Pathetic truth. Master coincidence, certainly, but it couldn't be. No, these were not imagined patterns. The mind seeking to connect accidents with lots of blurred lines. This was something real. Something elegant in its simplicity. Dangerous in its enigmatic complexity. Undeniable in all its obscured perfection. Everyone has to be so kind. There are others who observe this COVID conspicuousness. Able to untangle this perplexity. Understood this cypher that surrounds this key. This 23. Some kind of... Like I said, alright. Good morning everyone.  Really? That's it, huh? Alright, so in the interest of time, I'm going to kick it over to Omar real quick, but I just want to let everyone know, 45 minutes is here, not an hour. When he is done, I am going to escort him out. If you guys have questions, you can do it out in the hallway. Unfortunately, there's no Q&A rooms. So with that, have a great presentation. Okay, hi everybody. I hope you enjoyed DEF CON. Okay, a question. Do you play computer games? Yeah. Okay, and those of you who play computer games, have you ever thought about getting hacked via the games you play? Well, I'm Toma and I'm going to talk exactly about that. But first disclaimer, one of my demos will involve this security camera here.  Okay. Wow. With that said, a few things about myself. My name is Toma Sokai. I'm from Hungary. And I work for a mighty security company called PR Audit as a pentester and developer. I have an OSCE and I was part of the team, Proditors that won the European Championship of Global Cyberlypex in 2012. And I'm not sure what's happening with these slides. Changing automatically. Okay, so what am I? My favorite quote from my favorite movie summarizes this quite well. I am not a computer nerd. I prefer to be called a hacker. Yeah. And I do love tinkering in binary for execute tables. I love crackmys and I love tinkering with the copy protection schemes. Okay, one more thing. And I don't want to start the flame war here. I don't know what. But I just have to tell you this. I very, very much prefer cute demons over flightless birds and half eaten fruits and pieces of glassy wooden frames. With that said, I have to make a confession. I'm sorry, guys. These slides are changing automatically.  Okay, so the confession, I was for years and I am in love with the Winters 2 API. It can be so disgustingly beautiful that you just gotta love it. Okay? And this will be relevant later on. Okay. So now they are not changing. Wow. Okay, games and game modding. Since I'm talking to a room full of hackers, I'm sure I don't have to tell you about that urge to make things better, to implement your own ideas. And frankly, game modding is the same principle. You've got that framework, the game, and you just have to create something of it. Okay? And you also have to share it with others. And this is why modding will always play the big part in gaming. There are huge sites where you can upload your creations and others can download and play them. So games and security. One important aspect of this is multiplayer gaming. Nobody likes to play alone, so nearly all games have some kind of multiplayer functionality. This means from a security standpoint. It means that there is a constant data exchange between the clients and the server. And this data can be quite complex, like whole maps or levels. And also they often use obscure protocols. And you should realize that this is a fuzzing heaven. And yeah, in 2013, Rivan showed us that it is indeed worth fuzzing games. They had to talk about zero days in game engines. But I'm not going to talk about those kind of games. I'm going to talk about scripting in games. There are lots and lots of games that incorporate some kind of scripting language, either something they created or they just embed some existing languages like Lua. Why do they do this? They do this because this makes creating dynamic content a lot, lot easier. And the important part of this is that these scripting engines are available to modders. Okay, but could this be really dangerous? Stop right here for a moment and think about it. You, as a game modder, create a mode or a map and incorporate some scripts in it. The player downloads the map or he joins a server and the map gets downloaded automatically to his machine and eventually that script you put in there will be run on his machine. Okay, so most of the game developers realize that this could be a threat. So they try to do something against it. They try to restrict functionality. They try to implement sandboxes. But they often do this wrongly. They fail. Okay, if these kind of bugs are there, then surely I'm not the first one to realize this. And yeah, I'm not. There are lots and lots of references on the Internet involving exploiting scripting in games. In fact, in 2014, there were several Garry's Mod exploits that got huge gaming media coverage. Okay, so if these things are this common, then why am I talking about this? Why am I talking about this at Defcon? Because these scripting abuses are used to cheat in games. But they can be used to access your computer and through your computer, they can be used to access your entire home network, like your security cameras, your smart house components, and stuff like that. And yeah, nobody seems to talk about this kind of stuff. Let's do this again. Okay, so I'm going to show you several demos where I abuse scripting engines in games. The first target is CryEngine 3 and the whole and the crisis to game. Remember when I said that most of the game developers realized that scripting can be a threat? Well, Crytek isn't one of them. Crytek seems to believe what certain cyborgs tell about the futility of resistance since they didn't bother to implement any kind of sandboxes. They use Lua and you can even call operating system comments with the OS.execute call. And I'm going to show you this using a crisis 2 mod I've created for a moment. Okay. It's loading. And I'm sure that at least some of you have dreamt about hacking something via the push of a big red button. Well, we are going to do that now. I'm just put down the... So we are here in this deserted island and we've got a big red button. Wonder what it does? I'm just going to push it. And yeah, a calculator-ish thing. Thank you guys. Okay. How did I do that? In CryEngine 3, every object that can be used... Yeah, I'm going to... Okay. So every object has a Lua script attached to it. And here you can see the big red buttons, Lua script. And this is the unused event handler. And you can see that it's just an OS.execute. So it's just one call. Okay. Oh, I can't really see. Sorry. Okay. So that's how you can execute code via a crisis 2 map on a player's machine. Well, but one thing, what was that backslash, backslash, evil hack sort thingy? Yeah, that was one of the reasons I do love the Winters 2 API. In Winters 2, every functions that use files can accept UNC pass. And yeah, load library and shell execute do too. So if your victim can access a windows share you control, then you have the chance to load DLS or load executable files from that remote share. And you don't have to write share code. You just have to use that share. And this has one nice side effect. You can steal NTLM challenge responses if you can load a file. If you can get the victim to load a file. And I am going to show you this with CryEngine 3 SDK, which is a much newer version of CryEngine 3 than the one used in crisis 2. And I have this impact it Samba server set up here. And this is the same button with different code. It just tries to access a file from that share. Okay, jump into the game. Go there and push the button. Okay. Okay, now I push the button. And you can see on the Samba server that there is indeed my NTLM challenge response. So it's a nice trick I think. Okay. Moving on. That was the demo. But before moving on, we are at slide number 23. And I am personally not a believer in the 23 anima, but maybe the demo gods are.  So this slide is blank, almost blank. Okay. So my next game, my next game is Dota 2. It also uses Lua as scripting engine. But it has a sandbox. But that sandbox is leaky. And it in fact has a huge leak. You can use the entire standard Lua IO library. So you can read files and you can write files. What this means? You can steal information. You can deploy auto run stuff. You can just use the NT stealing trick I just showed you. Or you can overwrite executables. And I'm going to show you this in a video because the game itself started not working. Stopped working a few days ago. So, okay. What's that? That's the video. Sorry, I can't really see that. Okay. In this video, I'm going to show you a Dota 2 mod where I attached a Lua script to the on NPC spawn even handler. So when an NPC gets spawned, my Lua code will run. And this Lua code will decode a base 64 encoded P executable and overwrite the main executable with it. Okay. So when the next time the game starts the game, it won't be the game that starts. But it will be our executable. Okay. So it's just loading the map. It takes a few seconds. Okay. I'm just going to create a code board, an NPC with console commands. And you will see that the game freezes a bit. It encodes the base 64 encoded P executable. And shortly you will see that, yeah, it got overwritten. You can see the size difference there. And when we try to start the game, it will be the industry standard exploit testing tool code calculator by the initiative. That's it. Thanks. Okay. I'm sorry. There's something wrong with PowerPoint. Okay. And just do this way. Okay. My next demo, it's a surprise, surprise. It's also a Lua scriptable game. It's called digital combat simulator. It's a flight simulator. And in fact this was the first game I found some script abusing. I reported it to Eagle Dynamics. They fixed it. And then I found another one that I am going to show you. Or rather I'm going to ask you if you can find the fault. On the screen you can see the entire sandbox implementation of DCS world. The question is simple. Where is the league?  And you can win this fine bottle of Hungarian piling if you know the answer. Okay. Nobody speaks Lua? Okay. Then I'm just going to show you. It's on the 24 line. It's this line. They try to disable loading DLR files. But it shouldn't be loadlib. It should be package.loadlib. So loadlib is nothing in itself. So that was the fault. Okay. Since none of you could tell me the answer, I've prepared some backup questions. First one being the title of this talk is a quote. Who asked that question? Whoa. I'm sure this is a right answer. But I was thinking about Joshua from war games. Sorry? He's asked the question by Robin. Oh. That's embarrassing. You're right. Okay. Okay. So I don't know who ever answered first. But yeah, you should find me after the talk. Okay. And have your piling up. Okay. I just skipped my second backup question, which was what is my favorite movie? Jurassic Park. There was a quote from it. Quote from Lexi. Okay. So with this demo, I'm going to crash something. You know, lots and lots of exploit start out as crashes. Well, this one will be a different crash. I've just created a mission in this flight simulator where I've attached a Lua script to the on plane crash event. This Lua script does one thing. It loads the DLR from a remote shell. So, okay. Start the game real. Okay. Sorry. It's loading. I couldn't load all my games because I have only 8 gigs of RAM. It's loading. Yeah. Okay. So I'm going to jump into the cockpit of a tier. There should be a paint popping up. But yeah, it's under the... Oh, sorry. Under everything. That was it. Sorry. I don't want to take any more time. But yeah, that popped up, if you believe me. Okay. So my next demo, it's a bit different. It's different by two reasons. This one won't abuse a scripting, but it will abuse a dangerous and naturally without feature in a game. And also, this time, the gamer will be the bad guy. So we will attack the server. The game is armed assault. This is a military combat simulator game where you can have your own squadrons. And you can set up your squadron information, your squadron's name, logo, website, and so on. And every time you join the server, these information will get displayed, not just for you, but for everyone on that server. And how do this work? On your profile, you can set up a squadron URL that points to an XML file. And every time you join the server, the server will fetch that XML file and parse your squadron information from there. When I first read about this, I was like, this has got to be an XXC. I'm sure of it. And yeah, it wasn't. But not to worry, it's still an SSRF. And I am going to show you this. This demo is based on real-life experiences. That was described with an armed assault server. And he also had a PHP chart server on the same machine, a PHP chart server that was only accessible from local hosts. So this is the armed assault server. Here is running a PHP chart server. And the PHP chart is vulnerable to an RCE that can be triggered by a gut request. So what I'm going to do is edit my, oh, geez, my profile and set up URL, local host, that triggers the PHP chart exploit. So when I join the server, okay, I can't really see it, sorry. Which one is multiplayer? This one. Okay, thanks. Sorry. Okay. So just put it a bit away because I will have a not-cat listener here since the PHP chart exploit will trigger a connect back shell as soon as I join the server. Yeah, it's working. It's trying to join the server. It's a bit slow since there are several games running on the same machine. We've got a connection and this is a shell. You can see ID, your name. So yeah, we have just executed code on the server by just joining it. And I've been kicked out of the server. Okay. So this was a gut request. A gut request that we didn't see the answer to. But there are games when you can issue a gut request that you can see the answer to too. And one of these games is Garry's Mod. You may remember that I talked about Garry's Mod. It had its shares of Lua related exploits in the past and this resulted in a pretty solid Lua sandbox. So Garry did fix a lot of things. But it has also a huge API. There are lots and lots of functions and yeah, there are some dangerous functions too. Like this one, there is an HTTP function and it uses this structure. As you can see, this is a screenshot from the documentation. As you can see, you can control every aspect of an HTTP request. You can control the method, the headers and so on. What this means? So if you create a map or a mode or server in Garry's Mod, then you can have a full-fledged HTTP proxy to the gamers home network. Okay. And yeah, I'm going to show you that with a Garry's Mod, I've created, I have implemented free console commands that only super administrators can use. One of them is ACK scan players. So it will, I as a super administrator will issue this command and it will scan all connected players home network for HTTP servers. And hopefully it will find this camera here. And yeah, it did. We can see that it's an authorized access on that IP address. Yeah, I'm just going to switch to duplicate. Sorry about that, but I can't see anything. Okay. So now my second console command is used to brute force a HTTP basic authentication server. So we're just going to put the user ID and the HTTP servers address here as parameters. And we can see that it tries a few username, password combos and it finds that the username and password are admin, admin. Okay. So we have the username and the password for this camera here. Now we can steal images through the game. And this is what my third console command is used for. It also requires the user ID to know who to send it. It requires a, oh, a URL. This URL can be accessed from the HTTP server response and it could also be brute force but I didn't have the time for it. So when I issued the command, it should, okay. It's working. Okay. It received an image and yeah, here you are on the screen inside the game. Thanks. Okay. Okay. My final demo. You should be afraid of mice and I'm not talking about those two guys there although they can be dangerous too, but I'm talking about this one. I don't know if you can see it. This is a Logitech G whatever mouse and like all Logitech G series peripheral, it can be scripted with Lua via the Logitech gaming software. And this Lua code runs in a very, very, very tight sandbox. But it still can be circumvented by a method first shown by a guy named Corsix in his company of heroes to exploit back in 2014. He abused handcrafted Lua byte code to achieve two tricks. The first trick is to get the memory address of any Lua variables S double. And the second one being able to create Lua variables that points to arbitrary memory locations. These two tricks combined leads to arbitrary memory read write which eventually leads to code execution. Okay. How did he do these tricks? The first trick in Lua every variable is a T value. T value is a struct that stores the actual value in its first eight bytes. Okay. In case of a Lua number that first eight bytes is double and in case of any other Lua variables it's a pointer to a structure. So for example for a Lua string it's a T string pointer. So if we could get Lua to interpret for example a string SA number then we can get that pointer that memory address SA double. Okay. And yeah, of course he did exactly that. He used the for loop and he noped out the op for prep code. Op for prep is responsible for checking if every parameter for the for loop is actually a number. So he noped that out and the second op code just assumed that they are numbers. So they get interpreted as numbers and that's how you get memory addresses as doubles. Okay. So the second trick it's a bit trickier. And it's done basically in these few lines and I'm going to go through it line by line. Okay. In Lua op values are entities that belong to functions and they represent function parameters or variables that are declared outside of the scope of the function. So we create a string, a Lua string that looks like an op value. So we will have a chunk of memory that can be interpreted as an op value. An op value that points to the memory location we want to read or write this end here. Okay. Second line. We want the address of that memory chunk. So we get the address of the Lua string. But because the Lua string actually is a T string structure, we will need to add 24 bytes to it because the first 24 bytes of the T string structure is just metadata. Okay. So now we get the memory chunks address in op file PTR. So next step. We modify the byte code by hand in so that the variable magic will point to, will be interpreted as an air closure. Air closures are representing Lua functions in Lua. So we set up magic's value by concatenating the op file PTR string three times. Okay. So magic is a string. When it gets interpreted as an air closure, as you can see on the bottom part of the slide, characters 16 to 24 will be the air closure's op files field. Op files is an array of op file pointers. And since those characters are indeed an op file pointer, we just set our outer functions first op file to point to our memory address. The memory address we want to read or write. And because the first op file to that function is magic, we can access that memory address via magic. Okay. So how did Korsyx exploit this? He created a coroutine with coroutine.wrap. It creates a C closure on the Lua stack. C closure is just a Lua representation of a native function pointer. The native function being Lua b aux wrap in this case. Okay. He then replaced this function pointer with a pointer to LL loadlib, which is also C closure function. And it's basically a wrapper around load library. So after that, when he called the coroutine as the DLL name of a parameter, he could load that DLL into the address space of the game. So what did I do differently? First of all mine is a 64-bit exploit. It was 32. What this means? It means that the memory layout and the struct packing is different. The calling conventions are different. So we can't modify function parameters since they are not on memory, they are not on the stack. They are passed as registers. The most important difference of this, the most important thing of this 64-bit difference is that the size of a double equals the size of a pointer. This actually makes this exploit a lot easier. Since you don't have to worry about the size difference when using the first trick. So I also couldn't call LLL loadlib since LLL loadlib is just a stub when you compile Lua as an answer code. It does nothing. So I had to call native functions directly. I have to find useful native functions that accept one parameter that is a pointer. Load library is a good candidate since it's accept a string and also shall execute would be two. Okay, so we have to get load libraries address. We have to replace Lua BIOS wrap with load library A. And we have to override the Lua state with the DLL name. This is because we can't modify the parameter itself. We have to modify the data at points two. And the pointer points to the actual Lua state so we have to override that. So after that we can call the core routine and execute load library. So there are some difficulties how to get the address of the Lua state struct. When your code runs in a core routine, core routine dot running gives you back the Lua state. So that's easy. Okay, there were some crashes. I had to uninstall the back hooks.  And I also had to restore the Lua state. And one other question remains how to get load libraries address. That's a simple solution. What Corsix used, he used the memory difference in the P execute table to calculate the load library address. But there's a much more generic solution you can get and read the address of the anti-header. From that you can have the import directories address. You can search for kernel 32 DLL in it. And you can have load libraries address from the kernel 32's import address table. All these two tricks. This is much, much more generic and something like that can be used on other operating systems. For example parsing the F header. Okay, with this approach there is a restriction. You can only override 16 bytes of the Lua state. But this is not really a problem since we can omit the .DLL and load library will still find the DLL. So if we use you and C pass, then we have nine characters for an IP or a domain name. So it's not really a problem. Well, okay, I'm running out of time I think. So I'm just going to show you this. Here is the profile with the script. This is the script and it's attached to the middle mouse button. So when I press the middle mouse button a calculator appears. Thanks guys. Okay. So we are at the end of my talk. One question. Should we listen to Joshua and just stick to a nice game of chess? Of course we shouldn't. We should play computer games but we should be aware of these threats and we should treat our games like we treat all of our other softwares. And also game developers should pay more attention to these kind of stuff. Okay, this concludes my talk. Thank you very much for listening and have a good


We're here we're talking a lot about swag and what some of the guys are breaking out And if there's anybody on this team who breaks out some of the coolest kicks and the chains, it's you Yeah, yeah, no, I mean obviously it's it's fun to look good But it's even more fun to look good on the field and and you know Be wearing a shoe that you feel comfortable in and then obviously the pinstripes top it off the Travis Scott ones They broke out man. Those are pretty bad. Those were my favorite man Those those were a gift from Travis's label actually whenever they found out that I was gonna do it We'll see if anyone else wants to get some stuff this year. I'm wearing the Travis Lowe's, you know I've obviously got a lot of shoes that I like to break out but the the Lowe's are you know, some of my favorite shoes They're just convenient easy to wear and they obviously look good. So can't complain You got to give us a sneak peek man What are some of the things that you're gonna be breaking out this year? I think I'm gonna break out some of the Nike SP collection You know, I think the Jordan ones are the most comfortable on my feet and the Nike SP highs They're they're pretty similar. So I got to stick within the guidelines of the rules


Okay, we're back. This is Dave Vellante, Wikibon. I'm here with Paul Gillan. This is the MIT Information Quality Symposium. We've been here for two days covering this wall-to-wall. This is theCUBE. Justin McGruder is here. He's the founder and principal owner of Noetic Partners of Financial Services, consultancy, former chief data officer at Freddie Mac right during the financial crisis. So a very interesting segment here. Justin, welcome to theCUBE. Thank you. So start by telling us a little bit about Noetic Partners. And then we want to ask you about data quality and financial services. Sure, sure. We formed Noetic about four and a half years ago as I was leaving Freddie Mac and as some of my partners were also deciding to move forward in sort of the ashes of the credit crisis, if you will. Noetic is a consultancy, but what we've done is we've really come up with an approach to managing financial information based upon the concept that every party involved in the financing world is important and the roles those parties play in transactions and the roles those parties, the relationships those parties have with other parties is fundamental to understanding financial services and the financial markets. And it's a concept that's not new, but it's a concept that I think we've taken to the next level. And we've done this work at some of the larger global investment banks and commercial banks and some smaller firms as well. And we think it's an approach that has helped our clients and our counterparts, our customers understand their risks better and frankly make more money and lose less money. Well, so straight out was what happened with the mortgage-backed security crisis and the CDOs, et cetera. Was it fundamentally a data quality problem? I think data quality and a lack of data was absolutely a fundamental component of the crisis. I think the banks that were involved in underwriting loans and requiring loans and pooling them and selling them to investors did not have information about the underlying monthly debt obligations and income and assets held by borrowers. I think it's well known. We had things we called ninja loans back then which meant no income, no job, no assets. And we had lenders, some of them no longer exist who were making ninja loans because of the froth in the market because we saw if you were calling 0607, prices were going up, people were buying and selling homes and flipping them and the transparency that the actual underwriters had to the content, the reference data about the people they were lending to. Not the collateral. I think people understand the collateral well but the reference data about borrowers and guarantors and novelers was not good and I think that was a problem. I think in my role it prevented us from truly understanding the nature of the risk of the pools that we were issuing in my time at Freddy's. Well, so a lot of people pointed the fingers at the credit rating agencies which really, given the scope of the problem, they weren't going to own that. So we've all seen that effect, the effect on the economy, the effect on Dodd-Frank now comes along. So take us back to that situation to the extent that you can and share with us. You were there, you saw firsthand what was happening. What was it like at that point, particularly from a data quality standpoint and what have we learned from that? Sure, I think most people look at the crisis and they see the securities, the pools of thousands or hundreds or thousands of mortgages and they see weighted average coupon rates and they see information about mortgages that was pooled together and aggregated and they see a price for a security and they see a rating. What they don't see is the underlying mortgages and in a pool issued by a Bear Stearns or a Lehman Brothers or a Fannie Mae or a Ginny Mae or a Freddie Mac, there might be thousands of mortgages with hundreds of data elements and those details necessarily were obscured from the investors because I don't want someone knowing about my home just because my loan is part of a pool and I think that's fair, the privacy issues are real but the lack of disclosure and the lack of transparency to investors prevented them and the ratings agencies from really understanding the risk around particular borrowers and particular markets where prices had appreciated significantly. Okay, so I mean a granular view was maybe not appropriate but at least some data and information on the quality of that granular view would have been more appropriate. Absolutely. You know I've lived through a number of financial meltdowns now the savings and loan crisis, the dot com meltdown and the last one in the late 80s, the Wall Street crash. It seems like some people say credit unions are gonna be the next great vulnerability. It seems like there's consistent thread here which is that they were all caused by people lending too much money beyond their means. People, it was too easily available credit being given to the wrong people. Is that a problem that can be addressed by data? By better quality data? Or is this fundamentally just greed? I think it's without the data we can't understand the risk that is inherent in lending money to counterparties. I think greed is always at the center of it. I think Michael Douglas was right. Greed is good. It keeps our markets moving. But I think risk controls and understanding and transparency are fundamental. And I think it's the reference data. The mundane, simple, basic reference data about who am I dealing with? What products are they using? What is the risk? What are the cash flows? What's the collateral? If people don't understand that when they're making deals and lending money, then of course you're gonna have another credit crisis. But isn't this more of a regulatory or of an issue, a tax issue? I mean, when these companies blow up spectacularly, it's almost always because the corporate organization is so complex, Enron with all of these offshore subsidiaries, nobody could figure out what Enron was or how it was organized. Enron's a great example. So, I mean, can you fix that with, is that a transparency problem? Absolutely, I think data is the root of the solution. Enron's a great example. Enron was a collection of hundreds of legal entities with complex relationships with other legal entities. During and before the Enron disaster, I worked for a large bank, an investment bank that was exposed to Enron. And we built a counterparty structure like the one I'm talking about. And it's very, the fundamentals of that model of understanding the relationships between the legal entities in Enron who had issued debt and were issuing equity securities and making loans or taking loans and buying or selling commercial paper was what allowed the firm I worked for to get out of Enron before the crash. So understanding the parties involved and the relationships between parties is the most fundamental piece, I think, which is reference data of banking and investment banking and understanding that risk and how you're exposed to all the parties involved will make and break the next financial crisis. And I think we look at, I was at the Mortgage Bankers Technology Convention in 07 just as the crisis was about to unfold. And I remember sitting with some of the older fellas in the groups and they were telling me how, well, the last crisis, the crisis in 1994 or so, 91-92, that was the big one. And this one was not gonna approach that crisis. Well, I think the 08 crisis eclipsed that early 90s crisis by an order of magnitude. And I think, and the next one will also, unless we begin to understand the parties we're working with. You know, banks are reporting earnings just this week. A number of banks reported, including Bank of America reported yesterday. I believe JPMorgan reported yesterday, record profits. I mean, they're going great guns, business is great. Are we just setting ourselves up for another disaster here? Well, I think there's always risk. I think they're talking about increasing capital requirements for banks, I think that may make sense. But I'm not a banker, I'm a technology guy, I'm a data guy. Understood. My view is the banks need to understand who they're doing business with. They need to understand the nature of their contracts with other parties. And if they understand their exposure and their agreements and their commitments and their obligations to other parties, then they can make better decisions than they've made in the past. I think structured products are interesting. We talk about CDOs and CMOs and all the crazy financial instruments that people thought up in the last decade in their 15 years. And they're interesting, but I think if we had better understandings, if AIG had a better understanding of all the counterparty exposure it had, and Hank Greenberg actually had control of that before he left, I think if those details were available to decision makers, they may not make the bad decisions they've made in the past. But it's a good question that you're asking, right? Because I mean, it was useful to go through so that the crashes lived through them as well. When the dot-com bubble crashed, there wasn't a big injection of capital to save the tech industry. That didn't happen. And then of course you had other factors, I mean 9-11 was like the stomach punch there.  Significantly, you had 9-11, you had Enron and the money got sucked in by accountants, essentially. And so now you're seeing this huge injection of capital and to your point, is this just all artificial?  It seems like, not to step on you, David, it seems like people always find ways around to beat the system, right? So no matter how much disclosure you demand, someone is always going to figure out a way to manipulate it. So is data really the problem? It seems constantly to be escalating as well. I mean, you go back to, like, Lewis's books in the 80s, right? I mean, it just keeps getting bigger and bigger and bigger. So Ken, to Paul's point. I think, to your point, it is the people. Who are the parties? The parties are institutions, they're individuals. Who are they? Who are we dealing with? What's their history? Have we seen them over time with certain behaviors? Are they in a new market they've never traded in before or invested in before? What's their credit rating now? What's it been in the past? Not just right now, but five years ago, 10 years ago, 20 years ago. What's the history and what's the nature? What's the indicative information about this counterparty that I should know before I enter into a deal with them? And understanding that is, you know, people take it on face value that the big banks, that Goldman and Citi and JP Morgan are good for it. And six or eight years ago, we took it on face value that Bear Stearns and Lehman were also. Barclays, you know, or Bering's was, you know, 15 years ago was also one of the oldest names in the business. The bottom line is these things can change based upon the people inside making decisions without information that they need to have in order to understand their exposure and their risk. And I think that it comes back to data. Well, and I mean, there's hope here, right?  And so, well, transparency, you know, potentially, even the guys in the book, The Big Short, were concerned, and they had the data. They were math guys, they had it all figured out. Even they, for a while, were worried that they weren't going to be able to cash out. So, will that access to information sort of create a transparency? And will average people be able to analyze that data and visualize it? I don't know, what do you think? You know, it's interesting, when I joined J.B. Morgan in the mid-90s, I wrote an acceptance letter, and I said I want to help. I was joining the reference data group to lead the counterparty account information group, and I wrote an acceptance letter saying I want to improve transparency and market efficiency, and I still believe that. I think that information is what it's all about. I was reading some articles the other day about some regulators quibbling with Thompson Reuters and some analysts about investors who have a two-second advantage in getting certain kinds of data from the market about jobs and things like that. And to get to that point is just a fantastic achievement because, as you say, 15 years ago when we used Telerate and when we did things in a different world, this transparency wasn't there. And now we're talking about microseconds and even nanosecond delivery of data far too fast for you and I to do anything about it, but if we can write a program, maybe we can. I think that the speed, the delivery of data is great. I go back to my concern. What's the nature of the slowly changing reference data? Who am I dealing with? What's my contract or my relationship with this counterparty? What obligations do I have? And what are the risks I take in getting the cash flows we've agreed to getting? If I can understand that, and that's all data, that's a schedule, that's indicative data about individuals and their credit history. If I can understand that, then I think we can avert the next risk or at least minimize it. I think the problem is people are gonna decide not to follow those controls. These are controls. People don't like controls. Well, when crises happen, lawmakers react. We saw that with Sarbanes-Oxley and you can debate whether or not it was an overreaction, but it's hard to debate that it didn't affect the IPO markets, right? Mark Andreessen wrote an article recently talking about that and how it's really not attractive to be a public company anymore. So, Dodd-Frank, good idea. I've got a friend in New York who makes markets for a big bank. He's been doing the same kind of work in currencies and foreign exchange for a few decades and his business, he's the first to admit is moving offshore. Dodd-Frank is poorly conceived of. It's a lot of great ideas, but it's a bucket of bad ideas at the end of the day because they don't fit together. No one knows how to implement them. I think we're chasing capital away. I see it in some of our clients who are doing more work offshore in countries that used to be emerging and now they've emerged and they're growing like gangbusters and they're happy to take the business from the US and from the major markets. Do we have, what shortcomings, if any, do we still have in this country in terms of disclosure regulations? Are financial institutions adequately disclosing you think what they need to disclose? You know, we were talking earlier with some of our friends from the conference and some of whom have very senior roles at some of the largest banks in the world and the thing that we agreed is that we've not heard the same question from different regulators or the same regulator more than once. In other words, every time we begin to disclose one thing that begets the next question, there's not a, we don't see an end in sight in disclosure. So it's constantly drip, drip, dripping, turning. I mean, the examiners are good people and they just want to understand more and the more we give them, the more they want to know and I think that's fair, that's fine. That's why I come back to the concept of reference data. If I can understand and maintain my list of clients and products and the relationships between them, the contracts that I have, the obligations I have, then I can create any report that my counterparties or my regulators need to see. I can show them my exposure to an instrument or to some dimension of an instrument or an asset class and these are the things I can't do if I have sort of disorganized information about who I'm working with, what each desk is doing and where I want to go with each product. So bring that back to Noetic and how is Noetic contributing to moving that mission forward? Sure, I think our approach is we like to partner with our clients. When we talk about Noetic partners, Noetic means we're rational and we're not, our approach is we want to do the best thing, not necessarily the perfect thing. We want to make sure the data is fit for use and then we want to partner with our clients and we want to make sure our clients reach a level of maturity that they haven't reached before. So we begin with this, we have a model, we call it the Noetic Master Model and it's based upon our experience at the biggest banks in the world and it's a model that begins with the concept of parties. Who are the parties? And I think our clients who've decided that the model works for them include some of the largest banks and brokers and exchanges in the world, have decided to use the model in part or in whole to understand the events, the parties and the products that get transacted. Our model is technology agnostic. It will run on anything you like. If you're a Windows guy or a Unix or a Linux guy and you want to run Oracle or SQL server. But our products are designed to help our customers understand who their customers are, who their vendors are, who their counterparties are, who are their regulators, who are the owners, who are the people who need to know about things and then what are the relationships between those parties? So I think what we bring to the market and to our clients is a better understanding of who they are and where they are now so they can make decisions about where they want to go. Financial services organizations are big IT shops in a lot of ways, right? So a lot of your clients are building out data factories. They've got this data pipeline. I think of fraud detection and how that has changed. Gone from sampling, right? And then maybe getting a call from your financial store letter six months down the road. Maybe you got hacked to, now you're swiping a credit card and you get rejected in near real time. Absolutely. Is that type of analogy or example of the sampling to the, sampling's dead in that example. Can that help us with regard to this overall data transparency and data quality problem? I think it's all part of the bigger picture. I think we need many types of people involved in the process. I think the thing that most excites me is that the tide is turned in the industry, in my view, from a concern about technology, which five years ago, who had the fastest, who had the bestest new thing to the content. What is it that we're doing with this security, with this swap, with this counterparty or this group of counterparties? Who are we doing it with and why are we doing it with them? And it's allowing decision makers to make better decisions. So I think IT, and this conference is all about the new role of the chief data officer or the data czar. It's a role I've had back when it was very contentious. IT didn't want us there because that was a space they felt they owned. Now it's a space, I think, that's legitimate. And the COO and the CFO want someone focused on data quality and data architecture. So the CEO is driving this? CEO, CFO, COO, these are the people who hire us now. Well, the CFO certainly has always been involved from the standpoint of, you know, they always say the single version of the truth. Yeah. You know, post-NRAW and et cetera. But that CDO role takes us beyond the sort of financial domain. Absolutely. Into a lot of unstructured data and marketing. Absolutely. You know, the CFO I see is interested in financial risk. As a CDO, I'm interested in my clients who are interested in operational risk. Like, what's going to happen today? And business value. And transparency. Absolutely. All right, good. Well, Justin, thanks very much for coming on The Cubes. Pleasure meeting you. Thanks for the time. Nice to see you. All right, Paul Gillan and I will be right back. Thanks, Paul. We're live from MIT Information Quality Symposium. We'll be right back.


Yankees Red Sox everything what we would expect in their series opener is the Yankees when it's 76 and 10 We can talk all night about Aaron judge and we will homers number 56 and 57 McCarlis on the pregame you spotted somebody else Cleber Torres the at bats getting better only had one hit tonight But that hit came in the top of the 10th and it changed the game. Well, yes He had one hit but a very important one and at the end of the day He was able to put good swing on the ball nothing to show for early in the game But in the 10 he was able to hit the ball to right center good singer by family He was able to keep those hands inside and help the Yankees win This was a baseball game guys that reminded me of a boxing match Red Sox punched first Yankees punched back that happened three different times what the Yankees had going for them was they have the guy who Was punched harder than anybody in major league baseball this year and Aaron judge as Bob said those two home runs And then they had a guy whose jab has been getting pretty interesting lately in Cleber Torres That three-run double proved decisive But then they had the guy to deliver the knockout punch and that was Wandy Peralta with a very gutsy call in the ninth inning with The dangerous Devers up there clinging to a one-run lead. He's been on the field for 11 pitches hasn't thrown one slider He says the Devers. How do you like this slider right here? Devers swings and misses and the Yankees get a win that they needed a lot more than the Red Sox The Red Sox are playing for nothing The Yankees are playing to nail down that division and on a night where Cole was nicked for some home runs The rest of the Yankees came back and got the win


Hello and welcome to the session. In this session we discuss the following question which says what is the degree of the following differential equation given as 5x into dy by dx whole square minus d2y by dx2 minus 6y is equal to log x. Before we move on to the solution let's see what is the degree of a differential equation. We have degree of a differential equation is the highest power of the order derivative in it. This highest power is also a positive integer and also the degree is always a positive integer. This is the key idea that we use for this question. Let's proceed with the solution now. The given differential equation is 5x into by dx whole square minus dx2 minus 6y is equal to log x. We written as d2y you know that the degree of the differential equation is the highest power of the highest order derivative in the differential equation. So in this given differential equation we have that d2y by dx2 we know that the highest power of this highest order derivative is therefore we say that 1 is the degree of the given differential equation. Let's complete this session so we understood the solution of this question.


Stained glass windows have decorated religious buildings for years, embodying the stories and lives of biblical times. The windows in the All-American Chapel also provide stories, but the times are more recent and some of these characters are still alive today. I have known veterans who have served in most of them. You include, in my younger years of the 82nd, some of the World War One veterans who were still around. A new stained glass window dedicated to the global war on terrorism was donated to the All-American Chapel and a ceremony held on Fort Bragg. It joins other windows that commemorate major conflicts and humanitarian missions the 82nd Airborne Division participated in. These windows are more than just stories. They provide a link to airborne history, spark memories amongst veteran paratroopers, but most importantly, hold great sentimental value. These windows just represent the 82nd paratrooper and their families, you know, past and present. You can't help but to connect with that. And it's another way of saying to those families and the paratroopers especially who have given the ultimate sacrifice, hey, we care. Our sacrifice will not go unnoticed. If the eyes are truly windows to the soul, then looking through these windows provide a glimpse into the essence of the 82nd Airborne Division paratrooper. For Eye on Bragg, I'm Army Sergeant Donis Williams.


Everybody forced here ripping 2022 flawless football hobby two box case number 18 Random teams. Let's do the random right now get right into it. Good luck everybody. Thank you for joining nine times all the nine one two three four five six seven eight and nine Kuniaki T down to or in W and the teams here all of them nine times one two three four five six seven eight and nine Vegas down to the Rams Move it all over here Read everything off All right, Kuniaki Raiders Joe L Saints Ryan V Jags Lee M Eagles Jason H Panthers Andrew M chiefs Jason H Ravens Michael M Cowboys Daniel R Packers Steven you Bucks Aaron M Colts Robert as Jets Jason L Bengels Shawn M Patriots Phil K Vikings DW Chargers Van L Titans Jason a Bears Van L. Bills Josh W Falcons Jason a Broncos Brian S Niners Jin Wei with Texans Joel B. Dolphins Matthew M. Cardinals Alexandros Lyons Brandon S Browns Peter M Steelers Michael R Giants Nicholas P Seahawks Frank L commanders at Oran W with the Rams All right, here come your results Sam sorry, I was scratch-wise. That's why it looks so weird. Oh, sorry if they go Also, if I move my arm out of the knock this camera over like Good luck y'all Find those results results quick link bottom of the website any time Well, really blurry there for a second. I way out of focus for some reason Since roll on chat at this time we know We know all right Interesting This will be fun Okay, I see I see I see it's a big good time right here guys. This will be fun Dual patch rookie going to the bills James Cook 15 to 15 Patriots Mike Haines dang dude didn't even those in this patch number to 20 is Gino Smith Seattle 7 of 20, which is his jersey number 25 is Kenneth Walker the third rookie for Seattle and to the ink now We've got a distinguished patch auto for Buffalo Thurman Thomas number 10 of 20 You're running back and old running back in this This is sick rookie dual patch auto one of five Johan Dotson jersey number as well as a laundry tag on the top patch Washington great hits That's sick. That'll look fantastic in a mag With a latent sticker of course. Oh It's Sam's boy. You got a Daryl green auto for Washington 7 of 20 Another autograph here coming up as flawless flyers three of eight quarter L Patterson for the Falcons That's what I was thinking Chris Saints legend Aaron Brooks flawless flyers of CPAT and a Bruce Matthews auto 20 of 25 Oilers go to the Titans Okay, so There were three relics in the inner and you guys are gonna see why in a second here diamond guarantee We'll start with a desert writer rookie quad patch or quad relic Two of 20 for Atlanta rookie Ruby Gem at 13 of 20 is sauce gardener for the Jets One nice rookie so far We have dual patch 12 of 20 a writer and London rookies there writer in London Fourth and case card Tom Brady diamond gem four of five champions for Tampa Bay Bucking ears nice Brady Gem card The fourth in case card and the fifth in case card is rookie dual patch auto 7 of 25 Desmond a writer Atlanta gorgeous writer So just bunch of bonus hits there pretty much Yeah, five in case cards Plus a normal amount of other cards, which is extra relics essentially Extra gems extra patches every sport does have an Aaron Brooks. That is strange. It's hockey having Aaron Brooks That's good stuff right there awesome writer for Atlanta by the way like to see that is the same thing happening again Yeah, it is. Yeah Ten in case cards in the case That's awesome. I don't know if I've ever seen I've seen that before in a one box I don't I've never seen an entire case with You know extra and cased cards, but I've seen that in a one box before It's like that. I think it's by design. I think patch card 7 to 20 thermon Thomas It looks like the last one they got like ah, we got a yeah, look how many cards we got left How many briefcases we got in crap Counted wrong.  You got ed read dual patch to five for the Ravens So it's kind of a trend then John. Yeah, I'm not totally surprised. I mean it's extra gems extra patches It's not like anything crazy, but it's extra hit so One of 15 three color patches breeze the beast rookie for the Jets Not all there are be eyes. It's not a one Carrying Pretty good man patch auto is Bernie Kosar 10 of 10 for Cleveland Next one's nice. We got a rookie frame signatures three of ten Drake London the Falcons are killing it Gotta see who has Atlanta here Atlanta is Josh W Josh W is on fire right here man three attempt. We'll get the London Mags Got a gorgeous looking Barry Sanders one of ten on the flawless achievements auto That sapphire color match nice Barry that too We've got patch auto for the commanders is Antonio Gibson commanders doing well. I have a lot of hits Gibson is game war and game war and patch auto for the commanders Yeah, Chris we got a bunch of person's in queue already So anything ordered now will go tomorrow night follows flyers out of Deontay Johnson 25 Steelers Again guys, if you order the past few hours, it'll go tomorrow night. I still got another three breaks after this one Diamond here and see Sapphire 1 of 15 Stefan Dix for the bills Sapphire 2 of 15 Jerry Rice Niners Rookie patch Kenny pick it to 25 for the Steelers Nice jumbo rookie flawless patch here. Got a Jamar chase patch card 10 of 15 for the Bengals We go bangles scuff on the mag big scratch on the mag unfortunately three-color jumbo patch Last card of the break is a Jerry Rice greats auto 15 of 15 San Francisco On-card auto of the goats that will do it everybody That will do for flawless case 18 19 is coming up right after this


Parents in Wheaton have been urged to share medical history with their gynecologist or urologist in order to address infertility. These advice was given by a gynecologist at an event organised to help boost fertility among couples. Over time the incident of infertility has heightened by lifestyle, infections and other unclassified causes. In Nigeria infertility comes with stigma, a very prominent one among women, that this is one of the reasons for assisted reproductive technology which has helped in conception. What God allows us to do, we will know more in another 5, 10, 15 years. I believe itself is less than 50 years, so 50 years ago people didn't know there was any way to have children apart from natural conception. But when you don't have one in the science world, more people are now able to have children. So, if it is unexplained now, it will not remain unexplained. Test rate is about 20-25%, you know, so out of every 4, one is successful. That's the world standard all over the place. So when we do 40, we harvest about 9, maybe 10 babies. If we are lucky we have a few multiple baths. We may not be able to do 40 every year, but at least we do 10, we do 20 as much as the resource that we have. However, experts say young girls need to understand the complexities of adulthood and reproductive education. During the International Day of Women, we set out to secondary schools, which the theme of it was, I don't listen to adulthood, teaching them about their reproductive health so that, you know, whatever would cause infertility in the future, they can begin the preventive measure. Hello, hope you enjoyed the news. Please do subscribe to our YouTube channel and don't forget to hit the notification button so you get notified about fresh news updates.


Hello there, I'm Sandy Alnok and it is Galaxy Week in my world and today I'm going to paint a bit of a fantasy painting, part one. The reason it's Galaxy World in my life right now is because I just launched an intermediate galactic watercolor class. So you're going to see lots of galaxies on my socials all week long to let people know about the class. It's taught in near real time, I mean I'll speed up the drying using the heat gun and stuff but the painting itself will all be done in real time as opposed to today's video which is going to be sped up just because it's YouTube and I get a lot of painting to do in this particular work that I'm creating today. But the class is available now, links in the doobly-doo and I'll show you a little bit more about it later and talk about it a bit during this video as well. A few sky color options. I have been painting galaxies for a couple weeks now trying to figure out what is the best color for the background because I like these epic skies and creating a lot of drama and so these are four options, I'm linking them in the supply list but for the class you don't have to have them all but I thought you might like to see the differences between them in the results that you get and Indigo is kind of my go-to I think out of all of these I really do like it a lot. So masking, I'm using masking fluid here created my balloon in the foreground and I'm using a cheapy brush, I dipped it into some dishwashing liquid to protect the brush slightly and then started painting. The stuff is orange in this jar, this is the Grumbacher Misket and the cool thing about it being orange is you can see where you've painted it, which is nice because when it's white you can't quite tell unless you look at an angle and that sort of thing. So to paint a spiral galaxy this is different than what's in class as well because in class I teach you how to do irregular galaxies, they're like shaped in any which way that's where they're super forgiving. A spiral galaxy has more structure to it because of the way that it spins so it's not nearly as forgiving. I may do a part two to the galaxy class, I might have to do a second one because I'm practicing now how to do these spiral galaxies and elliptical galaxies and just lots of different shapes. I don't really know how to teach those yet so you're seeing one of my practice ones here. And what I have decided to do is paint all the base colors first, all of the brightest colors and your mind will think of those as being the colors on top but that's not actually the way that I'm painting it, I'm painting it in the reverse. So just putting down all of the colors so that I have that brightness and one of the challenges with doing it this way is making sure that your colors are bright enough before you put the darks in because the dark colors do two things. One is they'll make anything that's light pop. That's one of the reasons you want to have dark contrasting colors but it also can weaken the colors that are there because even though they look bright right now, they will soften. They're going to soften by the fact that water colors lightens as it dries but also by contrast because the more darks you have, it's just going to temper everything because color is seen in relation to everything that is around it. So here I'm going to start putting in some really dark colors and this is the Indigo. It's got a bit of a bluishness to it but it also has a nice darkness as well and then I'm adding a little bit of black in the far corners because that gets like really, really dark and really, really rich. Down in the bottom section here by the balloon itself, I decided I wanted to have a little cloud of light color because my idea for this and I didn't know if it was going to work out or not was to make it look like this balloon is traveling toward the galaxy. It's in motion so I wanted to have a little magical doodly-doo back behind it or something. I'm not sure like magic dust. Not sure that when you take a balloon out into outer space if you actually have magic dust there but nonetheless, I'm using some thicker pigment going into all that wet paint. I've not dried any of this yet. It's just continuing to be moving and using some really, really thick Indigo to start putting some definition into the rings and just to create some dark areas so that I have something to work with and starting to add that contrast. You can see how it's giving those amorphous shapes of the underpainting a little bit more life. Now I'm going to add more layers of color because I want this outside to just darken and deepen before I put the stars in but I also want soft edges so I'm going to spray to get some of those edges moving and keep them from getting to be too hard and harsh in the painting. It's a challenge to figure out how much water. I wish I had a recipe which I could say two spritzes or whatever is going to be enough but it really depends on your paint and how wet the paper is already, how much water you end up needing and sometimes you'll end up needing two or three coats of the darks. If you mix your dark colors too thin, then they're not going to go in as more than a gray. If you want them to be really black you just need to keep going. So next up is watercoloring the hot air balloon and the first thing of course is to take the masking fluid off and you can do it with your finger or you can use a rubber cement pickup. The one that I have is from 20 years ago back in college, yes I still have some of my college art supplies, I don't throw things away as long as they work and that thing still works. Although I've had to chop off the corners of it because the corners just got too messy and they don't work anymore so mine is shaped a little weird now. I may have to invest in a new $2.48 rubber cement pickup at some point. So next up is the balloon itself and I'm making the light aimed at that far distant galaxy so the galaxy is casting the light onto it and I put really dark colors including that indigo as the shadow color and then just lift it off a tiny bit around the outside edge on the bottom. So there's white where the galaxy is shining but there's a little bounce light around the outside edge because when you're talking about something in outer space the whole front of the entire round object has light on it and there's just a tiny bit that almost curls around the edges so I'm going to get that put in there and then of course the basket with my characters in it and the characters, the identity of them will be revealed in the next video because this is a two-parter, I have another painting to do where you'll see who those two are that are in my little basket so I'll leave some mystery out there for the time being. Now I spritzed the stars on there using a toothbrush and some watercolor grounds and I knew that my hand was going to be in the way of all of this so I kind of did some fake footage of what I was doing with that brush trying to make the spiral arms of the galaxy. This is just an experiment to see if this would work. I think it kind of worked. I've got some ideas on different ways to try it but I'm tapping a flat brush and it's just a cheap brush using that Daniel Smith watercolor grounds titanium white and putting it along the spirals and I got something a little wonky in my spirals because I think they're supposed to spin the same way and mine kind of spin two different directions but you know we'll get over that and then used a tiny tiny brush to add some details because I needed to have the those bags they carry on I have to look up what they're called the bags they carry on a hot air balloon that weigh it down I don't know there's probably a name for those but I hung a few of those on the outside of the basket and added some highlights and shadows to the two figures that are inside and then used a very soft brush that was completely dry with some paint on it to just tap on that little cloud of pixie dust sort of that's behind them and then use the same watercolor grounds as I'm doing for all this white stuff to paint on some details onto the balloon itself I was debating how much I really needed but it needed to be attached I knew that so I painted the white on it got too white it was too bright so I painted over it with some of the blue paint and then added in the white lines down from the top of the balloon each one of those strings going around the balloon leads down into the basket there's a few more from the front side they became too bright so I went over them a little bit of the blue and it's done so there is my silly little fantasy painting and as I said in the next video which is going to be on Thursday this week instead of Friday you will see who it is that's in that basket because it's two figures that we're going to see later so the galactic watercolor class these are the finished paintings that are in that they're all fairly small they're like five by seven and you can do them whatever size you wish of course but five by seven seemed a good size to make these they're a lot of fun I've been having just a blast for a couple of weeks practicing these and learning some techniques and inventing some techniques because there's not much out there to learn from so there you go thank you for joining me hit that like button if you could it helps the channel out share this with a friend and I will see you again on Thursday


Hello and welcome back to The Craft Box Man and friends today. We're on episode 6 of the Wizard101 Death Walkthrough If you haven't checked out last episode, go do that link is probably not in the description, but who cares Go check that out. We finished off Firecat Alley And today we are finishing off the rest of the Wizard City Mainline quest, possibly starting Colossus Boulevard So today we're starting with defeating Foulgaze Between the episodes I did a couple of side quests just to get them out of the way just because they were cluttering Cluttering up my spell deck. I'm not my spell deck. Fool, you dare to defy Foulgaze?  So be it So yeah in between episodes I did a bit of sidequesting just to get that kind of Make quest thing clear a bit just for fun and Yeah We got Death Trap last episode as well. I think it was last episode. Oh No, I got a number between episodes. Yeah, I did enrolment and got Death Trap. So, you know, that's cool. It's pretty lit See you That's basically what has happened and we are going to try and Get the field guard out as soon as possible So In order to do that, we are going to trap blade and hurt Yep Okay bloop yay death trap and we want the blade and Then we will hurt 48 67 Okay Okay, next round we need to hit and Hopefully we kill it in one shot Hopefully not sure we will and if we fizzle we definitely won't But we'll try Oh no Uh-oh this bad This bad this bad is gonna do a bit 200 damage. Oh, no 167 yikes just as well.  Oh, well We need to heal now This might be bad We might die here. You okay. We might be dead. No, we're not dead Relive just Okay, kill yay 400 okay, it's nearly full health, which is good You have no health left. So we'll do that We're gonna save up for Wraith, I think and I'm hit with that just because It's kind of a struggle Okay, you're dead hopefully yes, you are sweet Okay, just foul gaze left that is good. He's got four pips though, which is not good But we're gonna proceed Okay Okay, that's fine. It's not too bad hundred damage. It's kind of bad actually 420 health, that's quite great Oh, no, I don't know. I don't know how are we gonna do this? Might as well. Okay. He fizzled that's good. I passed Pop up.  Hopefully.  I might be dead. Just he passed. Don't fizzle. Don't fizzle. Don't fizzle. Don't fizzle That's what you call an insane clutch 15 health. Wow Please kill. I should know don't worry. We've got health back. It's fine. Did that kill? It didn't even kill 26 health Oh my Just as we just as well. We got that health back a Okay, this hopefully kills it doesn't I'm gonna be angry They have 26 There's two health left. No, he passed anyway, so I mean, that's good That's kind of a good clutch as well. Okay. Well, that's that done Finally That was a struggle. But cool. We're gonna go to commons No, no, no, no, no, no, no, no Okay, and we are going to talk to Ambrose and see what he says this time What do we need to do next You have defeated foul gaze and found the tower key great job young wizard now we can get down to work My reading of the archives confirms what I suspected these invasions are being laid by the wraith Lord Nightshade I believe he's working for Malistair who recently stole seek out Lord Nightshade young wizard and recover those stolen books He's hiding in the haunted cave off Triton Avenue. We must have those books returned Hopefully Malistair left them with Lord Nightshade Okay, I will be back once I am over at the haunted cave Okay, I am here. Hello. Let's go and please will you come with me lady?   Let us seal your fate Okay, let's do this Let's just put in another pixie just in case just in case So basically I'm gonna do what it did last time except slightly different. I'm hopefully not dying because that would be bad Already a hundred down that's great start great start 48 down, which is good How much do you have left you have 347?  He's half just good got anyone back with full health now. I think Surely not. Maybe we are. I don't know. I can't mess Well, we might as well do this just because I'm not gonna use him any other time Might as well Okay, really that's unfortunate Unlucky Okay, that's fine To me too What is this? Oh, no, it's not 29 how much do you do over 67? What that's a bit OP that's a lot of damage Oh, this could be bad. He's gonna bench you soon. I just know it Okay, 108 finally you do max cheese and How much after you have 76? Well one more of you kills. It's like that's good She's not unless it does the lower in that way.  Okay, sweet one left We're gonna heal Because we can actually we can't So I'm going to trap Probably a good idea Oh We might die here.   Thank you Fuzzle next round as well plus or pass That'll be great. Thanks. Okay. Yo, yo, yo, yo, yo Thank you. Fuzzle fuzzle fuzzle fuzzle fuzzle fuzzle Fuzzle rip Do 60 60 60 60 60 60 tank it tank it. No Oh well I'll be back once I am Finished. Okay. I am back We are just on the final legs of this battle We're in a bit better The drawers were actually good this time. So yeah Hopefully if I don't fuzzle we should have won and no fuzzle which is good. So yeah, this should be the battle over Yeah, there we go perfect 44 damage amazing You find a journal and a mysterious skeleton key Okay Well, that is that done So yeah, there's a brain in the jar here always get that it's fun So, yeah, let us head back over to the commons and we will finish off this Okay, and let's head on into Mara Lambrose You Have defeated Lord Nightshade the Wraith young wizard Perhaps now we can restore order to our fair city You show the headmaster the journal and mysterious skeleton key key Interesting this journal is not one of the stolen books But it could give us a clue as to Malastair's whereabouts The journal you recovered speaks of a hidden door behind the waterfall at Rainbow Bridge Could this be the place? I'm not the door with a skeleton key and investigate what lies beyond Beware of what may lay in wait. I fear Malastair may have hidden something sinister behind that door Okay, we get a new spell which is cool But let's go head over to Rainbow Bridge and see what is beyond And find out what happened What do you say Your training is paid off. I could teach you a new spell now come see me when you're ready Let's go behind the waterfall And find out what's down here and we're on night side. Yay Okay Let's go. Let me talk to Dworkin Dworkin Dworkin Dworkin, hello Hello there wizard My name is Dworkin It's been a while since I've seen any students Curiously no one comes to the school anymore Not since Malastair left what? The death school has fallen below the rest of the Ravenwood campus. That does explain everything I suppose I should get out more often Okay, he can teach us Banshee, which is what Malone was gonna do, but you know, that's fine He can do that twice as good So ye let us go and Finish off This wee bit. So let's go Back to Merrill and see what he says. We get another spell And we'll see what that is. I think it's Prison possible or sacrifice not must be sacrifice Amazing. I cannot believe the death school fell into nightside and survived do keep its location a secret I've learned of more mysterious doings through the journal you found Malastair apparently traveled to the world of Krakatopia to find the order of the fang who knows what chaos he sought there Oh young wizard you must use what you have learned here at Ravenwood and travel to Krakatopia I need for you to locate this order of the fang Malastair is looking for a book that they have he must not find it the headmaster Hand you spiral keys for Wizard City and Krakatopia here You will need these spiral keys now go and speak to Bartleby He will teach you how to travel between worlds. I wish you well and good speed on your journey You must find that book before Malastair does if not He'll destroy the spiral and everything with it a future of Wizard City is in your hands young wizard okay so yeah Let's go and start The quest and Colossus Boulevard because that's where we're going next episode so We'll go do that now. We'll do the first couple of Things there and then we'll end off the episode I think there's like a defeating collect or something really soon After we start so I'll get up to them then I think Thank goodness the headmaster send a wizard to aid us we could really use your help Strange creatures have taken over Colossus Boulevard We don't know where they came from but they eat everything in sight. We call them goblas. I Admire you wizards my niece studies ice magic at Ravenwood, but I'm worried about her She said she was doing some school project on Colossus Boulevard But I don't know why she has to do it now Would you go speak to her and see if she needs any help her name is Mindy Pixie crown, okay? Beware young wizard the street you now have access to Colossus Boulevard Contains battles which are handled a little differently There can be more opponents in one time compared to the amount of players participating in the battle be very careful okay, so now we have two people two opponents per one person so or Two for the first one and then one for everyone else. So if you have three people you'd have four in The battle circle if you had two people you'd have three So yeah, that's kind of different. This is what it's like in the rest of the game if you didn't know so Yeah, and it just adds a bit more challenge and I it's actually much easier as well because you do double the amount of things so, yeah That's so sweet of my uncle to send you. I'm so glad you came to I've been doing some ice research for Professor Gray Rose But I had to stop I really need your help Horrible first the goblers showed up and started eating everything in sight and then these evil snowmen They're all over the place. We must get rid of them. There are so many. Hey, I know Why don't you defeat some of them and see if that will chase the rest away? Okay, so like I said, there's quest quite soon. If you didn't know there's a spell trainer down here Who teaches spells in the south's Mildred Farseer? I think her name is she's Teachers were shuffle as well, which is kind of cool. Yeah, Mildred Farseer. Got it, right? She teaches the dispels and Reshuffle on a life trip. So yeah, that's cool Anyway, thank you for watching women to leave a like and subscribe go follow us on Twitter links down in the description below and Tune in next time when we will finish off Continue on and finish off closest Boulevard. So yeah, thank you for doing and remember the craft outside the box