In this video, I want to share a really powerful analogy that one of my mentors, a doctor, actually shared with me on what acupuncture is really doing. Hey, it's Alex Hine, author of the health book Master of the Day. And I've included down there below the first link is for a free case study. It's of this guy named Li Qingyun, who supposedly lived to be older than 100 years old, but he shared these four incredible practices he did daily in an interview with Time Magazine. So I included those in a little download, the first link right below this video. So what my mentor said to me was that acupuncture is a lot like a traffic inductor in New York City, where there's all these cars going all these different places, they're honking their horns, they're in a rush, they're trying to get from here to there, but the traffic inductor is saying, hey, let's actually generate some order here.  So really, what he was talking about was that there are all these physiological processes going in your body. And if you think about having a headache, having maybe dysmenorrhea, maybe being constipated, and then maybe having other digestive problems, there's a lot going on. There are a lot of different physiological or pathological processes all at the same time. And the body is like the New York City traffic jam. There is stuff going up, stuff going down, stuff stuck in the middle. And then when you do acupuncture, what it's doing is it's giving your body a clear signal and a clear direction. So I view acupuncture as a method of redirecting three things in your body. It's redirecting, number one, your body's attention. Number two, it's redirecting your body's circulation. So the healing resources to actually restore physiology to that part of your body that's having problems. And then also hormones. So let's say you're, for example, someone has what we call spleen cheat efficiency, and you're having a lot of loose stools and bloating and low appetite, and you look as pale as I do and acupuncture for that patient. What it would do is it's helping your body to draw circulation back to what we consider the issues, which would be the spleen pancreas, the small intestine, and obviously the intestines. So you're actually drawing the body's attention back to say, you know, it's knocking on the door, hey, hello, anybody there? This is what we have to work on. It's bringing the attention back, it's bringing the circulation back. And usually where there's circulation and things are unblocked, there is a restoration of the physiological flow. So acupuncture works to unblock that traffic jam. And then to give your body a really, really clear impulse that, hey, this is what we have to do. This is where we should be putting our time and energy. You know, for many people and many illnesses, the reason for those issues and the reason for those problems is a lack of circulation. And so there's a famous Chinese saying that where there is no flow, there's pain. And where there's flow or opening, there's no pain. So the goal for many things is to restore physiological function by restoring circulation and your body's attention to that part of your body. So acupuncture, traffic conductor, airline, ATC person, whatever it's called, that's a useful metaphor to think about it. And that's also really important to know, because with sometimes really serious illness, or a person who's seriously run down, acupuncture may not be the most effective thing. It may be one tool, but Chinese formulas may be a lot more important because you need to add resources that then can be redirected. I hope that helps. I thought it was a really useful metaphor for my mentor, and it was something that really helped me. Again, before you go, I've included that free link below for Li Qingyun's four daily rituals to live to be over 100. It's a little case study or PDF I put together. First link in the description. Then before you go, I've included some similar videos on this exact topic right here.


The students and faculty of Pikeville Elementary are mourning the loss of a second grade student. The seven-year-old had fallen ill and was taken to UK for treatment. Superintendent David Trimble shares his thoughts about the tragedy. We learned of it over the weekend and we knew the impact that this would have on the kids who were going to be in the building as they walked in today. And Shung Man is an important part of our family. He walked through our doors every day and so we knew there was going to be an impact on kids when they came through the door we spent a significant amount of time this weekend just trying to make sure when our our students entered back into the building on Monday today that they would that we would be able to work through that with them. We knew there would be a range of emotions. I'll be honest with you the impact that Andrew has had on the kids of this building was something I don't I don't know that I found a way to be prepared for we did some activities this morning to just help our kids reflect on their relationships with Andrew and it's amazing to me just what kind of an impact a seven-year-old kid can have on this world. Everyone who knew Andrew had something positive to remember him by while his family friends and teachers are processing this differently he will surely be missed by those who were close to him. Every person grieves different every person works through something differently and and our our faculty and staff equally hurt because this is a member of their family but they have been very tough for our kids and they have assisted them in in processing in the ways that they they process and it while it looks different I think it was important for us to to make sure we had activities that allowed them to go in those different paths to to work through this. I think that that our consistent promise is always that we will we will love our kids and and help them as they go through this process. This isn't a one-day process. It will be it will impact each of our kids differently but we're going to help them through that and our families are fantastic and and we've spoken with with several of them and and these classmates and they have been fantastic to help kids through that too and we just want our community to know that we're here to support them we're here to support and love their kids and and we have an amazing staff faculty and staff who absolutely loves our kids and we want to do what we can to be of assistance to them through what is a very difficult time and we absolutely love this family and we appreciate that every single day they trusted us with their child and they they shared him with this building because he made this building a better place. Reporting from Mountaintop News, I'm Nick Collum.


Now we live in a town where as though the manager want to be the rapper everybody want to be the rapper and it's like I don't want to tell you but the rapper can't even rap these days He's corny He's corny Like no no no no no that's the problem and now we got this genre is though You can't even we live in this world where hip-hop is so right now I'm pissed at hip-hop because everything that hip-hop still for everybody to sacrifice.  You was emotional jail. I was man when I found out that girl was with It's different But think about it though I if a month say no, it ain't hard enough. You ain't had the high head of whatever was in it. What oh me Hey, you know me man. He's picking on me. I'm getting bullied That's true.  That's why the rap game. Do you know why? This is the the number one reason to rap game And i'm talking to all the big artists look bring that camera. Look at me.  What you got?  We know why the rap game up number one Y'all got too many. Yes, man around y'all not telling y'all. Yo them drugs. You doing a little too much with the drugs Oh, oh, I got this and not telling them. Yo, that song was corny man.  Y'all hardest music is on the hard drives y'all so And y'all scared y'all scared because guess what you don't even you you're not even a month You don't had a heart as you had when you first came out and you was popping it You didn't care you just put the music out all y'all best is on them hard drives the orange ones not this one the orange ones The good is one when I go in the studio. Listen, I'll be like play the hard drive. This is the hardest Oh, man. I don't y'all scared. I don't know if tiktok. I don't know if it's gonna catch Them days is over the hardest when you when you didn't give a And you was just making the music is right here You ain't got it no more to just do it and then some of y'all scared to get writers I used to write for give use. I'm saying like a lot. I wrote for kissing on whole chill, man I wrote for a lot of people. It's my story.  That's yourself off and try again.


For loops. We all write them, we all love them, and we all have used them to iterate over an array of things. Do you see what I did there? Modern JavaScript has improved for loops to make the process of iterating over things much more convenient. First in line is the for off loop. It iterates over the members of an iterable, like an array. Instead of having to maintain an index variable and checking against the length of an array, we can instead use the off keyword. The loop body will be executed for each member of the array. For a while now, JavaScript and web APIs have been making extensive use of promises. To handle any sort of asynchronous iteration more elegantly, JavaScript has also gotten support for the for await loop. It works the same as our previous for off loop, but if the value is a promise, the loop will await the promise. This means it will block until the promise resolves and will be using the value the promise resolves to for the loop's body. But wait, there's even more. You can make any of your own types iterable or use generators which are functions that make creating iterable types extremely easy. If you want to know more, take a look at Jake's article in the description. Enjoy looping and iterating. Yeah. What? Really? Okay. I'm being told you want to watch more Supercharge. Well, there's two buttons for your convenience.


Well, it's a brave little Jason ever Jaxby's case race calm 2020 tops chrome baseball blaster 10 box break Two round teams each number two just sold out and again 15 total spots that we get two random teams the MLB Just remember no veteran commons will ship. This has four cards per pack There's seven packs plus one bonus pack, which is a sepia refractor parallel. So good luck guys Let's roll the dice and we got ourselves a four and a five for nine times one two three four five six seven eight nine Mike down to Carlos one two three four five six seven eight and nine nine times Dodgers down to the Marlins I might get the Dodgers Jacob of the Brewers Aaron with the Padres steaming of the Rangers Nichols with the Indians Mike with the Angels Aaron me of the Red Sox Carlos with the Braves chat with the blue Jesus John the Pirates Ricky with the Orioles John the Royals Nicholas with the Cubs Johnny of the ace Aaron with the D-backs Eric with the Tigers Phillies Aaron with the White Sox Ricky with the Rockies chat with the Mets John with the twins TJ Yeah, the race Stephen with the Yankees John the Mariners Jacob with the Cardinals You have Luke with the Astros TJ have the Reds John with the Giants Luke with the Nationals and Carlos with the Marlins Again, if anybody wants to trade let's do it. You have the trade window opening. All right in the meantime to you guys I have three stacks here. I just don't want to move them all over here So the stacks are the farthest left. We'll call it left You got middle and then right So let's quickly just do this here One two for the left three four for the middle five six for the right side and it's a one So we're gonna go with the left side far left That would be right over here. All right, Jake. I'm just gonna close the trade window man Damn Ricky get here right when I close the trade window because no one's wanted to trade I don't know if anybody's gonna trade the Rockies or Orioles for the Dodgers blue jays or Astros So it worked last time Ricky you wanted the better teams I guess per se and you ended up getting some nice hits with the teams you had so See if it works out this way. I'll just add one of those little strips through the first five Boxes and then we'll go to the next five. Louise Robert 1985 Shorver Kaston your down Verlander big derrovas Hank Aaron Rebelle Garcia refractor Ronald Cooner Jr. Rojas Riley Cal Lewis Johnny Bench AJ puck 85th anniversary Jake Rogers refractor burning Crawford Mike McGuire I got a purple Oscar Mercado number to $2.99 Dan Vogelba Aquino 85th anniversary or 35th anniversary. Sorry should be Nick Solak auto for Texas Steven with that one Reno and Karen Dica Brock Burke Nigga Lopez Dom Nunez They got Ricky called it. I'll get an auto again. It's cool. All right. I'll go to the CPUs guys. Good luck. All right, it's a Roka Cabrera another Dylan. This is our third Dylan cease see you Kyle seager Eric Cosmere Logan Allen rookie Josh Hader max Kepler Danny Jansen for his solar Trevor story Ian Desmond the Gino Suarez our pool holes, Luis rise mookie bets Gokuchi more John Simmons and Bryce Harper. I can't find my red one. I don't know. It's a all right. Next one Gully Mays Rolando our sea of prism Verlenda refractor Bubba's chef blue jays your Rainer refractor Part of Kebom and Nolan are not oh, so they'll rookie Scherzer John Lester and Eloy Hemen is then those are big screen TV back to our next box Eloy Hemen is Rios refractor This is the Zardo on Soto Yeah, no a synagogue Got a green coming up Brian Anderson And course we receive you or Queenie Mingle us and Eddie was our I love when he's introducing them And you know that's Jimmy two times He's a I'll move away the paper to get the papers I mean Jackson looks so young. All right, next one. Can you know Eddie Rosario? Reese Hoskins Jake Rogers refractor Eloy Hemen is Bench You know the indoor sepia Alzoa sepia Ronald Pina junior and with no more Mazzara Mingo Lava Bryce Harper Nice Luis Robert Jeff McNeil that gallon learns McCain and conglomerate People on though Anderson Jansen black man and pose out to be I don't know Are these are these on normal to come out of these blasters necklace? Are you guaranteed any of these blasters? I don't think I've seen any yet. I always check to see what some of them In every box because they look like there will be short prints, but they're not always look at the coat in the back All right, well there you go guys Got a couple nice ones here got a couple more autographs and then all these Cpo's rookies refractors all that stuff Will be top-loaded as well guys Appreciate this is number two number three is coming up sooner a little bit and then number four I'm sure we'll sell out as well. Appreciate you guys Jatsby's case breaks calm


How's it going everybody? My name is John Hammond. We're still looking at some of the LASA CTF challenges for this capture-to-flag competition Currently the challenge I'm on is postman and the prompt here is cow made a super secure website only accessible by the Google Ultron browser figure out how to log into his site. Well, that should be pretty easy It sounds like it's just a simple user agent fix and it turns out it is looks like okay Air authenticated browser muzzle Firefox Bob. Okay. That's clearly our user agent variable only users of the Google Ultron Must access this page or may access this page. Okay easy then we can we can simply write something to do that, right? We can we can get some code to do that Python change user agent I just want to be able to quickly grab the syntax for that because I know I'm gonna be using URL of requests and Okay, it looks like some guy just whipped out some code for it. So let's try and You can see it right there. I'll put that together in a script for us I'll fire up sublime text Troll this in actually I'll remove all this so I can just save this and Cyber team competitions last the CTF postman. Let's call this. I know we can get the flag with this So let's call this get flagged out pie. I'll give a little shebang line and We're want it gonna import URL lib to and here's a code that we need our address is gonna equal If I run this it's just that simple URL over there It looks like we can just bring that in for our address Variable it looks like we're just supplying specific headers So if I run this now, let's actually see what that for response is Sponsor read Okay unauthorized browser Mozilla the same thing we had we had seen before we needed Google Ultron To be our user agent, right? So let's try Google Ultron run this now Okay, we get special off header must be set to lots of my name Okay, we have to set another header, right? Well, we can do that with the same syntax here It looks like we're just adding tuples to this variable. So I guess we need Special off must be set to the guy's name Oh, it tells us here guys name is Kyle so we can just pass in Kyle there now if we run this Oh, the site must be accessed from Kyle as a cool guy that or okay fine. We can do that too We know there's a special HTTP header, which is a referer And we can set that to Kyle's a cool guy.org run this now Successfully authenticated your flag is Lasses CTF headers are cool sweet. Let's actually just split this up so we can get Um Get the very end of it and we'll remove that Header tag So now we get our flag sweet in our terminal. Let's make this executable Get flagged up high There's our flag. Let's just throw that and submit it in and Cool 50 more points job done. Thanks for thanks for watching guys throwing together a little bit of a Python script just to change a web browser HTTP Request headers good stuff and Python really easy. Just grab the syntax for it We knew we'd be using the URL of module if you haven't seen that before I'd recommend you do a little bit of research on it to see what you can poke around with and play with I think I might have a few videos on it But right now what we're doing is adding headers and calling a couple of requests. So sweet. Thanks for watching guys See you in a tutorial


I'm really glad that you're all here and that today I can introduce Johanna Rutkowska to you. She will be talking about reasonably trustworthy x86 systems. She's the founder and leader of the Invisible Things Lab and also, and that's also something you all probably use, the Cube OS project. She presented numerous attacks on Intel-based systems and also virtualization systems, but today she will not only speak about the problems of those machines, but will present some solutions to make them more secure. Give it up for Johanna Rutkowska. Let's start with something, with stating something obvious. Personal computers have become really extensions of our brains. I think most of you will probably agree with that. Yet the problem is that they are insecure and untrustworthy, which personally bothers me a lot. And here I want to make a quick digression for the vocabulary I'm going to be using during this presentation. When we say, well, there are three adjectives related to trust and people often confuse them. Trust is something that is trusted, that means, by definition, something can compromise the security of the whole system, which means we don't like things to be trusted. Trusted third party, trusted certification authority, we don't like that. When we say something is because trusted doesn't necessarily mean that it is secure. So what is secure? Secure is something that is resistant to attacks. Once this laptop might be resistant to attacks that I open, email attachment and the email attachment compromises my system, or maybe if I plug USB for the slight changer, I might be hoping that this action will not compromise my whole personal computer. And yet something can be secure but not trustworthy. And a good example of this might be, for example, Intel management engine that I'm going to be talking about more later. So it might be very resistant to attacks. So it might be a backdoor. A backdoor that is very resistant to attacks, yet it is not acting in the interest of the user. So it's not good, whatever good means in your assumed moral reference. So there's been, of course, a lot of work in the last 20 years or maybe more to build solutions that provide security and trustworthiness. And most of this work has focused on the application layer and things like NOPG and PGP First, Tor, all the secure communication protocols and programs. But of course, it is clear that any effort on the application level is just meaningless if we cannot assure, if we cannot trust our operating system. Because the operating system is the trusted part. So if the operating system is compromised, then everything is lost. And there's been some efforts, notably the project I started five years ago, and now there's like more than a dozen of people working on it at CubeSOS that tries to address the problem of operating systems being part of the TCB. So what we try to do is shrink the amount of trusted code to an absolute minimum. There's been also other efforts in this area. But operating systems is not something I'm going to be discussing today. What I'm going to be discussing today is the final layer is the hardware. Because what was operating system to applications, it is hardware to the operating system. Again, most of the efforts so far to create secure and trustworthy operating system, they have always been assuming that the hardware is trusted. That means that usually, that means for most operating systems that a single malicious peripheral on this laptop, like a malicious Wi-Fi module or maybe embedded controller, can compromise again my whole personal computer, my whole digital life. So what to do about it? Before we discuss what to do about it, we should quickly recap all the problems with present personal computer platforms. And specifically, I'm going to be focusing on X86 platform and specifically with Intel X86 platform, which means laptops. So this picture shows how typical modern laptop looks like. You can see that it consists of a processor in the center, and then there is memory, some peripherals, keyboard and monitor. Very simple. It's very simple. It can be very simple because if we look at present processors, present Intel processors, they really integrate everything in the kitchen sink. Ten years ago, we used to have a processor, a north bridge, a south bridge, and perhaps even more discrete elements on the motherboard. Today, all these elements have been, or nearly all these elements have been integrated into one processor package. This is Browdwell, and this long element here is the CPU and GPU, and the other one, it is said to be the PCH. PCH would use the platform controller hub, which is what used to be called a south bridge and north bridge. The line has somehow blurred between these. Of course, there is only one company making these. It's an American company called Intel. It's a completely opaque construction. We have absolutely no ways to examine what's inside. But obviously, the advantage is that it makes construction of computers of laptops very easy now, and lots of vendors can produce little sexy laptops like the one I have here. On this picture, we see now some more elements that are in this processor. When you say processor today, it's no longer CPU. Processor is now CPU, GPU, memory controller hub, PCI Express, root, some south bridge. For example, SATA controller, and so on. As well as something that is called management engine that we discuss in a moment. There are a few more elements here that are important. The most important for us is the SPI flash element. Because what's interesting is that with this whole integration that has happened to the processor and the other peripherals, still the storage for the firmware, so the storage where your bios as well as other firmware is stored is still a discrete element. We will see this element in one of the next slides. So let's now consider first the problem of boot security. Obviously everybody understands that boot security is something so how to start the chain of trust for whatever software is going to be running later is of paramount importance. I think I'm out of range. Connected with boot security is malicious peripherals that I mentioned shortly before. So we will be now thinking, can we assure only good code is started and how the peripherals might interfere here? Again, we will look at this SPI flash, which if we now considering the boot security, we would like to understand what code is loaded on the platform. And if we now think where this code is stored, it seems that the code is stored on the SPI flash and potentially also on some of the discrete elements. Let me state it again that this whole integrated processor package has everything in the kitchen sink except for the flash. So except for the storage of the firmware. Here we have one of the SPI flash chips. This is from my laptop actually. It's a little microcontroller and it typically stores the firmware for these things that are written here. The question is, let's say I have got this laptop from a store. How can I actually verify what firmware is really on this chip? Well, I can perhaps boot it into some minimal Linux and try to ask it. But of course, if there is a malicious something on the motherboard, not necessarily this chip, I will not get reliable answers. Another question, let's say I somehow know that there is something trustworthy on this SPI chip. Can I somehow enforce redoneliness of this program? Well, there have been some efforts to do that, like some project by Peter Stuck who took a soldiering high and connected one of the pins. One of these eight pins is called write protect. And if you ground it, it will be telling the chip, well, to discard any write commands. But again, remember, this chip is still a little microcontroller, well, it's a little computer. So it might ignore whatever you request it to do.  You are merely asking the processor to ignore it. So if you don't trust the chip in the first place, this doesn't provide you a reliable way to enforce redoneliness. Finally, can I upload my own firmware? Can I choose to use whatever BIOS I want? Again, we don't seem to have luck here. And as I mentioned, this is just one of the places on the platform when the state is stored. Embedded controller would be a whole another microcontroller having its own internal flash or if not using another SPH chip to get flash from. A disk would be another microcontroller, read small computer, having its own typically flash for its own firmware. And perhaps the same with the Wi-Fi module. Now, for many years, myself and lots of other people believed that technologies like TPM, trusted execution technology, like UFI Secure Good, I never really liked, but many people did. They believed they could somehow solve the problem of Secure Good. But all these technologies have been shown to fail horribly on this premise. And then we have, so these were problems, just tip of the iceberg of the problems of the Secure Good. The short story is we cannot, today we cannot really assure Secure Good. Maybe before we move on to Intel, for example, Intel TXT, trusted execution technology was introduced by Intel in the hope to put the BIOS outside of the trusted, of the TCP, of the trusted computing base for the platform. So the idea was that if you use TXT, which you can think of as a special instruction of the processor that was the root of trust. So the promise was that when using Intel TXT, you can start the chain of trust without trusting the BIOS, as well as other peripherals like Wi-Fi card, which might be malicious, perhaps. And that was just great. And I really liked the technology. And we have done, with my team, we have done lots of research on TXT. But one of the first attacks that we have presented, and that was back in 2009, was that we could bypass TXT by having a malicious SMM. SMM was loaded by the BIOS. So apparently it turned out that the BIOS could not be really put outside of the TCP so easily, because if it was really malicious, it would provide a malicious SMM, and then the SMM could bypass TXT. So response from Intel was okay, but worry not. We have a technology called STM, Secure Transfer Monitor, that is a little hypervisor to sandbox the SMM, which might be malicious. So they wanted to build a special dedicated, they built it, actually, they built a special technology to sandbox this SMM. And then it turned out this is not so easy, because as usual, David was seeing the details, and it is six years, six years has passed, and we still have not seen any real STM in the wild. Which is just an example of how hopeless this approach in building, in trying to provide secure boot is for the X86 platform. So another problem with X86 that has rise to prominence in the recent years is the Intel management engine. One of these additional, or one of these things that Intel has put into this integrated processor is called management engine. And this management engine is a little microcontroller that is inside your processor. It has its own internal RAM, it has its own internal peripherals, like DMA engine, which has access to the host RAM. And of course, it allows only Intel signed firmware, and it has also its own private ROM inside the processor that nobody can inspect, and nobody knows what it does. And it runs a whole bunch of proprietary programs, and it runs even Intel's own proprietary operating system. And this all is happening all the time when you have some power connected to your processor, even if it's in a sleep mode. It's running all the time here on my computer. It can be doing anything at once. But obviously, when I say something like that, the first thought for security people is that this is an ideal bug-during or root-kicking infrastructure, which is true. However, there is another problem, and it's a zombification, I call it zombification of personal computing that I will discuss in a moment. So I'm just stressing these are two somehow independent problems with this ME. So about 10 or more years ago, I used to be a very active malware researcher, or stealth malware researcher, especially root-kit researcher, and back then when, if I was to imagine an ideal infrastructure for writing root-kits, I couldn't possibly imagine anything better than ME, because ME has access to essentially everything that is important. As I mentioned, it has unconstrained access to DRAM, to the actual CPU, to GPU, it can also talk to your networking card, especially to the Ethernet card, which controller is also in the south bridge in the processor. It can also talk to the SPA flash and asks the SPA flash, it has its own dedicated partition on the SPA flash, which can be used to store whatever ME wants to store there. This is really problematic. And we don't know what it runs. But the other problem that is perhaps less obvious is what I call zombification of the general purpose computing. About a year ago, there was a book published by one of the Intel architects, one of the architects who designed Intel ME. I highly recommend this book. It's about the only somehow official source of information about Intel ME. And what the book has made clear is that the model of computing that Intel envisions in the future is to take the model that we have today, which looks like this. The size of the boxes somehow attempts to present the amount of logic or involvement of each of the layers in processing of the user data. Obviously, we have most of this processing done in the applications. But we also have some involvement from the operating systems and also from the hardware, of course. For example, when we call, when we want to generate a random number, we would usually ask an operating system to, whoops, that's a mouse, actually. So we would usually ask the operating system to return us the random number because the operating system can generate it using timings and interrupts, whatever. But again, most of the logic, most of the code is in the applications layer. And this is good because thanks to general, thanks to computing being general purpose computing, everybody, every one of us can write applications. We can argue what's the best way to implement some crypto and some people can write it one way, some other people can write it another way, and that's good. Now, this is the model that Intel wants to go to. It essentially wants to eliminate all the logic that touches data from apps and our operating system event and move it to Intel ME. Because remember, Intel ME, it's also an operating system. It's a separate operating system. Only that this is an operating system that nobody knows how it works. It's an operating system that nobody has any possibility to look at the source code or even reverse engineer because even we cannot really analyze the binaries. It's the operating system that is fully controlled by Intel. Not to mention that any functionality it offers is also fully controlled by Intel. But anybody being able to verify what they do, that might not even be malicious. They might not even be doing malicious things. Perhaps they are just implementing something wrong, bugs, security bugs, right? But then, of course, Intel believes that whatever Intel writes must be secure. For some reason, they must have missed a number of papers that my team and others have published in the last, in the recent 10 years. So, those questions are, can we disable Intel ME? Or can we control what code runs there? Or can we see at least what code is there? And as far as I'm aware, the answer is unfortunately not. As I mentioned, I have this cool laptop that runs CubeSOS, of course, but still, it not only runs CubeSOS, it also runs side-by-side Intel ME, Intel ME proprietary operating system. And I cannot do anything, I can't do anything about it. I used to, about also six or seven years ago, my team has done some work on Intel IMT. I believe this was the first and probably the only work where we managed to actually inject code into ME. That was back in times when Intel ME was not in the processor, it was in the Nordbridge. It was in the Q35 or Q45 chipset, if I remember correctly. So we actually showed, we demonstrated how we can inject a root kit into ME. Of course, Intel then patch it, and then now they continue to think that whatever they write will be always secure. The problem is, I used to, for a number of years after that presentation, I used to believe that we could use VTD, an Intel IOMMU technology, with TXT perhaps, to effectively sandbox ME. Because some of the specifications I saw suggested that VTD should be able to, should be able to sandbox ME accesses to host memory. And because we use VTD heavily on cubes, thanks to Zen using it, I was pretty much not that worried about ME. Unfortunately, it turned out that ME can just bypass VTD, and this is a feature of this ME, which brings us to this rather set conclusion that perhaps if we look at Intel X86 platform, then the war is lost here. It might be lost even if we didn't have ME. Even if we somehow managed to convince Intel to get rid of the ME, or at least to offer OEMs, laptop vendors, an option to disable it by fusing something. But the problem with Secure Boot that I mentioned earlier, and that I analyzed in more detail in a paper I released two months ago, is that it really is hopeless because the complexity of the architecture, where we have, well, ring three, ring zero, okay. Then we have SMM, then we have virtualization, then we have STM to sandbox SMM, and the interactions between these, this all doesn't look really like it could be solved effectively, which of course is quite bothers me a lot, at least purely egoistic reasons, because I spent the last five years of my life on this cubes project, and of course, with such a state of things that makes my whole cubes project somehow meaningless. But sometimes if the situation is so bad, perhaps the only way to solve the problem is to change the rules of the game, because you cannot really win under the old rules. So that's why I wanted to share this approach with you today that starts with recognizing that the problem, most of the problems here is related to the persistent state that is start pretty much everywhere on your platform, which usually keeps the firmware, but not only. So let's imagine that we had, that we could do a clean separation of state from hardware. This is the current feature, this is your laptop, and the reddish boxes are the state, the persistent state. That means these are places where malware can persist. So you reinstall operating system, but the malware still can reinfect. These are also places where malware can store secrets once it's still them from you. So imagine I can have malware that might only be stealing my disk encryption key, and it can store it somewhere on the disk, or maybe on SPI flash, or maybe in the Wi-Fi module firmware, or maybe in the embedded controller firmware, somewhere, somewhere there on those rectangles. Now, if the malware does it, it's a pretty fatal situation, because if my laptop gets stolen or seized, perhaps, then the adversary who gets a key to the malware can just encrypt the blobs, and the blobs will reveal my key, my disk encryption key, and then the game is over. And also another problem with the state is that it might be revealing many of the user and personally identifiable information, however you read this PAI shortcut. So these are, for example, MAC addresses, or maybe processor serial number, or maybe ME serial number, whatever, or maybe the list of SSID networks that ME has seen recently. How do you know it's not being stored somewhere on your SPI flash?  I can read the contents of the SPI flash, but all of this will be encrypted. So we recognize that the state might be problematic. And now imagine a picture that we have the laptop, which has no persistent state storage, which is this blue rectangle. Let's call it a stateless laptop. And then we have another element that we're going to call trusted stick for lack of a more sexy name for that. That's going to be keeping all the firmware or the platform configuration, all the system partitions, like boot and root, and all the user partitions. Now we see that, and of course, the firmware and system partitions will be exposed in a read-only manner. So even if malware, perhaps a traditional malware that got into my system through malicious, through a malicious attachment, even if it found a weakness in the BIOS or maybe in the chipset, allowing it to reflash, normally allowing it to reflash the BIOS, which we have seen plenty of such attacks in the recent several years. Now it would not be able to succeed because the trusted stick, which is going to be a simple FPGI implemented device, will just be exposing a read-only storage. So we see that firmware infections can be prevented this way. Also, there is no places to store stolen secrets. Again, the same malware running in the ME still can steal my disk encryption key or my PGP private key. But it has no place to store it so that if somebody now takes my laptop, I will not be able to find it there. You might say, maybe it will be able to store it on the stick. But then again, the stick, the firmware and system partitions are read-only, and the user partitions are encrypted, encrypted by the stick. So even if ME can send something to be stored there, nobody besides the user can really get hands on this blob. Also, we get a reliable way to verify what firmware we use or ability to choose what firmware we want to use. Because we can just take the stick, plug into our trustworthy computer, some Lenovo X60 from 15 years ago that we have running core boot and we just analyze all the elements, whatever. So we finally have a way to upload firmware in a reliable way. We can, thanks to the actual laptop having no state, we can have something like Tails finally doing what it advertises. I can boot Tails or something like that. I can use it. I can shut it down. And there's no more traces of my activity there. I can give my laptop to somebody other, or I can boot some other environment, perhaps some, I don't know, Windows to play games or whatever. So what would it take to have such a stateless laptop? This is the simplest version, which shows that the only modification that has been made here was to take the SBA flash chip and essentially put it outside the laptop on a trusted stick and just route the wiring, just four wires to the trusted stick. And that's pretty much it. That's the simplest version. Oh, and I also got rid of the disk. And also, I had to ensure that whatever discreet devices, which are in that case embedded controller and Wi-Fi module, they do not have flash memory but use something like OTP memory. We can further get rid of the Wi-Fi and use an external USB connected one if that is not possible. And for the embedded controller, that should be possible much more easier because embedded controller is always something that the OEM chooses. So we can just talk to whatever OEM who would like to implement the status laptop and ask the OEM to use an embedded controller with essentially ROM instead of flash. So that's the simplest version, which is really simple. This is a more complex version where we also fit something that I call here SPI multiplexer, which allows to share the firmware, not just to the processor, but also to the embedded controller and perhaps also with the disk. Because maybe we actually would like to have internal disk. Because internal disk will always be faster and will always be bigger than whatever disk we will put on our trusted stick. You might object that, come on, disk is actually not a stateless thing, right? Because disk is made especially to store state persistently. But it's a special disk that I will mention in just a few minutes. It's a special disk running trusted firmware and doing read-only and encryption for everything. And now for the trusted stick, as I mentioned, that the trusted stick is envisioned to have read-only and encrypted partitions. And the read-only partitions are for firmware and the system code. So the first block is something that we would like to export over SPI, typically. And the system partition is something that we make visible to the operating system using something like pretending being a USB mass storage or actually implementing a USB mass storage protocol, or maybe SD protocol. And the encrypted partition, again, the important thing here is that the encryption should be implemented by the stick itself. So we have some key here. The question is how this key should be, what input should be taken to derive this key from. It could be something that is persistent to the stick. It could be combined with a pass phrase that the user enters using the traditional keyboard, plus maybe a secret from the TPM. And when I say TPM, I think about the firmware TPM inside the processor that is using storage provided by encrypted user partition. Actually, encrypted firmware partition. Yeah, the optional internal disk that they just mentioned, it should essentially do the same as the stick. And because it will be running trusted firmware, that it will be fetching from the trusted stick. Itself, the disk will not have any flash memory. So because we will trust the hardware of the disk and because we will trust the firmware, we will trust the firmware to provide read-only and encrypted partitions, just like those ones I mentioned on the stick, which is nice because it reveals the stick from acting as a mass storage device, which has practical consequences, which are nice. So that's a picture with the internal trusted disk, which you see just here. As you can see, it takes also the firmware from the trusted stick. And there is even an open source project, open SSD. And it looks like people have already built an open hardware, open firmware SSD, very performant disk. So this is not set to science fiction, even for this SSD. OK, so that looks all very nice, but there is one problem. Even though malware might not have any place on the laptop to leak the secrets, it still might try to do it over networking. And let's differentiate now between classic malware and sophisticated malware. Classic malware is something you get over with an attachment or some drive-by attack, which we'll discuss in a moment. Now let's focus on sophisticated malware. So a hypothetical rootkit in ME. Before we move on, for obvious reasons, such a sophisticated malware would not be interested in getting caught easily. So it would not be establishing a TCP connection to NSA.gov server or whatever, right?  Having that in mind, let's consider a few scenarios. Scenario number zero is an ERCAP system. Even though it might be an ERCAP system, still remember there is ME running there. If the computer is not inside a Faraday cage, there is still plenty of other networks or devices around it, which means that ME can theoretically use your Wi-Fi card or even speaker to establish a covered channel with, say, your phone that might be just nearby. So in order to make such a system truly ERCAP, knowing that we cannot get rid of the ME, we really need to have Q-switches for any transmitting devices, including the speakers. And apparently, even that might not be enough, because some people showed covered channels that used things like, say, power fluctuations or temperature fluctuations. But let's leave that exotic examples aside. A more interesting scenario is a closed network of trusted nodes. In that scenario, we assume that all these people are trusted. Again, by definition, that means any of these people can compromise the security of anybody else. We really don't like trusted things, but let's start with something. Now, even though each of these trusted peers, which run stateless laptop, even each of these have this malicious ME in itself, because we're going to fit a small proxy. So a modification that we should additionally do, that I have not shown you before, is that rather than connecting your Wi-Fi module directly to the processor, which is not good, because it gives full authority of the processor over this Wi-Fi module. Instead, we would like to connect it through some proxy that would be doing some kind of tunneling, something like VPN or maybe terrifying, and a traffic that is generated there. So even though ME might be willing to be sending some traffic, maybe not explicit traffic, maybe will be piggybacking on some user-generated traffic by only modifying, I don't know, TCP initial sequence numbers or something, it still all will be happening inside the tunnel. Again, some people might be saying, yeah, but still, ME might be modulating the timings of the generated packets and this way try to convey some information using timing. Well, we can't really do much about that, but on the other hand, it would be extremely difficult for ME to do that implementation-wise. Finally, a scenario where we want to connect with anybody, not just with a trusted computer. So say, with some website on the internet that might or might not be trusted. Again, by having this proxy, which, by the way, might be implemented inside this embedded controller, that we know, if you remember, it runs the trusted firmware because it fetches firmware from our trusted stick. So the proxy, again, is tunneling any potential leakage from ME, which means that a nice malicious ISP or any part of the infrastructure here still cannot really retrieve the secrets that ME tries to leak. But of course, at some point, we need to terminate this tunnel. It might be the VPN server or it might be a TorExit node or maybe the server itself, if it's, say, maybe an Onion server, in which case anybody here can still presumably get the secrets from ME in this cloud here, which, unfortunately, we can do nothing about, except for hoping that at least if we used, perhaps, Tor for this first part of the equation, then at least a malicious administrator of, say, the server would not be able to correlate whose description, whose disk decryption key it really is. Although this is very tricky, that would only work if this computer was a special purpose computer. If you used something like cubes here and if you wanted to have different partitions, one for your personal and only one of these partitions would be special secret partitions, that wouldn't work. Because ME still would be able to gather your identification information from whatever partitions you have. Because again, it has unconstrained access to all the host memory. But still, this, using this proxy, pushes adversary, hypothetical adversary in the ME, into extreme difficulty of needing to piggyback on some higher-level protocols, establishing exotic cover channels, comparing to what they can do today. When can they simply steal the key and store it on SPA flash partition, or maybe on your disk? This is like orders of magnitude more difficult for them to do. We mentioned the sophisticated malware, and I mentioned that the classic malware is a different story. The classic malware doesn't need to be shy against leaking something through whatever means you can think of, perhaps by sending email to somebody. But obviously, to address the classic malware problem, we can address it quite reasonably well on the operating system level. For example, using compartmentalization. But here comes the problem, is that a malicious bios. Let me get back a little bit. Because so far, we have been assuming that we don't really need to trust the bios. Because having this status laptop and a trusted stick, even if the bios was malicious, it still, again, would not be able to change anything in its own firm partition, would not be able to store stolen secrets anywhere. So it's convenient to think that the bios might not be trusted. But then again, a compromised bios might instead be providing privileged escalation backdoors for classic malware that executes on your compartmentalized operating system, such as to do VMScape. Such things are trivial to implement. And we don't want classic malware, which means we want to ensure that the bios does not provide such backdoors. And to make it short, we need open-source bios, something like Corbut. And it's great that we have Corbut, and we could hope Corbut to become such a bios for the stateless laptop. Even though Corbut is not fully open-sourced, it relies on so-called Intel FSB, the firmware support package, which is an Intel blob that is needed to initialize your DRAM and other silicon. Still, it should be reasonably easy to ensure that FSB does not provide SMM backdoors. So this is a solvable problem. Finally, there's this question. So let's say half a year from now, or a year from now, purism or somebody will tell you, here is the stateless laptop. You can order just $2,000. And okay, so you got the laptop, but how do you know it really is a stateless laptop? Maybe it is full of state-coring elements.  This comes down to the problem of how do we compare two different PCBs, two different printed circuit boards? As far as I'm aware, right now, our industry has no ways to compare two different PCBs and to state, yes, they look identical. Because if we had that, then we could... We could have the laptop vendor, which would obviously have to be open hardware, to publish the schematics and pictures of the boards. And then anybody who orders laptop would have an opportunity to always, say, photograph the board and have a diff tool to compare it if it really looks the same. Sure, we would not be able to see inside the chips, but at least the geometry-wise comparison would be a tremendous step into making malicious modifications by vendors very difficult. This is a vision problem, kind of, right? You take two photos, you have two photos of two PCBs, and you have a tool to compare it. And I believe Jake Apelbaum has already mentioned it some, I don't know, a year ago, probably. It's a great research project for all you academic people sitting here. That's an example of a board that... Well, I have no idea. I got this laptop, I open it, I see this board. Sure, I can identify some integrated circuit elements like this embedded controller here. But really, it's... Maybe it's connected somehow differently. Maybe there is some other flash elements there. I don't know. I would like to have an ability now to check this with the golden image that some experts will analyze in depth and say it's safe to use. Many people say that perhaps we should all give up on Intel X86 because M.E., for example. Yet, this is not such a nice idea, or maybe this is not such a silver bullet, I should have said. First, we have ARM. Everybody says, why not ARM? Why not ARM? Let's go to ARM. First, there's no such thing as an ARM processor. ARM just sells specifications or IP. And then there are vendors like Samsung, Texas Instruments, et cetera, who take this IP and design and make their own SOC. This is still a proprietary processor that they can put whatever they want inside. For example, we have TrustZone. By itself, it's not as closed as M.E., but there is nothing that would prevent the vendor to actually take TrustZone and lock it down and end up with something like M.E. very easily. Just a matter of the vendor willing to do that. Also, the diversity of the processors makes it difficult for operating systems like Cubes that would like to use advanced technologies like IOMMU for isolation to actually support all of them because different SOCs might be implementing completely different versions or even technologies doing that. Another alternative, much better one, is to use open hardware processors. Currently, that means FPGA implemented processors. In the future, maybe we will have 3D printers that will allow everybody to print it. That will be great, but probably it's not coming any time in the coming 10 or 20 years. And meanwhile, the performance and lack of really and the security technologies like IOMMU or virtualization doesn't make this a viable solution for the coming, say, five years at least. And even then, even if we had such an open source processor, this clean separation of state still would make lots of sense. Again, because few more infections can be easily prevented because malware, if it gets there somehow, still has no places to store stolen secrets because it provides a reliable way to verify or upload firmware and makes it easy to boot multiple environments and share laptops with others. And I know that most of you will now say, yeah, that might be a cool idea, but the market will never buy into that, right? But understanding that personal computers are really, as I said, extension of our brains, we should stop thinking about market forces as the ultimate force shaping how our personal computing looks like. Just like we didn't resort to market forces to give us human rights, right? We should not count on the market forces to give us trustworthy personal computers because it might just not be really... It just might not be in the interest of the market forces. So hopefully some legislation could be of help here. Maybe the European Union could do something here. Because it's really funny when I often talk with other engineers, and we all know that our world now really runs on computers. And yet, apparently, almost every engineer I talk to says something like, yeah, but the salespeople will never do that, the business will never agree to that. But if the world runs on computers, shouldn't it be us, the engineers, who should actually have the final say how the computer technology should look like? Yeah, I'm just here with this thought. Thank you very much.


Youth empowerment, job creation and such-like must be given priority for any meaningful development to take place. This is particularly necessary towards stemming the tide of customs and smugglers' clash and other youth restiveness in Ogham State. This call was made by former governorship's parents in the state engineer team, Tokwa Kuyebi, in an interview with Newsman. It was shortly after declaring his intention to represent residents of Yewan North Imerkwa from federal constituency at the House of Representatives. I can assure you that the level of smuggling will reduce drastically and these are going to be my vision. These are things I'm bringing to the table, how to engage our youth, how to ensure our graduates are well engaged in employment and our locals are supported to lay their hands on a meaningful job. You can see the massive grassroots support that we are enjoying and I believe by the time we move forward and by the grace of God I'm able to secure the ticket, it's going to be total winning for the party by the grace of God. There is mass mobilization for our people to get to the local government, to get them self-registered at the high-necked local government level and there's also an arrangement going on. We as a team, we are organizing some transportation for our people to move to high-necked local government and get registered and that's ongoing massively now.


Hello, my dear brothers and sisters. Last October, the area presidency received a charge from the quorum of the Twelve Apostles to introduce to the Philippines the concept of members of the church, linking arms with missionaries in the work of the ministry. Never did we imagine what a challenging task that would become as in March of this year a worldwide pandemic would literally shut down travel and drive us into quarantined conditions. I wondered, as cities, provinces, townships and barangay initiated stringent lockdowns and over 1600 missionaries were evacuated from the Philippines, how would we ever succeed at linking arms in any ministry under these conditions? Now, brothers and sisters, I know you have taught me. I have been inspired by things I have seen and heard and I would like to share with you just a few examples here today. We are so very blessed here in the Philippines. We have serving among us over 2600 dedicated elder and sister missionaries. They're all around us. This worldwide pandemic has caused missionaries throughout the world to be called back to their home countries. We have had many returned to the Philippines from Europe, Africa, North and Southeast Asia, even from Canada and other parts of North and South America. As a result of this massive movement of missionaries, we now see many nations that, for a time, will have significantly depleted missionary forces among them. But that is not the case here. That is not the case here in the Philippines. This valiant nation where the gospel has only been preached for less than six decades still has a vibrant army of devoted missionaries serving every day from the confines of their apartments. Think of it, most of their apartments are very small, humble dwellings with not much more than a couple beds, perhaps a small stove, sink and fridge, no television, no video games, no radio, yet out of these circumstances these faithful young missionaries continue to awake in the mornings, exercise, study the scriptures, put on their missionary clothes, and strive best they can, some by smartphones, but most by ordinary cell phones, to declare the gospel of Jesus Christ to anyone and everyone who will listen. Recently, Elder Camolo and Elder Penetrante, serving in the Antipolo Mission, asked one of their recent converts, if she knew of anyone who might be interested in their message. In response, the Oblaya family invited their friend, named Menci, to their home where they introduced her to the missionaries over the phone. Before COVID-19, I don't think I ever imagined introducing someone to the missionaries over the phone, but the Oblaya's did it. I marvel as I think of what that moment must have been like. Elders Camolo and Penetrante tell us that the spirit filled both their apartment and the Oblaya's home. As the elders taught and testified of the restoration of the gospel over their cell phone, the spirit filled their hearts. During the lesson, Sister Novi, who was also a recent convert and was there with them, bore her testimony that what the elders were teaching was true. When the elders asked Menci how she felt, she replied that she felt the confirming power of the Holy Ghost. Well, every Sunday since, every Sunday since that first lesson, the Oblaya's have continued to invite Menci to their home and she continues happily to come. Together the Oblaya's, Menci and the missionaries participate in studying. Come follow me. Last Thursday, Menci accepted an invitation to be baptized. Elders Camolo and Elders Penetrante testify that they know members and missionaries working together can help each other make this great work move forward even in lockdown conditions. Truly this is an example of members and missionaries linking arms in the ministry to bring the happiest message the world has ever known to the beautiful people of the Philippines. Elder Cabrera and Elder Magali tell of similar miracles that have happened in the Alangapo mission. As members and missionaries have worked together during quarantine to share the gospel, they received a referral from overseas to speak with a grandmother who is a member of the church but had been less active for five years. They met this dear sister for a video chat using their smartphones and learned that she had children and grandchildren who were also interested in their message. The family had previously been ministered to by President Manolato, the branch president of the Kutud branch. All of these connections came together as the missionaries introduced themselves to Sister Rita and began to teach with their smartphone over video chat. Elder Cabrera and Elder Magali declare, despite our circumstances, it was not a hindrance to us to do missionary work. It takes the spirit, creativity and determination. We so testify deep in our soul. The Lord prepares His children and His sheep to hear His voice and He knows them and they follow Him. Close quote. Thank you Elder Cabrera and Elder Magali and thank you to the wonderful members of the Kutud branch for linking arms in this great work. Sisters Corachea, Castillo and Formulejo serve in the Bacoled Philippines mission. They tell an inspiring story of how they were referred by Sister Deiro and her husband to visit with Cosette Amar who is searching for a church for her family to attend. Cosette invited the missionaries into her home and the lessons began in January. Soon thereafter the Amar family began attending church. They were warmly welcomed by the members and Cosette remarked that she had never seen her children so excited as they were after their first primary classes. The members of the ward embraced the Amar family and Sisters Corachea, Castillo and Formulejo relate that they truly felt they were linked together with the members as together they taught, fellowshiped and strengthened the Amar family. Things were going so well, that is, until the pandemic closed everything down. The Sisters tell of the sadness they felt as they were no longer able to visit the Amars nor attend church with them. Nevertheless they did what they could with their phones. They made calls and sent text messages. Members of the ward tried to stay in touch and continued to minister. The result? A baptism date was set but sadly had to be cancelled later due to travel and quarantine restrictions. The Sister Missionaries fasted and prayed that somehow the way might open up. Soon President Sumagpao and Bishop Mohico cancelled together and made a plan for the baptisms to move forward. A date was selected and on May 2, Brother Balion, a member of the ward picked up the Sister Missionaries and transported them to the meeting house. There Brother Amar was first baptized, confirmed and then received the Aaronic priesthood and was ordained to the office of a priest. He then baptized his wife, their oldest son and daughter, while their two younger children observed at the side of the font. The program was simple. Three members of the ward were able to attend along with the missionaries. These dear sisters testified that the miracles they saw as the family embraced the gospel were made possible because together they and ward members strived to diligently link arms in the Lord's great redemptive work. I've read story after story like this, submitted to me over the past several days by mission presidents throughout the Philippines. Missionaries in the Goa Second Ward speak of teaching a mother in a part-member family who is visited and ministered to by a member of the church who lives nearby, or Minda, not a member of the church who was being taught by the missionaries before quarantine began. Sister Minda has continued to be taught by the missionaries, but the real strength has come from the redonario and safe families in the branch. Together they minister to Minda at their home by sharing their testimonies with her and helping her to see how the gospel can bring true joy despite the challenges that confront us in our lives during this quarantined condition that we live in. The redonario and safe families are such remarkable examples that Minda continued to want to learn more of the gospel. As a result, the missionaries have taught her the lessons over the phone, and on her own she is reading and praying about the Book of Mormon. Sister Minda has now received a witness from the Holy Ghost that the Book of Mormon is the Word of God, that this is the Lord's church. With some hesitation, she approached her husband for permission to be baptized. His response? Well, she had asked him for permission before to join other churches, which he had refused. This time, though, was different. She had prayed that he would give his permission and the Lord had prepared the way. Her husband did grant his permission and Minda is planning soon to be baptized. Elder Baldoza from the Tacloban Mission explains that these miracles generated by members and missionaries serving together continue even after these dear converts enter the waters of baptism. Two recent converts, both baptized on February 22, have continued to be ministered to by young single adults of the Tacloban Second Ward. Though nearly two months transpired without the missionaries being able to have any significant contact, the young single adult leaders continue to provide fellowship and support to Brother Nofis and Brother Porneus. In the Karigara First Ward, Sister Panas goes about tirelessly visiting investigators and new converts, providing continuing strength and fellowship even through the limitations that are imposed by this pandemic. Well, these stories go on and on. I sent a brief email to the mission presidents that preside over the 23 missions here in the Philippines, requesting stories like this, and in just two days they sent dozens and dozens of these accounts. Because of the success and excitement that many have found in this great effort by members and missionaries to link arms in the ministry, the area presidency announces today that each week we will post on the Philippines newsroom and the church's Facebook page a new story about members and missionaries linking arms as they share the gospel with their non-member friends. These members and missionaries have learned for themselves the reality of the Savior's promise given through Joseph Smith. Quote, He that preacheth and he that receiveth understand one another, and both are edified and rejoiced together. They have felt together that indeed the worth of souls is great in the sight of God. Close quote. During the six decades from 1830 to 1890 the membership of the church grew to about 188,000 members. That was in 60 years. In less than six decades the membership of the church in the Philippines has exploded to well over 800,000 members. This is a tribute to the heart and the spirit of the Filipino people. It is a testament of your desire to share the joy of the gospel with your family, friends and associates. In the midst of this pandemic people around us are asking more and more questions of eternal significance. The meaning of life the eternal significance of family relationships the nature of God and we have the glorious answers to these questions of the heart. My prayer, dear brothers and sisters is that we may continue to link arms with this army of dedicated young elders and sisters until the wave of the gospel message floods over the Philippines filling every heart and every home with the peace and joy of this eternal message in the name of Jesus Christ, our Lord. Amen.


Asalaamu alaikum Every time we record this happens Asalaamu alaikum So here is Yonsei University in Shincheon. Last time we made a video about Muslim in Korea, so many people watched that and we got so many positive comments It was hard to reply to all of them So we decided to record a Q&A video in which we will try to answer all the questions that you guys asked us Very pretty First question, how you learn Korean language? I learned Korean language in the last video I said that I learned it naturally And with that I mean that I just picked up the language while watching Korean drama So that's how I learned a lot of words And after that I met some Korean friends and with those Korean friends I spoke a little bit in Korean And then I learned Hangul, so the Korean alphabet And that's how I communicated with my Korean friends in Hangul and Korean But a lot of people also asked me for tips on how to learn the Korean language And I truly think that the best way is to learn... And I think the best way is to first learn like... So I think the best way is to learn Hangul first because then you can read And after that there are a lot of videos on YouTube You can buy a lot of Korean books to study the language And I think if you are actually interested in it, this way is easier to learn That's right Other question, suggest me some places for travel in Korea? I will answer this If you come to Korea, you should go Gwanghwamun Gwanghwamun and Gyeongbokgung with Hanbok traditional clothes It's really good And Han River, Hongdae Hongdae or Itaewon Namsan Tower? Lotte Tower? I've never been to Lotte Tower How did your parents allowed you to study abroad? Mine don't let me go anywhere I'm sorry I'm sorry too I think it really depends on your parents because From my culture, it is actually not very normal that a girl travels alone Especially abroad So I am very lucky that I have a very understanding mother And she really trusts me a lot She also met my Korean friends while they were in the Netherlands They even came to my home and we had food together So that's how she actually trusted the idea of me going to Korea Because when I bought my plane ticket, the first thing she said was If something happens to you, I'm going to call your Korean friends And I'm going to be mad at them So she really trusts my Korean friends And I think you have to talk to your parents And explain them why you want to study in Korea So I think if you have a good motivation And you can actually persuade them while earning their trust Then I think it will be possible for everyone But then there are some parents, some friends of mine for example They cannot leave their home after 6 o'clock I also understand those I know it might be hard But I don't think there is a lot you can do I think when people walk, you can hear them very well The mic is okay This is the mic Is the Korean language difficult? Yes or no? I think Korean language is not difficult Especially if you know Turkish Because the grammar is pretty similar The words are different obviously But I don't think it's difficult I think Dutch is way more difficult Are there private posters for students to leave in Korea? And are they safe and adorable? Affordable You know what affordable means? I mean cheap In Korea there are a lot of student hostels Because a lot of people don't like to stay in the dormitory Because of curfew And that means that you have to stay in the dormitory Between 1 and 5 o'clock After midnight So usually there is like Let's say that here is the dormitory For a university campus Then usually right beside it There are like other student hostels With like a lot of rooms for students Who want to study temporarily Or who want to study for short term or long term So there are a lot of options And I heard that they are pretty cheap Because for my dormitory I paid like 400 United States dollars a month And my friend who is staying at the hostel I paid like 300 United States dollars a month No, I think it's cheap Because there is also a kitchen and bathroom Have you seen Muslim girls practicing hijab in Korea? This person is asking if you've ever seen a Muslim with a hijab Or if they practice Islam so you can see that there I've seen many people who wear hijab Especially in Seoul There are many people who wear hijab I saw many people who wear turban Have you ever think that you will stay at Korea For the rest of your life? Because you might marry a Korean guy too No, I've never thought of staying in Korea my whole life Because my family lives in the Netherlands And I am very close to my family So coming here for maybe like 6 months or 1 year is okay Staying here forever is I don't think I can live without my family And the question about a Korean guy About dating or marrying a Korean guy Religion is very important to me And that is all I can say Because I can never say that I will or won't You don't know what the future holds So... Are you just joking? Can you speak Turkish? Of course So this person asks if I can tell you more detail About eating halal food in Korea And whether it is a problem to eat outside And like we explained in our previous video It is possible to find a halal restaurant However they are more expensive than regular Korean restaurants And about the alcohol I would like to explain something Because when Koreans gather They usually drink a lot of alcohol, right? Yeah, right So it's a way to grow closer to people Usually when I meet with my Korean friends We sometimes go to a cheap place They drink but I don't drink So I still go But I just drink water or cola And they become crazy And then I take care of them after we go But I mean There is alcohol almost everywhere But yeah, you have to find your ways So there is another Turkish question This person asks if I miss the Turkish kitchen I don't because there are Turkish restaurants here as well I actually had kebab yesterday So it was good And also it's expensive to buy food At a supermarket instead of a restaurant And I think it is more expensive To buy ingredients and to cook Than to eat outside Yeah, that's right How much money do you need For living in Korea for one month? Minimum 500,000 won, 600,000 won Because the grocery and food Are not that cheap in Korea I think it's a little bit hard to answer Exactly because like case by case Some people use a lot of money For one month and some people use Really few money for one month So I think it just depends on your Some semi Yeah, it depends on you But I think minimum is like 500,000 won Don't want to be there My dad thinks Korea is not safe So he don't want me to study there But still I want to go So is it really dangerous? I can really answer Korea is one of the most Safe country in the world Safest country in the world It's really, really safe Really don't have to worry There are also a lot of policemen And CCTVs And cameras So it's not dangerous If you steal something You will be catched Like in 10 minutes This person is currently A middle school student And she wants to have an internship abroad But is it possible to get work For 3 months I can say getting a job in Korea As a foreigner is not easy But if you try And if you really want to do Then you can find a job They like people who take initiative You can do it, why not? Is it hard to apply as an exchange student In South Korea? If yes Does you need to be a super smart student With high marks or no? So to apply as an exchange student In South Korea is really easy Because they don't really Look at your grades When Koreans apply for university They always look at grades But when foreign people Apply for exchange program With us they only look At motivation letter So if you write a good letter And of course you have to pass All your credits in your home university Then you can apply for University in Korea You know the relative grading In South Korea? I was like really in shock When I heard that A, B, C We just have like from 1 to 10 And then you get what you deserve In Korea we give the grade Like 5% A plus And 5% A And 15% B plus Like this way Yeah in our country We don't have that We just like You get a grade from 1 to 10 Passing rate is 5.5 And So when you hang out With your Korean friends How do you politely tell them That you can't drink alcohol? Because as long as I know That Korean culture is related To soju or something like that I always tell my Korean friends In advance that I don't drink alcohol And I don't eat meat So when we agreed To meet somewhere We know that We should go to a place Where I can also eat And when they order drinks They know that they only order For themselves And not for me And I think it's very good to say Because they are really understanding Even when I met Jaan And we said we would eat somewhere I told him like Oh I don't eat meat And I don't eat chicken We went to Halal restaurant So you should always Sell them in advance Don't keep it secret And tell them after meeting Korean people Understand you If you say that So don't worry Korean people Don't worry if you have any psychological problems If you have any problems Person is asking Like psychology wise And financially wise What is it like Being an exchange student in Korea And we already covered The financial part So about the psychology part I would like to say that Going to a foreign country For six months Hello Hello Say hello Hello Hi How are you? Hi What is your name? Luca Luca? Nice to meet you I am Rimi Rimi About the psychology part It is really hard to go To a foreign country For six months Because You really have to get used to Different environments And you are going to meet A lot of new people So If you have troubles Making new friends Then you should really Try to practice And be more extroverted Because It will be really hard To survive by yourself If you don't know Anyone And if you don't know the language And studying by itself Is hard already So you should find ways To make it easier for yourself Have you ever been To the Netherlands? No Do you want to go? Yeah sure Why? To see you? No What is the Netherlands? Cheese Amsterdam I want to go Amsterdam Why? I heard it's really beautiful Orange Orange? Orange Gundam First Soccer Soccer Antwoven Yes Antwoven And this person also asks If I would like to come back to Korea After going back to the Netherlands After going back to the Netherlands I have to finish my program I still have one year left To study And after that I will hopefully graduate And after that I would love to come back to Korea Because I have friends here And I like Korea very much We answered you So we answered some questions That you asked In Loomis Instagram I hope it will be helpful to you So And this place is really beautiful So maybe If you come to Korea Maybe I think You should come to Like Yeonse University Thank you for watching So Greetings Hello Hello Thank you for your hard work Thank you for your hard work It's cold It's cold Right? Thank you for your hard work


An international consultant, Charles Otherman, has said that there are over 25 million victims of modern slavery and forced labour globally. Speaking with our Delta State correspondent, Abumajero Friday at the end of a one-week training workshop on human trafficking in the Gulf of Guinea, Otherman called on journalists to report such cases widely. Victims of modern slavery and notably forced labour exploitation are over 25 million. So it's a very, very important crime in terms of volume, number of victims and survivors that we need to consider. And in a lot of countries, journalists who are reporting these stories on a consistent basis, you can count on your head. So I go where the possibility to work is, often in the framework of international projects that support substantive work on these issues, unfortunately this is not happening everywhere. And I think we're very fortunate to have the possibility to do this in Ghana and Nigeria. He also encouraged the curation of awareness for people to understand the damaging effect of human trafficking on society. The idea is that they continue to do what they do. Ideally that they engage in networking and information sharing activities. They are scattered in many different localities and trafficking is a crime that occurs with mobility. Journalists from different countries are working together, will help them produce some stories that maybe can go deeper to what they're able to do right now. A number of the participants from these activities are going to be accompanied for further mentoring to be able to develop stories that are maybe a little bit more difficult to do or require a little bit more of work time. Hello, hope you enjoyed the news. Please do subscribe to our YouTube channel and don't forget to hit the notification button so you get notified about fresh news updates.