Welcome traders. Before we begin I'd just like to give you a bit of housekeeping here. If you can hear me, you can see a Tick-Mail welcome screen on your charts, you can type a Y in the chat box. Before we get going, if you have any questions, if you could keep those to the end, I'll open up a Q&A after I've completed the material I want to share with you today. So before we get into that discussion, first of all we want to adhere to the risk disclaimer, as we know trading any financial instrument carries an inherent risk and we can lose more capital than we have on deposit. Secondly, and most importantly, the views expressed by me here today are specifically mine and they are not indicative of Tick-Mail. So for those of you who are joining me for the first time this week, I'll just give you a quick background on where I'm coming from. After I graduated, I went to the world of consulting and after a couple of years learning the ropes, I left with a couple of colleagues and did a startup. I went through some pretty rapid growth over a four to five year period and I eventually cashed in my stake and decided to explore my passion for markets.  So I started to, I guess what you more accurately referred to as gamble meddling in the market, so to speak. But I caught some lucky early breaks, day trading, the S&P 500 and started to make some solid and then quite some significant gains. What that has is often the case, my beginner's luck was about to turn. The market started to correct, I didn't really understand the different market phases at that point and so I just started averaging down on positions. And as the market continued to move against me, I pretty rapidly gave back all my gains and then I actually took a six-figure hit on my personal capital. So it was at that point that I decided to really step back and assess whether or not it was possible to actually make a sustainable income from trading. So I said about looking for someone to model a mentor, so to speak, and through some networking that introduced a guy in the States. I worked with him over an 18 month to two year period, really not just up in my technical game, but more importantly my mental game. It was a period during which I became far more self-aware and really had to change my focus from being a goal-oriented individual in terms of my previous commercial experience to actually becoming a process-oriented individual with respect to trading, because it's in understanding that it's the process in trading that repetition, executing consistently against your trading plan that actually delivers the results. It doesn't matter what your goals are. The market doesn't care. It's about executing with excellence your trading plan. So after that period, I came back to the markets in 2008. I had an extensive trading plan back-tested, forward-tested, and like I say, it started trading my own capital again in 2008. Obviously not an ideal time to come back into the market, so as we were in the throes of the GFC. But I managed to trade my way through that year and come out with positive returns at the end of the year. And since 2008, on an annual basis, I've been consistently profitable. And that's really where my focus is. I'm not emotionally investing the outcome of an individual trade or even the next 10 trades, but my focus is the next 100 trades, because I know that if I adhere to my trading plan, that my edge will demonstrate itself over an extended series of outcomes. The data you can see on the screen is from 2013. The reason why that is, is that over that five-year period between 2008 and 2013, friends and family saw what I was doing, and I wanted a piece of the action. So I set up a managed account service which has grown organically and now represents a multimillion dollar portfolio. The most important data here for me in terms of this performance data is down here in this corner. When I have an average winning month delivers 7.96%, whereas an average losing month just 2.4%. I extrapolate that out to see that essentially I'm making two to three times what I lose. And that's the most important metric to me because I know if I keep my focus on profitability as opposed to hit-rate or win-rate, which is really irrelevant, that's where I will continue to deliver the success that I've been fortunate enough to experience over the past 12 years. So for my trading, I also have a couple of other projects. As you might know, I'm a market expert in residence for Tick-Mail. I produce a daily market outlook and also a chart of the day or a trade of the day, etc. I'm monitoring in the markets. Another passion project for me is FX CareerSwap, an emerging trader development program really, which seeks to help traders combat some of the key hurdles to going from being a retail trader to being a successful professional trader. And we've developed a big community there of like-minded individuals who are all lined behind the goal of becoming professional traders. We have some bespoke education. I teach the strategies that I've used over the past 12 years to successfully navigate the markets. Once you've completed the program, we then provide you with a funded account which you can grow and grow a successful trading business from. So capitalisation is really what kills most retail traders. They tend to be under-capitalised and so they have to over-leverage and over-extend themselves. And they took a few hits before I know the accounts gone. So we actually are offering a free trial for that program, the TRIPRO program. You can check that out at FXcareerswap.com.  Let's move into the material I want to talk about today. First and foremost, as we're coming to the end of the month, we want to check in with what we can expect from a seasonal perspective in the markets. We go on the screen at the moment, a matrix of 20-year seasonality really for most of the major markets. And so July is coming to an end. We're heading into August now. What this matrix is telling us is that the Australian dollar can see some weakness in August. From a seasonal perspective, it's the second worst month of the year over a 20-year average for the Australian dollar. We also see the same for the British pound, Canadian dollar to a lesser degree, euro to a lesser degree, but still obviously a subpar underperforming. We see a strong month for the Japanese yen. So what sort of takeaway from that? Well, when Japanese yen tends to train well, we tend to be in a period of risk aversion. So if we follow that through, we can see that the Kiwi dollar has a pretty torrid time. So it's worst month of the year, August. And what we also see here is in terms of risk assets for the equity markets, it's actually the worst month of the year for those. And we see that the dollar index tends to fare pretty well. And so if we think about the risk metrics that we've seen in the markets, it's either risk on risk off. And if seasonality is going to have any play in what's coming in August, we can expect some risk off. Goldman Sachs have also highlighted this to their clients, showing that since 1985, obviously September, tend to be the worst performing months for the S&P 500. And it's a period during which ETFs, so exchange traded funds, equity mutual funds, etc., since 1996, 25% of outflows happen in all of this. So again, that's feeding into this idea from a seasonal perspective that market participants tend to stay away or reduce their exposure to equities. So in terms of risk profile, it's paired back during August. So that's something to have in your mind as we start heading into this period that we can see some volatility. And then this feeds into Euro. So as you know, for those who have seen or been following my work, I'm structurally bullish in Euro. But I think we're at a, we're reaching a phase at the moment where I think we can see a pullback and that's the trade will come back. So I'm not, I'm certainly not suggesting that we're done with the upside. I think we've got quite a way more to go. But in the near term, heading into August, if we're going to see some risk off here, then I think the Euro is going to have to give back some of its gains. Likewise, with the dollar, this is work from JP Morgan extrapolating through their fund flows, where they see a stretch in terms of positioning. So I did a similar note and you can see the way to last time we got into this area in 2017 we saw, you know, we saw significant decline. I don't think that's going to be the case this time because I think what we're seeing is a structural repositioning with major major capital flows, aligning behind this idea of the potential now with the debt mutualization. On the table at least for Europe, which is, which is historically has hindered the progress of Europe. We're starting to see big players pick up a bit of exposure now in terms of Europe and I think we've got, we've got further to go. But certainly at this point we look a bit stretched on the upside. So let's, let's see what this translates to in terms of, in terms of the chance of opportunities start with the dollar. This is the equal weighted dollar index. So, what we're looking at here is a dollar index, the Dow Jones dollar index, which is tracking the dollar versus four other major currencies on an equal weighted basis. So that's the Australian dollar, Japanese yen, sterling and the Euro. Okay, we obviously we've had a pretty much waterfall decline at the moment, but I'm looking for this equality objective so this swing here, this last leg down that we saw in terms of the dollar. I'm looking for it to be equal equal measure, a measured move into this one. 1986 area and then I'm looking for for a bounce as we head into August. So if we're going to see some risk a version of the markets we should theoretically see the dollar correct some of its recent losses. And I think what we'll be looking for is, it's August and September to be a period potentially consolidation. And as like I mentioned last week, as we head into October November, as the election in the US becomes front of mind for everyone, and we potentially see, in terms of some significant second waves in terms of COVID-19, whilst we're without a vaccine. I think there's opportunity for some interim dollar strength, but ultimately, I believe that we are heading lower in the dollar and meaningfully so so I'm looking for this equality move to stem the current decline. Again, for those who follow my daily daily outlook, Citibank, the quarantine there, in terms of month-end flows, see the potential for euro strength into month-end. So this would, even though we're trading slightly higher here today in terms of the dollar, this won't not through the volume wasted average price. So for me, this isn't actually, although this candle will be green on the normal chart. For me, the five period tick waiting in terms of upticks and downticks still suggest bearish possibilities. So I think we could into tomorrow month-ends see a test of this equality objective and then as we head into next week, maybe we get this pullback in the dollar. So I'm watching that. Let's look at the broader dollar index. Obviously, this dollar index is weighted more towards the euro. Again, what I'm looking at here is the equality objective. You can see we're trading just above it and just above this potential descending trend line support. So any move down into this 93 area tomorrow, 92, 50, 93, we're watching for bullish reversal patterns. We don't get tick data through on the DXY. So I can't overlay the volume waste average price. So obviously I'll key off the equal waste dollar index, but I've been looking for a test into this area and then to see as we head into Monday. So statistically, Friday and Monday are the pit of the highest statistical weightings for us to see interim or more meaningful market tops or bottoms. So looking, let's let's jump into the euro. I'm looking for a story here. I'm looking for the euro to test. It's a quality objective 1830. We've got a bunch of fib confluence up here. So the equality versus this swing here into the 1830. We've got the 261 extension of the last correction also coming in at 39. We've got 261 extension of the initial structure of the lows here coming in 1833. We've also got the projected trend line resistance using this trend line support overlaid here 1850. So again, similar to that dollar index, I'm looking for this, this, this test here to produce a immediate reaction. And I'll be looking for a red close in terms of your obviously we're seeing a bit of weakness here in the market at the moment. But for me in terms of setups, I'm looking for it to test this area before, before jumping in on on the short side. And again, my thesis here is, is not that we're going to crash or roll over, but that we correct during this period of potential volatility as we head into August. And certainly anything down into this 114 50 area would be would be very attractive in terms of lungs where I think you know we're heading through up to 120 and beyond really over the winter month as we head into the winter months and the election. So we'll see how we trade but in terms of setups anything in this 118 to 118 50 area with a bearish reversal pattern, I'd be a beginning on the short side, initially looking for 116. We probably retest then into that 118 area before getting that final stab lower, which I think will be the buying opportunity as we head into into the winter months. So dolly end. Dolly end is also about to test the pivotal area. We've got this big equality move. We've got some we've got an interim equality objective all lined up here at this one of four 27104 13. We've got 78.6% retracement of the March advance coming in one of 344 so the reversal patterns in this area, I think offer a great risk reward in terms of doing something on the long side this will coincide obviously with that dollar index, getting getting a bounce here. Initially, look for 106 price support probably going to be resistance on the first test. You know, we might have to retest this 104 area, but but ultimately what I've looked for then would be a more meaningful correction higher here in the, in the, in the. We see this trend here. So, again, we could be training back up into this 108 area. During during a period of risk aversion. The other dollar pair that I'm watching today specifically I shared this as a chart here. We've got this Canadian dollar testing the monthly S1 potential double bottom. We've got momentum divergence down here with our momentum studies and we're putting in a bullish outside reversal. So, if we close at or above current levels that's going to be a by signal from the VWAP indicator as well. And so for that then we were looking at targets obviously, and we use an equality objective. So looking at an equidistant swing here, we'll put us back into that 137 22. We have the the VWAP resistance bands coming around that area as well. So, I'm watching this one tonight and the clothes New York clothes and get the clothes, and I'll be looking at long positions in the Canadian dollar. It's checking with the Singapore dollar. It's not playing ball. I was tracking this one earlier it looked like it. It also is going to try and put in a bullish reversal but not so much now. Euro CAD. Moving into an interesting area as well. We have obviously with the US strength has been grinding higher but we're coming into some big confidence here we have the 161 extension of this swing here. And we have the 78.6% retracement of the last leg down. So I'm looking at 15790 to 15817. The reversal pattern is here. And I think we could correct lower in terms of the Euro cash. That's another one that's on my watch list. Similar Euro Kiwi traded this from the long side this week. And 205, 405 pips out of this. Now what I'm looking for is the test here you can see we've got this symmetry swing. Put us in at this 178 area. We've also got the 161 extension of this structure. So I've been looking for the Euro Kiwi to get a move something like this. And then I think we see a pullback. Certainly, initially what I've been targeting would be the symmetry swing here to take us back down into this 176 area. But potentially this could be the end of a correction here now, in terms of the Euro Kiwi and we could be trading back down into the 172 area. So again, tracking, watching for that red close in terms of the volume was average price to something on the wrong side sterling has been on a run here coming into some potential trend line resistance here a couple of trend lines really I'm watching watching this one currently that we're testing. But the monthly R2 when pretty overbought here now in terms of in terms of momentum studies and the cycle studies so we got to put bearish reversal pattern here. So sterling would be a short and if you remember the heat map from the start sterling tends to have a pretty rough month in August so I think we can be back down testing. It's 126 areas support before the next leg higher and sterling so watching how we trade certainly initially at this 130 30 area. If we get through here today on the close then we've got this bigger trend line. We're back in from highs, which would have us at 130 180. And again, it's certainly watching how we trade their bearish reversal patterns will be an opportunity to do something on the short side. So to two areas I'm watching there in sterling on on the watch list. And it's again sterling yet about to test major trend line here at the 137 20 area current trade once with 3696. We've got some some resistance there so we'll see this will coincide obviously with sterling major holding its resistance. Yeah and so watching 137 23 looking for bearish reversal pattern. I think that will put us back down then at least into this 134 50 would be the initial target on that. So sterling Swiss similar type of story really the alternative here obviously with sterling Swiss is it if we get a close through this trend line resistance, then there's an opportunity to actually trade it on the long side. But if we hold and roll over here, and I've been looking for a pullback but if we can get a close through here. So ideally what we'd like to see is a two day clothes as confirmation, then then we can see a breakout here in sterling Swiss and in terms of targets. We would have, we could easily be looking to move up into this 127 area currently trade 19 so again, not always necessarily looking for looking for reversals as such happy to play the breakout as well so I mean if we get that close to be nice and there'd be opportunities then on intraday charts to get in on the long side, better risk rewards, and then you've got a target up here 127. Now let's look at these Aussie and the Kiwi. So Aussie coming into its potential putting in a sending wedge pattern here. We've traded up tested that 72 objective and we could be getting a red close here so that would coincide obviously the loony and the Aussie are pretty correlated so we've got a couple of opportunities in terms of the policy effects developing here. Again, we've got nice momentum divergence was sitting at this. Sending wedge trend line resistance. So initially what we target is a move down into the 70 area. We can anticipate that we see some chopping around there but ultimately, I've been looking for a test into the bull support bands down to the 68 80 area initially. Just thinking about that seasonality as well as additional confirmation for any setups we get now heading into August in the Aussie come a long way in the Aussie and certainly if we see these equity markets take minimal wobble then the Aussie heavily correlated with those at the same time as we can anticipate we see a pullback in the Aussie Aussie. Similar story here. We have that double top last week that I talked about we haven't really seen the depth of pullback that we that we would anticipate because obviously the Aussie has remained elevated so the, you know, the, the major headline pair is going to be what drives the action so we'll wait to see if we can get that close red clothes tonight. There will be opportunities on the short side in the Aussie Aussie cat is also another one I'm watching got significant momentum divergence. Again, it's going to be driven by the Aussie. So we'll keep an eye on that tonight. Kiwi similar story here Kiwi. I was looking for the Kiwi to test this, this 67 20 67 50 area. Obviously we don't always get those but I'm looking for the Kiwi to to have a rougher time during August and certainly we should be back testing 65 area turn on supports would be the natural objective you can see the ball bands coming in just into that area so that would be the initial objective. If we start to, if we start to get a bit of traction on the downside, then what I look for is symmetry swing so this last corrective leg here the biggest one during this phase of price action. So if we can get that, that to develop, then we could, we could see a 64 20 test as we head into August. Again, that that those will potentially be giving us buying opportunities as certainly I still envisage that we test this 31st December high 2019 and so once we get into this area certainly be looking for bullish reversal patterns on the daily charts to step long positions and let's check in just finally here with the S&P and see where we are so the S&P ideally what I'd love to, what I'd love to see here will be a retest of these price cycle highs at this 133 94 we're holding projected channel here so if we can get a pop into tomorrow then that would, that would be a great setup then for us to potentially have a wobble heading into August and that would further support the idea that we see a roll over in the more risky aligned effects pairs. So watching for that 33 68 to 34 or two area bearish reversal patterns will be a selling opportunity to NASDAQ. We've got a lot of tech earnings out tonight, still holding the channel at the moment so again this NASDAQ what I anticipate is we get one more pop here. We've got a divergence galore in terms of the momentum studies and then I've been looking for for certainly a trainable pullback in terms of the NASDAQ. Last but not least let's check in with gold. Obviously it's been on been on the tear and what I want to actually show you the slides got here. This is an analog of gold versus the last time we saw major come to the easing 2010 to 2011 and you can see the similarities in terms of price action so I think there is further to going gold but I don't believe in chasing it at the current levels. I mean, James I'm using the daily time frame. I don't think we need to chase it at current levels. I think there's certainly a tradeable pullback, but again heading into back end of the year, then we can see some significant, another significant layer of higher potential in terms of goals so I'll be looking for a correction. The other thing to watch as well which is important is the monthly close because what we could be looking at is a very significant potential double top here if we fail to take out these prior highs it's 1910 on a closing basis. So this is a monthly chart obviously month and tomorrow so I've been checking in with these monthly charts over the weekend and seeing where where we are from the much higher time frame it's very useful to understand the bigger patterns in place so certainly if the gold falls back here and we get a close back below 1910, then we can see a more meaningful pullback, however, if we can close above here at current levels are higher next upside objective becomes 2146 on route to ultimately test 2445 would be the objective this next leg higher in terms of gold so again key to watch the monthly close tonight to get a sense the momentum in gold. Okay, those are the basically the charts that I'm watching at the moment guys. Like I say, looking for some some volatility to be heading to August. I can see some, some pairs that can mean reversal at all. But again, my, my, my overriding view is that the dollar has is on is in the early stages of a more protracted decline. So these pairs like your own sterling some of the risk riskier effects are in the nascent stages of what I think we're going to be structural moves higher is the is the key takeaway. Okay, are there, are there any questions anyone like you take a look at the chart looks at you can type the charts in the chat box or type your question in the chat box or I can unmute your mic and you can you can ask me a question live. Suisse and crew, okay. Okay, so I mean the Suisse and pulled back into and held this prior prior resistance now support. So I'd have, I'd be expecting higher. So if we take out this 11555, then it's, we, you know, we've got this cement. Sorry, this quality objective here, clone that, which would put us up into 161 extension of this swing here this structure, and then above there we've got the big equality objective at 99. Does that answer Charlie with the Suisse and so we I mean it's difficult you can't it's difficult to get bearish until we trade back down below these, these prior highs here. So they've held it putting an outside reversal yesterday so it looks pretty bullish and crude. This is kind of an olden cat and now as we wait to see, you know what's going to happen with these reopenings. Yeah, I mean, we certainly there is divergence but you know this is this month in terms of, you know, this is being fundamentally driven I mean we saw the wash out wash out some crude. And what I think you're seeing here is, is actually a lack of participation that participants are simply not engaged in the market so we're just grinding higher here. And you're going to find less that the momentum is going to have less of an impact when you don't have. I mean from what I understand at the moment open interest in terms of crude is a horrifically low levels.  So again, it's you to really benefit from a momentum divergence, you have to be trading highly liquid asset. If that makes sense. Arnold, I think I've answered that if, if you were just, if you're only just joined us I'm happy to get back over it but I think I answered that. This isn't spame what you mean by risk on risk off risk on risk off simply refers to the market, the market's perspective so when we're in a risk on mode. People want to allocate assets that are going to yield high returns so you're going to take your cash that you've got in your savings account and you're going to invest in stocks. You're going to invest in, in higher yielding assets than you, than you get from the bank just saving your cash. Whereas, when markets are in a risk off mode, then they, they're looking for low yielding safe haven assets so traditionally that's been the bond market. But with the Federal Reserve flooding the market with liquidity. You know you're almost paying them to hold your cash so you are in Europe. So that's what's causing a drive into things like the dollar into the Swiss franc into the Japanese yen, which are considered safe havens during a period of risk off. So that makes sense so in a more in a risk on environment money's going to go into the Australian dollar Kiwi dollar the euro sterling. So that's the, that's the dynamic. And for us. How much do you take into account current sentiment regarding direction moves between the dispute will confirm what you're seeing. So, thanks for the comment. So for me that the technicals drive drive everything. And, you know, I believe personally that everything that is known about a market is in its current price. And then there's a disagreement between buys and sellers in terms of future price. But what I use to, you know, I'm always, I'm tracking all this, you know, seasonalities flows, specifically in forex, you know the market in the stock market it's driven by analysis of earnings and balance sheets, etc. In the forex markets, it's driven by flows, big, big capital flows moving and shifting. And if you can get a handle on the footprints of that, like, you know, I share with the guys in my trading team every day, the UBS JP Morgan and trading desk comments because those trading desk see the greatest amount of interbank flow in the market. They have a great read on where the flow is going, and then they're identifying levels where they anticipate that they, you know, these major participants will look to engage the market. So, absolutely the technicals drive everything for me. And what I, what, you know, what I really keep abreast of is the market dynamics and what are the market narratives because those narratives aligned with fundamentals will will will either make the technical pattern play out or not play out. Does that make sense? Okay, any other questions? Okay, if there aren't any other questions, guys, I'm going to wrap this up here. I hope you hope you found that useful. And we'll reconvene in the first week of August and see if we get this anticipated volatility. Okay, thanks very much for your time.


Welcome to JSATV, the newsroom for tech and telecom professionals. I'm Jamie Scott-Okitaya, here in fabulous Honolulu, take a look at this aerial footage provided by Excite Modular Drone. So I'm here at PTC 2019 with my good friend, Mr. Todd Coleman, of course, the CEO of eStructure. Todd, welcome to JSATV. Thanks, Jamie. Good morning. It's always a pleasure having you on, Todd.  Pleasure to be here. We actually just had a press release go out today with the eStructure logo on it. We have big news coming out of Vancouver, expansion of Van2. Tell us more. Yeah, so we just announced this morning, we've been, as you know, we entered the Vancouver market sort of last spring with the acquisition of backbone data vault. About a week or so, we announced a significant expansion of that facility, which is a 10,000 square foot 2.5 megawatt facility in the Mount Pleasant neighborhood. But we've been actively working for the better part of the last 12 months on finding a second facility. And, you know, as I've said, Vancouver's an interesting market. It's fairly disaggregated, high cost of real estate, very difficult to find the right building. And so as I like to say, if it was easy, everyone would be doing it. But we're excited to announce a new 54,000 square foot hyperscale facility. We're bringing in 10 megawatts of power into the facility. So in our usual style of being able to offer hyperscale, lots of power, lots of cooling. You know, our target is 20 to 30 kilowatts of cabinet. And so this facility will have that. We'll bring diverse fiber ring between our, what we call the van one facility and the new van two facility. And so we're, we're actively working. We've got engineers engaged, construction folks engaged. And so fully expect to have phase one operational before the end of 2019. So structure of you always on the move, always expanding lovingness. So are there any other type of expansions we can hint at right now? Well, stay tuned, stay tuned. I mean, look, we're, you know, right now we got effectively two dots on the map. We're pretty deep in the Montreal market, which we love with three facilities there. We always expected to go deeper into Vancouver. That's sort of our model, which is to have a hub facility with lots of connectivity, a lot of power, and then build from there in a much larger way. And so we're bringing that to bear in Vancouver in the way that we have in Montreal. Will we add more dots on the map? For sure, we're going to add more dots on the map. We're definitely not done. Where we're going to add those dots, you know, stay tuned. And talking 2018 Montreal, we just saw another acquisition collogics with Colo D. What did you, do you see that as a trend going on in the Montreal or the Canadian markets? What's going on there? Well, so there was, there's a fair amount of market, I called overexuberance towards the end of 2018. We had collogics buying Colo D, Vantage bought four degrees. You know, so there's, there's an interest level in Montreal, some of which I suspect is driven by particular customers that those individuals, those acquirers may have in other markets, or it just may be, you know, expansion into a market that's, you know, had a fair amount of activity in the last few years. You know, I don't know what to make of the trend. I mean, you know, two deals announced in the same week leading up to the holidays. There's a fair amount of overexuberance in terms of the market pricing, which, you know, is a little concerning because, you know, overexuberance sometimes leads to some irrational behavior. So I think we'll, we'll watch that fairly closely. But, you know, at the end of the day, we're, we're pretty comfortable with our position in Montreal. We have three fantastic facilities. We have a downtown hub. We have a hundred and what was 156,000 square foot facility in our MTL-2 that we're expanding to be about 175,000 square foot by the time it's done. And, you know, we have 30 megawatts sitting at our doorstep. So we feel really good. And the, and the, the benefit is we are a Canadian company. We are headquartered there. We have Canadian investors and we're, we're pan Canadian platform as we go and we will add more dots to the map. So we feel like we, we understand the market fairly well compared to others that might be just stepping into the market. But, you know, I think those trends will, will play out over time, you know, doing one Z two Z deals that add a market but don't add a platform. I don't know that those are trends, but we'll, we'll continue to watch it and see how it goes. Well, there's no doubt about it. Montreal is certainly e-structure land and I'm sure you'll, you'll keep reminding us of that. Last time we spoke, we also mentioned that e-structure was just beginning a channel partners program. Any update there? You know, we're active in it. We've added some partners already. We'll continue to build on that in 2019. We haven't in fairness put a lot of channel marketing effort around it in terms of really wrapping the, the programmatic piece to it. That's going to come in the next two quarters. But we've identified master partners and key agents that we're bringing on. A lot of them that we've worked with on a sort of an unofficial one Z two Z basis. And now it's becoming more programmatic in 2019. So more to come on that as we bring on a significant amount of capacity both in Montreal and Vancouver. We believe that that indirect distribution channel is, is very key to our success. And there are some amazing agents out there for sure that we have long relationships with that are really excited about the e-structure logo coming on board. So number one customer trend that you see influencing your data center operations 2019. Go. You know, it's probably the same trend that's been going on since 2018. Look, scale, flexibility, being at the right place at the right time, relationships play out. So even though we view ourselves as an intro for infrastructure business, it's about relationships. And how do we grow with them and how can we be flexible and how do we, you know, truly understand their model and their way of doing business because I wish it was a one size fits all, but that's long gone. That's years ago. So I think that trend continues in 2019. For us, you know, we believe in the trend of, of offering our customers more, more options and turn to data centers, more options in terms of markets, more options in terms of connectivity, cloud providers that are available in our data centers. And so we'll continue to add to that. So I think the flexibility and the breadth of what you can offer those customers while still focusing on your core competency is, is going to be the key to our success in 2019. Yeah, no, no doubt about it. And it's funny doing these interviews with so many C levels over the years. Every, every CEO here that that talks customer first is certainly on a growth path and you're no exception, my friends. So thank you for joining us and thank you for sharing us your insight. Thank you for having me as always. And thank you viewers for tuning in to JSA TV. Happy networking.


I would say this is a really fantastic program because it really changes me inside out. Having WLI on my CV makes people to kind of build a trust in me. Because of WLI, they connect me to speak at Australian High Commission. I didn't realize I would be connecting with the attorney general to value or even the deputy prime minister of Samoa. I didn't realize that I would have that opportunity but this platform helped me to connect with women leaders out there.


We are in the midst of a crisis, one that is threatening our planet. Every year we lose close to 13 million hectares of forest worldwide. Trees play an essential role as the main natural captors of carbon dioxide. An essential activity to offset constant CO2 emissions. But currently we have a great opportunity to address this complex reality. Plas Forest is one of the largest forest management projects in Latin America, which will allow sustainable management activities of native forests to be carried out in more than 25,000 hectares in Chile. This project seeks to turn the communities in six regions of Chile into protagonists, giving them concrete tools to face climate change through forest management. Small and medium forest owners may participate in competitive funds for the management of vegetation resources, with the aim of improving the environmental, social and economic conditions of their land. The project considers four areas of work. Sustainable forest management, environmental education, technology transfer and strengthening of government's oversight capacity for the protection of forest resources. We know that without forest there is no future. Today it is in our hands to work together against climate change.


Mae'r ddweud o'r Llyfrgell yma yn ystafell Genedlai, a mae'n fwyaf Ed Lockhard o'r ffordd ymlaen, o'r Cyfrifio'r Llyfrgell yma yma i'r ffordd a'r cyfrifio mor ffadff yma, a rising o'r Ffordd ymlaen yma i'r Ffordd, o'r Gwyrdd Gwyrdd. Rhaid i'n cyfrifio. Rhaid i'n cyfrifio, ddweud, ond mae'n byw'r Llyfrgell yn cael ei'n cyfrifio mewn gyrdd, a'r cyfrifio eich cyfrifio. Byddwn ni'n ymwneud. Mae'r bwrth i'n ffordd ychydig, a'n gweithio. Rwy'n fyddai, os byddai'n meddwl â'r gweithredu i gyda'r gweithredu ac roedden nhw'n gweithredu o'r gweithredu. Ond rwy'n dweud yn ymwneud i gynnyddio'r cyffredig roedd yn dda i chi'n meddwl o'r ddweud. Y cwestiynau llawer, rwy'n gweithredu o ddweud o'r wneud o'r team cyllid. Paul Stone yn ymgylch chi'n gweithredu, Fy wych yn ddim yn fwy, ac mae'r gŷn newydd yn gynnwys hwn yn ôl. Felly mae hwn wedi gydag ei fod yn dweud, ac rwy'n fyddweud o'n fwy o'r ddweud yw yn fwy. Felly, y gŵl eich ddweud y bydd ymweld am y dda, dyna yw'r fwy o'r ddweud o'r ferbyg i'r cynyddu. Roeddwn i ni'n fwy o'r ddweud ar gŵr, mae'n gydig i'r bwyllt i'r gŵr. Felly rydych chi'n ardal, dyna'r ddweud ble mae'n gweld amddangos, As some really interesting hardware Um to play with that Um, so, you know what we're trying to show you that although That is the case for the few sort of minor security additions It's just good… That's much better That being said Um as this article will agree with me If you do invite ones to your home You're probably a little bit mentally Once you are a little bit mentally deranged So, why are we actually looking at theseministerarlies in the first place? Um, I work for a information security company called Context I'm on their research team And we were hired by which magazine to have a look at IOT toys in general o'r gweithio'r hypnyddian nhw, yn ymgyrchol hynny, a'r hypnyddian nhw'n 1998 ac yn ddweud ychwanegol honno. Rwy'r hynny, dwi'n meddwl, yn byw i bryd. Rydyn ni'n meddwl i'r $35, ac mae gwybod o'r $100 o $300, dwi'n rwyf ychydig i'r rheselaeth. Mae'r hynny'n gweithio'r hypnyddian nhw'n hynny'n $100, yn ffwrdd, yn ymgyrchu, maen nhw'n gallu'n gwneud. Oh, mae'r hynny. y gallwn ni. Mae'r rhan o'r rhan o'r fath yma, mae'n ddysgu ymddangos fel o'r llas yn Meri Llywodraeth, a oedd y America yn ymddych yn gwweithio y mae'n ddysgu ymddych llas o'r llas yn ymddych yn ymddangos, mae'n ddysgu o'r tynnu, mae'n ddysgu fel oed, yma yma'r genaeth ymddych ymddych yn ysgai, ymddych ymddych yn ymddych, ymddych yn ymddych. Ac yma'r cyfrwysau, ddim ond Wel E approach that was being sold for 32 pounds that value has since changed significantly since we had done the work But when we did the first third that how much they thing about. And it will come with 1 accompanying app as many bits of IoT rubbish generally do these days this is the ferby connect world app in the Android store you can also get this for iOS and that helps you plan the toy. So what does that look like? Here is a little clip. Hopefully that is displaying. we haven't got some sound for this but that's fine Cwyddiwch chi'n gwych yn ystod, byddai y FFURBEE CONNECT TOY. FFURBEE gweithio's. Mae'n gweithio'n gweithio. Cwyddiwch chi'n gweithio'n gweithio'n gweithio y fideo, ac yn gweithio'r gweithio. Felly mae'n dweud y video yn y gweithio. Fe wnaeth eich cynnig. Mae'n gweithio'n i thoedd, ac mae'n gweithio'n gweithio. Felly mae hynny'n gweithio? Mae'n gweithio FFURBEE CONNECT WORLD app yn gweithio'r internetol byddwch gallu cwunfa yw'r gweinwyr neu'r 3G cwunfa, ac mae'n gweithio i'r sefyr hwsbrwyd, wedi bod yn fawr o amlwg amesgwyr. A yng Nghymru, mae'n cwunfa eich rhai gan ymweld i Gweithgwr Llywodraeth Llywodraeth, mae'r gweithio'r cwunfa ar y gweinwyr eich cwunfa eich cwunfa arall. Dw i'r gweithi'r anghylch Cymru, gyda Mike Loss a Swarles Barkley, mae'r gweithio'r gweithwyr eich cwunfa eich cwunfa. a dweud bod yn cyfleu'r fideoa. Rydych chi'n gweld angenio ymlaen ni'n gweithio'r eich ffyrdi, sy'n dweud. Felly dydych chi'n gweld yr ola, a ysgolwch chi'n ymlaen chi'n gweld eich ffyrdi'u ac yn gweld sut mae'r ddweud gyda'r ddaf amser am gyfynodol ac mae'r ddweud sy'n dweud gyda'r ddweud, ac mae'n ddweud gyda'r ddweud gyda'r ddweud. We were less interested in that because it meant that if we were attacking the Wi-Fi side of things, it's a little bit of a circumstance dependent. It depends what the target's Wi-Fi setup actually is. Instead we looked at this Bluetooth connection instead. That was very much between the app and the toy, and we'd be the same in every setup. A quick overview of how Bluetooth works, if you haven't encountered it before. When your device turns on its Bluetooth radio, what it does is it advertises a number of services. These are logical groupings of these things called characteristics. You, as a person talking to this device, will read and write data to those characteristics, and the services are logical ways of putting them together. If you had to say a Bluetooth speaker, you might have one service that you would write to to send audio to it, and another service you might interact with to control volumes and that kind of thing. This all together we refer to as the gap profile, and that's your device's Bluetooth footprint. If you'd like to go out and have a look at some gap profiles, you can do that really easily. This is the NRF Connect app, which is available for iOS and Android. It's published by Nordic Semiconductor, who make a lot of Bluetooth radio devices. You can download this to your smartphone or tablet and just start scanning stuff and see what gap profiles look like. Here is the gap profile for the Furby Connect. It's quite complicated. Don't worry too much about all of the words there. We're just going to look at the services, which are these guys. It's a good place to focus your attention. What's really great about looking at services is every service has a unique identifying string. It's a UID. You can actually look these up to try and find out what services your device is offering, even if you haven't seen it before. These first three are all quite generic. Most devices will have these. They tell you a little bit of information about what the device is, roughly what firmware it's running, its serial number, things that we're not super interested in as an attacker. Possibly you might be, but generally it's not super helpful. This next service has a UID which identifies it as the Nordic MRF51DFU that's direct firmware updates over the OTA firmware update service. Great. Now, there's two versions of the service. The first one supports signed firmware updates, which means that you, as a developer, can sign your firmware updates, push it to the device of Bluetooth if your signature is verified as correct, it'll flash it if not it'll throw it away, and there's an older version which doesn't do that signature checking. This is the older version. So we actually didn't end up looking at this particular service for a number of reasons. I won't get into that now because I think we are quite short on time. But if you'd like me to talk about that later, you can ask me after the talk or ask a question. That's also fine. The one we looked at and said was this service over here, this fluff service. That sounds interesting. You can see there's loads of characteristics under there to play with. So what's going on there? Thankfully, a very nice German computer science student by the name of Florian Euchner had already done quite a lot of work looking at this. And this is Florian playing with the NRF Connect app. And actually, you're getting the Furby to do some quite interesting stuff. You can see here he sends the byte DB to the Furby over its Bluetooth connection. And that causes it to display that debug menu in its eyes, which is really, really helpful for us to figure out what's actually going on under there. So we'll just show him doing that, sending the byte. And we should see debug menu. Great. So nice work, Florian. He wrote up the whole thing. His documentation is fantastic. It's called Blue Fluff. Look him up on the internet. So armed with Florian's excellent documentation, we were able to figure out a bit more about what was happening with that Bluetooth connection. What we observed is that this Furby Connect world app was downloading a DLC file, some kind of file, from those Hasbro servers to your smart device, and then pushing it to the Furby over that Bluetooth connection. So naturally, we were quite interested in seeing what's actually inside that DLC file. And it turns out it looks like this. It's just like a blob of stuff. This is in a hex editor. I'm sure some of you are familiar with looking at things like this. On the left, you've got bytes displayed as hex. And on the right, you've got the kind of ASCI representation where that's possible. Now generally, when we're looking at a new file format, it's quite good to start at the beginning. That's where parsers will start when they're trying to read it. And you can look for things like file signatures. So if we have a look at the beginning of our file just here, that's it a bit bigger. At the very top there, hopefully you can see the letters F-U-R-B-Y, right? So this is a Furby file. They've got their own file signature. That's kind of cool. But it's also a little bit puzzling because it means that it's not really a file that we know about. This Furby file. So a lot of this project was going to focus on trying to figure out what actually went into this DLC. Now you can see also hopefully on this header is what looks like a number of kind of strings of letters with dots between them. The reason there's dots there is because these are wide characters. They're 16 bits wide. So you have a null byte every other character to kind of pad things out. If we just sort of strip all those strings out and recombine them, what we get is something like this.  That's really interesting. Now thankfully, we're able to recover more than just one DLC from the Hasbro servers. We're actually able to recover a number of them and pull out all their strings as well, which look a little bit like this. And these, yeah, all look a little bit like filenames. That's kind of cool. Now Florian actually did one more thing. I've been looking at the Bluetooth and documenting all that stuff. He had a little bit of sort of a rough look at what was inside these DLC files. And he pulled out something that looked a bit like this. This is kind of, he was trying to kind of, I think, look at what bytes were roughly ranged where and pulled out what looked like images. These are like sort of cartoon graphics. There's like a flame in the middle there or something. Now if we have a look back at our promo video from earlier, that was the one with the video. This is a bit later in that. You can see the Furby can actually show graphics in its eyes. You can hopefully make out a little chilly character there with some fire coming out of its mouth. And I hope it's not too much of a jump to see that possibly those kind of sprites that Florian pulled out of the DLC might kind of be that image. So that's kind of cool. Now we didn't find that image in all of the DLCs we looked at. Only this one actually, this one on the left. So curiously that DLC had a few extra filenames. It's those three at the top. So we thought, well, maybe these filenames are somehow involved in the image. So at this point we can start guessing, well, maybe those extensions kind of tell us what kind of image data is in there. And it's kind of hopefully not too much of a jump of sort of extrapolation to say that maybe PAL might stand for pallets, SPR maybe for sprites and CEL for cells. Those are all kind of like image-sanding words, right? At this point we're very much just like trying things out and kind of guessing, which is very much what you kind of have to do at the start of a vercing project. Once you've kind of got that idea that maybe these six file extensions tell us what is in these files, we can do it for the rest of it too. So maybe the LPS section controls what the Furby's lips are doing. Who knows? The one that really caused us some problems was this guy in the middle, this XLS file. Is there an Excel spreadsheet in the Furby DLC? That seems a little bit strange. So we figured maybe that probably isn't a spreadsheet. Instead it's probably the execution list, XLS, which sounds really, really good. As attackers we generally want to go for things that have the word execution in them. They're generally kind of good things. We actually, we had a look at that. It was very, very complicated. So instead of going in and trying to reverse that straight away, we started by looking at this section. Generally when you're reversing anything, it's quite good to start with the small parts and build up to the more complicated parts. So we thought this might contain some Furby audio data. Now under the hood, the Furby is using a general plus, I can't remember the name of the processor, but it's a 16-bit low power processor with a strange kind of instructions there. And it has its own encoding for audio. Now thankfully general plus published their audio encoding tools so you can actually grab a copy of this.  Now unfortunately we don't want to encode our own WAV files to Furby files. We want to take our Furby files and re-backwards them to WAV files. So of course the first thing we did was just rip apart this tool. And we found inside there this A1800 DLC. This exports these functions over here, which are kindly labelled for us. And you can see there's a deck and an enc function in there, which possibly decode encode. That sounds like what you'd call that function, right? We've got encoding working. The tool does that for us already. So we had to look at the deck function instead. This is the deck function in Ida Pro. And you can see at the top there, there's a circle around the function's arguments. Hopefully this is just pseudocode. This is kind of like a representation of what that function does. So the first two arguments to this function are strings of characters. And you can see where they're used. So the first one is used in that second location there at an F open, which is opened in read mode. And the second argument to the function is used at that third location there, where it's also passed to F open with a write mode. So what this function is doing is it's opening one file to read from it, and it's opening another file to write to it. So that's probably going to be kind of our wav in or our Furby audio in and our audio out, right? So we just used the Python C types module to write a little wrap around this DLC and then call into it. And suddenly we could make our own Furby audio, which is great. So at this point we could control the Furby's audio and also read from that DLC to get audio out. Once we figured that out, we moved on to the next logical place to look, which is this playlist section. So probably that will tie some of these audio clips together. It turns out it did. It was very much just a simple linked list of indexes into that section. And we saw this theme time and time again throughout the file. If we want to have a look at how this audio fits together, this is a little diagram, a very simplified diagram of what the file is doing. You can see that AMF section, which is a yellow, is pointed into by the APL, the playlist section is like indexes into that. The SEQ section contains pointers to which playlists you like to play. And that XLS section we talked about earlier, that sort of points into the sequence section to tell you which sequence will be played for which Bluetooth command. So at this point we can kind of get our Furby to play whatever audio you like. So we had a very interesting week in which I played this song quite frequently to our office, I think to many people's disdain. But yes, that was good fun. We weren't done at this point though, because whether we got control of the audio, we still wanted to get control of Furby's eyes. Now to do this, this sort of required a bit of guesswork. I'm going to show you some parts from that SEQ section. That's over here. And these correspond to these eye animations. These both involve a flashing yellow exclamation mark, which hopefully you can see at the top there, and you should see at the bottom there just now. Now we figured out that these SEQ kind of strings of words always ended with a zero, like a terminator, and always started with the hex 2000 or hex 3000. It doesn't really seem to matter which one. We weren't super interested. It was like some sort of way of saying, this is the beginning of a sequence. This next word we figured out was a pointer into that playlist section. So it would tell you which playlist of audio would be played for a particular sequence. And this third word here, we figured out pointed into that MTR section you might have seen earlier, which controlled how the Furby would move for a particular sequence. That gives us a whole bunch more words to figure out, like things to play with. So there really isn't anywhere else that the Furby iAnimations could be controlled from. So these words had to tell us how the iAnimations were happening. If we have a look at the first one here, that's our sequence A, which corresponds to this iAnimation over here. If you look carefully, it's actually not just one iAnimation. It's actually made up of, I think, three distinct sequences, which you should be able to see here. And these feed into each other one after the next. We've got a little up to the right. We've got the exclamation mark and the exclamation mark. If you have a look at the words at the top there, I've highlighted there are actually three words that all start with hex 8000, which is kind of interesting. Maybe those 8000 words correspond to different iAnimations. Crucially, the one in the middle there is 8068. So if both these sequences have a flash exclamation mark in it, we should see it in the second sequence too. So let's have a look in sequence B and we can already see that's 8068 in there. Let's see if it corresponds to an exclamation mark. Hopefully we can see the second part of the animation is an exclamation mark again. Great. So our hex 8068 is likely to refer to exclamation mark animations. And that first word might refer to that sort of wobble left or right we can see there. So we have a bit of confidence now. Maybe these words are referring to parts of animation. So what we should be able to do now is if we get an arbitrary bit of iAnimation, here we've got two bulges and an exclamation mark. We should be able to predict, we see two matching words followed by that hex 8068 in the sequence. These gifts take a really long time to load. That's exactly what we see. So two repeated words followed by a hex 8068. Great. So we kind of, I think we should be confident now, we figured out how the iAnimations are working. Now the problem here is that all these hex 8000 words all pointed to animations that were already in the Furby's internal memory. What we wanted to do was point them at memory that we controlled, so memory in that DLC file. And the only iAnimation in there was that chili. Unfortunately we found out that it wasn't possible to trigger the chili from any Bluetooth command we sent the Furby. It looked like it was something that they added to the toy for the promotional video and since removed that functionality. But we thought maybe it's still in there in some way, just not triggerable. So what we did instead is we gathered up all the SEQ, those sequences we found, and we made a subset of sequences which weren't triggerable from Bluetooth commands and then pulled out all the hex 8000 words that were in them. And what we found is that was actually quite a small subset. It was these guys. You can see there's one that stands out like a sore thumb. It's the second one there. It's not a hex 8000 word, it's a hex 8400 word. So that looks quite fishy already. So then what we did was we took that word and we overwrite it over all the different hex 8000 words in the Furby's memory, and lo and behold we found it would quite happily play back the chili for us. Excellent. So at this point we have control of some memory and we're able to trigger the Furby to play back that memory for us. The last thing we need to do is figure out what we need to write to that memory so if Lauren had done some work on figuring out where that information was stored but not necessarily how to decode it, these images were actually pulled out of the cell section. So let's have a look there first. This is what the cell section looks like. There's not much structural information there for us to play with but you can see a repeated pattern hopefully. You can see a lot of A's are repeated over and over again. So let's look a little bit closer. What you should see here is that this is actually periodic in three bytes. We're seeing 0, 4, 1, 0, 4, 1. Over and over and over and over again. You could also say this is actually periodic in nibbles as well. So you're seeing 0, 4, 1, 0, 4, 1 over and over and over again. If we have a look at what that looks like as binary, that's this number. So B, 0, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 1. Which looks like it's periodic in six bits. So maybe this is a bunch of six-bit numbers packed together to save space. That makes sense. If we're seeing 1 over and over and over again, that's likely the background colour. Now, a lot of images like bitmaps in that. They store the colour information for a particular pixel at that location. What we saw earlier is that this Furby is likely using palettes. So rather than storing that colour information at the pixel, it'll store an index into a palette saying, I'd like to use that colour for this pixel, please. So let's have a look at our palette section. Not really much information in there either. So the way that we figured out what was going on here was by doing a little bit of quite simple maths. Please bear with me. This isn't scary at all. What we already know is that each colour, each pixel has a six-bit index, which points to a colour in a palette. With a six-bit number, you can express 64 different values. So we know that every palette has to be about 64 values big. The length of this palette section is hex C100. So if we know the length of the palette section and we know how many palettes are in it, we need to figure out some number that is the size of a colour times the number of palettes in the section and multiply that by the number of colours in a palette to give us a total length. Hopefully that makes sense. So if we divide the total length of the section by the number of colours in a palette, we should get this number, which is the size of a single colour, times the number of palettes in the section. So we can factorise that in lots of different ways. One of them is we can say 4C8 is 4 times 12. I don't know what that would say as 12 palettes, each of them containing a four-byte colour. That's great. Our GBA, hopefully we've encountered this before. It turns out if you're trying to code the information that way, it just doesn't work. Things come out looking very, very strange. You get lots of flamingo pinks. Another way you can factorise it is as 3 times 16. That sounds more sensible. That would give us RGB colour, so just three bytes per colour. But that didn't work either. What we were observing is that the survey was actually using some kind of transparency layer, so RGB doesn't describe transparency. This was never going to work from the outset. Another way we could factorise it is as 2 times 24. That would give us 24 palettes with two-byte colour. Two-byte colour is kind of strange. We hadn't encountered that before, but it turns out that's exactly what was happening. It's an old way of describing colour that uses two bytes. Two bytes is 16 bits. That's five bits per colour, RGB, and one bit of transparency. By juggling those colours around a little bit, just to figure out which channel was which, we're able to decode the images in the DLC and pull out these sprites, which we could then recombine to actually make the Furby's chilli graphic back again, which is this guy. Great. If we can pull the graphics out of the DLC, we can also put our own ones back, which of course we did straight away and we'll be doing that live in a second. Don't worry. This is just to round up. This is a bit of an overview of how the DLC fell off. It's together which sections point to which other ones. You can look at this on our GitHub. It's not really important for right now. So which really liked all this? They were really happy with what we did and they made a little video about it. This is a bit of audio here, but don't worry too much about it. That's Mr Witch. He's saying you can hack a Furby. The Furby is going to be one of the most popular Christmas toys. But how safe is it? Could you use a mobile phone to hack it? Yes, yes, you could. If you have... So Hasbro are the current manufacturers of Furby Connect. We wrote to them telling them our findings and this is their response. Sadly it's not quite as positive as we would have hoped, but they did at least respond to us, which is marvellous. A couple of bits that really stand out here is these two highlighted sections. There are a number of very specific conditions that would need to be satisfied if you're not subscribed. Really? You'd need to be within range of a Bluetooth connection. So not really too specific. The other part that stands out is a tremendous amount of reverse engineering would be required to reverse the product. Not really understanding the fact that you need to do this once. Once it's done, it's done. So you do the work once and then anyone can do this at all. So what we heard was, hacking Furby's is hard, please make it easy for us. So we'll pull through together this wonderful... It's a web page that you can use. You can actually use this web page to hack your Furby. It's all run offline. I've got a copy of it running here. I'm going to try and do a demo now. This might not work, but please cross your fingers. So I have a victim here. This is going to make some really annoying noises. Just... It's how you wake them up. Okay, he's booting up. What we can do in the meantime is I can use my app to have a look for Furby's within range. I do this by clicking on connect. I turn on my Bluetooth. That would help. Okay, you probably can't see this at the back, but I've found one Furby within range. Thank you everyone for having your Furby's off. This is why I asked you to turn them off. They're all called Furby, so I wouldn't know which one to go for. So let's connect to my Furby. And I've paired with him and I'm connected now. Now what I can do is I can pick a DLC file to upload. We're going to go for the hacked logo and I'm going to click on upload. And hopefully... Come on, buddy. Okay, I'm going to try again. That didn't work. Okay, we're connected again. I'm going to try and upload the logo. No luck. We'll try one more time and then we'll call it a day, I think. Okay, no such luck, unfortunately. Don't move, God's won't smile at me on us today. But if you'd like to play with our code, this is all available on the context. I think the code is available for making DLCs on the context. Paul Stone's GitHub has the web page that you can play with. If you've got Furby's, please download it and have fun making your own DLCs. It's great. Okay. Okay, so we'll just quickly round up them. So, aside from the cool demo that could have been, why should we really care? I mean, this is only a kid's toy, right? Like, what does it matter if it gets hacked? So, one thing which I hope you can take away from here is that, although this, we're not really kind of running code or, you know, getting a root shell, the kind of way that you approach this is very much the same way that you do your exploit development, like for a normal kind of target. So we've identified some attack surface there, that DLC file coming in. We've made some kind of crafted input that we then pointed execution at, or video kind of execution at, to take control of the target. It's exactly what you do when you're hacking a binary. Hopefully, you've also seen that reversing is not all IDEPRO or radar. You can actually do quite a lot of really good reversing in a hex editor without specialist tools that cost lots of money. So, please go and do lots of awesome reversing. And lastly, as I'm sure every IoT talk will reiterate, connected devices continue to be vulnerable. Manufacturers continue to be difficult to work with, and things continue to break. So, please bear in mind when you buy devices and or try and attack them. Thank you very much for listening to the talk today. I really hope you've enjoyed it. That's my Twitter. Please say hi. If you want, I can take some questions as well. Hello. Can you give malicious audio files as well, or just the... Was it just the eyes where you could specify whatever you wanted? Sorry, could you just repeat that one more time? Like the Furby makes noises, right? So, could you inject your own audio in there as well? Brilliant, yes. The question was, could you inject your own audio? Yeah, absolutely. So, Florian actually did some work on trying to kind of patch his own audio into the DLC, which he did successfully. And we were able to kind of improve on that. So, when the demo would have happened, you would have heard the Furby talking as well as his playing graphics. With a bit of extra work, you could also control the mouth movements and actually the motions the Furby does too, but it's all possible. Yeah, thank you.