Okay, how's everybody doing? Boy, this conference would be more fun if more people came, right? A couple notes. How many first time attendees do we have here? That's awesome. That's awesome. This is DEF CON. This is not like a conference that you've usually been to. There are shenanigans and shenanigans happen. Shenanigans may be encouraged in some instances. Some of those shenanigans may involve your badge. You never know. I have seen people wandering around with paper badges. That means if you have one of these fancy badges, they're probably going to be in high demand, right? Now, one challenge that we had with the badge, as you've probably already figured out, is how in the world do I wear this thing around my neck? Let me release a zero day vulnerability in the badge. If you are clipping this with the little clip, that is a bad idea.  So if you've got the paper around there, that's dumb. Harden your badge while you're sitting here, poke the lanyard through the hole, find some paracord, something like that. The other thing is, yes, it's big. It may not be fun to wear, but you need to be wearing your badge at all times. Otherwise, you're going to be getting some feedback from the sock goons. And as you might be able to tell based on the situations in the hallway, they might be a little bit grumpy. All right? So wear your badge at all times, secure your badge, and we'll be good. I do want to thank you guys for being so cooperative in moving around and getting plenty of people in. We've got a lot of great, great talks today. And this is the point where we're going to transition from talking about things that are broken, that we already know are broken, like our trust of the government and our regulatory system. And we're going to start moving into where we're going to start breaking stuff. And that's awesome. How do you feel like breaking stuff? And we're going to start breaking some really expensive stuff too. Not that. That's expensive. We're not going to break that. We're going to break other things. So you probably have read about this talk in the press, just like many talks that are in this track. Sammy's been doing some really, really interesting stuff. And I think we're all really excited to see some of this research in person.  Awesome. Everyone hear me okay? Okay. Oh man, I'm so excited. It's been years since I've been at DEF CON. It was five years ago.  So we're going to talk about cars. And I'm super excited about this. My name is Sammy Kamkar. I am a security researcher. That's pretty much what I look like when I wake up. And I pretty much spend my time doing research. I mean, there's so many really cool areas of devices. I mean all sorts of security from network to physical. I've worked on a couple of different projects. These are some of the fun ones. I'll actually be doing a quick talk tomorrow if you have kids. It's kids only. I'll be showing a combo breaker which is a 3D printed Arduino based combo breaker. You can break any combination lock in like 30 seconds. So we're going to talk about car hacking. Specifically, I'm interested in a lot of the like radio and some portions of the connected computers that we have within our devices, within our cars. I think we first need to talk about the awesome work from some other people. Who's heard about Charlie Miller and Chris Valsak? If you haven't heard about them, I feel bad for you son. Or daughter. Or daughter. But Charlie Miller and Chris Valsak have actually, their work probably in the last few years has gotten me into this. Just seeing them like make Andy Greenberg go scared over and over again. And there's so much other really interesting research in cars.  There's some cool research in 2010 from UCSD in University of Washington where they're seeing what else they can do to a car from the CD player, from Bluetooth, from any other wireless communication. Recently there's been talk about amplification attacks which is super interesting. It's basically saying a lot of our cars, we have these keys that we can put in our pocket. And we can go up to our car and we can hit a button on the car. And that will unlock the vehicle as long as the key fob is near us. So what's cool about this is that the car sends a radio signal to your key fob. It's a passive key list entry system. And your key fob will see that signal and respond. Essentially a challenge response. When it sees that, it responds with a proper code and the car will unlock. As you get in the car, a couple of the receivers inside the car are then send a signal when you hit the start button. So when you hit start engine, it will actually send a signal to your key fob. And your key fob is actually responding. That's really cool. So what people have devised, and there's a paper on this, where they've actually been able to relay that communication hundreds of meters away. Either wirelessly or wired. And you can basically take a wireless device, go up to the vehicle, have a friend with another wireless device near the car key. So someone in their house, someone in a park. Some of you at DEFCON, sorry. And can actually hit the start button and that will trigger the system will send a signal to your key. The key will see it because it's been amplified by this device, a radio device that's actually transmitting much further. The key responds. And normally the RSSI or the signal within the car is actually, the receivers within the car are looking at the signal, the RSSI, to see how strong that signal is. And if it's strong enough that it's inside the car, the car turns on. The key is not in the car. The amplifier is. It's near the car. So that amplifies the signal, it re-amplifies it and now the car turns on. So this is existing research. People are getting their cars jacked like this. I'm also excited about the Tesla talk later today. That's pretty cool. There's been cryptographic attacks on key lock. So key lock is a rolling code system. We'll talk about that later. It's been cracked over and over again in some pretty cool ways. Specifically on the crypto side. A lot of cars have RFID immobilizers as well. So some keys will actually have a passive RFID device inside so that when you put your key in the ignition, in turn, it's actually sending low frequency to 125, 134 kilohertz signal to your key. The passive RFID key fob actually responds. So it has to be within a few inches. You might be able to do some amplification attacks. There's some pretty cool attacks using Proxmark 3 penetration testing toolkit. That's pretty awesome. If you're just interested in RFID, I suggest get a Proxmark 3. You can do so much crazy stuff. There's some cool talks. There's a BLE key that's coming out this at DEF CON. That's pretty exciting. Also some cool work from Open Garage. I am the cavalry and some other people. So definitely check all of that out if you're interested in car research. I also wanted to thank the EFF. I've supported them for a long time and a few months ago I reached out and said, hey, like, I don't want to get sued.  So I want to prevent that from happening again. So I'm not releasing worms anymore. Not under my name. And I did use this image without asking. I hope that's okay, EFF. Please don't sue me. So let's start talking about car hacking. We all want to be more like Nicholas Cage. So the first thing to get to a car, at least from what I learned and gone in 60 seconds, is that you obviously need to locate the car, you need to find it and get into it. Now I know there's some pretty sweet cars behind this garage. So how are we going to get behind this garage? So we're going to first take a look at garage doors. Who has a garage door with a clicker? Everyone? Okay, hold on. Got it. So we're going to talk about some basic RF research. So the first thing you want to do, I'm going to walk you through from start to finish. I have like a garage door opener right here. If you have a garage door opener, if you have any device, even if you pull your phone out right now, you'll see on the back, it will say FCC ID and an ID number. I want to learn what this garage door is sending. What is this clicker actually sending to my garage that makes it open? And how can we open it? So if you take your clicker or your phone, you'll actually see an FCC ID on the back. We can actually take that FCC ID and the FCC puts up, publishes all the data about that device online. So if you have the device in your hand, you won't always have it in your hand, but you can actually take that FCC ID and we can go to a website called FCC.io which makes it really, the FCC website is awful. But if you use FCC.io from Dominic Spill, you can actually just go to FCC.io slash whatever the FCC ID is and it'll pull up the FCC page so you can actually access everything from the FCC on that. So if we do that, there's a couple cool things we see here. The first thing is we have the frequency. So we can actually see the frequency that this is sending on. If you had a device and you didn't have an FCC ID, you could use a frequency scanner. We'll talk about a frequency scanner a bit. But from here, we see that this is 390 megahertz for example. So FCC also has some other stuff. It has like internal photos is always really interesting because they'll actually open it up and a small percentage of the time if you're lucky, you can actually see the chips that they're using. You can actually see the name of the chip set that's being used. At that point, without even having the device in your hand, you can then go find the data sheet of that device, learn all about it. Another thing that happens is there's a test report. So the FCC tests every device that they authorize. And what's awesome about that is that they're actually putting information about the signal, the frequency, the modulation. A lot of it you can even see from the way that their test report looks because they're actually showing a spectrograph of the waveform that the device is creating. So here it looks like some amplitude modulation or amplitude shift keying. We'll get into that in a second. So I want to tell you about the actual hardware that I use to do a lot of this development and research. The Hacker F1 has been pretty invaluable to me. This is by Michael Osman. It's an incredible device for software-defined radio or SDR. It's a little over $300, extremely powerful. I mean some of the comparable stuff out there is $1,000 and up. It can receive and transmit between 1 and 6, 1 megahertz and 6 gigahertz. You can get raw IQ samples. You can record, demodulate, use all sorts of really cool software. If you know nothing about SDR, like I didn't know anything about SDR earlier this year, you can just be cool and use Hacker F Transfer, a console app, and just record and replay signals. So like half the garage is out there. You can just type that. Hacker F Transfer, the frequency, which we saw on the FCC, and then save it to a file. And then later when you want to open that garage, you can then replay it. That's it. You don't need to know anything. You don't need to know about the modulation. You don't need to know about any of that. It's like copy and paste. It's amazing. Another tool I use is RTL SDR, which is another software-defined radio. Specifically it was meant as a TV tuner card, but the chip set inside someone discovered a few years ago can actually be used as a software-defined radio. So you can actually see all sorts of cool stuff on the spectrum. This is a much, you get a much smaller range. You get like 24 to 1.7 gigahertz. You can get up to about 2.2 gigahertz if you have, there's an E4000 version. It only receives, so you won't be able to trans-over this with this. It also has a much smaller sample rate. Then another piece of software that a lot of people use is GNU Radio, which I haven't used because I don't understand all these boxes. You need to draw a lot of boxes to do stuff, and I just don't understand that. But most people use it. So I'm going to have to learn that soon. Another tool I've been using is GQRX. This is a free tool. It's for Linux. It's for OSX. It looks pretty. I like pretty applications. It makes it very easy to see signals. Actually, I mean, we can, we'll test that in a second. It's only for Linux and OSX. So if you're on Windows, oh man, I don't know if this happened to anyone trying to install, something happened. Looks like nothing has actually happened. If you're on Windows, you can actually use something called SDR-Sharp. SDR-Sharp also sort of kind of works on OSX. I tried to compile it with Mono, but it kind of looked awful at that point. I think it was Mono's fault. Another tool I use, RTL FM. So RTL FM is a console app that can use like RTL SDR and demodulate a signal. I'll talk about modulation in a second. So these are all the tools I'm using. The cost of the tools, I told you like HackRF, a little over $300, RTL SDR, about $20. That's, that's it. I'm using one or two other tools that I'll talk about in a, in a bit. But this is very inexpensive. And my, my research is always focused on making this stuff super inexpensive. I want everyone to be able to access this stuff. So that's why I believe everything is open source, fully documenting everything. And I hope more of you will, will get into this research because there's so much to be done. There's so many things that are just ponable and they need to be phoned.  So let's get back to this. Let's check out the, the FCC document for a garage door opener, right? So this says ask, modulation type. Ask is amplitude shift keying. It's a way of actually sending digital data. So what that looks like is here we have a signal. At the top we have our actual binary signal. So 0, 0, 1, 1, 0, 0, 0, 1, 0. An amplitude shift key signal would look like the ASK or ask version there in green.  When you don't, you send nothing. Frequency shift keying actually changes the frequency. Now amplitude shift keying is just like AM radio. So AM radio is amplitude modulation. So when you listen to AM radio in your car, you're actually, it's actually doing amplitude modulation where the amplitude of the signal is changing based off the frequency of the sound that is trying to send. Where frequency FM or FM radio is actually doing what FSK is doing. FSK is just for digital data and ask is for digital data. There's PSK and a couple other modulation schemes. This is what it looks like. If you're taking a device that you have no idea what it looks like and half the time, you know, I'm looking at signals that I don't know where they're coming from. I don't know what they are. You want to be able to figure out what they look like. So here's an example of two FSK. Two simply means that the frequency shifting is between two different frequencies. You can have like four FSK and other variations. So what you'll see in something like GQRX or a waterfall view is you'll see two separate signals kind of like going back and forth.  That's why it's called on off king. Actually I'm going to like alt tab. Maybe we can just open GQRX. Let's see if that works. Can I move over? Sweet. So I have a remote here. Is there a spike? Okay, sweet. That's a remote. So that's amplitude shift king. We can see exactly what that looks like. And we can actually just record that. But I'll just quit. Okay. Let's go back to this. Cool. So we can do that. Now with RTLFM or GQRX, you can actually save that data. You can save it as an audio file and then look at it in audacity. It's free, free audio viewer. So actually, why don't we do that too? Should we? Yeah, okay. We'll do it live. Let's open up something here. All right. So we're going to do, I can't see that. All right. So RTL, I'll put it on your screen in a sec. We know that this is 300 megahertz. And then RTL is just a simple program that actually swaps between RTLFM and HACRFFM depending on which I have plugged in. And we'll call it stefcon.wave. So I'm now recording a signal. I'm going to hit something. I'm going to hit something. I'm going to control C. We're going to open this directory. I'm going to take that file. I'm going to put it in audacity. Defcon.wave. Cool. So here we actually have the signal. And if we zoom in, zoom, zoom, zoom. Enhance. Enhance. Dehance. Dehance. Okay. Cool. So we see, all right. You see some cool stuff here. What just happened? All right. So what you're seeing is if you look closely, zoom in a little bit more if I can. Man, I can't see that screen. I lost my mouse. Okay. I'll zoom in a little bit more here so you can see it really clearly. All right. It refuses to zoom. So what you can see here is you can see sort of long signals and short signals. Now if I open this key, I will actually see that those long signals as ones or ons in your key, who seem these remotes which have like dip switches in them? They're garage remotes, right?  And that's essentially your code. And that's on a fixed code garage. So what's happening is those long signals are one and the short ones are zero. So it's super easy to understand what's happening here. So we just recorded that live. Let's go back to this presentation. So that's essentially what we see here. We see that those dip switches within the remote control are exactly correlating to what we have here. Now this is after doing amplitude shifting demodulation from RTL FM. It does it for you. You just say I want to record at 300 megahertz and demodulate as ask. And that's what we get. So let's think about this for a moment. A lot of us have garages. Most garages will have like 10 or 12 bit dip switches. So if we think about that, we will see that that means there's two to the 12 possible combinations, which is not a lot. Let's calculate that real quick. Two to the 12, 4,000 possible combinations for garages. So that's on a 12 bit garage. 4,000 combinations. If you have a two letter password for a website with just alpha numeric and a couple of keys on top, that will be more secure than your 12 bit garage code. So let's see how we can crack that. Now we don't even know if you have a 12 bit or an 11 bit or a 10 bit, 9 bit, 8 bit garage code. So let's say we just want to brute force the whole key space. If we do that, each signal or each bit of a signal is two milliseconds plus another two millisecond delay from what I saw in Audacity. And every time I hit the button, it actually transmits five times. So if we do that for every type of garage or every type of dip switch, then it will take about 30 minutes to open a fixed code garage. This is not applied to rolling code garages. Newer garages like IntelliCode, Genie, a couple others actually use rolling codes. We'll talk about that later. So this will take 30 minutes to brute force. But I didn't want to like stand outside for 30 minutes and my neighbors were looking at me really weird because I live with a bunch of other units and I'm just always outside with my computer. And the garage is just like randomly opening and closing and opening and closing. So if we take a look at that signal closer, we see this. It we can actually remove instead of taking the five transmissions that we see on top, we only need to send one transmission. There's no point of sending code over and over and over. The reason that devices do that is because they're cheap transmitters, they're cheap receivers. Sometimes the signal will be hard to hear. There could be some interference. So sending it more times helps ensure that the signal will be heard. But for hacking, we just assume we'll have something good enough that transmits well and that we will get it. So instead of doing five times, we only do it one time per code. So that reduces, we divide by five, we get six minutes. Six minutes to open any fixed code garage. From there, I was chatting in the Ubertooth IRC channel and Mike Ryan suggested that I actually take away the wait times. So what happens is when you send a signal, you'll see at the top there's this, there's the signal on the top left and then a wait period before the next signal. So he suggested just removing the wait period and just send them red, green, purple, blue, just in sequence without that wait period. So that removed another 50% of the time that it would take to actually open that. That reduced down to three minutes. Also, he's doing an awesome talk on hacking electric skateboards where he just like takes over your skateboard. So I'm pretty excited about that talk with Mike Ryan and Rico. That's, I believe that's a, what is that? That's Saturday at 3 p.m. Track 2. All right, let's hear. Let me check that out. So that's, that's pretty cool. But as I was looking at the signal, there's something interesting about the signal. There's no preamble or sync word. There's nothing to delineate and tell the garage door that this is the beginning of a garage code. It's just raw data. It's like, it's like sending a packet without TCP IP header and just sending like an HTTP request without any IP header. Like it doesn't know where it's going or anything. So the garage is just blindly listening. And the question is, how does it know where one code starts and the other ends? I thought maybe it's using a bit shift register. And a bit shift register is essentially something that will take in a sequence of bits. And as the buffer fills, once you have more bits available, it only drops one bit and then pulls in the next one and then drops one bit and pulls in the next one. So what if I could do that with a garage? What if I could send, let's say, instead of 12 bits for one garage and 24 bits for two codes, what if I sent 13 bits? If it's a bit shift register, we'll have 12 bits that go in, it checks. Is that the correct code? It will say no. And then it shifts off one bit, pushes everything over one bit and then takes in the next bit, the 13th bit and tests a brand new unique 12-bit code. So there must be an efficient way to do this. And there's a guy named De Bruyne. De Bruyne? How do I pronounce his name? Who knows? De Bruyne? Okay, De Bruyne. De Bruyne was a mathematician who came up with a sequence to efficiently produce every unique combination of a number or a series of numbers so that you produce every possible overlapping code. So here we see, if I want, let's say the garage was only two bits long, then I would need to send 0, 0, 0, 1, 1, 1, 0, 8 bits to cover everything. But with De Bruyne sequence, we can actually just send 5 bits, 0, 0, 1, 1, 0, because everyone overlaps, right? The garage will first test 0, 0, then it will test 0, 1 in blue, then 1, 1 in red, then 1, 0. So if we do that with 12 bits, it takes 8 seconds. Theoretically, we know how to do it. So we actually have to implement this. So one of the things that I love using is Yardstick One. This is another device from Michael Lawson. They'll be for sale soon. In the interim, you can also use something called the CC-111-EMK. This device has something called the CC-111-1 chip set from Texas Instruments. It's basically, we'll talk about that in a bit, but it's basically a sub gigahertz radio. It can receive and transmit. And the software I use a lot for this kind of testing is called RFCat by Atlas. He's also doing a talk later today at 5 p.m. So I'm pretty excited about that. And RFCat is awesome.  Who uses the mouse anyway? With this, you can just talk to this command line, this Python command line, and do, here it says, it'll set the frequency to 433 megahertz. It'll set it as ask or on off keying, as we talked about earlier. It'll set the packet length. We don't even need to do that. And then it'll transmit hello.  The garage code, for example. We need to set our baud rate to whatever the baud rate of the garage is. And another tool I've been using is from one of the most heinous, devious companies out there. Uh, Mattel. So a couple years ago, a hacker found that the Mattel I Am Me actually has something called the Texas Instruments ChipCon 1101 Chipset. It's a sub gigahertz transceiver. It has a screen. It has a back light. It has a keyboard. It has a little buzzer. It's battery powered. And conveniently there are pins for reprogramming on the back when you open it up. It's not protected. You can entirely rewrite everything. So this is actually a picture of Michael Lawson's spectrum analyzer that he built. Um, a couple of people have done some really awesome work on this. Um, Dave, I think originally found that you could, uh, hack it and reflash it. And the amazing thing is Mattel created this. So they did batch creation of this, essentially $20 toy for kids. That's for communicating. It's for like texting your friends with this device. Uh, it's now discontinued so it's really cheap. It's like $20, $30. Uh, usually. Um, Travis Goodspeed has done a ton of work with, uh, with Goodfet. Michael Lawson has done a ton of work. This is a spectrum analyzer. Um, here's a Goodfet device by Travis Goodspeed. So I used a Goodfet for all sorts of things that do for like 2.4 gigahertz, uh, hardware hacking. It's just an, it's an open source JTAG adapter. You can use it for all sorts of stuff. So ultimately, I didn't want to have to use like the, the yardstick one in my computer to transmit cause it's just like, I already wear a enask all the time. Like I didn't want to have to sit with the laptop as well. So instead I just programmed the IME to do that 8 second, uh, attack. And that's what I call open sesame. Um, let's see if this video plays. Here's an example of it in action. By the way, how much time do I have? Cause I keep going out of my thing so it keeps resetting the clock. What time am I good till? Well, like 1.45, 1.50. What, what time am I good for? How much time? 20 minutes. Cool. I just want to know what time I am. Cool. Alright, 1.50. Sweet. So you can actually buy these IMEs. Unfortunately I released almost all of the source for open sesame. I bricked it just slightly. Something that probably everyone here could fix, but you know, just common fees and criminals wouldn't be able to. Um, unless they learn to code, which is, which is great.  Unfortunately, after I released it, the prices went up a little bit. Um, so I do have a, a brand new one that I, uh, I programmed with Michael Osman's Spectrum Analyzer. Um, so it's like a, a live Spectrum Analyzer on here. Would anyone like this? Uh, it's a $900 value. Um, cool. I'll just run out and give it to somebody here cause who wants it? Oh my God. Dammit. Someone's going to have to come up here. What? No, no, no one who ran. Sorry. Alright. Someone in the second row. Second row. Alright. Yeah. You. Do it. Alright. Here you go. Don't sell it. What's that? Um, so that has a Spectrum Analyzer on it. I use it all the time. It's like more convenient than anything else I use because it's just like, it's in your pocket. It's portable. Um, it's my favorite color. So, what do we learn from this? You know, if you're implementing a garage door system or, or similar system that's based off a simple radio, radio signals, A, don't use a small key space. Like that's just, no. Don't use fixed codes at all. Um, use like a preamble or sync word so that the, the, the De Bruyne, De Bruyne, De Bruyne attack doesn't work. Um, or use rolling codes. So, now we're in the garage, right? We've opened it up. We're able to see all these awesome cars. And let's uh, if I use my special VR headset, I can actually see all these connected cars. Um, amazing. Connected cars. So I started looking at some of these basic connections. Just the basic stuff that, uh, some of these devices have. This is a, this is a screen grab of the OnStar remote link app. So remote link is actually a really cool mobile app, uh, for Android, iOS and Windows. What it allows you to do is do things like locate your car wherever it is, um, via GPS, uh, lock, unlock, remote start, horn and lights. Definitely the most fun. Um, and also grab all sorts of PII from the user. So the owner. So you can actually see your name, your email address, your phone number, uh, your, yeah, home address, uh, some billing information. So I was taking a look at this because my friend had a, had a car that had this remote link app. Um, and I thought, okay well, it's obviously going over the network. Let's see if we can see some of that network traffic. So I got out, I think my, my iOS device and, uh, I installed a certificate authority. I wanted to do some like SSL man in the middle sniffing. Um, and I remember, yeah, I always have sort of an SSL man in the middle, uh, certificate authority on there so that I can sniff. So I started sniffing this and this is a, a login request that we see. Um, it's pretty much, it's an HTTPS post to api.gm.com and there's some base 64, uh, encoding here. Um, when we unzip, uh, when we, uh, sorry, uh, remove base 64 we see the, the username and password. Now it's not a big deal because I had like a certificate authority, this is my own phone. And then I remembered I had actually just reflashed my iOS device and I never installed that certificate authority. So I was man in the middling an SSL connection with an invalid certificate that my phone essentially behaving as a, a fresh phone didn't even know about. So there's actually no certificate handling. There was no certificate checking at all. And what that means is if I'm on, uh, let's say if I'm on your network I can then potentially ARP spoof or DNS spoof and, ah, she's texting me. Um, I can ARP spoof or DNS spoof and take over that api.gm.com connection, do an SSL man in the middle, no certificate warning, no issues, just for that host and we'll be able to see all the traffic such as username and password. Um, so we can do this pretty easily. We can, uh, you can take a, uh, what I did was I took a Raspberry Pi, I took a GSM board, a phono GSM board, um, I used Mallory which is an open source SSL man in the middle, um, toolkit, uh, I DNS spoofed api.gm.com. And the reason I only did that was instead of, uh, man in the middling old traffic is that if you open up any other, let's say you open up Safari or App Store or something like that, I don't want you, I still want it to work. I don't want a man in the middle of that because then it'll either not work or get certificate warnings. So now, if I can get you onto my Wi-Fi network, I can do this. Um, I also use IP tables and alpha, uh, you know, those alpha cards for, uh, Wi-Fi, uh, monitor mode, uh, edimax Wi-Fi dongle and a, and a SIM card that you can put into, uh, the GSM board. And the nice thing is you can get prepaid SIM cards. Like T-Mobile has a G, uh, 2G network that you can get a prepaid SIM card.  You just get prepaid everything. Uh, now one way I could potentially actually do this attack is by creating this device and then putting it under somebody's car. Um, then what I could do is create a network. So what's a network that I can probably get them to use? I thought, well, by default, I'll just use ATT Wi-Fi. Um, that's a Starbucks network. So if you've ever connected your phone to ATT Wi-Fi, you will connect to my device. Uh, as I woke up this morning, I saw, uh, ATT Wi-Fi, uh, uh, in the hotel. I also saw NSA Honeypot number 42. Which is funny because the NSA Honeypot was probably somebody's like phone and ATT Wi-Fi was probably the NSA Honeypot.  Maybe they don't, you know, maybe they've never been to Starbucks. Um, you know, maybe they're more a coffee bean person. And instead, what I've done is I now sniff for probe requests. So using the Alpha card, we can actually see probe requests from your phone. Whenever your phone is somewhere new, it will actually send out Wi-Fi probe requests to networks it's connected to in the past, saying hey, I connected here. Are you there? So I can actually see the name of a network that you've connected to in the past and on the fly generate that Wi-Fi network. So as soon as you go up to your car where I left this device underneath, then your phone, or it sends, your phone sends a probe request. My device says, oh okay, I'll make a Wi-Fi network with that name in addition to ATT Wi-Fi. Your phone jumps on. I S-cell man in the middle. I automatically acquire credentials from Remote Link if you ever open the app. And indefinitely, I then have access to your car. Um, here's the hardware I used. And again, you can see Raspberry Pi, the Edimax, the Alpha, Wi-Fi dongle, and a phone, a GSM board. And this device I call the own star. Um, tested it on my friends, uh, on my friends' volt here. It's actually a really cool car. I was pretty happy with that. Let's see if that works. Uh, oh yeah, it says like, only remote start when it is safe and legal. Uh, which is true, you should only do that. Uh, fortunately, uh, I reached out to GSM before releasing any details of this. And they were actually, while it was very difficult to get to anyone who knew anything about security or technology, I was going to like, support, like, oh man, they were just trying to tell me, no sir, no sir, your, your password is safe. Your password is safe. Trying to like, trying to escalate from support at GSM is impossible. Um, however, I finally got to a cybersecurity, uh, executive over there. And it sounds like, hey, he was, he was awesome and very easy to work with. They fixed it within days. So they did, uh, I was really happy about that. They did a great job. Um, within a day, just mentioning that this was going to be part of my talk, they had already resolved it on, on about, uh, three, three million remote link apps. So what did we learn? A, validate your certs. Like, always validate a certificate from a CA. Now, if you don't trust the Hong Kong post office, which has a certificate, a thought, which is a certificate authority by the way, um, and is trusted in most browsers, if you don't trust them, um, use your own certificate, use certificate penny. That way you're only, you will only ever use your certificate. You'll ignore, even if the CA, even if VeriSign or Thought or Hong Kong says, yeah, this certificate's legit.  Um, also hash your passwords to the random salts. I mean, you always assume that the network you're on is hostile. Because someone here is going to make that network hostile if it wasn't before. Um, it doesn't matter if you're on a mobile network, it doesn't matter if it's cellular, it doesn't matter if it's wifi.  Cool. So, sweet. Um, we did that, you know, that, that affected Chevy, Cadillac, uh, GMC, Buick. Um, but there's one other thing that I wanted to go, uh, talk briefly about, and that's key fobs. Um, which are pretty cool. Most people have a key fob, right? Raise your hand if you have one of these car key fobs that unlocks and does cool stuff with your car. Sweet. Hold on, hold on. Scanning. Scanning. Amplification. Um, so here's one that, that I took a look at. I took a look at a couple. Um, this is called the NM95HS01 or 02 from National Semiconductor, now part of TI. It's called the High Security Rolling Code Generator. And this is a signal. Now if you remember, there's, there's a lot more like bursts of data here. Um, also it's modulated a little bit differently. So with our previous garage signal, uh, we learned that one was like a long signal was one and a short was zero. Um, we'll talk about that in a sec. But what is a rolling code? Let's understand what a rolling code is. So, let's say you have, um, a car key. Essentially it has a PRNG or a pseudo random number generator inside. And the same number generator, uh, PRNG is in your car. So when you hit this button, it will send a code to that car. Now the next time you hit that button on your key, it will send the next code in the PRNG based off your initial seed. Now, as long as both the car and the key have the same seed, what will happen is the key, uh, the car will also permit or will continue down that logical progression of the seed and you'll always match up. However, if you're accidentally, if you like have the key in your pocket and you accidentally press it, you will then be out of sync with the car. So the car also has an allowance. So the car will allow something like 200 to 1000 additional codes. Um, that may seem like a lot, but fortunately most rolling code systems, uh, use such a, such a large key space that 1000 is really negligible. Um, I'm seeing typically like 40 to 60 some bits, um, for the rolling codes. So that 1000 doesn't really help us, right? It helps us like guess a little bit, but not much. We're not going to guess that code in this lifetime unless we have maybe a cryptographic attack on the rolling code. So it hits a button, sends the code, hit the button again, sends the next code. If you don't know the rolling code, you are not going to figure out what those numbers are unless you find some attack. So this prevents a replay attack. Um, a replay attack is when we can sniff and then replay the same signal. So if you recall with our fixed code garages, we could, if we sniff the signal, we can then replay it later. It's kind of irrelevant because it only takes, it takes us eight seconds to brute force every garage out there. Um, but this prevents replay attacks. Now, one thing you can do about replaying rolling codes is you can actually capture, um, a signal while the remote is out of range and use that. So if I broke into your home, pressed your remote control and recorded that, I can then go to your car and unlock it for example. This is super lame because we actually need physical access to the, to the device. And also, um, as soon as the key is pressed again, let's say the owner of the car goes to the car and locks or unlocks, that will actually invalidate all previous codes. So what if there was another way that we could get that code, get that code from, uh, the user? And I found that, and this has been basically known in talk about for years and years and years and years. And I've never seen actually demonstrated, I've never seen any code or, uh, examples of, uh, legitimate examples of this. What if we jam the signal? Right? What if I'm at your car and I'm jamming that, let's say it's 350 megahertz and I'm jamming that signal. So when the user goes to their car and they hit unlock, the signal sends, my jamming device is sending a signal as well and the car won't hear it because now it's seeing so much data. Simultaneously, what I can do is I found that most, uh, when I say most, I mean every vehicle I've tested, um, all, all will just say virtually all vehicles have essentially a receive window of a frequency that they're looking at. So if your key is 315 megahertz and your car is listening on 315 megahertz, technically it's actually listening probably between 314.5 and 315.5. So this is a receive window of about a 1 megahertz. Um, half, you know, 500 kilohertz, uh, plus or minus from the primary frequency. Um, now if I'm jamming somewhere in that frequency range, your car won't be able to listen to what I'm, uh, listen to the key. So I jam that signal and you hit the car, you hit the key and then I have a receiver as well. And my receiver has a nice, has a good chip and has a much tighter receive bandwidth. So my filter bandwidth is so much smaller that I'm evading or I'm avoiding any of the jamming signal and I see your key code, your rolling code very clearly. So I now have a rolling code that your car didn't hear and I can use that at my leisure because they're non-expiring. Now let's say I stop jamming and now I have this code and I'm happy. Well, what will happen is the user will be like, okay, well that didn't work. So they hit unlock again and it works and they drive away. My code is now invalidated. So again, it will invalidate as soon as another code, a future code has been set. All previous codes are invalidated. So instead, what if I jam twice? What do you do when your button doesn't work on your car key? You hit it again. Now I have two codes. So with two codes, we have, I now have two codes. And then I stop jamming and I replay the first one. Because we automate this, this happens in under a second. So you go to your car, you hit unlock, that didn't work. You hit unlock, the device within a second stops jamming, plays the first one, leaves me with a future code that the car has not heard. This applies to garages as well. Any garage with rolling codes. So we've now covered all of garages. So we can just jam, listen, jam, listen, replay the first code, abuse the next code later on. This is pretty incredible because it means I can go to your car later and do whatever I want to. Depending on what I say do whatever I want based off the key. Another thing I found is that this works on remote start vehicles. So keys with remote start and remote start kits. This works. One thing I found is that, so people have described this attack. Another issue I found is that let's say you want to steal stuff from their car, right? You want to go to their car and, you know, break in. Well, if they've hit lock, if the last thing they hit was lock and you, the last signal you'll have is a lock signal. So if you replay that, all you're going to do is lock the car. Well, I found most signals actually have the data field separate from the rolling code. So as long as you know the rolling code, you can change that lock signal and weaponize it into an unlocked signal and open their car. This is roll jam. This is a device, uh, I'm releasing the full source and, uh, I probably won't be putting any, any specific cars in it, implementing any cars, but this is a device that you can, it uses two CC1101 chips and a TC 3.1. Uh, one will actually do the jamming and do the replaying whenever you hit the button or you can use an actual remote to trigger it. So if you put this under a vehicle for example, um, and it will perform this full attack. Uh, I think, I think that's about it. I'm out of time. It's worked on every car I tested. Uh, it felt really good. Though the basic lessons, encrypt or hash your button. Um, use an HMAC to prevent bit flipping if encrypted. Use a time based algorithm. We've had these RSA secure ID key fobs that have been like, would have a rolling code for at least 20 years. I couldn't find how old, old they were. I was trying to look. I could not find. Now we have dual key lock, which came out this year, or I'm sorry, last year, which also solves this. This has been an, an issue that we've known about for over 20 years. It's been solved 20 years ago. It virtually every manufacturer are still implementing this off poor implementation. Um, another way is to use a challenge response. So use, uh, via a transceiver rather than just transmitting, you'll transmit, you'll say, I want to unlock. The car will say, okay, uh, here's my challenge. And then your key can receive that and respond appropriately. Um, that's the, the best way to handle this stuff. I'll be releasing this stuff shortly. Thank you so much.


Make sure to like and subscribe, smash that bell and ring that subscribe button. This one's called Space Football 101 and this game is like a love letter to video games and it's a love letter that says, I love you video games. The graphics here have a lot of colors, the music has some sounds to the point that you can hear them with your ears and the gameplay makes it so that you can play the game so it all works out. Definitely pick up this hidden gem any time you see it and since this is all the footage I could get now I'm going to fill the rest of the video with a blank screen until I reach the 10 minute mark so I can smash that YouTube algorithm.   Don't think of this video as a love letter to a love letter to your heart made of video games not just any video games but a heart made of hidden gems. Peace out y'all.


Happy Thursday trade hackers. Welcome to today's update. Today is April 16th starting with the trade hacker question of the day brought to us by our favorite member straight out of Prague. How is an options Delta calculated? So when we talk about Delta in relationship to options, it can be used a couple different ways. One of the ways we use it is to gauge our overall directional bias of our portfolio or our directional bias of a specific position. In this case, we're talking about Delta's as a probability measure. So if you pull up an option chain and we're looking at SPY, we're looking at the options with 32 days to expiration. And if you take a look at the Delta's, so you'll notice that the obviously the shaded gray that's in the money and the further in the money those options go the higher that Delta number until essentially you get close to 100 or 1 of Delta. And essentially that's the movement of that option will act just like an individual stock. So if you buy a 100 Delta call, so that'd be about the 155, then that's going to behave from a P&L standpoint pretty close to as if you bought the individual stock. And then as you get closer and closer to the current price, so the price is currently at about 278, so the at the money strike would be the 278, and you can see that's right around the 50 Delta. And so that there's about a 50% chance that this is going to expire in the money, and there's about a 50% chance it'll expire out of the money. So that's essentially how these Delta's are calculated. You look at the at the money, and that's going to be the 50 Delta, and the further you go out of the money, the lower they get, the further you go in the money, the higher they get. And so if you look at, for example, the 40 Delta, so if you were to buy a or if you were to buy or sell a 286 call, there's about a 40% chance that at expiration it's going to end up in the money, which means there's a 60% chance that it'll end up out of the money. So that's how you can use Delta. And so that's how those calculations are based. Now, if you want to get real deep into the calculations, if you go to the trade tab here, actually, what we're going to do is go to the analyze tab. And what you'll see here is there's a there's a tab here a drop down in thinkorswim and the actual option pricing model. So there are a few different ones. There's one called the something that's the default and toss that I'm not even going to try to pronounce, but it's this one here. There's the binomial and then the most popular one is the black shoals. And so this is the formula, the algorithm, the calculation of how options are priced. And that's what is kind of giving these different representations of data on the platform. But from a practical use standpoint, the way that these are calculated is simply looking at the at the money. That's the 50 Delta and then going up on in the money down on the out of the money. The other kind of a quick hack when it comes to Delta is Delta is also used to determine the expected move, right 32 days to expiration. You can see there's about a 26 and a half move to the upside 26 and a half move to the downside. That's the expected range within this option cycle. And so one quick way to look at that is if you buy an at the money straddle. So if we take the 50 Delta and we buy a straddle, obviously that's going to be the price of the calls plus the price of the puts. And so that is about 2346 and that's going to give you approximately the expected move. Now, as you can see, that's a few bucks off, but that's going to give you approximately the expected range, the at the money straddle is kind of a quick way to do that. So hopefully that helps in kind of clarifying some Delta related questions. Let's jump into the charts and check out what's happening today starting with S&Ps. S&Ps pretty flat. I mean, it's been a pretty choppy day up three points, dows down 73, NASDAQ up 90, Russell down 20. So very mixed bag. If we go to the intraday chart and just look at a five minute chart, you can see it was pretty back and forth. The movie came out of the gate. Looks like we are going to tank. If I get my chart back up, came out of the gate, looked like we were going to tank for the day and then rallied hard back above to a positive Terry, then fell off and then we've been rallying a little bit later in the day. So pretty crazy moves in the market. So decent, decent range, but ending up pretty flat oils down a couple percent. Gold pretty flat bonds down about a half percent and they've been pretty much there the whole day. Haven't moved too much. So pretty mixed bag. If we look at some of the stocks, I mean, the one that really stands out is Roku and I told you there'd be some funky stuff going on around earnings, but Roku, they just couldn't help themselves to come out and release some information. You know, it's the whole streaming war going on, Netflix, Apple Plus, Disney Plus, you've got a new one called Quibi, which is kind of 10 minute little sound bites that's coming out. And so Quibi came out and announced how many downloads they had the first week, then Disney said, well, we can't be outdone. So they came out and said we had 50 million, which is hundreds of times the amount of Quibi did. And then Roku came out and said, yeah, well, we are about 64% of devices streaming have some type of Roku, whether it's a smart TV or device or whatever.  And so you see, they're up over 12% today. They've got a couple weeks before they even announced earnings. So that's the big mover in video is also up 4%. Everything else is kind of a mixed bag. Some red, some green, definitely nothing decisive airlines getting hit Delta down 6%. So that is what's going on. What did we do today? We added a our weekly double calendar in SPX. So got some more juice going there, made a couple of adjustments. And just again, kind of a light week as far as new positions, new trades, but just letting our current positions work for us as this market bounces around. I still want to start layering in some ducks if we get to significant down move, but just would like to see that a little bit first. If we don't get it, then we'll just have to reevaluate. But that's the plan. Everybody have a good evening. Talk to you tomorrow.


Hi, thanks for joining the TechSoup webinar today. Ask the expert, and we do have some experts to be with us today. It's Amazon Web Service. My name is Aretha Simons. I'm the webinar producer here at TechSoup. This is being recorded, so you'll get the recording within 48 hours.  I wanna just show you how you can participate with us today. You already know that you're muted, right? So you're gonna use the Q&A to ask questions. You can also ask questions in the chat room. They have experts here to answer your questions here in the chat room. If you need the closed caption, please turn on the closed caption using the CC button located in your Zoom menu. Again, we will record this and you'll get the recording within 48 hours. If you hear something that you like, aha, I need to share this, go ahead and share it with us and tag us on social media. Share with all your friends because we want everybody to know this information. We're going to the cloud, so let's get ready, right? So I'm gonna move off the way and turn it over to the two experts who are here today. I'd like to introduce Jamie Gluck. He is the Global Manager for Amazon Web Services. And then Mike George, he's a Senior Solution Architect at Amazon Web Services. Mike, I'm gonna turn this over to you, take it over. All right, thank you so much, Aretha. And it's a pleasure to be here today. My name is Jamie Gluck and I am here with my colleague, Mike George. And we are both from the AWS nonprofits team. Specifically, I'm a Global Program Manager for AWS nonprofits. And today is really dedicated to connecting with you and understanding what your questions are so we can enable you and empower you to leverage AWS for mission impact. So before we get started, I just wanna set some little ground rules and talk a little bit about how you can make the best use of this webinar. So the first things first in terms of an announcement is that the links will be available in the chat. So I'm about to speak about a couple of different programs that are happening here at AWS in support of nonprofits and I'll provide you with those links in the chat. So definitely check that out. Additionally, this is your time. This is dedicated to helping you understand how AWS can support your organization. So please ask the questions. There's no such thing as a bad question. We will do our best to get to all the questions but pop those questions as they come into your head into the chat and we'll spend some time afterwards. And then last, if you want to just make sure you can see a slide a little bit better, here are some of the instructions in order to zoom in on your screen. So in terms of the agenda today, first I'll be speaking about the AWS nonprofit programs. Again, what resources and programs are available to help your organization leverage AWS permission impact. Then I'll pass the mic over to my colleague, Mike, and he'll discuss a little bit about what's currently happening with your peers in terms of the ways that they're leveraging AWS to achieve their missions. And then of course, we'll definitely save time at the end for any questions and providing answers. Again, this is your time. This should be conversational. This is an opportunity for you to learn from us, the AWS expert about the ways that you can use this technology. So jumping right into the AWS nonprofit programs, I want to spotlight four. The first one is the AWS nonprofit credit program. And this credit program works in collaboration with TechSoup to provide $1,000 in AWS promotional credits. This credit is excellent if you're just getting started on the cloud or if you're well on your way in your journey while using AWS. It's a way to lower the impact financially of your use of AWS. Additionally, we have the Imagine Grant program. And while the submissions are currently closed, they're opening in the near future. And this is a program that encourages and inspires organizations of all shapes and sizes to submit their ideas about the ways that cloud technology can help their organization succeed. And we provide credits as well as cash to a select few organizations. Additionally, definitely want to save the date and moreover even register for the upcoming in-person conference called the Imagine Nonprofit Conference. This year, it's on March 22nd and 23rd in Washington DC. And we encourage you to register not only for the in-person one if you're able to make it there, but there's also options for tuning in virtually. And then again, we pride ourselves on our ability to connect with our customers and make ourselves available to organizations no matter their question and no matter their size. So I'll put a link in the chat for a way that you can connect with someone like me or like Mike to ask your questions even beyond this webinar. So definitely have the opportunity to speak to an AWS expert directly. So with that, I'll pass the mic over to my colleague to discuss a little bit more about how nonprofits are leveraging AWS. All right. Hi everyone. So my name is Mike. I am a solutions architect with AWS working with nonprofits. And so today what we're gonna be doing is talking about how you can roadmap your journey to the cloud. And I wanna start out by first of all talking about what other nonprofits are doing in the cloud. I think this is helpful to see, again, what are others doing and that can help spur ideas for ways that you can push your organization forward by moving to the cloud. The first organization I wanna talk about is the Rock and Roll Hall of Fame. You're probably familiar with Rock Hall. They have a lot of physical and digital assets related to the history of Rock and Roll. And until recently the Rock Hall used a lot of different technologies to store its files and some of the storage mediums that they use to preserve material were outdated. They were expensive to maintain and they were prone to failure. And you think about the kind of data that the Rock Hall has. They have videos of induction ceremonies. They have B-roll. They have artists to interviews and they have live concerts from some really unique artists like Aretha Franklin, Paul McCartney, Led Zeppelin, Elton John, Prince, and many, many more. And so you've got some really valuable assets as it relates to the history of Rock and Roll. So they launched a plan in 2015 to better preserve some of these assets. And they started out small. To save these assets, they landed on using Amazon S3, which is our durable object storage in the cloud solution. And then for objects that maybe they didn't need quite so fast retrieval, they used Amazon S3 GlacierD bar archive where they could store it, still get access to it if they needed to, but it would take maybe a little bit longer, but that trade-off then was they have a much lower storage cost per object. And so that's what they landed on. They then began to, and they ended up storing some objects that are two to three terabytes in size. Once they started saving some of these objects, some of these videos that encapsulate the history of Rock music, they began to build on the success by building out a digital management platform to support the organization of these video assets. So you can see in their example, they started out small and then they built on the success that they were able to do. And since they began this process, they've been able to preserve over 2,000 different video files that equates to around 300 terabytes of video assets. Let's look at another organization, code.org. You may be familiar with code.org. And code.org operates a learning platform that allows classrooms from all over the world or basically students from K through 12 all over the world to learn about computer science concepts. And code.org runs an annual hour of code event. And they really feel like they have one chance to get it right. During their hour of code event, they oftentimes see 10 times the traffic that they see during regular, during other parts of the year. And they feel like they have this one chance to get it right because when students come to their site during the hour of code, some of those students may not wanna be there. They may not wanna learn about computer science techniques, but code.org feels like, okay, if we can get people to come in, then we can get them interested in computer science, which could literally change some of their lives. And so to make sure that they had the reliability and the scalability that they need to really get it right the first time, code.org moved their infrastructure to AWS. They found that they were able to support millions of school-aged children from hundreds of countries around the world, again, supporting 10 times the traffic that they normally see. They did this by putting their servers on Amazon EC2 and they took advantage of Amazon, I'm sorry, advantage of AWS auto-scaling so that they could adjust their capacity up or down depending on the amount of traffic they see. So during hour of code events, they scale their systems up, people access their sites as that traffic goes away, they scale back down, and they pay for only what they use. And they found that in doing this, not only were they able to support this influx of students, but they ended up saving money in the process. So that's an example of what code.org is doing. The next one I wanna talk about briefly is the Los Angeles LGBT Center. The center really wanted to build a call center and they had a couple of people on staff that had experienced building call centers and they knew it was typically a fairly complex process, a lot of upfront planning usually needed to take place. So when they wanted to build this call center, they looked at a number of solutions and ended up settling on Amazon Connect, which is our virtual call center in the cloud solution. Much to their surprise, they found that they could build a call center in literally a matter of minutes and they ended up building like fleshing out that call center and releasing it within about a week. They were surprised with how easy that was. You know, they were able to go from a simple idea to testing this out to have a fully deployed, scalable, secure solution in literally just a couple of days. So this saved them time and money and resources that they could then use in forward, pushing their mission forward. And it's important to understand that the call center that they've set up is largely the face of the center for individuals that don't come in directly. So individuals can call in and have, ask questions about upcoming appointments or things related to mental health services or really anything that the center does. The center has 50 staff members that support 30,000 clients in the clinic. One of the things that they were able to do that was pretty interesting is they ended up doing a fundraising event with KTLA, which is their local TV station. They had a live telephone and during the telephone, they were able to raise $1.3 million. As the calls came in, they were able to scale out their call center. As the telephone ended, they were able to scale in their call center. Again, paying only for what they use without any upfront costs or anything like that. And the last nonprofit I wanna talk about is Mercy Corps. And Mercy Corps has a mission of alleviating suffering, poverty and oppression by helping people build secure, productive and just communities. Mercy Corps works in over 40 countries and they have over 5,000 team members who work side by side with people who are living through poverty, disaster, violent conflict and living through the impacts of climate change. One of Mercy Corps missions was they wanted to identify the price of a food basket. And a food basket, if you're not familiar, is the basic staples that someone needs to survive. So this will include usually things like rice or flour and a number of other things. They found that as if they could predict the price of each of the items within a food basket, they would then have good indicators on when they needed to work with other NGOs to bring aid into the country. And so they actually did this in Syria. They calculated the price of a food basket through some AIML services that AWS offers. They found that they had around an 88% accuracy per food basket item. And this helped them, again, be much more responsive to the needs of the user, the needs of their community. So the needs of the people within Syria that needed aid. So that's some examples of what other nonprofits are doing with the cloud. What I wanna do now though is briefly, I just wanna pause for a second and ask where are all of you in your cloud journey? Are you asking what's the cloud?  If you're aware of the cloud but not really doing anything in there, put a two. If you'd like to run something in the cloud but you're not really sure where to start, put in a three. If you're thinking of running workloads, put a four. And if you're actually running workloads, put a five in there. And let's just see where everybody is at. I just lost my Zoom, so give me a sec so I can see what everyone's response is. No worries. Jayman here, we're getting kind of a mix. Lots of ones but also seeing some fours, some fives, some two. So it sounds like we've got a good mix in terms of competency and experience using the cloud but definitely a good group of those ones and twos just learning how to get started. Okay, awesome. All right, so let's talk about some benefits of moving to the cloud. So when you think about moving to the cloud, when I talk with customers that are thinking about moving to the cloud, they typically think of AWS these things here, like kind of the core infrastructure building blocks like compute, I need servers. I need security tools. I need locations where I can deploy this. And that's definitely true. You can get that with AWS. But we also have over 200 services built on these kind of these core foundations. And one of our goals is to help push you further up the stack. And so by that we mean, if you're managing a server, that's actually distracting you from doing something with your mission.  It's keeping the lights on work. And we often call that work undifferentiated heavy lifting. That's the muck of keeping the lights on. It's important muck, but it's not differentiating muck. So that's why we have these higher level services that you can leverage that allow you to move faster. And so these are things like virtual desktops in the cloud. We have services to support IoT. We have machine learning services. If you have a lot of machine learning experience, great, we have tools to support that. If you have no idea what machine learning is, great, we have tools to support that as well. We have tools to support analytics. We have media services so that you can transcode video and deploy it and broadcast and make it easy to have video on demand. We have solutions to easily build mobile applications and database platforms. Anyway, there's a lot of different services here. So part of what I wanna do is, in terms of talking about the different nonprofits, the different stories we've talked about, we gave you some really simple examples of starting out small and we had some examples that are maybe a little bit outside the box, like call center solutions and AIML solutions. So there's a lot of different things you can do by moving to the cloud. In fact, we typically see that there are five main things that nonprofits get when they move to the cloud. And the first thing that we generally see that nonprofits get is agility. What that means is you can easily spin up resources as you need them. So that means you can spin up hundreds or thousands of servers if you needed to. But this also means that you can really quickly develop and roll out new applications. So you can experiment and you can innovate more quickly and frequently and if the experiment fails, no harm, no foul, you just turn it off. The second advantage that we see nonprofits get is cost savings. Again, you're paying only for what you use and you think of it like a light switch. When you're in your home and you flip a switch, the power company sends electricity to that light bulb, right?  It's the same way with cloud computing.  The third advantage we see nonprofits see is elasticity and what this really means is, if you've ever had to manage an on-prem data center or otherwise have to manage capacity, you really need to buy enough servers and enough capacity to support your organization at peak levels of activity. But you don't need to worry about that in the cloud. You pay for only what you use and if you need more servers, you can spin those up and if you need less servers, you can spin those down. And again, you only pay for what you use and you can put safeguards in place so that that automatic scaling can happen for you up to a certain predefined threshold that you define and then when you want to scale down, you can scale down to a certain predefined threshold that you define. The fourth main thing that we see that nonprofits can get access to is innovation. So this is especially true with nonprofits that you can certainly innovate in IT or from an IT perspective in a nonprofit but it takes a lot of effort and it takes a lot of funding. And that's typically outside the realm of what most nonprofits want to do or are able to do. And by using AWS, you can get access to the latest services and features and you benefit from what AWS is providing and you don't have to build it yourself. And that means that you can spend more time working on your mission and trying to differentiate what you're trying to do as an organization instead of that undifferentiated heavy lifting that I mentioned earlier. The last main thing that the nonprofits get from moving to the cloud is our global footprint. So you can deploy globally literally in minutes.  All right, so there's a lot there. So now the natural question is, okay, how do you get started? So let me tell you, it's a very easy approach to get started. Now, with that said, keep in mind that every organization's cloud journey is unique. To succeed in your transformation, you really need to think about what are you trying to do? What is the benefit that you get from going to the cloud? That's really that envisioned phase that I have up here. In the envisioned phase, you identify the why. What are you doing and what value does it bring? Once you've done that envisioning phase, once you've identified your why of moving to the cloud, then you can move to phase two, which is aligning. Aligning is figuring out the who and the what. Once you've figured that out, you can launch. Launching is just, in many cases, as simple as deploying something to the cloud. And then once you've deployed, you can measure it, you can figure out if there are any gaps that you want to refine and then you can go to the scale phase where you again measure those gaps and you keep refining what you built or you can build new services and features. And so we really see this as a continuous process from figuring out the what that I want to do to figuring out how I'm going to do it to building and launching, to then looking at any gaps or any next steps and continuing this process over and over again. Okay, so I've explained these four steps briefly. Jamie, maybe you could help me out. What I'd like you to do is in the chat, if you're in the envision phase, I'd like you to put a one in there. If you're in the, so envision phase is figuring out the what, of what you want to do in the cloud. If you're in the alignment phase where you're trying to figure out the how and the who, put a two in the chat. If you're launching things right now in the cloud, put a three. And if you've already done these things, but you're looking back to see what we've done and you're refining and improving, put a four in there. So we're seeing a lot of ones, some twos. I see one four, Mike, but perhaps you can speak a little bit about what our audience members who are in the one phase might be able to do to move forward towards four. Yeah, so that's exactly what we're going to talk about here. So what I want to do now is I want to look at each of these four topics and talk through, okay, what does this actually mean?  So let's start out with the Envision phase. Now in the lower right-hand corner, hopefully you can see I've got a map, so you can orient where we are. We're in the Envision phase right now. Again, the Envision phase is really identifying what do you want to do in the cloud? And having a goal is oftentimes all you need to get started. Think about what do you want to get out of moving to the cloud? Is it better efficiency? Is it cost savings? Is it organizational transformation? Maybe you want access to technology or tools or services that you don't currently have access to or maybe it's something else, but you need to identify this why of your cloud journey. And once you've identified the why, you can then align this vision among your other stakeholders. Okay, so let's give you some concrete examples here. So maybe as an example, you want to increase fundraising that's your goal and you identify that you can do that through maybe better donor management or maybe you want to have personalized email campaigns to help encourage donation among some of your more generous donors. So that would be an example of a why or maybe you don't need to worry about fundraising and well, everyone has to worry about fundraising. Maybe what you want to do is you want to worry about or you want to do a better job showing the impact that your organization has towards its mission. So your why there might be, I want to produce public dashboards to better show that impact. So those are some examples there, but again, the first phase is really figuring out that why, the value that you can get from moving to the cloud. Okay, so now once we've done that, we move on to the second phase, the alignment phase and getting alignment is probably the hardest part of any cloud journey. The reason for that is because in many cases, you're asking people to change and any change, even good change can be really hard to do. It's important in the alignment phase that you identify a single threaded leader who's responsible for your cloud adoption efforts. And this becomes even more critical, the larger the organization becomes. Now, if you are a larger organization, that single threaded leader will likely have a team. And that team will ideally oversee some sort of cloud team. You could call it a cloud center of excellence. You could call it a centralized cloud team. I mean, there's a lot of different names for it, but basically that individual in that group are responsible for helping the organization in adopting cloud services. In this phase again, you're basically identifying, okay, remember in the envision phase, I've identified what my goal is. The alignment phase, I now talk through the details of what I'm trying to do. Who's going to do the work? How am I going to do the work? When is that work going to get done? So it's really putting some meat on the bones of that goal, if that makes sense. Okay, so let's talk about some concrete things that nonprofits can do here. So really once you've identified your goal, you need to identify who owns each goal and get those stakeholders together so that you can identify requirements. Making sure that you include everyone who's going to interact with this project is going to be critical.  Who's the developer? Who's responsible for maintenance of this solution? Oh, we lost them, Damon. Are you able to- That's what I think so, yeah.  You're on a roll there, but we'll give you a couple of minutes to just pop back on, not a problem. I want to take this opportunity to answer one of the questions that came in. It's a really good question. And the question comes from PFEW asking, are there limits to what the $1,000 and AWS promotional credits can be used for? For instance, can they be used for existing AWS customers or can they be used to cover services such as LightSale and Route 53? So great question. And the answer is, no matter whether you're a new customer or not, you can absolutely leverage the $1,000 and AWS promotional credits. And while there's a little bit of nuance in terms of what they cover, the vast majority of on-demand services are covered. So absolutely to Route 53 and absolutely to LightSale. So yes, you can use the credit, no matter whether you're a brand new customer or an existing customer. And yes, they can be used for on-demand services such as LightSale and Route 53.  So I dropped there somewhere. Can you help me know when I dropped? Was it on this slide? Exactly right. Okay, great, great. So I wasn't talking on my own for five minutes there. No, no, no, we're with you. It's just right at this slide. Awesome, great. So again, I was talking about the example of maybe one of your concerns in moving to the cloud is that you don't have qualified staff. They don't have expertise in cloud. Great, well, we can help you with that. There are a lot of ways to help. We have training solutions. We have upskilling solutions. We can help you connect with our ProServe team or one of our partners to again, help upskill your team or help you with staff augmentation or maybe even take on the project for you and then give it back to you once it's completed. So again, there's a lot of different ways that we can help you. But it's important during this phase to get your concerns out into the open to make sure that everyone's on the same page and is ready to get started. All right. So in the envisioned phase, we figured out what our goal is in the alignment phase. We figured out how we want to achieve that goal. We've surfaced any concerns we have. We've tried to resolve those. Now we're in the launch phase. Really the launch phase is thinking about, well, it's really launching the thing that we're planning, building and launching that and then thinking through, how do we know that we were successful? Have we established any success criteria? What does the definition of done in our case? So make sure you think through those criteria and have some really clear guidance so that you know whether your project was successful or not. So let's talk about some concrete examples here. Again, I talked about how in the envisioned phase, we talk through our goal, we align on that and then we start building and deploying something. So really it's important to identify a challenge. Working with us with AWS, we can help you design a solution and build out a pilot. Your pilot should have really clear goals and metrics. Again, we can certainly help you with that. You wanna have these measurable outcomes so that you can identify whether you were successful or not and you can identify areas of improvement in the future. We talk a lot about working backwards here at AWS and by that we mean, figure out what that goal is and then trace your steps backwards to determine what steps you have to take to meet that goal that you want to achieve. And we use this process to build our services and it's how we support our customers and by doing this, this helps us stay laser focused on that opportunity that we want to achieve and it helps us maintain flexibility in how we achieve that goal. So as you go through this launch phase be thinking about where's that value that we want to achieve? What technical constraints keep us from realizing it? And again, working with AWS or with partners that we help you work with, you can identify that process. You can identify that value and make sure that you see that value in the projects that you launch. All right, and then the final phase is really the rinse and repeat phase where you've launched something, you've now measured it, you've identified if there are any gaps, if there are you can measure those gaps and go back through the envision alignment and launch phase to start closing those gaps or maybe there's a new project that you want to develop and then you just put that through the same phase again where you envision, you align, you launch and then measure. And what we found with a lot of customers is as they follow this process you'll find that that initial win that you get will spark a lot of other ideas and projects. Oftentimes that first project is gonna be the most difficult but once you begin it and start seeing some success you're almost immediately gonna see a flywheel effect here. Okay, so let's talk about some ways that we can help you and some resources that are available to you. I have some QR codes so feel free to scan these if you want. The first is our nonprofit credit program. Jayman talked about that at the beginning. This gives you access to up to $1,000 in promotional credits. Again, this allows you to begin building solutions without any upfront investment in physical infrastructure. We have our nonprofit technical hub and this is where you can go if you're just starting your cloud journey or maybe you're looking for what are other customers doing? What are the best practices for certain workloads that I'm trying to deploy? Our nonprofit technical hub has a lot of information in those areas. Maybe you need help from a partner or someone to help you be successful. So that's really where our partner program comes into play here. Our nonprofit competency partners can help by either providing end-to-end resources, staff augmentation, project work and basically help you be successful on whatever that what is that you've defined during that Envision process. And finally, we wanna help you. So that final QR code will take you to a contact us page. If you don't know who your account executive is, then let us know and we can put you in touch with who your account executive is. They can loop in a solutions architect like myself and we can help guide you on your cloud journey through these four phases that we've talked about. Keep in mind that we've helped over 7,500 different government agencies, 14,000 different academic institutions and 35,000 different nonprofit organizations. So we wanna help you be successful. So in terms of your call to action, what you can do, again, identify that what and the why of your cloud journey. Once you've identified those, then you simply align on how and who, how are you gonna do it and who's gonna do the work? You launch a pilot, you measure success and then you iterate. But that's really all there is to it. So let's open it up to Q and A. Jamie and I heard that you were answering some questions. Are there any additional questions we can help answer? Yeah, absolutely. First and foremost, thanks so much, Mike. Really appreciate that overview. Hopefully it was inspiring to the audience to get them started as well as to help them along their journey to and on the cloud. I wanna highlight one question that we got but I think might resonate a lot with our audience members. I think one second also, Mike, can you go back to the QR code? I think that would be also a good hold slide so people can kind of access these resources. But so the excellent, excellent. So the question is, this person has a simple website on WordPress and they fundraise through it, but they don't necessarily have the volume or the need for a robust call center. They don't get all that much traffic but they know that the cloud has value but they're trying to understand what might be a good kind of starting point for AWS for an organization that doesn't yet have that immediate banging on the door type of need. There are a lot of things to look at. I mean, the first thing is if you have a data center or a server in the closet or any sort of computer that's running that's supporting your mission or your membership that is probably an opportunity to consolidate and put into AWS. You'll get better resiliency, you'll get better security. One of the problems with running things in your office is you see a computer under a desk and you say, what is this? What does this thing do?  We're kind of afraid to, we don't wanna break anything. You don't really have great visibility when you're running servers on-prem of what they're actually doing but when you put things into the cloud you have complete visibility into everything that's running. So that's one thing I would think of. I'd also think about what does your member outreach look like? We have a lot of services like Amazon Pinpoint that allows you to have targeted messaging to your end users, whether it's through email or SMS or what have you. That's something to look at. Jamie, do you have other suggestions for that? Yeah, those are excellent. And I think in my experience from working with organizations with a similar sentiment and question, really just getting started opens the doors to opportunities, to questions, to people, to knowledgeable resources that help inform your journey. It's almost about the getting started helps you decide where you're going as opposed to understanding exactly what your destination might be and then getting started. So I think a combination of this QR code on the far left which is the credit program plus the QR code on the far right which is support from our nonprofit team over here at AWS. Those two things combined can empower your organization to experiment and to dip your toes in the water, get started to a mic's point, maybe explore some member and donor engagement, maybe see what you can do with your database that you haven't yet considered. So all that combined, again, just get started. You can experiment kind of risk-free and then the rest seems to unfold from there. So excellent question. I'm gonna go on to the next question. And while I'm reading this, I wanna encourage all of our listeners to continue to ask their question. I know you're here for a reason and we have this dedicated time for you to answer those questions. So the next one comes from a viewer named Ashwin that says that they have some data and they know what kind of automation they wanna do with it but how do they know what services AWS can offer for achieving that automation? And maybe more over Mike, you can explain to our audience with so many AWS services, where and how do they navigate and what resources are available to help them understand the connection between the service and the solution they're trying to achieve. Yeah. So there are a couple of things that come to mind here. First of all, I mean, when you log into the AWS console, we have a services dropdown. If you drop down the services, you're gonna see 200 plus services and it can be overwhelming with the number of services that we have available. The first thing again, I'd recommend is by using that QR code on the far right, you can get in touch with a solutions architect like myself and we're more than happy to help you look at your workload and identify, okay, this piece right here, this should be an AWS Lambda function. This piece right here, this data transformation, this is a AWS glue job. I mean, so we can help identify what the specific services are for you. So that's one way to approach this. Another way to approach this is we have a solutions library where we have a lot of pre-built kind of vetted solutions that are common patterns we see people perform on AWS. You can go to our solutions library and in many cases, there's a template you can click that will deploy those resources in your account. So you don't really have to worry about building anything.  So those are two ideas that come to mind. Excellent, great. I am gonna move on to the next question. Thanks so much. I think it all comes back to leveraging the support that's out there already. Again, I can't emphasize this enough. What we hang our hat on is providing that unique customer experience and partnership experience for nonprofits. This isn't just another team that supports any type of organization but moreover we know the nuances and in and out unique to your organization. So get in touch with that QR code on the right. So this is a little bit more of a in-depth question, Mike. It comes from Justin that says does AWS offer a hybrid cloud solution that enables on-premises data storage and access that syncs with cloud storage specifically in relation to Amazon WorkDocs but maybe you can also speak about it a little bit more as a high level about kind of a hybrid cloud solution and the pros and cons and what someone might wanna do when considering that as an option. Yeah, so we wanna avoid the answer. It depends in terms of what your solution is but oftentimes we come back to that because it really does depend on the specific use case. Maybe it's latency or performance requirements you have. There are a lot of different solutions and just to talk through those briefly, yeah, there are definitely some hybrid solutions that we have. We have solutions with VMware where you can run VMware, VMs on-prem and in the cloud. We have solutions where maybe you want to run compute closer to your end users. We have solutions called AWS Outposts where you can run compute and databases really close to your users but you control them from the AWS data plane. So the servers are physically installed in your data center but you can control them through the AWS console. There are likely other solutions that we have out there that I'm just not thinking of right now but again, feel free to contact us. Let's have a deep dive on your use case and we can help you come up with a solution. Fantastic, thanks so much Mike and speaking to that point of contact us I just wanna acknowledge, we see the question from TEEEH. It's a great question. It's about elastic bean stock and the comparability between that and EC2 instances to that current viewer definitely reach out to us scan. We have the answer to that and it's just a little bit more in depth of the question. So can you talk a little bit Mike about what might be the future in terms of AI solutions for some of our nonprofit needs? In particular, we have a question from Joe who's talking about a database that collects data and some frequently asked questions from their constituents. And the question is, does AWS offer an AI solution for database to collect data or answers to questions posted in platforms like Quora or others? Once those responses are collected can they be sorted to the most relevant and researched by AWS? So I think it's just an overview of the value and potential for AI to help with questions that come in frequently to organizations as well as any other use cases you might be aware of. So yeah, great question. So first of all, I mean, let's talk about just briefly our AI ML stack. I don't wanna get into it too deeply but basically we have a couple of layers of our AI ML stack. We have kind of the DIY layer where you wanna manage everything yourself you're super comfortable with really deep ML stuff. We have a layer above that where you're deep in ML but you don't wanna manage infrastructure and we have a layer above that where I don't wanna manage anything and I may or may not know anything about ML but I wanna take advantage of ML services. So we have services like Amazon recognition which is a computer vision service. We have the ability to create chatbots. We have the ability to create forecasts. There's dozens and dozens of different services. So what I'm seeing in terms of like a trend in AI ML is continuing to lower that bar so that it's easier for people that don't have machine learning expertise to get into ML. Getting into ML without having some of these higher level services is a challenge. Like you really need like a deep background in statistics or data science or something like that but by removing some of those obstacles we've really made it a lot easier for people that literally have no knowledge of how machine learning works to take advantage of that. Now, in terms of that specific question we do have services like Amazon Kendra which is essentially a full text indexing and searching solution where it can index content that you gather. Maybe that's questions from other sites or content that you have and users can enter queries that can automatically find the most relevant content for you. But there's a lot of other things we could do as well just depending on what the specific use case is there. So it's a very deep and broad topic. Yeah, absolutely. And I think that can sometimes be scary and we wanna recognize that but at the same time, it's empowering. I mean, I'm confident in saying that it's really not about if the cloud it's really more about when. So I wanna applaud everyone who's still here with us who showed up who are really investing in understanding how this technology can bring value to your organization because this is absolutely the right first step. You are in the right place and between what Mike has provided in the past 40 or so minutes as well as these resources that are right in front of us on the screen we are here to support you in your learning and in your progress and in your journey and using AWS for mission impact. So I wanna wrap up with one last question. Oftentimes we don't have the opportunity to have an audience of nonprofits like we do currently. And I wanna ask a question I'm gonna post it in the chat as well. Give me one second, but essentially I'd like for you all to share for the sake of our understanding and to continue to provide as best of support as possible a little bit more insight into what would be most valuable in terms of support or continued support to help you use AWS. So go ahead and look in your chat and answer one, two or three. So if it's one, it's that you've already leveraged the AWS promotional credit, but you're looking for more. If it's two, you really wanna speak with peers in your community to understand how they're leveraging AWS and how you can make use of what they've done to add value to your organization. And then the third one is if you're looking for trainings you want to just explore on your own and learn on your own. So I see some answers coming in there. Thank you so much. I'm seeing some ones and threes, some twos and threes. Okay, three, so excellent. Thank you very much. This is really informative. Again, it helps Mike, myself and our entire AWS team ensure that we're providing you with those specific resources that are needed to leverage the cloud for mission impact. So thank you so much for taking the time to join us today. It's our pleasure to see you here again to restate for the sake of emphasis. You are absolutely in the right place. It's not a matter of if, but really matter of when the cloud continues to provide value for your nonprofit. So with that, I hope everyone has a great rest of your day. Please take a moment to scan some of these QR codes to get in touch and upwards and onwards. We'll see you on the cloud. Thanks so much. Thanks all.