So welcome, my name is Sven Schäger and I'm going to present you a talk on privacy-preserving authenticated key exchange and the application to IPsec or iKey version 2. This is joint work with Jörg Schwenk and Sebastian Lauer. Okay, so in classical key exchange, you usually have the setting where there is two parties, Alice and Bob, and they want to communicate over an insecure channel and the goal of those two is to derive a session key that can be used to symmetrically protect the following data. So and typically in classical key exchange, you want as a security notion, you want that this key is indistinguishable from random so that you can plug in the symmetric security games quite nicely. So but in throughout the internet, you can often find other settings as well, where you for example have a physical server machine that is hosting different virtual servers. And well, publicly, there's only one endpoint, namely the IP address or the socket IP address in TCP and port. But behind that, there might be different servers running different web servers, for example. One web server might be out of the box online shop, they give me new shoes.com or something. And the other one might be some government, their critical website that contains their critical information and might give rise to political persecution. So this is actually a quite typical setting. For example, when using the multi home servers, but you might also consider the more general case where you have all the parties be equipped with more than one identity, right. And in those settings, it might make sense to to consider privacy mechanisms that tell that that guarantee that the actual choice Alice makes when when communicating with each of those web servers is actually hidden from the transcript that no attacker can can reveal if Alice is accessing the government critical website or just the online shop. And this paper is about formalizing that in a very strong strong sense and providing the foundations for that. Okay. So the motivation, of course, privacy, we want to have privacy and there's no there's no other motive to that. We just want to insist on privacy and have that Alice can can do that that only really necessary information is revealed about Alice. But there's also some some other benefit from from introducing such a model, namely circumvention of of censorship. And there are a lot of examples where the countries and governments, they do censorship based on based on the concrete choice Alice makes, right. So typically, this is done via server name indication. So if Alice actually tries to access the government critical website, there's some there's some information that is in the in the clear to be found in the transcript and those censorship mechanisms, they filter that out and block the website. Okay, so here's here's some remark. These security models are no substitution for tall, of course, because tall does does the whole thing tries to provide privacy from start to the beginning. But it it rather begins to to the network endpoint, it's so this security rather begins where tall ends, I would say. So tall guarantees that your information is is secure up to the network interface. And privacy preserving, aka can guarantee that behind that network interface, the user gets in some simple way, right, without additional and without too much additional and costly mechanisms can get some privacy for its choice of virtual server. Okay. So the contribution in this work is we provide a security model. And the the benefit of that model is that it gives a very strong way to formulate security in the sense that it makes indistinguishability of identities of use identities and indistinguishability of you of keys from random keys, independent of each other, those two properties are independent. So I'm going to explain what that means. So well, it's a very general model, I'd say. And we we rather regard it not as the the final model, but rather as a set of ingredients that can be used to extend existing classical models to also provide the privacy preserving property, right. So and the way that that so and and these and and this ingredients should should they give a very sound way to construct privacy preserving aka in the sense that the the resulting and new privacy preserving protocol model is is a proper extension of the classical model, right. This increases comparability. So everyone knows that in aka research, there's a zoo of models to not worsen the situation. We might and increase comparability. We might we we rather provide some some building blocks to extend security models to also provide privacy, the privacy preserving property. And there's also another the novelty in our in our work, which is called modes modes help to capture the expectation of who is responsible for choosing some identities. Well, now Alice and Bob has two identities. And well, Alice might be responsible for choosing her own identity. And likewise, Bob might be responsible for choosing its own identity. But it might also the case as we have in our example that actually Alice chooses the identity that is going to be used for Bob and our modes, they capture the they they encode these expectations and well, they they allow and they are in their public and they allow the attacker to adaptively make sessions, communicate with each other. They do not have fitting modes where the expectations and well, diverge or clash. So and finally, we provide the security proof for IPsec with signature based authentication. OK, so here's a very simple schematic of of a security model. And this is just an extraction. So we have your party related information. And we also have session related information. For example, the session key is different for each protocol run. Now, what we introduce is new session specific information. And the first set of information is called public modes. And those public modes, they they are encoding the expectations of who is of who is responsible for choosing identities. So for example, if this value, this value might be me or partner is is me is said to me. Then this means that Alice believes that she is responsible for choosing the secret key to to to to use and not Bob, right. And likewise, if this value is going to be said to to partner, she partner, she believes that Bob is responsible for choosing its own identity, right. And those information are public. And this has the benefit that the attacker knows those information and can pit sessions of Bob and Alice with unfitting modes against each other, right. And also those modes, because sessions might have different modes, they capture protocol options where still each protocol option relies on the same long term key material. So they are not independent of each other. It doesn't make sense to have them to have a look at them in a in a separate way. They are all they are all related to the same long term key material, but they are different modes. OK, so and then there are the the actual choices of the actual choices of of the key material. Those values may be set throughout the protocol execution. So this value, the identity select a bit of Alice, maybe one or zero. And this value is going to say that Alice is using secret key a zero. For example, if it is zero. And on the other hand, this value is going to to to state that this session is going to use public key B zero if the value is set to zero, OK. So of course, we also need to extend the attack capabilities. And since we have introduced new secret states as well, not only public state information, namely those identity select a bit. We also give the adversary the possibility to adaptively reveal them, right? And we have chosen to extend this test session. Now the test session has a parameter, an input parameter. Either we do the classical stuff with a parameter key or we choose identities to be as as to be to be given to the adversary as a challenge. So either the the the identity of the long term secret key that this session is using or the identity of the long term public key that Bob's public key that that Alice is is using to authenticate incoming data with, right? OK, now in the security experiment corresponding each party is as equipped with two keys and the the most critical point is that now in the security experiment, we have that each session that the attacker can always access all attack queries, attack their capabilities, also the unmask rate. This has some some consequences, right? So one consequence is that we cannot just reuse existing proofs because those existing proofs they indeed may show the key indistinguishability of some protocol, but they but the analysis was not made in the presence of the unmask rate. So one might come up with artificial examples of protocols where the unmask rate might give some information on the key used, right? So we to to to to actually use the previous proofs, we have to we have to fully revisit them and and they have a look at whether they still hold in the presence of unmask rates. So and this makes sense well because in well in in well typical in in classical proofs we want that independent of the used identity key indistinguishability is still guaranteed and the classical security model the adversary already knows because there's just one identity already knows the the identities of initiator and responder, right? So what we want is is that key indistinguishability holds this is what we mean by cryptographic independence. Key indistinguishability might hold even though identity indistinguishability is violated, right? So this makes sense in in practice because identity information are context dependent and might be leaked more easily and typically more easily than cryptographic keys which are uniformly random values, right? So there are other ways there are other ways to reveal identity information. So in a sense it it might in some situations be more likely that identity information is revealed but nevertheless even if it is revealed we want that it's still key indistinguishability holds and this is of course kind of a prerequisite for showing that our model is a proper extension of classical models because in those classical models we have the very same situation the attacker already knows the identities and still key indistinguishability should hold, right? I said before and our model also aims to capture the opposite even though the cryptographic key is somehow revealed we still would want that identities are indistinguishable. So this is what we mean by cryptographic independence between key and identity indistinguishability. Okay so well as we just view those building blocks on the unmask query and those new state information per session as ingredients we might also apply them to other security models for example authenticated key exchange with explicit authentication to the ACCE model or just to models that that focus on unilateral authentication as well so they might be adapted and apply it there as well. So the emphasis on having a strong cryptographic independence between those security properties. Okay so now we come to the final part our analysis of IPsec and what we have learned from that so IPsec with signature-based authentication and I would so I should rather say I keep two the internet key exchange protocol as part of IPsec basically has an anonymous key Diffie-Helman key exchange in this phase and derives symmetric keys over here so we have a closer look and those keys are then used to encrypt the following data and also the authentication mechanism is encrypted. Okay so this is phase one and basically what we have over here is that there are some keys used in the next phase and those keys depend on random nonces exchanged in the first two messages and also on some some secret S that works like a master secret but this random secret S is derived from an anonymous Diffie-Helman key exchange G to the X times Y coming from big Y sent over and big X sent over and now using those keys everything is going to in phase two is going to be encrypted. So now what we encrypt is what each party encrypts is also the authentication mechanism and the authentication mechanism in this protocol is signature-based so the initiator encrypts some signature here's a signature and sends over its identity and some signature and this signature encrypts as is bound to its secret key and can be verified with the corresponding public key but also protects information that comes from the from the first phase right so there is some interleaving of information and likewise the the responder also protects part of the messages and sends in the first phase right in this way these two parties guarantee that there has been no active adversary. Now there are now two protocol options and this is where we use modes and the first mode and first protocol option the initiator this is the option may send information on the identity that should be used by the responder and in the second protocol option since this is optional there's no such decision by the initiator the responder may decide on its own which identity to use okay so what we can learn from the analysis and the security proof is that one has to be careful in these situations right so why is that luckily for signatures this has worked out quite and quite nicely but there is some one writes like strategically one might run into into secularities basically the the signatures here they are used to protect the first phase without the signatures the first phase has no no guarantee of of resulting in secure keys but the secure keys they are needed to hide the identities right so the secure keys are needed to hide the identities and to encrypt all the data and protect the data from modifications right so it it kind of depends on the on the information here to protect the information in the in the first phase but the information the first pattern in the first phase also used to protect the information in the second phase but for signatures this has worked out quite nicely also a what we need as a take-home message is now that all identity and dependent information should not only be encrypted but have the same length so having two signature schemes two different signature schemes like I don't know DSA or ours a base signatures would be problematic so we can model that by requiring that the signatures have the same length or either or to to have length hiding authenticated encryption be used okay and from from the secret information we then derive the actual session keys okay so under the PRF audio assumption assumption and an appropriate variant of that assumption given that the PRF is secure the signature scheme is secure and if needed that the signature scheme is length preserving or that the that the authenticated encryption scheme is length hiding then this PP aka scheme is secure okay let's conclude now we have a privacy preserving aka model I authenticated key exchange model and we emphasize strong independence between identity and distinguishability and keen distinguishability right this is one of our total take-home messages and what we also have done is is introduced modes to to cope with protocol options now and well the proof of a PSAC is not too complicated but the take-home message is when we deal with privacy preserving information we have to make sure that all identity related information result in the same in the same transcript length right thank you very much for attention and I'm glad to take their messages to take questions and messages and in the in the in the online phase of this talk


Summer Did you go in the mud again? Summer by summer Hello, this is My new shed that's halfway done being renovated So I'm just gonna what I've realized lately is it's Really good for my mental health to take time by myself Making things in like my creative space So that's the process I'm in right now. I'm setting up my creative space Just where you could take out projects leave them there work on stuff. Hey Detroit, Alexis craft your light away Just procrastinating on making a live video But also Because I like doing these videos Take let's go in the shed. I won't hold it up anymore So this is like an old barn that I'm turning into a studio I'm just gonna go through everything This is an interesting wood cart for wood projects Here I'm Sorting wood I Had bins of like wood scraps Here's This is where my tools will be Just stop there's all the art resin stuff Going through the labels. What else can I show you? I know Alexis isn't it awesome? I'm just getting it set up and figuring out how to use it. So I'll have like computer stuff over here I'll get rid of all this clutter. This is like the construction stuff And this up out of a table and chairs here for meetings and stuff Some tools and this is the This is like gonna be the science room like a clean room. There'll be doors here And this will be a dust-free environment dust-free environment Okay, so I'm going through old sketchbooks and putting them in frames Otherwise likes your art just stays in sketchbooks. Hey Janine from Australia See so I'm just like there's so many nice pieces from life-during class and if I just frame them then all of a sudden they exist Like look at that.  This is summer Summer. Oh, thank you. I got lots artwork. That's one thing. I'm doing upstairs. I'll go there now Upstairs. I'm sorting art summer. You want to come up with me? Yes, you know Yeah, so this space is gonna be a collection of all The ideas about good spaces that I've learned over the years just Even hello from Montana. Thanks for watching. I'm in Canada. Look at this Just nice quiet Who's this? by summer Okay Anyways, there's a couple of things I've been thinking about one is that if you have a good space You're so much more likely to create. It's almost like step one to getting back into art is setting up your space The other thing that's very interesting is I've heard about Just this idea that like to be successful as a creative person as an artist the key seems to be Hey, Janine the key seems to the key seems to be as you just make a lot of stuff and Then something is gonna happen at the right time. Okay. I'm gonna show you this space This is my painting space. It's a work in progress, but Look it. I can't believe I get to be in here. So these are pieces out of work in progress This one's gonna be great. I'm just gonna add a bunch of color down here and the idea is that You can't hold it back the life, you know, we're all coming back to life So these are all a certain site like medium-sized paintings that are undone So my job today was to go through them and pick three of them that I think I can finish There's the idea boards have these little tables for the kids to play at and this is gonna be some paint Supply area over it right in the corner here and they'll be like a bar high table here And one day that'll be a there. There's a pond right there But it's too shallow. I'm gonna have to dig it out So these are I paint with them just up on the wall So these are pieces I'm working on right now and I'm gonna be finished and I wanted to just try all black This one I just need to finish This one I got I'm adding a bunch of color this one. I just have to keep working on details I just got like a base coat for this Floating woman from and I'm just them copying exactly from an ad that I saw and This just happened to stick to it by accident and I just said hey, it looks kind of cool. Thanks, Sandy Yeah, that's a best I whenever I have extra paint I just put it on that one and I'll just keep doing that till it starts turning to something This one. I don't know what I'm gonna do with I Don't know told you about that one and that one and then this is gonna be where music happens So I got wood shop science lab music room painting room and here it's just storing some paintings So I'll be able to play these again dust them off. I got to test out all this stuff But so we can make music. They'll be like a washroom and stuff in there There so that's my creative space that I'm building Because I I believe it so much if you set up the space, then you'll make it. Oh Thanks, Alexis. Yeah Mona Lisa So I just wanted to share it with someone because it makes me really happy Okay, I Don't think I have anything else to say unless you guys want to see something. I can show you something if you want. I Don't know. So these are all just bases work in progress Liggy at yearly. Oh, thanks. So my son Called it a porcupine apple. This was the large Hadron collider. I Got to finish that one. Thanks, Jeanine and now work in progress Well, thanks everyone So this is all music stuff from like years and years just untangle that stuff put it away. Okay It's one to do a circle one so Go back to the green one that one you call it green that green kind of killed it This is just my like reference board. I seem to like like that like floating in space. It's floaty feeling You know, okay, oh Yeah, they're all fixable. I know I'll fix them. Okay Have a nice Sunday. Oh Janine, I know what you mean. I've been in basements I don't I shouldn't complain because I had a space but it's always been in the basement for some reason your studio your art like Who you are is the first thing to go So yeah, you it's almost like you honor yourself by making a space that you can create it and Make it an important space. Don't put it in the basement or something. You got to do what you got to do but Yeah, I've been working my whole life to get set up, you know, okay Thanks everyone. We were at the beach together Day and it was packed full of people all without masks and everyone just celebrating. It's pretty neat. I Was over an overwhelming experience actually Put it in the light All right We'll end with This Okay summer every time we come here. I got a hoser off. I'm like, okay. Just go to pink clinic Okay, bye guys


I am. I missed you. Show me that. I bet if you ask her who it is, she's gonna know. It's a bracelet. Do you want to wear it? All the cages outside. We are doing an extermination in the house.  You see though, that's like an ant head right there. They just look like ants. This is an ant. I'm not worried about it that much, but she is. What do you mean? They conglomerate all around my makeup. They're coming from somewhere. But the main point here is that I'm correct. Take a picture I did. Let's give them all a little bit of time. Who's over here? Look how excited he is. Bella, tell Leo how you're gonna come see him in a bit. Ready? Yeah. Okay, we can do it. What's your goal in this room? That everything will find a place. There's places, but that even each individual item will get put back. You also want to be able to walk in here, right? Yeah, I want nothing on the floor. Dangerous in here. The monster's in here. There's a monster in here, Bella. Oh no. Where was that, Tracy? Where was it? Shh. The monster's trying to come out? Oh no. Where is he? Where's the monster? Oh no. Yeah. Show me that. I bet if you ask her who it is, she's gonna know. Yeah, you're blocking. Who do you think this is? Which birdie? Which birdie is this? Which is your favorite bird? Tracelet. Do you want to wear it? No. You can put it in your hair. Show him. Beautiful. Do you know who that is? Who is it? Which birdie? Which is your friend? So it's the middle of the night. Tracy, me, and George are pulling all the stuff out of the cages that were here. And Bella. And I have this nice cut-coast scissors because we're cutting all the toys off that don't work. And then I'll do revamping the toys for you guys so you guys can see. This is getting cancer. X-nail. This is a canceled cage now. This is Monty's old cage. We're not giving him and her the same kind of cage. Okay, what he's saying is Monty and Nelly are getting similar cages now. But I got a question for you. This is Merlin's? No. This is his outside thing. Right, but do you want to... Move him into the big one? Save space by having him just get rolled in and out. The wheels on this are not that great. Oh, okay. Well, I'm just saying. Then we could be minus one cage outside. The wheels need to be changed on this. Okay. So we'll have to do a wheel video. They're not too bad. So you want to be able to pull him out in and out with this? If we pull him in and out like that, he likes this cage a lot. He does like this cage. Then his cage becomes elite or available for an upgrade for a different bird. So I'm going to pressure wash these. Yeah, get these ready, right? And then tomorrow I will power wash the other ones. And get those cleaned up as well. Okay, that sounds like a plan. What do you think? Maybe we'll paint this room too? Yeah, but when are we going to paint it? Tonight. You guys can go to work. We're cleaning the room. We're painting the... We're painting the... What color? You have the color of this wall, but then you can't move the birds back in. They can't be around the... By the time I power wash, you guys can get the town on it right now. You can knock it out in like a half hour. While I'm power washing with that, you guys can be good. Yeah, but it's not. But these are like holes in the walls. How do you paint over that? This stuff needs to be... And whose work is this? That's something I'm going to put something in instead. It's not too bad. We have paint. But I'm cleaning that room over there. I know, but you know, this could be done. Up to you. So you think I could paint the wall, finish cleaning my room. I'm going to still need to bring the birds. And set up all the birds cages tonight. But someone's got to go put them to bed. I'll go with you over there. We go. Yeah. Okay. So do you feel like painting this wall, Tracy? It's kind of accurate. I knew that would happen. I already said he's going to paint the wall. I know when George sees this wall now, I wouldn't be surprised if he gets in the mode of we might as well paint the wall. We'll see what happens there. Because he's a perfectionist. But now you think the wall would be nice and like light green. Now let's not change the color, Marla. Let's not change the color, Marla. In the middle of the night, just like a re-pain a whole new color. Yeah, that's not happening. Sorry. No, we're just catching it. You want to catch them? Oh, we're just painting over pieces. Yeah, just to make it look nice and clean. What do you think we were doing? You can get the whole wall of some of the paint. I go and set us up. See if we have the paint. I don't know if we have it. I'm catching all the silver. I don't understand how we get ourselves into these things. Are you excited? Yeah. I'm still expecting cauliflower rice. Fine, it's just thinking. I'm going to make that. Whatever. This is like old times. What happened? What's going to do? What are we going to do to it? Paint. That's right. He's so happy now.


What's up, YouTube? This is a video write-up for the challenge Lights Out, the second web challenge from ICTF 2018. The challenge prompt was help, we're scared of the dark and we're given a URL and a page that we can visit that doesn't have a whole lot in there. It says who turned out the lights and it's all black. So we can view the source, I'm gonna hit control you here. And it's basic bare bones HTML. There's not a lot here. Really just clear fix, data hide equals true, strong data show equals true. So it looks like they are trying to hide some things supposedly who knows. But there's not much that we can see in the HTML. So let's go exploring a little bit more. I want to check out what this main.css file is.  But it is just bootstrap with some stuff in here. And it's all messy and kind of hard to read. So what I ended up doing is actually just going to the original page and checking out the sources with the developer tools. So I hit F12 or control shift K or control shift J with it depending on your on Firefox or Chrome, etc. And then we can check out, okay, what are we actually looking at here in the sources? We're given the HTML file. We're also given the main.css file. And it is kind of massive. That's fine. It looks like some comments are in the way. Neat trick. At least I don't know in Firefox, but I'm in Chrome right now in the developer tools, you can hit this, these curly braces here and that will pretty print or kind of format what you're looking at. So I was able to kind of explore these and take a look at them on our own. And I thought, well, they must be trying to hide something here because that text was so big, I thought they would be trying to do something weird. So I started to look for the like flag format, I CTF, I didn't get anything. I look for just CTF. And then I got a hit. It said the data hide before has content CTF. And that's looks like the start of the flag form that looks like a piece or a fragment of the flag. So I thought in my mind, okay, this must be the game. This must be the move here is that they've hidden different pieces of the actual CTF here and the flag format all in a different HTML element with kind of hiding it in data hide or setting a color so it's invisible, trying to hide the background and stuff. So if we were to actually even change the background color, if you wanted to try and manipulate some of the CSS, you totally could want to try and find the background here.  But again, all of these invisible things are hidden as invisibility or and we can comment some of these lines out and see if some of them will end up displaying pieces of the flag. Or you could just start to track down pieces of the flag by searching for them within the CSS. Like you can see this one here has another segment of the flag determined kind of by the curly brace ending here. And they're using just the content property. There's every single element and every single property is just being set with the content. So it's not visible in the HTML, but it's set by the CSS. So if we wanted to, we could just simply search for content and get pieces of the flag. We saw ice. Let's get a text editor open where we can start to piece these together. We saw ice CTF colon. And then the lights was at the very end of that content underscore somewhere. Looks like that doesn't have any real data, but the lights there turned styles turned in our underscore. So styles turned the lights, maybe that should be the flag. Like we can try it out. We can submit it if we wanted to test it. And it says, Oh, styles turned the lights forgot the S there. Yes. In the background, you can see the checkbox. We did solve that challenge. That was the flag odd and weird. I was kind of hoping you can probably tweak the CSS a little bit or turn things visible where you actually would be able to like view the page and have to have it display out the flag for you just written on on the HTML page. But I didn't mess with it long enough to be I actually even care. I thought, Okay, if I can just find the content and piece together the flag just like that, that's fine.   It's kind of a little scavenger on whatever. I love you guys. I CTF creators are the best. A quick shout out to the people that support me on Patreon. Thank you guys so much. $1 a month or more on Patreon will give you a special shout out just like this at the end of every video. $5 or more on Patreon will give you early access to everything that released on YouTube before it goes live. Because I like to record in bulk and then gradually let YouTube schedule and release them. If you did like this video, you're into CTF's program and other cool stuff, please do join our Discord server link in the description. It's a pretty cool community of CTF players, programmers, and hackers. If you want to hang out with me and, you know, other cool people that love this stuff, that's the place to do it. Thanks guys. Appreciate you watching. Please do like, comment, and subscribe. We'd love to see you on Patreon. We'd love to see you in the next video. Later.


f engagement was needed, but we messed the mark. We are no longer, we do no longer need discussions anymore. Discommunication need more discussion. We do no longer need that. What we need is action, and actually we need it right now. We have been waiting for this since 2018 when two black boys or even more were victimized by the police department in the city. Since then, we've been waiting for some level of accountability, nothing. But what we have done is to pay a violent cap to get out of the city. What do we need? I am not a realtor. Nor am I like a Republican or independent. I am just a Democratic city council. I have no, I'm not gaining, basically, any. I have no profit, nothing. What I want is just to participate in the well-being of everyone. And this Wellington Police Department needs an independent community oversight to provide disciplinary when it's needed. Yeah, I will not be voting for this resolution, but I would like to put a motion to postpone action of this resolution until our second meeting in April. That's a motion that I'm putting here on the floor. Thank you, President. All right, so a motion has been made to postpone this item to the second meeting in April. Is there a second to that motion? Second. Seconded by Councillor McGee. We'll talk about the motion in front of us. It's actually an amendment. Well, it's actually a motion. Are there, are there councillors who wish to speak to the motion and we'll come back to the queue for the other. Did you want to speak to this, Councillor McGee? Sure, thank you. I think my remarks to this motion and the underlying are similar, so I guess I'll just make my remarks now. It deeply concerns me that the council is debating a resolution that advocates for and assumes the defeat of a citizen-led ballot item before voters have had the chance to weigh in on the issue. The topic of police oversight has been discussed at length for nearly three years. And in those three years, we have all seen stories of police misconduct around the state and here in Burlington, appearing in the news on a near weekly basis. In fact, nearly identical language to this proposed charter change was vetted by the Council's Charter Change Committee by the city attorney's office and by the full council through the fall and winter of 2020. At any point in the past two years, the administration could have chosen to lead on this issue. As the primary steward of the city's resources, the mayor could have made this a priority. However, like with so many other transformation efforts, we have heard plenty of words and we have seen little action. And Mr. Mayor, you and the acting chief have attacked the police commission in their role as an oversight body. What message does that send to our community when you're saying and touting the changes we have made as signs of progress? I vehemently oppose this resolution. Councilor McGee, I appreciate that. We just need to work right now. What we're doing is we're... I'll get to that now. Thank you. Thank you, President Powell. I think for us to vote on this resolution before the voters have had a chance to vote on the ballot item is a serious mistake. And for that reason, I'll be supporting this motion. Thank you. Thank you for that. And my apologies again for interrupting. I just wanted to make sure we were staying on the motion. Are there any other counselors who wish to speak to the motion to postpone? And also, Councilor Shannon and Councilor Hightower, we are following the screen if either of you wish to speak to the motion to postpone. Councilor Freeman. I'll keep my comments brief to speak to the underlying, what, well, depending on how this vote goes. I just wanted to think, I agree with Councilor Jing and at least postponing it. I appreciate you making the motion and I will be voting to postpone. Thank you, Councilor Freeman. Are there any other counselors who wish to speak to the motion to postpone this resolution to the second meeting in April? Councilor Travers. Thank you, President Paul. I appreciate the comments made by all the colleagues, yours included, Councilor Jiang, and thank you for bringing this motion forward. In large part because it signals to me a willingness as we've been discussing here for us to continue to come back to this matter even after a town meeting day. That said, I disagree with folks who have characterized it as inappropriate for the City Council to weigh in as set forth in the resolution. I think that it's been important that we have this discussion this evening. To me, the most important part of this resolution is committing to voters, if we are to vote in favor of it. What it commits to voters is that whatever happens with the resolution on town meeting day, there is a path forward for us to continue to discuss police oversight and accountability. That to me is the most important part. I cannot support this motion because I think that's a commitment that we need to make to voters tonight. I think it's appropriate for the Council to weigh in that way. Thank you. Thank you, Councilor Travers. But acting City Attorney Sturdivant, I have a question for you. I just want to make sure that if we are going into the second meeting in April, that is after the start of a new Council year. If we make a motion to postpone to beyond March 31st, are we then binding a future Council? And if so, are we able to do that? I believe you are able to do that. You will not be binding them. I mean, you will be setting something for the agenda, but it will not be binding them to act on that in a certain manner. Okay, so by asking them to put it them, meaning a future Council to put it on an agenda, we can do that. Yes. Okay. All right, just wanted to make sure. Are there any other Councillors who wish to speak to the motion to postpone? All right, seeing none, and given the fact that we do have two Councillors that are on Zoom, we will go to a roll call vote. If the clerk could please call the roll. And again, this is the motion to postpone. So a yes vote is to postpone, a no is not to postpone. No. Yes. Oh, we online can't hear Lori, so we can't hear the roll. No. I'm sorry, Councillor Hightower, are you saying you can't hear Lori? Correct, so I can just hear the votes, which is okay, but somebody might just have to call for those of us online. She can't hear the names. Oh, you can't hear the names. Is your microphone working? Okay. No. Yes. Yes. Councillor Hightower. Yes. Yes. Councillor Shannon. Councillor Shannon. No. Councillor Traverse. No. City Council President Paul. No. That's five nades. Okay, so the six, six eyes, so the motion, is it six, was that what it was? It's what I have, unless you want to do it again. Okay. There were six eyes and five nos. Okay. All right. Are you sure? Would you like to do it again? I mean, if. Six people. Were there six people who voted for the motion to postpone? Could you repeat who they are? Okay. Could you, I'm sorry, what? Wasn't it seven, five? No. With five, seven? There aren't 12 of us. Oh, that's a little. Lori, I apologize. Could you read off by name how people had voted, please? So Councillor Barlow, Nay, Councillor Bergman, Aye. Councillor Brant, Aye. No, I voted no. In the very loudly, but Councillor Hightower was speaking at that time. So would you like to just redo it since there was. Okay. Why don't we run through that again? Yes, please. Thank you. Councillor Barlow. No. Councillor Bergman. Yes. Councillor Brant. No. Thank you. Councillor Carpenter. No. Councillor Jang. Yes. Yes. Yes. She said yes. Councillor McGee. Yes. Councillor Shannon. No. Councillor Traverse. No. City Council President Paul. No. Five ayes, six nays. The motion before us fails, so we are back to the original resolution. Councillor McGee, you had wanted to speak to the underlying resolution and I'm happy to, yeah, okay. Councillor Freeman, you had wanted to speak to the resolution and then we will go to Mayor Weinberger. Thank you, President Ball. So I wanted to speak to a few points brought up in the resolution. I think first to the matter of more public input, which is big and bold in the title. Like what? Like I just don't, it doesn't make sense. It's sort of a nonsensical, I think red herring approach to distract from the issue at hand. I think it's clear given so much input from the community tonight and from the years preceding this that there has been an abundance of community input. I understand if you want more input but more specifically the input that reinforces the position that you hold, but that is really just a red herring. It distracts from the fact that this issue has come before us because the community has petitioned for it. It's perfectly legitimate for them to vote on it. We should allow it to go to the voters. It's just, it did not strengthen your argument, in my opinion. So to another point in the whereas clause is mentioning that the model is untested, that is the point it's meant to be because the other models have been tested and they don't work. That is the point. There, what frustrates me is what I perceive to be a lack of a viable alternative proposed to either the makers of the, by the makers of the resolution or sort of anyone who's opposing the current charter change. As far as I can tell, if I'm hopefully keeping up with this issue as it is dragged on, the main other proposal on the table was to have not just the chief of police, but the chief of the police and the mayor decide on accountability and oversight. I really have no idea why we believe that's a better system, like just two people. I think it's really strange given how over and over again, the fact that the proposed board does not have, is not written to include members who have law enforcement experience has been brought up as an argument against the proposed board. Why adding a mayor who ostensibly is not required to have law enforcement experience legitimizes that argument for those who've opposed the board. It just, to me, further, further shows that, this was what I took the longest to write up, so I, because it was hard for me to phrase it exactly, right? But, or it's a complicated, there's a lot of different ways to kind of try to explain this, but I think that it just, I think it's a throwaway point to distract from the fact that the culture of policing as we have it, basically promotes this blue wall of silence culture, which is that it's sort of an unofficial agreement that law enforcement officers are not going to challenge each other's misconduct, and I think that we are asked by the sort of political pressures of the power of police and police unions to be complicit in that culture. And I think that when we are afraid of everyday people and the community itself making decisions about what is fair and just in policing, that we continue to fall back and become complicit in that culture of being afraid of what it looks like when we don't just let the police police themselves because we understand that there are, over years and years and years of this institution, things like the blue wall of silence as it is called, or sort of other aspects that create that culture of complicity to misconduct, to a lack of professionalism and to a lack of high standard in what is essentially a public service and good. I think that in my attempt to explain that, get a little roundabout, but if there isn't a legitimate counter proposal, and we know that NACOL, the National Association for Community Oversight of Law Enforcement has determined that within our current system of policing that independent oversight is a must, what is your alternative? I see, I know you're last, thank you. Because there just isn't a counter proposal, and so we have this proposal that's been made that is untested because it is, I don't know, I think other people, if they wanted to, could call it innovative and creative, but we've chosen to call it, in this resolution, just untested. That there's just no, to me there is not a legitimate counter proposal, and I think there's sort of an echo of frustration that this is dragging on for years and years and years without changing the status quo. I think in closing, with sort of each of these iterations of the council and the mayor's office coming to the table with these sort of stalled out, played out, sort of not alternative proposals, I find myself vacillating between like a profound frustration, and also just like almost a profound sense of boredom. It's, I think, equally disturbing as it is at this point, sadly predictable.  Our actions are speaking louder than our words, so that is my opinion on this resolution. I do not support it, and I hope that we can work towards some change and some real concrete proposals with some true substance. Thank you. Thank you, Councilor Freeman. We will go to the mayor and then Councilor Brandt, Councilor Zhang, and then Councilor Travers. Mayor Weinberger. Thank you, President Paul. I'll try to be brief. I appreciate Councilor Freeman's candid acknowledgement that the proposal before the voters is, except the notion untested, that many of the, there have been advocate statements that have suggested that it is based on other precedent, and I think, and we've been trying to look very carefully at it, and I appreciate you kind of confirming the conclusion that this really is very different than anything anyone else in the country has, and I, if we agree with that, I will just say again, I think public safety is too important for us to be experimenting and putting out something like this that deviates very dramatically from anything that another community has done, and just kind of hoping that there are not gonna be negative, unattended consequences of it, that just sort of hoping that we're gonna continue to be able to field an effective, professional, one of the best police departments in the country, that we're gonna continue to have that if we subject it to this kind of untested, to use your term, oversight. I do have to disagree with the statement that, and I think maybe surprisingly to me, maybe real misunderstanding that alternatives haven't been offered. The, again, in December of 2020, the city attorney and I came forward with a comprehensive rewrite of the charter that it did actually change the way the mayor can provide oversight to the police chief within the administration, because I do find it unusual, unique within our charter, that that is not, that there is that kind of wall, that protection of the police chief I think is strange, and I still would support changing it, but the more significant changes in that charter change were to codify and strengthen the police commission, give the commission explicit charter authority to review decisions made by the police chief and to require that input to be heard before a decision is made, and for a super majority to overrule the police chief when necessary. To me, that is a direction that I supported then. I would continue to support it, supported in the spring of 2021, would continue to support that. I think it's, we have invested heavily in trying to make the police commission a more effective oversight body since 2016, and that would be a consistent continuation of that effort. Since there has been no interest in the council in pushing that forward, we have pursued the other alternative quite vigorously, which is to work within our existing charter to make changes to the way in which, again, the police commission functions and the authorities they have. It is not as strong as it would be, it's not clear as it would be if we went through a charter change process, but to suggest there's been no change in the last two plus years is just inaccurate. Thank you, Mayor Weinberger. We'll go to Councillor Brant, then Jiang, and Travers. Councillor Brant. This is such an incredibly important debate, and I'm so glad that we're having it. I would like to say that nowhere in this entire country does such a community control board as proposed exist. It simply does not exist anywhere else. We need to address the possible defeat of this, this motion, I think it shows foresight and equanimity to do so. We are moving forward with society, and we are contributing to changing policing and law enforcement in a way that is right for our community. And I think that we would all agree that we want some form of justice and oversight. We want equality for our citizens. This is what we're all after. But we need to do it with some caution, and we need to do it wisely. And I think that this debate is essential. Different viewpoints need to be made in order to move forward, but the voters will decide, and we continue to take action to help shape our society. So these viewpoints are all valid, and we move forward, and we try to be convincing, and I just want to remind people that nowhere in the country does such a control board exist. Thank you. Thank you, Councilor Brandt. We'll go to Councilor Chang and then Traverse, and then let's, and Councilor Bergman, and then let's try to go to a vote. Councilor, and Councilor Carpenter, Councilor Chang. Thank you, President Paul. So I think if this resolution passes today, it could be the resolution with the least vote that have passed from this party. Because, and also, it's not recognizing the full party's perspective about this issue. It may have six votes, but not even seven. If we were 12 city councils today, this would even fail, just people to know. And the second thing is the passage of this resolution has nothing to do with what the voters will be voting on. That's already a done deal. Community oversight of the police is going to be on the ballot, and people need to now try to engage right now with the elected official about what it is about. Some argument that I heard that it was not vetted. From my perspective, it has been vetted by the city attorney, the language itself. Am I correct? What was vetted? Am I, is that a question? Okay. I mean, it was not vetted in that we can only look at it for technical, it is not vetted, no. So basically it's a legal language that people can weigh on. Just on technical accuracy. Okay. And also all the signatures also were vetted. So basically 2,000 registered voters did vote in support of this already. Maybe another 2,000 is what's needed. And I think that the way the work need to happen. And I just wanted to also say the last thing about this resolution as well. As an elected official of color, with experience, first-hand experience, second-hand experience in many stories, compelling stories actually, of this community about policing. It's clear that this Burlington Police Department need to work for every single one of us. Recently, when we failed to take action, at least three or four people of color, youth of color, died in the city. Where they could have been, some cases could have been prevented and supported. So basically a lot of hopes lost, families are devastated, and there are countless amount of stories that many of us have not yet heard. This community needs a police oversight independent from the police commission, and we all now have that chance to weigh on it. And I hope everyone to support it on the ballot. And I won't be voting for this resolution tonight. Thank you. Thank you, Councilor Jang. We're gonna go to Councilor Travers, then Bergman, and then Carpenter. Thanks, President Paul. So I joined the council approximately 10 months ago. And at one of our first meetings, we received an update with respect to where we were in our review of multiple recommendations that had come from the CNA report as to improvements that could be made upon the police department. And among those recommendations were recommendations as to how we could improve upon police oversight and accountability. Now, I don't serve on the Public Safety Committee or any committee that's been reviewing the CNA recommendations. I have been assuming in my time on the council, perhaps mistakenly, that as we've been taking steps on those recommendations, including on some really great transformative movement, including the CAHOOTS model, which Councilor Freeman Erode, a great deal of credit for moving on that. So thank you. I've been assuming that one of the actions that would be coming from those CNA recommendations is a proposal in alignment with what CNA had recommended. The ballot initiative here, mind you, we haven't talked about it here, actually is not in alignment with those CNA recommendations. But I've been assuming, perhaps mistakenly, that there would be some movement on that. Clearly the answer to that is no, which is a wake up call to me that we need to take steps more as a council to make it clear that we are going to make movement on this issue. Now I don't want the question of what's the alternative to go unanswered. There are communities out there. Sorry? Well, I'm about to. So there are communities out there that have hired a professional independent monitor. There are communities out there that have stood up a community board that has more role in the hiring of their police chief. There are communities out there that have stood up community bodies that have robust investigatory powers that make strong recommendations on discipline where to deal with historical issues around the blue wall of silence, if the chief of police disagrees with those recommendations, they have to be transparent and explain their reasoning as to why they disagree with those recommendations. I would be open to considering all of those proposals. We also passed a resolution as a council in December, 2021, asking the city attorney's office to draft language and an ordinance change to expand the powers of our police commission. I'm also open to our considering that. What I want to do personally, I'm not going to presume that that's the way to do it. The way we need to do this is to set up a process for our committees to consider what's working in other communities, what's been proposed for here, and to come forward with a matter that can gain broader community support. So I'm looking forward to proceeding with this resolution and there are models out there that I'm more than open to considering. Thank you, Councillor Traverse. We'll go to Councillor Bergman and then Carpenter. Well, we've gotten ourselves into the debate about the models themselves. It's inaccurate to say that nobody does anything like this. Lots of communities do lots of pieces like this. There is New York City, there is a way for a board, an appeal board, to actually meet out discipline that is not done by the chief. Oakland has something similar, San Francisco has something similar. They're not the same. NACOL, I respect, people on the other side of my position have articulated respect for that. They say that a best fit, not a best practice, not a cookie cutter, is what is needed by a community. And so when we were looking at this in the Charter Change Committee, that's what was being done. That is what this group did. It is not a cookie cutter. It is not good for our community to be looking for cookie cutters. So best practices is not necessarily the thing that we're supposed to import to make ourselves safer. It is not a unique experiment, right? It is looking at what we need and then building it. You know, we would not have the community land trust if we waited for somebody else to have it. That was created here as a municipal body. First in the nation, we can be the first in the nation. People criticize this proposal because it's independent. NACOL in what is meaningful civilian oversight have as its second step that it is independent must be independent authorities, not subsidiaries of the police departments they overseas. There are a lot of things that are embedded from these principles into this, not the least of which is one that y'all criticize, which is the money. The best way to defeat an oversight system is to starve it of resources. In fact, and it was shared with you when the council debated and ended up passing seven to five, the original thing, a statement by Leana Perez of NACOL, who said that you needed to make sure that the funding was there because if you do not do it, you will have, it will be stillborn. She didn't use those terms, but it will not be effective. You want to do something in name and not in substance? Don't give it any authority. Don't give it any resources. Talk it, talk it, talk it to death. You know, let me just end because I could get into the debate on this and everybody else seemed to want to do that. I was trying to stick to the resolution at hand. Let me see if I've lost my thought in that last thing. I might have done that, it's too bad because it was a good thought.  But we'll have a debate. It'd be good to have a debate on the details because things like saying there's no due process that are just factually wrong and it's insulting to say that. You might disagree with it. You might play with the words with it and say it while it's outside of the city's process, internal process, it's a nice sleight of hand. I know as little lawyers and a politician how to write with sleights of hand, but it's dishonest to say that there is no due process. There is full due process. Oh, and this is the point that I was gonna make. The city council itself under this proposal has the power, in fact has the sole authority to actually adopt the rules. So if you look at what is proposed in the proposal, you will see the existing language that we are using right now for the violations, the due just cause, and you will see the due process that we have right there and it's filled in, right? The gaps are filled in, they're filled in by contract when they're not talked, they're filled in by rules and regulations. This proposal makes it clear that the council has the right to fill that in with the rules. They approve it. We don't get anywhere without that. There's a whole section on the police chief's authority to discipline, right? And if you think that this board is gonna take every disciplining matter, then you're just not being fair on that. So there's going to be, most of the things are gonna be dealt with internally. You look at the structure of this proposal, it is for big things like the use of force, excessive force, you look at the list of violations, it is exactly what we've got here right now, that's why we did it. There's nothing stunning about that. It doesn't come from Mars, it comes from the Burlington Charter that we've got right now. You've got due process, you've got the right to appeal to a court, somebody who doesn't give a darn about the city of Burlington, just looking for justice, right? If a person feels aggrieved by the board's decision. But you know what? If the chief's decision is going to be meted out, that whole process still has the grievance procedure because it doesn't exempt that. And we can make that so because we get to set the rules because it says so right in that charter change. So the arguments against this, I mean, there can be honest disagreements about it. But it's just not fair to be saying things like, it lacks basic protections to ensure fairness and due process. People have the right to a hearing, they have a right to have just cause proved and they have the right to appeal that. So I'm sorry, I listened for a long time to all the details on this. And they're just, it's just wrong. And we could debate for a real long time, be happy to do that on the details of this. But I would urge you, right, to not go down the path because this is not where we, we were building consensus around public safety. This is really disruptive of that. Thank you. Thank you, thank you, Councilor Berkman. We have reached 1034.  I'll move to extend the rules. Thank you, Councilor Freeman. Seconded by Councilor Travers. Any discussion of the motion? All those in favor of the motion to suspend our rules to complete this last agenda item, please say aye. Aye. Any opposed, please say no. Okay, we have a 10 to one vote on the motion to suspend our rules and that passes. So we will continue with this debate on this one agenda item, our last agenda item. And we left off with Councilor Carpenter and then Mayor Weinberger. Thanks. I'll try to be quick. Councilor Berkman, I appreciate your analogy to the Bona Community Land Trust, which I was a founder of, and it was untested. Its success was we were able to change it as it went along, adapt to what we needed to do. My concern about this charter language is even though it allows us to write rules, it is a model that starts with a premise that is not very flexible and that is at the whim of having the legislature edit it. We need to get our ducks in line with the premises that we want and understand that we may have to change this over time because it's not tested. We may need to adopt something different and this is very prescriptive without some of the input I think we need on the fundamentals. Thank you, Councilor Carpenter. We will go to Mayor Weinberger and then Councilor Shannon has asked to get in the queue and I wasn't aware, so we'll hopefully end with Councilor Shannon. Mayor Weinberger. Thank you, President Powell. I didn't intend to speak again, but I feel I must after it being suggested that somehow there's some dishonesty from this side of the table. I think disagreement, disagreement, a different take on the facts. This is, for my opinion, for opinion of administration, the opinion of many other organizations and Councilors have come forward to be suggested there's some dishonesty there. I don't appreciate. The concerns about due process, the concerns about due process have most clearly been articulated by members of Burlington's unions who for whom it is not a trivial matter whether or not you need to go to superior court to get some kind of appeal. We have, that is very different and as you well know between the, that is not some trivial sleight of hand. That is a fundamentally different kind of appeal rate to have to go to superior court to appeal a decision. Members of our unions do not appreciate that they could be that there is, it does not feel consistent with our principles of due process for their suddenly in this charter language to be the ability for employees to be disciplined for up to two weeks without findings of fact and without the ability to grieve. These are not trivial due process matters. So I would welcome Council Bergman. If we wanna have further debate between now and tell me any day, I think there could be some public debate to that but I hope we would start from perspective that we both care a great deal about this community and want what's right for this community and are earnest in that those desires. Thank you Mayor Weinberger, Councilor Shannon. Thank you President Paul. I agree with at least one point that Councilor Bergman made and that is that any organizations that is starved of funds it's a sure way to assure its demise. And that end, I'd ask if anybody at the table can tell me what it will cost for this new department to employ a director, hire other staff and consultants and legal council to advise a paid board. What is the estimated cost of that? Jen, Councilor Shannon. Yes, I'm just putting that out broadly to the group. If anybody can respond to that, I'd be grateful. Is there anyone feel that they can, it doesn't appear that anyone feels that they're in a position to, oh, Councilor Freeman. There were estimates at a time. I'm not sure if I can recollect exactly what was budgeted out. There was one particular resource that I went to go back and cite or sort of reseek the information there and not particularly surprising. Their whole proposal and campaign and project sort of work has changed dramatically because so much of what has been sort of promoted as like groundbreaking or the edge of like the sort of new innovation and police transformation is tired and old and not being used anymore, which is what I was referring to in the early part of my comments and my frustration. So I wasn't actually able to, I wouldn't actually be able to access that information anymore because it's so, an oversight in and of itself is almost so old news because there's even more, I'll get to it, further that it's almost like this conversation even about oversight should have been, it's like, it's from like five years ago, like we're so behind we can barely catch up. I and I would have to look to Councilor Bergman if he remembers, we discuss this. We don't remember, I can't ballpark it but I certainly think it's a reasonable question. It's just not, and it's a great question. It's just not one that I have at the top of my mind at the moment but I'm happy to go back, look through my notes and sort of figure it out and give a ballpark. So I apologize for not having it up but it's a good question and I appreciate it. And I like really want to, I want to ballpark but I don't think it's a good idea. Okay, thank you so much Councilor Freeman. Councilor Shannon, you still have the floor. Thank you, President Powell. I think Councilor Freeman's answer was, I don't know and it doesn't sound like anybody else at the table knows which I think is concerning but I'm all set, thank you. Great, thank you Councilor Shannon. Does not appear that there is anyone remaining in the queue to speak. We are, we are, we have a motion on the underlying resolution that is to waive the reading and adopt the resolution. Seeing no other Councilors in the queue, we will go to a vote and as there are two participating by Zoom, we will go to a roll call vote. Lori, if you could call the roll for us and remember a yes vote is to adopt the resolution, a no vote is against the resolution. Councilor Barlow. Yes. Councilor Bergman. No. Councilor Brant. Yes. Councilor Carpenter. Yes. Councilor Jang. No. Councilor Hightower. No. No. Councilor Shannon. Yes. Councilor Travers. Yes. City Councilor President Paul. Yes. Ayes. Five nays. The motion passes six to five. That brings us to the end of our agenda. I'll ask for a motion to adjourn from Councilor Jang, seconded by Councilor Bergman. All those in favor of the motion to adjourn, please say aye. Aye. Any opposed? We are adjourned at 10.42 and we will see you at our next meeting which is on February 21st. Have a good evening.


Welcome everyone for the afternoon session which will start with a demo and will be followed by a lab So we have for this demo SQL injection What Nikhil is going to show you is one vulnerable application. He has already installed it and he's going to attack it So he's going to describe this application and describe to some extent what is expected of you in the lab Also, don't forget that this lab involves via shark where you will look at The transfer of information between a client and a server Which has been encrypted using SSL the handshake as well as a record layer protocol. So With that I let Nikhil start his demo on SQL injection Good afternoon everyone Today I will give a quick overview of SQL injection and then I will show you the demo of SQL injection So what is an SQL injection? SQL injection is a type of software vulnerability oftenly found in web application It occurs when a web application uses the input user input to retrieve some data or information from the database and without Sanitizing the user input properly It means that the user input is placed as it is in the SQL query before that query is submitted to the database So therefore the user may enter some malicious SQL statements that will be placed in the SQL query And then the SQL query will be executed on the server side a successful SQL injection exploit can read sensitive data from the database such as user name or password modify the database such as creating or deleting the entry from the database or Drop the database table entirely and many more So I will now show you the demo of SQL injection For this I am going to use one application known as dvw a damn vulnerable web application So this is a web application Damn vulnerable web application. This web application is Deliberately made vulnerable to different types of attacks such as accesses attack SQL injection attacks CSRF attacks, etc So that the beginners can learn and understand these attacks So we'll now log in into this dvw application user name is admin and password is password by default So on the home page you can see that there are different types of attacks on the left side of the window Here you can see there is CSRF attack. There is SQL injection attack. There is accesses reflected accesses stored attacks This web application provides three different types of security levels low medium and high In the security level low it is very easy to hack into it in the security level medium It is somewhat difficult and when the security level is set to high it is very difficult to break So initially we are we are going to set the security level to low Just select the security level low and submit so here you can see security level is set to low Is everyone able to see that? Now we will go to the SQL injection part over here Now here you can see that This application suppose this application is asking for the secret idea of the user It means that the when the user enters a secret ID some information will be displayed related to that user Here this ID secret ID is very confidential to the user It means that one user doesn't know the secret idea of another user. It is very confidential Only one user knows the secret idea of his phone. There is a database stored on the server side Yeah, oh, sorry. Yeah, and there you can edit the schema like you can edit the name of number of columns name of the columns and entries in it Now suppose my secret ID is four to three four and Enter so here you can see that it is displaying the secret ID First name Nick Hill master name and credit card number. This is my credit card number Okay, so what's happening is there is a database already stored on the server This application takes the secret ID from the user such as that ID in the database and displays all the records Corresponding to that idea. So we will have a look at the source code of the server So here you can see You can see the source code by clicking on on this view source button So this is the source code of the server here the user input is assigned to this variable ID and then this variable ID is Placed directly into the SQL query This is the SQL query select first name last name credit card number from table users where condition user ID is equal to This ID and this ID is placed between single codes I'll write this query on a page credit of select first name last name credit card number from table name users Where user ID is equal to This ID between in between double single codes. So when I enter my input as 4 2 3 4 This is placed over here. That is the user ID is now 4 2 3 4 and this is searched against the record in the database and when it finds the match it will it shows the It shows all the record it shows all the entries corresponding to this ID Now this is what I have shown you how this Application osmosis it asks for secret ID and displays the information now suppose I am an attacker and I want to look at the credit card number of another user So how can I start with I can enter some random secret? Yes, I was one two three four Nothing is shown over here suppose. I enter two three eight nine Again, there is nothing shown over here. So because it is not showing any information because there is no record stored in the Database corresponding to this ID So we cannot continue with this method because it may not it may not give us the result that we want So for this purpose, I am going to do SQL injection over here Now when you have to whenever you have to check whether an application is vulnerable to SQL injection or not You should start by entering a single code in the input field So suppose I enter over here one and then code So let's see what happens now Now it is saying something You have an error in SQL syntax error So it is it is saying that there is a SQL syntax error at this line number At line one in my SQL server Why this is giving an error because the on the server side that database has received an input and it has thrown and thrown an Error and that error is shown to the user So why this is why this is why this has shown thrown an error. So now the input was one quote Therefore the user ID was quote one quote and then quote and Obviously, this is a wrong syntax and therefore it had given a syntax error So now if a web application Shows such kind of error to the user then it may be possible that it is vulnerable to SQL injection attack Also this error Shows information some information about the server like what database is being used on the server side here My SQL server is been is used now once we have this Information about the database that is used on the server and how the query is processed What will happen if the input is one or one quote One quote The input is one quote then our condition then quote one quote equal to quote one So What will happen when? This is given as an input then the user ID will be user ID will look like Here there are two quotes already Here this is the input one quote or quote one quote equal to quote one So, what do you think what should be the output? Is there anything is there any syntax error or something else? So, what do you think what will happen? Yeah, right because now the user ID Has this or or conjunction where the first part may or may not be true, but the second part is always going to be true So, let's try and put this attack vector in the web application So, this is one quote or quote one quote equal to quote one And let's see what it's trying As you can see it is showing all the records that are stored in the database the secret ID The first name last name deepfuck swell. It's his credit card number Again another user Naman Jain his credit card number. So why this has happened because Because the SQL query was select first name last name credit card number from users where user ID was this Here as I said the second part is always true Therefore when this user ID is matched against the records in the database It is going to be true for all the records and therefore it displays all the records that are stored in the database Similarly, we can have another attack vector that will again display all the records that are stored in the database like one or One equal to one semi column and then hash So The SQL queries Select first name last name credit card number from users Where user underscore ID is so now the input is one quote or one equal to one semi column hash Therefore the user ID will become One quote then one one quote or one equal to one semi column hash and then quote So is there any syntax error again over here the user ID is quote one quote or one equal to one semi column then hash and Then single code Is there any error or it will this attack vector will work? three quotes there because of this one Yeah, that's fine. Here the semi colon over here will End the SQL query and the hash part will comment out whatever is going to be after it So the final query will be something select first name last name credit card number from users where user ID is user ID equal to quote one quote or one equal to one semi colon and And again, this is going to be true for all the records in there and therefore it will show all those So, let's see And again, it shows all the records that are showed in the database as you can see It shows it shows all the records that are showed in it. We'll try it one second one or one quote or One equal to one semi colon and then hash and then submit So again, it shows all the records that are stored So this was all the security level me Security level low. Now we'll change the security level to medium and try to again Get all the records or do some similar kind of attack security level medium Back to the SQL injection now Before proceeding at anyone has any doubts Should I explain this code? This is a PHP code. I have not used I have not created this. This is the source code stored on the server This is the source code of the server This is the source code of the web application I'm just an user of this web application Is there any way that if I have built one SQL scanner and is there any way that I have to if I have to check that whether that scanner is Working properly if it is whether it is defending again all kind of SQL attacks or not Then is there any way or application available? Are you asking about tools or tool? Yes. Yes. Yeah, there are tools actually. We are going to talk about it tomorrow So you can find what are the vulnerabilities that are there now? We'll move to the security level to medium Submit Again SQL injection now we will try The same attack that we used in the previous case and let's see whether it works or not. So the attack factor was one quote Or quote one quote Equal to port one. Okay. Let's see what it gives now Now it is showing an error Again, it is saying there is an SQL syntax error in my SQL server For this one. So this was our input actually quote or one quote one. So I'll write it down on the paper the input was one quote or quote one quote equal to quote one and It is showing this error error at this point So what is that error is? Yeah, they're actually escaping those special characters. So this is the error if you see that The server has appended a backslash Before every quote that has entered in the input So that it means that the server is using some kind of protection mechanism protection to prevent this SQL injection So is there it means that now we can't enter this special characters one quote or you we can't enter this kind of attack Can you think of an attack vector that will bypass this security mechanism? We have given you a small exercise on this SQL injection on how to find out the Column name number of columns even bypassing this security mechanism mechanism and Think of the attack data and do it in the live session So what is the info Okay, one slash then quote Assummented again Okay, fine. Okay, so you meant to say that one before the quote there is a slash or Slash slash quote one Again slash equal equal to yeah, I submit it So again it is throwing another At the same point Can you tell me the attack vector input Enclose the single quote into the double quote Into a pair of double quotes Okay, put a single quote in the pair of double quotes You can try as this many attack vectors as you want in the lab session and if you need an again, there is an error because It tries to escape that double quotes also So you can try such attack vectors in the lab session and if you need any help then any of the TS will help you Code is different because there is some defense mechanism that is been so The change in the code is this one my SQL real escape string This function is applied to the user input So what what it does is it happens backslash before every special character that is occurring in the That we finished the presentations I think we can head to the labs and try it all these attack vectors and the rest of the assignments


Well, the last time we had on John J. Philippelli, he's the president of production and programming. He pretty much shut down that Don and Peter should be in the booth for a Yankee Spring Training Game. Anthony, do you have the money quote from Flip from that day? Let me think about it. No. All right. So there it was. No. Now, I've been talking with Flip a lot since that day. People on social media have clamored for Don and Peter to be given a chance. And Mr. Philippelli, his friends call him Flip, is nice enough to come back on the show and maybe just maybe reconsider. Flip, how are you doing today? Michael, I'm doing really well. It's hard not to really do well. Like tonight we have the Yankees at 6.30, Ruko and Conan will be calling that game. Tomorrow we have the net coverage starts at 7.30, we're playing Celtics. We have a new app at AppOut. It's awesome. I'm just watching it. The video quality is tremendous. Once you authenticate, you get everything that the Yes Network has. You have to watch games, pre-games, post-games, wherever you are, you get everything and it's the video quality is amazing. So I'm having a really, really good day and I'm coming on to have a conversation with you, Peter, and I hope Don because the last time was very difficult. And I liked Don personally but he traumatized me to the point where I had lawyers calling me want to represent me and it was unbelievable the outpouring from the public in my defense for just kind of being the guy that I am coming on and wanting to engage with you guys and have a dialogue about doing a game and it was very difficult but I'm past that now. I'm past what happened. I'm in a good mood. Well, you've got to be charitable in life and I'm trying to be charitable and I like Don personally. I just, the red just was a little difficult but I put that aside and I'm here and I'm here to discuss the game. I like rational flip. So do I. Where is rational? Is rational here anywhere? As long as rational is here, we're good, I'm good.  No, again. So tell me what you're thinking right now. I went from that to like, I'm on the fence. So I mean, but I could be had like you didn't have me as a lot of people, I mean, I might be had but you've got something you've got to say to me though, a sweetness to the point where just assuaged me that this is the right decision on my part if I go forward with this. Okay. Okay. So let me be Mariano here. Let me. We've known each other. I don't know why we trust you to take the ball right now. Why don't you just pipe down and let me try to close this deal. Okay, Peter. All right. Because you didn't really see. How about flip? I know that the Make-A-Wish Foundation is a dear important part of your family and you are on the board of directors in the town that you live and you and your wife, Jenna, do great work and raise a lot of money over the years. How about if we put a charitable element that somehow, some way, all of us here at 9870 ESPN and the ESPN has that we raise some money for the charity of your choice, which I'm sure would be Make-A-Wish, if you could get Don and Peter in the booth. You know, it's hard to say no to that. I can't say no to that because that's already so awesome and they do such a great job and it is dear and dear to my heart and my Jenna's heart, so yeah, yeah, okay. I'm relenting. I'm going to relent now. You're really going to put them on the air? Well, I mean, I'm not putting them on the air without you in there.  Oh, I'd be glad to do it. Don goes into a rant. I don't know what's going to happen. We make you lose our license. I mean, I can't have that happen, so Michael, you've got to make sure that Don has to wish to get Don. Also, I'm not for nothing, but we do have a facial hair policy, you know, and you might you have to shave. I mean, we like people. This year and had a nice gorgeous goatee, so that's not how you know what he had one that past tense.  So anyway, we could discuss that in another time, but maybe there's a negotiation there. We'll see. We'll see where that goes. But yeah, all right. So, all right. So how about this? I mean, I'll give you an ending. And you know what? Hey, Flip. Yeah. I want to. Yeah, I don't want to. An ending feels. Yeah, you get warmed up. It takes an ending to get warmed up. Right. You have to get warmed up. He's an ending. All right. You know, not because Don asked. I mean, almost despite the fact that Don asked, I'm going to say, okay, to the two innings. All right. Wow. Now, guys, don't. Well, what if... Don't press your luck here. What if we can get something where the more the money goes up for Make-A-Wish? Right. Yeah. That maybe a third ending is possible if we can generate enough money. If while we're doing the broadcast, we're talking up Make-A-Wish and the money keeps rolling in, you keep us longer. Well, there'll come a point where I have to cap this. Listen, I am in no position. I know you really aren't, Don, but go ahead. Talk to me. No, more than three would be excessive. Yes. Yes. But we have had nine in a booth. That's my... Two is very generous and I appreciate it from the bottom of my heart. This is something that I really respect and really would look forward and love to do. Two is an absolute charitable gift from you. But if I can get more money for Make-A-Wish to get a third... I think that... Don, it makes sense. But wait a minute. We're up against something too. The game that we're probably going to do is going to be an afternoon game during the week. So we've got to get off from our innings so we can start the show. That might be interesting. That might prove to be interesting. We can do it. We can do it. Maybe we can put something in there where people can actually pay money to Make-A-Wish to get us off of here. That's also a good idea. You know what? Flip might open his chair. I would, actually. I might have to do that. Wow. All right. So let's go with this. Let's go for now. Let's go for two. And I'm open possibly to the third depending on how the first two go. All right. So there's an option. It's my option for a third depending on how this is going. And depending, you know, if Hal is calling me or Randy is calling me, he'll have me executed depending on how this goes. But I'm going to go. Let's go with the two and we'll take it from there. How's that? It's unbelievable. In all seriousness, Flip, this is really an honor. Thank you so much. I'm happy to do this. I want you guys, I want, if that's a dream of yours, everybody should have their dreams come true. Wow. Because of that, all your dreams, Michael, I know Michael has had all his dreams come true. And I know Peter has had both of his dreams come true, Don, I don't know about you. But this may help. This may help put you where you want to be in terms of dreams. And if you're nervous, Flip, you know a lot of people call the New York Jets, call the New York Rangers. Yeah. You've got references.  He can do that with you. He has nobody to call for Peter. This is a huge, huge risk. But I think, I really think Flip's more concerned about me. Yeah, me too. You know, I just, if Peter could make the transition from the genre that he was in to this genre and do it successfully, I'm okay with Peter. I wasn't always okay with Peter, but now Peter and I are like really tight and we're closer. You know, we go out a lot together. We do things together. We have a good relationship. Wow. Michael, you and I are like brothers. And you know, and Don and I were close until the rant, but you know, I'm over that now and I hope that we can rekindle the relationship now. Don, I think there was, we were frayed way before the rant because I think clearly you only have room in your heart for one of us. And the closer you've gotten to Peter, the more distant you've become with me. No. But we could change that, Don.  I'm open to that. But standing, we, we, we can zoom a burger together, you know, we can get one zoom and have a. Oh, flip. Can I, can I be your lieutenant here for one minute? You could back me up. Now, Don and Peter, these broadcasts are platinum to us. I mean, the Yankee games on yes are very important to a lot of people.  You've got to prepare for this game. I see that you're being disrespectful. Now, flip, if you don't mind, I might rant on Michael. I will. I would rant on Michael because please, I would appreciate that. But the reality is I know you guys will be prepared. Thank you. You should realize this is a big opportunity for you. Not only are you on the yes network, but you'll be on our app, which has got great video quality. I've heard about this app. I'm hearing it's tremendous. It's everything on the network, everything you never want from yes. You can get in that app. So please go if you don't go out and download it, put it where you get to get it, where you get your podcasts and get all your apps and all those things, wherever you get those things, go get it. Because it's awesome. We'll take care of that. You want to rant? Go ahead. Go ahead, Don. Good turn. I just can't believe that Michael would even ask that question. How disrespectful is that? That you think that I would treat the Yankees as some clown show when you saw 16 years pre and post for the Jets? This is a winning organization, Don. Backing up Kenny Albert? It's a great one. I did game one of the Stanley Cup finals. True, you did. You did. Wow. But I don't have a man avatar on my Twitter. I'm a very professional broadcaster that just has a lot of emotional issues.  That's what I was going to do. Right? That's what you taught me, Flip.  Take yes for an answer. Take yes for an answer. Any way you download the app, it's awesome. You've got to try it. You've got to go get the yes app. But have you said that? Yes. Take yes for an answer. You've got yes. We're going to do it. I can't believe that you've relented on this. I'm thrilled about it. It's going to be great. It's going to be fun. And also, by the way, all kidding aside, the app is fantastic. I mean, I downloaded it today, and it's fantastic. And when the guys do these innings, you're going to be able to watch it on the app. That may be the only time you can. I may strike it from the app. Wow. Thank you. But you know what? I'm not going to do that. You're going to be on that.  And you're going to be on the yes network. And you're going to get a chance to do a game, a couple of innings of a game. And you know what? That'll be fun. And you know what? You guys are professionals. You've been in the business a long time collectively, a lot of years now. And you know how to act. And I know you'll be prepared. And you'll have a great producer in Troy Benjamin, who's like the best.  Good luck with that. Because he just monitors everything. But he's awesome. So you're going to get great supervision. And you'll get great input. And I know you guys will be do stellar work. I have no doubt. I'm very excited about it. Well, thank you. This is very exciting. Thank you. Thank you for the app. Thank you. All right. Thank you. Did I tell you about the app? You told us about the app. Did you bring along a card? I did all that. All right, guys. Take care. Thanks for that. Don't ever change. All right. Don't ever change. All right. That was nice. I frankly, I'm flabbergasted. I can't believe it. You guys are going to be doing a thank you game. And that's very interesting piece here, Don, is understanding what happened behind the scenes. Because I talked to Flip last week. We didn't say very much about this situation. We had a nice conversation. All of a sudden, Michael started saying Flip wants to come back on. So I'm trying to understand what must have happened here. Well, maybe it was our listeners and our fans and our family because there was an outcry. All the good networks listen to what their viewers have to say. Why can't you just take what Flip taught you? Take yes for an answer.  Don't worry about how I'm sorry. We analyze things on this show. Yeah, we do analyze things. We got a flat-out no, and then Peter asked a very intelligent question. Well, when Peter bites into a nice Italian sausage, okay, does he worry about what's in it? No, he doesn't care what's made. No.  But the critic analyzes it. That's what we do. We critique everything, including ourselves. All right, let's let's let's let's let the shower over us and then we'll towel off because this is huge news.


The Ministry of Health, Wellness and Elderly Affairs informs of the availability of the influenza vaccine. The flu season generally runs from October to March, a time when there is a notable increase in the number of cases of flu-like illness. The flu is a contagious and potentially serious respiratory disease that can result in non-favorable outcomes including severe illness, hospitalization and death. For this reason, it is important for persons, especially the vulnerable, to be vaccinated against the virus causing the flu. In light of this, the Ministry of Health, Wellness and Elderly Affairs encourages all eligible persons, particularly those at higher risk, to vaccinate against the influenza virus. Flu vaccinations have many benefits including reducing the risk of flu illnesses, severe infection, hospitalization and even death. The vaccine is an important preventative tool, especially for persons living with chronic health conditions and other vulnerable populations such as pregnant women. The influenza vaccine is safe. The flu virus constantly changes. As a result, the vaccine is updated from one season to the next to protect against newer influenza virus strains. It is for this reason that it is recommended yearly. The flu vaccine is available at all wellness centers and it is free. Persons are encouraged to call or visit the nearest wellness center to access the available flu vaccine. For more information, contact the Community Healthcare Services Unit at 468-5321.


Next is Loxan Agtec Field Days guy, I'm gonna get you to introduce, but I see the tag along the essential tool for everything rural, it's a big claim, but I'll let you explain it. A big claim for a big company, so onsite is a digital check-in solution that helps improve operations, communications, compliance and biosecurity for farms and people visiting farms. So we work across all rural sectors, we have over 36,000 users across 3,500 rural businesses, we're out in New Zealand so I just moved here four months ago to grow our presence in Australia, already the uptake's been really good. Our biggest sectors are orchards and vineyards, but we come from the dairy sector, so really the need for onsite came from our CEO and co-founder Ryan Higgs who worked for CINLE, which is one of New Zealand's largest dairy farming operations, and they struggled to know who was where in real time, what jobs they were doing, how to communicate health and safety information, particularly temporary stuff that would pop up overnight, and that's a requirement under legislation so they couldn't find a visitor management on the market at the time that solved this problem, so that's where it was created. So really started with check-in and health and safety management, but it's grown from co-development with the industries to be the essential tool for everything rural, so including task management, biosecurity, and that's our ultimate vision is to create a global rural network to provide next generation biosecurity. So how is the system implemented, how does it work in that respect? It's an app on your phone, at the core of it, so we're at first and super simple. We know it needs to be ridiculously simple to actually get used in the field. You can have the best backend in the world if it's not used in the front end then you're not really collecting data and it's not useful. So yeah, anyone can download the app on their phone, free to download. I've mapped out the Lockston site so you can check in, play around, look at the risks and stuff, and you can also use QR codes, kiosks, web check-in, you name it. We've thought of all the different ways how we can allow people to still use the system no matter what their level of tech ability or whether they have a phone that can run it etc. So there's a level of scalability there as well. 100% yeah, we started from individual dairy farms, now our biggest customer manages over 200 orchards. So it scales with your business. There's a free version that can help with things like sustainable accreditation, so compliance is getting heavier and heavier these days. So like the sustainable wine growing accreditation, it requires you to do things like map your property, traceability biosecurity, OH&S management, and so all of these things you can do through OnSide, a lot of them through the free version. And then the subscription is $100 a site a month and that will allow you to do your OH&S and job tracking and things like that. Excellent, thank you so much.


Hi guys, we here at 420 grams are thinking of trying something new come India's game versus Syria in the hero intercontinental cup 16th of this month at 8 p.m We're basically planning to do alternative commentary of the game while the game is on live So you get pictures from in fantastic high definition. See you don't get castor Watch it on mute. Listen to us instead talking about all the action from social media Of course what's happening on the pitch the back stories as well as honest analysis of the game Honest analysis being the key. So where do you have to be news clicks YouTube page on the 16th of this month at 8 p.m Do tune in then and if you do we'll keep doing it again. Oh, yeah


I'm Jan Rodgers. I think from 1990 up to about eight years ago I was sectioned over 30 times like I struggled with voices seeing people. I volunteered at Pond Haveryn for just over 12 years. It's given me a purpose in life I think. I've started living again. Pond Haveryn has been set up 20 odd years ago now as a mental health charity. Jan has always been a volunteer, a volunteer support worker. She is part of the Rotary Club. She is an advisor now to the Board of Trustees. She gets mental health and she makes a difference to so many people. From here I got into talking to David Powes place and going along with their training with mental health awareness. I got involved with PAVO which led on to being part of an expert reference group which reviewed the mental health code of practice of England. That was amazing. It was from there that I was honoured in the Queen's Birthday's Honours list and I received an MBA in 2016. Like this award I feel very humble for receiving and I think I accept them on behalf of all the volunteers. Mae Janet yn hefydianol iawn mae'n neud gwaith anhygoel i'r sefydliad. Mae'n neud lot hef o'r gerdyddau, dydiadau a gorau. Mae yma am oriau a dystyn prys am oriau mae Janet wedi mewn i gael hyn.