Kapal takes in starving dog, only to watch him transform before their eyes. Adapting a dog can require a leap of faith.  Was their previous owner abusive? Were they living on the streets for long? Do they have abandonment issues? A good shelter might be able to provide the answers to these questions, but there is no guarantee. That was certainly the case with Wolfgar the Husky, whose past came with a number of mysteries and complications. Luckily for him and for his owner, all he needed was a little love and he was ready to undergo an amazing transformation. When an injured user and her husband heard about a stray Husky who was wandering around their neighborhood in November of 2015, they were intrigued. Yet when the couple ventured out and saw the dog themselves, it became clear to them that something was peculiar about him. He was deeply afraid of not just the woman's husband, but of men in general. As you can see, he's in pretty bad shape in this photo, wrote the injured user. Notice the patchy fur and the visible ribs.  The couple took the pup, whom they later named Wolfgar to the vet right away. A normal male Husky ranges between 45 and 60 pounds depending on height. Weighing him at the vets, he was underweight at 39 pounds. The vet guesses he should have weighed closer to 50 to 55 pounds, wrote the injured user. He had demodectic mange, she continued, Huskies have two coats. So for the skin to be so red, dry and patchy, he had to be infected for quite some time. Our poor boy was likely suffering for months. What would happen to him? The woman said his immune system was shot and the vet prescribed him a hefty dose of antibiotics and medicated shampoo. Miraculously, he had no heartworms or fleas. After a thorough checkup, the couple took Wolfgar home. We immediately bought a kennel for him to sleep in. He went in without difficulty, which led us to believe he'd been previously crate-trained. We aren't sure of what he went through or where he came from. He wasn't chipped, not that we would have returned him anyway. My husband and I have a few guesses. He escaped on his own from an abusive or negligent owner, which might explain the scar. He was purposely abandoned. He belonged to an unlicensed breeder and escaped. Huskies aren't typically a breed you find wandering the streets, so we're strongly leaning towards the escaped theory, especially considering his wariness around men. It took some time for the dog to get used to his new surroundings. This is about a week after we brought him home, the woman's post explained. The first few nights he cried and cried in his kennel, but unfortunately due to his mange, we didn't want him sleeping in our room with us because the bedrooms were carpeted. During those initial days in his new home, Wolfgar would take a nap anywhere. He just seemed so exhausted from his ordeal. Now he primarily naps in his kennel or on a fluffy blanket in the living room. The story went on. Later on, he started to learn to appreciate the luxuries that new life afforded him. This is another week later, the Imdre user said. He's staring at a treat in my hand. Sometimes it's the only way to get him to look at the camera. This was the first visit to the local dog park. He had a fun time. I was worried about how he'd act around other dogs, but in typical husky fashion, he was friendly and playful right off the bat. He fell into the pond and I caught this wonderful moment a split second before he began to shake.  No big description. I just like this shot. She captioned this photo and no wonder. After everything that he'd gone through, it must have been nice to see him so happy, calm and healthy. He plays well with most other dogs, provided they're also friendly. Since then, we've encountered dogs that are aggressive or bark at him. He's very quiet as far as huskies go, so he never barks back. He mostly stares in confusion, she said. Unfortunately, no matter how friendly Wolfgar tried to be, there were other dogs who occasionally didn't want to reciprocate. This husky-shuppered mix wasn't too friendly. The woman explained, luckily, Wolfgar didn't seem too upset by it. Wolfgar tries to engage my in-laws senior husky. Notice how sparse his tail is in this picture. Though you can still see signs of his traumatic past, it definitely looked like Wolfgar was very eager to start interacting with other furry friends. We noticed that as he grew in new hair, it began to change color. When we first got him, his coat was a distinct red color. And currently, it's more of a gray color and even dark copper in the sunlight. Wolfgar truly was beginning to look like an entirely different dog. After just about a month in his new forever home, Wolfgar's personality was really starting to shine. Now he loves car rides. At this point, he's put on a few pounds, though you can still tell he's pretty scrawny. If there was one thing in the world that Wolfgar loved more than making friends and riding in the car, though, it must have been taking naps. Hey, we can all relate to that one, right? Just look at how peacefully he seems in this photograph. You can see his neck first starting to thicken, the Imjurg user continued. He loves going into the backyard. He likes to sit and observe the other people in the neighborhood. When people would walk too close, he'd bark. We liked this protective aspect, though now he's much more discerning of strangers. I could stand like a normal dog, but meh. Wolfgar's owner wrote alongside this image. He almost looked like a cat, huh? It was remarkable to see how much fun he and his family were having together, especially given everything he'd been through. Still, Wolfgar's transformation wasn't finished. You can really see how his coat darkened in this picture. I'm hoping this is just a winter coat because I loved his red coloring before. Either way, he looked super handsome. He likes to rest on the cool tiles whenever we get home from a tiring day at the dog park. Sometimes he can't stay awake. It's hard to blame the little guy for wanting to nap. Having a blast at the dog park sure must have been exhausting. Like so many other dogs would, Wolfgar looked absolutely thrilled and delighted to be getting ready for a journey on the road. Since his owners had no way of knowing before they adopted him, it must have been nice to learn that Wolfgar loved riding in cars so much. The dog park is very close to the house, so I always roll down the windows for him when we're driving, the Imjurg user said. Every dog owner knows that life is easier when the dog park is a short drive away and clearly Wolfgar was a fan. He's actually memorized the route. As we get closer, he starts whining and hopping around in the backseat out of excitement. Most dog owners probably know what that experience is like, who hasn't taken the leash out and watched their dog totally lose it as they ran around with sheer joy. Remember how wispy his tail was before? It certainly is remarkable to consider how much Wolfgar developed over the course of just a few months, both physically and emotionally. His tail was one of the best examples of just how much he changed since his rescue. While his owners could never have known just how perfect Wolfgar would be for their family, they would have probably guessed that he'd be very curious about their people food policy. Get your nose out of there Wolfgar.  Wolfgar was certainly no different. It's pretty obvious that his family fell in love with him right away. My favorite picture of him, he's now a healthy, happy, spoiled dog and we love him and all the fur he leaves on our clothes. Hopefully things only get better for Wolfgar and his family from here on out. Clearly, there's nowhere to go but up. Wolfgar may have had a rough start to his life but that didn't stop him from becoming the perfect family dog. It's great that this injured user and her husband decided to adopt him from his life on the street. Share this wonderful story with your friends below.


Hey everybody, what's going on? I am Greg Sussman joined today by JJ Zacharisen from FanDuel who's here to tell us who to buy and sell as we head into week number nine. What's happening JJ? Not too much man, definitely ready for this trade deadline to finally pass so we know what we're working with through the rest of the season. Just a few hours away so hopefully no players we talk about are affected and I don't think they will be. So let's start with some players to buy and that takes us to New England where you're buying James White here this week as Patriots are in Baltimore on Sunday night football. Why do you like James White? Yeah, look, James White's a guy who's going to give you consistent production week in and week out. So far this year he hasn't ranked worse than RB 23, but he hasn't been better than RB 14. So he's giving you that consistent PPR production, but all the while White has only scored once despite the fact that he's second in the NFL. Well, third, if you count a tie at the top between Julian Edelman and Mike Evans in the NFL and Red Zone targets, based on his yardage totals, he should have about 1.2 more touchdowns than he actually has. So he should have found the end zone more than once to start the year. But then on top of that, New England's been steamrolling teams and James White is still involved in this offense. What happens if they're in more of a negative game script or a neutral game script where they have to use their pass catching back a little bit more? I know Rex Burkhead is there and he can impact James White in some way, but James White also has the upside of something were to happen to someone like Sony Michelle. As we saw last year, James White was a really, really usable fantasy asset. So I like James White is kind of a low key buy right now. Patriots games haven't been all competitive, as you mentioned, and getting to a portion of their schedule where it could get a little bit more tough, which allows them to use James White in the role that we're used to seeing him in, which is a very effective one. James White could be half a cheap right now. So pounce before it's too late. You mentioned the trade deadline affecting some of our players, and that takes us to Laveon Bell. Rumors have circulated on Tuesday morning that the Jets may trade Laveon Bell. I think it'll be tougher than that, but anything's possible. So Kevin Garnett told us. Laveon Bell is a by candidate for you. How come? Yes, this past week, it was good to see that he was involved a little bit more in the passing game with Sam Darnall under center. He had about a 17% target share. He's still seeing about 86% of New York's rushes. We know that he's going to see a lot of volume in this backfield. That's the good news. The other set of good news is that they finally have a great schedule opening up for them. They get the Dolphins this week, then the Giants, and they get Washington. They have Oakland on the schedule since Natty and then Miami again. That's over their next six games. Those are all plus matchups for Laveon Bell. So given the fact that we know the volume will be there as long as he's still a New York jet, the matchups should also help him be productive. For me, it's only been a matter of time of where Laveon Bell got going in fantasy football, and maybe that matter of time is still coming. But the jet schedule eases up so much. Kind of the opposite of the Patriots, where Laveon Bell, as long as he remains in New York, he's going to find a rhythm. Remember, he played half this season without quarterback Sam Darnold. I think better days are ahead for Laveon Bell. Our final buy this week brings us to Los Angeles, where Mike Williams has positive touchdown regression coming. Right? He should. Yeah. I mean, last year, he had 10 touchdowns on 66 targets. He really outperformed in the touchdown column, but now he has 50 targets and he hasn't found the end zone. I mean, based on his yardage total, he should have about two and a half touchdowns, so he should positively regress there. But his peripheral numbers really aren't that bad either. He's seen at least 20% of the Chargers targets in three of his last four games. He's seventh in the NFL at wide receiver in air yards, and he has the highest average at the target on this Chargers team. So things should bounce back for Mike Williams. I think right now is the time to buy. Everything went Mike Williams way last year in the touchdown department. We haven't seen that thus far this season. And that's why things are going to look off for him. Once again, a window closing fast. So make sure you pound soon. All right, let's move on to the players that we're selling here this week, JJ. And that brings us to Cincinnati with Joe Mixing on a buy this week. I know you're normally buying players that are on a buy this week. You're selling Joe Mixing and I get it. He scored a touchdown. So just to sell that. Yeah, exactly. He finally had a good performance and we know that Joe Mixing isn't seeing the volume and really even the snap share that we expected him to see this season. He's only seen about 50 to 55 percent of the team snaps over the last few weeks. It's just how they're utilizing him. So I think that right now, just given the fact that he hasn't been used all that much as his receiving share is still under 10 percent. His target share is it's an obvious time to just get rid of Joe Mixing because we know that Cincinnati offense isn't moving the ball very well. Knowing how bad that Cincinnati offensive line is Joe Mixing, certainly a cell candidate. Somebody I was staying away from during drafts this season because of how brutal Cincinnati's offense could have been. And our worst fears have been realized. Joe Mixing clearly someone to sell this week. Moving on, we get to Kenny and Drake. And I know a lot of fantasy owners are buying Kenny and Drake with a new situation in Arizona with Chase Edmonds and David Johnson banged up. Drake could even get the start on Thursday night football against San Francisco. We are pivoting the other way. How come? I am. If you look at the upcoming schedule for Arizona, they get San Francisco this week. That's a tough matchup. They get Tampa Bay next week. That's they've given them the fewest rushing yards in football. Then they get San Francisco again. So that's obviously a tough matchup. And then they have their buys. That's four weeks of bad opponents slash not usable performances because he's going to be on a buy for Kenny and Drake. And by the time that he comes or by the time we're out of that buy, David Johnson could be back, should be back. Chase Edmonds, he's out for a few weeks. That's what's been reported. He could be back as well. Then all of a sudden you're in a mess. So I think Kenny and Drake, he might, you know, he might see a lot of volume while David Johnson sideline. But once he's back, he's not going to see a whole lot. He's not going to be very usable, even if he does see that volume in those matchups. That schedule is really, really tough going forward for Arizona. And at some point, Edmonds and DJ should be back in action, rendering Kenny and Drake nothing more than a handcuff. One final sell this week in that city of England Patriots defense, who is a top 10 fantasy scorer overall on the season thus far. But as we said earlier in the show, in a positive light for James White, Patriots schedule is getting a bit tougher, which means the New England defense shouldn't be putting up 20 points a week. Any more, I think. Yeah, look, the New England Patriots defense is very good. It's not that that we're looking at this situation and saying, Oh, they've only played bad teams, therefore, they're going to be worse when they play good teams. I mean, to be fair, though, of the seven opponents that they face, six of them rank in the top eight, and fantasy points allowed to opposing defenses. Even when you remove New England from that equation, because that obviously skews things a bit, each of those offenses rank in the top 11. So they have faced a cake schedule.  So they get Dallas as well. So they're going to face a tougher schedule. So if you can sell a defense right now at its peak, and you can get a usable running back or a wide receiver, a very usable one given the way that New England's performed, I think selling them makes sense. Now with that being said, they get Buffalo and Cincinnati in the fantasy playoffs in weeks 15 and 16. Those are two pretty good matchups for the New England Patriots. So if you're looking good, if your team's looking like they're it's going to make the playoffs, that I think you can hold New England and it's fine to not sell them. But I think that you should at least go to other owners in your fantasy league and see what they would give you for New England Patriots defense, because I think that the valuation just given that they are a defense will probably be all over the place. And it's just interesting to see what you can get. You're absolutely right. Given that they are a defense, who knows what these desperate teams will offer. Even teams that are in the playoffs that are like, Hey, looking at that late season schedule against those teams that you mentioned, it'll be interesting to see what you could wind up getting for a defense like New England's. That's it for us here on the Fandall Hurry Up JJ. Best of luck on your waiver wire this weekend. We appreciate the time. Thanks, Greg. Take it easy. Tomorrow, Jim Sonnis will join me as we take a look at week nine from a DFS perspective. Have a great night and we'll see you back here tomorrow.


Hey, Bolo buddies. Thanks for watching. All right, you guys it is time for the featured members Bolo video And this is part two. I have 44 big money Bolo's coming your way items that you can pick up at thrift stores, garage sales, estate sales Wait until you see these Bolo's. So like I said, these are members of my channel And if you would like to join memberships to be in a video, you can join down below The join button is by the like and subscribe if you don't see it It should be linked in the description So definitely check that out if that's something you're interested in my channel is completely free That is just something I do to for members so that they can get shout outs and videos. So thank you for being here Thank you for watching be sure to subscribe if you have not already and we're gonna get started I'm gonna tell you where they got it what they paid for it and what it sold for so Just be prepared to have your socks knocked off The last item gonna I'm gonna show you which was on the thumbnail Unbelievable unbelievable. So I am gonna make you wait for it but stay tuned and I'm gonna go through 22 items and then we're gonna have a speed round where I do 22 items fast. So Let's get started here and the first item comes from 1987 ventures Tracy and you guys she has a newer channel, but she is a bolo finder. So you definitely want to go over and subscribe to her and She sold this vintage Storetex white Wonder weave thermal insulating Baby blanket with satin trim. So some of these satin trim blankets can do really really well I've not heard of this brand But I love the vintage advertising on the front so cool. She got this at a Church thrift store for three bucks and she sold it for a hundred and seventy-five dollars and eighty-seven cents The next item comes from antiques from Karen Janet and antiques from Karen what her channel is about is she inherited an estate from her mother her mom is Karen and She was not a reseller you guys, but she started this channel to share with YouTube about her journey of going through this estate, but her mom had an antique store So you guys this is packed with information. So go check it out. Super cool idea for a Channel, but she has a thing where she shows the stuff from what I understand This is what she told me I have not caught alive yet and you guys that are in the chat help her identify things So that's super fun, too So check her out and this is one of the items that she found and sold so she is a reseller now and She's got some bolo's that were hiding in her mom's estate. I will tell you that this is a Fisher price castle you guys It's from 1994 great adventure castle open box complete and it sold for 249 dollars and 99 cents plus shipping. How cool is that? The next item comes from designs by Josie and she recently just put out her first video and This is what she sold it is an induction coils Kurt's soil. I don't know. It's some sort of trade school book from 1906 you guys How cool is that and she got this at an auction? She paid $5 for it ended ended up taking a best offer of $80 The next item is flippin palettes and flippin palettes That's just what their name says they buy things wholesale like liquidation stuff and they sell it and she did mention that they're gonna be going over to family flips and Lindy Glenn I think they both bought pallets or they're running pallet stores now So I think they're gonna go visit those stores. So that should be some fun content coming up on their channel soon And I don't do pallets So this is somebody who's gonna help you learn about pallets because that is not my wheelhouse I'm not interested in pallets. However, she did just submit her. This is my bolo video and It's pretty amazing how much money she made on one item So you guys will see that in a future video, but this is Rogaine women's hair regrowth treatment and She got this from a Walgreens pallet she paid about three bucks for it and she sold this for $29 and 99 cents plus shipping The next item was sold by got drunk got drunk got junk in our trunk I don't know why I always mess up her name She has a lot of what solds and she has a lot of knowledge So go and check her out over on YouTube and she sold this vintage Stevie Ray concert shirt It's from 1990 and she got this at the bends for about 38 cents you guys and sold it for a hundred and ten plus shipping This next item comes from a little bluebird and this is her. What is that a book? Well, that looks a little Interesting anyway, this is her eBay store and she sells so many different things So definitely check out her store. It's pretty cool. Look at her mannequin. That's fun. Look at these shoes. Oh my goodness I love looking through people's stores. I could just scroll, you know, if I only had an Extra 20 hours a day, right? So much to do so little time. All right. This is what she sold it is a scriber or yes scribers magazine from 1909 Theodore Roosevelt first African article and It looks really old and the condition but I mean if it's really from 1909 I mean, it's really not in that bad a condition if it's that old, right? She got this at the bends for 25 cents and sold it for a best offer of 60 so I'm guessing she probably was Just wanting to move it quick because you never know with things like those They either sit or they sell fast, but usually you have to wait on the right buyer flipping it good is our retail arbitrage member and Yellow tag clearance. I used to do yellow tag clearance when I did retail arbitrage That used to be my thing yellow tag at TJ max. So in this video, he talks about that so you can go check that out He got these built the loss boots at Ross So again Ross Burlington TJ max Marshall's those places is where he gets his stuff He paid thirty four dollars and ninety nine cents for these and he flipped them for a hundred and forty dollars The next item was sold by the funky pickle thrifter and she does hard goods But she is like a jewelry Machine this girl finds the most amazing jewelry and this one right here is called Jewelry vintage jewelry 101 cleaning old jewelry. So she has trips Tricks and tips over on her channel and lots of what sold videos. So you will definitely get an education if you go over there She sold this Carly Simon lyric book with pictures and What is special about this is this item you can see right here. It looks like it has handwriting in it It's a proof and it was never published or released and she got this at a yard sale for one dollar And she took a best offer of a hundred and fifty on that the next item came from Danielle yard sales and dreams and One find made this box worth it. So you guys will have to go check that out She sold this Rubber face doll this one's by knickerbocker from the 1950s here is the little tag and Anything rubber face. I would recommend picking it up if you can get it cheap and if it's not cheap comp it first But she got this for a quarter at a rummage sale and sold it for eighty nine dollars and ninety nine cents plus shipping So again guys, I'm gonna finish going through each member and then again We're gonna have a speed round at the end and wait until you see the last item So this one comes from Queen of Hearts Charnell. She does not have a story yet So I'm just gonna kind of scroll through some of her items here So you guys can see some things that she has listed again just lots of a variety and What did she sell you ask? She sold this Catherine's collection jack-o-lantern pumpkin Halloween decor hanging ornament How cute is that you guys if you see Halloween stuff and it's vintage or It's signed or by a specific person always look it up This one she got at a thrift store for a dollar and she sold it for thirty three dollars and eighty eight cents plus shipping The thrifty nickels. This is her YouTube channel. She's a newer Channel but lots of content. She does some thread up boxes She actually has a men's box that she got and from what I understand the men's boxes are harder to find So go check that out and she got this in a thread up box. It's a Rebecca Minkoff purse and This came it's called a rescue box if you guys don't know she got this for $20 and took a best offer of 50 on this so she could have held out and got a little more but went for the quick sale and Sold it. So I don't know too much about thread up boxes. $20 an item seems high to me So I guess I would have to watch the unboxing and see what else she got the next item comes from Nikki love snacks and Nikki's got some reseller content over on her channel She doesn't put out content all the time but definitely sub her up when because when she does she puts out some cool stuff. I Absolutely love this one and I remember when she posted this on Instagram So you can follow her over there, but it's a Thomas wooden train California State Fair from 2007. It's rare It's still sealed you guys you guys know I love toys She got it at a charity shop for 99 cents you guys and she flipped it for $100 plus shipping super cool Gigi's goldmine again another really really awesome store and Definitely a bolo finder. So check out. They've got just tons of stuff in their store. So a good mix Got this at a Garage sale for $3 and ended up taking a best offer of 50 for this and it's like nativity ornaments Anything nativity I pick up But this one is Kurt Adler which Kurt Adler is a great brand always look up Kurt Adler if you see it and it's hand-blown glass So very cool The next item comes from mutton ridge finds and here is her store again All of the eBay stores are linked down below So if you see an item that interests you you can definitely Check them out down below and the YouTube channels are also linked. All right So mutton ridge finds sold these Barbie princess of Ireland and Nile princess dolls of the world It's a set of two. She got these on Facebook for $10 each and she sold Both of them together for 105 plus shipping The next item comes from chosen goods reseller you guys she is so close to 1k, please sub her up Let's get her to 1k She's doing a lot of live shows once a week and she interviews other resellers and I've talked her into Listing live. So she's doing some live listing shows I've been going live on my reseller testing bolo products and I've talked her into staying on I didn't really have to like twister What do you call that? I don't know. I don't even know how about what the saying is but I Just said you should go on after me if you're still in the mood to list and she went on and she went on for seven hours You guys seven hours. She's crazy. She was up all night listing with you guys. So super cool. Check her out This was an RA purchase. So Retail arbitrage these squish mallows So even if they are in the stores currently and they sell out people are gonna look for them on eBay and She picked this up for eight dollars and 25 cents and it sold for a best offer of 39 dollars and 15 cents And she has another one list listed. This is a five-year anniversary one. So Squish mallows do range. I do have some videos on squish mallows if you want to learn more One stop shop 59 again eBay store no YouTube channel very very cool variety of items check it out and We're gonna go right in to what they sold here They sold these vintage Brunberger metal eight millimeter film case holds 12 cases nine full five diameter for weight Reels I Don't really know what this is you guys. I got to be honest with you. I don't know if they have yeah, it looks like they have Content on them. I don't know. So I don't know what's on them, but interesting, right? Let's see where they get this a state sale 20 bucks sold for a hundred and fifty nine dollars and 40 cents plus shipping The next item comes from antiques at wandering Creek. I'm gonna kind of scroll through their store here And again, we're gonna go into the speed round here very soon and then the item they sold is A Bible it's a new American Bible giant print Catholic edition 1986 so I'm sure that having the big print is maybe Something that people you know that have glasses that don't want to wear their glasses all the time might really like Right that just have like impaired vision a little bit That need readers so giant print, you know, I don't know But it sold for forty five dollars picked it up it in a state sale for two dollars and free shipping on that one The next item comes from auctions for you and auctions for you and Donna telebotelino go back and forth on each other's channels I actually have an unboxing coming soon or I may have already released it by the time I show this video So go check that out and I recently did another one So I've got two over there for you guys to watch So what I do is I buy things from auctions for you and Donna tele and I Unboxed them on my channel, but they sell stuff to resellers. So if you're looking for inventory, they are both linked down below She sold this court corgi or corgi. I'm not sure how to say it.  You guys are definitely gonna learn from her channel. She sold this Bratz doll So what she did is she did a buyout of Bratz dolls She bought 39 of them all new sealed in the box you guys and She paid $10 each This one alone sold for 297 dollars plus shipping so if you can find the older ones in the original box Definitely a Bolo it kind of depends on which edition it is like this one is girls night out So certain ones are more just so desirable depending on how mass produced they were This one was a good one horse and hair curiosity shop one of the coolest eBay stores I say that every time and it's just because the items are so I mean look at them They all look vintage and well-made and hard to find very very cool and It has like her store has like a look to it like everything is it seems like it should all be in a shop Like it's I don't know it just all fits together She got this Santa and in a state sale for $35 and she sold it for 215 it is Leo Smith gift giver Santa it's retired Limited edition and it's a figurine you guys. So here's what it looks like full-size. Let me see if she usually takes a Picture of the bottom. There it is. It's just got the number. It's a little blurry But there's the marking that I was looking for Leo Smith The next item comes from Jair to dream big 1313 again fun fun store lots and lots of stuff here and she got this these I think it's Vintage oh talk out to guard to Gary. Maybe maybe the oh silent Togari, I don't know. Sorry. It's o-t-a-g i-r-i, but they are mugs and they're frogs and She said these sold really quick. She got them in a thrift store for five bucks and they sold for forty five dollars and fifty four cents Let me see. This is what it says on the bottom Mary Ann Is it Baker and Here is the little maiden Japan and there's the sticker So very cool The next item comes from the Cha-ching King and he is a major Bolo finder But I want to let you guys know he also has videos for like beginners on eBay like here's step-by-step eBay 2022 make more money in three clicks, but he also goes to a state sales. He's got a lot of content so definitely go check him out and And He sold this vintage Alford Dunhill World Travel Alarm you guys and it has a mechanical movement in it Which means it does not take a battery State sale ten bucks you guys and he sold this for a best offer of 350 and the reason he took a best offer is because it took a long time to sell So he just went ahead and accepted an offer. So the next item comes from oopsie Did I forget to pull up her I did So she is a new member and I thought I had her YouTube channel pulled up. So I do not but her YouTube channel is 1987 ventures Tracy and that is also her eBay store. So go down below and make sure you sub her up since I Or wait, was she the first one I did? I'm sorry. This is the speed round guys I forgot I did hers first. So we are going into the speed round and remember the last item that I'm gonna show you guys Oh, my goodness, but they're all amazing, but I just love the last one because it is just unbelievable Okay, so I thought I messed up and I didn't Tails from the crypt HBO lot of VHS. So I am just gonna tell you who sold it I'm not gonna pop up their channels for this part This is a speed round and you guys these are VHS again. They are not They're pre-owned. They're not sealed and she sold these for a hundred and twenty five dollars and eighty seven cents plus shipping She got them at a church thrift store for two bucks The next item comes from Antiques from Karen slash Janet vintage Latin English dictionary you guys. How cool is that from? 1960 Wow She ended up selling this for a best offer of a hundred and ninety five dollars and this came from her mom's estate The next item is just I I just don't even know what to say about this you guys. It's a little toy. It's a collectible Excuse me Green Bay Packers mascot Huddles I Don't know there it is. How crazy is that? this one was sold by Designs by Josie and she got this free from a friend and took a best offer of seventy dollars on that you guys Plus shipping is that unbelievable? That is unbelievable to me The next item was sold by flippin palettes again. They do the palettes the liquidation This is a rare skin fix nourishing cream and a lot of times What's good about palettes is you can get one item and you can list multiples And then you're you know listing one item with 20, you know quantity 20, so it's really Easy, but I don't know it doesn't get me excited I just I like going out and thrifting and trying to find the treasures But some people love it and there are so many YouTube channels that are so successful that do this so Check it out. You might like it. She got this off a CVS palette and She paid approximately two dollars each ten half sold for asking price So she sold ten of them for twenty nine fifty I know she told me she likes to spread her listings out so like when one sells she'll list another one so that she doesn't flood the market and So that's what she likes to do and that keeps income coming in all the time So that's why you only see quantity one vintage mid-century modern Jerry style and I love it. This is from got junk in our trunk and she even when she sent me the listing She said it's pronounced Jerry probably because she knew I'd be like Jair Jair jur It's Jerry, so she gave me a heads up you guys So I don't know I just thought that was fun and wanted to share it with you And I really like it that she knows me or she watches my channel enough to know that I always mess stuff up And she helped me out so high five to that She sold this for $49 on best offer and she got this at the bends for two dollars and they are it's a sculpture. It's a candle holder with birds The next item was sold by a little bluebird and this is a vintage women's perfume bottle It is empty and it's a collectible So because it's empty you can sell it on eBay and she got this for five cents and it came from I'm sorry. Yeah five cents and it was sitting in her money pile So she had bought a bunch of this stuff and it's just been sitting and sitting and sitting and I know she's really focusing on trying to get that stuff listed and This sold for forty four dollars plus shipping The next item comes from flipping it good these Kenneth Cole women's shoes They are a small size smaller sizes are harder to sell so he did say these took a while to sell But you guys he got them for thirty four ninety nine at Burlington and he flipped them for a hundred and twenty five So I'm guessing the size is what made these harder to sell The next item is this new head the monkeys DVD This one was sold by the funky pickle thrifter and she got this on Amazon Back when it was first released for fourteen dollars and ninety nine cents hung on to it And it sold for eighty nine dollars and ninety nine cents plus shipping The next item came from yard sales and dreams. It's a rare vintage Louis Nicole Victorian baby buggy prom Christmas ornament. Look at that How cool is that? Pretty neat, right? She got this at a storage unit for a dollar and flipped it for sixty five dollars plus shipping The next item comes from Queen of Hearts Charnell And she actually picked this up at the bends and I think she was gonna keep it And then she saw what it comped for and she's like I think I'll sell it It is a vintage raincoat by wipe it and it's got a flannel liner She sold this for sixty three dollars plus shipping The next item was this vintage Williamsburg Apple cone ten inch fresh fruit Christmas arrangement wood base How cool is that you guys so you like make a little tree out of fruit and She got this at the Goodwill for four dollars and ninety nine cents and she flipped it for a hundred and twenty five And this one comes from the thrifty nickels The next item is this Waterford crystal holiday heirlooms snow crystal jeweled Snowman ornament and this one was sold by Nikki love snacks Super cool got to be really careful when you ship them She got this for three dollars and ninety nine cents at a charity shop and she sold it for seventy five dollars plus shipping The next item is this GI Joe police officer and this one was sold by Gigi gold Gigi's goldmine And this was actually purchased from another member that I spoke of earlier auctions for you and He bought a toy box from her and this was one of the items in it I believe it was a hundred dollar toy box and it must have had His cost of goods was about five dollars each and he sold this one item for fifty So it's new old stock and auctions for you has tons of this stuff right now So if you're interested in looking for Reseller stuff check it out. She's linked below. This one comes from Mutton Ridge finds it is a vanity Set and it's really really pretty. It's got all of the you know It's got the little case and all the fun stuff that comes inside of it She said she did pay up for this at a vendors mall She paid 48 and it only sold for seventy one ninety nine and I say only because her profits were not that big after fees So I think she was expecting to get more out of this one Maybe she sat on it for a while and reduced the price put it on sale but Still a good flip if you can find it cheaper so You just never know sometimes, you know things are a home run and sometimes they don't end up selling for as much as we think this one comes from chosen goods reseller and This is a part of our thrift five and fifteen which is another reseller challenge that I did with a collab with other YouTube channels So if you put hashtag thrift fifth thrift five and fifteen that will pull up all the videos and what it was is We had to go into a thrift store We had fifteen minutes to grab five items and get out and then you guys voted on who won So really fun challenge if you guys like those types of videos There's a whole bunch of them a whole bunch of people did it But she got this at a thrift store for three dollars and ninety one cents And she ended up taking a best offer of thirty dollars and it's a puzzle So and I don't think she put puzzle in the title So she probably should have put puzzle in the title, but how many times do you guys do that where you're like I? Forgot to put what it was in the title. So The next item comes from who's this come from one stop shop 59 and it is a wood bowl And she got it from her mother-in-law At an estate and so it was free and she ended up selling this for a hundred dollars you guys. It's a teak wood Super super cool serving ball bowl hand carved and it's mid-century modern there The next item comes from Wandering Creek antiques It is a sterling silver tigers eye bracelet with a toggle clasp She got this For five dollars in a bulk jewelry buy from a friend and sold it for forty five dollars free shipping So jewelry is great because it's so easy to list and it's easy to ship this one comes from auctions for you and she did a wholesale buyout of makeup cosmetics Mirrors and she actually bought it from mr. Baez a lot and this was a while back before she got all of the toys But she has sold tons of these Irving rice mirrors at her auctions She sells them in lots so that people can buy them and sell them on eBay This one she happened to list and it sold for sixty nine dollars and ninety nine cents plus shipping Irving rice is a great brand And it's a makeup mirror The next item is this department 56 advent calendar. This one came from Mindful Recycle you guys I feel like advent calendars just do well Department 56 is also collectible, but she got this at an estate sale for six dollars Sold it for two hundred and it sold overnight again. That was Mindful Recycle The next item comes from horse and hair curiosity shop. It's a vintage rhino rhinoceros animal figure. So Let me see here if I can find a I don't see any markings on it. So It doesn't look like it's any brand So that is really cool that she sold something unbranded and she sold it for a hundred and ninety dollars you guys thrift stores six dollars and fifty cents The next item comes from dare to dream big 1313 build a bear if you guys haven't seen my top 10 build a bear to look for Definitely go check out that video. This one's a nice Bolo. It's um, it's more than bread and butter But it's not like one of the huge money ones, but it's nose lights up And she got this Where did she get this root off? thrift store five bucks sold fast and Sold it for 60 or wait. I'm sorry. Yeah 60 to 10 plus shipping And here is my favorite item and this was on the thumbnail You guys are not going to believe what this sold for so first off I'm going to tell you this is from chichin king and his tip For all of you is when you're at a state sales Look in the closets all the way in the back because the items are in the back Are items that haven't been worn for a long time. So it's probably the older stuff I I just can't even believe this one. Um, it's a champion sweatshirt. It's usma physical education I love his main photo here. It's got all of the pictures It's from the 70s. Here is his title vintage champion reverse weave usma physical education 70s sweatshirt gray medium amazing keywords This item is pre-owned He took a best offer of four hundred dollars for this you guys $400 for a champion sweatshirt And it sold in three hours And the kicker is he paid five dollars for it at an estate sale So I just want to say Oh my goodness. I need to find some champion sweatshirts. So thank you guys so much for being here Thank you for watching. Be sure to hit that thumbs up If you like this type of video, let me know in the comments. Let me know what you think Leave me an emoji of a hat and thank you for being here. Thank you for watching and I'll see you the next one


All right. Welcome back, everybody. I know it's getting a little late in the day, so thank you all for turning out. I'd like to introduce our next speaker, Lee Brothersston. He'll be talking about, as the slide deck suggests, Blue Team TLS Hugs. Let's all give him a warm welcome. Hello. Okay. Hi. So I'm going to take the standard format of state a problem, say you're all doing it wrong, and what we should do to fix it. A quick sort of upfront disclaimer. I mentioned HTTPS a lot. It's not a talk about HTTPS, but it's the TLS implementation that most people know, so it's an easy example.  It's pretty well understood, and TLS has been used everywhere. So a super quick primer just in case anyone doesn't know what TLS does and not SSL. It's not a cryptographic algorithm. It's a protocol for determining what kind of crypto you're going to use between two endpoints that don't know what each other supports. So it's a negotiation protocol for encryption rather than the encryption itself, although the encryption naturally follows in the payload afterwards. So here's how it works, or kind of how it works. This is really more how it works. So the client sends a client a hello packet, and that packet contains a bunch of information. That's things like what cryptographic protocols it supports, what hashing algorithms it supports, what elliptic curves it has, if any. And then the server applies with, from that list, I also accept these things, and they can determine what they're going to do. They then exchange keying data, and then encrypted data, and then renegotiate, and that carries on in a cycle until they're done. So that said, the current state of the art, we should look at that to sort of see what's wrong and where we can go and do other things in the future. There's really three things that defense people can do with TLS. You can ignore it, you can break it, so that's man in the middle, and that sort of thing, or you can embrace it. In the real world, we don't bother with embracing it, and we either ignore or break it. The closest to doing it right is actually the domestic situation in a lot of cases, not in a corporate environment. So I'll just explain a little about how, what I mean by each of these.  I mean, that's the point, you don't see the payload. If you look at the snort community rules as they stood at the time, this is the clear text and TLS-enabled versions of each of the protocols, and that's the number of rules. You can see there's significantly more for the clear text, because, you know, if you've got your IDS alerting on any request that's like a dot, dot, slash, dot, slash, dot, dot, slash, that will alert fine in clear text, but not in TLS. The TLS rules are just harplead and things like that. So you're largely blind to a whole sea of exploits, and so effectively it's just ignored. So that leads to this. Does anyone know what this is? I will give you a further hint. It is the universal firewall bypass port. Because if we don't understand crypto, we just let it through, right? Because you've seen this, I'm guessing. You can get out of a lot of corporate environments just by SSHing on port 443, because what are you going to do with port 443? Well, we'll come to what you can do, but right now we're talking, it's often ignored and just left open. You can also often connect even when they have a proxy and just use a connect command on port 443, and it will let you straight through. So what do we do in the situation where we're not looking at TLS on the network? Most of the time that comes down to using endpoint security solutions. So antivirus, anti-malware, you know, various memory protection techniques and that sort of thing to capture all the bad on the endpoint as it's coming in rather than looking at it on the network. We also look at blacklists. So you've got a list of blacklisted IP addresses, for example. You don't know what the data is going to them, but you know they're part of a command and control network or something. So you know that there's bad data going there. You avoid it, run away, and you know hope that that was a good blacklist. But there are problems with blacklists too. Very often they're not up to date or are lacking information, but even if they have the information, there's a lag between it coming from the real world to the blacklist, from the blacklist to your environment and your environment to you actioning it, by which time half the addresses are out of date. So some of the time we break TLS. So I'm talking things like where you have these proxies that run their own CA and they man in the middle of the traffic to explain how it works. You have a client, a proxy and the web server you're connecting to, or any other server, sorry. Your client makes a TLS handshake with the proxy and then fires a request. So sends the URL that it would like. The proxy then does a TLS handshake with the server. The request gets forwarded, goes to the server and it gets a response, which then gets forwarded and sent back to the client. The problem is that this stuff is in the clear. That's because the proxy has its own SSL certificate. And what this means is that you have the actual CA on the right that uses all the proper signatures and all the magic that's associated. And you've got your shonky, my first work CA happening on the left-hand side. And this brings like a whole ton of issues other than it's a really horrible thing to have to try and manage. So, to explain how that works, it breaks the CA model in a bunch of ways because although the CA model is kind of broken to start with, this breaks it even more because it is not one of the certificate authorities trusted by browsers, for example, and that causes a bunch of issues. And I'm just going to go through a few and then we can get onto what you can actually do to fix it. So there's simple compromised appliance. If that appliance in the middle got hacked, data's going through in the clear. It could be manipulated. It can be sniffed and logged and all sorts of stuff. So, you know, think of online banking or logging in to look at medical records or something like that, just compromising the device that has the certificate is enough. If the key that's on there gets compromised, that's bad too because if the key is lost or goes to someone else, they will be able to take that key and impersonate any website to your devices because when you set up that sort of system, you set the CA as trusted in all the endpoint devices. And also, key management is hard. It's really, really hard to get right. If you want the closest I can get to an empirical study on key management is hard, if you look at ISO 27002, and I apologize for compliance framework type stuff, but key management alone has a higher word count than the whole of the rest of the cryptographic control section. And in the cryptographic control section, six of those are words key management referring to go look at the key management section. There's also poor certificate validation. So, when you connect directly to something with a web browser or any other TLS-enabled client, it does a bunch of checks. It does things like does the host name on the certificate match what I was expecting? It checks the certificate chains, it looks for revoked certs, it looks to see if it's a trusted CA, all these things. None of these you see when you man in the middle because all you see is the one valid cert for everything that you just installed on that device. That means that you are trusting that device to do all that validation for you. If any of you have ever run those devices, you'll know that you can't trust them to do that. If nothing else, their list of trusted CAs is horrifically out of date, typically.  So let's talk about that trusted CA list. If you look in your browsers or your OS, in fact, as many browsers use the default OS12, you will see that there's the list of trusted CAs. So that is authorities who are able to sign certificates as valid. But these things get revoked. You trust what the appliance trusts, right? But a few months ago, a few months ago, WoSign got pulled by a bunch of browsers and pulled pretty quickly because of some of the practices they were employing. But if you are not updating that appliance in real time, you can go to one of those sites that the certificates have been pulled from and your browser will be none the wiser. It will think they're all valid because it's just getting that cert from the proxy. Anyway, there's also certificate unpinning. If anyone knows what certificate pinning is, this is where your client is preconfigured to say, when I connect to such and such a service, I expect to see this certificate or this certificate which has been signed by this CA or some combination it matches this fingerprint or it's got this intermediate one, but whatever you can pin to one degree or another what you're expecting to see. Certificates around the issue of things like, say a rogue government with not many scruples somewhere, convinces a CA to issue a certificate, a valid certificate for a domain that's really hosted with another CA, and then they can use that to man in the middle and without flagging up warnings because it comes from a valid CA. When you install a local CA, as is the case when you're having the man in the middle proxy, most browsers disable pinning. This is because if you're running one of these proxies, people like Google use pinning and they don't want Gmail to just fail everywhere on your corporate network. Disabling pinning is bad in a number of ways. And finally there's the malicious insider, just the member of staff who now, because they have access to the appliance or the certificate or both, has access to do all sorts of bad on your network and to your devices. So that is my brief TLS, we're doing it wrong. So I'm going to talk about trying to embrace it a little more and do the right thing. So let's embrace it. I'm going to set some goals. So if we look at all the different devices that intercept the traffic and do things to your traffic, they generally do this list. So it's things like content filtering, logging that content filtering, checking certificates, malware detection, et cetera, et cetera. In my opinion, which is largely unscientific, but I'm going to give it anyway. Go team. This is the stuff they approximately do right. This is the stuff I don't think they do particularly well. This is the stuff they sort of do well and not so well. And this is what we actually want. Not many people seem to want cryptographic checks. And by that, I mean checking which algorithms are used and not used. They're pretty happy to trust their browsers to do that. And granular content filtering, I have an argument about this, that people don't really need that. And by granular, I mean full URL content filtering instead of host name. For example, most people don't want to block one category of porn and not another category of porn. They just want to block Pornhub or not block Pornhub. That's pretty much where they're at. So I feel free to disagree, but that's what I'm saying. Anyway, so I'm going to try and get those goals sorted. So I'm a believer that perfection is the enemy of good enough. People boil the ocean trying to get RFPs done for 100% complete solution. So I'm trying to offer a, gets you a good chunk of the way there, but quickly and easily and without hassle. We have many cases in the real world where sort of half-assed things do work and get the job done. So we'll work with that. So I had a thought.  I did some studying a little while ago on TLS fingerprinting and you can use that to determine all sorts of bad stuff. The long and the short of that, there's another talk on that if you want to learn about the in-depth stuff, but TLS fingerprinting is basically you can go through and monitor the TLS handshake and determine what client it is. That means that you can treat this like an IDS and say, oh great, this host is connecting on Google Drive, this one's on Skype, this one's on Tor, this is using Chrome, this is using IE. If anyone uses a corporate environment, you'll know that seeing Chrome and IE is fine, seeing Tor and things is not. And depending on your environment, Google Drive or Dropbox or something could be potentially someone losing data. But what I'm getting at really is that it gives you the opportunity to understand the encrypted connections in your environment to a good way, a good degree, sorry. You can also use it to spot bad things in general. So you can spot rogue clients. You're in an all-MAC environment and you see IE, that's probably someone plugging their own laptop in. You can also spot malware. For example, Drydex use TLS. You can monitor the TLS connections that it makes and you can see that not only which clients you have are infected, you can map out the command and control network real-time as they talk back to it. This is Cisco saying the same thing because I can't push the slight advance button in a sensible order. But this is Cisco's blog that was saying, hey, we can't see stuff because malware uses TLS. But they do use different TLS fingerprints to a lot of other apps that you can often spot malware using it. You can also do semi-automated fingerprinting. So it's so easy to make fingerprints that you can automate creating a fingerprint for anything you see but have not seen before. And then that can be reused when you see that fingerprint coming again. So if it's seen once and associated with something bad and then you see it come back again, you can often tell that it's the same something bad. Prime examples are botnets have their own. Metasploit has its own. So you don't have to know what it is in advance. If you tie it back to a previous incident, you can still determine that it's bad. And you can do pseudo-anomaly-based detection as well, which is largely the same thing, but it's based on past behaviors. And finally, you've got fingerprint canaries. So if you think of being in the situation of being a generic ride-sharing app, a bankrupting blockbuster as a service, or one of the closed-API social media services, they all create their own API and their own client, and they don't open up to third parties. If you were to one of these companies, you could monitor all connections to your API endpoint to see if it matches the fingerprint of your client. If it doesn't match your official client, you just drop it on the floor and you've then removed Curl, Burp Suite, and all the other things that you potentially don't want touching your API endpoints, unless someone goes to the hassle of actually masquerading the TLS stack of that app. To give you an example of a similar technique, I mean, Mozilla released this blog about checking for man in the middle, which is exactly what I'm talking about here, based on the connections coming in from the browsers. You can also sort of do incident response and attribution, although attribution is hard and that's like a whole area I shouldn't venture into. But if you have an exploit that comes into a network over TLS, the tools that are used to develop it, if they have their own signatures, you can re-watch that signature propagating across a network and you can watch the progress of an incident as people pivot horizontally across a network. And I'm going to just quickly demo what this actually means before I stop talking about fingerprinting and drive you all insane on that one topic. Just for reference, though, this is the best German word ever. This means it doesn't work when someone's watching, so I've recorded it. So this is just a tool I wrote running in the terminal and this is a standard Windows VM. It's from a few months ago, so I apologize the versions are a little old, but you'll get the idea. So you go visit some site and it's just a packet sniffer at the end and it's picked up that you've got Firefox and Signal, because why not? Connect into a bunch of things and then at the same time, you can go, I think it's Google Drive or Dropbox I used. My memory's terrible on this. Anyway, yeah, so these all use either APIs or their HTTPS under the hood or whatever. So as the file syncs up, you'll see that Dropbox comes up there as having connected. And finally, the thing that most people like to see on their network is Tor. So I'll just let it do the Tor thing. So this is Tor browser, which is just a bundled Tor and Firefox all in one tool. And as that connects to the Tor network without doing any web browsing, it starts screaming all over the network, I'm Tor. If you were being a bit more active about that, you could use that for alerting and you could pick up on malicious network traffic. Anyway, that's that bit. So, oh, thank you. So enough on fingerprinting. There's server responses too.  First of all, it lets you know what has been negotiated. So you can tell if they're using old TLS versions, weak Cypher suites and that sort of thing. I'm running a long time, so I'm going to go super fast. You can harvest all the certificates. I'm going to refer back to something I mentioned earlier. You can log all the certificates that are associated with the website at the time. So in the future, you can go back in time and see what certificates you saw. Why is this useful? Well, this again. We'll sign. And Google dropped China's root cert. And I think other people may have done too. This lets, oh, sorry. And SuperFish, who had its horrible certificate situation. This is super easy to do. You can use a plug-in in bro and that will do logging of certificates. And then when someone says, hey, this certificate authority has been acting bad, you can go back retrospectively, see which sites use that cert, and you know if your clients could have been compromised in the past. Finally, I'm going to talk about inline TLS shenanigans, which is actually my new thing. So you can mess with the handshake. It's in the clear. It's not cryptographically signed, so you can modify what's inside it. I suggest this. No. What I suggest as an alternative is a proxy that works at the socket layer and passes data backwards and forwards. So it doesn't mess with the encryption. It doesn't re-sign things and fall foul of all those CA issues I mentioned. It can still see the server hello stuff. So it knows what's been negotiated. It knows what cryptographic protocols are being used. And it can see that stuff. Most importantly, it can fingerprint stuff and because anything vaguely current uses SNI, you can pull the host name in the clear that it's connecting to. That gives you enough for coarse-grained content filtering, and you can also tie this together with clients. So you can say that Skype can access Skype servers, but Skype servers alone, i.e. you can go to all sorts of other servers, whatever. This is also safe because it's subtractive. I can't put in a crappy cipher suite and trick browsers into using degrading themselves to that terrible cipher suite. They never offered it in the first place. I can, however, pull crappy cipher suites out and force them to only negotiate the stronger cipher suites and other aspects. And then you've got the compliance diseases. Most of the compliance standards including PCI will say things like, you can't use old versions of SSL and TLS. Well, if you're monitoring that handshake and have a proxy in the middle, you can look for old versions of TLS, drop them on the floor, and ensure you maintain compliance on your network irrespective of what the applications are doing. So there's a remaining problem. If you're not man-in-the-middling, it's super hard to put that little pop-up up that goes, you've been blocked, you were a bad person. So I tried a few things. I put a bad certificate in. Shockingly, Chrome and Firefox were super not happy with that plan. There is a response of server hello done, which is just, I'm not sent a certificate, but I'm done. It also doesn't sound super good to the user going, can't provide a secure connection, and this is Chrome, sorry, and in Firefox saying, it says secure connection failed, also sounds bad, and if it's the sub-component of another page you've allowed through, it throws those SSL errors about mixed content. So it's not very good. But I came up with a solution, which is super crude but works. So I will just demonstrate how this works really quickly, and then I will show you how that looks in browser sphere reference. So demo again. So this is my tool at the top. This is a proxy, it's just written in Go. I'm gonna curl, I've said it as a proxy, but it can be a transparent proxy too. This is just for ease of demo purposes. So if I try and curl the Crypto Village website, it logs that I used curl, but I went to Crypto Village, it's not on the block list, and it went through at the bottom. If I curl something that I'm less interested in, in this case one of our favorite ad networks, what you'll find is that the server-reported SSL handshake, that's actually not as bad as it sounds, that's literally just drop the TCP connection on the floor and it got the drop on the proxy. This looks crude in curl, because I'm just showing you and it has that nasty error, but it actually has the valid cert come back every time and the browser gets to do all their thing, but more importantly, it just looks like the server is down to the browser when you go direct, and when it's a sub-component on a page, like an image or a script, it just looks like the missing little square in all the browsers. You don't get any SSL errors, you don't get big buffs or anything like that. So gonna go as fast as I can. I say we did course content filtering fine and application detection we got, course logging we got, granular logging not really, I'll come back to that but I probably won't have time so I won't, certificate checks we did, malware detection we sort of did. We didn't do it in the AV sense, but you can have TLS signatures on malware so you can pick up a certain amount of it in page exploits, totally didn't do that, but I said I was only doing 90%. We don't detect documents going out but we can detect things like Google Drive and Dropbox and things that may hint a data exfiltration and data exfiltration falls under that banner. One more thing, do I have time? I'm gonna try and do it quick. Course train login, this is an encrypted payload. It's 227 bytes long. There is a set ratio of algorithm, clear text to in cipher text size. You can take it so, if you know the size of something you can guess certain amounts of the content. You know the host name that it connected to so you've got 206 left. You know the user agent because I fingerprinted the OS so you can roughly guess what the user agent is so now you're down to 151. You know what that user agent accepts so you're down to 95. You know how it encodes so now you're down to 58 and you've got the IP address so you can probably guess that you've got 26 left. You know that you're gonna have the words get an HTTP so you can guess that the remainder of the bytes are probably the URL and narrow down to a degree where you might be. Unless you pad, so just like pad everything. Conclusion, I'm running low on time so this is stuff related to this. Probably the main thing to do is just look at the slide deck one speakerdeck.com, my name then you can find this. I was gonna say any questions I've got maybe 10, no time for questions. I will be in a corridor or a bar or something and you're more than welcome to grab me and I'll do this again.


Canadian work boot jeans I mean DNA not denim. Original work boot pattern used in the trenches. Can you get any sturdier than this well daintily finished boot? How you going? Welcome back to my channel Boot Lossophy. If this is your first time here my name is Tech and I come to you from Western Australia and I acknowledge the traditional custodians of the lands around where I live and work the wudger people. This is Weiberg's stitch down service boot so classic that it is trademarked. This pair is about a year old pre-loved and I bought them from my friend Eli who's on Instagram as the heritage tribute. Thanks Eli. If you could hold this in your hand look at it closely and wear it for a moment. You will see and feel that it is an extremely sturdy boot which I'll get into in the review and yet on screen in images even at a distance looking at it you'd be forgiven for dismissing this as a dainty a feat fashion forward boot. You'd be wrong. It may be built with the care and focused attention on the finishing like a better quality fashion boot but this has Weiberg's work boot DNA all over it. Let me try and convince you the Weiberg service boot or to be exact the stitch down service boot was created by founder of Weiberg Ed Weiberg in the 1930s as a work boot for miners. The pattern was based on a Canadian military boot and was reintroduced in this updated style by grandson Brett Weiberg. It has the classic 21st century service boot attributes. It has an over 5 inch shaft, a low block heel, open derby or derby style of lacing, basic four-piece pattern of vamp, two quarters and a one-piece backstay covering an external heel counter. This one is plain toe but you can get Weiberg service boots with a cap toe and with brogue cap toes. This one is in one of the classic makeups that they call essential on the 2030 last and in brown chrome excel and in this essentials collection you can also get black, colorate and natural chrome excel as well as in three shell quarter-ven colours. Then they also offer what is essentially the same boots in increasingly varied and exotic uppers from quality tanneries like Charles I've said from the UK, Mariam from Italy and Tochigi from Japan. Apart from varying between toe cap, broguing at the toe cap and plain toe, they also use both day night and Ridgeway souls on this 2030 last as well as on their Munson style 2040 last, their round toe 1035 last and their boxy sprung toe 310 last. A last by the way is the 3D mold around which the maker stretches the uppers around to create a boot with different shapes for different lasts. Having that many lasts for this boot can be mind-boggling to decide what last is good for you and Dave from the Vintage Future YouTube channel did a really good explanation of the different vibo lasts on his channel. I'll leave a link to the vibo website down below so that you can see the variety of service boots available for all tastes. Just using a different upper and outsole even on the same last can create a different look and feel to the same boot as you can see from my review up there of the same boot in oiled koolata leather and on the Ridgeway Soul. But before we go on let me just talk quickly about the brand Viberg in order to give you some context to what I'm about to tell you. Viberg is a Canadian company and as I said earlier founded in 1931 by Ed Viberg in Saskatchewan before moving to British Columbia in the West. Starting by making farmers work boots in the wheat and cereal cropping province of Saskatchewan, the move to British Columbia's logging country also meant the introduction of logging boots, boots for miners and from there boots for forest fire fighters. Still Viberg family owned today the third generation Brett Viberg has the reins. It was in fact Brett that recognized the need to transition into markets outside of work boots using their existing work boot construction methods into a line of dressier casual shoes. In the late 2000s his visits to Japan caused the realization of the Japanese Americana heritage trend and he regenerated the original farming work boot with an old Canadian military last into the Viberg stitch down service boot. It's not unfair to say that Viberg was the first and is now crowded space of American heritage style service boots and soon other brands and more recent director consumer brands followed. As for their work boots they still make them but clear in their marketing strategy the Viberg.com website only carry their casual everyday collections and their work boots are on a separate website altogether. So starting from a work boot DNA how are these everyday service boots made? As usual I'll start from the bottom and work my way up. The construction method is stitched down in which the uppers of the boots are sewn together, last it and on the last the bottom of the front half of the uppers are flanged outwards to stitch them down to the sole construction. You can watch my video explaining different different construction methods up there. In this double row stitch down one row stitches is sewn through the flared out uppers to the leather midsole and the second row stitches through the uppers and midsole as well and then through to the outsole. That outsole stitch continues past the flared out uppers on the midsole all the way into the heels. The heels themselves are glued and nailed to the five millimeter thick midsole. This is an extremely durable and water resistant form of construction also used by all the American Pacific Northwest work boot makers like Whites, Knicks, JK, Franks. But while the construction and even the hand-hardy materials used are the same the stitching on Viberg is done by a company that clearly is experienced in making sturdy boots in a very refined delicate dainty manner. Take a look at this photo of the difference in the stitching between these Vibergs and a pair of Knicks boots. The stitch density is precise and even and way higher in count and the precision of the consistent and straight lines of the stitching is obvious. That's not to say that the Knicks stitching is bad that's not to say that the Viberg stitching is better or more durable. All that says is how Viberg uses the same methods but applies dress shoe manufacturing attention to detail. Now Knicks isn't going to fail any faster Vibergs isn't any less robust but I know which one my brain will tell me to wear to a fancy event and which one my brain will tell me to go digging in the garden with. As I said the construction connects the uppers to the outsole through the veg-tanned thick leather midsole. The outsole is from English manufacturer Day Night with the ubiquitous studs each set in a shallow depression for grip and ease of knocking off dirt yet maintaining a low profile for dressiness. You will see Day Night on almost every brand's collections and it is grippy enough except under the worst or wettest conditions. The heel is stacked leather with a Day Night top left. Inside the boot between the insole and the midsole is now a layer of cork but sometimes in the past there was a hard foam. If you watch a YouTube video of the Division Road Viberg Factory Tour 2020 you will clearly see cork being applied yet on the Cobblers Plus channel you can see the foam being pulled out of a pair that's being resold. There are others if you're a patient and do a search you'll see at quite different times Cobblers finding cork and foam when they're being rebuilt. I know that in early 2021 Viberg put out a Facebook post saying that they were consciously starting to use all natural materials and there may have been a gradual change to cork which some of the Cobblers are yet to see since they're repairing older boots. I was actually accused of lying in an earlier review by a viewer something I have never done in a video. He was adamant that they used foam but I suspect his fact that he relied on was gained from watching an old video cemented by his self-confidence of his view as being the only truth. When I asked Viberg I was told cork and I was also told they use leather shanks which is the thin piece of stiff material placed inside bridging the gap between the heel and the ball of the foot providing arch support in that space as well as torsional rigidity. Above that filler and shank is a leather insoles sewn to the uppers inside and on top of that is a thick heel to arch leather sock liner with a little square of foam under the heel for comfort. The vamp is lined with leather but the shaft is unlined. The uppers are made from brown chrome excel. If you don't know and you probably do but I'll tell you if you don't know chrome excel is tanned by Horween Tanry in Chicago. Another multi-generation family-owned company started in 1905 and now in its fifth generation of Horween family ownership. The two flagship products are Shell Cordoven and chrome excel. Chrome excel is a combination tanned leather that is chrome tanned and then re-tanned with liquor from tree barks and then it's hot stuffed with oils in a famous 89 step process taking place over 28 days. The result is a leather with veg tanned malleable character restricts yet also with the supple and durable character of chrome tanning. Chrome excel fans will also quote the heavy pull-up effect that makes it almost a self-healing leather because you can use the heat and pressure of a thumb or a finger and polish up most of the scuffs. This is a pretty good example of chrome excel. Horween apparently tans the hides in two pieces front and back of the cow and I understand Vibeau buys the back pieces which are firmer and as in this example show no deep wrinkles or the dreaded loose grain. All creases showing on the vamp and the shaft from natural wear patterns are small fine very crystalline lines. The clicking or leather selection is excellent. The toe is structured again going by the Facebook post it is a leather toe puff as well as an external leather heel counter at the back covered by this one piece backstay. The unlined tongue is partially gusseted to above the second eyelet it's sort of almost to the third eyelet. The hardware in this classic model is bright brass and a good size allowing flat wax cotton laces to go through quite easily. All eyelets though eight of them no speed hooks so if you prefer speed hooks you're out of luck in this particular model. The stitching is phenomenal it's precise clean consistent again belying the workbook credentials of the maker and looking as fine as any English Northampton dress boot. Not only are there no QC issues in the stitching just for fun I took a pair of dividers to measure the gap between the double stitching on the uppers and the variation within less than one millimeter. This is the type of stitching I'd expect on a bespoke suit and that level of detail precision and fineness does not make a dainty boot. The chrome excel use is over two nearly three millimeters thick which is heavier than most. The all leather construction and fine but firm stitching all adds up to a 765 gram boot over three quarters of a kilogram which is not as heavy as some P&W boots but heavy enough and certainly heavier than the mid-range grandstones and oak streets. Do not be fooled by the look this is a sturdy quality boot. As for leather care look I'm not going to say too much I've dealt with chrome excel in my other videos a hundred times but if you haven't watched my chrome excel care method well you'll have to subscribe and catch up on my videos. One word Venetian shoe cream anyway keep the boot clean and dust free by brushing regularly condition when needed maybe two or three times a year with Venetian shoe cream in neutral but if it feels really dry then a coat of liquid Needsfoot oil can be used. Horween uses both products the Needsfoot oil and Venetian in finishing the hide. Chrome excel can be left after conditioning but you can also polish it up if you want and a good cream polish from Saphir or the less expensive related company Tarago. Again in neutral I personally don't like using colored products on chrome excel because I like the lightening patina to show through and talking about patina take a look at this pic showing how the same brown chrome excel lightens with the patina over time. The oldest is going from right to left. So now you'll want to know how Viberg's size be prepared to be confused if you're American if you're from Australia New Zealand Canada or the UK or from any Commonwealth country that's retained its UK-ness it's simple order true to size. I'm a UK seven and a half in average width and this is a seven and a half in Viberg's e-width and they fit me perfectly in the 2030 last. If you're American you deserve a longer explanation because I've heard confusing and yet correct things being said like go down a full size that's right but it's also not right at the same time. You see Viberg being from Canada a member of the Commonwealth uses UK sizing numbers. These are one number down from the US so I said I was a UK seven and a half that equates to a US sizing number as eight and a half see one number down from the US. Same actual size of course my feet don't shrink in UK made boots just that the UK calls a particular measurement one number and Americans call it another number and these are true to size. You know how people say of American boots oh they size large go down a half size from your true size the confusing thing is that many American makers make a size 8.5 boot and call it their size 8. It measures the same length they just called it a smaller number by a half. However some boot makers like Oak Street boot makers for one Christian Daniel I think Kaz will boot certainly they make their boots true to size meaning if you measure 8.5 then buy 8.5. All that means is that if you're American you should find out your true brand it measured size and then convert that to Viberg UK sizes by going one number down. I measure a US 8.5 on the Brannock device my Viberg size is thus 7.5 that's why Americans will say I'll take a full size down in your Vibergs which could confuse the crap out of Brits but then again they lost to us in the ashes and the cricket so they're easily confused. As for comfort the 2030 last is really comfortable for me first of all the construction with the leather and I'm assuming cork under my feet provides a good shock absorbing experience and the way the last comes quite narrow at the waist provides me with the supportive arch support. There are no build-up of leather pieces under the arch as you'd see in P&W work boots but the shape of the narrow waist leads to a pushing in of the uppers there which creates good support for me. There is at least a thumbs width in front of my toes and the ball of my feet are snug but not squeezed and even this almond toe shape which does push in the big toe on some people and for me it leaves me with really good wiggle room. I'm quite comfortable walking around these all day except the heavier chrome XL does rub against my ankle as the shaft is a good inch less than the normal six inches which I think would probably then you know cinch up better being because it's higher up the leg. Finally to face the elephant in the room when new these boots are 800 US dollars now that's nearly 1300 Aussie dollars they do go on sale now and then but that's what you're faced with. A pair of White's MP boots go for 700 US that's a hundred less. Nick's Americana is 630 I've referenced those P&W brands because I really don't think it's fair to compare these with say Oak Street trench boots or anything else in that sort of you know cheaper mid-range the build quality and materials is just quite different. So the most expensive out of their most comparable boots and the other P&W boots are usually hand bottomed and hand stitched while a lot of the Vibex service boot is handmade that gorgeous stitching is I don't think hand stitched. On the other hand as I made it abundantly clear these will last just as long as the whites or the mix these are not delicate despite the dressy fine finish. How does that add up to value? If you know the finishing you'd say the Nick's Americana is great value compared to these. If you do take note of the finishing you should I think add a premium for that finish and yes I created a debate with one of my community posts on YouTube about the value of Vibex with almost equally half saying that they were worth it and the other half saying it was all just marketing hype. The price is polarizing. As a management consultant though I can tell you that in sales the mantra is we approach a product with our heads and then we buy with our hearts. So true my head ticks off the material things that logic says yeah despite the careful finish these should sell at the same price as the MPs and the Nick's boots because they'll last just as long but my heart says damn it I want a pair of these at only a hundred more because they look so cool. Are they worth the price? You tell me what your heart says so that's it beautiful boot great boot a bit pricey finally made like a several suit tough like a work boot they used to make versatile because it's a casual boot but it can be worn smart as well as rugged. Tell me what you think in the comments below and of course don't forget to click on like and also if you haven't already please subscribe. Both really help my channel and will push up my videos out to more people who would like to learn about boots. If you click on like and subscribe it's practically a public service announcement. What's coming up next? I'm planning a really interesting interview with a podiatrist about boot fitting don't miss that one. I also have a review of the Nick's Falcon collaboration with Park has coming up and further down the line I'm going to do a series for people who are new to quality heritage style boots and what they can afford as alternatives to expensive boots like this service boot. Subscribe and don't miss these interesting topics until then though take care of yourselves and I'll see you soon