So, we're going to get this next talk started. Let's get a big round of applause for them. We've got at least one new speaker. Two? Yeah? All right. Hey everybody, three for the price of one. My name is Gina Matthews and I'm a computer science professor at Clarkson University in way, way upstate New York. Knows Bleed New York because we like to affectionately call it right across from Canada. Ronnie Bull is both a PhD student with me at Clarkson and also a faculty member at Utica College. Caitlin Trumbull is a senior undergraduate who's been helping us run all these attacks that we're going to tell you about. In particular, we're going to talk about VLAN hopping and art poisoning and man in the middle attacks in virtualized environments. And this is a bit of a follow on from the presentation we did last year at DEFCON. So, here's a little roadmap what we're going to do. We're going to talk about the context of the problem for Layer 2 network security in virtualized environments. The problem in multi-tenant environments, especially in cloud services. We're going to talk about the test platforms that we used and all of the different virtual, the hypervisors and the virtual network devices that we tested. And we're going to talk about the specifics of the attacks. We've got some great videos and demos to show you. Specifically of the VLAN hopping and art poisoning this time. We also have videos and many, many details of the map funding and DHCP attacks that we talked about last year. If you want to look those up, and finally some conclusions. So, the key question is when you have virtual machines that are hosted in a multi-tenant environment, how safe are they? What can they do to each other over the network? They're essentially connected to a virtual version of a physical networking device. And the question we're trying to answer is the Layer 2 network attacks that typically work on physical devices. Do those work on their virtual counterparts as well? And if so, what are the implications, especially in a multi-tenant environment? Cloud services that rely on these virtualized environments could be vulnerable and that can include data centers hosting mission critical or sensitive data. This is not the only class of attacks from co-located virtual machines. It's kind of an old story. You're vulnerable to those that are close to you, but in a public kind of multi-tenant environment, you're not quite sure who you land next to. We've done some other work in the past of the types of things that virtual machines can do to each other as have many other people, but in particular today, we're talking about the attacks over the network. So, here's a pretty simple diagram of the setup we're worried about. We have a physical host here, and on it we are hosting a bunch of virtual machines. One of them, that's a nasty, malicious one, that can do things to the other victims, and you can see they're sharing a virtual switch or bridge, and that's passed through to a physical network interface. And to kind of jump ahead, the bottom line is that we do see in our research that virtualized network devices have the same ability to be exploited as physical devices. Sometimes we see more vulnerabilities in physical devices. Sometimes, in certain cases, we see less than a physical device, and we're going to show you that for the attacks we're talking about today. Another interesting thing we've seen is that some of these attacks have the ability to weave the virtualized environment and affect the physical networks that they're connected to as well. So, that's another interesting bonus for you. What are some of the consequences if a malicious VM successfully launches a layer-to-network attack in a multi-tenant environment like this? What are some of the things that they could do? They could capture all the network traffic coming from the victims that are co-located with them. They could redirect traffic. They could perform man-in-the-middle attacks, denial-of-service attacks. They could gain unauthorized access to restricted subnets, and they could affect performance, which is, I guess, a sub-example of denial-of-service. So, here are some of the test scenarios and results that we're going to be talking about. We're going to give you a little update on MAC flooding, especially because we've changed over our testing platform completely since we spoke here last year. We're going to talk about VLAN hopping in quite a bit of detail. Also, art poisoning and some man-in-the-middle attacks. Here is a lovely picture of the test environment that we were using last year. It was pretty much built from pieces and parts that we could salvage. Rest in peace. You've served us well. Thank you very much. Here are four complete details, some of the hardware specs and the hypervisors and the virtual networking devices that we were testing when we spoke to you last year. All of those details are on the DEF CON 23 CD. We have nice new shiny hardware. Thank you to college for that. And it allowed us to basically repeat all of the experiments we did before in just a much more controlled environment than our pieces and parts, and also extend the work. So here is some of the gory details of the test environment that we used this year. You can see a lot of different hypervisors, a lot of different virtual networking devices, and you can see some details here of the hardware specs. Again, all of the gory details are available for your reading enjoyment in the DEF CON docs. Okay, so to kick things off and also just to provide a good transition between what we did last year and this year, I'm going to give you a little update on the MAC flooding stuff. First, you know, here's a simple diagram of the scenario in which we're doing MAC flooding attacks. Again, we have two VMs attached to a virtual switch. We have a victim, the target VM, and we have an attacker that's patched through to a physical interface that connects to a physical switch and the internet beyond. And the target VM is just doing a set of regular pings, and then we're going to see what happens to the performance of those pings when the attacker launches a MAC flooding attack. And here in this graph, which is something we showed you last year, you can see from like zero to 65 or 70 or so what was happening when it wasn't under attack. So low latency pings, no trouble. You can clearly see when the attack gets launched, and you can see just after 240 when the attack stops. You can see clear impact on the network performance for the victim VM. And this was done on Gen2 in a Zen-bridged interface. And this gives you just a sense of, you know, we're just doing a lot more systems and platforms this year. So this is the same test performed across not just that Gen2, Zen-bridged, but also to the Zen OpenV switch, Citrix Zen server, Hyper-V standard switch, Hyper-V Nexus 1000V, the Proxmox-bridged, VMware ESXi, and a control physical switch, a Cisco 2950. And so some of those, when the attack starts, don't, aren't affected. It's a little difficult to read from this graph. Maybe it's a little easier to read here. It's still not incredibly easy. We realized at the last minute there might have been a better way to do this one. But from this, if you look carefully, you can see that the Hyper-V standard, the Hyper-V Nexus, VMware ESXi, were not vulnerable. And I'd like to make the point before we head into some of the rest of the things that all of these Layer 2 vulnerabilities that we're discussing were targeted toward the virtual networking devices, not so much the hypervisors themselves. What we're testing is what happens with the virtual networking devices. So it's interesting you see a mix, right? Not everything's vulnerable, not everything is safe. And we're going to see that trend continue across all of our tests. It wasn't uniform, which things were vulnerable and which things weren't. At this point, I'm going to pass it over to Ron. He's going to tell you about the VLAN hopping. Okay, so we've performed a few VLAN hopping experiments on the environments as well to see what we could do about getting frames onto unauthorized networks. We found some interesting results. So some basics about VLAN hopping attacks, just allowing unauthorized access to another virtual LAN on a packet switch network. Two methods of doing this currently, switch spoofing and double tagging, where switch spoofing is Cisco proprietary using Cisco protocols, and double tagging is an exploitation of the 802.1Q protocol. So basic virtual LAN information, we have a basic frame, Ethernet frame here, and what we do to get VLAN going is we stick a four byte tag in there, or VLAN header, with 32 bits of extra information to support the VLAN ID to show where that frame is supposed to go on the correct networks. So switch spoofing. Here's a CDE listed about Cisco switches that if they support 802.1X security allow attackers to bypass port security and gain access to the VLAN via spoofed Cisco discovery protocol messages. So a little bit about the Cisco discovery protocol. Basically it's a proprietary protocol that Cisco has on their switches that allows two or more switches to identify each other's operating systems, automatically negotiate connections, things like that. So if we can have a vulnerability in that protocol and actually exploit it, we can get on a different VLAN. A couple more CDEs and vulnerabilities for switch spoofing. Cisco Catalyst 2900 Virtual LAN switches allow remote attackers to inject 802.1Q frames into another VLAN just by forging the ID tag. And a quote directly from Cisco from one of their white papers about dynamic trunking protocol. Basically if it's enabled, you can send a fake DTP packet out and switch that port from auto into a trunking mode. That's pretty effective across some of the environments. It's important to note that on most Cisco switches out there, at least some of the earlier ones that are still in production today, DTP auto is the default setting. So you want to make sure you harden that. Okay, so again, this is just another Cisco proprietary layer 2 protocol allowing you to do that automatic configuration of trunking connections between two switches. Pair this with CDP and you pretty much have an automatically configured network. So some of the consequences of this. Basically the attacker can have a full trunk connection to the switch. They can make themselves into a trunk, spoof themselves as a switch, which allows them to have two-way communication on that VLAN. They place themselves directly on that VLAN allowing the eavesdrop on the traffic, send messages to and from systems on that VLAN. Okay, so here is a switch spoofing demo. Basically we did this in the ESXi environment. The setup is we have a virtual machine within the ESXi environment and it's going out through the virtual switcher bridge. ESXi is more like a bridge than a virtual switch, the standard switch on it. We have that connected to a physical Cisco 2950 switch and the port is set to DTP auto just default configuration. And then you see there's another system on the other end that's connected via trunk link with a VLAN 20 and one support over that trunk link going into another hypervisor environment there. So let's take a look at this demo here. And all these videos are on YouTube. The links are on the white paper on the Defcon CD so if you want to watch them later. Okay, so on the left-hand side we can see the configuration for the Cisco 2950 switch. On the right-hand side we see the ESXi network settings for the Kali virtual machine that's on that system. We're going to first take a look at the interface settings for the ESXi server, in this case it's called Luminara. I can see it's connected and it's just set to VLAN 1. It's just on the default VLAN of that switch. Nothing was changed besides the defaults. It's not set to a trunk port or anything. We're just going to verify the trunk status on that. And we can see that it's using 802.1Q encapsulation. It's not trunking and the mode is set to auto. So it's just default configuration. Nothing was changed. To go over onto the virtual machine we're going to take a look at the network interface here. We can see there's just the basic network adapter. It's on an isolated VLAN test environment we created. It's a separate network for that. Which is over there on the switch on that port. So if we dig a little deeper into these details we can take a look at that network and we can see down there on the bottom we set up that VLAN test network and the Cali virtual machine is the only system on that network. And if we look at the properties of that we can see that this connection has no VLAN ID set to it. So it's just on the default VLAN for the ESXi virtual switch. Now we're going to go over to the virtual machine itself grab console access and we're going to start the attack. In this case we're going to just use the Yersinia program so we're just going to type Yersinia minus i to get into interactive mode. Got to bear with me a little bit. Okay and then we're going to select the default network interface on this. So just hit enter. And then we'll have to launch the attack. So we're just going to go up and select the DTP or Dynamic Trunking Protocol and then launch the attack press 1 and we can see it successfully went into trunk mode. So the dynamic desirable effect was affected. Over there on the switch side we can see the line protocol went down it came back up again and if we check the status on that trunk port we'll see it indeed went into trunking mode. You see it's now instead of VLAN 1 it shows the trunk. If we take a look at the full status we can see that it's DIP set for trunking and auto and A2.1 Q encapsulation. So the system was effectively put on as a trunk now we can access any VLAN we want that's associated with that trunk. So in this case any system that was on VLAN 20 or whatever. So that was the switch booping attack. In the ES Actify environment and see. Okay so results across the board here we can see that the physical Kali 2.0 control system we set up the physical switch we tested it with a control to make sure it worked first that way before we proceeded into the virtualized environments. You can see it pretty much worked under every system that used bridge networking instead of a virtual switching networking. So if you're using an environment that has a bridge virtual switch this is going to work. The open source Zen with Linux bridging it worked in the ESXi environment as you saw and it also worked in Proxmox which also supports bridging as well. So any environment that used the virtual switch it did not work because basically those that DTP packet when it was sent through it was blocked for getting to the physical device. Okay so mitigation in the physical world you just disable unused switch ports don't give access to people to actually get connected to those ports. Disable CDP and DTP for those ports that you really need it set up on. Restrict the amount of trunk ports you don't just want to have ports set up to be trunks if you don't need them. Although all the hypervisor environments if you read their documentation they specifically say that for best practices set up a trunk port for connection to the virtual switch so that way you can actually support VLANs into your physical environment and other virtual environments. So really just limit these to access but in the virtual world it's really hard to do this so if you're using bridged environments that this could be affecting your network. Okay let's talk about double tagging now here's the CVE for double tagging the 802.1q VLAN protocol allows remote attackers to bypass network segmentation and spoof VLAN traffic via message with two 802.1q tags so we saw before that we have a normal basically this is the normal traffic this is the scenario we used here where we have two switches a trunk connection between them supporting VLAN 1, 2 and 3 you can see some two machines on one side connected to that first switch one's on VLAN 1, one's on VLAN 2 and on that second switch we have VLAN 1, 2 and 3 so the goal is to get some frames across between the two switches from that system on VLAN 1 and try to get it over to VLAN 2 or 3 instead of VLAN 1. So here we can see the normal flow of traffic we're just using a single tag where it goes through VLAN 1, goes into that first switch goes across the trunk connection still with that VLAN 1 tag and then it goes into that system that's VLAN 1 on the other side basic normal flow of traffic and we can see that the other VLAN 2 and VLAN 3 machines do not get that frame it just gets blocked so here's a comparison of frame types the first one is a standard Ethernet frame without VLAN support the second one is that standard VLAN tag with one 802.1q tag in the middle or header in the middle and the third one down on the bottom is doing 802.1q double tagging so this is where we're actually doing a frame within the frame with multiple ones so in this case here we can see the effect of double tagging we have VLAN 1 and VLAN 2 on the one side that tag has a 1 and 2 in it so we have two headers in that frame it goes into that first switch it doesn't get passed on to that first system connected to that first switch because we're still reading that VLAN 1 tag we're not seeing the VLAN 2 tag as soon as we go across that trunk connection that VLAN 1 tag is stripped off passing over the frame with the tag on the side it goes directly to that system on VLAN 2 and doesn't go to the VLAN 1 or VLAN 3 here we can see the same thing with 3 just a different example in case of the consequences an attacker can send packets to any targeted VLAN as long as it's supported over that trunk connection and as long as they have access to that native VLAN the target on the axis is isolated it's in a native VLAN broadcast domain this is not a good attack for eavesdropping because basically it's a one-way attack on another VLAN you're not getting anything back to you so it's good for DOS attacks it's good for maybe a one-way covert channel to another system on another network but that's about it so we have three different scenarios we ran with this the first one was a control scenario we had the two physical switches which this was known to work in we had a physical attacking system connected on a native VLAN and went through that first trunk link to the second switch and we were able to access this video right now, it does work here you guys are more than welcome to go click the link but we have two more videos I'd like to show they're a little more effective than this one so the second scenario we did was two virtual switches so we took out that second 2950 and instead we're going from one virtualized environment through the physical switch into another virtualized environment so in this case we have an attacker VM, it's on no VLAN just on that native VLAN on that virtual environment going through that virtual switch connected through a trunk link via best practices on one and 20 into the Cisco 2950 through another trunk link connected to another virtualized environment which is going into a virtual switch there on an access VM on VLAN 20 so in this case, in this demo we have the attacker systems on Zen server and the target systems on Proxmox okay so again on the left hand side we can see the switch configuration for the 2950 that's in the middle of these two two systems port 31 is the network Zen server port 29 is the Proxmox system yes I do like Star Wars the middle system is Zen server and the far right system is the Kali system on Proxmox so the Proxmox system is our target the middle system is our Zen server attacker what we're going to do is take a look at those interfaces just to check out the settings so port 31 is our attacking system except for trunking, notice the mode is on I didn't do auto because I actually specifically set this to trunking mode for best practices and we can see the 802.1Q encapsulation so what we'll do here now is check out the settings for the attacking system and we can just see I have it just set up on a basic network interface port, there's nothing special about it there's no VLAN tags on that system or not it's just a straight connection into that server on that VM and that switch, the Proxmox system you can see it's tagged for VLAN 20 for that client on that system so we're going to run the attack from the Citrix Zen server VM Kali there to the Proxmox system which is also Kali on the Proxmox system we're just going to run a simple TCP dump command and we're going to grep out for ICMP traffic to try to just pull out that ping packet we're going to try to send through so just basic TCP dump with some verbosity and grepping for ICMP and then over on the Zen server system we're going to set up your Cinead to launch the double tagging attack and just selecting that default interface again so this time we're going to select 802.1 Q protocol and then we have to do some setup on the bottom there so down in the bottom you can see there's tags for input VLAN and then the target VLAN there's also the source IP address and destination IP address so we want to go from VLAN 1 to VLAN 20 and then we want to go from a source IP address it doesn't matter so we spoof the address of <IP_ADDRESS> and then the target system <IP_ADDRESS> so we have to just input that in there for the settings and we're set up there so we can see up on top we're using ARP <IP_ADDRESS> so we see the ARP protocol there and actually went through we're going to launch the attack sending out that ICMP protocol or ICMP frame and sometimes you have to keep launching this attack a little bit what I found is when I started doing this testing nothing happened and I sat there for a little while longer and just kept pressing the attack button and then finally what happened is I'll sit here in a second took a little bit of time so if you're doing this at home boom, we see all the traffic so there was a little bit of latency going from one virtual environment through the physical switch into another environment but we can see that the frame was actually successfully forwarded from VLAN 1 through a virtual switch through another virtual switch to VLAN 20 on the other side and we moved the address of <IP_ADDRESS> going to the Kali1 host name which obviously ETC host file on that Kali system is resolving the local IP address of the host name on that system so this was successful we were actually able to do the double-tagging attack through a physical switch into another virtual switch okay so we have one more here in this case we decided hey if we could do it with two virtual switches let's take it out let's go through one physical switch and the second virtual switch will successfully do that double-tag so we don't have three switches now we're down to two, one's a physical, one's a virtual in this case the physical Kali system is the attacker and we're going into a Microsoft Hyper-V guest on a Cisco Nexus 1000V has anybody ever tried to set up a Cisco Nexus 1000V? how fun is it? right? oh yeah okay so let's take a look at this one same pretty much setup we have on the left hand side and there's a port one which is connected to that physical Kali system which is in the middle we can see it's just on VLAN1 no trunking going on there so this has a trunk connection between the physical switch to the Cisco Nexus 1000V on the Hyper-V environment so we'll check out that interface as well and we can see it's set for a trunk as per best practices and 802.1Q encapsulation again we have VLAN1 2 and 10 supported on here in 20 now we'll go over and check the configuration for the Nexus 1000V which supports the same Cisco commands pretty much for identifying trunk connections so here you can see we have Ethernet 3.1 is the trunk connection connected to the Cisco 2950 and we have VETH1 which is that Kali system connected on VLAN10 in this case and that's connected to that Cisco Nexus 1000V so in the middle here we have our attacking system which is a physical system and then on the far right we have our Hyper-VVM and again we're just going to run TCP dump a little bit of verbosity and grep for ICMP traffic forward this a little bit so we can speed it up and then on the attacking system we're going to run Yersinia again we're pretty systematic in our approach this testing to make sure we did it across the board and it was the same everywhere we did it now our physical Kali system we have a multi home so we have four network interfaces on this so we can do different testing on different networks so in this case we choose Ethernet 2 because that's the one that's actually on that VLAN test network so we just went in there and changed the configuration of that interface and then we're going to go up and choose the 802.1Q protocol again and set up that attack down in the bottom we've already seen that so I'll forward through that a little bit here just verifying the IP so we're going to that IP of <IP_ADDRESS> in this case is the virtual machine in HyperV and we're going to start launching this attack now so here's the same thing just launching it we can see the spoofed IP address going to the destination IP of 100 802.1Q and the protocol's ICMP and if we just start launching that thing again took a little bit of time to get this thing to successfully go but in the end we see that it actually works so it went through the physical switch from a physical attacker through that physical 2950 into the Cisco Nexus 1000V onto VLAN 10 on the target virtual machine so it actually worked so we're seeing that we can actually do double tagging and switch spoofing attacks in virtualized environments which is pretty scary so overall results of this the first set of charts there on the left hand side show the open V switch Linux bridging pretty much everything worked for going in so this isn't coming from this is trying to get into an attack on the side of a virtualized network so it worked on every single environment except for the standard V switch for Hyper-V we find this is because when you're launching your senior you're actually spoofing MAC addresses on the attacker side and what we saw last year we were discussing our MAC flooding attacks those also didn't work in the standard V switch for Hyper-V because the standard V switch has some protection for MAC spoofing against it in the server 2008-2010 environments so what we expected against this attack was that MAC spoofing safety mechanism so if that wasn't there or if you could do this attack without spoofing MAC addresses you could probably get away with it in that environment over on the other chart we see what was successful, what could we launch the attack from which environments could we actually send something out from in this case we saw it worked in the bridging environments so anything that was a bridge except for ESXi in this case worked we also saw it work in the standard Zen environment with open V switch so pretty much all the open source software was affected by this attack mitigation techniques, standard ones for physical devices is limit your access to VLAN 1 or just eliminate VLAN 1 all together maybe label it something different so it's not easily identified restrict access to switches by MAC address which can be spoofed so that's a little bit difficult it's kind of a double edged sword there but the heart of this attack is having access to that native VLAN as we saw and even the native VLANs within the virtual switches which may not be identified so you really need to look at hardening these switches if you're going to be using these in production environments okay so we're going to pass on to Caitlin now for ARP spoofing ARP spoofing ARP is an address resolution protocol it's a layer 2 network protocol that maps the physical MAC address to the logical IP address each system on a network has an ARP cache and it stores the information from discovered nodes on that network ARP cache the common entries in ARP cache is the default gateway and the local DNS the process for ARP is an initiating system sends out a broadcast request to the entire network it asks who has a certain IP address a node on that network who has that IP address responds with its MAC address and the information is stored into the ARP cache okay so this is just a demo and on the left hand screen is the router or the default gateway in the center is the target machine and on the right is the attacking machine on each of them we have the ARP cache displayed and you can see the IP address of the attacker and the target over on the default gateway and you can see the MAC address displayed with it showing each separate entry and then over on the attacking machine we run our ARP poison script which is just a basic python script and that's going to run it's going to go through and poison the ARPs so we're going to go over on to the target and the default gateway and check our ARP cache and you can see as it comes up in displays with the two IP addresses that the MAC addresses are now the same so on the default gateway both the target and IP address are showing that the MAC address is the same so that was spoofed into tricking the MAC address then we're going to go and we're going to run a ping just out to Google just to get some packets flowing get some traffic and that's going to finish up the script and run through there once the script is finished it's going to restore the target machine so we're going to go over and stop the ping and restore the ARP cache and check that over and then you can see on the target and on the default gateway that the ARP cache is now displaying as it was in the beginning so the target was restored and then we also ran a TCP dump script so that's going to show the traffic that came through and then you're going to be able to see Google's IP address showing traffic to the IP addresses that we captured packets from Google and then for the results you can see it worked on all the platforms ARP spoofing mitigation on Cisco switches you can make use of the DHCP snooping and dynamic ARP inspection validation it's not supported on the Cisco Nexus 1000V and then there's also ARP watch which runs as a service on a Linux system and monitors the network and changes for ARP activity okay so to kind of wrap this up and put it into some context we can see that the results do show that virtual networking devices can pose the same sometimes even greater risks than their physical counterparts so that's an important thing for all the users of multi-tenant environments to understand which systems were vulnerable varied pretty widely across the tests there was no one best system tests everything was vulnerable to that lack of sophisticated layer 2 security controls similar to what is available on integrized grade physical switches greatly increases the difficulty in securing virtual switches against attacks like these so what is the bottom line impact then to someone running in a multi-tenant environment a single malicious virtual machine has the potential to sniff all the traffic passing over a virtual switch can pass through the virtual switch and potentially affect the physically connected devices as well allowing traffic from other parts of the network to be sniffed as well so that's a very significant threat to confidentiality, integrity and availability of data that's passing over a network in a virtualized multi-tenant environment there's a lot of very mission critical stuff being housed in virtualized multi-tenant environments these days as we know so what can users of these systems do well educated users can question their hosting providers which virtual switch implementations are being used which attacks are they vulnerable to are they doing any additional mitigation strategies against attacks like these they can also audit the risk of the workloads they're choosing to run in the cloud with this environment with this understanding in mind they could consider extra security measures on their own or request additional security measures from their hosting provider users of encryption, additional service monitoring more detection of traffic attack traffic that could be present alerting there's a lot of things that could be done what are some of the next steps for us last year was our first time at DEF CON this is our second time we're a pretty small team we made improvements this year we did more attacks than we did before on more regular hardware and we're really happy with that but there's a lot more we'd like to do at the institute for apples to apples testing of virtualized environments we have kind of a long history of this we've also done what kind of malicious things kind of virtual machine that's co-located do if it hammers the disk or it hammers the CPU or it allocates a ton of memory or all sorts of malicious things we've done apples to apples testing of different kinds of virtual machine migration technologies and what's going in the clear and what's not and how long it takes and we think there's a real place for that kind of apples to apples independent testing of those things if you're in a situation of wanting to deploy some of these technologies both proprietary and open source it's really hard for you to bring all of them in house and run through all of these kind of tests so we've seen a lot of great feedback about oh thank you for doing all of these tests and pointing out where the problems are we've also seen vendors fixing things we'd love to see industrial partners to participate in an institute of this kind whether it's places that have technologies they'd like tested and would like to see our results and have a chance to say okay yes this is the results in the default environment but if you turned on this thing then the results would be completely different we would love to partner with people like that we'd also love to partner with people who are using these technologies in production environments and would be interested in these results we have leads we would really just like to do more testing in production environments basically using best practices out of the box proprietary and open source technologies over time we've seen some of the work that we've done result in vulnerabilities that are then patched so we're really proud of that but we understand that in production environments many times there's additional secret sauce or additional monitoring or additional conditions that are put in place we actually got some great leads last year after our talk that we still need to follow up on but this is us this is a pretty small team and the biggest bottleneck we have is the need for more great students like Caitlyn to be funded to do this kind of testing so if anyone would like to help us sponsor a few students we promise it's good educational value so this is e-mails for Ronnie and I also all the details if some of the typing and the demos you didn't quite get slowed down zoom in on the videos they're all there all the great details and all of the publications presentations, demos are all at Ronnie's website also like to give a shout out to Nick Moranti who helped us get our AV going after some last minute troubles and I guess now we'll take some questions Hi so I see you did a bunch of testing on the hypervisors the virtual switches that come with the hypervisors did you try this with anything like open daylight or VMware NSX these kind of SDN solutions that sit on top of the hypervisors not yet but we'd love to I did start looking at some SDN stuff but we've seen that there's a lot of there's a lot of vulnerabilities in the controllers out there like where you can actually take control of the controllers so by implementing SDN we're looking at implementing more security flaws into these environments when we're trying to reduce that footprint I looked at with the DHCP stuff we did last year we presented on that I've found a python script just by using simple python and scappy you can write a simple script you just daemonize that will find you know rogue DHCP servers on the network and fix that so I think by using smaller scripted demons that we could actually deploy without putting more complexity in these networks would be a better solution than trying to throw the monster of SDN on top but many people are using SDN so it is a good place for us to start exploring but that's a whole other research track right on thank you great talk I can see you tested against Zen you tried against Amazon inside the Amazon environment I know we haven't tested it within Amazon I think that is not in their terms of service but we did have some leads within Amazon which we'd love to follow up on I'm not sure we haven't done that yet we'd love to so have you done any cam table overflow attacks against the virtual switches as well that was last year's talk so if you look on the deathcam media server it's all there demos and everything so along with you were talking about the 2950 physical switch so that's running I'm assuming like iOS 12.04 or something like that were you able to sort of do that attack on like a newer version of the iOS like a 15 dot something let's go back up to the thank you I don't want to go to details here I want to go to that picture I'm not exactly sure what the model of that switch is but if you look up here on the top of the rack I can get there again on the back there's two switches up top there those are brand new Cisco's I accidentally tested it against those and it did work so I don't recall which environments but yeah it did I was able to switch because it's not using the 802.1 Q encapsulation so if a switch doesn't support that your double tagging is not going to work there's other encapsulation types for trunking that are supported now on the newer devices awesome thank you hello I'm from Brazil first of all thanks for the great presentation was wonderful have you got the first part I'm from Brazil first of all thanks for the presentation I have worked with a lot of companies in Brazil a lot of environments from small to large and I have never seen anyone of them with ARP spoofing preventions implemented none of them and sometimes large environments with load balancers and to upload the applications they are encrypted from the client until the load balancer and from the load balancer to the back end usually take off the encryption and create confirmation going on and based on your experience have you seen in you talked about this have you seen what kind of solution have you seen if you have implemented in the environments that you have tested or worked with let's go to the ARP slide here if you guys look at the slides online we have images that didn't show up here because of this but there's some good stuff in there for the ARP so basically you're looking at ARP watch because the Cisco's have this dynamic ARP inspection and DHCP snooping that allow you to look for road DHCP servers and different ARP problems going on there but ARP watch is a Linux utility you could demonize run a server on your network and actually look for malicious ARP activity on that network it's about the only thing we really looked at but it does work pretty well but I'm not pretty sure if I was clear what of these kind of of mitigations have you seen implemented in actually implemented in the components and that's where we'd really like to do a lot more we really haven't done much work in production environments we are just looking at vanilla out of the box stuff according to best practices and then looking at what the mitigations could be we don't have a lot of visibility into how often people are doing these mitigations in production environments for us it's interesting to hear you say that you've seen lots of environments and nobody's doing that so we'd love your email and we'd love to follow up that would be really helpful for us I see we have a line of more questions and we got the kind of yank sign from the goons we'd be very happy to talk more with folks I'm not sure where the right place to go and meet people is I guess if you come up here you can go where we go and we can follow up thank you so much thanks everybody


In the first half of this module, we learned about the physical and chemical properties of rock crystal, the mineral quartz. Again, the chemical composition being SiO2 and the rock crystal, very clear, very colorless is a particularly pure form of SiO2 in crystalline form. The addition of slight amounts of impurities such as metals can lend different colors to the crystal, like the amethyst that you see here. And we're gonna move on now in the second half of the lesson of this module into learning about how these materials were used in art history, which is Heather's expertise. So in the art history lesson, one of the first things we're gonna be talking about is acquiring and working with rock crystal. And even though rock crystal was relative, quartz is found everywhere and is relatively common, really beautifully clear and pure rock crystal without a whole lot of imperfections is rather rare. And not only was it rare, but it was somewhat difficult to work. It tends to be both hard and brittle. And so it has to be worked very, very carefully if you strike it percussively, you run the risk of some disaster and the destruction of your piece. And although we know that this could be worked percussively, it had to be done with a great deal of skill. And we're going to see a series of videos in which an experimental archeologist, Elise Moreiro describes the actual process for creating particular types of vessels out of rock crystal. And as we'll see as we look at tools and images from history and read descriptions, these technologies are ones that existed at least from the ancient Egyptians up close to the present day. And in some areas of India where they're still doing gem engravings and carvings without electric tools, you can still see evidence of that same technology today. Then we'll shift to a discussion of symbolic properties of rock crystal and the ways in which this association with purity, with water and with ice were picked up and given different religious symbolism in different periods. And of course, then we'll look at a series of case studies.


There are so many ways you can style a khaki cotton suit and in this video I'm showing you five ways to do it by using it as separates and being a little adventurous Hello, my name is Brian Sakawa and I specialize in putting together outfits guaranteed to break the internet in 2012 I don't know what it was But that particular moment in time really sort of highlighted this kind of sporty and more casual kind of tailoring You know one thing I always say is that if you buy the right suits you not only have a great suit But you have great separates as well Definitely the case with a khaki cotton suit and right here We're seeing just how easy it is to use the jacket in a non-suit context Super classic styling here with an ice blue Oxford cloth shirt Navy cotton pants in the same exact fabric as the suit and belt all HSS Michael Andrews with a look as simple and classic as this Everything else needs to fall in line. So we've got just a crisp white pocket square brown line frame sunglasses simple but elegant watch and A little funkier with the braided leather tassel loafers by Alan Evans This look was inspired by one of my favorite style people to follow on Instagram Shuhei Nishiguchi Everything he does is just so perfectly put together He wears different silhouettes than I do or I should say that I'd be comfortable wearing But I always just love his approach of keeping it classic with a modern sensibility and Also a bit sporty One of the many great things about a khaki cotton suit is that it's pretty much a blank slate So it's very easy to make your shirt or your shirt and tie combination the focal point That's exactly the approach I took here with a long sleeve nautical striped t-shirt It's from the Nordstrom 1901 collection Summer's a great time for a nautical stripe and it's also a great casual match for the suit my sunglasses again are by John verbados on the wrist the datagraph and Then dressing down the suit even more with my white common project sneakers Taking the classic outfit we saw in the first look and just basically kind of flip-flopping the colors around navy jacket khaki pants Classic combo easy to do always looks good One thing to point out here though is that instead of having both a cotton jacket and pants I'm mixing fabrics here the navy jacket. I'm wearing HSS Michael Andrews is from a suit and is in a hopsack fabric Which still pairs well with the cotton of the trousers It's also got a nice texture to it and the patch pockets Of course make it more casual and more easily worn as a separate something to think about when you are considering styling details for a made-to-measure suit simple white poplin shirt crisp white pocket square Oliver people sunglasses Vacheron Constantin traditionelle and Then finished off with a suede duo belt is by Luca Falloni and the loafers are by Bowden in life Be honest now. Were you wondering when this one was going to come out? This is one of my favorite summer looks and one of my favorite summer shirts It's by Reese big bold print and Unfortunately, it's like five or six years old So there is no chance that it's available anymore Super sorry about that But if you'd like to see something like this when we finally launch our collection Do let me know down in the comments. We'll do our best to try and source a similar fabric I love this shirt because it's loud, but not color-wise. I feel comfortable wearing a print like this with neutral colors A Panama hat pairs perfectly with this look mine is by Homero Ortega HSS Michael Andrews belt on my wrist a new addition to the collection a pre-bond Omega C Master and Then anchored by the Allen Edmonds Grand Cayman horse bit loafers Finally, you'll love it or you'll hate it a very casual and kind of unexpected pairing for me at least So I'm not sure what exactly possessed me to combine these pieces, but I think it looks pretty good Got some tailored elements, but it's casual and a little elevated at the same time If you don't agree, just let me know in the comments Now one thing that I think might be a little divisive is the shirt sleeve roll over the jacket This can actually be kind of a cool style hack if your shirt sleeves are too long Not the case here for me though. I did it just because I thought it looked cool Kaki jacket and pink shirt pair really well with these light wash jeans. They're by Jay Crue 484 fit My hat is by Ville Bracan simple understated stylish Oliver people sunglasses On my wrist is the Tag Heuer blue dreamer limited edition. I think this might be the first time I featured it in an outfit video and Then elevating the look is my HSS Michael Andrews belt which pairs it beautifully With the Alan Edmonds horse bit loafers Make sure if you haven't checked it out already that you go and watch the first video that I did in the series It's linked right up there That shows you five different ways to wear a khaki suit together as a suit and not just as separates and that is really the Beauty of a suit like this is that you have so much versatility For more videos like that and like this make sure you're subscribed to the channel and that you've hit the bell for Notifications each time we publish a new video Go ahead and leave a comment down below with your favorite look and actually why don't you rank them from your favorite to your least favorite? Links to everything I wore as always down in the description until next time. Thanks for watching and stay tailored


Everybody's been sleeping on this shoe. It's been sitting in Foot Locker and I don't know why. These are some bangers, at least to me. I'm excited to give you guys the review on the Burgundy Air Jordan 5s. Oh yeah, and if you didn't know by now, my name is DJ and this is the DNA show. So let's go ahead and take it to the studio so we can get into this review. All right, so as you guys can see right here, there is definitely a huge switch up on the box.  This is what the Burgundy 5 used to come in and then this is what the box looks like now in current time. So you got that all over cement print throughout the box, splattered all throughout with the light gray and the dark gray. Then in the center of it right here, you have a Burgundy Jumpman, a white circle Air Jordan branding and you have Flight Club right just below that, a red circle in the middle of there and then reading on the size tag, it says Air Jordan 5 Retro SE Deep Burgundy Light Graphite size 13, just for me. Now lifting open the lid of the box right here, you have the same thing all over with the cement print paper and then you got the shoe. Oh, you got the shoe. Okay, so initial first impressions when I saw this shoe, honestly, I was kind of disappointed, but one thing that I can say is I get it. There's a new cut in a new era, so I understand that. I just wish that Burgundy would have been more vibrant, not as like faded and kind of ashy looking. Either way, I still like the shoe. I'm just, you know, it just don't hit the same as it used to. Now you know on this channel, I love breaking down all the styles, cuts and materials and giving you guys in-depth comparisons, but we gotta talk about the history first. Back in 2006, we originally saw the LS Burgundy Air Jordan 5. During this time, we saw the Laser 5s, we saw the Olive 5s, we saw the Do the Right Thing 3s, you name it. There was a lot of different lifestyle sneakers. That's what LS means. And this was kind of an introduction to a new type of wave when it comes to retros with different colorways that we didn't see on the basketball court, but kind of more meant for lifestyle, you know, out in the streets. So this shoe in particular, these came out when I was in high school back in 2006. And I'll never forget these times. And as you can see, I've put my time in on this pair and I've definitely been waiting for some years for this shoe to retro. And don't worry, we'll get into all the comparisons like you guys love, but for right now, let's go ahead and start breaking down all the details. So looking at the outsole right here, you got your classic Air Jordan 5 bottom, but we know this is a retro and it's not an OG colorway with the Nike Air. So what does that mean? You have a Jordan branding right here in the middle of the foot in the back, compared to the Nike branding. And then on the ball of the foot right here, you have a jump man in the center of that. And then you got your translucent areas here with the icy blue outsole. Now rolling up to the midsole right here, you have a Burgundy on the midsole. And then you have a gray section here with the Burgundy speckled throughout the shark teeth on the side of the foot. And then a white air unit in the back end around the heel. Going to the toe of the foot, you have a Burgundy rubber wrapping around that front end plus a Burgundy stitch. And then all throughout the upper, you got a Burgundy suede on this shoe. Now one thing I can say is the suede does feel pretty solid. It's not the best, it's not the worst. I'm not mad at it. But like I said earlier at the end of the day, when you put these two shoes side by side, compared to the old one and the new one, it just doesn't hit the same. And it doesn't feel as premium as it did in the past. I don't know, maybe it's because I'm biased, but again, that's just my two cents when it comes to the overall materials and the color of the materials. Now looking at the rest of the shoe, you have a Burgundy mesh with a translucent niche right here on the side of the foot, on the top of the tongue, and on the inside of the foot as well. These come standard with a pair of all gray laces, no additional laces. And honestly, I'm not mad at it because I know that's how it used to be in the past. And then you have your iconic touch with the plastic bib right here in the gray lock just in the center of that. Now going to the tongue of the shoe, another iconic piece to all 3M silver all throughout the tongue. Another piece that really makes a statement when it comes to the Jordan Fives. Even though the fire red Fives with the black tongue are crazy and that's still one of my favorite Fives of all time, but the 3M, it's a nice touch, especially for a sneaker like this with the gray elements around the sock liner and around the shoelaces. Now looking behind the tongue, you have a gray mesh right here and then you have a white patch with the Burgundy Air Jordan branding on that. And then the insole all gray with the Burgundy Jump Man inside of there. Now going to the back end and around the heel of the shoe, you have a gray Jump Man stitch right there. And then another thing, some people may or may not notice, if you look at the stitching all throughout the upper on every element that's kind of just piecing the whole shoe together, this is actually a gray stitch compared to the Burgundy stitch. And it helps to make the shoe pop a little bit more. But if you look at the 2006 retro, that gray stitch was actually a little bit brighter and it brought out a little bit more character in the shoe. And I think that could also be another factor why this shoe doesn't look like it stands out as much. It kind of just looks a little bit more bland. It doesn't pop. Because on this version, you have a darker Burgundy with a lighter stitch. And then on here, they're kind of a little bit more similar and it almost makes the gray stitch look like it's a little bit more Burgundy than anything. Now, besides the shades and tones of this sneaker, sometimes when we see retros, we see a lot of different switch ups, whether it's the plastic pieces right here around the eye holes around the shoe or something might have just kind of gotten switched up if they did something on this sock liner, you name it. But honestly, if you look at these shoes side by side, they actually did a identical match when it comes to this. Typically, we don't see that that often. And honestly, that's one of the elements that I'm actually really happy about when it comes to Jordan Brand. Now again, I'm not 100% happy because I still like the 2006 pair a little bit more. But one thing that I can say is, thank you Jordan Brand for not switching it up too much. Now, besides from the fact that I've been collecting shoes for a long time and I'm a bougie sneaker head that's got too many gripes on all the little details, at the end of the day, I still like this shoe. And that's why I cop these for my collection. And I look forward to wearing them because I can't wear my old pair anymore. They're bound to fall apart at any moment. And that's okay because that's why we get retros. But my question is, how do you guys feel about this shoe? Now, you know, I always post a poll on my Instagram to see the results. And then I post them here on the channel to let you guys know what everybody else thinks. So if you haven't already, follow me on IG so you can participate that and see the results here. I asked a simple question. Is this shoe fire or is this shoe trash? 73% of the people said fire and 27% of the people said trash. And honestly, that's a percentage right there that makes me think, why didn't this shoe sell out? Like that's a really good percentage. But I was walking in the mall today and I'm like, they're still sitting on shelves. I get it though. It's not a color that goes with everything. It doesn't hit for everybody. And yes, it's great timing because the fall is coming around. But again, not everybody likes that. The Jordan 5 isn't the hyped model right now. There's a lot of different reasons why I could understand that 27% of the audience. But at the end of the day, buy what you like. That's the most important. I like the shoe, so I had to pick them up. Now let me know what you guys think about these. Did you pick these up? Are you waiting to pick these up? Do you not like these at all? Are you gonna get them on sale? Do you think they're gonna go up in value or buying them or holding them? What is the scenario for you? Let me know down below in the comment section because I'm very interested in that topic, especially for a sneaker like this. A lot of people say the shoe market is down and there's a lot of different things going on with why people want these shoes over those ones. And for me, a sneaker head that loves sneakers and has nostalgic memories from wearing them in high school or middle school or whatever it was, this shoe for the most part checks a lot of those boxes. So I'm sure a lot of my older sneaker heads in the comment section, you guys are probably just ecstatic about this. Super happy. Besides the fact that the retail has gone up. It's a great day for a sneaker head to be able to get a shoe like this. So let me know what you guys think. I'm excited to hear you guys' responses. We got a lot more reviews coming soon. Stay tuned. I appreciate you guys as always. Don't forget to hit that subscribe button. We out. I will never let you down. So before you go, I just launched my sneaker head academy where we got everything on the inside. I teach you all the stuff that I learned over the past 15 years. When it comes to sneakers, scaling, real estate, you name it, we talk about all of it in there.  I give away shoes literally way too much honestly. But either way, I'll see you guys on the inside. Hit the link down below in my description or pinned in the comment section for DJ sneaker head academy. And I'll see you guys over there. Send my DNA. The only choice I like to make what I'm aware today. I would never let you down and send my DNA. The only choice I like to make what I'm aware today. I was made for it. It's in the DNA.


Well, it's that time of the year again, the start of summer, Ray Gildow of the Nisawa Guides League and Mandy Eurick, the bassing biologist, join us once again for fishing tips. Hello everybody, I'm Ray Gildow with the Nisawa Guides League along with my co-host Mandy Eurick, who is a biologist and we're happy to be joining you again for the 2017 fishing season and Lakeland News where every Thursday evening rather, we will be doing fishing tips. And before we get into tips about how to catch fish, we wanna spend just one of our segments on having the proper equipment in your boat so you can have a safe experience during your fishing season. And it goes without saying that the most important thing probably in your boat is to have a life jacket. And remember that any time you're moving in a boat and you have children, 10 or under, they need to be wearing the life jacket as the boat's moving. The law allows you to take them off when you're not moving and the law doesn't require everybody to be wearing the life jackets all the time, although if you have people who can't swim, it certainly is a good idea. Another key feature to have in your boat at all times is a simple first aid kit just in case something does happen out there. If your boat's over 16 feet, they recommend that the law is that you have to have a throwaway device. So if someone falls in the lake, you can throw them this. We would recommend you have this in every boat, whether it's a 12 footer or a 13 footer, have something that you can throw in case somebody gets into a real quick emergency. Also, if your boat is over 16 feet, you have to have a paddle. Now, I know this doesn't look like much of a paddle. It does fold up and it does meet the requirement of the law so that if you're stranded, your motor doesn't run, at least if you have to, you can paddle somewhat. There's also a new law going into effect that went into effect May 1st on carbon monoxide. As Ray was saying, May 1st of this year, there's new carbon monoxide laws that went into effect for boats. So if you have an enclosed boat, you need to have all three of these stickers displayed on your boat. If you have an open motor boat, they are strongly encouraged, but they are not required. But here's the brochure, go to your local area fisheries or wildlife office and pick up the stickers. Fishing laws, make sure you're doing everything by the legal definition of what you can do on that lake.  And a fire extinguisher, or more than one. If you have a fire in a boat, you need to have a fire extinguisher. So those are some of the basics that you need to have before you get this 2017 fishing season started. I'm Ray Gilgall with the Niswa Guides League. And I'm Andy Yerick, the Basin Biologist. If you've enjoyed this segment of Lakeland News, please consider making a tax-deductible contribution to Lakeland Public Television.


For more videos on people's struggles, please subscribe to our YouTube channel. Hi, welcome to People's Dispatch in Globetrotter. Today we're very happy to have with us Thomas Isaac. Thomas Isaac is the finance minister of Kerala and has been the finance minister for two runs of the left democratic front government first in 2006-2011 and now in the recent term of the government. He's also a prolific author for Leftward Books having published a book called Building Alternatives and another challenges to Indian fiscal federalism. He has a book that was based on a project which he was very much part of the People's Planning Movement in the 1990s in Kerala which came out in a book with Richard Frank recently reissued from Leftward Books called People's Planning. Thomas Isaac, welcome to People's Dispatch in Globetrotter. Yeah, very happy to be with you. Well, I know you're very busy or in the middle of the election campaign for the legislative assembly, the new government in Kerala. Polls indicate that the left democratic front is set to break the anti-incumbency history in Kerala since 1980. What do you feel is going to happen Isaac? What's going on with this election? I feel pretty certain that Left is going to be back in power after the election. Now this will be the first time in Kerala history. There's been only one single occasion in 1977 when the ruling government succeed to come back in power. Otherwise, the power outrage between their left friend and their right friend, we outrage in power every five years. So it must become an axiom of Kerala politics that every fifth year there will be a change in government. And that I think has caused a continuity in government, caused Kerala lot of social advantage. For the first time, the Left is going to be in power continuously for 10 years. That is sufficiently long enough period to leave very substantial imprint upon Kerala's development process. We hope we will be able to design a paradigm of development which will prove to be an alternative, a left alternative within the professional limitations of Indian federalism, which will prove that another world is possible. You see, one of the things that people have been saying is that the government has been very efficient to deal with the floods 2018, 2019, the NEPA virus, the advent of COVID-19 and so on. Let's recognize underneath all that other developments you've put in place. You just said that we're going to have 10 years to chart out an alternative. You've done some incredible things on housing, even on basic infrastructure. I suppose that's what you mean when you say chart an alternative. Tell us a little bit about what that alternative would look like. Okay, it's a kind of hop step and jump. The hope, the first stage is redistributive politics. Kerala has been very noted for that. Our trillion movement has succeeded having significant redistribution of income. Kerala has the highest wage rates in the country. Our present movement has been able to redistribute the land and assets through a very successful land reform program. And powerful social movements, big predates even the left movement in Kerala, when whose tradition the left has carried forward, has pressurized access to governments which have been empowering Kerala to provide education, healthcare, basic needs of family work. And therefore Kerala has an ordinary person enjoys a quality of life which is much superior to risk. Now this is a situation, but the problem with this process, because we have to spend on social sector so much, there won't be sufficient money for resources for building infrastructure. So a program of social development spread over more than a half a century, there's serious infrastructure deficit in Kerala. So our present government has been very remarkable as you said in meeting the crisis, ensuring there's no social breakdown, ensuring that nobody in Kerala would go hungry and everybody will get treatment under COVID times and so on. But we did something more remarkable. It's true the budget doesn't have the money for the whole infrastructure construction. And we calculated we would require minimum half a trillion rupees investment, it's a huge amount of money. Immediate infrastructure investment in roads, buildings, bridges, industrial parks, transmission lines and so on to come to some 50 to 60,000 crores of rupees. Well, what we did was we government of Kerala under Indian law cannot borrow beyond the limit. Even for that limited borrowing you have to get the permission from the central government. But this does not apply to say body corporates which are formed by the states or companies which are formed by the state. So we have a body corporate Kerala infrastructure investment fund board which utilized new instruments, financial instruments which have been designed under new rules for the corporates to mobilize money from national from the country and outside the country. And we mobilize this money. Therefore, we gave permission for construction of this huge amount of infrastructure. After 60,000 crores of rupees which have been even sanctioned, only 10,000 has already been spent and realized. Others are all in the process. Only this 10,000 crores has produced such a remarkable change in the infrastructure. What we have been seeing Kerala is through the normal development process it would have required something like 25 years before 60,000 crores would have been mobilized for this investment. We have encapsulated them into a period of five years so that within five years Kerala would have say hop stepped into quarter of centuries of infrastructure development. So this has been very remarkable and it has given a visible impact upon the development. Now the third is JEP, Hop Step and JEP and JEP is and that is the program we have placed for the people. Now that infrastructure is the translational line, artificial electricity, industrial paths for investors to come by, we will have K-Form as super highway of internet owned by the state which is available to any service provider equal treatment to everybody. And we are going to provide the internet to everybody, it's a right of every individual, all the poor are getting going to get broadband connectivity free. And so all this has provided a background for us to take the best picture that we want to change the economic base of an economy. Our economic base is commercial crops which are in serious crisis because of opening up or labor intensive traditional industries already polluting chemical industries and so on. Therefore we realize now industries which are of our core competence would be knowledge industry, service industry, skill based industries and so on. Now how to make this paradigm shift from your traditional economic base to the new. So we have a three prong action, one is it is becoming popular to work from home, it is estimated 18, 1.8 billion persons who will be working from home in another five years. So we have lost out on the race of IT industry, cover paths are very small and other attributes in India has taken over. Well we thought this appropriate time we will step into the world global employment and say we will skill our labor force according to the global demand and they will work from home. Anybody from the world can probably employees can hire the educated unemployed persons who are skilled. This is going to have a tremendous impact upon women's supply. So this is number one. Two, we are restructuring your higher education so that Kerala becomes an innovation society. The innovations will be transformed to startups. We are thinking of creating a big ecosystem for startups which will bring a new breed of end-up loads into Kerala. Third, we are willing for any investor to come and invest in Kerala. We guarantee them ease of doing business. Once there is an agreement, we will keep the agreement, we will work them in them, we will give them incentives. So in a period of another five years, our economic base would change. Now that will create a new Kerala. See in India, the paradigm of development, there are three models. One is Gujarat, I would say, who are very rapidly industrializing but there is little welfare and social security people. They have fairly high poverty, illiteracy, ill-will and so on. Then there is this Kerala where there is very little industry but we have ensured everybody welfare. And of course, there is whole Bimaru states where there is neither industry nor welfare. Now, this is the situation. Now we want to create a Kerala which will assure every individual dignity of life and the security and welfare. At the same time, we will challenge Gujarat and other states. We will be growing even faster than them. And that will be very different. We are going to say, yes, it is possible to have redistribution yet ensure the growth. And that's the matter. Within this framework, we are not a socialist country. We are part of Indian capitalism. But in this part, within the limitations, we shall design a society which will inspire the whole progressive thinking people in India. Yes, it is possible to build something different. That's the idea of Kerala. So the Kerala model 2.0 is hop, step and jump. And this second term is jump. Well, one of the books you did for Leftward was Building Alternatives which was about the Uralangal Labour Contract Cooperative Society. The reason I'm bringing this up is that a bridge was recently completed in Kerala. And I saw that the Chief Minister Pinaravijayan had tweeted about how this society was part of the construction of the bridge. The reason I'm thinking about this is you're building infrastructure. But the labour practices involved in the building of the infrastructure should I think be emphasised as well. Here you have a cooperative society involved. Could you talk a little about that? Oh, it's true. You know, see, I just gave you three plans, the welfare infrastructure and the new enterprise historical department. Now in the welfare, which includes schools, healthcare and so on, do you think participation is going to be key to ensure better service delivery and quality of services? For which we think to ensure participation, we need to have decentralised democracy, decentralised national democratic, decentralised sessions that we have ensured. We have the most vibrant local governments. And therefore, this social intervention, collective intervention and local level in providing better services, improving the productivity of small scale industries and so on. It's a fact. That's fun. Second is, now the type of new enterprises that are going to come into Kerala, not only to build infrastructure, but also also new enterprises. I was told about startups. But we say startups are, we are going to be a stream with a whole lot of other social enterprises. Let me put in that space where corporates are going to play very, very important role. Corporate is a play, two major roles. One is providing credit. Recently, we did a financial innovation again. We have a three-tire credit cooperative societies. Now we integrate the top two tiers and then got it as registered as a schedule there. And this is the second largest schedule bank in Kerala. And I am certain this is very soon going to be the largest bank in Kerala. And that gives us the leverage to channelise funds into enterprises and so on. Secondly, the corporates are also going to provide a base for agro processing industries, even say electronic or IT collectives and so on. Model is the societies of the world. Now, these are very embedded in the radical history of Kerala. This society came into being in the early 1920s as a partner social movement where some radical social thinkers, the workers, followers were ostracised by the community. And therefore, they didn't give up. They decided they started a small credit society and then they started a workers' cooperative which would undertake contract work. And they designed a democratic way of functioning. All the directors would have to go and work and in the evening after the work, the director would meet and have a transfer system accounting and so on. So this society from 1920s was then a labor cooperative society. And why the people's planning came, we were looking around for models of social enterprise and we found we can bypass the contractors having labor cooperative like this. And therefore, this became the celebrated model. And many corporates like this came in. And this also gave this chance of property to diversify the group. And within another 20 years became the major enterprise, not just a contractor, they became a provider of throttle services. Now they are developers, they develop institutions and so on. They have diversified into various ways, something like Montregrin, big enterprise. And the important thing is efficiency. Most modern technology, they adopted and they can compete with any major Indian developer or contractor. Recently, this has got the major stretch of national highway from the central government competing with all others. So this is an important part of the experience. Then it is possible to promote social enterprises. We are not going to replace all private enterprises, but there will be a social sector, which will, I think, also give a sense of balance. Give a traditional instrument for the prophecy forces to intervene in the economics field. So recently, as you said, in a record time, in the past government, they built a bridge even before inauguration was falling apart. So we decided to rebuild it. And it was said, rebuilding would require one year, they would reduce it to 88 months, then they did it in a record period of five months, 500 workers working day and night and constructing and replacing, demolishing and reconstructing. It is an amazing architectural enterprise. So I just thought everybody's imagination what this society did. So Chief Minister caught and brushed who built all the pyramids, who built that stanza. Yeah, that's right. That's one of Brecht's best stanzas. Who builds the pyramids? Who puts up this? Who does that? Well, in Kerala, it seems to be these labour cooperative societies that are part of the fabric. Returning just briefly to the election, you know, you're like the polls, everybody's anticipating the left democratic front will come back into power for another term, five-year term. What will this mean for the Congress front? What will this mean for the Bharatiya Janta Party? They are in power in Delhi after all. What is this going to mean for them if in 36 million people Kerala decide to reject the Congress and the BJP? All right. See, politics has been polarized between the left and not so right. The right in Kerala cannot be right outside Kerala. Nobody can say against higher wages or against public education, public health and so on. So the whole ideologically broad hegemonic power, the left has left this imprint upon the right house. But power ordinates between the two. Now, it will be the first time that really the left is going to be back in power for two consecutive terms. The main reason has been, I'm telling you, the performance improvement, the baby dealt with the crisis, ensured welfare and then brought in this infrastructure revolution and putting forward an agenda. The main jump is going to come and everybody wants a new Kerala. So we are going to be back in power. What are the implications? The right, the Congress coalition has been taking a strange step. They have been telling the minorities in Kerala who come to be around 50% of the population who defeat us. How rank at five is going to BJP. Therefore, stick to the old pattern of power. In fact, it may look silly, but it's a very important political move trying to tell the electorate that if you want to keep Kerala free of BJP, you should elect us because otherwise our rank and trial will desert. But I don't buy that. For the simple reason, of course, there will be a rush into BJP from the right, but from Congress particularly, but I don't think Congress will be disemminated in Kerala. For a simple reason, Kerala ethos is secular. Our renaissance in the 90s, starting in the 90s century, has little reverabilism. It is in fact a reinterpretation of the tradition, promissory interpretation of the tradition. And the greatest ideal of Kerala's renaissance is the victim by one of the sages, Srinagarana Guru, who said, it doesn't matter what religion you are, as long as you're a good human being. This is ingrained in the thinking of everybody. And therefore, somebody from, from North India coming into Kerala and say, if you want to be a good human being, you have to be a Hindu, he just does not run in Kerala. Nobody accepts that. That's why, despite the fact, RSS has always had one of the strongest units in Kerala. There are percentages in RSS, we have said proportion to population, the highest in the country. They have never received mass support. And even the social composition of Kerala, which is half minority, BJP is not even going to be the main opposition, never in Kerala. Okay, let me put it that very fact. But a defeat of coalition, Congress coalition, do weaken them, which would mean Kerala is going to have no just next five years, I think, more five years in the future, unless it does something very bad, very bad. Otherwise, that is not the logic of politics. That gives us an opportunity, an opportunity of really designing a more democratic participatory and society, which at the same time ensures decent deployment and growth. I think that will be something fantastic. That is to say, the Indian, there has been erosion of strength of the left in India in the last two decades. If you look at the history, the 50s, 60s, 70s you have seen, it is the left which gained at the expense of the decline of the Congress. But from the late 70s, what has happened is Congress continued to decline, but now it is the right, far right, which is meeting advantage of. But there are new shoots we can see in various parts of the country, states in the small elections and so on, which gives some hope. So, Kerala would be the left past, left base, from which we have much hope. There is a, not a great book, what is the book by Victor Fick, which has a title, which has always subtracted Kerala the Yanan of India. So, I would say, yeah, there has been waiting of left in India, but we will provide the Yanan base. I think Kerala project, democratic project, has something very important for Indian left. Thomas Isaac, I have to say firstly, good luck in the election, good luck to you, good luck to the left democratic front, good luck to the Communist Party of India, Marxist, but more than anything, good luck to the people of Kerala. They're going into an interesting election and I hope it will be a safe and reasonable, rational outcome. I hope you get time to rest. Thanks so much for being with us at People's Dispatch and Globetrotter. I am an alopee and in charge of the election, the alopee district and everybody is waiting for the election day. I think some history is going to be made in Kerala. Death will be back in 1510s, which is the far-reaching implications for not only Kerala's development, but also for rest of the country. That's amazing. Thanks a lot. Thank you.


While the days of the drive-in movie theater are long gone in most cities, but the spirit of the drive-in has been kept alive in Bemidji. For this week's Northwoods Adventure, our Josh Peterson took in a cinematic double feature with Movie Night in the Park. What better thing to do on a gorgeous summer evening than visit a park? Add a double feature movie into the mix and you have Bemidji's Parks and Recreation departments Movie Night in the Park. For eight years, the city of Bemidji has been hosting Movie Night, making it a new summertime tradition. It's a great free family event. It's outdoors. All the movies are family friendly, so it's just a great way for people to come in the summer and just have fun. When Movie Night originally began, it was held down at the Lake Bemidji Waterfront. But hosting a large Movie Night at that location proved to be challenging. We switched it because the weather, the wind blowing off the lake, it made the screen not able to stay up and then City Park were just able to accommodate more people. Once the projector illuminates, a giant inflatable screen comes to life. The service comes to Bemidji from a company out of the Twin Cities, and the service doesn't come cheap. Thanks to sponsors, the Parks and Recreation Department are able to bring Movie Night to families each year. We love being part of the community, especially with Midco. It's something that we like to just be a part of. I mean, this is kind of where we live. All of our families are here also, so as much as everybody's bringing their families out tonight, we're here with our families too. As the night progresses, the atmosphere becomes one of celebration. Families coming together via blanket or lawn chair. Even kids see the value in the family Movie Night. It's really cool and important for families. And there's lots of kids coming together to watch a movie. Movie Night in the park includes all the amenities of a classic drive-in. And no night out at the movies would be complete in a City Park without concessions, especially Movie Theater popcorn. Community preparations are underway for next year's Movie Night. Research has already begun on which family-friendly movies to show next year. With this week's Northwoods Adventure in Bemidji, Josh Peterson, Lakeland News.


Summit Chrysler's Your Ram Knight Edition Headquarters. Drive away for just $365 monthly for 36 months with zero down! Pick your color, pick your trim, we've got more than anyone. Then, get ready to save. Summit Delivers.