC. What's that? Okay. I'm continuous. And I arrive here. They arrive here. SPC 5300. I have no idea. They have no idea what was that. I don't have idea. I just look the torrent and I find this information. Wait, wait, wait, wait. And I found about this hardware, because it's a hardware. Okay? And I look what it is used for. And there is a web server. This is the web server, the slide before. And you can see, this is, okay, you can control through internet, GMS, wireless detectors, wireless detectors, fire warnings, IPA cameras, audio gate pad, door control. So, like in append testing. I have no knowledge to do that, but some friend told me that append testing is doing like this. Money in the middle. And invalid certificate was used. So it's too easy to use our signature certificate in the middle of the client. And we have the credentials in clear. And this is cool, because there is an invalid certificate. So the admin is used to accept the invalid certificate who looks at the fingerprint of the certificate. Okay. I know you are so great, so maybe you are. Do it. But we can go deeper. More funny. Do you remember the port 5000? No, 50,000. Do you remember in the port scan? Okay. There is an IP from another net mask. Net mask, okay? So we can take our range and we can start another append testing on this network. And this network is okay. But there is, oh, wait, there is a other IP who is sending the same, the same UDP, the same length, and all the same by other IP. I don't know. I don't know. Maybe my friends know, but they didn't write nothing in the torrent, so I don't know. But we can go deeper. We can use an invalid certificate, send it by us and so on. And finally, our last target. Train machines. Used to print tickets from a paid trip. Change tickets. Upgrade tickets. Cancel tickets. Buy tickets with credit cards. Nice. Okay. There was an update. Recently, there was an update. Before that, anyone was able to get a login panel. Okay. I want to, to clear this. The machines were, were touch, touch screen machines. Like our first friend. Okay. Touch, touch screen machines. So there was a place in the, in the screen to, to press this, in this zone and to get a, a login panel. Four digits. Four numbers only to get into the, into the admin panel. Social engineering, do you know about that? So we say, oh, what happened with my ticket? I don't know. I introduced my credit card and it's instead, it's into the machine. What happened? Oh, wait, wait, wait. Four numbers. Okay, but not now. Just a couple weeks ago, this function disappeared. But we can get full access of all of these machines. These machines are present in all the country. All the stations of all the country. Okay. I have a video here. This is the way to access to the CMD. In a video. Okay. Going, going. Select the destiny. Next. Change the, the date of the, the travel. What's that? Internet Explorer. Thanks, Microsoft. Okay. And do you know here? Do you know this stuff? Who is here, these things? Okay. Look. Compliments administration. Internet Explorer function. That's all. Compliments administration. Internet Explorer has this option. You can click here, down. Okay. It's a little geek only here. Okay. But to get this, these windows and then you push, you press a lot of time there. Not responding. So thank you, Microsoft. Do you know this is small? The, the, the, the cable on the, on the screen is small. And this is a touch screen.    But we have our cell, our CMD. Do you see applications? We are there. There's an internal application who has several functions. Accept any credit card, turn on, off the alarm, temperature of the machine. You can control the temperature of the machine. What? You can open the door, the machine door. So, so many stats and parameters of the machine. This is the application. Okay. Here there are a lot of, so many, so many options. You can do a lot of things with the machines. Remote control. All the time there was, we had a, in front of the machine. With the security cameras here. With the security hacking voice around there. Okay. So this is, this is important. So the guys that did all of it wants remote control. Like every one of you. So there is an application for the remote control but it can be only used if you are in the internal network. So this is not useful. So they want to remote control the machine, of course. They try to install a Trojan, downloading the server, the server of the Trojan by through HTTP or HTTPS. But all the records were forbidden. Only internal, only internal web page were allowed. Try to use FTP. It didn't work.  Losing hope. The machine resolves DNS request. Nice. So they thought, they thought UDP traffic was a low. Okay. Easy. They tried using FTP through UDP. TFTP. Okay. Do you know old fashioned TFTP? Okay. TFTP is installed in all Windows versions. The machines run like it's very traditional. So there was a TFTP client was installed in this machine. So perfect. But time out. It didn't work. But they still thought UDP traffic were low but only using 53 port. DNS. So TFTP used 69 by default. So they changed the TFTP control settings to change the TFTP destination port to the 53. And then in his house, they make a nut to redirect. Do you know that? But time out. But finally, they realized that this is the network map. The machines, router, DNS, a firewall, and the lovely internet. Okay. All the traffic sent from router to internet is dropped. It's not a low. But the DNS has a rule in the firewall that allow all the traffic. Only is the traffic come from this DNS. If you make an slookup, directly to Google, it doesn't work. You have to use this DNS. And use the implementation of the DNS protocol. Okay. If I have no information, I ask to another DNS. And these things. So this is the same I told you. So. Okay. Okay. To remotely control the machine, they had to use a rat. Remote application tool through DNS. Right? There is an interesting project called DNS cat who makes something like that.  You know, this friend. I think it's maybe more than the first one. The real guy. I think so. So these guys developed a modular rat using Python. Yeah. Python. It's heavy. Because you have to use Py2x to convert, to load all the libraries. It's heavy. But it's so easy to develop. It's too easy. Okay. The rat server. Okay. The server who was installed in the machine. In the hacked machine. Just ask to a DNS server for A register. Okay. The DNS response. And if some of the response has some pattern, the infected system did some action. Okay. If you, if you resolve my domain, it's one, two, three, 52. The DNS tool take the 52 and say 52 is there. A directory listing. Maybe. Or is. Whatever. It did not stabilize, establish a connection. Okay. Nice. Finally, the executable file was downloaded using TXT records of a controlled DNS server. Okay. We have to install the server. The server of this Python tool. So. Perfect. They use that to make the DNS request. The machine was remotely under their control. Perfect. Pivoting. The operating system using the machine was XP as a service pack too. Somebody knows NetAppy. NetAP or NetAppy or NetAppy in Spanish. And this is the final slide you can hold. Once the machine and all the other NetAppy machines was under control, it's time to look for UEC application and files. All the machines stored without encryption, the CC dumps of the clients. The credit card of all the clients. It's not necessary to make a hooking of the application. It's not necessary. Is there? Okay. It means that the bad guys, if those guys I told you before, if they were bad guys, they are able to get all the CC dumps of all the customers of the entire transport network of the country. Of all the country. Okay. So. Epic fail. Okay. That's all. I want to thank you for listening here today. I want to, wait, I want to appreciate the real guys that did all I have told you to all of you for listening to me today, of course.  To my family, a friend. This is, yeah, I appreciate that. All those who want to understand how and why things work. Okay. Continues in this way. Thank you. We can do it here because I've also got to take it down here. Okay. Okay. We are going to be doing Q&A in Q&A room one, if you want to follow us. And, yeah. That's it for this room. I have a talk because there was so many conflicts. You can see here. Can I read? Court looks MIT students from sewing subway hack. Do charters help to deaf con speech on subway car hacking? So on. Okay. So this is the related research. I'm going to speak about something like that that I found in the torrent. Oops. Wait. First of all, the first target is a kind of machine who is in the subway stations. Okay. It's just informative machines. Only to see the best route to going from this station to this other station. The best route to anyway. The information. Information stuff. Only information. Politics information.   They say try me. This is not a real machine. Okay. This is just another machine that say try me. All of you, if you see a machine that say try me. You try, of course. So the information. There were a lot of information machines in the subway station, like I told you before. Okay. The machine has informative function to search the fastest route or to receive info. That's all. That's all.  But then, okay, there are many, many ways to touch in. It's a touch screen machine. Okay. You touch the screen and there are so many ways to go to get some free internet time to surf on the internet, to check your Facebook, to check your emails. It's very easy. This is, so you have to touch this, this, this icon. Then you have to touch in this hyperbankle. Then you have to to check, to touch this, this thing. And then you have the Google for you. Okay. This is so easy. This is not important here. And there are some protections because they try to download executable x file. Okay. But there are so many restrictions. Can I? Okay. This stuff. But is there anything better than a cell? Okay. This, this, this web, this, this machine has a print option. Just, just say print to a file. Then you go to system, system 32 and do drag and drop to the CMD execution. That's all. Trivial, trivial. Okay. Then when the guys, this pretty guys that I saw you before, has a common cell, a CMD. They connect to the FTP and download on a server of a rat, remote application tool. Okay. That was all. And here you have the black states or the rat, remote application tool with the, to look the files and all the stuff. This. Perfect. But I want to be clear.  Okay. At first. It's just for informative function. The, the boys who did all this stuff thought that it's not important. There is no juicy files. There is no juicy application into these machines. But looking for juicy files. Okay. The machine just see the router. Okay. First of all the typical network, network scan to see if there are a lot of, a lot of, a lot of other hosts in the same, in the same network and this stuff. But there's only the router. The router was the only one who we can see. But the router has not the, the file, the file password. But it's okay. But we, they, look at the, at the application who was installed, installed in, in this machine. And they found this application. They said pingeador. Okay. It's like pinger. Ping. To make a ping. ICMP. Ping. Okay. Pingeador. Pinger machine. I don't know what's that. So I look around. They look around. There was, there was an interesting application called pingeador. There was a config file with the sql server connection stream. Perfect. The IP. There was a public IP. Not internal IP. Perfect. Okay. But anyway, I say what, what was that?  I'm pretty sure that this application is not, is not bad. Okay. It's, it's harmless, a harmless application. But I am, how it works is he makes a ping to, to the, to the IP of the server and so on. The three-way handset to connect and this stuff. But here you have all the connect, all the tables. I make a string. There are strings to get the strings of the, of the, of the application. And I get the tables, the columns. I get some info about the people who develop this application. And finally, I realize that this application is used to control all the stats of all the country, of all the trains of all the country. Okay.   A machine just to, to, to look the faster road to go some, somewhere. But there is installed this kind of application. Why? Why?  I have the connection stream. Use, they have the connection stream. User password and all of this. Okay. Whoa, whoa. Ah, okay. I don't see here. I'm going to stay here. Okay. Possible bugs. Possible bugs. Some parameters are sent to the application. But one of them, called ID terminal, is extracted from a text file, txt file. Okay. So, okay. Just to remember, this is a SQL server. If we have the, enough privilege, we have, we, we are able to draw a, draw a database, exec, xp, cmd, sale, net user to add a user and connect remotely to the system. Just select all the statics of the, of the subway or just to get some info, some juicy info about the frequency status, historial, all this stuff. Okay. I have a funny story because some day, all these machines disappear. So these guys went to the, to some station to ask to a security man why this machine was not in his place, in his place that the machine used to be. And this guy said to me, say to them, okay, okay, okay. Okay. I want to be clear. If I say me, this is because it's so personal for me. I found this story. Okay. Yeah. Oh, it's too, my English is the worst. I'm sorry. I was to say. Okay. Let's go. So I go there and the man told to me, okay, this machine was removed like two weeks ago. But do you know, I am a hacker. Oh, yeah. Your job is security, security man.  You don't have this cool hair dress. And he says, yeah, I know a way to go to check my email. And I say, oh, your password is mine. Okay. He's more or less, he was this guy. Okay. Okay. Let's, let's continue. Getting cheapest way tickets. This is the kind of tickets using this city that I don't want to say the name. They try to read a row. Okay. The tickets, the magnetic strip, they try to read it in this thing, the credit card reader. Okay. But it doesn't work because if you strip faster or not faster, the dump is different. Okay. It doesn't work. This is the sectors and prices. This is very important. Okay. In these cities there are a lot of sectors. You can see A, B1, B2. You can see it. Down in the left, in the right. Okay. If you want to travel further, you have to pay more. Typical. Okay. This is the, those are the prices to travel. Okay.   There is a lot of price, a lot of prices and sectors. But you can read Tercera Edas. It's like a retired people, old people. Okay. The old people, the people who is older than 65 years old, they just pay 11 euros in all sectors. Cool. For them. This is the monthly pass. Okay. There are two important things in this, in this pass that, okay. This is the important thing, this number. Well, it's not a number. These letters and numbers, Q, this thing. And the barcode. Do you see the barcode? The barcode and this pass. Okay. There are two important things. Okay. When I want to, another thing is important too. Do you see B2 in the middle, in the head of Lisa Simpson? B2 is the sector. Okay. Three things. The sector, this number, this string and the barcode. Okay. The barcode in the pass is used to renew the monthly ticket. Okay. So I have the barcode. I introduce the barcode into the machines and then I pay and I get the new ticket of this month. Okay. The barcode has this format. But they realize that the barcode is a character and the pass number I showed you before. Okay. This is the barcode. So if we change this character we can get the other, other other people, other people ticket. So it's so cheap. We can travel with the, with the other people ticket and we can generate in the machines is not to clone. This is not. They are, they were playing for the, for the tickets. Okay. But they has not 65 years old. So everybody knows that we do fast, fasting, fasting tool, contest application tool, the barping through there, or I don't know, Hydra to make fasting, fasting things. But the new fasting techniques for them was fasting man was a guy with barcode, trying every barcode in the machines to get was the real character that he has to use to get the older tickets. Okay. So finally after try a lot of barcodes introducing the barcodes in the machines. Okay. Finally we got this ticket. This is a 65 years old ticket that we, that they generate in the machines. Okay. We can, they can generate any, any, any number. This is the past. It's hacker. Oh, nice. I did not realize until now. Okay. So they, thank you. They can travel in all the sectors, only paying the 11 euros. Okay. So, nice. Okay. Castle this. The ticket is yellow. Do you see it? Yellow ticket. The usual ticket is orange or white. So if someone of the staff look at you when you are introducing the ticket in the machine to enter in the subway, or this, this ticket works with the subway, with the buses, with the local trains, with all this stuff. So if someone, someone of the staff is looking at you when you are introducing your ticket in the machines to go to the, to the subway, they say, hey it's, no. Come here. So there are our friends, I told you before, had some casualties, 93 euros, because this guy looked at him when he was introducing the tickets. So, but our friends that were so, so smart make some improvements in the tickets. Okay. They just put the, the magnetic strip, strip, the magnetic strip and paste it in a usual, in a usual ticket. So finally, FID, next target. Okay. There is a new FID system in the subway. It works with a phone only, a sector. Okay. In the middle of the, of the town only. Okay. But FID is used by the staff. Okay. The staff holds his RFID in the, in the, in the neck, like you with the, with the batch, with the batches. Okay. So it's easy to get close to them to ask a question. They are so kind. They are so kind. Yep. So if we mix an ultrabook or any other computer and a touch tag, this is a reader of RFID tags, just a reader and you're going for a visit. This is a, this, I think, I don't know because I'm not the guy, but I think that this is the cigarette box and you can put the, the touch tag inside the cigarette box and going with the cigarette box asking for a question. Oh, sorry. Where is the faster way to go to book? Bye. Okay. And then you have the dump of the RFID and then you have the ID hacking. Okay. To process the information, to get the password of it, of it, okay, to get the password and clone it.    Security cameras. There is a big camera circuit in all the transport network. Okay. All the transport network is, is recorded all the time. There are several control centers like this. You can see that what's the operating system used by the, by the staff. Okay. XP. And there is a wireless network. There is wireless network. So many APs in all the transport network. Okay. What? Nice. Bad. Bad. Wait. The SSID are hidden. Okay. Let's go. Okay. There are a lot of antennas. So many. So many antennas. Planner of Dinex, omnidirectional. Okay. That's, okay. And there is, there are APs that are accessible from everyone. Why? Because they are not available in the middle. So easy. Okay. But our guys was nice guys. The guys I saw you before. So they did not, did not do anything with these things. They used another AP. Okay. Once inside, there was, there was not the, the HCP. Oh. Bad. Wireshark is our friend. Yeah. Okay. Okay. So, the guys just have to, had to wait to get an ARP packet to know what's the range of the IPs, to manually put themselves, this IP, this subway, this, the, yeah. Okay. First of all, ARP scan. They found three hosts. One was our friend, our AP friend. The router and some other host. Port scanner of the host. Typical network pentesting. Typical. I'm not a magician. They was not a magician. So, router. The router was, I don't know if you see, do you see the the ports open? Yeah? No? Okay. Wait. 23, 80, and 1998. Nice. Okay. This is the router, but this is the other host. This is my favorite. 23, 443. Oh, nice. And 50,000. Strange. Okay. They saw 443 as a HTTPS. So, they access to this host by a HTTPS. And that's what they found. Oh. In Bali certificate. Okay. Self sign certificate. This is the, wait. SPC, SPC. What's that? Okay. I'm continuous. And I arrive here. They arrive here. SPC 5300. So, I have no idea. They have no idea what was that. I don't have idea. I just look the torrent and I find this information. Wait, wait, wait, wait. And I found about this hardware, because it's a hardware. Okay. And I look what it is used for. And there is a web server that, this is the web server, the slide before. And you can see. Okay. You can control through internet, GMS, wireless detectors, wireless detectors, file warnings, IPA cameras, audio gate pad, door control. So, like in append testing. I have no knowledge to do that, but some friend told me that append testing is doing like this. And money in the middle. And in Bali certificate was used. So, it's too easy to use our signature certificate in the middle of the client. And we have the credentials in clear. And this is cool, because there is an in Bali certificate. So, the admin is used to accept the in Bali certificate. Who looks the fingerprint of the certificate. Okay. I know you are maybe you are. Do it. Do it. But we can go deeper. More funny. Do you remember the port 5000? No, 50,000. Do you remember in the port scan? Okay. There is an IP from another net mask. So, we can check our IP. And we can start another append testing on this network. And this network is okay. But there is oh, wait. There is other IP who is sending the same. The same UDP, the same length, and all the same by other IP. So, we can go deeper. We can use an in Bali certificate and so on. And finally, our last target. Train machines used to print tickets from a paid trip. Change tickets, upgrade tickets, cancel tickets, buy tickets with credit cards. Nice. Okay. There was an update. Before that, anyone was able to get a login panel. I want to clear this. The machines were touch screen machines. Like our first friend. Okay. Touch screen machines. So, there was an update.  Four digits. Four numbers only. To get into the admin panel. Social engineering. Do you know about that? Oh, what happened with my ticket? I don't know. I introduced my credit card to my friend. Okay. Not now. Just a couple weeks ago, this function disappeared. But we can get full access of all of these machines. These machines are present in all the country. All the stations of all the country. Okay. I have a video of access to the CMD. In a video. Going. Select the destiny. Next. Change the date of the travel. What's that? Internet Explorer. Thanks, Microsoft. Okay. Do you know this stuff? Who is here, these things? Okay. Look. Internet Explorer function. That's all. Internet Explorer has this option. You can click here, down. It's a little geek. But to get these windows. And then you press a lot of time. There. And not responding. So, thank you, Microsoft. Close. Do you know, this is small. The keyboard on the screen is small. And this is a touch screen.    Okay, but we have our CMD. GCE applications. We are there. There's an internal application who has several functions. Accept any credit card turn off the alarm. Temperature of the machine. You can control the temperature of the machine. You can control the temperature of the machine. You can control the temperature of the machine. This is the application. Okay. Here there are a lot of so many options. You can do a lot of things with the machines. Remote control.  They were there. Okay. So this is important. So the guys that did all of it wants remote control. Hey, every one of you. So there is an application for the remote control but it can be only used if you are in the internal network. So this is not useful. So they want to remote control the machine, of course. They try to install a remote control through HTTP or HTTPS but all the records were forbidden. Only internal web page were allowed. Try to use FTP. It didn't work.  The machine resolves DNS request. Nice. So they thought UDP traffic was allowed. Easy. Using FTP through UDP. TFTP. Okay. Do you know old-fashioned TFTP? Okay. TFTP is installed in all Windows versions. The machines run like it's a professional. So there was a TFTP client was installed in this machine. So perfect. But time out. It didn't work. But they still thought UDP traffic were allowed but only using 53 port DNS. So TFTP used 69 by default. So they changed the TFTP control settings to change the TFTP destination port to the 53. And then in his house they make a nut to redirect. But time out. But finally they realize that this is the network map. The machines, router, DNS, a firewall, and the lovely internet. Okay. All the traffic sent from router to internet is dropped. So, but the DNS has a rule in the firewall that allow all the traffic. Only if the traffic come from this DNS. If you make an NS look up directly to Google, it doesn't work. You have to use this DNS and use the implementation of the DNS protocol. If I have no information, I ask to another DNS. So, this is the same I told you. So, okay. To remotely control the machine, they had to use a rat remote application tool through DNS. Right? There is an interesting project called DNS cat who makes something like that. But our friends have a bunch of geeks. You know. This friend. I think it's maybe more than the first one, the real guy. I think so. So, these guys developed modular rat using Python. Yeah. Python. It's heavy because you have to use Py2x to convert to load all the libraries. It's heavy but it's so easy to load. The rat server. The server who was installed in the machine. Just ask to a DNS server for a register. Okay. The DNS response. If some of the response has some pattern, the infected system did some action. Okay. If you resolve my domain, it's 502. The DNS tool takes the 52 and says 52 is directory listing. Or is whatever. It did not establish a connection. Okay. Nice. Finally, the executable file was downloaded using TXT records of a controlled DNS server. Okay. We have to install the server. The server of this Python tool. So, perfect. They use that to make the DNS request. The machine was remotely under their control. Perfect. Pivoting. The operating system using the machine was XP service pack 2. Somebody knows what it is. Netapi. Netapi in Spanish. And this is the final slide you can hold. Once the machine and all the other machines was under control, it's time to look for application and files. All the machines stored without encryption, the CC dumps of the clients. The credit card of all the clients. It's not necessary to make a hooking of the application. It's not necessary. Is there? It means that the bad guys, if those guys I told you before, if they were bad guys, they are able to get all the CC dumps of all the customers of the entire transfer network of the country. Of all the country. So, epic fail. Okay, that's all. I want to thank you for listening here today. I want to wait. I want to appreciate the real guys that did all I have told you to all of you for listening today, of course.  To my family, a friend. I appreciate that. All those who want to understand how and why things work. Okay, continue in this way. Thank you.


Hi, it's Hot Mustangs Stadium after Stevenson pulls off the comeback, wins 13-12 in double overtime tonight over the number 13 Stevens Ducks. Glenn Clark, Peter Green, now joined by the head coach, the Mustangs coach, Paul Cantabane. Coach, we were talking in the post game about what went on in the early portion of the season, and you guys playing four games that were one or two goal games that didn't go your way against great opponents. How much did your team learn from those games they were able to translate tonight to pull this off? Well, I think we learned a lot from them. We've been in a lot of big games, we played some of the best teams in the country week in and week out, so the situations we've been in didn't really affect us. I think we always knew that we were going to make some type of run. I didn't know we were going to make that big of a run, but I think we made some type of run, and I think they did a great job. All those things, Ethan, especially to score that goal, because he had that unfortunate shot in the Gettysburg game that kind of cost us there, and I think he's learning a lot, but the changes we made, and these guys really showed a gut check. Sam Ross in the second half, he was really not good in the first half, he apologized to me actually in the locker room, but first play, but he played so much better in the second half and gave us an opportunity. I think how we changed our defense to go with the two shutoffs and let our poles play them caused them a lot of problems, and they followed us a lot. I think they gave us some life. They had a lot of fouls, they were crushing us a little bit, and we were getting some calls. Our man up has to be better than two of ten though, but I think it's a really good win for us because the guys, they play so hard. They're giving everything they had. They're diving all over the field, doing a great job, and Justin, the way he faced off today, gave us a shot. We made a big change in halftime for every faceoff. We wanted to go two shorts because we knew we were going to get it. They were kind of riding us a little bit, and we did a great job, and I think that really turned it around for us getting those easy possessions time again and wearing their defense down. They had to go to a little zone with that, but they played hard. They were there, and they did a good job, and they got up on us, but I'm proud of what our guys did and how hard they played and got back into it. Coach, defense only gave up three goals in the second half. Was there a tactical change, or was it more so execution? Well, I think we changed some things. We had to take Tom off of 13, and Tom wasn't playing him. He was being real lazy, and I told him that. So we put Howard on him to change, and then they were just kind of running by us, and we weren't really doing some good jobs.  I think things changed. They really struggled to get offense and quality shots, and we did a good job of that, and Sam started seeing the ball better and helped us, and so that tackle to change right there, and the two short sticks on the wings of the face-off I think really helped us get extra shots. And I thought offensively, even though we only had four goals at the half, I thought we had great opportunities, and their goalie played really well and got some big shots, and we were in there, so I thought we were getting some good opportunities. It's just that we weren't putting them away, and we weren't getting any second chances because he was saving them, no rebounds, they were going the other way. And they were missing the cage a little bit and getting multiple shots, and so that was kind of the big change for us. I think the defensive tactics changed a lot for us there. So much of what you've been talking about is X's and O's, and it's important, but I feel like heart is something that we should talk more about, because I feel like coming away from this, there's got to be something to be said about the heart of this team. Well, we challenged them at halftime. I didn't think that was our team. I didn't like the way we played. I thought I was really disappointed with what we're doing, the mistakes we made, the drop passes, the turnovers. That's not how you play lacrosse. I thought it was a really bad effort by us in that half, that's how we played overall, and I thought the mentality, the ground ball play, wasn't good, and we challenged them a little bit, and they came out flying. We got the two goals right away, and I think that we had some other opportunities, and they canned a few shots, and then they really showed the heart and how hard they played and how much it means to them. I think it means a lot to this group. So that's a big win off a very quality team that's beaten a lot of teams and scoring a ton of goals against a lot of teams, and that's a good win for us. No doubt about that, and you continue at Saturday. Another tough one, go on the road, and at play, so you played a lot of great games over the years. Every time you go to Lynchburg, it's a great game. So it's Friday night down there, we had to travel down that day, and they're desperate too. They've lost a couple tough ones, but they played a hell of a schedule like we have, and so they're a really good team, and we're going to have to play one of our best efforts in four quarters, not two, in order to win the game. Coach, congratulations on a special one tonight, and thanks for coming up and chatting with us. Thanks a lot, it was fun.


A report commissioned by the UK government and adopted by the United Nations estimates that 10 million deaths may occur each year by 2050 due to antimicrobial resistance if nothing is done. But something is being done. The Food and Agriculture Organization, FAO, together with the Government of Kenya have designed interventions to fight antimicrobial resistance in poultry production in Kenya. We have deployed interventions that are related to proper feeding, vaccinations, and improving hygiene. Antimicrobial resistance, shortened as AMR, is a global public health threat. In simple terms, antimicrobial resistance refers to the situation where the germs are not killed by the drugs that used to kill them before. The process of antimicrobial resistance, though occurring naturally, is escalated by misuse and overuse of antibiotics. To address this, interventions need to be instituted in both human and animal health. Gatundu North has one of the highest concertation of farmers involved in rearing of commercial layers. In a knowledge, attitude and practices study done in this area, FAO found out that out of the ten most common diseases in poultry, four can be prevented through vaccination and six can be prevented through hygiene. FAO then conducted a pilot project that involved training of about 50 poultry farmers in best practices in poultry production. The project adopted the farmer-field school approach where the farmers were divided into three groups. Learning took place in a class without walls and a fully stocked poultry unit was also availed for practical lessons. We are trying to train our farmers to layer their chicken, produce eggs that are free from antibiotics. FAO. It is possible and profitable to rear chicken without the use of drugs. These antimicrobial resistance is brought about by misuse and overuse of drugs, and drugs are mostly needed to cure diseases. Therefore if diseases are prevented there would be no need for drugs, and hence reduced occurrence of antimicrobial resistance. Since most diseases are brought by about unhygienic conditions, improvement of hygiene and biosecurity was the main focus of training in the farmer-field schools. Already, the farmers have begun implementing the lessons learned in their poultry farms. The farmers have actually changed. They are already practicing what we've been able to teach them or to train them. And at the moment, the three groups are already able to produce eggs which are free from antimicrobial residues. My name is Steven Gechohimboro. When you observe proper hygiene, you hardly make use of any drug. And we have realized that is true. I don't remember when the last time that I used drugs. I personally, since FAO came in, actually when checking my record, I wondered what happened to the diseases that used to inflict my bugs. Steven is planning to reconstruct his poultry unit to conform to what he has learned in farmer's field school. Nancy on the other hand has improved her biosecurity measures. This is the 26th week of training and the birds in the poultry show house have attained peak production, with no death from disease. We are hoping that this knowledge the farmers have received will be cascaded outwards. In fact, it can be done internationally. The farmers are proud and happy as they are graduating in a ceremony presided over by FAO and government representatives. I am not just like any other farmer. I have graduated and I am very happy about that. I have a certificate that can actually be presented somewhere in an office. And that means that I have been given a go ahead to do as much as I would like about those bugs. I have a lot of knowledge.


At Microsoft Inspire, Meta announced it will open source its large language model, Llama 2, under a Meta created license. So it's not one of the standards license, but it is an open source license. It'll be free for commercial and research uses. Qualcomm announced that it's going to take advantage of that and bring Llama to its chips. So laptops, phones, headsets starting in 2024, apps running on those devices could use Llama without having to go to the cloud to do a large language model. That keeps all your all your data local. That keeps it out of anybody else's hands.  I guess that's one way to catch up to the competitors.


Welcome back it's Thursday and that means acting analysis and today I'm gonna talk about True Detective season 1. I was a big fan of season 1, not so much season 2 there are some good parts here and there but I really really like season 1 and today we're gonna talk about this specific scene you're gonna have a link in the description to the separate upload that shows the whole thing and I'm gonna go straight into the pieces that I liked. So as we have the scene it's already awesome in terms of body language how you have hands in pockets these guys the heads tilted it's already telling us how much they are enjoying being here there's something about opening a scene and having a character already in a specific pose that tells us something about their state of mind their emotional place so when you start your shot be really mindful of how is my character posed in a previous movie that I uploaded I talked about body posture how you can have a specific posture that gives us a certain inclination of how the character thinks and everything that you need to be mindful of when you start your shot so it's not just your T pose arms down and then you just kind of move the character make sure that the character in its rest pose is already in character so to speak so for them this is already awesome I love that relationship here already but you know they're still friendly they shake hands he seems to be the most open arms out there's something somewhat inviting about this these guys do not care whatsoever they're here because they have to but what I like about this is here this interaction so you have him holding food and you know they're looking at characters and whatever they're doing here and I love this this exchange is fantastic exactly this frame he is passing over food he just looks at the food because it's cutting his peripheral vision he will grab it and then that's it but the cool thing is that he doesn't look at him he doesn't look at him and to me this implies a certain relationship where this is not the first time they've done this their partners they work together he might give him food every Thursday or every day there's just something some routine that they have and he comes in here's your food oh yeah here's my food and just that gesture and the lack of eye contact to me implies history so there's more to those characters than just they're here eye contact talking and kind of going through their their one two three steps of these are my acting moments that I got to deliver this dialogue there's just something to it it's an interesting thing you can add to your shots where you can imply more interest in the scene you can have more interest between the characters there's more relationships between them and you can expand the scope of the shot the scope of your character and your character relationships without adding too much so again I'm a big fan of head accents and and head darts you know looks and but also eye contact and that to me is is a really cool moment of here's the food oh yeah thanks it's just some casual I would say ritual but just something that they're used to and it's just a routine that they have they continue to sorry this guy just cracks me up they keep talking they have their business here he keeps him up to date on what happens and this is another section here that I love hey I like how you have him looking over here it's very clear to the arms we got a look over here he stops his movement there's more movement here and he's just enough leaning to reveal this it's interesting staging with him in the middle there but I love what he goes uh huh and drops that he could just take this paper and go okay they're here or okay it's slide it but there's just some flippants type of really mm-hmm that's why they're here okay so that just that kind of that arc out in the kind of kind of throw of the paper every move that you do every gesture with the hand every eye dart every eye closing whatever you do just think of it not in terms of movement I have to go from A to B but think about well if I move this quickly or if I move my head slowly or quickly every single frame the timing of every move will tell us something about the character and how he or she feels how their relationship is between the characters what they think about this moment how they react to a certain moment just like in this case how he reacts to that piece of information which also reminds me of a cool little moment in Cameron Fielding's clip where you have an off-screen character with the newspaper kind of doing that flip that and it's such a cool little moment it's nice animation the timing is really neat and again just adds something to the shot that's just interest and cool showcase of timing to me it's always something where you have your main character and do your awesome animation awesome acting and then you can add in you can kind of sneak in high polish some interesting timing without making it the centerpiece it's like when someone has a tie and looks around and the tie is moving or in this clip by Yermol where you have the nun playing not playing but kind of you know she's kind of nervous and she plays with that prop and it's a prop that fits the character it's something that she would have but it's really well animated the polish is really good and to me it's not distracting but you can kind of show off your detail animation skills with something that supports the character just something that's part of the shot and i like those little details now i usually spend too much time on this where it gets kind of i go up on the tangent and animate that way too much just like in this shot where i animated something a long time ago from pitch black and the the bird flies through and there's all this stuff flying around i have way too much fun animating this stuff i highly recommend that you do this at the very end that you don't do this at the beginning i kind of get distracted and do this kind of in the middle instead of just as kind of a flourish so keep it as kind of an add-on and it's a cool simple little move but still it tells us something about how the character feels and it's all through the timing of how am i doing this arc hold out and then come back how quickly is this newspaper dropping down it's not very complex in terms of mechanics and complexities and constraints all kind of stuff but it still tells us something about the character then we move on to this here where he goes on and on tells him what's going on yeah yeah yeah he agrees and disagrees and the cool thing is this is a simple detail but again it's something that can expand your shot where it's not just this scene with this character and it's empty it's a good composition it's kind of in your thirds and everything has a little set that's cool but what i like about this here is actually this character in the back and you don't even need to have her in the previous shot if you just have a single shot that's this you can still have a hand coming in and they talk in this scene but they don't really have to it could just be a hand comes in coffee or whatever it is beer tea chocolates i mean it could be whatever right but it's an additional detail where your character can say something and it can perform and while he or she performs oh thanks grabs this and continues it's just additional business that to me is just interesting secondary action there's going to be a whole fna about secondary action where i'm just a big fan of characters doing something where it's not just for the sake of doing but like they're doing something that's part of their routine their daily life they're not in a vacuum like you know that matrix scene where it's just empty and there's presenting some performance to the camera they're going about something in the kitchen or they're folding laundry or they're in office grabbing things or in this case talking to someone oh thanks for the coffee it just adds life to me it adds like more to the world not just a simple character in an empty room it's just more to the scene interesting handoff that you can show in terms of animation detail work in the fingers in the posing how he holds his cup could just be this it could be something delicate it could be this and go and then because kind of that because it's hot so again you can show off whatever like little character details based on the prop i would just add a prop just for the sake of adding a prop but i think in this case it could be cool detail so he continues the same thing here in terms of eye lines he really is not a fan of this whole relationship and those other cops asking him for things he could just get up lean forward give him this folder you know could be maybe like here and then he waits for the person to reach forward and hands it off but no he just kind of throws it but without looking so if you look at this scene you can see how he just throws it looks somewhere else no eye contact you just disconnects from those characters he completely disrespects them he doesn't care what they do his head tilt couldn't be further he's gonna start falling over leaning over but you can see they're not very happy about this but i just love that little moment again it's all about eye line there's so much you can do with you staring at a character you're kind of kind of looking away there's something i'm going to post in the future about er there's the Dr. Benton he has this thing where he constantly looks away he's never able to hold focus he has no eye contact he just either he's nervous or he's embarrassed or he's just not comfortable or most of the times he's just kind of always thinking ahead always of something else he's never there and invested in the character that he talks to that's a different acting analysis movie for a later point but in this case again eye contact awesome here and then you got this little moment here where he has that yeah it makes you feel like real cops it's a little whatever potentially inappropriate gesture you can interpret maybe who knows again doesn't really care about them makes fun of them but what i like about this is that it's it's a gesture that's off-screen and one of the traps in animation is that you want everything to be very clean real nice silhouette now i'm not saying don't do it it shouldn't be confusing it shouldn't be a crappy silhouette at the same time not everything has to be all super clean in there and i'm a fan of performances where the character is just in character they just perform and you just happen to frame it this way and a close-up and a full body and you just capture a gesture or not and obviously if it's an important gesture that's off-screen and the audience misses the point then that's not well done but this is something where you can have gestures that are off-screen you can still kind of get what's going on you still understand the main action the main intent in the way it's framed just like in this scene from um warrior with Tom Hardy doing this this pointing gesture off-screen so he does this type of thing but it's it's off-screen but you can tell by the movement of the arm how he takes the body how he takes his head there's something going on you can kind of guess he's probably doing something like that you're not missing out when you don't see it but it still adds something to the performance where you don't just have everything still because that's how we frame it so to me i would always kind of look at what would be the natural performance even when you shoot reference act it out act it out the way you would do it gesture or not what's kind of the natural feeling for this scene and then you look at your framing i mean you would kind of act it out based on a framing that you chose beforehand but sometimes you kind of change the camera as you animate potentially but i would look at what's a natural performance if you need something very specific with something holding to camera or a specific acting moment with whatever you have obviously frame it correctly but there are moments where you can just do a gesture off-screen and then it's okay when you just have the the intent through that gesture but it's still off-screen right it doesn't it doesn't really you don't really miss anything when you don't see it then after this is probably one of my favorite things he is done with this conversation he turns around and he turns his back towards them he completely disconnects like i am done with this and they have this moment of this leaning like okay yeah that's it but they don't leave right away this they stare at him like i can't believe he's such a turd and what i love about this is a just this there's no audio he just does this full on acting with his body like i'm done with you but then i love this he doesn't quite completely sit down and he does sit but it's not a complete settle sits and holds and then he waits and again there's no real eye contact he just looks here and it's kind of a look of why are you still here i'm looking back i'm going sitting there going really it's not this would you please go it's kind of like why are you still here okay now i'm done it's that type of thing and i love that in the scene where you can see it again here sits down a bit holds and then he moves forward then he's done which of course everybody notices and he is even more ticked off and the scene continues so this sequence is not that long but there's so many good things in there in terms of eye contact when do you have it do you have it or not do you stare at your blink do you have interaction with other characters on screen or off screen do you have a natural performance that just happens to be framed like this but you still do some gesturing that's off screen but it's just a bit more natural that you just happen to capture like this and then looks and gestures or behaviors or passing along props just things you can show when you have two characters without actual dialogue you don't you can just imply your relationship by how they hand things off or how they look at each other or don't look or whatever you can imagine for your characters there's something that you can always add that's outside of your audio again you've heard this probably many times if you watch all my clips that i'm a big fan of adding acting choices outside of when the dialogue happens so you have more control so you can add your creativity to your shots there's more in this first season there's another clip that i want to show later on but that's it for now again there's a link in description if you want to watch the whole thing without any narration from me if you like this hit the like button if you want to see more and be alerted by all the uploads hit subscribe and hit the bell button and as always if you watched this whole thing until the very end thank you very much and i will see you tomorrow for an fna if you watch fna's otherwise see you next week


Santa knows where to find all the best and hottest smart phones just in time to make this Christmas better and bigger than ever. Better service, bigger savings, that's today's Appalachian Wireless. If you're traveling on Kentucky 15 in Letcher County during the Christmas season, you can't miss Robert and Celeste Pugh's Christmas lights. The display at the couple's home in Isom is always impressive, but this year they added even more lights and displays, and they even made an attraction out of it. Teaming up with Letcher County Tourism, the Pugh's hosted a roadside event early in December complete with lights, hot chocolate, and a visit with Santa and other Christmas characters. We had this planned. We just, me and Robert and our office people and their families, we just planned to sit out here really and as people come by, we usually have probably 200 cars and out looking at our lights anyway, so as people come by we were just going to give them hot chocolate and give them a candy cane and have Santa give the little kids a gift and it kind of just escalated into something really big. Celeste Pugh said her family loves Christmas and loves their light display, and they do it every year as a gift to the community. She also said plans are already underway for next year's display. We just enjoy, I guess, putting out the lights for people in the community to enjoy. It's a lot of work, but we love it. My husband, this is his time of year. He absolutely exhales at Christmas. He loves doing the lights, loves doing the display. He's already thinking ahead of what he's going to do next year to top this. Reporting in Isom, Chris Anderson, EKB News.


Hi everyone, I'm Joe for jaspyscasebreaks.com coming at you with 2020-2021 Pinini Immaculate Basketball. Nice little snack right here, one box, random team break number 13. A lot of great stuff in here, big thanks to this group for making it happen. Thanks to the people who bought their spots straight up. Congrats again to the people who won their spots and all 30 basketball teams are in and the next one box break is in the store. I guess after this break we'll have two more boxes left from that case. For names and teams, let's roll it, randomize it, 6 and a 5, 11 times. One, two, three, four, five, six, ten. And then once more, 11th and final time. After 11 we got Kaim down to David. 6 and a 5, 11 times for the teams. One, two and 11th and final time. After 11 we got Portland down to Sacramento. Now trades are allowed, if you'd like, trade at your own risk. Kaim got the Portland Trailblazers, Tibbett with the Mavs, Jeremy with my Lakers, Ryan with the Celtic, Simon with the Magic Terry with the Rockets, Michael with the Nets, David with the Raptors, Chad with the Heat, Alan with the Spurs, Simon with the Pistons, David with the Golden State Warriors, Alan with the Nuggets, Brian with the Pacers, Ryan with the Bulls, Daniel with the Bucks, Oliver with the Suns, Anthony with the Sixers, Ryan with the T-Wolves, Thomas with the Hawks, Mark with the Gris, Derek with the Clippers, Dennis with the Jazz, Ryan with the OKC, Thunder, David with the Hornets, Alan with the Wizards, Kaim with the Cavs, Sean with the Pelicans, Thomas with the Knicks, and David Nadler with the Sacramento Kings. Sacktown, Bay Area and back down. Sort by team. We're going to come back to this list in just a second. We've got three boxes left. So Jason, we're doing these boxes over the weekend. He marked those one through five. Now that we have three boxes left on the dice roll, we're just going to go one, two, three, four, five, six on the dice roll. And let's select that die right there. So once again, one, two, three, four, and five, six on the dice roll. And it's six, one, two, three, four, five, six. One box. These we'll save for next time. Maybe with a little luck we might be able to run that back tonight. Let's flip back to this list here. I'm going to pause the video when we come back. We're going to see if there's any trades. And then we will have the break. Stick around. Be right back. All right, welcome back, folks. Trade window closed. No deals were done here in one box. Random team break number 13 here on Monday the 7th. Thanks everybody for getting in. Appreciate it. Logan, what's going on? Let's see what we got in this one box. Good luck. You need anything, Joe? No, man, I'm good. All right. See you guys. See you guys. Thanks for the hard work. Appreciate it. Feels like a little bit of a shallow box. Does that mean redemption? No, no redemption. Maybe a thinner car, maybe a standard box. Psyching myself out here a little bit. Remember the next one box breaks in the store right there. Run this back tonight. There's Will Barton. 75 out of 99 for Denver. That's going to be for Allen and the Nuggets. There's the base car. Usually that's on top. There's Jeremy Grant. 5 out of 99, Detroit. Going to be for Simon. All right. See you, Jesus. Have a good one. We got George Hill. 4 out of 10. Sixers. Three-color patch. Nice little pop of color there for Anthony in Philadelphia. A few more to go here. We've got Montrezelle Hurrell. Trez. 53 out of 99. Lakers edition. Going to Jeremy Port and my Lakers. My shadow box injures. Two more to go. We've got, there are some Grizzlies right there. 47 out of 99. Rookie introduction. Xavier Tillman. I feel like that entire Grizzlies team from playing some great basketball. Not just John Moran. But Tillman. Desmond Bain. Jared Jackson Jr. So this goes to Mark and the Memphis Grizzlies. It's a little wrinkly on the penny sleeve here. But there it is. Blue dot of ink right there as well. There you go. There you go, Mark. He said, come on, Grizz. The box hurt you. And I was like, okay. And the last one of your past and present autograph, Kawhi Leonard. 4 out of 10 for the Clippers. Derek Malanson. Last spot mojo strikes again. 70% of the time. Last spot mojo hits 100% of the time. And here's Kawhi. Not sure if he's actually going to play this season. Remember, he got injured late last season. So gobbled into this season. But maybe we'll see. We'll see what the recovery is going to be like. And there you go, ladies and gentlemen. A quick little one box break of Immaculate in the books. We've got two more from the case. We can run it. We should be able to run another one back tonight. jaskiescasebreaks.com. I'm Joe. I'll see you next time for the next one. Bye-bye.