How to make 2018 your best year ever? Now I want to say this is Originally supposed to be for my employees, but I thought I would share it with the world How to make 2018 your best year ever I got bad news and good news I'm gonna give the bad news first like the godfather says Bad news is that most people break their New Year's resolutions within about a Week but a small percentage of people Transform their lives and so if you work for me or you're just listening to this I'm gonna direct it to the people who work for me because I spend millions of dollars on employees and staff and 2018 is gonna be year where things changes. I Looked back at 2017. I'm like there was good.  There's things I would do over But new day, it's like the tide like the ocean new day new beginnings new year new beginnings So here's what I have to say The bad news is Without something pushing you You're not likely to change and that's just you know, people say oh, that's pessimistic. I'm not an optimist I'm not a pessimist.   They pick it up in a month You try to teach an 80-year-old a new language. In fact, they can probably never learn it with the correct accent I'm not saying you shouldn't try to learn if you're 80 years old. I'm saying let's just be real 2018 should be the real the real year where you're real with yourself. So that's the bad news most people One week and New Year's resolution. Maybe some people last a month.  It's the killer of hopes and dreams laziness Maybe bad handwriting too, right? Procrastination laziness Fear anxiety all these things stem from one thing.   Don't micromanage people.  You're gonna get work done I'm gonna help you get work done 2017 was a year it was what it was forget the past 2018 is where you're gonna get 10 times as much done with half the effort every one of you listening make this your goal This is a minimum. You don't work for me. If you work for me. The goal is 10 times with half the effort But maybe that seems hard So just make a simple goal Twice the results in 2018 for half the work if you can get that you can do big things You've got to work hard, but you have to work smart. This is the working hard. This is the working smart Some people just work hard and they stress themselves the death they forget to take a break to forget to relax They forget to work out They just try to to exit but you've got to do this at the same time. You have to reduce stress stress as a killer Part of the reason people procrastinating their lazy is because they don't want to get stressed out But what if there was a way in 20 to 18 if you work for me I'm expected 10 times the result with half the stress if you don't work for me pick your girl You're gonna pick more than 10. Some of you will say that's not possible. Oh, it is possible. I See it financially for some people they make 10 times the money in one year with half the labor I've done that. I've been entrepreneurs since I was 19 years old I look back at some of the years I was pushing myself 10 times harder than the year before but I wasn't doing it efficiently So here's a few things. Here's where the push comes from Some practical things to make 2018 the best year of your life number one Find a force That will push you in general Let's look at what generally pushes people The good and the bad because a lot of it's good You have to find a force that'll push you for the average person. They're pushed by stress being broke and loss You lost something it could be a person to be someone you're dating could be an opportunity It could be a business could be a business partner something was lost and this becomes the force that pushes most people But there's a problem with this Scientists found in your brain. There's something called dopamine Okay, dopamine is released when you do something. Well, it's a reward hormone Chemical in your brain. It's not a hormone per se. It's a chemical Dopamine that's why people take ecstasy MDM T coke all these things affect dopamine receptors But we won't talk about hopefully not gonna do more coke in 2018, but When you fail The opposite happens other things are released. Sometimes it's cortisol.  I just is a fascinating study I may I'll try to put a link below, but they looked at people's brains and we have these little thing called dopamine receptors They're not like hairs, but I'm just drawing them that way for visual effect to understand and basically That's where the reward Touches and then can't need the dopamine's released So the more you have of these the more you experience life in a positive fulfilling Rewarding way what happens is the more you fail Scientists find your body says oh, we don't need these and it's you start losing them and What happens is that makes you less ambitious and what happened in the school system that's destroyed Basically society is negatively reinforcing they tell kids Ah work hard do your homework, and they're gonna give you tests Boring stuff for you to memorize it. Nobody's interested the teachers a lot of them aren't even interested in the subject People lose dopamine receptors around self-educating So the average person once they graduate college doesn't read a book for three years a nonfiction book Why they're so burnt out because their dopamine receptors have been negatively affected But here's an interesting thing. There's a handful of people who go down a different path in life They don't have just stress being broke and lost pushing them and what happens is they actually Grow new receptors They become more ambitious the more receptors you have scientists find you become more Ambitious so it gets easier to not procrastinate see when you're ambitious you don't procrastinate think of your friend Who's the least ambitious person? What's a trait you'll find in their life?   So you find yourself only Succeeding by massive pain. Oh, okay. Oh, I'm broke this month. I better work on. Oh, man. I lost everything I'm so stressed out, but it doesn't really push you in the right direction In fact this force that will push you this is where you want to go in 2018. It might push you backwards So there's a force that's pushing you, but it ain't necessarily pushing you in the right direction So what is the force besides stress being broke and lost that'll push you forward It's so common sense. They're gonna be like I already know that tie. Well, good. It's not what you know It's what you do so then do this in 2018. It's people or a person Or a group of people You change your environment socially in 2018 You will be pushed it's almost impossible to self-correct our courses. It sounds great And there is an element of self-correction, but generally we're built as humans to learn socially There's a great book on this What's his name Matt Lieberman? Forget the name of the book, but it's oh, it's called social. He's a UCLA Top neuroscientist and he said man, we're built to do everything in groups to learn in groups He has these machines. He's fmri Machines and basically what these machines do They measure responses in your brain and he said even when you sleep most of your dreams are social Usually dream about interacting with a person you rarely he said have a dream about a rock I mean once in a while, maybe if you do with the mushrooms You might have a dream like that but for the most part your dreams are like all this person or like I made a building and there's people I sometimes had this dream I played basketball varsity high school basketball and I always have this dream even this day that I'm like on the court And I can't go fast So they're like dribble the ball up cork and I play point guard and I'm just like going really slow But it's a social dream. There's people interacting with me. Sometimes scientists think the reason we have dreams is to teat Where we reenact scenarios before they happen. So we'll have a mechanism to cope with it but when it finally does happen and so people getting mad at you is a situation you learn to cope with in dreams Now back to reality real life when you're not asleep You're gonna learn socially. So you're gonna overcome laziness procrastination all these traits that are negatively affected 2017 you change 2018 by changing the people or maybe adding one person in your life or one new group You can't hang out with the same people the same ratio that you did in 2017 and get the same results It's impossible Joe Salton my first mentor when I was 19 told me Ty, there is no change without a change in routine and what's the routine you should change first? It's not just what time you wake up.  So I hope you'll change your social routine for 2018 and Here's a simple test one of my friends Clifford Lerner. He built a publicly traded company He just wrote a book on how he lost 50 million bucks and made it back and all this stuff and he had an interesting Interesting little point I post them on my snapchat if you follow me on snapchat by the way a little side note Odell Beckham, Jr. was here today tonight and Interesting thing, you know, he's a top NFL player one of the greatest catches of all times and He goes, you know, I used to struggle with procrastination time I said you top athlete in the world He goes Yeah, and I said did you overcome it and he said yep, it's gone now. So that's good news Let that be a little side note. Hope it can be gone. It can go away. It's a bad habit So when we're talking about here, you know, we're talking about This social routine, this is what Clifford Lerner told me. He said ask yourself this simple question and This pertains to somebody you're dating. I Won't get into marriage. I'm not married. So I'm not gonna speak on that dating business partner Friends Co-workers, I mean in a sense this even applies to family, but I must stay out of the family thing Don't want to get in the middle of that. He said ask yourself If you could go back in time to the day you met this person or this person or this person Would you do it over again? So let's say you've been dating someone for a year think back to the day you met him Knowing what you know now about them now you spend a year with them. Would you date that person again? Would you do it?  Employees if you own a business like me ask yourself on day one if I'm hiring that person knowing what I know now about them Would I keep them in my life or my business? The answer is no then get rid of them now Same with co-workers same with your boss everything So this is what you got to do in 2018 Because there's always so much time in a day socially Dr. David bus one of my mentors he's former Harvard professor teaches at University of Austin One of the preeminent evolutionary Psychologists of all time wrote the textbook for Yale and Princeton and all this he told me That there's a competition for good people and you it was a competition with your own 24 hours You having a day meaning if you're hanging out with these three people that you've always hung out with That were bad influences on you. You don't have time to inject three new Amazing people into your life. It just there's only so much time in a day Then there's also only so much glucose in your brain. We get tired You have limited time, so you better focus. So what you must do is ask yourself Which of them got to go? Warren Buffett the billionaire investor said every year ask yourself. What's one thing in my life that I've outgrown? Get rid of it. It can be an idea or it could be a person Now some of you don't need to get rid of anybody. You're the lucky one. Some of you need to You need to clean the whole slate. I Just gonna be like some people sell don't that's too rough tie again. I'm not an optimist or a pessimist I'm a realist look at the facts if everyone around you is dragging you down. Everybody got to go If everybody around you is amazing nobody has to go it's not our you know, but the odds are It's like clutter because it doesn't just mean they're bad people Maybe you just have a different view now. Maybe you've changed and they change but you change in opposite directions So it's not always judging them. Don't make 20. You know one of my goals for 2018 It's not judging people, but I want to be a judge of my own social circle So I don't want to judge them and go. Oh, well, they're bad people But I might just say you know what they're great people, but we don't care about we don't have the same interests That's not judgmental. That's just being objective Logical you'd be like this if you have a friend you used to watch basketball games together They come do one day inside. I don't like basketball anymore. You stop watching games with them Common sense 101 but what we do because humans don't like to change is go. Oh, I got such great memories Watching basketball with Bob. Well, Bob's not gonna be a good person to watch basketball with he doesn't care about Basketball anymore same with dating same with business.  They're strong people They're resilient, but they forgot one thing, but they're still suffering because he said it's not the smartest or the strongest that survived It's the most adaptable To the environment in which they find themselves.   Don't look at it like oh Well, you know, oh, I'm just gonna be smart and strong and just I'm just gonna tough it out These are my friends Once I make a friend I spent all my time with that friend no matter if they now forget that It's not the strongest or the smartest who survived now. You can be loyal But again be loyal to people are loyal to you if the loyalty is gone Then why do you can be loyal? Alan Nation my second mentor told me When you're playing poker You're in a room at the table after 30 minutes if you haven't figured out who the sucker in the room is You're the sucker and some of you 2017 was a year where other people made you into a sucker don't be the Sucker I forget what number I'm on but I don't know three make it up. Don't be the sucker and the number one way you'll become a sucker is with Keeping the wrong people in your life now. Let's get in a little more advanced than I got to go It's the middle of the night. I just had a little inspiration to do this Primarily for my company, but I thought I would just put this out there Maybe you get some benefit. Maybe not Helps me collect my thoughts sometimes to write stuff out and just do these little dumb blogs, but number five If you want a simple litmus test simple test on Who specifically it needs to go there's this there's a few tests out there scientists develop one's called the dark triad one's called hexaco Okay, these are highly scientific. Some people don't believe in personality tests Get with the program. It's 2017 or 2018. You don't think they can measure personality can measure everything else You don't think they can measure personality think humans are snowflakes and every little person's and then how can doctors? map out our body Because we're about all the same with slight variations. That's what personality is humans Maslow's hierarchy of needs We got four or five, you know, you ever seen Maslow's bone You got physiological things You have safety You have love You have respect or social status. You could call that and then you have higher purpose. So I mean humans Maslow Discovered that we all are driven by similar things. We have very similar DNA in many ways to animals and Humans are very similar. We are we're different in our own little way, but less different than you think and so these tests here that were developed at Universities this was developed by a guy at university professor up in Canada hexaco Fascinating study fairly complicated. It's much better than things like Myers-Briggs, you know in ENTPE INFJ Those are okay, but this is the newest science. There's a thing called the big five This is more advanced. This is more advanced these tests for different things So you can Google these they're free I made a test that's free that I use for people around me You can use it if you want You don't have to pay anything It asked for your email address to send you if you are one of those people who are highly suspicious of everything Put in a fake email. I'll give it still give you your results. Okay? Eventually, I'm gonna turn this into a business, but I haven't turned it into business I'm always gonna do a free, but I'm gonna have some paid VIP version of it, but if you want it to go you can go to tylopeds com slash quiz It's free. It really is free But you can also just Google dark I compiled all about five of the top tests in the world Built by scientists into one And I have my programmers do it so I can hand this out Have people take this test that are around you and just tell them take the test yourself And they have other people take it and you'll see some people get horrific scores I had some people in my life boy when I discovered this test There's a good book on this by the way if you want to read a good book I'm not paid to promote this book either. I've never even met people who wrote it age factor of personality This book is this should be your first book you read in 2018 Trust me. This book is amazing. It's by the guy who invented one of the tests Like I said, I compiled five different tests five or six into this one But one of the main ones hexaco. This is the most cutting-edge science. Dr. David bus told me this is a science That has the most Valid research behind it right now. It's the most updated. It was built in 2001. So it's about 15 years old but it's very up-to-date in terms of What he figured out what they made built on top of the big five and all these May 2018 the year you become the master of reading people because in order to be pushed in the right direction So that you don't break your New Year's resolutions in one week like the average person or one month like the average person You got to have a positive force pushing you the positive force Needs to be a person or people But you already have people in your life So you got to make room for the good people or not necessarily good the appropriate people and you got to move out the inappropriate people We're not gonna judge people. It's hard to judge people Some people are doing their best and it's they're just not a good match for you man It's no one has to blame. We don't have to go this person's evil. It's nothing Some people are but most people are You learn to read people you can either go to the free one you can go to a hex a co You just Google hex a co if you want or dark triad You have that there's also the attachment test By what's his name Levin or something like Levine? dark triad there is a There is the big five is one There's also The well there is Myers-Briggs, which is some validity. You don't want to build everything around Myers-Briggs So like I said, I've compiled these five into one So feel free to do the five or if you want to do it on my site like I said you can put your email in I like to email people a record of what they want But if you're one of those people that don't like to put their email in didn't put in your freaking fake email You'll still get the results read this book You will make 2018 a year when you begin to read people This is what they should have taught us in school so that you can keep the shitty people out before they get too close to you and destroy everything And you can keep the good people close to you forever This will change your life. This will make 2018 the best year of life. Take it for yourself And then get everybody you know people by the way everybody loves to take personality quizzes At first I was like, I wonder if I asked people to take this if they're gonna go Why well if they won't take it and they're highly suspicious.  I'll see you again in 2019 and in November Right, you don't have to hang out start prioritizing your family to the people that got the same freaking worldview as you Again, you can't get rid of family Sometimes family got to go all the way.  You say listen This ain't good for me. It's probably not good for you. Let's take three years off.    I think it was mr. T and one of the rocky movie He goes, I got a prediction. They go, what's your prediction for the fight? He goes pain That is most people's life when the school system didn't teach us to read people What's more practical than understanding that scientifically validated? psychology and You know personality attributes of other humans. What's more important? Do you think learning teaching kids geometry and hypotenuse of a triangle? Is more important than this school system? Scammed us all my friend. Trust me. Whoever built these school curriculums. They left out like oh, well, what about that? What about the science of dark triad test for narcissism? Some of you have Major narcissist in your life and I got bad news for you. If you got major narcissists in your life You're probably a narcissist too. There's different forms of narcissism.  They have what's called unequal WRT's well for a WTR's This is a scientific term welfare trade-off ratios Basically, you do a lot for them and they do a little that's an imbalance welfare trade-off ratio You want welfare trade-off ratios to be approximately one-to-one that means you do one nice thing for them and low and behold Within a week or a month they're doing something nice to you not because you're keeping track But because it happens naturally good people naturally like I have a business partner. It's funny over a year I didn't even think about it when we go out to eat I pick up the bill sometimes two times in a row, but over a year like equaled out He was good people a good experience with a business partner.  Machiavellianism is people who are sneaky They have a cynical view on life. They're always trying to get one up on you But they're doing it in a sneaky way narcissists will often do it to your face. I love myself. I Don't want to help you. The narcissist sometimes is Better to have in your life because at least you know they're narcissists Machiavellian smile to your face say they love you. They're your best friend and then behind your back They're doing sneaky things and then you have psychopath Psychopathy is the technical term or way to pronounce it So these are the psychopaths Which is basically not necessarily a murderer, but it's people with very low Emotionality on the hexaco score So and this is hard to change by the way if you have a psychopath in your life Dr. Bus told me it's basically impossible for a psychopath to stop being a psychopath. It's hard Narcissism Machiavellian. This is something that these two are somewhat genetic. This is pretty much all environmental This comes from bullying bad upbringing abuse Makes people Machiavellian most of people it's not their fault, but um Yes still can't hang out with them these people have a low empathy So they just can't create emotions about you could you could have a horrible situation They just can't go. Oh, I feel bad. They want to what they can't and so that's what dark triad is testing for Hexaco tests for 25 other traits Big there's big categories or five big categories H4 So that that's one of the tests and one of the things you need to learn to read You also in the hexaco score, so it had a chance for honesty humility. It's somewhat related to the dark triad and Ease Emotionality this checks them for the psychopathic and highly anxious people be careful Our society is producing massive levels of anxiety. I've tested people. It's insane Tested thousands of people myself personally. I had there was someone a friend of a friend This girl brought a friend over and never was out playing basketball. There's 20 people here I started talking to her.  I opened a can of worms over the next hour We kind of talked privately. She told me on the first person in the world.  They were bullying her this these tests tell the truth Remember you're not judging them. They're telling you it's just a series of systematic questions where they reveal themselves It's much better by the way than judging with your own gut a lot of times We I mean your gut is important But sometimes we over trust our gut and I've judged somebody about how they look I remember I knew somebody who had a tattoo all over their face My first thought was this person's crazy. They did the test now some people lie on the test But the tests are very well built I would say only about 2% of people trick to test it does happen But this person got a very normal score and I realized they just like tattoos nothing wrong with them We judge too quickly and we judge the people Sometimes who look great on the outside, but they turn out to be assholes. There's a lot of those they smile to your face So hexaco and test for extraversion. That's what the X stands for agreeableness. This is massive Don't have friends that aren't agreeable. That's why I said if you ask your friends to take the quiz and they go Why should I huh? They're not agreeable It's annoying. Hey, this is a big one. See is conscientiousness all you entrepreneurs hiring people business partners This is the most correlated with wealth Okay, and then oh is openness to new experience. These are open-minded people now each of these break into sub facets Honesty and melody breaks into four. So it's sincerity fairness greed avoidance of modesty Emotionality breaks into four two. So you have a fearfulness anxiety Fearfulness anxiety Sentimentality independence. That's the four extraversion breaks into a series. It's like social boldness social self-esteem Liveliness and something else this one extraversion, you know, I like introverted people This one is less predictive. Although this is predictive of other things, which is a whole nother conversation Agreeableness is massive. So this is gentleness patience Flexibility and forgiveness. Some of you hanging out with people have low forgiveness So any little thing you do wrong they hold it against you for 45 years That's not a person that you probably want to build your life around in 2018 If you want 2018 to be the best year ever, it's got to be the best year of people around you You think it's just gonna magically the best year because it's a new year on a calendar It's no magic in a calendar calendar is man-made.  You just pick a day Don't make my life better 2018 is a good start conscientiousness is built around four sub facets, too. You have Diligence, that's hard-working. You have prudence making good decisions. You have Organization some people just disorganized and sloppy and then the last thing you have is perfectionism Some people just literally never double-check their work, you know, you see that So that's related to money and opening a new experience has things like altruism People who like art for example aesthetic appreciation they call it and you have creativity and So this one is more related to IQ But there's worldview things here like I said you may be dating someone who is perfect person Overall, but not perfect for you because I've had this situation. I like to travel I've dated people who don't like to travel doesn't matter how great they are here If they don't want to travel I like to travel as part of my worldview. It's not gonna be a fit So I will not have the best year ever if they're in my life no matter how great of a person That's why I said we're not judging people like we're some moral You know morally perfect person. We're not nobody is but we're judging people by a set of attributes Like I said go to tylopez.com Slash Now I have a more advanced quiz if you want this one. I think it's that full quiz. This one's longer So you can do the short one at tylopez Dot-com slash quiz Or you can do the full quiz this one will take you like six minutes this one will take you about 20 So for some people 20 minutes in the modern world, I can't take it no 20 minutes. I'm so edd.  By the way, that's related to conscientiousness Part of being able to be diligent is to be able to focus Alright, so last thing that I'll say so we talked about social circle That was the big thing I talked about for 2018. Well, I think I think I'm gonna talk about this focus thing just to end Whatever we're on number five look the reason I talk about social is it gives you something to focus on but let me step back so many you can't focus because Let's just face it. You know social media makes money by making you unfocused Scientists have studied how Facebook Instagram Twitter all these apps have created Addictions and that's how Why the people who own them are the richest people in the world now? I use social media So I'm not gonna say don't use social media. Hello practical tip for 2018 turn off all notifications On my phone. I don't have one notification on So if you have an iPhone Go to settings Right here go stroll down and notifications Where is my notification right there Turn everything off.  I use social media but social media is not gonna use me I'll look at my Facebook when I want to not one Mark Zuckerberg wants me to Dopamine is released by these apps.   They're called blinders They don't really blind the horse But they the horse can only see straight ahead and the reason they do that is because when you're out on the road with a horse I live with the Amish for two years If a car big car comes by and the horse sees that out of the corner of their eye They get scared and I actually knew a guy. He was driving along the side of a road There was a cliff on the edge that he didn't put the blinders on that horse to focus the horse a Big truck was coming the horse saw and kind of went like that aside. Whoo. Now. He didn't die, but he went right off the cliff Got injured Got thrown off three four five six months Rehabilitating from their injury. That's a good metaphor for people. You need to put your blinders on and focus straight ahead for 2018 what do you want out of 2018 more money more happiness more time more freedom Focus that brain on that thing. You can't be this is the average person's brain in one second They want to focus on let's say they're trying to improve their business Well, they also think about oh, I got a DM. Oh, okay snapchat. Oh, yeah, oh my mom's calling me Oh, I wonder, you know, what happened at Game of Thrones episode focus. It can be as simple as for example Make a time when you check all your social media, I do it I just try to check it once a day now. I'm in the business of social media. So I do check a little more But my personal side try to wake up Focus and I just go through all my apps one by one and get it out of way 15 minutes You know, I I have a lot of social media followers. So it sometimes takes me a little longer I got 13 million or something. So I get a lot of DMs, but still I'm not gonna check them all be real Why just because you know, so if you got a thousand or two thousand followers, whatever five thousand I used to have a hundred followers It took me 10 seconds a day and then I don't need to check it the average person at work is checking their email They said like 20 to 50 times of an hour. What a waste of life, man. Don't waste your life Tim Ferriss talks about this in The four-hour work week now things have changed since that book was written. That's why I said now turn off notifications Put your blinders on look straight ahead to the goal instead of having the mind that's all over there Just focus on one thing at a time Confucius the great philosopher Chinese philosopher said The person who chases two rabbits catches zero rabbits You chase two things at the same time You get zero So just focus on one now you can get like an income you want to have multiple streams of income in your life The average millionaire has five to seven streams of income different ones, but they didn't build them all at once They build them one at a time Right, you may want to have a mansion, but you got to build one wall at a time Sure, you want a house with many rooms. You've got to build one wall. You can't go. All right Let me nail one board over here go across the house.  I mean unless you stay out for a long time But if you just go about your day normal The sun's rays, they're diffused They're diffused. So here's you But god help you if someone takes a magnifying glass right here And concentrate that all those rays that are hitting it into one Spot on your body.  Just focus Put the blinders on turn off some notifications Some of you trying to do too many things you must there's a good book another book you can read in 2018 It's called the one thing By gary keller. I recommended this book for many years I don't get paid to recommend it although. I think I made it a Best seller again. I think it was a best seller and then kind of faded out and then I started promoting it Never got any money for that but I don't care a lot more important things than money like spreading the word on a good book The one thing by gary keller and one of the things he says is when you focus you also have to learn to embrace the chaos Some of you are doing too much. So you got to let some things go and just embrace the chaos So let's say for example You're doing jujitsu karate going to the gym three times a week doing yoga.   What will suffer into something something that got to suffer in 2018? What is it? What's going to suffer you cannot increase Without something decreasing because there's limited time So make your decision what you're going to focus on and that also entails what you're not going to focus on Something's got to go. Some of you. It's got to be less video game time. Some of you has to be less tv time Some of you has to be less social media time. Some of you it has to be, you know, I don't know We can go through hundreds of things. I don't know you Pick your thing what's going to decrease so that you can also something else can increase. Okay So I gotta go to bed because I got focused for tomorrow, but that's all I got to today for those who work for me This is not optional if you work here for those of you who don't work for me which is 99.9 percent of you Take the good and get rid of bad And hopefully there's one thing in here that'll help you make 2018. Trust me reading people I've learned many things from many mentors Nothing Is a bigger regret in my life than somebody at 18 not teaching me how to read people I you know, I learned I was lucky in some ways.  Hey, I wish it's fine, but The first thing I learned from a mentor was like business and marketing and making money And that's been not as hard for me in life because I learned from smart people But nobody talked about how to read people You know, not in elementary school junior high. I mean people have their little theories. I know But like they don't have a systematic focus way to read people And if I could go back on time and time machine right now Pshh I wouldn't ask to learn how to make more money. I wouldn't this I wouldn't that I would say Teach me as young as possible how to be a master of reading people and then everything else will just Fall into place. You'll make more money. You'll be happier. You'll get 10 times done with less stress You'll overcome your laziness to procreate procrastination by having amazing people around you Who then you learn by osmosis? So that's why I said in order to overcome laziness is not the answer most people expect to hear Most people expect to hear, you know, I don't know wake up early or something. It's not that you only learn Socially and so I hope 2018 is a year when you look back and you go man, some people had to go and they were replaced by much More aligned people aligned with your worldview with your goals and you go I didn't even procrastinate even though I'm a procrastinator I didn't who he just kind of did our thing and it worked out. That's how it should feel in 2018 Don't work so hard I mean in a sense work harder But it shouldn't feel like you're working. There's a great book called flow by macael cheek semi-high Which basically says what you want to get in a state where you're working hard But it doesn't feel like work when that is achieved and that'll come from being on the right team Like Odell Beckham, you know plays football the Giants Uh, James Harden was over here at the house plays for go, uh plays for houston chris paul there When they're playing the game, they're working hard They're running average six to seven miles, but they enjoy the game They're in what's called flow if you're noticing The hard work that means something else is wrong So you should be able to get rid of your procrastination in 2018 without working that hard on it Work on the domino of reading people and fixing your social circle in 2018 and as the domino falls Other things will get fixed by that one domino procrastination laziness You know even depression A lot of times we're depressed because it's our body telling us something's wrong.   Let's just be real No matter what your immune system is if everyone around you has ebola those two doctors that went to help in africa Which was very valiant of them to help people who added bola They eventually died of ebola you catch what's around you In the good news you can catch good things so You hang out with good people leave a comment below Bookmark this page leave a comment.  So don't get mad at me I don't want to get between your drama. If you stop hanging out with your mama Don't want your mom calling me So that's why I stayed out of family Pick the people pick the obvious ones first.  Don't get rid of everybody Some of you're gonna turn into hermits, which sometimes has to happen, but that's not a good solution either Get rid of the obvious Crate-crate people in your life The narcissists the massive narcissists the massive machiavellian The people suffer from psychopathy Don't try to fix them. Some people say but tied and who's gonna help them. Well, are you trained doctor? Don't be doing surgery if you're not a trained doctor for those of you listening who are advanced therapists psychologists You can work on them You know if you're everyday, I'm not I'm not a psychologist It's not my job if somebody has a heart attack out there I don't go you must work with me. I go go to a hospital Some people have to get help and by the way The whole nother conversation what happens if your score is bad um Read the h-factor personality this game changing book read that one for first and you can read the one thing By gary keller. You can read flow um tileopeth.com slash quiz Check out your scores Hopefully you don't get too traumatic of ones. Talk to you soon


Honourable Prime Minister of India, Mr. Narendra Modi, for his keynote address to video conferencing. Namaskar, Honourable Prime Minister, sir. Honourable Prime Minister, sir. India is one of the most diverse countries of the world. With 2.4% of world's land area, it contributes about 8% of the global biodiversity. India is blessed with ecological habitat and also has four biodiversity hotspots. The Eastern Malayas, Western Ghats, Indo-Normal Landscapes, and Andhra and Mekoba Islands. In addition, India is also home to around 500 species of migratory birds from across the globe. Ladies and gentlemen, for 80s, conservation of wildlife and habitat has been a part of the cultural ethos of India, which encourages compassion and coexistence. Our Vedas spoke of protection of animals. Emperor Osoka put great emphasis on preventing the destruction of forests and the killing of animals. Inspired by Gandhiji, the ethos of non-violence, the protection of animals and nature, that is puttably insane in the constitution of India. It also finds reflection in several laws and legislations, sustained efforts over the years. How late to enter any results. The number of protected areas have increased from 745 in 2014 to 870 in the year 2019. With an area coverage of nearly 1,7000 square kilometers, India's forest cover has increased significantly. The present assessment also indicates that the total forest cover is 21.67% of the total geographical area of the country. India has been championing climate action based on the values of conservation, sustainable lifestyle, and green industry transition leadership with Sweden have seen encouraging participation from wide array of countries. India is one of the few countries whose accents are compliant with the Paris Agreement goal of keeping rise in temperature to below 2 degrees Celsius. Friends, India has initiated focus species conservation projects program. These have shown great results. The number of tiger reserves has increased from 9 since its formative years to 50 at present. At present, India has the distinction of having a population of almost 2,970 tigers. India has achieved its target of doubling the number of tigers two years before the committed date of 2022. I call upon tiger range countries present here and also others to come together to strengthen tiger conservation through sharing of benchmarking practices. India is supporting more than 60% of global Asian elephant population. 30 elephant reserves have been identified by our states. India has also taken several initiatives and set standards for conservation of Asian elephants. We have launched project snow leopard to protect the snow leopard and its habitat in the upper Himalayas. India recently hosted the steering committee of the global snow leopard ecosystem program of 12 countries which resulted in new Delhi declaration, envisaging development of country specific framework and cooperation between countries for snow leopard conservation. I am happy to share that India would be taking a leadership role in promoting green economy including conservation of mountain ecology with people's participation. Friends, the gear landscape in Gujarat is the only home for the Asiatic lion and the pride of the country. We have initiated an Asiatic lion conservation project since January 2019 to protect the Asiatic lion. I am happy to share that today the population of Asiatic lions stands at 523. In India the one hunt rhinoceros are found in three states of Assam, Uttapadesh and West Bengal. The government of India launched the national conservation strategy for the Indian one hunt rhinoceros in the year 2019. The great Indian buster are critically endangered birds as also been at the focus of our conservation efforts. At part of the captive breeding program, nine eggs have been successfully hatched from the bite. These have been accomplished by Indian scientists and forest department with technical assistance from International Fund for Huwara Conservation Abu Dhabi. We have therefore made the mascot GIBI the great as a tribute to the great Indian buster. Friends, India is honored to host the 13th conference of parties to the convention on migratory species at Gandhinagar. As you might have noticed the CMS COP 13 logo is inspired by the traditional column from southern India which has a profound significance in the contracts of living in harmony with the nature. Friends, we have been traditionally participating the mantra of Atiti Devo Bhava. This has been reflected in the slogan theme for the CMS COP 13 migratory species connect the planet and together we welcome them home. These species move between countries without any passports or visa but are messengers of peace and prosperity and it is our responsibility to protect them. Ladies and gentlemen, India would hold the presidency of this convention for the coming three years. During its presidency, India would steer in the following areas. India is a part of the Central Asian flyway for migratory birds. With a view to conserve the birds along the Central Asian flyway and their habitats, India has prepared a national action plan for conservation of migratory birds along the Central Asian flyway. India would be happy to facilitate preparations of action plan for other countries in this regard. We are keen to take the conservation of migratory birds to a new paradigm with active cooperation of all the Central Asian flyway range countries. I also wish to establish an institutional mechanism for undertaking research, studies, assessment, capacity development and conservation initiatives by creating a common platform. Friends, India has about 7500 kilometers coastline and Indian marine waters are reaching biodiversity with innumerable species. India proposed to strengthen its association with the Abyan, with the ASEAN and East Asia Summit countries. This would be in sync with the Indo-Pacific Ocean initiatives where in India will be playing a leadership role. India by 2020 will be launching its marine turbotel policy and marine standing management policy. This will also address the pollution caused by micro plastics. Single youth plastics have been in a challenge for environment protection and we in India have been on a mission mode to reduce its usage. Friends, several protected areas in India share common boundaries with the protected areas of neighboring countries. Cooperation in conservation of wildlife through establishment of trans-boundary protected areas will lead to very positive outcomes. Friends, my government firmly believes in the path of sustainable development. We are ensuring that development happens without harming the environment. We have released the linear infrastructure policy guidelines to tailor development in ecological fragile areas. People are being made important stakeholders in the stock of preserving the natural resources for future generations. My government has been marching ahead with the slogan, sabka sat, sabka vikas, sabka vishwas. Millions of people in the vicinity of forest areas in the country have now been integrated in the form of joint forestry management committees and eco development committees and associated with the protection of forests and wildlife. Friends, I am sure this conference will provide an excellent platform for experiencing and capacity building in the areas of species and habitat conservation. I also hope you will get the time to experience India's hospitality and reach diversity. Thank you. Thank you very much. Enjoy your stay. Thank you.


greetings subscribing tons That's an absolutely aesthetic hoodie if there ever was one Now I want to make a quick video. I was originally supposed to make a podcast episode today, but I needed to meditate a bit more and load up some more to Give it the attention it deserves You can follow me on telegram for more information about it. It's an important episode Anyway, I also wrote a few days ago on telegram that I have quit my Spotify Subscription and now you wonder why is this Important enough to make a video about yes, it's because I've had a playlist there for Well soon 10 years actually That's a long time Decade so anyway, it was quite big I suppose 4500 followers it's still up by the way and I get emails every week several emails every week from artists asking. Can I be on your? playlist For the record I ignore all of those emails now if you are a musician that is our guy and You want to you know send over a song I can use in a video then I will of course Listen to it and maybe include in a video so I make a distinction between people who are Just you know how to be on the Spotify playlist and the ones who are You're willing to have it in a video, etc. So anyway, what? is the reason for me to to quit my Spotify subscription I've had for ten years yes, I simply got enough of the the political pushiness if you are on Spotify if you work for Spotify No one ever asked you about your political opinions No one cares you are a music service you stream music for people When I go into the gym, which I did the other day. I don't want to get your suggested podcast about woke issue number whatever I'm not interested. I'm interested in listening to the music. I want to listen to You can keep it at that so shows on humility don't view your work your profession as Political activism you can leave that to the individuals people actually want to hear Talk about politics and you are not included. I'm very sorry to say no one cares about what you No one cares about your political opinions. You're a music streaming service and this goes for all companies if you believe it's your role to Promote a political agenda. It's absolutely not focus on what you're good at So anyway, this is of course, you know, I've seen Spotify censoring Certain podcasts and then promoting other podcasts who are left-wing in their politics. So I've had enough of it Again, I've been with Spotify for a long time and I've seen this Creeping pushy-wokeness More and more over the last few years This particular Day I was in the gym. I you know got in my face Promotion for the latest whatever it was it was enough and Therefore I has a customer. I'm paying you for a service. I don't believe I'm getting What I'm paying for I'm paying for music not to get propaganda in my face. So therefore after a long time I decided to quit Spotify As I said, my playlist is still there. I won't update it with any new music But since it's something I've had for so long, I think it would be a shame for me to remove it See if you are there. You can of course listen to it, but I've also included a Link in the description box below and yes as you might have guessed it is absolutely mandatory for you to follow Said link in the description box below if you aren't following the link. I can only suppose you are an NPC. I Said it before say it again. You're very special. We love you, but for everyone. It's not an NPC Link in the description box below and that will lead you to some other places. You can listen to music I'm trying to promote. I'm trying to promote musicians who are on our side as well We can create that type of culture ourselves. I don't need to be Completely reliant on a company that behaves in such a way now Anyway, I wanted to make this video because I have not promoted Spotify as a company, but I've promoted my Playlists in a good few videos and I wanted to you say that I'm not active there anymore. I'm not updating it anymore. I will try to promote Good people on different platforms music that we can use and again link in the description box below and Yeah, that's the Wisdom for the day not really any wisdom. I just want to give up an update because I believe it's important So anyway, thank you for watching and thank you to everyone who Follow the link in the description box and follow the instructions there shout out to everyone who Has already done so so anyway, thank you for watching XXO boom


Welcome to DEF CON 28, the Safe Mode Edition. You're watching a video or a talk by Hexpercy Village, and this provided you from Obi-Wan666. Yeah, let's talk about swimming IoT, an IT and OT overview. But, yeah, it's better without a mask. So, I don't expect anything here. So, let's go. Yeah, what will we listen to today? We have a short introduction over me. Then we get an overview of IT and OT systems on Yacht. Then we look a little bit deeper into the bridge network, how the bridge network is working, and how some messages are transmitted. So, let's send more details in the Actus Technical 101. So, how is an Actus network working, and how the messages are transferred, how it is looked like, and what will be the outlook for, let's say, the next year until the DEF CON. Hopefully, back in Vegas then. Yeah, we're hacking Yacht. Accidentally, I slipped into this topic. So, my boss owns one, and I was able to build some devices on the ship, and then I started to look at them, and, yeah. So, mostly they are owned by private, they're privately owned and chartered by private people, and are CEOs running their business from Yacht while they are traveling. So, the best office that you can have is away from everyone else. So, it's not crowded anyhow. So, you have your safe place, and you can do their business from your office on the water. So, it's a nice place to work from. And all the celebrities, they are using also Yacht and showing off on the famous places in the world and make their Insta stories and so on. So, if you maybe have access to an Yacht where a celebrity is on, then you can do maybe some other things with that information. So, the thing is then, if we have control over the Yacht, the Internet access for example, or all the smart devices, or the IT or the OT network that is on board. So, what we will have there, we will see in this presentation. So, my name is Stefan Gehrling. I'm also named Obi-Wan666. Older than the Internet, as always, have a couple of certifications like GCFA, CISSP, Microsoft Certified System Engineer, CCNA, Pisysco and a couple of others. So, yeah, some of them are not maintained anymore. So, the one that I... Yeah, my favorite one is the CISSP. OSCP is the next one I maybe will start on, but yeah. So, my background is an electronic specialist. I was working in the German aviation army on navigation systems for helicopters and also 32 years now a volunteer firefighter in my city here in the beautiful Lingen. Yeah, I volunteer also in a couple of groups. So, Giraffel is one of the things. It's a group of nerd hackers. Yeah, from around Europe you can say. I'm the cavalry, cavalry project I'm also working on. Then we have an AG Critis. It's an NGO on critical infrastructure and also for the CCI. Yeah, what kind of networks we have on board. Yeah, so I've counted a little bit. So, I found five different networks that we can have. So, it's on the IT network. We have the IT network and we have the wireless network as one. And then we have a couple of more networks when we look at the OT side. So, you can say the bridge network is an own network. So, all the navigation system and so on. Everything that's needed for the operation of the ship is on the bridge connected together. So, I call it the bridge network. So, then we have an enemy network or the enemy bus. So, we will see a little bit what kind of system is that. Then we have an ICS network where all the PLCs and something else is connected to it. And yeah, the KNX or Instabuzz. You can say it's also a network. Yeah, you can count it to the ICS network but it can also count it to the IT network. So, I have it putting here as an additional one. So, I've counted here six. But yeah, it's five networks. Maybe more. GSM is not explicitly here in or the satellite network. Then we are already on a seven. We'll count that also. Okay, what have we? IT and OT. Yeah, you think now yachts. What could be on there? I say it's a swimming IoT device because there are so many systems on board that are connected together and most of them will have also internet connection. And from that point of view, so we have an ICS network and we have an IT network with maybe VPN connections to offices and so on. And everything is working from this small vessel. In detail, we have there, for example, the VTS, the vessel traffic service. We have automatic identification system, the AIS. We have autopilot. We have GPS. We have radar. We have cameras, also Tamil cameras. We have energy control and monitoring units that's in the ICS network. Some of them are more and more cloud-based or cloud-connected now so that you have access over your cloud-based devices on the engine control or the engine monitoring systems. The control, that's a bad idea. And we have internet access for the guests, for the crew and for the owner. And a couple of entertainment systems that are also connected over various systems together. So all of those things in the network view we will see a little bit later now. A couple of things I have already given some talks. Yeah, so I will sometimes use it as a reference. So for the basic overview, we have the NMEA network here. So it's a bus system. In old days, it was a serial bus. It's going completely through the whole ship and it's connected with tabs to the devices. So this is an old serial system. The connections look a little bit like the 10 base 2 connectors or the G-Bahnnet from the old days and everything is connected to that. It's not that fast, it's only 4,800 speed and it's, as I already said, a serial communication protocol and it connects the echo sounders, sonars, aniometers, gyros, autopilots, GPS and something else. There are a couple of devices more. Then we have the NMEA 2000. This is already a KANBUS standard KANBUS technique and we can operate already with one megabit fast but not that fast. For more and more applications, we need now faster networks. So the next generation is then, for example, a rain marine called the CTOG-NG. This is also a KANBUS system but rain marine calls it, we call it CTOG-NG next generation but it's the same like NMEA 2000. But the new version is a CTOG-HS, so it's HSS for high speed. So this is a 10 megabit Ethernet network where, for example, you see in the pictures, some camera devices and navigation systems are connected together. Six is, for example, part of the bridge network from the Glassbridge series and so on and all the devices are connected together. Then we have a couple of IT equipment on board. I would think now, yeah, what could be on there? Well, the bigger the ships are, the more equipment is on it. So the first listing that I have here is from a 30 meter yacht. 30 meter is not that much but it's already a big one. So here we have a half-sized wreck completely full with IT equipment. So we have a router. We have some servers, three in total. We have two voice-over IP gateways. We have a fully equipped 80-port switch. And we have an uninterrupted power supply for that. In total on that ship, we had 10 smart TVs and such receivers. We had a sharp PC, 14 voice-over IP telephones, internet router, UPS and four access points for the Wi-Fi. This is from a 48 meter yacht. So this is already a complete full wreck and there is a second wreck full of additional stuff. And in each cabin is also a small wreck with the entertainment systems and AVR system, the amplifiers and that stuff. So that's in each cabin also in extra housings. And this one was from a 70 meter yacht class. Here you see already two complete full equipped wrecks and there is a third one with a navigation system wreck. So it's a total on that ship already three full stacked 42 inch network wrecks, you can say. And we had for that ship already around 25 access points, for example, to have a Wi-Fi coverage over the complete board. To get an idea about what the network on the AV equipment looks like, so an audio and video network. So here you see and it's connected to the IP network. There is a Crestron device that's connecting to everything. So the smart TVs are connected on the IP side and they are not connected on the IP side. They are only connected on the video side to the Crestron. The Crestron is the multimedia device that is connected to the IP network. So it's a little bit different. But there's also an Apple TV and sub receivers that you will see there. So we have the BlueRays, Apple TV and the Crestron system itself. And they have also different connection types. You will see it on the chart with different colors and well documented in this one. We have also a different other thing. So most of the equipment you can access with a tablet. So we have a tablet on board where you can connect to the audio and video streaming. You can stream music on your tablet. You can use the tablet and say in the cabin, okay now I want to have the audio to the amplifier to listen to the audio system on my room where I'm currently in. Or you go into the gym where you have flat TV screens in the ceiling where you can watch to the news or listen to music or whatever. Or have multimedia training system then on there.  You have also other things like light control where you can switch on the lights and on and off. The electric curtains you can lever them up and down. You have for example an engine monitor, a rudder monitor and so on. So everything is accessible for example over a tablet. On the OT side we have a couple of other things. So one of the monitoring systems is the engine monitoring and control system. Also the propulsion, road thruster, the KNX system for the light control, the PLCs, the valve controls and so on. So it's a whole bunch of systems on the OT side that we have connected. To get into a bigger overview of the OT I have a couple of pictures of that that you get a feeling about what you will see. So you have all the engines that are connected to mostly two engines that you have on that. Then you have two or three power generators that are connected. You have a couple of heat sensors, water sensors, sensors for how many fuel is in there and so on. The HVAC control, water distribution, pumps and valves and so on. For example this is only the diagram of an engine control unit. So you have the engines with all the sensors. In this case it's an AutoMaskin 400. The last year the OT was on, there was also an AutoMaskin control unit on it. The engine is connected to the engine control unit. There's a special safety unit, the SCU and everything is connected with different links together. And at the end it's everything connected to the Ethernet network. So there's an Ethernet switch and also connections maybe to the MAPOS or other bus systems that you will find there that I have shown here. So this is then the picture of an engine control room where the ETO is sitting. The ETO is the electrical technical officer and so mostly at yachts 60, 70 meters or there you have an ETO. Below that the technical officers are in charge for that. But on bigger ships you have a dedicated person for that. And then you have the different monitor systems where you can see all the kind of things. So here we have a monitor of the engines. So the port engine and the starboard engine. This is an overview of the ICS network itself. So how it is connected, how many PCs are in the network, how many PLC systems are there and so on. So this is in this case an overview of how many systems are there and where I will find it. You have here on the right side for example main cabinet, remote rack and so on. Also a PC client in the Ethernet or Ethernet. This is where the crew is sitting. There is an extra monitor. You have clients on the bridge, on the starboard side and on the port side. For example in the captain's cabin there is also a connection so that the captain when he is at rest he has also access to all of those systems. And this is one of the computers that are connected to the monitors. And that are connecting or getting all the information from the PLCs for example. And here on the right you see also a big silver thing. I am not sure if my mouse is here. So this device is the network connecting. So in this case the complete PLC network is separated. I have seen also some other ships where this connection is active. So this owner or this crew has decided when we don't need it we pull the plug to the normal network so nothing is connected on that side. Very good decision. And when they need remote assistance then they put the network cable into the normal switch and then they can give a remote access for the maintenance people that they have remote visibility or maybe can do some remote tasks on that. This for example is one of the racks where the complete PLC system is. So this is a full rack of Siemens PLCs with all the subunits of that. And here you see some kind of fuel tanks and how many fuel is in which tank and also you can access all the valves for the fuel tank that you can pump fuel for one tank to another one to balance the ship with that. So this is an HMI unit for example. This is one area where you maybe have to open the door for the garage or for the bus platform or whatever. So there are some HMI units also for that. And this is from another ship. Even here you see the main PLCs, the rudder, the ECR and so on and also some other connections where we connect together. So here you see already also a serial connection where the sensors are connected and also the network layout of that. So this is then a different system, a different ship with different view on the things but in general they are doing more or less the same. Here we have other systems. Here is more or less ABB stuff connected. Here we also have KNX for the light controls and so on. So this is one of the connection boards where everything is connected together. So this is from the electrical point of view one of the nice things. This is another bridge, under the bridge or behind the bridge you can say. So the bridge panel is on the right one, the brown thing and on the left one the open thing that you see here with the wires that is from the PLC network and you see in the middle two network devices that belongs to the bridge network. So that we will have a closer look at it later. So this is then also the connections where another REC is with some PLC stuff and connecting the information from the systems. And here we have another connection system. So everything is connected over Ethernet together. What kind of attack records we have there. So this is a network diagram that I have wrote or painted. And I think I have to adjust it a little bit because there are a few things that are missing when I don't get it. But in general we can say we can attack the systems over the internet for example and we have access to the internet router. In my last year talk I have shown how to bypass authentication for example on an internet router model with the vulnerabilities there and also on the satellite systems where I had also access over the satellite modems to the network. Of course you can plant malware on the crew PC's or the captain PC or the owner PC or whatever then you have access for example on that. The personal digital assistant devices of the crew or the owners is also another point where you can plant malware or where you can start with your attacks. And another interesting point is then once you have access on the internet side you have to dig for a gateway for example the enemy gateway. So the enemy gateway is often a B-directional gateway. When you have access to that gateway and can plant enemy messages on that device you can interact also with enemy messages on that. But yeah these were points of my previous talk. And on the PC network itself you have a couple of other attack things that you can do. Okay the bridge. We have seen already a couple of OT pictures. Now we look a little bit more on the bridge. So this is a bridge from a 70 meter class. You have seats for two captains but only one rather in the middle of the ship. So two people can sitting there and doing their job. And they have access to a couple of systems and monitors that you can see here. I will not go in detail on the systems. You have the OT monitoring devices. You have all the normal things to operate the ship. And you have the navigation things that you need there. Another side view of that. So it looks very nice there. It's a good place to work. The view from front from the night. So it looks a little bit like a Star Wars ship. I love that view. This is from a 45 meter yacht from the interview. Here you have only one seat for the captain. But also a couple of monitors you will see here. And where you will find all the necessary information to operate the ship in a safe manner. Here on the left the monitor is already switched on. I switched on the actus so that I can test some devices. Later I had also the S-band and X-band radar on. So I switched on only the system but it was not transmitting a radar echo. So radar in an hour is not a good idea. But you can switch on the system itself. But it's then in standby but you will see then the network messages. So that's my working place when I'm looking at the yachts. So it looks nice but sometimes the AV is not on. So you have not that cool temperature there when you have outside above 30 degrees. Sometimes the climate control is not working. So it becomes hot on the bridge when they do their tests. But in general it's a nice place to work. I love that kind of audits. So this is an overview that I found in the actus installation guide. For example from the Tranzas and Navisaila MD-4000. They have a nice overview about that. You have here two screens on the left and the right side. And they are connected together so you can switch from one actus to another. And all the information you can also switch. It's in the documentation. You can find it the link I have put in my slides here. So that you can put a look in. It's more than 200 slides presentation for that. But it's very nice to read because that is very detailed. There are also, you can say, how the datagrams are configured on the network. That we will need later for what our sharp module is. Here we have the network diagram in an overview. And here we go a little bit more detailed in the DCU, the battery pack, the UPS. The keyboard, the monitor and the computer system itself. And what kind of connections you have there. Where this is going. For example you see the S-band radar connector. There is some special board for that. There is another picture of that. Here we have the X-band and another one is the S-band radar. How it is connected. In reality it looks a little bit more crowded like this. You open the cabinet and then it looks like, wow, sometimes a little bit like a mess. But yeah, it is working. So this is from pictures from the... I must say it's the 30 meter yard. Yeah, that's from the 30 meter yard where I made my first audit there. And got the recordings from that. This is then the PC. That's for the navigation system. So you think you have a navigation system with the electronic chart system. So in general it is a Windows computer. Windows computer with Windows software where you have your digital navigation charts on it. Where the navigator is navigating through the sea. That's it. It's connected with an app and so on. But when you now think about, okay, let's do an end map scan on the bridge network. I say, think twice about it. It's very legacy old stuff that you sometimes have. On the 30 meter yard where I was on, it was a transit system. The ship was nine years old. And the transit system at that time was a Windows XP embedded system. And you can imagine nine years not connected to the internet. No patches, no updates, nothing. And it's still running. So that was the point for me. Okay, I don't make an end map scan on that network. I passively connect to that and to see what's on the wire. So I take in this case my Linux PC. It's a Kali Linux in that case. And my configured my network interfaces to passively monitor the network. And later we will look a little bit deeper in that how it is looking like. So on the left you see my laptop connected. And the biggest screen is already one of the data grams you see there. I will come later in the wire plan demo where we can see a little bit more. Then we have the active system itself. So the active, it's the short abbreviation version of electronic chart display and information system. In the past we had paper charts for navigation. We also will be using a sift stand and a compass and whatever. Compass is still there. GPS is also there. But we need also electronic charts. So it's called ANX. So the thing is under the IMO regulations it is now allowed that you don't need any paper charts anymore. So unless you have two active devices, independently active devices, active devices. So two active devices does not mean that you have two different active devices. So when you update one the fail and you update also the other one. The failure will be on both of the same systems. Also they are connected in the same network. When maybe an attacker is able to attack on a network area, the devices, they will most likely be successful on both devices. But you need two devices and then you are fulfilling the requirement. So it's a graphic information system for the navigational navigation of the ship. So you have to position heading speed. You have also deep information about the waterways there and also the waterways itself. And you can have overlays on the active system from the NAIDA, from NAVTEX, from the AIS system and so on. So the active system is more or less the main navigation system. And you can have as an overlay, as an additional layer on top, all the other systems like the radar or whatever. What you need. This is then a picture of the active system and what it looks like. This is in the port of Barcelona for example, where you see where the one ship is and all the other ships are also. These are here the small things here. They are laying in the docks. Here is a big cruise ship and here is also another cruise ship. And you have also the waterways how to travel into the different areas there. And here the transars from the old system from 2011. You see here it's a Windows XP with default credentials because it's not connected to the Internet and never changed it. So it's a Windows XP system and the login name are as in the documentation of the system. So people installed it and it's working like that. So nobody takes care about it. So it's more likely when you have access to the network of it or accidentally someone connect the network to the other networks. Then it would be not so good idea. You can have also access on the active to all the enemy messages. There are special Modi where you can look at these informations. But these informations you will also see on the network. The enemy data is like that. So two weeks ago I did the last audit on a 45m yacht. And I was connecting then also to the network and then I found nice information. One of the things what I do mostly is then sniff all the data and then using at first the statistical diagrams. So to get an overview who is talking with how many packets are going to that. And then here in this picture you see there is only one public IP address. And it's only six packets in that time frame where I was scaling. So in this case it is a furuno active system. It's not a transas, it's a furuno. So transas is the major player. Furuno is the second biggest in that area. So it doesn't matter. So technically they're doing all the same. These internet connection paid my attention. And then I was looking so wow what it is. It's going to the address. So I used a filter to look up and it is an NTP protocol. So the active system is connected to the normal network. And then it makes a network time protocol call to an NTP server and the internet. Why? So why it is? Why should the bridge network connected to the internet? So normally it makes no sense. Especially not to get the network time from the internet. It could be accurate but what is when the network is not available. And we have GPS systems on board. So why don't take the GPS time as the time source. So I then introduce the captain. So hey, just take a network time protocol server. It's a small box. It gets the time information from the GPS system. And it's then acting as an NTP server. And then you can say the active so okay this is your NTP server. Take the time from that. And at this point you don't need internet connection anymore. Yeah, SATCOM is another thing I had in my last talk. A couple of vulnerabilities in. So yesterday I looked up some systems there. And there are still a couple of them online. Why SATCOM? So you have offshore internet access via SATCOM. Patching mostly not. And still many old versions are online and out there. So technically it's a satellite antenna dish on top of the ship. With an ICU unit for that. And then under deck you have a computer that's connected over. And then a media exchange protocol system. Then to the ICU. That's simple. It's a little bit more complicated but yeah that's how it looks like. You can look on showdown for a couple of satellite dishes that I will not be able to think. And yeah the thing that I found was in co-op MCTEL systems in the MxP web server. And yeah this is the first thing we use it. So this was 2018. I had then 21 online. So at that time I was thinking okay there are a couple of them online. But not that much but I find out the reason why it is. I will explain later. Yesterday I looked up there are still 19 online. Not really 19 you have here on port 80-15 devices that are still accessible. Why not more? Yeah also showdown had a live ship tracker. So all the systems that are connected over VZ. We are available over the ship tracker.showdown.io. But showdown has decided I don't know why. But yeah it's okay to switch off those systems so the ship tracker is currently not anymore there. So then I was thinking okay why not more set devices are in the internet to find. And in my last audit I also found out that depending on the VZ provider that you get. They will using a network address translating IP masquerading they are using. So you have a private IP address on your modern device that's connecting over the satellite. And the internet provider over the satellite is making the connection to the internet. So it's hiding all the ships that are using the VZ to the internet. So it's a good decision yes. But on the other hand it's shifting the attack level from the bad guys in the internet to maybe bad guys at the internet providers. So the internet provider has still the ability if they want or if they have to do by what kind of government. They maybe have then access to the ship network over the internet because of the vulnerabilities that are still there. So yeah the device is not visible to the internet. And it gives the owner or the crew a deceptive security because my device is not findable over the internet. But yeah they are still there and the provider could exploit it now. Or someone else who is working at the provider level. And most of the devices that you find also using always the same default credentials. So install it and change it. Yeah coming more or less to the end of my talk. Yeah I show a little bit more on wire shark demos now. But all of my tools I will publish on github also the decoders later on for wire shark. So I'm working on now to make some kind of ectis decoder for the data runs that you have to see. Because in wire shark it's very hard to find out how this looks like. Let's have a look for that. So we have wire shark here. So this is from one of my first network audits. We have here many UDP protocols. So what you see I always use the statistics. Let's look for the endpoints for example. And then you see no magnifying here. You see then here the connections. But that's okay. So the thing that you see here is that we can make bigger. Most of the informations are UDP. So the ectis is working with UDP broadcasts. They don't care about and acknowledge if the information is done. It's more or less in real time traffic protocol. Yeah you can say. So each device is broadcasting their information as in UDP broadcasts on the network. And the design of the protocol is then in that. So when we look here for example for the UDP stream. Then you see here a couple of information. We have to wait. I picked one of the biggest. This is how it is looking like that. But you then see here the NMEA satellite GPS information. So in this data gram it's 462 bytes. There are the GPS information that the GPS receiver for example gets. So the thing is now to write in the code for that data here. That you can make as an wireshark plug-in. Information is more invisible like that. On the other hand I have here also another network from the Furuno network. It's a little bit more readable. You see already something from the AIS system in that case. You look up and here you see a couple of error messages. There is even channel 2 male function TX male function external EPFS lost and so on. So at that time when it was sniffing on the network. There was an NMEA network gateway that was 40 and a couple of messages are missing. So also you can find errors by analyzing those protocols. And the idea to provide a filter for that. And also at the Furuno network everything is here in UDP broadcast. Do I find another nice one? This is for example an AIS message. Male function message. Another one. Here we have GPS information with the coordinates and so on. Okay let's switch back to the presentation. Once I have it ready I put it on my Github in the Maritime channel. I have a couple of other sections there. You find some X-ray pictures from devices. IoT devices that I analyze and so on. Feel free to look at it and so on. Coming to the end. With my content details I have to say thank you for watching my talk. And have a nice DEF CON 28. Stay safe and when go out always wear your mask. Goodbye and thank you.