Proudly, we hail. New York City, where the American stage begins. Here is another program with a cast of outstanding players. Public service time has been made available by this station to bring you this story, as proudly we hail the United States Army. Our story is entitled, We Are Twelve. This is a narrative of an even dozen men on a patrol in Korea, and how one of them, a private Matt Jensen, goes through his first experience of enemy action, and comes through it a better man and a better soldier. As proudly we hail the men of the Eighth Army. Our first act curtain will rise in just a moment. But first, young man, when you volunteer for service in the United States Army, you can rest assured that your best talents and natural skills will be considered in giving you an assignment to your liking. Yes, today's modern army fits the right men to the right jobs, and real merit is recognized with faster promotions and more opportunities. Now, more than ever, men with above-average ability are finding better jobs, more important assignments in the United States Army. Investigate an army enlistment for yourself today, and find out just what you stand to gain. Well, information is available at your nearest United States Army recruiting station. And now your United States Army presents the proudly we hail production, we are 12. It's a warm hazy summer morning. A few stubborn birds still cling to their homes in the bullet-torn trees of the Korean hillside, singing away as if a war had not come to rest to strive the orchards and rice paddies of their valleys. For in July 1952, the Korean War has stabilized itself into a kind of fighting not known since the days of World War I. Bunkers, trenches, and no man's land in between two opposing lines. You aren't singing, however, Private Matt Jensen. Korean hills have a way of taking the wind out of a young man just reporting to his company near the main line of resistance. Or the MLR, as the men of Baker Company call it. Hey, buddy. Hey, which way is the orderly room, Bunker? Are you just reporting in? Yeah. Hi. How long have you been over? Korea, about two weeks. We're giving us some final training over these hills. Well, in Korea, there's only just two directions, up the hill and down the hill. Where you want to go is about 100 yards further up. There's a sign under the camouflage netting. You'll see it. Thanks. I say how long does it take a man to get used to climbing these hills? You don't get used to it, buddy. You just get the way you can do it. Well, I figure. Well, thanks again. Hey, it easy. Right. I think it easy itself. Joke with me, boy. I'm an old man. If I make this 100 yards, then I'll think about taking it easy. You'll be surprised at things a man can do. Yes, Matt, you'll be surprised. Maybe surprised at the wrong word, but you'll certainly be educated. And it's an education that really pays if you pass the tests. And here's where you enroll in the course. It's cool and dim inside the log and dirt bunker. How many first sergeants have you reported to in your time, Private Matthew Jensen? Private Matthew Jensen? Right, Sarge. First off, welcome to Baker Company. We're glad to see you, believe me. I won't hold you up here, though.  You'll be with the first squad, Fourth Platoon. Your squad leader is Sergeant Dave Reese. He's one of the best, an old soldier and a professional. Watch him. You'll learn a lot. Right, Sarge. How do I get there? Up the hill, Fourth Bunker. Stay off the skyline now. Let that be your first piece of advice in Baker Company. It's a good one. Don't worry, Sergeant. If there's anybody I'm going to be sure to watch out for, it's me. Well, ask for Reese when you get there. We'll get you squared away and settled out. Good deal, Sarge. Thanks. Right, and good luck, Jensen. Sarge and I was born lucky. Yeah, well, don't push it. Stay off the skyline.  Four bunkers up and ask for Reese. Bunkers. Underground log caverns where you cover the one opening with chicken wire to keep the comies from rolling a grenade into your lap some nights. But GI ingenuity can do a lot. A stove made from an empty oil drum with empty shell casings for a stove pipe. Bunks made by weaving communications wire over a framework of branches. Not bad for Korea. At least you can sleep off the ground. So this is going to be home for a while, Matt, and these are going to be your family. Hi, Sergeant Reese around. That's me. Yes, you must be Jensen. Word really travels faster out here, doesn't it? Got it from the first sergeant this morning. And do I bunk in here? Right, over there in the corner spot. I'll give you a hand with your stuff there. But first you better meet the boys. This is Corporal Rodriguez. He's from down next to the Rio Grande. Call him Rod. Hi, Rod. My pleasure. Now, if Rod lived just about 20 miles south of where he does back home, he wouldn't be climbing these hills. He'd be a Mexican citizen. Oh, I like her the way she is. However, my good Sergeant... Yeah, flowery as talking Corporal ever saw. Right. And this over here is Raymond, the funny man. Ray, this is your new bunk mate, Jensen. My name is Matt, Ray. Glad to know you. Glad to have you with us, Matt. Now, going around this way, this is Joan. Hi. Martin. Hi. This is an important time, Matt. These are the men with whom you'll work and live. If you need to know them, they need to know you. So as you get settled down, the most important part of your job turns out to be the old safety valve of the Army, the time on a bull session. Hand me the can of board cleaner, would you, Matt? Thank you. You are a gentleman and a scholar, my friend. How are you going to know a thing like that? You wouldn't know a gentleman or a scholar if somebody walked up and hit you in the head with one. You are ignorant, Ray, but you have a good heart. So I forgive you. A gentleman is a man like my father, back in Texas. A good man, kind. Also a strong man, so he's good to carry a lot of responsibility. Like, same kids, for instance. And then a scholar is a man like Sergeant Reese, who knows everything there is to know about his subject.  All right, all right. I'm just kidding, boy. You don't have to write a book. Well, I tell you, Rod, not changing a subject or anything, but it's the second time you've cleaned that rifle today. What's with that? Matt, in basic training, I hated to clean this rifle, but we learned from experience. Today, I would rather clean this rifle than do anything more than eat if necessary. There is no more beautiful, useful thing than a clean rifle. What he means, Matt, is it jammed on it in a firefight the other night? Boy, I know the feeling.  That happens just once. You make up your mind that you're going to promise yourself how clean your rifle is going to get next time. Okay, you got me convinced. You got enough patches of oil left for two, Rod? Oh, be my guest, private Jensen, be my guest. Please send me that small spring in. Thank you. Now, once again, beautiful spring. Say, Ray, Reese said we'll be going out on patrol soon. Well, you know, what's it like? No need to feel bashful about asking that question, Matt. Every man ever came up this hill, asked that one. I know I did. Only thing is, nobody can really answer it for you. You got to go out at night and do whatever it is they got for you to do, and when you get back in, then you say to yourself, well, that's how it was. I can tell you one thing, though. You learn to do a lot of your sleepin' in the daytime. This is a war they fight in the dark. Well, there may be disadvantages to growing up in a big city, but it teaches you one thing, how to take care of yourself. Oh, excuse me, Matt, but don't make a mistake for yourself. There have been a lot of people who knew how to take care of themselves. They didn't do so outstanding in this proposition. He's right, Matt. This is no one-man deal. It doesn't work out that way in practice. Oh, yeah, sure. I just wondered, you know, how to work it. Just I've been taking care of myself for a long time now. It's worked so far. This is different. Across that valley at night, everything gets boiled down and concentrated. Things that work and don't work show up pretty quick on the press. Gentlemen, gentlemen, patience is a virtue. Regardless of trigger assembly, this small steel spring is in its proper place every... It's not all cleaning rifles in both sessions, though, Matt. It's final training.  That bloody real estate which has cost a lot more than just dollars and cents in the past few months. You have to know where every rock, every ditch, and bush is out there before you can move across in the black of night. So you listen. Then when you know it like the inside of your helmet, there comes at last another, more specific kind of briefing. Okay, settle down. That is in there. Now I just been up at the command post and got the briefing for our little trip tonight. We got a contact patrol to Broken Finger, halfway across it, and back again. All right, that is. Now you've heard the bad, the rest can only be a relief. Now first we just contact, that's all. As soon as we receive fire, we return it and move out back here. And G2 thinks they got a company maybe reinforced, moved out onto that finger. We're going to find out. When we make the contact, we'll call in for our heavy mortar right down in their heads and move out. That's it. Final briefing at the assembly area, all $100. Carry a basic load plus six clips for each weapon. Two extra clips for the BAR, Martin. Just for luck. Now tape your dog tags so they don't rattle. If I forgot anything, I'll remember it then. That's all. Darn sure your weapon's clean. Reynolds, can you come with me for a minute? What's up, sir? You've gotten to know Jensen pretty well, I mean. Sure, I guess so. Why? Just keep an eye on him tonight. Clue him in before we start out. Sure, sir. He'll be okay. Maybe he's a little nervous, but that's sure I know. Who ain't? Just the same, this is his first night, so give him a hand. Right. Oh, sir. Yeah, what's that? Who'd you put on to watch out for me the first time you took me out? The guy who came in just before you. You clanked up ahead of time. You know what to tell him. Yeah, I think so. The same thing the last guy told me. Back to life, I like Korea. All right. See you later then. I got business. Like is the inside of a dog raid. I didn't see where you're going. Always sort of get a feel after a while. Some guys say they can smell which way is north. I can smell that rice paddy down there, but that doesn't take much talent. Look, hold it. This is the assembly area. Pull up the hillside and relax. The others will be along. Yeah, relax. Ah, you'll be okay. One thing to remember, though, it's good to have it fresh in your mind when we move out. Yeah, what's that? Well, together we're not just 12 men. We're a 12-man weapon, a squad. That's what'll get us out of a tough spot like nothing else can. But 12 men out there just, well, each just taking care of themselves would be just 12 guys, each one of them all alone. Go ahead. That's all. We got to stick together. Look, if you think I'm liable to bug out at the first sign of fire, why don't you just... Always said anything about bugging out. Just remember, we're all together and keep your eye on Reese. He knows his business, believe me. Sure, sure. We're all keyed up. It's a good thing.  I wonder what's keeping Reese. You want to talk less and listen more, Ray, if you want to hear people when they walk up on you. The rest are coming, so, uh, you two guys form a base so they can fall in on you in two ranks. We've got to move smooth now. We've got a lot to do. You are listening to the proudly we hail production. We are 12. We will return in just a moment for the second act. Have you ever listened to an old soldier talk? Army men can tell many a true story of courage, of distant lands, of fun and pranks in their training days. But notice that proud gleam in the old soldier's eye when he reminisces. That comes from the knowledge that he served well beside the finest men in the world. Old soldiers can tell you what the army can do for you because they're the men who know. The United States Army has always been proud of its men and the men have always been proud to wear the Army uniform. The Army wants you, needs you, can use your ability to be young, intelligent and can measure up to the high standards required of today's American soldier. Take my advice. Pay a visit to the local recruiting office in your hometown and have a chat with a friendly recruiting sergeant. He'll give you full information on what a career in the Army can do for you. Find out full information today. You are listening to proudly we hail and now we present the second act of We Are Twelve. Yes, there are a lot of details to check before 12 men step off into an uncertain future of the hours before dawn. And these are the details that will make that future less uncertain. You throw as many small weights as you can into the scale on your side. Take every known precaution. It's the combat soldier's life insurance. It amounts to a real professional figuring all the angles before he moves. And you're watching a real pro at work now, Matt Jensen. Okay, okay, settle down. Now check these things. Anything not right sound off. Okay, basic load plus six extra clips, check. Dog tags, tape so they don't rattle. Jump up and down. All right, hold it, Jensen. What do you got in that shirt pocket? Well, just a lucky piece, sergeant. It carried a long time.  You can't get it out. Oh, look, it's my lucky piece. Take it out. Now here, you wrap this tape around it if you think you got to carry it. Well, you don't count so much on just luck, Jensen. That's what we're doing with this check down, making our own luck. Okay, Rod, you got the flares and the very pistol? I am, sergeant. Red and green just like Christmas. Raymond, check the walkie-talkie. Able one to see an eye. Able one to see an eye. All right, Able one, loud and clear. I say again, loud and clear. Over. Hear that, okay, sergeant? Able one to see an eye. Okay, see an eye. End of test transmission. All right, now gather around me here. Let me have your bandit there, Jensen. Now, everybody's got to know the roots out and back in case anybody gets separated. Now, make sure you don't. But in case you do, now, give me room to draw on the graph. Everybody see? Okay, now we've got to go out like this by the patty and the ditch. It's messy, but it's safest. Once across, we form in the orchard at the bottom of broken finger. Afterward, we come back like so. That's the other side of the hump by this ravine. That way, we don't find a batch of commies waiting for us in the tracks we made going out. Rendezvous point is just outside of the ravine at 0430. Password is worry. Counter sign is war. Some comedian of the life. Now, remember to stay close when we're moving. Watch you don't get mud in the muzzle of those pieces. That's it. Got everything, Jensen? I think so, Sergeant. I remember a lot of this from training films. Well, remember one thing more then and you got it made. What's that, Sergeant? This is no training film. Each foot of a night patrol is something that has to be considered. Out through the barbed wire aprons which encircle the company front, down the slope to the warm, wet rice paddies.  But the darkness is your shield as well. The enemy can't hit what he can't see, at least not as well. But for now, you concentrate on just walking. To go quietly through mud and water the man has to go in slow motion. One step. Balance. Think carefully. Slowly put the other foot forward. Another step. But it's agonizingly slow. And it's hard on the nerves. Sergeant Reese. Quiet. I'm here to your right. Four yards. Couldn't hear you. I'm here. I'll tell you if you go wrong. Just go quiet. It's hard not to talk, isn't it Matt? Hear a friendly voice answer and be assured that you aren't really alone in the middle of a black mud hole that reaches to the edges of the universe. But you can't stop or you will be alone. So you keep moving. Then at last, you feel solid ground under your feet. Low outlines stand out dark against the sky. Freeze. You're in the orchard. Genson. Here, Sergeant. Stay close on me. We'll go over that ridge there. It shouldn't be far enough. Right, right, Sergeant. It's gonna be okay, kid. Just keep your ears open and your head down. Follow me. A different kind of caution now, Matt. Stay in a crouch. Careful. You don't dare dislodge a pebble or step on a dry twig. It's only a matter of yards now to the terminal point. And it's so quiet. Maybe they won't be there. Maybe. Get down into that gully. Quick. They don't know what they're shooting at yet. It's an automatic reaction. 12 men moving like the parts of a well-made machine. Experience training is where they pay off.  Right. Bring that radio up here. There you go, Sergeant. Able wanted to see an eye. Able wanted to see an eye. Over. Able wanted to see an eye. Do you read me? Over. I ain't going to hear you. What do you mean? I didn't see it until I handed it to you. Look at that rip across the back of the case.  Don't be too sure. A bullet that knocked this radio out could be the one that cooks all our guzzes. Get right up here quick with those flares and tell Martin to save some ammo for that BAR. We're going to have to move fast. Here to your right. Get those flares over here. Looks like they bled up for a minute. The flares bright, not a place, and the endless black of the sky hang overhead. Lights in the night, one of the oldest signal devices known. And they say to the people back at the line, contact more than half a company. But there's one big disadvantage. Players don't give map coordinates. And to fire this close, mortar teams have to know exactly. Hey, Jensen, here's Sergeant. Get over to the right and tell Martin. No, wait a minute. Hey, Smitty. Hey, Smitty, over here quick. Now look, Smitty, we've got to have mortar, we've got to have it right away. We can't hold these people. We can't move back without covering fire. Radio's dead. Drop your stuff here. Try to get back to the company. Give them these coordinates. Don't lose this paper now. And good luck, Smitty. Kick off. See you on the charline. Hey, Sarge, Smitty's maybe ten years older than I am. I could have got back faster. You're running the war already? Berm got behind us. Look, Sarge, I should have been able to... Hold it. Listen. Well, Jensen, they're behind us. You think you could have gotten through them? That's what Smitty's doing right now. I didn't know. Neither did I. But I didn't take the chance. If anybody can get through, Smitty can. He shoots rats in the dark with that carbine. Now, here's your job. You do it, and you do it fast. Move over by Martin. Use your M1 to help cover his front. We've got to save some of that ammo for the BAR. Move out. Right, Sarge. Keep it all in place. Hold this hole.  You're crazy. This is serious.  See it? What, General? Get out with me out there. Stick your helmet up, he says. He had to get those faces spotted good enough so Martin could pin them down while you climbed out of there. Remind me to thank you when I get the time. I'll remind you. Hey, Martin. I'm coming over. He says to save some of that ammo to use when we pull out. I'll use my M1 to cover your front. And thanks, Martin.  Skipper, you'd have done it for us. How much ammo you got left? Well, let's clip in one more. How about you? A clip and a half. I'm saving that full one for when that mortar cover gets here. Looks a little dark, doesn't it, Matt? You can't help thinking.  So the only thing you can do is do your job and wait for the next move. Anybody hit? Hey. Anybody hit anywhere? Sound off. Julio Martinez, Orlando Rodriguez, okay? Rod, get ready to move out back to the company if that mortar doesn't get here in a couple of minutes. There ain't no time for that now. We've got to move. We've got to move it all. There's still some commies behind us. Martin, we'll use the BAR to cover while the rest cross the gully. The rest of you guys move out. Fast. Okay, Martin, lay it down over their heads. I'll take up the slack with my carbine when you have to load. Lay it on them, boy. To the right and left, there's pencil lines of flames stab out of the night. Reason you're automatic rifleman laying on the screen of fire that will let you move across the ravine. Then once you get across, you do the same for them. Pretty hot there for a minute or two, Matt. Then it's rendezvous. And count noses. Red's not going to bother you now for a while. The mortars are keeping them busy. Okay, everybody make it? Anybody catch anything? Martin's got a little hole in his legs. Just meat though, no bone. Wrap your belt around it and carry him, Ray. Who else? Sergeant. Yeah, Rod, you hit? Yes, Sergeant. It's only me that's remounted this, but never seemed to tell you where. Let me see. That ain't so bad, Rod. Just a crease. But you better not try walking right now. Hey, Jensen. Yes, Sergeant? You okay? Oh, not a scratch, Sergeant. Begin his life. I think you can carry one end of Don Juan here. Oh, sure, fine out. Good boy. Put a compress over that wound first. Hey, Jones. Oh. Let me have your rifle gear. You help Jensen here, carry Rod. Sure thing, Sergeant. Let me have your heavy stuff too, Jensen. Right, Sergeant. Thanks. All right.  We'll do it back at the bar of wire 10 minutes ago. Okay, Rod. My boy, we'll run your stomach now. Got to put a clean compress on that wound of yours. Change you with advantage, young friend, then. Oh, I'm glad my dear mother cannot see the simple state of the sun tonight. Okay, everybody set? Mark, ready? Me and Mark have just been sitting here waiting on you, Sergeant. How about you, Jensen? Jones? Ready anytime, Sergeant. Okay. Move out. Okay, Jones. Eat on three. One, two, three. And now, Jensen, Jonesy, I ask you like a friend, do not drop me on my purple heart. Sure, sure, Rod. You just stick with us. From here on in, we got it made. So once again, 12 men have gone out and 12 come back, mission accomplished. Sounds pretty good when it applies to you. You pass the first and most important test, Matt Jensen. Now with dawn beginning to outline the hill where Baker Company is dug in, you can look forward to a cup of hot coffee and warm sunshine to dry the wetness out of your clothing and the night chill out of your bones. Your battle tested, Private Matt Jensen, and now you know what it's like. Oh, sure, there may be other patrols, but never another first one. Now you really belong. Even the birds in their battered trees are beginning to look familiar. And it looks like a good, clear day for the foot soldier. Today, your rapidly expanding United States Army needs intelligent young men with ability and ambition, men intelligent enough to recognize the vital need for a strong army, men with ability enough to be trained in a necessary job for full information on how you can fit in with the finest. Check with your nearest United States Army recruiting station. The United States Army, the senior service of our armed forces, needs you. This has been another program on Proudly We Hail, presented transcribed in cooperation with this station. Proudly We Hail is produced by the Recruiting Publicity Center for the United States Army. This is Mark Hamilton speaking, inviting you to tune in this same station next week for another interesting story on Proudly We Hail.


We're being pushed toward nuclear war on a fiction, notes from the edge of the narrative matrix. We're being driven toward nuclear war on the completely fictional claim that Putin is a Hitler-like megalomaniac who's just invading countries completely unprovoked solely because he is evil and hates freedom and won't stop invading and conquering until he is stopped by force. The news media aren't telling people about the Western aggressions which led to this war. They're not telling people the US is keeping this war going with the stated goal of weakening Russia and is rejecting peace talks and refusing to push for peace. All people are being told is that Putin is another Hitler who won't listen to reason and only understands violence. The world's two nuclear superpowers are being pushed closer and closer to direct military confrontation based on a complete fiction which emits mountains of facts. To participate in this madness is indefensible. It is indefensibly immoral to foist a fictional version of events upon a trusting populace in order to manufacture consent for more and more aggressive acts of brinkmanship with a nuclear superpower. These people are depraved. No, no, you don't understand. If we weren't being told constantly by the media that this proxy war needs our full support and censoring the voices who dispute this and using giant control armies to swarm and silence anyone who questioned this, we might fall victim to propaganda. You're not anti-war, you're just anti-american wars, said the person who is loudly cheerleading America's proxy war in Ukraine. Warmongers don't like being called warmongers when they support a US proxy war that was deliberately provoked by the US and is being sustained by the funding and facilitation of the US with the explicit goal of weakening a long-time geopolitical rival of the US. They get very upset when you point out the fact that they are doing that and when people's opposition to their warmongering is described as anti-war.  This time the US is on the good side of a war.  Come on. The closer we get to nuclear war the less patience I have for sectarian spats between people who are supposed to be opposing war and militarism.  This is more important than you and your ego. Don't let anyone tell you your criticisms of US warmongering make no difference. If they didn't the empire wouldn't work so hard to dissuade you from making them. They work so hard to manufacture public consent for their agendas because they absolutely require that consent. An entire globe-spanning empire rests on our closed eyelids. Depends on keeping us in a propaganda-induced coma. Circulating ideas and information which discredit and dispute that propaganda poses a direct threat to that empire. That's what all the censorship of dissent is about. Is your one tweet, video, blog, or public demonstration going to bring the empire crashing down? Of course not. But it will spread awareness by that much. And all positive changes in human behavior are always preceded by an expansion of awareness. You are nudging us all toward awakening to whatever extent you help expand awareness of truth in reality. We can't be the Hollywood hero who single-handedly decapitates the machine.  That's what disrupting the imperial propaganda machine accomplishes. Because it depends on propaganda. The weakest part of an empire that's held together by lies and manipulation is its lies and manipulations. That's why it's such an aggressively protected aspect of its power. And it happens to be the one part that anyone with a voice can attack and attack effectively. The nightmare scenario for our rulers is the same as the nightmare scenario for every ruler throughout history. That the masses will get sick of their rule and use the power of their numbers to get rid of them. That's exactly what the propaganda matrix is designed to prevent. One aspect of this struggle that is a bit like a Hollywood movie, is that it kind of is a struggle between light and darkness. Because the empire depends on keeping its activities obfuscated and unseen while we're all working to make its machinery visible and transparent. That's why Assange is in prison. It's also why internet censorship keeps ramping up. Why propaganda is getting more and more blatant. And why online discussion is swarmed by astroturf trolling ops. Those in power are working against the people to keep things dark and unseen.


of dread right now you got the pulse 3d with the money i was gonna use to get dude that'd be sick you're dark nintendo prime $10 nintendo prime's a real bastard you know that nintendo prime nintendo prime bastard what a bastard i ain't dancing for you sorry man i ain't even doing a real no no you're getting wine for that man you're you're you're a real bitch who's the bitch now gotta love that movie um i pay more a year to netflix dude i pay more a year to myself a little different that echoes awesome i love that echo button i don't use it enough i also have this really cool idea where you know what bottom line is i'm sitting here doing some drinks having a good time and what the hell is going on had a little chase there for a second i wasn't sure if i could survive it i don't want to go make sure that door hey hey yeah you close that door can you pay yourself am i gaining any money technically like like that $10 superchat $3 went to youtube 7 went back to me so like i don't really make money off it um you rob a bank right run run that's some cool buttons there's this one too like where the door opens and there's a party going on hey eric shut the fucking door i'm streaming over here come on come on you know what's happening he's partying without me what a what a why am i not invited it's my house i got i got a few cool things set up like that i i got some more little skitty things i want to set up but i don't i don't have everything all set what is someone's knocking what the hell okay i'm freaking out who the fuck is that excuse me are you going to talk where was this devil chant coming from close the door buddy thanks man that was freaky all right time to break out the bfg it'd be cool if i had like some prop guns i don't have any prop guns don't slam the door across money bitch i don't like the one like dragon thank you man that's the funny comment um raven raven beak uh the dark lord entered right it's raven beak yeah yeah yeah that that little chanting school there's a bunch of other stuff i want to set up in future streams i just haven't had time to sit down and really conceptualize some little cool things i could do here um but there's a lot more i want to do i remember watching some dude rob a bank or someplace online and he accidentally threw the fun over the counter and got scared i've seen some videos like that it's like put your hands up and then he drops the gun and then runs i see i saw a pink robberie the time where he dropped the gun and ran out scared it's like clearly your first ever bank robbery dropping the gun let me tell you here's the tip if you're gonna rob a bank don't drop the gun unless you get shot don't drop the gun right i mean bank robbery 101 hold on to your weapon letting you know right now i'm not a professional bank robber but i'm assuming dropping your weapon is not a good bank robbery tactic maybe i'm wrong i'm not a professional professional bank robbers feel free to correct me in the chat someone called about stealing are we well here's the thing that is a crime in some states but there's some states where weed is still illegal my state weed is still illegal so if you call the cops about that you're just admitting that you have possession of weed and get yourself in trouble who wins yeah oh yeah baby and take a 610 and two dollars says uh who wins samus vs doom slayer vs master chief damn all three of them seem unkillable i mean my heart says samus but what samus really take out i mean doom slayer literally slays demons master chiefs more of like a bounty hunter style like like samus so doom slayer is like the outlier because doom slayer is fighting for survival the other two are fighting off aliens i feel like i'm sorry somebody fighting literal demons probably has an advantage right i'm gonna give it a doom slayer i'm gonna give it a doom slayer so i'm just reading the chat a little bit here god damn it nintendo prime okay to be honest that super chat happened because we're we are now officially 14 dollars away from hitting 200 and super chat revenue tonight so i just wanted to like it's like a pride thing i wanted to support the pride and push us closer to 200 because i feel like if we hit 200 dollars tonight i'll probably do a shot at tequila just to celebrate just to celebrate just to see what happens yulia's back in the chat thanks for that thanks for what try bake for that honey we're not getting baked we might do some edibles we ain't getting baked come on we don't do baked let us know how to rob a bank properly there's no money heist is for you gotta think like 80 steps ahead of time right ultra planning cheers and the next because i'm ending the stream before we hit midnight in the next six minutes can we get 14 dollars i just i just want to see that 200 dollar number i don't care if yulia doesn't recline i don't care who does it fucking howl i was you guys weren't supposed to actually do you're not supposed to actually do it damn it just in battle oh oh oh hold up are you broken youtube so we were at my math is so i don't have to do it i lied apparently i will do a shot of vodka but i lied i can't math right now my brain is scrambled so i said they did it they didn't i will i will take a picture and put it on my twitter right now to show you we are not there and i will explain why we're not there i was wrong i was so wrong we're not we there we go i put on a tweet called evidence so people can verify i was wrong you know how i said we were 14 dollars away i was wrong we were at 176 dollars not 86 why the hell i thought 76 equals 14 dollars is beyond me but i just got out of that because we're at 196 so vodka i don't have to do tequila i feel kind of bad since i did the donation was based on a lie it's based well it was based on an unknown lie because my brain wasn't processing math like literally i was 10 dollars off what what weird i'm usually not off with math with them in this vodka out of the way why did i smell that god nate stop smelling your booze god philips maca's gross we really need to finish this bottle so i can get something better i don't believe in wasting alcohol so what nothing happened we're good i'm sorry that what was there was there something that happened in the chat wait i i don't think anything happened i'm i'm pretty sure that okay guys thanks for tuning in that's the end of the stream tonight have a good night i was really hoping i wasn't gonna have to do this well folks it hasn't been emptied yet we have the cock tequila so to explain the background behind this this tequila was bought back in may of this year so it's been around for a while this tequila only comes out on special donation goals sometimes it's 100 tonight it was 200 or for a hundred dollar individual super chats i've had times where i said look if we hit 100 i'll do a shot of it if someone donates 100 i do two shots because they did a shot for the 100 plus we hit 100 so that's two shots and i've had some crazy sums of bitches toss a hundred dollars so look tequila is what it is i like it in margaritas it's when i have it raw if it's mixed i'm fine you throw tequila in a mixer i'm good tequila on its own look i shouldn't complain tequila gets me drunk tequila is my like vodka doesn't affect me as much you know gold schlager doesn't affect me as much jagger doesn't affect me as much i don't like jack but i think it's gross doesn't affect me as much um rum can get me there but it takes probably about i don't know about 10 shots of rum before i get there tequila is like a one-way street the funky town and now i gotta do it i gotta be honest i feel a little guilty i feel like i pressured the chat into this so i guess i shouldn't really feel bad thank you so much silvester favela i love you for the five dollars i do feel like i pressured the chat into this so that's not okay that's not okay pressuring the chat's not okay honey are you there yulia are you watching my chat right now i want to know are you there yulia are you in the chat still yulia yulia are you there yulia she's not there this is about to get dangerous we're gonna do the shot we're still good hold on how you guys doing tonight by the way you got yeah you guys i guess having a good night i know we just hit midnight my time we did hit officially midnight my time how you guys doing tonight you guys you guys having a good night all right i got uh someone just emailed me a um a business proposition i try not to um care too much about business propositions a lot of the business propositions i get are kind of full of shit sometimes or not sometimes the business propositions are good like into the am that was a good business proposition right sorry this is this is someone who claims they'll pay me a thousand dollars to advertise someone kind of an important one here we don't get important um stuff like this very often so just make sure that i get this taken care of here we're almost done with the stream guys i know i know i'm kind of avoiding the shot at tequila i decided notification pop up i wasn't planning or i know you would just respond to that email tomorrow nate i know okay i'm aware be responsible nate and are sending this email i don't know if they're gonna be legit or not a lot of companies do some crazy shit all right um we had a five dollar come in from jason mineheart when does game stop getting more switch old eds brah my local game stop i can't speak for game stop online my local game stop is getting a shipment as far as i was told um one second i gotta go to the bathroom i'll be right back sorry i think a little bit my bathroom is all the way upstairs so all right um let's see here five dollar oh wait i already already read that all right let me let me get this uh back out of the or back talk tequila let me get this out of the way tequila i think we're gonna end the stream there on the tequila sorry i guess i probably should have just held it the tequila went to bed you guys are awesome um i'm just going to read a few you know what i'll give you guys another five minutes and then we'll end the chat um is there a download for that zelda music uh hold on uh you know what tune in next live stream i plan to do one on monday um i will give you the link to it i actually had the link it's on my other computer i will grab the link important in the description and i'll get the link to the nintendo theme remix i'll give a link to that as well i'll start putting that in all my live stream starting uh Saturday um have you ever thought of adding links voice to your opening theme huh bird man news super chat what who is that i love you says i love you who is that so seriously who is that i've never i mean it's like a alternate account who is that all right hold up i mean i know what you guys want you want the tequila clearly i mentioned the hundred dollars and then i got the hundred dollars i clearly have to do this out of tequila it is what it is here's the thing i don't know which one to use using an alternate account because you don't want to take credit for this it's fine i'm not going to put anyone on the spot i will just say this i will say a sincere thank you i want to always be grateful to everyone every viewer who's watching right now greg lee lake who wants to know when i got into nintendo happened when i was five years old i played punch out on my dad it's a long story my dad actually got mad at me because he was at mike tyson and i messed it up for him but anyways i don't want to seem like you need to pay to get my appreciation so i want to be clear on this i appreciate every single one of you well holy fucking shit if someone's gonna give me a hundred dollars damn what a rush holy shit i love you who whatever whatever reason you don't want to use your main account to chat me tonight what for whatever reason that is i will just say this thank you this month has been insane we started this month with a 1200 live stream viewer stream that made 700 it was insane that's how this month started we now have a stream with 300 dollars and beyond all of that we've already had an incredible boost from youtube youtube is sharing my videos like crazy i don't know why they just are my subscriber growth is the best it's been since september of last year i am making an incredible cpm per video it's crazy i'm making like 30 a video that doesn't sound like much but considering that i used to make three dollars a video seven months ago holy shit it's a big increase so like this is insane to me now someone's mentioning two shots i did not say at 300 dollars we're doing another shot so this is only a one shot super chat but my god i don't know what i've done to deserve this support because here's the thing a majority of the money tonight before this super chat came from julia which is just a joint bank account with me and her so it was just our money so like we were actually losing money overall tonight we lost money until this super chat this is insane you guys are insane like there's no words like i've had i've had this isn't the first hundred dollar super chat i've had in fact i've had a hundred and fifty dollar super chat one it's like i don't want to just act like this isn't a big deal because it is like dude a hundred dollars is a lot like to put this in perspective i know this seems stupid but it cost 94 dollars to fill the gas tank in our only vehicle we have now it's a 25 gallon tank it has to use 91 grade gasoline it's really expensive it is an suv it is what it is we have a family we have to be able to get everyone in the car but holy shit but if it was julia why wouldn't she just use her normal account i don't even know what the same moment's like this you know because i appreciate every dollar but like this is i mean you just gave us gas for a week reality is probably get put towards giveaways but still what is happening right now i'm having conversations with avar media behind the scenes on a legit sponsorship to get me better equipment to handle my live streams to do more crazy things with my streams with multiple camera angles and have all this fun i'm i'm legitimately like this month is the first month outside of like the lead up to e3 where the channel is making a revenue that can't be ignored october's just massive forget the super chats obviously i can't control how often we get community support like that or membership support like that but literally ad revenues at an all-time high subscribers are at an all-time high we might hit 80k by the end of november like what the fuck things are going insane right now and i'm just sitting here trying to take this all in and understand what's happening to the channel in this exact time frame and like i put in a video yesterday there's nothing more i can say but thank you because i have a dream on youtube that isn't realized it might not be realized for years it might not be realized ever but this is what i would like to do i would like to be able to support my family doing what i love and i love doing youtube streams and videos and everything else and i don't know if we'll ever get there and it's okay if we don't it's just kind of a pipe dream it's not really something i look to but when we have nights like tonight nights like we had you know two weeks ago when it was crazy with 1200 plus here live on a friday and we're just everything's just popping off and we're giving away things and everyone just seems happy and then youtube's gracing us i know some of you guys are annoying because some of our videos youtube's like let me give you two unskippable ads i don't control that but just know if you do get two unskippable ads your view is worth more than those that do get skippable ads so if you want to support my channel hey i mean i know it sucks sitting through two unskippable ads i don't control that you got that but that means youtube put my video in a higher tier of advertising that day i don't always i have literally no control over that i don't go in there and tell youtube hey put two ads at the start of my video and make sure they're unskippable youtube just does that i there's literally a i check a box and i hit submit youtube does everything else i don't think it was my girlfriend she's driving right now she wanted to do that while driving anyways cheers you guys are awesome i gotta get going though oh thank you so much let me get this down man thank you for everything you guys do hopefully we'll have a video coming out tomorrow if not on sunday look at this hopefully no one's freaking out from that you guys are amazing i'll catch you guys in the next video


see if this gets them on the right track again or if we need to uh in the meantime i'm trying to decipher what this uh script is doing they have a solve function there which then will not really help them since you can't solve this um it's uh yeah it's it's still like you know a little bit unclear where the players are and this unfortunately we can't read the minds of the players that would be uh immensely helpful uh when doing this type of commentary we can just try to guess based on what we're seeing on the screen so and yeah again like if you have any questions or comments from from all of you were watching this i got some smiles i wish y'all could have seen it but there was like oh yeah of course okay okay so they both they were both you know going down the solver approach so i think we're gonna see a lot more i don't know right uh we're gonna see them actually digging into the binary right and following that way so that's that's all that's nice to to hear that like the the hint was uh appropriately level then that it was uh useful to the players yeah i think they both they both were at a spot where it's going to help both of them we'll see if you the one starts to starts to uh take advantage of that or not okay yeah so we're looking at check stack we're looking at the binary properties seeing is you know and that's actually a great habit to be in too i really think that a lot of people overlook that again we saw that last one with the with the mallard with the ducks where like it not being randomized i think added a little bit extra slow down there right yes definitely uh because you could have gone straight into uh you know yeah this is i i think i i i have this as a pretty good habit like always run file always run check stack yeah uh yeah it's kind of like when you're doing reversing uh reversing engineering challenges always run strings always been walk yeah just like just out of habit yeah just like the things that you things that you do right all right so let's let's watch it okay so now yeah now we're seeing them actually where we want them now they're back to versus nearing they're looking for vulnerabilities and and what they're going to do is they're going to use the vulnerability to win they're going to use the memory corruption uh to get to to to not code execution directly right but to the win state so what they're going to do is they're going to need to corrupt in such a way that they can create a solved board and they should have hopefully still remember this right because they know that the point was to win they saw that they saw the win they saw the win state they saw that's why they were trying to solve the puzzle so i think they know that yeah the question is are they going to uh be able to figure out the memory corruption in time so that's the question that we're looking for and this is kind of interesting i think uh this type of ponible where like a lot of ponibles you have kind of this like standard workflow where you try to gain control of certain aspects of memory yeah you're trying it's always it's a pointer over right or it's something that gets you a memory right so you get a pointer right like to a rock chain too like you know um but here you're just doing kind of like maybe we're we call like a local memory corruption you're just like or it's not quite a logic vulnerability in that it is memory corruption but it's not useful it's not being used for control flow right hijacking you're using it specifically to just change the behavior of the state and change the behavior that yeah the functionality through it's it's normal legitimate means but by entering a memory state that it didn't intend for you to enter right so in a lot of these cases we have like the program wouldn't crash for example with the like if the exploit is like slightly yeah you just you just fail to get a quick puzzle it's just not solved right yeah what's not to say that they couldn't crash with this vulnerability necessarily it depends on how it's actually constructed but there are there are certainly use cases or there are cases where you know an exploit isn't actually exploitable in them in the you know direct uh code execution state it is rather just by exercising some other right logical state of the program and I think yeah in general like what everything we say here about like the you know pony balls and like general ideas there are a lot of like if some butts and stuff like to all of these and exceptions but you know we're trying to you know make some broad strokes here about different types of challenges I'm a little nervous this one feels like that we the first one we might have to unleash a sudden death I'm hoping we don't right but I and I like the challenge because like you know like we're talking about I think it has that that good twist that you're going to not get a a pointer over right but you're going to like you know influence the state of the binary so I'm hoping and we've got we've seen great work from all the teams so far so we know we have high quality people we'll see how it's going this is also I said the one of the larger binaries we all get very small binaries very very self-contained this was a little bigger it's still I think small in the CTF scale of things which in CTF is smaller than real-world binaries oh yeah but relative to the live CTF binaries this is this is larger than some of them yeah luckily they don't have to like sift through a 300 megabyte binary what who doesn't love yeah sorting out massive binaries yeah I think I remember opening the Minecraft binary in Ida at some point uh then I went to bed and uh yeah continue to do it still yeah no I think it was like just barely finished but it took like eight or nine hours to analyze that yeah big binary or even like obfuscated binaries can can take a long time to analyze for sure yeah oh here we go so let's look we're seeing an inch 64 inch so making sure the types are correct that is a that's that's good I think I think uh analyzing the types is useful although what I will say is that just looking at decompiled code is maybe not the best way to analyze any kind of type issues right no I think it's like it's a good it's a good start to give you the big picture uh and uh but then at some point you might have to drill down on things and I think this is also kind of interesting again with like different types of uh pwnable challenges like uh some pwnable challenges like the bug is obvious and the exploitation is difficult absolutely and then you have these more like reversing heavy pwnables where like you have to figure out like very complex data structure but once you have kind of sorted everything out the bug just like appears uh and and then from there it's typically not that hard or yes and I think our our previous examples several of our previous challenges were more on the side of like it's obvious where the bug was but actually landing it was was sort of the tricky like we just let you run this calls yes which ones that's the tricky part like actually you're you're payloaded the execution same thing with like not coding like we just ran your bytes sort of you had to like do that it I think those are sort of like show coding heavy and the sort of like constrained environments are some of my favorite challenges um probably because I'm just bad at the like the more uh I don't know what's it tedious but the more in-depth long-term reverse engineering so I mean I'm more of a reverse engineer myself so like I like those things but then for example when you get to these like you know complex heap exploitation things then I'm you know completely you know out of like there well there's always just you know kind of familiarity and and experience with it one of the things I was going to mention um and and I say this that I don't do the heavy reversing heavy ones as an author of a reverse engineering tool but maybe that's why you built the tool right well that's also why I have co-workers who are much better than I am that's the other I highly recommend that approach um so the but one of things that I was going to comment on is that I like one of the things that Gheedra I think really does well that a lot of uh um uh both Ida and Binja have actually changed as a result is their side-by-side view having the synchronized side-by-side decoupleation with this assembly I think was a really important improvement and kind of like the standard workflow and so now you'll see Ida and Binja both have much better split pane synchronization those kind of workflows very much inspired I mean you know I assume ill-fact also was was inspired and was like oh yeah that's it you know I like the way to get to do that too but I certainly from from Binja's perspective like we definitely did that as well yeah um so I do think it's it's good seeing difference oh here we go we've got uh I don't know is that the same that's just the same screen um but we are so they're looking at libc uh trying to download like the appropriate libc version right yeah they're using this um web page where you can like put in uh offsets for uh different functions to like uh to match up with like fingerprint uh the libc version and then download it so uh most of the times I think you need like two offsets and then it will match to which version of libc is running so again when we're building these challenges if we don't think they need libc we are not providing it now that's not true in all competitions though so you know they may not yes trust us yet I think this is like it is a convention among I would say like experienced uh organizers within right because why make that an extra tedious step that it's just it just mechanical and you just go to we all know about the website we all know how you would do that however if you come up with a solution that's different than the intended one you might have a solution which does require absolutely and then you might go this round anyway yeah yeah so it's it's not necessarily bad it is just it should be a hint that maybe you're not taking the intended route right yeah doesn't mean that you're wrong but you might be venturing into like unknown territory all right so let's be thinking about our next tent because like I said I'm a little concerned we might need to do a different one um I don't know triple tap control and get the uh get the spoken dictation pop up I'm gonna go oh nope nope so somebody else in the background excited about something yeah I thought for a second we had a surprise win and we're off screen I'm gonna go ahead and check in with uh was it organizers is is organizers organizers is unfortunately not being captured so we're kind of in the dark there um so I'm gonna see if I get a little bit more of an insight hopefully we're making good progress there and I can come back with a little bit of an update yep um and then maybe then go ahead with some hints then based on current status uh so uh yeah again they're looking at like um figuring out like libc versions or downloading uh like an Ubuntu image I'm not entirely sure what's going on there uh but yeah um well we'll see if we can manage to kind of like see what in what direction they're going with with this um but yeah I uh it's it would be very interesting to see like if they have kind of figure out where uh where this check function is going on uh unfortunately I don't have like the reference uh solution so I'm not like super familiar with like exactly where it's where like where it's doing something incorrect but um yeah it's uh also going to be interesting to hear then what what the organizers are up to if they have good progress so we're also kind of a little bit in the in the dark uh on that but um hopefully um we I think we are going to give them a hint that I'd see uh Jordan and Glenn are discussing a little bit but what's the exact hint that we want to give them here to to you know uh point them in the right direction um it's yeah we can see here in the uh lower lower corner here we have from time to time we have uh the organizers screen like flickering in and out uh unfortunately that's the tech situation right now and in the meantime I can give you a little bit of an update on the combined scoreboard for the for the DEF CON CTF we have still like a fairly tight race uh we have a span of about 18 000 points for the the leaders katsubin down to 14 000 points for the team in 16th place so definitely still like everyone is definitely still in the game uh with top three being katsubin uh mmm and perfect roots and they are all within like you know less than uh some percent or so uh of each other so it's it's uh or maybe like 10 percent uh each other so yeah definitely a good uh good competition there so um Jordan is coming back here so what's the status what's the organizers doing uh we're gonna need some hints they're they're both still looking I don't see any kind of progress so we're gonna we're gonna drop a hint yes um the hint that we're gonna there's a couple of hints we considered one is have you considered fuzzing because literally just sending in a bunch of a bunch of bytes will actually um cause overwrite your your uh your your your game state yes right so that's the key thing that they need to figure out that if they send in just a too big of a solution it will actually corrupt the the state and they'll get weird boards boards and then it's a matter of oh okay how do I now create a board that would be solvable right so one that we considered the other one was um don't let yourself be boxed in to your solution it's a sudoku puzzle that's a little probably more obscure so yeah um I think we're gonna go with just um how big how like how big is your solution again question mark or how many bytes is your solution question mark as our as our next hint and I think we're gonna need to give them that because there's still some work to be done right um and we want to to give them both a shot at getting it otherwise we're gonna go to our sudden death so that's the hint we're gonna go with any type way to comment here from from KGF uh these seems interesting c-challenges I think it would try them all but I'm sure it would take a lot longer I would too yeah so that's okay but it is uh like a good idea uh I mean in general for CTFs to like uh try out challenges after they've been solved uh normally for a lot of of CTFs people publish uh write ups so you can like try the challenges uh that you didn't manage to solve uh and then kind of use like a write up or so as a reference and then guide your attempt as well to learn more um I think the idea is that we are releasing all the challenges it might take a few days for us to recover from this weekend we have 15 matches so another 11 matches to go after this one but yeah we will we will definitely publish them and then yeah you can even like you know organize your own like mini uh tournament in your own uh you know CTF team or uh you know hacker space uh I know that I heard from the 40 competition that uh Shellfish actually did some practice for this tournament uh by doing like a small uh mini competition of their own within the team which I think it paid off at least it appears it paid off as like one of the winning teams yeah we'll see how far they can go um so uh we have the hints prepared Jordan is going to go and hand that off to the players uh we are what's the clock at so we are so 545 so we are 35 minutes into the game which just mean that we are running uh up like against the sudden death clock here uh let's see if they can manage to figure out this on the other hand this is also kind of a similar situation to the previous challenge where we were 35 minutes into the game and then uh it kind of just I clicked for one of the players and they managed to go all the way so it's going to be really exciting to see what's going on still a bit difficult to kind of like get to read on Balsam's progress or like their understanding of the they're kind of like looking at the code probably thinking very hard about you can see like the mouse moving around trying to build this mental model of what's what's going on you're like kind of like running the code in your head you know what if this has this value like how does that probably it's probably the least interesting part of a live ctf right that's the only downside when you have a more reverse engineering heavy challenge yes is that you're just seeing people like maybe name stuff if you're lucky or at comments but most of the time it's just looking at it right and what we you know when you know you're getting closer when you start seeing a crash in a debugger and a payload being written uh and we don't have it yet i'm gonna go ahead and keep an eye on uh the organizers just briefly yeah and see if we get any of kind of that similar progress right so we have oh okay we did have a comment somebody else pointed out thank you for clarifying the reason that that somebody was looking for the libc was to actually run it because if you don't have the same vm uh handy you can't run that uh libc so you can just grab the libc from another another version of linux to be able to run the binary so that is another a completely valid reason that you might do that um yes probably just easier to maybe look at a previous stream or have we actually i don't think we told people what platform that most of our challenge all of our challenges were created on that's actually a good note yeah so future for future things we should because that's again normal and a ctf happens all the time you have to figure out the os that was created for match version information and whatnot right not our intention to make that part of the challenge here and it's the thing it's like ubuntu 22 was recent somewhat recently went in like lts release and a lot of people haven't uh updated to that yet um i you know i will accept like shared responsibility on this because i you know update your computers people uh but 20 oh four 20 to oh four would probably be that ubuntu it's most you know common or debian yeah certainly it's it's frequently but all right i'm gonna go ahead take a look at the orders i'll be back and we'll see how it's gone awesome so um i was talking about something um when it comes to these challenges um trying to get back on you know my train of thought there with uh oh yes so you know with this like looking at another player looking at code trying to figure things out a lot of times when i talk to people um who are you know not experienced ctf players or don't know what ctfs are uh you often get the question who's like oh is this some kind of like e-sports thing or like could you could make this into some kind of like uh e-sports thing and to an extent this is kind of what we're trying to do here uh but of course it has it's shortcomings that like some aspects of ctf um is kind of like watching someone else take a maths exam uh it's you know occasionally not the most exciting so we're uh really trying to by adding this commentary and trying to understand what the players are doing we're trying to make this an interesting and educational experience for all of you um viewers uh there um so i i hope you uh do uh enjoy this and then you know have some takeaways and definitely check out the challenges uh afterwards uh to also kind of get a feel for uh that's you know it might some of these might seem simple but when you're sitting here and actually trying to do it you have to consider and take into account all of these like small little details like if you just out off by one like a small bit somewhere like the whole thing uh doesn't work you need to do all this troubleshooting debugging and i think i mentioned it earlier but like when you're writing exploits you are essentially it's like software development but with your like hands tied behind your back you don't get like all the nice tools and helps and error messages that you get like during normal software development processes where you know you have all of these modern tools to help you but here you're kind of like you're trying to bend something in a way that was not like intended to be used you're messing with the state of memory um and so on so it's you really have like everything stacked against you and that is like a big part of the challenge when doing these uh polynomials these memory corruption uh challenges um looking here at the code here we can see that uh the balsam player is writing some small helper function here to send a number uh maybe they're gonna try to you know use this to try to send the different amount different number of numbers and uh you know see if they get a kind of any kind of reaction uh out of that um haven't really seen yet what oh so now they're gonna send like a thousand zeros that's that's interesting um so we comment here like yeah it's unsolvable yeah like the sudoku itself is unsolvable and that's kind of like the twist of this whole thing that's uh you know at face value just to solve the sudoku and win but then it's it's unsolvable so uh yeah that's kind of like the recap for for people just recently tuning in and speaking of recap just to tell you again a little bit about what we're doing here so we're here uh in vegas uh on site at defcon so organizing this live cdf as part of the um official defcon cdf so this is kind of like a sub event where all the 16 uh participating teams uh participate in this like single elimination knockout tournament where in each match the teams send one player to go um head to head against the other team to be the first one to solve a uh relatively simple uh ctf uh challenge i mean relatively is relative yes yes and that's i really want to stress relatively and i want to be clear i wouldn't personally solve half of the ones that we're feeling in the allotted time uh i we you know tried some of them in it you know i could get them but maybe take a little bit a little bit longer so uh i have a lot of respect for these people they're all very very good and they're dealing with the pressure being on camera there's a crowd standing around them watching them it is uh it can be it can be pretty nerve-wracking so uh i'm predicting oh that is quite the visual effect there yeah uh you know what the photosensitivity warnings here uh i think it's only an arm under i don't see no no it's not as well yes we have some yeah so not sure what that's about uh feels like our whole infrastructure is slowly melting uh so we know it's fine it's wow that is that is unusual yep um maybe we're getting hacked by the players like through the hdmi cables they're playing the other game the other the other ctf yeah i mean we would be lying if we would say that we did not have a discussion about like what shenanigans could the team try to pull off and how we would yeah yeah measure against it or what we would do so doing that kind of like threat analysis or threat modeling against yeah three more minutes wow three more minutes until it's gone this has been very fast 45 minutes it's looking unlikely um uh that either one i did see some some debugger action yes um i'm going to make one last pass if we see somebody very close so that they're making progress that we might be able to give them just a little bit extra but basically we're about ready to deploy or if they actually want to extend it um that's not a bad idea we can both ask both if they both say they want to extend it we'll let them go because they're the last one yeah and if so the rules are if one of them says they don't like they want to go sudden death then we go sudden death if both of them want to extend it then it's fine exactly right i'll see what they say but ask them like you know independent like you know one on one like to not give any like pressure yeah i mean it would it would be cool to see a solution on this and i think we do since we have been keeping up with the schedule we do have that kind of time but again the uh yeah it's difficult to to to say what the players want like this is also kind of like a kind of game theory thing like do you want to go to sudden death or not like it's a high risk environment right when you're going to do this super fast do you think that you because you also you don't know the progress of the other player like do you think you have better progress than the other player in this challenge right now and if you don't do you think you have a better chance of beating them in the sudden death one versus catching up with them in the current challenge it's definitely not an easy decision to make by the players so uh what's uh what's the verdict what do you think what would you if you're in their shoes oh no i would say extend it absolutely yes okay nice so we have a game here yeah so i'm i'm happy with this because i don't want to change the rules in a way that they're unhappy with but they both want to solve it i i mean nobody wants to give up on it no no no no no no that you've been working hard that you started you have a little bit of an idea right i'm glad i really want to see them see this through yes we'll let them go it's the last one of the day so we're not running over anything else um i'm actually kind of excited no 100 so uh story related to that so i was playing in the qualifiers for the def con uh ctf with our scandinavian uh team norse code and i was basically sitting all weekend with one challenge uh so i mean i took breaks and met some friends and stuff but there was a lot of hours this is paris challenge there was this was paris challenge it was the uh crypto-ponible thing uh so after i don't know if i spent uh i don't remember it was like 10 20 or 30 hours on this but regardless i uh solved it like two minutes after the ctf ended yep and that uh yeah i mean on the one hand it's crushing and on the other hand though you still solved it yeah you still solved it and that's the thing like when when the time ran out like i could have just stopped because like it doesn't matter anymore like we're not gonna get any points but i i was so close i did not want to stop there yep yeah so the only kind of like um saving grace for or you want to call it for that was that in the end solving that challenge or not would not have affected whether we qualified or not that that would have been crushing that's a little demoralizing yeah when it would have been it would have been the difference luckily even if with those points we wouldn't we would have been just below the qualifying limits yeah so at least at least you had clarity there there either way yeah i was comfortable with that that was fine and also that means that you know i could uh uh be part of this uh without having to like betray uh the the team right so uh yeah all right okay so we are there's a question here about whether it was n cats no this was the uh it was a crypto portable uh challenge uh it was about like a function closure thing uh c plus plus we could go ask yeah perry she's somewhere so she was she just was in the room she just left right um but yeah i've heard a number of people that that worked on that it was a great challenge like i i enjoyed it a lot but it was tough okay so we we don't have a hard time but now now it's basically we're just going to let it go until either we are convinced it's going to take way too long or uh you know we'll see at this point but they both want to keep going i would love for one of them to get it it not only means we get to save one of our sudden deaths um but i think it's just way more fulfilling for them and for the audience to see kind of like the yes the hard one the hard one's all so we're looking forward to it um it is interesting that we've got rob gadget address just kind of coming it looks like it looks like a template i think that this existed because yeah hopefully they have an idea that that is but we are seeing like someone is writing something very deliberate here right this is like a to print out the board somehow but um let's see they are trying to see i mean this this like double loop there is to print out some states but that's a part above you see something where they're like cutting off they're swapping all right oh is this just to generate valid generate a solution that they i mean i would just search the internet for salt sudoku board and copy and paste it but but if that is what they're doing that would that would be valid right so the idea is like you want to kind of like overflow and stuff to like basically insert to modify the state into something that's either solvable or already solved and so they they need to have that okay so we're seeing we're seeing interesting we're seeing calculations we're seeing length calculations unfortunately i was hoping we get some more video from the new organized up it came in briefly yes with some debug output there right yeah yeah well we'll leave it up for a second just got shown both and we might be able to see a little bit yeah see there it's coming on man that's tantalizing that's so mean yeah this this cable is has been yeah we might have to do some shopping oh there is definitely a shopping run tonight so we should be able to have this solved uh and out of the way and that way we got a long day eight hours tomorrow of hopefully uninterrupted stream yeah we'll see we'll see if that if that turns out to be the case i mean given that it's only been we swapped out the capture card the usbc cable the htmi is the only thing we haven't swapped out but it's been that same side of the table consistently yes it's been having these problems makes me think that yeah we've just got a an htmi cable that is suspicious uh so we'll see we can we can get that going all right um actually let me i'm gonna go ahead and do another in-person look i'm gonna go ahead take a look at new organizers um we'll be back with an update shortly because i debugger is generally a good sign yes i saw oh wait oh uh i saw like a bin bash string in the debugger there somehow but that doesn't really make sense right because well i mean with the intended solution that doesn't mean they're not gonna do no yeah and there also is the so i'm trying to remember how the wind function runs it may just show it may be from the wind function on the stack as well too i don't remember but now they shouldn't be getting to that yes let's see i don't see the in the meantime i wanted to take like the like just ask people who are watching whether you are like uh is anyone here in the in vegas attending defcon or are you watching from uh all over the world like who do we have here we saw someone from kenya even chimed in earlier oh wow they were watching so we know we do have yeah uh some worldwide watchers interesting to go and see those like analytics afterwards see uh who's watching um but yeah it's um do we have any people so and by the way like if you are um if you are here at defcon uh you know feel free to come by the the ctf area uh we probably won't be able to talk a ton but hopefully yeah like if you come if you come during matches you can watch the matches if you come between matches uh you can you know have a chat with us hopefully uh if we're not panicking uh yeah someone's watching from the ctf floor okay nice and also from europe in the hotel room giving a feet a break yeah that's a wise decision i think i'm ready for my my feet my throat like several parts of me need a break oh yeah yeah i mean we've been talking here for like okay so there's this is interesting these these uh there's ascii values are being converted to integers on on this so we we're looking at debugger dump of the game state right so we could see we do see the the game state there's zero you know it's really obvious to see those those numbers cool um yeah and you can see uh look at that base thing there you have like generating a list of integers from zero to 96 which is interesting is that um yeah we have what you're from estonia brasil people who are saying they they want to go visit defcon in the future yeah i think defcon is like it's a cool event to to visit it's uh i think they're trying to increase the amount of streaming and online presence as well too so you probably will be able to find other streams i think there's even some webcam like 360 degree webcam virtual cameras they're putting up in a couple of the rooms where you can watch what's going on so they're trying to improve like the accessibility i mean i'm certainly with with covid in general most conferences have tried to adapt better for okay we have somebody watching right next to our camera let's hope they don't bump it um but anyway again checking the code here the right thing um i'm trying to get a better feel for what they're doing like again they're generating like a list of numbers uh okay also they need to find like the right offset where they're overflow like this actually looks really good yes this actually does like really good i'm glad we let it go once they finish this yeah yeah if they get the right offsets like let me go look at the other one but we might be closing in yes so that's that's really cool like we're gonna like once they get that thing it's gonna be real quick like we are probably gonna miss there's a big risk we're gonna miss like the moment but so basically if i'm reading this correctly what i'm trying to do is like find the offset in memory like they're overflowing something and then how far into this do they want to put whatever they are placing there which should be the the solved or solvable state so yeah they might definitely onto something just switching the numbers around a little bit maybe it's that they so they switch the zeros to a one which seems to have crashed the program and then checking why this is happening um yeah we have someone from morocco as well cool uh that's uh it's cool to see we have people all over uh i guess the i'm trying to like work out like what what time it is across the world at the moment uh but uh wait but the people are watching from europe it's like in the middle of the night there uh so that's uh dedication uh hope you're enjoying it and trying to see here then they're just quickly looking at the disassembly again uh trying to maybe looking for some specific offset or so um yes they did get some specific offset offset to to put a break point uh there right and then they're also looking at the base um oh yeah to make the break point or maybe not the break point or the um the the offset where to inspect the memory oh yeah oh yeah people saying they're watching from like yeah definitely middle of the night um you know uh awesome Netherlands represented as well so i i'm seeing some interesting stuff there but uh what did you see uh uh from the organizers from the organizers yeah so the i i mean i hate to take bets yeah because i've lost a lot of money at this table so far if uh if uh if uh if this was a gambling arrangement i would i would not be doing so well but i will i i feel also feel like i tend to favor my side of the table yeah and then we've had all these surprise victories from the other ones yeah pop up several times but all that said i do think team taiwan has a little bit of a leap so looking at the new organizers we've got a script uh it has a bunch of it's some a mixture of gdb some phone tools and then as well you know sending inputs and kind of breaking in i didn't get the sense that they they had an overall plan for what to do right but again the definitely the one thing i've learned is that i don't know what i'm doing anyways like it's it is really hard to understand exactly what's going on their heads and so you're not always right um whereas i will say it certainly looks like with that offset right with it we were seeing a a a valid solved sudoku trying to find the right offset to line it up which sounds like from what i understand of it is is the intended solution um so we'll see yep can we can we get some some confirmation is the the solution if it's just misaligning the correct board the certain number of bytes will that trigger it essentially any correct board at the right offset so just put the right amount of padding bites in and then it will overwrite it the right say again then you mark it as salt yeah oh just send anything and it will just mark it as salt right okay so what our producer there said was that you first you send a solvable state you override the the thing the state with the solvable one and then you just send something to like trigger the recheck and and like have it be solved and then you get to win uh there and we can see here they are like working out in a text editor yeah it still looks like they're trying to solve the state as it exists not overwrite the the state with their solve like so what i saw but i wonder i'm a little afraid they got the overwrite but if their exploit didn't try to like send another round for validation it like overwrote it but then never oh oh wow that would be uh that would be terrible um so it is possible that they've essentially had the right solution no that's just didn't re-trigger it to be able to actually get to the win function um so we will we will see uh we're only a little bit late especially actually we technically we have two more minutes before the original length of this all right and we're letting we're on long just because the the the last one of the day um and we prefer they have a chance to do it if they can but there will our voices will give out and there will be some point which we say sorry we're cutting you off uh but none of us want that to happen so so we'll see yeah we're taking uh we're taking a bet here and uh hoping this will work um we're also about to lose power on our our chats yes Tunisia excellent welcome yeah i've been to Tunisia for a CTF competition have you really i actually i think i get invited to speak there one time at a conference and yeah there we go um so let's see if that actually powers it i don't know what this is plugged into at this point yeah yeah we have our power on our one of our screens here all right good and that we also have like a graphical glitch on the mouse and screen but it's just it's just blocking the ads so i'm okay with it that sounds great that's okay i wish i wish all of my graphics glitches just blocked out ads as i surfed oh yeah so uh as an employee of a big ad tech company i would have to a a large tech company whose revenue might depend heavily on ad yeah uh you know yeah are you allowed to ruin ad blockers no i'm not gonna make you talk about work i'm not gonna make you talk about work all right all right i'm not gonna do that all right so here we go so i this still feels like we're trying to solve it i don't i don't see i don't see the the the exploit like i don't see them actually like exploiting it well i mean this might still work if their idea is to just like overwrite a couple of values and then make it soluble and then put into solution like that's not a fast solution they're gonna inherently have to overwrite the whole thing though right because they're just linearly well i mean it might be that they think that they can only overwrite like the beginning of it or something like this you're still gonna have a null at the end so no no no necessarily because it's gonna convert in right yeah no that's okay that's fair i mean it could it could work like it's not the not not the intended play but uh could probably work so yeah unless there's a question mark at the very end of the puzzle if there's an unallocated one at the very end that would have to be well we'll see yeah we'll see all right a few more a few few more bits thanks everybody for hanging with us this has been like just utterly exhausting and super exciting um just as a quick recap you know from our from our earlier games we had a nail biter of a finish at the very beginning from uh shellfish versus ptb wtl oh yeah like they were i think within a few key strokes of each other like you can't get a tighter match like i know we were looking at one screen as they were about to declare a winner yeah and then the other one popped it just was so quick yeah so that was fantastic make sure you go back and check the uh the replay on that one uh we're going to end the stream today when we're we're done with this particular challenge um oops sorry about that hit the mic run uh we're going to end the stream today uh once we're we're done with this challenge and we wrap it up but uh we'll we'll be back tomorrow a long day tomorrow so the stream is going to run for eight hours straight uh actually it's nine at least because we've got eight no no that's right eight total hours eight more than one hour now we'll see we may end up needing a break well we're going to try to get breaks by taking trading off you're going to see some guest commentators we're going to have some other people come in and fill out different roles should we uh i think it was already written on twitter but the the idea is to have we have a live overflow uh hopefully joining in and uh kamosa brandon falc so two popular people in like the security uh like content creation the space yeah yeah i'm i'm i'm excited looking forward to uh to chatting with both of them uh and i'm also looking forward to have a break and as we each get to yes maybe maybe alternates uh every other round so one of us will we'll get to your rest and also make sure we give our producer glenn uh a break as well so yeah we'll be cycling through that um we've got a variety of different challenges um maybe for any of the teams that happen to be listening we want to talk about like the overall types of challenges that we have no no no super spoilers but like i will say i think we're pretty representative right right there is a uh heavy pwn focus a little bit of re yes there's um certainly a little bit like shell coding or constrained exploitation um solution having a quick look here again yeah trying to get caught back up no oh man so they have a solution there right they're sold screen this is i mean it's they have a solved solution but yeah there is a hashtag free jordan glenn and call it uh yes uh so yeah just to clarify that's my uh nickname or like uh then so yeah in in in the pack harder thank you yes i mean if thank you uh negasora this random person who showed up in our chat certainly not the author of this particular challenge that is uh stymied our opponents for so long so right yeah but but uh you're not wrong it's if they just would hack harder we could we could take a break and we could yeah we could get some dinner so let's let us because it is i would say we are gonna have to hit sudden death pretty soon because we're looking at another several minutes of sudden death as well so um we'll uh we'll take a look maybe i'll take one more pass at new organizers we'll talk about having a uh you know giving up a sudden death we'll kind of consider what we want to go um yeah i'll uh i'll go ahead and give a bit of a oh just use a data glove that's a what is a data glove that's a reference i don't get uh isn't that the uh the the game controller thing the no that's a power glove that's a power glove yeah yeah but child of the 80s of course like yeah yeah yeah no no i mean yes that's a thing from before i was born sam no trolling no trolling please stay no no no no no no we will we will find you you're in the room we remember this no we don't we don't talk like that that's uh yeah don't use it yeah next you're gonna be asking for for network forensics or something something crazy yeah we might call the goons yeah i haven't taken you out of the room yeah all right i'll go check out new organizers and we'll be back i'll give an update on the um defcon ctf scoreboard uh in the meantime um so we uh have like a slightly larger spread now uh with uh like spanning from just below 14 000 up to uh just above 18 000 points between the 16th and the first uh place with uh katsubin in the first place mmm in second place and perfect root in third place and if i'm not misremembering i think uh last year we did have like a top fight between katsubin and uh ppp as well they have kind of pulled ahead those two teams and created like a slight gap down to third place so uh i do think this uh like mirrors uh some of what we saw last year uh went with uh regards to like the standings but this is only the first day of the defcon ctf a lot of stuff can happen uh this is like far from over uh so we're gonna be keeping uh an eye on that um throughout the weekend and give you updates it's uh yeah i mean if you're here in the defcon ctf room you can see this really funny visualization the the nautilus institutes have put up it's like some 3d animation of like a bunch of weird uh machines uh one for each team like spitting random objects at the other teams like showing i guess it's showing like who is attacking whom possibly there's like seashells and stuff uh flying around uh you know i guess there's some joke about there about like shells and seashells and you know that um but again taking a look at um the um screen of balsam here i'm i'm still not entirely sure with they have this like partial solution or like a solution they have a split up the solution into two parts and then um trying to send some like they're sending some data and then they're sending the other solution still not exactly sure what's going on uh so we have an explicit data handler crazy keyboards yeah i would have to look that up uh afterwards uh but uh yeah i still think uh i'm still thinking power gloves would you know really help out in this situation uh maybe you could have them like you know different like rock gadgets and stuff mapped to the different buttons and stuff that's uh you know the way to go anyway you can see uh them like in the debugger here inspecting the memory there a little bit so i'm looking at the global variables you can see you have the standard in the standard object and then further down they have these objects and you can see you can the byte values there uh in the like the middle of the of the printed out block uh with the different digits of the senuka solution um yeah it like it feels like they are very close to to getting it but still like a bit unsure exactly what's going on um so um yeah we have uh jordan coming back here now so uh we'll get an update on on where we are we are going to give them a sudden death hints we're going to give them a hint that is just because here's here's the the thing that we have missed talking about it so far i was looking back over with the the example solution and the the the nuance here is that there's a length check that that we've been that has been kind of showing up a little bit now length check basically um prevents you from even if you overwrite it with a fully solved board from actually solving it on that throw so you overwrite the state of the board all but the last one right and the last one you leave empty and then you can just solve it by overwriting the correct last answer i see so it's a little bit along the lines what we've been talking about but it seems that they've done like a weaker variant of that where uh they didn't have like as good of a solution there was a question here about uh is there anywhere to explain the ctf format there's an ad going on as well as these one-on-ones yes so kind of like the main of the main ctf the defcon ctf is the uh traditional defcon attack defense uh that you know we all know and love uh although you know there have been like variants and twists to it over the years um then within this competition this live ctf is like a sub event where it's running parallel to the attack defense aspect of this so each team sends uh one player for each match and then we play this knockout tournament and in the end this will generate the ranking from the knockout tournament which is then fed back in and will uh affect the scores of the main ctf uh event so uh this will be valuable and might definitely affect the final standings of the defcon ctf i'm not completely aware of like what's like the waiting factor is like how the scoring model works for for the ctf um and so so i couldn't tell you like exactly how valuable it is to win the tournament versus getting second place but we've been trying to find a balance where uh the teams can definitely i'll tell you in a second but yes uh first i'm gonna deliver the hints and i'll be right back and we'll see if we can we can bring this one home right can you just read me the hints here first here we go first attempt overwrite almost all second attempt solves due to length check yes sounds great and we will see if this does it yeah this is almost like a straight up solution like this could almost be like a write-up for the you have to understand what the program does and that that's the state that they've they've got yeah but they have that yeah so now we're gonna give them like the final hopefully final hint here that we'll just like hopefully blow this case wide open and you know they have them solve it from there did we get any reaction from the players on that i was too busy coming back i should have i should have watched okay okay i see yeah we got we we got some forehead touching okay says says our producer yes um so we'll see will it i i think this was this one i think is on us yeah i think this was a little too subtle for what we're kind of aiming for and again being in a high pressure thing it's just not to say that these are not excellent explorers it is just very hard and there's this was a little bit of a little bit nuance a little subtle nuance oh yeah i think because of the the way that the length check happens in the binary you can't actually fully overwrite and expect to do it it will already know that it's an invalid attempt and so it's not solvable but then you have overwritten the the correct state such that you can then solve it because you moved it from an insolvable state to a solvable state right and somebody else might have got it you don't know but it's definitely this is definitely a little harder it's certainly it's it's more subtle than some of our previous challenges yes um but but we'll see what we'll do our best to keep keep dialing in the difficulty and see how it goes so let's keep an eye out for the the winner we may see because we're not looking at the new organizers we might get that off screen or we might see team taiwan pull it off here in the main window so i'm i keep rooting for for whoever we have the capture car working on just by very nature being on my side of the table yeah yeah um but but you know like uh being a uh swiss not citizen but swiss resident i'm you know kind of like maybe rooting for organizers a little bit uh so are they uh are they a swiss team so they are a swiss british-american team i think okay oh there we go all right so there you know have the winner congratulations awesome awesome oh my god down to the end down to the end it happened again it's happened again so i'm gonna go you can go congratulate them go talk to the team i'm gonna go ahead and see see y'all out uh just a quick summary i think we've already kind of covered what's what's happening the rest of the day we're gonna go recuperate we're gonna fix our hdmi cable so we'll come back with uh tomorrow we'll hopefully have uh the ability to see both screens more effectively uh instead of having the flickering that we had this time and uh we look forward to seeing eight challenges we're gonna have eight more rounds we're gonna finish up in the morning four more rounds of round one and then in the afternoon we're gonna move straight into round two and we're gonna go all the way from eight teams all the way down to four by the end of tomorrow so come back and uh see that long day look forward to seeing you then take care and have a good one


When you make fun of somebody online, you don't know who the person behind the keyboard is. That one's for the truth. Make fun of me and my friends online, you better watch out. I have low self-confidence, and I compensate with weapons. Don't be mean to me. I know your IP address. My dad works in Microsoft Head, buddy. Right here.  Ah, my eye, you're the guy. If you're in front of line for me for the two-for-one deal at Olive Garden, you better get out of my way.