from Las Vegas, it's theCUBE. Cover EMC World 2016, brought to you by EMC. Now your host, Stu Miniman. Welcome back to Las Vegas. This is SiliconANGLE Media's production of theCUBE at EMC World 2016. I'm Stu Miniman with wikibon.com. Happy to have on a couple of partners. Recently won the distributor of the year from EMC. From Avnet, it's John Tomfatt, who is the director of supplier solutions for the EMC part of the business. And Doug Sobieski, who's financial services sales executive with Avnet. Gentlemen, thanks so much for joining us. Thanks for having us. Thanks for making the time. We really appreciate it. So, first thing, I want to get your view on the show. We say, you know, there's lots of customers that are here. They're going to labs, they're going to sessions. There's the partner ecosystem showing their new technology, EMC is there.  We've seen great changes in the channel. John, maybe start with you as to, what's the partner experience here at EMC World? I think there's a lot of excitement, right? Dell Technologies is on the lips of every person I've talked to here at EMC World. So, clearly, it's about opportunity. And I would just say that our EMC partners are very excited to engage with Dell. And we're getting lots of inquiries from Dell partners who want to learn how to start an EMC business. So, that's where it's at. Yeah, and Doug, have you been to the show before? No, this is my first time. All right, so let's, as a newscomer, get your vibe. It's exciting. It's great to see everything that's going on in the industry. It's great to see the recognition that Avnet's getting as well, but it's been a lot of fun. All right, so speaking of recognition, John, you know, some pressure releases, some awards, you know, to tell us what the news is. Well, I think the most exciting news is the fact that we won Distributive of the Year. And I think that speaks to a couple of things. It speaks to validation of the hard work that we've worked on behalf of our partners, right? So, it's all about partner enablement and getting them to revenue faster. And I think the award speaks to the effort that we did there. Relative to the press release, it showcases a solution that we put out. In fact, it's an Isilon SD edge appliance, right? Where we integrate it with Dell servers. And I think that also speaks to the leadership that we innovate right along with EMC and make technology accessible for our partners. Yeah, John, maybe it would be helpful to our audience that maybe knows kind of what a distributor is, but kind of solutions and some of the pieces that Avnet puts together. You know, how's the business model changed a little bit and what does that mean? Right, so I think that in the old days where distribution was about stocking product and really about financing products, I think distribution sort of 2.0 or distribution 2.5 is about how we help accelerate how partners transition in terms of IT transformation, right? So we're all caught with how do we all speak and help our partners make money and sell the solutions that continue to make them relevant. If I were to then describe what Avnet is today, is we are the single best enablement engine that helps partners adopt EMC technologies and its solutions and bring it to market, right? And be relevant in the IT transformation discussion. All right, so Doug, you know, there's a bunch of financial aspects to what he was saying. We talked to customers, time to value something that they say, you know, it's always about moving faster and accelerating. You know, what's that mean in your world? What's going on in my world is we're seeing one of the biggest shifts in how end users pay for IT assets.  And there's a very recent event that has accelerated that. And that's changed my world incredibly because there are some recently announced accounting changes that are coming that are going to require that leasing, all leases will eventually need to be on the balance sheet for the end user. So our partners, we're working to enable them because their phones are ringing with end users looking for usage-based models. And AvNet, we knew this was coming. And years ago, we developed a consumption-based master services agreement concept called Capacity Now, which we created from the ground up to solve around these issues that we knew were going to come faster than most people expected. And you know, we feel that we've got one of the most transparent, friendly versions in the marketplace that's a true utility model. So if I had to quickly describe it, think in terms of your cell phone bill.  If I go beyond that, I'm going to pay on a per gigabyte basis. The cool thing we're doing, you know, somewhat, our secret sauce is several years ago, we acquired a software that allows us to convert measurement to billing in real time. So our partners and users, like your cell phone bill, they can go into a portal, see how much they've used, see how much that's translating into their cost on a monthly basis. And it's really an exciting time for us. You know, Doug, how much are customers benchmarking that against, say, public cloud as an example? Like you kind of said, there was traditional kind of capex, you buy depreciated versus that on-demand world of the cloud. That's the comparison. That's what they're looking at. But especially for customers that, you know, they want it on-prem or they want their team to have their hands on the assets. That's a big consideration. And, you know, there's some other financial aspects about the way public cloud costs perform versus a capacity now like product. So there's a lot that goes into it, but, you know, we're there to support our partners and have those conversations with their end users so everybody understands how it works. So, John, you've worked with EMC for many years now with the Dell piece coming in now. You know, what does this mean for the channel? You know, Dell and EMC both have had, you know, changes in how they deal with the channel. You know, what's the vibe? What do you hear from your peers? You know, what are some of the conversations you're having? Yeah, I would characterize it as there's a certain amount of anxiety for folks who don't really understand the integration. I think David did a great job during the keynote sessions to help folks really understand the fact is between EMC and Dell, it's truly the best enterprise products company on the planet going forward. I think from a, what I'm hearing from our partners is that it's an opportunity, right? It's a bigger opportunity, a bigger slice to the pie that they would otherwise wouldn't have access to. So, so far at the show and folks who've heard the keynote message, I think they're much, I would describe it as there's a certain level of anxiety that's been addressed and now it's about excitement and that's what we're seeing. All right, great. So, you mentioned some of the executive means you have. Give our viewers that couldn't make it to the show. You know, what are they missing not being here? What's the Avinette presence, the booth, the floor sessions? I think if folks were at our booth and were able to see a couple of the solutions that we were developing, they would see our Iceland SD Edge solution that's part of the press release. What they will also see though is unity with cloud array punching out to a public cloud, right? So we're trying to make the conversation of hybrid cloud computing and an EMC context real, right? So if you think about it, it was talked two days ago, we've got it functioning live real time in the booth and it's a powerful message for us from an enablement perspective because what we do is we take what we do at our booth and then we use it for the rest of the year to train our partners, right? To how to get the conversation going. So we've got cloud pools, cloud array, cloud boost, all interacting with a public cloud and in fact, you can get access to those clouds via our Avinette cloud marketplace. And that's pretty exciting. Yeah. So Doug, I'm curious, when I think about some of the financial models, one of the big shifts I've seen in the recent few years is refresh cycles tend to be reduced. If you say public cloud, what version are you running, what thing do you have that doesn't exist? Do you run on theirs? Any commentary you can give on that piece of it is how the financial tools help customers with keeping up on the latest technologies. I'll say that over the last probably 15 years, there's been a decrease in the number of fair market value leases as the product that people use to manage those refresh cycles, largely because the soft cost content had continued to rise. With what we're doing with capacity now enables our partners to support their customers to manage those refresh cycles a lot more effectively just because of the way it performs as a financing device. All right, so John, sometimes we come into these shows there's a little bit of buzzword bingo, you know, software to find this, you know, super hyper converge that. Sure. You know, what have been some of the things that have come to the top of mind conversations you've been having kind of from the technology standpoint. I know you made some new announcements, but which things are becoming real in your world? So I think hyper converge is real. It's now very real and we're very excited with VxRail. I think in general there's been a big market adoption. I think you've heard that from the EMC executives. Yeah, Wikibon's tracked that for a few years now. So, yeah, we're pretty excited. I think the next market opportunity that is being spoken about now that represents the opportunity over the next 12 to 18 months is just that software defined. I think there's a lot of buzz, a lot of talk, but it's about how do you get those solutions to be consumable in an easier method, right? And that's where Avnet's looking to add the value of bringing those, whether it be from an appliance perspective or through a cloud consumption model. Yeah, a term we've used a lot over the last year or so, it's frictionless. So, Doug, any final things you want to say about just the way that the consumption model can be reduced, especially sounds like financial things, customers must have, do I really need to learn all these? Do I need a full night financial advisor to help me with this? That's the challenge. They're hearing of all a variety of models in the marketplace. And the reason why I'm having so much fun in my job today is I'm out there helping them understand what the challenges are, what the red flags are, the things to worry about, and helping customers standardize on a single contract that could essentially cover everything in their data center. All right, John, want to give you the last word, big takeaways from the show, bring us home. Thanks, I would say that the biggest takeaway for our partners is the fact that with the Distributor of the Year Award, it validates the work that we do, and it validates the fact that our partners are growing faster than the marketplace. And if you're not an AVENET EMC partner, you ought to consider being one. All right, any name change you have to have to the partnership with Dell Technologies going forward? No. All right. John and Doug, really appreciate you coming, showing in, and congratulations again on the Distributor of the Year Award. We'll be back here getting close to the end of three days of live coverage here from EMC World 2016. You're watching theCUBE.


This paper examines breastfeeding and complementary feeding practices among two indigenous communities in southwestern Uganda. The authors found that 99% of mothers were currently breastfeeding their youngest child and all mothers noted that their child had experienced at least one episode of illness which affected breastfeeding. For key factors affecting breastfeeding and nutrition practices were identified, marginalization and poverty, environmental change, lack of information and poor support. Recommendations including gauging with local and national authorities to improve breastfeeding and complementary feeding practices as well as addressing the drivers and consequences of alcoholism and strengthening family planning programs. This article was authored by Julia Scarpa, Leah Burang Ford, Sebastian Twazikomwe, and others.


Din Tai Fung often considered the best Chinese restaurant chain in the entire world. There's also very controversial Amongst Chinese Americans, we're gonna talk about why and what maybe the underlying issue is because it goes much deeper Than soup dumplings. Oh man the things that divide a community man first off Andrew RIP to Bing Yi Yang Passed away at 96 years old He is the founder along with his wife of the Din Tai Fung Empire Andrew They're very famous globally for being the most famous Shaolong Bao soup dumpling chain in the world He was from northern China. He left during the war. It went to Taiwan had a oil company started selling soup dumplings You know infuse some Japanese techniques to get the paper-thin skin and make sure everything of one was consistent I mean and then the rest is history. Yeah guys, we're gonna talk about it Why why is this so heavily debated and often it becomes a little bit of an emotional possibly political and Ideological issue, so please hit that like button and check out other episodes of the hot pot boys David Let's take it out from the micro min to the macro Yeah, I'm not gonna lie Andrew the micro is always shocking because even on the RIP Bing Yi Yang post Andrew Some people could just not resist and be like well I think the Din Tai Fung is overrated and overpriced This is a huge debate if you're gonna say that on somebody's RIP post like clearly You just really strongly feel that way. It's the internet But yeah, David, let's just tack you the tackle this real quick is Din Tai Fung in 2023 overrated No, but No, but I will say this the Taipei 101 version is 10 out of 10 the rest in Asia are 9 out of 10 I think once it came into America It slipped to 8.5 out of 10 and some of the locations are like down at 8 out of 10 now So you're looking at a 20% discount off the peaks already just because they just can't make them as good as So you're saying it might be causing some confusion because some people are going to the Glendale location or they're going to this new New York Location and they're like it wasn't as good as I remember or this is not worth the money because they are kind of pricey So but then obviously whenever you come back from Taiwan everybody's like, oh my gosh didn't I thought it was so good Oh stop yeah, I'm not gonna lie under the one near our hometown in south center by the airport in Seattle It's like a 7 out of 10. That's the worst Din Tai Fung I've ever been to here's my opinion after having eaten a lot of Shaolong Bao from Shanghai to America to Taiwan and Southeast Asia even it's like I I just think Din Tai Fung is still the gold standard I'm not saying it is 100% always the best and better than everything else Especially per dollar, but it's the gold standard and everybody compares their soup dumplings to them So I don't know tell me another gold standard right show me another one Yeah, I'm not saying there's not mom and pop shops here and there that like don't give you a better value for your dollar But as far as a multinational chain, no way. I mean honestly, that's my honest opinion not sponsored I'll say this Andrew What are the two camps of people who are inherently anti-Din Tai Fung in the Chinese-American community one of them and shout out We're part Shanghainese is Shanghainese people. Oh, yeah, well that come on to claim The Shaolong Bao obviously they don't want a Taiwanese chain to make the best Shaolong Bao when it originally Shanghai's taking credit Right just like anybody from Philadelphia doesn't want to admit that there's a better Philly cheese steak outside of Philly possibly like Which is very very possible. That is a totally human nature. I will say this though Andrew The Shaolong Bao actually is originally from Nanshang Jiangsu or some people even argue Wuxi Wuxi and You know Nanshang they're close to Shanghai, but you know how it is Andrew in that region Shanghai is like the big dog Water town it's gonna pretty much take credit for everything around that zone, right? So that's the nativist angle, right? I guess for me in my perspective. That's just pretty logical You're not gonna change those people's minds, right? However, Andrew, there is another crowd that thinks that Din Tai Fung is white people soup dumplings, right? And I think these are a lot of Chinese Americans and a lot of people who associate the fact of Din Tai Fung's popularity and the Fact that you can go to Din Tai Fung's and there are like all types of people eating non Chinese people eating there And they're very clean. They're very fancy the buildouts are expensive very expensive. Yes It's not cheap to eat at Din Tai Fung So then they associate that with oh, this is white people Chinese food now.  Let's just be clear The first locations of Din Tai Fung were all in Asia Taiwan and Shinjuku. Yeah Shinjuku Tokyo So what is it because it's less greasy and it's cleaner was that to cater to white people or was that to cater to Japanese? Or was it because Bing Yi Yang actually really admired the Japanese like mannerisms, right? Yes guys in this video I'm trying to tell you it's not the white people's fault here It might be the Japanese the job. Yeah, because obviously Japanese taste there are the way they look at food and art They obsess about it. It's right typically right They obsess about it the very such attention to detail professionalism cleanliness, right? That's kind of the Japanese way as right, and I'm not saying there's nobody in China doing that Especially of course the imperial chefs like that and stuff like that But on a general basis people are probably more like Chabuduo or Tom doll, which means like you know close enough so David if Let and let's take it out to the macro now if Din Tai Fung is Super clean and super systemized like they're putting 18 pleats in each little Shalom about we were in the back of the kitchen before I went I cooked Shalom out in the back of the Taipei 101 location. It is a very robotic systemized and very everything out Yeah, they weigh everything and and it's so exact so precise. I guess like why won't more people admit That it's like the gold standard Shalom bow or what is it about this that gets people so emotional? Chinese American foodies that are like no no no no even like somebody like Freddie Wong nice guy But I don't agree with his Chinese food takes right. He says no Not no more than we do a good Chinese restaurant or that's over done like it's not worth it. I'm like Yeah, listen guys, I mean to me it just is like a nostalgia for like the folksy sort of village way of running things I'm not saying there's not some great products out of the villages I've been to Chinese villages myself. I've been to places run by people from the villages There's a very certain charm to it. Oftentimes the surface is more Services more personable and of course it's much much cheaper But we cannot think that that can be the only representation of Chinese food that Chinese people want to eat right and you're saying that because Chinese food was not only solely for like Blue-collar people first of all there's great dishes that come from everywhere I think we did a hell of a job blue-collarizing it or blue-collarizing Dishes that were always staple dishes or even blue-collarizing Imperial dishes for the American market, but that doesn't mean that it's meant to stay that way forever And I do think that mindset within the Chinese American community is slowing some of the progress, right? Like obviously like Japanese they don't care They'll charge like six hundred dollars per person for dinner But they feel like they're so confident in providing that amount of value for six hundred Are you trying to say that possibly sometimes the Chinese pragmatism the extreme Chinese pragmatism? Perhaps overly pragmatic if you will can prevent Chinese people or Chinese culture a cuisine From moving to where it could be yes That is 100% true, and I don't know where people you know I get it I think the pragmatism is very logical looking at where things were with the poverty and the austerity And I think people spend a lot of time with their grandparents and their parents and they learn that pragmatism But that pragmatism really is a huge impediment to moving the cuisine forward two things like how noodle two things like Dolar shop Da Long Yi, you know Din Tai Fung team Ho Wan. I'm not saying all of these are 10 out of 10 home runs, but you got to keep trying Not everything's gonna stay the little mom and pop forever Those are great and those serve a different demographic but that demographic can't be like oh I'm getting these Shaolin bowels half off and they're 80% as good and then hate on this one listen No, no, and if you say you don't want to go to Din Tai Fung because it's overpriced. I totally understand that I don't go to Din Tai Fung all the time partially because it's just it's just very pricey right so I get it I am price sensitive everybody like you know, we are we do Chinatown cheapies.  Chow's or something Yeah, I'm not talking yeah, I'm not talking about that But I guess every time somebody kind of sees that open some people are like oh they're trying to replace My narrative the narrative that I'm part of and that Chinese food is just can be very cheap And it's the best deal and it's extremely folksy and you don't have to care about the menus You don't have to care about like you can they can be a little bit sticky and the service isn't good And that's how it should be and I'm like That's how some of it should be to keep it cheap it has to be like yeah And especially for people they should run businesses, you know to survive and feed their family But it doesn't mean that that's who we all are Or what we have to be or that's the limit of what we can sell our cuisine to to other people at right Yeah, I mean I'm not gonna lie just looking at the design of a Shalom bow David The fact that there's the gelatin that melts to make the soup And then you have to fold it all together and and very delicately steam it I feel like that's that must have come from like the middle-class and listen man You gotta understand the dispossession of a narrative like that's the same thing that a lot of people are going through in America right now Right certain things that felt like they were for them or they fit the bulk district of distribution of a group But all of a sudden this whole framework is changing on them. It makes people feel very uncomfortable, right? Yeah. Yeah. Yeah And obviously this is something very trivial, right? We're talking about the niceness of a Shalom bow spot guys We're literally talking about dumplings here, but it is Also kind of an analogy for what is happening around tribalism listen a lot of people in America And this is taking a super super macro But a lot of people in America feel like their country is changing before their eyes Well, I can't turn on the TV and see Johnny Cash anymore. I got to see people with Draco's An extendo clips. I don't know all these purple hair all these different identities man. I'm not ready for it That's not how I see the world and then you got coffee shops serving lattes for seven dollars I mean, you know, I can't even pronounce it. I don't even have lattes. We just drank black coffee for two dollars What's going on here? And I do empathize. I empathize with anybody who feels like their narrative is shifting on them I mean, I'll give them this and I'll end it on this on my part Life was simpler back then for sure life got more complicated. It's a more nuance world I admit it. I even grew up in the nuance world. So I can feel your pain. But anyways taking it out back to Chinese food You know, I just don't think As people who love Chinatown cheap eats, I don't think that Chinese food always has to be cheap and I don't think that Those expensive Chinese food is always overrated and it's not always overpriced. Sometimes you want a high-end experience You want to be served politely and precisely by a Chinese person or somebody who works at a Chinese restaurant And you want that experience and you want to know that your culture can reach this level It's great to know that it's also at this level. But yeah, good to know it's at this level Hey guys, there's room for everybody at every level. All right, everybody We're going to wrap it up right there. Let us know what you think about this whole thing Obviously, if you're a foodie yourself, like do you think Tintai fung is very overrated and why and what does it mean? Like what do you want to see Chinese food in the future? Is it a free-for-all? Everybody can just Fuse it do whatever make it expensive and do it at your own risk Yeah, and do you think that asian americans or chinese americans? We kind of get attached to this like Certain way we grew up and then once it starts changing on us Do we feel uncomfortable with it or should we just change with it? Let us know in the comment section below I don't think there's a wrong answer. Keep it civil until next time. We the hop-hop boys. We out. Peace


In 2013, RETs attempted to resolve the issue informally when possible, without violating confidentiality by first bringing the issue to the attention of their supervisor, and then the individual involved. RETs documented their efforts to address any of these issues. If the matter cannot be resolved informally, they reported to the appropriate authority, employer, director, regulatory authority. If the matter meets the reporting requirements of the BACB, RETs must submit a formal complaint to the BACB. So if you're having issues, schedule a meeting. The most likely love to do that. Talk about your concerns, find the solution or have it addressed, and any other ethical concerns from this document. If you're having issues with any of them, that's your chance. Get with your BCBA and your supervisors and go through them. They should totally meet you halfway and or explain the position on why they took what they took. If you're having a hard time and things aren't changing and you think they should, then you have the right to report things to the BACB.


Good morning everybody. I hope you can see and hear me well. So, now we will start the lecture for Monday morning and also you have a new lecture at today and the talks title is its security assurance from the perspective of a system administrator. So, we will have a lab related to this topic also. It is on Friday afternoon and tomorrow morning we will take you through little bit more detail of what the lab will be and what you will learn from the lab. So, today let me build the background for that and I have the first two parts of the talk which will enable the good and the bad are really you know maybe five minutes each sort of a big higher level overview just so that we understand the lecture in the correct context. So, most of the focus of the lecture will be on the part that is called ugly which is how you monitor, analyze and react to security incidents in your infrastructure which provides the services for a campus or an organization or a company and so on. So, good bad ugly in case some of you do not know is the title of a movie. So, I like to divide my talk into three parts. So, let us just start very quickly with the good. After this disclaimer that in almost any topic you have heard this story and the Gajanya, five or six blind men trying to find out what is an elephant by touching different parts of the elephant and so I want dwell on the story and security is like that depending on where you come from whether you are a programmer, whether you are a end user, whether you are a system administrator, whether you are a hardware manufacturer or a programming language designer for each person has a role to play in ensuring the security and today we will be probably playing the role of the scissor which is a wall fire wall. So, on and not the part that you have been probably talking about earlier web applications and how to design for safe applications and so on. So, each person has of course a role to play and elephant has all the parts are needed for it to work properly. So, with that introduction a 50,000 feet view stressing the same point that if you want the entire landscape you are flying way above and you want to see the whole of India and you are in a rocket this is how security will look that there are many, many parts why are systems insecure is the top most part which says vulnerabilities. The vulnerability could be in an application, it could be in the host, it could be in the network, it could be the user who is not careful with his passwords and who is clicking on the wrong links and so on. And of course, we start with the requirements that irrespective of why these things are happening we want a lot of requirements which we will again see later somewhere in the slides and then we will see why it is not safe who are the threats this is not in today's lecture. I am saying if you teach an entire course and you want to have a full feel for what is security then this is also important who is the attacker, what resources they have, why they are doing it, how to track them and so on so forth. And then this is a very, very important part of any course on security which I think a lot of it you have been doing in the first two, three days. What are the mechanisms to provide this security? How does the system be made secure internally and further cryptography is the sign going on without that you can do nothing and therefore you are learning all this and today will be a little bit about firewalls but the focus today is on what I wrote in the title security assurance. So, assurance means guarantee that irrespective of whatever mechanisms you use and whatever vulnerabilities you patch and so on how do you give the assurance that nothing bad is happening. So, for that the part that we will be focusing a lot on in the later part of the lecture is what is called monitoring, log analysis, anomalies, emergency response that you have to constantly know what is going on in the network or the systems, the server, the applications and without that you cannot be sure that things are okay. So, this will be the focus today although it is looks like a very small part, it is an important part and in the lab on Friday you will be using some tools that help you to do this, monitor, react and analyze threats and react to them. So, now let us go on to the part which is highlighted here the good and I will just spend a minute or so. Today we know that without computers we cannot be relying on paper, books and film and what they used to have in the libraries in the older days, magnetic film tapes for which people read and go and spend a lot of time. Today everything is instant on the internet, there are search engines using which you can access information very fast and therefore the role of the teacher is moving from this part of the inverted pyramid which is to convert information to knowledge which is what lot of teachers normally do, use well-known textbooks, repeat what is there and this sort of thing today is much more easily accessible to the student. So, the teacher's role is more here that from that knowledge how do we distill wisdom, so how do we teach a student how to learn what to do and so on and so forth and of course in a lighter vein so that Monday morning does not feel so bad in the Indian tradition, even wisdom is not the top, the top is of course moksha, moksha means you do not have to know anything, you are detached from the world and so on and so forth. Let me just spend you know 15-20 seconds telling a joke which many of you may have heard that when the Americans were excavating for constructing a building they found a lot of copper wires buried around 20 feet from the ground, so they sort of said see even 200 years back our ancestors knew computer networks, they had ethernet cables and so on and so forth. So, the Russians then next day they were doing something, they went a little further they found optical fiber, so they said our ancestors knew optical fiber and they could do more bandwidth and so on. So, what happened in India? 20 feet, 100 feet, 1000 feet nothing happened, so they said we knew wireless or moksha, we could do networking without wire, so that is the joke. So, the reason is that networking today whatever may have been the ability to live 100 years back with or a little bit more last 4 centuries, last 400 years there are very, very brilliant people and Apple fell on somebody's head and he wrote things for which he is still very famous. So, that is Newton and there was Ramana Jammu who just used the notebook, pencil, sat all alone and he is still very famous and most of us do not understand many of the results that he derived. So, these sort of things are all called small signs that is not possible today to the same extent that it was possible 200, 300 years back. So, we will not debate this, but maybe you can think about this later. What happens today is that without computers and without very powerful computers no signs you know no branch whether it be molecular, biology, chemistry, physics you name it. There is no signs or engineering that can do without computers and computers alone is not enough, one computer in one room is not going to do signs. What you need is collaboration, you need data generated from various places to be available instantly, you need rich as working in various places to collaborate, do parts of the experiment like that you would have heard of DNA sequencing and so on. Thousands of researchers all over the world splitting the problem into pieces cooperating, applying their energies in the right places and so on. So, which is entirely what this you know computer cyber and network security is all about that all these good things can happen and we are going to conclude the good part now can only happen if the network is stable, if the computers are not attacked and there is no fraud, there is no bad things happening. So, this is the reason why we need to quickly take a look at what is the bad and if you do not do that then already life is very difficult for us. Mathematicians like Ramanujam today cannot work without huge computers doing a part of the work for them, you might have read I do not know how many if you saw just a few days back, I hope now most of you do not smoke but all of you have seen cigarettes. So, about 50 years back in the scientific American a puzzle was posed, if you take seven cigarettes can you arrange them in some way. So, that every cigarette touches or other six, you understood the problem seven cigarettes each one should touch the other six. So, this proof was done using 30 days of super computer time a month or so back that it can be done the configuration was found but not by just the human brain thinking and drawing because a lot of calculations were involved floating point calculations to ensure that the diameters are ok that it will not it will be there will be no gap and so on so forth. So, those one can search out for this cylinder seven cylinder touching. So, similarly banks today you cannot go to a bank and writer check all that we still do but it is decreasing everything is done on the network. So, I know that of course, come let us come closer to home why are teachers affected I already told you just giving knowledge to students is not enough knowledge is already available easily. So, what we need to do is to give them through the national knowledge network and through Akash the tablet that will cure all the evils. So, life has become difficult for teachers also. So, with that let us move on to see why. So, a few minutes on the bad part here is a website all of you can access this later when you are in the lab or when you are home and you have a lot of time please do go to this website atlas.arber.net and what you will see could be shocking if you are not seen it before that I am not sure how clean early you can read the bottom parts. This particular slide is the blue dots are showing where in the world there are fast flux bots ok where I explain what it is later, but you can see that all over the world they are able to identify in that this is happening may be the next one will be little easier to understand. The next one is again a similar map, but it is for fishing sites and many of you may be aware of what is the fishing site it looks like state bank of India or it looks like some other real site and users are somehow made to go there and enter their personal detail account number password this is fishing for foolish people who will reveal their personal information and there are sites in India also and these are not just a map drawn statically it is something that changes we will see it will be it is really analyzing what is the situation now real time. So, I will show you some more and then we will see how they are doing it this is the monitoring and reacting they are able to tell you what are the top threat sources in the past 24 hours luckily India is not figuring in the top 8 or 10, but America China they are all there and this is where all the bad people this is in the last 24 hours they keep sure you can watch you can go to atlas Robert and see how they keep updating this information and here are some statistics they are saying that there were 2,539 DDoS attack DDoS is distributed denial of service attack per day and that has been happening they are monitoring the trend and they are telling you how many active botnet botnet is something we will probably spend a minute on because it is important and you might already know it botnet is like sleeper cells that terror is used computers that are infected or computers that are carrying bad programs ability to do bad things, but they are not doing bad things they are just waiting and they are been infected all over the world this is why it is called a net a robot network botnet and when the attacker gives the signal all these computers will aid him to carry out the attack and there are 1000 such botnets which are detected today. So, why are we able to detect this and do nothing about it we will see that also. So, now let us come closer to home what does atlas the robot network tell about India it says in India there are all these bad things happening bad activity there are people scanning at around 1 o clock 2 o clock it shows you the trend on a particular day in October 2012 this is the old data you can see the real data people in India are scanning subnet outside trying to find out which computers are up what services they are running you might have seen little bit about nmap and so on they are using tools like that to scan to find out targets good thing bad thing it is a bad thing and who is scanning they are able to zoom in closer they are able to see that Tata communication network people reliance network people what is a traffic what percentage of these scans are coming from various ISPs who are providing internet services in India. So, by now you might have guessed how they are able to do this that they are cooperating with each other and VSNL or MTNL router is giving some information to this atlas.arbor.net about traffic that is passing through its main links all the backbone routers are analyzing the data analyzing the traffic and are able to give information which is a way to monitor the real time bad activity and they are even able to do well even further and they are even able to find out who is hosting phishing sites again by which service provider and if you go further possibly even the IPs these are the malicious servers malicious servers not only phishing sites they could be having websites with cross site scripting or websites containing worms which when you visit the site it downloads other data which is not visible to the normal user and they are able to even tell the IP. So, this is an example of just knowing what are the bad things how they do this that is later but with this data what can they do unfortunately internet is a distributed completely out of control of any single organization. So, to make sure that these bad guys were spread all over the world and who are actually cooperating all over the world it is much easier for the bad guys than the good guys when the good guys have to cooperate and bring these sites down or take action then the procedures are not yet easy to do. So, these bad things are happening again I am going through the good and bad very fast. So, that we come to the real topic of the lecture is again if you look at it from the higher point of view there could be many vulnerabilities and this is part of this course why web applications are vulnerable how you can fix it then the host security may not be part of it we will see today that how bad configuration or changing the files or permissions are not ok on the server side or the client side can cause problem then of course this is very important transmission security and why are the bad guys able to exploit all this. So, just a few minutes on this that you go to any Google or YouTube or anywhere and search for attack tool kit internet attack tool kit and you will find lots of it is very easy you do not have to know lot of TCP IP or programming or this or that there are many people who are leaving such attack tool kits free of cost no need to pay you can download it you can then type attack this website and that tool will try and find out if there is any vulnerability and if there is a vulnerability and it is successful it will tell you I have got it and you can ask it to scan a particular network IIT Bombay's network and then find an attack find a host that is open we will see a little bit of that any kid can do this these are called script kiddies. So, the question I want to raise is it took a lot of effort and time for that person to write this attack tool kit why do they make it available for free to others. So, if you think a little bit you will understand that it is because that most of these are actually doing more than what they claim to do on the surface value they have hidden payloads they compromise the computer on which the attack tool kit is downloaded and used and that becomes part of the botnet of the person who has left such tool kit free for others like a Trojan horse. So, that is the motivation of people that but the effect of that is that any person any high school or college teenager can carry out reasonably sophisticated attacks without investing time and energy in learning anything. So, I will not spend a lot of time on the bad part but I would urge you to strongly go to this website certain we will be hearing a little bit more about cert computer emergency response team it is a worldwide organization cert CERT dash in means the Indian branch of it which is run by Ministry of IT in Delhi they have a website in collaboration with websites all over of the CERT organization just like the bad guys are collaborating the good guys have realized that it is time we also collaborate and they have left lot of training material and this slide I will not go through in detail, but I urge you all to go through not only this slide, but the entire talk available on that website giving you the timelines how 20 years back it was an individual student writing some small program to attack a particular vulnerability to today how it has grown and today it is governments and organization spending a lot of money trying to find out how to compromise a particular network. Similarly they have even tried to classify what types of attack are happening and several times today we mentioned botnet and botnet controller this is one of the most dangerous attacks when the attacker has access to computers all over the world because then it is much harder to stop the attack and it is done through spyware and route gates and so on which are spread through websites social engineering email. So again this is just a slide which tells you why bad things happen how attacks are orchestrated how the bad guys are finding it easier and so on so forth of course it's a relevant part of this course, but not today. So please do go back to this website cert.org certin.org.in and look at their training material educational material and you will find very very interesting lectures about this which are meant again the reason you should do this is because they are not 100% technical lectures they are giving you the complete overview and a good starting point to understand the complexity of this threat. So that we can then concentrate on the real ugly part which is to ensure all this that our goal in today's lecture is not from the attackers point of view it is from the sysads point of view that we want to set up services and network in our organization where we can again I want to read out all these properties assure users that they have confidentiality integrity availability and so on so forth. So now let's come to the third and the main part of the lecture the ugly part how do you defend and defending has many many components two or three of them we will see and in the Friday's lab you will be experimenting with some of the tools that make it help the defender to understand what is going on in your system and to plan accordingly how to react. So I hope you are able to recognize this map this is the map of IIT Bombay drawn by one of our industrial design cell people just to make it easy for visitors and there are hostels in the back there are residences here there is academic area there are playgrounds hostels here and there are lakeside areas guest house so on so forth so on so. So we are going to assume that this is a critical national infrastructure which itself is debatable but critical national infrastructure could be in ISRO or BARC or state bank of India's data center. So these are sites or SEBI or Bombay stock exchange many of you may have read Bombay stock exchange went through a three hour four hour network problem a two weeks back they had to stop trading so I am not very up to date on what it means but I am told that that is a very serious disruption to the economic activity of India. So let us not go into that part but it is something that will definitely be a critical national infrastructure which needs to be protected IIT Bombay if it goes down for a day or two of course it is some sad thing but it is not so critical but still for today's lecture we will assume that our goal is that we are the system administrators of a university or a campus like this which is spread out where we have to have all the services where there are different types of uses and then what we can do to make the infrastructure more secure. So of course this is again in a lighter vein that the attacker need not do too many technical things. If they know this is the main gate this is the main road and all connectivity to IIT Bombay comes through fibers which have two or three places in the boundary wall through which they enter the campus and if they are able to just cut those fibers they can cause quite a lot of damage to us. Again it is not that difficult it is not so well protected and so on and so forth but we are relying on secrecy right now people do not know which tube it is going through where it is and therefore a small bulldozer on that road can in five minutes cause damage that will take a week or so to repair. So this is the lighter vein we are not looking at this type of attack physical attack somebody else police has to be involved there have to be protection of the infrastructure from the physical point of view physical security is not so much the focus. So of course to do that we do try to scare people by saying that there are a lot of crocodiles in this lake on this side poway lake so nobody should try to swim across and cut wires and so on. Similarly on this side there is a national park and leopards come over from there so we will just see that for five minutes we will do a role playing that I am sitting somewhere in IIT Delhi or some other place in India or outside and I want to cause damage to IIT bomb base systems and services without physically doing all the earlier things that I said cutting the fiber or putting a bomb and so on so forth. So what would you do? So the first thing you should do is this is something which in your lab you can try out there is a website called dnsstuff.com and what it does is that if you give it a domain name such as itb.ac.in and you all know that that is our domain name. Similarly you know sbi.co.in you know for any organization it is in their interest to publicize their website and domain name. So this information is easily available and if you use that and try to find out you will find ask this server on the internet to tell you information about this domain dnsstuff means using dns try to find out what that what are the computers what are the systems what they are doing and what you will find is that it starts giving you some more information it says that IIT Bombay has three name servers and it gives their IP address. Similarly for other organizations you will start getting the first piece of information the IP address. So what you do when you have more information you continue it will tell that it has MX records MX records is IIT Bombay advertises to the rest of the world how to send mail to IIT Bombay if you want to send mail to sivaditb.ac.in which is my address from your computer in some other part of the country then you need to know which IP address will accept mail for IIT Bombay. So that information is also advertised and if you go little carefully and look you will find that there are mail relay one mail relay two and their IP addresses are revealed and then this says this site tries to find out little more information and so on but with this information we can find out at least the important one service the mail service and once you know the mail services IP address you can try to trace out how to reach it. So what are the links with service provider is providing the link there is a utility called trace route and trace route will try to tell you and you can later on see that if you try that that one of the links that reaches us is through Mumbai vsnl.net.in why is this information useful we will see later but sophisticated more sophisticated tools are there some of which you use in the lab Nmap, Nessus, Metasploit once you know a particular IP you can try to find out if there is any vulnerability and what are the others can other IPs in that range see which ones are running what services and all this information is accessible. So this is what the attacker will do you should never assume that he does not know what is your IP address which version of mail server you are using what web server you are using what proxy server you are using so security by obscurity is a very old principle we have to assume when we start defending that the attacker is able to get a lot of information about my network without physically coming and stealing anything this information is needed because without this others whom we want should contact us will not be able to contact us. So we come back to the big picture that we have infrastructure in the campus and again we are not going to talk a lot about UPS, air conditioning, cables you have to protect all these also and then you have PCs, printers so on so forth routers and then you have services which are network related LDAP directory service domain name service and then you have mail services you have web services then you have of course your system administration online payroll grading administrative software then you have research and teaching software application level software and there are so many people involved there is faculty student staff there are vendors who sell you products and services who give you licenses for their software and then there are people alumni press outsiders who need to interact so this is the big picture that we are setting up an infrastructure where security should be first on our design principles and even if it was not at some point we have to analyze that where was security and let us focus on the network first what are the security threats how to prevent. So our campus network has several areas academic area hostels it is one way to segment your network and we have many I want show the entire diagram but we have many layer three switches gigabit ethernet switches so this is what is called the LAN then we have this is the dated information we have much faster higher bandwidth now but we have many van links three or four van links I will show you today's information later on and then we have applications and I am going to focus on these two and in the lab on Friday we will focus on these two IIT Bombay stands and receives mail for about five six thousand people student staff faculty all the other so on so forth we host the websites of every department at least 40 50 different websites are within the domain IITB TSE dot IDB, CHE, EE each department and then we have all this users and we have to have worry about misuse by internal users also it is not just practice always outside and once you start looking at internal users and seeing what damage they can do then you will find that is much harder to control and therefore we will have quite a bit of a problem in the network so let us focus on one segment of the network IIT Bombay provides residential area network connectivity that we have staff quarters we have faculty housing we have hostels they all come under residence and we need to make sure that the usage from there is to some extent controlled by us let us not worry about threats from China or Pakistan first this design principles will apply later when you expose yourself to the outside world also all I want to say and make sure that you understand is that the internal threat is also as important and in fact harder and if you control the internal threat the external threat is also going to be diminished significantly so this is our LAN what is below this slide I will give you a minute to look at this diagram not a complete diagram but it gives you the idea that this part is what I will try to explain but you can assume that below this is IIT campus and its plan you can assume that above this is the big bad internet where we have van links from different service providers national knowledge network MTNL VSNL BARTHY TATA and so on depending on which campus you are so those are the two and this is where the entire security figures for protecting you from the outside world but also from the inside world okay you do not want a student in IIT Bombay to do bad things outside and IIT Bombay being held legally responsible so this area which most of you will know is called DMZ what does it mean the militarized zone and it is in this area that we get the ability to control what we allow what we deny what we monitor so I will not explain all this you need servers to send and receive mail you need servers which will act as proxy for your web servers which are actually inside PC department as a web server and that web server cannot directly be exposed to the entire internet you need some middle person who will field the request and this is where you can do some sanitization you can do some checking can do some control then get the real page from the CSE server and give it out this is a reverse of the proxy similarly for students inside IIT Bombay who want access websites outside one way of course is to directly give every machine access through just translating the IP address to a useful address outside nothing we'll see a little bit more about that but that way is not the secure way the secure way would be to use proxies here this is proxy server which you call called squid which is what we will talk a little bit about in the lab on Friday which filters request does not allow everything which allows you to control what your users can do and cannot do so you need to know how to do those services so we will be concentrating a little bit on this how what are the important services here and how different aspects of how you configure them how you monitor them and how you react to problems with them is going to give a level of security assurance to your campus your mail will not break your browsing will happen speeds will not come down to a crawl all these things have to be done at this part of course I just again want to caution you at this stage in the lecture that I do not expect that I do not neither do I have the time not do I expect that you will understand every part of every service in this DMZ we will just give you samples it's like saying that when I cook food you know you don't have to eat the whole food to know if it is good so sample a little bit and know what is there so that later on you can apply your mind and learn and teach more about whichever part of it interest you more so we will be just sampling some of this so if you look at the issues in the land we want virus spyware not to be infecting our users machines we do not want users to use wrong IP addresses what is the meaning of wrong IP address that if you are in a hostel I don't want you to have the freedom to change your IP address in your room whenever you want why don't I want you to have that freedom first of course if you change it to something very wrong from the sense that the routing table will not work properly then you will not connect to the rest of the network but within the range allowed for your hostel I want to narrow down to room level also I do not want you to use your neighbor's address or the address of somebody in the other wing why would I not want that so this is for little bit of audit trails accountability so again I can spend a lot of time telling you stories but I will just ask you to later on look up the story of a person called Vikram Wuddi V I K R A M B U D D H I so you just type this name in Google and you will find many links explaining why he was arrested by the US government in 2008 or 9 and kept in jail for 3 years he was a student in Purdue University and apparently he posted hate messages which could have led to violence on some news group Facebook like news group and they traced the IP address back through the university switches and network logs to his room apparently now there is a lot of controversy about that so we will not go into that and then you can see what happened how it evolved and so on so forth but this level of problems might come in your campus or our campus also that we might be forced to do some what is called 4 and 6 investigation of something bad that happened where we have to trace back all the way to where it originated okay and this is something that you can do with the static Mac IP mapping and all that's why I will not explain all the solutions I'm just highlighting some of the problems okay and a good land design will help a lot in making sure it doesn't work that the attacker finds it much harder to conceal even if he succeeds we can trace so again summarizing this is where we will spend some time today firewall that first and foremost you have to I already told you internet is on one side campus land is on the other side you have to now allow both ways traffic to flow under your control not uncontrolled that users inside should not be able to do whatever they want users outside should not be able to do whatever they want and we should control what is allowed what is not allowed so we will be using there are many firewalls commercial firewalls and so on so forth but the one best tool to learn and experiment in the lab and teach students is something called IP tables netfilter.org which is an open source firewall we will be using that to illustrate how do you control access both ways this is the title that was given off or the lecture today's lecture in your handout it was called access control then of course other services are important we won't talk much about it today but you should know how to set up domain name servers how to set up directory servers for your users using which you can control you can do virus checking and so on so forth and you can do proxy servers you can set up servers to receive email we will talk a little bit about this tomorrow news groups web proxy web servers so all these are the services in the demilitarized zone we will talk about the firewall for the next 10 15 minutes so this is a very common situation that inside the campus you will have you will want to organize it into different parts each hostel can be a separate subnet each residential area faculty quarters staff quarters can be a separate subnet so that way in our campus we have split it into geographically contiguous places into a subnet for IP 50 sets of nets we have more than 5000 nodes now it's even more with all these smartphones and wireless enabled devices which also need IP addresses to contact and therefore the solution is not to ask service provider to give us so many IP addresses nobody will give you that today especially if you are in IPv4 which is what most of us still are and because of the limitation a service provider even if you have 4 service providers all put together will give you only a few hundred 64 into 4 or each one will give you 64 addresses or at most 128 addresses which are valid internet addresses which can talk to other posts on internet for which data will be rooted but the advantage which we all know and if you don't know you should study a lot is that there is a some reserved segments especially the one beginning with 10 similarly the one beginning with 192.168 which are called private IP addresses which are not rooted in the rest of internet but which can be used by you freely within your LAN so know all our machines in IT Bombay use addresses starting inside IT Bombay the one below that demilitarized zone use addresses starting with 10 10.105 is computer science department 10.129 is IT department 10. something else is 104 or something is EE department so every department then can further subdivide if they want they have the space for the next 2 bytes but we have only 50 such subnets visible at the top level now none of these addresses are directly reachable from outside if from Japan you try to reach <IP_ADDRESS> which is actually the IP address of the computer science department's main server there is no way that that through packet can come because 10 is a private address no router in Japan will be routing packets to a 10. address in India so we have to somehow enable data coming from Japan to the computer science server in IT Bombay through that DMZ that is IP table they will help us rescue it so we can allow selective services to selective machines similarly from inside also for incoming also you can do that similarly for outgoing none of the 10. addresses inside IT Bombay can directly connect to Google or directly connect to any other government of India website passport site or income tax site because when they send a packet out with address 10 point replies cannot come back so somewhere the we have to translate or called NAT network address translation replace the addresses with a publicly usable address send the data out when the reply comes send it back we have to play this role of post month getting from data from one side giving it out and the other way so we can do it at various layers we can do that network layer or we can do it at application layer if you do that network layer it's called IP tables that means you don't worry which application but if you do it at TCP level then you know the port number also so you can allow for a particular IP a particular application SSH uses port number 22 mail uses port number 25 you can even do it at application level if you do the application level proxy is called squid or web proxy or email email goes to a mail relay machine inside your thing and then is sent out mail is received by that machine and sent in so this is where we have to first decide what are the services that you want to allow incoming outgoing and this again I will not explain in detail today but this is a very important part that you must make a very good policy which is well known and accepted and understood in your organization so IP tables is an implementation of a firewall in Linux and it uses packet filtering so you should go to this website and read more in detail today we will be seeing examples how it is able to take a packet that is coming and match various fields in the packet and then decide whether to send the packet on or not so this will protect you from exposing your network directly to external entities it will regulate traffic based on the security requirements and it will provide choke points for screening the packets so one word which I have not specifically used it will also allow you to shape the bandwidth that you can make sure that web traffic does not use more than 50 percent of your bandwidth mail traffic does not use more than 20 percent of your bandwidth if this is useful to you and I am sure most of you understand the reasons for limiting the traffic because you do not want less important traffic to swamp out domain name service request or mail request or web page request so you have to prioritize assigned classes that is not explained today but IP tables those who want to go further should not stop with only doing this matting and translation and blocking they should also look at other features which allows you to do rate limit which we will talk about and also bandwidth shaping so like I said we are only sampling the good things and showing you in the lab you can go more and more in detail as you teach the course and develop this topic so the highest level view of IP tables is that there are set of rules 1 2 3 4 like that and every packet that comes we see which rule applies and the first rule that applies is used so we go down this is the thing rule does not match try the next rule and if a rule matches take the appropriate action so with this understanding the basic functionality of IP tables is to take packets from one side say ITB LAN and put it on the other side so in that case it has to do source matting because the packet coming from IT LAN will have a source IP address of 10.105 it is coming from CSE department but when I send it to the outside world I have to replace that 10.105 the source IP address with something that is known to the rest of the world so that the replies can come back it can be 103.5 point whatever IP address we own so that the packets reply will come back the other way is that when I advertise a web server of the CSE department when the packet comes from outside world say Japan I have to destination that it will come for a particular IP address which is known to the rest of the world but really has to go to 10.105 so I have to change the destination address and send it back inside the IT LAN so this is the two important matting and we have to keep track of connections because once you do this you cannot just randomly change you have to know for which connection you changed in what way and therefore when the packets and replies comes you have to keep this flow going until the connection closes so those as you can see that learning security is not something that you can learn without knowing TCP IP first so in a course like this we are assuming that you have enough background on IP addresses TCP connection sockets so that you understand and if not the student has to be given that preparatory learning of how applications work on internet tomorrow we will spend little bit of time on email now this is the basic functionality that it has to do without this it is not useful but it is not the only thing it can do it can do what is called packet mangling it can change some fields in the packet why would you change what will you change why is it useful we will see this is where you can do traffic shaping you can do control of number of connections per second and so on so forth so here is a diagram that I should probably come to after showing you the basic setup so we will come back to that diagram but just want to explain to you what is happening that IP tables is running on a machine like this which has two different interfaces ETH 1 ETH 0 one side is connected to let us say this subnet 192.168 the other side is connected to some other subnet 10.105 and we need to make sure that these two sides can talk to each other the way we want only for the applications that we want so whenever I am explaining IP tables I am trying to explain to you what this machine does and this machine is typically called firewall and it is the same principle for firewalls made by commercial manufacturers scopics or some other companies make different brand name firewalls all of them have this multiple interfaces and when packet come on one interface you have to know how to handle it so this is what this diagram is showing this is called the kernel packet traversal diagram so there are two things that we want to understand one is that when packet comes from the Ethernet card the device the network what do we do with that packet that packet does not go to any which there are in my computer many applications are running the user is running chat is running Skype is running and then mail is going squid web services are going so when the packet comes on my network they will have my IP so I have to decide what to do and I have to distinguish based on the port number and give it to the application and so on there is another thing that we have to do applications on my computer the local process might want to send data out so I have to put it on the network through the device may be a different device so this diagram tries to tell you that when a packet comes in the network first we look at what is called the type of rules which are called pre-routing chain whether to look at that packet at all suppose I do not want a bad IP address to talk to me I just drop the packet if he keeps sending me packets I do not even reply that could be one of the rules and then I later on look is this packet for me or am I having to forward it to somebody else I have to three interfaces so if the packet is for me then I give it to my input chain my is it for my application chat application Skype application running on my computer then I use the input chain rules so essentially what I am trying to say is that IP tables rules are logically divided into several segments one is called pre-routing one is called input chain one is called output chain output chain is the user is sending a packet I want to know whether to send it out or not I may allow only certain services if he is trying to send a packet for email I may block it if he is trying to send a packet for a web server that means destination port is 80 I may allow destination port 25 I may not allow for applications on my computer itself so this is called output chain rules then there is the forward chain rules if the packet is not for me but I am acting as a firewall taking packets from one side and sending it out on the other side then I have the rules called forward chain whether to use those rules or not and then finally the post-routing chain that after doing it should I translate the IP address should I keep track of the connection should I remit the rate of connections if I already allowed 56 connections should I allow the 6th one 7th one 8th one all these rules are called post-routing rules and then I send out the network so this is the top level view of what happens in a firewall so now let us go a little bit deeper here is an example so this one says drop packets which are coming on the interface see this computer has two interfaces Ethernet zero and Ethernet one two network cards and this rule is saying that if packets are coming in via Ethernet zero for the TCP application running on port 166 rejected that I may run an application on my computer which I want only people in this side to access IIT Bombay I do not want the outside world to access so then I use rules like this that I specifically say drop this particular and this particular packet is identified by the TCP port destination 166 just giving an example 166 is not a real application it is to tell you that these things can be done similarly this one says that if from Ethernet zero a packet TCP packet is coming with the source IP as <IP_ADDRESS> accepted so now you try to remember what I said that these two rules are actually contradictory this rule is saying if the source address is this accept other one is saying is the destination port is 166 drop which rule should I use so that is why I told you that we have to know the ordering we have to know which rules are used first whether it forwarding rules are used first or pre-routing is used first and within that in what order the rules are written so this is why IP tables has a little bit of complexity because you have to design the rules well so in general rather than go deep into this the two principles that you should be aware of is one is called default deny default deny means what that I design my system so that all the rules I put are accept rules I only tell you what to accept so everything that I want to allow I should write a rule allow this port allow this IP allow this port allow this IP and then I should put a rule called everything else deny default deny this is strategy one


So I received a message of someone on Xbox who revealed to me something shocking. Hacked weapons are now unconsolable, but it gets worse people. Today we check out what's going on. How's it going guys? My name is DPJ and if you enjoyed the video, leaving a like really helps out and if you like what you see and want to see more outriders on a daily basis be sure to subscribe. So we know certain players on PC love to edit those files and make things unique. It's out and out PC for you, but it does now seem that these kinds of things are now available on Xbox. Now before I show you what I've seen and been sent, let me first state. I don't use these, I won't ever use these and I don't recommend anyone else using these. Okay so I received a message from a fellow gamer stating he was contacted by somebody he was playing with stating he can get him weapons which basically one shot enemies. It doesn't matter what platform he plays on, he can get him these kinds of weapons. The catch was there was a charge. You pay and you get, simple. This dude obviously took a chance and what he got will blow you away. He got items which indeed one shot everything with fire power levels beyond anything this game is allegedly capable of as you can sunscreen now. These weapons are also at a level one so they can be used on any new made character. Now I myself think makes me kind of sick to my stomach when I see people charging others for carries and expeditions. That's a big no no from me and if you guys need a carry need help with anything within this game don't pay for anything join my discord which is linked below. Someone there will indeed help you out for sure if they're online. Now these mudded weapons for me take away from what this game is and should be. Yeah I know for sure someone will pop up down below saying well DPJ you covered many mudded weapons in Borderlands which is indeed true but the mudded weapons I covered mostly were uniquely made and were not about one-shotting enemies and to be honest the real legit builds I've made we could use any weapon to one-shot an enemy so it's a little different over there. Plus Borderlands has a massive modern community where people create some incredible weapons evil ex-drugs being one of them. It's entirely different here with Outriders as the only purpose of this game at Endgame is to build up that power to complete expeditions. This does nothing but take all of that away and make it well just a walk in the park. Now I ain't going to sit here and tell you that you are a criminal if you use these to be honest I don't care what you do you pay for the game you play how you please but what I do know is these are not legit weapons these are not legit methods and I do believe they will result in you getting that watermark even though I'm still here to see anyone with a watermark I do think this may indeed get you one but yeah guys this video is more of a heads up for those of you who play cross-play with PC players or you have your lobbies open and PC players can join or you join random lobbies and have cross-play open you never know who you're joining especially if they're random players and if you join somebody who's mud in their game and you get muddy loot dropped for you what would the effect be now another thing he had happened was he got enough class points to fill all three skill trees I mean is this even needed I guess not but it's a thing I do hope people can fly come down on this I do feel as though this is getting more and more popular it may just happen because the more popular this gets the worse the game gets and let's not lie to ourselves here the game is on its lesser legs this ain't helping so hopefully people can fly can take some kind of action against these things or put in some kind of system that if cross-play is enabled that PC hackers can't adjust loot for the entire lobby it's a crazy one but over the past week I have seen more and more about these kinds of things and these mods in the game a lot of people in the facebook groups I am in are posting six seven eight nine hundred million expedition runs in terms of damage and people are already asking questions there and well guys this is probably 99 percent the times the answer so yeah just a heads up that hacked items and classes are now on console and it seems as though they're getting popular by the day on that note the end of the video has arrived if you enjoyed it leaving a like really helps out if you're new around here want to see more outriders on a daily basis be sure to subscribe and if you never want to miss a video upload you can turn notifications on by hitting that bell button but guys thanks as always for stopping by and hopefully I will see you on that next one


It's DDK and today we had a not so great day. I'm just gonna tell you guys what happened right now. So the first thing that happened is we got this load, right? We put a bid in on it for $125. It was 49 miles altogether, 21 dead head miles, 28 miles loaded, trying to get our pockets on swollen. So they reached out to me and said, yes, we won the load, right? I'm like, okay, cool. So I start going to the pickup area, not the exact area, because I didn't have the address, but like around the area, like in the same city, right? So we run around, we run around, we get to the exact city we need to be in. And guess what? They reached out to me and let me know that, unfortunately they canceled the order on us. So we no longer had that order. And also they did want me to use this printer, printer chicken dinner to print out the paperwork. So they told me, you don't need to print out everything is canceled, right? Guess what? 30 minutes later, they reached back out to me again, and said, oh yeah, we do have the order now. They said that we can go ahead and do it. So let me just tell you guys right now, I think they was like low kick finessing. I think that they gave the order to somebody else. And then the other person couldn't complete it. So they reached back out to me and let me know, yeah, we can do the order again. I'm like, uh, I don't know. Should I do it? Should I not? Let me get this 125. So like, okay, cool. I'm gonna get this 125, right? Guess what? They sent me the real address. And guess what happened? It is the airport. Now I'm gonna go in this airport, baby. And look, y'all know how I feel about the airport, baby. So we are here at the airport right now, about to go ahead and get busy. I'm glad you guys are with me, about to move kind of swiftly. Let's go. First time using the printer, baby. If you want one of these printers, make sure you click the link in the description and go ahead and click the Amazon affiliate link so you can get you one of these joints. Let's see if they really work. It was two papers, so.  I'm gonna tell you guys the truth right now. They took me up top with this order. And I'm gonna tell you guys what they did. I'm gonna tell y'all what they did. And this, my friend, is the paperwork, baby. Yeah. If you want one of these, go ahead and click the link in the description for the Amazon affiliate, but it's time for us to go on this airport, baby. It's time for us to go on this airport. And we are here at the pickup and it's looking ugly already. Look at that. Look at all these people. It's looking ugly. Jeez. Yep. Oh, I gotta do this thing again. I don't know how you can keep working, y'all. I'm gonna figure it out, though. So, let me tell you guys how they took us up top on this order. Normally, when I put a bid in, if I see in the notes that it says, print paperwork, I automatically know that I'm going to the airport. So, I'll always make sure I bid way higher if I wanna have to go to the airport. This one did not say anything in the notes. Guess what? Once they reached out to me and told me they'd be wanting to bid, that's when they was like, yeah, we want to bid, going from Elgrove Village to Aurora for 125 dollars. I'm like, okay, cool. Then he was like, yeah, they want us to print the paper records. That okay? I'm like, yeah, it's okay. I didn't really think that I love it. Cause he slipped that joint in there, baby. Y'all see how he slipped it in there on me, baby. But after we received the address, we looked on the thing. Guess what? It said airport. I ain't even know. But either way, go. We're here to go. Let's go. Two hours later. Two hours and 30 minutes later, man. Literally on the dock. Two hours and 30 minutes later. Go to your room. You got four people. You ready? That's how I was trying to push them down. No, it's all good. And just like that, one, two, three into the fold. We about to hit this road and get back to the dope. Let's go.  It's ringing this bill. How you doing, sir? I have a drop off from the airport for you guys. Over here? Yeah, in this van. Okay. One village? No, four. Another terrible order is what we about to do. Now this one is on Dolly. This one is on Dolly. Now, the pickup location is the container store. This is the reason why I do not like doing the container store orders because everything is bunched in the order. So if you get a container store order and you get a custom closet, you actually have to take it to the room of the customer's choice. So, and this one did say it had stairs. So I'm thinking like, I'm taking the chance and one more thing about the container store orders. You do not know how many items you are picking up. It could be one little bag or it could be a whole bunch of stuff. So again, the pickup location is the container store. We are picking up. I don't know how many items. We're driving 5.9 miles for $55. I got my game from a scholar. Let's go pop our color list gold. Excuse me. How you doing? I have a pickup for a dolly pickup for Lawrence. Okay. I came right on time. I caught you at the right time. Last time I went back to go pick up an order. They're like, is it the dolly? Is it the doll? No, not yet. Is it a big order? You don't know. I don't even know yet. Let me go see. Hopefully it's as small as it can be. Thank you. And just like that, she's about to come on here and bring this stuff. I'm trying to give up. Let's see if I'm going to push up.  I want to put the heavy stuff on the bottom of the dolly first. So that's what they're going to do first. We're going to put them in the hurt, baby. Leg up. For now, at least grab the bag. It's time for us to get to this bag. On our last trip, it's out to a little flip. The game is over. Drop this right here. Drop this right here. I want to put this down here so they know exactly where everything is at. Now we got to step back and take a photo of your noodles. We're gone. So you guys saw what happened. The first thing that was messed up was I failed. Y'all saw me fall? Well, pretty much I almost failed. I messed up my knee a little bit, but I'm all right, baby. My pocket's about to be tight. And guess what else? I had to go up and down those stairs five times to unload that stuff, baby. And guess how many times they helped me? Zero, but I will say, I will say, baby, they didn't give us this. An extra $10 holla. So if we made $65 for that order, would I do it again? Absolutely not. Absolutely not. I would never dare do an order like that again. But honestly, you're gonna take a chance when you're doing those Dolly the Container Store orders because they don't tell you how many pieces it is. You just gotta, hey, you just gotta go out on a limb so you can get that trim. You can get this extra $10 and all that stuff. But we do have a okay order, let's go ahead and get an order. We do have another order from the carrying company.  So 32 miles altogether for 125 for the pull-up, the pick-up, the prize and drive. And just like that, we are here at the pickup location. That wind is blowing, baby. That wind blowing, blowing. Whoo! We got a full house in this zone, don't they? How you doing, boss? I'm gonna have a load to pick up to go to Elgin. Picking up? Yeah. See, we're at the right address real quick, first. Yeah, yeah. Talk to the gentleman right here in the office, the red shirt. Oh, red shirt. Okay, thank you, sir. How you doing? Oh, I was supposed to go to the window instead. I'm gonna have a load to go to Elgin. Okay, I got you. I'm in a cargo van, so I'm not sure. We got a ramp on the other side. So go back over here? Yeah, just make a right, make another right, we'll see a ramp. Okay. Do you have the paperwork? Or are they gonna bring it out to you? They're gonna bring it with you. Okay, appreciate you, boss. And just like that, the Ford truck, I'm pulling up on you. The Ford truck pulling up on me. You know what I'm talking about? It's not about to get busy. I'm about to get this deed. And just like that, it is time for us to continue to get on the ground. Let's shine. Just like that, we are here at the drop-off location. We're gonna keep on skating and being great. And that's his fence. This is your free size. So I need that, thank you. How you doing boss, do you work here? Baby. I have a drop-off from El Grove Village. I'm not sure exactly where I'm supposed to go. Oh, there's you two. You two. Say hi, say hi to her. It's my guy. El Grove Village, are you guys like a skid? Yeah, it's one skid. I'm in a cargo van though. Okay. You want a three? He's in a cargo van. Yeah, go around. I'm pretty sure you're right here. Yeah, I'm right here. And you want to see door three? Door three. And he'll meet you over there. Okay, appreciate you boss. Just like that, I got about to pull up so we can head off and get these bucks. Yo, I hope you guys enjoyed the content. I'm gonna tell you right now, I did not enjoy making that content. I'm tired. I'm gonna keep it GVM with you because I'm gonna tell you guys right now, I did not enjoy making that content, slipping, almost slipping and falling, having to carry that stuff up and down on stairs five times, back and forth, back and forth, back and forth, back and forth. And then has to go to the airport and wait for over like two hours and 30 some minutes or something like that. So it was actually a terrible day. We only made $315. We still went out there and popped our collar and got them dollars. I hope you guys enjoyed this video. Again, if you are not subscribed, make sure you subscribe and also give me a thumbs up. And don't forget to throw them seeds up. Throw them seeds up in the comment section. I will see you guys on the next one. Be going, be going, before you already know and the DDK and I'm on my way.


Welcome back to my channel. Today's video is going to be all about cycle bar I have been spinning it for about six months now So I kind of just wanted to do a touch base a recap video review just like talk about everything as well as show you guys progress photos because I Like watching some of these types of videos and because I know I haven't been doing a lot of fitness content And I loved doing fitness content. It was so much fun but because I've been just going to cycle bar a lot more and not really doing at home workouts I it's like the same thing over and over again. So I don't want to like bring my camera every day So that's why I'm just gonna make this video and hopefully you guys find it helpful or entertaining before we get into everything Make sure you're subscribed and also turn on your post notifications also to follow me on Instagram because it would mean the absolute world to me and You just should so starting off. I started cycle bar and spinning in November it was like the weekend after or like a couple weeks after Thanksgiving and I really wanted to get into it because I just accepted a full-time job and I wanted to Have something I could go to like a physical location Workout and then go to work and I just thought it would be a really good to Just try spin classes and everything and at the time what actually really got my butt to like do it was The amazing deal that was going on sort of they were doing like a black Friday deal where it's 140 Well, it's 139 but like let's just round up because like tax and whatever So it's 140 a month and I think that's kind of reasonable It's still a little pricey not gonna lie But if you do the math and you go four or five times a week Which I make sure to do at least I really try to do that I you get the benefit out of it because it makes the classes like a little cheaper So it is kind of a lot, but just if you go and you use it then it'll be worth it I love the music the classes each instructor is different obviously have my favorites and That's just like any type of class you go to you're gonna have your favorites You're gonna have some that you work harder for than others if you guys haven't seen it mother cycle bar videos I'll link them down below so you guys can check them out, but ranking in class is a little hard But just make sure you put in your information in the cycle bar app your height and weight and everything and hopefully it'll like calculate it better, but the main way to Get higher on the board is a heavier gear meaning like it's harder to push Your legs down on the pedals as well as RPM. So I think in my last video. I made about cycle bar about like ranking number one Yes, it's important to have the gear like kind of higher It also takes into account how fast your your legs are moving so if you're at gear 11, but your RPM is like 30 or 20 then clearly it's not gonna help you but if your gear is at 11 and You're going at an RPM of like six to your 70 which I guess I don't even know if that's possible, but then you would like rank higher if you know what I mean So those two factors are what will help you in the long run So that's kind of like touching on ranking and everything Which that's kind of how like I've learned how to rank higher in the class Especially when you do like the races and stuff next I want to talk about how many rides I currently have participated in I guess It's 87 so on Monday. It'll be my 88th ride, which I'm super excited about I can't wait to get to 100 because I think that'll be like super exciting and hopefully At one of the locations I can like sign the hundred ride board I really like how they encourage people to like come by celebrating milestones So I just find that to be really fun and a good way to like engage with you know, the customers and I Don't know or I guess we are customers or riders I should say so that's also something that I really appreciate. I like riding at both Locations so I ride in like a downtown Orlando location and then I also ride in like a winter garden location and They are really good and they're really different. I mean They're different because of the different bikes, but like they're all like friendly everywhere but if I had to choose I like the black bikes better because they're more comfortable and They're smart bikes. So it just kind of like goes with your power of your leg and everything and They're just a lot smaller. They're more compact the white bikes My friend and I were discussing this just seem large and they're just so big that You know, they're just not as comfortable to ride on So I'm hoping that that other location Gets the black bikes because the black bikes are my favorite and if I have to choose it would be the black bikes to Ride on that's why on Saturdays sometimes I like to go to the location with black bikes because I just prefer that better So moving on to like my diet with working out So I kind of eat intuitively and I know that sounds kind of crazy But like I just try to be balanced. So I listen to my body and whatever. I'm just feeling like I eat I know that's kind of weird but As you guys know, I eat almost the same thing every day for lunch at least during the week So with cycle bar and everything like I just have my regular lunch, which is egg whites celery I have like saltine crackers or like nut things and then some a little short bread cookies Because I just find that to be all like really balanced and like with water just to hydrate and everything I do tend to get Starbucks But I always get like this small cup and I get like the vanilla sweet cream cold brew with like light sweet cream And that's pretty much it and then for dinner either. It's like a salad and turkey or it's like for rivers sometimes or Hooters or Valor mix pizza. I don't know what dinners obviously like a more heavier Meal for me. So I know like during the day I really like light and everything and I I know it sounds bad, but I don't really eat breakfast I hate breakfast like all breakfast foods. I really don't like I feel so Way down with foods in the morning like it could be anything like I cannot eat before 12 And feel like I can conquer the rest of the day. So I know that sounds weird But because I have more of a heavy dinner, I use that energy that I have from the dinner just To work out. I don't know if that makes any sense, but that's just what works best for me and dinners my favorite meal of the day, so I Treat myself a dinner and I just eat what I want to eat when I get faster results If I did more of a keto type style Yes, but because I'm working out four days a week at least at minimum I feel like it's okay because that's kind of what I did with like at dance and stuff You know I dance I was dancing for like three hours instead of just 45 minutes So that's also something that I want to like talk about because I know food is like It's a very very important thing and if I were to ever like stop working out or stop going to cycle bar I would definitely be a lot more conscious like I would probably try my hardest to follow At least during the week a keto diet because calorie intake and all of that So now I kind of want to get into the photos because I've taken like not multiple But like I'm just gonna flash them up on the screen. So here you're sitting like Before any fitness until now. So I don't know if you guys can tell them Oh, I can definitely tell the difference, but I don't know I've come a long way and like as you guys can see like with the picture so this is the front view and then this is the side view and Honestly, I just feel like a lot more confident and like trying on clothes and swimsuits like you just feel hot and you're just like Yes, so I definitely think it's worth it to just like work hard and just keep consistent Next you're seeing the front view of like before cycle bar and then now so this is six months of cycle bar versus Me doing at home workouts as you guys can see here's the side view of that Cycle bar really pushes like the calorie loss like it since it's more high intensity like Cardio, I feel like you burn a lot faster a lot quickly more quickly So I definitely think cycle bar works to lose weight if that is your goal Obviously you have to be consistent with it and everything but Yeah, and then here's just like some other fun photos. I love my little Bikini pics and like all of that. So I just want to show you guys the photos because You know seeing progress always helps and is encouraging. Well, the last time I weighed myself I did not I should have weighed myself this morning, but I'm almost at my goal weight So so the last time I weighed myself. I try to not weigh myself that much because I feel like it's really Unhealthy just to focus on numbers. I think it should be all about like how you're feeling and listening to your body But just as a progress like check-in. I like to weigh myself Sometimes so this is one time. I was just like I feel really good. I it was in the morning So, you know, you're just like, I don't know lighter your lightest in the morning Anyway, just in general. So I weighed myself on 416 and so it's about like a month ago and I weigh 126.8 and Most of that I think is muscle. So that's also really good but Overall, I just feel like really good within my body and my goal weight is 125 So I'm not too far off and if I really focused on eating healthy and everything and incorporating like more Keto meals in my diet then I probably would hit that goal faster But I'm not in any competition or anything. It's just I want to better myself and just feel more confident and Love to shop and look cute in clothes. So that's my main goal Like I mean and obviously like be healthier overall. I love cycle bar. I hope I can continue everything with what I'm doing and If you are looking to join a spin studio, I highly recommend it. It's so fun And you do make a lot of friends like I've made a lot of friends doing it I think it really just depends on your location personality like all that stuff, but Yeah, I think that is gonna be about it for this video. I hope you guys enjoyed it Let me know down below if you've ever tried spin or what type of workouts you like doing and I think that's about it So give this video a thumbs up. Don't forget to subscribe. I'll see you guys in my next video. Bye