Okay, all right. Good morning and welcome everyone to BC 213. Let's pray and get started. Could somebody please pray? Amen. All right, let's pick up from where we paused last week in our journey through the end times. We are trying to get a sequence, understanding of the sequence of events. And so we talked about pre-tribulation rapture of the church. Okay, and now we are going to start looking at the seven years of tribulation. So we said the rapture of the church will happen before the tribulation. Believers will be in heaven. We said what will happen in heaven. Let me answer some questions on that. Now we're going to say, okay, what is going to happen during the seven years on earth? For this, what I just want to establish is about the seven years. If you go with me to Daniel chapter nine, and here the angel Gabriel is speaking to Daniel. And it gives him an understanding of this seven year period, which is referred to as Daniel 70th week. So we will be looking at the book of Daniel in detail next year. And we study all of the prophetic texts in Daniel. But I want us to just know, see here about the seven year period. So Daniel chapter nine versus 23 to 27. Daniel nine, 23 to 27. Could somebody read it for us, please? Daniel chapter nine was 22 to 27.  Therefore consider her matter and understand the vision. Seventy weeks are determined for your people and for your relationship to finish the translation. To make an end of sins to make the reconciliation for iniquity. To bring in everlasting righteous means to seal up the vision and promise and to join the most vision. Know therefore and understand that from the going through of the command to restore and in Jerusalem and in Messiah the prince there shall be seven weeks and set it sixty two weeks. So he shall be given the king and the world even in the troublesome times. And after the sixty two weeks Messiah shall be done. But not for himself and the people of the prince who is to come shall destroy the city and the sanctuary. The end of it shall be with a flood and till that end of the world this dissolution is determined. Then he shall confirm a covenant with many for one week. But in the middle of the week he shall bring and claim to sacrifice and offering. And on the wing of abominations shall be one who makes this only even until the consumption which is determined is brought out on the resume. So we said here that the angel Gabriel came to Daniel and then verse 24 he says 70 weeks are determined for your people and for your holy city. That means he's saying I've come to talk to you about 70 weeks. So keep the number 70. One week represents a period of seven years. We will prove that and I've given you, I mean in the notes I've shown that that a week which is seven days is equal to seven years. You can see that for example Genesis 29 verses 27 and 28. In the notes you'll see that in Bible times seven days were used to represent seven years. So for example, Laban told Jacob, you work for me for seven days and I will give you Rachel only seven days. What he meant was seven years. So seven days is used to represent seven years in Bible times. So the 70 weeks really is 70 times seven which is 490 years. So then he says from the command verse 25 and the command to rebuild Jerusalem until Messiah the Prince there will be 7 plus 62 weeks. 7 plus 62 is 69, 69 weeks. That is 69 times 7 is 483 years. So from and this is historically proved that from the time King Cyrus said go back, told the Jewish people to go back and rebuild Jerusalem till Jesus came. Historically they say, oh, about 500 some years, 500 some years. But according to what the prophecy is, it will be 483 years. The reason nobody knows it correctly because we are reconstructing. We don't know exactly which year King Cyrus said go back. Roughly about 500 years, 450 years before Jesus this happened. So there was no accurate calendar. So roughly they say, but according to what Gabriel told Daniel, it is 7 plus 62 which is 69 weeks. 69 times 7 is 483 years. So 483 years out of the 490 years is already over. How many years are left? Seven years, seven years, seven years are left. And then Gabriel tells Daniel this seven years is reserved for the end. Okay, so in between, from till the Messiah is cut off till the seven years start. What is it? It's the church age. From the time Jesus died till the beginning of the tribulation, the last seven years is the church age.  So once the church is wrapped, the church is taken out of the way, then the last seven years begin. And what happens in this last seven years? Look at verse 27. He says, then he that is referring to the Antichrist, he shall confirm a covenant with many for one week. But in the middle of the week, he shall bring an end to sacrifice an offering. And on the wings of abomination shall be one who makes a desolate, even until the consummation which is determined is poured out on the desolate. So he's saying, he will confirm a covenant, which is a peace treaty for one week. One week is seven years. So now we start talking about the last seven years. And he's talking about this man who will, you know, suddenly he will have this one covenant of one week and then he will stop sacrifice and offering. Now in the previous chapters, which we will study in chapter seven, eight and seven and eight, Daniel has had visions already about this man. And he has already had information that this man, this Antichrist will stop the sacrifices. So this is a repeat of what is already given in chapters seven and eight. Okay. We are not looking at it. So the background, you know, you may not have it right now, but we will look at it next year. But the point I want to make is Daniel 927, which is referred to as Daniel's 70th week. Daniel's 70th week. What is this? It is the last seven years, which has not been fulfilled. The first 483 years has already been fulfilled. From that time, the Jews went back to rebel Jerusalem till Jesus was crucified. That was already fulfilled. That has happened. So last seven years is left. And he tells us in the middle of the week, in the middle of the seven years, that is three and a half years, he will break his covenant and he will stop the worship that's happening. He will bring an end to sacrifice and offering the offering that's going on in the temple. He'll stop it. Okay. So this has already been given to us in Old Testament scripture. Right. And not just once, many times. We will see in chapter seven and eight that many times it's mentioned that there will be this times, time times and half a time. That is one year plus two plus half, that is three and a half years. It is mentioned many times, several times in the book of Daniel. Okay. So it is with respect to these seven years that we now go to the book of Revelation. Let's go to Revelation, the book of Revelation. What we are going to do is we're just going to go through an overview of the book of Revelation. That means we're not going to read every verse, but I'm going to tell you, you know, I'm just going to give you a summary of these words. Chapters and then next year we will go through, we'll read verse by verse and go through it. Okay. Now, when you read the book of Revelation, our approach is that this book has been written chronologically. That means we stay with how God has given this book. Right. We don't chop here and chop there and mix it, match and throw around. No, no, no. Just stay with how God has given, how John has written it, stay with it. Only understand that there are certain portions, and I will show you well pointed out, for instance, in Revelation 12, there's a portion that looks back at the time when Satan fell from heaven. And then there is a portion, there are portions in the book of Revelation, which are parenthetical. That means there is no judgment being poured out, but it's like almost a pause. There's silence in heaven or something like that. But otherwise it is a sequence of events that are happening one after the other, almost like you're watching example. I'm saying you're watching a movie and it's a story from start to finish. But sometimes in the middle of the story, they may say, Hey, remember this happened there, flashback, right? This happened there. Sometimes they will say it'll show or it might say it might for one person. It'll take just his life, start to finish and, you know, give you that. So we have that. For example, the two witnesses, they are only mentioned in Revelation chapter 11. But the information given in Revelation chapter 11 about these two witnesses is what they will do for three and a half years. That means what they will do for the entirety of the second half. But it's only given in one place in chapter 11 for three and a half years. So this many days they will be doing this. You're with me, right? So it's mentioned, but it says it will cover this whole duration of 10. So you have both flashback and you also have... Like this is the full journey.  Finished. Okay. Other than that, it is just a chronological sequence of events which we will follow. Revelation chapter 1, what God is telling... So John in chapter 1, John at this time is sent into exile. So John is very elderly. You know, we don't exactly have all, but maybe around 80 years old or something. This book is written around AD 90. That means it's towards the end of the first century, around AD 90. Or sometimes AD 96 or 93, 95, something. AD. AD, first century AD 90. So that means in the first century. So John has been banished to the island of Patmos. He's the last living apostle of Jesus. And it's one of the 12th, right? Of course, we know there were other apostles like Paul and so on, but not the same kind as the 12th. John is the last one alive. He's been sent to the island of Patmos. And there he has this vision. So the Lord Jesus gives him this vision, which he writes. And the Lord tells him to write. And at this point... So I want to write these things. So Revelation 1 verse 10, John says, I was in the Spirit on the Lord's day. And I heard behind me a loud voice. So he's in the Spirit and he is caught up into heaven. And he hears the Lord speaking to him. And then he says in verse 11, what you see right in a book and send it to the seven churches which are in Asia. So he's saying, write these things, send it to the seven churches. And then verse 19, Revelation 1, write the things which you have seen and the things which are and the things which will take place after this. So he's saying, write what you have seen and the things which are. That means there are things that are happening right now and the things which will take place. So what you have seen, he's seen the vision of the Lord. Things which are. That means this is what is happening with these seven churches and things which will take place. That means after the seven churches, I'm going to tell you what the future is like. So in chapter one, it is John's vision of the Lord. Chapters two and three, it is the vision of the Lord is telling him, this is what is happening with the seven churches. Now, what I want to point out is that these seven churches actually existed at that time. They're not seven church ages that are going to come. So some people will say, oh, each of these seven churches represents a church age. And we are now in the Lava Desi and church age, the last church age and all that. But that's not what Jesus said. Jesus said, write the things which are. Write it to the seven churches which are in Asia. Send it to them. At least those churches were there. So we shouldn't take the seven churches to represent seven church ages. That's not it. They were literal churches existing that time. But we can learn from all of the seven churches. We can learn what Jesus found wrong with them, what he told them, what he told them to correct. These are things we can learn and apply from all the seven churches. We don't have to say we're only in the seventh church and we are in that church age and all of that. We don't have to say that. So let's go to chapter four. So in chapter four, verse one, could somebody read that, please? First of all, I will show you things. So chapter four, verse one is the transition. That means this is from here onwards. I'm going to tell you about the future. Right. So chapter one is things that you have seen. Chapters two and three are things which are, that means these chapters two and three were things that happened during John's time. Chapter four, verse one onwards is things which must take place. It's going to happen in the future. Okay. So chapter four and now next year, again, I'm saying next year, we'll read everything verse by verse and I'll explain. So now I'm just giving you quick summary of each chapter. In chapter four and chapter five, we are seeing, chapter four, we are seeing worship taking place in heaven. We are seeing the 24 elders. They're on either side of the throne. Worship is happening. They are bowing down. They're casting their crowns. And there are lots and lots of people are worshiping a lot. Okay. So this is a view into the future. Is worship happening in heaven right now? Yes. But this is a vision into the future. That means in time to come, these 24 elders will receive their crowns and they will be seated around the throne and all the saints will stand before the throne and worship. Meaning it's things to come. It's going to happen, right? Four and five. So in chapter five, while worship is happening, there's a problem. Problem means there's a question. Who can open the scroll? There's a scroll. In the scroll are written all the prophecies that are waiting to be fulfilled. Who can open the scroll? That means the opening of the scroll is symbolic of saying, let these things start to happen. Who's worthy to do that? Jennifer, who's worthy? It's like almost nobody's worthy. Then comes the Lamb of God, the Lion of the tribe of Judah. Then they begin to worship. Oh, this is in Revelation 5.8. You, the Lamb is worthy. The Lamb is worthy. And so Jesus comes. We know the Lamb of God, the Lion of the tribe of Judah, that's Jesus. He comes and He takes the scroll and He is ready to open it. Meaning now these prophecies will start being fulfilled. But in chapters four and five, what is happening? There is worship in heaven. All the saints are there worshiping God. So what we say is because He has said this is going to happen, we are saying that chapter four and five is a picture of heaven after the rapture of the church. The redeem, everyone has been taken up into heaven. And we are standing before the throne and we are worshiping the Father. The elders have received their crowns. That means the rewards. Everyone else is there worshiping. And at that time, after the rapture of the church, the beginning of the last seven years takes place. The scroll is opened. Those prophecies are going to be fulfilled.  Yeah. Go ahead. Lamb of God will come back. So like it. So it seems like the rapture of the Lord comes and starts this thing. Yeah, so it doesn't mean Jesus is not in heaven. He's already in heaven. He's already there.  Because you know, remember Jesus said only the Father knows the time. So at the right time, Jesus has come for the church. And when the Father gives the okay, it's the Lord Jesus who says, let these things begin to be fulfilled. So the Lamb of God opening up the scroll, coming to open up the scroll and to say, let these things begin. It's symbolic of Jesus saying, it's like Jesus striking the clock if you want or the bell for these prophecies to start being fulfilled. He's the one who opens the seven seals. That means, okay, this is going to happen from now on. So the seven years, what we know is, and as you go to the book of Revelation, the seven years there'll be pre-sets of seven judgment seals, seven seals, seven trumpets, seven bolts. Judgments are coming. And it's Jesus who opens it and says, okay, start. So then from chapter six, verse one, start. The first seal is opened, first judgment, second judgment, like that it keeps happening. So what we are saying is, because the Lord told John, John, this is going to happen. It's things to come. It's in the future. And at some point, the Lamb of God will take the scroll and he will say, these prophecies, it's time for these to be fulfilled. And then on earth, these things will begin to happen. Okay, so that's how we understand chapter four and five, worship is happening. We will read all this and I'll also explain there's a lot of symbolic things of which we are not going into. Go ahead. See the scroll angels crying like who is worthy to open the seal. It's in chapter five. And before the chapter two, chapter four is where God is being worshipped, like Jesus, it's on the throne. Yeah. So, but if we see, even now Jesus was in heaven, even now he was being worshipped, it's happening. So it's like... See part of Revelation five when it says, you know, who is going to come and open up the scroll and this whole thing. I think the emphasis, so whether this is going to be literally happening, there's, oh, nobody knows, you know, that somebody's going to cry out or whether it's expressing to us that the time has come. And there is a sense in heaven, a sense of wonder in heaven saying, who is going to come and take the scroll? Because none of the angels, anybody else is worthy and there's a sense of awe and wonder. And then Jesus comes and opens the scroll, right? So whether what we're seeing here in Revelation five is an expression of that happening as opposed to just literally somebody saying, oh, we don't know who's going to open. Not in the sense of a lack of knowledge, but more in the sense of awe and wonder. So that I think is the main thing that's happening in Revelation five. That means who is this great one who's going to open up the scroll? And then Jesus comes forward to take and say that now the things are going to happen. I think it's more from the awe and wonder of the moment rather than, oh, we don't know, nobody's here. Not that kind, but more in this very solemn moment, awesome moment. And into that moment Jesus steps, showing how he's the one who has complete authority to do this from that. I think that's what it captures for us in Revelation five. So remember, everything is being seen in a vision. It's not like this is happening, but he's seeing in a vision. God is showing to John through pictures and visions. What is going to happen? So when it says I see a lamb and a lion, it doesn't mean there's one lamb running in the throne room or some lion. It's representing, it's a picture. John recognizes this is Jesus. It's not like one lion is coming. Lion of Judah. It's Jesus. But he's seeing it as a lamb. There's a picture of a lamb or a picture of a lion, but it is really Jesus coming. So there is both the prophetic imagery that he's seeing. Remember, it's all a vision. It's not literally happening. It's a vision. And in the vision he's seeing this, but what does it mean? It means the Lord Jesus is doing this. He's coming and taking the scroll and opening. But it's being conveyed to John through the prophetic images. So John is able to interpret this immediately in his mind. Because he understands who the Lamb of God is, who the Lion of the tribe of Judah is. So when he says I see seven spirits and seven eyes and seven, it's talking about the omniscience and the omnipotence and the omnipresence of Jesus. So there are some things that we have to understand is literal. And there are some things that we have to understand as prophetic images, which have meaning, especially to the one who was being spoken to, which is John. So he understands that, those images. But you also must keep in mind, and as we go forward in the book of Revelation, that if the Lord is going to speak to John about things that are going to happen 2000 years plus into the future, how will he communicate those things to John and what will those things look like to John? So imagine 2000 years ago, somebody saw an aeroplane. What will they think? A bird is flying. They won't know it's aeroplane. They'll write down as a big word with a big nose, made a lot of noise. That's what he'll write. I saw a bird in a long nose and two wings in the front and two wings at the back and a long tail that went up. That's how he'll write. He won't know it's an aeroplane. Because God is showing him about things into the future, but to somebody who has no context. So you will see in some of the passages in Revelation, right? He sees and he writes, he describes some things. I see very strange things. Some things are flying and there is smoke, like yellow, sulphur and red colour. Smoke is coming. So for us today, we could say maybe that's a big bomb that is dropped and he's seeing all this happening. But for him, they didn't have a bomb in those days and no context. So he'll only write, I saw big smoke and I saw this colour, this colour, this colour and literally it's written there. So God is showing things way out in the future. What John is writing, for which John has no context. So he'll just record what he sees. Plus, there are some things John understands, meaning pictures like the lion or the lamb, which he understands. So he'll say, I saw the lamb of God, the lion or the tribe of Judah, those things he understands. But God is using prophetic images. Okay. So chapter 6, so in chapter 6, so from chapter 6 till 19, end of 19, it is all things that are taking place in those seven years. In those seven years. So chapter 6 to chapter 19. It looks like so many chapters, but it is taking place in a period of seven years. And the middle of this is chapter 11 verse 1. So if you see, if you go with me, chapter 11 verse 1, verses 1 and 2. It says, then I was given a read like a measuring rod and the angel stood saying rise and measure the temple of God, the altar and those who worshiped that. But leave out the cord, which is outside the temple and do not measure it. For it has been given to the Gentiles and they will tread the holy city under foot for 42 months. 42 months or verse 3. And I will give power to my two witnesses. They will prophesy 1260 days, 42 months or three and a half years. So chapter 11 is the middle of these seven years. So very clear. Okay. Chapter 6 verse 1 starts showing us what is happening on earth at the beginning of the tribulation. Chapter 11 verse 1 is from there on it is talking about the second half of the tribulation till end of chapter 10, first half. It's easy to mark it because he says correctly there chapter 11 verse 1. I'm telling you what is going to happen in the 42 months, which is three and a half years. So that means, okay, he's from now on is three and a half years. That means three and a half years over. So chapter 11 verse 1 is middle of the tribulation. Got it. So it's easy for us to understand. Oh, from chapter 6 to chapter end of chapter 10 is the first half of the tribulation. Chapter 11 to chapter 19 is second half of the tribulation. So what happens in the any questions from online class? Irran's following any questions? Okay. So what do we say in chapter 6? Chapter 6 verses 1 and 2, chapter 6 verses 1 and 2, there is the opening of the very first to see. So we said there are three sets of judgments, seven seals, seven trumpets and seven bowls. The seven bowls are the most terrible. That is like a set of very, very terrible judgments. So we begin with the seven seals. When the first seal is open, we see the Antichrist coming. So how do you know is Antichrist? Read it. Now I saw when the lamp opened one of the seals, that's the first seal. And I heard one of the four living creatures say with a loud voice like thunder. Come and see. And I looked and behold a white horse. He who sat on it had a bow and a crown was given to him. And he went out conquering and to conquer. So you're seeing somebody coming riding on a white horse. Now here again, remember the horse horses and these four seals was four seals. You see horses, horses are symbolic of speed and strength. So don't imagine Antichrist will come riding on a horse, not literal. Okay. This is again being used symbolic meaning it's prophetic images. And this man coming riding on a white horse, he has a bow, which is talking about his military strength. He has a crown. He goes about conquering and to conquer. That means authority is being given to him. Dominion is being given to him. So this man riding on a white thing, anything. All right, network connection. Okay. So Daniel, yeah. So this is in connection. This kind of is parallel to what we read in Daniel Leppenberg for the Antichrist. He has authority over many countries. So he comes riding on a white horse. Now, why are we saying it's the Antichrist? Because the Lord Jesus comes also riding on a white horse. This is Revelation 19. He also comes riding on a white horse, but he comes as king of kings. Lord of Lords. This, yeah, that's what's figured. Meaning, I don't think you'll see, come on, come on, come on, white horse. Come on, come on. You know, yeah, it's a picture. It's talking about him coming with strength and glory. But remember Acts 1, what the angels said, you will see him come as event. Did he go on a white horse? No. Acts chapter 1. Remember the angel told him, told all the disciples, this same Jesus that you saw him go, will come in like manner as you have seen him go. Acts chapter 1 verse number 11, correct. He will come in like manner as you saw him go into. Well, Jesus in his second coming is going to come and land exactly on Mount Olives. Zechariah chapter 14. So where were they? They were on Acts 11, Acts 11, they were on Mount Olives. He took off from there. He ascended from there. He ascended from there. And the angel saying he will come exactly like that. Zechariah 14 says he will come and land on Mount Olives. Okay. So Acts 11 is referring to that coming, the second coming. He'll come back on Olives. But as in the secret coming, he's not landing anywhere. He's in the clouds. He will not come to the ground. Yeah. So Revelation 19 says, you know, he comes and all of us riding on horses and all. I feel that it's going to happen so fast. Horse or no horse will come so fast. You know, I think it's a picture because when Enoch saw it, he says, I saw the Lord coming with thousands and tens of thousands of the saints. That time he said he didn't see any horses or anything. Okay. I saw the Lord is coming, thousands and tens of thousands of the saints. So, but what I want to say in Revelation 6.1 is it is a contrast, right? This man is coming on a horse, but he's not the real Christ. He's the Antichrist.  Doesn't mean literally there'll be sort of, you know, it's prophetic images, right? He's speaking his word. His word is so powerful, right? And so on. So Revelation 6.1 starts with the Antichrist coming on the scene. And remember when he comes, he comes as a man of peace, white horse comes as a man of peace. He sets up a covenant of peace for seven years, Daniel 9.27. Covenant of peace for seven years. But we know in the middle of the seven years he will break it. But he sets it up first as a covenant of peace. And then immediately we're seeing one after seal after the other. The second seal, and we're not going to read this now, but we will, you know, we'll do this next year. But just know of you, there's conflict, there's, you know, there's, there's a lot of war on earth. When the second seal is opened, a great sword. Third seal, Revelation 6, verse 5. There is famine on the earth. Food is depicting famine. Fourth seal, Revelation 6 and verse 7. There is death, death all over the earth. And then fifth seal, you see that there are a lot of people are being martyred. It says Revelation 6, 9. When he opened the fifth seal, I saw under the altar the souls of those who had been slain for the Word of God and for the testimony they helped. So will people become believers in the tribulation? Yes. Why? How can you say that? Because look, it says here that many people are being killed for the Word of God and for the testimony they helped.  They're going to be martyred. So you say, I see so many people are being killed, right? And they're coming up to heaven. They're giving, being given white robes. They should rest a little longer. And they are being killed. Lots of people are being killed. Revelation 6, 9 to 11. So that is the fifth seal saying that so many people are martyrs. Verse 12 onwards, Revelation 6, verse 12. Sixth seal and there are lots of disturbances in the heavenly bodies. And this is the fulfillment of what Joel said. Joel said, you know, I'll pour out my spirit in the last days. And I will show signs in the heavens above and on the earth beneath. So what signs are happening? It says the moon, this is in Revelation 6, 12. There's great earthquake. The sun became black. The moon became like blood. The stars of heaven fell to the earth as fig tree drops its late figs. And people were crying out, telling the mountains and so on. They, they, they're crying to the mountains fall on us. And they want to hide from the day of wrath. Okay. Now remember in 1 Thessalonians chapter five, Paul said, he will keep us from the day of, he'll keep us from the wrath to come. What is it? It's talking about here. Oh, great is the day of his wrath for the, for the great day of his wrath has come. He'll keep us from this day. So we won't be there. Okay. But this is also fulfillment of Joel prophesying the sun being turned into black, the moon and blood red and all those things. So it's happening now in the tribulation. Yes. Regarding calling communion. So when the people get saved on the tribulation time, so calling communion, they'll have like they'll participate. Yes, yes, yes. Yeah, I think everything will be there. So imagine, actually there may be more belief, more strong than us. Right. At that time. So just imagine after rapture happens today, they hear us and they are, what are these people talking? They make fun of us. What are these people? The Bible and a, but we are, we are, we are preaching. We are, we are, you know, so many Bibles are being printed, lots of things of that. Then suddenly rapture happens. We're taken out. These people are going to believe. They'll start reading the Bible full thing. They'll download the apps, everything, whatever. They'll watch every video. They, you know, all these things we're leaving behind. So they're going to be very strong. They'll get together for prayer. We'll see in chapter eight. There's a lot of prayer happening. Lot of prayer. So big prayer movement happening on earth. Prayer coming up before God. People are going to pray. Going to seek God, but no hope. Because they're in the tribulation. And what will happen is many, many lives. We read many times. We are reading in chapter six. I will read again chapter 12 and also other places that chapter seven also. Many souls will be killed. Many will be killed. Chapter 14, one of the angels are saying, don't receive the mark. It is better to be killed than receive the mark of the beast.  It's okay, but don't receive the mark of the beast. That is the condition. Okay. So let us take a break. We'll come back. Thank you.


Hello, thank you all for joining us at another wonderful car hacking village courtesy of Defcon 30 recovery mode. My name is come out. And today I'm going to be talking a little bit about Bluetooth and the RF com protocol in particular, and why you should consider it next time you go on a car hacking adventure. Before we just get started, I just want to give a quick basic disclaimer. All the views shared in this presentation are my own and do not represent the views of my employer or any other third parties, or she got to get that out of the way. So, starting off with a very simple, who am I, so I'm an automotive cybersecurity technology architect at white motion, which is a subsidiary of the international automotive tier one supplier Morelle. The motion is a special team within Morelle that specializes in automotive cyber security, carrying out penetration tests for our parent company and external companies alike, and contributing to the automotive security industry. Overall by providing car hacking training and legislation or standards compliance. I'm a member of the automotive security research group or ASRG. And I love participating in car hacking communities, so on and so forth, even outside of my professional duties. So I volunteer a little bit here and there. Among my recent areas of interest when it comes to security work. We've got, you know, Bluetooth, which I'll be talking a little bit about today, the USB protocol general RF stuff and reverse engineering the firmware update process for some really obscure Taiwanese controllers but thankfully that's over I don't have to do that anymore. But besides the technical stuff outside the office or garage I suppose I enjoy playing fighting games and cooking. And I also love exploring new places so whenever I get the chance to go somewhere, I always make sure I get lost on surprise before I go home. Let's go over very briefly, the table of contents for today's talk. So, I'd like to say that the overall objective of the talk is, isn't only to talk about the RF com protocol to say but to familiarize you with the complexity of the Bluetooth specification as a technology and highlight how many different ways it can be viewed from a security perspective. To that effect, I'm going to start off with a short recap of what exactly Bluetooth is, including a look at how it's used in vehicles, and talk a little bit about some scenarios or cases, very, very short case studies where Bluetooth has been used to targets vehicles in the past from a security perspective so we'll look over some some past research by other individuals, not myself, that have been more or less prominent parts of our Bluetooth history in the automotive security landscape. After that, we're going to take a closer look at the star of the show, the RF com protocol. And then I'm going to introduce a very simple tool that I made called the RF comrad that you might be able to use yourself in your own RF com testing in the future. And finally, I'm going to talk a little bit about the Bluetooth CTF that will be featuring at the car hacking village this year at Defcon. Excuse me, just a disclaimer, I haven't hidden any flags in the presentation itself. So, don't feel like you'll be missing out on anything if you're not like pink super close attention and taking notes on everything screen shining every every every slide that there won't be anything like that so feel free to just relax and enjoy the talk. Right, so let's get started. You probably already know what Bluetooth is entirely independently of any technical understanding of how it works, and that should be a testament to how widely used it is and that's really great, you know, all end user technologies should be easy to use, even if you don't understand the technical details behind them and Bluetooth is pretty widely used to that effect. It's in your phone it's in your headphones. Maybe it's in your fridge your microwave, probably not your microwave. It's in your coffee maker, and it's almost certainly in your car. But what exactly is Bluetooth so the official definition is that Bluetooth is a common cable replacement technology, right, found in virtually all smartphones computers and many wireless iot accessory devices worldwide. It is designed to simplify short range wireless communications by providing a uniform framework for connecting devices to one another. It operates in the 2.4 gigahertz frequency range which is the same as Wi-Fi and as a result you will get a lot of Wi-Fi chips that are actually bundled together with Bluetooth functionality just because they can use the same radio frequency pan. Of course, like we mentioned, no Bluetooth is using a lot of devices wireless headphones medical equipment sensors interactive lighting, you know even used for basic data transfers between devices you can do file transfer protocol over Bluetooth or so on so forth we'll see a little bit more about that later. And then since Bluetooth low energy came out, especially it's been very popular with things that you would set up in a outside environment something like a, like a environmental temperature sensor or a humidity device to stay on for long periods of time maybe doesn't have access to direct power supply but runs on a battery and you want to save our over long periods of time that's when things like Bluetooth low energy come into play and are very helpful. And obviously, you know, as we mentioned, Bluetooth is pretty common in cars today if it wasn't I wouldn't be giving this presentation here I'd be trying to give it somewhere else. In a vehicle, Bluetooth is usually used by the infotainment system or the head unit or whatever you want to call it right the thing that has all the cool flashy buttons that you can play with and play your music through. Bluetooth is used primarily originally in cars for making hands free phone calls so while you're driving the car you can answer answer a phone call and play it through your your car speakers and microphone. And it's also used to import your phone book from a phone for quality of life you can see you know have all your contacts listed so you can know who's calling you.   I've even seen some phones that or excuse me some vehicles that do a Bluetooth connection can actually let your phone send out a text message right so essentially, you know if I'm driving obviously I'm driving I'm not trying to answer a phone call if I don't have the opportunity you know if it's, especially if I'm going you know down the highway or something I can push a button that will tell my phone to respond to the caller with a text message saying sorry I can't pick up I'm driving right now. And so it's it's you can get very creative with how this seemingly simple application you know just an extension of your phone can actually be used. Right. More recently though Bluetooth and Bluetooth low energy or BLE have been used for more advanced functions and cars so ranging from things like updating the firmware on key fobs there's been some research on the Tesla key fobs and they're from the process over Bluetooth to things like passive keyless entry systems and excuse me we'll look at a case where this was a big target for a security research group in just a second. But before we go into the full technical details, like I said, I do want to go over some of the more notable pieces of research that have come out regarding Bluetooth security vehicles over the last few years so got to, I'm not going to talk specifically about them just kind of kind of run through them real quick, these are very well thought out research pieces and I definitely recommend you go and find the original source material by whoever published them to get the full details on what exactly they were doing but I'll just be quickly summarizing for the sake of this talk. So the first example I want to touch on is some research disclosed by Tencent keen labs in 2020. So the researchers at keen were able to fully compromise the head unit of a Lexus vehicle by using Bluetooth the vulnerable a Bluetooth vulnerability as the initial factor. So the first thing they were able to do is exploit the Bluetooth stack on the vehicle to get some remote code execution. And from there they were then able to, you know, expand their reach of influence throughout the vehicles in the system to establish a Wi Fi based backdoor. The reason for this was Wi Fi is generally, you know, a longer range technology than Bluetooth so this gave them the ability to get their reverse shell as you might say on the car from a farther away range and then they could continue their, their exploration of the vehicle at that point. So they had set up a essentially, you know, some persistence in the vehicle where when it booted up it would actually phone home it would actually connect back to the researchers PC and they could then open a shell and continue exploration and exploitation. So, due to the fact that there were no firmware checks in place to prevent anyone from, you know, flashing unauthorized firmware to other parts of this infotainment system. The researchers were actually able to flash other components inside that unit, and essentially unlock canvas access the canvas was obviously available on the device. However, it was intended to be kind of filtered or locked off so that you couldn't just send and send arbitrary messages at your whim. But because of the ability to rewrite the firmware, due to the lack of firmware checks they're actually able to bypass this, and they were able to kind of expand their reach a bit further. At this point, there are further possibilities to pivot within the vehicle system. There are some diagnostics to potentially reprogram other parts of the car, but the researchers didn't quite go that far in the publication they released of course this will be linked in the references section at the end you're free to encourage to read up their full write up it is incredibly educational. And I think anybody could benefit from giving it a look at the last tech I want to talk about is much more a little bit more recent. It came out earlier this year in May of 2022. So this was some research that was disclosed by the NCC group, after they found out that the passive keyless entry system using Tesla models three and models why I believe are susceptible to relay attacks right. A relay attack is not something new to vehicles right the idea that you can pass the signal from a key fob on to a car and unlock it without having the key fob within the intended range is kind of a theoretical attack that's existed for a while, but these researchers were able to perform this over to do flow energy. So the challenge to getting the attack to work on the Tesla's PKE system was that the key exchange had to be done within a given timeframe there's a good time out in place that's designed to kind of prevent against this kind of really problem because the communications have to happen there's cryptographic information exchanged, and the idea is that all right if there's someone sitting in between these two devices the actual car and the, and the intended users key, right their phone, the added latency of passing the information between several devices may, you know, exceed that minimum timeframe that you have to actually perform these operations and would make it much harder, but the researchers were actually able to figure out a way to do that they would use one cell phone to kind of go near the target human being right the person with the actual phone to unlock the car. They could then sniff this Bluetooth low energy signal over the air and then pass it through over the internet like an IP network just like anything else to another phone that was close to the car. They could actually perform these cryptographic chain checks over the internet, and this you know very close range communication between the two attacker cell phones in a timeframe that allowed them to bypass the latency bounding in place. So this essentially gave them the ability to unlock the car and then the car thinks well I've got the key inside me I should unlock all functionality. So the next step obviously is going to be a room room right so you can break off at the car, and all of a sudden, you know you come back from your shopping trip and your car is missing and what happened. Right, so, again, the link to the actual publication for this research will be in the references section again so I encourage you to go ahead and give it a full look. This is going to be the Bluetooth breakdown I'm going to give a brief explanation of how the different protocols that make up Bluetooth work so this picture is pretty ugly so bear with me for one moment. And it represents a visual representation of some of the different protocols that make up what we know is Bluetooth. And this is important because you know the way I see it Bluetooth is not one protocol it's a bunch of smaller protocols standing on one another shoulders all wearing a big big coat right pretending to be just a one one protocol. But it's actually a technology standard for short range wireless communication. And each of these sub protocols has its own specification. All of these, you know, of which are managed by the Bluetooth special interest group or the Bluetooth sig as it's easier to call it. So this is a group of companies and representatives of these companies that manage the Bluetooth specification make edits to it manage security bulletins etc so on and so forth. And the specification itself is you can actually read it for free it's available online. All the specification itself is managed by the Bluetooth sg the actual implementations of these are not. Right, so this is the source of one level of Bluetooth complexity as a protocol right each of these protocols can be implemented differently. And many of these protocols are implemented on the chip the controller they're entirely invisible to the end user. And so sometimes makes them hard to analyze from a security perspective. And that will give you a better idea of what I'm talking about. So, hopefully things look a little bit nicer now. You can see here let me pull out the laser pointer. We have the bottom part here which is the red protocols these are what we call the controller layer protocols, and up here on top, you have the the bluish ones these are the host layer right. So, the lower layer represents the protocols that are controlled by the actual controller. This means that these functions are controlled by the firmware on the Bluetooth chip itself. And the operating system that's using this Bluetooth chip has close to no visibility into what's going on down there. This is why low level protocols such as the hardware focus baseband and radio layers operate. And as well as the link management protocol have such a bit of like a mystery around them because it's not easy to see what they're doing right because the firmware will be implemented differently based on different vendors of these chips. These manufacturers each their own unique compositions, sometimes different architectures they use special, you know, commands, we'll talk about HCI in a second, I can be quite complicated if you wanted to like first engineer these for example. You know, example companies that make Bluetooth chips, you got Broadcom, you got Qualcomm, Cambridge Intel, these are all different manufacturers you could find that implemented their own, you know, version of the Bluetooth specification on this chip. The middle layer here this purple one because of, you know, as a mix of like the blue and the red is the host controller interface layer. This is a protocol that's used to allow the hopes to communicate with the controller. There is some standardization around how HCI commands are implemented but there can also be vendor specific instructions based on the vendor of the Bluetooth chip again a lot of the stuff is going to be different from vendor to vendor which is another one of the reasons a little bit complicated. I've never used Bluetooth with Linux before, for example, you know you might Google, okay how to use Bluetooth on Linux and one of the first commands they'll tell you to run is HCI config, and that's a pretty standard Linux Bluetooth tool and it stands for you know, post controller interface configuration this will give you information about the Bluetooth controller that you're using right any Bluetooth controllers that are registered on your system, you can see information about them with this command right. The other one is HCI tool, a couple of really useful tools implemented with the HCI protocol right to read or write information on your Bluetooth controller run scans, lots of things you can do with it. These tools work by sending standardized messages from the operating system to the controller to the controller will say oh you're asking for this piece of data okay let me get that for you, and then it'll feed it back up to the operating system. Finally the protocols on the top half of the screen are what we call the host layer protocols these are controlled by your operating system right so the host in this kind of equation is your computer your operating system and the controller is the chip running the other firmware implemented by the vendor right. Depending on the system you're using they'll be implemented a little bit differently so for example there is the blue Z stack right blue Z is the official Bluetooth stack for Linux, but it's not the only one that that that being said. It's used so widely that you'd have to have a really specific you know use case to bother with coming up with your own Bluetooth stack for Linux environment, and it's not seem very commonly so it's not a an exaggeration to say bluesy is on like you know 98% plus of Linux systems that run Bluetooth in the first place. So yeah bluesy is great and then I'll talk a little bit more about that in a bit. In the host protocol pool, we find the logical link control and adaptation protocol I'm not going to say this acronym again because L2 cap is just much easier to say. This is the base protocol in the host protocol pool side and everything else is more or less built on top of it. This you know out of cap is developed to be a generic multiplexing layer of the host protocol stack. It receives information from the higher up protocols, and then passes them on through to the HCI the host control interface which then processes the information to be sent to the controller side of things. Right. Let's take a look at some of the different protocols we have here very briefly. We have on the right we have the SDP right the service discovery protocol. SDP is used to allow Bluetooth devices to learn more about one another someone to devices connect. They kind of ask each other are so what can you do you know you're a you're a phone book server I'm a phone book client I might ask you for some questions. Right. Oh you can play audio well let me see if I can you know street some audio through you this communication and establishment of what devices are capable of is done through SDP. Right. So it's in a very important part of blue communication, because it also give you information about Oh, this service I'm interested in this which RF com channel is it using and we'll talk about our RF com channels that a bit because that's kind of what this talk is about. But again this all ties back to SDP. Interestingly enough, SDP is always unencrypted. It's just supposed to be freely available and you can usually query any Bluetooth device or SDP information so no matter like what the security settings on your Bluetooth device are SDP will usually be, you know, unencrypted communication because it's not supposed to be secret you're supposed to share it with anyone that asks. Interesting. But, and then RF com as you can see here on the left of this of the screen has a lot of different applications or protocols built on top of it you have things like point to point which, you know, can can go into things like IP and TCP so you get like your basic traditional networking architecture built through Bluetooth and then, you know, on top of RF com. You have serial port profile this is the the SPP one right here. You've got Pbap this is the phone book access profile. You have object exchange or Obex vcard FTP. We'll talk a little bit more about these. A little bit more detail, but there's a lot of stuff that can be built on RF com because RF com is built to be very flexible. And a quick look RF com is designed to emulate an RS 232 serial port over the L2 cap protocol as literally as possible. It actually includes features to emulate all nine pins of an RS 232 serial port which is really interesting. And this is true to the extent of the RF com protocol actually specifies this outright so if you open up the RF com protocol you'll see in like the introduction section. Like I say, this document does not contain a complete specification instead references are made to the relevant parts of the gsm 07.10 standard.  So it was designed to allow devices that already had RS 232 capability to be easily ported to wireless applications by simplifying the process of adding a wireless network interface you didn't have to change all that much. And you know, readjust which interface it's talking to and the RF com channel would take all the information that would be sent to a regular serial port and move that over the, you know, the unguided medium that is the wireless communication and that 2.4. It hurts frequency band. So, in a practical sense though, right, the practicality of RF com right don't don't worry too much about the specification yet right that's if you want to read it, it'll be linked in the end right but RF com channels work pretty similarly to TCP boards. So, like TCP RF com provides some basic guarantees for reliability. And it's a point to point connection, you know, communication style right the contrast to this would be something like L2 cap and UDP, where UDP is usually you know, considered connection less but you know L2 cap can be connection based or connection less it actually supports both both types. RF com has way fewer ports available with their, you know they work like ports but we call them channels. I'm not the one who came up with this right it's just the way it is. But whereas TCP has you know like 65,000 different ports are calm only supports 30 channels. The specification states that up to 60 simultaneous connections between two devices are possible, but with only 30 ports to work with you need to kind of be careful. When you allocate RF com channels to your application so when you're writing an application you might say, Alright specify to use this RF com channel or random first available RF com channel these are both options you can use. And just, you know, may want to keep in mind how many you have left to when you're writing a book with applications. I've linked both here and later in my references of course you can see the link here in old. It's pretty dated. It's like I think from like 2000 like the early 2000s like before 2010. It's a guide, it's a very helpful guide to programming with bluesy. You may remember I mentioned bluesy is the Linux stack for the Bluetooth stack for Linux, excuse me. But it is a little bit dated, but it's a great introduction to programming with Bluetooth and I would suggest anyone looking to make their own Bluetooth applications either for testing purposes or just to learn more about how the protocols work to give it a look. Take it with a grain of salt it is quite old so you might have to change things to fit, you know, more modern, you know, Python packages or versions that are available, right. But then one final, you know, useful parallel between RF com and TCP is that much how you might use and map or something to do a port scan right kind of see what services are running on a device or the IP network. So you can use the STP right service discovery protocol to do more or less the same thing over Bluetooth and this is a RF com specific this is a Bluetooth thing overall, but let's take a look here. So since the service discovery protocol is designed to let the Bluetooth devices understand the capabilities of the other remote devices. It makes sense that there would be in a way to see right ask a device hey, what do you do. How can we communicate let's find something we can do together. The STP tool, for example is a basic Linux tool that allows you to browse the STP servers of remote Bluetooth devices it can do a lot more but browsing is kind of the easiest way to use it for starting off. It lets you add services to your own devices as well for example or you can, you know, search for a specific Bluetooth service on a target device if you have something in mind. shown here on the right is part of the output from STP tool when browsing my Samsung Galaxy phone I use my own personal device for this I didn't want to get in trouble by by posting some some customers STP tool outputs right that would that would that would be bad. But you can see here that there are a couple of applications running on my phone that are tied to RF com channels with information on the type of application and which RF com channel is in use. So for example, on phones obviously phone book access is something you would expect to see because my phone is used to sharing my contact book. If I if I if I wanted to I usually don't but when you connect to a car, you can import your contacts to the vehicle right so that you have access to your phone book you can use calls or IDs on so forth. Obex right I talked about object exchange earlier. Obex is a communication protocol used for sharing files between devices and a lot of like the things like the ftp in the phone book access, sometimes are built on top of Obex. Interestingly, Obex was originally developed for infrared communications right and it's actually managed by the infrared data association, but it's just kind of been adopted by the Bluetooth sg and it's just you know very common defined Obex in Bluetooth devices to the point where you would assume a lot of people assume Obex is initially made for Bluetooth when it's actually you know it was originally made for the infrared stuff. And then like I said, things like ftp and phone back access can be built on top of Obex, but they don't necessarily have to be right this goes back to the idea that a bunch of pieces to Bluetooth and you can kind of with some degree of flexibility, you know assemble them, however you like, right. Just kind of like visualize this you know with a very simple example. Let's just say you have you know an IP network to devices connected to the same IP network you can see we've got IP addresses associated on the left. We have a host user you know a computer. On the right side we've got a server or something. Maybe they're running some ftp service on on port 21. Well, when you want to use this service, you would address the server you want to talk to bytes IP address and you'd specify the port on that server that you want to communicate with right in this case you know we know the standard socket notation is shown up here. You've got the IP address colon port number right pretty simple. Similarly, when using Bluetooth, you would address the device used to use. You wish to talk to with the RF com channel that it's using for that particular service. I've got to dummy IP or Bluetooth addresses here please don't look these up and not going to give you any interesting results. One, two, three, four, five, six, seven, eight ABCDFG. Right. But one thing I would like to know is the convention I'm using here, by the way, and you can see here you have the Bluetooth address, and then you have the RF com channel this is by no means like a standard convention for kind of displaying a Bluetooth socket. I just wrote it like this. So if this is not this is not there's no standard here for like like you would have in the IP network for a common way to designate a socket, you don't have that. I just came up with it but it more or less works almost the same way and so you could have a similar service running over Bluetooth, and likewise you'd communicate targeting that Bluetooth address and the RF com channel that is hosting that the host is tied to that application. And lastly, you know, before we move on, just wanted to share that the RF com specification has not been updated since November 2012 and maybe that's a testament to how well put together it is that it has received, you know, no updates in the last 10 years. But I always find it interesting to see something that's still so widely used everywhere, you know, in different industries not just cars like I said medical, you know, other iot industries hasn't changed at all in the last 10 years and granted it is an underlying transport layer protocol so it doesn't maybe doesn't get that much attention but it's always worth you know poking through this specification seeing if you can find anything you might be able to use reviews. On to the next part of the talk, I'm going to introduce RF comrad. So, what exactly is RF comrad so RF comrad is a tool to assist in the testing of RF com protocol on remote Bluetooth devices. I built it in Python, and it uses the PI bluesy library, which makes it very easy to get set up on any Linux system. The PI bluesy is a Python implementation of the bluesy software stack for Linux. It's main feature is the ability to connect to an RF com channel on a remote device, and basically flood it with a user defined payload, you set up a payload, you say hey, I want to target that RF com channel on that Bluetooth device. I just want to hammer it with as much data as possible it's very very simple it's not it's nothing like like a guided fuzzer anything I'm hoping to improve it in the future. But what I started with was just a basic flooding attack. But, you know, it can essentially work as a DOS attack or a denial of service on devices that don't have fail safes in place to deal with volumes of large data large volumes of data. Then they're then they're prepared to expect. Right. If the RF com channels and use on the target are not known. There's also a basic service discovery feature I added to the tool that will actually you can say okay I know the Bluetooth address but I didn't run STP tool I didn't feel like browsing it. So let's run it with a Bluetooth address and no RF com ports specified it'll actually return to you which RF com ports are, you know, up on the machine that you're targeting, and some information on what applications are tied to them. Why would I make this tool so the motivation for putting this tool together is as often as it is because I couldn't find another way to do the same thing with someone else's tool I'm not a very good programmer I'm not a developer I don't particularly like the program so I try to avoid it when I can.  So, during a penetration test of an automotive navigation unit. We wanted to test the devices Bluetooth implementation and its resilience against receiving large amounts of unexpected data. This isn't the only test we performed at Harding the Bluetooth technology on the device, but we wanted to test it from a bunch of different perspectives so it made sense to do just some you know brute forcing of the data flooding. In our research we found that this kind of remote flooding test has been done in the past, but the only publicly available tools I could find weren't exactly what I was hoping to find some older tools like L2 ping, for example, which is usually installed bluesy by default only works with the L2 cap layer, and it had a lot of flexibility on the content of the data that you sent it's just it'll send pings and you can you know enable it to flood the opponent opponent, excuse me remote target device with data. We can exactly control the contents of the payload you really can't do much about that and because it is only you know target at the L2 cap protocol, I felt there might be some benefit in targeting other protocols on the device. There are other tools, such as a tool called a Bluetooth stack smasher that allows you to fuzzer mobile Bluetooth device with random data. But again this one also only targets the L2 cap protocol and it doesn't have the features you would like in a modern protocol fuzzer so it wasn't quite what I was hoping to find. So if you give it a shot if you like though it's freely available on the internet. There isn't much control over what data gets sent and when and sometimes recreating crashes or other issues can be difficult. I found. So, we wanted a tool that could interact more directly with the RF com channels themselves, and the applications operating behind them. So, I use the pie bluesy library to cook up a simple script that would let us connect formal targets RF com channels, and just toss a bunch of data at it. Right, just like I explained. The idea was, we could identify any applications that were tied to RF com channels that weren't set up to handle large volumes of random data, and might, you know be able to invoke a crash of the Bluetooth stack see how the target device response. Excuse me I'm going to take a quick water break. All right, let's go on, almost done. And so did it work. Alright that's the next obvious question and to my surprise. Yeah, kind of did. I was able to reliably crash the Bluetooth stack on a target device by connecting to one of the services hosted on the RF com channel and flooding it with a very simple payload right just a just I didn't want to do anything complicated just wanted to test it out for about five seconds. I couldn't confirm this because the target device would actually display an error message saying no Bluetooth stack or started like the Bluetooth function that essentially just entirely crashed and then had to boot up again from zero. So, any devices that were already connected to the target over Bluetooth say my cell phone or another target you know testing device would be disconnected and whatever Bluetooth operations they were carrying out at that time would be interrupted. The application connected afterwards by us revealed that the function wasn't properly handling the large volume unexpected inputs, and it actually resulted in a buffer overflow that would cause the, the application running on that RF com channel to crash. And it ended up you know causing the Bluetooth stack to have to restart. So I'm here for a further exploitation of the application right if you have a crafted payload if you actually reverse engineer the firmware running on the device find out how you can, you know, further compromise this target. There's a lot of potential for for more wrongdoing in the place here. So, we didn't really feel need to go that far but maybe someday I'll take another look at it. I felt that since the dual said did something kind of useful. Others might find some benefit from having access to it and that's what motivated me to apply this. This little tool of mine to the call for papers here at Def Con. And just keep in mind, at the end of the day it is just a very simple Python script. Like I said I'm not a very, not a very good programmer. So, forgive me if it looks really ugly like why didn't you do this why didn't you do that. This is my best right. So, you know, even even my my own little efforts might be helpful to somebody somewhere out there, because, and you know, even outside of the automotive industry, because bluetooth by no means automotive specific technology. There's a lot of, excuse me, a lot of other devices out there that maybe could use a good rattling. Right. So, where it's publicly available you can find it here at this. You can download it publicly, go ahead and download it, give it a shot see if you like it, you don't like it criticisms comments, etc. Always welcome. I do hope on making improvements to it in the future actually. So, as with any project you know I want to take it somewhere higher maybe improve on it. The next step to that is hopefully to add meaningful fuzzing. How should I say fuzzing capability and I want to increase the scope to other protocols to obviously we can't call other protocol fuzzers or flutters RF com read because they're not our company more, but we'll figure something out right. So when it comes to the fuzzing, I've been looking at escapee for a little while to kind of get ideas for how to fuzz the Bluetooth properly but my experience there's not as much documentation on using the Bluetooth functions in escapee. As I would like I just haven't had enough time to kind of dig through them little by little so that's kind of the first step is to see if that's a viable next step. So that's just to find more next steps right that's kind of how how this goes when you don't really know what you're doing. But I'm happy to hear any suggestions or criticisms of my little project, you know I'm all yours I'm always happy to listen. So if you have any feedback by all means please in the up. And then finally, the last part of this talk, we're just going to talk very briefly about the CTF. So, the CTF isn't meant to be incredibly challenging it's a Bluetooth CTF, but it's mostly designed to force you to learn a little bit about the tools that are available as a Bluetooth security researcher. These are ones that are, it can everything can be done with free tools you don't need a special Bluetooth adapter you don't need an Ubertooth one you can put that away it's not going to be any help I promise. It's just basically Bluetooth stuff, but there is a bit of a challenge in some of the later challenges so most of the challenges can be solved by simply downloading a tool that's available for free online, and simply reading the documentation to learn how to use them and how to read the data from the data you received from the target. It's all running on one Raspberry Pi, you just ask it for information and it'll give it to you and you find the right information and put that into your CTF portal. Right. So, the only flag I would really consider a challenge is the last one for which you're going to need to have a program that can send Bluetooth data to the target device right and then be ready to receive data, because you will find the first piece of data you have to send as one of the other challenges. Then your task is to send that data to my device successfully and prepare your device to receive data in response, because the data you received, excuse me, the data you receive in response will be the last flag and that's the one that I think is the only really challenging one, you will have to write some code to get this to work. You know, even if you haven't coded in Bluetooth with Bluetooth before, if you've done any Python work, I think you'll be able to figure it out. I would recommend that anyone, you know, especially if you're having trouble with that last one. Take a look at the examples that Pi Blue Z provides. They're very useful and there were a lot of help for me when I was first figuring out how to customize applications for sending and receiving Bluetooth data. Hopefully that's enough of a hint or a tip to have you staying here with us worth your time for the CTF. I know it gets very competitive sometimes. But yeah, that is the end of the presentation. Here's a quick look at some of the references. Everything here should be, you know, pretty easy to see. I will be uploading these slides to the GitHub as well. So if you want to just remember and go back to that GitHub page, there's the link. The slides should be available there soon. But yeah, I am all out of clever things to say. So thank you so much for your time and I will be on the floor at the car hacking village throughout the entire event. So if you see me and you have any questions or you want to call me some call me names or something by all means come through. I'm always happy to answer questions over email as well or if you want to look me up on LinkedIn. That's fine too. Searching come out golly will usually lead you my way but you know like I said my email address is there. Feel free to reach out at any time. So thank you so much. And yeah, y'all be easy. Keep on hacking. Hack the world. Yeah.


What's up guys? We're at the World Fantasy Baseball Championship in Denver, Colorado. We are giving away two million prizes, not to mention, first place winner, $500,000. Prendall, that's a great job putting on the events. It's a great time showing up here and seeing all the other contestants. I know a lot of guys play and just don't even sweat, don't even watch the games. I sweat every game, so... Right now, Giant Squid is in second place. Nine points behind first. Let's see that strikeout. 2021, Van Dool, World Fantasy Baseball Champion. Gags, one, two, three, your World Fantasy Baseball Champion of 2021.


Hello everybody hooded Cobra Commander 788 here and it is time for another Patrons Choice Poll. It has been a long time since we've done one of these because I took some time off in June to go to JoeFest and I've been doing Cobra Convergence for the entire month of July. So we are overdue for a poll to give the Patrons a chance to decide what will be viewed on this channel. As always I will give you three options. This time all three options are action figures and all three figures are from the 1990s. You do need to be a patron to vote but support at any level gets you the right to vote so if you'd like to help decide what will be reviewed on this channel check out Patreon. Let's see what the options are. Option one is 1990 Captain Gridiron, the football themed character from that year. So football themed that he has football shaped grenades. This is a fairly popular character and figure, it's one I've been thinking about reviewing for quite some time and there would be a lot to say about it. So maybe now is the time. If you're a fan of Captain Gridiron and you'd like me to review this figure go to Patreon and select option one. Option two is 1991 Ozone from Eco Warriors. It's been quite a while since we've looked at the Eco Warriors so maybe it's time we get back to them. These guys are not boring, that's to be sure. So maybe you're a fan of the Eco Warriors and you'd like to see a review of Ozone. Go to Patreon and select option two. Option three is 1992 Shockwave version three from the Drug Elimination Force. DEF is another sub team from the 1990s that we haven't looked at a lot and Shockwave is a popular character. This version of Shockwave isn't talked about very much. Maybe it's time for DEF Shockwave to get his moment in the spotlight if you'd like to see this figure reviewed, go to Patreon and select option three. Those are your three options, once again you do need to be a supporter on Patreon to vote but one single Somalian will get you the right to vote. The poll will open as soon as you see this video on Wednesday July 24th, it will end on Wednesday July 31st and the winning review will be published on Sunday August 11th. I can't wait to see what you choose, let your choice be known. Polling starts now.


The National Competitiveness and Productivity Council, NCPC, completed the first of three rounds of specialized training to improve productivity and drive economic growth. The Enhancing Business Productivity Training Program, designed by the NCPC specifically targets medium, small and micro enterprises, MSMEs. Lisa Floramontout, director of the NCPC, emphasized that the training program highlights the importance of data collection for effective decision-making. While introducing participants to the Pro Tool, the NCPC's Productivity Measuring Tool, which promotes a culture of continuous improvement for business success. At the NCPC, we have introduced the Pro Tool. It is a web-based analytical tool that your business can use to measure your productivity levels and it provides recommendations on areas of witnesses or remedial actions that you can take for enhancing your productivity. The Community Tourism Agency, CTA, which recently partnered with the NCPC via a memorandum of understanding, encourages members to take full advantage of the Enhancing Business Productivity Training and the impact it can have on the success of their businesses. I really thought our partners can benefit from such an important tool that actually measures your productivity when it comes to your input, when it comes to work and of course what do you expect out of it. Funding this training program is the Caribbean Digital Transformation Project, whose project coordinator, Francilia Solomon, said the project has collaborated with the NCPC on similar ventures such as improving the sales productivity of vendors via the use of point-of-sale machines and ICT training.  The training program, facilitated by Betty Comby of Moz Inc. and a team of regional trainers experienced in business development, offers participants hands-on practical exercises in focus areas such as data collection and analysis, planning for equity and establishing a framework for enhancing business productivity. We were expecting also during this training session that you're going to be equipped to be able to identify the productivity gaps in your particular business and last of all we want to ensure that when you leave here, you leave here and you understand the importance of promoting a culture of continuous improvement in your business. Participants articulated the value they received from the training program. It would provide the necessary skills and expertise to make better decisions within the business. Getting to know your customers' expectations, it really helps you in understanding what the customers are requesting from you. Now I am equipped enough to go out there and share that information. The amount of information that was shared here today pretty much would help in any part of the business, would help you effectively and help you improve your consistency of the business. The training incorporated on location visits to the individual businesses by the facilitator and a certificate of completion was presented to the successful participants. An open call has already gone out for the next cohort for the Enhancing Business Productivity Training. For the National Competitiveness and Productivity Council, Glenn Simon reporting.


What many don't realize is the benefits of registering your decision for organ donation often extends beyond the transplant recipients that receive these incredible gifts of life. It can also bring healing to a grieving family. You see, in a time of immense tragedy and grief, it can be a comfort to families to know that their loved one wanted to be an organ donor and registered their wishes. When they see the formed signed by their loved one, donor family members say that it relieves the burden of having to make such an important and courageous decision because their loved ones wishes were known. On behalf of the BC transplant team, a special thanks to the staff of Service BC who are such strong advocates and supporters of organ donation. You are the ones having these daily conversations that result in British Columbians registering their own decisions. Thank you for continuing to have these conversations. There are still many British Columbians who haven't yet registered and more than over 600 people in our province are waiting for a transplant and a second chance at life.


Everybody Matt here for latent sports cards are up in six boxes of 2023 tops cosmic chrome baseball hobby These are for Tom. See you luck Tom Donor Henderson extraterrestrial talent rookie. There's trout notani star clusters Jeremy Pena refractor Contra Jayrod stars in the night and Hunter Brown start time for the first game And judge star clusters Adley and Gunner Michael Harris extraterrestrial Pooja Nami and Andrew McCutcheon nucleus So Logan Ohapi rookie refractor that was a Jordan Walker there Christian Walker Star clusters Pena wit and Jayrod Come on. How about a huge hit here? Riley green rookie and nice extraterrestrial talent auto one solo There you go. Nice one Tom rats on the Soto Francisco Alvarez rookie Nice start Corbin Carroll rookie Shohei Otani extraterrestrial talent Okay, Kibali Trout Tristan Casas Alejandro Kirk nucleus to nuclear to nuclei in the box Julio Rodriguez launched into orbit Star clusters Adley Bobby wit and Riley green There's a planetary pursuit. It's gonna be the Sun Corbin Carroll rookie Nice one Tom Grats on the planetary pursuit one second on the Corbin Carroll Jazz Chisholm Jayrod Star clusters Astros Austin Riley orbit all those in Chapman. This is Brandon Lau green space dust to 75 Mark Vientos rookie Aqua equinox Tatees Salvi Star clusters Phillies Corey Lee Griffey Grissom Nolan Jones Dominic Fletcher taco fractor rookie for the well, I guess the D-backs Tom has all 30 teams Congrats Tom Taco Fractor Three of five There you go. Nice one Tom Mag that one for you Reese Hoskins Blue Moon to 99 Uniax for terrestrial Intermecuchin nucleus Miguel Amaya rookie refractor Raleigh Jacob Grom stars in the night Schwabber women in freed Hoskins and Yoshida Volpe rookie Schwabber Suarez Jeremy Payne extra terrestrial That's just a no hoppy The Lopez morale Juan Soto launched into orbit Yankees and Tim Anderson Aqua equinox Jake Cronenworth one ninety nine It's my Sotaki Yoshida extra terrestrial Padres trio Riley green and Jordan Walker rookie refractor. Come on. Let's see a big hit for you Tom Francisco Alvarez Tony Oh Bryce Harper stars in the night star clusters Trey Christopher Morel rookie refractor Nolan Gorman rookie star clusters Harper judging bets But I sanga Tommy Henry J rod Bobby Whit jr. Extra terrestrial Chapman and Bryant Julianne Bryce Harper launched into orbit star clusters blue jays Grayson Rodriguez rookie Aqua equinox only one box in queue after this Tops Cosmic Chrome six boxer for Tom J rod extra terrestrial Or do you go nucleus Corey seager? Star cluster blue jays Zack Neto Jordyn orbit Mervis Blackman Shintaro Fujinami and Bobby Whit jr. This is eight of ten eclipse Black Eclipse I guess Nice stars in the night to ten Trey Mancini Sup Nicholas. Yeah, good so far Riley green rookie Francisco Alvarez rookie Shohei Otani launched into orbit and Jordan Walker wonder star clusters Braves Colin Turner Mazatake Yoshida Rookie Aqua equal knocks to one ninety nine Shohei Otani extra terrestrial. That's one Soto extra terrestrial talent blue moon to ninety nine Gunner Henderson rookie extra terrestrial talent J rod Jose Abreu nucleus Mike trout refractor Yankees and Manuel Valdez and nice. That is rookie Gold auto 250 von Grissom. You go solid hit for you Tom Gold interstellar Julianne our clusters See ya.  Here's box five Jeremy Pena Rangers Jimenez resin Buxton Traffail Devers stars in the night on Grissom D backs her and Carol Tatees trout and Casas Ezekiel Doran rookie refractor and Jordan Walker blue jays yellow Trey and Cavalli Libre tour Aaron judge launched into orbit trio and Brett Beatty Chintaro Fujinami rookie aqua equinox James Altman Ronald Acuna extra terrestrial Grayrod rookie nucleus Padres clusters France Anthony Volpe rookie Alonzo orbit and gallon Strimsky Vargas and willy-a-domas That is blue moon to 99 last box Come on Tom. Let's close it out with a big hit for you. There's Corbin Carroll extra terrestrial Red Sox and Adley rookie George Kirby refractor Piguero Michael Harris rookie Aronato Ronald Acuna stars in the night Braves and Arias Romber Valdez and Kodai Senga rookie extra terrestrial talent Micah Strimski nucleus Michael Harris rookie refractor Chintaro Fujinami Metz trio and motto Christian Walker and nice that is rookie Gold interstellar extra terrestrial talent auto Francisco Alvarez number to 50 18 of 50 numbers down here. It's a little hard to pick up gold on gold Nice one Tom. Congrats There's Alvarez and Riley green rookies Corbin Carroll rookie Mike trout extra terrestrial talent Brera many Pascantino That is rookie nucleus Devers orbit Kunya star clusters Yanks Devers and blue moon Christian Yelich 99 leaders in Buxton Chisholm Prado Phillies and Granky Frank Thomas orbit Brera J. Rod Parazza Aqua equinox John Carlo Stanton Jeter downs That'll do it for your boxes. Let's do a quick recap of the color in the autos and planetary pursuit rookies Francisco Alvarez and Corbin Carroll Aqua equinox to 199 Chintaro Fujinami John Carlo Stanton Jake Cronamworth Grayson Rodriguez Masatake Yoshida and Mark Vientos Blue Moon to 99 William Dames Christian Yelich Reese Hoskins and extraterrestrial Juan Soto green spaced us to 75 Brandon Lau Stars in the night eclipse to 10 Bobby Witt Jr. And See there was rookie gold interstellar auto to 50 von Grissom extraterrestrial talent auto Juan Soto extraterrestrial talent rookie gold interstellar auto to 50 Francisco Alvarez and Taco Fractor rookie Dominic Fletcher Good break that'll do it for your break appreciate it Tom. We'll get these right out to you


Alrighty, let's watch this in full here. It's pretty cool. I like that robots come on All right, so what I'm looking at here, there are a couple things I think generally is pretty cool I think there are two major things missing though. So let's go one by one. I Like this intro. I like how she comes in. I think it's it's a bit Contained in terms of the Silhouette in terms of how far the arms break the body silhouette So it's always kind of in front of it. Watch out. You got a flippy wrist here And then it kind of stays put a bit of a tangent there You just kind of by staying put tension here It feels like it just kind of contained there as opposed to really understanding and seeing The structure of those arms and even as this arm swings back It feels like this is just kind of locked in that area. I know I was seeing moving but And we're kind of reacting to this moment where it feels somewhat locked and Then as you go forward you move forward over one frame and it kind of stays there one frame and goes back But again, the silhouette is muddy that we don't really see what's going on And then as the other arm moves back it has a bit of a Move back down and then it kind of stays put it and then something goes back up with a really bad wrist And then as it goes back again, especially with the dark in front of the dark of the robot the silhouette gets kind of Muddy as opposed to potentially bringing this out You might also have to change the colors.  Do you see how those hands shoot up and then just kind of stay put So it feels like that swing is too big for something that only goes this high That is cool. I love this though. That is great going up. You can probably offset the legs a bit more Yeah, maybe kind of it Into this that's cool into like an immediate Into this that's neat and that's cool to she's kind of just and then moves over I think it was probably combined as moves where it's not it just goes up stop left versus combining that a bit more and I think the hookup is okay taking the arms below. I think it should be okay. She looks over. Yeah, I would buy this That's the yeah, that's the little technical thing the two major things I was talking about is this when she turns around She besides a broken race I don't want to go into crazy detail here because my question is What is this face? What she's looks super bored Now I'm gonna assume that you just haven't got their face yet and again watch out for silhouette I'm kind of losing the structure of those arms there But what what does she feel like? Why does she go over there? Is she being chased which you look around still is she just is not alarm She's just ready to fight and she's just determined or She is but then she's still kind of nervous. Maybe on the way down The eyes just look up and she has a bit of a concerned face What are you gonna do with that? And I think however she feels is gonna change Some of the moves here potentially some of the moves here probably not too much But that's what I'm gonna get more into detail here and once you get into this we're Super super twinny. I know there's an offset in terms of height here, but generally she feels It's very mirrored even the last pose You know, I know if this has joysticks that you can grab she can maybe you can add some buttons that she can push All depends unless you just want it to be stoic and then she goes down But it just feels a bit lifeless. So that's what I would Suggest there. The other thing too is that we see this close.  I'm not quite sure what I'm looking at But imagine something happens head goes up and gets ready to fight. It feels like there's an ending missing And all I'm seeing here is this is your submission for review It's been a while since you've animated and a bit rusty So I don't really see any history or context or if you want to add something after that either another shot or Extend this so it's kind of like half critique half question And I hope I hope that helps. It's really cool though. I would love to see this fully animated. It's a cool Rig, I wonder is that a keel figure? Let me know what kind of rig that is. I'm very interested in mecky stuff That's all cool. All right. That's kind of that. Let me know if that makes sense or not And if you have any questions or not and that's that. Thank you All right, there's an email you can sign up you can start whenever you want You can submit whatever you want to get 16 submissions either way a like and subscribe would be awesome. All right. Thank you


Hey what's up you guys welcome back to my channel, welcome back to my channel if you're new here, hello I'm Lydia. I've got new motivation today, so I'm doing a vlog. Hey what's up you guys welcome back to my channel if you're new here, hello I'm Lydia. Today we're going to be doing a bit of an update. So I've been out of hospital for a while now, been out to film. Well it's been since May, the 6th of May to be exact. I have a brief re-apps where I ended up under the home treatment deal and now doing a lot better. I'm ready to go back to uni which I'm excited for. I actually ironed my mouse. Look at my mouse and my iMac. It's a new hamster. My grandparents are nice enough to bring down some of my things for me. Yeah things are well. I blocked the person who's getting abuse from on tell, so no more abusive messages.  If you're new, subscribe and I'll see you guys on my next video. Peace. I'm going to use footage from the other night when I checked my picture there. At the end of the night, the only one who doesn't know, I'm by better. He's insulin. I just feel very down today. I didn't sleep at all last night. I'm also tired and I do need to go to primal at some point and get some more bras. I'm going to go to primal. It's not feeling 100% fine.  Peace. I have my evening mat. I've got a video uploading for tonight. My diabetes has been really out of control and I don't really know why. I'm not consuming more sugar than I normally would. I'm getting readings at 33. I don't know. It's not like I'm under a diabetic team. It's like I need to take it down. Because of the readings, I'm getting it just too high. I'm going to check my blood sugar now. Just to see what it is. 21.6. It's 8.30pm. I don't know what's up with my blood sugar really at the minute. All I know is that I'm not getting readings that are below 20. Because it's something that I'm going to have to... I'm going to have to try and get a GP appointment with it. And yes, this is how I lie in bed. Dying in my little pal. I don't know. If anyone has any suggestions, please let me know in the comments down below. I'll see you guys on the next video. Peace.


QuickBooks Online 2024 budgeted income statement export to excel and modify part number two. Get ready and some coffee because we're moving on up with QuickBooks Online 2024. Here we are in our get great guitars 2024 QuickBooks Online sample company file we set up in a prior presentation opening the major financial statement reports as we do every time the reports are located on the left hand side in the favorites right clicking on that balance sheet to open a link in a new tab right clicking the P and L otherwise known as the income statement open a link in a new tab same with the trustee trial balance the TB if you don't have that trial balance in the favorites you can search for it we're going to tab to the right close up the hamburger we'll change the range we're going from 010124 tab let's go to 022924 tab and then select the months so we can see it on a month by month and run it and then we'll tab to the right this is the report that we're working on here or working off of at least the income statement the profit and loss closing the hamburger changing the range let's start off with 010124 tab 022924 tab selecting the drop down looking at it from a month by month breakout and run it and then we'll tab to the right same thing with the trustee trial balance closing the hand buggy changing the range going from 010124 tab 022924 tab we will run to refresh and hold on a second I didn't do the months breakout let's do the month by month breakout and then run it okay let's go back to the income statement we're looking at our budgeting process thinking about the budget report that we first think of usually that being the income statement or the profit and loss whatever you want to call it because that's the timing report that's going to measure performance so we're going to judge how far we're going to go how high is income going to go next time how high is the expense is going to go how high are we going to get on that net income let's raise the bar people let's raise the bar so how do we do that well the first thing would be that maybe we want to export last year's income statement into excel so that we can make adjustments to it there taken into consideration not only last year's data but also what we think is going to happen going forward what changes we're going to make so that we can improve things and we're going to stop listening to crazy people right from the entertainment company stop listening to you know the the crazies that keep telling you like that that if you do stupid things your income is going to go up we've seen the results we've seen the results and we're we see that the budget is not is not how what actually happened and then we make changes so we're going to make decisions that make sense now and then once we do that we'll adjust the budget we'll import it back into QuickBooks by going to the tab to the left or going to the icon up top and then we'll go into the budgeting and then we'll insert the budget so we can run reports like budget versus actual now when we export the budget to excel we could have used the income statement here if we had a whole year's worth of data and give the whole income statement but we're going to export the total starting with the trial balance because the trial balance in our case is easier so so i would like to export the total so i make this totals instead of months and we export of the entire trial balance and then just removed everything that is not the income statement and then we made the the revenue positive numbers the expenses negative numbers and we result in a nice easy income statement without any subtotals that looks like this we double checked that it's okay because the net income down here ties out to what's a net income for the total profit and loss for january and february that being 1324 we rounded it 1324 that's our starting point okay so now what we're going to do is we're going to use that and i'm going to imagine like basically that's the last two months meaning november and december of last year and it would be and so what i'm going to do is try to take the average of those two and say that's going to be my my average income on a monthly basis going forward that's my baseline and then we'll move from there so i'd like to make headers that will have the months up top so to do that one way i can do that is i could select the entire column or row one right click and insert and that will shift down so that i so that i have the headers and then i can put the columns or the rows underneath it so i'm also going to make a skinny c to separate so i'm going to put my cursor in between the c so that i can separate like my budget data my on the left that's going to help me create my budget on the right or my actual data on the left to help me create my budget on the right i'm going to type in jan feb and quickbooks should be able to read that and see that as months so if i put my cursor on those two items and then on the fill handle drag it to the right uh this isn't quickbooks this is excel excel should see and be able to predict that we want month by month there it goes on up to december and boom easy peasy so let's go ahead and center this now we're going to go to the home tab of alignment let's center it i usually that's not center that's not center what are you doing oh hold on uh i'm not my soundboard i'm still not good at it and now i messed up my whole thing okay sorry about that i'm working on it it's going to be good once i know how to do it right so any case i'm going to go to the home tab font group i like to make it black and white on the headers so i know it's a header and then all i'm going to do is my starting data i'm just going to take this is going to equal that which is for two months and then i'll divide it by two right so i'm going to say if it was two months two hundred dollars i'm going to start with a baseline of each row for that for that billable expense income to be one hundred dollars that's what we're going to start with as our prediction going forward so i would like to copy this across to start with uh how can i do that well a couple ways we can do that i could go to february and just say equals the one before it and i kind of actually like that method better because if i do that then then if i make a change here right everything after it changes the other methods you could use is to say i'm going to take this and because this is coming from my data outside of where i'm currently working it's coming from my data source i would make it f four or absolute dollar sign before the b and the two and then divide it by two and then i can copy that across and it will not move this cell so but the problem with that is if i change this one for example to 50 it doesn't change the ones after it which is probably more likely what we would like to happen so i actually like this first method better i'm going to say this equals this number divided by two this is my monthly amount and then in february i'm going to say this equals the one prior to it and then i can copy that formula across and then each month will be equal to the one prior to it and so that if i change any number along the