Marines and sailors with Company C, battalion landing team 1st Battalion 4th Marines, 31st Marine Expeditionary Unit insert the CH-46E C-9 helicopters to conduct a mock raid on an insurgent stronghold. The assault force engages role players with simulated ammunition, securing multiple heavily defended structures as part of a certification exercise. Flying from the deck of the USS Essex, currently floating off the coast of Okinawa and engaging live aggressors provides a realistic test of the Marine's skills. We're shooting at other people, they're shooting back at us. We have cash and tees. I mean, this is really something to get in. The training is one of many events designed to certify the capabilities of the 31st MEU before deployment. Marine Sergeant Paul Robbins Jr., Camp Schwab, Okinawa.


Welcom y toffie TV ydy, toffie picks Arsenal vs Everton. Don't forget it's free to play. We are giving away prize pots of £500. Tees and sees do a play. It's got to be 18 to play. Please play responsibly. If you haven't joined already, toffiepicks.com the link is in the description. Let's get into it Arsenal v Everton Friday night. We can actually talk about football again. Football you say? After a mad few days in which Arsenal won one of... One of the scummy six. One of the sly six or shameful six. Well I've got another way for them but I won't use it on this. Don't use it on this. But that, you know... Still, they haven't been kicked out of the league. In fact they've been probably welcome back with open arms. But it would be nice for Everton to go there. The nation, this is what the nation wants. I just wanted to see Everton warming up in and the right t-shirts. I think they should still do it. I don't think we're going to do it. I think we should still do it. We should all take an open special t-shirt. And the right one. No, go and use it all, whatever, whatever. Very naughty boys. Very naughty. So tough game Friday night anyway. But it's football Everton. Three games without a win. But more than that. I'm thinking of the draws we've had. But it's an important game. Because that's not only three points behind Everton in the Premier League and obviously for Everton. If they are still trying to get into Euro, we need to go and win again, don't we? Definitely. We blew last week against Spades. We should have beat them. We blew that. Anyway, let's get into our picks. Yes. So if you're playing along, do so now because we're going to do it. There's also a win me where you can win £5,000 cash and a tech bundle. If you tick it to the pound if you are interested in that. It's up there. Let's go first question. Will Everton score in the first half? We did score in the first half of our last game. I've said yes. I'm going for yes. Go on then. I'll go yes as well. I'm not co-hasing anything. I'll go yes. That is locked in. I'm feeling positive. 64% of Everton fans have said yes as well. Will Everton score in the second half of the game? Again in our last game we did this. Again I've said yes and 76%. I've agreed it. Do you know what I'll go yes? Because if I'm wrong I'm wrong. I mean it is random. You don't know what you're getting but Everton's over. Exactly. Question three. How many goals will Everton score? Everton scored two in the last game. I've gone for two in this game. So mine are locked in at two. What are you going for? I'm going for one. I know that goes against what I've already said. But it doesn't matter. I'm playing the game. OK. How many goals will Everton concede? Everton concede at two last time out. Of course against Spares. Basically through two in the net against Spares. 56% say one. I'm with that 56%. I'm going one. I'm going two. OK. Fair enough. Question five. How many saves will Everton's goalkeeper make? 95 saves so far Everton keepers have made this season. I've gone for four plus and 59% have agreed with me. I'm going for two. OK. Going for two saves. I like yours better than mine. OK. I'm going to go for two. Two percent. Will Everton beat Arsenal? We drew last time out. We beat Arsenal of goodness and Don't Forget in December. I've said yes. I'm going for a two-one win. So I've said yes. I'm going for no. OK. Really positive. 63% say Everton will beat Arsenal this weekend so far. Question seven. Will Dominic Calvert-Lewin score? Expecting him to be fit. And I'm saying yes he will. I'm saying he's coming back into the Everton side. And he's going to score. Scored last year didn't he? And Arsenal's going on with a bicycle. Over that kick type goal. And I'm saying he's scored again this year. Yeah. Going out. It's about 20, goal 20 of the season for him. 50% of Everton when he was playing said no. Which means maybe 50% have said yes. Question eight. Will the Charleston score in this game? He didn't score in our last game. I'm saying no. 56% of the game at me. Yeah. I'm going to say no. I'm going to say no. I've scored a game for him. Question nine. Will Hammers-Rodrigus assist a goal? He's your fourth assist this season. I'm saying yes he will in this game. I'm going to say no. I'm going to say no. I'm going to say a Guilfey-Sigarton assist. That's literally the next question. Will Guilfey-Sigarton assist a goal? I'm going to say yes. 63% say no. Surprisingly I've said yes as well. Did you go? I'm feeling like Zeppleys. That's what I'm feeling. Question 11. How many tackles will Alan make? He was very good for Evan last week. He had six tackles against Spades, which is a lot. I've gone for four in this one. I expect him to be busy in the midfield. I'm going for three. 40%. I'm going to go for three here. Question 12. The final question of this game. How many corners will Evan be awarded? We've got six corners in our last game against Spades. I'm going for four plus. I'm going for two. Two corners. I'm not feeling it. I'm not feeling the corner action. The Zeppleys that you were going off was scoring off both corners. No, no. I'm going to say three kicks. That's fine. They're locked in. I've submitted the picks. That's how easy it is to play. It's free to play. You can win a share of £500. The last time out, we had five winners. They were all £100 each, which was brilliant. This could be you. Good luck if you are playing. If you haven't signed up yet, it's toffypicks.com. Get involved. See how you do it again. It doesn't say much to beat us so far. We are not having a great time. The opportunity is there to win some money. Good luck if you are playing. Please play responsibly. Teas and seeds do apply. You've got to be 18toffypicks.com down there. That is it from us. We will be back next week. Give the video a thumbs up. Subscribe if you haven't. If you want more videos, join us on Patreon. See you later.


vice um with that president right i think that's all i've got for tonight all right thank you mr mayor is there a motion to adjourn moved by councilor hartnett seconded by councilor ruff all those in favor of adjourning please say aye aye any opposed we are adjourned thank you very much


Offensively, Justin Jefferson and you said it afterwards, hey man, couldn't help but pay your respects, I feel like, to how he played and what he did. I'll tell you what, I told Justin after the game, I said he was the best player on the field. And I meant it. I didn't say at Chong and Cheek, I've been a fan of his since I watched him in college and he's a dynamic player who is an excellent route runner. I'm sure as any good player should do and would do, he's probably watched the bestest position over the last couple of years and that would be probably Devonte Adams. Because a lot of his release stuff looks pretty similar to 17. And he was the difference maker, I think, for the entire game. Hey, Kirk's very steady at quarterback and did a nice job, looked like getting him in the right stuff and making the plays that were there to make. But Justin, obviously, was a difference in the game. Yeah, this is a cool moment. Everything you say and do is going to get recorded. So I assume Justin was happy to hear that from OG. Legend.


Ah, good morning everybody, how are we? Unfortunately, I'm still on my own. Eight o'clock in the morning, been up since about 6.30. Had thoughts of cracking into some reactions, I thought nah, nah, I'll just wait, I'll go to the supermarket, I'll get some milk for Tate when she comes around and I'll get myself a coffee which I've just done, so I've got back now and I don't know when they're coming round, I think they might come round at like 10. So what that means is that I've got another two hours just to kill, do nothing. And that's just a waste of a day, isn't it? So, being Christmas Day, I thought I'd give myself the greatest gift of all, and that is to go and do some reactions. So that's what I'm gonna do now. Yesterday, I went through Leonard Fawnette and then I did some reactions on marijuana in sports. Today we're gonna crack back into the running backs with Kristen McCaffrey and Saquon Barkley. So guys, you'll see this video as soon as my daughters come, as soon as they open their presents and as soon as I can edit it. And for my daughters watching this in the future, your dad loved to create videos. Your dad loved to create. Your dad loved to entertain. And this is just part of it. So, guys, Merry Christmas, it's Christmas, it's Christmas. I actually went down to the shop and people said Merry Christmas to me and it puts a smile on your face, man. It's a great day of the year, fantastic day. And, well, it's only just started, so I'll see you later. Right, you guys. The time is here. The girls have arrived. I'm gonna set the camera up and have some fun. It's Christmas time, yeah? Christmas time. We're ready? It's not much. It's not much. Honestly, I feel kind of bad, but it's all I can do. Hopefully they like their presents. I felt bad. I feel like I should have got Tristan like some rattles or some toys or something. She's not gonna be able to read books, it's just dumb. But then that's just me second guessing myself and going back to those times earlier on where I felt like I wasn't a good dad and I couldn't be a good dad. So let's do it. You need to get shoes. Leave it. Gotcha. It's Tate's size. How do you want Sissy's? Sissy's. That one's not yours. Leave that one, that's my one. Hang on, Tate, guess what? Tate's ones are pink and Tristan's ones are purple. So Tate, your ones are pink. Pink, this one, this color. So you open one and I'll open one. How's that? Open. Okay. Turn the carpet so we'll see what they've got. I showed you what they've got. Next minute. Alright guys, looks like it's family affair. Daddy. Yay. Daddy. Tristan's there. Daddy. Daddy, that's my name. Yep. Hey. It is. Ah. Christmas Day 2019. Hey, where are your presents? They're there. Where's the tree? Oh, you better open one. You can open that one. It's a book. Oh, who's on the front? Who's that? That's Sissy. Daddy. And that's Tate. Little. And that's your little bear. You like drawing? Hens, you can make pictures. Okay. And then rub it out and then start again. Well, you want to help me? Okay. Okay, come and help me open it then. What is my present, Tate? This looks pretty cool. Or a bracelet. With your name on it. Look. That says Tate. And Sissy. So I can wear it and think of you guys all the time. We've got to finish opening your presents. You've got one more. Do you like Frozen? Okay. You do? Look on the top there. You can draw on it and then eat it. Yeah. Let me see. You can decorate it yourself. You can make that today. Hearing your daddy make it, hey? Let me show you the camera. What do you got? What do you got then, Tate? Wow. Do you want to help open Tristan's present too? The purple ones? Wasn't too good. Let's see that. Can I help your sister open her presents? Yeah, we've still got more. We've still got more. Help Sissy first and then you can play with it. What's Sissy got? Put Sissy. Sit down with Sissy. Show her. That's a good girl. Another book? You have lots of books, don't you? Who's that? Wow. You can tell she doesn't really like books. Little red riding hood. He's going to have your own library soon. That's what we want. We want lots of stories for bedtime. Hey. Is that it? Well, I better open mine. Excuse me. There's one there. There's one more each. I wouldn't dare open the last one. Look behind the chair. It's there. On the other side, darling. Okay, now we can open one each. Okay? To daddy from Tate and Tristan. Thank you, Tate. He looks and helps. There you go. Rip it. Rip it off. There you go.  There you go. As you know, that's a classic book, Tate. And your dad had the exact same one. Wow. Wow. Great story, eh? Where's the sun? Where's the strawberry? Where's the kiwi fruit? You got it. Where's the caterpillar, though? You've got to find him. There he is. Okay, I'm going to open this now. Okay? I've been waiting for days. Chocolate, please. Coffee, so that's definitely going to be used. That's a great idea. It's your new Merry Christmas. Thank you, darling. Yep, throw it away. It's you, look. I'm okay. I haven't had breakfast yet. This one, huh? Snickers. First Christmas together, eh? I missed last one. There you go. Thank you. Wow. Look at all this. Chocolate. Oh, look at all this. So what did you get, the girls? Pizza stuff. Is that yummy? Yes. Clothes, lots of jewellery. Earrings, bracelets. Should I buy her a scooter? Yeah, I wanted to get a scooter, but I knew. She already had one. Coming. Well, she always needs jewellery. It's not so easy. I actually wanted to get a basket, but the basket will hurt, like a miniature one. What else did you get? I've only got two twos, matching two twos. Who'd you get all that from? Two twos. Two twos? No. Little dresses? Dresses.  And lots of coloring stuff. That was her favourite. And the paint. Okay, I'm going to go. Yeah? The car. Yeah, I'm going to go in the car. No. Let me say hi to Daddy and Sissy. I haven't had to pack up Christmas paper in years. That will be. Here, go give these to Dad. Give me a kiss. I'm going to go. Hmm. Wow, wow, wow. Christmas 2019. Oh no. Oh no, you broke it. Oh, that can be Daddy's one. Can I have it? Or you want half? Okay. Look at you. Oh, he's so cute. Beautiful girl. Okay. We have half each. So, you can have half. But what's in your mouth? Are you going to eat that? Okay. But you're going to choke. And half for me. Me. Cheers. Cheers. High five. Merry Christmas, everyone. I'm going to call it quits here. Like I said at the start of the video, I just wanted to document this. Special times, man. Special times. Isn't it, Tristan? I'm going to play with these guys for a few hours. And I just want to wish you all a Merry Christmas and a Happy New Year from mine to yours. And with that being said, peace out, everybody. Say bye. Bye.


The magic of 350 is to be able to change the lives of lots of people socially and environmentally, economically speaking. As of 350, I have met the love of my life. So this is an incredible moment that I will be forever grateful for 350. And the second moment, it was a moment that we were going to a field visit in an oil spill in Rio de Janeiro. So we were going with the fishermen to check the area of the oil spill in the river, in Guanabara Bay, around mangroves. And the people from Petrobras, which is the oil company in Brazil, were not letting us in to check how everything was. But with the fishermen, we managed to get by the river. We crossed a border by boat and we jumped to the river and we entered into the mangrove. And we managed to get inside and register, take lots of photos. And we were able to put all these images and all our questions to say that Petrobras, the company, they were lying because the oil spill was still going on. It was not sold. And the amount that was leaking was way higher than actually they were in foreigners. My hope for our 350 for our future as an organization is that we can continue doing this amazing job in the whole world. That we can grow as an organization and we can be an even more inclusive and diverse and continue to make this change, this amazing changes in our world and fight climate change. That in my opinion is the biggest threat that we are facing as humans in the following centuries. Congratulations 350!


Thanks for checking out this movie review video. This is for the 1980 film The Shining. Yes The Shining Big big big fan of this film and it's actually one of my favorite films not just horror But all-time one of my all-time favorite films, so I've always been wanting to do a review of this I knew I'd get to it at some point But I just didn't know when but now is the time because I'm planning on doing a review of Dr. Sleep and I thought well if I'm gonna do a review of Dr. Sleep shouldn't I just watch the Shining first do a review for that then do an even better review for Dr. Sleep because then I'll be fresh with my knowledge from the Shining movie which I hear it ties into as well as the actual books By Stephen King because obviously the Shining is based off a book by Stephen King But Stephen King hated the Stanley Kubrick's the Shining because it deviated very far from his actual book Now I will say I haven't read Dr. Sleep or the Shining so Sorry, I'm not I'm not a big reader. My reading mode is more Magazines I do read some books here and there but it takes me a really long time to get through a book and Stephen King's books are huge. So they're very intimidating for me. I'm just more of a visual person. So Just know that So obviously written by Stephen King Stanley Kubrick, like I said changed a lot He's best known directing wise for movies like Spartacus Dr. Strange love 2001 a space Odyssey clockwork orange full metal jacket and eyes wide shut all Really good films in my opinion. He did some other ones in addition to that One of these situations where he died much younger than than a lot of people wish he would have because he was a very amazing directing talent and It would have been awesome to see what else he he would have ended up doing so Sucks that he was lost when he was. I knew he had started doing that film AI that I think Spielberg finished I think he started it. I don't know how far he get he he got maybe halfway or so and then Spielberg finished that film I haven't seen that one had Haley Joel Osman in it, but yeah So obviously Jack Nicholson is in this one. He's amazing. His performance is ridiculously good in this I'll talk about it a little bit more later Shelly Duvall is in it her performance not so great, but It's quite possible that that's because she had a terrible relationship with Stanley Stanley Kubrick during the making of this film She hated him pretty much because he did a lot of things to her And I don't know like there have been reports that he he was crappy with her because He wanted to stress her out so it would help her acting for her Typical character, but she got stressed out to a point where apparently she was like losing her hair It was bad So I don't know if part of her bad performance came from just having a terrible time on set I could see that happening, but I don't like her performance in this and especially when it's next to How great Jack Nicholson was it looks even worse Scatman Crothers in this he does a fun job. He has a lot of fun with Dick Haller in that character I really love that character. I hate the fact that that character doesn't get used more to be honest But I'll also talk more about that later And then Danny Lloyd who played Danny the kid in the film Which I will say I met Danny Lloyd in person at months the last Monster Mania And you can check out my review of that Monster Mania on my channel and I'll you know I talk in there and I show you what I got signed by him and you know But basically he doesn't remember a whole lot from the actual shooting of the film because he was so young at the time What he remembers most is the scenes of him riding around in the hotel on his big wheels Which look great I love those scenes because they're the way they shot him with the steady cam just like following him It's really cool. You don't know what's coming as he goes around turns and it just feels like a really cool Exploratory adventure for the audience and that's why I love those so much. I mean the Let's just call it out right now. This film looks amazing like it looked amazing in 1980 It looks amazing now, you know, I watched it on a DVD copy and it still looks Amazing like I know this is remastered But I know there's probably been a blu-ray sense that I should probably just buy a blu-ray of this because it's one Of my favorite films and I will Just haven't gotten to that yet, but even still just on DVD It looks ridiculously good and that's because the directing is phenomenal the cinematography is ridiculous I mean just the opening scene of like that panoramic just like tracking shot of the car Going up the side of the mountain. It's beautiful. It's breathtaking Just everything about the visuals Unbelievable one of the reasons is one of my favorite films, but I'll talk more about the visuals a little bit here and there So the budget on this film was a 19 million dollars and it ended up making 46.2 million which you know, that's a good profit for 1980. I'm not gonna say the back's back Information on this I'm not gonna go into some of the typical stuff that people talk about with it because a lot of people know a lot about the shining Especially if you're a horror fan a lot of information out there So I just kind of wrote down some of the things that I didn't necessarily know when I was researching it so I did know this but it bears repeating that they shot the internal scenes on us on a stage at a studio The the overlook hotel there you can actually go to the overlook hotel. It's still there But they only really use the outside of that so, you know, it's probably why it's such an expensive film to make at 19 million in 1980 so There were a lot of different length cuts of the film that that had been ended up being put out I've only seen I think one version of it But I will say I actually have seen the film in the theater At one point which was one of the most amazing Film experiences of my life. It was it was life-changing as far as my relationship with the movie the shining I loved the shining at that point and my theater experience with it Made it shoot up to being one of my favorite films period because seeing it on such a big screen and being a captive You know, you're not watching it at home You don't get distracted you're captive and you have to focus It makes the hotel feel like even more of a character and it feels like you're in it It's it's amazing just to see it that large and it's just it's life-changing I mean, there may be places that put it back in the theater because right now when I'm putting this review out This is the 40th anniversary this year of the release of the shining. So Maybe we'll get another release. I would love to get another opportunity to see it in the theater. That would be amazing Yeah Stephen King hates this version. There was a version that was made. It was like a mini TV series that was done much later in the 90s, I believe and McGarris did that one and Stephen King liked that because it was very faithful to the book So I should probably do a revisit on that series because I remember watching it when it was on on TV back then But I remember a ton about it now because it's been so long so A new version of steady cam was actually used for this film And so it was pretty innovative as far as like those tracking shots And they actually had mounted the camera on a wheelchair and then like built some rigged stuff around it So that was interesting Kubrick apparently wanted to show the evil side of human personality That was his idea behind specifically doing the shining and he found the best representation of that in Stephen King's book Obviously he changed it a bunch to fit what he wanted But it was kind of reported that he was looking for a horror film to kind of showcase the evil in human personality And he kept going through all these horror books and reading them And when he would get done with one that he didn't find what he was looking for He would literally throw the book in a wall because he was just like ah, this isn't the one But when he got to the shining by Stephen King, he found what he was looking for So Kubrick apparently, oh, I'm sorry. I just read that my bad Nicholson, Nicholson Jack Nicholson was the first choice for the role But there were other people who were considered for Jack Torrance that included Robert De Niro Would have been interesting Robin Williams and Harrison Ford Now when you hear those names thrown out you think wow that would be weird or that wouldn't work or whatever But you know had it been those people we may still view it the same I don't know, but Nicholson kind of carries this film. It's amazing This was actually shot in chronological order, which is super super rare. They ended up building the inside sets In a certain way that they could connect them so that they would be able to shoot the film chronologically instead of like Building a scene doing all the takes there tearing it down and then doing another one Um, it's yeah, it's rare that films, especially professionally done films are shot in in chronological order But I have a theory that that Kubrick probably did that because It helps with the acting of it Like the characters could actually feel the changes in their character being done and more of the tension actually building So I think it's good for that reason that they would do it chronologically So there um some outtakes of the opening panorama scene Actually, you know what I was talking about like the the car going up the mountain road Some of those outtakes were actually used by Ridley Scott later in his um movie Blade Runner I found that to be pretty interesting. I did not know about that And here's one of the biggest problems is is that Kubrick and this is probably where a lot of things spawned from with the Tension between Duvall and Kubrick Kubrick reportedly changed the script a lot And when they were filming so like there would be days literally that they would show up and their lines had changed from the day prior And it was said that well, first of all Shelly Duvall was very very frustrated by this But Nicholson was also frustrated Like to a point where he would get a new version of the script and apparently just immediately throw it away Because he'd be like tomorrow it's going to be different So he would really a lot of the times just memorize his lines like right before he was going to do a scene And you wouldn't really know that though because his performance is so good. His line delivery is great But then again like we're not seeing the outtakes too like how much of Footage wasn't usable because of you know mess ups. I don't know Um, yeah, obviously like I talked about this film looks amazing. It's Unbelievable and there are a lot of theories about this film. I don't want to Go too much into Some other theories that people have thrown out about it I'm mainly picking things out that I want to talk about having to do with this film based off Me just having watched it. I literally just watched it before I sat down for this review And I just I just wanted to like kind of look at it through The lens of really really deep diving into it now. There are a lot of subtle things that kubrick does in this and I don't want to get too far into the subtle things because there's a lot of speculation I know people people have had online and in a documentary film called room 237 That you know, they seem out there. They seem like okay. Well, maybe but we don't know for sure It just seems like a lot of wild guessing So I will give you some of my kind of wild guesses my personal ones and just see what you think So the wailing noises that get incorporated into the music in the very beginning of the film I think is really cool because it kind of sets you up to know Immediately like there's something wrong. There's something ominous something evil and that kind of gets through The point that the music in this in general was really amazingly good It matches the scene. It's extremely well. It's always very brooding and menacing sounding It just always sounds off But that's good for the tension build because everything in this film is off In in a good storytelling way because things are messed up They set up the concept of isolation pretty early and being trapped with the With the job interview portion where jack Nicholson is being interviewed for that position And then when they talk about the tragedy that happened with um delbert grady when he asked his whole family when he was The caretaker there Um, that was really good of them to kind of introduce that immediately And i'm a big fan if you've watched enough of my reviews, you know I'm a big fan of films that have isolation or films that have A situation where people are trapped in a confined Building or space with an evil because I feel like that ratchets the tension up a lot and I and it really helps It's just something I personally like Um notice that jack has no real reaction to the axe murder details Uh, which shows an odd comfort that he has with it Which you know may actually spawn from the fact that they're they're showing that he has You know, we know he has kind of an abusive past because wendy talks about that to the person who comes to Check out danie after he has his seizure Um in the beginning of the film and so I feel like him not reacting to the story of the axe murders Was kind of a way of saying Of showing that he has a level of comfort with violence And then those types of things don't face him. Therefore, he has the ability To do it because he has that level of comfort and obviously that's where it ends up going Although he doesn't actually kill wendy or Danny he does kill Dick halloween Which bothers me, but I'll get to that later The scene of danie talking to tony in the bathroom is actually pretty disturbing And it's partially because of the camerawork that they do that like very slow moving shot That's moving in on him in the bathroom as he's standing there looking in the mirror Like him doing the voice of tony is disturbing enough But with that slow camerawork and the music they have behind it very disturbing very disturbing Uh, the blood coming from the elevator scene Obviously, this is iconic in the film. It looks amazing. It still looks amazing And they do it a few times throughout the film Probably because it looks so good. It's such it's such a great visual trick Love it It's obviously super iconic also the twins the twins are super iconic too, which You know because they're creepy When you first see jack with the family in the car when they're They're going up to the hotel to move in he's super disconnected It seems like he doesn't have any interest in really being involved with his own family Just notice that like all the interactions he feels very put off By the fact that he has to interact with his wife and kid So you can see and feel the tension within the family You can tell that it's not a tight-knit family unit that there's a problem And we know that that spawns from the issue that was three years prior where you know jack got drunk and he You know hurt danny by like grabbing him really hard But I just noticed that but it also that persists throughout the film Just notice that he for the most of most of the time doesn't really want to have anything To do with danny and doesn't really want to have a whole lot to do with wendy either he seems to be very happy being by himself and Doesn't really care about his family that much to be honest and that's from the beginning Um the casual mention of the hotel being Relocated on an an ancient indian burial ground That's an immediate flag for people watching movies now But back then it was more of like a subtle hint at something being wrong Uh because you know poltergeist I think was the one that really Drove that stuff home and I believe poltergeist was in the 80s. I'm pretty sure poltergeist was after the shining I could have looked that up, but I didn't so someone go ahead and comment. Let me know What year that was Once halloween talks to danny about the shining it goes from seeming kind of disturbing and scary to actually kind of feeling comfortable And just like it's a special ability that danny has because when he's just talking to tony And he's getting these kind of like flashes of of what could potentially happen in danger at the overlook hotel It seems scary. It seems disturbing, but then when halloween talks to him It kind of puts I feel like not just danny at ease, but also the audience a little bit. That's just how I feel halloween's explanation of the shining gives the idea that bad things that happen echo into the future with people And also with places, uh, which is basically what ends up happening with the torrents family With that that abusive moment three years prior Of jack on danny that keeps echoing within that family and it keeps resurfacing throughout the film Because I mean it's it's very well shown in the fact in the the moment where you know danny shows up and he's not talking and because he had gone into room 237 and that lady was there And he's not saying anything and wendy immediately just thinks Jack hurt the kid like she he hurt danny So that's something that it keeps echoing within the family and it's also responsible for the distance Because it's that awkward thing that nobody's going to forget So the shining is kind of a very good Metaphor for Violence in a family or just tension or trauma or you know bad things happening because they they stay they keep echoing The tracking shots of danny on the big wheel are great because it's engaging in exploration. I already said that one earlier Jack's comment about having been to the hotel before gives the idea that it pulled him into the hotel that it kind of was speaking to him And was it was he's kind of destined to be there He's already open to being evil at this point So he finds a level of comfort at the hotel while danny and wendy are actually very uneasy with it So There's a big thing here with the hotel controlling him. He's not perfect when he gets there He's already he already has the track laid for him to get to a point of killing his family Because he shows that level of comfort with the axe murder story He's already been physically abusive at some point. So he's it shows he's open to doing bad things then when the hotel takes over and Probably recognizes this in him. It starts pushing him and pushing him and pushing him and then eventually grabs firm hold of him Although there are times where he he snaps out of it or almost snaps out of it and I'll talk about those coming up The biggest turn in jack's actual character comes in the scene where when he and wendy interrupts his typing And becomes very emotionally and verbally abusive. It's like him going back to that time three years prior Where he was drunk, you know, he he doesn't actually have alcohol in this but In his mind, he does and we'll talk about that a little bit later, but he um Yeah, that moment where she interrupts his typing and he doesn't want to see what he's doing He's like you're breaking my concentration. He cusses at her. He berates her That's the biggest change in his character because prior to that He's disconnected from the family and doesn't seem that interested But he's not like outwardly mad or outwardly Emotionally or verbally abusive and that's the moment where he actually happens and you're kind of like, oh, things are getting real And that's where I feel like the hotel is really starting to really get a hold on him and and affect his mood For its time the twin scene in the hallway was probably very shocking because it's creepy And especially the fact that you end up seeing that flash of them actually dead With blood all over and the ax laying there Really good image. Uh, yeah back then I bet it was super shocking Jack talking to danie in the bedroom is pretty disturbing because he seems nuts at that point he seems very very not there and um There's tension because at that moment you're kind of like is he gonna do something to him right here Is he gonna harm him because it seems like he could and this goes to how great Jack Nicholson was in this role because He just he plays like nutty like Amazingly he plays menacing super well. He plays crazy super well. He plays evil super well through his expressions Just honestly the fact that his eyebrows are pointy like they have that point at the top Just makes him look that extra bit of crazy and evil It just works his look his acting everything it works When jack wakes up from his nightmare It's him sobering up and snapping back to reality This is one of those moments where he kind of snaps out of the control that the hotel has on him That's when he has the nightmare In the main room where he types that he killed his family And that disturbs him and you get this glimpse of him being scared and being normal and like like I was saying snapping back to reality, but he goes right back to under control of the hotel because The hotel capitalizes on Wendy at that moment accusing jack of abusing danny because that's when danny shows up in the room and he's Sorry, he's not talking and his sweater's been ripped and then she's like you did something to him. You heard him and he didn't and at that point he's like What the heck and that just brings Brings that trauma up again. It brings that terrible moment in the relationship up again And then that drives him right back into the arms of the evil hotel Because he's mad again, and he's like i'm being blamed for this. I didn't do it I love the ball the gold room the ball room I love that scene the first one when jack Nicholson goes in and he starts having a drink with loyed the bartender He's not actually drinking alcohol at that point But I think that's kind of a signaling that by him touching You know drinking the alcohol again touching the booze Again that things are going to start getting really bad Because that's taking it back to them to what happened to get him to the moment of actually being physically Physically abusive with danny, but it's also just a really awesome Moment where you just get to see jack Nicholson really have a fun time with delivering those really awesome lines And it looks really good. I like how like the bar top lighting is and the lighting behind the bar looks really really cool It's it's wonderful. And then they have a scene later where the ball ball room is more inhabited with people That is also one of my favorite scenes just anything i have to do with the ball room Love it. Love it. Love it Something interesting to notice is that the incident when wendy spoke of of jack hurting danny was three years ago And jack says that himself as well when he's talking to loyed at the bar Now jack also says that he's been sober for five months He said that he's been on the wagon for five for the past five months so This indicates that wendy had said that he gave up drinking as soon as the incident with him hurting danny happened That's not true It's revealed here then that danny's been secretly drinking For a lot longer and he only gave it up five months ago Which i don't know time wise that could line up with when he decided to stop being a teacher Go isolate himself and try and write a book and he was driven into the arms of the hotel So it's just kind of interesting to think about the timeline like that halloween has an amazing summer home That thing is super nice looking. I was like, whoa, that that's awesome When wendy says she wants to get danny out of the hotel jack's reaction indicates that the hotel has full hold of him And there's no way they're going to be able to leave Because that's when it jumps to that next level of him being physically menacing towards her And he's coming at her and that's when she has a bat with her and then she's swinging it and he's telling her Not to and he said he's gonna she's like i'm not gonna hurt you. I'm just gonna bash your brains in I love that delivery of the line. It's amazing So good When loyed says your money's no good here orders of the house He's saying the hotel wants jack to drink It's it's the hotel the house is in the hotel the hotel Is ordering loyed To pull jack in to get him drunk well to make him think that he's getting drunk So it will loosen his inhibitions. It will make him more open the suggestions of the hotel Which you then see later with gradey talking to him when he's locked in the pantry Saying, you know, you haven't taken care of the situation You got to take care of this. I'll let you out if you take care of this situation. So Jack almost snaps snaps back to reality when he meets delbert gradey Because the story he was told comes back to him the one he was told in the beginning That he barely reacts to but the hotel refocuses him on his family problems By saying that danie is trying to bring dick hallerin Into their affairs So it's that moment where he could have snapped out of it And he was almost going to because he's like delbert gradey and he starts pressing him About being the caretaker and the axe murders and stuff like that But then gradey is so good gradey the hotel is so good at refocusing him On his issues with his family that he just forgets that then and doesn't snap out of it I think that when tony takes over it's because he's trying to protect danie The moment where where he says that danie's not there anymore to wendy I view it as tony was trying to take over danie To hide danie's consciousness because things were getting bad. So to kind of protect him. I don't know just a theory I hate that hallerin gets killed so fast This is something I was talking about not being used So they spend so much time in the film on hallerin checking in feeling like there's something wrong Flying there getting the snow cat going up to the hotel getting in the hotel looking around And then he just immediately gets killed. He doesn't get to do anything And so I feel like they spent so much time on that then when he gets killed that fast when he shows up at the hotel It's like all that was for nothing It was just wasted and that's one of my biggest issues with this film Is that's just dumb I feel like dick hallerin should have been used a lot more and used more effectively because he was a cool character He was a very cool character Uh, what really is jack's job at the overlook? Because you never see him doing work He's only doing his typing and hanging out and you know throwing a ball against the wall to try and like get some ideas going But he never does work. He's supposed to be the caretaker And he doesn't do anything So I just thought that was kind of funny it dawned on me like he's supposed to be a character He doesn't do anything here unless it's just assumed that we just don't see those mundane things But I feel like they would have showed like something Uh, the moment wendy sees jack's writings you realize he's not been saying the whole time he's been there But then it brings up the question Does jack know that he's just been writing over and over the same thing or in his mind because he's under control of the hotel is he Thinking that there's actually a story there a book. I don't know. That's just a question It came up when I was watching I was just like, huh, this is interesting to think about jack's overly sarcastic mocking of wendy is actually pretty funny And that's actually at the moment where things like really ramped up and he was You know getting violent and saying he was gonna bash her head in like the the sarcastic mocking of her was over the top But it was funny, but it was also like menacing and scary at the same time. So I just really like that scene The red rum portion of the film was probably very shocking at the time It's not anymore just because the film's so well known for it And also like don't you already see it coming in the film though too? like you know that at that point that The hotel's trying to get jack to do something terrible I mean, I guess it's just the thing where you don't know that he necessarily will and then the reveal of the red rum being murdered backwards is that it will happen Like it's a premonition that dany's having because of the shining. So They originally shot the axe Through the door scene with a fake door just so people know And they ended up having to go to a real door because jack Nicholson had been a volunteer firefighter at one point So he was very skilled in swinging an axe at a door So when they're using the fake door, he went through it so fast that they were like, it's gotta slow down We're gonna use a real door. I just thought that was an interesting fact The outside maze scene looks so freaking good because the snow looks really cool The lighting that they did with it is amazing, especially like the long shot down the hedge maze where um You're seeing from the back of jack Uh, like kind of hobbling because he's injured with the axe and the light in front of him Just kind of lighting it so he's just like a silhouette and the snow laying there. It just looks so good It's like a blue light because of the snow there. It's amazingly good looking Um, and the steady cam helps out with the maze portion. It makes it look really good The close-up of jack frozen and dead is a phenomenal visual I love that and it's a little bit funny too because his eyes are rolled up in his head I just like that little that little touch Um jack showing up in the old photos Uh plays to me like the hotel has basically claimed his soul And he was kind of always destined to be consumed by that hotel You know, my wife was watching the film with me and she was like So was he a ghost the whole time and I was like, no, no, he was real it's just I think that since he died because of the hotel like it sucked him in it got a hold of him and then he died It then claimed his soul and him showing up in the photos is showing that he's basically been added to the collection Of other ghosts of other souls that now live in the hotel So that's just my interpretation It's a personal interpretation The level at which the hotel is a character is amazing And i've not seen it done this well since having like an actual location be a character in a film The hotel is definitely a character in the film and that's amazing and like I said in the theater It's even better The music is so brooding and menacing and already talked about that Uh, the methodically paced falling apart of jack's character is great because it feels kind of Real I mean obviously it's more of like demonic forces type thing But it feels real for what what what environments been created for the story what world has been created The influence of the hotel on jack gives you the idea that it wasn't the alcohol that made him abusive before It was something much deeper and darker and this kind of goes back to what I was saying earlier about Kubrick looking for a story that would that would play off the evil of human personality I feel like that's where it was really going with it. It's not a problem with the alcohol Which is how wendy explains it. It was oh, he just drank too much It was an inherent problem with his psyche It was something that that unlocked the alcohol unlocked for him That's terrible So judge so here's a question does jack have the shining Because it seems that only people who have it can see what other people and places communicate through The shining also it seems familial so While I was watching it until I realized that at the end wendy ends up seeing things She doesn't see anything for a while now My question is does jack have the shining because he was so susceptible to the shining From the overlook hotel because they lay the track for You know dany having the shining and therefore he can communicate through the shining with Halloran and halloran explains that to him that you know people can have the shining but also places can have the shining So that got me thinking that oh, okay, because that's the case Maybe jack is so susceptible to the outlook because Or the overlook because he has the shining and the overlook has the shining and that's how the communication is going on Now that's a little bit busted up when later Um, like I said, I realized that wendy was starting to see things at the end But that doesn't mean that he he didn't have the shining though because the other thing is Halloran had said that I believe his grandmother had the shining as well Which leads me to believe that it's a familial thing that it's Passed through genetics So jack could have had the shining and like I said, I feel like that if he had the shining that made him more susceptible to Um, you know the wiles of the hotel So, you know because things would seem more real in that sense To him The presence of all of all the native american designs in the hotel are kind of play like they're the spirits of native americans Because of the burial ground that was there It's a good way to visually show that Even though the burial ground was moved The spirit is still there and it's a weird thing Honestly for for a hotel to have moved an indian burial ground and then have a bunch of decoration from that culture A little weird, but for the film it works Um, and then I have to kind of the last thing I need to tell you I I have to share with you I had met robert england uh at a monster mania Year or two ago. Um, I think two years ago now and he He and I got talking somehow about The About the shining well actually I remember how it happened because I was talking to him about an interview He did for the post mortem podcast with mcgaras and then he started talking about oh, I love mcgaras and he's like Oh, you know mcgaras did a made for tv series of the shining and then he started talking about how steven king hated scoob rick's just shining and it was just really cool that robert england One of my favorite screen villains was talking to me about one of my favorite horror films or one of my favorite films period But he had an amazing quote that I want to pass along to everyone about it he was talking about the big difference between the book and the movie and that was that um Before in the book apparently before jack torrance goes to the overlook hotel. He's a good guy There's no indication that there's any problems with him. There wasn't the abuse Prior to getting there now obviously in the movie. He had some evil tendencies. He had the abuse He had a drinking problem and all that so the way robert england explained it is he said In the movie before he goes to the overlook hotel The devil already has one finger up his ass And I just I thought that's a really funny quote, but it's a cool quote too, especially because it came from robert england So I will never forget that and I wanted to pass that along to everyone out there. So Anyway, I think people can probably guess what my rating on this is going to be but out of five stars With half stars in play. It's a five star film. This film's amazing. There's a reason people talk about it all the time It's highly highly lauded Rightfully so it holds up so well. I love this film. I love watching it every time I watch it um It's phenomenal. It is truly so thanks everyone for checking this out and I will be doing like I said a review of dr sleep Uh pretty much after right after I've recorded this. I'm gonna go watch dr sleep for the first time So I'm very interested to see how things end up coming together and then I'll post a review So it should be on my channel if you're not watching this If you're not watching this review the day I drop it My dr sleep review is probably on the channel already. So just letting you know that So anyway, put some comments down there. Let's talk about the shining Um and just horror stuff in general. Please do me a quick favor hit that subscribe I'm sorry. This video has gone long, but the shining's long But please hit that subscribe as a way to repay me for doing these videos because I don't make money That's your way to encourage me if you've already subscribed. Thank you so much And just hit that like button to just let me know you're still watching and you still enjoy it But thank you so much for sinking your time into this as it's almost 40 minutes long I appreciate that and until next time. Keep it brutal


Hi everyone, Joe for jaspyscasebreaks.com with a quick giant Broncos Redskins Titans Vikings number block That's how it works right there for flaws 23, which will be in a separate video the break itself in a separate video Big thanks to all of these folks right here for getting into the action really appreciate it. There are the numbers right there let's roll it and Randomize it one of the three four times for each list one two three four That Chris down to John one of three four times for the numbers one two three and Four three into one four times four times four times One down to three Good luck There you go. So Chris with one Renee with seven Liam with two Ray with eight Erin with four mark with five Chad with nine Erin with six Danny with zero and John with three So Danny with flawless. They included those blockchain Like a little bonus. They include the blockchain redemptions this year. So you'll get any of those Blockchain redemptions For these teams right there. So there you go Separate video the break. I'm Joe. I'll see you for that one. Bye. Bye


what he's gonna wear this huh that's that's chubby what's up baby what are we doing am I I'm professional probably we finally got my dog we finally got my dog Mike Davis the the the community on on on the hot seat we are on the hot seat we're on the hot seat with a professor coke oh sorry it's like a do rag it's like a ball looks terrible you finally on that's messed up bro my thing I think my edges is off right now but it's all good let's go when when did you decide that this was the look for you so what happened was I started going thin like in the area right I started going thin and when I was in Seattle and Richard Sherman used to have this little segment thing he do every week and met he get on there and roast me and it was just one day man I was like yeah I got to cut this off listen we're a professional show here on the hot seat we like to make sure that everyone knows that even though your number 45 on the field your number one in their hearts smile look at the camera there we go hopefully we get on the hot seat baby hopefully we get a two-page a lot of that so I had a lot of hairstyles I had dreads I had a mohawk I had a duck tail when I was in Dallas I need some evidence what all right did everything else I might as well just you know do the ball thing it was there was a choice there we go you learn it was a game when I was in the Patriots I got an exception preseason game got the interception took the helmet off and for whatever reason they decided to zoom in on my head and it was just a nice ball spot and at that point in time I noticed I said okay I got a Gary shave my jaw like you know I got more hair to you right now my joint kind of got way you know it's setting in we just got it's a new look I'm trying so


What to do it's gonna be really pixelated up bad if it's pixelated y'all we barely get into reception Merman Giving a mermaid they made her wear a life jacket. Oh, we're married So all you male followers that just follow her because she's hot she is officially taken Mine is Clara. Thanks D&D Thank you, Diane Are you getting out?  Hi Susan. Hi Lisa There she goes They made her put a life jacket on that's kind of a bummer for her She can't move with that. She's getting out. Thank y'all for showing up. Thank you for being so patient with us through This past month. I know it's been pretty Yeah So you guys have an awesome day be kind of one another because you never know what's going through and remember So you don't have to Bye


are we doing? Good? Awesome. How many people have gone over to CTF today? Yeah? How many first timers do we have here? Okay. At some point you need to go over to the CTF area. When I came to my first DEF CON and I saw what CTF was and all the lights and everybody hacking everybody else, I thought it was the coolest thing ever and it's still the coolest thing ever. So take some time to go over there. Now the DEF CON CTF is harder than just about any other contest in the entire world and ATLAS has won this four times. Is that right? Been a part of a bigger team but his teams have won it four different times. So one of the best things I like about DEF CON is coming and finding people that are always just head and shoulders better at all kinds of stuff than you are. At home we're all the alpha nerds. Here we're all learning from everybody else. It's my pleasure to introduce ATLAS who is going to melt our brain with some very technical stuff. Let's give him a big hand. Hey, all. How many of you have participated in a capture of the flag? How many of you are doing so right now and coming to see me? Thank you. That's very hot. How many of you are government? I saw that. Well, welcome. Today we're going to talk about symbolic analysis specifically focused on a tool called symbolics. The creator of which was threatening to show up today and I don't see him yet but dodge that bullet. How many of you have heard of symbolic execution? Very good. Most of us. How about symbolic analysis in a larger scale? Is symbolic execution the only thing you've heard of? Today we're going to talk about some of these with doing binary analysis.  I'm the last caption. I love it. Today we're going to talk about symbolic analysis and its use in determining very interesting things about binary. A little bit about me. Very, very fast. I'm a Jesus follower. Walk out if you like. I'm a husband of one wife, father of three. I have horses and goats and chickens and I ride a Honda Shadow 2002. But that's not why you're here. I'm also, this guy likes to tear things apart, make the break in very interesting ways and I have learned some from several of you in the crowd that I've already seen.   Let's make good use of it and whether you're on the side that wants to kill all the bugs or let them lead long productive lives, hopefully this will help out. I love vulnerability, I'm tripping over my tongue as well. Vulnerability research, reverse engineering. I play with hardware, radio, firmware, software and cars, medical devices, smart meters, the whole thing. I'm a bit 80D. If it weren't for my wife ratcheting down, I'd probably be dead. Also a core developer for VIVA SECT, a binary analysis framework created by Invisigoth. A little bit about VIVA SECT to start off. It's a binary analysis framework like I just said. It is written in pure Python and you can use interactive Python to poke at, figure out how code flows through your binary. It provides several different scripting options. It's written from scratch to be collaborative. There's a client server model, there's even a shared workspace model. It includes a platform debugger, emulators for multiple platforms, a GUI for those of you who want one. Although the focus is on programmatic analysis. We want to write programs that find zero day and then exploit it. Yeah, I think we're in the right time. Give you the colorized version because the last one was so hard. I'm going to throw some code at you very early on so that it's familiar to you. You can come back to the slides later and start tearing apart a binary in your own interactive Python session. To start VIV, use VIV BIM, that is the name of the binary.  And for today's specimen, we'll be talking about Stage 3 from the 2005 CTF quals from Conchotto. It creates a .viv file which is, you guys don't need to know this but it's basically a list of events that happen from the very creation. Which means it's not fully implemented yet, but there are many ways to back out changes. Those of you who use IDA a lot, you know why that's important. Can you see a vulnerability in the slide? Yes, it's too small. Look again. If you can't read it, that is a push 2047, a call to, or then pushing an input buffer, pushing our arg zero for this function which is the socket, and then reading. So we're reading in 2047 bytes into a buffer that basically goes on forever. So this is not a buffer overflow. However, down below you see load effect of address, blah, blah, blah, blah, ebp-1048. That's basically a 1k buffer. And then a call to scan F. Scan F reads in, well, up to the end of the string, right? Causing a stack smash and a fairly easy to implement overflow exploit. Here's how I like to view Vivisect. Most often I will have two versions of, two ways of accessing Vivisect. I will have the viv bin binary, I'm sorry, the viv bin GUI so that I can scroll through function analysis, blah, blah, blah, poked into a server which actually houses all the changes and handles interaction. And then I have a command line tool that allows me direct access to it as well. It doesn't matter. I make changes in the GUI. I make changes on the command line. It all updates and the GUI changes when I run my analysis stuff. So I get in using IPython. If you're using Python and not IPython, well, I'm sorry. Please consider, you know, seeing the light. Import vivisect.cli as vivcli. That's just standard Python stuff. We create a Vivisect workspace. We then load from a file and it will look for, is this an elf, binary, is this a PE, is this a Mako, is this a iHex or a binary, a blob. And it just puts the loadable modules into the workspace and does nothing else. I then call analyze. Analyze does all sorts of automatic analysis based on the architecture and the platform. So Linux on ARM, for example, things like that. And then I call save workspace and it saves out all the events that have happened during analysis including the loading. There we go. So that's enough about Viv for now. It's enough to get you started. Let's talk a little bit about symbolics. So one of the core foundations of vivisect is the NV analysis, the NV disassembly framework. NV is not just disassembly though. In order to make an NV module, you're supposed to create an emulator for it as well because it's amazing what an emulator does when you're analyzing functions and the rest of code. Particularly in ARM where, well, they have conditional everything. And there's this whole hopping back and forth between ARM and thumb mode. The idea of symbolics is the dragging of system state from a beginning of a code path through to some arbitrary end state. So maybe that's from the entry of a function to a return. And many of you will know there are many ways through a function that has a beginning and an end. So we choose one. Graph theory helps us out here. But for this point, just think of a list of assembly instructions that would get executed in a row. Those assembly instructions are translated into the symbolic effects that they would have on the underlying processor. For example, push EVP, move EVP ESP. Shout out if you know what that is. Yes, sir. It's function prologue. Exactly. So we translate these into symbolic effects, simple symbolic effects. And then later, I translated this into applied effects. We'll talk about the difference in a second. So it becomes set ESP to ESP minus four. And then memory location that ESP points to now holds the EVP value. And then we update EVP with the new ESP. I have a fly. And it's bugging me. So we have to talk a little bit about graph theory though. This single thread of execution through a program that can find vulnerabilities in a very specially crafted thing. But what we're really trying to do is exercise many code paths as many as we can that are valuable. And to do so, we rely on graph theory. Ever heard of graph theory? Yeah, I hope so. Graph theory is amazing. It's not necessarily easy, but it can cover some very complex problems. There have been times where I found that Viv, a while back, didn't do a very good job of creating a graph for a particular function. And it caused me great headache. So that's where the first bullet came from. You've probably interacted with certain visual aspects of graph theory. For example, if you've torn apart a function in IDA, or in Vivisect, and you've looked at graph view, it is kind of a visual representation of a graph. Of a code graph. It is a graph, obviously. So you can all hold your applause until later for my visual wonderfulness. So you see at the top, we have a code block that has a decision tree. Either goes left or goes right. They re-merge and end up exiting the function. Very simple view of a code graph. It is a directed, wait, did I skip that already? Yes, it is a directed graph, which means that edges flow in one direction. Very important because if you could actually make your X86 code flow backwards, then we would have a whole different class of vulnerabilities. So take this back to stage three, just briefly. What you can't really read here is the code graph from the child request handler in stage three. So I said that it's not quite the same thing to have a code graph and have an IDA graph. And the reason is IDA and VIV, well, they don't follow every call. And there are things that are conditional that don't necessarily show up as a different node, which they should. Because if they're conditional, they're either executed or they're not. And yet compare exchange, for example, on X86 just shows up in the code flow. So if we were to take this graph and take all the calls and link them to other parts of the graph and have more code flow from there and then back into this graph, it would be more of a specific or of an exact code flow graph. If we were to take conditional instructions like branch, for example, JZ. If we jump, if the zero flag is set, in reality, that's kind of its own thing. It deserves its own node because it may or may not actually do what you think it should do. Now we purify it because that would be kind of hard to follow. So as we're analyzing a code path, we step through and we drag the initial state through symbolically so that as we modify memory locations, as we modify register values, they are modified and represented and stored in terms of the initial state. So if EAX started off as zero, all of your state throughout each instruction would be aware that EAX started out as zero and reference EAX as offsets and whatever as you add and subtract to it because it needs to maintain that initial state for us to do the analysis that we need. So when we're walking through code, we first translate a binary opcode into a simple list of effects. As we hit conditional flow, we add constraints. So as the graph branches based on a yes or a no, a constraint is added for a code path that goes left and its opposite is added for a path that goes right. This allows us to determine a code path that we want and then figure out what the hell gets us there. So I keep showing you things that are not really, what is that? It looks different every time. I don't quite understand. Well, Vizzy in his wonderfulness created all of Symbolics to supply a wrapper version and a string version to represent what they mean. This really helps while developing because it allows us to see at a second's notice exactly what the state of the symbolic state is. So the top part here, we're looking at the wrapper version. And it was created such that you can copy and paste it into another interactive Python shell or in another code and it actually recreates the symbolic state because that's the name of all of the effects and the symbolic ... Can I get some water, anybody? I'm dragging over my tongue. Thank you. So if we print symbolic state, you notice these are constraint paths at the top. Well, in the pretty version down below, this is also constraint paths. It says all that goodness that will recreate the Python symbolic state, this is what they really mean. So if a call to this function returns in nonzero, they didn't have any vodka in the speaker room. I was kind of depressed. This is very good. Thank you. So I think you'll agree the bottom one is a lot easier to read than the top one. Again, all leading back to interactively working with the system, creating code, thank you, that tears apart code, very powerfully and very easily and easily debugged. So a little bit more example. Set variable EAX to a constant one, okay, cool. Set variable ESP to the subtraction of const the top of the stack. I'm using tools that actually turn the top of the stack into something very easy that we most of us kind of jive with. So basically we are subtracting from ESP four. We're shoving then, setting EBP to EBP. Then we add to, oh man, I'm not even going to continue. Look at the bottom one. The bottom one is the exact same symbols. I'm just using print instead of wrapper. And it says, hey, I set EAX to one, ESP equals ESP minus four, EBP equals EBP, blah, blah, blah, blah, blah. Much easier to read, I think you'll agree. So I have to call out though. Symbolics has two different ways of, two different stages in symbolic analysis, both of which are actually very powerful and important to work together when you're doing, when you're writing tools. So I said before, we translate binary op codes into simple effects. We then apply those simple effects to a binary or a symbolic emulator. And it extrudes the initial state through into every single effect that you've passed in. So you're left with simple effects. So I know this is a push EBP, so it subtracts from EAX or from ESP four, it doesn't actually keep the state. And then it pushes into the memory location of ESP, the thing. The applied effects are the ones that keep the state all the way through.  You say op equals VW dot parse op code, you give it a virtual address. You then translate that op code into simple effects, having a translator and executing translate op code with the op code that you've just created. And then you run the simple effects through the emulator, giving a list of applied effects. EMU dot apply effects and you get the effects from your translator and it spits out a list of applied effects. Basically, Symbolix is architecture independent. The only got you there is the name of things, changes with the architecture. For example, R15 on ARM would be PC or EIP or RIP on X86 or X64. So how was Symbolix put together and why do I care? So Invisigoth used many powerful things of the Python language and subclassed basically the arithmetic functions that every object has like addition, subtraction, X or whatever. And I'm jumping ahead of myself. Please forgive me. I've been hacking on binaries for way too long. Sorry. I am in the middle of CTF. So Python, I'm sorry, Symbolix has the following primitives. We have a constant which is just a constant value. We have a variable which is a variable of whatever name. It could be a register. It could be some known symbol in the workspace. A memory object which represents memory. And we have a call and this allows us to keep track of where a call might fit into a Symbolix state but not necessarily go do all of the call before finishing our analysis pass. You may if you so choose. And ARG meaning something that we were handed into a given function. A C not effect which is basically saying, hey, do the opposite of that. So if you have a var eax, you're register and you say not eax, you end up with a C not of the variable eax. And then an operator. So our operators are where hooking the Python object sub methods come into play. So basically we have an operator O underscore add which is used to represent the addition of two Symbolix states. O underscore sub representing the subtraction of two Symbolix states. Obviously the order is important here. These are implemented using Symbolix base which is the Python class that all of Symbolix components subclass. And simply overloading the underscore add function and I add because it doesn't matter if it's signed or unsigned in our case. We have effects and these are the things that actually happen. These are action verbs. We have set variable, read memory, write memory, call function and constrain path. So the constrain path obviously is where you hit a decision case and you have to choose where to go from there. You constraints are little objects, well, little names anyway, called eq, ne for not equals, greater than, less than, greater equal, as you know. When you run into an unk or a not unk, this is where we really can't reason very well about the state of, about what the constraint is arithmetically because it's the product of an or or some other bit why I'm sorry, yeah, or X or some other bit wise effect. So let's talk a little bit about how to make, how to be powerful about this. I like to use Symbolix just interactively. I get code that I don't really know what it does, throw it into a code path that's interesting to me. I symbolically emulate it and I get to see what the effect is and the Symbolix state is at the point of what I'm interested in. Well, that can be overwhelming and I'll tell you why in a moment. Our applied effects get run through the Symbolix emulator, we just talked about that. We then have the option to run reduce on the Symbolix effects. This takes things like X or eax, eax and says oh, that's zero, so eax equals zero. And things of that nature, addition, subtraction, they all kind of coalesce. If mathematically you can combine them easily, then they can be reduced. Why? I mean that kind of sounds nerdy, right? It's just a simple number or something. Well, because this effect right here is enough to blow your mind and yet it reduces to something exceedingly simple. We're also given the capability of solving. Now, as many of you know, a Symbolix state may be discreet or it may not be discreet. If it's not discreet, how do we solve it? Well, if it is discreet very easily, we just run the numbers through and spit out the answer. But if it's not discreet, Symbolix gives the ability at least to compare to Symbolix states even though they're not discreet. And that is using the hash of its basic wrapper. So for example, var dot solve because var can't be discreet by definition. Spits out a long integer of an MD5 sum of its thing. We can also update the Symbolix state using an emulator that already has data. And as of what about a year ago, Visi wrapped in the ability to create substitutions. Now actually in my opinion, this should have been called solve as well because we put together a set of values that a Symbolix variable can have. And then we ratchet that into the Symbolix state solver and we get back a generator which gives us all the different things that those values would have provided. So here's an example of using substitution. I use this in switch case analysis in my branch of Vivisect. Basically I put together a list of ranges given a constraint. For example, when you're looking at a switch case, you generally start at some base zero index and you roll through three, five, 50 different options that follow that. I don't know how many of you have done the work to analyze switch cases as spit out by a compiler. But when they happen, there's often, they're broken up into like groups. Because if you have a switch case that has a zero case and a 32,000 case, you don't want to have a 31,999 if there's just those two. Or if there's like a pocket of five or 20 around each one. So generally they represent different code paths and they end up starting at a zero index with some relative base. So we come through and you can see the debugging here. See how good my laser skills are. I'm not used to being this far behind the thing. So you can see my debugging here with a print of the variables of the given state. We create a range range and we roll through every index that we've identified that this switch case handles. And then by solving that, we're able to see what the outcome of the switch case is. So if it's a switch case zero, then there is some place in an array that has a pointer to a code block that handles switch case zero and so on and so forth. So we ratchet through that so that we can create cross references in the VIVA-SECT workspace. So I won't talk much about this right now, but I recommend that if you check this out, look into arch end. In VIVA-SECT, in symbolics, there's an arch end module that allows you to do a lot towards architecture independence. I happen to know firsthand that it's been used to solve completely the function comparison problem. So what do we care about this? I know I'm a nerd. Well, vulnerability research and reverse engineering they basically are solving problems or answering questions that are very difficult to answer. Reverse engineering is identifying behavior and vulnerability research is about finding very specific behavior. Vulnerable behavior. So we're hunting fat, juicy behaviors? Absolutely. Got a couple of case studies here. Rob gadgets. Who here is dug through looking for Rob gadgets? Yes, we all have. Well, it turns out that by searching through a binary, an executable area of a binary, you can trace symbolic state up to some known terminator point and ask very specific questions about what that little code snippet does. So rather than starting at a ret and stepping back, byte by byte by byte, making sure that it still decodes into a ret after some things and trying to figure out, oh, this is a really cool Rob gadget that does this thing and it kind of writes over there. But it really updates these other things that I'm really interested in. You can use symbolics to do analysis on code snippets and spit out. Hey, this moves ebx into eax and it's three bytes long or three instructions long. You can do actual culling of Rob gadgets using a symbolic state engine. For example, forgive me. So for example, we roll through a snippet of code and then we dig into the variables that are discovered. So we say symbolic state, what things have been written to? We then look for, hey, is that thing this register? And is it writing to a register? Then we know that we have a register copy. And hey, if the value of the second register ended up in the first register, we know we have an exchange. These are things that are programmatic and solvable by your own code. And just to give you something else to think about, I won't dig into these. But we already talked a little bit about switch case analysis. So basically what we're doing is we're trying to tell the computer to do the things that we do in our own super magical portable brain. So in switch case analysis in my branch, we start off at every dynamic branch. Then we say, well, dynamic branch can be a call to a register or some dereference or a jump to a register or some dereference or whatever your architecture version of those two are. So in the vivisect analysis pass, we already identify these things. It's just a virtual address set. So we pull what vivisect has already given us. We then start at that point and we back up until we are able to identify which register is used as an index pointer. We then roll through looking for anything that modifies that index pointer. And it gives us constraints that say, well, this is like from 50 to 75. So our switch case is 50 through 75 in this case. So let's now start at the beginning and ratchet through all this one code path. We just ratchet through it over and over with different indexes and it gives us the next code block that gets executed for every different index and we're able to wire up the function, the code block edges. And that helps us a lot. And that leads us back to stage three. So as you've been hearing about the cyber grand challenge, this whole idea of automating the discovery of vulnerabilities is a pretty big hit list. How do we do that? There are many different ways. There are a couple different ways actually. Some people have taken to just basically symbolically fuzzing where you start at some place and you just keep going through different code paths until some desired effect. Like for example, I don't know, EIP equals something of our input. We can do that. And it can be a very impactful way. It can also be highly cumbersome to the computer. Yes, I know computers do awesome things repetitively over and over. But there's this whole halting problem. With graph theory and with code path tracing, we end up running into code paths that may never end and we also can meander and take up all the cycles for all the time in the world and still not find what we're after. So I prefer starting at where we're trying to go and back up and seeing if where we're trying to go with a particular code path can provide us with the behaviors that we're after. So we start with mem copy and all the references to mem copy and we trace backwards. And with a good graph, then we are able to say, well, this mem copy is called with two fixed buffers and a fixed size. Crap. Okay, not vulnerable. Move on. Find something that allows us to compare and look for a dynamic sized either source, destination and move size. Now it can be a little complex. I mean that's a fairly simple way and that's definitely one of the analysis modules. But back at our stage 3 case study, the vulnerability is the fact that we've allowed creating of a string up to 2047 bytes and then run scan f on that string and put the output into a buffer that's too small. So we have to identify the size of our destination and our source and the constraints on them because our source is actually unconstrained. It's huge. But we have to be able to copy them into a buffer that is too small and not have constraints applied that keep us from overflowing and overriding ret. So here's that example. We called to read 2047 bytes, called to scan f. Oh, I forgot the bacon part. Yeah, we all love bacon, right? So since VFBF EBE4 is 1052 bytes from the top of the stack, which is ret, then our overflow, we overflow by 995 bytes. We can do this programmatically. I'm not going to show you code for it.  So as I said, starting where you want to go and backing up is my preferred method. Starting at a known entry point and going forward is also very powerful. Turns out combination of the two is probably the best option. So I leave you a couple of things for your play time. Import vivisect.cli as vivcli. Create a vivisect workspace with VW equals vivcli.vivcli. VW.load from file, some poor binary. I like to turn on verbose mode because it spits out a lot of messages that I would have otherwise not gotten. And then call VWanalyze. Import vivisect symbolic analysis. Symbolics.analysis, yes, as vs. anal. You read that correctly. Create a symbolic analysis context. Create a symbolic graph. And then get some symbolic paths going. As you interactively create symbolic paths and you review the symbolic effects, I think that you will see just exactly how powerful you can be. And here are a couple of places to go look. Thank you very much.


welcome back to my channel today's video is a very very exciting one obviously by the title you already know what's up you already know what's popping your girl getting a new car today so excuse the background don't worry about it but I'm getting my new car today I've been waiting literally three weeks I don't have anywhere to put you guys like so I've literally been waiting three I signed for my car June 19th it is now July 9th bro like I have no patience whatsoever and I literally had to wait on a freaking car like this ain't no Amazon package no a whole car but it's cool though I'm about to go clean my car out actually they told me that my car wasn't supposed to arrive at first they told me July 4th then they moved it back and pushed it to um July 12th but it came early so I literally already had stuff from my car two weeks ago so I'll get into that later once I actually pick up the car because I told them I'll be there between like 12 and 1 and it's 12 26 but I'm just now I'm about to go clean everything out of my car and then bring it back into the house I was actually going to do this tomorrow I'm off Saturday I actually got to work again tonight so yeah I'm about to get my little car push everything back up in here and then I was gonna go back in the car I'm stuff like that but I'm like they can do it like this they jobs I'm just gonna clean clean everything out of there if it's like a miss a miss and I may do it but no I've been waiting three weeks I don't care and I guess Prince is I want to say hi I look bumming don't care I'm gonna get my car today period I need to go fill up my car with a line ass I got 17 miles no baby we about to get this tank filled up I'm trying to run me somewhere trying to get fixed up okay okay babe I love you all right I love you too okay bye bye bye my dad just said I'm riding me deep okay so I'm sitting here in Chick-fil-A Park alive right right okay so this car in front of me this Altima started pulling off and then this little section right here was like leading vehicle pulling off I'm gonna go ahead and show you guys what I got for my I don't know if it's gonna be a glare or not what I got for my car so as y'all saw I got it it kind of just went fast and I also have to work today so I was just trying to like give my car and go so yeah my little this is stuff I got everything is on Amazon everything will be linked down in the description box below is titled 2021 car essentially I mean 2022 car whatever either 2021 car essentials or 2022 Kia GT like line that's the name of my car so this is basically just for your insurance your registration any type of important paperwork that you need for your car you will keep it here I got the one that folds because it was cheaper than the one that didn't fold all about saving a point and the next thing I got for my car I didn't want to do too much because obviously the red seats speaks for itself okay so I got these little blinged out kind of sticky little blinged out coasters for inside of the car so it doesn't get like sticky and dirty anything like that I wanted to keep it very simple kind of almost minimum I want to just do black and red and then with the hint of bling going on so gonna put those in there I'm probably gonna do all this tomorrow like I said today is Friday and I gotta go to work and I'm like tired I didn't get any sleep so I'm probably gonna after I wake up tomorrow when I get home from work I'm gonna go ahead and put all this stuff up and the next thing that I got that I can actually put on now is for my key fob they gave me two key fobs so this is how my looks mine has one two three four five five buttons so there's that and then there's one on the front and then I got a key okay five that's the new logo so this is what I bought for obviously I have the red interior I wanted to still be sporty so I'm about to go ahead and put one of these on the other key I don't know cuz some people like some people give they key to like somebody who's like reliable and then other people like keep a spear in their what house garage I don't know I don't know where people keep spares never have one so I'm gonna go ahead and put this together I'm so disappointed in Chick-fil-A like my stuff was cold okay so that way clip it on oh hold up I'm already mess it up so this one goes on the hold actually let me put it like this Prince is looking at me like yeah shit is moving around hold on so I'm gonna lay it down okay so it kind of hides my key okay five logo like it doesn't exactly line up with it I guess maybe it's because it's a 2022 I don't know but yeah I like it it's cute we're gonna see if I can push the buttons and if it's functional and then it came with a little hook that you can put it on with make sure that's on there securely and then there's that so all right that's my keys I'm gonna put my glasses back on just so I can see all right next I have this trash can I wanted the smaller one because I don't want too much stuff in my car and I don't want it to feel like it's crowded or anything and I want this one because literally you can fold it up like this I don't like those freeze that pop in and out so literally the only trash that I try to like keep in my car like I don't try to keep trash but like the tracks that I accumulate is usually like receipts straw paper wrappers different things like that so it's like I didn't really need a big trash can so this one is fine you can also spill like drinks and stuff in here and it's easy cleanup and then if you want to stick it on something they got a sticker there or you can use this so that's really neat and I'm just gonna go ahead and show this I got print a new car seat because obviously my last one was brown and my seats are red and it just wasn't doing it for me so I got him this black one it's huge it has a little compartment in the front that he can use and I'm gonna see his last one and like set up in the seat to where he can look out the window and he's not really good at like sitting in the seat he gets motion sickness and he'll like throw up so we're gonna test that out it's like super super huge and the next thing that I got from my car and you need back up back up but lay down I only ordered two I only wanted two seat belt covers for the driver side and the passenger side so obviously I told you I'm doing all black with the bling going on I'm gonna see if it looks good if it's not you know too much or something but they sent an extra one and this one isn't completely like this you see how this one has colors in it so I'm like that's not gonna look cute so I'm just gonna probably use two of them and the next thing I got is pepper spray I've always wanted pepper spray but never really got it and this was cute it's great matches I'm gonna put that on my keys the other thing I got I should have took this with me because he literally switched my tags and everything for me but I probably get my dad to put this on for me it comes with the tools and stuff it comes with the tools and stuff it comes with the tools and stuff it's just look stop meddling with stuff it's literally just the bling doubt like these car hooks I'm pretty sure y'all seen these in everybody's videos but my purse this car is so much bigger than my last car I had a 2014 Hyundai Sen and literally my purse be slanging across the dang car so I'm very excited to use these they said that these wouldn't fit so I hope they do fit because these are only like $4 with Amazon Prime day and the ones they tried to get me for like the actual K5 they were $12 I'm like I'm not paying $12 I got me this oh I forgot about this I don't really need this anymore um this little bling doubt you can put people put their mask in there since obviously we're suing a panorama pandemic and some people put like Kleenex and stuff in there I didn't know that it actually came with Kleenex so I think I'm honestly going to do the Kleenex because I'm always needing a Kleenex I'm probably just gonna keep the Kleenex in there and just keep mask like in my little center console or something and yeah I think that's all that I got for my car like I said I didn't want to do too much so this is going to jazz it up a little bit but still keep it very nice clean and sporty and sleek if you will very excited about this so super super cute and yeah so tomorrow is Saturday I'm gonna I'm gonna go get my car clean I'm gonna give it a car wash and I'm gonna do a tour put all this stuff up so I will see you guys tomorrow like my channel I don't know if I did a proper introduction or not but yeah we're here I'm in my new car I wanted to go ahead and do this section of the video so I can literally unpack all of the new stuff that I have for the car I'm just tired of it being in this plastic I'm probably not going to be able to actually like do a full like car tour until I actually get back around to my apartment I'm not at home right now so and plus I want to go out to the park so I can have like a lot of space to show you guys show you my favorite features because this car is pretty gonna get okay as you can see I got my panoramic sunroof red interior the only thing that I requested for this car was to have red interior and I got literally the works so I'm gonna start by putting all of this new stuff up in my car that I got and I'm pretty sure I'm already showed you guys I need a um I don't have a stand I'm on my tripod but like I don't have a official like car mount for you so this is like the best we're gonna get so I had this down all night by accident I guess I'll okay so it's literally 800 degrees I hope y'all can hear me I'm gonna turn it down a little bit so I didn't want to go too crazy with getting stuff for my car because obviously I want a red interior the red interior speaks for itself so I just did a little bit of bling of course obviously so this of course everyone has this I've seen it all over people use it for masks but I have like reusable mask and at this point like it's people really always wear masks so our mask always obviously at the hospital stuff like that but sometimes I do go out and source without my mask but I'm gonna keep Kleenex in here because I literally use Kleenex all the time or like paper towels napkins anything like that so this actually came with the Kleenex I didn't know that so I'm just about to unwrap this right now and then I'm gonna actually keep the Kleenex in here but I've always seen people use use it for mask now but I'm gonna keep my Kleenex so just like that strap it back okay and then I have these two the sun just went down I'm sorry so I have these two blings for my seat belt covers so obviously if I'm using my seat belt it'll look like this okay so there's that one here's the one for the passenger I have two for the back but I already showed that I think it's not like the crystal down here it said it's too hot it said it was too hot so it was overheating so this is the one I have the other ones I had are like a like multi-colored rhinestone you think so I'm just gonna put this one over there and the other thing I have is this for your like registration your insurance cards anything that you need important for your car you will put in here so I actually have mine I've been saving it and it's kind of like folded up they have different variations of this I got the one that fold because it's cheaper they do have one that goes like horizontal hot dog ways but I'm like this is fine so which one cuz one of these expires this one expired this one is still good so I'm gonna put my insurance card in this little slot right here and then my registration is going to go in here okay so oh well I don't have my registration for this car yet I haven't went and got my new vehicle switched over so yeah but yeah the stuff goes in here and then folded up and then that goes in your glove box and the other thing I have is pepper spray I've never had pepper spray before but I decided I probably should get some and I got it in gray my car color is wolf gray and then of course the interior is red the other things I got is these like cup holders so black of course to go with the car and then I got the cute little rhinestone detailing so to put that I only got two I didn't know I didn't realize how many cup holders I actually had so I have two right here I have one over there in the door I have one in this door and then I have two right there and then there's two in either side of the back door so yeah I'm gonna be going to Amazon and getting some more of those because I did not realize that I had that freaking arm rest in the back back there so yeah I'm trying to set y'all back up I had y'all you're falling you don't wanna see it's okay the next thing I have was a two-pack of these like purse hooks I'm using it for my purse so it came in a two-pack I'm already literally using one for my purse right here and I'm gonna put this one on the back of mine if you just just just stay there okay so I'm gonna put this on the back of mine and then I'm gonna actually put my hospital bag on the back of there because I have a um like bag that I take only to the hospital and then like I keep that in my car so I'm gonna hang that up back there and then the last thing I saw me get was my trash can so I'm gonna throw this away inside the house but I literally have been getting like receipts I've been getting straws like straw wrappers and stuff I usually just throw them back into whatever bag it is that I got like let's say I ate McDonald's I'll throw it into the McDonald's bag so the receipt I'm throwing my trash can this one actually has a little sticky so you can stick it somewhere but I'm not gonna do that because I'll probably be like moving it back and forth places so for right now since it's only me I'm just gonna put it down here and I also have this license plate but I can't put this on it so I get to the house so I can use my tools so here's my glove box literally came with so much stuff oh I need to bring this in actually it tells me about all the gadget gadget stuff with my car and then this is what I put the registration and insurance papers in and I also just brung another charger because back here I have two charging ports I don't know if you can see that I have two charging ports down there and that's where that one's yeah I have a I have the 2022 so the logo has changed as you can see it's like so much cuter so since the logo changed it's not aligned right because this is for like the 2021 but yeah this is how I start the car will push to start this is the log this is the unlock this is the trunk pop my trunk can actually pop by itself if I walk by it with the key fob and then this is my horn I haven't sounded that off yet but yeah this little thing is from Amazon you can check down in my Amazon storefront I have all of this stuff linked down below and also Prince Carsey is from Amazon I have that also in my storefront so yeah