Hello, welcome to Economics of Password Cracking in the GPU area. This actually sounds more corporate than DEF CON normally allows for, but we'll get through this. Obviously I work at Sandisk, so I use their slide deck things. So what we're going to cover today, so we're just going to do a quick introduction of who I am and why we're here and why you should stay in the talk for the entire duration. We're going to cover GPU cracking, like some fundamentals 101 stuff. Then we're going to get into the meat of it, all the economics of it. We're going to explain how fast and quick it is to deploy. We're going to do like a little lessons learned. If you haven't noticed, I'm pretty corporate. And then we'll do a conclusion that's going to have some Q&A and some afterthoughts. Oh, that. There it is. Q&A. Shameless plugs. I love these. These are all my sponsors. So I used to work for Atheros Communications. The CFO came to me one day and said, here's a $3,000 budget and an Excel spreadsheet that's password protected break into it and let me know. Get back to me when you break into it. So it cost me about $300 to break into his Excel spreadsheet, but I still had a bunch of budget so I kept going forward. So this talk is mostly because of them. So thank you Atheros for giving me time, even though they don't exist anymore. It's Qualcomm now, which brings me to my other one. So Atheros got bought out and I just cashed in all my stock options. Apparently Qualcomm already has a CFO, so I didn't have any purpose over at Atheros, Sandisk needed one. So now I'm the CFO over there. So I'm a technical CFO, so you shouldn't get up and run away once you hear the word CFO. If you guys don't know what that means, it's a Chief Information Security Officer. So I actually do soup to nuts. I actually do all the architectural reviews, the deployments, all that other kind of stuff and all the boring stuff like policies and procedures and talking to C-level staff. But they continued the funds on this and we're going to show you in a much bigger way than $3,000 later on. People of Earth, I definitely appreciate you guys. I couldn't have done this talk if you didn't screw up on a consistent basis. So I appreciate that. Thank you. And electricity. So like if we look at the laws of electricity, there's the path of least resistance. And that kind of ties in with the people of Earth. So thank you. Anywho. Oh, yeah, I got to give mad greets to my crews. Vegas 2.0, that's the people that I associate with.  Don't believe the commercials, they do not love logistics. DC949, you guys know all those crazy guys. The party was pretty good last night until it got shut down in concert with all the other parties in the towers. And the cuckoo's nest. This is the private hacker space up in the Redwood Hills. It features 50 meg internet, dual 50 meg internet and septic tanks. So it's kind of like a couging con for those of you that know what that's all about. So thank you everybody for all your efforts in there. Making this happen. Oh, another shameless plug, a word about RSA tokens. So one of my lessons learned is you need two factor authentication. And I was all geared up for that.  So I'm like, well, don't, if you're going to do two factor, don't do RSA obviously, because that didn't work out. So what I have here is these special key chains. So I don't know if you can see very well, but it'll help if it's right up.  I collected all the original tokens from my users. So they still generate numbers. And I was like, what the hell am I going to do with 3,000 RSA tokens that have no purpose because the Chinese have all of their seeds? And then I saw on the internet on attrition, somebody super imposed a bottle opener to the side of one of these as a joke. And I was like, well screw photoshopping, I'm just going to like actually attach bottle openers to all my dead RSA tokens. So and you know, normally I buy American and everything, keep our economy going and all that. But I figured since this was special, I got all my bottle openers from China. So every single bottle opener actually says men in China on it. So what you have here is an RSA bottle opener from China. So I figured I'd throw some of these out to the audience. I did have 180 of them and apparently I'm down to eight leading up to the talk. So I'll chuck these out. They actually have some significance around 2am tonight. So I won't tell you more than that. That's I guess a big enough clue. So if you have one of these and you're in the right place at 2am, it'll be of use. Otherwise just enjoy opening bottles of beer with your pointless RSA token. Some of these I think actually will go for the next five years. So it'll still generate numbers for five years to nothing. So unless you're Chinese and you actually have a use for it still. So I'll go ahead and chuck these out and then get started. Any of you guys make it to the summit on Thursday night?  So the summit was a EFF fundraiser. We gave out about 50 of these at the fundraiser as well. So if you were there, you got one already. All right. About me. So why should you listen to what I'm saying and all this other crap? So I got four years of credit card security. You may remember me from DEF CON 11 through 13. I did some talks on how to steal credit cards for merchants directly. I felt that everybody was talking about the consumers and all the carders in the world and nobody was talking about the businesses getting raped blind. So I talked about that for about three years. I developed IDPS technology into code so for websites, so websites that are self healing and they detect when people are doing evil stuff and go into offensive mode for the Department of Energy, which they loved it and let me research that for three years and then scrapped it. So if you want to foyer that, it's actually some interesting stuff. And for the last two years, I've been doing a lot of GP, GPU, password cracking stuff. All the suit and tie crap, I've been doing IT security for 12 years.  And the private hack space. So we have trees and servers to muse over. So it's in the middle of the Redwood forest. There's about 15 trees and about I think we're up to 48 terabytes of storage out there just doing cool stuff. So if you're in the Bay Area and you want to go to this crazy forest resort hack space, just give me a ring. Okay, now what you actually came here for. Sorry about all the sand disk slide things. So what is general computing? So there's a thing that people say they get confused with GPUs and general computing. So general computing just means that you have a whole bunch of tools in your arsenal. So that's where OpenCL comes in. So OpenCL is supposed to say you can program for the platform. So if you say, okay, do you have a GPU? If yes, I'm going to do stuff using your GPU. If no, do you have SSE2 instructions? If yes, I'll use that. And it'll just kind of keep going down and down. But it looks for preferential devices.  You can't say try and do SSE3, which is not as fast but it's still useful. And that's why a lot of people are migrating from NVIDIA to ATI cards. And there's some other things involved with that. We'll get into that. What is the current state of general computing and high performance computing? So the top 500, it turns out that of the 100 of the top 500 that topped the list, about 80 of those now topped the list because they have graphics processing units or general purpose graphics processing units, which are mostly the Tesla 2050s. So we're actually seeing that like every time that that list gets republished, it just gets decimated with more GPUs. So if anybody's wondering if GPUs are going to really stay or if they're just like a passe thing or invoke right now, it'll be passe later. I don't think so. I think everything's going to move over to GPUs. Another thing about GPUs that people don't understand and I always use every microphone I can to promote this. If you know what a DSP is, a digital signal processor, that's all a GPU really is. It's just sample rates, right? Something comes in and just keeps on checking, checking, checking, over and over and over again. Like a really fast clock. That's the core. Yeah, somebody at NVIDIA will say it's a lot more than that, but when you really think about it from a EE perspective or a CS perspective, it's just like a really super crazy FPGA or DSP processor. Cloud computing. So everybody's like, hey, you know, everybody loves GPUs, so let's get into it. So Amazon web clusters and EC2 elastic cloud computing, they were the first to come out with it with actual GPUs. The rest of these guys also have stuff. So if you want to do this stuff on your own and if you look in the CD, I have all the kit and everything you need to get started, you can be cracking passwords on other people's hardware in no time or if you want to do bitcoins if that's still popular, you can do it as well. I think at one point before the bubble burst with bitcoins, it was actually cheaper just to use an Amazon EC2 to mine bitcoins and even though you're paying per hour, you're still getting more back once your 50 coins came up. But I think the bubble burst and now it's just stupid to do that. It might come back if it is really a serious thing that people care about. Do I sound like I'm droning on? Yeah, oh, sorry. I'll try not to. Oh yeah, thank you. That was dumb. Okay, distributed technologies. So you got distributed not in that folding at home, setting at home, and bitcoins. And according to the crack me if you can guys, there actually will be a distributed password cracking pretty soon. I don't know if I was supposed to say it to this many people. Oops, you'll get over it. Although they'll get over it, but that's coming soon. I think that's the crux. Like if we look at what we're doing with password cracking, that to me is like the holy grail. Like once that happens, like if you don't have toe factor, you're dead. It's just not happening anymore. So let's get into actual GPU cracking. So the hardware, like I had to catch myself up on all this once he gave me $3,000. So this is the main ones out there. If you want to buy the top of the line thing for your bitcoins or GPU password cracking, on the Nvidia side you want to use the GTX 590. All they really said was it's the same thing as the two GTX 250 series. They said, well we couldn't figure out. 260, thank you sir. No, no, no, you don't even know what I'm talking about.  So the 260s, what they did was said we have a processor and we don't know quite yet how to make it faster. So let's just put two GPUs on one card and just say it's double the speed. That's all the 590 is. It's just two 580s crammed onto one card. So when they say 1024 cores, it's really 512 cores per GPU. So when you do in cracking, it actually breaks it out. You actually see two GPUs actually crunching your numbers, not one. So that's a little bit of an issue. And so we have here, it says times eight cells. So it's just like the PS3, right? They say that they have the cell processing. So each core has eight cells. It's the same technology because Nvidia is the one that uses that for the PS3. So there's a real problem with this and we'll get into that later. So even though you have 8192 streams, we'll quote that. It still doesn't compete with Radeon's HD 5870, which is 1600 cores. And there's a 5970, which they did the same thing as the 590. It said 1600 plus 1600.  Just checking my notes to see if I missed something. Oh, I guess I am supposed to talk about it here. So why do why does everybody switch over when you think of bitcoins? I'm just going to keep referring to that because everybody knows that they like money and they like to switch to stuff that works. So Nvidia won out of the gate as far as cracking passwords and bitcoins and all these other things because they had the CUDA and CUDA is just this development environment. They had a lot of examples, a lot of free tech nets, a lot of webcasts, all this stuff. So everybody was able to hit the ground running and Radeon or Radeon.  So all the developers said well Nvidia is pretty solid company and stable and CUDA is pretty well documented. We're going to start doing that. But what people found out later on especially when Ati started promoting OpenCL is that you actually get a lot more performance out of the Radeons. The reason why is it's the CISC versus risk argument. So CISC has all these pre-determined processes. You just send it in like SSE2 and all this other stuff in MMX. So you just tell it to do one thing, one instruction and that instruction knows to do 15 others that are pre-programmed. Radeon is just like what why I really love the 68K processor on the power PC side for the longest time. It was well as long as you're willing to code it, it's going to be more efficient and faster and actually get better performance. So when you look and you actually do a map function on a CUDA, it's going to look at 512 cores and it's going to do a map across 512 cores as if there were streams. So you're not you're only using one cell per core instead of all eight cells. Now just because you're not a good programmer or you just really don't understand CUDA. Now OpenCL said we don't care as long as it's a stream you can address it. So now you're writing the same exact code in OpenCL and you're saying go across 1600 cores and do 1600 process map functions simultaneously. So that's a lot faster than 512 map functions. So that's why it's important to kind of point that out of why ATI and this is getting to like a really bits and bytes level. Why ATI is better than NVIDIA? Not because their logo is red and the other one is green but that's why everybody's moving over and if NVIDIA doesn't change their processes if they don't change their architecture they're going to lose this war and it's going to be ATI that's going to be the market leader and save AMD for a little while. So what else?  Okay I should probably pay attention to my next slide thing here. Okay cracking software what's out there? So OCL Hashcat I put it on the top because right now it's a top contender. IG Hashcat which is Igor from Russia he's got one and then the CUDA multi-forcer which is missing in action as of today. Are you Bitweasel? Well your website's been down forever dude. Well you know you would have been number one. I saw a little background real quick. This is the first time I'm meeting this guy so I actually partnered up with can you stand up for a second Bitweasel? So this is a funny story. While I'm at Atheros I am not a CUDA programmer and I need to find a CUDA programmer and I had the $3,000 budget so I call it Bitweasel and I say if I just buy you a bunch of brand new cards can you do some exclusive programming or at least stave off the code to other people and just give it to me early? He said sure no problem. Next you know I drop shipped a couple of video cards so that you can get the multi-card thing going. And everything's happy go lucky and then all of a sudden the website was missing for two months when I was making these slides and I'm like what happened to Bitweasel? And apparently I don't know you are on a drunken stupor or something? So a server failure. So you can write CUDA programming but you can't keep a server up. Alright so as of right now you're in third place behind these guys as far as your efficiency in your algorithm.  So and actually my slides actually show you still ahead but I didn't revise them yet. But well good maybe later on this weekend I can do some joint stuff with him and show you guys the most efficient code. So CUDA multi-forcer Kim's pre-packaged on backtrack four is it also on five? Is pure hate in the room?  No I guess not. Oh oh I'm speaking of which is F5 here or F9. Please step to the front please. That was redundant.  So if you can just sit up here with me don't worry I put on deodorants this morning. Thank you. Anyways so CUDA multi-forcer this is the one I started off with and this is one I was able to actually crack a shit ton of passwords with so thank you for that bit weasel. But right now OCL hashcat which is run by Adam something or other he's in the current lead because his ATI card with the OCL which is the OpenGL framework. So this is my buddy for the duration of the talk and their mic is not on but she says hi. Current benchmarks so we're going to go over benchmarks they're all going to be based on NTLM Windows Active Directory MD5 for the websites and small salt-based passwords and this one's for you. Smart. Where'd she go? Where's Jackie? Anybody watch Epic Mealtime? Yeah salt-based passwords smart. Okay you guys in the audience get it that know that stuff. So what's in a mask?  So now that you guys know earlier in the year and I'm going to start picking this up faster because I think I'm way behind on my time and we have a special thing we don't have a live demo but we have a consolation prize for you guys so don't get up and run away because the live demo is not here if you're a dude or a lesbian it's really worth it to you to stick around. Intent nudge nudge. So at my company Sandisk or any other company and now apparently a docker because they got smart was hey you need an uppercase lowercase a number a special character has to be minimum eight characters right well this sounds all hunky dory and dandy and even pure hate I'm kind of biting on his style a little bit because he got into this and bitwheels came able to custom a cracking tool to help out with this where you said okay uppercase lowercase numbers what do humans do oh I gotta do an uppercase you know what I'm gonna make that my first character it's gonna be uppercase just because I got to remember that the first one's uppercase because they're make me do an uppercase well if 99 percent of my organization and I don't work at ethereals now I can tell you this 99 percent of ethereals started off with uppercase before I came in I was like guys I just cracked all your passwords in like two hours because your eight character password now went to a seven character because I only checked uppercase in the front and so we actually put in the gpo policy there you no longer can use an uppercase character that is required at the beginning of your password so doing something simple like that actually saves you a lot of grief it pisses off users because they're like Christ now I have to start putting my password underneath my keyboard again so because they just can't think and we'll talk about what really means about that so that's what we say is what's in a mask so when you actually say okay I have a 10 character password it's really strong well yeah if it starts with an uppercase and ends with a number and then every nine 90 days when I make you change it your last character went from one to two to three or even the special characters on the keyboard you went from a pound to an at or or bang to an at to a pound to a dollar sign it's like okay I'm pretty sure the Chinese could figure that out idiot so uh we actually had to put all these really specially crafted gpo rules in to kind of combat this kind of natural path of least resistance of users so that mask so you can say okay we're cracking passwords we're doing brute force yada yada yada it's taking forever eight characters takes 23 hours that's a long time you know you can start using masks and now seven characters takes an hour and 15 minutes especially and with the mask your mileage varies it may be about eight hours to get every masked seven character password but it'll get 75 percent of your passwords so if any of you are in the cracking if you can contest that's what we call in the business a clue okay so and they're probably like reeling over they're like what an asshole he just told like 200 people how to break into our whole contest but they'll get over it so that gets into the passphrase concept so um and interestingly enough I was in India for two weeks trying to convince them to use better passwords and they were scared that I was making them use 10 characters and I said well you know what think of a passphrase right I only eat tandoori chicken on Saturdays even when the wife complains yeah and I used the first letter of all those things and you permutate eyes for bank signs and A's for at signs and that sort of thing and remember to put a capital letter in there somewhere and suddenly you're just saying in your head I only eat tandoori chicken on Saturdays even when the wife complains and you have a really really complex password that you can just say in your head and use the first letter and make sure you have permutations on some of those letters and all of a sudden that's a really freaking good idea you know so I think that's like the crux of everything you can probably leave right now if you want to miss out on the lesbian action that's really like the whole point of me being up on stage today two factor in you so you guys all got your cool passes to that thing at 2am if you didn't sorry oh yeah there's a giggle there we already talked about that so I'm mad props to google I mean you can love them or hate them and maybe they're not doing evil and maybe they are doing evil who knows but they're the first email client that's public that gave away a free two factor authentication option and I use it so even when I'm on my computers I use every day I still use it just as a matter of course it's just a really freaking good idea you know especially if they're giving it to you for free so even in our organization we're prepping everybody to do two factor and if you work at qualcomm any qualcomm employees here that one I meant you work for qualcomm you guys all know that your VPN requires two factor and all your other shit in house requires two factor right nod your heads yeah they're nodding their heads because Josh like just absolutely requires that over there and he's like hardcore about the two factor and it's just a good idea you know and there's we'll talk about why that matters right now actually God I've been drinking too much secure off this is actually or semantic VIP so I don't talk about RSA anymore as a good two factor option just because like the Chinese just cut through them like butter and they're probably doing again as we speak so semantic VIP that's the old verisign two factor authentication that's saying you know it's on your phone so on your smartphones you can have a two factor here and the thing I always tell people is oh you don't like to factor our authentication think about your smartphone right how often do you lose this versus your car keys so go ahead just keep this around lose your car keys and you have your second factor so stop bitching about me making you carry around your phone that you're already carrying so you can do that with semantic VIP you can do with RSA as well but it's RSA so and my rep's going to get so mad at me if she's listening to this right now secure off secure off anybody have chase banking online you can admit it only one will admit that they use chase come on who had Washington Mutual you're all poor bastards in here they got Washington Mutual accounts or chase now so when you try and log into your account it says well you have your number on file can I text message you a four-digit code just to make sure to you and that's what secure off does they're the ones that are behind that not some bolts on the chase and you're going to start seeing it in a lot of other places USAA does it today so for all you former military and jerks that just used your parents military experience to get your USAA accounts they have to yeah that guy they have two factor authentication as well because they get it you know our military might not get other things but they get two factor authentication for their retired employees for or their active employees for USAA everybody knows that USAA is right okay so for your foreigners that's the credit union that's exclusively given out to all of our military forces and their families and if you don't know what a credit union is that's a place that's not an evil bank they're all non-profits they're not allowed to turn a profit for personal gain so which they happen to be the largest non-profit they're a fortune 10 company so but non-profit fortune 10 company so they have they have two factor authentication that's just a really good idea and all these apps are free in the app store in the Blackberry store in the market in the Android market you can just download these apps and you can just demand of your employees or of your companies and of your vendors that you use I need two factor PayPal has two factor for free eTrade has two factor for free USAA has two factor for free start pushing everybody else at Sandisk what we do is say we have two factor and you're partnered with all your banks guess what the same token you're using to authenticate with us you can recycle that for your bank not caring around like this freaking janitor's key of RSA tokens for all of your different things this is for my Wells Fargo this is for my porn site this is for my work you can do it all in one token all right I'm done pitching it to you let's get into the economics how cheap is it to break passwords pretty cheap so a locally hosted box is my recommendation as long as you don't mind a slightly higher power bill and it ends up being about $15 more a month for a typical resident here in the United States private clouds are also a really good idea we'll talk about that as well and local distribution and that's getting into the whole SETI at home thing where you can have all the computers in your environment especially if you're a development house like Sandisk we have a lot of GPUs just laying around in all of our development boxes they're like we want the top of the line thing and we're not going to use that GPU ever I'm like well okay I'll use your spare cycles while you're having that box doing nothing okay and crack your own passwords congratulations you lose and so that's like yeah the custom screensavers and everything you know and love public clouds Amazon I was going to have a demo for you but I don't have it ready oh here's my live demo I didn't have a live demo so I gave you guys girls pillow fighting I think that's DJ Jackalope there and that's beer Betty there oh you missed out on the lesbian part smart okay and there is your there's your live demo of a girls pillow fighting if you have those RSA tokens you'll see the Encore production at 2 a.m. somewhere Hint hint nudge nudge oh uh a word about last bit and Elkom soft it's uh definitely pound equals so um last bit is the exact same thing as Elkom soft have you guys heard of these guys like on Wired and uh Arcsoft and all or Arc site and all them they did these exposes on them about uh 18 months ago and they said hey now you can pay somebody to do your uh password cracking with GPUs yeah uh hopefully they don't take me out back and shoot me because they are Russians but um these are both the same exact company and it's the same guy and he like will just take your money and run and I had to do charge backs I used in American Express which has really good charge back coverage so I was able to recover the money that I lost for my $3,000 budget because I was just trying anything I could I was like I just want to show this guy I can crack his password so I tried buying the Elkom soft software didn't work you know I had a brand new GPU in there and says I don't see your GPU so if you're thinking about using these services I'm just going to go ahead and say that it's crap it's rubbish so if you're thinking about it or you already purchased it get your money back and if you're in the room guys sorry your stuff sucks so the best thing I suggest is like a local box you can do the Amazon web cluster and this is how this works in my mind if you got 10 days on your hand to crack a password and $3,000 just buy a local box if you don't have 10 days you need to have it done today you do that vertical versus horizontal thing you know vertically it takes 10 days to crack a password or you can just spend the same $3,000 and go horizontal and just get a crap ton of GPUs at Amazon and have them all cracking simultaneously and you can have it done in about 23 hours it's going to be the same $23,000 or $3,000 the only difference is on a single box you did that once and you can keep doing it again and again and again it just takes 11 days for eight passwords as opposed to like I just have a project and I just need to crack something and move on with my life and I'll never crack a password again then I would say just use Amazon but if you're going to do it for you know checking the strength of your employee's password like I have to you get a single box and we'll show you what my box looks like in just a minute and we said distributed non-existent well according to crack me if you can it will be existing pretty soon and I want to work with them to do a chrome slash firefox extension so you can also do like distributed storage of cracked passwords who I don't know about that there's a GPU CPU distributed password cockier called Durda I don't know d-u-r-d-a-n-e-o okay bit weasel is questioning your authority on this subject I'm not aware of this is it actually still developed we'll talk about that offline don't forget there's a track 1 Q&A so I'm just droning on I'm sorry if you want to know more details we can get into that in the Q&A my thing says I'm good on time but I'm still a good on time where are you goon that's supposed to be monitoring me 17 minutes okay oh here's like a really really I don't know how well you guys can see this up there I know it was like really scrunched and everything but what I went ahead and did with my budget after I cracked his password he gave me a bigger budget was bought a shit ton of GPUs just to see what the actually efficiency of every single one was against the CUDA multi-forcer that bit weasel did and I also did some just basic crunching so if you look at this this is this slide is in your cd and you can actually go on to our website once it's up cuckoo's nest.net it'll be live in two weeks you can actually get the live latest updates on this this actually tells you you're banged for your buck so in the very bottom right corner there you're going to see those gold things that's your banged for buck for either keys versus dollars keys versus core keys versus memory and all a key is is a password like we just referred to it as a key but that just means a password that we tried and it worked or it didn't work silver is second place and bronze is bronze third place so that's kind of how it breaks out and these numbers actually are always I tried to do bleeding edge these numbers change so frequently because new egg and Amazon and and fries are always competing and trying to keep the prices lower and things changed dramatically but at the time of these slides made about four weeks ago this was the current dollar amounts for each of these GPUs and the efficiency of each one so right now if you have the ati hd 59 70 which I think is in shortage like a lot of people didn't have it anymore like everybody wanted them for bitcoin generation that like they just ran out of GPUs so if you can find one that's actually the most efficient one the biggest bank for your buck with the OCL hashcat and maybe that'll change after I have an offline discussion with weasel over here and he's all working in open cl currently very good so we'll get back to that so this is what sandisk is going to do and this is what I submitted to my cio has a good idea so what I told them was how would you like to have a computer on the top 100 of the top 500 supercomputers and he said what were you going to save me money somewhere else before I give you this budget so I ended up saving him about $225,000 on our pen test by going with a boutique shop with some personal friends of mine so he's like well you save me $200,000 that's clearly not $200,000 you can have that money so hopefully by December we'll actually have this live and working and I'll actually be able to show you this live I'm going to do a VPN in maybe from Shmucon or something like that and actually show you 80 GPUs cracking 150 trillion passwords per second for $52,000 so yeah the GPU count is 40 but that doesn't it's actually 80 because like I said before the 59 or the GTX 590s are two GPUs each so yeah so actually it's 136.8 trillion passwords per second is what we have but if I can work with Bitweasel and get that more efficient maybe we can make that faster and it's actually going to be I know I just told you guys ATI is the best bet but it's going to be NVIDIA simply because we want to put this computer on the top 500 list just to be assholes and the way to do that is with LinPak and LinPak only supports CUDA GPUs which means you have to use NVIDIA unless somebody wants to write me on LinPak for ATI cards then I'll go with that that'll actually bring this cost from $52,000 down to $38,000 for a top 100 super computer I'll pay you if you can save me money I'll actually pay you the difference just to make it happen so I have no problem throwing money at problems okay remember if you were here for the beginning I am a CISO so if I can't figure it out I'll put money on it either hire somebody or do outside development just to get it done so that's the problem you have when you have like a former black cat now running the show where if he can't figure out the answer he's going to find somebody who's going to figure out and pay them well to do it so just keep that in mind if you have some gigs and you want to pitch something to me if it sounds like a good idea and it makes sense for Sandus to do it I'll pay you to do it and you know you can take your credit but we're going to totally enjoy the fruits of your labor and then later we'll open source it because you know it's my call so so not to spin my own wheels but you guys do finally have one of your own in the hiring ranks of a Fortune 500 company and I'm going to abuse my power until they kick me out all right moving along so this is the brute force calculator so I'm going to do a I'm going to switch over to the brute force calculator here with my really awesome screen resolution so this is also on the disc if it's not just ask me and I'll get you one and I have the latest numbers here so this is what I did a cut and paste of but you can essentially this is totally ripped off of some site that did this and I just retooled it for the latest numbers which you can say is I want an eight character password what's my time to live if I decide to use an eight character password and it's 10 days so you have 10 days with uh let me show you the current costs down here $2,000 it was $3,000 now it's $2,000 if you don't think your password is worth more than $2,000 just have it be eight characters because it'll be cracked it doesn't matter what it is whether it's ntlm or md5 or shaw one or even shaw 256 because it's just cracking passwords it takes about 10 days and $2,000 if you have an eight character password and like I said you can do it in 23 hours for $3,000 with amazon web cluster what? this is 92 character set so anything that's printable on your keyboard period is it the crazy ones where you do like an alt shift special character no who's doing that nobody okay 0.01 percent 0.01 percent and congratulations you defeated my thing but for the rest of you jerks in the audience which is everybody else you're screwed if you're having it so think about your google password think about your paypal password if you got eight characters and you say well you know it's google it's paypal it's all these other people gawker got hacked two years ago december january december 08 january 09 google admitted that they had a problem and some of their gmail accounts got broken into that's why they have two factor authentication okay so if you think that all these places especially yahoo i know the new ciso over there and let me tell you make sure it's over eight characters okay sorry justin so just think about any of your passwords 10 days that's what your password is worth at eight characters it's done with now here's the surprising thing because this is a password calculator i can type whatever i want into it nine what does that work out to be anybody can guess there's 10 days for eight i got two months one year 10 days no surprisingly just adding one character is 2.6 years this is not a linear thing this is an exponential thing so just adding just saying okay i can figure out one new character to rememberize just saves your ass that much more so guess what at sand discs since i'm still trying to train people before we go to passphrases everybody's required to have nine characters you know yeah it's one more than eight and everybody thinks it's superficial you know the proof is in the pudding 2.6 years for $2,000 now of course if i throw more money at it you know like say i don't know $52,000 that number will go down right so let's look at what that number goes down to $52,000 18 days just to remind you guys the number two supercomputer on the top 500 list is a Chinese supercomputer with GPUs and let me articulate my voice a little a Chinese supercomputer is number two on the list as of two months ago it was number one the Japanese took over so the Chinese are getting your eight characters and your nine characters supercomputer status in less than a minute so let's revisit that discussion about two-factor authentication right and that's why we're here that's the whole point of my talk is I got yelled at Schmucon during the panel that my answer to everything was two-factor and they were saying it cost a lot of money let me remind you PayPal does it for free USA does it for free Google does it for free your company already has it are they sharing your tokens with third party vendors in a secure manner federated passwords right open ID all that stuff are they doing that to make it happen so that we all can move to two-factor it's just in the age of Chinese espionage you just have to have two-factor that's just the way it is whether you work at a private company whether you work for the ACLU you know whether you work somewhere else that they care about your stuff you know you just have to have two-factor that's just the long and the short of it anybody want to see what my with Qualcomm's 12 character looks like I think it starts getting into galactic years so qualcomm requires 12 characters oh do they require it yet you two guys over there I know he was talking about it and I was like wow what a jerk 12 characters start inspecting people's keyboards now so you see it's all pounded out here already right so it gets into 0.01 galactic years and yes for all those concurious galactic years is a legitimate thing but yeah it takes 21,000 centuries that's a long time and how about those supercomputers in China for now you're okay but if you haven't noticed with GPUs in the high-performance computing realm these days guess what you know like five years ago we were only doing one petabyte as the number one computer we're now at 320 petabytes or not petabytes petaflops thank you peta- we're at 120 petaflops per second as the number one computer so in just five years we've just more than a hundred percent growth in that field so how long do you think that's gonna last so we have to start thinking about things like better salt two-factor authentication that sort of thing I'm running really low on time if not out of it five minutes I don't know if how many more slides I have I'm just gonna buzz through these real quick yeah we had a pillow fight instead of live demos if you really want to know more about it oh NTLM is dead if you haven't heard so if your active directory domain administrators are still using NTLM to do federated passers back and forth throw something heavy at them preferably a brick and tell them to move over to Kerbos so yeah and let's learn from Gawker, Sony and others you know or how I got F'd in the A with the D right you know I mean that's like that's not even federal prison I mean that's like burrito up the aspect Mexican status right there so um so I mean you gotta really think about it you know Gawker I mean the guys that just pwned everybody and Silicon Valley got pulling themselves so how many of you shared that password with all your other passwords and you don't have to raise your hand just think about it in your head how dumb you were okay so uh Sony you know we all had our PlayStation online accounts we can all admit it you know they said your credit cards weren't stolen they were stolen come on let's not joke ourselves your credit card wasn't stolen but you get one free year of credit monitoring service but don't worry it wasn't stolen okay and I do have some buddies over there and they can eat a bag of something a little sidebar on that like two-thirds of their security team actually got fired over that because when they came back online and like 30 seconds later they got repwned and they're like oh okay I get it you guys are all fired you know so so think about that when you guys got on for a minute change your password to the secure password that got poned again that you use for all your more secure things you know so I mean that's really my big push for two-factor so definitely like try and figure out multiple passwords and this gets into the thing of password safes use a really good password maybe even a two-factor authentication password for your iron key or other technologies that are out there and then you can have some unruly 32 character long special character thing that you can cut and pay somewhere else as long as you're not using that password to get into your password safe for all this other stuff it makes a better sense to do that and if it gets poned and then there's these public lists that people can GPU password crack like Gawker and Sony you're not gonna be that idiot that's got the eight character password right so no offense I keep on calling you guys idiots and you came to my talk and we just talked about that salting passwords I was gonna do a what do you call it Conan O'Brien there it is yeah I practice that all year just to not do it so we will say as far as that's concerned like I said supercomputers are only as exponential as we're seeing with GPU password crack with the the complexity of these passwords so really think about that as far as what your passwords are what your password policies are even if you're an individual contributor at your company you can still come back and say here's my password calculator don't listen to me because I'm just some schmo that you don't care about that's just doing all your current work listen to the calculator you know it doesn't tell any lies if you are a mover and a shaker in your company make it happen you know start doing all these educational things show all these slides to the people in your company and say no this is how you're F in the A with the D you know and I'll be quite frank with you guys like this is a Sandus Clyde I had this conversation with the C level staff there and I did not remove that out of this slide I told you know the CIO he's gonna get F in the A with the D if he doesn't change his policies you know that's how serious I am about it and my point of coming up here and just babbling onto you guys is to kind of make you just as serious as I am quantum computing when that happens we all can just pack it up and go home right so if you're not two-factor by then you're just F'd like seriously I don't even have like a clever witty thing to say for that you know I mean you're just gonna have just like a Bukaki Fest like 24-7 just like in and around your mouth okay so my fiancee is just looking at me like you did not just do that so yeah so think about that and that's any second now right IBM and Toshiba and Samsung are like on the verge of quantum so think about that conclusion questions and answers I think sorry I can take am I out of time already am I a jerk okay I can take one question and then remind you guys that there's a Q&A track one near here and you can ask me a bunch of more questions sorry that I just kind of carried on so who's got the first hand for a question that guy right there stand up what's your name okay his name is Skunkworks apparently because he can't listen to me Skunkworks what is your question application specific integrated circuits you're talking about FPGAs so integrated circuits is very similar to FPGAs it's the same thing as GPUs because you're making a purpose purpose built embedded solution it's getting I think the costs right now are prohibitive for that but later on oh yeah yeah thank you very much everybody


Yo, what's up? I'm back second uploader today here on the channel. I think the way I'm gonna do things sometimes I will double upload I'll do one of like a compilation video and every once in a while I'll do like a single person react and highlights and today we talking about ISO Joe I don't know why I saw Joe Joe Johnson popped up on my timeline today And it was just like this one 10 second clip and I was like man I got to rewatch a bunch of Joe Joe Joe Johnson highlights because I haven't seen them in a long time in so house of highlights put together this whole 11-minute mixtape for Joe Johnson when he was signed with the Detroit Pistons and I think later they waved him But either way Joe Johnson it from my memory is one of the best His name is ISO Joe for a reason if it was 101 you were on the island because even though he wasn't fast He broke you down and he gets so many cluts buckets in his career and everything So here we go leave it like and also tell me a different individual players You want to see me react to highlights of don't always have to be LeBron Coby you know the best of the best it can be like these other players that maybe be forgotten about or some of y'all may not Even know how good Joe Johnson was so let's give to it a lot of these highlights will be completely new to me because even though I've probably seen him before it's been a minute since I've seen Was that Leon po? Was that Leon po getting his ankles taken? I'm sorry Somebody's highlights is probably years and years since I've seen them, but that is your young ISO Joe We're going to see highlights of him in Atlanta. We're gonna see Brooklyn We're gonna see a couple different places and that is Leon po cross him so hard He almost fell himself and that's a late-game bucket And Lana's kind of poppin. This is like a little like a playoff game But I wouldn't be surprised if it was a super important game of the season What do we have 40 seconds left Joe Johnson with four seconds? What are you gonna do? He's being hounded That is the dagger over Mo Williams.  That's game another late-game situation down by three double overtime step back count them Count them the man was electric man ISO Joe one of the literally one of the clutches players a lot of these highlights will be him hitting game winners Go ahead and game ice or so far. They've all been game winners or going into overtime shots That's just what Joe Johnson did man Calm cool collected didn't even react like like nothing and later in the game and overtime 22nds left Cut it out cut it out. Joe Johnson just did it and he's so calm and collected. I Mean, I don't he better show some emotion in these videos one second left Game over We are a total of what two minutes into this video and it has been strictly game winners go ahead buckets a game Isers that's just what he did man. I'm sorry. I've said it a month, but ISO Joe was really that cold-blooded That cold-blooded I wish he was still around, but obviously father time doesn't sting D-Rose don't jump that gives them the lead and I'm guessing they win this game against the Bulls. I mean, that's a good Bulls team, too All right, so now they all bat in and now he's just mixtaping Paul Pierce. Come here.  Ah That is crazy, man So next are we still in Brooklyn? This is OT Three seconds two seconds straight to the basket. Okay, I'm gonna pause this one This one is probably the most impressive game winner so far because you have to have the mental clock, bro When he gets this deal What was it when he gets this ball? It is four seconds left He has to go to length of the court a lot of people will probably pull up because they think that they have one second left He got the perfect shot. He got a layup Well four seconds left he goes down court and get a layup for game and guess what calm cool collected no reaction No reaction Joe Johnson, bro Real real hoopa. Somebody's Brooklyn teams. Most of these Brooklyn teams end up being pretty Disappointing honestly Because you know, they made all of trades to get the team really good and then they never ended up being super super good But he looks at the rim here and that is another tie game because Joe Johnson at the ball This is the series This series was amazing and if I'm not mistaken this was this game went to triple overtime Because game went to triple overtime and they Robinson ended up getting us to win They Robinson took over the series and went all the way to seven their roles was injured So we needed our backup Nate Robinson and Nate Robinson came out and he played hard and played well another OT game double O team taste shot Prince Mmm, and you know taste shot Prince is one of those defenders now in this he's pretty old But taste shot Prince was always a good defender Shifting them and that could have been a they could have been a foul because he had given the landed area Another one down by three Honestly now that I'm watching this I didn't know he had this many I didn't know he had this many big-time shots I know he was known to be a gold-blooded killer, but I didn't know it was this many and this is the same game To go to OT and to win the game I don't remember how many time all-star he was but obviously it wasn't enough. I got to look it up right here right now Joe Johnson Geez man. I saw Joe was this cold-blooded I saw Joe's this cold-blooded He was a seven-time all-star that makes sense seven-time all-star in his career And he played for about 17 straight years. I don't know longevity So now we ain't really just going with game winner. So we just got him being hot Hot hot Shot to Paul Pierce man It's crazy That's like the sixth. How many hit how many shots of the hit? Oh My god, see I have not been in the arena where a player was he checked like this yet I've been in a lot of NBA games, but never when a player was he checked like this 9 3-pointers is it's gonna be 10 That's great defense Like that is heat check moments y'all I Need to be in a game like this especially at a home game when it's my team doing it 10 3-pointers right there any smile that you heard the commentator any smiles for the first half ever It seemed like four seconds against okc Surge on them, you know, sirs are pretty good perimeter defender. That's good defense from surge better. Oh Sometimes the old beats the D and that was a situation right there game when it oversurged Like that's amazing defense by serves a shot gets off by this much Going into the fourth quarter big shot right here. Oh My god nerfs. Oh my god, I've never seen that one before. Oh my god nerfs. That's why you got traded later this season. Oh my god That's crazy. And then the same game at some point at some point y'all At some point you would think that teens would be like, you know what We're gonna triple team Joe Johnson. Don't even let this man get this get the ball to get a shot Okay, double overtime game right here And you know who the ball is going to on the island you're on the island. They bring a double team don't matter over over any reaction He jumped a little bit, but he ain't even super happy. That's a young Bradley build to My father Bradley will eventually hit those same type of shots, but not yet not yet. This is early in his career Wow All right, we're in the playoffs game seven they up bad almost double digits that'll make it double digits right there Did he take over the fourth quarter in a game seven? Yeah, it looks like he did. Oh, man See, this is why I'm glad I'm here because I get I've always known Joe Johnson was a bucket But watching the highlight to get and make you really realize how good of a player he was That's a big time shot Nine in a row in a game seven come on man's winter go home and you're not you're not at home either Makes it a little bit more valuable when you hit shots like that What else we have five point game two minutes left game seven Terrence Ross trying as hard as oh my god, that's so that's it seems so easy, but I promise you that ain't an easy shot to make That's not easy play to make Joe Johnson killing it Okay, down by one Brick Lopez all tablet score and Brooklyn that's history Joe Johnson 10 seconds on the clock J.R. Smith a good one-on-one defender Got did it. No got did in there. I saw Jerry Stackhouse on the sidelines Those teams were kind of fun, but like Darren Williams then live up to the potential After the after date he got there did I see KG and Paul Hello, Chris Bosh don't reach because when you reach He'll teach Obviously Paul Pierce said KG were super old around this time So you needed Joe Johnson to be that guy and he was that's a three seconds left on the shot clock That's a big time shot right there. It's a big time shot Allen. Oh my god It's a lot of players that I haven't seen in a long time in these clips Wait wait go back. Oh That was smooth shout out to Jerry Jack for finishing that with the floating. That's a smooth one right there That's a smooth Jerry Jack he finds a guy and who is he gonna find deep tie game one and a half minutes left Joe Johnson I want somebody to keep an account of how many big-time shots his man hit in this video This is another one to go to triple overtime potentially right there a tie game Joe Johnson Just a bad man. I saw Joe. He had to have more than one nickname that I saw Joe right I've always just known him as I saw Joe Basketball references I saw Joe Joe cool big shot Joe armadillo cowboy Armadillo cowboy Okay, I guess That's a young Yanis look how skinny Yanis is in this clip now the man a beast Now the man is a beast You know what's crazy Oh, I was gonna say I don't remember him a part of the jazz But if I'm not mistaken when he was on the jazz He had a really big playoff game out of nowhere like at this point. He's old when he's with the jazz He's old, but if I'm not mistaken he had a really big playoff game a part of the jazz He only played 23 games there He had a seven points per game. So he was he's late in his career This is like the last year of his career And if I'm not mistaken he had one big old game And maybe you'll see it at the end of this video because it was like one of his last moments And I could be mixing things up because this is all off the dome. I'm looking at his playoff stats Here it is. Yeah, this is the moment. This is what I'm thinking about This is the moment. I'm thinking about on Utah Jazz He's a guy that does he's only average of 20 minutes a game for this jazz team and the playoffs is even less But he hits the game winner and game one as he 5c going against the 4c So, yeah, let me know in the comment section below other players. You want to see me do these one-to-ones of Joe Johnson, I think was a perfect guy to start off with honestly That's I saw a lot today and seen in a long time or if I've never seen so shout out to Joe Johnson


Uh, uh, wearables are an extraordinarily interesting and exciting category specifically with AI. I do believe that there are a lot of really interesting things that this could do. Unfortunately, I believe that it was just way too early to market. If you look at where AI is going and how much you're going to be able to do not only on device, but also with some kind of, uh, mobile data in the next year. I think that devices that we already wear up to and including the AirPods in my ears and the Apple watch on my wrist will be able to outpace their current functionality by leaps and bounds because of their access to AI. Unfortunately, sometimes you're the first one through the door and you're the one that catches the bullets and, uh, RIP humane.


As golfers we are often led to make decisions on what we buy or at least even what we try based on the way a manufacturer categorizes a product and in today's video I'm going to show you that that should not be the case and quite honestly one of these products does something totally different than what they actually suggest it should. Yeah in today's video we're going to look at two products from Callaway. One is the Apex UW, a utility wood with 21 degrees of loft will be the one that I am testing and I'm going to put it up against the Paradigm Seven wood which is again 21 degrees of loft. They're both aimed in terms of the player type as very different categories but what like I said I will show you in today's video we shouldn't pay too much attention to that in terms of marketing spiel and often test these theories out for ourselves which is going to be very evident when we get to SunTrack man data. Now before we get into the testing let's talk about what is different between these two clubs the Apex UW has got weight very much forward it's almost sits between a hybrid and a fairway wood in terms of the size of its profile and it's also got a shaft that is one inch shorter than that in the seven wood of the Paradigm. Now the Paradigm on the other hand is very much about the kind of more versatile club aimed at the mass market Apex UW aimed theoretically at the better player very easy to use very easy to get airborne it is like I said aimed at the masses both of these are non-adjustable. Now many long-term viewers of the channel will be aware that I'm very much positive and an advocate of these type of clubs in the bags of average golfers the reason for that is two fold seven woods for me offer a great deal of versatility out on the golf course they're a lot easier to use on the other end of the spectrum which maybe is a three wood because of the amount of loft obviously that's on them but then there's also that shorter shaft length which gives us a great deal more control. I think the kind of it's almost for me the standout product within the Callaway Paradigm lineup has been their seven wood and their heaven wood which again I've got very much a lot of similarities but some slight differences as well they've just got a whole lot of control element that just makes this thing so so playable very fast off the face not the best of swings there not too sure maybe a little bit here but that board just fires out there still launches the ball incredibly high and it's just for for the majority of golfers let's say unless you're playing it in incredibly windy conditions then this kind of club as a substitute for the long end of the bag or irons maybe in the long end of the bag is an absolute no-brainer that's better a ball flight is incredible descent angle will be incredible plenty of options in terms of the amount of times you might play this kind of club out there on the course and it can almost become a go-to club that you can lean on even on the tee if you start to struggle with your driver and lose a bit of confidence so I'll love everything about the seven wood in general but then this thing came along and very recently I tested out on the course didn't look at dry ball data and I played incredibly well on a round of golf out of portal championship course really love what this does now first of all why I like it is because of the the head profile it's very much like I said in between a fairway wood and and a hybrid this version again that I requested was the one with a little bit more lofty so I think it comes in maybe 20 or 19 and 17 degrees and like I said weight forward apex lineup is very much been aimed at the better player as Callaway suggests so this should be a low spinning utility wood now it's got a shorter shaft yet again and very much when you stand over the ball you stood over the ball looking at what feels like a hybrid rather than even the seven wood which has like I said I think it's 41 and a half inch shaft it's noticeably different when you stood over this thing so from a control perspective I'm sort of loving where I'm stood right now and I don't think that I have to do a great deal yet again just to get that ball up there high launching ball but from out there on the course and from hitting balls in here this morning I can tell you there's one thing that is very surprising about this club because I think that because of the category that Callaway have put this in many golfers would just wouldn't even try it go on their website and they clearly state this is aimed at better player and I hate it when manufacturers do that I just wish they just yeah just avoid that all together because like I said I think it sends out a real negative message on the type of player that is prepared to give it a go and you shouldn't because trust me there is not a whole lot to separate these two in terms of the performance parameters that we're going to have a look at with Trackman the one notable difference between the two in my opinion apart from the bit of control on the length of shaft head profile all those obvious statements the paradigm line up has a certain feel about it and a sound which is very very soft and very very different than any other club I've tried from Callaway before or any other brands to be honest with you this is a bit more traditional in that it's sort of got that sort of louder sound of explosiveness off the face and like I said not a not a big deal for many but it's something that I would certainly consider I don't know where you can pick that up that's very much what I'd expect to hear whereas I'm going to switch one more and hit a seven wood and you maybe just be able to pick up the difference between the two and if you've tried anywhere any of the paradigm line up then you'll be familiar with the fact that they've got a very different feel to them well I've just ruined that theory by catching one off the bottom so we'll hit one more that was a terrible swing hand trying to make swing changes at the moment it's affecting my data a little bit losing a little bit of yardage but that's better to be honest with you sound a little bit sharper in here in terms of internally acoustic wise than that then perhaps what I'd hope to but you certainly feel the difference but the real key element is the surprise when we start to look at that dry ball data today's video is brought to you in partnership with hotgolf the online golf mega store bringing you the hottest deals in golf and of course the club's featured in today's video find the link to the hotgolf website in the description below and check out some incredible giveaways and offers now before we get to that dry ball data I'd just like to hear from you and is my theory correct in that you would be guided by what you try when you go into a retailer a custom fitter based on the category of the club that's the brand they've put it into or you just pay no attention and try everything I firmly believe that a lot of golfers will avoid certain clubs based on what our manufacturer has said or who they are aimed at but I'd really be interested in your feedback down below so before I get into the data let's just state some obvious things we're expecting we've got a shorter shaft in the utility wood therefore we're going to generate a slower club head speed and generate less distance but we're also expecting to see because of that weight push forward and because of the Callaway theory that we are into a low spinning version of this kind of club and therefore spin is likely to be lower lower ball flight and trajectory and those kind of things would probably consider equal in each other out in terms of overall performance in many ways in terms of carry distance at least that is but that is not what I found during this testing and I'll put you up on screen as I always do the averages of the two and the first thing I want to talk about is club head speed they were 82 and 84 mile an hour respectively and that's very much like I said the length of shaft will have played its part in that then go to the ball speed 121 versus 125 once again will have an impact on the club head speed so that's kind of very much relative and they've both been very efficient in terms of ball speed versus club head speed then go back one into that carry distance and you'll see there is an average of six yards separating these two fronts back so pretty much as we'd expect at that point but then you skip forward to this element that I would be surprised about and that's a launch angle of both and the spin number of both because I would expect it to see the seven would launch in at a steeper angle I would also see it reaching a higher peak height and I would also expect it to be spinning a lot higher than that of the utility would but as you can see that's not the case 3800 spin versus three and a half thousand spin 300 revs negligible negligible in my opinion average launch angle 16 versus 16.2 so very very similar there a peak height of where are we peak height 84 versus 93 so certainly that seven would does rise up to a higher peak height and that descent angle a little bit steeper in terms of land angle 43.9 versus 41.2 now in my opinion the seven would it would have won that contest if you like in terms of all the parameters I would prefer to meet on a personal level and where I would see a seven would fit into my bag however the bit that shocked me is how the utility would didn't quite do anything like what I expected to do in terms of performance so I'm thinking I've got this low spin monster that's going to just zip out there really low it's going to be like I said low spinning low launching it didn't do that at all in fact when I was testing the two clubs I couldn't see a great deal of difference in terms of performance between the two obviously Trackman can give you a real accurate reading and that's where we've got this separation but it is very minimal so the bigger message is the simple one really about this video was don't ever be led by what a manufacturer says don't ever be put off by a club by a category that it's been put into this utility would line up from Calloway is very very playable and I do not believe it is all about for the better player I think it's a very versatile option to put in the bag and if you prefer that shorter shaft if you prefer the head profile then this is a real viable option to the others that are out there but either way these type of clubs are key to making your game a little bit easier in my opinion and put them together a more successful and a more versatile golf bag right that's me done nice and simple very much a lot of head to heads coming your way as per your requests if you've got them yourself stick them down below and I will do my best to get them in here with some data and give you some feedback and some guidance as to what I found at least in my hands right as ever thanks for watching I'll see you all soon


been a few years and they go on to the name of the notes. Is that just a name that was fired at me, Paddy? It sort of was, really, Paul, because there's like 24 or 26 people involved in the... The projections are... ...across the trilogy of albums. Like, in fact, I might be underestimating that a wee bit, too. We get up towards 30, we're all different musicians and sounders, you know, but... And what did you just call yourself collectively? Well, it was just, we didn't have a name, you see, because it was a various artist thing, you know. You could call yourself the notes from Derek, crew or the notes or whatever, you know. Well, layman's here as well, and Paddy, we're handing over. Jimmy. I'll roll back. Jimmy. How's that look? I'll boil Jimmy. Jimmy. Jimmy. Here, you take that sheet there, Jimmy, and could you write Jimmy where you wrote Paddy? I thought this was going to be handy to you, Paddy, now or never. And Monika's there. She's head of security. Yeah, she's looking after things. She's head of catering. Okay. More importantly, you're too close there for it. Come here, Paddy. It's lovely to see you again. I was delighted when you got in touch with us because... You know when you say when's the last time you were up? Most of it a couple of years ago. You forget about this pandemic thing. Absolutely. That went through it a couple of years, you know. Because it must be nearly four years now.  The same collective... Because my memory wouldn't be better. The same collective you were up with the last time. More or less. We come up with the very first album, the... The same dairy album. Yes. And after that it sort of went then towards more Irish folk stuff then. Whereas the very first album was a whole mixture of everything, you know. But that was a charity album, the very first one, you know. It was for... It was actually the match awareness. Ah, I remember that. That thing was for dates. Ah, come on. So we had a lot of people wanting to be united, you know, to be part of it. Of course. It's just me. It's all coming back to my head. Surely. I'll head that end. I'll feel good. The charity did well. Ah, great. That was the main thing. I'll tell you what. We're not going to... We're not going to... We're going to go stand in for a song party. And the first one you're going to do first. Well, funny, it's actually ties on with that whole topic.  And I had always wanted to write a song about it. But I got so involved in it that I couldn't even... I'll be honest with you. I ended up crying when I was trying to write stuff about it, you know. Then Eamon put up a wee piano piece that he had done. Just as a warmer upper, you know, an improvised thing.  How long ago was that, Eamon? About a year and a half. It was over a year ago. He did it, but he only put it up on Facebook about three months ago. And I listened to them one. I heard that. That sounds like a song. I heard that. So between his and we've come up with a song, you know. And that's... So the first one's called The Stranger on the Mirror. I want to hear it. And then we'll chat about it. Absolutely. Whatever you're ready for. Okay. Gets full of things to do and see But could you spare some time to bite a while with me I know that I may seem a little different to you But you're still the same to me My fingers try to play the notes they did before But though I try, they just won't do My bidding anymore And if sometimes it seems that I am not there Where I stand Bring me back is for you to take my hand So as my someone I could know He's older and he's graying Yet there's something so familiar in his eyes That summer's evening I skimmed me knee then Still scored the win and go I'm still the man I always was no different In the memories And my reality The same comes as Stranger Maybe then you can take the helm You can steer the ship forward Thanks very much. That was beautiful. Absolutely beautiful. Really, really. So that's the Stranger in the mirror. They're hanging on to the story there. I'm actually getting a wee bit emotional singing it there. Of course. Whatever it is. I'm not so understandable, but it totally is. Did you find out, writing out a bit of therapy? 100%. I think Paul, maybe that's why I always wanted the right one. I wanted the right one in memory of my father, but I wanted the address. A closure, maybe? Absolutely. I think I did that. And every time I tried to do it myself previously, I just couldn't. It wasn't right or it wasn't something that right. And then I heard him and we pieced in. I just knew that that was... Do you know what I mean in a strange way? It was meant to be. You know what I mean? I think so. As you're saying yourself, it was closure for me because it was something that I'd wanted to do. And it wasn't really finished for me. There I get this down in paper, I get something, but I couldn't come up with the right thing to hear. It's lovely. It's a full credit. It's beautiful. Absolutely beautiful. Thanks very much, Paul. Because I just imagine what you went through with that because it's awful. I think it's such a ubiquitous thing now, unfortunately. A lot of people could identify with it. There you go. We'll move on. Is that an album, party? That is only out as a single, just recently. Spotify, Amazon, iTunes, all the usual. Absolutely. And it's called The Stranger on the Mirror. We look forward to playing that again here and on the show. The two albums that have been front of me here, Stories of the Land, and tell us a bit about that one if you don't mind because there's some great tunes in it as I'm looking for. There is. What we did with them, Paul really, was we wanted a mixture of original and the older stuff, but what we revamped it now, it's their contemporary wagons, and some of the people playing on them are just fantastic at the world-class players. You know, there's the Kierlin, Stephen O'Kierlin, Kieran Kierlin. We're Robert Peoples in the fiddle way. I'm saying names now and I shouldn't because I'm leaving people out because everyone is brilliant, you know. But the Stories of the Land album was actually almost a double album because we get so far on it, we're only doing ten songs, now we've done eleven, then twelve, and I think they've ended up eighteen on that one, eighteen songs. Who's the lead pin in the front of us? That's, I don't know, the artwork on them, just as well, you know. Very nice. The funny thing about that, we had somebody engaged to do the artwork for us and they had a dilemma at home and they had to do something the night before, so that's what we did. That's a point, let's say it. That's the story there. And is that available working people? Well, I say I just have those at home because you know yourself, Paul, everybody is streaming and stuff now, but we do have hard copies of Stories of the Land. And is that available online? It's available at the Big Cartel. Really they'd be as well just contacting me if they wanted it. Well done, there's like... I think there's about eighteen on that, isn't there? That started off with ten songs. And there's some lovely ones there. My last for a while, is that the... Was that Monica singing that one? No. No, that's an Irish one. That's an Irish one just by their own. It's a boatman, beautiful. That's Oshin. Oshin would be Tommy Quigley and Geral, Dominion and they're Irish, but we've sort of we've contemporised that now. We've put electric guitars on there and that. We're not happy about it. But we've contemporised that. Making it sound relevant is important. That's the thing, Paul. We don't really want to be copying, you know, sort of the way you're normally used to hearing the thing. You'll pick up a fresh audience doing that. Absolutely, yeah. And the Heritage Legacy album. Yeah, that was the third in the trilogy, the Legacy Sessions. Well, I was going to say is it all original, but I'm looking here and it's not. I'll hold ones and new ones. And of course, I think Gabby was on me a few times. I think Gabby could sell. Gabby's all over these as well. So Gabby's playing on them as well. Pure class. Oh, absolutely. Top class players, surely. Kieran said, could you play Binge Wing? Binge Wing. We'll see how we get on. We have a playlist, Kieran. But thanks for getting in touch. Absolutely. Are you gigging much part of it or what way are you? You see, we're all different. You're playing bass with Floyd Showman. You may be playing guitar. Both. Originally way back. Emin, of course, does his own thing. Absolutely, everybody. Emin, like myself, is his own recording. Sweet, you know, at home. So myself and Monica plays there in two piece and a three piece and we had a six piece going.  Obviously, part of the pandemic shuts things down for you. He's done online, didn't he? We have, well, myself and Monica and my friend Mark, Kieran were under the name Jigsaw on there. Yes. We did like 36 fully produced videos and stuff. They're all on YouTube, you know. So anybody, if they wanted to see them on YouTube, if they just type in my name and type in the word Jigsaw, they'll all come up. And you had to do that, hadn't you, because... It stopped me going.   So it felt very much for artists, you know. See, we were the first out in the last pack and again. You know, the hospitality sort of went first, but the first thing in hospitality was the music, obviously, you know why? Because people stand up on tables and shouting, or whatever they do. Oh, I know. But anyway, we're here where we are now and hopefully it stays that way. I think you're busy out in the gig and seeing it. We are, myself, Monica. We're called the ragamuffins, just the two of us out, you know, myself and Monica's my wife by the way. Oh, I know that. I've seen the way she's talking to you. Definitely. She's sharp up on there, I thought to myself. So we're playing away. You know, just around the bars and hotels, around there, you know.  Oh, absolutely. And any nights that I feel like, you know, you're feeling it's a bit coldy, go out and just remind yourself about COVID-19. That's what it puts manners in you, isn't it? Martin Stewart says, good interview, guys. Well done, Potty and Emin. Thank you, Martin. Thanks very much, Martin. And Emin, I'll go to you. You're busy or you're...? I'll say again, though, thank God, after the whole lockdown kind of thing, so... Ah, you're already out? Oh, no, it's just a whole mission. Hi. Hi, Kepp, Bussy. Hi. Paul, thank God, I started going in the studio there, and then I'm working on the material of my own, too. Oh, yeah? Same time, too, so I'm kind of a... What's up? No, I'm just trying to tackle him. Oh, yeah. There's nobody listening. No, I kept going. Paul's flat out, I'm deaf and out, just coming in and recording albums with a couple of different people and it's just, it's flat out, thank God, it's great. That's good, it's good, yeah. And then, I've put together a load of piano tracks now, too, for a new album this year, which hasn't been released. Solely piano tracks? I wanted to strip right back to me, which is a piano player, and tick out all the strings and orchestras and stuff, and I wanted to record a solo piano album, because there's been a load of tracks, especially over lockdown and even the last year or so, different events have sort of triggered off different melodies and ideas, so these have all been... That's a different sort of thing, isn't it, than songwriting, because, well, I know it is, obviously, but you're picking up tunes more than words and stuff. I was, I, when I was trying to capture that emotion, the way a songwriter was writing words for an emotion, you know, after trying to capture it in the melody. Very good. And to me, it's the colors, it's different colors and different shades, I use the capture emotions and different chords and layers on the piano, like what, that's how you build up tracks. What does that say? And they're always, at the time of substance, something happened, or an event happened, I would always kind of sit and get a melody on the recording of the piano, on the phone or something like that, and then after a couple of weeks, I'll go back and build it up the final melody. You'll come back up with that, won't you? Definitely. Oh, the door's open. The door's open. It was down with you, very often. It was, I, I didn't record in the way, and they were snap size. Oh, he's, he's pretty nice, great, great man they work with. Talk about him there, he's just said, what a beautiful song he didn't sing. Oh, good song for you. Thanks for everything. All right, so that's good. I mean, long made last, and if people want to get in touch with you, you're on the socials as well, aren't you? On the socials, I'm on Facebook here, I'm in Ciaran, or else you can get it through Live at the Alec on Facebook. Brilliant thing. There's one that posters up a strong road, too. There's more information, I thought you sang well. But anyway, no, brilliant. Thanks very much, and, Jimmy, we'll go to you, and Gordy said, oh, they're talking to me about you. How's things for yourself? I'm not too bad, no. Tell me, are you out and about much yourself? No, I'm not. The last time I went out to gig properly was 2019, everything locked down then.   Well, you enjoying that? Well, just down the studio, we party. It was just dead on. We released that note from Terry, and then everything was locked down afterwards. That was it, Terry. Great, man. Well, sure, you're enjoying it, aren't you? Oh, aye. Well, listen, Monica, you don't want to talk to me, don't you? No. She goes to get her. Mr. Force, Ronan McDonald was on, said, Mr. Force, few minutes, folks, that's some of the best musicians about as Ronan McDonald. Thank you, Ronan. Can I just say one thing about Ronan's behalf? Ronan was the executive producer of all these albums. Ronan cajoled me, and they're doing the very first one, and the rest snowballed from that, and it was Ronan, I have to say, that really got the crew together at the start. He was going, we need a fiddler, we'll need whatever, and Ronan's over in Scotland. The minute you know about that, he's very important for me. He's the executive producer, sometimes he can be hard work. I have one here, you know what, I'll ask the God and help me. I go home at night, the way he says, what's that slap in the back of your head there? Don't chat to me. He's had it the night he gets banged. No, that's good, fair play, Ronan, well done indeed. What's the plans going forward, have you anything lined up? Well, I actually have an hour or four or five songs from the Arts Council in Northern Ireland, and of course, well, we didn't get it. The Fountain doesn't come north-west very often. No, it doesn't, it's just like everything else. So, I better not say too much about that. No, but you're right, there's no point in saying it, you know what I'm saying? Not very much comes up. Even there was a headline actually on the Belfast Telegraph there in August, and it was saying how Belfast got 11 times more arts funding than Gary and Straban, and they've only got three times more people. So there's something that right there, like, you know this. That's awful, isn't it? But what can you do? You know if they tell you no, then. And you know, like we were just talking about it there, we mentioned when Tom, we was on, we just mentioned the quality of artists and the music and these parts, you'll know it yourself, but we had the song contest on here. Absolutely, I've been following that, that's brilliant, absolutely brilliant. And there wasn't a bad song on it. It's the biggest belief at times, you know what I mean? It's just shame on everybody's not pushing for it if you're in their place of authority, you know, you should be pushing for it. You know, these musicians and yourselves, you're keeping us entertained, you're keeping loads of people entertained, and it's only right that you should be supported in every shape or form, and as I say, shame on them and aren't doing it.  On that, Ollie Green from Studio 2 as well was very helpful to us in doing the albums, you know, he gave us any rehearsal space, he gave us any facilities we needed, he supported us, you know, but he's an org guy like yourself that really believes that the North West should be...  That's was the whole point, that's exactly right.  I started playing, see, 43 years ago, Paul, and I started playing with a band and we only played in Donegal where you'd done your waltz, your quickstep, your foxtrot, and you kept that thing going but it's a lot of those older songs, you know, when you listen to them they're more mature years later on, you know what, that's actually a good song. There's great words out there, there's something on it. You know this, that's what I called two mature years, because artists I wouldn't have listened to and I don't know why they didn't listen to them in the 70s and 80s and stuff, yeah, I don't know why.  The next round party. Well, we have one here that I wrote that's this was, this one actually came about from I was looking up a wee thing about my name in that and I found a reference an artist that was in Derry in like 1647 or something, they got in his name with John Nixon, the same name as me, Fowler and I'm going, jeepers, what's that? But it was just a print, you know, it wasn't obviously an oil painting, it was a print in the end as you know what, yes, whatever they call him but an etching, so I saw this and it was just a Fowler and his son overlooking the Fowler and Derry before it was built up and it was just farmland and so I actually wrote this one about that, that's about a man got a girl here, do you know the words? One of you, whenever you're ready. And that's on the CD as well, this one's called Bag the Derry again. Lovely. Okay. Okay, let's one, two, three, one, two, three. Sorry man, they're on key. Yeah. Sorry, I'm backing me up on key. Probably weren't. I was going to sit here. I thought, I thought clicky keyboards was a way again there, it's a way to look. How clicky, Karen. Do you mean that? Got a drummer on the keyboard. Okay, one, two, three, one, two. In my younger days by the hearth my father regaled of great ships and great places from Derry, those great ships would sail to streets lying with gold where a man could grow old without sweating each day for the land and fortune befriended the men who attended their plans years in the toil and the devil's own blight took their toll and the bard cried as he saw his children indentured to land and to places the rains never been with a promise of fat shore their heads but for most was the last time they would brush Derry's head the call and the crack where we freed the spade the warmth of your friends still remains won't you take to Derry again by travel do each day for the man by Atlantic wash to your conal sand move of the oak by me father's rough hands till the soil to Derry again father's green farm and it still lives and wants not but a father's son's hand even has made me it just can't dissuade me while sick quarrels not with me bones these where my life's best dreams are so my seat by the hearth still remains to Derry again absolutely brilliant see on the album that's actually been sung by a brilliant singer and Derry called Brian McFadden but I couldn't bring everybody down to sing all the songs so I was lumbered about it I'll tell you what a brilliant version of it and a lovely song well written cahill page well done potty and lads good friends of ours and Kevin Dunleavy said the notes from Derry and Emma McDade said looking good on camera now monica ha ha ha ha ha we thought you said you didn't think she was on camera and Margaret O'Hare oh no cahill page said Margaret D'Hare D'Hare and Mark Brown says and Pharras is that right Pharros my heiress is crap and Mark Conaghan says brilliant folks well done to you all that's a pure clap that is brilliant thanks very much everybody lovely song so buddy where can people catch you this weekend of year about the boss here normally does the day right we're in da Vinci, oh party stage sir that's party stage again right and there's a two-piece in da Vinci's hotel there and Derry, half 90 12 or whatever it is on Friday Saturdays Derry Saturday Club that's how it is this week we'll need the rest after that aren't we are you enjoying this oh absolutely Paul there's even an odd time there you know we were off a weekend there about three weeks ago wasn't it and it was like what's going on you sort of think you're going to forget how to play a guitar you know but that's good and it's good to see that you're joining us as the main part do you throw in your own songs into the mix when you're gigging playing in the crowd I mean mostly we're going to do standard songs and most of the stuff I write is sort of like I receive folk you know that type of stuff so it doesn't necessarily go down everywhere you would play although we do an album on there in the hotel and stuff you know we just drop it on you should do a night of your own somewhere we've talked about that you know too it's a great venue, it's a courthouse in Lifford so we're here we're going to see Tommy Bohn and the strawmans playing on it next Friday week, looking forward to that I would say you could just be brilliant there we've talked about taking a crew and certainly the guys that I'm talking about there Gabby and Robert Peoples all them people I'm sure they would all be up for it that's the kind of venue your music I just could imagine no don't get me wrong there's equally as good and dirty if not better I just love the whole acoustics and anybody you're talking to is playing on there they love it as an artist so we're going to get a final song what would the I'll thank him, he's going to play one for you I'll tell you if you only play one there after this break don't go away if you smell gas at home or on the street don't ignore it open windows and doors don't smoke, vape or use a naked flame don't unplug or switch anything electrical on or off turn off the gas at the meter then no matter who your gas supplier is call Gas Networks Ireland on eighteen hundred twenty fifty fifty visit gasnetworks.ie to screenshot the safety steps saves them to your device and share with friends and family hello I'm David Forley, Medical Harvest are you suffering with dry, tickly sore throat? then try Irish botanical throat cold spray provide an instant relief for sore throats Irish botanical throat cold spray is ideal for public speakers or for those who talk a lot call it a natural way to let a Kenny shopping centre for more information welcome back and as I say, Monday night sessions and we have the notes from Derry and we have to say a very special hello to your granddaughter Sirsha, is out in the hard moor Sirsha, is out in the hard moor is she watching us? she's watching the livestream there I think Char and Leila might be in their bed we sirsha is sitting much in there we'll see if we can get the camera on there we'll see if we can get the camera on there we'll see if we can get the camera on there we're playing a request to granddaughter sit much in there we sirsha is there Sirsha, Char and Leila hello you better say there you are, Char and Leila and Neve and Eda too we better mention them we'll get home that's great many grandchildren I've seen myself all girls all girls, weird one it's a year old past now they take you to a different place they take you back you see me man you're in the lead what about you Jimmy five there we go no, here we go you're the real flounder okay what are you doing you don't want to go out great, come on ahead this one Eman, sorry this is a melody, it's one of the new ones this is the first time it's been played live outside of the studio brilliant it's called Treesluck and it was composed after what happened last October just to capture the whole sort of emotion and the whole tragedy and the feeling of desperation and the hope is we're all at the same time brilliant Eman it was a very tragic event this is Treesluck thank you that is brilliant Eman well done, we've got a great response here brilliant folks, well done Dio Mark and Daniel Daniel Donald didn't send him a request Daniel Blixer reads his hi Eman, hope you're all well Maggie Duffy says class we've got a great play on there Daniel said he sent Jimmy and Paul an e-mail error with the D song an instant spark, if we get it we will get Jimmy to definitely play it on Wednesday, Martin Stewart, brilliant Eman well played, sounds amazing, beautiful tune Kevin Dunleavy, beautiful Aidan Lerch, amazing instrumental force class and Bray McFadden says beautiful Eman, so well done listen, Patty and Jimmy and Eman and Monica, thanks for coming up I'm conscious of the weather on the road, continue success and thanks for getting on touch with us because it was just it meant a lot to see you again you know for us because we enjoy having you up and your song writing just beautiful, so Patty well done Eman and Jimmy thanks very much, Monica thank you as well, and that's the notes from Derry if people want to get in touch with you where can they get you, just stop in the street just stop in the street Patty, pleasure's ours listen, take care of yourself, thank you


Hi. My name is Kitel Gellick. I have lived in Arlington for about 12 years in Precinct 19, and I serve as a co-chair of the Diversity Task Group under Envision Arlington. I'm coming to you today to talk about Warned Article 25, which requests that you consider the reinstatement on Town Hall of a Black Lives Matter banner. And to recommend to the select board that they reinstate that banner, which they have removed. Thank you so much for listening to my statement, and I hope that it will be followed by a really open and productive discussion. Of course, I'm just one person out of so many who are advocating for this action, and I wanted to mention some of the groups and individuals that have endorsed this Warned Article. They include the Diversity Task Group of Envision Arlington, the Arlington Human Rights Commission, the Arlington High School Black Student Union, Arlington Helps Mutual Aid, Arlington Fights Racism, the Mystic Valley Chapter of the NAACP, and in particular, D.D. Delgado, an anti-racist educator and activist. Ms. Delgado is the founder and former director of the Black Lives Matter, Cambridge Chapter, and she was a featured guest speaker for the Town of Arlington's Black Lives Matter Day virtual event hosted by the Human Rights Commission this past summer. In addition, when the banner was removed from Town Hall, an online petition gathered over 350 signatures asking that the banner be replaced. And for this particular Warned Article 25, we gathered over 200 in-person signatures in just 24 hours. So I hope all of this shows that there is very broad support in the Town and in our communities for maintaining the Black Lives Matter banner at Town Hall. I also want to make it clear that I know that Town Meeting members are here to discuss this and to make a recommendation to the Select Board that it is up to the five members of the Select Board to decide what happens to the banner. So I just want to take a few minutes to address why I feel this action is so critical for our Town and some of the concerns that have arisen around it. This is a moment in our history that cannot be ignored. It is an opportunity to affirm the humanity of Black Lives and to denounce the ongoing ways that Black Americans are systemically oppressed. There is no Town or City that is immune from concerns over racial justice. In fact, these are basic human rights and Arlington has recognized that through its many efforts to promote racial equity. Those efforts and those values transcend any politics and must not be reduced to labels like left-wing and right-wing, Democrat and Republican, or pro-police and anti-police. Those are all distractions from the central message behind Black Lives Matter, which is a human rights message. And focusing on those labels are ways that people project their own fears and assumptions onto a banner that gives hope to so many people. Of course, our efforts to change policies make our schools more inclusive and bring our community together are all vital. In some way, that placing a banner on Town Hall would make us complacent or would somehow infer that the job is now done. This is not at all the case. We need to let people know that our Town in its outward-facing action matches the inward-facing actions that it is taking so that there is no ambiguity and that it's clear to all where we stand. Everyone does not need to shy away from making this public statement. Rather it needs to embrace it. Inclusivity is very important for all, and hanging a Black Lives Matter banner does not take away from that idea of broad inclusivity. There are many other marginalized communities, for example the LGBT community, who have all affirmed that this is a time in our history when we do need to center Black Lives. I also believe that a banner creates an emotional connection between the Town and its Black and Brown residents, in fact with all of its residents, and it lets them know that they are seen and are important and valued part of the community. And that goes for not only the adults in this town, but for all of the young people, the children as well. Finally, I'll say I was recently asked a question about a banner with different wording. You know, someone asked me could we have a banner that says Arlington supports Black Lives, but is not specifically a Black Lives Matter banner? And to that I would respond that as a white person, I can't really answer that question, because to do so would be for me to co-opt a human rights movement that I did not create. It's the voice of the Black people seeking equal human rights. Who could speak to that? So I give you that just as a point so that if it comes up in your discussion, you can think about whether an alternate banner would be appropriate and how to get more information on how to answer that question. Again, I want to thank you so very much for listening, and I hope that you will open your minds as you have this discussion amongst yourselves, and I look forward to listening and hearing more. Thank you.