I guess before you start, I'll do like five minutes of questions. Okay, no questions, though. So for the part three of the form, if it, the format is... And no command? Yeah. I'm saying no. We're saying like there has to be something after the slash, so I'm going to lay it right here so I don't look like a plus, right? There has to be something there in the added command. For the first part, I need somebody who will say, can I get a question? You probably submitted the wrong slope test. Is it a Latin for each slope test? If you click the wrong one, it'll submit an old one. That's probably what happened. I'm going to resubmit a new slope test one, and then here's that one. Do you have a question? Can we use the C-socket code provided on this website? Yeah, it's long and excited. Anything else? The question in here was, can we use the code provided in the link to the C-socket library? Yes, it's long and excited. Comments? I would say where you use it would be best. A comment is that I got this code from this link. That's probably fine. I'm not that. Somebody in the class is going to have to take a class. Can we get another one? Yes. Anything else? That's the one. That applies. We just got two minutes back. We are almost at the end of network security. We're actually making awesome progress. I'm super happy. We talked on Monday about TCC spoofing. What was the essence of TCC spoofing? What's the purpose? Why are we trying to do that? We're establishing a new connection as if it came from somebody else's IP. That's the key there. With spoofing, we're not disrupting an existing connection. We're trying to make it seem like this TCC connection comes from a different source IP. That's the key idea with spoofing. Here with hijacking, we're going to look at something different. We're going to talk about how can we try to inject data into an already existing TCCD string. Hijacking is as it sounds. For TCC spoofing, we're spoofing where the source comes from. We're trying to establish a new connection. Here, there's an already existing connection. Stopping, stop. I can hear all of you whispering. For hijacking, there exists an already established TCCD connection between two hosts. The idea is we want to inject and take control of this attack. The idea is we're going to use spoof TCCD packets that have to do what? For us to let's say inject data into a packet, what is that, into a TCCD connection? What would we need to do? We need to get the sequence number right of whichever side we're trying to inject the packets on. Is that easy or hard? Hard. Hard is just as hard as trying to spoof a TCCD packet. Because we have to somehow know that sequence number. So how are we going to deal with that? We can guess it. Maybe from the network and we can sniff the packets. What else? We can sniff it. We can guess it. Yeah, we can just hope to get lucky. We can use this technique to insert data in a string. Why might we want to insert data into a TCCD string? What do you do with this? Put on your bag. Okay, so we're going to use this to explain a lot of what we can do. Sounds like this is like an SSH connection. You could put a back door on our system or whatever. So if SSH is a little tricky, the first S stands for secure, which means it's using encryption between the two endpoints. But for something like Telnet, which is SSH essentially in the clear, if you just inject one command in there and that gets sent to the server, that command will get executed. The name is one command to be able to maybe add yourself to the system. What else? Don't worry, this class will change that. Maybe send a fake web page. Yeah, so maybe it's an HTTP request. And so maybe you could either send a completely different web page, or even worse, you just inject some JavaScript that actually tries to exploit vulnerabilities in their browser to get malware installed on their system. Anything else? Like corrupt the connection so that denial of service? Yeah, what if it's a phone call from one general to another, telling them to attack and send an airstrike at a specific time? There you may not even care about injecting data, you just want to disrupt that connection. So all kinds of ways you can do this, right? So if anyone wanted to reset an existing connection, the tricky part is we need to have the correct sequence and acknowledgement numbers in order to pull this off. So this is something that's actually very difficult. And we can do this as we saw with Spoofing. We can either eavesdrop the traffic between the client and the server, or we can guess, right? And if we can guess correctly, as we saw, sometimes sequence numbers are not generated very randomly. And so if we can guess, then, hey, that'll actually give us a way to inject packets into here. There's a really cool paper. If you want to read more about this, I highly recommend this paper, because it describes how to do this. So, okay, you need to perform this attack. What are some of the risks? So you're sniffing, you see a sequence number, now you know what the next packet does end. Now, what if they're sending a lot of data across so that sequence number is constantly increasing and you can't time yours to get into there? So one thing you may want to do is just wait, right? And wait until that connection is relatively quiet where there's not a lot of packets going back and forth. So quiet also means we want that data to be acknowledged, right? We want both sides to have acknowledged those data. Then we inject the data, so we send a packet. What do we have to do with that packet to make sure it's correct? Sequence number, so this tells it what the data is. What else? The acknowledgement number of the other side. Source what? Source port. Destination port? Source IP and destination IP, right? We have to make sure that all of those are correct. This way it looks to the computer receiving this packet, hey, this is the next packet in this stream. So now put yourself in the shoes of the TZPIP sack. You receive a packet. What is the next thing you're supposed to do after you receive a packet? Send an acknowledgement, so you're going to say, so let's say the sequence number is at 100. You're sending 100 bytes, so they're going to send back an acknowledgement of 200. What does the other side do when it gets an acknowledgement of 200? Yeah, it's going to send a packet back that says, no, no, the sequence number is 100, what are you, crazy? And then what happens? So there's no packets that they missed, right? One side thinks the sequence number is where in this example? At 200, the other side thinks it's sent how much? 100. 100. So they keep sending acts back to each other, where one says, hey, I've only sent up the sequence numbers 100, the other side says, no, I've read up to 200, the other side says 100, the other side says 200. They keep doing this until what happens? It keeps going forever until a packet gets dropped and they're like, yeah, that's what I thought. And so we actually end up in a weird circumstance because this desynchronizes the connection by injecting data into the string, right? Both sides think they're at different parts of the conversation and so this can actually cause a lot of disruption when you're doing this, but if you inject that packet to get access to some system, then you don't really care if those two can talk about it Okay, so yeah, this is just what we're talking about. So the receiver of the injecting data acknowledges it, the other one says, actually, I only sent up to this and then they keep on sending that until finally somebody drops a packet or they miss a packet and they think everything's fine. So yeah, and this is a problem because now they can't really communicate with each other because we desync these clients. So we can try to, if we are, what can we do to avoid this if we are, let's say, actively in the middle of their connection? So we are one of the hops along the IP route. What can we do? We can drop, yeah, we can drop one side's acknowledgement, the side that we just sent the data from, but then what would we have to do after that? You could modify it to make it sound like it was acknowledging frankly. Yeah, so you could just acknowledge it so you would have basically one side thinks it's at 200, all the packets that come back, you substitute, or you subtract 100 from their acknowledgement number and so it would act back 100. The other side goes, yeah, we're definitely at 100. It would send another 50 bytes and so you would increment then that sequence number by 100 bytes. So the other side thinks it's at 200, whatever, bytes and you would keep doing that. So if you're in the middle, you could actually pull off this kind of connection. So yeah, so let's take a look at this. We can send a spoof TCP packet with the correct sequence number with 30 bytes of data. So the client sequence number, the server sequence number, the server responds back with an act of the client sequence number plus 30 because we just sent 30 bytes of data. The client acknowledges the client sequence number and again this keeps going. So this is a very powerful attack because it allows us to inject data when two machines think that they're just talking to each other. So this is why we have to have additional layers of security on top of TCP and IP. This is why they built TLS, which they use for HTTPS, which actually guarantees that the communication is encrypted and nobody else can inject packets or if they drop packets, it's detected. The same with SSH, so I don't know the exact, it's called like this, it's a layer over telnet that causes those to be secure. So we actually see this act storm when we try this. So there's just a bunch of acts back and forth between each of the two endpoints, dot 23 and dot 10. And they're all acknowledging the wrong packet. So they keep doing this until finally it stops. So very cool attack and the thing that should scare you is this is absolutely feasible on things like web requests, right? So you're on a Wi-Fi, a public Wi-Fi where we already know that everyone can sniff all the packets on that Wi-Fi. You make your request for, we always Google that problem because they're all encrypted, but you make a request for whatever, cnn.com, right? All it takes is somebody on that local network to be seeing that request and able to respond as if they were cnn.com. And now your browser is looking at and loading code as if it was from cnn.com. We'll find out in the web section why that's so bad. There's a couple other things on Tyra because they increasingly become important. So we talked about, so here you're able to inject data into a conversation so there you'll be able to affect the integrity of the conversation. By sniffing you'll be able to affect the confidentiality. So the other attack we've looked at a little bit, right, are attacks against availability. So what do you mean for that? You need, well, a lot of computers in bandwidth, is that the only thing you need? Can I take down your system with one computer? What bandwidth? Maybe. What do I need? Leverage. I need leverage. So I need something where I can maybe turn one packet into 20 packets, right? Or another way to think about that, I'll think about it here, we can think about it in terms of memory. So can I send you one packet which costs me how much memory to send out one packet with SCAPI?  On average, I'm not looking for the exact amount. So to send out one packet, are you keeping a packet's worth of data in memory? What are you using SCAPI when you just create those packets and send it?  It takes zero memory to send a packet assuming you don't ever want to, you don't care about the response. Like sending an ARP reply is nothing. You build a packet, you send it and it's gone, right? Because you've done your part, everything else has to take care of that. So we're going to look at attacks that kind of take advantage of this. So a SIN flooding attack is one of the most common denial of service attacks against infrastructure. And so there's a lot of them that have been... So the idea is, what happens here? Well, the attacker starts a handshake with a SIN... So it starts the first step of the SIN packet. So think about this. We send a SIN packet from us to the website we're trying to take down. What happens on that side? They send a SIN act back. But what do they have to do on their system? What does their TCPID stack have to do? It has to allocate memory to do what? Yeah, it has to know the sequence number that we sent and it has to remember the sequence number that it sends us so that it can verify that the act got back correctly. So at the very least, it's got to allocate memory and how long does it have to wait for a reply? Till it times out, right? There's no hard guarantees. This is something that each stack has to decide for itself. At some point, it has to time out and free that memory up. But the idea is, I've now sent one packet to your machine. It cost me zero memory. But when you get that packet and send it back, that requires you to allocate some, let's say, a packet's worth of memory. So if I can just send a bunch of SIN packets, as many as I can possibly with my bandwidth, for that whole window of time, you're going to keep this data structure allocated in the kernel, waiting for a reply back.  And eventually, you'll run out of memory. Well, depending on how much memory your system has, right? If you have a ton, it's a different story. Would that be like a layer three? I'd say sometimes a third. Yeah, I don't think of it in terms of layers. I think of it in terms of what is it targeting. So in this case, it's targeting the memory allocation of a high level of kernel, specifically the TCP-IC stack. So yeah, I guess level three would probably be right, since it's using TCP. But for me, it's more about the effects. What does it actually do? It causes them to allocate memory when we as an attacker don't have to allocate memory. And so the very cool thing here, so what does this mean that we can do? Do we care about their reply? So what does this mean we can do? Spoof. Yes, even those TCP, right? We can spoof the source IP because we don't care about getting those SIN act packets back. In fact, we don't want to get those because it's going to mess up our bandwidth, right? We want them to go somewhere else. So we just want to send out as many SINs as we can from as many different IP addresses as we can. And what does it look like to the attacker? Are you into the victim? Heavy traffic. Heavy traffic. It's just a lot of people trying to connect, right? You're thinking, awesome. My website is super popular. But then you realize, hey, but nobody's actually completing this handshake, right? I have all these other things connected. So this is the key problem, is these half open sockets where we've completed two parts of the freeway handshake and the server has to keep open these sockets until finally the time's up. So, how do you fix it? Just recycle the memory of the oldest received pending connection. Ooh, tricky. Let's see. I think in that case, you'd still... So how could... You would be dropping packets. Yeah, that's what I'm trying to think of how much that would affect. But it would depend on the window. Yeah, it would depend on how long... Let's say if you think how long could you go without looping over the same packet and how fast can the attacker make you keep allocating this? Yeah, you could basically force... If somebody else can complete the connection in time, then they'll be fine. But yeah, you're bandating it, kind of, right? You're not going to run out of memory, which is good. You still are not able to allocating probably any new sockets. So what else? Set a threshold. Set a threshold in what sense? What do you have to set a threshold on? From who? From everybody? Do you want a hard limit on the number of people who can access your website for a second? That's a tough one. Whatever limit you set, the attacker... The other thing is the attacker can change their IP address. So you can't say all packets coming from this I set a limit on. So if you set any kind of limit, as the attacker, I just fill up that limit and now nobody is legitimate and connect to your website. What else is coming here? If we have more than half open connections, then we start dropping from the start the whole list of half open connections. Yeah, so maybe kind of a similar reusing. You just kind of start dropping stuff as soon as they get old. But at some point, right, they can... I mean, assuming they can start sending enough packets, if they can send more packets then you can, you know, you're kind of posed there. Yeah. Only allocating memory... Yeah, so that's getting to the root of the problem, right? The root of the problem is you are allocating memory. But what do you have to... What's the challenge you have to solve there? If you don't get a reply back in that time, just drop that one here. So, yeah, so that's like kind of closing the window, but you're still susceptible, right?  What if you prioritize trusted users? Like users that have established connections with you before. And so, they'd be less likely to attempt that. And then you are more... And then you're more likely... You make it more likely to see a drop packet from people that you don't know. So you want to know new users to your website? You're fine with that. You want to prioritize the users who've been there before that you know... Interesting. The downside there is that the attacker can spoof their source IP of who's already been there. They'll just spoof good users. And so you still don't have any way to distinguish that. I want to go back to this idea of eliminating the... the storage. So this is... When you're trying to think about this, I always... When I'm trying to think of security solutions to a problem, right? The way you want to... You want to treat the disease not the symptoms, right? So you don't... But sometimes it depends on the problem. Sometimes you can't treat the disease. So you have to come up with different kinds of band-aids or work-arounds. But if you can get around this fact of let's not allocate memory every time you get a SIN packet and send out a SIN Act packet, then it doesn't matter. Then it becomes a bandwidth race, right? But still in the bandwidth, they send one packet, I send one packet, right? There's nothing... There's not very much leverage there, right? And these are zero data packets. So what's the problem with not... Can we even not allocate memory here? Yeah, so the core problem is we need to know, does our sequence number... Does the sequence number that we chose match the acknowledgement number that they send back? So the trick is essentially they... Well, okay, so we can actually take a little look at the way that they do this. It's actually pretty much all the ways that you guys just came up with thinking about this. The main one is SIN cookies, which we'll see right now. And there's an RFC that actually has descriptions of all of these and mitigations to them. So the idea with the SIN cookie is exactly this idea of let's embed in the sequence number that we chose the sequence number that they sent us. And so that way when they send it back, we can essentially reconstruct this. So the idea is it will be constantly changing, but the other thing is it needs to be changing, right? Because you need this to be random. The sequence number shouldn't be guessable, right? So if it's just a direct... They send me this acknowledgement number, I send back this sequence number, right? That's much more easily guessable than choosing a random sequence number. So I'm not going to go into the details here, but basically it's a key hash off of a counter and the source IP, destination IP, source port, destination port. And so by doing this, the attacker when it gets back the acknowledgement number, it can verify that it actually generated this acknowledgement number without storing any data. So it gets a SIN, it creates a special SIN act, not special, but it creates a SIN act with a special sequence number and that way when the other side sends the final act back with that sequence number plus one, plus its own acknowledgement number, it can reuse this algorithm to figure out was this a SIN activity that I sent? So this is the... So the... That's how I'm going to draw it back. Yeah. Okay, so it can include... Okay. So this is kind of a whole class of attacks that basically take advantage of the fact that a server, that a client by sending maybe one packet or a certain number of packets can enforce the server to hold on to some finite resource. And there's actually a lot of other attacks like this. For instance, socket descriptors, so every time there is a new successful socket connection, the server has to create an object, a socket object, which has a file descriptor number and there are limits on your operating system about how many open sockets you can have at once. So if I can connect to you enough times to eat up all those sockets and for this case I may need to use more than one machine, right? But if I can do this and have you create a bunch of sockets and I just don't do anything or say anything on those sockets, then now nobody new can connect to your server. There's a number of processes. So this is in some architectures. I think it used to be the case, well, some servers will, when they get a new connection, they will fork a new process. So there are hard limits on servers about how many processes can be spawned. Otherwise, everything crashes down. So you can make them exploit that. You could, this is a really cool one. Actually it's in a vein on some modern one. The idea is you as the client have the server send you a bunch of data but don't acknowledge that you ever got that data. So in the kernel, they still have to keep a buffer of all that data that they sent because they may need to retransmit it. And if you do this enough times, you're getting them to store all of this data in their buffers, eventually overflowing them. So there's similar things here that people have done with HTTP. So there's to overload HTTP servers. So there's an attack it's called, I think it's a slow Morris attack. The idea is you make an HTTP request to the server, but you never complete that request. So you send like the G first and then a couple of seconds later you send the E and then you send the T and the servers have no way to really detect this because they're getting data from you, right? It's just very slow. So you could actually take down servers with just like a laptop because you don't need a lot of these connections open to use a lot of their sockets. So this is, if you look that up slow Loris you can see sample code for this and how to deal with that. But that's kind of like a timing thing which is kind of cool. It's using the fact that I can take up a lot of your time and you're not going to stop me. Any questions on this kind of resource attacks? That leads us to the end of network insecurity. So at this point you all got a crash course on networks and you know, they're incredibly important. I can't stress this enough. So what I've been thinking about a lot is part of this section have you ever heard this interview question that people will ask of what happens when you type in www.google.com into your browser and then hit enter? Like what exactly happens after that point? Have you heard of this before? So you should look this up or think about what your answer would be if you got asked this in an interview with the company. Right? And I hope I've done a little bit to expand your knowledge on that segment because now you should be able to talk about everything and what happens on the networking level. So we have to first do a DNS we'll have you do a DNS we have to have your DNS server in there it's going to send you a VP packet but first you need to know who's your gateway where is this IP server so it's going to be a routing table and it's going to send out if it doesn't know it's gateway's Ethernet address it has to send out an ARP request to find out it's gateway's IP address it's going to send out a DNS request it's going to get that back then it can start the process of figuring out which one of those IP addresses to use and then send out a request and then that doesn't even get all those points from what happened when you enter that into where it gets to the network so you have system calls and library calls and everything that's happening in there So it's a cool thing to think about and you have the knowledge now you know how things actually work and you know how they can break and you cannot be trusted this is one of the key things here when you get a UDP packet can you trust that source IP address? No, fundamentally no because we've seen how easy it is to smooth that and this really is the building block to a lot of other attacks that we're talking about because next we're going to go to binaries and so one of the ways we can data into a binary is through the network and so we need to be able to understand what's going on there and when you're building applications that rely on the network, what kind of things can you assume? Where is the trust there? What things can you trust in the network? So we're talking about sniffing, spoofing hijacking, denial of service group forcing group forcing we'll talk about that later we talked about some tools and we came up with countermeasures and kind of discussed some countermeasures but some of these as we saw are core internet protocols and they are fundamentally broken so we saw we can't have a flag day anymore where everybody just shuts off the internet and then we update and we turn it back on so we have to live with this and build on top of it to provide secure solutions


How do you feel about the influence that art has on people? Well it's awesome, you know, every kid, normally little naughty kids, right? I was a little naughty kid and what got me not going down that path was sports and a dream to get into the films, so I was quite passionate about that and I got into the kickboxing later on in life, I became the Welsh and British kickboxing champion and it opened up the doorway for another dream to get into the films and that put me in a position that I can help and be very positive for the kids so any kids watching out there, I've never seen so many cameras for you in every life listen follow your dreams man and if you're knocking about some other kids and you feel a bit uncomfortable, have you been a bit naughty then move away from that, you don't have to be in that gang, right? move away and get into something you really like, right? and if they call your name so what, send your names in it, that mean? My uncle, he died really young, he was 39 years old, he was really talented but you could never get him to say he was talented out loud, he would never say it you know, we just forced him to draw, you know and so he died talented and really insecure do you have any advice or any words or maybe any creatives or young people that maybe haven't heard their voice yet? When I was a kid, we didn't really have internet, right? and the internet is the world stage, right? so don't be afraid of locking yourself in a bedroom for a few hours and just singing your heart out and do whatever passion that you're good at even, you know, flying a little remote control plane or on a skateboard do anything that you're good at, you can't be good at everything well, you may be, but concentrate on one thing and get really really good at that and just record it, put it on the net even if you've got one or ten viewers because, you know, there's kids out there that become multimillionaires but very famous and stuff like that and it's not just about the money, it's about being very passionate and sharing your talent and your dreams with other people all kids as well that may look up to you one day, you know what I mean? so just stick at it and go for it do you have any insecurities that may have, that you don't really mind sharing that may have hindered your success? yes, when I landed my first audition, right, it was a snatch, right, to play Tommy but at the time I was only 32, right, I'm 45 now but I couldn't read or write and it wasn't long ago, I'm a heavy dyslexic now but it hindered me, you know, sometimes I'd shake going into the bank feeling the forming, sometimes I couldn't even film my own naming, right but don't worry about it, right, it just means you're very special if you've got dyslexia, right, you've got to learn a different way to learn things you know what I mean, make your own pictures to words and things like that I just stick at it and stick at it and stick at it and if you've got it in school don't worry about it because it's a good time don't hide it in and don't mess about tell them what your disabilities are and they'll help you, yeah where are you, how far are you in, how far are we? I am, I'm at your waist to Spencer Wilding okay, cool, cool, so you don't see me here, right? nope, go on alright, you see me here? now I do no, can you go back up so tell me where you're at, tell me where you're at right here, right here, your eyes right, cool, I know you there, right? hi Spencer, I want to talk to you, I want to go take you back you want to take me back to what? take you back to where? way, way back way back way back to your earliest form of expression I got my ass slapped, that was the first thing I come out of darkness into the light and it was one of them what are some of the first ways you express yourself as a human being? some of my questions are philosophical you know I was, you know I was one of them kids, I was you know, my mates watched football and this and the other I was one of them kids who used to go out, climb a tree, look for animals bring them back, say it fell out of the tree but it didn't you know what I mean, I just wanted to be in mind, you know what I mean my mum used to say, whatever you've brought back here, we don't want it put it back in the bushes, put it back in blah, blah, blah, blah, and once right, I used to live in Prostate, right, it's a small town and there was a bastion gardens field, there used to be a circus that used to come into town this is, this is the truth, right and then I loved animals and animals taught to me when I was a kid you know what I mean, it was one of them and there was a, there was a big camel, right and I used to be grazed in the daytime ready for the circus so at night so I, I went to this camel and this camel said to me goes I want to come over you I went okay there was this peg that kept this big camel grazing so they didn't run off, right and cause havoc in town because we don't normally get many camels walking around North Wales so anyway I got halfway home with the camel on the Auckland running out and said what are you doing, what are you doing so I wanted to take the camel home with me, I got him halfway home but anyway and I used to be one of them kids that used to go knock on the next door neighbours for the jambutti and things like that I was a naughty little rogue but a cheeky one that got dimples and got away with it you know, I was one of those kids in my last interview with you you mentioned that it took you a while to learn how to like read or write and that was a big part of your life like you know you know to me that's like real deep you know what I mean because for somebody that really enjoys expressing themselves and enjoy entertaining people you know for you to learn that later on in life like how are you reflecting on with the dyslexia it with the dyslexia, yeah like you said in our last interview through primary school right I was in Oskar Mayer at like a Catholic school in real right North Wales I couldn't read or write in primary school I couldn't read or write in high school so I took no input in yeah I was the class clown they didn't understand about dyslexia back then they understand about it now but there's I bet there's a few schools out there that are supposed to register dyslexia kids but they probably don't you know they just get pushed to the bit bit of a hard work pushing back but anybody with dyslexia out there kids you ain't thick you're very special look what I've achieved I've done over 40 films I was the Welsh British kickboxing champion and the patron of anti-bullying back home right it's a special thing to have dyslexia it really is and it just just because we may learn the theory later on down the line right and we get more physical this time but sports is great and it really helped you but there's tricks I've learned over these few years because at 32 years old I couldn't I couldn't read or write you know what I mean I used to read Thomas the Tank Engine stuff bad but now I'm good I'm holding it over the big boys so don't beat yourself up like don't beat yourself up because it's okay to be dyslexic right it's cool to be dyslexic right when I I struggle with remembering words put a picture to it right if you're you know car put a car to it colors put a color to it things like that it'll help you remember the words better and read before 10 minutes before going to bed it helps a lot it really does we're like computers it's magic it's magic you read the story or if you want to do a bit of acting in you I find all you want to do some homework right read 10 minutes before to bed right sometimes it doesn't go in in the daytime it's like no I can't do I'm dyslexic I'm sick no you're not right there's ways around it 10 minutes before you go to bed get yourself into bed do your homework 10 minutes before to bed and in the morning you're like wow I remember it it does something to the memory it's really really good so don't worry about it if you're dyslexic because I'm dyslexic Darth Vader's dyslexic that was the world's British kickboxing champion that was a dream right I got there and I call the boxing machine the boxing ring my dream machine because I've lived another dream I've become an actor you know I've done a lot to work in the film industry over 40 shows and but I'm very grounded still you know I don't I don't get lost with myself no way I'll never do that I'll stay grounded you know take more in really grounded and you can be yourself you know what I mean because I'll treat the guy that lives in a bin the same that the guy is directing the film that's the way I am yeah treat people how you want to be treated yourself do you know what I mean and that's why I'm one of them but sitting down watching the film I it's not like it's weird if like I'm watching myself playing a pirate in Peter Pan or playing the Frankenstein monster in Victor Frankenstein or playing Darth Vader and Darth Vader I watch it like you guys watch it if I'm watching it like myself then I'm done with job yeah because it's a different character that just use me to become that character and I love it it's very special to feel somebody else inside your body you know what I mean and you turn it on you just help it you give it you know from the costume I'm full of latex and stuff like that then you know you've got to turn that latex into your real skin if you're going to be a somebody might be watching me now going I want to be a creature blah blah blah blah you've got to become that character you've got to open up the doorway and give it a real heart and spirit yeah it's pretty cool man and it's magic if you can do it it's got to believe in yourself do you know what I mean


Alright, got an orb. Now, how's it going everybody? Datsunoi here back with some more Dragon Ball Fighters rank badges, this time playing the suggested team of the Superboot team, including Gotenks, Gohan, and Piccolo. Now unfortunately, Superboot himself isn't actually in the game, that is definitely one of the glaring character omissions, but this team is more than enough to make up the arc of Superboot, at least the really important character.    Unfortunately, we do just spike the ball in him, what's the mix? Hey, go low, you gotta be willing to stand there and block. Gotenks, just, Gotenks is just speed running right now. Overhead, oh my God, Gotenks is so fast, beam, oh we're dodging it, oh I fell into the 2M, that was unfortunate to fall into, I tried to stick out a jumping medium myself. A level 3, I guess you gotta slow down Gotenks any way you can, all right, a lot of bar being used here, that's all of it actually for him, he's at 0, I'm just gonna spark. It's Gotenks' show, Piccolo is trying to fly down with the Megaton punch, did not work. Oh man, I can't believe he just barely triggered his Ultra Instinct too, he just barely got behind us and that is going to be Gotenks' whole health bar, that's actually pretty sick. Man, the game evened up so quickly, it just immediately we're back to 2V2. Still though, not a bad two characters to have, Piccolo and Adult Golan, I can make that work, really this team, a couple of patches ago, this would have been top tier, well maybe just one patch ago when Gotenks had the machine gun, what a use of the EX dash, that was brilliant, right over the beam, finding the sweet spot, CS is for UI Goku and now I'm in the corner, struggling, got hit low, wow I've really lost, after Gotenks, after that first initial burst, I've just lost the touch, hold on me, let me get it back, let me get it back, bit of lag there gave me just enough time to clear my head, I had to remember where it all started, 19 frames, level 3, what's my mix, I think I'm gonna dash and go low, hey and when it works, it works, hold on, you know what, I'm thinking a bit of hell zone tonight, alright well, okay I'm glad that comboed, I was really hoping it would, I thought he was gonna live, alright I'll take it, that didn't use all our bar those css beam, all the perfect super dash to get over it, nice, mash there, no, unfortunate, don't kick me, can you tell I'm afraid, he's just jumping with it now, jumping light, jumping light, don't try to get into a jumping light competition dude, I will win, beam, oh he so confident, jumping light, why did he do that, that was risky, he wanted the flex, he wanted the flex though, I kind of just let, I don't know why I gave up my turn like that, super dash, alright got an orb, oh yes dude the orb is the pressure to block there is ridiculous and unfortunately I think that is going to be it for him, hell zone grenade and then we just grab him, kick him special beam it up and if that isn't enough which it is, we would have had another bar to unleash potential with go on, that was, I mean that got quiet at the end, it was just like a Wild West movie you know, didn't want to move first and make a mistake so we just had to kind of feel it out, wait for any hits to come to us and we do eventually get game one because of it, hopefully that game, the end of that game wasn't how it normally is going to be, I much preferred when go tanks was just doing his thing, oh css, I always forget in tracks, I always forget, I was just pressuring him in the air, I don't have to worry about a thing, alright in the corner, don't do that, that bss will suck you in if you're not careful, orb, it's gonna want a super dash, yep, the super dash seemed natural, I just didn't have enough time to plant my feet, beam assist, damn blocked all that, oh alright that's fine, I want to switch, I want to switch, I want to be careful, counter that, oh not quick enough, oh I'm just flailing around, it was the last half of that game was the proving ground, I'm just running into assist out here, I keep seeing him do the pose of like let me get a free hit, damn close though, close, alright this should be the end of go tanks, he drops it, too much that, alright he didn't actually super dash but you know it hates so I'm gonna take it, let's go, I need go, I need go jeet out of here, I need him out, that was such a mistake, what a crucial mistake, oh no I didn't get the super, I waited too long, I was trying to decide if I wanted my assist to do it over, oh no, oh no this is bad, hit a 19 frames in there as well, don't do that that was scary, see assist again, seven bars, how many dragon ball, can I get a dragon ball check, oh no dude this guy's still getting levels, we could have taken this go jeet out, this is something, oh this is the, what do you lose a character like this or kill opportunity, you just think about it for the whole rest of the game, it's still on my mind, wait a minute, seven bars, potential limit break, I think I know how we're winning this game, full potential and lead, I do need to switch out, I need the limit break damage boost as well, alright I'm waiting for it, once we get a good opportunity to switch out, alright good, I keep leaving myself open to UI Goku, every time I see this guy on screen for some reason I'm like I should pressure, oh okay it's gonna have to be a 1v3 comeback boys, it's gonna have to be the Gohan show and I just don't know if he's ready to take on that responsibility, then again super boo Gohan, you know he was pretty sick, alright that's how we dodge the C assist, alright all of his assist are down, boom game time, game time, too fast, I'm too quick, Gohan's too quick with it, he's too fast, I'm nervous, I'm still nervous, I'm just trying to cover up the nerves, too quick, I'm too quick for even your C assist, oh no, no too quick to block, I lived life in the fast lane, I definitely should have level one to try to kill there but that was a huge mistake, gotta have more patience, no that's a level four, we're definitely dead, oh what a way to go out, okay there's a lot of areas to improve in obviously, we have to go a bit slower, we have to play around the UI C assist and we can't drop the kill combo in Gojira, because Gojira killed me, we definitely have to sit with that one, okay hopefully we can improve, remember slow it down, he has UI Goku C assist, we're not, I also got a block, I got to play defense too, another area, pretty wide area of the game to improve on C assist, extends it with a dragon rush, not too crazy, oh my god, I'm just, I don't know why I feel the need to scramble, oh no I'm scrambling again, I'm scrambling again, I'm scrambling again, calm down calm down, it just gets, it's too intense dude, no get up, get up, Piccolo wants a word with you, oh my sparking ran out, alright there we go, that was good patience, I'm still nervous about the game dude, I'm still nervous, technically we have a health lead and a lead once this sparking wears off for him, okay, okay remember the UI Goku C assist, if we do that I'm feeling so much better about this, as long as we can remember that boom standalone Gohan, really, alright good patience, man, oh I'm sweating again, the multi-jab dude, I don't know why that was so funny to me, okay UI Goku's out which means he can't see assist us anymore which means we're safe, alright go tanks, whoo he's trying to click buns all wake up, alright we just like grenade, there it is, he got the UI tech, okay I was wondering when we were gonna see a UI tech, it makes sense, I don't disagree, okay level one, hopefully not a level three here, okay just a level one which means there's no knockdown, we pretty much just get to go for free, I wish we had a bar to panic vanish, oh my god that was actually clean, nice reflect, get him off me, wait that was crazy, what a doubt, what a heavy from him, oh he didn't get to kill though, switch out, I gotta remember that he hovers after that move, I've gotten punished for that a lot, I thought he would hover again there, to see us this beam, nice, oh no, okay I still had it, okay I think we could all tell I'm panicking for no reason, well there is a reason but I I'm just on the on the edge right now, Piccolo assist, he's gonna want to see Bradash, okay 2M that should be it right, actually you know what, this is a perfect time for a game of volleyball, Piccolo you want to go for some volleyball, I'll set it up, to me to Piccolo coming in with the ace, boom, I think that was tennis, I think an ace is tennis but that's good enough dude, we'll take it, alright set number one was a stressful one but you know what, we did walk away with the win, that was too right, yes it was, okay good, we are on to the next game, hopefully we can we can be even calmer in that one, okay we are back with game two and this is actually an angel rank opponent which is the same rank as I am, meaning the points of the line are intense right now, chow to assist, I love seeing Tien's B assist dude, Tien's B assist is so cool to me, that was a mistake Superdash, I look like, this guy has no idea what I'm doing right now, my movement looks so weird, I was just really struggling to get a hold of the keyboard, alright A assist, oh he got out, C assist beam, not good enough, oh I'm sorry, to wage that, no not possible, or he knew I wasn't going for real about the beam, how did he know I was gonna fake it, uh charge up that punch though, C assist, this is looking like it might be a kill here, I'm just gonna, I'm just gonna ensure it is a kill, I definitely should not have continued it like that but I'll take this, alright and then special beam to pick it up, that is more than enough and we got Gogeta down, now it's just Tien and Superbaby2 standing in our way, Superbaby does scare me, if I lose any characters they become his characters, don't want that to happen, oh I was not expecting volleyball fist there, close, good enough dope, damn Tien does so much, Tien is also a character I'm afraid of, Anchor Tien would wipe me off the face of the earth without a second thought, oh shoulda to wage that, just gotta block, hold on, why do I, I don't know why I'm standing up there, look at this Tien damage, this is not something you want to get hit with, oh the extensions, B assist, dragon rush, you just don't want to get hit with that even off a weird scaling starter, I don't know if I, why'd I do that, I don't know why I jumped, kind of lost my own footing there, okay I'll take that, I'll take that, nothing too crazy but at least we get them closer to corner, alright I'll take that too, I will definitely take that, I missed by a mile, oh Tien is out of here, I'll take it, not the most conventional knockout I've ever gotten but let's go, special beams should be more than enough, I'm fine with, actually should I be fine with leaving Piccolo in, I just mentioned that, no I, no no no we can't leave Piccolo in, if SuperBaby2 gets Piccolo A assist I am crying, so let's leave the A assist for me, oh my god I can't, I'm so glad I remembered that, if he got that, don't do it dude, he's, he's gonna do, he's thinking, oh no he wasn't, I wonder why he wants Gohan out here, why does he want Gohan out here, Dragon Rush, I saw that reflect coming, let's go, alright, you know what I'm actually okay with, no Piccolo you're not supposed to be here, no, okay what I wanted was the assist call after the level one, oh my god okay get him out, oh run up aggressive, nice 2H, nice 2H, oh he let us go though, the thing is he has all vanished combos, yep, the thing is he does have 6 bars and SuperBaby2 can get some crazy Raw level 3s off, so I don't, health bar just drains away, I did not think, okay, but do I give him Piccolo A assist though, yeah, at this point we're gonna go with Gohan as anchor, see look what I was saying, oh no, he got the grab, I was talking about those Raw level 3s dude, SuperBaby players love those, when I play SuperBaby I have to go for him, 2H, I hope he's ready for this dude, level 6 go on, if I get one touch he's dead, some people would say why would you spend all that meter, he's now you see why, it's because Gohan's built a little differently from the rest, oh I definitely wanted to teleport, no I couldn't, alright go on it's gonna seal it with this level 6 transformation, not all the way to level 7, he still had a bit of power left on the table, but there you go, see those BP, that was a mistake, the BP is crazy when you're going same rank to same rank, Piccolo A assist, 2H, oh that's C assist, C assist beams just hit so good, you get tapped, you get comboed, A assist from Piccolo to hold him down, that was clean, and I just reflected nothing, that was so cool, alright Chow to assist, a lot of hits done there but not enough to you know get the combo off of it, I was kind of sick, I mean I don't know if it was good enough to get anything off it, oh he blocked the dragon rush beam, we faked it, we faked it but we still just have to block, I'm Ash, I thought maybe he'd go for something there, oh the reflect works but the 2M came back with a vengeance, I really didn't want Gojin to slip away like this, wow damage, luckily he dropped it, let's go, the jump in, had it go back to the old tradition, the classics, nothing hits like the classic, now that's what I call mixups 2016, do they still make those albums, that's what I call music, I wonder if they do actually, that's what I call music 2021, is that real, that would be very funny if so alright we'll take a DP, just get him off of us, dragon rush that was a bit slow, he saw that and teched it, piccolo it's up to you, somebody had to come get this sliding orb, that's right you got to sit there and block now, no matter the timing, no matter the timing, you just got to sit there and hold that which is crazy to me, go, I'm just gonna set up another orb, why not, he's gonna want a super dash, oh never mind super beam took it for him and I couldn't get the counter, unfortunate, seven bars, you gonna spend any of it, yeah a little bit with super baby, it hurts, I was gonna say the name of the move, I forgot what it was, I think revenge death ball, see it's his beam, I'm looking for a chance to use the steam in that one, oh cheap, cheap, oh that is so cool though, the forward heavy with super baby into a tag is so cool, alright neotribe boom, really, oh why level 3, I'm sorry Tien, block it, oh my god even what, that was dragon ball as hell, that was dragon ball, that was so cool, alright well gotanks just lost his volleyball partner and is about to lose his older brother, it's a bad day for gotanks, oh you know gotanks I'm sorry, vanish, chance to keep up with that, 2h, alright that was close, just punch this guy, punch him in the face, kick him into a destroyed city, and now we just deal with super baby, love to see it, oh a bit of lag, spark, I don't have spark, if I had spark though that's where I would have done it, I would have spark combo, damn, EX legs, that's right and don't gohan has EX legs too, you might remember it more from the Tien Gohan portion, let's go, adult Gohan's going to finish it up, that was clean, we just started charging out of with EX legs and we are going to walk away with a W, hopefully you enjoyed this video, a lot of points to, whoo, 8000 and like I said if you enjoyed this video definitely let me know your favorite moment and any other suggested teams you have down below in the comment section while you're down there make sure to like button and subscribe to the channel to keep up to date on all the fighting game stuff we do here and check out some other videos it should be on your screen right now but with that said thank you thank you so much for all the support on the channel I mean so much to me and it's just been a lot of fun and I'm looking forward to keep going it's just been a blast but yeah that's that's it for me I've been about to do it and I will see you in the next one thanks again bye


Hey all welcome back to the fire and water cooking channel, I'm Darren and today I'm going to do my last turkey before 13th giving so and today what I'm going to do, I actually already broke this turkey down and I did a video, I'm going to have it up in the card above here, you'll be able to watch it, this is going to be coming out on my teaching Tuesday series so I broke this turkey down, I separated the breasts, the thighs and the legs, I broke this turkey down because I'm going to cook it sous vide and I'm going to cook the white meat and the dark meat at two different temperatures to make it a lot easier to get the meat done, the white meat and the dark meat done at the proper times. Instead of trying to shoot in the middle of where the white meat is supposed to be and the dark meat, I'm going to do them two separate temperatures so that they can come out perfect on both of them. This is going to be a little different than my last couple of turkey videos I did which I spatch cocked those and I finished one on the Kamadojo and one on the Camp Chef, well this will be finished on the Camp Chef pellet grill as well but what I'm going to do with this one is a little bit different, like I said we're going to cook the white and dark meat separately sous vide, I did break the turkey down but I'm also going to inject the meat with a nice injection, I didn't dry brine this turkey at all or wet brine it, it does you know since it is a store bought it's a Publix brand turkey, it does have a brine solution in it already but I am going to season it before I put it in the sous vide bag so we are going to season it with some of this run and wild poultry rub I just got and I'm going to use a little bit of garlic, pepper, kosher salt and a little bit of this for the injection as well so I'm not going to try to over season it so I'm not going to put a whole bunch of stuff on the outside but I am going to use this in the injection so I'm going to be right back and show you what I'm going to do with my injection going and I'm going to put this up on a medium heat and what I'm going to do is the first thing you put in I'm using a stick of butter you can see in there it can be salted or unsalted it's a personal preference to what you want if you're going to have salted butter just make sure you understand you know so when you do season your chicken you don't want it to be over salted and I'm also going to be using some chicken bra that's also salted so just pay attention when you're using products that already have salt in them just make sure you don't over salt them by using more salt you'll have a lot of problems with over salt in your meat especially in a turkey that's already got some kind of salt already in the brine because it's a commercial brine so but I'm going to let that butter melt and I'm going to put this is about a half a cup of chicken broth or just chicken broth well just a little bit more than the half a cup in there and let that mix together okay my oven just went off telling me I'm roasting those bones for some stock from what I did with the other parts of the turkey so that's just telling me my oven's up to temp the bones are already in there so I'm going to take my tablespoon and I'm going to add about two tablespoons of this run and wild poultry rub and I'm going to be using my big big injector with the big hole in it so some of these herbs that are in there are going to be able to go through the injector so it's another thing you got to look out for and I'm going to do about a tablespoon of garlic powder like I said I'm going to use just a little bit of salt since we have a lot of salt already so maybe like a half a teaspoon not much at all and just a little bit of fine ground pepper and that's it guys I'm going to it's a simple injection and what we're trying to do is just get some of this poultry seasoning flavor in there and the butter the fat's going to keep it moist as well especially in the white meat it's going to have that extra unks because of the fat so we're going to let this butter melt and we're going to let this incorporate and we'll be right back I took my injection off the stove and you can see I'm going to let it cool down just a little bit it's kind of steamy here I don't want to make it inject it when it's really really hot into the meat I don't want it to cook the meat I just wanted to flavor the meat from the outside so it's been ready about five minutes and this is cool down enough this is just a simple injection that I threw together you know people can buy the pre-made ones like Tony's hatcheries or Cajun injector stuff you can put cayenne pepper you put pretty much any flavoring you want in these injections you know I just like the simple one sometimes you know my kids don't like really hot or spicy stuff so I'll leave the cayenne pepper out so these injectors are really easy to use I'm using the big syringe so you just put your syringe down and you just pull it back and you got your injection in there and like I said we're just gonna plug this along pretty much all along each piece of meat you're gonna you know put about 15 20 holes when you pull it out slow and slowly push the plunger down at the same time you'll see some of the injection come out with it which and that's okay but you'll also see pockets so the injection pump the breast meat up too so that's it and just do another one I'm not going to put a whole ton of in here just in a few spots in each you can put as much as you want or as little but I'm not gonna over inject just a few spots in each breast and a few spots in each thigh that's enough that's enough for the injection like I said you can put as much or as little of injection as you want in it's up to you it's like everything I tell you it's personal preference so the amount of injection is totally up to you now since I got them injected I'm going to go ahead and put some more of this running wild poultry seizing on the outside and since we are we did debone these took it off the bone I am going to season both sides so I'm going to go ahead nice generous coat on this side make sure I get any flaps of skin kind of move those so they can get exposed and we're going to put some more seasoning on before of the sous vide bath and I got my grill going I'm going to I turned it up as high as it'll go I want to get it up to around 450 or higher so I can get the skin really crispy on this I'm going to go ahead and pat this dry it is still kind of wet and remember we cooked the dark meat just a little bit hotter like 10 degrees hotter than the white meat so we could render more fat and what I did I took the juice from the bag and I just dumped it in my stock pot where we're going to do the make some more stock so I'm going to go ahead and get this all padded dry here make sure I got my skin on the top my breasts here and get this all padded dry and then I'm going to put just a little bit more of the running wild seasoning here's a piece of turkey it's cooked got my running wild and I'm going to go ahead and put just a little bit more on the outside of here just for another some of that flavor and came off in the bag I'm sure I'm just going to do it on the top I'm not going to put it on both sides so just on the top here and we'll see how that turns out I'll do it on the legs they need on both sides here I'll do it on all of them what the heck I'll splurge just do a little bit of seasoning on both sides and we're going to cook this probably a good for another good 45 minutes on the camp chef pellet grill get some color to it and get it up the temp I will stick a temp probe in here to monitor the breast just to make sure it doesn't cook too much higher than what we had it at so so I'm there right about 30 minutes I got some nice color to it you can see the white meat looks a little bit different than the dark meat dark meat got a little bit more color I'm going to take a bite of the dark meat here hitting the bone get a piece of the meat here a little bit of the skin you can see that skin's got a golden color to it meat's juicy well that's pretty good you can tell that the fat on this one the fat did render a lot more than the other sous vide one I did just cooking up that 158 it's a lot juicier on the thigh than it was on the other one but I can tell here that this breast is not quite as juicy as the other one that I did and I guess it's because I separated it from the cavity but it's still pretty juicy it's just not juicy run it out like it was on the other one it's definitely not dry both of them are fantastic try it out guys you know pick the one you want to do you know spatch cocking was great this way is great it's all you know in the matter of how you want to do it what you feel comfortable with but both of them turned out great I'm not going to you know say either one of them one over the other like I said the one that was spatch cock was probably just a little bit more juicy in the breast than this one but both of them were fantastic this one I can I can tell taste that the injection really good so all right I'm getting ready to feed my family and I will see you guys on the next video please like this video subscribe hit the notification button so that you can find out when the next videos post and find us on Facebook Instagram Twitter and I'll see you on the next video