Broadway's my beat from Times Square to Columbus Circle, The Gaudiest, The Most Violent, The Lonesomeest Mile in the World. Broadway's my beat with Larry Thor as Detective Danny Clover. When November settles down over Broadway, everybody's got a lot to cheer about. It's the time of the hot dog, it's the season of the rackety-racks and the split-tea formation, the coaches left-hand on the pigskin who swear their boys aren't being brutal out there in the field just eager. It's the month of the old grad, the co-ed, the bottle, the blanket, what is known as the nippy tang. It's a time to be alive.  The police mark where I was, where Detective Muckerman was, and the slabs that held two men newly dead. Alcohol poisoning Danny, they were shipped here from the emergency hospital for identification. You know who they are? Yeah, this one, Joey Macklin, Bowery, Pickpocket, Bum, Panhandler, Rummy. This one, you know him? No, he's the reason why I called you down here though. Notice anything Danny? Looks pretty well-fed. Fingernails look like they'd been manicured not too long ago. Couple other things. This, found this crumpled mask in his pocket. Take a look at his clothes. Really raggy, huh? Underneath he's wearing silk underwear. You taking prints? Last night as soon as they came in. Code numbers sent to Washington right away. You say the emergency hospital sent them over? Yeah, they staggered in there practically blind from the bumbos. Screaming. We couldn't help them Danny, they were too far gone. They had the liquor on them? No. More of it someplace, Mugman. Nethyl alcohol and peach juice and beading oil. How come people... I've seen them brought in after they strained paint to a piece of bread. I've seen them with a try. You're right about this one, Mugman. He looks too patently a bum. That's why he looks out of place. I figure that too. So strange, huh? And then it closes in on you, this place of the derelict dead. The windows are high and the moist walls high so that dead fingers can't reach. Open, let the sobbing of death be heard in the autumn air. The sunlight feels along the windows webbed with threads of steel and the warmth is taken and held before it can touch the people of a room that is forever cold. All of it has been yours countless times and still the shutter comes. You try not to let them see it. Then you take Detective Mugman's comment that it's strange. Take it with you into a long corridor up a flight of stairs. Drop it on a sergeant's desk for an immediate checking. Fill the time of waiting in the official ways provided for such intervals. And the door opens. It's being brought back to you cheerily by Sergeant Tataglia. Danny, I want you to do something for me if the please is implied. What, you know?  Why? To partake with me of the nippy tang that is there for everyone's knowing... I've had mine, you know. Then you will agree with me that it is both nippy and tangy. That it makes the vitality surgeon who...  Which hand, Danny? Geno. A fellow wants to play a little game, takes a second. Brings a little happiness. What have you got, Geno? In this envelope is contained a telegraph report from the FBI and then the request Detective Mugman made of them concerning the fingerprints of the deceased vagrant who is now in armor. Oh, give it to me. Identified. They've identified him, Geno. Those FBI's quiz him a question and lickety-split they give you an answer. John Howard, Lieutenant Colonel Richard... Retired from the Army of the U.S., present address 3212 Park Avenue, occupation bond salesman. I pete Danny. I also took a liberty. Oh? Yeah, I took the liberty of falling to the domicile of said deceased, spoke to a Mrs. John Howard, asked her politely to come here to... Why don't you be here? Any minute, Danny, in an ounce. She had but to find a suitable outfit for an outing to police had... this liberty I took. You did good, Geno. Real good. Wait then. Pick a window and stand there and watch the street below. The eddy of crowd.  Watch the first shadows drift in. Pick a place and shadow layer to find another place. Finally, see a car draw up to the curb. A long car and black and expensive. And a woman get out of it, stand on the pavement and look at the doorway, mark police headquarters, hesitate, and then walk toward it. Then leave the window and hurry downstairs. Pick up the woman at the information desk. Ask her a question. Yeah. Hi, Mrs. Howard. My name's Clover. Will you come with me, please? Of course. Would you mind telling me why I'm here? Through this door. Not at all. In cases like this, we're not really sure, so... Sure about what?  There's a possibility you might be able to identify him. A man died? Yes, from mental alcohol poisoning. John? My husband? It was John? In here, Mrs. Howard. You have answered me. He's a John. I'm afraid that's what you like to tell us. Oh. Oh, no. Mrs. Howard. Oh, I want to see. I want to see. This man is my husband. I'm sorry, Mrs. Howard, if you... ...ungrief, the futile offering of the tried-and-true solaces that have never worked. Not against the sobbing, anguished, deep. Then, finally, the whispered cry of some remembered thing they had shared, and the resigning to it, the remembrance will never come again. The detail of a man to drive her home, constrain the questions that must be asked for another time when the sudden anguish has become old, familiar, a thing to be lived through. Strip a picture of John Howard from a file to take with you to a man who is an expert on the whys of derelicts. A man you look for, find in a Third Avenue bar, embarrassed. You embarrassed me before my friends, Danny. Truly. It is well known what you were and what I am. I am now trying to demonstrate to these companions. What are you now, Benny? I am now one of the honorable and the oldest professionals. Which profession now, Benny? A provider of knowledge, Danny. Look on the new Benny fame, the pillar of culture, a seller of psychopedias. You, Benny? Me, Benny. Gays on a brochure. I've got it here somewhere. Here it is. A psychopedia with wild facts on the kingly sport of racing. You sell those? With a biennial of penics to bookies. To fill in the long hours while looking for a tax-free dodge. I found mine. No longer at the mark of police, am I? Yes, you are, Benny. I am. Uh-huh. Take a look at this picture. Danny, how can you? A picture that did you got to show me now? You are not to the papers printed in an orbit that I know of. Well, I see them around. Where? In a bar, where you skid row, you know. That's where you were selling in psychopedias? Danny. I was calling on an old friend, Mickey Thomas, while cutting up a few reminiscences. He up in a glance across the hall. There was this guy. This picture you showed me. Boozing up with another guy named Joey Matlin. I weighed the toast. I went back to my... Take me there. Huh? Where? To Mickey Thomas, the man you visited across the hall. Take me, Benny. Danny, I was about to close a sale. We could go by way of headquarters, Benny. Uh, I know a shortcut. Come on, Danny. South into the Bowery and east past Lexington past the row houses where there's always room for one more tenant. And the street where garbage cans are used for first and third base. The man with you points out an interesting fraction. I was going there, Danny. Right in that house. And hit 3rd Avenue. You wouldn't believe how us kids used to wear clothes. Hi, Danny. It wasn't important. The place I was telling you about is right there. Now, let me... Let me open it up for you, Danny. Yeah, yeah, yeah. You better watch this... This floorboard right here, see this? Oh, I know these places. I really know. Oh, it's Mickey. Oh, he's raising the roof. It's Mickey. What's the matter? What happened to you? My drink is in that liquor. Oh, I can't see. Morton Fine and David Friedkin and starring Larry Thor as Detective Danny Clover. Well, I think you've got to do that, kid. Treat the morning nice. Maybe that way you'll still be on your feet when day is done. So set the loudspeakers to music guarantee to absorb shock. Climb the spectaculars. Remove and replace the masters that died in the night. Polish the neon.  Tighten the bolt. Tilt her body more forward, her head nearer to the shop window so that her lips are closer to the promise of a good morning kiss. Having made way for another day, find the quiet place to read the papers. And read of the death of retired kernels and pickpockets from lethal alcohol and of the blindness of a skid-roll vagrant named of Mickey Thomas from the same. And skim through to the comics. Their kid lies happiness. When I was, the new day fell on the sightless eyes of Mickey Thomas on the fleeting figure that worked against his pain. Finally, whispered, you'd better come back with him later and leave to another place to ask questions about the dead. The woman tries to answer them for you. The last time I saw him, John, the last time I saw him was Halloween night. We'd been invited to a party. We wore funny clothes. That tramp suit you found, John, in it was the funniest thing he could think of. Mrs. Howard, you... You will make it brief, won't you? You see, I'm packing. I'm going away in the boat. You're leaving the country? Europe. There's a plan, John, and I had. Europe. All the gay places he'd been while he was in the war. A couple of weeks ago, out of nowhere, he said I'd love him. Let's go, Lila. I've just given up my 20,000 a year position so I can show you to Europe, Lila. Maybe you'll like it so much, Lila. We'll never leave. Mrs. Howard, perhaps it might... You're not going to stop me from going, you know. John said it would be fun. I'll just have to have fun alone now. You're not going to stop me. No. We've no reason to. Now. Good. I'll sleep on the boat tonight. If I slept here, the boat sails in the morning. You said now. Would there ever be a time you could stop me? I don't know yet, Mrs. Howard. All I know now is that your husband, a rich man, died of poison liquor, that he came in off a skid roll. Well, that's easy to explain. It is? Of course. John got feeling good at that Halloween party.  Whenever he got like that, he'd make bets. He made one that night? Crazy one. The kind he liked. That he could go to skid roll dressed as he was and live there for a week and never call on any of us for anything. When he thought of it, he grabbed Frank and said, Frank, who? Frank Clifton. Frankie was John's adjutant during the war. He grabbed Frankie and made the bet. And you never saw your husband after that until... until you showed him to me in the morgue. Frankie and I went looking for him one night because I was worried we didn't find him. I came home. Frankie kept looking. He didn't find him. Do you have Mr. Clifton's address? It's in the phone book, Sutton Place. For a minute there, Mr. Clover, you actually considered not letting me go on this trip. Tell me why. And Mrs. Howard, I... Nothing about John's death. Is the word trouble? John's death troubles you? Well, in the way I told you, Mrs. Howard, that a wealthy man, an intelligent man, would find his dying in... In poisoned booze? John was a man of whims. Let's only say of him that he indulged his last one, shall we? I'll check, Mrs. Howard. I'll check him what you've told me. Do that, Mr. Clover. Let me know before nightfall. In any event, call me to wish me bon voyage. I'm gonna have fun, like John said I should. Thank you, Clifton. Come on, mister, the rest of me behind the door is in a towel. What do you want? I'm from the police, Stanley Clover. Well, I'm in the... Yeah, I know, in a towel. I want to talk to you. Sure, sure. Come in. A few minutes ago, you wouldn't have caught me doing my laps around the lake on the bicycle. Gonna miss that old Columbia bike when I'm in Europe? You're going to Europe too, Mr. Clifton? Yeah, tonight. What do you mean, too? Mrs. Howard is going. Will she? News to me. I figured it'd be decent if she grieved till the next boat. Hey, just why are you here? I'm trying to find out why John Howard is dead. Come on, come on. You know as well as I do why John's dead. Poisoned booze, alkie. I want you to tell me what happened at that Halloween party. Oh, all right. Don't rub it in. So it was my fault. You made that bet with Mr. Howard, didn't you? About going down to the Bowery and living for a week. That's your job, isn't it? Rub salt and old wound. How come you made a bet like that, Mr. Clover? I didn't want to. You knew John like I did. How do you argue with a man like that, Clover? What kind of man was he? Everything was a bet. He could be walking along. He'd pick any stranger in the crowd, make you wonder about him or her, and then bet you were wrong. He'd find a way to prove it, too. I was his adjutant, though, through the war. That's how I spent the war, making a book for him. I want to know exactly what that bet was you made with Mr. Howard. But first you got to understand it. I didn't want to make it. All right, I understand. He bet me on the kind of he was dressed like a tramp. He could go down to the Bowery and live like one for a week. He could do it longer, he said, except he had to catch that boat. Eat anything a tramp does. Drink anything. You don't know. The works. $400. Mrs. Howard said she got worried a few days ago. She hadn't heard from him. That she went down to the Bowery looking for him. With me? We looked, couldn't find hide her hair. Got laid, I sent her home and kept looking. Not quite. Then Mr. Howard is a pretty good friend of yours, huh? My CO from Amsterdam to Essen to Cologne to Mannheim to Berlin. And that's why you're going to Europe, huh? Take another look. Close places and let us not forget Paris. My old man got over there in the first war. I didn't. He still holds it over me. Look, over your mind if I soak the old body now. Thanks a lot. I'll drop you card. Walk away from the man eager for the sightseeing of old sights. Walk away with the puzzle still yours. Why a man like John Howard should die of poisoned alcohol? Why a man like Howard would so quickly descend to a state where alcohol from whatever source was so needed that he challenged death for it and way against it the possibility of death caused premeditated murder? And let the thought take you back to a hospital room where a man lay with his eyes bandaged against light and another sat at his bedside talking quietly. Martin is doing what he can for you, Mickey. You're getting the best, but... Hi, Danny. How is it? Better, I guess, Danny. He's been asking me... Tell him, Mickey. Who is he? Lieutenant Clover. He's the man that found you, Mickey. He got you here in a hurry. Oh, that makes me have to thank him, huh? Thanks, Lieutenant Clover. Mickey, can you answer questions? You feel up to... I've been complaining in a loud voice to this other social worker here. Yeah, I guess I could answer a question or two. Where'd you get the booze? I got it. Tell us where, Mickey. We'll bring them in for you. Nothing I could wish more to get the guy that... Funny, huh? What is? I don't know where the booze come from. Look, Mickey, you still... I don't know where it come from. All I know is I waited till Joey Macklin and that other character ran out of their room. And I crossed the hall and snitched me what was left from that bottle. He died from it, huh? Lucky boys. Lucky, lucky boys. You stole the alcohol. That's how... Maybe Mickey stole something else, Danny. Found this in his clothes. Oh. Oh. Pomp, I could... What's it for, Mickey? A price no belonging. That means it belonged to me. What's it for, Mickey? Me and my back, you'll find out anyway, won't you? Yeah, Mickey, we will. So go find out. And do something else for me, huh, Lieutenant? What? On your way back, pick up a tin cup and a box of pencils. It'll be a favor. Can Mr. Fring do for you? Police. Mr. Fring is delighted to serve you. In what capacity does Mr. Fring do that? As a redeemer of pawn tickets. Oh, this one. Hmm, Mr. Fring remembers it. Why shouldn't he? He wrote it only yesterday morning. It's being redeemed, Mr. Fring. Surely. A cigarette case. This looks like a pretty expensive item, Mr. Fring. How come you only lent two dollars on it? Because he who pawned it was one of our boys. Why do you say our boy? Mr. Fring calls your attention to the fact that all who serve are our boys. I call your attention again, may I? Please do. To the engraving on this case. A screaming eagle with a dagger. An obscuring figure. However, I'm positive and insigual of one of our doubty combat outfits. I know because during unpleasantness number two, I sold our boy shoulder patches as a sideline. I've just re-ordered. Mr. Fring. Hmm, you're taking it. There's two dollars plus interest due on it. Yeah. Can Mr. Fring whistle? Well, for one thing about that insignia, it was assigned to an army intelligence team. Well, where'd the team operate? Mostly in Germany. Around Cologne and Essen in Berlin. Yeah. Yeah, Mannheim too. Yeah, go on, my government. Well, the rest of it's John Howard's record. Civilian and army. Civilian, not a whole lot. A good businessman resigned his position a few weeks ago. The reason he gave his employer was pretty vague. Yeah, I know about that. But what about the army? Uh, Howard was the head of an army intelligence team to recover loot. Near Essen. In Germany. You know, confiscated treasure and stuff. They found some, too. Belonged to one of those rich German families, worth a mint. Only the original owner screamed that some stuff was missing for him. And what else? Well, Howard, he was a Lieutenant Colonel then. Had a couple more men on his team. A sergeant who died in Europe from pneumonia before he got home. And a major name of Frank Clifton. Clifton. You know, you need much more, do you, Danny? Nothing. Thanks for a motive. This is Mrs. Howard, Danny Clover. What? Clover, let's go inside, huh? Why not? Come on in. Next door, people, Anna. Boy, look who it is. Welcome, welcome, welcome. Don't look daggers at me. I'm just visiting, Frank. Ask the question, Clover. What do you want? I came down here to break some nears to both of you. Look, Clover, we're due next door for a presailing party. Now you're going to Europe. Sure you know. I told you. I owe myself a sentimental journey. Frank said you'll show me all the places John was going to show me. There's a place near Essen. I don't know whether you'll get to, Mrs. Howard. Come on, Clover. Get off it. Your husband ever talked to you about a town in Germany called Essen, Mrs. Howard? Of course. On account of that town, John got a citation. Frank too, didn't you, Frank? Sure. We found some Luther Nazis buried. Turned it back to the rightful owners. That's right. John told me all about it. I used to ask him, tease him. Why he didn't hold out a little darling lovelier for me? I figure he did at that, Mrs. Howard. How do you figure that, Clover? John Howard had a $20,000 a year job. He quit it. He quit it to go to Europe. There must have been something in Europe worth a lot more than $20,000. And it had to be something he couldn't bring back into this country. So John Howard wasn't coming back. He doesn't know what he means, letter. I mean just one thing. Not all that Luther's are covered. It makes a lot of sense that the reason John Howard gave up such a good job is because he'd hidden the missing part of that loot. Imagine that. He knew where it was. So did a GI, a sergeant who died in Europe of pneumonia. So do you, Clifton. The three of you, members of the team that found the loot in the first place. Now John did. Frank. Frank. It's a funny story, Lalo. Why aren't you laughing? You kept looking for John in the bowery after I went home. Did you find him? I told you I didn't find him. That means I didn't find him. You found him. You're calling me a liar, Clover. That's no way to get to a party. You want a cigarette, Clifton? Here, take one. Put that case away. Why? What's the matter with it? What kind of a man are you? A barge in the... Can't you understand the situation, Clover? The champagne, the shipboard party. Don't you see it for her? Lila. Try to make her smile again. What's the matter with the cigarette case, Clifton?  It's his case. It's John's. How do you think it makes Lila feel to see something that belongs to him? Frank, and how do you think it makes me feel? Remembering the times, remembering his offering me a smoke from his... Frank! Not his case. John never smoked. He never did. Never, never! Why, what's going on here? Mr. Clover. I'll tell you what's going on. Frank murdered your husband. Did you, Frank? He comes up with a lousy cigarette. Casey says, murder.  With poison alcohol. He found your husband. Found out where he was staying. Found a bum named Joey Macklin, who he was living with. Gave Joey a jug of poison alcohol. He knew your husband would drink it. That was part of the bet. You coming to the party with me, Lana? But Joey Macklin was also a pickpocket. He stole this cigarette case from Clifton. Then he and your husband drank the booze, died from it. Come on, Lana. They were waiting for us. A man from across the hall. A man named Mickey Thomas stole the booze that was left. He also stole the cigarette case Joey had lifted. Mickey found it. That's how I know you found John Howard, Clifton. You're under arrest. Boy, at the end of night.  A grinning face whispers that you keep running. Till the same voice whispers the odds you'll never make it. And you'll never do the gaudiest, the most violent, the lonesomeest mile in the world. This is Detective Danny Clover with Charles Calvin as Tortaglia and Jack Krushen as Muggevin. The program was produced and directed by Elliott Lewis with musical score composed and conducted by Alexander Courage. In tonight's story, Irene Tedraw was heard as Lila Howard, Lou Merrill as Frank Clifton, Leo Cleary as Benny Fane and Steve Roberts as Mickey Thomas. Tonight on FBN Presents, you've been listening to some of the best in radio drama. Mickey and Molly and Broadway is my beat. Join us again Monday evening at the same time, 9 o'clock when FBN Presents, Dragnet and Escape.


Thank you for joining my session. Today, we're going to be talking about injecting security to the cloud. My name is Susan Henricks, and I am from Verizon Media, formerly Yahoo. I work with the Edge team at Verizon Media. Been there six to seven years. I work on web proxies, routing, and some networking tools. I'm a committer on the Apache Traffic Server project. And in my Cobia spare time, I practice and teach yoga. And let's see my contact information if you want to reach out to me later. The goal of this talk is to present to you some of the TLS scenarios that we encountered as we were moving our applications into a hybrid cloud environment. Specifically, we're going to talk, or I'm going to talk, about how we use two open source projects to help that transition. A proxy, Apache Traffic Server, and an access control system, Athens, to do this. And we're supporting our proxy in kind of an application delivery network environment. And as with any significant project, this is not my work alone. I've worked with a lot of my colleagues at Verizon Media and other members of the open source community for this work. Some of them are listed below. Let me start by saying a few words about these two open source projects. First, Apache Traffic Server, I mentioned, is a web caching and proxying tool. And it's been out in the world for quite a while. It's been an open source project for over 10 years. And it was used in a proprietary form by Yahoo and InkTomy before that. The unique thing about Apache Traffic Server is that it allows the injection of business-specific logic via plug-ins, so separately written, dynamically loadable libraries, that trigger code on specific keep hook points in the lifecycle of an HTTP transaction or session. This enables the developers to create and specialize how we handle web traffic for our company environments. I've worked in the area of TLS for ATS since I've started. And specifically in the last three to four years, we've spent a lot of our effort in the TLS area enhancing our support for mutual TLS with the goal of supporting our hybrid cloud environments. The other project that we have leveraged is Athens, which is a role-based access control system. And it leverages mutual TLS authentication to perform the authentication part of that. It was contributed to open source by Yahoo Verizon Media. And it's been the basis for most of our Verizon Media authentication and authorization work. And as I go through this talk, we'll talk a little bit more about these projects, but it's kind of the high level of what they are. So motivation, why are we going through this effort? So in the good old days, we had corporate data centers. An organization would have one data center, maybe a couple data centers, where all of their servers running their front end, their back end, and their middle end where would all be in the same physical location. So we could be kind of loosey-goosey in terms of authentication and in terms of encryption. We could just maybe rely on IP addresses to verify that the client was coming from within the data center. Might not have been a great idea, but in fact, that's what folks would do. And encryption within the data center wasn't a huge concern. But more recently, we've had public clouds come out into the world. In that case, an organization, instead of building their own data centers and hiring their employees for the care and feeding of those machines, would rent virtual resources from third parties. And this saves money and time and makes it very easy to dynamically bring up an application. And maybe if that doesn't work, bring it back down. So it's very good for startups and even for larger companies who are launching speculative applications. But if you have a large, well-known, dedicated application, say, like Yahoo Mail, deploying that in a public cloud can be a very expensive proposition. So of course, we mix the best of both worlds. And we have now the hybrid cloud. So in that case, you're going dedicated company data centers or on-prem resources. You're going to have one or more public clouds, so maybe an AWS cloud and a Google Cloud or an Azure cloud. And depending on what stage of life, the lifecycle and application is, it may run on-prem. It may run in a cloud. It may move over time from on-prem to the cloud and maybe back again. So in this kind of environment, we have very dynamic and complex test relationships. So a user agent may come and enter your application from an on-prem system or from a third-party cloud. Within the back end, within a data center, maybe on-prem is going to access some service that's running in a cloud and vice versa. So we can't get away with just checking the IP address to make sure that our requester is in our corporate data center. And we have to be very aware of encrypting things over the internet, protecting our data as it's transiting on secured networking space. So we've done that by taking advantage of TLS authentication. And let me take a little bit of time just to quickly review kind of the classic TLS authentication models. And the kind of the classic configuration is only the server is proving its identity. And in my little diagram, I'm showing a client is talking to a server. It sends a client hello message. The server sees that, sends back a server cert. The client will verify the signature on the server cert, make sure it's signed by an entity it trusts. And then through the rest of the key exchange, the server is going to prove to the client that it owns the corresponding private key. If the client is authenticating itself to the server, if that's needed, that's done at a different level via password or two-factor authentication. But TLS also provides mutual authentication. So in that case, both the client and the server exchange certificates. So again, in our scenario, the client will send a hello. The server will send its server cert. And then it also sends a message saying, hey, give me your cert. And the client will send its cert over. It'll check the server cert signature. The server will check this client cert signature. And then through the rest of the key exchange, each will prove to the other side that they own the corresponding private key. So this mutual TLS authentication mode, this client cert mode isn't great for humans, but it is pretty decent model if your client is another program, another service. So that's how our Athens works for the authentication mode. We have Athens certs that are provided and that proves their identity to the other side. But when we started, most of our clients, most of our servers didn't support mutual TLS. This was a new concept for them. So we could have waited and rewritten all of our servers and clients to perform mutual TLS and we would probably still be waiting. But instead, you could put a proxy and use that to help retrofit your clients and servers to support mutual TLS. And in the case of retrofitting a client, we could stick a proxy like ATS in front of the client. And four years ago, you could configure ATS to always provide the same client cert when requested. So in that case, the client would talk through the proxy to the origin. The origin would ask for a cert, it would always provide the same certificate. And that would work, but in a lot of cases, your client is gonna need you to provide different client certs to different origins, depending on what they're asking for. So we added within ATS the ability to do fine grain client certificate selection. We added logic within our main routing configuration line that will specify for this particular transition use this cert. So here we're showing if a client comes in requesting bank.yahoo.com slash PCI, we'll map it to PCI.server.com and we will use the client cert that's in the file PCI.PEM. But if the client comes in to yahoo.com slash datastore, we'll send that request onto datastore.server.com and we'll provide the client cert that is in datastore.PEM. So similarly, we have issues with the server and we can use our proxy to retrofit a server to support mutual TLS. In that case, we put a proxy in front of the server, the origin. And again, when we started four years ago, we could configure that proxy, our ATS box, to always request a client certificate and that would work. But in some cases in a more complex server environment, you'd wanna only ask for a client cert in certain situations. Now it's a little harder in this server scenario because this is at the very beginning of the handshake. All we know at this point is the client's IP address and whatever in the client hello message. One of the things that is in the client hello message is a server name indication or an SNI. And that gives a domain name that the server is indicating that he wants to talk to and all the modern clients do do this, do provide this TLS extension. So we can take advantage of that and we've augmented ATS to have a configuration where based on the SNI name provided by the client, we can do certain things. Like we can adjust what HTTP protocols we're gonna offer. Maybe we'll offer HTTP2 or not, which TLS protocols we're gonna allow or we're gonna allow TLS1.0 or only TLS1.2, 1.3. What ciphers we're gonna offer. And then in particular for this case, are we gonna require a client certificate? So that works. However, SNI is not really a security thing. The client can put whatever they want in for the SNI. So we're taking this user provided input and we're using it for a security decision. So that's a bit sketchy. So what happens if we have a user agent that doesn't play by the rules? And here we're showing a malicious user talking to a server. So say in our servers configured to require a client certificate for accesses to secure.com but not for insecure.com. So our malicious user will send an SNI in its client to low saying insecure.com. The server will see that, will look through its poll and they say, I don't need to have a client search for that. We'll complete the handshake. And then the malicious user later on that connection sends a get request with a host header set to secure.com. Again, our server has already set up the connection. So it merely sends that request off to secure.com and sends back the sensitive response from secure.com. So we've made this assumption that the SNI corresponds to the host name that we're not checking that, which is dangerous. And this is not a super tricky hacker kind of thing. There is the curl command to do exactly what I've specified there. So we can't solely rely on the SNI for our security policy decisions. So we have several options. Option one, we could just back off and say, ah, this SNI thing, that was a bad decision to be truly secure. We should always require a client search or not and have a dedicated proxy for that. You could do that. Again, that's a pretty tedious kind of thing. And there may be other SNI based actions that you wanna distinguish on. So we couldn't really do that. But option two, we could always check that the SNI and the host name and the request match. But that's probably a bit overkill on the other side. If the SNI name isn't used for a policy, it doesn't really matter. And with connection reuse and browsers, it's pretty frequent there. You're gonna have a mixture of requests on a connection that will have different host names. And so those would fail. So as I show here in the diagram, the browser will negotiate with an SNI of food.com. There's no policy associated with that. So we just do the handshake, makes a request with a host header of food.com. That's great. We make the check, they match. We sum the response, makes another request with the host header of bar.com. We make the check, the server does that bar.com is not equal to food.com. So it rejects it. And that's probably not necessary. Because again, in this case, the SNI values weren't triggering any security sensitive policy. So with ATS, we've took this middle ground of saying only check the host header and the SNI. If the host header value would have triggered a security sensitive SNI policy. So in our malicious user case, they come in with insecure.com, we handshake without a client cert, and make a request for secure.com. Our ATS is going to check and see that the secure.com would have triggered an SNI policy that requires a client cert. It's going to check to see if the host header value matches the SNI value and they don't. So it's going to fail the request. It's going to turn a 403. And this solution has worked out pretty well for us. We haven't, it catches problems and we haven't had very many false failures. In the community, there's been proposals for other solutions to address this. Specifically in the H2-2 BIS working group, there has been a draft RFC floating around for secondary certificate authentication in HDB-2. And what they propose is dynamically renegotiating for client certs. And this works out and could be implemented today with HDB-2, because the underlying TLS does support renegotiating client secure certificates for both TLS 1.3 and earlier. So in that scenario, the diagram shows we would get our SNI for insecure.com. We'd do the handshake. We'd get a request for the host header of secure.com. The server would recognize that it needs a client cert for that. It would renegotiate the connection, requesting a client cert. The browser would send the client cert. It'd validate, and we'd all be great. In HDB-1, requests are made in series, one after another. So there's always a sense of what's the current transaction on the connection. So we can kind of leverage that lower level TLS to bootstrap us up and get newer client certs to match the transactions as they come. But in HDB-2, there can be multiple parallel active connections. There was no sense of just one current transaction. So leveraging the current client certificate for the underlying TLS connection just doesn't make any sense. And the RFC recognizes that and proposes additional logic at the HDB-2 level to track all of this. And once that gets approved and implemented, that would be a good approach and we'll reconsider that. But at this point, our current approach supports both HDB-1 and 2. And so we're continuing on with that. So with this technology, we've implemented a secure edge to proxy TLS as traffic is entering and leaving our various clouds. So it's a lot like retrofitting the TLS server. So a server in a cloud, we may not wanna directly expose to the outside world. So we have this edge that's proxying requests towards the servers. We don't wanna expose those cloud servers directly because we may not trust the implementation completely. And also our security team finds it easier and more direct to be able to concentrate on one implementation to ensure that the security policy is inconsistently enforced. So we have three options or I'll talk about three options about how we're proxying TLS through our secure edge, TLS delegation, tunneling and bridging. Before I go into TLS delegation though, let me say a few more words about how Athens implements authentication and authorization. So as I said earlier, Athens builds on top of mutual TLS authentication. So the client provides an X509 Athens client cert that's signed by our Athens CA. And inside the cert, there is one of the common names identifies the Athens principal or the Athens user. Then later requests over that connection will include an Athens token in the header of the client request. And that Athens token is an OAuth2 token. It defines the principal and the rules that that principal is authorized for. So based on that token, the server can verify that the request that that principal is making is allowed based on the rules. The token itself has a limited lifetime and it's signed. So with that kind of background, here is how we are supporting TLS delegation for Athens. So in this case, we have a client, we have a proxy and a server. And the proxy is a member of our secure edge running ATS. The client will come in and make a connection to the proxy. It will provide its Athens client cert to the proxy. And the proxy will perform an F1 function to verify the client cert, mostly verifying that it is signed by the Athens CA. Then the proxy will later make a request on that connection and that request will include an Athens token in the header. So an F2 function will be performed by the proxy. In this case, it's implemented in a plugin off the read request header hook. And that function will take the client cert and the authorization header. And it's gonna make sure that the authorization header, so the access token is down to the client cert so that the principal names match. You will also verify that the access token is otherwise well formed. And assuming that all checks out, it's gonna add a verification header to the request and it's gonna turn around and make the connection to the server. It cannot reuse the client cert because it doesn't have access to the client cert key, but instead it's going to provide a proxy Athens cert to the server. The server will verify the goodness of the proxy cert and then assuming that works out, complete the connection and the proxy will forward on the request to the server with the original access token A and its validation header V. Then the server is going to perform its own validation step ensuring that the validation header is present and that the access token is well formed. So it's gonna take the proxy's word for it that that request came from a client that had an access token bound to that, sorry, a client cert that was bound to that access token. Assuming that all checks out, it'll send a response to the proxy, the proxy will send a response back to the client and all is good. So this works out well. The logic, the TLS connection is terminated on the proxy but now we've added another step. So as an attacker, this is another point where we could go and try to attack and a malicious user could try to bypass the proxy completely and try to pretend to be its own proxy and try to connect up to the server. Since the malicious user, if it's acting as a proxy doesn't have to have a client cert that matches the access token, it maybe makes it a little easier. So the malicious user would make a connection to the server assuming that it could and it will provide its own version of a client cert. And if that client cert that M cert checks out, the handshake will complete and it can make a request with an access token and a verification header. The access token is signed. So presumably our malicious user has stolen an access token from someplace. Assuming that all checks out, then it could get the response from the server. So there's a couple levels of protection here. The malicious user will have to find some place, a signed access token. And then secondarily, it's gonna have to create or steal a client cert. So this is the area where we need to be careful on the client cert, what makes a good client cert. So in our case, it has to be signed by the app and CA. So that's a bit more difficult.  So that's one of the areas that as you're designing these kinds of systems, you need to be careful. Moving on, another option is TLS tunneling. So as I mentioned in TLS delegation, we are breaking the, we're terminating the TLS tunnel at the proxy. So clear text is sitting at the proxy. For some traffic, that is unacceptable, particularly for things that have compliance issues like PCI and payment systems. We just cannot terminate on the edge tunnel. We need to limit the exposure of that data. So in that case, we can provide a TLS tunnel. So in that case, the TLS is end to end. It goes from the server, sorry, from the client to the server. And we have a policy that based on the SNI name, we're going to see, oh, instead of terminating it, we should send it on to this other destination. So here we have FQDN of supersensitiveexample.com. If we see that as the SNI, we are going to forward that client to low and all the other traffic directly to supersensitiveorigin.example.com. And then all other traffic is just gonna be blindly passed back and forth through the proxy. So that works, we don't terminate the connection, but we don't really have any control or understanding at the proxy level of the strength of the TLS. Are they doing mutual TLS? What protocol version are they using? We just don't know. And you have to go back to and audit the client and the server to do that. Bridging also avoids that decryption on the proxy, but it allows us to make some guarantees on the strength of our TLS connection independent of the user agent or the server stack. So in that case, we're gonna build a separate tunnel between two gateways, two ATS boxes and potentially double tunnel the traffic. So here's a diagram of how that sets up. In this case, our client is going to be proxying against the Ingress ATS. It's gonna send a connect request for service, but that's gonna get intercepted, delivered to the Ingress ATS. And that's gonna get intercepted by our TLS bridge plugin, which is gonna be configured to say, oh, any connect request is going to service. I instead wanna send through a TLS tunnel that I'm gonna set up with peer ATS. So it sees the connect to service. It starts setting up and negotiating a TLS tunnel with the peer ATS, which we have complete control over. Once that's set up, then it's gonna blindly tunnel everything it gets from the client into the tunnel to the peer ATS where it's gonna come out of the tunnel and go to the service and then return traffic. Similarly, it will go to the peer ATS into the tunnel into the Ingress ATS out of the tunnel back to the client. So here again, our traffic from client to server is not decrypted on either of our ATS boxes, but between our two ATS boxes going over our untrusted network, we have control over the strength of that TLS connection. So we can enforce our mutual TLS, what protocols we're providing, et cetera. And here's another diagram showing basically what I talked about, another way of looking at that flow. So wrapping it up, the secure edge approach has been very instrumental for Verizon media to be able to move our applications to the hybrid cloud. The proxy layer, that secure edge layer provides one place to ensure that security policy is applied consistently. It also enables us to leverage our knowledge. All teams do not have to become mutual TLS experts. We provide support for teams as they're onboarding to the secure edge. And also it has the possibility so our clients and servers for different applications can move between clouds over time and it doesn't dramatically affect the security policy. We're still gonna authenticate the Athens regardless of whether the client comes in from an on-premise cloud or third-party cloud and similarly with the servers. We'll still require client asserts, client Athens asserts, regardless of which cloud they're sitting in. So this leveraging open source technology has really enabled us to nimbly move into the hybrid cloud and provide us a very secure stance. And with that, if there are any questions, I have a few minutes, we'd be happy to answer any questions.


What's everybody JC over jasper's case breaks calm 2020 tops chrome HTA jumbo. This is a one-pack break number seven random teams that helps fill up Tops chrome jumbo pick a team number six So the way this works guys 30 spots ever because a random team at MLB will open up the one pack Distribute the hits out of here and then at the end of the break we will randomize all 30 customer names again in a separate dashboard randomizer and If you come in numbers one through ten you will get a team So Philly's down to the pirates will top ten out of the 30 will get a team and be a part of the break So good luck guys Let's do the break itself first roll it We got six into two eight times one two three four five six seven Matthew gonna ASA So this is for the team break first eight times here one two three four five six seven and eight Awesome red socks in your Yankees Matthew the Red Sox Chris with the Pirates Sean with the Rays Ryan Herald you the White Sox mark with the angels Scott with the Mariners Jago the Padres and over the Astros ace over the Marlins Mike with the Rangers Chris with the Blue Jays Matthew the Braves Ace of the Cubs Matthew the Giants Mark with the Reds Matthew the Royals Tigers SKS with the Cardinals her with the Mets Sean with the Indians Edel with the Brewers Matthew the Oros A's Rockies Twins Mike Dodgers Ryan you have the D-backs Chris with the Nationals Philly's and ace over the Yankees All right guys, so just trade window close Stick with what you got do this quick pack break and then We'll see who wins teams in the break itself. I can't even print this right now Jumbo pack. Well, you got a Luis Robert Ryan just a little base, but sure that'll pay for the spot And we got an autograph Rangel Ravella Santa's Cardinals going to SKS Trevor's story Bogarts nice cordon. Yeah, I should fill up at some point tonight. It's moving rather quickly They say we just got to sell the spot straight up and just do one more pack break. It looks like the score pack sold out So I think we'll sell it out tonight Nice course. You're one for one now All right, don't worry about the rest of the batting average starting yesterday or one for one All right.  Let's see who is gonna win teams in the break itself now So again, let's switch to this page here top 10 get a team whatever you match up as what you get Let's roll the dice We'll learn a five six times. Good luck one two three four five and six Hi, Tom midnight or something here. So 3 a.m It just depends on how busy we are maybe later if we're super super busy For not as super busy than maybe earlier normal like around 10, but I expect us to be past 12. All right top 10 Boom Asa Asa Kurt SKS Matthew Matthew Shawn Shawn Matthew and Matthew There you go after six times. I got six times Boom, so let's actually just do the whole list you guys can see So he said you won the Phillies as well as the car knows Kurt Nationals SKS. Yeah, the Red Sox Matthew the Rockies Brewers Shawn with the Marlins twins Royals and Pirates for Matthew. So there you go There you go. That's going up next. That was Chrome Jumbo. He went to number six. Appreciate it


Oh yeah, it's Friday, right? So, it's Friday. It's Friday here live in the bunker. What's everybody doing? How are we all on this Friday? Are you ready for some like techno drop beats here? You got DJ Steve up in the top corner mixing the CRT beats here. Welcome, welcome in. How are you all? Remember, this is not my show. This is your show. This is your community, okay? How's everybody doing? Nice, Chris. Welcome in, welcome in. Thank you all for joining me today. I have an exciting Friday episode here. That's right. We got feeling a little hot, hot, hot, hot, hot. Like my mic is a little hot. Let's turn it down a little lot. There we go. All right, so I have a Sony in the bunker. That's right. It's this beautiful Sony KV, the Vega, 20 inch KV20 FS120. In studio, folks. Yes, please, a round of applause. That's it. Anyway, if you like the TV, drop a like because we're gonna tear into it. See what makes it tick. I finally have acquired all the hardware needed to accomplish today's objective, today's objective. And folks, our show today is brought to you by all you wonderful Retro Tech supporters over there on the Retro Tech Patreon. Thank you all, so many wonderful people over there. Help keep this ship floating, or boat floating, or whatever. We're going down the river of happiness here, saving one CRT at a time. And thank you all. Thank you all for joining there. If you want more information on that, you can check out the link in the description of today's live stream. Otherwise, sit back, relax. If you can't do anything else, just drop a like. It will help everybody know we're working on a flat screen. Not a flat screen, LCD. Forget about that. Don't even start with those LCDs, please. All right, this thing has a little bit of a screen jitter. If you watched what I posted on Twitter today, you would know that there was a little jitter on the screen. It's not much. I can't see it from here. Now I have, if the music gets a little too techy, I will change back to jazz, don't worry. But again, it's Friday, so we'll see what happens. All right, so first off, before I get too deep into this CRT, I had a request from a viewer. And that was, let's see, let me make sure up here. Buried bits, thank you Buried Bits. Said Steve, my 14L4 needs some advice. I performed the de-magnetization on the tube, but the purity in the upper right persists.  Would appreciate any advice used. All right, so use the degausser ready. There's a degauss button on the 14L4, right? So that's gonna be there. Next thing I'd check is make sure that the gauzing coil in the back of it has not shifted at all in that corner.  So that's my advice to you, friend. You can try to add a little magnet. Just hold it back there and move it around. Make sure it doesn't interfere with anything else. Okay, all right, let's get into it. Let's get into it, everybody. So again, we have this lovely CRT here. Who says I don't answer questions sometimes? Right at the hot top of the show. All right. So I've been messing around, poking around. There is a velocity modulation circuit in this TV, which I disengaged apparently just by going through and changing some things in the service menu. So I will show you that information I found over here. Pardon? On the CRT database under this television right here. If you look down, it says disabling velocity modulation. It's pretty simple. And then if you need a copy of the service manual, that is right here, and that tells you when you open that up, oh goodness, changed pages on me. You go to this page, page 19. This tells you how to get into the service mode, which is just pressing display, channel five, volume up, and then power while the TV's turned off. Then it'll pop up in the service mode. This tells you how to move things around, do things with it. Now this is the remote in the picture, but it's not the remote that came with my TV. But that one probably works. I actually have one of those remotes. Smasher Josh, thank you for the super chat. Thank you very much. What's your favorite SCART cable manufacturer? I get mine from RetroKB cables. Gonna get one for the Xbox, just RGB SCART. Not the YPB PR SCART. Well, Smasher Josh, thanks for the 10 pounds. I think that's 10 pounds, right? Or euros, I can't tell. Sorry, my eyesight's getting bad for an old man. So, I mean, you can't go wrong with RetroGaming cables because, well, and let me see here. Let me open a fresh browser and we'll see if we can't find something for ya. Cause I wanna make sure I've got them all right. Sometimes I forget. It's been a while since I've actually ordered some. In the United States, I like to order them from insurrection industries sometimes if you're in the U.S. And then, let's see. RetroGaming cables, of course, which is the one you mentioned. I just wanna make sure I got the names right, right? Okay. Yeah, they're a good one, especially if you're in Europe. I mean, I've bought plenty of their cables too. And I've never had an issue related with them. So, those are great choices right now, I think. Those are the two most likely that I'm gonna look to first. I'm gonna test it right there. So, they got some good stuff here, RetroGaming cables. Plus, you know, you'll get it. So, there you go. I use them. I've used RetroAccess cables too. They're good when you get them. And I think those are the three tops, right? Probably that would make one. I'm trying to, I'm not sure that if there's anybody I'm forgetting, I'm sorry if someone wants to mention it. Thank you, Smasher Josh Thones. Thank you, Buried Bits for the PLN-1199. Absolutely, you're welcome. Thank you for the friendly advice, Steve. You got it. All right, hey, race. Welcome in, Raceroni. Welcome in, CruiseBroom. Welcome in, Elegion Genouic. Sorry, I don't know if I said that right. Steph and C, welcome in. Ronnie S, good to see ya. Your community here, folks. Shannon Rice, welcome McMuffin. Welcome, Lepi. And Mega Cards. And that's everybody caught up here. But this is what we're looking at. This lovely television, lovely, lovely television. So again, guys, every time you guys hit the like button, it does help. It does help, it does help this broadcast kit. Pushed a little further out and it lets everybody know we're live. So last cup of coffee of the morning. It's still morning here, 11.30, where I'm at. But it's still morning. And I've got the studio ready. Nice, Corumbe said, hello, RetroTech. Thank you for putting that Twitter video earlier. I just turned off the lip velocity modulation on my FS120. Good job. Definitely helps. I mean, I think this one looks really good. And I did actually switch it over to movie mode. And then it had a really hot picture still. So I moved it over to movie mode, first off. And then I am using component input here with HD Retrovision Cables. And you know how they have a brightness selection on the side of the cable. It's just selected on the lower brightness. And it really seems to look good like this. Now, again, I can't see the jitters unless I'm looking straight at it, looking way close to the screen. But there's a jitter there. And what I'd like to do is I've let it run here for probably, oh, 30 minutes or so, maybe a little longer. We're gonna get in here. We're gonna turn it around and we're gonna open it up. I'm probably gonna recap it. I got a client who possibly wants to buy it. So I wanna make sure I can get it as good as possible. And I'm always honest, right? So if this thing doesn't, this doesn't work out. If it doesn't work out. Oh, thanks, Master Josh. Yeah, if it doesn't work out, I don't know what I'm gonna do. I'll probably sell it at the convention if he doesn't want it after the recapping. But that's what we're gonna do. I think it looks pretty good still. I mean, I might even use it. I don't know. All right. Relax. Relax time. Everybody, remember, if you drop a like, it does help. It helps you. Everybody, remember, if you drop a like, it does help. It helps 10 new people come. Not maybe directly now, but we'll help them know, an algorithm know, to come check out the show. All right. I'm about done with this cup of coffee. I'm gonna get my tools ready. Yeah, they're all over here. Cole's in the studio, snoring away at my feet. So let me move this guy a little bit. Oh, yeah, look at that. We're gonna do it from like that angle. I'm gonna come back there and I'm just gonna tear that sucker apart right there. I think I can even add some extra light in there. Yeah, I got a light here and I got another light down at the bottom. Are you ready? Are you ready?  What do you think? What do you think we're gonna find today? Are we gonna find a zap on this Friday? Are we gonna get zapped by the anode cap? I don't know. Let's see. No more delays. Time is now. All right. Thankfully, I've got my secondary microphone. How about that? I bet you forgot. No, you couldn't forget. So we're gonna power it down. There we go. Here we go. This has one of those big back sides. Man, it's super deep. Super deep. Hey, thanks for the super chat. HRCP typo. I really appreciate that. $10. Thank you. Just finished my first S-video mod. Thanks for putting out the content that got me interested in this stuff. Well, awesome. I'm glad to hear that. And I'm also happy to hear that hopefully your mod worked out. Thank you so much. And as everybody can see back there, you're looking into my spooky laundry room back there in the background. Hello. Wonderful day it is to be disassembling a CRT. Let me see if I can move this over. No, my cable. Hang on. Ben, get you some side view over here too. Right? It's just good old fashioned unscrewing. Sony was nice enough to put Phillips head screws in here. Of course, I think I've dropped every one of them. Here's what we've got inside of this. I've never opened this one. What if it's we got a smoker? Boy, that could be nasty. I might have to change a bit of plans for a minute. That would be gross.  All right. So if you're coming in late, you've kind of made it to the good part here. We're about to open up this KV120. FS120 for the first time that I've ever opened it. And again, the problem was a slight jitter picture. Slight jittery-ness to the picture. I guess it would be the best way to describe it. I think I've got all the screws out now. I do have one more. Oh yeah, it's about to spring loose on me, folks. So if there's some kind of grim one in here, it's going to get me live on camera. As crusty as ever. 30 years, not 30, but 20 years of dust, everybody. Let's see if I can get you a little closer to that dusty action. Gosh, there's a lot of caps in there, too. Look at that. There's the tube number right here for this flat tube. A51LPT50X, made in Singapore. Orange label US tube. Hey, thank you for the super chat. $5 from Jake. Jake is wee black. You look like you're about to conduct an interview with a neck board. Good to see you're working on consumer sets again. Yeah. Yeah, it's not... I have actually got to work on consumer sets a lot coming up. I have three large ones upstairs that are next on the list, and I've got to get all of them done. Looky here. We have a wedge that's fallen out. That was up in here somewhere. Right there is where it used to be. It's definitely had a smoker in it, because it's got like soot on it. Gross. All right, so I don't want to blow all this all over the place. I am going to go get, folks. I'm going to get my amazing shop back, but it's upstairs, I believe, to get this out. I don't know what else might get the job done. See that sucker? Get that stuff right there. Usually I would open this on the outside of the house. What else I can do? Just sacrifice a swiffer. All right, folks, please remember, always be safe in the back of the CRT, but always drop a like for your CRT repairman in case he's live streaming and he gets himself shocked, and he needs somebody to help. Just joking. All right. Wow, this thing is nasty. Well, you know, maybe we can get it out without having to worry about, without having to worry about it cleaning it up. I can probably take this out and get the neck board off, get all the boards out, and then I can take maybe the tube and the case down there with all the soot. Hopefully I can take that plastic part and the tube and speakers. I'll take that outside later and blow it off with the high-power compressed air, but I can take this. Hopefully I can get these boards out. And to do that, we need to... Let's see what happens when you discharge one of these bad boys. All right, I'm getting some tooling ready. I got to find that discharge tool. Oh, yeah, it's somewhere in here. I think I... Oh, okay, all right. Yes, okay. All right, let's see. I hope you're ready to see if the Sony... Sparks are not, right? Hmm? And that what we're trying to figure out today is the Sony Spark are not. And I know we have a lovely-sized audience out here. Can I please get a couple more likes? I need 40. 40 at least to discharge. 40 ounces to freedom. Come on, folks. That's only four more likes. Maybe I'll shock myself. Probably running no smart, maybe. All right, well, all I'm waiting for... Ooh, we got one more? Come on, we need three more likes. We've got 38 likes. 38 likes. I'm going to hook up to the back of the tube here. This ground. Right there. Right there. Like for the CRT Wizard so we can get this show run. We're at 44. All right. I had a little bit of a delay, so I appreciate all your participation out there. Now let's do it. All right. All right, let's go. If I can get you closer, since you did better, since you went overhead, over and achieved higher, I will try to bring you a higher experience. Right there. How about that? Cabbage fry. Ooh. How did I do that glitch out?  Wait. I swear. This is not... Oh, that's too funny. Sorry. Sorry. Sorry. Look. Look. I don't know what just happened with that. I didn't discharge it yet. I promise. I don't know what happened. Like, I mean, folks, I'm sorry. I did not discharge it yet. Okay. I don't know what that happened right there. It started glitching like crazy. It hasn't done that in a while. So I might have like bumped a USB cable. That would make sense. Let me see if we go back to it. There it is. Maybe I just got too close and like the... the zapping. Maybe like the energy was coming on and like... It was like about to jump into the camera and discharge to the camera. It was so close. I have no idea. But... Wow. Okay. Let's see what happens. Let's see. Let's come on. Whoo. This is... This is like... Let's go a little bit more of that jazz in here. Dang. I wonder. I wonder if the camera is going to work. Let me see. This is hilarious. Well, since that one almost blew the camera out and it like almost destroyed the entire stream. I'm going to be really like scared now.  Oh my goodness. I hope we're at least at 50 likes by now. Golly. This is like... There we go. I think our camera is good. I think our camera is good. Oh, folks. I don't know what to say. Wow. I just want to say, honey, I love you. And I hope you take care of the kids. And I hope whatever man you find to replace me is not into CRTs, okay? You've put up with enough. All right. Let's do it. Of course. It's all for nothing. I got so excited and it's just a Sony. Typical Sony self-discharging. After all that suspense, I'm sorry. However, this thing is just disgusting. Holy moly is it nasty. We are discharged, folks. Discharged indeed. Honorably discharged. Now we can... Oh man, I'm getting the glitch again. I think it's got something to do with me whacking around the microphone, actually. That must be touching the camera or something. Let me see. I'm going to put that down and let that sit. I had to lose the hoodie. I had to get rid of my hoodie. It was going to be warm. All right, let's see. This is officially a first time for me. I'm going to glitch out again. I don't know what's happened, guys. I'm sorry. I do not know. I don't know what happened to the camera again. I'm sorry about that. Yeah. Let's see. Yeah, frozen.  All right. Let me deactivate that camera and see if we can't get it back online. Let's see. No, we're frozen there. All right.   What's going on with that camera? Hang on. Sorry about that, folks. Dang. Let's see if anything... It's still frozen. Check it out. Guys, I apologize. I have not... I can't believe the camera, like, comes back for like one second. There it is. Maybe it'll stay. There we go. I don't have AT&T. I'll tell you that much. Well, I'll try to keep an eye on it and make sure that I'm not losing my picture anymore. Let's see. Because we're not overdoing the system. It's only a 30fps. No, it says it's 60fps. Maybe that's the issue. I don't know. I did change the settings to 60fps, which may be an issue. Let's see here. Maybe I can drop that down. It is. It's 60. Can't drop it down midstream. Let's hope it hangs in there, though. The thing is, I can't get this darn neckboard to budge. I've disconnected all the cables from it. To push something in there. Mold it to it somehow. I've never seen anything like this. It's like crazy. I can't get the thing to pry the back. I don't want to break the tube neckboard or anything. There's a piece of epoxy down there. I think for some reason somebody put silicone down in the neck socket on this set. I don't know why. Literally. It's crazy. I'll be damned. Somebody literally dropped somebody literally put solder. Or not solder. There's silicone down in inside. So you know how the Sony tubes have that little spacer? All tubes. You generally have a spacer. The spacer is there's dabs of epoxy in there where it's epoxy to the damn back of the tube and to the neck socket. So yeah, I'm going to try. That's what I'll try, Jake. I'll try to dribble a little in there. There's no other way. I mean, it's going to break. I might have already... happen, but I think that's just the plastic on the circle ring spacer.   Right? Thank goodness.  Nothing's messed up. Looks like the pins are all good. Release switch. Thank us. Thank us all. Fantastic. The Mr. Room. Check this thing. Board is out. A filthy mess. This is the filthy mess here. Right in front of me. So much for that coffee. Let's see what we have here. That was a fun little 30-minute extraction. My goodness. That took a while. Look at this. Singular board here, basically, with the neck board attached right there. Hopefully, I can remember how to get it back if I can't remember how to get it back together. We'll figure it out somehow in the manual. Double-sided board. A lot like the PBM boards or TV boards. There's a hoof. That's right. You're the most unhinged place you could be on this Friday with me here in the bunker. Let's see. I mean, this is a lot of capacitors. Some of them probably okay. Some of them probably not. What I need to do now is get it cleaned up some. Dirty is all to get out. Let me add myself back up here.  I need to wash this board. So I think what I can do is I could put that towel I had under this and try to blow this and catch most of it in the towel. Under this and sweep it off kind of. This area is all dust. You can definitely see it right there from your view. So maybe I can catch it over here where my right hand is. Thank you all. I know the music's probably been louder than usual, but there was a lot of... I didn't want you to have to listen to nothing while I was doing all that. That's right. We're back in the bunker. And we're using old things like that old paintbrush.   Sure, people like... Enough, Steve. We don't want to hear you. It's embarrassing enough. We just want to watch this.  Yes, type one in the chat if you like to listen to this show on mute. This is just tons and tons of capacitors. Of course, it's all one big board. It's got the power stuff going on. We've definitely got deflection going in here. We've got channel tuning. We've got audio, circuitry, all combined. And one solid block of hardware here on one main board with a daughter board attached to it. Again, it's real nasty under there. 1.5. 2. I guess I didn't say 2 then. Maybe that means you like it. Well then, you have earned another chorus or two for you. That's it's right. Having a beer already and it's only 12.20. Some days. Some days. Oh yeah. So I do have one cool thing I'll talk about. Man, you know I went and those of you follow things would have known that Zez, Louis, Zez Aran was in town a couple weeks back and we had a wonderful adventure together. He posted the audio version of a podcast which I shared that we did together the day he left out or the night before he left I guess. So that was a lovely two hour spot to check out. But I have a new episode that I've been working on and I'm almost done with. It'll be ready next week. It'll be ready before the end of this leap year. So before that 29th date it should be released. I don't think it's 27th to 29th somewhere in there. But I want to do it right. It's a special video to me. It's my adventure and Zez's adventure together and what I have recorded. It's 30 minutes. It's fun I think. Should we go by quick? It's not a typical style video because it's got two personalities in it. Right there the whole time. It's fun. Too bad Zez and I are not close geographically. Or we would take the world by storm. This is like... Dusty baby. Yeah I do this full time R&R. That's wise. Some people call me a daddy. Daddy rip off when they ask how much I charge to do this sometimes. First I am the top of my CRT game today. And these days. So I usually get ones that are like hey man I think needs to be fixed and I want it going forever. Or I want to try to fix mine and sometimes I can. Sometimes I've had a good run of fixing things lately. Can't lie. Okay look at that. A thousand times better I can breathe. I can breathe safely. Here we go. Look at this. This looks like some decent stuff here. Now it's still dirty. You can see that. Well that's a lot of shadows maybe. Man this stuff. It's just wild. Our main Aboard. Look at all this. This whole block in here would need to be replaced. In the name of science what are we doing? In the name of science. In the name of what am I doing here? I mean am I nuts? This is a lot of capacitors. Well maybe I am. Let's go for it. I'd like to replace these guys. I bet they're nasty. Skip pen and paper. And we are ripping. We are going full on Steve the Ripper mode. Bet to rip it but into this. Let's get this FR-301 up and running. Gonna get rid of the towel here. There we go that should help a little. This is gonna be awesome. Let's do the awesome bit now. I need a piece of paper. Alright Aboard away here we go. Let's see what we can find out. We can find something out baby. Golly Miss Molly look at the back of this board. This looks like some nasty solder. You know that nasty solder right there. Yeah so here's the deal guys. If you want to make sure that you make it to the show that's probably the only time I'd recommend you've hit the notification bell. So if you do that, I'm not going to tell anybody to do it. I don't even use the notification bell myself. So I don't tell people to normally do something that I don't even do. But if you want to be knowing when the show is live that's the best way because it's been relatively the same time but the days, the days have changed a little bit. I believe that's six on that board. What did I say? Six or eight. Looks like it's six to me. Six. Six 34. C634 is our first removal. Is 25 volts 47. Okay let me get my tray. There we go. Where are those helping hands? Those might be helpful. Going back to that same spot again. This time for the little neighbor. C635. It's a happy little capacitor. 50 volt 4.7.  I have a pretty little capacitor. Thank you for all your years of service. But we do not need your jammie con goodness anymore. Let's see what we have next. Gosh I seriously cannot tell if it's a six or an eight. Okay it's a six. I guess that looks like a frickin eight. C647 let's see what the other side says. Gosh this is like I've never seen anything like this. Crazy close. Thank you. Thank you for the five dollar super chat. Hey Steve there's a massive JVCI art on Facebook marketplace locally for a decent price but it only displays green. That's hard to say my friend. Could be a dead IC on the neck board. Could be a blown tube. Probably not a blown tube but could be. And I don't know about how. I have no idea about the rarity of that. That particular component on that neck board.  People trying to sell broken stuff like that they should just I mean what else are they going to do with it. Why are they even asking money. You know if you're willing to fix it they're not. I did have somebody ask me if I wanted to trade in for CRT for some service work and I said look I'll do respect. It was just a it was a hard not even it was just a regular Trenetron like not even as good as the one we're working on today and it's doesn't work. That could be garbage. Could cost me money to get rid of it. So I take donations like I say but I wouldn't. Personally I wouldn't pay too much for anything like that. All right there's a 25 volt 47. Okay the problem I'm having is I'm having a hard time reading the numbers in here. Specifically let's hope it focuses. See those little numbers for the capacitors. I can't tell what they're saying. It's hard to see if it's a six or an eight. So I may have to take pictures and then like zoom in once I remove it to make sure I got everything right. I think I'm good on everything I've removed so far but this one looks like it says 842 for some reason this bigger cap. So I'm going to put blank for two right now on my sheet and we'll remove it and see what it is. All right let's see. Voltage are those two huge caps? What's this one? 50 volt 220. And the big caps are filter caps on the power board. I don't normally change those. So you don't tend to go bad. 250 volt 470 Rubicon. All right I can tell from the top of the board thankfully that it is a six. So that's a relief. That would make sense. Excellent. There we go. Let's see where should we go next. How about this cluster of... Gosh these are some weird values that I probably won't have. So maybe we'll pull them test them and if they're good we'll just replay it. We'll put them back in. Okay. I'm going to remove all three of these. These are all JamiCon CrepeCon. Now this isn't IshiCon but these two are JamiJunks. JamiJunks! I probably don't have these capacitors in the shop either. They look odd. Hopefully they're okay but you never know. I apologize. 100 volt 330. That's an odd one. Let's see 618 and 617. Okay. Now check this out.  They gave me these silly promotional items but I love this one. It's just a pen that Hakko gave me. It's a nice pen and it's got a flashlight tip on it. Isn't that cool? It has the same capacitor right there. I don't know why Hakko doesn't sponsor this show. They should. Chris I've heard people talk about it. I've not really ever done it myself. I mean I use a... I have an interesting power setup here in the shop. Obviously to protect everything. It's got some... I don't even know what the heck the device is called. But it is a giant multi-hundred dollars of hardware. I got from a pawn shop to use... Let's see what this one is. For the power conditioning. But it's not an actual one for... It's like one from an audio studio. Not... That's where it primarily came from. It's used in audio studios. This is 584. Is that right? Okay. This is one I have. Gosh this is gigantic. You want to see something? Look at this. Watch this. Look at this. This is a high quality modern replacement for this guy. So you have this big one. It's a Nishikon 160. It's not even... Look this one's going to be better. Mine's going to be better. Quality. This is 85 degree. Look at my replacement. 160 33. Look at... Just... I mean this is the thing. Like people always ask about size. Look at that size difference. Look how much size has changed in... Look at that. Isn't that awesome? Look how much smaller that is, the new one. More efficient. Awesome. It's a big one. Thankfully this is a common part. So there's plenty of those in the shop. Right. I'm going to keep going. I'm going to move here and then this. Then I'm going to get all these right here. And there's under that heat sink. All the way up to there. And then we'll stop for a second. Not even hitting the right one. It's so hard to tell. Okay. I'm going to go up here. That's this one. 8, 2, 6, 2, 4. Sorry. Let's see what this one says. 6, 2, 4. I got to get some pliers. Good boy, Cole. 160 volt 10. 6, 24. Yeah, yeah, yeah. We're getting on the way. I literally just spilled my water. When this heatsink. That's goofy. No. A good thing I'm not going to be powering it on to today. Done matter. I ain't going to hurt it. All right. Spokes. Sorry. I know you're here in the boiler. Here we go now. 5, 8, 0. 50 volt 10. We are done with and listening to the boiler. It's time to clean. Clean the old FR-300. I'm going to hold for a second. 650. Let me see if I can't get this blots down in there. Felt right here. There we go. Back to it. 616. Let's see what falls out of this guy. Now look. If you haven't already, please do us a favor. Hit that like button. Remember, this is our big community here. We need to share the message. See what the results will be of the recapping. C616. Double checking 25 volt. All right. Maybe it'll be easier to pull these down here a little bit more. We are going to go up here. 5, 0 is that what this says? There we go. Let's see. 25, 220. There we go. I didn't even see that one above it. Another 25, 220. Let's see what that cap is. Can't tell from that side. 585. All right. 585. It says they're hard to see. That one's loose. Hey, Koala Koala. Welcome in. The thick of things. Decapping this amazing Sony. I'm going to get this thing out of here. It's going to have a little 10. C632. I think we're about to remove. Let's see. About 16 caps so far. 5047. Got like one more big one in here. And then maybe I can get this thing out. It's going to be tough to get in there where I'm melting that. See. So I kind of need to get rid of this cap to get under that. It's ridiculous. Who's your daddy? I didn't even burn that plastic. It didn't even get hot. Let's see what we've got here. 5470. No, is that an 8 or a 6 stick? Look at that. The plastic and all of it. Didn't burn the plastic at all right there. We've removed 17 capacitors so far. Now I can remove that little knot and get those other two under that heat sink out. Man, that thing. That's what I just popped out. We'll need that for later. Let's see what's hidden under here. See these two caps down in here under this heat sink? Get those two out. I guess. Man, I'll never get that other one back in there. Don't think that those are probably the problem but they could be I guess. What's the numbers on them? I think that one might have been 2.2. Lots and lots and lots. Oh, I got one more back in here. Two more right here next to this. It's a big one. 25 to 20. 2200. Not 2200. 2200. That trace just burned up. This garbage old solder. Let's see what I just did. 50 0.47. Put an asterisk next to that because I'm probably going to have to repair that trace a little bit. It like liquefied. That's gracious. Yeah, I just can't even tell. It's completely gone. It just literally burned right off right there. Looks the same. Looks the same. But it's not. The look right here. The trace runs through there.  It goes here. It's a very, very tiny trace so it'll be repairable. I just got to figure out where it's going to. I can't believe that. I cannot believe that.  It's trash bored. This is one of those ones that was made in Mexico that has crappy solder. This is not a surprise but it just literally liquefied and disappeared the trace did. Or the pad. Sorry. There you go folks. Happens to the best of us. That's really disappointing. Jerk.   Next up. There's a five right here. Some of these designs baby. Come on Sony give us some. Give us a break. 520. A little fella. There we go. 5022. 5022. We're still working away. There's one more capacitor under that heat sink. This is just wild to me. It's right next to it also. But it's a 400 which is not a power. I'm not changing that one. I'm not concerned with these. I'm not concerned with the tuning block or the input over here because that's not going to cause us issues. This is what we've got to get to now. I think the 500 ones and they're all over in this area. 50v1. Let's see here we're going after the deflection capacitors in here. Goodness. Goodness. These guys man. These silly capacitors. 562. I think it's more out from under there. There's just like clusters. See them clustered all under in here? Three of them under there. I got to get them out. This is just awful. Like oh man.   This is not designed to be redone basically is what Sony's telling me about putting it like this. Pissed off of this board.  All right guys. I love you all.  It's not easy to work on while I'm trying to stream.  So we're done today. Our show's over today.  Gosh this thing. This thing. This is things. See this is why folks. This is why like I only work on people like why do you only work on PVMs? People do not pay me enough to work on this. This actually takes longer to fix and service than a PVM. And that is why I'm like look do you think it's worth putting $600 into a consumer CRT? If you do then I'm cool with that. But look at this stuff.  It truly is. So that's what I'm trying to say. It's like not no no no no. Unless you're crazy enough to pay those rates for it and no upfront that's how much it's going to be or more. This is because this is like you've seen me do I mean in two hours. It's not too bad but it is a pain in the neck. It's too big awkward hard to deal with anyway. Sorry guys had fun working with you today. Have a wonderful weekend.  Have a wonderful weekend. I'll see you guys next Monday or Tuesday in the bunker. One of the days we will be back. Have a wonderful weekend. I'll see you.