So let's get started. This is called weaponize your feature codes. My name is Master Chen. So let's get started. First with who I am, I'm a Grey Noise podcast founder and co-host. There's our website if you want to listen to some of our episodes later, not during the talk. So check us out. We do a weekly podcast here in Vegas once a week. I'm born and raised here in Vegas. This is why I need to be drunk on stage. It's just natural. So anyway, born raised here, but the podcast is done weekly here at the local Sin Shop, which is actually the next bullet point. I'm a member of the Sin Shop hacker space here in Vegas. We do some cool hardware hacking. So check out that website as well. I am the secretary over at the Sin Shop. It's actually next to the Nevada DMV. Perfect place. I spoke at B-Sides in 2014 and actually this year as well. In 2014 it was what I learned as a condom man and two days ago I did a talk on Vegas surveillance. So the cameras now are on me. That's awesome. Last year I did a talk at the Sky Talks on automating your stocking using Twitter to follow somebody who's originally blocked you. So if you want those talk notes, follow me on Twitter. And I can DM those to you since that talk was not recorded. And I do write some articles for 2600. Do we have any 2600 readers out there? Do we have any telefreakers out there? No worries. I guess they figured they'd livestream the talk later. Alright, cool. And actually I kind of want to know a little bit about my audience. So how many people, this is your first DEF CON?  Welcome everybody. This is a cool crowd. So I've been going to DEF CON since DC 12. I'd like to say I'm a veteran but this is my first time on a DC stage.  Alright. How many times, this is your first time in Vegas. Be careful. Alright, so why this talk? Well, I got really involved with phone freaking out like DEF CON 15. And at that time I was like, shit, I missed the boat because all of this stuff is done. You know, the beige box, the blue box, the any colored box, they just don't work anymore because everybody's transitioning to VoIP.  But wait, like I just said, there's VoIP. So that's why I can still be considered a phone freak, hopefully. Now, if you're wondering about the drawings, I look for stock images on Google because I was like, man, I need, you know, I need a picture of somebody missing the boat.  Like, it's not something that I like. I don't want to put around my slides. So I had my best friend who's in the audience there, Ninja Nerd BGM. I had him draw some stick figures for me because that's what we used to do in high school. So there is me on the dock missing the boat. There's more in the talk. Alright, so today we'll be focusing on call flooding using our feature codes, text message bombing or SMS flooding using feature codes, as well as caller ID spoofing. Again, now, not all of this is new, but we're going to try to implement it in a new and more efficient way. And there's also potential for other feature codes. So before we actually do some of the demos, we have the basic terminology. We're talking about vertical service codes. So of course, who's ever heard of like star six nine, right? Like we've all heard of star six nine. You know who called you last if they didn't block the caller ID. Or star six seven two block your caller ID, right? So that's what we mean when we say vertical service codes or feature codes. Vertical service codes is what you use to manipulate your little part of the phone network. And the next basic terminology is PBX or private branch exchange. Usually this is now done through software where before it was a big, you know, big rack with circuit switching and whatnot. So it's cool that software has condensed that. So. Okay, before again, well before everything's before the demo. Before we go into the demos, we have also the history of the feature codes. So it was developed by AT&T. It was called the custom local area signaling service. And again, it was developed in the sixties and seventies. And it was designed to do such things as block caller ID. Who called me last? Call forwarding is another one. That's like star seven two. Excuse me. Star seven two. So class was trademarked by AT&T. So the other telcos came up with vertical service code to mean the same thing. Now why is it called vertical service code? It's because you're dealing with your central office or your specific carrier. So for instance, you can't dial star six nine to manipulate an AT&T central office if you are on the Verizon network. And I'm just using that as an example. But when we say vertical, it's like if your service is AT&T or if your service is Verizon, that's who you'll be dealing with when you're dealing with these vertical service codes. Now with this demonstration, I have my own PBX. So I am the telco. Okay, so this might be a little bit hard to see, but I took this from Wikipedia. And basically you see on the left hand side all the vertical service codes for North America according to the North American plan, numbering plan association. Now I've zoomed into the part here where I've noticed that, you know, star three zero has something and then it kind of just skips to the star five X area. So what I'm going to do is I'm going to add the feature codes into right in between there. We're going to be using star four X today. So what do we mean by weaponized? Oh, let's talk about this drawing in a second. What do we mean by weaponized? Well, obviously the star codes are not meant to be malicious. Like you're not going to star six nine and root somebody or cause a DDoS or whatever. So when we take something that's not meant to be a weapon and then we turn it into a weapon, it's called weaponizing.  And it could be all the way to business and personal relationship ruining. And so we could talk about some of the hypotheticals there later. Imagine, you know, like, well, I'm going to save that example for later. So the materials you will need, we're going to do this like a science project. You'll need a Linux machine. Now this can be physical or virtual. It could be a VM. But Astros, which is what we're using today for the software PBX, is run primarily on Linux. It runs well on Linux. I've never ran it on a Windows machine and I don't really care to. So materials you will need is a Linux box, according to, you know, my research. And then you'll need a hard or soft phone. Now harder soft phone is going to be a VoIP, a ready phone, but it could be like an application on your phone such as Bria, Xlite, Zoiper, which is what I'll be using today. Or it could be a hard phone such as Polycom, Cisco, Yalink, et cetera, et cetera. So as long as they're tied to the PBX that has that feature code, it'll work. And you'll also need imagination. So I don't watch SpongeBob, but I kind of like that image. So that's why I use it. Oh, wait, I didn't talk about this one. So as you can see, all these feature codes are being shot at me, like star six nine, star five six, and it kind of looks like it's being shot at me from a penis. I think the intention was like a bazooka of some sort. Yeah, thanks. Thanks, dude.   So the structure of our feature code in an asterisk dial plan, you have what's called the context and that separates your functions according to it, you know, asterisk has its own scripting language. So this part here where it says context label, that's what it will look like in the code.  We will start all of our feature codes today with star four X and X meaning anything from one to nine, okay. The four is the star four is the feature code that we've picked or that I've picked today. And that's where it'll look like. So in the code, like for an example, star four two and then seven eight six seven five three oh nine. Nobody has that number. I'm not doxing anybody. So that will be the example. That'll be the structure of your dialing when you're, when you're dialing out with your outbound routes. Is anybody in here familiar with asterisk at all on a daily basis?  Okay, so you're finding this interesting just because all right, cool. All right. So our first one is the call flood and I will be flooding my own phone here in a second. So basically as you can see up here, again, the top starts with the context label and that's our subroutine. So you'll see that everything in here, it's going to be grabbing input. It's going to then, my server is then going to take that input and put it into a call file. Okay, now the call file is then going to go into the asterisk spool and then out, out to your upstream carrier. And it'll send, you know, let's see. So down here you'll see call amounts, C-A-L-L-A-M-T all in caps. That's the variable and it's accepting three digit dials. So I can send anywhere from one call to 999 calls at one time. So that's, that's just my own limit that I've set. I figured it will be nice a little bit, you know, so I've limited to at least 999 as a max. And so this, this next part is the call flood shell script. So after we enter the information into the 10 digit dial or into the feature code, it's going to be made into that text file and this script right here takes that text file and forwards it to the spooler for as many times as I've specified. So the counter is equal basically to the call amount that I've given. So it could be 500, it could be 600, it could be 1 if I'm nice, I'm never nice. For testing, for testing. So, and that's basically what the code looks like. All this is on GitHub and the link is at the end of the presentation. So now it's demo time. And as those who might may know, live demos, they just were great. So we're going to see if the demo gods are in my favor. I'll let you guys interpret the stick figure there. I think that's what the face of God might look like. Or whatever. Okay, so the way this is going to work is I'm going to dial from my soft phone, it's the soft phone's Zoyper application. I will dial from here, it'll go out to my PBX and then out and it'll come back around to my cell phone provider. So I am calling myself, I am going to flood myself. And so you'll be able to hear all these calls as I explain the next part. So let's go ahead and do this. Star for zero. Let's say, what's a good number? 50? I'm going to send myself 50 calls here. I was ready.  And that's okay because as long as the demo works, oh, let's dismiss this one. Oh, the first one came in, that's great. Okay, well there definitely be more as you will hear in just a second. So basically the caller ID if you saw in the previous slide, the caller ID is set to<PHONE_NUMBER>. So the caller ID is not coming from my phone or from my application, it's changed, it's spoofed, you know. Let's see here. Let's see what the voicemail sounds like. Because it's leaving me voicemails right now. Are you ready for this? Monkey's having sex. Now you don't want to work? Okay. Let's try that again, let's try that again. Okay, so for those who don't know, oh, there's another call. Okay, so I'm going to have to dismiss this for the rest of my talk. Okay, so basically what you're hearing there, the monkey's, that's another voicemail. The live demo worked and now it's interrupting my speech. Oh, there's another text. Hey, it just works. It works. All right, so what you're hearing is the monkey's having sex. So basically when the caller answers the phone, that is what they will be hearing. Now if they ignore the call like I'm doing,<PHONE_NUMBER> and that might get annoying. I should have picked like 10.  Okay, so what you're hearing though is basically if you answer the phone, if you answer that call as the target, I'm going to put this on silent now, like maybe everybody else should be doing. No, I'm just kidding, I don't care. Okay, so basically when you answer the call, that's what you'll be hearing. And even if you ignore the call, that's going to go to your voicemail. So you either have the choice to check the voicemail or to then delete it, which if you don't have visual voicemail, it could get really difficult. So here we go and I got to go to like silent on this one. But basically, excuse me, sorry. Oh, it's interrupting me. Okay, yeah, now it's off. Now it's like no calls, no vibration. So that's a way to call flood. Okay, so I sent 50 calls to myself and as you can see, it's just going to keep going until this call stream is done and ready. But you can send upwards of 900 and 999 and if you program two more than just the four digit input, it can go much further and much longer than that. So you can probably disrupt somebody's phone service for a good eight-hour shift or full day. It's completely dependent on you and how you want to program. By the way, I am not a lawyer. I anal. So be careful. All right, so the demo worked. That's cool. Thank you, demo gods, wherever you are. The beard, it looks good on you. Okay, so let's talk about the star four zero feature code mitigation techniques. How do we stop an attack like this? Well, if you have an asterisk box, you can take that call or ID and then drop any call from that caller ID. So if you're the target and you're getting spammed, you can say, let's drop all the calls from this particular caller ID and it will drop the call. Now that could easily be remitigated or like a chess board. I can say, okay, let me change the caller ID with every call. So the first call would come from three zero two, zero zero zero, zero zero one. The second call would come from zero zero zero two, zero zero zero three, et cetera, et cetera, et cetera. So even if you're blocking that caller ID, I will get through.  If I was to block all of the seven or two area codes, none of Vegas would be able to call me. And so that's a business disruption. So you can drop the calls, but why would you want to if that's disrupting your business? And you don't know how long the attack is going. So while that is a mitigation technique, it's kind of on a faulty ground there. Now what about people who are not hiding behind the PBX? Like for instance, this phone's still going and I can't stop it. That's okay. Hopefully it's done in an hour. But if you're not hiding behind a PBX where you can control the call flow, what then? How would you then drop the calls or stop that attack? I'd like to discuss that with people who know more than me actually. Okay, so our next feature code is star four one. And it's going to be the SMS flood. So instead of sending a call flood now, we will be sending a text message bomb or you know, same idea, but instead of 500 calls, we're sending 500 text messages. Okay. So the code is set up the same way. We're taking star four one as the input. And this next part after that break in the code, you'll see that that's a star 228. So I'm going to use that as an extension to tell my feature or my call or my, I'm sorry, text message flutter. I will denote that as AT&T. 288, ATT. So sprint would be like SPR, whatever that DTMF dial tone would be or whatever that DTMF touch tone would be. I am personally a Google Fi subscriber so to flood this it would be 466, which is what we'll be using in just a second. So this is how we start our text message flood. Now I will turn the volume back on so you can hear how many times I get a text message because I'm a masochist. Who wants to pick a number? I can't believe I'm doing this to myself.  I'm just kidding. 256. Okay. Let's see. I guess I could be that mean to myself. Awesome. Challenge accepted. Okay. What was that? Okay. Okay. So again, I am using my own phone as the test subject. So I'm calling out and it's coming right back to my phone. So I will be dialing star 41702 redacted. And then we'll go from there. Okay. So 200 times. All right. So it will tell me who I'm targeting and for how many times. So while I'm waiting for that to come in, again, to explain this feature code it's going to dial out of my PBX. It's actually starting a call flooding script that then attacks the email gateway to my MMS service. So it's a big loop. Here we go. The text is from, actually let me do this part. The text is from your mom at Pornhub.com. Yeah. So obviously the email is spoofed. Okay. So I am sending an MMS from my PBX server back through to the Google Fi email gateway which then goes to my cell phone. And it will just keep going like that. And for a very long time. I'm kind of waiting for more. Yeah, it's going. It's going. Yeah, there you go. Ding. Let's ding this a couple more times. I forgot what number we picked. Oh, 200. That's right. 200. There's another one. Your mom at Pornhub.com. So you can see how this becomes very annoying. You can see how this becomes very annoying. See, I just sent you three right there, right? All right. So let's talk about practical use. So it's a text message bomb. It's an SMS flood. It's pretty annoying. But how can this be utilized on a really big attack surface?  Like if you want to stop the flood, click on this link. We're lying to the target. So you're not actually going to stop the flood by clicking on the malicious link. But what if we told them that? What if we said, hey, if you want to stop this flood, click the malicious link? So they click the malicious link. It installs whatever you want to install or, you know, however you want to set that up, that's out of the scope of this talk. But the links you can send. You can send these links and if they're noob enough or green enough, they'll click on that because they want to stop the call flood. They don't want 200 messages and they don't know that it's 200. They just know that they have a flood of text messages going on right now. So they'll probably do anything to stop it, especially if you're sending upwards of 4,000, 5,000, any upward limit. That's still going. There you go. It's still going. The good news though is that the calls stopped. So that's the thing. We can send this through malicious link or we can use this to send a malicious link. And again, we're lying. But that's an easy way to install that link right there. Now another cool, well, cool is not the right word. Another creepy thing. That's a better word. Creepy thing is the 3 a.m. text from a mistress. So let's say for instance, and this is just an example, I promise. 3 a.m. you know that your target is cheating on his wife. So you send 300 messages at 3 a.m. saying I miss you. Then guess who starts asking questions. I don't suggest it. This is just a hypothetical scenario. Okay. But obviously you can see how this does not just become annoying, but then it becomes potentially relationship ruining. Because then the person loses that trust. It becomes more of a social engineering slash fishing game, right? So now the why for the significant other is like, who was that? Who was that?  And so that's how we can make this a little bit more powerful and going a little bit beyond code. So that's the end of the star four one feature code. It's still going. So maybe it's not the end of it. I don't know why I picked 200. Oh yeah, that's why because I'm on stage. All right. So SMS flood mitigation. Okay. So it's up to the carrier to limit SMS and how fast and how often it comes through. So that's kind of out of the hands of the target. Obviously this is kind of just still going on. I have 53 currently. So I have about 150 more. Now you could also use Google Voice because I found out that the email gateway posted by Google Voice does not send those messages. So as I try to send from a Google Voice number or I'm sorry, to a Google Voice number, Google just drops it. You can't get through that email gateway at least by this method. And so it won't go through. I tested that and again my method, it's verified that it does not work for Google Voice. But the funny thing is it works for Google Fi, Project Fi. You can still send these messages and they still work. Is that because Google Fi is running off of the T-Mobile and Sprint networks? Maybe that part I haven't investigated. But you are still susceptible if you are a Project Fi user. Now as far as the other carriers with permission, I've tested Verizon, AT&T, and of course the numbers were a lot smaller, like three just to make sure it works. But I've tested on all these major carriers and it does work. It's just exploiting the email gateway that they have posted as public information on their website. Now what's another mitigation technique? You can turn off your phone, just kidding because it won't work. You turn on the phone and you'll start getting those messages again. Yeah, you won't forget me. So that's the Star 4.1 feature code. Okay, so this next one, I call it a spoofie ghost. We will be spoofing caller ID. Oh, there you go. Ding again. Maybe I should turn this on silent again. No, no, let's keep it. Let's keep that going. So a spoofie ghost. It's the same idea. We are taking the feature code and we are taking input from the dial pattern and then changing the caller ID to what matches there. Okay. So actually the target will be, I'll be using Star 4.2. The target will be the 10 digit phone number that goes after that feature code and then it'll ask for my target, which will be myself. So I'll ask for the target and then it'll go and call me with whatever number I specify. So just to let you guys know, I know it's going to be hard and I don't have a video of the caller ID, but I will be spoofing from<PHONE_NUMBER>. Who knows why? Thank you. Okay, just making sure. You're in a VoIP talk. You need to know your numbers. So let's do this demo because it's demo time. All right, here we go. Star 4.2. It's a please wait while I connect your call. Oh, I actually did that backwards. I'm sorry. I dialed all zeros instead of the other way around. Okay, so this time I called from all eights. It's ringing. Okay, it's hard to see, but it's 702-888-888-888. So basically what we're doing here is making it easier to launch attacks. And that's the whole point of this talk, is to make it easier to launch attacks. And I'll get to that in just one second. So again, spoofing, caller ID spoofing is not new. It's been around for a long time, but it's still practical. We can use caller ID spoofing in social engineering attacks. And you can still use it for voice mail hacking on certain carriers, but that's quickly becoming a thing of the past. But hey, it's still something that can be used to gain trust and run an exploit of the human variety. So what was all that imagination talk I said earlier? See, it's not SpongeBob, but it's my friend's drawing. Let's see, there's a dinosaur in there, an upside-down purple fish, not a gold fish. But apparently there's an imagination. I wonder what goes on in his head. Actually, I don't. I don't wonder what's going on in his head. So what about all that other talk?  I am working on using star 4-3 as a voice mail brute-forcer. But what about star 4-4 through star 4-9? These aren't used by the North American numbering plan association. So they're just kind of there for the taking. I'm not stepping on any other administration or I'm not stepping on any other configuration such as star 6-9 or what not. That still is used regularly. But what are we going to do with all these other feature codes? Well, what if we use the feature code like star 4-4 as an end map scan? Star 4-4 IP address as your input. Right? So you could launch the attack without being at a computer. You're doing it from your phone. So that's something that I imagine as far as ways that the feature codes can be used. Another thing that I see in my head is like a combined attack. Like what if we use star 4-6 as both a call flutter and a text message flutter at the same time? Like Rozelle beatboxing. Okay, nobody to kiss that reference. So you have that too. So what are these combined attacks? I mean there's a lot of things you can do. There's a lot of potential. And I leave that up to you guys. In fact, that's my question. Do we have any ideas of another way that we could launch an attack from a star feature code? No. All right. So the idea though here is to launch automated campaigns. So for instance, if you had, and I'm going to go back to the end map example, if you use the IP address as input when you're dialing, you have a script that's already set up to search for these flags or to scan for these flags. You know, like your Christmas tree and all these other scan flags that you want for your end map scan. You take that IP address as input and then you're launching the attack or the scan from your phone without being in front of a computer. So that's something that I thought was kind of cool. That hasn't been coded yet. So that's probably the next thing I'll try. So it's still going. It's still going. Let's see how many I'm at right now. I am at 152. So there's still a little bit more to go. And there's another one. So that's the end of the feature codes. These are my references. The code that I use are the feature codes and the bash scripting. It was just scripting and bash. That's on my GitHub, which you can see there that I prepared for a DEF CON. And so there we are. Are there any questions with today's talk? What was that? Oh. Yeah, you know, I'll keep that there. Go ahead and take pictures. I don't care. Okay. So I don't know if there are microphones running around. I will try to, I have really bad vision. So I will try to see if hands are raised. Yes. I'm sorry. Can you repeat that one more time? Oh, okay. I apologize. That's me being not so detailed. So the way that this attack is working right now, the one that's still going on, I am actually sending it to that MMS gateway. The from address was the yourmomatcornhub.com. Yes. In fact, a long time ago, there was this co-worker that I had who said, I don't need text messaging, 500's enough.  So 500 is not enough because you have stuff like what we just, what we've just mentioned. Your 500 allotted monthly text messages. And I don't think it's a problem in this room. But if somebody has that, I mean, like you're talking about an average of a half an hour and the rest of your text messages are done for the month? Yes. There would be a lot of work to trace and a lot of involvement with other, oh yeah, absolutely. All this can be done. So yep. Remember that the folk, and I know we have a lot of technical people in here obviously. So the scope of this talk is how do we launch the attack? Now what attack are we talking about? Whether it be like an SMS bomb through VPN and et cetera, et cetera. That's obviously there but it's outside of the scope of this, you know, of this talk. But yes, that's there.  The bottom line is that these feature codes are input vectors. So you are inputting information into your computer that then runs the attack. So it's this Linux box that we've set up that runs the attack. So it's running the call flutter. It's running the text message flutter and that's all, you know, taken care of on the server end. Yes. So once you launch the attack, you can't stop it. You better really want your target to get these messages. Now as far as duration goes, that depends on the speed of your computer because of how fast it can send out the spool. It also depends on how your carrier handles that type of calling or, you know, mass calling. And another thing too is when we're talking about call flooding and grabbing all those messages, like for instance, if I wanted to send a hundred calls, I send such a high amount because not all of them will go through.  So it says, okay, I'll send out 50 but not 500. And that's okay. If we want to get the job done, 50 calls gets the message. There you go. So, yes. Not a lot. I don't have the exact numbers. I've been using this VoIP provider for quite a while and I've never really, I mean, it's cheap calling and that's the cool thing about VoIP, right? Is that it's cheap calling. So even if you're talking about outbound, it's really not expensive at all actually. This attack is very cheap as far as the call flooding goes because if the call is not answered, you actually don't get charged for the termination. So you're really talking about a penny a minute if answered. So it's not expensive at all. I'm sorry. So you're asking if I could change it to, I'm sorry, if I can do MMS, like change the address of the MMS. Oh, okay. So this SMS flood is actually an MMS attack vector. So you're using the email gateway. So you can, I'm sorry without using the E what? That's a good question. I will have to find out. I didn't do that for this talk. So I could do research and we could talk about that. Orange shirt, please. Oh, and keep it on the line. Actually, yes, you can. So that's a good way to piss off the attacker, right? Luckily, with all of my testing, that hasn't happened. But I'm testing, you know, it's there. Everybody who's been called knows that I'm calling. But yeah, that's a good way to just rack up the bill. Not yet, but I will now. But you know, that's okay. That's why I come to these things. That's why I come to, it's FCon because you guys have better ideas than I do. So I'm going to limit myself now. Any other questions? So it depends on the channel. I believe like I have a 10 channel trunk. So we're talking about like 10 consistent calls or like like consecutive calls. So if you have like a line of 500 or 500 calls, 10 will go out at a time. Let's make that star 47. Right? Remember, we still have all these feature codes. And again, I am grabbing all these ideas. So hopefully I get to code it first. But yes, that is absolutely possible.   So ex-boyfriend, ex-girlfriend, call it to in the morning. Let's see if I can get any from this side. Any questions, guys? Yes. Yes, actually. You would have to set up an IVR to do that. So an IVR, for those who don't know, it's like an auto attendant. So you answer the call and it's like, so you're saying, press one for billing, press two for not getting owned, press three for an operator. So you can do that, yes. So basically the call would wait for input from the user and they could then pick their poison. Oh, I want to get call flooded today. Let's dial zero for that. Or let's get a thousand text messages. Let's dial two. That's definitely possible. Any other questions? Up front, where? I'm blind. Oh, yes. Respect, I guess. Like, I mean, there really is nothing stopping me from using any of the feature code. The PPX is my own creation as far as like, you know, the way it's set up, the call flow, et cetera. So I could set up star six nine to do an attack like this. I just picked these other feature codes because I didn't want to step on anybody's toes. Not that I would be, but it's almost like a, like a freak or honor code. Like, you know, I'm not going to mess with the system that's already there in place. I'm going to use that system, but let's keep six, you know, star six nine for what it is, you know? It's my own limit. Was there a question in the front? Wait, okay. Sorry, the speaker was like, sorry, the speaker was in the way and I don't mean me, I mean the speaker. If you had that question go and answer or ask it, yeah. I believe we have star four nine. Again, you guys, all of this is a very good question. All of this is potential and this is all within your minds of like, how do I want to code this thing? So basically what I put here is kind of like a, an infrastructure, a way to maybe do it. But remember, we don't have star four or four, we don't have star four or five yet. So what else can we come up with? Absolutely. We can do something like that. That can all be coded. Yes. I'm sorry. Now you're talking about toll fraud. Toll fraud. We'll call the 900 number and let, well no, I'm not going to call 900 number. That's three dollars a minute. But yeah, again, it's all potential, it's all there. Anything that you want to do, now it's up to your creativity. So if this is inspiring to you guys, cool. And I mean that's, that's where it is. We lay down some groundwork and if you guys have some coding ideas, follow me on Twitter, get me on GitHub and let's talk about what we can do next.  Within reason please. So I have five minutes here you guys. I want to just say thank you.  And it's not even day one of the con.


Oh, come on Okay, now now it should be and see Okay, okay, you're all set. Okay, perfect. Do you have the YouTube link for me in case any anybody writes anything into the chat? Yes, perfect see Looks good. I think you're all set. Yes. I think so too Let me close the other YouTube tab Okay, I think I'm just gonna start And see if it works. Okay. All right. Sorry for the troubles You're up and running and ready to go. Perfect Okay, yeah, thanks Oliver Welcome again from my side. I'm sorry for the technical difficulties. We're starting now a quarter of an hour too late We're doing this today at the new year for the first time so that I directly over OBS on YouTube stream On the YouTube channel from bubmab stream and yeah How that's always the case with the first attempt, then there was probably the one or the other technical mistake and the one or the other technical problem, so please excuse me again Nothing, though, I wish you all of course a very, very excellent, happy new year, especially for your health and that, of course, will also reach your trading goals in this year We definitely continue to do it this year with our bubmap discord streams here We will even do that in the future on a weekly basis That means even more content for you on German language and I'm happy of course as always when you join in and ask your questions You can use both the discord channel We are here as always Special events channel Write your questions directly in the channel or in the chat of streams or just use the chat function From YouTube. I'll take a look at that during the streams here all a few minutes Look at me to see if anyone has any questions Otherwise, at the beginning, as you already know our disclaimer You know that everything we show here today and do and do, that is purely Educational purposes and no trading recommendation. Everyone deals with their own risk This is not an investment advice Further I don't want to bother you with it So what are we going to have today? We're going to do the whole thing as usual And that means we're going to look at one or two live trades that I've been doing during this week I always take these trades per screen recording for my customers in the savings in investment academy And we'll take a look at that. I'll tell you a little bit about what I thought about it and why I went into these trades After we looked at the trades we always do a short market structure analysis in ATAS Look at the volume profiles and the market profiles where today so interesting zones are where trades for us come into view And if we go through with it, then we go live in bookmap and Look at what the ESO has been doing since the opening of the market, which is already in 13 minutes What he is currently doing, whether we have any interesting situations or any potential trading opportunities That as I said, right now, but let's start with the analysis of my trades And hopefully you'll see my screen here And we'll start with an ES trade that I did yesterday afternoon So, that's the wrong one Who knows me, I always click the wrong one first So, that's the 5 minute stream Basically, my trades always go a little longer. I break the whole thing here, but afterwards I always go down and play the whole thing a little harder So that we don't have to look at 20-30 minute trades So that we now have the whole thing compact within 5 minutes Let's go to the starting situation. I'll let the whole thing run for a while here Let's go to the starting situation We are here in the ES, as I said We are relatively short from the opening of the market Actually no time where I still like to go into trades In this case it was a really nice setup and I couldn't keep my fingers still The market has broken through the advantage and has now made this pullback to the advantage As you know, we are in an in-tact opening trend in the ES In this case it's a really nice situation where you can see that you're looking for the entry into long-term What do we see? We see here how the delta has reached the level of the trade from trade to trade We are still in the negative area Nevertheless, you can see how slowly the aggressive traders come back into the game We definitely had an increased speed of tape in this point where the trade has reached our level And of course we also see some movement in the bookmap here On the one hand the trade comes here at our level and what we have to look at here is this limit order Which has already been placed on this price Unfortunately you can't see that well now, but that's exactly at this price level Where the course has broken through the advantage before Something that is always very interesting, so-called flipping When we get a few orders filled on one side and at exactly the same price They appear on the other side Intention behind this can be very different These are both trap traders, but they are also very simple institutional market participants Who follow their very own agenda So always interpreting this correctly is of course difficult We have to go purely empirically to the point and say Okay, we know this pattern We have already seen this a hundred thousand times in the market When the market takes out such a level here and returns to a different level And we see that exactly at the break-through level here the liquidity returns Then it is definitely an interesting zone for us that we should have a look at Especially if we want to draw trades in a trend direction here in view Otherwise we see in the moment where the course is at our level The trade finder here shows us the plugin extension for the bookmap That I very, very like to use, two very interesting facts On the one hand, in the vicinity of the current course in Bit, it is properly edited Price reacts immediately and increases So we can assume that there is a whole bunch of spoofing with it That the market is definitely strongly suggested here Whether these orders really have the intention of being filled That has been set up, that is the rarest case here But we can definitely take it as an indication Especially in regards to the fact that the market has immediately started to rise That the buyers bring a certain interest here The third thing we see is that these small red lines that we still see in the background That are stops that fly here So here the first buyers had already been placed And obviously had here on this price range Almost under this limit order their stops are here in larger styles Of course you all know an indication for that That the market could quickly turn to such a point We call it stop-run, stop-fishing Depending on which term you use it for That the intention of large market participants Our other time-frame participants Here again to get the stops of the retail trader To use the liquidity to cover themselves again with other positions In this case in the shopping direction And then turn the whole thing in the opposite direction After the course then here a little bit this small one Had brought out between high and then here again Active buyers have come to the market I opened my position here at the small pullback Two contracts Who has been following the streams here for a long time He knows the first contract that I usually take relatively slowly To neutralize my risk here I placed the initial stop here under the VWAP The covers the whole thing Here we still have a bit more liquidity on this price That's why I put my initial stop order here at 87.50 And here where I see this limit order here in the ask I now have a tip before my limit order For the first contract laid here To simply get the whole risk neutral Even if I now completely stop here I still go out break even plus minus zero So now we have here this high This high from the micro range Get out and are also a bit over this limit order Also here we see again flipping That for me so the request was To pull the stop a little bit Under this local T4 in the micro range And as a target I had taken Here at least once to get to the local day The market marches beautifully in advance And I don't get too much resistance here Totally clear if the market now This comes up then Two things can happen Either we get the stop runner in the market Push the whole thing down again Option two is we get this liquidity up here Especially this limit here on the smooth 4000 Of course it's a nice round mark And not surprised that the market there anyway First of all will be torn off Option two or maybe three Then after the break out is that we really here See the rejection push over the price Stop fishing and then the whole thing goes In the other direction That's why here too Once again after this here This limit order has been pulled back Is further the stop pulled back To secure further profits here Also I see here that in this course Part of which is currently visible More on the hidden side Iceberg order technically Was bought as a sale That's not a very good sign For my trade Is also tendentially back running But are still quite clear here The buyers on the back Nothing that despite now I see here A bit algorithmic activity Order was pulled after Was pulled up That's why I have my stop here again Corrected something and pulled after In the hope that the algos here Play for me And my prices Or generally the prices here Then there was here again the push up That was not a very common push But that is now here 1530 Already the US market opening And you know there is then anyway In this case, if you do not Explicitly this US market opening Then there is anyway Yes, a reasonable order flow trading In the first minutes not possible Here would then anyway now Casino was either the course Make another cut in my direction Or it goes down in this case Is my stop order now filled here 312 dollars and 50 cents Win out of there After that the market is actually fallen First of all, in this case That was definitely the right decision Now from this moment relatively aggressive To manage We have a nice little trade here Definitely included You know of course In the course of the day Yesterday the course is still Really massive Walked on, but if I First of all here so far in the win Then I would like to Of course no more break even Let out or Or my all too much of my Give up my profits That is at least My approach to trading In this case I then here about the win Pleased and the trade closed So that would be trade 1 I'll take a quick look In the chat here Whether there are questions For all the new ones Are welcome to use the discord channel The special events channel Or of course Also the chat of this stream Or alternatively the youtube chat And you can always Your questions at any time As far as I can see Is there just nothing in there That's why we always do Here on with trade number 2 And it is from today And that is always So my favorite situation You're just opening the market You're doing your market analysis You watch the course And the market for 5 minutes And then you have the first Beautiful setup that you can see And can immediately take the first trade And when everything is going well You can have a party Of course everyone can decide But I'm actually Always happy with one good trade a day When my first trade Goes really well Then I like to take it with me Make bookmaps and stuff And take care of Other business days As I said Of course everyone can decide So once again Situation here in gold That's now gcfuture Also here we found Wait a minute Until I've blended in my art Then we can see it better Also here we are In an active Outdoor trend Both what the overordered In the target chart But also What our Our Our target trend is We are now Over the advantage And also over these white lines That show a level here Which I have In the context of my pre-media From the volume profile And this level Has proved to be relevant There was A lot of liquidity I always like to use that Or rather not to see The relevance of my levels Which I have in the context of my tomorrow Analyzed analysis to confirm When I see there is liquidity There are limit orders, then I know I can not have lived wrong With my analysis, there is actually Interest since institutional traders Exactly We saw the breakout We were already in here for a while You know the theory Liquidity that is away from the course And that is also Over several hours in the market That is in the real Limit orders that wait for it That is with this order At about 39 Here with this stop-run And then the second one At about 49 We have stabilized above the level It was accumulated volumes The market participants have the higher prices Accepted That is why I can use my level To look for possible entry For pull-back trades So now I have sabbed for too long And could have let the trades run See here How we push down Here again the situation Where we come back to this level And also to this zone Where the big limits are In this case there is no flipping In this case we did not see That these limit orders that are here in the ass Then here in the bit again Nothing despite here Right power of the Purchasers from the market Meet on this level Here is also properly absorbed We see that here Very, very nice in the PD plot Also that here is an indicator That is given to me by the trade fund And also here we see again This orange line here This stop run that has existed here Also here are again properly stops Retail traders probably floored The ones who have speculated That these local between Highs here in the micro range They did not have Also here the stops were picked up again And we can do that very, very nice With the trade finder here With the stop volume line After that we see How the delta Has risen That we see here wonderfully in the 5 minutes I would not call it as clear delta We come here from a delta of Minus 76 to Cheap 6 That is with caution to look Nothing despite we see The delta line here The market volume stop line Increases again and the delta We see here in the PD plot How the buyers come back At all here in this area Above the levels This is maybe also a very important Information we see very clearly Here in front of the golden colors So rather aggressive trade behavior As aggressive trading behavior Which of course This trade also supports again To look at the whole with caution Because here too we see Very, very much trading activity In the hidden area and No trading activity In any case to date The contract has been booked The first one I have here very well With the first contract I am here Right after the buyers Market line and with the second Contract then here Like I said, again a short stop run Long time no longer so intense as the first But then I was a little lucky That I got my second fill here The situation was also beautiful I get direct follow through We get directly the breakout here About the local high in the micro range Again a nice chance to pull the stops Now there is a little bit The first resistance That's why I My first contract Take out the initial Stop of the second contract Something more appropriate And with that in principle In fact already again from the risk I am now here You have to have a look at it Here was just a lot Algorithmically spoofed The situation you always have to pay attention Does he get his will or does he get Spoofed his will not get it Market runs immediately Nevertheless, here we have the local day Here we also see some Limit orders and liquidity And here we have to take a look Now when the market comes over Can we stabilize over it immediately Stay the buyers strong Or push down again Because that was of course A first signal Attention calls About our heads Flammen lassen Very poetic Exactly, if we Immediately be pushed back here Then we have to look at it as Stopfishing and then In this case, you would also advise To close the trade relatively quickly And now we see a very interesting Information, not yet So we have now come over Are not all Many stops flown Already not in relation to the movement here We also see buyers We see the white Bubbles in bookmap But So really The boys are missing We would now be here To talk about a successful breakout Definitely at the top of this Limit order at 9th 42 have to hold And now comes what I just Come here Dynamic Iceberg Development Dynamic Iceberg Development So an iceberg order That the trade finder has recognized That is even drawn down here So here is sitting An institutional who is trying here Hidden orders, native hidden orders That he has transmitted to the Börse To get into the trade In addition, we are now Again here under our breakout level What not necessarily Once again a real drive into the thing And we go up Set that he does not directly The video ends while I still Sabble a second Let's take a look Here the final situation So So It does not happen Where I have speculated That we can stabilize us here That volume is accumulated here You can see here in the volume profile There are immediately the rejections up here There is the iceberg order that is drawn down here There is a whole amount of absorption We see here properly How here market buyers are pushed in But the course just does not Further According to my original target up here At the 1944 where this larger Limit order The animal is not at this Time point, but not realistically That's why I then my target Here drawn down and So I also took out my second contract I took the whole thing With a total of $ 350 Win So that too A very, very nice trade Especially very early hours So you see that we are here shortly after 8.30 Around 8 o'clock I usually do my 8.45, 8 o'clock I usually do my Market analysis And there it is then you have to Be careful with going around In fact, I would not To start any quick shots That is to say Make market analysis Make a chart See the first trade and Click on buy or sell Or even make the chart Have not yet made any market analysis But think about it in the first place That looks like a very good setup I'm clicking in now That is usually No good ideas Take your time Draw In this phase also no Trades in view But first look Where are trading locations Where do you want to trade today Where do you see liquidity in the market Where do you see that In the past days and weeks Big parties positioned And Draw accordingly Locations in the chart And then take your time Take at least 5 minutes The markets you are trading Make a picture of Which trend phase we are in Are we in balance Are we out of balance Do we even have a gap And then if you made a good picture From the market Then you can draw the first trades In view That is of course not a duty But my good general advice So that would be my second trade In this sense Do you have questions If so, please write to me In the chat Both at Discord And also at YouTube, now I'll take a look Here at Discord I don't find the special events channel anymore There is the special events channel Okay Has not just come That means We will continue Where do we continue We continue with A short analysis Of the ES Let's take a look at our Market and Volume Profiles Here again my tip to you Switch back the profile On the previous trading day That is At 0 o'clock tonight So that you don't see What happened today So that you Completely unforeseen Go to the thing You don't know where What volume accumulated today You don't know in which trend We are today, but you see Just the past Historical data And can you on the basis Of this data Make a picture of the market And where in the past Interesting locations Have Again a word about The real meaning of Levels Of course you can do Different ways I like to use Market Profile And Volume Profile I always want to see Levels That confirm themselves in both profiles Of course the Volume Profile The more modern way Of such an analysis Of Market Profile But the absolute standard Still on every big I always want to Show Levels That I can see both in Market Profile And Volume Profile Of course I increase My probability That somehow it doesn't have Is that right? Is that right? All right I always want to see Levels That I can see both in Market Profile And Volume Profile This market analysis Is Of course relatively complex We teach the whole To our students In our trading training Here in our Bookmap Livestream I would like to show you a little bit But of course we will not So intensively and precisely Go to the subject How we would do it In the course of the day That's why the biggest Levels That are definitely relevant to me And I think That is understood by itself That the day before is high And the day before is low I do not always show with Orange color Day before is low With turquoise color A location is never A simple line But always A possible narrow price range Unfortunately it is not Not yet This beautiful Highlight Y function With that we could So to speak But that is not yet available The boys are working on it But that will come soon I'm looking forward to it Then I don't have to write a single line I think that's great That's about it Let's take a look In the day Yesterday To not see What happened today And then let's just Roughly on the price action Especially the price action of the cash I always have two profiles here One is the pre-session In the case of 0 to 15.30 And this is the cash session From 15.30 to 22.15 So the classic pit-handle Session where Classically the trade And then we see Of course in the middle A very, very marked depth And this marked depth We can see that here With a location Sign in Of course we also want That these locations in the historical Profiles are somehow confirmed See a very, very interesting Optional edge in the weekly profile And we also see A so-called latch Here also in the last week Ah, so maybe again A short word about what these Should be colored Blue in the background is always the month Profile in this case The month market profile And here on the right the month volume profile Lila are always the weekly profiles And usually gray In the foreground are my Daily profiles That's what we should say Exactly, that would be Three most important locations Up there we don't have anything Because the last high Here is already a while That interests us first time not further That's a bit advanced stuff But we can definitely Here Look in the market profile There we definitely see If we take a look at the youngest profile This beginning of the single print zone Here In the market profile That we should have in mind As the upper limit This TPO Berg is here And as the beginning of this single print zone Where here, in any case Some of the great Institutional dealers Are in the market We just let it in so roughly As it is So that would be my four Levels I would like to look for Now let's see How the whole thing Would have behaved during the day That we opened And what I did During the day And then we'll look at the whole thing In a bookmap And there we already see Very, very interesting We are here for a long time Consolidated Opened in balance At least in relation to Yesterday's cash session profile So the whole thing But Against Around 10.35 am We are here at our level Walked and very interesting We have it without Relatively great effort Stablished us And now of course A very interesting situation That we just had here at the US market The opening Where we just shook our fingers The pullback here at this level We are in an overordered At least what is happening today Overordered, of course, we are In an open trend What is happening today And the course in the pre-session In a local open trend And accordingly With the way it is How light this level was How light these stops were And how we stabilized Underneath the level And accumulated volumes That here in short trade At the pullback at this level Would have been an interesting alternative Look at the course Here in the course of the day Three such volume mountains are created In the course of the whole Pre-session From 0 to In principle Were these two mountains created here And actually only in this short volume Was accumulated as much volume As in the two mountains In a much shorter period of time That is In the pre-session at least Were here actually The lower prices Now let's take a look at the bookmap Because you can already see Our level has a massive Relevance How currently with this level Is being fought In this sense To the bookmap I will briefly Switch to Cash-Session So that this does not look too colorful Second So, what do we see here in the bookmap And what exactly did I just talk about In my trades That is here the downward phase And here at 14 1418 to 1416 For example our level was What was on our level There was a lot of liquidity And what happened Flipping The market is coming back At this level It's going to fall apart That would be here Eventually I don't know But it was a very interesting situation Where eventually A possible short trade would have come Then we have Further under this level Stabilized what you have to say We are again and again here At this break edge But always made higher depths So The technician would Speak of a rising triangle What he tends to That the course here Either goes over again and stops Or actually as it seems Happened here Stabilized over it Would that not be The market opening here I always wait at least A quarter of an hour Until I get the first trades in view But if that wasn't the market opening We would have had a lot of chances Here in Stop Run Also shown by the trade finder Here in Stop Run Showed by the trade finder That you could have seen In view For my part I would only be interested In the short trades That are interesting Activities Under our zone Where the liquidity was at 4,000, 9, 4,000, 10 points Here too we have An exorbitant situation Where it was properly sold But the trade finders did not Come through and immediately The trade finders came back If there was no situation That would have been treated What was interesting here That the orders were filled The market immediately moved Of course Too fast To fire from the gun And go into the trade At the VWAP I don't like trading The fair value of the market Are the dealers We get rotation That is not a good entry For a trade Down here With a great entry If you came under pressure If you didn't realize your first win But Those were no interesting Situations for long trades I would be interested In short trades A nice stop run down here The buyers were safe Got caught on the wrong foot 1545 Here is the liquidity Out of the markets There There must have been news I have to be honest In preparation for the streams And in the whole excitement That it did not work technically I have not yet looked into the business calendar Does this of course In the framework of your market preparation The view in the business calendar Is a must And if there is some essential news On the day Then you want to Then you want to be out of it At least 5 minutes And until 5 minutes after the news No trades I personally Would like to thank you Now very exciting We are now here I think again through our level So That's a thing we don't see That the US Just In other directions The European Here the lower prices Tested There were several stop runs As we just saw in the book But now the run up And now it will show Whether we can stabilize Whether the volume in the cash Session profile is accumulated Then I would tendentially Again interested in Trades in the long direction On the other hand Should we now Made a short cut here Again here at the V-Pog of the pre-session And now the whole thing Up and down again Let us fall under this level Then I would rather assume That this short trend This downward trend Continues of today As long as we are here Is that for me Is that for me in any case Now here actually I would be interested in A pullback at our level If there really is liquidity Should be inside And in order flow Then also indicates that these prices Will be protected there Then it would be a beautiful A step into a potential long trade Attention, that does not mean That I just come out Limit orders pack in the hope That they are somehow filled Then somehow goes up What I just wish here No, of course not Our levels are always only step 1 In the whole As a discretionary day trading Step 2 is always when the course At this level is The order flow analysis with bookmap And only if we actually see That this step, what for us In the foreground So Maybe not the most beautiful What we in principle In our analysis As the most likely scenario We thought about And if this is confirmed by the order flow Then of course we want to go Into our trade So that would be The area Around the 4,019 points We also see very, very nice Second My pen That I also So a bit established And drawn We are now here In a range Introduced And we have at the edges of this range Right clouds Liquidity So Once up here and once down here The scalper under you I personally do not count on that They can use such situations Now use it nicely Up here really Long trades on the depth of this range To look for short trades at the height of this range I personally will be very, very careful with that Because right now there is a lot of pressure Up And also some here At more liquidity here At least immediately near the course So that I now I believe a relatively A break up from this range Than the likely scenario Observe So for me In any case The trading opportunity Interesting that the course is really here In this area around the 4,020 4,019 points comes back And we here Out of the order flow Out of the order book Find opportunities Now we have here First the break up Out of the range up But also some on stop orders That was exactly the boys From which I just spoke Here the scalper that he speculated That we here on the upper side This range again The whole thing is traded down But here now Of course a lot of Stop orders fell 224 per piece Show us here the trade fall And now we'll see if we Above this line I have a nice magic pen here I have to take my epic pen You can also use something like that Where is he now? No epic pen there Epic pen crashed Then No epic pen So now we have a different situation Than those we just talked about Now we actually have the break up Over this edge seen These limit orders here Interesting what the course does When he comes back to this edge That is now no level more Of what I have drawn In the morning analysis I trade such situations Only in a really in-tact If we are in a Classical trend day And my levels That I have drawn In the context of the morning analysis Then I take such trades And try to get In the trade Otherwise it would be My preferred variation That he comes down here To my actually analysed level Of the morning analysis So We slowly get closer To the end of our session In any case very interesting What just happened here There could be some good chances Now we are through this edge And you see There are now Currently the traders That is why I do Then really like to Clear trend days And if the course Then also really Such a break up edge stabilized Where you can not yet Talk about it That is why I was Rather on my big locations And my big levels So if you still have questions Then you can I like it now It's my epic pen by the way No matter You can see me In the chat again I look again The special events channel through There is nothing so far In the YouTube channel Is currently also nothing Like to use the last minutes Otherwise maybe Once again a Two sentences in their own Thing My school That is The savings investment academy Let's see if I'm here Right now That's not it Give me a second For a moment I hope so It's going now So Presentation From current photos Ah, so look So We have Of course a cooperation With bookmap We have The affiliate link Down there You can use it To secure you Special prices And conditions For bookmap Right now In the area of Quarterly And the annual subscription But also the global version In the lifetime version Do you get Over this link To a very, very Very cheap price I'll post you The link Of course Again in the special events Channel And in YouTube So you don't have to tip it off Otherwise You can Me too Every time By email Under oliver.sparing at sparing-academy.de Or I'd like to On our website www.sparing-academy.de You can If you'd like to Also A personal conversation With me I'm definitely happy With everyone To chat about the topic Trading We have Our own YouTube channel As a sparing investment Academy With a lot of Yes Info videos About the topic Trading But also Our own live sessions And market analysis Sessions Under the name Hack the Futures Take a look And If you'd like We also have A podcast On Spotify And on all Podcast platforms That is The Börsenschule Where we Just Are free From the labor About our everyday life As a trader Chat And of course A lot Of interesting information About the topic Trading And tips About the topic Trading I'd be happy To hear from you So Now we are Through the level again Without great effort No buyers Look at this This PD Plot Line Missed In the first line The aggressors Against The aggressive buyers Against the aggressive buyers We are Ice cold Flushed Through this level Here The buyers had No chance Just To get there In a short time Accordingly We can Take a look At the top price Here First And then Of course To Short Trades Search Here again Our famous flipping So beware What the market does When it comes back To this breakout And With the V-Pog The V-Pog Is not our friend So much Be Tell At this point Well My dear Then Thank you To all of you That you Post That I'll do it again Just a second He Comes once Here at YouTube And Of course Comes again In the Chat These streams Why Post it as a picture That should Not be I'll delete it again Otherwise Questions are No longer That's why There it is That's why In any case On the next time With you And wish you A wonderful day Bruce We've got it Thank you for attending Okay Excellent Looks like You're all finished then Yes, we are Okay Excellent Thank you so much, Oliver Thank you, Bruce Okay, bye everybody See you next time Bye


K Government's management of the economy and will only further exacerbate the significant challenges faced by the Scottish Government. The UK Government's disastrous approach to Brexit has damaged labour supply through the loss of free movement of people and undermined frictional trade with their nearest markets. At no stage since the reconvening of the Scottish Parliament in 1999 have conditions been more volatile and the dangers more severe. In autumn, the Scottish Government had to make unprecedented reductions to its spending plans midway through the current financial year, totaling £1.2 billion. The Scottish Government had to do that because, once a financial year commences and in the absence of borrowing powers to address in-year volatility or the ability to alter income tax, it operates a fixed total budget unless the UK Government allocates any additional money to Scotland. For the first time since this Government took power, the finance secretary has announced a budget for the next financial year, assuming that the Scottish Government does not carry forward any fiscal resources from this year to next. For comparison, the Scottish Government for this year was underpinned by £450 million of resources carried over from the previous year, but the absence of that carryover increases the financial challenges that the Government faces. On the national care service, I am not sure where Douglas Lumsden was sitting in the committee room when we took evidence at health and sport committee from the many people who do support a national care service, especially the people with lived experience who want their care to be more joined up and more about what they choose as well. I am just wondering if Douglas Lumsden wants to ignore and disregard the voices of lived experience when we are trying to take evidence at committee. Of course I will. Douglas Lumsden? I guess that it is not so much about what the people with care experience are. Obviously there needs to be changes, but at this point the Government cannot even tell us what that is and how much it is going to cost. We have had a financial memorandum, came to the finance department—the finance committee, I mean—and was completely inadequate and had to be thrown out. That is what we are calling for. It is the clarity of what the national care service is going to be. Am I hearing that Douglas Lumsden is in favour of a national care service now, because the framework legislation is in process? We have not even got our first report from health, social care and sport committee, so maybe if members were a wee bit more patient and got on board, including with the lived experience of the folk that are saying that we should take this national care service forward, maybe the members should actually maybe look at the evidence instead of reading what they see in the papers. One final point that I would like to briefly touch on is local authority funding. Councils and their employees play a crucial role in our communities across Scotland and deserve the fairest settlement possible. In the most challenging budget settlement since devolution, the Scottish Government is providing nearly £13.5 billion in local government settlement this year. Just looking at the notes of what the Deputy First Minister has said just remind chamber that the additional funding for 2022-24 is on top of the £570 million increase in funding that has already been included in the local government settlement and the total additional funding for next year for local government is £793 million. I am conscious of time. In conclusion, I support this budget. I will vote for the budget at decision time and I will encourage my colleagues across chamber to support this budget at decision time too. We will now move to closing speeches and I call on Jackie Baillie to wind up for Scottish Labour around the minute. Thank you very much. Let me start on a note of consensus and welcome the additional money for Creative Scotland and of course for teachers pay. This budget will shape the next SNP leaders priorities in government. Nicola Sturgeon's replacement has a choice to make. Vote against this budget or continue her legacy of cutting local government, slashing public services and continuing the crisis in health and social care. Perhaps that is wishful thinking on my part. After all, many of the candidates have been sat around the cabinet table agreeing to successive cuts to local government for years now. Kate Forbes has been the cabinet secretary for finance and the economy for three years and on her watch council budgets have been hit year after year. She had an opportunity to transform the wages of social care workers but failed to do so. Humza Yousaf, Cabinet Secretary for Health and Social Care, should have spoken up for social care staff and services years ago but instead he voted for the budgets that have crippled them and he looks set to do the same again today. Ash Ragan has voted for every single council cutting budget since she was elected in 2016. I am not sure whether she is the one who gets the credit for securing a U-turn in funding for Creative Scotland or whether it is actually down to the efforts of the SCUC and the creative sector themselves. However, let me move on. With the announcement today, the Deputy First Minister claims to be passing on a £700 million increase to councils, but, according to IFS, when you remove ring-fencing, this amounts to no more than £71 million. That is equivalent to a £304 million real terms cut. I see him shaking his head, but disagreeing with the IFS is not a clever thing to do. The cheek of Humza Yousaf coming to Westin Bartonshire to launch his campaign when the SNP cuts are forcing the council to cut £21 million from essential services. Over 7,000 jobs across Scotland are under threat because of that. Councils are considering selling off buildings, outsourcing services to make savings or even cutting back on children's services. Whoever is lucky enough to take over from Nicola Sturgeon will have to answer to striking teachers, poorly paid social care workers and their own SNP councillors who have been forced to break rank and speak out against the damage being done because they know that this budget is bad for Scotland. We cannot begin to tackle the problems that are facing Scotland without addressing the crisis in social care. The lack of ambition for social care, which this budget displays, compounds the catastrophe that engulfs the NHS and serves to weaken social care further. The NHS crisis will not be solved if patients cannot be quickly and safely discharged when they stay in hospital comes to an end. It will also not be solved if we fail to invest in primary care, our GPs and health professionals serving our communities. There are too few GPs to cope with demand and the BMA estimates that we are 1,000 GPs short, so people will inevitably end up at A and E because they cannot get seen at their local surgery. The bottleneck at the back door of our hospitals is causing long waits at A and E and lengthy ambulance waiting times because of a lack of beds. That bottleneck is entirely because of the crisis in social care. Staff vacancies are increasing exponentially as they leave in droves to take jobs in hospitality and retail, and the safety of those receiving care is being compromised as a result. The Scottish Women's Budget Group and the Coalition of Care and Support Providers have been absolutely clear that the Scottish Government must pay social care staff more than the insulting 40-pence rise that they have been given. Just yesterday, a supermarket announced that it would pay staff a minimum of £11 per hour. The SNP cannot even manage to match that for social care staff. That is truly shameful, no wonder staff are demoralised and exhausted. Labour's proposals of paying an immediate £12 per hour, while continuing the fight for 15, have been costed and they are affordable. It will make a huge difference to sustaining care in our communities. Instead of paying staff a fair wage, the SNP continued to plough ahead with a deeply flawed national care service bill. It lacks vision and will not make an actual difference to care. Posing the national care service, funding urgent priorities such as staffing, ending non-residential care charges and increasing respite would make a real difference to care providers, to staff, to carers and to those cared for. There are still unanswered questions around how much the national care service would cost in VAT. Just imagine paying 20 per cent to the Treasury and not spending it on care. What about the pensions of the 70,000 public sector workers who will be transferred from local government to an organisation that they know so little about? No answer from the SNP. It is not unreasonable for workers to ask who will pay their pensions and how they will do so. However, the Government seems to think that those people do not deserve answers to such an important detail. Where is the budget that delivers the fair work nation? Where is the budget that delivers the 2019 commitment to fair work in social care? Where is the budget that will deliver on promises made to the trade unions about collective bargaining and about fair pay? It is not in this budget, it will not be in the next one. As with so much that we have come to see from this SNP Government, promise lots deliver little. Look, even Nicola Sturgeon herself admitted that local government is struggling with the financial constraints that the SNP is handing to them. The share of the cuts is worse than anything the SNP themselves have experienced. However, Scottish people are being asked to pay more, but they are getting worse services. They are being asked to foot the bill for 15 years of neglect from the SNP to their local communities. That is an SNP Government that is turning its face away from social care. An SNP Government turning its face away from the crisis in the NHS in the hope that sticking plaster approaches will work. An SNP Government turning its face away from those struggling with the cost of living crisis. An SNP Government is out of ideas, out of vision and out of time. The country is crying out for change, and it is Labour that will deliver the change that Scotland needs. Thank you, Ms Bailey. I now call on Murdo Fraser to wind up on behalf of the Scottish Conservatives around eight minutes. Please, Mr Fraser. Jackie Baillie was doing so well until she got to that final line in her speech. The annual budget debates are a highlight of the parliamentary calendar. Normally that is when we hear all the party's big hitters come along and deliver their great lines. In that respect, I think it is very disappointing that none of the candidates to be SNP leader or First Minister of Scotland, as far as I can see, even appeared in the chamber. Never mind contributed to this debate. I think we have to look forward to hearing speeches from them all setting out their vision for Scotland. Never mind, because we did hear a barnstorming speech from my good friend Kenneth Gibson, who never disappoints the chamber with his colour and his energy. I would say to Mr Gibson that it is not too late. You have until Friday to attract the necessary nominations. We would welcome you putting your hat into the ring, Mr Gibson, as a nomination. There is something of a tradition around the budget process that dates back to Derek Mackay's time when he was finance secretary, because what happens is that at stage 1 the finance secretary comes along to the chamber and says, every single penny has been allocated. Not another penny can be found if Opposition parties want to spend more money. They need to tell us exactly where in the budget they would take it from. As Opposition parties, we say, what are you hiding? They say that there is not a penny to be found. Every single year, what happens is that we get to stage 3 and miraculously more money appears. There was a running joke, members will recall, about Derek Mackay's well-stuffed sofa. Mr Swinney is not disappointed this year, because he has come up with an extra £125 million in Barnett consequentials. Thanks to the UK Government, and he has brought that money forward, he says, for more money for teachers. We are still not clear, and if you can clarify this in his response, that would be very helpful. Does that mean that a new offer is to be made to the teaching union? Or is this just money backing up the offer that was already made last week, which, of course, has already been rejected by the EIS? If Mr Swinney could confirm that point when he responds, that would be very helpful. The overall picture in relation to the budget is that we have a record block grant from Westminster in the current financial year. Despite the increase in inflation, the Fraser Valder Institute has said that the budget for the coming year is more or less protected against inflation. That was before the extra money came forward. We have a Barnett formula that delivers more than £2,000 per head of population additional spending here in Scotland compared to the UK average. That is extra money coming to Scotland thanks to the union dividend, and we should never forget that. A budget is, as a number of members have made clear about choices. We set out at stage 1 our alternative approach. We would do things differently. The national care service, an estimated to cost £1.3 billion over the next five years, is something that we would scrap. I do not know where Emma Harper has been, but four committees of this Parliament have produced reports slamming the plan for a national care service and pointing out the weaknesses in it. Even a candidate to be First Minister, Ash Regan, on the SNP benches, is calling for a rethink. We have a growing consensus on all the Opposition parties, and even a candidate for First Minister is saying that it is time to stop the plan for a national care service. Good does not add up, and that would free up the resources to spend elsewhere, for example, on local government. There is a more fundamental point about the size of the budget. Fiscal devolution means that the amount of money that the Scottish Government has to spend is directly tied to the relative performance of the Scottish tax base compared to the rest of the UK. We know that, since 2014, the growth of the Scottish economy has been, on average, one-half of the rate of the UK, as a whole, a point that I made to Mr Mason earlier. If we had at least matched UK growth, we would have hundreds of millions of pounds more to spend on public services than we currently do. Tackling economic underperformance must be a priority for this Government. I was very pleased to see another candidate to be First Minister of Scotland, the current finance secretary Kate Forbes, who was saying in the newspapers at the weekend that she used to put a rescue plan for the Scottish economy at the heart of our leadership campaign. The current finance secretary is saying that we need a rescue plan to save the economy from her own Government that has been in power for the last 16 years. You couldn't make it up, Presiding Officer. That's what the current finance secretary is saying. Despite the announcement today on more money for teachers pay that we still need to get clarification on, what is happening to local government is that core funding is being cut in real terms. We heard from a number of members across the chamber about what the real term impact of that will be, as councils have to set their budgets in the coming days and weeks. Sarah Boyack talked about the impact on the community that she represents. Miles Briggs talked about cuts in home-to-school transport, cuts in the outdoor education. Stephen Kerr talked about the possibility of four swimming pools in Falkirk closing. Others talked about cutting recycling centre hours. Pam Duncan-Glancy talked about cuts to the third sector in Glasgow and increasing charges. That is coming from every single council in Scotland. Even SNP council leaders are revolting at the prospect of what the Government is going to do to them in cutting their spending. The finance secretary talked about the child payment, and the child payment is welcome, as Liz Smith said. We have welcomed it, but we have to look at what else the budget will deliver for those who are disadvantaged. If at the same time as there is a child payment, councils are cutting breakfast clubs for disadvantaged children. They are cutting free swimming lessons for young people who therefore cannot learn to swim. They are closing libraries and arts programmes. That is no way to help the disadvantaged. What the Government is doing is giving with one hand and taking away with the other in this budget. Mr Swinney mentioned the social contract. He mentioned the fact that there are services in Scotland available free and are not available elsewhere in the UK. That is true insofar as it goes. The problem is that those free services are rationed. NHS dentistry is free in Scotland, but it is impossible to find an NHS dentist who will give you an appointment. I had a letter this morning from a constituent in Kirkcaldy, making exactly that point to me and blaming on Humza Yousaf yet another candidate to be First Minister. Higher education is free, but, thanks to the SNP cap on numbers, many talented youngsters as Liz Smith and Stephen Kerr said earlier simply cannot get a place at university. We have free parking at hospitals, but it is often impossible to get a space. We have free bus travel for young people, but bus services are being cut across the country, so there are no buses for them to travel on. That is not a record to be proud of, Presiding Officer. Presiding Officer, this budget does nothing for the economy. It is not the rescue plan that the finance secretary has called for. It does not deliver the 75 per cent cut in rates for retail, hospitality and leisure businesses that apply south of the border to the same businesses that are reacting in horror at the moment to the introduction of the ruinous deposit return scheme, yet another calamity from this Government. The budget delivers higher taxes and savage cuts to council funding, and as councils meet in the next few days and weeks to slash services, to close libraries, to close swimming pools, to cut leisure centres, to cut breakfast clubs and to cut funding to the third sector, it is clear that Mr Swinney and his Government have to take responsibility for all those cuts, and that is why we cannot support this budget this afternoon and will vote against it. I now call on Deputy First Minister John Swinney to wind up on behalf of the Scottish Government, and if you could take us to decision time, please, that would be great. Thank you, Presiding Officer. Let me begin with the remarks that Miles Briggs opened his speech with in a generous welcome to the chamber, to James Dornan. I associate myself very much with the welcome back to the chamber of James Dornan, but Miles Briggs did so in a spirit of generosity that is necessary and appropriate in a Parliament. Frankly, we need a bit more of that in this Parliament, and I want to commend Miles Briggs for that welcome. I add my words of welcome to James Dornan. It is lovely to see him back in the Parliamentary Chamber. There are a few points of detail, if I can put it as mildly as that, that I would like to correct from the statements that have been made by colleagues. Douglas Lumsden mustered up the motivation that he would have to vote against this budget because of the cut that has been made to the men's shed movement. I can assure Parliament that the men's shed movement has been offered the same amount of funding in the next financial year that they were given in this financial year, so there is no cut there. Mr Lumsden has just lost one of his reasons for voting against this budget. The second reason that Mr Lumsden gave was about the condition of school buildings. When this Government came to office in 2007, 63 per cent of pupils in Scotland were being taught in good or satisfactory school buildings. That is the school estate survey, 63 per cent. I remember the former Presiding Officer when he was a Labour spokesperson, lecturing me in 2007 that not a brick would be built by the SNP under our school building programme. Not a brick were his words. Now, over 90 per cent of school pupils are being educated in good or satisfactory school buildings. There is another excuse from Douglas Lumsden, just removed, about his ability to support the budget at decision time. A number of members have commented on the situation in relation to funding for culture and the arts, particularly Sarah Boyack, who tried to intervene on me in this point in the debate in stage 1. I was unable to take her intervention. The difficulty-facing arts and cultural organisations is of a perfect storm, where there are challenges in the public finances, in lottery income and in the purchasing of tickets and financial support to cultural organisations because of the cost of living crisis. That is all coming together. I have to be candid with Parliament. The Government cannot solve all of those challenges. That is why I have intervened to the extent that I have today. There was no cut being made to arts and cultural organisations in the Government's budget. We are asking Creative Scotland to use its reserves to provide stability, but we have put new money in there to ensure that those reserves can be used to enhance provision and to provide some of that respite in the perfect storm that is being experienced by the arts and cultural organisations. The Government will continue to act in that fashion wherever we can, of course. Sarah Boyack, I very much appreciate the Deputy First Minister taking intervention. If we had the time to debate this, we would, but there are other things that the Scottish Government could do, like tourist visit or levy. It does not fix everything, but it is a modest change that could be brought if councils want to. I will send him the report of my culture round table in October, because there were some very good practical suggestions made by the sector. I welcome that. I know that the Minister of Culture is happy to engage with Sarah Boyack on that point. On the tourism visitor levy, the legislative provisions are being prepared for that to be introduced to Parliament. Parliament will have the opportunity to scrutinise legislation on that point relatively shortly. I am sure that a measure of that type, which will empower local authorities, will be warmly welcomed by all sides of the Parliamentary Chamber, a bit like the parking levy legislation, which was so warmly welcomed by the Conservatives. Emma Roddick, I thought, made a very, very significant point in the debate. When she highlighted the amount of money that the Government is spending in Scotland to mitigate the welfare policies of the United Kingdom Government, she put it into perhaps common parlance by illustrating that the total amount of money that the Scottish Government spends on mitigating UK Government welfare policies amounts to 38 times the cost of a referendum. So we could have 38 referendums, the thing that they banged on about in exchange for the welfare cuts that are being inflicted on the people of Scotland as a consequence of the UK Government. I am very grateful to the Deputy First Minister for giving way. While we are on the subject of measuring things by the amount of referendum costs, can I remind him that he proposed earlier to expend twice as much on a referendum as he has been the entirety of the 200,000 sufferers of long Covid budget, and this budget does nothing to them? We are spending £19 billion in the national health service with a £1 billion increase in this one year because we have taken the tough decisions on tax. Part of the difficulty and the challenge that lies before me, not least in the balancing of the budget this year, is the competing propositions that we hear from different sides of the chamber. Liz Smith, for example, demanded that I spend much more of the budget on supporting the productive end of the economy, which she defined as high and middle income earners, ignoring the fact that those individuals benefit from the social contract of early learning and childcare, free personal care, free prescriptions, free ITS and no tuition fees for their children should they go to a Scottish University. Pam Duncan Glancy, who said that there was nothing in this budget whatsoever to tackle inequality, managed to skate past the £450 million that the Government is spending on the Scottish child payment. That is an illustration of the fact that the Conservatives want to undermine the budget by not supporting the agenda, the progressive tax agenda that we are taking forward. The Labour Party does not want to support us in our journey to try to tackle inequality by measures such as the child payment. That illustrates just the scale of the absurdity of the propositions that I am facing here today. I thank the Deputy First Minister for giving way. There is no absurdity whatsoever in many of the statistics that the forecasters have set out about the need for Scotland to have far more higher-paid jobs so that we are improving productivity and attracting people to come to Scotland and to live and work in terms of all the things that they have to provide. There is no absurdity in that, because we desperately need that increase in the tax take and the productivity so that we are able to do far more things. Has Liz Smith not read the Scottish Fiscal Commission's report on the budget and the tax projections, in which it makes very clear that the income earnings growth in Scotland projected over the next five years is a source of great encouragement? Why can't the Conservatives welcome that as an indication of the progress that has been made here in Scotland? Of course, much of that gets to the heart of the choices that this Government has made in the budget. In approving this budget, the Government believes that we are investing in Scotland now and in the future. The decisions of this Government, created in partnership with our colleagues in the Scottish Green Party, have created a tax and benefit system in Scotland considerably more progressive than that in the rest of Great Britain. Scottish reforms to the income tax and benefits system are set to raise the incomes of households with children by around £2,000 per year on average. Those are not my words. Those are the words, Jackie Baillie, of the independent institute of fiscal studies. They are a vindication of the policy decisions that we have taken to advance that agenda. Anyone who votes against the budget today is voting against the substantial steps that this Government has taken to use the powers of this Parliament to make Scotland a more progressive country. I am grateful to the Deputy First Minister for Government. Given that he is quoting the IFS in its report on the budget, it states very clearly that, compared to 2009-10, local government funding is 5 per cent lower per person. If you strip out ring-fencing, that is 8 per cent lower. Does he recognise that analysis and what difference does the announcement made today make to that analysis? We have been around the houses several times this afternoon. The first point that I made to Mr Johnson is that he has, in any way, obliterated from his recollection the decade of austerity that we have suffered at the hands of the Conservative Government. We have been wrestling with that all the way through. The second point is that local authority funding. I know that there is a great debate about ring-fencing, but I have just announced a budget settlement that increases local authority budgets by £790 million for the forthcoming year. Why cannot that be welcomed by the Labour Party in the course of this debate? The impact—yes, I will give way to Mr Fraser. I am very grateful to Ms Winnie for giving way. Can I just get some clarity on this point from him? Is the extra money going to local councils to support teachers' pay? Is that reinforcing the offer that has already been made to the teaching unions, which has already been rejected by the EIS, or is it there to support a fresh offer? There is the Government's contribution to the existing offer that has been put on the table to local authorities. I make the plea today. Mr Fraser can bang on all he wants about the teachers' pay deal, but what suggestion is Mr Fraser offering today about how much money we should put on the table for that deal and where should it come from? Mr Fraser has spent £1 billion this afternoon, and he has not come up with one sentence about where the money is coming from. Mr Fraser has got the brass neck to talk about leadership elections. He failed in every leadership election that he went in to get the Conservative party, just like he has failed in every single election to try to defeat me and Perch are North because I have beaten him in every single living time. The budget changes that I have announced today respond to the points put to me by political parties and stakeholders. Today is the day when Parliament must decide. Is Parliament prepared to put the finance in place to pay the Scottish child payment? Is Parliament prepared to put the resources in place to support the transition to net zero? Is Parliament prepared to put increased resources into health, education and policing to meet the needs of the public? The Government is prepared to do that in partnership with our Green Party colleagues. The challenge to the Opposition parties is whether they can recognise the scale of the challenge that we face and support the budget, or are they going to posture with no answers to the issues that we face as a society? I am proud to commend this budget to the chamber, and I urge all Members to support it.