I think you've all shown extraordinary stamina and it's a real sign of the enthusiasm, the passion and the seriousness of this conference that we've... I think we had about a 13 hour day here yesterday and we're moving towards a 5.30 finish today. So this certainly isn't what you'd call gentlemen's hours. It's a really, really serious conference and I'm really, really grateful for that. So this final session is on shaping the narrative and it may seem strange at one level that we've left this session for the very end because in some ways in this post-truth era the narrative is actually more important than ever in determining real policy outcomes. But this session is about shaping the narrative on women and national security, media portrayals of women in national security and national security leadership. And of course we're defining national security broadly throughout this conference. Our three speakers, our three panellists are all very accomplished journalists, recognisable names for many of us and it's a real pleasure to have them here and particularly given the demands on working journalists and given what time of day it is probably close to deadline for some of you. We're particularly fortunate to have you here. So I'll introduce speakers further in a moment but just for those of you who maybe aren't so familiar with our speakers, we have here Rachel Olding in the centre. Rachel is a reporter with the Sydney Morning Herald and covers crime. But with a focus increasingly on terrorism and violent extremism. So there's a real national security edge to Rachel's experience and perspectives from Sydney. We have David Rowe. David is again with Fairfax as indeed are all three of our panellists and we're really grateful to Fairfax for being our media partner today. David has focused in recent years on defence, foreign affairs and national security for the age and the Sydney Morning Herald and has a long career in journalism before that. And among other things David was part of the team that won a Walkley Award in 2015 for a set of stories, series of stories on the cash for people smugglers affair. And Laura Tingle and I'm really delighted that Laura could join us at very short notice. It's particularly gracious of you Laura. Virginia house ago was to be with us but unfortunately could not be for personal reasons and Laura has very kindly stepped in. Laura is the political editor of the financial review and as I've just recalled has written among other things two quarterly essays including one on political amnesia in the Australian bureaucracy and the Australian system. I think there's one due on security amnesia Laura because some lessons are not learned easily. So with that I'm going to take a seat and invite the panellists each to speak for just a few minutes. Perhaps beginning with Rachel and then David and then Laura on some of their own perspectives on the narrative, on shaping the narrative, the role and perceptions of women in national security. And then I'm going to moderate a conversation with our three panellists and we hope to hear your perspectives as well. So I'll invite Rachel to maybe pick off. Thanks Rory. So I do a lot of kind of on the ground reporting in the national security sphere in terms of terrorism and crime and going out in Sydney and talking to a lot of extremists and terrorists and criminals and cops and that sort of thing. So I thought I might make some observations from that point of view because my feeling is that reporting on women in political and leadership positions has come a long way. We might not be there yet. You still see some sort of terrible stories about what shoes women are wearing and that kind of thing. But in the reporting that I do on the ground, I think we're still quite far behind in terms of some of the gender cliches and stereotypes that get used when we're reporting on women in the kind of less legitimate political spheres. So women involved in extremism and terrorism and fighting extremism and even in rebuilding post-conflict societies that kind of more on the ground roles that women can play. I think that our reporting of women that get involved in extremism and terrorism is still quite cliched. It's the stories of, oh, but she liked to make up and wearing her hair out. How is she now a terrorist? Or a very overused narrative is women going over to fight with ISIS or a terrorist group for the sake of love. They're going over there as a jihadi bride or because their husband's gone over there or something like that. There's still those really kind of archetypal gender portrayals in that type of reporting that I do quite a lot of. And the reality, I guess, is that females actually play quite an active role or have played quite an active role in terrorism and extremism and also in fighting extremism. There are a lot of great stories to be told that we might not be telling enough of things like the female Kurdish fighters or women's role in fighting Islamophobia because women are really leading the fight against Islamophobia in Australia, I think. And the only explanation that I can possibly come up with for why some of those more antiquated portrayals are still happening is because we're normal people like anyone else. Newsrooms aren't hermetically sealed against the prejudices that kind of lie beneath the surface in everyday life in Australia. The media plays a really important and fantastic role in breaking down some of those stereotypes, but we're just normal people that fall into those stereotypes as well. Before we go to David, I might ask you one question which goes to policy because of course a lot of our colleagues in the room here work in policy or operations on national security. And I wonder if you would have a view on the implications of what you've said for policy. I mean, there's a clear message there, but what does it mean for the effectiveness of policy? Well, it's a missed opportunity if we're not accurately or fairly or even deeply portraying why females are drawn to extremism and terrorism groups, then you're missing an opportunity to stop that from happening. And that's even I think used as a bit of a recruitment tool for some extremist groups. They prey on the way that women are unfairly portrayed or overlooked. I think it's just a big missed opportunity to try and stop these things from happening if we're not making a good effort to understand why it's happening and portray what is happening. Thank you. I think that's really useful. David, I'll go to you and one of the observations we've had today and yesterday, of course, as you know, you've been here for much of the conferences. We probably could have a few more men in the room and a few more, I guess, not only male perspectives, but also male reflections on the issues we've discussed here. It'd be interesting to hear some thoughts from your career in journalism and your observations about the narrative. Thanks, Rory. That's ironic because I've been asking women at the conference what I should say when I get up here this afternoon. One person I was talking to earlier this morning made the observation that when we report on women in the military, invariably something has gone wrong and Elizabeth Broderick is holding an inquiry into it. And so they got me thinking, well, I can't deny that there is some truth to that. I googled my own name, which is usually almost never a good idea, but I googled my own name with defence and women. And sure enough, the first story that came up was a story I wrote about six months ago about speculating on the possibility that Catherine Campbell would become the next secretary of the defence department, which the angle of the story being that that would give women a clean sweep across defence and foreign affairs in terms of ministers and secretaries. And pretty much everything after that on the first page on Google was indeed stories about the Jedi Council, sex scandal and related abuse things. So trying never to shy away from self-reflection, I thought, well, typically we do seem to confine ourselves too much to reporting on the almost twee, I'm borrowing Rachel's word there, but almost twee success stories along the lines of here we have the first woman to do X in the military or in defence or the national security area. And then at the other extreme we have the negative, the bad stories when things are going wrong. I don't think we can ever stop doing either of those stories because, well, certainly when things are going wrong, that is primarily when journalists are of the most use. Bad news is actually the real news because if everything's fine then it doesn't need reporting on. But we can't hold back for a moment on writing the reporting on the bad news that's going on within defence and national security. And equally until we reach the day that a woman in a particular position is no longer a remarkable thing, in which case then we've solved all of our problems and it's no longer an issue to write about. It is unquestionably useful to make affirmative decisions about reporting on successes that women are having in national security and in reaching senior positions and illustrating the fact that they are holding those sort of role model positions. But all of that said, I'm hoping that there is, and this is more of a question at this stage than something I haven't answered to, but there is some space in between I think where we can report generally on the role that women are playing in national security and defence. I worry that if we're not doing that then, and this goes to what Mark Binskin was saying this morning, I think there is a risk that the general public is seeing the presence of women and the promotion of higher numbers of women in defence as being equality and diversity driven as a thing in itself rather than a capability thing. And I think defence is absolutely right to see this as a capability thing. Most people don't understand just how much the nature of war fighting has changed in the last generation or two. They still think that war fighting is primarily large numbers of men facing each other across a battlefield in whatever form that battlefield takes. Nowadays of course it's counterinsurgency, it's cyber, it's unmanned system or autonomous systems, it's electronic warfare, it's all of these things where the traditional physical size and strength is less of an issue. And I think what we can do as journalists is probably better explain to our readers why women in defence are actually a capability enhancer rather than femaleness being a sort of handicap that defence needs to overcome in order to boost the number of women serving as an end in itself. Those are my preliminary observations. I'll come back to you a bit later on as well to all of you about your own experiences as journalists I guess and maybe the experience of the way in which people reporting on these issues might be perceived or treated differently. But we'll come back to that. Laura, I wanted to go to you. Well I'm going to make a really superficial joke to start with which is about images and a reverse experience which was in January I got to interview somebody who's regarded as the world's greatest tenor. His name is Jonas Kaufman and he's also known as the world's hottest tenor. And this was not my normal beat and I was in a complete state about oh my god how do I sort of take this, this is the world's greatest tenor. So I asked him all these very serious questions about Wagner and everything.  And there were all these references to how hot Jonas Kaufman was which I mostly scrubbed out. But it was sort of an interesting reverse of the tables where all these blokes in the Sydney newsroom had made references to the fact he was really hot. And, you know, it cut out references to the fact he could actually sing quite well. So it was sort of an interesting experience. And the serious point about this is I suppose taking on something of what David's saying, I mean my interest in day-to-day job is obviously covering politics and the way women are covered in politics. So over 30 years I've seen that go from stories about Rose Kelly which when she became a minister, if you look at all the headlines it was Rose Kelly. I'd give up my politics for my family first, you know, it was all this stuff and interviews with her at her bedside when she gave birth to the baby and all those sorts of things. And it's been a process of normalising women in politics. And we've still got the deeply troubling examples of both Julia Gillard and Hillary Clinton to sort of say that we haven't really reached it. But I suppose my observation over the years is it's about things becoming normal. And part of that is involved women not necessarily pushing back all that hard but it's just asserting in their own minds their right to be there. At the most basic level that has been watching the progress of women approaching the dispatch box in Parliament House, you know, when they go to ask a question or answer a question. You used to watch women go to the dispatch box with senior front benches on both sides and they looked like they were going to die of terror. It was just, they were so not used to being in that space. And strangely enough, Bronwyn Bishop was one of the first people who actually did it quite well and Carmen Lawrence. And gradually you've seen more and more women just go, yeah, well, of course I'm coming to the dispatch box. That's my right. That's where I belong. And I think about the images you see now of senior female police officers briefing on a national security incident without commentary. And they're in a uniform just like the blokes are, but they speak with authority. I think those moments when you can actually just do stuff where you don't, where it's not an issue, whether you're a girl or boy, are really very important. And it's still, I think, very important for the media to think about how we portray women. I mean, I think Rachel's examples are really fascinating and have a real world result. But I know that when I did a big profile of Frances Adamson last year for our Colour magazine, I went to great pains to not mention the fact that she had done all the extraordinary things she had done. And she's got four kids too. I mentioned it, but you don't go gee whiz. You've got to really find a small space for that so that it's not all about that. So I think that goes to the wider definition of national security. We're looking at you. We're interested in how leaders portrayed, how senior policy makers portrayed, how practitioners and operators and so on are portrayed. And indeed we heard from Frances yesterday and I think a few of us would like to hear a bit more from Frances next time round. So look, I might just go to each of you with one more question before I open the conversation to the room because everyone, this is your chance to question the journalists. And there are members of the public service and the national security community here who probably live in dread of occasionally being interviewed by journalists and now the tables have turned. So please don't pass up the opportunity. But my question is really to the panel and please sort of respond at will. But it would be great to hear any thoughts about whether you think that those of you who report on policy, on national security or policy more generally, or whether you're reporting from the front line, whether you're reporting, whether it's in crime or terrorism or indeed in war zones, are women treated and I guess perceived differently in the reporting role and do you have any observations on the reporting role? Laura, do you want to go first? Well, I suppose I'd start off by paying tribute to all the really fantastic female war correspondents or people who are going into conflict zones. Sally Sara has just gone back to Africa, which is like one big conflict zone. Sophie McNeil for the ABC, a range of others. And I think they're absolute exemplars of it just not mattering. They're just battering their way through and getting it done. So that is a really good starting point, I think, for just thinking about how women can just get on with it. And it doesn't have to be a huge issue. And also, if you think about the practitioners, people who come to mind when I think about this, people like Hannah Nashri who has made a huge impact in the Middle East and they just get on with it. So, Rachel, what about your own experience? Would you like to... I mean, I guess I'd say it's much of the same, just getting on with it. I know in Sydney that the majority of crime reporters across TV networks and newspapers are women at the moment. I don't know if I've ever been doubted by being a woman. Is it an advantage? Well, I was going to say I've even felt at some times when you're knocking on the door of a terrorist family that oftentimes you are seen as less threatening if it's a woman on the doorstep, not a man in a suit. So perhaps that's been an advantage. I think as Laura said, there are so many fantastic women reporters that have done this work before us that it is seen as pretty normal these days. In my university degree, it was actually 90% women. So journalism is quite a female-friendly industry. What do you think, baby? So covering defence, sadly I have no point of comparison because since I've been doing this for about the last four years, there hasn't been a regular female defence and national security writer. Certainly not in Canberra. Lisa Martin has just taken over the area for AAP, but she's the first one that has been... And obviously some people like Laura do it as part of their much grander responsibilities, but dedicated defence reporters that just haven't been any women, which is sad. I do know, I have heard from women who've done the job previously that they have talked about certainly being treated differently by military leaders that they felt that they were being too hastily dismissed because they were women. Across journalism generally, interestingly enough, from the stories I hear, probably sport is the area where women have traditionally had the most difficulty as journalists. I mean that's obviously changed a lot because there have been trailblazing female journals who've been down there in the locker rooms, et cetera, et cetera, and gone through years and years and years of those rather gross put downs and difficulties to actually start to change their culture from within. So it's just interesting that not far from the sort of policy making area, sport seems to me probably the one where there has been that greatest disparity. So interesting that war zones were sort of a first safer than locker rooms, I didn't say that. All right, let's take some questions from the group. There's one volunteer right up front, so please, here's your chance. Thanks for a really great conversation so far. My name is Susan Hutchinson. I am with the Australian Civil Society Coalition for Women, Peace and Security. I have two questions, can I ask two questions? Yes, okay, great. So my first question, I don't really know, I'm sorry if these don't quite align with your beats, but I'm going to ask them anyway because I think they're very relevant to the conference. My first question is about the portrayal of women in conflict affected areas. So two years ago, I finally got a piece published on The Conversation which was about the constructive roles that women have in Iraq and Syria in terms of building of security, community security, building peace, negotiating ceasefires, delivering of assistance, that sort of thing. But that kind of, when you're talking about stereotypical portrayals of women, that's often quite a really hard thing to get visibility of in the press. So that's my first question is if you guys have any thoughts on that. And then the other question is both crime and defence and international and terrorism. So I'm quite curious, we have a unique situation at the moment. The rest of the conference has had a lot of emphasis on women, peace and security issues. And we know that Daesh are using sexual violence in war crimes, crimes against humanity and genocide in Iraq and Syria. And we have Australians who are perpetrating those crimes there. And most recently, there's actually been some... The Australian government has behaved in a way that supports impunity for those crimes rather than meeting our own legal obligations to investigate and prosecute. But again, it's quite tricky in terms of news cycles and what meets the interest of the day. So I guess I just wonder about some of those issues where they might sit in terms of your views of what makes the news and what doesn't make the news in the context of the conference. Thank you. Thank you. Please. You don't have to answer both. Any responses? Well, I'm happy to jump in on the first question. I mean, just the sort of... The peace building and reconstruction phase of conflict is usually at a... Well, if we're examining the sort of thesis that is the area where women play more of a role and it's given less prominence, it's considered less newsworthy. Is that what you're interested in discussing? Women's roles that aren't either victim or fighter when it requires that they are less interesting in a medium. Or are they? I wouldn't agree that they are less interesting, but they probably have been less covered. Look, we're better at asking questions than answering them. But look, in some ways it's a little hard to judge. I mean, obviously something like Afghanistan, which is the most obvious recent example, so much of the phase of the war was that the nation building, reconstruction, civil society building, governance developing phase of the conflict, while providing the security to allow that to happen, those were the two sort of major elements of what went on for basically what eight, ten years in the main phase of it. I found what Mark Binskin was saying this morning about the role that women played in a combat situation by being able to engage with local women and provide intelligence and that sort of social interaction that is so important to that type of military operation, like a counter-insurgency. So I don't think that there is less of an interest from the news media in that part of a conflict. And the fact that women play a larger role in that is really just a reflection of the fact that typically women are not currently performing in frontline combat roles. Look, granted combat is probably still going to get the most attention from journalists over those other aspects that you describe because of the acute nature of it, that's where most of the bombs are going off and the bullets are flying. So I've sort of contradicted myself a little bit there. Yeah. Laura, do you want to show me? Yeah. Save him. I thought I did all right there. You did okay for a bloke. Look, I'm not a war correspondent, never have been, and the stage of my life is never going to be, but I just make a mechanical observation about how the media reports. Let's talk about Afghanistan. It's basically a television story now. Nobody in Australia has a bureau in Afghanistan anymore. And as reflecting on what David's saying, people go there to have pictures of people with rocket repelled grenades and things going off. There's not that journalistic capacity or resource availability to really do anything other than drop in occasionally and say, so how did that all go? And do a once-off every so often of saying, oh, well, this village looks more secure or less secure. There's not that ongoing reporting. And the sort of thing that you're talking about there is something that does require that thing where you've got the capacity to form, that journalists have the capacity to form ongoing relationships in communities so that they understand who's actually running the joint. And as an example, we Fairfax closed their Middle East Bureau a year or so ago, having had a presence there for a long, long time and having had a fantastic female reporter there for a long, long time telling those sorts of stories. We'll go to this side of the room. I think we've had a colleague waiting over here, please. Hi, my name is Elka Larson and I'm with ANU. Traditionally, the media has been the gatekeeper of information and narrative, but now we're living in a much more fractured media landscape with blogs, social media, where everyone can publish their own opinions and ideas. So what effect does this new media environment have on shaping the narrative on women and national security? Do you find that it's reinforcing or challenging this narrative? And I'm interested in your thoughts. Thanks. You don't all have to answer each question. I'll just be bossy. So I think it has an impact like it has an impact on everything in the sense that once again there aren't resources to really be doing any of these jobs properly. I mean, the financial review no longer has a foreign affairs and defence writer. So we're not covering foreign affairs and defence let alone women and national security. The advantage of it is, or should be, that you do have with lower barriers to entry to scope to get more specialist conversations going about this, whether it's on the conversation, whether it's through LOE or ASPIR or all these sorts of forums which are much more available to people. So it's one of the great mysteries to me at a superficial level. We've now got two 24-hour political television stations, but they talk about less and less and it's all basically crap. And it's the same where you've got much greater capacity to get into these issues and have experts talk about it, but it doesn't actually translate back into the mainstream media. I think one positive that social media has had in that space is that it has made us as journalists probably a lot more connected to our audience than we might have once been, which thereby does make us a bit more democratic and accountable as journalists and as an organisation in the sense that, as I was saying before, we're normal people. We are not switched off from the normal prejudices that normal people have in normal society. Often social media acts as a bit of a check and balance for that. If we interpret something wrong, if we miss something wrong, we'll find out much quicker these days because of the connectivity we have with social media. Example is probably the Julia Gillard misogyny speech that a lot of hardened political reporters saw in a different way to that everyday person saw. And I guess you didn't have that real close feedback in the past without social media. The downside, I guess, is Facebook comments, which are just hideous. Reading Facebook comments on any article that gets put on Facebook makes you think that you've gone 10 steps backwards a lot of times. I think that's a really good point about the Julia Gillard speech. I think that's a really, really good example. It is something like what Hillary Clinton has faced. And this is really the fake news phenomenon that so many people are getting their information from these other sources that people can make up completely baseless stuff about somebody like Hillary Clinton who too many people were credulous about and too willing to believe about particular preconceptions that they had about Hillary. That's the bad side. And that's where the mainstream media can try and curate information and pierce that cloud of total rubbish. So we've got about four questions that I can see around the room. Five indeed. So we'll try and move through them and perhaps I might even take a couple of questions at a time so that you can share them among you. One more over here. My question's for David. We started with statistics. So in my 21 years, two months, 14 and three-quarter days in the Defence Force or national security community, I spent two days thinking about women's issues, so that's 0.00269%, which is not odd. Which is more than most. Correct.  I worked out that I'd been hearing what was being said but I wasn't actually listening to what was being said. So my question, David, is what have you taken away from this conference and how will you report it? That's a very, very good question. Look, I feel like there have been, I've heard some fantastic stuff. Some of the standouts for me have been some of the international speakers and that comparison, that global comparison about the role of women in national security across different countries and different cultures is something that I'll really take away from it. I will... A lot of this stuff is... I can build on and feed into stories that I do from now on for the rest of, you know, forever. All of this kind of stuff is not immediately newsworthy. I'm not going to go away and write three different news stories tomorrow but it builds my knowledge as a national security correspondent and informs my overall thinking in a way that will simply make my stories around, not just about women in national security but anything I write about national security, you know, a much more well-informed and enhanced thing. Thanks, we'll go to the back under the bright lights. Thanks, Rory. Annette Duncliffe from PMBNC. Please correct me if I'm wrong but I'm assuming you guys would have sources or touch points within the national security community to do fact-checking and finding stories and that sort of thing. I'd be interested to know whether they're predominantly male or female and whether you think that actually impacts on some of the angles or the stories that you actually end up writing. They protect their sources, you know. What are the names of the sources? I find predominantly male because I do think that police forces and national security, the national security sphere is still to me seems to be fairly male-dominated. We have some fantastic female high-ranking police officers in New South Wales but it's still predominantly male and I think just because of that fact my contacts in that space would be more often male than they would be female. I'm not sure whether that would skew the stories that I write. I'd have to think a bit harder about that. I don't know. Mine are overwhelmingly male. The sources that I never name in my stories, it is understood person. They are overwhelmingly male but it influences the way I'm reporting in the sense that they are representative of a I suppose a traditional and a male-dominated perspective but it's nothing as immediate or conscious as that that it sort of feeds through into our stories as such. It's more just that they represent this old fashion and this tradition. Listen for the national security community that we believe in transparency. It sounds like we should employ more women if we want to keep secrets. Right, I think... Yes, please. Patricia Hewitts in DFAT. Thanks for being here. My question also touches on the new media landscape that we're seeing. As Laura said, with fewer and fewer resources, with fewer sort of journalists really going into more depth, with the sort of hostility we're starting to see to the media itself as establishment, with increasing skepticism about anything that could be accused of being politically correct. The kind of issues we've been discussing at this conference have traditionally struggled for newsworthiness. What's the outlook for informing national debate? Point taken, Laura, that there are better mechanisms now for more specialised conversations among interested persons but for a more informed national debate that can affect sort of the polity, that can inform a kind of reasoned political atmosphere. Thanks. I wish I could say something really positive about it but I'm going through one of my pessimistic phases at the moment. I'm not at all optimistic at the moment. I sort of rationalised to myself that I'm not an economist but having written economics for a long time, you sort of think, oh, barriers to entry, it's got to be good if they're coming down. But I think... Fairfax has announced $30 million of cuts today. We're down to four people in the Financial Review Bureau in Canberra and we're running out of space to write stories as well. So we just don't have the resources to get into these serious issues. So I think it's very depressing and I've just written an update for my quarterly essay, which comes out on May 1, which a lot of it is focusing on the way that all of politics now is revolving around a soap opera around the Prime Minister, not about what he's doing but whether people like him or not and virtually no discussion about the underlying policy issues. So nothing good to say on this particular day, I'm afraid. The consequence of having fewer people to do work, to do more work, obviously unfortunately going to be that you end up falling back on less complex stories and less complex explanations of things that are happening. And I think despite the intense interest in terrorism in the last sort of couple of years and the fact that there has been a lot of reporting on terrorism, I think that unfortunately as a byproduct of what you're saying, a lot of it has been reporting on what has happened rather than why it's happened. There's sort of day to day arrest there, arrest there, someone dying in Syria there rather than trying to look at why this is going on. And the other thing is we have such a clear idea of who clicks on our stories now and how many people read stories that the other issue is if no one's reading a story, can we afford to be writing it? That's also another sad fact about it, I think. What is the appetite for reading really important and complex stories? It becomes harder and harder to justify doing them to your bosses if the audience is not there. I'd just like to pick up on... You mentioned, I think, a backlash against political correctness. For instance, I share with you an interest in this. I just think that at the moment there is an overblown perception out there that is stringing together a bunch of disparate events, Trump, Brexit, one nation, that follows this narrative that the ordinary people out there are sick to death of a certain kind of political elite telling them what they are and aren't allowed to do and say, and that this is what is driving a lot of these political phenomena. That was what I was getting to a little bit earlier on when I mentioned the need for people to understand that increasing the role of women in defence is not a diversity and equality thing of itself, but rather a capability thing. Unfortunately, we've seen a small number of... Unfortunately, very widely read and rather loud right-wing columnists particularly driving a backlash against the defence cultural modernisation on that and saying that this is some kind of social project run by the military chiefs who just want to get their diversity stripes. And it is total and utter horseshit, but it has an audience there and it has a constituency and that just makes it more important than ever for people like us hopefully to try and penetrate that with facts. Unfortunately, like Laura, I am not particularly optimistic at the moment about all of that. I'm sorry. Since we've got an audience and since I'm allowed to make some commercial, I guess, promotion, frankly, you get the news you pay for and the reliance on free media, that is unedited, often propagandist media is beginning to show. So if you want serious analysis, investigation and news, please pay for your newspaper subscriptions online, whether it's Fairfax or anyone else. It's interesting to see the New York Times getting a kind of a Trump bump, which is one small positive side effect from their perspective. We have one or two questions more than we have to wrap up, I think. So we'll go to the back of the room and then we'll go to the one at the front and then there was a gentleman over here as well. So thank you. Thank you. I'm Eleanor Flowers from DFAT. I'd like to first say thank you to the NSC for putting on such an informative two days where we have all learned so much about why gender matters, that it's not a fluffy add-on. This is actually core business. And on that point I'd like to say that this is a question for you, Rory. Sorry, panel. Sure. We've heard a lot about what our leaders can do to promote that understanding and we've heard a lot about what the media can do to promote our understanding. But what is the homework you would set for us in the audience of what we can do back in our organisations? So in a moment when we finish this panel I'm going to invite Marina to join me on the stage and we will set you your homework, we promise. Thank you. I think here in the middle, I think there was the woman in the pink. Sorry, yes, this gentleman here. You had the microphone, my apologies. In terms of the depiction of women in media there is always a reality versus the fiction. If you remember there was a story about Malala which was picked up by the media because it was a backward area of Pakistan and nobody knew what had happened. And when media got the attention of that all of a sudden she became an international icon for resistance against the dark forces. On the other hand you see scores of TV shows where you have female lead from Quantico, Homeland all the shows which depicts women in the major role but yet nothing has changed even in the United States of America in terms of women taking the lead roles in major, you know, operational units as well as lead investigators. So that's kind of, you know, does it relate to the change in mindset or what is it? Do you want to respond to that? Police. It's about police, I think. So is the question about why if in sort of popular culture women are occupying those positions why it's not translating to real life? I don't know. Would that be a question for the people that run these organizations? Or is it... Having not been at the conference I don't know whether there's been... He talked about statistics. I don't know whether we've had statistics through the course of the last two days about whether there's a change going on in police forces around the world and intelligence agencies and things like that. I've just got no idea. But that would be the question. I mean, I've watched it happen in politics. It hasn't always just been because you have quotas and things like that. It's just people just gradually moving up the ranks that you can't sort of just drop people in, particularly in areas like police forces. I mean, it's not necessarily just about gender and those things, but I don't know. We're going to have to have just an interest of time unless you've got an answer. I suppose the one reassuring thing about that is that insofar as popular culture appeals to our hopes and aspirations obviously the creators of these programs feel that the average audience member has to see women more heavily represented at the top of these organisations and that probably is a good thing. It's just that the organisations have to respond to what people would like to see. I think we probably do have scope at the next conference to talk about fact and fiction a bit because I think that's a little bit where you're getting at, but I think we might have to wrap up if that's okay. I'm going to invite Marina to join me in a moment. But before I do, I might ask the audience just to show their thanks and appreciation for the three brave journalists. So while our friends from the fourth State Department the stage, I might ask Marina to join us just for a few closing remarks and a little bit of homework as requested. Marina, perhaps I might ask you first as a convener to offer a few of your reflections on the conference and then I'll offer some thoughts on the way forward. Thank you. Before I start on those reflections I just wanted to say to our journalist colleagues in the room we heard a little bit about vulnerable people during the conference or women being described euphemistically as a vulnerable group and it's the first time I've ever thought of journalists as a vulnerable group after hearing that. So we had a lot of fantastic speakers throughout the conference. One of the key messages that resonated with me from the first day was the message that Professor Valerie Hudson shared with us about the very best predictor of the state's peacefulness being not its level of wealth, level of democracy or ethno-religious identity but how well women are treated. So we heard a lot throughout the conference about the why women and national security is important, why greater involvement, participation and leadership by women in national security is important and the interface and connection between women's equality and national security. So that correlation, that important message I think is something that we should all be aware of and awareness raising in the context of mainstream national security is important. We heard about women's capability enhancers from the Minister of Defence and from others and also from the Shadow Foreign Minister about the importance of equality, inclusiveness and disruptive changes that threaten our national security. We focused a lot today on how we can enhance women's participation and leadership and maybe this is where some of the messages or the homework for people in the room comes in. I guess one of the questions that I would ask people to take away with them is how are you going to walk the walk when you go back to your organisation? Have you developed your gender goggles? Have women thought about how they can be more confident in their roles? Have men thought about how they can promote women and their leadership potential within their organisations in an active way? There were some key messages around mentoring and sponsorship. The issue of confidence came through a lot in fact and also the issue of targets and whether they were a good thing or not. I guess you can all go away and think about what your own organisations are doing in terms of targets about perceptions of women as we had the last panel talk about. We tried to focus in this conference on women as actors and enablers in the national security space and as agents of change, although reflecting also upon the scope for regression on women's rights and some of the atrocities that have historically been perpetrated during armed conflict and that are again being perpetrated. So that's also about being aware that progress is not necessarily linear and that we need to be vigilant whilst we're progressing in the interest of our own national security and national security capability, the greater involvement of women as participants and as leaders, we also need to be aware of the possibility for backsliding. I think Valerie Hudson laid down or passed on the baton to Australia to take the lead on women's peace and security globally in light of what is happening in the United States at the moment. So really they're probably all of the reflections I wanted to make. Thank you, Rory. Thank you, Marina. Look, it remains for me to say maybe a few closing words on where we go from here. I mean, I would share all of those reflections that Marina has provided. Look, this has been a long conference. These conferences don't usually go for two very full days, but there's been an extraordinary level of energy, I think, that we've all experienced and participation and in fact, I think many of us would be quite sad to see this conference come to an end and you can't say that about every conference that you go to. But look, the energy, the candor, the frankness that we heard from our speakers, you know, pretty much the whole conference was on the record and we had a number of speakers who were very forthright in what they said so I think we should all be really appreciative of that, whether it's Francis Adamson yesterday, whether it's not only the minister, but also Shadow Minister for Foreign Affairs last night, whether it's also the Defence Minister, Shadow Minister for Foreign Affairs, whether it's the Chief of Defence Force or the many individuals, particularly our international speakers, who I think gave such candid remarks. I would say that if I was to talk a little bit about some lessons learned from us, the conference organisers or the conveners and hosts, we will take a few thoughts back to really work on how we can continue to improve what we deliver to help the national security community to develop its thinking in this space. We will reflect on the deep focus on capability that came through the conference. I think the theme that this is about national security and capability just as much as it's about values of inclusiveness, diversity and opportunity. The theme of culture, the message I think one of the real killer lines of the conference was about our culture essentially eats strategy for breakfast. You can have a great strategy but you need that cultural change and that begins with people and it ends with people. The idea that simply by holding this conference and by having such active participation and very strong social media engagement as well, the conference in itself is part of the change that we want to see. And I don't know how many of you encountered a few trolls out there on the social media coverage of the conference but there were a few but I think pretty sad and lonesome and I think the attention internationally that the conference has had through social media is a message we can all take forward. For the National Security College, of course our core business is education and training. It's developing the Australian national security community to the best it can and so we'll take some lessons from here on the training courses that we can offer and develop in the executive development and potentially in the academic space as well so please watch this space. For next time and we'll come to the homework in a moment to reinforce Marina's point really about walking the walk, we certainly encourage more industry involvement. We applaud Chris Jenkins of TALUS and the commitment of TALUS in particular but I'm sure that there will be others who will watch and learn and listen. We want more men to come to these events so I think we should particularly acknowledge and thank the men in the room for really being here today and yesterday because I'm sure they will go forth to speak with colleagues and be role models based on really the learning that we've had over the past two days and more international engagement. I think we particularly appreciated the contributions from those who've travelled from afar to be with us whether it's from Afghanistan, from Pakistan, from many countries of the South Pacific and the region or indeed the embassies that are represented here today and our friends from the United States as well. That message about Australia carrying the torch will be heard loud and clear. So as far as homework is concerned I think Marina's really passed on the message and that is go back to your workplaces make sure that you try to persuade at least one colleague, a supervisor, perhaps someone who reports to you to really engage on this issue and perhaps to come to the next conference we hold, the next training course we hold or the next opportunity really that anyone provides to develop their thinking and perspective in this space. That's really the key homework that I would suggest. I want to thank you all and really to conclude just to say that the National Security College will hold this conference again next year so I can confirm this will be the first but certainly not the last Women in National Security conference held by the National Security College. I want to finally ask you to join me in thanking not only all the speakers but also the organisers, Marina and Chris and Sharon and many others at the National Security College who put this event together and our friends from conference logistics as well who will be putting out a survey that we very much hope that you participate in. So thank you colleagues, I think we've drawn things to a close.


Hi there, welcome to my talk where I go through and brick a very expensive automobile than I eventually make it faster Help you enjoy it. It was certainly the most complicated reverse engineering project of the work done So a little bit about me. My name is Patrick Kylie. I'm a member of the penetration testing team at Rapid 7 I've been working in the industry for about 17 years. I've done previous research that I've Released on avionics security I've done quite a bit of research Specifically on internet-connected transportation platforms. I've experienced in hardware hacking internet of things Autonomous vehicles and can bus So here's a overview of all the topics that we're going to cover First we're going to go over the architecture of the Model S and specifically the battery management system You'll find all that needs to be relevant when I explain some of the other stuff The timeline of when the performance model Ass and ludicrous were released The hardware changes that have to occur in order to make a car move at ludicrous speeds The data stored within the diagnostic program at Tesla uses within its service centers called toolbox Some of the firmware changes in fact all the firmware changes that have to occur to the battery management system to make it work The process of modifying the high current shunt for those of you haven't heard the term before shunt is a method within electrical and electronics of measuring current using a known resistance value and this is a device within the High voltage battery that has to be modified in order to Allow it to handle the power of ludicrous. It turns out it was a very important part of this whole process And then we'll actually go over the upgrade process how I failed and brick the car what I learned and had to have it towed across state lines and Some pretty cool things on how I was able to dig a little bit deeper on how The gateway works and some special files that it stores Bit that determine the configuration of the car and then next step So I can we actually take ludicrous speed further should we and what we need to do to make that happen So a little bit about the architecture of the Model S overall It has the central display so when if you sit in the Model S There's a large screen to your right or to your left of your passenger or to your left if you're in a right-hand drive vehicle And then there's also an instrument cluster both of those actually run the NVIDIA Tegra up until recently where The central display switched over to Intel atom All this is going to be Assuming it's an NVIDIA Tegra base because the that that Tegra has to be rooted for this research to work The the next component that's really critical to this is the the gateway The gateway sits between the central display the instrument cluster and the rest of the vehicle it acts as a firewall between the various can buses and between the can buses and the Infotainment features as well as the internet connectivity and Wi-Fi connectivity, etc The next component that's critical to this because that's where all the modifications that are the powertrain can bus This is a standard can bus running at 500 kilobits a second. It contains the battery management system the drive units all the charging and thermal controllers set on that can bus Beyond that it's a standard vehicle can bus it runs at again 500 kilobits a second uses 11 bit arbitration IDs and very importantly it supports UDS Many of the routines that you actually actually have to modify to do this require UDS to work and Having some knowledge of UDS turned out to be critical for me to do this research. I managed one quite a bit about it So next we have the battery management system Better engine system is a board that sits inside the battery pack at the rear It primary microprocessor on is a TI TMS 320 C 2809 There's a hardware backup for it. So in case there's something hard type of hardware failure the hardware backup is an Altera CPLD It's critical for one step of the process that we're going to do later And then there's a current shunt that and pre-charge resistor The full reversing of these components is an ongoing project. So if you want to help Reach out to me because there's some of the skills like an assembly for the TMS 320 that I'm not very good with So here's a skipped over some of the steps because it's easier to show on the screen The high voltage contactors you can see in the middle of those of those round circles with two Large terminal posts on them the high current shunt That sits connects directly to the battery management system It sits between one of the bus bars going from the battery to the contactors There's a pre-charge resistor. So the way that the the contactors are engaged are when the vehicle is wants to Enable battery power to the rest of the vehicle one of the contactors closes and then the pre-charge resistor sits there as a slow relatively slow current path For the rest of the high voltage system to come up to match this is the voltage of the battery And it's only then that the BMS allows the other contactors to close So you don't get in rush current and you don't get damaged with the components from the massive Amount of power that's in that battery system From there. We actually have 16 battery management boards these contain all the Bleed resistors so it can balance the voltage across all the packs. They're 96 of them believe six in each of the 16 modules and then the B&B is also Managed yet they monitor the temperature and of course the voltage of the individual battery modules and then the last thing you see on the far right voltage sense voltage sense is The component that actually sits on the four contactors of the battery So not only can actually detect when the bad contactors are open or closed So if they're not in a state where the BMS expects them, but they're also used to measure the the current voltage level Coming from the battery So a little bit of history and this will be relevant in just a minute. You'll see why so in 2014 of October the performance dual motor model s was announced This was ridiculously fast when it was released something like 3.4 seconds 0 to 60 But it wasn't until July of the next year that ludicrous is announced So when ludicrous is announced they announced it as a $10,000 option on new models of the new versions of the model s And it was $10,000 for a while I think eventually they gave it away for free that they keep going back and forth on it It's that's really up to them So it's it's always been kind of an optional item to make the car a little bit faster and have ludicrous power on it so $10,000 for new buyers, but as an offer for Existing P85 D owners they offered it as a $5,000 upgrade and The press release actually mentioned that the upgrade involved putting in new contactors and a pyro fuse But after a while of many of the performance battery packs of the battery packs that would go into the car would already be Capable of running ludicrous mode. They just wouldn't have the future turned on and What it when I see ludicrous capable what I mean is That all you have to do is modify a single file on the gateway of the vehicle So you route the vehicle modify the single file and it has ludicrous mode The what all the P100 ease as far as I understand and and all the newer model s's that are dual motor performance All you have to do is modify this a single line on the gateway So I've got a little bit of information about that. So The gateway has this file called internal.dat. It stores the car's configuration Has like you know, for example the type of wheels that are on it so that the display is actually reflect correctly the color of the car the version of the thermal controller the Version of the various drive units and the version of the battery pack Bunch of other configurations that also controls. It's also The file that is modified when I heard about how people had supercharging disabled That's where it's disabled. It's actually disabled client side on the vehicle But for the purposes of this talk, all you have to do is From a routing vehicle Request this internal.dat file Make a quick file editor change of which there, you know VI and ANO are both there So you go into internal.dat add this line performance add-on and add the value of one From there you copy it back over to the gateway reboot the gateway and then boom the vehicles ludicrous But that's not the case for the earlier models the earlier models where you actually had to do quite a bit to the firmware I'm just talking about the later one So the later ones that were ludicrous capable already in other words the battery was already capable of ludicrous speeds This is the only thing you have to change So if they kind of alluded to earlier the earlier vehicles, you know, so some of the 90s All the 85s released up to that point Required hardware they required modification of the current shunt You had to reflash the firmware in the battery management system. You had to recalibrate the current shunt Only then could you actually add that value to the gateway file internal.dat and actually reconfigure it To support ludicrous speed if you did it before that they would wouldn't show actually did you the speed it would show you the Setting but it wouldn't go any faster So we did this I actually upgraded an owner vehicle we have a contact in southern California for those We don't know I'm actually located in Las Vegas.  He was willing to let me loan his lift So lift isn't something you can just kind of go to a grog to say hey, can I borrow your lift for a couple of days? Because they don't know I have this thing called insurance and no just go away So he let me do this very gracious. Thank you bitbuster.  He was actually hacking on a Model S He took the car and actually enabled Autopilot version 2 on an autopilot 1 car. So he added all eight of the cameras put in the newer computer replaced the steering rack and a bunch of other stuff and actually got Retrofitted autopilot 2 so all the full self-driving stuff to an older model vehicle Pretty cool stuff. I was pretty impressed with that. I believe he's the first person in the world ever do that So here's a picture of the pack dropped It was fairly complicated, but not too hard. You know you remove the central Bolts and then lower it down onto this big heavy rack that could support the weight of the entire vehicle And then you remove the ones along the edges and then raise the car back up battery pack drops drops out All the electrical connections are quick disconnects the coolant is a quick disconnect I believe this is because originally Tesla was toying around with this idea of having swappable battery packs for people on the road I believe they had a pilot program one point. I just never really seemed to go anywhere So they make it really easy to drop the pack as long as you have access to the appropriate equipment So here in this next picture We have a picture of the fuse bay which is up at the front of the vehicle on the opposite side of where the coolant tubes Enter the pack Here the cover over the fuse is removed and the old fuse is visible the fuse that actually has to come out and Then on the right. We have the contactor bay with it opened up The cover plate removed and the old contactors removed Here we have a close-up of the the current shot you can see it sits right next to the BMS And then the new contactors are installed at this point Here's a close-up of the BMS You can see that it just sits at the very bottom of the bay And it's just kind of on the right side or left if you're staring at the car from the front But from my perspective, it's on the right And you can see the TMS 320 right there kind of in the middle CPLD off to the right and What is that between the two? Hats. Oh That's interesting that label says JTAG Get into that later Yeah, it actually has JTAG the the BMS's that I've messed with on my bench None of them actually had that connector It was all covered over with conformal coating But the the one in the car that I modified actually had these These headers on here that they'd say JTAG kind of interesting Another thing that you have to do is you actually have to replace a second fuse. So there's older vehicles This is underneath the rear seat There's a fuse between the the center thing called the high voltage junction box and the front drive unit So One of the things that kind of found by digging around in toolbox I'll get into later is you actually have to replace this fuse With a bus bar. Yeah, that's right. The instructions say you replace the fuse With a bus bar. So we did that Here's the front fuse. Here's the front fuse removed and here's the front fuse replaced with the bus bar Put it all back together put the seat back in connect all the high voltage interlocks back up and That part is done So what about firmware? This is a really where the majority of my timeline the the Physical work was actually pretty easy to figure out Tesla actually publicly talked about the components that were involved The firmware was the hard part and To do this we need to dig into some Python Tesla uses a diagnostic tool called toolbox. It's a Python Windows executable Well, that's right. It's a executable written in Python, but it runs in Windows. So it's been Compiled and then encrypted uses these plugins that are compiled and encrypted But it's designed to work without a connection to the internet So all the information that you need to decrypt these in dual files called scrambled as you can kind of see in this image are actually on the Executable so if you have we're able to get an image or grab the correct files You're able to decrypt these modules to be completely honest. This wasn't my work to figure this out This was other people that actually figured this out They had done some of the Decompiling as well so you can use a uncompiled six to actually Run the PYC compiled files and get Python source code I did a lot of that I wrote a really really ugly Python script to iterate through every single one of the Scramble files to the scramble files are also all kind of zipped up. Yeah, there's a bunch of separate source code files underneath each one And separate directory, so I iterated through them all Ran and compile against them and then did some additional work that I'll talk about my next slides But they also left all the source code comments in place. So thank you that actually helped me figure this out So this is an example of just the header of the file. This is the UDS one You can see it actually has all of this Comments here in place, you know, here's the headers added by uncompile But it actually shows when it was compiled who compiled it who is the author just means email address too And then the copyright information on it So here's the kind of thing that I was able to actually see by digging through all these This is one of the specific Files used to configure for ludicrous. So this is the performance add-on config This is the one that modifies the gateway if you don't do it manually like I did and it tells you That you first have to verify the vehicle can be configured For ludicrous mode the vehicles needs to be all-wheel drive and have a battery pack config that supports the 1500 amp current discharge So this is assuming the battery pack has already been modified There are other routines and toolbox that actually go through this One of the most important things in these toolbox files were these data structures. So you can see these two variable names Three variable names qt resource data qt resource name qt resource struck My really really ugly python script went through those and actually converted those back into binary and Then from there I ran bin walk against those binary files and I got a ton of useful information things like this These this is the pointer that tells me exactly how to do it. It says that So we already know that the donor vehicle has a pack ID of 57 instead of previously But the donor vehicle had a pack ID of 57 says, okay, so if you're gonna change pack ID Battery pack ID 57 to 70. Here are the three firmware files that you need. Okay. Well, where do I get those firmware files? Turns out they were stored within those Python data structures. I ran bin walk against it I actually got a tar file of firmware and when you untar that file you get every single one of these Hex files of firmware. It was all stored within the the Python executable all right there Ready to be used So for this upgrade pack 57 becomes pack 70 pack 57 is 1300 amp battery pack pack 70 is a 1500 amp One of the things that I kind of did that I thought was interesting Since we're still talking about the firmware is I did some differential analysis of the boot loaders So I have the two different boot loaders here 57 and 70 you can see that there really weren't that many changes On one line. It's a single bit that changes The other one that you know five three seven and seven three zero that you see here are just the are and then the Actual number one is 57 one was 70 and then we have this short little String of you know group of hex characters and that was the only change between the different various versions of a bootloader But what's not the application file application file had a few a bunch of different changes. It's just the bootloaders themselves We're all very very similar so To do this upgrade all the instructions and files that you need for this were stored in these toolbox files There also were a bunch of other Really helpful files dbc files for those of you who've hacked on a vehicle before dbc is the Instruction file that stores all of the various can bus signals So that you can interpret them and these Individual dbc files for all the various can buses of the vehicle were stored within toolbox the odx files odx is a XML style format that defines How to do diagnostics how to do firmware upgrades how to get security access a Bunch of other stuff are stored in kind of the odx file format So the diagnostic routines are odx the can bus interpretation routines or dbc and Then there was also there were also files that stored the calibration data for the shunt. Those are stored also in a python pickle turns out that every single vehicle that was eligible for Ludicrous upgrades by upgrading the battery had the shunt calibration values stored as In an array within this python pickle file So you have to actually look up the shunt on the vehicle that you're upgrading Compare it to this pickle file and get these shunt calibration values I'm going to show you in a little bit and Then of course there are all these text comments and other data structures that kind of eventually allowed me to piece together the process So I kind of talk a little bit more about UDS. Here's what a UDS file looks like This is the one for actually shunt calibration. It shows that there are all these parameters hwid cgi 1 ca u 1 there's also a CRC value and a Serial number and serial number And again can networks use a dbc file UDS use odx or GMD So I use the commercial tool vehicle spy to actually do The next steps of this research I took these dbc files and these odx files and imported them the vehicle spy Plugged it into the bench plugged it into an actual vehicle and just sat there and listened to traffic So I could try and figure it out So it turns out that the IDs 232 the arbitration ID is 232 for the BMS 266 and to E5 for the two drive inverters they identify max power those are variables They vary based on state of charge temperature and power recently used on Sunday, I'm actually gonna have an in-depth a deep dive into These dbc files and some of the information because I want to actually map out the entire power curve See if I can put that back and actually figure out where the power curve stored into the BMS firmware But check that out if you if you want to actually see a little bit further into the Talk than what I'm able to cover on this so What a dbc does? This is what raw canvas traffic looks like You can see all the IDs, you know 102 through 302 down here And you just see a bunch of data, but once you put in a dbc file You can actually translate it all so you can actually see that all the values For BMS basically means that this is the BMS who's actually sending this You can see the power available. This is power available before the drive units are engaged So this is just the car sitting in an off mode before you press the brake pedal and Engage the drive units and wake the car up all the way So again ODX routines for shunt calibration Here's the actually ODX routine imported into vehicle spy for actually doing the Shunt calibration so what you do is you actually Connect to the car read the value of shunt you actually do some firmware stuff I'll go over that in a minute and then modify these values. So these are values that are already modified the reason Thing I thought it was interesting is the CGI one and CAE one values are all identical for a ludicrous vehicle where they weren't before And then we have a serial number and a CRC and then of course the hardware ID This is actually it says write success with that. This is actually a read function So the 23 is a read function There's a separate function for actually writing the shunt and again I actually demonstrate the process on Sunday in the deep dive So one of the things I found out by building this all in a bench and Doing this work is the shunt also needed a hardware modification After I did the upgrade on a bench I kept getting this error message that would pop up on this the Central display and also, you know within the DVC's of a can bus that it gives you a raise of all the various error messages and it talks about Overcurrent sense there's a particular error message that just popped up showing overcurrent sense after I modified the That the firmware but the error was not there before so digging into this what I did is I actually made a breakout board and Used a logic analyzer and analyzed all the signals coming off of this shunt actually turns out It's a very simple communications protocol that it used But this one wire as it turns out and eventually connects to the CPLD. So it looks like that there's Sensor within this shunt that They won't for ludicrous power. They want disconnected. They don't want it to be able to communicate to the CPU VLD and since the CPLD didn't change Assuming it has something to do with it, you know the current values going through the CPLD They they didn't want to modify Tesla didn't want to modify so When this wire is disconnected that error message went away So that basically tells me that there's a wire that has to be disconnected during the process of actually doing this upgrade So again Go to California drop the battery pack Drain the battery as much as possible Do all the hardware stuff? Modify the shunt disconnect that wire or very scary stuff And there's actually these special gloves that that I purchased special gloves and special socket wrenches that are used when you deal with high voltage They're a rubber glove with a leather Overlining and then you're just careful about you know where you're standing and proximity to the other components and Even though you that the fuse isolates you there's still enough of a charge and Something where you can shock yourself and again if you're touching the wrong things you can actually hurt yourself So there's quite a few precautions. You actually have to do I talked to a few Tesla tax And they told me like the the gloves were that they were so ordered to set of those and I'm used all possible precautions for doing that So we got the pack do all the hardware stuff Reinstall the pack so the reinstalling the pack was probably the most Pucker factor part of the whole install because I was really nervous about having a rich rebuilds moment and actually Damaging one of the weeds because then I'd have to leave the vehicle there for a long time and have the cluster angry me So I used a boar scope both back here at the battery pack these are the main battery pack contacts Going back into the battery and then up front where the coolant lines were Scoped those and then just very slowly lowered the vehicle onto the mall. Everything went flawlessly Reinstalled all the hardware Lifted the car back up verified everything Dropped it completely off the lift and then had to do all the firmware stuff. So we Turns that you have to actually flash the BMS with special firmware There was you know those three files that actually says that to do the shunt calibration You load this file onto the BMS So there's a special application file just for doing a shunt calibration Look up the shunt value recalibrate the shunt with the value based on the serial number I'd already extracted that serial number validated that it was in the the table. So I knew I was okay there that all went without a hitch Flash the BMS with its new bootloader flash the BMS with its new application firmware updated internal dot dat change the pack ID and Then tried to do a firmware redeploy, which is the thing that's just do after you change any component on the vehicle and then drive away, right? No No, this is where the fun begins I used every known technique that I've used before I've tried putting on new firmware. I messed with this for a day and a half I think I aged myself quite a bit stress myself out It failed it would not Redeploy it would not reinstall. I was getting an error every single time So I started logging a lot of data I Tried to troubleshoot couldn't figure it out was stressed out Finally just said screw it Toad the car for mansion could go longer back to Vegas so I can continue to work on it But it only cost 360 or three point six hundred dollars. So not great not terrible, right? But I learned something cool I was able to figure something else out. So flew home Started messing with my bench trying to replicate this condition dug through my error logs that I Copiesly captured and I was noticing an error mentioning something called firmware dr. See that file was generating some type of error It turns out the gateway uses this is a validation check And the values ended a calculator in the upgrade redeploy So when that in this file stores all these CRC values So I had seen one other reference to it The Tencent guys had done a previous Tesla hacking presentation. Well, they talked about how the gateway used this file So I went to the gateway and said, you know instead of GW transfer internal dot that GW transfer firmware at RC and boom It gave me the file. I saw it and had all these CRC values. So all I had to do was look up from the There's a map of files for the specific BMS firmware that's supposed to be running for that pack ID and that version of software made sure that version of software was or firmware was running on the BMS and then grabbed its CRC value Replace the CRC value in firmware daughter C with the value for the new pack ID And if you look here at the end, you can see the there's a separate one for file CRC There's even little values for the door handles this drfp and drrp those are values for the various door handles So if you upgrade the door handle new firmware firmware that RC has to be changed It turns out I had new door handle that I actually had to change to but it wasn't causing an error That wasn't causing the vehicle be able to operate. So what you do is you strip off the CRC line Calculate the new CRC. It turns out it's a gem CRC 32. So I'll just figure that out while they're helping me I didn't figure that out myself And then put the file back on the gateway after I did that the car woke up the errors cleared and That was the problem and I eventually figured out the reason for the other failure I'm not gonna talk about that. It's really embarrassing. It was something added to the car that it didn't have it didn't need but Yeah, hit me up there with the beer sometime and I'll talk about it So here is the the power before and after the upgrade I was I grabbed the Canvas data before Before the upgrade it had 1305 amps available. These are static values again These aren't the ones that are available based on state of charge. These are a hard limit After the upgrade had 1500 and 16 amps But it actually has a separate canvas line 202 instead of 72 the debug one that Actually has a slightly lower value and I have no idea why so if someone from Tesla wants to tell me I'll keep it to myself. I'm just really curious why the vehicle has that extra 16 plus 8 24 amps of power missing actually 23.6 amps of power missing so If you can tell me that I'm really curious about that It doesn't look like there's any D rating going on because that value right above it is is there says during an active zero So I'm assuming that means no, but I'm curious Okay, so here's where we can take this project from here if you want to help the TMS 320 is Supporting Ida Pro. I've actually got some stuff on that in the car hacking village deep dive Again arbitration ID 72 and 202 defined max current. There's one more for the other drive Inverter I can't remember what it is. So it seems possible to increase speed behind ludicrous and actually do it safely It's been done by others There's a guy back east who actually has a rear-wheel drive P85 that he faked the unit out and basically created a can bus emulator for the front drive unit and Bumped the the BMS beyond the limits that it can handle So it seems that all you have to do is go into that firmware and bump the values up a bit Probably even recap killer calculate the CRC value and it looks like It since we know how to change the gateway we can just change that as well But it could be dangerous if you take this too far.  It looks like it the current amp drain for the Model s batteries. It's only like 6.6 C 20 amps for sell For those of you who worked in RC before you know that you can actually go beyond that for short periods of time But if who knows what the IGP T's it's in the drive unit can handle you blow those you're looking at really expensive upgrade But again, I want just want to reverse engineer this for the person Point of reverse engineering. I want to understand when these values are restored So that others more brave than I can actually Turn their cars into true drag monsters You know I'll put in better Batteries maybe double up on the number of batteries and just turn their model s's into just Things that annihilate everything else on the track I'd also like to understand the shunt parameters CA you one CJ one. I don't know what those are I just know they had to change so again come check out the car hacking village a deep dive and we'll Do some more analysis the firmware will actually show where you can take a project from here So reference materials I had to remove the first link so we don't have a copyright. That was the first thing so But again, thank you for the space holes moving for inspiring ludicrous mode And then the p85d announcement the ludicrous announcement Electro boom if you haven't checked out his YouTube page pretty funny guy He actually describes a current shine better than I ever could The data sheet for the TMS 320 on TI site very helpful for the item stuff that I was working on I like to thank intrepid control systems. They made the vehicle spy software Bitbuster, thank you for letting me use your lift in your garage. It would have been it was invaluable in this work The guys who helped me with the toolbox reversing know you are thank you all invaluable for all this work And then the Tesla security team, thank you for actually letting me do this talk and being so supportive of this research And then of course on all these names the model SP 5d. Those are all registered pigmars of Tesla We are not sponsored by or associated with that's done anyway And thank you for listening. We're gonna have a Q&A at some point later today. So Bring your questions there. I'd be happy to answer them


Growing up I spent my summers working at a little amusement park that was located near my hometown and One of the things that we would spend a lot of time talking about in addition to just some basic training on how to operate the ride And how to deal with people, but we spent a lot of time talking about what to do when things go wrong We spent hours and hours working with employees on okay, this happens in this emergency situation What's the quickest way to shut the ride down and get people safe to you know to make sure everybody is safe We spent a lot of time talking about worst-case scenarios right and I think that's true in pretty much every organization It's not a matter of if a crisis is going to happen It's a matter of when and how do you deal with it right so crisis You know planning and preparation and and just be you know engagement during a time of crisis It's just a part of any organizational life cycle and certainly nowhere is that more true than for the public relations folks and Media relations people in that in that organization so in this video I want to talk just a little bit about crisis planning in public relations How do we go about it? What are some tips for making sure we can do that effectively especially in the modern age? Given the different communication tools that we have So first of all you ought to have this crisis plan checklist there You ought to have a plan in place can't stress how important it is for there to be an enormous amount of preparation To kind of anticipate what's coming to have an idea of what may happen and Plan for that then have a plan in place for you know What ifs what if this happens? What if that happens? They don't want it You know what if the moon crashes into earth? That's a little bit outside the realm of what we can plan for and should spend our time on but We ought to take an honest look at the industry that we're in and the area that we're in and try and anticipate What are some things that could happen and what can we do to be prepared when for when they do happen? So the first things first in any kind of crisis your leadership needs to be visible Leadership from you as the public relations person, but also leadership from the organization Who's the head of that organization the face of that organization? The the the person that people most associate with that organization They need to be front and center the leadership needs to be visible not hidden away somewhere not protected They need to be front and center Working with the media working with the public's working with whatever forces artwork to handle that situation If that leadership role is critical and they must be visible during these times of crisis As I was kind of touching on before you need to have these you need to do a vulnerability analysis You need to have an idea of what may be coming If you're in an area that deals with a lot of volatile chemicals, what happens if those chemicals spill What's our plan for that and what's our plan not only for dealing with those chemicals But what's our plan for informing the public and managing the narrative on that end of things? So whatever industry you're in for us at the amusement park It was what happens of a ride breaks down or if something goes wrong What's our vulnerable vulnerability there and how do we keep people safe? How do we protect people and also protect the the longevity and the the The reputation of the park as someplace safe and some say someplace reliable for people to come to so what are the vulnerabilities that exist in your organization We ought to be able to identify those and then again begin to put a plan in place We can to have those procedures in place for what happens when this happens what happens when this other thing happens And when after we do these vulnerability analysis, we need to have put these procedures in place for When they do happen if they haven't forbid would happen, right? And we do need to plan for those worst-case scenarios not to be all doom and gloom But but bad things happen right bad things happen in the world So we need to plan for what's the worst possible thing that could happen And let's have a plan in place that we can deal with that effectively not only again in that moment in terms of Keeping people safe keeping operations moving forward But also protecting the reputation of our organization and the kind of the credibility of our of our leadership in our organization So we need to plan for these worst-case scenarios We didn't have a plan in place after we've done these vulnerability analyses the one unique aspect of sort of Modern times is this idea of social media So how does social media impact things in a crisis? I want to take a look at it kind of a pros and cons list here of social media in a crisis just real quickly First of all the positives with social media are that it's a direct connection between you and the public So it gives you immediate and direct access to the public's and the media that you have so That you want to communicate that message to directly or not dependent on a third party or anything So you can be direct in communicating with me. It is as I mentioned also immediate You don't have to there's no lag between the time that you can get information out You can immediately be connecting with with people and you can expect it to spread rapidly You can expect that expect that message to spread Rapidly be shared amongst people in a viral sense right hopefully not literally but in a viral sense over social media It can be spread rapidly and so though those are some of the positive things We can direct we can connect you directly with our publics We can do so immediately and we can expect that message to be spread fairly quickly On the downside the negatives are that sometimes in social media things can get lost in the noise, right? There's a lot happening on social media And so sometimes our message could just be one of billions at any given time And so hopefully won't get lost in the noise, but that is a danger That's a downside of social media is that there's just so much of it It's hard for people to really keep track sometimes Also the sense of permanence there's an idea that what we put out there is out there forever for better or for worse What you put on social media is going to be out there forever Just assume somebody's going to take a screenshot of it and even if you delete that message It's still going to be out there at some point So and there's a permanence there So we ought to be very very careful about what we put out there because it there is that sense of permanence and then of course You're gonna have trolls on social media right no matter what's happening no matter Well, how good your reaction is or how good your intentions are or whatever?  They're just gonna be negative all over kind of try and bring you down call your names all that kind of stuff So you just if you're gonna be engaged in social media You just have to anticipate that expect it and and kind of roll with it Okay, so in addition to those kind of positives and negatives about social media We can keep these principles in mind when we're using social media in a crisis situation There's some things we need to bear in mind first of all We should use social media to provide real-time updates We ought to take advantage of that immediacy and and really provide real-time updates give people a reason to tune into our Social media to really be focused on that and use it in a positive way to give the most up-to-date accurate information that we can using those outlets We ought to put the word out quickly and widely I would put the word out quickly and widely and so We can use it to to spread our message as we talked about it in in an immediate sense But also in a rapid sense and so we ought to take advantage of that too that it's going to hopefully spread Virally and get out quickly so we can we can share information quickly We have to use one voice when we're thinking about social media in a crisis We can't have different departments posting and and sharing different information and taking different approaches We have to as an organization speak with one voice. So there ought to be one specific focused You know outlet for these things especially in a crisis It's probably true in general, but particularly in a crisis. We have to have one voice as an organization We also do want to consider those media needs We ought to post information in a way that you know We have this media center or whatever the the media can get to information quickly and can be housed there To think about their deadlines We ought to think about the fact that they might want it You know that give them a tip our heads up that you know We're getting ready to post some information and so they can have those people ready and and not be caught off-guards We ought to keep the if we want the the partnership of the media. We need to keep their needs in mind as well And it's sort of along the same lines. We ought to keep our employees in the loop They should not be learning about this information on social media themselves We ought to be focused on sharing that information with our employees as we have it so that they are also in the loop They can also be really good purveyors of information as well as as just keeping them informed They can be really helpful in in getting that information out there as well And then finally we need to be accessible in these types of situations It's really critical that that the public relations people in general and also the leadership of the organization be accessible be open be transparent Be available for discussions and to hear concerns and all kinds of things like that So you can see there's a there's a real process to crisis planning crisis management that when using public relations We've just barely touched on some of the highlights here But you don't we have to have this cycle in mind We need to be prepared and in advance before anything ever happens Then we have the actual response then we have the recovery and then we do what we can to keep those things from happening again through Mitigation and prevention, but then when it does when things happen, we need one to be prepared for that again It's this constant cycle and it ought to be on our mind in terms of public relations at all times How are we going to handle this? How are we going to anticipate these things and what are we going to do when they do happen? If you have questions about crisis planning and in public relations or anything else related to the field Please feel free to email me. I'd love to hear from you there in the meantime I hope this has been helpful and give you a sense of what are some of the highlights and guidelines that we need to keep in mind for crisis management and crisis planning in the field of public relations


This is T F N N the tiger financial news network As we have the 2 p.m. Update here with David white we've got a few things some Nicks messages in the market fun buying is traditionally over by today that is when most funds about 80% of them in the Contract they have with the buyers say that they will be long 100% and of course that Is hedged by money managers? You don't want to confuse those two, but about 80 85% of all ETS and funds have to be long Any of the cash that they get the rest of the month by then The TLT is basically flat on the day one oh two fifty it continues to At least tread water if not go Lower it did bounced about 104 pulled back to one oh two forty eight Starting to looking forward. I don't have it on the list here, but it certainly jobs numbers in the morning I believe they're at 830 Probably bigger for me is golden week over on Monday, so we'll start having the Chinese come back and of course we've had a fairly large bounce off the low The question is do they come back to the market and start buying also a possibility Of course yesterday OPEC made their cut Seation and They're going to be cutting a little bit now. We don't have much movement. That's because Why we have almost nothing left in the strategic petroleum reserve We're gonna double down on taking that out until a couple of days after the election So right now crude oils still up about just a hair off of 1% but that is on the background of Basically selling our seed corn This year and then expecting that we'll have any kind of buffer if anything bad would happen Be back in just a few minutes with the show and of course Tim ord on at 2 15 The reality is that navigating financial markets can be risky


In this presentation, we will take a look at non-statistical sampling for tests of account balances. Note that we took a look at non-statistical sampling in a prior presentation with relation to tests of controls. Here, we're applying non-statistical sampling for account balances. So, you will see some similarities within the application of the non-statistical sampling. First, a word from our sponsor. Well, actually, these are just items that we picked from the YouTube shopping affiliate program, but that's actually good for you because these aren't things that were just given to us from some large corporation which we don't even use in exchange for us selling them to you. These are things that we actually researched, purchased, and used ourselves. Bayer Dynamic, not sure if I said that right, but this is the DT770 Pro 250 OHM Studio Reference Closed Back Headphones. I wear headphones basically every day for a large part of the day. They are important to me. Therefore, I've gone through many different kinds of headphones. I've had these for some time and they've worked quite well. They fit over my ears, but I'm still able to put my glasses on under the headphones. The headphones not pinching too tight on the glasses to give me a headache which is nice. The quality of the patting is good and it has lasted for some time. I've had these for some time now and they haven't gotten all torn up on me or anything like that. I also like that I have a cord when I'm doing my recordings as opposed to a USB centered headphone because that frees up a USB port and I find the USB headphones to be less reliable. They come with an audio jack that looks like this which is useful for me because that plugs into my audio interface. However, if you want to use the headphones for some other purpose, I believe it's fairly easy to get a converter to other types of audio jacks. If you would like a commercial free experience, consider subscribing to our website at accountinginstruction.com or accountinginstruction.thinkific.com where we have many different courses. You can purchase one at a time or have a subscription model given you access to all the courses. Courses which are well organized have other resources like excel files and PDF files to download and no commercials. Sampling unit for non-statistical sampling is generally a customer account, an individual transaction or a line item on a transaction. The following items must be considered when we're thinking about non-statistical sampling. Identify individually significant items. So we're going to consider those items that are individually significant. We'll talk more about that shortly. Determining the sample size, selecting sample items and calculating the sample results. We'll add some of these items in more detail now starting with identifying individually significant items. Items to be tested individually are items that may have a potential misstatement that individually exceeds the tolerable misstatement. So let's read that one more time. Items to be tested individually are items that may have the potential misstatements that individually in and of themselves, in other words, exceeds the tolerable misstatement. So if we look through the data and we have these types of areas that misstatement themselves for that individual item could exceed the tolerable misstatement, we want to pick those items out. These items will be tested 100% because the auditor is not willing to accept any sampling risk with regards to these items given their nature as significant items. Determining the sample size and selecting the sample. So how do we determine what the sample size is? This is going to be our formula. Sample size will be equal to the sampling population in the book value. So the book value population, then we have the tolerable minus the expected misstatement. So tolerable misstatement minus the expected misstatement will be divided into the sampling population book value or sampling population book value divided by tolerable misstatement minus expected misstatement times a confidence factor. Now this confidence factor might be given in basically our audit papers. We might have some standardized kind of factors that we would use something like a table such as this where the assessed risk of the material misstatement is here and then the desired level of confidence is going to be here. So if we have a high assess risk of material misstatement and a high desired level of confidence, then we're going to have a higher number that we're going to be used as the confidence factor in this case 2.9. If we have a high assess risk of material misstatement and a moderate desired level of confidence, then we'll have a lower factor high assess risk of material misstatement and a low desired confidence. Then we have a lower factor if we have a moderate and then of course in a high desired level of risk we're at this number. If we have moderate and then a desired we're at this number and so on and so forth. And you can see what the desire or what the effect would be in the formula given those numbers here in the confidence factor section of the formula. Calculate the sample results ratio projection method. So we're going to have two methods that we could use to calculate the sample results. This will be the ratio projection method. Apply the misstatement ratio in the sample to the population. So we're going to get the misstatement ratio in the sample, apply it to the population. It would look something like this. Assume the auditor finds $1,000 misstatement in a sample of 10,000. So we have a $1,000 misstatements in the sample of 10,000. The misstatement ratio then is 1,000 over 10,000 or 10%. Now if we apply that to the population, we could say, well, what if the population totals 300,000? The projected misstatement would then be 30,000 because we're going to take that 300,000 times the 10% and get the 30,000. So that's the ratio projection method, not the only method though, because we could use the difference projection method projects the average misstatement of each item in the sample to all items in the population. For example, assume the misstatement in a sample is 100 items that total $400. So 100 items, which total $400 is the misstatement for an average misstatement of $4. So we have the $4, which is the 400 divided by 100, and the population contains 15,000 items. The projected misstatement would then be 60,000 or the $4 times the 15,000 items. So that's going to be the difference projection method.