Do you have a farmer here? Oh, dear. Yeah, but I'm not sure if he wants to get into it. Oh, no, it's okay. Hello, how are you, my friend? What do you farm? What animals do you farm? Thank you. Thanks for coming, my friend. Thank you. I thought you were asleep then for a second. Is he asleep? He must not be interested. How you going, my friend? Do you have a question? Probably far. I have one from vegetables. Okay. The biggest problem is to plan a lot of food. Certainly, if the farmers move far, if everybody is big, we'll produce what they need. Exactly right. The problem with the difficult thing about it is you have to produce what the end does to it. Exactly. The consumer's one. The consumer's one. And then there's our galling selling, on how we work our gallings to produce good food and our gallings need livestock. That's how we do that. I'm really interested to hear the ideas, your ideas. That's why as a farmer, you have to be able to make them. There's a lot of us who are able to make them. We're not going to say this is wrong. That's wrong. We're going to hear what people say. I don't totally understand that. That's why my tiff isn't with farmers.  I don't know why the media are trying to perpetuate this vegan's hate farmers' propaganda. It's just simply not true. I understand supply and demand. Farmers are producing what the consumers want. That's the bottom line. I talk to consumers and say, if you buy plant-based products, farmers are going to supply plant-based alternatives. They're going to get into plant farming, plant proteins. This is going to happen. Do I have written out a sketch on how to transfer your animal farm into a plant farm? No, I haven't. I'm sure that's something the vegan society will get behind and help farmers transform their farm to grow plants. That's where the industries are heading. Obviously, if you're farming animals, you know where those animals go, and the public are going to be like, after a while, they're going to see that. They're going to be like, we don't want animals being killed anymore.  We don't want to eat things that come out of animals anymore, because the fate of all animals in that industry is a knife across the throat. Whether they're being used for their wool, whether they're being used for their eggs, whether they're being used for their milk, they all get a knife across their throat. The animals just aren't recognized in this. Their rights aren't being recognized. Now, this isn't the farmer's fault. They're brought up into farming communities. They're trying to make a living. Consumers are giving them money and saying, hey, we want this product. But we have to look at this from the victim's perspective, because the farmers, they're a victim of conditioning, of society, if you want a certain product, but the real victim are the ones who are going through that slaughterhouse door and coming out chopped up into pieces. This is perspective.  Can you grow this amazing plant food for us? I'm sure there's going to be a great blueprint for you guys to follow. The Vegan Society are working on doing workshops for farmers on how to change from growing animals to growing plants. What do you think about that? Different claimants and different parts of the world. It's not just... like, I've been Australian for a very, very long time. It's great. It's great diverse. It's not going to change overnight. It's going to be a long, long time. Yeah, and we understand that too, that not everyone's going to go vegan overnight. That's not realistic. Some people do think that, though, and they do use that as an argument. What are you going to do with all the animals when everyone goes vegan? They're slowly going to change industries. They're going to be breeding less into existence. The reason there's so many animals is because farmers are breeding them into existence to keep up with the demand. When we change over and stop asking them to breed more animals into existence, there's going to be less animals and it's going to be something that's going to have to happen. Now, I don't know how it's going to happen. All I know is I don't want animals to go to slaughterhouses anymore. I don't want animals to be used for their bodies and I don't want farmers out of a job. Okay? I don't want families out of work. That's not what we want. We want all of us to work together. Now, media want to paint a picture and I really learned that this week. They take things out of context. That's just what they do. My workshops are online. How I ask people to advocate is in a respectful manner. I don't advocate for people to yell stuff at farmers, to send death threats I can do that. I condemn death threats publicly. If these death threats actually do exist which I haven't seen any evidence for at the moment it's just an assertion someone's made a claim. But if I do find someone in the movement doing that then I publicly condemn them because that's not how we make change. Through polite dialogue, discussion throwing around our ideas and education that's how we change. So, farmers are not the enemy. The enemy is the act of exploiting because we've all been taught this. We've all been taught this. I was taught that eating animals is okay. I was a part of it. I was a consumer. I was paying for it to happen. I was part of the same system. So that's why I'm not coming from a place of I'm better than anyone. I used to eat animals three times a day just like everyone else. So I understand all of that. But bottom line is the real victims do not have a voice and we need to speak up for them. We shouldn't be waiting for us to get our act together to stop consuming and exploiting animals. That needs to happen as soon as possible. What he's saying is not all farmland is suitable for certain crops. So some of them are in a bit of a harder place. So there's going to be difficulties for some farmers.  Some land is only suitable for what they're currently doing. So there's going to be some issues with it. The thing is they've got time. Something's going to happen and bang overnight. You have time to get your stuff together and work out what's going to happen because it's going to be a gradual change. But rarely does society stay the same. Society usually catches up and once people see what goes on inside them places you take me to the most humane slaughterhouse on earth. Take me there. Let me bring a camera in there and show the public and we'll see if they think that that's humane. It's not humane to take an animal's life and let dogs in that same situation you'd freak out. You would freak out. Anyone else got questions?


This 2018 Chevy Silverado 3500 Crew Cab Short Box Single Re-Wheel is stock number 11737Z. We're here at Summit Automotive in Fond du Lac, Wisconsin, near new and used heavy duty truck headquarters. This 2018 Chevy Silverado has the 6.6 liter Duramax diesel with the L5P motor. Which pumps out 445 horsepower. This truck has been fully-safetyed and inspected by our service shop. It has a fresh oil and filter change. All the fluids have been checked and topped off. And this truck is 100% ready to go. It has a BDS suspension lift kit system on it. It is graphite metallic for the color. We shoot all of our videos in 1080p, 60 frames per second. So if you have HD capabilities on your computer, tablet, smart phone, or television, turn them on right now. Because it is definitely your best way to check out the quality, condition, and styling and options of the truck before seeing it in person. And if you'd like to subscribe to our YouTube channel in the lower right hand part of the screen is a gold subscribe button. Click that and then click the bell notifications to get updates of every time we do a video on either our new or used inventory. And check us out there. Remember to like, subscribe, and share. It comes with the Haas style 20 inch chrome rims. And it has open country Toyo tires AT. They are 35 by 12 and a half R20 LT tires. And they have like, I'd say probably 70% of the tread left on them. Like I said, it has a BDS suspension lift with the Fox shocks. And you can see that lift right there frame and under body is extremely clean on this truck. And we're going to go inside underneath all the way around on here so that you can see every single option on this vehicle. Very nice under there. Front bumper is in excellent condition. You do get the front bumper parking sensors, no major dents or dings on there. The factory fog lights, the chrome tow hooks, chrome trimmed grill, projector lamp headlamps, the cowl hood with the hood scoop there. That is functional. Has the clearance lights and graphite metallic is one of my favorite newer Chevy colors. It's got a little bit of green and definitely a lot of metal flake in it. So in the sun it's extremely shiny and sparkly. There you go. There's a good look at that paint. It's got a little bit of green, little bit of gray in there and really a cool color. Passengers side front fenders in nice shape. Passengers side rim, no scuffs or scrapes on there. The rims are in really nice condition. And as you go down this side of the truck, take note of how clean the body is, how reflective and mirror like that paint is. We take these HD videos so if you are far away or even if you're close by and just can't make the trip down. But you're still interested in purchasing the vehicle. You can see the truck, hear the truck and of confidence in the vehicle that you're looking at before you even get here. So when you do get here there's absolutely no surprises and you can make a smart buying decision from the comfort of your own home. Very nice down that side has the chrome step bars. This back rim is in excellent shape as well. No scuffs or scrapes. The back tires have just about as much tread as the front tires. Maybe just a hair less but still good tread. Frame and underbody is in excellent shape as well. And it has all the remaining factory exhausts so it hasn't been altered in any way, shape or form. Lower rockers all look really good. And we'll continue on to the back. Rear bumper is in great condition as well. No major dents or gains on there. The rear bumper steps, the backup parking sensors and of course the full towing package which includes a receiver hitch 4 pin and 7 pin wiring which you'd expect on a one ton truck. Tailgate is in excellent shape. Locking tailgate, backup camera has a shock down assist so it's never going to slam down on you. And it does have a drop in bed liner. It also has LED bed lighting. I know it's kind of hard to see but they're right up there underneath the bed rails. You turn those on with the cargo lamps inside the truck. Tailgate shuts nice and solidly. It has the easy lift assist as well.  Especially with the bigger tires and doesn't have any mud flaps on it but all the lower rockers look really good. And for full disclosure this back rim is in excellent shape as well. Down the rest of the side of the truck looks really good. It does have the telescopic tow mirrors built in directional signals side lights. They do telescope out and fold in. And they are power fold in so I'll show you how those work. I always like showing both sides so that you know that both sides are working properly. Inside the LTZ package gives you the gray leather interior. No rips, no tears on the seats there in really nice shape. Both these front seats are heated and cooled.  You get the tilt and telescopic steering wheel, power windows, power locks, power mirrors, memory driver seat and Bose sound system. First thing I notice when I hop in the truck is that it's a non-smoker. Smells very clean inside of here. And we'll turn the ignition on so you can see the miles and instrument cluster and then we'll check out the radio. This one has 15,238 miles. You do get the digital spinometer, compass display in the lower left. And you can change a lot of those settings to read pretty much whatever you want. Comes with the heated leather wrapped steering wheel. No major scuffs or scripts in there. Cruise controls and information center controls on the right. I'm sorry, Bluetooth and information center controls on the right. Cruise controls and forward collision warning controls on the left. It's been a long day. Six-speed Allison transmission with the optional tap shift comes with the Chevy MyLink system. Factory navigation system on there as well. AM FM and Sirius XM radio capabilities. There's your Sirius and it does have a CD player there as well. Now this one does have the projection manager where you can project your cell phone to the screen via Android Auto or Apple CarPlay. And that's a pretty cool system and then you can use whatever programs you want on your screen through your phone.  That's for your cargo lamps as well as those bed lighting and the LED side lights on the mirrors. Parking sensors, lane departure and then that's your factory exhaust break. You get two USBs, two 12-volt power points and then a 110-volt, 150-watt plug-in. So nice stuff there. Center console's nice and clean. Got some cup holders, all-weather floor mat and passenger seat on this side is in nice shape. I do like the color combo with the graphite metallic and then the light gray interior. I think it goes very well together. Home-link buttons for your graduate security systems and lighting systems. You also get your power sliding rear window button and then your map lights are right there and you get on-star capabilities in the rear view mirror. Final thing to point out in the front here is that you do get a wireless cell phone charge pad. My gimbal did not like that but you get a wireless cell phone charge pad. So that's a nice feature if your phone fits in there. We'll take a quick look at the back seats and then we'll start it up. Check out under the hood. Back seats are just as clean as front seats, no rips or tears back here. It does have latch child safety system for any child car seats you may have. Power sliding rear window with the built-in rear defrost. Once again those seats really nice shape. Looks like they've hardly ever been sat in. You get the factory all-weather floor mat back here and your carpeting is very nice underneath that. Side current airbags on this truck. And we will start it up, take a quick look under the hood. I did want to show you those LED lights in the mirrors. They are ultra bright and then you do get the LED lights under the bed rails there which light up the bed nicely when it's dark up. We'll start it up. Starts right up and other than the hood warning you'll see that there's no check engine lights or anything like that. I would personally like to thank you for checking out the video today. And hopefully from this HD video you'll have been able to tell just how clean this truck is all the way around inside and out. Under the hood we have the 6.62 Duramax diesel with the L5P motor. Engine bay is very clean, runs very smooth. There's your emission sticker. Once again this truck has been fully safe and inspected by our service shop because they price oil and filter change. All the fluids have been checked and talked off and this one is 100% ready to go. There's where your diesel exhaust fluid goes. And you can see that that air intake goes up into the hood and then that goes up into the air induction in the cowl there. So this truck is 100% ready to go and I would highly recommend it from a quality and condition standpoint. I think it's one of the nicest Duramaxes we have in our lot right now. And to see more pictures of this truck or one of our other 450 new and used cars, trucks, SUVs, minivans, Wranglers, half tons, three quarter tons, one tons, you name it we got it on our website right there www.summitauto.com. Full pictures and descriptions of every single vehicle from two locations all at www.summitauto.com. And if you'd like to check out more HD videos you can go to www.youtube.com. Remember to like, subscribe and share on this video and all the videos that you see there. In fact, in a second you will see a link to subscribe to our YouTube channel on the upper left. A link to more Chevy Silverado 3500 truck videos like this from the upper right. A link to this vehicle on our website in the lower left and a link to one of our latest YouTube videos in the lower right. And we're really excited to help you all with this Ultra Clean 2018 Chevy Silverado 3500 CreeCab Short Box Single Rear Wheel LTZ and Graphite Metallic with the Duramax Diesel. And thanks again and remember to like, subscribe, share and click the bell notifications. Thanks again.


30 points and 15 assists. That was his first game of those numbers at least since joining Milwaukee. How do we make that happen more often? I think it comes with time. You know, even Dame said, you know, he came into the Milwaukee situation not trying to step on toes and kind of trying to find his rhythm and place with that group. He has to be the lead guy. I think out of him, Middleton, and Yanis, he's going to be the guy that you put the ball in that can absolutely go get your bucket and can score. So with that being said, why not play through Dame? Why not give him the basketball and allow him to be himself and everybody else figures it out? Yanis, to me, has always been the type of player where he can put his head down in an open floor. Nobody can stop him. But now that they've started playing that two-man game together where he's a picker, he's a roller, he's giving them different looks, that makes them dangerous. And now Middleton back for his first game and to have 22, we talked about all his chemistry. That's not a Chris Middleton problem. Chris has come in and that first game back, it looks seamless to me.


Thank you for being here and thank you Avi and all the guys at OSP for having me. So let's start. We're going to talk about MQTT. I'm going to explain shortly what is MQTT of course and what the hell is supposed to do here and why we have a table on the front of the stage without anything except a blinking light. It will be blinking actually. So first mandatory high... oh mandatory it doesn't work. Just a second. Something needs to fail. So hi, my name is Muschazzioni. I'm a security research manager at Verint. Many years into security having fun breaking stuff all the time and this time we're talking IoT in terms of things. Without further ado what we are going to do today. We're going to learn about MQTT. What is exactly all the hype about? If there is any hype. What kind of tools are using MQTT? Why we should or maybe we shouldn't use MQTT. The security model and the insecurity within the model. Last day and of course the attack side of things. How we do reconnaissance on those devices. What is interesting to harvest? How can we exploit those devices? And of course hopefully we'll have a live demo over here but it will be from here. Okay MQTT stands for as you see message queue telemetry transport whatever. It means some simple thing. This simple thing actually means that you or any kind of device can connect to any other device and talk with a very lightweight protocol of communication. Now the thing is that we have many protocols. The most prominent protocol for the internet is of course HTTP. Everyone knows HTTP and the protocol itself is not complicated. But it is kind of heavy on communication side when we are talking about very small devices. When we are talking IoT's we are talking about very small embedded devices. Nothing like your Android or iPhone or nothing even close to any kind of computer that you've ever had. Actually maybe except the 486 and the Pentium. And here we have for example and we'll talk about such examples for embedded devices. Any of you have ever programmed an Arduino? Show of hands. Cool. Wow. So many. So Arduino have like you can find several Arduino live devices that have up to maybe 100 megahertz per second. Megahertz we should say. So if we are looking into regular Arduino's we are talking about 26 maybe 48 megahertz. It's a very small amount of computing power and when we are talking something like that on my table is the ESP8266. It's a very small in comparison to any kind of computer that you have. So that's why we need to have something very lightweight. Very lightweight in terms of communication fingerprint of the memory etc. And maybe in storage and anything like that. Everything that we know of is getting very shrink and very small. So we have to comprehend this. So we have you can connect many devices through MQTT to one major hub. The hub is usually called maybe a server maybe and MQTT server and we have several other names for that. We can anonymously use hub or server. And after we have the server the server is connected and many devices can connect to it and talk to it. Why we need this server what we are doing with it. So first for example we have the mobile device and we have the sensor. Both of those computers and both of the processes are connected to the broker which is the formal name for the server. Talking with the broker and the broker is coordinated between all the messages. If you are familiar with MQ you should be very familiar with the process that we are going to go through. So the first thing we are doing with the broker is sending a sub, a subscribe. We will talk about two types of communications. Subscribe and publish. I am not just joking. It is the very basic items of those communications. And we don't have many more communications. I will explain what else I am omitting here and it is not much. So first of all we need to sub to subscribe some kind of a channel. Think of a channel or a topic that is the formal name of it. Channel is like something that you know from actually any kind of communication protocols. You have some kind of a topic, some kind of a reserved name. Mostly hierarchy related name that should tell you about what you are going to listen to. What kind of messages you are going to receive. So first of all you need to subscribe to WeatherTLV. That is the name of the channel or the topic that we are talking about. So the mobile device, the sensor we are talking with is subscribing to WeatherTLV. And maybe the mobile device is subscribing to MobileTLV through the broker. So now the broker have two items in memory. The mobile device that and the sensor this is talking to me and they are subscribed to this channel. If anyone will publish anything on this channel, they too are going to get the message directly from the broker. So from now on after the subscription the broker does all the stuff. Just waiting for the queue to fill up. And when some kind of a message comes in it will pass along the line, the messages. So the next thing that is going to happen as someone for this example, the sensor of course, is going to transmit or publish the communication topic WeatherTLV, the value 29C. That is just a string. A string named 29C. So what will happen next? The broker will get the publish communication protocol and through the publish it will think about who is subscribed to this, to the WeatherTLV. WeatherTLV. So you have the mobile device that was subscribed to it. So let's send it his way. So the publish will get to the mobile device through the broker. After the broker have gone through some thought and through its record you saw that everyone that subscribed to it got the message. Something that I've omitted from these examples are of course the connection. You have to establish a connection or maybe a disconnection before you are talking to the broker. I've omitted a very important part of the QoS. Maybe the broker is keep on sending this publish request and maybe not. That's the quality of service. Maybe O1 and O2. I won't talk about it because it will complicate things that are not important for security's sake for that scope of talk. And of course the keep-alive. Nothing can be communicated all the time. It's a TCP protocol and we need to have a keep-alive just for the communication not to break in and some kind of optimization for the communication. So believe me or not it gets such a simple scheme for publication and subscription. Hopefully that was pretty okay by you. So now after we get this straight we have an hierarchy. The hierarchy of the topics are important. Why? Because the hierarchy can symbolize to the person or the subscriber what kind of topic he subscribed to but more importantly it can be a batch. It can subscribe to a batch channels in one instance. And that's a reserved name for that. For example we have a weather slash TLV slash humidity. And then we have weather slash TLV slash temp or in the hierarchy we can see the weather now TLV. The weather now TLV. It have another branch for this hierarchy and they have temp and humidity. On the other hand we have also weather slash jar for Jerusalem and then temp for Jerusalem. If you want to subscribe both to humidity and temp you can subscribe to weather TLV pound key or pound symbol. Now you will be subscribed both to humidity and temp. On the other hand if you want to subscribe to TLV temp and Jerusalem temp you just need to say weather plus temp. Then you will be subscribed to any kind of city that is sending publishing temperature for this broker. So far it's pretty nice nothing harmful allegedly. And now we are talking about who is using MQTT. Why I'm spending like maybe 10 minutes so far just to talk about this kind of communication why we need that. So the main usage for MQTT is home automation and we have some protocols that are using it for pure messaging. Facebook Messenger is using by its infrastructure most of it from Facebook is by MQTT. Now that's got pretty interesting but that's to say that Facebook is one of the few that are publicly transmitted that they are using MQTT for this kind of messaging. So let's stay with home automation because that's the most major usage that you will find online. What is home automation and why we need that. I will not talk a lot about it but let me just say for now that notable mentions for that is AWS, Microsoft, IoT Hub both are cloud services that both of Amazon and Microsoft are providing and getting a huge traction on that just because of course the demand by the customers. Now so we have a home and it's connected to everything maybe for the shades maybe for the lights maybe we have even an automatic toilet I don't know and maybe a cat feeder and all those things are connected to one broker maybe maybe on the cloud maybe on your premise in your house whatever you want to do with it. And when people are seeing this picture and thinking about home automation I receive two kind of responses. The first response is wow that's awesome I need home automation why I need to feed my cat right now no matter where I am and MQTT is the thing for that. So that's one reaction the other reaction is exactly that that was mentioned there was an AWS, Amazon's convention in Tel Aviv like I think it was like four or five months ago. It was pretty huge and pretty successful in terms of attendees and Philips showed how they turned out on the lights through MQTT through AWS cloud IoT service broker and one and not only one from the hacker Twitterverse tweeted why the f did we all become so f-ing lazy what the actual f is this crap and this is the second response that I actually get from many people. Now after this show I will let you alone decide if you want it or not. The thing is it's becoming a trend and everyone are using it everyone along the stream maybe you will find it in China you'll find mainly in Europe in Saunas and stuff like that that need to be connected for some reason and of course in the United States everything is coming from the United States in this manner. So that's the response that I will leave it there why it's important for us because we need to deal with security. So I need to say that MQTT is pretty solid in terms of protocol. If you read the documents for MQTT it's ever evolving document. It's now in I think the official version for the documentation at 3.1 for the protocol and it's pretty up to date. You have TLS by definition you have TLS inside you have client certificate which is awesome if you are talking about authentication. You can do permissions per topic, per method if it's publishing or subscribing and per QS which I haven't mentioned as I said. So that's pretty cool right pretty solid security but now it has an insecurity model within it because if you paid attention you saw that the broker is the one that is sending the communication throughout the network and the first one that is publishing to the broker is another item or another entity and no protocol is devised for now between the broker and the publishers to communicate which topics should have what kind of permissions. Now that's pretty confusing not only for you but also for me. I'll have an example just on this table I have the Sonoff which I will turn it into a demo and the Sonoff has an open source firmware that's cool and you can read it but no one actually many people did it the documentation is pretty solid but in this case I found an API which is not mentioned anywhere a topic which is not mentioned anywhere in the documentation and of course I've added it to the official documentation but if I haven't done so there was at least one topic which is harmful for the user which was able to be a bit permission wide or very very sparse in permissions and actually everyone could have used it or exploit this kind of topic maybe it's a bit of a confusion for now because we haven't established what is the topic yet and we'll get it in a few slides but believe me the broker slash publisher the economy we have many many problems with the net. The second thing is it's directed mostly to the tech savvy which is something I guess will be changed in a year or two because that's the thing with technology which is evolving and engrossing everyone. The other thing is that you have authorization by default the brokers that are online we are talking about Mosquito that's the most prominent broker out there it's an open source from Eclipse Foundation and for my testing I've tested like 2000 and something devices around the internet which is not mine and I found that the brokers were 80% plus from Mosquito there are like two more like active MQ for IBM and you have a Hive MQ which is another prominent example but Mosquito is the most prominent one as I said so if the protocol is very protected and you have TLS right you can say to me right now they have TLS built in right so let me just say that TLS is pretty hard on those devices we're talking about very small devices and we'll see two examples for these difficulties the one is from the official Arduino client for MQTT which cannot support SSL TLS for now that's from today it cannot support it at all because it's pretty hard for such small device to comprehend a communication to keep so much memory in place and we are talking a huge amount of memory here in the comments section of the firmware that I mentioned for the Sonoff there it in TLS uses a lot of memory 20K so be careful to enable other options at the same time and it's disabled by default so even if it's by definition inside a protocol you can't use it with Sonoff which is the single most prominent example for MQTT for now and you can't use it with Arduino because you don't have much power on Arduino so you can do SSL whatever you desire to it doesn't matter okay so those are the two prominent examples for that moving on the most successful vulnerability that I found every time and again we're talking about IOTs which kind of vulnerabilities I have one kind of vulnerabilities features those are the best vulnerabilities for IOTs believe me and you should test it yourself not just believe me of course so we'll go through a couple of features in a few slides when we're talking about profit how we can start with exploiting or maybe researching MQTT whatever you desire so the first thing to note is that you have several default ports that you can utilize in order to use MQTT of course anyone can use whatever port he needs or wants to use but the defaults are mainly not changed in terms of standard so you have TCP, you have TCP with SSL you have WebSockets which is pretty cool and convenient if you have enough powerful IOT device to use WebSockets and WebSockets plus SSL with those two are getting traction but not so much so if you want to show them those you can just look for 8083 and 8083 1883 and 8083 and through that you can find many devices as well and just enumerate them after enumeration you can do many things that will scope down the thing that you want to test or research you can look for mosquito, you can look for the port that I've mentioned and you'll find out by yourself the topics that you actually desire to go after in this case we're talking about the broker, about the mosquito that I have here in the Raspberry Pi is communicating through MQTT the sonoff is connected to the Raspberry Pi that I have here and the mosquito server have defaults now I haven't mentioned the dollar sign the dollar sign says that you can't enumerate it all if you would like to enumerate all the topics instead we can use just a pound key, the pound sign why? because the pound sign is a wild card if I'm just subscribing to the pound sign I'm subscribing to every topic that is on the broker unless it's starting with the dollar sign now if you will look into AWS AWS smartly decided to use a dollar sign instead of just AWS as a topic so you can't actually enumerate it as easy as I showed right now but there is a documentation for a dollar sign and dollar sign is by protocol on each and every broker you will have a dollar sign and those kind of topics will have it within it those are the topics that I've collected through the documentation and through the source code as well so I believe we are not missing much here so if you just subscribe to those topics on every kind of broker you will get a lot of information about the devices that are connected what kind of devices, what kind of topics, how much traffic it gets et cetera et cetera pretty interesting just to start with the brokers then, okay that's the thing that I've just said and then we get into the details what kind of devices are connected to those brokers these are kind of a rule of thumb if you want to discover a specific kind of devices the list can go on and on of course I'm just presenting here whatever I find consistent so you have the Harmony which is by Logitech very interesting hub Z-Wave used for home automation I've mentioned Saunas it has many Saunas in Sweden if you fancy one IT-DVS is the switch that I have it only functions on-off switch it's pretty practical if you think about it because if you just want to make your home automated you need an on-off switch for the basic functioning so that's pretty practical if you just buy a bunch for a few dollars and connect your house through Saunas then you have the open-hand Iobroker Home Assistant you will have it on the sides as well and on-tracks now on-tracks is interesting because it's very prominent within mobile devices mobile devices are using MQTT2 especially apps that are connected to GPS and if you want to spy on your kids or spouse for some reason now if you are using on-tracks that's interesting because on-tracks are keeping GPS tracking software on your mobile device and then connecting to the cloud on the MQTT broker and sends the information to you for your full-blown and spying agency that you have will come to on-tracks later again another gem within it for this example I just enumerated all the topics that I could find on the device on Saunbroker I guess you can't see that it says Minus UREBurger Minus PXSineClarin5 which is maybe the password for the mosquito server and maybe for its SSH I won't recommend anyone to test it now that's something that this is a mishap it tried to write something on the command line and it just injected it into topics within the mosquito server that's an error of course but we can greatly affect the operation of the mosquito by that the other thing you can't see that and I'm apologizing for that but I'll tell you it's just a bunch of SQL injection attempts over topics remember everyone that will publish a topic will generally devise a new topic on the broker if the broker does not comprehend what kind of topic are you using so someone tried to use SQL injection on the mosquito broker and the mosquito broker just wrote it all down into topics now maybe someone tried to publish all those topics and maybe some other web application is using M50 in the background and someone tried to SQL inject the web application and through that it got into the publication into the broker and then it just listed and now you're just seeing like I don't know maybe 50 lines I'm talking about more than 50K lines of SQL injection attempts I don't know if it was successful but I guess it wasn't OnTracks I'm coming back to that for a second because OnTracks that's the way it keeps your data you can read and you can subscribe to the OnTracks server or the OnTracks broker and receive some kind of information latitude, longitude, location there are many types you can send in the timestamp for that an app of course, the accuracy of the GPS, the battery level those are the interesting things now I tried it that's actually a genuine line a topic that I found in some broker and by the broker being open to the internet I just can't spy on people now it's something that is pretty childish childish but I'm a child so I tried it and someone and then there's some stuff so that's cool let's open up the map and let's locate the longitude and latitude that we got I got somewhere in Dallas that's cool Dallas is not cool but yet again we found it in Dallas let's zoom in, we have Google Maps now we are in the future and we are using Google Maps to see exactly where the signal is coming from and now it got a bit weird because the first thing that I saw is a huge building I will turn off the light because the impact is important okay, yeah, no? I'll try so you can't see anything but then I'm zooming in and it says okay, so maybe it was the first MQTT troll on the internet I don't know and maybe he wasn't and then again it's a great game thank you very much Troll but I persistently tried to assess the location okay and persistently on it and he moved or he or she moved from this location and traveled you can see a very very obvious pattern of traffic going into traffic somewhere and then maybe home, maybe walk I don't know maybe Archer can use it for spying okay but let's get on to the smart home applications which I said is here on this table we are talking about this device it's a pretty small device encased in plastic when we uncover this plastic we can see that nothing important, nothing special all devices have an on and off relay, you can see here the relay it has the light you can see there the light and of course mains input and mains output I tried to connect it to mains directly it blew up so don't write that even though it says on the team that it can support up to 10 apps no way so mains is not recommended that's the reason why I'm connecting it to something else and then at the back of it it is much more interesting here you have the Wi-Fi because you need to connect it to the MQTT it doesn't connect through Ethernet it doesn't head about WPA vulnerability yet and then we have the Wi-Fi we have the ESP8266 which is a crazy crazy thing right now pretty cool if you want to hear something about it get one for free from me and you have of course very ugly kind of soldering here air gapping something pretty basic in electrical engineering and that's the important stuff very small CPU with very small fingerprint for memory and you can use it for many stuff and as I said Wi-Fi onboard that's pretty huge and only cost a few dollars just to implement that okay so that's pretty neat I guess and it has many topics that I found interesting in this example you can ask for the SSID for the Wi-Fi maybe you have a second Wi-Fi that's the CMND son of SSID2 you have the Wi-Fi password on some kind of a topic for some reason you have the second Wi-Fi password for some reason again the MQTT user pass has a user pass so you can ask it for giving it to you and you have the OTA URL that's important OTA is over the air over the air is the thing that makes you upgrade or download a new firmware and then upgrade your your device on the fly and the triggering for the over the air now I should mention that all of those topics are free to be published at and ask those topics without any kind of content and then you can be subscribed you can get its contents and through that you can easily enumerate the SSID and password of this location for the Wi-Fi and you can change it as well if you publish and by default no permissions as we said you can publish through those topics and change the behavior of the device now that's very important for our exploitation demo in this example I've just enumerated a thousand devices on the internet just as a proof of concept and I just deleted the IP and the IoT type what kind of Wi-Fi and the password for the Wi-Fi you can say ok but the Wi-Fi is somewhere around the internet no one will get to that because it's pretty massive to fly to Sweden just for a quick sound and then to hijack a Wi-Fi if you are a very important person someone will do that but for us, for the automation it's again the risk is there but you can minimize the risk by saying that but I don't need your device I don't need to be in your device in order to hijack this connection because as I said we have the OTA URL and the OTA URL will tell me of which the device will get its new firmware form and if I as I will do in the demo in a second will publish to this OTA URL I will get him to believe a new URL that I will input on my server and then make it to trigger through the upgrade process the upgrade process will make him restart, download the new firmware that I gave him which I devised and through that firmware I can hijack the actual sensor to do whatever I want him to do like a small botnet, think Mirai as terms of IoT ok, the firmware that I'm going to show now is called Son of Evil it's a player of worlds of course and the Son of Angel the Son of Angel is something that I published later just if you want to fix your Son of because there is no fixed for now you can just install the Son of Angel that makes the MQTT dangerous functions to be disabled and you won't be affected by this exploit ok so now I need to pray for a second ok I'm ready so we have the broker up on the table we have the Son of here we have an Arduino just for our regulation the two lines, the 5V in the ground the other ones are disconnected I'm using actually here a more basic approach the Arduino was the older approach it's the same just for power regulation nothing else than that and of course the Son of it is turned on and you can see the non blinking light non blinking saying that it is connected correctly, if it was blinking you would get the feel that it wasn't connected to the MQTT broker that I just designated here and that's just a shell nothing in it ok so I'll go through the steps the first step is to request the Wi-Fi SSID and password why I'm doing that not just for fun, I need that because the second time I will use it in the compile and evil fumer I will need to compile it with the definitions for the Wi-Fi and the password because I want the user to get the feeling that it wasn't connected to the Wi-Fi so I need it to be persisting and connected to the Wi-Fi and the second thing I needed to do is to download my firmware and it will download my firmware and then get the Wi-Fi password synced in and then we'll connect to the internet and we'll transmit to the internet whatever I need I need a shell back and we'll see, hopefully a shell back from the device request the Wi-Fi SSID put the SSID and password into the evil firmware, compile it I won't do it right now but believe me I've already did it just for making things a bit faster publish the OTI URL from my domain from the evil domain OTI URL link to point to my evil firmware just compiled and forcefully request the OTI upgrade and hopefully we'll have some kind of a profit and call back to the attacker 8 minutes? so we have time no, just kidding so let's get into it you're all crossing your fingers right? I can hear you so I'll introduce two tools one of them is pretty basic just Telno connected to my to my domain I'll do the case ok, thank you we have one tool it's pretty basic, it's the NTT lens several tools out there to use as a NTT client that's a Chrome extension, actually a Chrome app it was a Chrome app but now in extension someone said something oh yeah sure so that's NTT lens it's a client just to use for publishing and better so just for making the publishing and subscribing via GUI and not something like hardware it's pretty easy to comprehend, we have the subscribed and we have the published comments I will now subscribe I'm connected to my NTT demo I'll subscribe to the broker and I will start to get messages here those are the messages that are persistent and communicated to me I can see that you can see that I know but the tele-sonoff is online and it has another thing that is from another demo named OWNTracks I can see an OWNTracks record here now, the second thing that I will do is to show you the SID2 because I have two SIDs for some reason just for fun and the SID2 you'll see I just published it and got the NTT demo on the SID2 from the Sonoff device meaning I just send to the broker Hello, I need the I want to get a command Sonoff SID2 enacted it was enacted on the broker the broker thought about this publishing he knew that the publishing means that everyone that is subscribed to the topic named the result will get this result from the command that I just sent to me from the broker NTT demo is something that is known we can try the SID2 the second one just SID just for fun and it will say something else which is very quoted is not a honeypot so don't try to connect to something named not a honeypot so that is SID I won't show the SID2 passport right now but just after the demo and someone will try to to connect it as well so no, I just need a connection to the broker from somewhere around the internet and the brokers are usually on the cloud or on the front of the internet because you want it to be available from the internet ok, so now I've asked for SID and SID2 now I have this information I can ask for passport and passport too and I will have this information and the other thing that I will I need to check is the OTI URL and I want to know what kind of OTI URL is right now on the device and I have the imdelmos.com slash pocgood.bin but we don't want to be good we want to be bad or evil so we'll publish change the topic to be HTTP I am Delmos P O C Evil bin ok, I think it's cool so now I will publish it and it will return a signifying result that there is a new value for OTI URL named imdelmos.com poc evil.bin now the fun part I'll just ready my machine ok I need to prepare ok better I guess ok, I think it's pretty decent I'm just opening up the connection of course the port need to be 1337 that's the designated port within the firmware that will connect to it and have a shell back and now we need to pray I need to pray and we'll have an upgrade for forcing an upgrade I'm just changing the command for upgrade and the message will be one for forcing an upgrade right now ready no one is ready ok I can't see you but I believe you upgrade ok, that's good that's supposed to happen now it downloads my evil code is it hot here? just me yeah yeah imdelmos is a real you can do it by yourself you can download it by yourself imdelmos slash poc evil.bin you can have the binary if you want ok we're waiting we should have a designation that the download was successful and it should be restarting in a few seconds block loop it happens from time to time I need to do it again maybe one time but it should be ok close loop means that it has some kind of communication problem but I'm just doing it again so again I'm publishing an OTA URL which is unfamiliar for him and now I'm upgrading so suffer is starting that's a good hope so just finish it up I want to say thank you again for everyone for being here and thank you for the opportunity and now we have some time for questions I think we have 4 minutes 45 seconds that's a lot so we have some time for one question maybe one question I can't see anyone one device oh you have me thank you thank you for this question the chip is on off chip you can put it on and off that's it from remotely because of the wifi chip it's pretty easy to implement within the wall or after a socket and then you can just make any kind of home device into an automated home device one more question because it was a very basic one one more question ok my server broker in my case just for convenience for the demo it is right here in raspberry 5 in the same vicinity but usually you will have a broker within your home which is connected to the cloud or some other maybe not cloud, just other servers which is funding the internet so you can connect from the outside and make sounds like I don't know you want to preheat the water before you get home so you need you assume it isn't, most of the device that I checked I think more than 70% of them wasn't at any gate or I think I want to answer this guy can I answer this guy about mitigations first of all wait before you implement you can call it the first generation that's the best advice I can tell you but if you are eager to use QTT know your devices don't buy anything that you can't read the code by yourself for now and hopefully I'm correlating with other researchers in QTT and trying to devise a protocol for this kind of communication between the broker and the publisher but for now just know your publisher and authenticate by default without anonymous connections that will solve most of the problem thank you guys, thank you


What's going on everyone? Sam here with Leighton Sports Guards. We are ripping four boxes of 20-22 Bowman Draft Sapphire. Baseball for M.O.D. It's good luck, M.O.D. Let's do it, buddy. Let's see what we've got. These baskets. First Henry Williams, first Jake Bennett, first Kenya Huggins, and first Peyton Pallett. Good one. Nice first going in there, M.O. Congrats everybody. First Tanner Schoble, first William Kempner, and Colson Montgomery. Ken Wallace first. Averson Artega, first Landon Sims, first the Brunner Cox. First Jayce Jung, we've got a green first of Carson at Paul McQuist. Two out of 50. Nice one there. Congrats, Emma. Nice Rockies hit. Paul McQuist. Urdani De Los Santos. There's a John Kensi Noel, 51 out of 99 for the Guardians. On the yellow, yellow sapphire. First Justin Boyd, and Danny De Andrade. Mark Johnson first. First of Dalton Rushing, and Daniel Cueva. Nice first box for you there, M.O. Congrats, buddy. Box number two. Christopher Passiola, William Bergoya. First of J.R. Richie, and Zach Veen. South Stewart first. First of Kevin Pirata. Jacob Mizorowski first. Dylan Ray first. Ivan Melendez first. Bryce Hubbard first. Elijah Green first. Nice one there. And Betty Montgomery. See like a Jackson Holiday numbered card. That'd be cool. Nick Binnison first. Ryan Ritter first. Jordan Sprinkle first. And Blake Burkhalter first as well. Mason Barnett. First Sean McLean and Trevor Martin. Got a yellow Michael Kennedy of Logan Tanner. 60 out of 99 for the Reds. Nice one there, Emma. Congrats, buddy. Adam Mizor. Orange. First is Ryan Ritter. 11 out of 25 for the Rockies. Nice one there again, Emma. Congrats, buddy. Ryan Ritter. Shailen Polanco and Henry Davis. A couple of high rates on the back. Box three. First Sean McLean. First Trevor Martin. First the Michael Kennedy. First of Adam Mizor. Gabriel Hughes first. Jonathan Colasa. Owen Murphy first. Kyle Minzardo. Got a green coming up. Justin Campbell. That is first of Andrew Pinsar. 13 out of 50. Nice one there. Congrats on that for the Diamondbacks. Nice one, Emma. Sunny Day, she are. And Carson Milgram. Gold to 15. Gonna be a first of Ryan Sermac. 7 out of 15. Great box here, I have to say. Congrats on that one again, Emma. Nice Sermac. Judd Fabian first. First of Anthony Hall. First of Jordan Beck. And Carson Williams. Nice one there. The last box out of bone draft sapphire. Good luck here, Emma. Pindunhurst. Aril Vera. Dylan Bevers. Nazir Emile. Drew Thorpe first. Victor Echosa. Dylan Lascault on the first. I love that. Big fan. James Wood. First Michael Noor. First of Kumar Rocker. Nice one there for the Rangers. First Chase Midroth. Cesar Perido. First Dominic Keegan. The Rays. Jason Chorio. First Joe Lamp. First of Nate Savino. First of Jacob Miller. Gonna be yellow. George Valera. 84 out of 99 for the Guardians. Nice one there. Cleveland. Emile Adele-Amedore. Parker Messick first. Two packs to go here, Emma. Good luck buddy. A Teal. Schmackero. Non-first is Wilman Diaz. 12 out of 20 for the Dodgers. Nice Diaz. Another highly rated prospect for the Dodgers. Very nice. Joshua Vaya. Crawford first for Virtual Composts. And Angel Martinez. That'll do it for your break there, Ammo. Thanks again, buddy. Do appreciate the support as always. We'll get them right out to you, man.


Hi guys, I'm Ryu and we're here with Walker Creator filming a new graduate video for the Business School


Hello and welcome on our STM48O cube IDE by Ziggs training session. In this part, we will use Timer to control our green LED in PWM generation node. The objective of this session is to configure the timer in a PWM mode to bring the green LED to control it. So instead of using the software code, we will let Timer to do the job and toggle the LED. This time we will use PA5 as an alternate function and we will let Timer2Channel1 to control it. Our system will work on an internal clock 16 MHz divided by 2 this time. So our system clock would be 8 MHz. We would like to keep the same timing like in previous exercises when we controlled green LED by software. To do this, we need 1Hz period with 50% duty cycle PWM signal. Let's start a new project with an STM48O cube IDE. I would use already existing workspace with previous exercises. To start a new project, I can go to file new STM48O project or directly to this icon and select STM48O project as well. It is starting with the target selection. I'm selecting my microcontroller, so it is G071RB. I'm selecting the LQFP64 package which is present on the nuclear board we are using during this hands-on. Selecting next, the next step is project name. I would call it G0PWM and press finish. Now it is initializing the device configuration window which is in fact the STM48O cube MX application or plugin within Eclipse environment. It takes some time. As a result, we should see our G0PWM IOC file which is the configuration file. The file for the configuration of the microcontroller. I can zoom it out for better visibility of the microcontroller. You can use either those plus minus zoom buttons over here or the wheel on the mouse. Okay, the first thing would be the selection of debug interface. So I will go to the system core CIS Serial Wire. I can see PA13 and 14 dedicated for debug interfaces WD. The second thing is a configuration of our PA5 pin which will be controlled by Timer 2, channel 1. We can do it in two different ways. The first is by the selection of the timers. So I would select Timers, Timer 2. From this I would select the clock source as internal clock. I will not select anything from this live mode nor trigger source because we will not use any timer cooperation, timer synchronization of this library. So only the clock source as internal clock and I would use channel 1 as PWM generation channel 1. Please be careful and do not select this PWM generational output because it would generate PWM signal but it will be not connected to the pin but used internally. Okay, so we are selecting PWM generation channel 1 and it is automatically by default routed to PA0 pin which is not our choice. To change it I press control button on my keyboard and left button on mouse. And by clicking the left button on mouse I can see the alternate locations of this function. I can see that one of those is PA5. So I am keeping this control button and left button on mouse pressed and I am just dragging this PA0 pin to PA5 and releasing the left button on mouse and control button on the keyboard. As a result I am migrating my function, my timer to channel 1 location from PA0 to PA5. So this is one of the way how we can do it. The second way is a bit different. So please let me come back to the original setting. I am pressing the left button on mouse and selecting reset state and instead of selecting the roll on the timer I am going to PA5 directly and pressing left button on mouse and I am selecting timer to channel 1. Now I can see the pin over this button. Its label is changed to timer to underscore channel 1 and the color of the pin has changed from grey to yellow. Which means that this pin is reserved, is booked by me and it needs to be configured. To do this I am going to my timer to configuration into the mode window and within channel 1 I am selecting the roll of this pin, which should be PWM generation channel 1. After this operation I can see that the color of the pin has changed to green which means that we've got this pin configured properly. So we've got configuration of the pin. The next step would be the configuration of the timer itself. Before this let's do the short exercise on the clock configuration. As you can see the default settings of the clock configuration is the following. We are using internal clock source, a high speed internal RC, which is 16 MHz, and then this clock is going directly to the system, clocking all other peripherals. What we will do within this very simple exercise will change this 16 MHz within this high speed clock on the bus to 8. I would just change this 16 value over here into 8 and press enter. As you can see application automatically adopted its settings to my target value. All the system is now working on 8 MHz including all the peripherals. Okay, let's come back to our application. So I'm switching back to pinouts and configuration. And now we will focus more on the configuration of the selected timer. I will do some space over here. Mode is already selected, we will not change anything. So the clock source, internal clock and channel 1, PWM generation channel 1. Okay, so the configuration. When the timer configuration we've got quite a lot of fields which we can configure. In our case we need to configure the timer to work in PWM mode with the frequency of 1 Hz and duty cycle 50%. How to do this? We've got the input clock for the timer on the level of 8 MHz. So we need to divide it somehow. For this we've got a few possibilities. The most convenient ones are the pre-scaler. This is the first component we can use here. So we need to downgrade somehow these 8 MHz to smaller value. So I would divide it first by 128. I put 127 because in the register settings there is one edit automatically to the value PSC which we've got in this field. This is why to have division 128 we need to put 127 in this field. Okay, so as a result to the timer we will have instead of 8 MHz we will have 62 500 Hz input. Then the counter will be up counting and the second point we should configure is a period. So the value to which the timer would calculate. And how to do 1 Hz from 62.5 kHz. We need to divide this 62 500 Hz by 62 499. And again we are subtracting 1 from the value to be put due to the fact that we are calculating from 0. So in fact as a result for this we would create 1 Hz signal. So we've got 1 Hz. The only missing point is to set the duty cycle. The duty cycle we are configuring within the pulse and its value should be related to the period value. If you would like to have 50% we need to put half of it so it will be 31 250. In this case as a result of these operations we would have on PA5 pin which would reflect the timer to channel 1 1 Hz signal with 50% duty cycle. Now we are ready to generate the project. So I just press CTRL S, CTRL CIFE. Now we see that something is happening. Okay, let's go to the source. So I'm going to the sources, main.c. And again I can see a lot of user code, beginning user code and sections which are dedicated to my code to be protected against removal during the regeneration. And what I need to do right now is to start the timer. Because my generated application is only the configuration done by me. And I need to start the timer. We need to start the timer only once before while one loop has been called. So I'm using to this purpose user code begin to section. So I would start with HAL team because it's a for the timer. And I need to select the proper functions. As you can see there are quite a lot of them. So I would just limit them by underscore. And let's select something which would generate some PWM for us. Okay, here there are some names. And we can see three. The first one is just starting PWM signal without an interrupt or DMA configuration. Then there is as well start PWM start DMA or IT, which are using DMA or interrupt generation on its functionality. We do not use it. We will select PWM start function. The first argument is a handler to the timer we are using. Here you can see the rest as well, the information that we can select this timer to from our settings. And then the second one is a channel. We will select team underscore channel. And we can see we can select the proper channel. Channel one is our choice. Okay, control save to save the file. And now let's try to build it. So I press the hammer. Okay, and now we can start the debug session. So I press this back icon. I select STM32MCUCC++ application. Press OK. I will not change anything in the configuration. I press OK. And now our application will be switched to the debug perspective. If you press resume button, we can see our green LED tongue link like before, but this time it is controlled directly by the timer. To exit from debug mode, we click terminate. Thank you for watching this video.


We are here live with the Vasta the three-man chicken wings So people keep asking me how to debone the chicken wings and I can't tell you watch the chicken wing playlist It's in there, but for you. I'll do it again. There's two bones. You separate them like that So you separate it and then just twist and pull And then you've got one more bone in there now if it's not twisting that's fine separate it so there's a bit of a bone head like that and then just No waste. Let's do another one Again depends on how the chicken wing is cooked. All right, there's gristle in here Yum yum twist Pull it away. See if this one comes out. No, that's all right. That's all right. You've got the handle. You can't get in that No wasting. I've got a challenge for you.  Hit me up


Save 10% with my code Bobby10 on raw, organic, grass-fed and grass-finished, freeze-dried organ meats from grassland nutrition. Link in the description box. All right guys, welcome back to the channel. If you're new, my name is Bobby. Guys, today we're going to react to water, react to the Koran and secrets of Zam Zam water by merciful servant yet again. Guys, when I hear miraculous water, holy water, I think about Christianity. Within Christianity, with an orthodoxy, we have a long tradition of so-called holy water. Coming from the Balkans, I know people that go on pilgrimages to certain springs to get the holy water, cleanse themselves with the holy water and get blessed by it. Therefore, I'm quite surprised to hear that there is some special water within Islam as well. With no further ado, let's have a look. Japanese scientist Masaru Imoto discovers the secrets of Zam Zam water. Science has now revealed new secrets about Zam Zam water and the way water is influenced by the verses of the Koran. It has now been scientifically proven that water is affected by what is recited over it. Japanese scientist Masaru Imoto first began experimenting on water after he had read that each snowflake falling from the sky is unique. He wanted to disprove this theory as his scientific instincts told him that this could not be true. The geometric shape of the snowflake is determined by its chemical composition. The composition of water is well known, two hydrogen atoms and one oxygen atom. So, how can snowflakes that fall from the sky be different from one another? He said, I was determined to prove that this theory was false, so he built a laboratory consisting of a deep freezer with a regulator because no liquid subjected to a sudden freezing can assume a geometric shape. The freezing must be slow, so the atoms have the chance to crystallize into the shape decreed by God. He set up a deep freezer with a regulator, a cold room at the temperature of minus 7 degrees Celsius, and several microscopes equipped with the cameras so he could photograph a snowflake before it melted. He said, I took samples from two faucets in the laboratory, I froze them and each sample gave me a different snowflake. The samples came from two different wells, two different rivers, from two different lakes. To me, this is not surprising at all because if we look into nature, there is absolutely nothing that is exactly the same. Even if you look at the exactly same beach, just a few hours later, you're looking at a completely different structure of waves. No wave is just like the other. Everything in nature is differing from each other. A Muslim later introduced Dr. Imoto to Zamzam water so he could experiment on it. Imoto took a sample of Zamzam water and said, I couldn't- All right, I have to look this up for my sake. I do not know what Zamzam water is. So right now we're on the Wikipedia page, Zamzam well. The Zamzam well, Arabic Biru Zamzam, is a well located within the Masjid al-Kharam in Mecca, Saudi Arabia. It is located 20 meters east of the Kaaba, the holiest place in Islam. According to Islamic narratives, the well is miraculously generated source of water which opened up thousands of years ago when the son of Ibrahim Ishmael was left with his mother Hajar in the desert. It is claimed to have dried up during the settlement of the Jurgum in the area and to have been rediscovered in the sixth century by Abdul Mutalib, grandfather of Muhammad. Millions of pilgrims visit the well each year while performing the Hajj or Umrah pilgrimages in order to drink its water. Extremely fascinating to me. I never knew that there is a concept of holy water within Islam. As I said in the beginning of the video, coming from a Christian perspective, we have many, many wells with so-called miraculous water. This is absolutely new to me, so I definitely learned something today. Muslim later introduced Dr. Imoto to Zamzam water so he could experiment on it. Imoto took a sample of Zamzam water and said, I couldn't crystallize it even by diluting the Zamzam water with distilled water. He finally managed to crystallize the Zamzam water after diluting it by 1000. One drop of Zamzam mixed with 1000 drops of distilled water and he got a uniquely shaped crystal. Two crystals were formed, one on top of the other. Mr. Imoto's colleague said that the two crystals could be due to the fact that Zamzam water is composed of two words, Zam and Zam. Allah knows best. Masahra Imoto said, my Muslim colleague offered to play Quranic verses over the water. He bought a tape recorder and played some Quranic verses and we got the most perfectly shaped crystals. SubhanAllah. These are actual images of the crystals that were formed after the verses of the Quran were played. Dr. Imoto was also told that Muslims recite Bismillah, which means, in the name of God, before drinking water. This has been practiced by Muslims since the time of Prophet Muhammad, peace be upon him. Right, right, right, right. Dr. Imoto was found to improve the quality and the structure of even regular water. Alhamdulillah. Dr. Imoto- That's absolutely insane man, really mind-blowing stuff. I know about this Japanese doctor and back in the day when I was into the New Age spirituality, meditation and whatnot, I already heard about this man experimenting with words above water, saying, I love you to the water.  And all of those words would change the structure of the water, which yet again proves the theory that words are a magic spell in a sense. You're creating reality with your words. Very, very powerful stuff. But I never heard that he actually cooperated with Muslims and tested Zamzam water. This is really mind-blowing. He played to these experiments, which lasted 15 years. He published a five-volume book called Messages from Water. He wrote, I have proven that water is capable of thinking, fatiming, feeling, and expressing itself. The following was written by Dr. Masuri Imoto. The quality and purity of Zamzam water will not be found anywhere else on this earth. He did a lot of research on Zamzam water and found that if one drop of Zamzam water is mixed in 1000 drops of regular water, regular water will increase in quality similar to Zamzam water. The minerals in one drop of Zamzam water were far superior to any other water he had tested. He also found that the quality of Zamzam water could not be changed. Even after he recycled the Zamzam water, there was no change. It was still pure. For those who are unsure of what Zamzam is, we will explain briefly. The Zamzam water was revealed to Hajar, the second wife of Prophet Ibrahim, peace be upon him. By the instruction of God, Ibrahim, left his wife and son at a spot in the desert and walked away. She was desperately seeking water for her infant son, but she could not find any way, as Mecca is located in a hot dry valley with few sources of water. Hajar ran seven times back and forth in the scorching heat between the two hills of Safa and Marwah, looking for water getting thirstier by the second. Allah sent the angel Jibril, peace be upon him, who struck the ground with his wing and the Zamzam water rose from the ground. A similar story about the wells also mentioned in the Bible. Ibrahim, peace be upon him, rebuilt the house of God, the Ka'bah near the site of Zamzam well, a building which had been originally constructed by Prophet Adam, peace be upon him. Today, Muslims from around the globe all face the Ka'bah in prayer five times a day. The Zamzam well is located approximately 20 meters or 66 feet east of the Ka'bah. Alright guys, and this is it for today's short video. I do not know exactly why, but this video made me feel something. I cannot really define it, it's very strange. I wouldn't call it emotional necessarily, but I am really astonished. I'm wondering, I'm really wondering how it came to be that the Ka'bah, if we believe previous videos, is the center of this world and moreover has a miraculous well. This claim alone triggers my curious mind, of course, and makes me want to go to Mecca to drink from that well. Now I need to find out. I'm very curious when it comes down to things like that, to claims as such, but what was extremely fascinating to me personally is that the Bismillah had an effect on the water and this is really not strange at all to me, because I previously already learned about the work of this professor and I know that water truly changes its shape no matter what you say to it. And therefore saying Bismillah, which means in the name of God, of course, you would have the greatest transformation within the water if there is any truth to that theory. Absolutely mind-blowing stuff I have to say. I learned something today, as I said previously, about holy water within Islam. I didn't know at all that there was a well within Mecca. Alright guys, but this is it for today's video. Please let me know in the comment section what you think about this. Christians and Muslims alike, let me know what you think about the healing power of certain waters. I would really like to discuss this further with you and the atheists as well, of course, they will probably claim that if there is such a thing as healing water, why don't we serve it in hospitals? Anyways guys, this is it for today. If you liked the video, leave it a thumbs up. If you haven't subscribed already, guys, please do so. And if you want to further support this channel, all the links are in the description box below. Thank you so much for your ongoing support. As always, may God bless you all. Much love and peace.