Let's start a warm applause for the presenters. Hi, I'm Tiffany Rad and this is Teague Newman. We're really glad to be back in Berlin, Germany. We were here last year. Last year I was here in this room presenting about data havens and jurisdiction hopping. And after that I had a different kind of project I wanted to work on. We had a bit of an inspiration looking at... Everyone knows what Stuxnet is and this isn't a presentation about Stuxnet. A lot's been said about that already. But this Stuxnet was an inspiration, so to speak, for the work that we did. And we apologize that the slides don't seem to be working, but we hope it is because we really would like to show you the demo with our programmable logic controller we have. So when we get to that, maybe the slides will be working. It's toward the end anyway. What we're going to do is talk about SCADA systems and PLC vulnerabilities and correctional facilities. Now, we kind of focus this research amongst correctional facilities. However, we'll talk about at the end how this is really any type of facility that has programmable logic controllers or SCADA, and if that's connected to the internet, that kind of work that we've done. It applies to that as well. We're going to discuss modern prison design. And my father, John Straux, has designed hundreds of security designs for federal prisons and jails. He couldn't be here in Germany today, but he's on Skype. So we might lift up the laptop and turn it on so you can see all of you just briefly. But we're looking at him right now. He's on in Washington, DC right now. We're trying to get audio from him. Yeah, we're going to try to get some audio so you can ask him some questions. We're going to theorize possible attack vectors, explain ladder logic. So if you're going to be doing any research with programmable logic controllers, we're going to tell you how cheap it was for us to do this. We got our equipment off eBay, and ladder logic is a pretty easy programming language to learn. And we're going to recommend some solutions because that's really the reason that we did this type of research. I am so glad to be back here at CCC. This has been an awesome experience being here. We just kind of got off the plane from DC, but that's where our research was based pretty much in his basement. And I am also a computer science professor at the University of Southern Maine, and I teach information security, ethics, and law. So I teach my students about how to do stuff and then really the ramifications of how we do it and why we do it. I've studied a lot of different places. I spread out my educational background amongst universities in Europe as well, so I had a really good time doing that, and that's why I love coming back here. We've done this presentation at DEFCON this year, and that's my demo. Well, that's really about me. I'm going to introduce my father because you're not going to be able to see or hear him at the moment, he's the senior principal of Strokes LLC. He has been doing this type of work where he gets paid to break into places so other people can't break into places. He's been doing that for a long time, like 30 years, I think, or longer. He's probably going to say it's longer, but if any of you have seen the movie Sneakers that came out in 1992, that movie was based on my father and his company, and we still continue to do that. I mean, I grew up in a household really where we had like lockpicks and different kinds of fun stuff. We'd learn how things were vulnerable to breaking and then try to engineer better solutions. So that's how I got into what I do now. So let me let Teague introduce himself, and eventually I hope the slides come up so you get to have more visuals. Is this Mike Worken? Can everybody hear me? All right. So I am Teague Newman. I'm just a professional pen tester. I also do some instructing for core security technologies, but really, I just like to break stuff. So that's what I do. All right.  He is Dora the SCADA Explorer. He's a really good exploit writer, and he lives in Columbia, Maryland. Works for a private company there. And when we came in with our idea, he's like, yeah, I can do that in a really short period of time. And we'll tell you at the end how easy it was to really write this exploit. This is not a trade or what a lot of things you've heard in the media from programmable logic controller manufacturers. This is not a difficult type of project to do. And it's the type of thing that we're hoping gets their attention. This is about getting the attention of manufacturers. Hey. While we did use the PLC we had was Siemens, the type of exploit we wrote is not, it could work on any type of programmable logic controller. It doesn't have to do particularly with Siemens. So we came into this with the idea that the red team always wins. So blue team, they have to safeguard against half a million different things. We just have to find one. So we decided to present about this so that wardens in these correctional facilities would know about the problem because you can't really fix it unless you know about it. And also to kind of help these places get some funding to fix it if necessary as well. And once people understand what exactly is possible rather than telling them, hey, don't touch that computer. When you tell them, hey, don't touch that computer because all the inmates might walk out, then they understand. And when we're talking about fixes and funding, this is not an expensive fix to at least get the remedial measures in place. It's about training. When we did our tour, and we'll show you some pictures of what we did, what we saw. But one thing we did see the jealousy, a picture of is that one of the prison guards was there checking email and on Twitter and stuff like that from the control room on the computer that controls the PLC. So that takes training. I mean, that's not expensive fix to try to fix that up. So why don't you tell me the story of Christmas Eve? Hi. So basically at one point, John was called by the warden of a prison and it was on Christmas Eve and there existed a problem. All the doors had come open on death row. So this was interesting. Clearly it was not supposed to happen. It's theorized that maybe because of Christmas time, there was different power draws. Well, what it really came down to is there were a couple of different parts that were out of spec and something was leaking voltage that it shouldn't have and all the doors flew open on death row. The thing to remember about this is people on death row, they don't really have anything to lose. So it's extremely dangerous. So it started with Stuxnet and actually it started the conversation with a Stuxnet researcher here in Germany and another in the United States who actually they've taken apart the code, figured out how it works. So when I talk with them, I said, you know, what would happen if we could have something like Stuxnet on something else?  So we're like, well, let's see if we can do a proof of concept for that. So Stuxnet for correctional facilities. What if someone wrote a virus or worms similar to that as we mentioned, pop all the doors open on death row. And actually, since we've done this presentation, we did this at DEF CON. People have come up to us and said, I can't tell you who I am or where I work, but I just want to say this is really a problem and I'm glad you're talking about it because this guy was saying, and many have said I have clearance, I can't really go public with this, but I'm glad someone is because this is the type of vulnerability that people have known about for like 20 years. Finally, there's some other independent security researchers who are getting this out in the open and telling people if you work at these facilities, if you do this type of research, get the word out that this needs to be corrected. So introduction to correctional facilities and security designs. My father usually does this part, but we're going to split this up. Understanding really what a vulnerability is, you got to understand not just the technology like how to do ladder logic for the PLC. It's about the design of the prison. So we're going to talk to you about some modern prison design. And he, as I mentioned, his movie and the work he did was inspiration for the movie sneakers. He contributed a lot to the writing of that, how the sneaks, the break-ins occurred, and he does this for a living, which is quite fun. I'm sure many of you do, too. So that's excellent. So... All right, so with Stuxnet, it was directed against the somatic software. Supposedly Microsoft released some patches that would have covered this. It was the computer was compromised, and then because of that compromise, the somatic software was taken advantage of. So now it's all about the PLCs, and at the end we're going to discuss more about this, too. It's not just correctional facilities. We're talking about power grid, pipelines, water systems, both for the dirty water and the clean water. And also a new kind of research discovery vulnerability we found is with HVAC systems, heating and air conditioning. Well, it might be like, oh yeah, what's the big deal again? You just crank up the heat on some building. But if you think about it, where the servers are for companies and stuff like that, when it has SCADA or PLCs controlling the type of the temperature, you could do a lot of damage. Yeah, so this encompasses a lot of stuff. A lot more than when we first started the project. It was really eye-opening when we started talking about this, how many people have said, hey, there's this other thing. So we're learning a lot more about it as well. So one of the initial things is most people didn't really realize that PLCs were in correctional facilities because the average person doesn't really know how a correctional facility is designed. So we're going to put out some definitions here. So a prison is a state or federal facility. This is like long-term confinement, typically over a year. A jail is typically a confinement of under a year, like leading up to trial, potentially or for smaller crimes. Just because it's a jail does not mean that you may not have big criminals in there. You may have murderers in jail awaiting a trial to then be transferred to prison. All right, so in the United States, there's about 117 correctional facilities federal. There's about 1,700 prisons and 3,000 jails. About 160 of those are operated by private companies. So most will actually use PLCs as well, except for the smaller facilities that it's not necessary. Just some pictures of John in correctional facilities. Doing the design, and he gets to actually sit in. There was one night tour that was a high-security prison with, it was quite interesting. But here he talks about, this is what it looks like. And so when we did our tour, the central hub, really the brain of the jail is in the control room. You can get into the control room, like a physical access or electronic access from the outside isn't controlled. This is the type of work that we can do. This is typically how prisons are laid out though. There are a hub and spoke design where central control is in the middle and then all the housing units will spawn off of that. In central control, it's also worth taking note of that the equipment room, where the PLCs, the servers, et cetera, that's usually attached to central control in the facility that we went to. It was actually underneath it. You had to go down a hatch through the floor to get down to the rack room. So this is what it would look like, just an overhead satellite view. There could be hundreds of cells. This is basically showing you what some of the control panels will look like. This is pretty much like the one we saw in our, and you'll see later in our photos. But this is a photo my father took of a prison he designed a long time ago. What does an electronic security system for a prison look like? As we went through, it has a control center, which is the brain for the system. Their servers are there, obviously. It also monitors and controls other things within the prison like video. So if you can get access to the control computer, you can see some stuff that's going on with the video as well. Note that the duress alarms, some of those things are also going to be included in there. Yeah, and in our demo, we were able to open up, simulate, open up all the prison doors, but yet still suppressing the alarm, suggesting that the doors have been opened. So the guard would see the doors are still closed, but actually they're open. And we'll show that in the demo. And the fences as well. For some of these facilities we theorized, we could open up the doors all the way out to the gate. I mean, all the way. This is interesting, though, there. You see the car and the RF link. So some of these cars that patrol the perimeter of these facilities will actually have on board a type of computer that's monitoring, typically the intrusion detection system on the fence line. And they will have the ability sometimes to actually, you know, send information back to central control via RF, not always encrypted. So that's another attack vector. And these are all controlled by the PLCs. So, and there's the PLC rack. You probably can't see that from back there, but these slides we're going to give to the conference so you all can look at them later too. So the other things that we found out that ways of getting into the control center, if you can't physically get in, like we were thinking of attack vectors similar to what we'd seen, potentially with Stuxnet with USB drive. But we found that, for instance, some facilities have like a McDonald's in the prison, and that's connected to the internet. And we found that it was called a commissary so that people that are there can get there. But they would order food and stuff like that. And so if that had an outside link, to get into the prison, we found out that the commissary was also connected to the control computer so you could just kind of hop through. It shouldn't have been designed like that, but it is. So this is just showing you what other things could be controlled in there, you know, showers, phones, etc. So this is basically just a diagram of how the PLC works. You know, it's basic in and out. It's basically multiplexing. All right, so there are a ton of manufacturers of PLCs. So these are just some of the common ones. PLC FACs, they can communicate via different methods. So you can have serial connections, you know, so Modbus, Lawn Works, Backnet, DF1, others. Also clearly Ethernet, you know, they're sticking these on the LAN as well. So there's different ways to program them. Ladder logic is probably the most common because it's easiest. It's just, you know, it's designed for someone who's not a computer programmer to be able to use. It's just linear, straight through. If this, then that, just like a ladder. All right, so within a large facility, these PLCs, they may monitor thousands of points. Because remember, it's not always so like with a prison door. It can be controlling the solenoid that controls the lock state. So is it locked or unlocked? But then it's also going to monitor the door so like with the sliding door. How far open or closed is that door? Things like that. This is schematic. On this particular one, you can monitor up to 34 points on that door. So this is kind of where we get into how PLCs were implemented as well. A lot of times they were implemented to cut down on hardware costs, i.e., you know, conduit and actual wiring. So you can run all these wires back to central control from every single point.  That's the 34 points that he spoke of. With a schematic, we'll look for that. Also note here, the thing that we're pointing out is... You can't read it so well, we'll read it. Yeah, it says speed reducing. But the motors on the doors, you can control those and control the speed of it. So you could crank it up and turn it on and essentially blow out the motors on the doors so the doors are no longer functional at all. So it's called a cascade program. So the doors don't all open up or slam once. Yeah, it's... So what we're showing here is the perimeter fences. They have intrusion detection systems on the fences. All right, so now we'll look at some of the vulnerabilities. We can open doors and gates, cause phase lock sliders to go out of phase. And so as Tig mentioned, if you can remove the program for the cascade, the speed of the door, you can break the door. So when you open it and slam it, those locks, they're done for the whole prison. And one of the things we could do that we theorized in ATAC is say there's a witness in another cell block that someone wouldn't want to testify in a criminal case. So we figured out you could also lock down entire housing units for the whole prison and prison fires happen quite often. A lot of prisoners like their mattresses on fire. Mattress fires. Yeah, and it's pretty common. So they need to get all the prisoners out. And one of the things they do with that is that some of the doors used to slam shut behind people. But now the slam door locks is something that can only be manually unlocked with a key. So we talked about that. You can release all the cell blocks, lock them all down. Let me just go through that part. Go ahead. All right. So a lot of the ideas that we were met with with this are that, yeah, this isn't that big of a problem because these are not connected to the internet. And actually that was one of the things that we thought of as well. Initially going into this, our assumption was that when we saw these in place, they wouldn't be connected to the internet. They would be air gapped. And that actually wasn't the case. And so we actually validated that ourselves. But after we did this talk at DEF CON, Idaho National Laboratories back in the U.S., went and validated not only our research, but in fact that approximately three or 400 facilities that they looked at, every single one of them was connected to the internet. And these are not just correctional facilities that they looked at, all types of facilities. Other than that, someone else also, when we first were doing our research, said, well, it's not really possible. This is very unlikely.  But there have been a lot of prison breaks recently, like Charles Manson got cell phones smuggled in twice. So a lot of these people have had helicopter escapes. So there are a lot of unlikely scenarios. We thought that this actually is quite likely compared to the helicopter escapes that have been successful. What was the statistic was? I think it was like within the last 20 or 30 years, John will correct me at the end here, whatever it was. So I mean, this is unlikely, but flying a helicopter into a prison and taking somebody out is also unlikely. Well, in the past 20 or 30 years, it's actually been attempted eight times. Six out of eight, it was initially successful. They got away with the person they went to get. Now, they ended up getting caught later. But I mean, that's highly unlikely that someone will get a helicopter and fly it into a prison. So this is unlikely, but we still think it's probably more probable than a helicopter escape. So I mentioned what the exploit can do. I'm going to be going through some of these slides quickly to make up for some time that we lost at the beginning. So infection vectors from within without, like I mentioned, getting a USB drive into the control room might be harder. We were able to go right into the control room with someone we knew who was correctional. Actually, he was just a law enforcement officer who got us in. So he gave us the tour. We were able to take pictures. That was very good for the research. It was nice that he was telling us, we're glad you're doing some stuff. We need some help here. So law enforcement officers in the guards who work in these prisons, a lot of them recognize there are some holes in the security. So they were glad that someone could do presentations about it. So they helped us a lot. You know, it's interesting too. So like we said, we assumed to find these not connected to the Internet, but they were. In the event that they are not connected to the Internet, say maybe in another country, you know, over here, Stuxnet still proved to us that even if a device is not connected to the Internet, you still can breach it. There is the human factor, right, via your USB keys or whatever. So an example is when we took a look at the security equipment room, we went down the hatch to go look at this stuff and we were escorted. Well, when we walked down there, there were two unattended contractors working on the video over IP with no escort. And there was a third guy that was with them coming and going as he pleased.  If that was an air gap system, there was still people in there unattended with access to it that, you know, you supposedly trust. And I mentioned the commissary. That's one of the few weaknesses that we found that the commissary wasn't really supposed to be connected to the control room, but it was. So what kind of badness is possible that we were able to do? Open all the doors, cause chaos, murder could occur inside. So that was the one we just suggested that open all the doors. We've gotten a lot of interesting requests since we did these presentations. I mean, really, everything from Git mode, like we had some guy in prison in California and we said we can't just, you know, we didn't, one of the things about the exploit that if anyone has any questions we can talk to you about, we didn't release the exploit to anyone, not to the US government, not to any independent researchers. We held onto this because we figured this was one that was rather risky. And it was, but it was pretty easy to create. So that's why we're doing this presentation is for awareness, but not to release this exploit because of the opening door potential released from prison. Unlikely yes, but this is where the, this is the helicopter statistics for that. But close all the doors. Like I said, this happens often where there are people from different cases, trials, competing witnesses, or this is the type of thing where, yeah, you could lock down an entire housing unit and during a fire and that would mean the guards and the prisoners would perish. So the prisoners would be locked in. All right, here's the part that I know a lot of you are waiting to hear. How much did this cost us to do and how long did it take? $2,500, mostly in legit licenses, which was for the software. We bought the somatic software, but it was also available on Pirate Bay. But we just didn't go that route because I'm also an intellectual property attorney and we wanted to just purchase the software so we could, so I could do this presentation. All right, so just a couple of notes on that. So the first thing we did is we kind of researched widely used PLCs. That's in particular why we decided to go with Siemens. We're not picking on Siemens. We just know that they were widely used in our talk. You know, it can be interpreted that is, you know, more viable not just in prison facilities but wherever else these Siemens are used. It's not a particular tack on Siemens. Our attack vector, it's basically would work on anything that was set up the same way. So one note is we went to eBay. We looked it up and we bought a kit for $500 US. We could have got it cheaper if we wanted to spend an extra day or two to order each piece individually. Then after that immediately we went, looked on the internet. I was able to find the software on the internet within about 15 minutes. So like Tiffany said, we went and bought it but the idea is we had heard initially after Stuxnet people saying, no, you need to be a country to be able to do this kind of research. You need to have an extremely fancy lab. No, you don't. We did it essentially for $500 plus the 2000 for the software. Now if somebody malicious was doing this, they could buy the hardware for $500 and then go acquire the software on the internet. So it really does not take a nation state. This is not a huge funded project. I mean, it's a few hundred dollars and some motivation people could do this. Another researcher who has done some work in this is Dylan Beresford and he did some interesting exploits that showed about the buffer overflow. For our code it was really a buffer overflow stack and about 30 lines of code. That's not a lot. I mean, even my students in CS don't ever write buffer overflows. They're capable, the advice is capable of buffer overflows but we found that and that's the vulnerability that I believe Dylan found as well. Basically what we're looking at there in particular is we took a look at the publicly available exploits and did a code review and another presentation but essentially what they are is most of these exploits are under a hundred lines of code. That's including comments and ASCII art and shell code. So here's a picture of the super expensive lab. That's a computer on my desk and the PLC is in the bottom right corner there. That's it right there. Software box up in the top left. Spindle and CDs. This is as simple as ladder logic is. If you understand logic gates, you can program in this. We have a programming experience. We have no SCADA PLC background so it was a project we didn't know would be this quick but it really only took us about two months. Once we came up with the idea to look at the vulnerability we were able to find someone who would give us a tour of a prison to kind of validate, yes, this stuff is in correctional facilities. Then we went home and we started putting together the project and our exploit writer got on this and it was about two months. Seriously, one of the hardest parts was trying to figure out what kind of software we needed. If you go look at that software, there's about 80 different versions of it. That was one of the most difficult ones.  Actually, since these stats originally came out. Luigi, he's pretty well known for doing this. Initially, it was like last March or April. He released 34 zero-day proof of concepts in one day and since then, I believe there's been probably close to 30 or 50 more that he's released. Then obviously, you can find some of these in Metasploit, Xploit DB, and then there is commercial pieces of software that do have them. Core Impact Pro, Canvas, there's a SCADA pack for Canvas as well. You can find these as well. Do we talk about showdown? Yeah, well, showdown is kind of not exactly the same but it was interesting. One of the things that we did is we took a look at all these exploits that were out there and we started searching on showdown for banners. For those of you that don't know, showdown basically is an archive of banners of everything that's on the Internet. We started looking out there and looking up keywords like SciTech and Sematic and things like this. We actually were able to find these systems live on the Internet via showdown that were susceptible to these exploits that you could cross-reference on Xploit DB or within Metasploit or whatever. This is not just a guess. They are out there. There has been talks about that as well. US cert about a week ago actually finally released an advisory saying, hey, these things are on the Internet. After people have been saying it now for years, they are there. Our attack vector, it was somewhat similar to Stuxnet. When we were in the prison facility, clearly we saw the people going in and out. We also saw a lady that was running the correctional facility checking her Gmail and Twitter on the machine that controlled the doors. We took it for granted that that machine had been compromised. This particular exploit was not a remote exploit because there were plenty of attack vectors there. We figured it was a logical assumption that we could make. We also, because of Stuxnet, it is a valid theory. She actually told us too that the guys that worked the late night shift, they have been looking at all these images and videos really late at night because they are bored. Now the computers are running really slowly and we don't really know why. Yeah, so admission of infection on the machine as well. Actually, what we did is we went in there. We took for granted that machine had been compromised. Then we migrated into the process. It was either controlling, monitoring, or programming the PLCs. Then we actually started accessing its DLLs that it had loaded up. We started issuing the commands directly across ourselves. More of an attack vector than an exploit. This is why we said it would be universal because anything that operates via that fashion, you migrate into that chunk of software and then you start accessing its libraries. At that point you are making the software do what it's supposed to do. It's issuing the calls out. Then the only thing we did is when it would send back the notifications, we'd just throw them out. So it would say unlock the door and it would usually tell the people at the control center, okay, the door is unlocked. Well, unlock the door, throw the alarms and notifications out so that the guy at the control center is sitting there. He thinks everything is locked and okay. Meanwhile, the end state of the actual device is open. Yeah, actually, so we're going to run it off this computer. We're going to attempt to do a video switch here, so let's get that over a little if you could. We have some audio with it. I'm not sure you're going to be able to hear it, so we're going to narrate what you're seeing in the demo that we did. You can hear my audio. That's good. I can hear the audio too, so check this out. All right, so this is our exploit writer talking. All right, so what we see in the middle here, this is our PLC. The switches on the bottom represent the actual lock control themselves, so either a physical mechanism or the software changing the state. The LEDs on the right side of this which is represent their state, so that would be if the switch is actually physically on or off. Okay, so I'm going to pause it right here and talk for a second. I'm flipping. They're hard to see in the video, but there are physical switches on this bottom side that I'm flipping, so that would be like the guard at the control center hitting a button lock or unlock, and then you see the LEDs on the top, which would indicate the end physical state, so the LEDs on the top are like the door there, so when you hit lock, the door locks. When you hit unlock, the door locks. The LEDs you see at the top represent the actual lock state, so like a secondary sensor that's telling you is this lock actually locked or what state it currently is in. As you see, switching back and forth, the LEDs update to show that status. Now on the software, you basically have all of the internal states, again, of the same things. You can see the lock controls and the lock states themselves, and in the software the LEDs are the column with the true and false are the state of the switches and the lock states where they currently are. So once again, you'll see the same things occurring there. A bank of the ones at the top will indicate if the switch is flipped or not, and then the ones at the bottom will indicate what's actually going on at the door. Alright, so once we actually start running the exploit, not exploit, the interpreter script, we're going to basically migrate into the controls and the communications part of the software that handles communications with the... Actually if you want to look at the PLC real quick, it's about to trigger and there they go. And as you can see in the software itself, the state of... So you can see all the switches were still physically flipped there and showed as doors were locked, but the end state, they all went off. The switches are still currently turned on. Basically, yeah. So now if you notice the software, everything still reads as we flip the switches and the end state is all locked as well. As to where clearly all the lights went off. They were not locked anymore. So that is the demo of it there. We'll switch back to my machine at the end so you can ask some questions to John as well, since we do have the audio and video working. Alright, so other facilities at risk, as we discussed, and you may have heard in the news, a water facility, a water treatment facility in Texas that someone named the prof, the professor, Sirius prof, figured out how to get into the SCADA system, well through SCADA, get into the systems there and potentially change some of the settings at that facility. And it's theorized one of the ways you could have done this is similar to this. Transit, as many of you, some of you may know, maybe not many of you know, but a lot with transit is also controlled with PLCs, which is one of the other reasons that we didn't want to do the proof of concept with that. We thought that this was a lot safer to do that. So food, drug and chemical manufacturing, and I mentioned the HVAC system. This is a new kind of vulnerability that we recently found within the past couple of weeks. So we didn't talk about this at DEF CON. So, yeah, I mean, it was commonly known that, you know, this stuff affects power and water and that's, you know, really what we'd heard after last night, but as you can see, it does affect many more areas than you'd initially think. Like, you know, I'm sure there's even areas that we haven't thought of. And there's an up-close picture of that. So that's actually what the PLC looks like. So now you can see those switches on the bottom that we're flipping. This is from the correctional facility that we toured. I'm just going to go through these quickly because either of the photos that we took in the previous video, the remediation clearly used device for its intended purpose. If that machine controls the doors in your prison facility, you probably shouldn't be using Twitter on it. Proper network segmentation as well. I mean, really, you should isolate that chunk of the network that, you know, that's occurring on that land where all these PLCs are at. They shouldn't touch another one. Physical media, physical access, actually explain to people who are using it why that's in place. Like, you know, don't say, don't do that. Say, look, if you do this, there's the possibility that all these doors could fly open and all the prisoners could rush you. So... And one of the other things that we wanted to mention for the Federal Bureau of Prisons in the U.S. is that a lot of these designs happened before a lot of these vulnerabilities were known. So I believe that they are updating their security now and their network segmentation after our presentation and the work we did became public. But a lot of these facilities are really old. So back then, it's kind of like, now we're like, yeah, that's obvious, but back then they didn't know. So in improved communication between IT and physical security, because especially in correctional facilities, they have a lot of technology for the security systems, but you also have the prison guards who are working there for the physical security. So connecting all this together, that's one of the two. So we're suggesting that that would help improve some of the security. You know, one of the things I'd like to point out here, too, is we found out during doing research for industrial control systems in general, that availability is typically of highest priority. Security is not always the highest priority in these systems, right? So that makes sense. You know, you have a nuclear reactor. It's really a big deal. And so one of the things we came across is the patching cycle of some of these devices is out to like six years. So patching is not always the answer. Because I mean, realistically, it is a good idea whenever possible, but what do you do? Take your nuclear reactor offline every Monday so you can patch it? I mean, it's... So, you know, that's why we're saying, pentests, see if this stuff is there, see if you are vulnerable, go along with the education, tell people how to handle this, people that are handling these devices that should be considered critical to your facility need to know the vulnerabilities. And you just enhance physical security for these rooms, like the fact that people could sometimes get tours of the control room. Glad we did for our research. But you know, in some sense, we probably shouldn't have been in there. So until the manufacturers really get their stuff up with the patches and fix some of the vulnerabilities physical security and training is really the way that you can remediate some of these risks. So acknowledgements to start to Dora, the skate explorer who may be watching now. Hey, thank you, he's awesome. And a CISO of a state who let us do this type of research. So that was a good foresight on his part. And now we found out a couple weeks ago the state's getting more funding to fix some of these problems. So that was great. And the LEOs who took us around on the tour. That was great because they we did security research, but they really didn't know really the essence of how much of the project we were going to be doing. Thanks to Core, they sent us, they paid for our travel expenses out here and all that. But this was not Core's research, but we were glad that they published our work. So here's our contact info and then after this slide what we're going to do is we'll actually swap over to the video here. We'll let John say a few things that he has to say and then we'll go into some questions as well. But if you need to get a hold of us, that's how you can do it. Anybody that's interested in pen tests or stuff like that, we can do it through Core Security. But if you have any questions for my dad about the work he does and stuff, this is the time to ask it. Yeah, so we'll swap this now. Well, he's doing that. Does anyone have any questions? And any general questions? The question was, has Siemens patched this yet? And in essence is no. But this is not because Siemens, because of anything they've done, you can't patch this. What we did in particular it's just we're using the software how it's supposed to. So that's why we really wanted to say patching isn't always the answer. We wanted to demonstrate something that didn't really have a patch so that people couldn't fall back on to that. Let me get this up here. There's my dad, John Strauss. Let me see if I can make this bigger. He's sitting in his office in the DC area. All right, so here's John. Say hi, John. Is there anything you'd like to add? Sorry, there's some latency. Can you hear us? Can you hear us, John? I expect it. I'm Berliner. Is there anything that you'd like to say before we start with the questions? Anything you'd like to add on? Not really. I think you covered it very well. Thank you, John. All right, we'll start with questions. We'll start with questions for John specifically. He did the physical and he is aware a lot of this stuff. So anybody that has physical questions, let's direct them to John right now. Questions? Other questions? Thank you. When you're able to bring a new law in the congress apartment, what will you do about the SCADA or PLC problem? About the SCADA and PLC problems in regard to... How would it be addressed via that? Well, you have some interesting stuff on the table here about pen testing tools. This is a very extreme... I know it's never... anyone who's been tried for it yet, but pen testing tools and exploits are, from what I understand, not legal in Germany unless you can show that you are a security researcher. I don't know how to define that. In fact, a lot of the work I've done, I don't know how anyone has yet defined this in Germany. The UK has some laws like that. And I see a new one coming through the EU. Well, part of the work that we do doing penetration testing, we need these exploit tools. So I'm afraid that if the EU is a law that's similar to Germany, we're going to have a lot of problems being able to really go public with the research that we've done. So I would say I hope that that law doesn't pass in the EU. And I don't want to see anything similar to that in the US. Anybody have any other questions? You said you do education to the people who actually browse Twitter and read their mail. Do you find that this actually takes, when you go six months later, have they learned and have they stopped using it? They're not using it on the internet again. So basically, some of the things that we saw, there are cheap fixes to this. So when you tell someone, you say, hey, you shouldn't be cruising this personal websites via this computer because these specific bad things can happen. They tend to understand. And then at that point, we suggest minimal things. If you don't have money to redo your entire network, unplug the keyboard and monitor from that computer. It's very simple solutions that are effective. That's not the complete answer. But that will inhibit somebody from accidentally infecting it. So yeah, we have seen positive things come out of this. It has been about six or eight months now. We have seen good changes that are in effect. One of the things that's been interesting is when we did this type of research, where our treatment facilities, for instance, came to us and said, hey, we'd like you to look at our networks. What do you think? Is this vulnerable? So what we found, though, that was quite shocking to us in the industry is we found that while we're do pentesting independent security consultants, we were competing with the FBI for projects. Now this kind of blew my mind how the U.S. federal government will come in when a company has a breach and they don't just do incident handling, they'll say, hey, we'll do all this consulting for free. So, that wasn't me. Oh, did someone leave their phone up here? We were just really surprised to find that the FBI all come in and do it for free. So if you're an independent security consultant in the U.S., you're competing with the U.S. government for work. And how do you compete with free? So that was an interesting revelation we had on doing this project. Any other questions? I've read news articles that mention that in some prisons, they're piloting programs where prisoners have, like, computer terminals in their cell. And, you know, they can buy, like, the right to browse the Internet sometimes. And I've heard that some of them are, like, writing their own attack vectors, like, getting by the censorship and looking at porn. Do you know anything about that? Or if those can interact with the SCADA systems? All right. So what we've seen here like this, we've seen a similar instance. However, it was, they actually were air-gapped. They weren't going out to the Internet. They were able to take browser circumvention features. The particular one that I'm familiar with, it was Internet Explorer. And they found out that after they opened up, essentially, hundreds of tabs, if they'd be able to circumvent, you know, what was blocking them. In those instances that we've seen, the network segmentation was done correctly. So it was not an attack vector via that method. They essentially used what they used the terminals for most of the time, were visitation. So that family did not have to come to the actual facility to visit them. The family would go to a remote facility and they'd set up a video conference between the remote facility and where the prisoner was at. That's how I've seen it. I haven't seen anything else. I think something that a number of us have been wondering is that we have considered the ethical implications of improving the security of U.S. prisons where, you know, death row exists, people get killed. Have you thought of this or not? We considered the ethical implications of, I think that in some facilities, we had a guy come up to us and said that he worked in a super max facility, which is the ones that are underground. Some people that have, I mean, it's some pretty bad stuff that they go down underground for that stuff. What we were concerned about is that someone did say that, you know, this was vulnerable, that super max facility was vulnerable to this type of attack and it's someone who worked with the IT Networks there. So that's we thought that this would be a good idea to do this type of research to kind of protect some citizens from this type of stuff happening. Last three questions. So what's the best way to break out of jail? We get a lot of these email requests. The question was what's the best way to break out of jail? I don't know. At the beginning you were saying that you also could attack, for instance, data centers with the cooling. How bad can you go? Would you really be able to shut down the data center room machines? Yeah, we think so. Yeah, in the event okay, so this is talking about heating and air conditioning. This PLC is due, actually, to interface with these systems. Yeah, if you got a hold of the PLC you could turn off the AC. The server room would heat itself up or you could turn on the heat in there and possibly, you know, computers get too hot to shut down and sometimes they break. Yeah, and some other researchers have done, I think it was Dylan's work where you can actually you can take control of the PLC and shut it down in the period of time it takes to get back up. Sometimes you have to have someone manually go there and do it. So in that period of time, if it's even 30 minutes you could do a lot of damage to a data center with a lot of servers in there. Last question. Okay, so I understand your main solution to the problem is to educate the people on how to use the computers. This basically protects against dump people doing dump stuff. But what is this low-page low-wage guards paid basically nothing for working there and getting paid by other people for doing bad stuff? I mean, if the vulnerability vulnerability exists, they can inject some code which works months or years later. So I think educating dump people isn't the real problem for people planning helicopter-style attacks. Exactly, it is. Well, the initial thing is really your typical layer defense, right? The immediate thing is to educate to remove those accidental vectors and then you do the typical things that you do. Isolate physical access to that machine. Restrict physical media. Proper network segmentation. You know, air-gapping. Things like that to make it extremely hard. You will always have some attack vectors there, so you can limit them through the use of all these different things implemented. You shouldn't just educate. You should do everything. But you can educate immediately and cheap. So that's why that was the initial.


This is TFNN, the Tiger Financial News Network News Update, everyone Basel chapter here on Monday, April the 4th, we're looking at the Tiger Financial News Network, 10am market update dollars down 40 are at 34,000 670s. After a very interesting session on Friday just bumped into you remember the trend lines I like to look at this one called the falling axe pattern in the Chapman Wave method right to like an expanding wedge as declining. And if we can see in the next two days some kind of a rally that takes you over in the Dow above what price is that 34,908 not only will that be very positive but it'll say that within this rotational aspect the Dow is showing strength, the S&P is struggling some, the S&P is down 34 at 44.53, this is the 500 stocks it's the broader market, the QQQ which is the index 100 trading down 4.5 at 344.50, this is not very good action if you look at the IWM it had been much weaker today it's a little bit strong it's up 65 cents at 198.53 that is the small caps, small caps today are showing some strength and if you look at gold gold made a new recovery high and that was really important when all the way to 1974.6 is within this rectangle formation it's pulled back it's now up 9 at 1954 and what I'd been saying is you if you can see gold start to trade in the 1978 to 1982 level that's a breakout that's very important it doesn't mean to say it's going to soar the way to the high of the 8th of March it does say though that it is making higher highs it's forming a tremendous base in the 1940 to 1930 area that's a good sign if you're looking at crude oil it's the exact opposite crude oil is pulling back it's down four points at 94.32 this is the pattern I'll be discussing Wednesday night in my show I was going to be in my special that's from 4 o'clock to 5.30 for subscribers to my opening call it is going to be a webinar based on all these different techniques there's the lower case H pattern that we talk about all the time and if you're looking at the TLT which I'll have to talk about when we get back lower again today down $1.50 I'll be back in a moment and do the type of technicians are hoping to stay otherwise have a great day


How do I get a job teaching English and Greece? With long summers and mild winters, countless sandy beaches, a laid-back lifestyle, great food and hundreds of islands to explore, Greece has been a popular teaching destination for many years. Unfortunately, the country's recent economic woes have had a negative impact on the number of available jobs, and it may be sometime before it fully recovers. However, there are still plenty of teaching positions on offer if you are willing to seek them out and you vid the necessary criteria. What are the requirements for teaching English and Greece? Due to the economic problems in recent times there has been a reduction in the number of teaching jobs on offer across Greece. This reduction means that employers are now more picky about who they choose to fill vacant positions. Also, it has become increasingly difficult for non-EU citizens to attain the necessary work visa after recent changes to immigration laws. The combination of these factors means that most employers will only employ teachers with an EU passport or any other legal right to work in the country. Most teaching jobs will also require a university degree and a TEFL-Tesol qualification. Who are the main employers of English teachers in Greece? The big employer of foreign English teachers in Greece is the national network of language schools known as Frontosteria. There are over 6,000 private language schools all over the country that belong to the network, so there are always vacant positions on offer. The majority of the classes provided by these schools are aimed at business professionals, although many also have classes for schoolchildren of various ages, looking to brush up their skills for external exams etc. It is common for teachers in language schools to top up their income by taking on private tutoring work outside of their normal working hours. What are the visa requirements for teaching English in Greece? The majority of teaching jobs are taken by citizens of EU countries, particularly the UK and Ireland, as they do not need a visa to live and work long-term in Greece. Other passport holders will be issued with a 90-day tourist visa on arrival, which does not allow you to work legally, although a small number of employers will take on teachers with only a tourist visa. In order to convert your tourist visa to a work visa, you will need to find a school that is willing to sponsor you. This is not easy in the current economic climate, but it also not impossible if they like what you have to offer. What is the best way to apply for English teaching jobs in Greece? It is very difficult to arrange teaching jobs in Greece from outside the country. Employers overwhelmingly prefer to hire their teachers following face-to-face interviews that might also involve teaching an example lesson. To have the best chance of finding the right job for you it is important that you are in the country at the peak hiring times of the year. The main hiring window is at the start of the school year in September, while there is also a secondary window in January. The best approach is to research all the language schools in the area where you want to live and work and send them a copy of your CV or Zoom in advance. Once you are in the country you should follow up by visiting each school to introduce yourself and to make a good impression. Most contracts run for 10-12 months, although some schools may offer shorter terms if necessary. Where are the best places to find English teaching jobs in Greece? You will find language schools in most parts of the country, although the largest numbers are unsurprisingly located in the capital city, Athens. Other cities that also have a strong demand for teachers include Larissa, Patras, and the Saloniki. Popular tourist destinations are another good place to look as English language skills are highly important for people looking to work in the tourism sector. Locations such as Corfu and Crete are both popular locations.


Hey guys, welcome back to my YouTube channel. This is Daniel Rosel here and bringing you this video today from a place I've come up before on my video making expeditions in Jerusalem. This place is called Mavina Park but this place is actually in the news at the moment as the probable site of a future US embassy in Jerusalem. Now even people who live in Jerusalem, I've been living here for seven years, probably if you told them have you heard of Mavina Park, they would give you a blank look. It's known in Hebrew as Makhanei Alembi, Alembi Camp and I'll get to how that name came about just in a little bit here. It's this little box of land located between Derech Hebron, which in English is Hebron Road. One of the main traffic thoroughfares running through Jerusalem. On this side where my hand is, we have Daniel Yanovsky Street and Terim which is a sort of urgent care facility and then just up there on the left is Hanuk Albeg. So it's basically this little box and it's basically a wilderness and there's really not much to do here. As you can see I'm sitting on a sort of makeshift campfire. There's bottles of Heineken. It's in pretty bad condition, which is a pity because it's a lovely park besides all the debris and the dirt. There's lovely beautiful tall trees behind me. But this is believe it or not the site that has been earmarked for a future US embassy in Jerusalem. I've talked in past videos about how controversial the whole business of establishing embassies in Jerusalem and that the practice of most nations unfortunately has been to put their embassies in Israel literally anywhere except in Jerusalem. But this place has a pretty interesting history and I'm just I printed out the news coverage of this at the moment and what's going on. So the main embassy building is going to be 10 meters high and they expect that construction if this goes ahead is going to take more than a decade. So I wanted to make this video today because it's going to be interesting to see if in 15 years into the future if I'm still around. Hopefully I will be. This will be a highly, highly secure guarded US embassy facility and it's just kind of hard to imagine looking around at this emptiness now that that's going to be the case. So what we've had now is we're coming into a 60 day objection period and the district planning and building committee is then if there is if the objections aren't don't sway the planning committee then it's the US is going to be giving green light for construction. Now it's interesting because the US already has a couple of embassy and diplomatic buildings located in Jerusalem. When the US moved their embassy to Jerusalem quite controversially a few years ago they put it in what was formerly a consul building in Talbiot, Mizrach and there's also in downtown on a grown street there is a Palestinian affairs unit called the PAU. A lot of people aren't sure what that is it's now used to be a consulate general. I've talked in a previous video about how the consulates and consulate generals in Jerusalem are actually representations to the Palestinian Authority and that was also the case for the US building. It was basically a self-administering representation to the PA. However since the US embassy was moved to Jerusalem it's now part of the embassy. So what's probably going to happen is that that's going to continue serving as a sort of liaison service with the Palestinian Authority the PA. The building in Talbiot, Mizrach I believe is probably going to be continued as a consulate because when the embassy was moved there I read in the news that you know it wasn't really ever intended to be an embassy in terms of the level of security needed for a US embassy. But this place has been actually earmarked for a very very long time. One more interesting detail before I wrap up this video. In the last days of the Reagan presidency, January 18th 1989, just literally less than a month before I was born, US ambassador to Israel William Brown and Israel's land Israel lands authority deputy director Moshe Gad signed an agreement according to which a plot of land in Jerusalem this is from the times of Israel would be leased from Israel to the US for 99 years for the sum the token sum of one dollar per year. The 15-page land lease and purchase agreement referred only to the Jerusalem property but almost immediately report surfaced later confirmed the land in question was located in what was known as the Alambi Barracks the site of the British Army's Jerusalem garrison during the mandate period. Palestinian scholar Walid Khalidi wrote in a 2000 article for the Journal of Palestine Studies. So this place not a lot of people are the history and that's why it's called the Alambi compound that during the British mandate period there was actually you can see some historical aerial photos incredible Tal Piot located just off that way hadn't even been built yet and you can literally see the tents of the British Army were based literally where I'm sitting and what is now a wilderness. So this little inconspicuous park Mavina Park today located wedge between Derech Havron and Yanovsky is if all plans go to come to fruition will be a US embassy building in probably a little bit over a decade.


That's why I'm delighted to have with us the chief diplomatic correspondent in Europe of the New York Times. I'm sure all of you are familiar with his work, with his writing. He was based amongst others in Berlin, Paris, Moscow, London and now currently in Brussels. Great to have him with us. Please welcome Stephen Erlanga, ladies and gentlemen. Now, Steve, nobody needs to tell you about Europe. This is a continent that you've been covering for a very, very long time. That's why I'm particularly curious to hear your take on the future of the EU. Well, thank you, Ali. And we've been all waiting for Europe to grow up for a very long time. I think I'll be dead before it reaches teenage years, but we'll see. It's always hard to follow Rick, but I want to encourage you in one thing. If you are troubled by Donald Trump's indifference to Europe, think how troubled he would be if he was really interested in Europe. I think he's basically decided, not liking multilateral institutions, that the European Union in his view is silly, but if you want it, it's okay. And that's kind of the way he feels about NATO. You know, maybe it's not great and maybe the US is being taken advantage of, but it seems important and the people around him think it's important. So it's okay. I'm very ambivalent, I would guess, right now about the state of the European Union. I think it has gotten some of its mojo back. There's no question. Brexit has been a prise de conscience. It's been a wake-up call. It has made sure that no other country will vote to leave the EU, at least not for quite a long time. It has reinvigorated the idea that Europe needs better leadership. The growth is back, though still very slow. As we've heard in the excellent economic and finance panels, unemployment is less, but still bad, particularly for youth. The big problem remains the diversity of 28 countries. What worked at 15 does not really work so well at 28, perhaps soon to be 27, I suspect soon to be 27, but Britain was never really the problem inside the EU. It was an irritant, but not a problem. What we have is, and my friend Ivan Krustia has written a little essay that got turned into a book called After Europe. His worry is not north-south, it's east-west. It is the conflict in values between eastern members, central members. The one we say central, that always implies that Russia is part of Europe, and I'm not sure that it really wants to be or is. These countries which are pretty newly sovereign are still very reluctant to give up that newly-found, re-found sovereignty to Brussels. They really oppose the idea of a stronger European institutional basis. So there's a big debate going on if we need more Europe for the Eurozone. It's not clear to me that the argument is one in the Poland-Hungary Czech Republic or Slovakia, not at all clear. They don't like the Euro, they don't like Brussels. Now to some degree, they're very pro-European. They get aid, their citizens can work and travel, but some of these countries like Slovakia, which is a fascinating place. It's five, six million people. It makes more cars per capita than any country on earth, and they're all because of EU companies. It's very pro-European, yet it resists taking any migrants and resists this notion that a membership of the EU should have costs with it, not simply benefits. Now that's a value issue, but it's also going to take quite a long time to resolve. The other thing we talk about is the Franco-German couple. It's no longer enough for Europe to size. The Germans are desperate to have a France that is in better shape, partly to share the responsibility and the blame for European leadership, because there's a lot of anti-German feeling in southern Europe and in eastern Europe, feeling that if you think Trump is America first, Germany has been acting as Germany first within Europe for quite a long time, even though its myth is, you know, altruism. But no one in the European Union actually believes in that myth anymore, and Merkel understands that. That's part of the problem. And you see it in defense, which I won't go into much, because others will, but already in new ideas of European defense, you have a big fight between Germany and France, because Germany wants a big club and France wants capabilities, not surprisingly. I mean, France wants more money spent on equipment and training, and the Germans just want a club. And if you look at German opinion polls, we want Germany to do more. We want Germany to play a bigger role. Germans themselves are extremely ambivalent about doing that. Now, the last point I'll make, and this one really is the last, it's not the penultimate and the third, is Brexit. I've just moved from Britain. I've spent nine years of my life there. Britain has become a country I don't even recognize anymore, and its allies don't recognize it either. I've just done a piece, if you care, in today's Sunday New York Times about Britain and Brexit, and I'm just going to end by reading you the first two paragraphs, which are many Britons see their country as a brave gallium, banners waving, cannons firing, trumpets blaring. This is how the voluble foreign secretary Boris Johnson likes to describe it. But Britain is now a modest-sized ship on the global ocean. Having voted to leave the European Union, it is unmoored, heading to nowhere while on deck fire has broken out, and the captain, poor Theresa May, is lashed to the mast without the authority to decide whether to turn to port or to starboard, let alone do what one imagines she would want to do, and knows would be best, which is to turn around and head back to shore. People don't recognize this Britain. We think of Britain as a country of pragmatism, of common sense, political stability, a nation of shopkeepers. It's become nearly unrecognizable. It's no longer the country they understood it to be their whole lives. But I do think the EU and Britain, I really hope some kind of deal will be done because Britain, the trade is useful for Britain and the EU. Britain is a military power still, though very hollowed out, let's be honest, and to imagine an EU or a Britain without some kind of decent relationship shakes me to the core. Thank you. Thank you, Steve, and as someone who has, as you said, lived in the UK for nearly a decade, you can tell and feel when you talk about Brexit that this is something that affects you also on a personal level.


Hey there lads and ladies it is Petrifying Pumpkins here and today I have got a potential video on a firewall sequel maybe but something to do with first contact entertainment's next generation virtual reality game and first let me just tell you how I come across this simply by going onto their official website and looking at the open positions they have available one of them stood out to me a bit more than all the others the others were kind of the usual suspects that you would expect to see on the first contact entertainment hiring page but this one leapt out as you can see it is mission designer so straight away I was thinking hold on a sec missions first contact entertainment are kind of more known for the multiplayer games especially with firewall obviously and salares with missions never really factoring in unless you consider the weekly missions that would come with seasons which is potentially what they're talking about here I can't rule that out let's just go over the details of highlighting some interesting parts or at least parts I thought were interesting but I'm still going to read it all out anyway so they want a mission designer first contact entertainment is looking for a talented motivated and experienced designer who is looking to create innovative gameplay systems fun over the top game modes which is something I've highlighted because just the word in there was a bit interesting over the top game modes and visceral in-game moments that kind of stood out to me if it was just a normal gameplay or you know gameplay designer is that a correct job title I'm not too sure maybe I'd be expecting them to be designing the visceral in-game moments when it comes to a multiplayer only title the fact that a mission designer and they're looking for them to create visceral in-game moments maybe that suggests scripted in-game moments for an exciting new project so it's not for firewall zero hour and it's not for salaris this is for a new title so this is a unique opportunity to join a team of game industry experts tackling the challenges of creating innovative games which use software and hardware technologies in new ways of course virtual reality you're going to be using hardware in technologies in new ways I'm not going to read too much of this part here because it's all kind of doesn't pertain to what I'm talking about here so I'm going to skip down to the next paragraph while years of experience are a definite plus positive creative energy and passion for building exceptional experiences is a must this is a rare opportunity to join a seasoned creatively driven team on an exciting next generation project so it's new it's next generation it's virtual reality we'll get to that later so that's all adding up although this is all stuff we've already kind of known so job responsibilities work closely with designers and artists to build a compelling product roadmap creates manage and document high level designs for upcoming product features this part here is interesting participates in the development of the overall mission structure which you know kind of interesting I mean would something like that apply to firewall zero hour what we have now I don't think it would especially I'm just going to read the next point because that's the big one work daily to improve the quality of our single player and multiplayer experiences through play test feedback now my mind's jumping to you know single player mission structures stuff like this it's kind of smells like campaign however firewall zero hour did have technically a single player mode in the form of solo in which you could play the same multiplayer mode only you know you're by yourself basically and against the waves of bots now again it's entirely possible that's what that's referring to or it could be that's not a firewall title it could be just a brand new IP and maybe that's a single player or has a single player in us anyway let's keep going review features and events and provide insights on balance structure engagement and strategy work with a pod of engineers producers and artists execute those features promotes a design ethos that puts the player first leading to engaging experiences with long-term engagement so that sounds like very online live service type speech rice and manage gameplay scripts to provide player passives which I googled what a player passive is and I didn't really get any results that would match to this so I don't really know what that means build unique player equipment manage player inventory track player stats to find gameplay rules manage player progression and more so that sounds like a lot to do work daily to improve the quality of our projects through play sessions and feedback now does say projects plural so they might have a few bonds in the ovens you know what I mean provided high level direction own a feature or feature set from start to finish this includes fleshing out the design and then requesting all needed audio art animation vfx and code continue to iterate on the design and integrate these requested items as they come in so we go to the next part which is qualifications here we get a little bit of interest information about the engine potentially qualifications two plus years of relevant professional game design experience with at least one shipped title and here's the interest impaired here for us unreal for experience now the thing I wanted to say about that is you might be thinking to yourself oh unreal for again that's a bit of a bummer because you know unreal 5 would be cool but just keep in mind that unreal 5 I don't think actually is out yet or if it's available to developers it's only available very recently so it's possible the only way to have experience for unreal 5 is to have experience for unreal 4 so it could be that they're using unreal 5 which would be cool because of you know that nice technology and the light and systems that they have in that that could be very very exciting for us but whatever the case may be it does look like unreal is going to be the engine that we'll be seeing for the next first contact entertainment title they're also looking for experience in these other things which I don't really know what they are sequencer whatever that is some programming languages and whatnot so they also want strong game design skills applicants must be able to intelligently discuss the strengths and weaknesses of recent games and be able to list techniques used to make fun first person shoes or combats so the reason I highlighted that is just you know they're specifically mentioned in first person shooting so ability to pitch game design concepts in a clear detailed manner through strong written and verbal skills deadlines communication and positive attitude etc so the bonus skills are virtual reality and alternate reality experience or augmented reality sorry and experience with live operation games the rest then is just not too important to us but if you put all these details together a new title next generation virtual reality hardware because we got next gen we got vore over here live servicey you know kind of like firewall was where it kept having seasons and whatnot so that kept the game going and to buy back passes and whatnot the potential for missions and not just shoot 16 doors or whatever knock on 16 doors actual missions possibly with story although it didn't really mention anything to do with now or so here but the potential for some kind of single player stuff and the term they talked about you know talked about fun over the top game modes this role in game moments specifically mentioned single player first person combat and unreal so if we put all these things together we might be getting you know a bit of a picture as to what's coming next from first contact entertainment and it sounds like it's a lot similar to what's come before from first contact entertainment which is excellent as far as I'm concerned my fingers are crossed that it is firewall relays it although if it is a new IP I'm definitely going to be keeping an eye on that and even if it's like you know I haven't been the biggest Solaris fan but if they can improve it big time with new hardware next generation Solaris could be something that's very exciting so yeah all of that's what I've just said is just based on that job listing that you can see for yourself I will put the link to that's in the description below I've looked at the other job listings and they all seem kind of very not given away any details so I'm not sure how long that particular listing has been there I don't recall seeing us the last time I was on the first contact entertainment website but it has been a good while since I've been there so yeah let me know in the comments what you think about this information do you think it's firewall do you think it's something else what do you think about unreal could it be unreal 5 would you be disappointed if it's unreal 4 again is the mention of single player admissions is that something we should be looking into a bit deeper or is this something that maybe I'm reading too much into could that be talking about a separate project that they're also working on anyway that's it for this video thank you very much for watching and thank you to Decepticon for letting me use his music in all of my videos I'll see you in the next one bye for now and of course stay moist but you're fighting


Everybody for us here ribbon 2023 top Star Wars chrome hobby a box case number 11 random box style open the case and turn it so that the boxes are facing like me and then We'll do the random see who's got which box. I'll show you which box switch for the random course That's the whole point open in the case Stopson vector. What are you grilling some some? Yeah, some food All right, they're facing me I'm gonna catch them as every time now that's one through four on the left and Then Five through eight this one just I don't know why it's like that. Oh good one two three four five six seven eight Good luck on the random everybody We're gonna go seven times here five and two Names that numbers will match them up see who's got which box and we'll go from there Names first one Two three four five six seven Steven a top and bottom and seven times on the boxes one two Three four five six seven three down to one Steven a three Charles M seven Francis D five William and two Brandon K eight William and four and six and Steven with one We get those posted We'll get you a link and we'll get started. I don't know it's a strange question Well, it's illegal. So everybody's in corn. That sounds pretty good. I lost something once Steven a when number one yeah, I'm gonna cook me up some frosted flakes Aqua stuck Nope Cobb Vanth to one on and out in the Aqua One of the Cobb Vanth Fracture at your D2 because sin vectors cooking corn Milks, yeah milkshake and jelly beans refractor Migs Mayfeld Yeah, Bill Bill Burr fractor blue refractor Poe Dameron To 150 moon night there refractor Tuscan chief I don't think there is a season to refractor Luke Skywalker. They're trying to make it I don't know you know more than I do it sounds like Manga madness. I guess so manga manga.   It's too popular character. No Me too popular Salacious B. Crumb. That's right refractor Finn No, we talked about yeah, I didn't make a horse noise He went nay refractor cow screen is concerned Luke Ken and Jarrus Finn monikers Lane is at game seven tonight Celtics heat refractor Qui-Gon Jinn He's at It's off for two weeks. He went to his sister's wedding over the weekends His family lives I think in New York So we drove up refractor Mon Mothma drove up to Boston for game seven Manga madness there. Yeah, Lane seven. That's right Lane seven like the bowling alley Haja estuary. He said that it's rowdy, but he spelled rowdy R-O-U-G-H-T-Y Rough tea be honest. I'm really surprised 3PO and R2. You don't have a first appearance. Manga madness I'd expect like out of almost anybody. They were like R2 was like the first character you see I know that's what I'm not like literally the first but like one of the main Person that's literally every single episode. That's what I mean. Like box two is for William N That's why I'm really surprised. They don't know how many beers is laying. I don't know dude. I Don't know. He sent me a video. I'm afraid to watch it or he sends a video to the breaker chat Want to know dude. Yeah, who know? Yeah, J-mo Lane. No idea How many J-mo's is he in? I don't even know he also had his first Jaeger bomb the other day and he said he liked it So oh boy We're gonna see Lane on like the news. He's gonna be like climbing a pole He's gonna like climbing one of the street poles after those Celtics win the night Refractor Saw Gerrera Lane hadn't had a Jaeger bomb until like this past weekend Manga madness there, which is very strange.  I guess we're gonna have to have Jaeger bombs at work Fifth brother refractor. I haven't had a Jaeger bomb probably like ten years probably like eight nine ten years Aqua Quinlan Vasta 199 Refractor mall. I would hope Lane's rooting for the Celtics.  You can't root for the heat and sit in nosebleeds at the garden. Oh No, man, just don't do it Lando, I know Cal rizian Second factor, I'll send a box wrapper with this one. There's a ding on the Lando Cal rizian Donny bombs on Wednesday. Oh geez Got to make some of the national Yeah, I'm just gonna Be drinking my hotel room every morning before I go break manga madness refractor as a bridger Jabba the hut refractor Donnie's a true one of one Yeah, I guess so Ever had Jaeger bombs refractor Han Solo Don Solo. Are we all true? What if you're an identical twin?  Yeah, you got me refractor Boba Hunter Manga madness manga manga Do you want a manga actually Emperor Palpatine refractor? I want 15 or 20 of them Steve Palpatine tam revora 85 of 99 green refractor auto tam revora Susie McGrath C3PO refractor. Yeah, Donnie can bench. Actually he benched 320. Yeah, I wish I wish I could have a Stephen a box three. I think Celtics can play the nuggets better Celtics that have would have at least have a chance. I don't think the heat wouldn't stand a chance The heat I think we get swept the Celtics, I don't think will refractor Adam Blackburn They have some decent match-ups with them If they're fully healthy and they play the right line up Celtics make it to the finals. I think it's game six then I think Denver sells the edge But I don't know if you win four straight against a team and you're riding that high that could carry you a long way refractor Yoda That could just carry you to a championship It could That's what the Celtics got. They got they got a fire. The Nuggets been off for like a week and a half Fracturist soca Green refractor Sabine renda 99 It's a refractor Crescent and madness No, well, you'll know fracture Dio. I do not I don't think that's a thing I don't even know what that means What is pumping iron? I was gonna make a joke to make a little roll, but I do rhyming man might hit for the cycle That's that's interesting.  I think yeah last week. I think fracture dark ray Still very new refractor Taladorf Lifting weights now. What is lifting weights? C3PO Fractured Ned B taking taking anything up that has mass to it This yeah, that's what you put to the weight Horses looking always that I waste about three ounces of work out Wait till I pick up the whole stack of cards at once refractors ever elios, and that's a real Money has a lot weight on our shoulders. There is somebody sitting on his shoulder right now.  Maz canada Toradosa so many weights manga madness Thousands of tiny weights and reverb refractor that'll do for box three bowman filled up. Yep Number four William and for number four 60 ounce of pop tarts. Yeah, Sean was Sean was Hitting the 60 ounce of pop tarts machine hard today Dude I come in yesterday, and I got I was like wash my hands at the sink okay, and I just look over in the toaster I'm like who's pop those pop just sitting there. So happy to me today. I did the same exact thing So let's put in pop person the toaster and like oh summer is never eating them.  Oh my god, dude Pop-darts in the toaster fracture general a oregano. We're taking the pop tarts out of his page Box five. I yeah, I was saying that cuz it has like the flap on the outside. So who knows who knows But that is not uncommon in this we had a case with like three of them like that Refractor count dooku wait what? The flap is like out. Oh seal with the flap is not like tucked into the Manga manga Don he doesn't know what I'm talking about. Do you know what Fanta is? Yeah, it's a drink Tuscan backwards Tuscan warrior Backwards variation Tuscan warrior pretty pretty rare. This is casinos. I own a Pop-darts for sure expire in Florida. It's humid all the time here. So if you leave any food out in the counter long enough Yeah, it's gonna be moldy Got Leia refractor Han Solo like living here. I keep my bread like in the fridge I don't keep bread not in the fridge. I'm unless I'm gonna eat it like a day or two It's refrigerated so it keeps from getting moldy Blue refractor fifth brother out of 150 a Manga madness Jen Erso refractor refractor Chewbacca. I don't think you just scrape mold off and everything's good, dude. I Don't know if I don't know if that works like that green refractor monikers snips Lightsaber match to 99 just burn the ball off the fracture Luthor rail very nice snips monikers It's snippy with me Baru lard there was born. Oh, they should have done Monica's sky guy for Ali would you do that illegal? Yeah, then the whole dishwasher gets moldy Just want you a bunch of yeast in there Manga madness the drawings sounds fair build up your immune system Drink out of moldy cups every day so they should be chroma factor. Oh the horse came back well Monica's girl kid groggy Baru lard is blue refractor auto to 150 Money peace peace, I think and Padme a refractor onto box five box five is for Francis D Her daily performance like open to coming back to Star Wars for what? I don't know Freeze refractor People that keep things in the oven.  Well, you just keep a pan in the oven I feel like it's all crazy I don't know How do you will keep think the store things in their oven or microwave oven? Would you rather how do people do that? Would you rather open up the bottom thing of the oven to reach a pan? Or would you just rather open up the oven? Okay, they're there clean nice What kind of question is that? Because if you just need the oven no pan you still gonna open the oven they take pan out of the way Yeah, we don't have to reach all the way down to get the bottom thing under the if you just need to turn the oven on You don't have to reach down there either way. I don't see what's going on I don't know am I am I in like looney tunes right now? What is happening refractor the Grand Inquisitor? Looney tunes parents get baking sheets in the oven for storage. Yeah, see like To me that's just crazy refractor the Mandalorian it might be common like Listen like as you get older, I think my in-laws do that It probably hurts to like bet all the way down to the ground to open a thing So you just open the other manga madness plus stress on the body Tell your grandma's to figure it out refractor Omega. I Mean my in-laws do it Like I feel like one time I was gonna We were like baking something and I like started pre oven and my wife was like we gotta get it Yeah, I get the stuff out. I'm like, what do you why why is there stuff in it? We haven't even started cooking yet. I think that was a common thing for my Do on the auto Do Oh Lynn Roberts and Bruce This is just a hot topic issue of the night.  You have to throw anything in the microwave just open the microwave Are you gonna like take your bowl of spaghetti up to the microwave and just like start dumping it in there? You have to get a plate and put on the counter regardless Oh, you're good. I feel like I'm just talking to an insane person right now if it's Darth Vader on the anniversary DJ refractor Hey legal source all sports is Don't you guys know that's how you charge a phone I charge my phone in the microwave every day But that's not weird remember those videos like oh you charge your phone in the right way kids like Long and mad to see it all you it yeah, dude instead of plugging in your phone or putting on the charging thing Pop in the microwave for 10 seconds. It'll charge a lot faster refractor supreme leader Snoke I'm gonna get some like Like fact-check Like Don't put phones in microwaves Refractor phoenix shant You toaster phone to charge that's a good idea Blake because if it's like really cold outside I don't want to pick up a cold phone. I'll be like, ah, it's too cold So I put in the I put in the toaster put a bag of popcorn in there. It's only an issue I Preheat the microwave refractor neon um eight Box six is William N. That's a good idea Jordan. I like that idea I feel like I feel like an iPhone like a new like Android like a newer phone You could not leave in the in the in the fridge like I feel like it would just malfunction Yeah older phones though you could you could leave in like the oven probably they'd be fine attempts of like negative 40 and like 140 Fahrenheit basically tech refractor Jumps right in your hand when it's done charging Right out of the toaster cloud refractor Monica's true. I'm gonna go to my in-laws house. We're like get this stuff out of here get this stuff out of here You can't fit all your stuff in the cabinets and you got too much stuff That's actually probably true For sure is You're just saying it was same with my dad growing up or like my parents growing up. It's like why do we have? 14 different sauce pans are running like I Don't get it Fractor Princess Leia look your parents had a dream of offering a sauce The sauce thing. Oh, good madness, but they what? Said like sauce pans, right? Yeah Be the first Fresh and they want the prep meals for people Then I guess we would have done that kid Monica's and Maybe I'll understand things more Jerick Yeager.  I just say as fast as I can now.  Yeah Her name is Mary Elizabeth Wanstead. I don't know her name Ramona flowers as her character and Scott Pilgrim versus the world manga madness I don't know anything I know you better Cassidy and or a factor. Do we know what the chick that's playing here play them though? What does she been anything the chick that's playing here? Yeah, I just said she played in Scott Pilgrim versus the world No, she's been in other TV shows and stuff Charles them seven I was just trying to figure out who was something that I've actually watched you do have a laptop You could look up. I do live-action here. It's true and you can see like what she was in I don't know like everything that was there. I know a lot about her. She's not like a huge movie star So I thought is there a site that I was in box seven You could literally search Mary Elizabeth to their Winstead or Wanstead And it will show up you're really some kidding Yeah, you go to Google This is a keyboard Okay, press the buttons in order that you want the letters to show up as whoa greener factor boss Nass What's a Google? It's a 99 Bobby Frick a Fracture Schmi Skywalker. I know Blake excited for a Soka got manga madness Leia there Guys think Lane's cheering for the Solox of the game tonight. Katsu on your refractor. Obi-Wan refractor Literally like nothing. I watch Well, yeah, I figured if you know who she was That's you've been in stuff Got a Han Solo Okay, you'll are gonna refractor Dude Scott Pilgrim versus the world is great That's an awesome I was like the only person I know who played it was that movie is like I feel like very popular to like a Wide range of people Manga madness any anyone else like Scott Pilgrim versus the world the film. I'm not I've never read the Graphic novel Michael Sarah Sarah sir, Junita. Yeah, that's like the only person I know Chris Evans, you know Chris Evans Captain America. Oh, yeah, that's Fractured camera boy drawn up like yeah, I know Chris Evans like him Like R. J. B. General the general Right or right get on mine Go to Princess Leia saves on time It's only at lack or Well, that's interesting Refractor grief cargo green first appearance is Han Solo Charles nice card there to 72 of 99 Short print first appearance is green manga madness Like everybody my age loves that movie Scott Pilgrim versus the world refractor Lando Make the scene that way Sierra Junda auto nice it's Deborah Wilson Sierra Junda Really cool character all most of the characters in the in the games are awesome Yeah, the games they have a really good character good auto and good short print. There's a zory bliss as well That was that was really good box. There you go. Charles. Good stuff, man. All right box eight now everybody box eight Brandon K Watching bad movies Like what transformers anigan skywalker refractor Oh, I see you're talking to yeah, that's good. That's solid box That was solid Now hon that hon helped the box out a lot. Yeah The hon was big refractor k2so manga madness Farm boy. Yeah, the bases those first appearances are getting fairly well Yeah, I get it now. I just didn't know I was like I was like, it's probably us. Yeah, I just didn't know Good job guys solid stuff for sister refractor movie 43 that's uh that is a movie for sure that was uh Time I'll never get back in my life How would you guys explain movie 43 that movie? It's like if rise of skywalker weren't a star worth movie That bad. That sounds pretty bad Yoda Sabine Ren refractor Here cocaine bear is actually decent like there's it's kind of like funny I mean you just look absurd on the trailer. I like the menu. The menu was pretty good I just like Ralph. How do you say same finds? Looks like Ralph finds anything he's in he's great manga madness sonar son Is that an orange manga madness? Yeah, it's all but 25 very nice card You go Brandon Cobb banter fractor Yeah, the menu wasn't saying Not totally unpredictable. Just I thought it was pretty good Groga refractor Jabba, he's just good at everything now, dude Jabba Yeah, dude. Jabba the huts my favorite actor He deserves an oscar No one could sit in a chair like job refractor kylo ren That move very no one can run Jabba's palace like Java except for boba Manga madness. This one has a ding in it. I'm gonna send the box and wrapper It's on the top uh Edge there in case you want to get that one replaced you did get the orange of that card So I'm not sure if uh I'm not sure if they'll replace the base insert anyway, but it's worth a shot if you'd like to Yeah, on a tailor joy is good to refractor bb 8. Oh, then john john john lasagna was in a john leg was ammo Everybody likes john leg was ammo Donnie I can't just keep naming very well-known actors and you say who all night. I can't do this Taladurith refractor auto great I don't watch movies man You can't keep asking who is looking up blue refractor anakin So your last pack to 150 nice There we go last two boxes were very good Blue refractor anakin and a mace refractor. That was a showdown right there That's gonna do it for the case. Thanks y'all. We're on to some baseball for a bit