It's a pleasure to introduce Hanno Becht to you. He's no stranger to the chaos crowd. He's been to several Easter Hacks and at several other chaos events. Today he's here to talk about TLS 1.3, what it's all about, how it came to be, and what the future of it is going to look like. Please give a huge applause and welcome Hanno. Hello. Yeah. Okay. Hello. Today I would like to talk about a new revision of TLS. TLS is the Transpillers Security Protocol, where I hope that everyone knows. It's a protocol that we can set up on other protocols. And there is an authenticated and enclosed channel for a very secure Internet. And we have a new version since August, TLS 1.3. And first of all, I would like to talk about the story. Why did we have this new version? How did we get there? And what were the design decisions for this protocol? Yeah. The very first version of SSL was... That's what I hear about you. Which is still very similar to TLS 1.2, which we use very often these days. Then in 1999, it was handed over from Netscape to ITF, to the Internet Standards Organization. And they named it TLS. So that's the story of the versions. First of all, the SSL, I marked red here, because these two versions are broken. You can't really use them. You can't find a safe way to use them, just from the design of the protocol. Then in 1999, we named it TLS. And TLS is still okay if you do everything right, but it's still... It's not completely broken, but you should avoid it. TLS 1.2 is the one you use the most these days, and TLS 1.3 is the new version. And what you can see is that the biggest step is between 1.2 and 1.3. It took a long time for there to be no new developments. Okay. You've probably heard that TLS has a lot of similarities. And nowadays, a good similarity has a logo and a nice name. And I'd like to go into one similarity, a safe way. I was very surprised when I realized that there are these so-called padding oracles that appear in the CPC-mode. So, that's usually used automatically for the actual data, for the symmetric integration of the actual data. The thing is that when we integrate things, what we normally use are block numbers. So, block connections, so to speak. And they always integrate a certain data set, a certain amount of data, normally 16 bytes. And this CPC-mode was the standard mode in previous TLS-mode versions to connect. That's what it looks like. We have a start vector, IV, an initiation vector. And then we connect a block to data, and we export this connection to the next plain text that should be connected. So, the ciphertext is used, so to speak. And because the blocks are from data and our data can't always be in 16 bytes, it could also be 5 bytes blocks, we have to fill up this empty space. And for that we need a kind of padding. And in TLS, first we had data, and then we added a Mac. So, that's, so to speak, a value that the authenticity of the data has achieved. And that's what we solved. And this sequence of lines has been very difficult, because this padding is, if we have to fill up one byte, then we fill it up with 0, if we have to fill up two bytes, we fill it up with 1, if we have to fill up three bytes with 2, and so on. That's pretty easy to understand. Now, let's assume for a moment, we have a situation where an attacker can manipulate data and can also see if the server gets bad or bad padding or if he simply gets bad data and sleeps a lot for this Mac procedure. And that's the conclusion of the middle mode in the CPC mode. And what an attacker can do here is that the very first thing an attacker does is just throw a block away at the end. He simply blocks the transfer of the last block. And then, what we want to assume is that the attacker wants to have the last byte solved, because that could contain very interesting data. So what he can do is, he can manipulate the byte in the ciphertext with a, so what is it supposed to do? And a byte is just 256 bits, so a byte can be 256 bits, so he just has to guess enough often and then use this value to XOR. And what you can imagine now is that if we get XOR out of the back zero, then we can see that the padding is correct. If we get some garbage out of here, then we know that the padding was a mess. So if you just guess enough often enough, you can create a single byte here under the assumption that he will find out if the padding is correct or not. So he could create a byte. But he can also go on and say, we have already solved this one byte, then he can also go on to the next byte. So we XOR the right byte with the guessed byte from the first one, where we already know what it is. And XOR also the next byte in there. And if that is 1-1, then we know that we have a correct padding. So that's how the attacker recognizes the next byte. He knows that for all other bytes. In 2002, the padding oracles were found theoretically. TLS has different error messages, like if the padding is wrong, if the padding is wrong, we get the Sf wrong error. And if the mac was wrong, we get bad record mac error. The attacker can usually not see the TLS error. But if he could see it, he could use it as a padding oracle. Because they are solved, it is not a practical attack. In 2003, it became more practical with timing attacks. And this allowed practical decryption of TLS traffic. A little bit more practical decryption. This was fixed or kind of fixed. In later versions of TLS, it was fixed, so to speak. Directly here from the standard text, we have a little timing channel in the mac performance. If you read something like that, it sounds maybe... It depends on how large the data fragment is, but it should not be large enough to be exploitable. In 2013, we found lucky 13 attack that it is actually large enough to be exploitable. The designers of the standard belief was not large enough to be exploitable. And it is in theory possible to implement TLS in a way that is safe from these timing attacks. Theoretically, it is possible to implement TLS so that the CBC timing attack is safe, but it adds a lot of complexity to the code. We will see that later. Then there was another padding oracle, which was called Poodle, which... In 2014, we will see another padding oracle. That we call Poodle. The protocol was built in a way that you could not avoid this padding oracle. Directly in SSLv3, it was built into the design. That means you can't work around it. The reason here was... We find the same mistake in TLS again. And TLSv1 was that the padding was fixed to a specific value where in the past it could have any value. And it turned out that there were TLS implementations that were not checking that. And then TLS implementations, which should have used fixed paddings, but which simply did not check. And that makes TLS sensitive for Poodle. One of the people who found the Lucky 13 attack looked at implementations and saw it. One person who found the Lucky 13 attack found the Lucky Microseconds in 2015. In the SSL library of Amazon, S2N. And they had still a timing. And they also proved that the countermeasures of Amazon do not work against Lucky 13. Then there was a bug in OpenSSL, which was kind of funny, because when OpenSSL tried to fix this Lucky 13 attack, they introduced another padding oracle attack, which was actually much easier to export. In fact, they tried to fix it in OpenSSL, and another bug was added that made a new padding oracle possible. The simpler one as Lucky 13 is the Lucky Minus 20. Yes. As I said, the original attacks do not work, because the TLS errors are solved. But what if there are implementations that produce other errors that can be seen? For example, TCP errors, which can be used to set connections or timeouts. And of course, we find that in the free, wild-band implementation. Then I want to look at another attack, which is... Let's look at the other attacks, the so-called Bleichenbacher attacks, to establish a shared key. That was published by Daniel Bleichenbacher in 1998. If we look at the RSA connections, we have to prepare a little bit in the RSA connection. And the Pkcs1.5 standard. It starts with 002, random data as padding. Two zeros that mark the end of the padding. 003 stands for TLS1.2. Totally obvious, wasn't it? And then we have the data we want to hide. The point is now, that we know that a connected block has to start with 002. What if that's not the case? It decrypts some data from the client. And then it doesn't start with 002. What shall it do? And the naive thing would be, yeah, of course, we just send an error message, because something is obviously wrong here. We will tell the attacker something. That is, the decrypted data can't start with 002.  I didn't want to put the formulas on the slides for that. In TLS1.0 there were some countermeasures. The basic idea was that if you decrypt something, and that's wrong, then you should replace it with a random value and this random value as a secret key. And just do it as if nothing had happened. And then just keep going. And the handshake will be a failure, because you don't have the same key. That keeps the attacker from finding out whether the data is correct or not. In 2003, a research team found out that these countermeasures were incomprehensible and it's still not completely clear how it should be implemented, because there was this version problem and it wasn't exactly written what to do, even if only the version is wrong. So it was still possible to create an attack that, despite these countermeasures, still worked. In 2014, there was a paper that said that Java was still available to these same-bacher attacks, because there was still this decoding, this connection. And then an exception was thrown from Java and the exception is long enough that you could make a timing error. But now it wasn't really practical to use at that time. In 2016, there was the so-called Drown Attack, the Drown Attack. And that was a same-bacher attack in SSL Version 2. And now we could ask ourselves, okay, SSL is this super-old version from 1985 or whatever it is. But you could still use the data from a current TLS version. And if a server is still available, this old version is still supported. And that's why it's still relevant. That's the Drown Attack. And yes, I wanted to find out if there is still a server that is still available to these same-bacher attacks. So I wrote a little story about what it scanned. The first thing I found out was that Facebook was available and from the top 100 pages in the Alexa ranking there were still a third of the websites available. And at least 15 different implementations were available out there. So yes, that's what it was. And about a month ago, there was a newspaper that said that you could use cache side-channel attacks that are particularly relevant to cloud infrastructures for different servers. You can still use that to use these same-bacher attacks. And now I want to show you that you can't read it because it's way too small, but these are the articles, the sections that show in the different TLS versions the countermeasures against the different same-bacher attacks. And yes, they start with a small section of what you should use as a countermeasure and then they add more and then again in TLS 1 and 2. So what you can clearly see is that it's getting more and more complicated to protect yourself from these attacks. And yes, with each new TLS version more complexity was introduced to prevent these same-bacher attacks. And yes, that was only two examples. There were even a lot more attacks on TLS 1.2 and also older versions against bad caches. And the handshakes were also attacked. Sweet32 has attacked block ciphers that have small block sizes. Triple handshake is a pretty complicated interaction of different handshakes. And yes, the current, the general trend was that in TLS 1.2 and earlier and older if there was a mistake, there was a closure then the people just said, yes, we have to find a workaround for this security problem. And if the workaround doesn't work, well, if it doesn't work, then we just need more of it. We do new, secure methods, but the people are looking for it. So the old ones are still active. And the people can choose to use a slightly older and safer method. What has led to it that most of the time the unsafe methods have been used, because yes, there were there were methods that didn't have these weaknesses, but they were optional. And TLS 1.2. And I think that's the important the important changes that came with TLS 1.3. So the way of thinking has changed. The people said, okay, if there are some misunderstandings and we have something better, then we should remove the old that with the misunderstandings, the problematic one. And that was one of the main changes in TLS 1.3. So there were a lot of things that were simply removed. This CPC modus, for example, or RC4, also a different problematic Cypher. We also have Triple Desk, that's the one with the small block sizes. We still use GCM, but no longer with explicit nonces, so with explicit numbers, so to speak. We have RSA, a completely removed and only for signatures and hash functions, which have proven to be unsafe. Diffie-Helmen with adapted parameters or with small parameters were also removed, because they were also problematic. And also Electric Curves were removed, which did not appear so safe. And what also came some researchers, such as TLS, looked at a scientific path. They tried to analyze the format and also whether the various security features of the protocol could be improved. And many of the connections that I introduced before were found by these researchers and who analyzed it. But these analyzes also included TLS 1.3 to make a more robust protocol more robust against attacks. And this is also a great progress. There was a much, much better cooperation between scientists who looked at the program, the protocol and the people who wrote the protocol. But you could now say, okay, security is quite nice, but what we really, really need is speed. So what at least some people are particularly interested in. We want our Internet to be fast. We want our browser to be able to load the page immediately when we open it. And TLS 1.3 also introduced speed improvements. And I once presented a diagram for the handshake and it's pretty simple. So I just introduced the most important things that support my point. But if you look to the left how an old TLS handshake works, then it starts with this little tell-all and with which version and which encryption methods the client supports. The server answers which encryption methods it wants to use. And then the key exchange takes place and then the client sends his part from the key exchange, so from the key exchange exchange and a closing message. And then the server sends a closing message and then in TLS 1.3 it was a bit compromised. The client sends a key exchange, a closing message with his hello, his welcome, his connection start message. And the server answers the server hello, the closing message of the client and also with a closing message. And that leads to the client able to exchange data immediately. That's the situation for a voice handshake, a handshake that has no communication before.  And in the previous version you had to go in and out at least twice. So you can go much faster to transfer data. Okay, so we took out a roundtrip from this handshake. There are also security improvements in this handshake. So more security and more speed. And especially what we have is more security when we build up a existing connection again. So when we use a key in the previous connection. We can also protect more data. For example, when an attacker is playing around with the handshake. There are more theoretical attacks but we can also prevent them better. Okay, so Theles has a better and faster handshake. And if you want to know more details about this handshake then there was a talk in this congress two years ago that shows much more details. I can only recommend it to you. The link is here on the slides and the slides are online. There is also something called the zero roundtrip handshake. And that is even faster. We can send data immediately. How can we do that? Actually, we trickle a bit because we need a previous connection of the key we already have. And from this key we can generate a new key with which we can send data immediately. What we need is this pre-shared key a pre-shared key from a previous connection. And then we can send data without any delay. That's cool, right? But this zero roundtrip mode is not free of charge. There is a problem here so-called replay attack. That means an attacker can record the data we send and then send it again. And the server thinks well I'll just do twice what this request should do. There is a certain danger with this zero roundtrip handshake. And the standard also says it is important that you only use it when you have a profile how to use such a zero roundtrip handshake. Let's look at the HTTPS that is the protocol with which we will use it most often. If you look at the HTTPS then the standard says that a GET request should be idempotent. A POST request must not be fulfilled. What does this idempotent mean? That means that if you send the same request twice then the same answer should come. In theory you can say GET requests are idempotent that they are safe for zero roundtrip handshakes. The question is do web developers know what idempotent means? I have asked web developers if they know what it is and the answer is very bad. In an ideal situation where web developers know what HTTPS is, then you can use these zero roundtrip handshakes. Zero RTT doesn't have strong pre-safety. That means if this pre-safety is compromised then it means that the content of my connection can be laid open. It looks a bit problematic and many speculate that the attacks we see on HTTPS 1.3 will focus on this zero roundtrip handshake because it is one of the most fragile parts of the standard. But there is speed so we use it. The good news is that it is completely optional and we don't have to use it because we think it is problematic and if too many attacks take place that need these zero roundtrip handshakes then we turn it off and can use HTTPS 1.3 just not that fast. How do we deploy it now? We have a wonderful new protocol. We don't just have to secure it, not just fast. We also have to bring it into the world. And on the internet. To the real one. And not the theoretical internet where there are no bugs where everyone knows how protocol works but the real one with the internet of things devices and such devices. That starts with the version number. It may sound like a triviality but a new version of TLS 1.3 is the new version number for the protocol version that we see here on the red files. It is shown in a TLS 1.3 handshake. And there you can see different version numbers. On top you can see TLS 1.0 encoded as 0301 and later TLS 1.2 with 0303. That looks all the same. And then if you scroll further down you can see we still have under extension supported versions TLS 1.3 encoded as 0304. What just happens? That looks all the same. The first thing we have to see is that we can't encode TLS as a version 1 because it came after SSL 3. That means we will encode TLS 1 as version 3.1 and encode with 3.2, 3.3 and for 1.3 it will only be complicated. The first version that you saw in the white shark is from the so called TLS record layer. We can put it in for compatibility. It is a protocol in the protocol but it doesn't really matter. If we have a new TLS version we can't just tell everyone let's use all these new TLS versions tomorrow. So we have to be able to deploy them and still be compatible with the old versions. So let's assume we have a small TLS 1.2 but a TLS 1.0 server. There is a very complicated mechanism for that. TLS 1.2 is connected and says hey I speak TLS 1.2 the server says I don't know but the highest I can is TLS 1.0 and sends it back. If the client can still TLS 1.0 they can connect. That's pretty easy. Let me illustrate with this code to make it wrong. But we are talking about the real internet. And on the right internet there is business business solution. So very expensive and terribly bugged. So websites with Firewalls from Cisco or IBM Domino servers and there we get a business version but this conversation. The client server says I can't make a mistake. It's always the first 10 years old in the business world, very young. We call this intolerance that always happens when a new TLS version is introduced. Every time we introduced a new device that needs a new version then it simply doesn't work. Browsers have to somehow deal with it. The problem is when a TLS version brings a new version and nothing works then the user uses the browser and the user doesn't use the browser anymore. Browsers have to deal with it and what the browser is doing now is we try with the latest TLS version and if we get a mistake then we try a lower version and a lower version and somehow the connection works. We have a browser and a business server that supports version 1.0 and after 3 tries we have a connection. Now you can remember Poodle. I mentioned Oracle in version 3 that was discovered in 2014 You may be wondering SSL version 3 from 1996 pretty old who uses it in 2014? For 16 years you shouldn't use it anymore who uses it? For example Windows 7 used it that was never updated but ok normal browser and server should at least use TLS 1.0 maybe not 1.2 but at least 1.0 but we have this browser that tries to build a new connection when you find a mistake and what its attacker can do is to attack version 3 because it can block connection with a new TLS version which means it forces the little ones to do a downgrade on SSL 3.0 and then it can attack the gaps in SSL 3.0 Ok so the downgrades try to solve security problems we have to build a new workaround called SCSV a way for the server to say that it doesn't support this version implemented is a special encryption method with which the server can say to the client that he shouldn't do downgrades we had this workaround for broken server and need a workaround for security issues but at some point the business products corrected their mistakes and stopped and the browser could stop doing downgrades so they didn't solve it they solved it for version 1.2 but not for future versions so with TLS 1.3 we have the new version intolerance and we would break everything and the new security wouldn't help us much when the TLS working group realized that it overworked the handshake and in a way that the old version still remains with version 1.2 and a new extension that supports new TLS versions for example TLS 1.3 and also for future versions you probably wonder after the whole story we will have the same intolerance again and the server will make a mistake when they see a new version and to address this David Benjamin from Google made a proposal to improve the future compatibility and improved the grease mechanism this grease mechanism says that unknown versions in the list of supported TLS versions should be ignored and can connect with one of the supported versions and somehow we have to get the server to implement it and the idea is that with grease too many versions that don't exist yet that will never be used in real TLS versions in these versions so we can make sure that if the server really implement this function if he really ignores the values that he will then support future TLS versions meaningfully the hope is that when this business with its broken versions negotiations will be noticed before they bring their product to the market when a new TLS version will be around well we don't have any downgrades anymore we have the grease mechanism we can finally bring TLS 1.3 around but then there was this middle box problem in summer 2017 sorry this is the wrong year it should be 2016 sorry in summer 2016 TLS 1.3 was almost finished but then it took almost another year I'm sorry I made it completely apart 2017 was right and TLS was almost finished in 2018 until it was really finished and the reason for this was that browser manufacturers implemented a TLS 1.3 version and found a lot of connection errors and the reason for this was that there were devices that wanted to analyze the data traffic and they recognized that we don't know a TLS package that doesn't look like it normally so let's just throw it away that's just a weird TLS package let's just throw it away that was passive medium passive not active people who have done a manual attack but a router or what sits on the network and what data traffic looks like like a normal TLS package and then the browser manufacturers made a fix so that TLS 1.3 looks more like TLS 1.2 and the important thing was that they just introduced some old TLS 1.2 that should be changed so one of them is the change type aspect so the change method that was in TLS 1.2 and there was a signal that everything should be connected from now on and the idea was if we just send a meaningless CCS message then these devices might think that they can't connect and that's why they won't analyze and it actually worked that's why the connection errors were massively reduced so there were a few other things and at some point the errors were small enough that the browser manufacturers thought ok now we can use it but there were still a few errors that's for example a PIXMA printer from Canon they also built a HTTPS server with network support and we have to talk about the NSA when we remember the Snowden Affair one of the things that came out was that there was an accident generator called the dual ECD-RGB so an accident generator and it has a rear door a back door and most people believe that it's a rear door from the NSA so you can predict which accident numbers this accident generator will give and what was also in the Snowden was that the NSA gave 10 million dollars to the NSA security institute to implement this accident generator and there was a proposal for a TLS extension which is called Extended Random so it has an accident and they just called it an accident number why? there was no reason we could just do it it was just a proposal everyone can make proposals for new designs it was finished but then it was out there and in 2014 some researchers looked at this dual ECD and if you look at this Extended Random this extended addition then it's much easier to use this rear door in the accident generator and the NSA B-Safe also supported this extension but it was switched off and switched off when the F5 was on and there was no real implementation that really used it so there was no problem with this extension and they used the NSA B-Safe Bibliotheque and this extension activated the new design and because this extension only had a design it didn't have an official extension every extension had an official number so the server could see which extension it is but in the implementation they simply used and this is a collision with one of the obligatory extensions that made the TLS 1.3 so these can't support this new extension so they have this Extended Random and that wasn't it and then there was connection and in the TLS protocol they simply gave this extension a new number and then it didn't work and and there were many more such errors and also in the youngest past Java, which is also spread in the environment they now have TLS 1.3 support but that doesn't work so there are many errors What about future TLS versions? We have grease that helps us a bit it helps us with the versions but it doesn't help with such a complicated middle box problem there was the message from David Benjamin from Google that we simply a new TLS version that should only be used for a few months roll out and then deprecate so that the internet doesn't get used to it that there are new protocols and this deployment would be more difficult but enterprise security for instance if you go to business security conferences then you realize enterprise security people are interested in artificial intelligence so for example they want to use machine learning to recognize bad things for example you find that they want to use machine learning to recognize bad TLS traffic because the key is we can't recognize if the mail wire is in it so let's let us learn the machine so we would rather expect that in the future with increased machine learning TLS versions, number, change which will be even more difficult to fix one of the points at TLS was that it removed the early TLS solution handshake there is no probability secrecy and it is still harmful for the Bleichenbacher attacks I quote from a mail from the Bank Industry I have recently learned that there is a suggestion that many of our institutions would consider namely the RSA Key Exchange to deprecate that will create significant problems for banks that use all TLS internal and have significant security relevant in the TLS description and in Clartex it should mean that they treat each new connection with a new key according to the old protocol with the RSA the answer from Kenny Patterson from the group says no, we don't do it, we want a safer internet you are a little late for the party we are talking with the Forester from Ashenberg to learn to clean empty cans we are actually exactly the same with version 15 and the RSA Key Transport has already flown out 12 times the banks are usually pretty slow but that is already crazy there were a few versions a few suggestions to save it but they were rejected and the previous opinion with TLS is that the traffic should not be observed so we don't want to make anything easier on monitoring so the industry went to the ETSI and created a business enterprise TLS that allows these solutions the IETF was not particularly happy that the name TLS was misused there and the ETSI is still called ETSI TLS 1.3 is done starts to use everything your browser can probably do it too so in summary, what does TLS do TLS 1.3 behaves louder and safer is faster and new things on the internet deploy is chaos and we have time for questions as Hanna said we have about 6 minutes for questions we have 5 microphones in the hall so if you want to ask a question then come to the microphone and please ask a short clear question so we can question as many as possible thank you very much for the interesting talk is there a possibility to prevent the use of enterprise TLS yes there is the main idea is to use the state DeFiHammer exchange and if you see that it happens twice some servers use it for optimization, so it's not very safe there are longer discussions I can't answer that I can't understand it but there are options before we go to the next question please leave room to all people please do it as quietly as possible so we can finish the question session microphone 2 please hi I I was asked about the replay why is there nothing like sequence numbers there is something but the problem is if there are several TLS termination points then it's difficult to keep all the same state good a question from the internet please binary strike asks at TLS 1.3 in business environment shouldn't we take the step to get away from TLS on the firewall and instead do it on the endpoints in my opinion yes but there are a lot of people in the business world who don't decide for realists but discussions about network design belong to a completely different talk good question from the microphone please the question also to enterprise business TLS the a browser can connect to an enterprise TLS without problems yes it is so built that it is compatible and whether you can avoid can also be your own but talk to me later good a question from the internet please a question from the IRC would you recommend to include strange values in handshakes to train the implementers that's exactly what browsers do, that's exactly what I said but that only covers a small part of this deployment problems good we still have time, micro 2 please as you said we still have a lot of dirty flickering and work around around TLS 1.3 the browser implementations there is a possibility an requirement for TLS 1.3 or 1.4 to do that implementations really hold to this standard that there is a test or a self-certification that you have to to use the TLS 1.3 or 1.4 logo in theory you can do that but we actually don't want to introduce a certification regime where people ask for such a logo and an permission one of the big problems with the open architecture of the internet so we have to live with it there is no TLS police in particular so we don't have a way to take care of people using broken TLS implementations micro 5 please I have a question about source algorithm and TLS 1.3 because since quantum computing always becomes more current what is the current situation about TLS 1.3 and quantum-based algorithms with which you can break up solutions there is no greater change TLS 1.3 uses further algorithms that can be broken with quantum computers there is already early practice to use post-quantum algorithms to counter TLS but it is early practice I think in the next few years we will see such developments but there is 1.2 to 1.3 not yet last or second question micro 3 please in all TLS versions there was a problem for small devices with little power in TLS 1.3 there was an improvement that enables these devices to participate the performance issues of TLS the performance problems have been generally overpowered also on a very smooth device you can implement real crypto but I don't think such a big issue anymore because even IoT devices even Internet of Things devices can have enough powerful processors to be able to do that that ends our Q&A we have no more time please a big applause for Hanno


Hey, Bolo buddies. Thanks for watching. Okay, you guys. I've got 29 bread and butter bolos coming your way Items I bought low and sold for $35 or less. I'm gonna tell you where I got it What I paid for it and what it sold for these are my bread and butter So these are 35 dollars or less if you want to see my big money bolos I do have videos on those as well. All right, you guys these are typically easier to find items I picked these up at thrift stores, garage sales, state sales, Facebook marketplace And I'm gonna explain all of it as we go. All right, let's get started All right, so the first item The first item I sold are these vintage cutie club horse and dolls So they're like these little teeny tiny mini figures if you look at it in my hand, they are very very small I believe these came from a garage sale just in a mixed lot of things I had no clue what they were and I think I used Google Lens to figure it out, but I got I Ended up taking a best offer of $26 for these the buyer was all in for $34 and three cents so if you see these don't dismiss them because 26 bucks for what five little teeny dolls is pretty pretty good. I think Okay, the next item is from the marks of Guns of Navarone play set that I parted out I Had three floor pieces and the same person bought all three of them So they ended up paying $50 and 77 cents and then with shipping and tax and everything I believe they got my $5 shipping discount for buying multiple things So they were all in for 66 22. So there's this floor piece This floor piece and this floor piece so $50 and 77 cents for those three items plus shipping The next item I sold is this 2004 it's from Wendy's it's From the movie elf its buddy and it's like a little clip So it's a kid's meal toy you guys, but I thought that it was super cute I had a feeling it was gonna sell and it did This came from a garage sale for 25 cents It sold for $11 and 20 cents and the buyer was all in for $16 and 30 cents And you can see right here on the tag. It actually says Wendy's so that is the only reason that I knew The next item that sold is this snow babies ornament And I did take it out of the packaging and just to show each side because it was a pre-owned ornament It is a department 56 snow babies miniature ornament. I love you snowman and it is retired And I ended up taking a best offer of $10 on this and it sold for 1709 with tax and shipping and I picked that up at a thrift store for $1 The next item I sold is this lot of two vintage putz houses if you guys have never sold these They are definitely a bolo item. They typically always sell Some can go for hundreds of dollars and some are bread and butter. These two happen to be bread and butter I ended up selling these best offer of $24 and the buyer was all in for $32 and 96 cents and I picked these up at an estate sale for $1 the next item is this indoor battery operated wind chimes and The fan was kind of loud or I probably would have kept it just because it was so cool but I Didn't really notice the fan and my husband came home and he's like all I hear is the fan and I'm like really I don't think it's that bad. So I decided to just sell it and disclose that the fan is loud I Ended up selling this for a best offer of $20 the buyer was all in for $36 and 17 cents And I picked this up at a garage sale for $1 The next item I sold is this sweatshirt and I don't buy a lot of clothes anymore But I did pick this up at a thrift store. It was vintage. So vintage Disney. I was like I'm just gonna try it. It was like a dollar and I sold it for It was an auction and it sold for $26 and the buyer was all in for $36 98 So clothes really aren't my thing anymore, but I had to pick this one up The next item came from a mystery box that a subscriber sent me and I do have footage of that over on my sourcing with Bolo Buddies YouTube channel if you'd like to check that out She gifted this to me and these little vintage Christmas glass pine cones. They are light bulb covers They sold for $10 best offer and the buyer was all in for $16.91. I Think somebody could probably also use these like as just a little home decor thing. They're really cute The next item I sold is also from that marks Navarone play set This is a replacement wagon and I'm not sure what this actually is But I put the two pieces together and it sold for a best offer of $25 and the buyer was all in for $31 51 So my cost of goods for this I think I paid $3 for the entire play set and if you guys want to know more about this I was on a thrift battle on primetime treasure hunters channel if you go over there. I talk about this It was the second thrift battle. I was in The next item is this vintage Danish am scan fall seasonal decoration honeycomb acorns So I do believe that these were pre-owned because the packaging was open. So I marked them as used I sold these for $14 the buyer was all in for 2070 and I got these at a garage sale for $1 This ski mask, it's a winter knit face mask beanie cap and it's got reindeer and it's blue and orange And it's super super cool. I couldn't find anything like it. So I did put rare in the title HTF hard to find would be another good keyword I ended up taking a best offer of 24 on this and the buyer was all in for 29 90 and I can't remember where I got this The next item is this 1993 hurdle. I think it is farm country writing stable set. It is incomplete. It is vintage I ended up taking a best offer of 20 on this and it sold with tax and shipping for 37 57 Got this at a garage sale for 50 cents. So basically somebody was buying it incomplete They either already have it and they're looking for parts or they're gonna try to complete it. I'm not sure I can show you here. I laid everything else so they could see exactly What they were getting? The next item I sold are these Windsor and Newton Winton oil color They're paints you guys and I believe that they were still full to the top I don't know. I put pre-owned because I wasn't sure but they were super full I got these at a garage sale for two dollars took a best offer of 25 The buyer was all in for 34 97 and it as you can see here. These are the big tubes. They're not the little ones The next item I sold is this Hasbro transformers play school heroes rescue bot auto bot blur the car So if you use Google Lens, you can figure out the actual car name. This guy is blur These rescue bots range from bread and butter to a higher bread and butter I think 25 30 bucks. I've sold some of them for it really just depends I took a best offer of 14 on this I got it for a quarter at a thrift store and it sold for all in the buyer was all in for 20 74 Play draw create this came out of a mystery box. I just kind of was like it's new old stock Sell on Etsy, huh? That was a weird ring tone And I don't know if somebody liked my item favorited my item. I didn't know I got an alert for that Maybe that's something new. Okay. Sorry So yeah, this came out of a mystery box the reason I decided to list it is because it was new old stock It's not a high dollar item. I ended up taking a best offer of $12 and the buyer was all in for 25 82 By the time you add like tax and shipping it does add up The next item is this Disney Mickey Mouse pop-up pals activity toy collectible. It's hard to find it works It is vintage. I Got this also out of a mystery box and I took a best offer of $25 and the buyer was all in for 46 15 The next item is this connects screaming serpent roller coaster instruction manual only I sold this for $8 and 40 cents in the buyer paid shipping. So they were all in for 15 88 I have This is the second time I have parted out the screaming serpent So if it's incomplete, I usually will take the time to part it out because it does pretty well But it is very time-consuming. So I'm not sure if I'd advise it or not But sometimes I get in these moods to part things out and that's what I did The Fisher price little people Cinderella clip-clop horse if you can find these clip-clop horses They usually do pretty good. They're a great bread and butter item. They typically sell Pretty quickly this one is missing the carriage cover So I only sold it for $8 and 40 cents and the buyer was all in for 15 11 And I got it at a garage sale for a quarter But I guess my point in showing this is that even though the cover was missing somebody still bought it and Then I sold this one that actually has the cover you can see here It's the same item and I sold this one for $11 and 19 cents The buyer was all in for 1806 and I paid 50 cents for that one at a garage sale The next item are these it's a lot of 13 vintage 1990s McDonald's Barbie Happy Meal toys And I sold these for $17 and 50 cents. The buyer was all in for $31 and 63 cents I did put will need clean sold as seen because I was not going to take the time to Clean these up. So these came out of a mystery box The next item I sold is this lot of vintage Halloween die-cut party treat bags These also came out of a mystery box. I took a best offer of $15 on those the buyer was all in for 23 21 This is a little vintage wedding dress veil on a hanger. It's for a dollhouse. So it's a dollhouse miniature It's super super cute. I ended up selling this for $14 and the buyer paid shipping and tax all in for 2008 This is Hallmark computer friendly stationery. It's a sailboat. It is discontinued new old stock I ended up taking a best offer of $8 on this it did take a while to sell But I do want you guys to know that some vintage stationery can be big money So it is worth looking it up. This one not so much I mean, they paid me eight but after tax and shipping they were all in for 2041. So The next item is this Chuck E cheese limited edition soft play ball anything Chuck E cheese I pick up I Has a pretty good. I've never looked up the sell-through rate, but it sells well for me It seems like it always sells so if I see it I grab it this one Actually, I believe came out of a mystery box or I grotted at a garage So I know I've had a couple of different balls listed this one sold for $7 the buyer was all in for 17. I'm sorry 13 73 The next item is this official pit rose stock car Jeff Gordon baby Ruth new old stock Again, just a bread and butter item. I can't even remember where I got it It sold for $10 and 49 cents the buyer was all in for 1750 This Briar classic magical unicorn rainbow glitter Morgan Stowyan I got this at a thrift store for a quarter and it sold for a best offer of $12 and the buyer was all in for 1976 and The next item is this V tech rattle move-in zoom racer driver replacement yellow boy race car So he's a race car driver. I don't know why I put race car there. Maybe because he goes with a race car I don't know. Do you ever look back at your titles and are like, why did I do that? I could have hit sell similar This came out of a mystery box and it kind of rattles and I sold this for $8 and 40 cents and the buyer was all in for 1474 I really didn't know what this was. I Wasn't sure if it was gonna sell. I don't if I remember correctly. I couldn't figure out which place that it went to But I believe it's a replacement part. So Yeah, these small toys, I mean someone's looking for them and it's always nice when you can put a toy in A home with somebody that actually needs it So I know a lot of you won't take the time to list an item that's under $10 and you know I it's not my favorite thing to do but sometimes I'm just in the mood to list smalls They're easy. They're easy to ship and they turn a nice profit. So I usually get them for pennies So all right, you guys that was 29 bread and butter Bolo items items to be on the lookout for items You can buy low and sell for a decent profit. Let me know what you think in the comments drop me an emoji of a Hat down in the comments if you made it to the end of the video and there's gonna be some other videos popping up and a subscribe Over here. If you're not subscribed, I would greatly appreciate it and check out another video. All right, you guys Thanks for watching


There is no position that we are in at this moment that represents anything close to strength and certainly not with much of our Senate confirmed positions being vacant and empty. Oh, you mean the Speaker of the House? And that too. Yeah. So 113.99 and then the vote changed a little bit but it's still not the 218 they need. Do you mean that part? Yes. Like they can't even put out a condemnation letter from the House because they don't have a House Speaker? Look, I don't care really what they do in that chamber in terms of their leadership. I hope they are better representing the people who voted for them by getting the Speaker that they want and all voices heard on the right and the far right, everybody coming together. Great. Just can you do it in 15 minutes? Like why does this have to look like what it did when you chose McCarthy? And they're going to keep that part under wraps and I understand we won't see anybody until a full vote. But Kellyanne, we need to get moving. The segment that you just watched from Fox News is emblematic of the growing frustration conservatives feel over the Republican Speaker to buckle in the House.  But unfortunately for them, they're not taking the hint. Take this interview with Republican Bob Good, for example, with Neil Cavuto. All right, you're worried, though, no offense to you, Congress, that you guys are looking kind of like Keystone cops here. You can't get this done. And it doesn't vote well for Americans in their opinion of you running the House because you can't seem to run it. Well, remember that was said back in January, a week or two later, nobody cared that it took a few extra days to elect a Speaker. We've got to get this right. We will live with the impact of this decision for decades. And with $33 trillion national debt, $2 trillion deficit, an open border. But what you said in January blew up, right? Congress, there's no fault to you. It blew up. And I was not in favor. They keep the cheer when all it takes is one of you guys to torpedo a Speaker. Well, only one person can bring up the vote to consider when not to retain the Speaker. One person can't remove the Speaker, of course. But one person can bring up the vote, and Speaker McCarthy didn't have the votes to say a Speaker. And he got what he wanted. One guy. Yeah, seems kind of insane. Does it not? Now, the reason why there's so much frustration is because they are still deadlocked and the infighting continues. Now, since the last time that I talked about this, 113 House Republicans voted for Steve Scalise. And this means he's the nominee. Now, they held this vote during a secret ballot. But the problem is that 99 other Republicans voted for Jim Jordan, and they don't seem interested in Steve Scalise at all. And they don't seem willing to back down from that position, which is a problem. Hey, sorry to interrupt here, but it's Mike from the future. Just letting all of the viewers know that as soon as this video was finished, being edited and exported and being uploaded to YouTube, turns out we got some breaking news that I did not include in this video. Steve Scalise has ended his bid to be House Speaker. Now, what you're going to notice is that throughout this video, I talk about the attacks that he faced from Jim Jordan, from Donald Trump even. So you kind of understand that this was all kind of pointing in that direction. Having said that though, a lot of the stuff that I say is now irrelevant because I talk about it in the present tense as if he's still on the race when he is in fact no longer in the race. So keep that in mind as you watch the video. But regardless, enjoy, I'll give you additional updates next week if there's anything else. But, you know, it just kind of goes to show you that covering this show is very difficult. But I do think that a lot of the details in this video are still important because it gives you the most up to date accounting of what's happening.  But either way, back to you, past Mike. Enjoy the video, friends. And on top of that, Trump endorsed Jim Jordan over Steve Scalise. And that kind of gives them a little bit more ammunition to keep going for Jim Jordan since Daddy Trump has crowned his favorite. Well, I like Steve. I like both of them very much. But the problem, you know, Steve is a man that is in serious trouble from the standpoint of his cancer. I mean, he's got to get better. He put himself. I'm not talking about even country now. I'm saying, got to get better. And this is tremendous stress. All of the things that you hear about and, you know, things that you don't want to get involved in from the standpoint of getting well. Steve is going through very, very serious cancer therapy.  I went to the hospital. I was with him the night it happened. I was literally with him holding his hand. And I was there the night that it happened that the doctors gave him probably a 10% chance that he made it. But there's tremendous after effect there. But he's got a very serious form of cancer. And, you know, most importantly, I want Steve to get well. I just don't know how you can do the job when you have such a serious problem. Is that the only reason you endorse Jim Jordan? And you know what it does, these secrets, they drain you of strength, supposedly. It's like a draining of strength. And we need tremendous strength, both inside and out, because we have radical left lunatics like Nancy Pelosi and Schiff and all these crazy people that are so bad for our country. And they've got to fight them off and they've got to fight the outside world. So Steve Scalise can't be the fighter Republicans need right now because he is dealing with cancer. Now this is the argument that Marjorie Green is also making. She told reporters this on Capitol Hill. And she also wrote the same thing on Twitter saying, I just voted for Jim Jordan for Speaker on a private ballot in a conference and I will be voting for Jim Jordan on the House floor. I like Steve Scalise and I like him so much that I want to see him defeat cancer more than sacrifice his health in the most difficult position in Congress. I'm sure that's exactly why she's supporting Jim Jordan over Steve Scalise. Now she goes on to say that Republicans need full leadership, which is why she's supporting Jim Jordan so the party could focus on doing important things like protecting kids. Now in a moment I will explain why it is incredibly ironic to think that Jim Jordan of all people is going to protect kids but we'll come back to that. So we are seeing some butt hurt from Republicans who support Jim Jordan and don't like that Steve Scalise is in the lead. For example, Lauren Bobo tweeted, we had a chance to unify the party behind closed doors but the swamp and K Street lobbyists prevented that. The American people deserve a real change in leadership, not a continuation of the status quo. Now these people are so self-absorbed because if she actually wanted to unify the party, well more Republicans voted for Steve Scalise than Jim Jordan so isn't that more reason for you to switch sides and not them to switch sides? She can't see past her own biases. But what you're seeing here is signs of more rebellion from the fascist wing of the Republican party and while Jim Jordan is pretending to be a good sport, while he's talking to reporters at least, he is covertly trying to destroy Steve Scalise's chances. Newsweek reports allies of Ohio congressman Jim Jordan are trying to sabotage House Majority Leader Steve Scalise's bid to become House Speaker by claiming the Louisiana representative has spent hundreds of thousands of dollars at a D.C. steak restaurant according to reports. Eric Cortalesa, a politics reporter for time, said supporters of Jordan have been sharing federal election commission documents around Washington D.C. showing that Scalise has spent more than $500,000 through his congressional campaign account at Capitol Grill since 2011. They are saying it reveals Scalise to be a creature of the Washington swamp and establishment, another sign that Republicans are not ready to corral around a single candidate. Some are preparing for a lengthy and bitter fight Cortalesa posted on X, formerly Twitter. Now I've got to say it is very telling that Jim Jordan's allies are using steak dinners to attack Steve Scalise instead of, you know, any of these other things you can attack him for, primarily him calling himself David Duke without the baggage. That seems pretty incriminating if you ask me, but of course such a statement doesn't even register as controversial to Republicans because they probably think that it's good and they like that about him. In fact, they find that an advantage, not a disadvantage, but they're going with steaks instead. Now look, I get that $500,000 is a lot to spend on steaks, but not the biggest concern that I have personally when it comes to Steve Scalise. But Jim Jordan has to tread very carefully here because there's a lot more dirt on him than there is on Steve Scalise. And it seems as if Scalise has kept his powder dry so far. But if he really wanted to, I think that he could destroy Jim Jordan. But not everyone is remaining quiet. And Jim Jordan's past is now coming back to haunt him since he's in the spotlight again. Newsweek reports four former wrestlers from Ohio State University who accused Representative Jim Jordan of failing to act on allegations of sexual abuse when he was the team's assistant coach said the congressman shouldn't become the new house speaker. Jordan has long denied accusations that he was aware of any abuse allegations aimed at OSU team doctor Richard Strauss, while the Republican worked as a coach between 1986 and 1994. The allegations against Jordan first emerged in 2018 with six former wrestlers telling CNN in 2020 that Jordan knew of complaints from students about Strauss but failed to take any action. Quote, he doesn't deserve to be house speaker, said Danyasha Yetz, one of the former OSU wrestlers. He still has to answer for what happened to us. Mike Sheik, who is one of the hundreds of OSU students who say they were abused by Strauss, do you really want a guy in that job who chose not to stand up for his guys? Is that the kind of character trait you want for a house speaker? Sheik dismissed Jordan's suggestions that he wasn't aware of any abuse allegations against Strauss. Quote, his locker was just a few spots away from mine and mine was near Dr. Strauss, Sheik said. And we were always talking about Dr. Strauss. There was no way he didn't know what was going on. Rocky Ratliff, another one of Strauss's alleged victims, who was also a lawyer representing some of the plaintiffs suing OSU, said the accusations surrounding Strauss were an open secret at the university while Jordan was there. Yeah, this story is genuinely nauseating, and I absolutely believe the students. Jim Jordan feigning ignorance is something that he's doing obviously to make himself seem innocent, but his negligence here was so bad that I think it was arguably criminal. We're talking about somebody that didn't just sexually abuse a couple of kids, because that would be bad in and of itself, right? He abused 177 male students at least within a 10-year period. And you mean to tell me that Jim Jordan never got the sense that something was off? I just don't buy it.  I don't think that anyone can be that oblivious. Jim Jordan made the choice to remain silent, because that was the most convenient option for him. Why rock the boat? Might as well allow the abuse to continue for years, even though it's an open secret that this is happening. So, going back to Marjorie Green's tweet about supporting Jim Jordan to protect kids, I find that so disgusting and comical, because he had the chance to protect kids from a serial predator and he failed miserably. But Marjorie Taylor-Green thinks that, well, he's the one we can trust to protect kids. This party is such a joke. But whenever Republicans are hit with the truth and inconvenient facts, well, they do what Jim Jordan did. Plead ignorance. This is what Nancy Mace, a supporter of Jim Jordan's bid-to-be-speaker, did when she was confronted about this on CBS News.  Give you any reservations. Yeah, I'm not familiar or aware with that. He's not indicted on anything that I'm aware of. And so I don't know anything and can't speak to that. But I will say that I'm in, as you said, more great. Yeah, I don't know anything and I don't know anything about that. What I do know is that I've been a very strong voice for women. I've talked to Jim Jordan and Steve Schles about that. I've been a very strong advocate for rape victims. As you mentioned earlier, the Judiciary Committee, as with him as chairman, recently passed a rape kit bill that Barbara Lee and I are working on. And those are the facts and the data that I have to work with and I've had a very positive experience with him in that regard. Yeah, I'm not buying it. It's despicable that this party who makes their entire identity or their main focus this year about protecting kids, they just they prop up somebody who protected a predator. It's genuinely morally egregious, but it's right on brand for Republicans. Now, since we're on the subject of Nancy Mace, I would be remiss to not mention her bizarre publicity stunt where she showed up to Congress wearing a big red A on her shirt. And she explained why she did this in an interview with reporters. So let's watch that. And then I have a lot to say when we come back. I'm wearing the scarlet letter after the week that I just had last week being a woman up here and being demonized for my vote and for my voice. I'm here to let the rest of the world know in the country know I'm on the side of the people. I'm not on the side of the establishment. And I'm going to do the right thing every single time, no matter the consequences, because I don't answer to anybody in D.C. I don't answer anyone in Washington. I only answer to the people. Okay. The problem Nancy is that that's not what that means. As HuffPost explains, the 19th century novel tells the story of a woman who gets pregnant and is forced to wear a scarlet letter A as punishment for adultery. Now people roasted her online for this saying, show me you haven't read Scarlet Letter without telling me. And this person correctly points out that she will never be Emma Stone, which is accurate because in the movie Easy A, which is where that screenshot came from, that was a teenager who wore the scarlet letter in response to her being slut shamed. Whereas Nancy Mace is a 45 year old woman who is not being accused of adultery or being punished for it to my knowledge. She's just doing it because she wants to make herself seem like the victim because Republicans didn't like that she voted to oust McCarthy when she knew that that would be controversial.  This is somebody who out of all the Republicans, she was seemingly more sane. I mean, still insane to be clear, but more sane than the rest of them. But in the course of a year, she has completely demolished her reputation as a more reasonable Republican.  But back to the speaker race, because the pressure is increasing on Republicans to find someone, especially now since they want to vote to send military aid to Israel. But neither the nominee or the runner up are seemingly able to get enough support in the event this came to a vote on the House floor. And they know that and that lack of a consensus has led to Kevin McCarthy flirting with the idea of once again, throwing his hat back in the ring. For example, he tweeted out a five point plan to respond to the war in Gaza and has expressed interest in reentering the race if there's enough support for him. But the problem is that there isn't enough support for him. The hill breaks down the current conundrum Republicans are dealing with. Quote, McCarthy's detractors appeared in no mood to allow for his return, and neither Jordan nor Scalise seemed to have a lock on the closed door conference vote planned for Wednesday. And as we saw, yeah, they were pretty divided, leaving the House GOP without a clear path through the speaker conundrum. Quote, we're kind of like a scattergram. We're all over the map in terms of the way forward, said Steve Womack, a leading appropriator adding to reporters that talks were civil during a conference meeting Monday evening, but that there are still hard feelings after McCarthy's ouster. This is a hard conference to lead, Womack continued. That's a polite way of putting it. There's a lot of free agents in there. That's another really polite way of putting it. A lot of people that just aren't going to forfeit their individual voting card. But I think right now the need for the conference is to function more like a team. Good luck, bud. The world's watching what's happening, and we need to come together and unify behind a speaker. Foreign Affairs Committee Chairman Michael McCull said Monday, but that pressure hasn't yet lead to a consensus. Yeah. And at the time that I record this video, at least, that still appears to be the case. It's almost as if this isn't a serious political party and they are incapable of governing because they're more concerned with theatrics and self-aggrandizement than actual governance. But keep in mind, as Jim Jordan attacks Steve Scalise, Steve Scalise is also getting attacked from a different angle because last week Axios reported that McCarthy's allies are also working covertly to undermine his bid to be speaker. So the person who is the nominee with the best chance is getting attacked from the other front runners. I don't know if you can call McCarthy a front runner, but he's at least a prominent Republican with a lot of sway still, and it just looks like a complete mess, and I just can't see that changing anytime soon. But I hope it gets messier because this is the most entertaining reality show I've seen in a while, and I will continue to watch so long as they continue to entertain and put on the show. Come, vagina.


You and your party, the Labour Party, went after John Key very heavily in the last election campaign. You made the whole campaign about trust. The idea was that you couldn't trust John Key. The party president was dispatched to try to dig up dirt from decades-old business deals to try and find some sort of wrongdoing. Is that something that you're apologising for this weekend as well, the way that you handled that? I think the publicity and the looking at the finances around Mr Key at the last election was a mistake, yes. Yeah, look, in my view, we're just back to where we were in the 2008 election, that the Labour Party decided they can't win the argument around the budget and they've gone after a dirty tricks campaign. And Pete Hodges has been making allegations that I do know. They've been actively involved. They've been running a parallel organisation. All those things are utterly incorrect. I've never tripped up. I've never stuffed up. I've done the job.