Okay, and now for something completely different, I'm afraid. Thank you both so much, it's been absolutely wonderful, I'm really pleased to be part of this panel. I'm going to be talking about literature, so again, a huge step, it's a lovely variation that we have. I'm going to be talking about Mary Shelley and Percy Shelley, who are the focus of my research and I'm particularly looking at how they write together and what collaboration and literature is and how that works. Just to kind of introduce you a little bit, I'd like to tell you how I met the Shelleys. I discovered Percy Shelley when I was 16-year-old in Dublin and I bought a little volume of his poetry for two euros, got to be the best two euros I've ever spent, one because of the richness and wonderfulness of his poetry and two, it's brought me here, where I am now, and it's a huge study of my life. And then it was several years later, got to be good five, six years later, I came and decided to do an undergraduate degree and I discovered Mary Shelley, who I'd never read before, obviously everyone's hered a Frankenstein, but a lot of people haven't kind of read the book and I read this book and I thought, this is wonderful and this is the wife of that poet that I love so much and I went to see one of my lecturers and I said, I love this poet, I love this novelist, I want to read a book about them, what can you recommend to me? He said, I don't think there is a book and he paused and I can absolutely remember this so clearly and he said, you should write that book, it's taken me about ten years, but I'm on it, I'm on it now and I sort of tell this story, it's kind of anecdotal, it's kind of how I got here, but it's incredibly relevant to what I'm going to be talking about today, about what inspires us, what makes us write things, how does anybody ever come up with an idea in the first place? So where are not all literature students? Why not? So let me just briefly introduce you to my two subjects. So first of all, we have this handsome chap, this is Percy Bush Shelley, great romantic poet from the early 19th century, has sort of written some wonderful things you might be familiar with his works such as Ozymandias, Ode to the West Wind, Montblanc and some of his more kind of larger, more esoteric works such as Prometheus Unbound and this is his wife Mary Shelley who is obviously very famous for writing Frankenstein, but also has written some really wonderful, some other wonderful novels such as The Last Man and Valperga which are less widely read but utterly loved by those of us who are Shelley scholars. So they met, they were both very young when they met, he was 21 and she was 16, he was already married, but they fell in love within about two weeks, ran away together and had the most extraordinary eight years together before his death and it's in those eight years that they both write their most famous works and I found it absolutely amazing that people aren't studying these two writers together. I mean you look at somebody like Percy Shelley is often studied with other romantic writers like Byron and Wordsworth and Coleridge and everybody's thinking oh what are the similarities in their works, what are the differences, how are they inspiring each other, but he's not often studied with the woman who he was with not quite every day, nearly every day for eight years and who literally had her desk next to his desk and they're writing the great works. The subtitle of Mary Shelley's Frankenstein is The Modern Prometheus and one of Percy Shelley's works I've already mentioned is Prometheus Unbound. I mean this is crying out to be looked at, why hasn't this been done? And it's very interesting why it hasn't been done. Very briefly there was a long period through the 19th century when people didn't really look at women writers and that's thank goodness something that we're trying to kind of make up for nowadays sort of rediscovering these romantic, these female romantic writers. So it's partly kind of making a gender redress but partly I really want to get over this idea that people write things when they're sitting in a tower by themselves and inspiration comes. That isn't how writing works. I've spoken to so many writers, I'm a writer myself, obviously here I am and I know that I wouldn't have done any of this by myself. So to illustrate this I'm going to take a case study and that's the story of Beatrice Chenchi who is a historical figure from 16th century Italy who both of the Shelleys engaged with and I'm going to look at sort of how they have very briefly to look at how they've sort of engaged with her and what their dialogues might have been around her. So they first come across this manuscript. So they moved to Italy in 1818, they lived there for six years. Excuse me. They're given this manuscript by a friend for those of us who don't speak Italian. It's basically the relationship of the death of the family Chenchi in Rome in May 1599. And it's an absolutely brutal story, tragic story of this real family, this tyrannical father. Rather amazing this document relates his crimes as atheism was the worst of his crimes and sodomy was the least of his crimes. Most of my friends fall under that category. It's a significant number and it doesn't mention what I think we can widely or all very widely condemn which is that he was a murderer and a rapist very very widely so and his absolute most horrendous crime was that he raped his own daughter who was Beatrice Chenchi. She then appealed to the authorities telling them what had happened and nobody wanted to listen because he was very wealthy. He was giving money to the state to the church and nobody was listening at this time. And ultimately she was executed for that crime. It's an absolutely tragic story. And so they heard about this story. Maritime Percy Shelley, they're in Italy and they hear this story of this Chenchi family and of this poor girl Beatrice Chenchi and straight away they see its dramatic potential obviously. So this manuscript is given to them by a friend who owns it. It's not published, it's just handwritten 200 year old manuscript and they've just arrived in Italy. Mary Shelley's well I'm trying to learn Italian. May I please have a copy of this and I will translate it and give it back to you. So she makes this translation and it's very interesting when we look at the manuscript and I've been doing a lot of going back and looking at their manuscripts. You can see it's not just her writing. Every now and then Percy Shelley's hand creeps in and he adds a little note.  Maybe the blank's a bit too long and then he's come in and left supplied a couple of words. Usually they're more difficult words. So there's an example of a kind of tree, there's an example of a kind of torture, not words that you're going to come across living in everyday Italy. So it's obvious that they're working together on this project, leaning over each other's shoulders. What's this word? What's this word? So you can kind of build a picture up of them. Sometimes you can see them using, they're obviously using the same pen because you can see from the flow of the ink it hasn't been changed and they're literally, he's taking it right out of her hand and adding something in. It's really very lovely. So they're inspired by this idea and perhaps Percy Shelley is really excited about it and he really wants Mary to write a play on this story. She's just published Frankenstein. It's been very successful. Even already they can work out, they can tell good reviews are coming in, a bit of money is coming in. To give you a little bit of context, Percy Shelley had published quite a lot of poetry, quite a lot of pamphlets and they weren't doing particularly well. He never got the recognition in his lifetime that he did just, I mean just sort of 40 years after his death he was already very widely appreciated. So he never really got that that praise that he really deserved and also everything he was writing was poetry. He tried to write a bit of, a bit of dramas here and there but he always abandons them. There are all kinds of wonderful fragments in his diaries of things that he started and he always wanted to write in the moment. These are all the things I can see and feel and experience but kind of struggled when it came to plotting something. So he said, Mary, this is an amazing story. You have to tell this poor girl's life. You should write a play or a novel. And Mary's, well actually I've got quite a lot to do, thank you, I've got my own novels to work on. But after a while she starts to write a novel and this is a novel called Matilda which, well, it is now called Matilda. She gave it a different name at the time. It was never published in her lifetime. And I think it has a chance she has a starting point. It goes somewhere very different because she writes about a father, daughter, incest. But it isn't an brutal, aggressive tyrant. It isn't someone forcing himself upon her. She's basically asking the question, what if a good man fell in love with his daughter and he doesn't do anything, he doesn't in any way hurt her, he's just tormented by this love that he feels but he can't express. And so this whole story is, it's a really wonderful book and incredible look at the inner life of a man who can't deal with himself or what he's feeling and then how his daughter ultimately comes to feel tainted by the love that he has for her too. Thoroughly recommend reading it. So she starts to work on this but what happens a little bit later? It's a full year after they've read this that they're in Rome and they see a painting. And this is a painting. And this painting at the time was believed to be of Beatrice Chenchi. Now we've kind of, we've worked a few things out that it probably can't be. But at the time, as far as they were concerned, this was her. And it's really wonderful looking at the things and Percy Shelley writes about this painting so eloquently. He would come and stare at it for days. And he talks about the sadness in her eyes, the melancholy and the lusterless. He says somehow they've lost their life, but they're still looking at you. And with this, it really, it revived their interest in this story. And I think, I mean, I think you can see why I think it is an extraordinary painting and you can really kind of get lost in it. And the story of it was that this was actually painted before her execution. So she is in prison waiting to be summoned to the execution. And Percy Shelley was so inspired about this. And he writes, he writes all these letters to his friends saying, it's an extraordinary woman. And you can see the dignity and the sadness in her face that she had no way out of this horrendous situation of this abusive father she couldn't get away from. So she took his life. And there was no sympathy, no one there to kind of offer her anything. And he goes again to Mary and he says, I know you're writing Matilda, but you've got to write this book. And it's really interesting. I'm kind of summarizing these things here. I'm putting these bits together from bits of her notebooks, bits of her diary, bits from his notebooks, and bits from his letters. They don't spend enough time apart. It's really frustrating. They never write letters to each other. Every time one of them goes away, it's wonderful. You can write and tell us what you're thinking. But in the letters, we see these little hints. Oh, Mary, do have a think about that. Do try this. Make sure you bring a few pages of this when you come to see me.  And she says, no person, you should write this play. And it's wonderful. You can see the moment in their letters where she says, no, this is something you've got to do. This is something you feel so passionately about. And you've got to write it. And he again and again says, I can't. He writes to a friend saying, I thought about writing this play, but you will say I have no dramatic talent, and you're absolutely right. I don't. Again, he talks to Mary and says, you have the superior talent here. I think that's interesting because a lot of people think of Mary Shelley as being the younger one, the one who didn't know what she was doing so well. He definitely looked at her as being the greater writer. And at last, he does start to write it, but he writes it with her. She organizes the scenes. And we know this from the notes that she writes long after his death. She says, how did they sat down? She helped him to organize the scenes to plot out the whole structure of the work. And I think it's really interesting that when he finally decides to write this, he turns to her. He says, you are the person who has the ability to make this. I can write the actual text. I can bring in the images. I can bring in the characterization. But you need to structure this whole story. And it is a wonderful, extraordinary play. Wordsworth said it was the greatest play of the age. And I'm inclined to agree with him. There's further use of Beatrice Censci in Mary Shelley's writings. She talks a little bit about, in her third novel, Valperga, which is set in 16th century Italy. She has a character called Beatrice who does a lot of what this character does and has a lot of similarities to this person. I think she's definitely drawing on it, even though she didn't decide to do that play exactly, as it had been suggested. She's inspired by it and takes that on. And now this is just, this is one example of numerous, numerous ways that the Shelleys do collaborate. And they do kind of, I'm talking here about a collaboration of influence, but I also see collaboration, events of collaboration, actual textual, where they're supplying words for each other and helping each other kind of come up with ideas and structure their works. And I suppose it is clear they collaborate. That is a thing that I think I can now say with absolute confidence. And I suppose the question I often get is, well why does that matter? It matters because in the historical context women have so often been written out of history. Women's writing has been ignored. And the amount of books that I have read that say Percy Shelley was a great poet, his wife is intimidated by him, she wrote a little novel. And that isn't the representation you get when you actually look at their letters, when you look at how they refer to each other. And also it's, they didn't come up with their own ideas. A great poet like Percy Shelley, a romantic poet, you do think of him wandering through a wood, writing as he goes. We have these romantic ideas of what a writer is and that's just not true. If I think about all the people who have helped me in this and this work is, it's structured as a novel. I've come a long way and on Mary Shelley's advice I've turned it into a novel. If I think about the advice I've gotten from my supervisors, from the friends who've looked over what I wrote and said, oh change this, how about this? If I think about what I'm reading from Mary Shelley and most of all if I think right back to that first lecturer who said you should give that book, right, give writing this book a go, well it makes a lot of sense to me that these things are collaborations. So in conclusion we all write together and also you should read Mary Shelley and Percy Shelley if you don't already because they're wonderful. Thank you very much.


Hi everyone, Joe for Jaspy's casewrakes.com coming at you with a mosaic choice baseball break one boxer random team number 19 Giving away eight flawless random team spots. That's coming up in the next video. This is last filler. The only the only filler Think the only filler we have had to do for this. So nice. Thank you everybody big. Thanks to this group for making it happen We're gonna do the break first for the first dice roll second dice roll will be the giveaway dice roll Let's roll it and randomize it four and five nine times for names and teams one two three four five six seven eight And ninth and final time Four and a five nine times for the teams one two Three and ninth and final time Got a red socks no trade windows and filler breaks as many of you know by now Just in case you're new or as a refresher There's the first half of the list right over there second half of the list right over here and let's Let's print and rip two autographs right there Got a silver max freed Jack Flaherty Dalton Varshow and a couple rookies here as Seiya Suzuki And Matt Verling your two autos behind Yachty first one is Trevor Story Red Sox that's gonna be for for Michael and the red socks and the second auto is a rookie auto Louise Gill Louise Gill gonna get some work early in the season. I feel like the Yankees have a couple Like there's a there are a couple pitchers down No, he had Tommy John surgery back in May of 2022 I see Maybe we'll see him at some point in the season though. Let's hold on to this one Yankees that will be for Chris and the Yankees Got the Yachty right here as well. All right now. Let's see who's gonna win these flawless spots Let's go back to the list. Let's gather everyone's names again from one through 30 New dice new list and it will be the top eight Top eight after this dice roll top eight after three Good luck everybody one two and three So from nine on down is going to be sad times Sorry Dylan very close, but just not quite Nine through 30. Thanks everyone. Thanks for giving this a go But only the top eight can get in and that's going to be Jackie. You're in Jeremy is in Nico, Nicole, Jackie, Nicole, Chris And Russell happy time for the top eight Uh, thanks for giving it a shot everybody. I'll see you in the next video for the break itself. Jaspy's case breaks.com


So, like I was saying, I guess I kind of gave away the answer to the next question. So let's try to figure out how many secrets there are in each of these numbers. Well of course, like I said in the last problem, the difference between something that has trailing zeroes without a decimal spot, a decimal point, is going to have those zeroes as being insignificant. So this is going to have the one significant digit and the two zeroes are insignificant. But, if we put that decimal point there, then that makes all of those numbers significant. So that's a three, right? And then here, leading zeroes are insignificant always, until the first non-zero number, you don't have any significant digits. So, zero, zero, zero, insignificant. In fact, there's a better way to express this. We'll talk about it. It's called scientific notation. But anyways, this is a good problem because it's got leading zeroes, captive zeroes, and trailing zeroes. So the captive zeroes, like we said, always significant, yeah, always significant. And trailing zeroes are significant if they're after the decimal spot, decimal point. So, what do we got? We've got one, two, three, four significant digits, okay? So, make sure to remember that because, of course, this will be necessary to use in all of your calculations subsequent to this point.


When we launched the jobs plan in 2011 we were 9th out of 10 province when it came to creating jobs and since then we have become number one in the country when it comes to job creation. So when we say 191,000 new jobs I think about 191,000 new opportunities for people to get better jobs or to start at their first best job or to find their way from welfare into the workforce and all of those things I think really matter. Thank you to Dark Vision because what they do here actually is really important work. It's an example of how we can join technology with our traditional industries to make both better and this business is making oil and gas more efficient, more environmentally sound. It means that they're able to work better, smarter, keep British Columbia and Canada in the lead when it comes to oil and gas and at the same time they're creating high-paid, high-knowledge tech jobs right here in North Vancouver. Today is about looking at the success that we've had and about laying out our very well thought out plan for the future and we know that while progress has been made we want to make sure that every part of British Columbia feels those benefits. We live in these very turbulent times and that's I think meant that rural communities haven't had all the same opportunities that urban communities have had. So we are going to work harder to support rural communities. We want to give people the chance to create the kinds of lives that they want for themselves and the kinds of opportunities that they want for their children and saying no and waving the white flag when things get tough are not the ways to get there. We want to get there by saying yes, by finding solutions, by setting out a plan and by sticking to it.


you're at hotacking health hotel keys and point of sale systems you guys see the slides all good and everybody hear me good perfect perfect so uh western hecker I'm gonna be hacking hotel keys and point of sale systems I had backup videos just in case if anything went south so yeah funny story uh starting out a little bit uh after I go through a little bit about myself I do a lot of talks uh did Hope this year did uh Black Hat uh this is my third year def con it's a privilege to speak here so yeah basically do pen testing for living uh do a lot of research on the side I'm uh ATM enthusiast and like some of the other stuff I just like playing around with like technology so I got a couple side projects um I was working on some car hacking uh point of sale system hacking hotel key hacking and uh just exploits in uh property management software so but uh funny story uh so when you do uh uh hotel hacking talk at a hotel it usually involves the staff uh pulling you your PR person and your boss aside and taking you into the battles of the hotel and I've seen casino one too many times because I was a little nervous and uh you know so but it was something where it ended really good they just wanted to know if they were uh vulnerable to this attack and it is not uh they tokenize their stuff they did it set up properly they follow the best practices so you guys this hotel room keys are safe uh and all this users properties so I just wanted to throw that in there so so I'm gonna explain uh the actual Max uh Max Booper which is a semi camcars device uh this one's a modified version of the Max Booper uh this one is not the one that is set up for brute forcing uh but I do have the demo of the actual brute forcing going on and then we're gonna actually uh infect this point of sale system with malware using a human interface device injection so and uh yeah I'm gonna explain a little bit about the point of sale systems and the actual uh process of how the keys are actually made on some of them that rely on night audit and batch services uh they have to do some very insecure things to make sure that their database is post and they get charged so uh I'm gonna do uh privileged uh show you how the privileged attacks work uh fireman keys uh service keys things like that so and it's uh yeah some of it's uh I thought it was a pretty duty heavy encryption of some kind and uh some most of it's just uh encoded so they uh definitely skips some steps and the point of sale talk it's gonna uh go from how I led from doing hotel research into actually attacking point of sale systems because like the I don't know anybody else when they saw Sammy's video like they thought of every single thing that has a uh mag strip reader on it as now an attack surface and I just want to give him a shout out because that was uh an amazing research and he uh saved me many many hours of reading manuals so and yeah I'm gonna basically go through how it uses the mag strip readers uh whether where the fail was in that and uh I'm gonna actually go with triggering events on the readers and see what it's listening for because some of the newer uh point of sale systems like they will only power up the reader when X happens and uh I actually have a tap that you can attach to uh uh bypass some of that stuff so and I'm gonna go through some of the management uh cards root forcing management cards you can actually you know do refunds stuff like that so you can actually refund to other credit cards uh using one of the other attacks so or yeah I was it was one of those conceptually doing and it was uh it would have been a pretty decent attack because I never knew that you could actually refund to a credit card that it wasn't originally charged on and that's something I came across while doing some other research I was doing this year so and yeah so I'm gonna do a cash tend check tend attack so that basically uh when you inject the F8 key it literally just pops the register open and I'm gonna go over that in a little bit here so because everybody pays a check still right so yeah and attacking OS injection I'm gonna do a pop a command shell and then I'm also gonna demo a drive by attack as long as the 4G holds up so I might have to get Steve Jobs on you guys have you turned your phones off but no he should be good so I did a 4G working earlier so and uh some of the uh actual restaurant attacks and other mag research like some of the rewards programs uh I wrote a one version of it where it cycles through 10 cards so same as some of those places where you can collect points they're on to employees you know just giving the points to themselves so it actually cycles through like 10 accounts and I'll go through that in a little bit here so I'm gonna go through uh who in the room knows what a mag spoofer is who's built one they're fun they're they're very fun things to build and uh yeah so basically uh you guys can see they're they that's what actually happens if you put iron oxide on a credit card it's gonna actually mag it has a little magnetic uh field to it so that's when the actual card is swiped through it's actually generating a magnetic field and speaking binary data so one zero is things like that so basically what Sam McCamp card did was he actually you know built a version I think the uh patenting all goes back to like 2008 with the loop pay which is the system that was bought by Samsung and so basically you just need all you need to know is that there's a EM field being generated that is the same uh pretty much the same uh some of the timing is different uh but as far as that goes when you swipe the card it's basically doing the exact same thing so it's able to speak to magnetic head raiders uh using a small little uh mag spoofer so and uh how's the yeah it's scared of mag strip transmission so it's like I said it's uh something that's been around since 2008 so back in 2002 and 1997 you know people didn't think that this kind of thing was possible so that's uh why a lot of these vulnerabilities um there's no reason that this keyboard should have a 102 key functionality that you can actually inject through the actual magnetic head raider so and yeah it's not it's not RFID um a lot of people ask me that like you know the hotel attacks like is it on the RFID um actual keys and no it's not it's actually uh basically turning a magnetic card into a wireless card so and yeah how do you handle the overheating so basically uh the first thing I did after uh uh got my first mag spoofer built it ordered all the parts from China waited like a week and a half and the first thing I did was burned it out because I tried uh injecting multiple cards I pushed like five or six cards and uh I did my first modification just to increase how many cards I could store in it and then I started actually you know seeing how many I could do and after about 18 cards uh it burned out so so I waited about another week for all the parts to come from China and yeah I basically made uh six six mag spoofers and one uh with a little bit of a controlled Arduino and then it has a 3800 milliamp battery instead of 100 milliamp so I think it's heavy duty I call it big bertha because it is just it's like huge coil on an Arduino so and I'm going to go into a little bit of what property management software is uh it's uh uh when I refer to it from PMS from now on it is not what everyone would think it was so it is property management software and that is something where uh it is actually where your folio data is everybody's you know seen the checkout where it says folio that's basically where the hotel keeps all your records uh it's how it actually you know what's to charge when they actually do the night audit process so when they do run the night audit it's gonna charge under your bank account nowadays like uh when they're properly proceduralized it's something where uh there's lots of security mechanisms that people can actually put into place so I'm gonna go into a little bit of explanation of what the actual uh proprietary card readers and the security behind the hotel uh so basically uh there is your folio number uh the actually the one that I found the weakness in was um after I uh unencoded the actual cards I read it and I raw using an MSR 605 which is a magster breeder basically read the raw data unencoded it and it was literally the same as my folio number and my room number and the checkout date so if you make an assumption that somebody's gonna check out in the next week uh your space just went down a little bit and if your hotel uses a very uh not very old process actually um they actually weaned away from it in 2007 2006 so if they do incremental folios and you're in a 50 person hotel it's not very big space you have 918 options in a 50 key or a 50 person hotel so it's something where yeah that's not many options to try especially with a modified mag spoofer you can actually inject uh 45 cards uh per minute so that goes through that space pretty quick so and yeah uh collecting the information as you can see the also instead of injecting full credit card numbers you're actually injecting uh just some of the track most of them is the track 3 data a lot of the track 2 data so credit cards are broken down into track 1 2 and 3 uh track 3 is the one that hotel chains use mostly so and if you've ever noticed you can put your card in upside down that's because that half of the actual magnetic stripping is only used so they only use a portion of track 3 and as you can see I put uh iron oxide on this one also and it just shows that it is actually not yeah it's not using the full card because I covered the whole thing then wiped it down and yeah so and that's one of the things too I travel a lot when I go pen testing so I have like an entire suitcase not an entire suitcase full of it but it's uh got about three layers of uh actual hotel room keys and I was always wondering what was on them so I just got bored one day and started pulling information off of them and yeah and there were several several of them um that actually were you know uh pretty easy to actually break the encoding on them because they were using uh non uh I was like I think base 64 but a little bit less because it was very very simple uh I wrote a actual script and then uh most of that script actually worked for like three or four different kinds of keys so I'm guessing that they're using the same PMS software so and yeah so how do you uh how would the bad guys go about uh interacting with uh say for example if you were gonna brute force that 918 space say uh Weston wanted to get into Hecker's room it's you know now I know the folio number I assume he's checking out in the next week I can actually go to an elevator or the pool area and it'll actually tell me once I get that uh when I get valid card numbers so you don't have to actually be sitting in front of the person's door which is kinda you know that would rise a lot of suspicion you know especially if you had to sit in front of his door for 18 minutes or something like that so the actual yeah that gets kind of creepy the guy in the hallway for 18 minutes so that's something where yeah uh I was like one of the concepts that was and with that was with permission on this property it was uh actually testing it out by the pool area and the actual uh hotel because uh I also found out how the floor restrictions in elevators work this way so so it's kinda cool like if uh somebody wants to go up to the 26th floor you can literally just change the room number it doesn't actually validate the folio on that so and yeah and as far as getting maid service keys um on that property that was on I literally attached my device to the back of the door and I did that from the privacy of my own room and people walked by it was uh you know just randomly beeping here and there but uh it was something where it took about 33 minutes to actually get a you know the domain admin of the hotel pretty much it was one of the maiden keys and you can literally want like it is crazy the amount of uh access especially with some of the service keys and uh I feel dumb for root forcing it because it was uh pretty much all zeros for the maid's keys and I'm sure you know some of the guys out there like that have been right away it's like let's start at zero instead of you know the folio numbers so it's something that once I understood that I tried all nines and that was the service keys and yeah so uh then uh some of the actual issuing um they issue a monthly so the folio uh once I found out that that was the way that they were issued it was something where I was actually you know pretty much able to do that so and yeah and uh a lot of the elevator and firemen keys like there's some states that are looking at actually uh luckily they're hid behind metal so there's no way people could interact with them you know so that's what I'm saying like uh that heavy duty mag spoofer it can go a pretty good distance so that's even if they're blocked off uh for law enforcement or firemen usage uh it can actually reach some of those so yeah so the I'm gonna go through some of the raw dumps uh some of the track uh the other facilities they actually use like say for example if you go to uh Theme Park they'll have on track one and track two they'll have other information um uh track two on some of the properties uh keys that I was looking at they actually uh basically had my name and I was like aw how am I gonna brute force you know names and stuff and luckily it wasn't validating it so and that's one of the things too is like I always wondered about that like how often you know because that's one of the things like uh people always heard news stories about personal information there's no personal information on any of the keys that I came across um the ones that I could could decode at least uh with the exception of like a name um and yeah that's to me that's not that identifiable I guess so and uh there are limitations to characters that can be entered um due to the limit limitations have encoding of the keys only uh once you introduce the mag spoofer you can actually start injecting some illegal characters which I actually found out when uh I was running pretty hot like uh cause I was actually uh measuring like uh how hot it could get before it actually started uh garbling the messages and stuff like that and actually uh some of the bit error percentages like if they would go through the roof if it started overheating and uh you know to actually figure out what was safe to run the device at and uh yeah there were some characters uh I'm guessing some bits flipped and that's what led me to believe that you know some of the research which I actually will be demoing at the end here too and with some readers they also yeah they automatically inject a return character after the card is swiped so after a certain amount of digits are entered um there is a way to actually uh stop that automatic return character so and I will go uh that's what the modified version of the mag spoofer only cause uh after it does like 46 digits it'll do automatic return character so and yeah other than that um you just need to know literally the your own folio number if you wanna uh when I was actually going to uh like actually uh breaking the encoding it was something where I actually you know just had to get my own key issued and stuff like that twice and um yeah that gives you a sample to go off of and you could pretty much uh other keys that are collected you know there's lots of them where they have the return things I didn't get those ones but I pretty much just got my own uh keys so so breaking the complex encryption yeah that was pretty simple you know I had to rent an amazon server for you know I literally just booted up my computer uh wrote a script uh yeah this one was actually this version of it was actually just base 64 encoded so that was kind of uh kind of irritating I thought it was gonna be a lot more harder on this one but and some of the uh kiosks I started uh playing around with some of that stuff and anytime you guys go to security conference that's always the you know first thing they shut off for a good reason for this kind of stuff so because uh this is a really good way to like issue your cards and uh if you're the bad guy obviously uh it's something where they will you know you're able to get like seven cards without being suspicious so because yeah unless yeah so so what led to the research after the hotel keys um that pretty much was my next step I was thinking everything with a um pretty much a Magrater on it is now a target so and I actually noticed that once I started buying some of these devices that they were generic hid uh hid and I done a lot of uh hid attacks uh human interface device attacks which are basically keyboards um with uh tinseys payloads in the past so it's something where now that I was uh looking at the attack service of point of sale systems it was yeah naturally the next step so so how does it use a Magrater this one up here is a 102 key keyboard uh generic uh human interface device and so basically anything you can type you can now inject through the uh magnetic uh head or card reader so and uh that's one of the things too it's like oh why not just hit the keys uh there's some of these things that uh literally like you know it's this long of uh text string like say for example I'm gonna be demoing a drive by attack because uh yeah point of sale systems are a little out of date sometimes so and I'm gonna actually go through um yeah some of these methods here in a second and triggering events like that's one of the things too like some of the newer ones they have actual uh uh you can test if they're being USB fed so that's something once they're powered on you can still do some of it but they have to wait for a trigger event or for the remote cable to be toggled so uh yeah so basically you can figure out when they're listening and it's not something where you have to uh you know tap into it you can literally just look and see if the green light's on so that's like one of the indicators of it and uh I would definitely if you guys want to start playing with some of this stuff get the MSR uh the little Magrater 103s I think are like 15 bucks so they're really really fun and you can basically dump anything you want to into a notepad and uh yeah so management keys that was one of the the biggest things too uh where I was looking for a really hard challenge and the actual first point of sale system I bought which uh was pulled out of a taco restaurant and it when it was disbanded and it was auctioned and uh yeah it came with a management key and that management key worked on the other two point of sale systems that I bought from separate lots so I was like ah there's nothing you know nothing deep you know crazy no techno no chain smoking it literally was just uh pretty much the same admin account used across uh several point of sale systems so now uh I'm guessing uh cuz I hope now you can't turn this off when you go out in the wild it's something where uh I started noticing every single point of sale system and I'm like I wonder if you know that key would work on that key would work on that and I actually uh one of my buddies owns a restaurant that happened to have one of those and yeah you can literally inject the uh actual management key into it so that's something that is pretty crazy and like you can mess with inventory you can throw off inventory you can yeah some of them need uh management overrides you know for some of the electronic checkouts and stuff like that so that's some scary stuff and here's pretty much uh which you guys probably can't read but uh yeah you get everybody knows how uh for the most part how keyboards work and I think we deal with them on a daily basis so we pretty much know all the character sets so quite literally anything that you can type on that keyboard that I showed earlier you can pretty much inject uh like I said sometimes you have to strip some of the uh uh auto return characters the enter characters so and yeah one of the first attacks I did uh was I saw the cash 10 button or check 10 button and that was uh injecting I was like okay I wonder how hard this could be so you know I started uh playing around with it and I was getting into the F F key functionalities and I was rolling through and testing it and this basically is like a way to like uh like for a bad guy to actually just walk in and literally rob a store they could literally just put this device on there and that's what kind of made it scary like it's you know now people can rob stores that way so with the F A key it's uh pretty bad and uh yeah behind every strong man is a strong woman as you can see I'm wearing my wife t-shirt so and behind every uh point of sale system there's an outdated operating system so and uh not every point of sale system I can't speak for them all but uh every single one that I bought or I could afford and that's kind of the way it goes um so basically what you're going to do is you want to exit out of the point of sale system and uh yeah the next step will be popping a command shell and uh injecting the payload and what kind of payloads would one want to run on a point of sale system uh I did a talk last year so I had uh a couple mal- uh memory scripting malware laying around and I was like hey I will see if I can uh load these on a page so it's gonna do one distribution and I uh tested it this morning so it's actually gonna do a drive by attack on uh actual web server that I have uh loaded so and this is uh it's a neutered version of it uh just talks to itself so it's not gonna actually be doing anything illegal and it's just gonna literally visit the web page and uh it has a vulnerable version of uh some software running on it and then also you can literally uh through the command shell cause most of them run uh uh deprecated operating systems some of them still functionalities that where you could literally just put URLs and uh download from pretty much any source you wanted so yeah like I was saying uh this is the payload that the bad guys would use um like the actual memory scripting malware so uh in the past you know people had to do these ridiculous supply chain attacks or they had to uh you know breach a vendor account and now it's literally uh you know the bad guys it'd be as easy as walking up to one of those point of sale systems and actually infecting it so and yeah and some of them are dev environments so like they're uh custom they have um yeah but they pretty much have their proprietary key functions they don't have a classic layout but they still have magnetic card readers in them and uh actually uh you know is expecting to have to you know map these keys out and do all this crazy stuff but uh they actually uh if they have the generic driver loaded they will accept the same key commands even if they don't have the keys on the keyboard so that was like another huge fail so but yeah as far as limitations of mag injection uh making a physical card attack limitation uh could you make the waiter do the dirty work could you like give him your credit card to pay and actually have him walk up and do some of that that's something that was kind of my you know next step after all this was kind of finished up and uh yeah that's um some like I was saying there's some illegal characters that you can't actually encode on to it so it wouldn't work as good but I think that um it's something that some people have explored in the past and it's uh definitely something that will be once I have some pre time now that you know all the talk and conference seasons are done with I'll do some more checking into stuff soon but yeah that was kind of the one thing too it's like you know how much of a payload could you actually put on a credit card soon on track three and uh yeah these devices are everywhere this is literally when you find a Huntsville uh when I was speaking at uh Tic-Town-Con and yeah these mags to breeders are everywhere like quite literally everywhere and uh one of these uh one of the other things that I started looking at it was like okay uh aside from being able to you know just pop the register installing malware that's not bad enough I guess actually attacking player rewards uh systems like say for example the whos ever played slot machines and like you just kind of were bored and just wanted to go back to your hotel room so you were gonna go play the twenty dollar slots or the you know fifty dollar slot and just get it done with that's one of the things like uh every time I went to those higher end uh slot machines people would always leave a card in there and I thought it was by accident at first like I'm like hey this person probably left their card there and I try to turn it in and they're like no the people do that because they try to squat points because uh some guy who is just literally you know waiting for a plane or something is gonna you know play twenty five hundred dollars with the slots and they get to collect the players rewards points so they kind of squat some of those accounts and uh that was like one of the attack methods that I was thinking of it's like now that you can eject magnetic data uh it's like you can you can squat on one of these devices and it's another one is like I was saying uh uh I think when I was in high school I worked at uh uh actual company that uh they had like a player's reward program and they they told me they're like yeah you can't use your own card people have been fired in the past for that so it's something where they're on to it and uh they'll actually have flags go off if more the same cards used more than once in you know X amount of time uh but some of the actual uh like grocery store chains or there's a certain electronics companies where you know every five hundred dollars you spend you get five bucks or a hundred bucks so this is one of those other methods like uh some of the rewards programs that actually be susceptible to this kind of attack so and like I was saying that one of the refunds like we can actually refund on to our prepaid card that should not be possible to happen especially you know if it wasn't our original transaction so and some of the times it has to post overnight but that was like one of my additional attack vectors I didn't have time to we know all the kinks on it but it's it's something that uh seemed feasible so and yeah and injecting into actual uh like what I was saying when you can actually tap into the remote signal uh as long as you hit the right wire uh you basically could overfill like prepaid cards like that stuff like that so so if a bad guy wanted to get an unlimited phone calling card he could be injecting his own card and having time added to it so and uh not only that but some of the you know gift store cards stuff like that so and uh some of them do lock once they have the original amount loaded on them so they're not reusable but the reusable prepaid cards that say reusable prepaid cards on them you know those are the ones that obviously they would attack after so and yeah like I was saying um these actually triggered events attacks uh so you have to sniff out the actual uh powered up readers like some a lot of the modern ones they don't actually they send a remote signal that here there's a transaction going on or hey we're going to do some kind of interaction I don't know if that's because of this kind of attack or if it's just because uh you know they kind of uh looked into the future of what people might actually be doing at these and it's not a good idea to have something uh not only powered on some of these things are low energy so yeah it's something where you can actually uh for some of the rewards programs also you have to hit the enter key to accept that it's your account so yeah that's one of the things too I was wondering if you know if it would be possible to actually inject that so and it uh on the actual point of sale system that I tried on that it worked perfectly because that's one of the biggest things is uh there were customers always stealing people's uh you know points uh say somebody didn't have a rewards card they were actually letting them inject it so yeah and uh who's ever used a clock in system yeah who would that you can never be late to work again now so yeah that's one of the uh uh as far as the hardware goes I bought like a hotel key for the back door I bought a couple keyboards I bought a couple point of sale systems um and I bought a clock in system and uh a lot of people going to the fingerprints or some of the actual newer method ones so but yeah this is one of my last attack surfaces that I actually looked at so and yeah I'm gonna go over the uh video of the brute forcing uh it was on uh there's a couple of times when windows uh stuff popped up while I was actually doing the demo like when I did the video so uh there was actually windows 10 upgrades because it was like a fresh install so that was uh I lost my original driver disk for my uh MSR 605 and I had to download it from an untrusted web page so if you guys wonder what the dialogue box is popping up all the time I'm so and I'm also gonna go into the uh installing actual credit card skimming malware off of a web server as long as the internet is still working so and if not uh you'll still be able to see that there are injections so and I'm gonna go set up the demo and while I'm setting up the demo I'm actually gonna uh if people want to step up start setting up to the mics too you can ask questions while I'm doing the demos so yeah thanks for coming it's stay legal and I'm uh gonna go into the demonstration portion right now so have you mess with any of this on uh airplane mag readers on the back of seats did you uh mention uh if I messed up with them on airplanes on the back of seats you know how they have the mag readers to like yeah I've uh I've learned from other people that have messed around on planes that it's uh it's not usually uh one of the things you guys want to do like some of the I saw that mag interpreter and I even felt bad like taking a picture you know of an MSR that was on the keyboard thing so yeah I haven't tampered with planes in here and I hope everybody knows that because yeah that was like one of the I see I saw I've seen those and I thought the exact because you can't once you start doing this kind of stuff you can't like turn that stuff off so yeah how about the uh like the new like square and the PayPal and all yeah yeah the uh some of the I had a some original and right now it's actually and I'll come back to question uh some of the square readers and some of the remote ones yeah a lot of the and that's not a vulnerability in them it's anything that uses a mag strip but yeah quite literally everything that is affordable that is a mag strip and I've bought and injected stuff into so so yeah yeah it's pretty pretty crazy that's I'm saying like if you're making your own payment you could be you know presenting a different card I see where you're thinking that's some clever thinking so but uh basically right now it's actually injecting the the folio numbers and I'll roll the video back here a little bit and there's the first windows hand upgrade and if you guys want this video is online on uh YouTube already so and so basically I'm gonna read the raw data because it has like I said it has uh custom encoding so you have to have a specific reader to actually do the and uh you're gonna be reading the you have to switch it to high-co and then read raw so yeah there's the first transaction and then it's actually you can if you can't see on the actual video it'll show cuz my phone wouldn't focus but it's actually uh some of the numbers are changing because it's rolling through the actual folio revisions they have the same checkout date so it's like the end of the conference is happening or something so everybody I knew that they were checking out at that date and uh it literally took about like six minutes but if you guys want to see how the actual devices over my MSR 605 it was actually injecting folio data and then uh I think the end of this I'm gonna let roll again here for you guys and then after this I actually used a Chinese made MP3 player to inject a credit card number which is kind of cool and it burns the MP3 player out so don't try it at home so yeah what's your question? Um did you ever uh try using the mag spoofer as a jammer to perhaps like jam in a transaction that's in place and then play after it's done anything like that? Yeah that was actually uh sorry when people ask me like how do you protect against this kind of stuff and that's kind of the exact same thing is you can put one of the mag spoofer is injecting random data on the back of your door it'll actually deauthenticate anybody from uh from actually using it so like it would be a really good defense mechanism and you could have like a two form authentication have it when your bluetooth phone comes in it'll actually shut off the jammer so you can add two form authentication and it might actually drain the batteries so you'll get locked out of your room if they don't have it hardwired though so so you might actually de-dost yourself out of your own room but yeah what's your question? Uh so how might someone defend from one of these attacks? Uh like I was saying the uh um updating to the latest versions of the mag surfators and the actual point of sale systems uh that would be my recommendations uh where they send remote coding because a shut off mag stripperator is the one that is not responsive to this kind of attack so that would be my biggest recommendation is uh get update to something that's USB 3.0 and uh push the latest versions of the actual point of sale systems so yeah and yes what's your question? So I've seen I've seen something that says you can go around the chip and pin cards by reactivating the mag strip. Yeah. Uh how does that work? Uh uh Sam McCamp car did a really good job of explaining how mag spoofer can actually modify some of the flag details on the actual uh magnetic card raiders. Uh huh. I didn't release it in his code because he's the same way I am I don't want people to use these for illegal purposes but you can actually uh tell you can basically send the command that hey the pins damaged on this let me just use my mag card uh some of the mag spoofers they're modified like this one has uh two payloads on it and uh I have like I said I had the six mag spoofers and one was my actual uh big bertha which is like a huge magnetic coil and I uh let press take a bunch of pictures of it but that's like my brute forcing one and that thing took me like six hours to build so I didn't want it to break but yeah this one's basically a modified version of the mag spoofer here and I'm gonna actually how much time do we got for demo? Doing really good? Okay if you want to ask some more questions too. Did you write any fuzzers for any of the embedded systems hooked up to these mag swipe readers and did you find any memory corruption issues? Uh huh. Yeah that was actually my next uh I was kinda kind of thinking of something along the same lines but I uh literally ran out of time because I got kind of obsessed with my ATM attacks that I was doing and some of the uh actual relaying portions and stuff so I'm gonna actually I'm gonna get the actual mag strip demo kicked off. If anybody has any questions at all uh feel free to come up to the podium so so can everybody see the point of sale system? Two on the screens? Awesome. Here we go. And I'm gonna check to see if I have internet connectivity here. Here we go one second. And it is not visiting the right page so I have to uh I'm gonna try the second payload I'm gonna try to pop the command right now so if anybody has any questions I can answer these while I'm doing this so. Hey Weston. Yeah. Obviously Sammy's done a lot of research in this area also. Have you have you done anything with with uh BLE using like the coin to rewrite or done any track uh research on how coin rewrites the data or the plastic? Uh no no I haven't actually. Using it that as an attack attack method? Oh no no I have I was looking into some of the other research that Sammy had done and then like I said I did shift uh what half way through this because this was done like very very early in the year. Right. And yeah that was something that uh I thought some of the stuff that Sammy was doing was amazing and I was wanting to read some more of his research so. Okay. Which I know I didn't look into some of that but I did uh get some of the NFC working but I burned my original uh HTC phones uh near field communication out trying to do stuff with it. The radios out? Yeah. What's up? You burned the radios out on it? Yeah I burned the radios out on it so. So that was like the end of it because I like just broke a $600 phone so that ended my curiosity pretty quick so. Cool. Thanks. Just one more second. I'm going to try and plug in the hit. I know it's a very different approach but uh do you have any interest in looking into NFC and other technologies that hotels are now using because a lot of hotels are phasing out the Magstrips? Yeah those are um most of the ones that use RFID ones are actually tokenized so they reflect the folio number instead of having actual data in there. So you could use some of the classic attack methods but it wouldn't actually uh wouldn't actually work so as good. And that's what I'm saying if you're like that's something where your key space will be a lot bigger and like you're able to it's a truly random 16 digit number so. Well I apologize the demo blew up on me but I will put a YouTube video up uh I've actually working and if you guys want to come in uh I'm going to try to demo it here until I actually get kicked off stage but I'll still answer your questions. So if you guys have any questions feel free to ask too so. Yeah I was just curious have you done any uh playing around with the new tabletop devices that are in the restaurants and stuff have you? Oh yeah. What did any of those? Yeah now every time I sit at uh one of my favorite restaurants on the street that's like my first thing that I would love to but I don't have access to them I think it would be kind of breaking the law but I would love to actually order some of those. Right. I've seen a lot of fun things people do with some of the pager systems and stuff so. So a bit of a comment on uh running on old operating systems I ran uh um around with a uh award driver downtown and I found a lot of uh uh web wifi and uh went into the the the restaurants that are using that and asked permission of course because we all asked permission and um got the handshake from web real quick you know with wifi and did some sniffing found out they're all running old XP 0867 gets to it old uh POS on there uh dump memory and I found even on there uh admin account with back door back door so I wasn't the first one there but I found that they provided WPA2 to the customers but because the the uh old point of sale couldn't authenticate and the old XP couldn't authenticate to WPA2 they even run on web and so you don't have to get very close at all. I want to know if that's been your experience or not as well. Yeah but that's what I'm saying like uh for as far as actual using party inputs on this kind of stuff? Yeah yeah and and I mean like don't you have to get that close to it that if they're already networked with with web then you know it goes in there but yeah all that default credit in old OS uh I've seen the same thing. There's tons of other ways that I can see if you watch your attacking these. This is like my main attack surface on this so. So shifting gears little from mag strips to chip readers have you ever gone into something like that as chip readers start to get more and more popular and maybe hotels start to use that instead of mag strips? Do you think this attack vectors that you have kind of really researched might be able to shift and transition into the same way you could you could apply it to chip readers? Yeah some of the chip readers they'll still be using some of the magnetic track data for the most part on some some of the stuff but some of the challenging and the encryption they can do I would see it being able to block a lot of it so. What about uh looking into the serial programming on the actual door itself? Oh there. I haven't dug too deep into some of that stuff like uh after I got some of this attack surface and then I broke my phone like I said it kind of disheartened a little bit so but yeah that was like uh I was I was still curious about a lot of the attack surface that was out there but I just yeah I didn't have the some of the stuff to to get into it so as far as especially time was my biggest constraint on that. Because if you have a key to your door and you're able to reprogram the lock to your door or you can spoof your key yeah then you. Yeah that's the biggest thing too is like uh are you asking about if you can I'm sorry I might re-ask the question. So a lot of the doors have a like a barrel serial connector on the bottom a 2.1 jack. Oh yeah yeah. And then if you can reprogram that door over serial and if this is the kind of security that the keys are using are the locks really using that kind of security. And that sounds like even the most recent hotel attack like where they had the little bink or the not the bingo dauber but the actual marker at the bottom those are newer systems those have two way interfacing so they can blow the keys away. A lot of these low energy old ones or older ones like as old as in like 2008-2006 those ones have two two-way functionality but it's in 15 minute increments so some of the full blown ones they're they're got a little bit different method of actually you know protecting themselves so thank you. Did you have to use any kind of a proprietary reader for your mag strips I noticed a lot of like credit cards drivers licenses all used a normal standard one two three tracks but a lot of hotels aren't readable by those standard readers did you have to use anything special for that or? I did have to modify the MSR like a little bit to be able to read some of the raw data at the same time as the other information because they use like a portion of the card and actually raw read it to read their proprietary format you do need an actual driver from the property management software but if you can rip the raw encoding like a majority of them you can actually reverse it from the raw encoding it just takes a lot of extra time if you do the the raw read through the property management software if you were to get the property management software you would be reading entirely different character sets so right so that's how you did it for most of what you're showing here was it wasn't to dump it to actual keys but to dump it to raw and then and coming to rather than I had to be encoded as raw like if you went up your room and did MSR and just read it and raw and then copied that to another card that raw would work across the board so all right thanks yeah thank you just curious if you looked into you trying to do SQL injection into like POS systems or other systems using this method yeah I was actually the demo that I had was literally going to do a Java or a flash drive by attack so I and as far as SQL injections that's something that would definitely be possible especially for some quite literally if it would be able to get to something that's back end or internal that would be a huge attack surface so yeah thanks some of the card readers that are slide in's either have a mechanical or an optical sensor just how does that is that just an ass the slot machine ones yeah they actually turn green when something's inserted into them and you can use a very low profile piece of 70 pound paper and it'll actually trigger that event so we're doing on time guys my goo over two minutes okay awesome yeah any last questions I really do apologize for this I'm gonna try to get a demo go into the hallway I guess it I need to check on some of the connectivity issues should still pop the command shell and injected though so I'm having some kind of interface issues so if anybody wants to see this if not I'll actually put a camera demo online so and I'll make sure that my camera focuses this time but if you guys want to look into the actual injection with the Chinese MP3 player if you want to burn out a six dollar MP3 player injecting credit cards you can feel free to then also a lot of the actual payload injections I'll be putting demos up online so quite literally as soon as I get back to North Dakota which I have to drive so but yeah there's no other questions I just want to thank you guys for staying thank you


Γεια σας και ευχαριστούμε, είναι Vicky εδώ και σήμερα θα σας εξηγήσω το νέο σπέλ μπιντρος καρδίκης. Λοιπόν, σαν όλους, θα σημαίνουμε να παίρνουμε ένα σημερινό καρδίκης στην Ιουλία και θα σας εξηγήσω κάποια σημαντικότητα. Αν θέλεις να γίνεις ένας καρδίκης από αυτές οι καρδίκες, έχω ένα κούπον κόδι, που είναι 10% αυτογραμμένος από πίσω της δησκρίπτου, και να μην παίρνεις ότι έχουν παρνούς κόδι για 50% αυτογραμμένος. Στο κόδι, σαν όλους, θα βλέπεις οι βασικές, οι οποίοι είναι φόμσκορες, δαύτερες αυτογραμμένος, τέτοιχες αυτογραμμένος και also τέτοιχες αυτογραμμένος καρδίκες στην Ιουλία, που είναι 4.25x5.5. Αυτές οι κόδιοι έχουν always great value for money, they are always packed with goodies. Έχω πολλές αυτογραμμένες κάθε μήν when I get them and I highly recommend them. In this month you will get a bag of sequins, you will also get a bag of dyes, you will find a dye that cuts out a beautiful frame, another one that cuts out a lace, there is a rectangle that you can add inside the frame, as well as a weird shaped dye, but if you check out the thumbset, you will see that it matches one of the sentiments. In this thumbset you get beautiful birdies, as well as nests and lots of sentiments, a key. και μπορείτε να δείτε ότι αυτή η στιγμή είναι ένα από τα σαντημαντικά. Τώρα, δούμε από τώρα. Θα also θα έχεις ένα λιφλέτο. Υπάρχει ένα τέτοιο λιφλέτο σε όλους τους παιδίες. Αυτό δείχνει κάποιες ιδέες και πώς μπορείτε να δείξετε κάποιες καρδιά. Τώρα, δούμε να δούμε το πατρονό. Υπάρχει όλοι μέσα ένα 6 x 6 πατρονό. Οι πατρονές είναι κάτωρος και θα δείξετε ότι κάποιες από τα πατρονό έχουν φορές, για να τους κάνουν σημαντικά σημαντικά. Υπάρχουν 40 πατρονές σε όλο αυτό το πατρονό, οπότε, δεύτερα 20 διαφορετικά σημαντικά. Και εδώ είναι ένα πατρονό που αγαπηλαίνω, θα βρήκαμε αυτό πολύ καλύτερο. Λοιπόν, δούμε να δούμε. Θα βρήκετε ένα πατρονό με 3 x 4 καρδιά και καλύτερο σημαντικά σημαντικά. Εγώ αρέσει αυτά, γιατί μπορείτε να χρησιμοποιήσετε να δείξετε πολύ καρδιά. Έχουν καλύτερο σημαντικά σημαντικά σημαντικά. Έχουν και εμπρογές πατρονός στον πόν, έκθεταί να σπίξετε στον πόν your focal points. Στον τη δικαίτερα, θα δείχνεις αυτές τις εμπροσές. Τα διουχή εμπροσές είναι υποχώροι και στήριο, με διαφορετικόμονη, κάποια οι εμπροσές έχουν καρδιά στον πόν, και εσύ είναι τα παντικά. Και εδώ είναι ένα σημαντικό μάνο, για αυτό το μήν. Αυτά δεν είναι πραγμάτις σημαντικά, αλλά είναι άλλα σημαντικά, και είναι διαστημασιακά, They also have foiling and there are gems in some of them. They are really special stickers and they make perfect focal points. Now my favorite part of the kit are always the die cuts, but first let's take a look at the card stock. You'll skate 9 different pages and there is one gold foiled one. The colors always match with the colors on the rest of the products in the kit. Remember that you do get 10 pre-folded cards, so you do have card pages to play with. And this is extra card stock, so you get lots and lots of card stock to play with in these kits. And now let's take a look at the die cuts. There is always a pack of die cuts in these kits. You get two pieces of each design. They are great for focal points. They are perfect for creating clusters for quick and simple cards. You can mix and match them with pattern paper as well as the card stock, since everything is matching together. And I like to lay them all over my table so I can see exactly what I have. Some of them do have foiling, they are really pretty and I think especially this month the kit is just stunning. I just love that vintage vibe on it. I love the color combos and take a look at the wonderful designs. You get lots of flower clusters. You get birdies and butterflies. You will get lovely keys as well as feathers.  So let's put together a few quick and simple cards. For the first one I'm going to use the 3x4 cards just to show you what you can do with them. Now this is a card on its own, but however I want to make it extra special. So I will use 2 identical flower clusters. When you use identical elements make sure that you flip one so that they don't look exactly the same. This is a trick that I like to do. I'm playing a little bit with how I'm going to position them, making sure that the design that is at the back will not show. I'm going to use foam squares and stick them on top. In this way I have a dimension and element at the top of this card and at the same time I ended up having a sentiment. Now all I have to do is to stick this little element that I created on top of my card base and I'm not using any pattern paper at all.  I think it helps that elements stand out even more. I'm going to baste it with one of the butterfly die cuts. And here is the first card for today. You can baste it even more if you like by adding little gems. I decided to leave it as it is and here are some close up photos on the first card for today. A super quick and simple card but it looks really stunning. Now let's move on to another card. This time I'm going to combine pattern paper from the kit as well as these two die cuts. I went with the ink bottle as well as this feather because I think that they match, all the colors match beautifully together.  And I think that chipped sapphire matches perfectly the colors of these die cuts. That's why I'm going to add a little bit on my glass mat. I'm going to spray a little bit of water and then add some splashes on the white panel that I have. This way I'm adding something interesting on the background so it's not plain white but at the same time it matches with my focal point since they are splashes from the ink bottle. Now I'm going to grab my craft knife and very carefully I'm going to create a slit at the top of the bottle so that I can add inside the feather. I'm going to use foam squares at the back so that I can pop it as a focal point on my card. And now I'm going to grab my heat gun and make sure that all these splashes are completely dry. Then I can stick my focal point on one side of the panel. And then I have plenty of space to stamp the sentiment. Now in the kit you get a stamp set and there are lots of sentiments that you can use. I went with the one that says so many of my smiles begin with you and I stamped that with black ink. With foam tape at the back I'm going to pop this on top of my panel and then you can add something on the label if you like. I decided to leave it plain but I did add a few gems just to add a little bit of sparkly.  I like this sentiment because it matches perfectly with this pattern paper. I'm going to cut this to be slightly smaller than the standard card since I'm planning to stick it directly on top of my card base. So this panel is 3 ¾ x 5 and I'm going to show you two different designs that you can go with. One is the one that I'm going with where I'm going to stick this directly on top and you can see how this is going to go with the frame, the butterfly and the sentiment or you can use just a little piece of this pattern paper to create the background of your frame then place the butterfly on top and the sentiment underneath and you have a white background whatever works for you. I went with the full background so here I'm adding a little foam score at the back of my frame. I'm going to pop it on top of my card and this way I have lots of dimension. I like these foam scores because they are quite high but however they do fit inside an envelope. Now I'm curling up the wings just a little bit for some extra dimension and I'm going to pop the butterfly inside the frame and I'm going to do the same thing for the sentiment adding foam tape at the back. To make my card extra special I'm adding some gems in purple color so it matches with the rest of the design and here are some close-up photos on this card with the butterfly. For the next card I did use the tie from the kit and the rectangle inside to create this little frame and I cut it out from the gold cardstock I'm also going to combine the bird and one of those 3x4 cards so first of all I'm going to nest the bird on the frame at the bottom I'm going to glue it down and then as the background I'm going to use the other bluish paper Now this has notes on top and I think it's perfect for the birdie I'm using my scissors to cut it down to size I'm not measuring anything, I'm just eyeballing everything I do and I'm going to use my glue at the back and stick it there So I have a lovely element which makes a great focal point with the birdie and the really sparkly frame for the top of my card I'm not going to use any pattern paper here I'm going to keep it plain and simple However there are lots of pattern papers that you can use here that match the colors of the bird I'm using foam squares at the back I'm going to stick it on top and then for the sentiment I picked one of the die cuts that says to my dear friend Again I'm going to pop this on my card by using foam tape at the back and in the pack with the cardstock stickers there are little golden notes which I think go perfectly with the bird that is singing as well as with the background that has all the notes there and you will see that in the close-up photos I'm going to use 3 of those stickers to embellish my card and if you find that the stickers do not stick too well reinforce them with a little bit of glue at the back and that's exactly what I did So here are some close-up photos on the card with my bird and let's move on to the last card for today For this one I picked this lovely pattern paper I'm going to cut it to be 4 ¼ x 5½ so this is going to cover up completely the card front I'm going to stick it down with my glue and I always like to use white glue for this since I can always slide it and make sure that it matches perfectly the card base I also used the frame die from the kit but I didn't use the rectangle on the inside so this here is another design that you can get which is not exactly the same as the previous card where you have that empty space inside I am picking one of the lovely stickers this is again chipboard sticker and it has dimension It provides a great embellishment for my frame and it leaves enough space where I can stamp the sentiment and for this I went with a stamp that says Thinking of you I have a foam tape at the back I'm going to stick it at the center of my card and the elegant design on this one would make it great as a get-well or a sympathy card So here is a quick look on all the cards that I made for today Don't forget to leave me a comment and let me know which one of these was your favorite Just like always you will find links down below to everything I used along with a coupon code if you want to become a subscriber I hope that you had fun today, that you got inspired Thank you all so much for watching and I'll see you all next time


This is the first in a four-part video series on bariatric surgery, the most common of which is stomach stapling and gastric bypass, and both make major changes to a person's gastrointestinal anatomy. How safe are these procedures, and how well do they work for weight loss? Tune in to find out. The treatment of obesity has long been stained by the snake oil swindling of profiteers, hustlers, and quacks. One of the modern fields of bariatric medicine derived from the Greek word baros, meaning weight, is pervaded by an insidious image of sleaze. Beguiled by advertising for fairy-tale magic bullets of rapid, effortless weight loss, people blame themselves for failing to manifest the miracle or imagine themselves metabolically broken. On the other end of the spectrum are overly pessimistic practitioners of the opinion that people who are fat are born fat, and nothing can be done about it. The truth lies somewhere in between. The difficulty of curing obesity has been compared to learning out foreign language. It's an achievement virtually anyone can attain with a sufficient investment of energies, but it always takes considerable time and effort. And of those who do stick with it, most will regain much of the weight lost. To me, this speaks to the difficulty rather than the futility. It may take smokers an average of 30 quid attempts to finally kick the habit. But quitting smoking is just something that has to be done. As the chair of the Association for the Study of Obesity put it, it doesn't take willpower to do essential tasks like getting up at night to feed a baby. It's just something that has to be done. Our collective response doesn't seem to match the rhetoric or reality. If obesity is such a national crisis reaching alarming proportions dubbed by the post-911 Surgeon General as every bit as devastating as terrorism, why has our reaction been so tepid? For example, governments meekly suggest the food industry take voluntary initiatives to restrict the marketing of less healthy food options to children. Have we just given up and ceded control? Our timid response to the obesity epidemic is encapsulated by a national initiative promulgated by a joint task force of the American Society for Nutrition, Institute of Food Technologists, and International Food Information Council. Small Changes Approach Since small changes are more feasible, suggestions include using mustard instead of mayonnaise, and eating one rather than two donuts in the morning. Seems a bit like bringing a butter knife to a gunfight, but with only one croissant. Proponents of the Small Changes Approach element that, unlike other addictions, for example alcohol, cocaine, gambling, or tobacco, we can't counsel our obese patients to give up the addictive element completely as no one can give up eating.  Like just because we have to breathe doesn't mean it has to be through the end of a cigarette. What about bringing a scalpel to the gunfight instead? The use of bariatric surgery has exploded from about 40,000 procedures noted in the first international survey, 1998, to now hundreds of thousands performed every year in the United States alone. The first technique developed, the intestinal bypass, involved carving out about 19 feet of intestines. More than 30,000 intestinal bypass operations were performed before catastrophic, disastrous outcomes were recognized, including protein deficiency-induced liver disease, which often progressed to liver failure and death. This inauspicious start is remembered as one of the dark blots in the history of surgery. Today, death rates after bariatric surgery are considered very low, occurring on average in perhaps 1 in 300 to 1 in 500 patients. The most common procedure is stomach stapling, also known as sleeve gastrectomy, which most of the stomach is permanently removed. Only a narrow tube of stomach is left so as to restrict how much food people can eat at any one time. It's ironic that many patients choose bariatric surgery convinced that diets don't work for them, when in reality that's all the surgery and maybe an enforced diet. Bariatric surgery can be thought of as a form of internal jaw wiring. Gastric bypass, known as Ruin Y gastric bypass, is the second most common bariatric surgery. It combines restriction, stapling the stomach into a pouch smaller than a golf ball, with malabsorption by rearranging your anatomy to bypass the first part of your small intestine. It appears to be more effective than just cutting out most of the stomach and results in a loss of about 63% of excess weight, compared to 53% with a gastric sleeve. But gastric bypass carries a greater risk of serious complications. Many are surprised to learn that new surgical procedures don't require pre-market testing or FDA approval and are largely exempt from rigorous regulatory scrutiny.


Wood Notes I When the pine tosses its cones to the song of its waterfall tones, who speeds to the woodland walks? To birds and trees, who talks? Another of his leafy roam, there the poet is at home. He goes to the riverside, not hook nor line hath he. He stands in the meadows wide, nor gun nor scythe to see. Sure some God his eye enchants. What he knows nobody wants. In the wood he travels glad, without much fortune had. Being cally without bad. Knowledge this man prizes best seems fantastic to the rest. Pondering shadows, colors, clouds, grass-huts and caterpillar shrouds, boughs on which the wild bees settle, tints that spot the violet's petal. Why nature loves the number five, and why the star-form she repeats. Cover of all things alive, wonder at all he meets, wonder chiefly at himself, who can tell him what he is? Or how meet an elf coming the past eternities, too? And such I knew, a forest seer, a minstrel of the natural year, fortune teller of the vernal ideas, wise harbinger of spheres and tides, a lover true, who knew by heart each joy the mountain-dales impart. It seemed that nature could not raise a plant in any secret place, in quaking bog, on snowy hill, beneath the grass that shades the rill, under the snow, between the rocks, in damp fields known to bird and fox. But he would come in the very hour it opened its virgin bower, as if a sunbeam showed the place and tell its long-descended race. It seemed as if the breezes brought him. It seemed as if the sparrows taught him. And if by secret sign he knew where, in far fields, the orches grew. Many haps fall in the field, seldom seen by wistful eye. But all her shows did nature yield, to please and win this pilgrim wise. He saw the partridge drum in the woods, he heard the woodcocks evening him. He found the tawny thrushes broods, and the shy hawk did wait for him. And others did at distance here, and guest, within the thicket's gloom, was shown to this philosopher, and that his bidding seemed to come. 3. In unplowed main he sought the lumberer's gang, where from a hundred lakes young rivers sprang. He trode the unplanted forest floor, whereon the all-seeing sun for ages hath not shown, where feeds the moose and walks the surly bear, and up the tall mast runs the woodpecker. He saw beneath dim aisles in odorous beds the slight linea hang its twin-born heads, and blessed the monument of the man of flowers, which breathes his sweet fame through the northern bowers. He heard, when in the grove at intervals, would sudden roar the aged pine-tree falls. One crash, the death hymn of the perfect tree, declares the close of its green century. Below lies the plan to whose creation went sweet influence from every element, whose living towers the years conspired to build, whose giddy top the morning loved to gild. Through these green tents, by eldest nature dressed, he roamed, content alike with man and beast. Where darkness found him, he lay glad at night. Where the red morning touched him with its light. Three moons his great heart with a hermit made, so long he roved at will the boundless shade.  To make no step until the event is known, and ills to come as evils past bemoan. Not so the wise. No coward watch he keeps to spy what danger on his pathway creeps. Go where he will, the wise man is at home. His hearth the earth, his hall the azure dome. Where his clear spirit leads him, there's his road by God's own light illumined and foreshowed. Four. Twas one of the charmid days when the genius of God doth flow. The wind may alter twenty ways, a tempest cannot blow. It may blow north, it still is warm, or south, it still is clear, or east, it smells like a clover farm, or west no thunder fear. Amusing peasant, lowly great, beside the forest watersate. The rope-like pine-roots crosswise grow, composed the network of his throne. The wide lake, edged with sand and grass, was burnished to a floor of glass, painted with shadows green and proud of the tree and of the cloud. He was the heart of all the scene. On him the sun looked more serene. To hill and cloud his face was known. It seemed the likeness of their own. They knew by secret sympathy the public child of earth and sky. You ask, he said, what guide me through trackless thickets led? Through thick-stemmed woodlands, rough and wide, I found the water's bed. The water-courses were my guide. I travelled grateful by their side, or through their channel dry. They led me through the thicket damp, through break and fern the beavers camp, through beds of granite cut my road, and their resistless friendship showed. The falling waters led me. The foodful waters fed me, and brought me to the lowest land, unerring to the ocean sand. The moss upon the forest bark was pole-star when the night was dark. The purple berries in the wood supplied me necessary food, for nature ever faithful is to such as trust her faithfulness. When the forest shall mislead me, when the night and morning lie, when sea and land refuse to feed me, twill be time enough to die. Then will yet my mother yield a pillow in her greenest field, nor the June flowers scorn to cover the clay of their departed lover. End of poem.