Many thanks to the director of the Federal Office of Culture and to Kunstmuseum Basel, our two primary partners. I didn't realise that the director of the Federal Office of Culture had studied mathematics, so I hope he notices in our logo is a set of Bernoulli spirals, Bernoulli being one of Basel's many great mathematicians, which guide in our artwork there. Okay, as I said, I'm not going to dwell on introductions, they're all in your handbook. It's a great, we're flipping first and last because of technical issues. So first up will be Gerd Leonard from Basel. He's a very famous guy outside of Switzerland in digital media, has made a name for himself many times with his repeated prescient predictions about the role and direction of digital media. It's a good thing that he's not charging us his corporate rates to be here because he would be here otherwise. But please welcome Gerd Leonard. Good morning. Very happy to be here. I'm now a native Basler. I've just received my Swiss passport. So if I speak about Switzerland, I have now the authority to make fun of Switzerland because I'm actually a native. If you are on Twitter, I'm G. Leonard on Twitter. Let's see it right here. And my German tweets are there. Many of you may wonder what in the world the future is. There's really no good German word. There's a good French word. I think about what's coming in the future three to five years from now. I don't do predictions. I deal with four sides. Okay, four sides is what everybody has. There's a Chinese saying that says, if you want to know about the future, ask your children. So that's really what it's all about. I try to remain a child in that way and speak to my clients about the future. We work with hundreds of companies. My company is called The Future's Agency, based in beautiful Palestine. And this was some time ago. I actually have something to do with culture and creativity. I'm not just a speaker, but thankfully the world has been relieved of my activities as a musician. It's great to have this event in Switzerland, as you can see Swiss people are very inventive. So it's really good to have that here and kick things off. First of all, I want to talk about the network society. You know what we have today is really absolutely mind-boggling. When I started on the Internet 1995, our first project was together with the Internet Underground Music Archive in Santa Cruz, California. And we thought that five years later, Napster, right, everybody's going to get music on the Internet, wasn't sure it was too early. And all of us went bankrupt in 2002 because of this. It's a great experience to try to impact. But now we have a network society is real. We have mobile devices. The whole world is connected. We're going to have five billion people connected to the Internet. There's a huge amount of cultural change coming of this. Not all of it is good, of course. Like the nuclear power, which by and large is not good, can be used for good purposes, but also for bad purposes. But we have to remember one thing. Today in this society, network society, we're no longer in these silence. We're no longer about art, society, political business, IT. We're actually putting this together. Digital culture really knows no silence. And if you're in the business community, you have to deal with art. If you're an artist, an artist, you have to deal with business and technology. And many solutions to cultural business affairs and issues are going to be in the ICT technology business, with telecoms and ICTs. So I don't know if it actually exists.  But I think we have a new grid of culture that's emerging. I'm very excited about this. Because I think this culture is going to be changing a lot of things.  Here you see in Israel a fun park where you go down the slide and you can post your image on Facebook using a wristband. You can go down the slide and it will post your picture on Facebook. Here you can share your songs on Facebook. You can listen to Spotify. You can comment anywhere. You can publish your running data. This is the Nike shoe. I don't know if any of you are doing this. But if you're working out, you can publish the data. Millions of people are doing this. You can raise money on Kickstarter. There's been 35,000 projects funded on Kickstarter, including Amanda Palmer for, as you can see, for $600,000 almost. You can print 3D images and print your own shoes from like a copy machine on 3D. And there's lots of confusion. And digital culture and network culture is not a quiet place, right? Twitter makes me like people I've never met. And Facebook makes me hate people I know. This is really quite confusing. So, I mean, this is the kind of culture we live in today. But I think the very good thing is that for the creative industries, for creative people, and for the culture, the so-called cultural industry is charming, but we're jumping down to a larger fishbowl. This is a whole different world because there's a larger audience. There's a way to connect with the investor. In Facebook, the investor, find the purpose, calls this so-called social, local, mobile. This is the world we live in. If you're here today, you can check in using a check-in app like Foursquare or Facebook and find out who is here. You can connect with people. Very soon, you can go to the football game, find each other in the audience, send messages, and change your literacy, and it's mind-boggling. But here's the thing to a swing culture. Just talk to the newspapers about what that means.   So that makes a huge difference for business models. There's a great research study from Google showing that when moving from mobile and multi-screen world, that is basically the majority of our media interactions are through screens. Which doesn't mean newspapers will die, but just being on the screen is different than owning the screen. And that's a whole different business model. Many times we'll turn to the closest, swing TV, no longer commands our sole attention. Actually, people are watching TV, but you know at the same time they're on their smartphones. I'm sure you do this on the iPad while you watch your television. The last Swiss music content or the Swiss music something, 100,000 people twittering all the time. They're not watching TV in the same sense that I did 40 years ago. Yeah, I'm clearly out of my vanity, calls this visuality. When moving from a reality from speaking to writing to images.  Because clearly, a machine can't make a good image in the same way that a human would. I mean, the creativity behind making visual things is human. It can't be done with machines, but it's not the same thing. And we have this complete convergence of internet and television. If you're the TV producer, business you're saving grace. Unlike the newspapers, it's going to be a lot easier for television people. Again, the Internet can't find fully-connected devices. I do work in Indonesia. Indonesian government is now putting online 16,470 islands on white high-speed internet on the mobile phone. And these people never had radio before, or television. They didn't have any video. They were singing, and now they can watch YouTube on a white high-speed. I imagine what that will do to people's culture, religion, industry, becoming a connected device. The television knows who you are. Imagine the television actually knows who you are. What do you like? What do you look like? There's a new television coming out by Intel that scans your face while you're watching, and figures out if you're old or young or happy or sad, and changes the commercial. Imagine this, man. Are you scared of thought? But they're serious about this. I mean, I'm not talking, they're quite serious about this. So now we have what's called natural user interfaces, right? Kids love the iPad. I mean, you have tried this with your kids, I'm sure. But, you know, it's completely natural, getting excited, so I think I'm going to keep it there, I promise. So, kids do this, but now what happens if kids can't do this? You see in this video, here's a kid who has a magazine. And this kid is trying to zoom the magazine. You know what this means in reality is that in this world, if you can't be Zoomed, you don't exist. You're not of interest. And here's the next television from Samsung. Voice control of the television. Vision and touching the screen from afar, right? Motion control. I mean, it sounds like science fiction, but it's coming, right? Imagine what happens when we can touch the television and we can pull out the internet in a month, in a few days. One of my favorite movies, of course. So now we have new interfaces. And some people, this is a scary thought, right? Some people calling this my second brain, right? The iPhone, especially the one that came out yesterday, right? If you use it, it becomes your external brain. I use an app called WikiAll. You can download Wikipedia. And every time you have an argument in the bar about how many people live in North Korea or whatever, you just look it up, right? It's an external brain.  This is coming. I'm not talking. You can have an implant for, you know, hearing. You can have an Alzheimer's implant. Why not have a Wikipedia implant? I mean, we have breast implants, but I'll have a Wikipedia implant. So now interfaces, right? Basically, Mirchil Kaku. The Internet India Contact Lenses.  You think that there's biographies in your son. This is kind of interesting, right?  I have to be honest. But this is going to change our behavior. Google Glasses and all this way, automatic translation will be with us in two years. I was in the Google Labs the other day. I spoke in Germany and came out in Chinese on the other side. In real time. I mean, automatic translation is here. What will this do to Switzerland? And will we still learn free languages? This is making it difficult to say. So the next challenge that we have to face in the cultural industries and being creators and then culture adults, augmented reality, human machine interfaces, artificial intelligence, all sounds like a corridor of mobile, which I would highly recommend, right? But it's here, right? Singularity. The idea of having improved humans. Check out this video about how it will be dating in the future. Let's give this some more sound. Great. Thank you. The guy has an iris implant. To access the internet while he's talking. What do you mean? Sorry? What's the difference from sports data in the normal language? I guess sports data for people won't be even going to the case of others. Actually, is it very easy? Very easy. We didn't say it was broke up. So is that what is going to be in the future? I think with technology and with creativity we have to redefine what human actually means. What does it mean to be human? Does it mean that when we are walking to the repository of ad plugins? I mean, this is a scary thought. But anyway, storytelling is changing. And many of us are storytelling, right? It's now called chance media storytelling using all kinds of tools to tell stories. And this is good news for creative people because all of a sudden we have all your video installations and we have data feeds, real-time things and all these things. Here's a clip from Bayer 71 from the Canadian film board. A fully interactive film. We'll see some of that stuff today. Where you can see the journey of a bear. Now, this is a map I found just two nights ago when I was looking for a different world view. And I found this. This is a Kiwi, a New Zealand map of the world. And it turns around. So that Australia and the Kiwi lands is in the middle of that. And I think what we're going to see in the future is that seeing things in new ways is not going to be very important. Getting rid of our own assumptions. There's no better example than to talk about the music business. The music business had the assumption for a long time that we have to control that people make copies of songs. That's the most important thing because we want to sell cities and downloads. Reality is the music industry has shrunk 74% in 10 years based on this assumption. And they still haven't changed. We'll talk about that later. Martin McLuhan, 1971, talked about the global village. This is what he said. I'm concerned with everybody else's business. And much involved in everybody else's life is the sort of anti-language column with large. And it does not stand in harmony with the choir but it does mean you get involved. It doesn't necessarily need harmony and peace and quiet. We should take that literally here. We love harmony and peace and quiet and that's good. It's a beautiful poetry for harmony and peace and quiet. But this conversation about digital culture is not about keeping it quiet. We have to deal with the conversation that is rather complex. The crowd in the club is enacting what we do in the cloud with the crowd. That is a huge thing for the future and it's finally giving us that global village. Cloud computing, all of you guys know what that is. But really what's happening is here that my music, my films, my TV shows, my health records, my money, my education is moving into the cloud. There's an estimate that over two and a half million lives could be saved if the health records were in the cloud. So that the doctor in Costa Rica where you had a car crash could pull up your patient information. This is going to happen cloud computing but the global village is not really about technology. It's about what we do with all these things. How do we react? How do we change? How do we change what we do and how we do it? And I would submit to you that in terms of what's happening here is that trust is the new currency. Trust is the only value that remains when it's about trust in an artist or trust in a business or trust in a company. And you see this trust economy unfolding I think pretty much across the board. In a networked society like this, a society that's very fast-moving and interconnected, all of you are linked in.   Everybody knows that now. You look at people up on Facebook to see what the latest policy was. So we're now heavily interconnected and really what matters here is curation. Because there's so much happening. This is the future rule of broadcasters of radio people of producer's side. They're not becoming superfluous, they're becoming curators. And by the way, all of you want to download those just Google, GERD, free PDF and GERD and then we'll find it. So we're now moving in cultural terms, moving from a society of egos, which are only bad, a society of Disney's, Universal Music's, Goldman Sachs, a society based on empires to a society of biosphere. And if you're looking what's happening, the most successful companies are interconnected companies. Google, eBay, Amazon, YouTube, Skype, Twitter, and then saying Facebook. The all-coming companies that are really independent, Google couldn't exist without our collaboration. Facebook would be dead. We are the content of Facebook. If we don't participate, Facebook is dead. The difference between MTV and YouTube, so MTV was a corporate empire running the show in YouTube's network. There's nobody programming YouTube. We program YouTube. So now we're heading into the era of what I call a biosphere and a ecosphere. So we're going from the egosphere, you know, from large companies, from large corporations, to biosphere. We're going from YouTube to Spotify into electric vehicles. I mean, the regular carbon economy is an empire. But the future cannot be an empire because we have reached the top of that ceiling to where we can go much further. I think what we're seeing in culture, especially in technology, is that control is moving to the notes. You know, the individual parts are working from the general parts to the network. But in a good moment, in YouTube, you're over here because you have a record deal with the universal music. Would you like that to be a public license that you have over here? Hopefully not. No one moves away from you. I mean, we're living in a society that is to be like this. This is not just a culture industry, but not like this. And in measure, of course, the other doesn't go away. Clearly, we're going to have corporations. Clearly. It's a fundamental change of direction, however. And what are we going to do about this? Are we going to go and say back, let's shut down the internet because we want those big fish to be back in power, right? It's not going to happen. We have to get used to a different business model. That business model says that we are on the show. With we, I mean the creators and the consumers. So-called consumers. Not the industries. The industries are there to facilitate that conversation between the creator and the inside. Not to run it. So we're going to see entirely different cultural industries based on creating a connection between the creator and social media. Clearly, is where this is already happening. A great book came out, a book called Lycanomics. If you want to read a good book, apart from mine, of course, you should read Lycanomics. Because he's talking about what happens when people like what you do, how you make money with being liked. And I will grant to you, it's quite difficult to be like as a bank. It's possible, I guess. And it's actually becoming more possible now. But Lycanomics is huge. It's a huge boom for creators because we can all of a sudden use this kind of reputation economy. This is a cycle of cloud with a K that shows the social influence the rating of people who use Twitter and Facebook. And if you have a rating of over 15, if you go to certain American hotels that will look you up and they will give you an upgrade or a free airport pickup based on your cloud score. Because they perceive you to be selfish. But I think we also have to be aware of publiccy overkill. You know, the overkill of constantly talking about. It becomes sort of a curse, right? Because when you share a lot of things, it's a perpetual motion of friending and talking. We have to also be aware of that. I think in Switzerland we have a quite good balance on this, actually. And we should keep that that we don't end up being a whole jail of social connections. This cartoon with a guy in the room who says, you look just like your profile picture. Kind of an interesting thing.  But as creators we must retain some sort of mystery. And it can't all be completely explicit. There has to be something that we keep that is a mystery. And of course now we're heading to the society where offline is the new luxury. I remember that 10 years ago we used to go to a hotel and they'd charge you a lot to go online and they'd still do them. Now you can go to hotels. It'll cost you $50 a day for a guarantee that your mobile phone will not work. They block it. You pay for that. So if you're really into luxury you should explore this. I think this is crucial. That we afford ourselves to luxury your disconnect. Because clearly the creation process does not work with you always being sidetracked into other projects. Very important I think creativity as my good friend Albert said creativity is the residue of time wasted. You ever been to Burning Man? Who's been to Burning Man? You guys know what Burning Man is? Okay. Well it's kind of late to go there now but you know. This is me. This kid does not need it. It's a great example. We need to waste time to be creative. I mean we have to have the permission to waste time. This is why so many companies I work with are not creative. Because the minute of time we waste it is immediately said oh this is that's why you're not allowed to go on Facebook in your company. Because you're wasting time. I mean imagine that logic. This is a lot of people. So here we have a particular problem today. We have broadband technologies. Making us faster. We have narrow-banned mines. Here's a great example of a narrow-banned mine right here in Switzerland. Imagine right now the IVI in Switzerland which is a Swiss organization of the record labels. He said in a statement about the policy of Switzerland. You know Switzerland is illegal to download music but not legal to upload music. This is quite different. But he said it's not Switzerland compared to an early music consumption the income is to low. Politicians still put up with the steady costs of jobs in the Swiss music business unless it's fair or illegal it is not acceptable leads to cultural flattening. So he is clearly somebody who does not understand really how technology has changed but that the mind is still in a dial-up internet. He probably has his emails printed out. But what's happening here is in cultural policy and what we decided we completely broken up the rotary is not about restriction but about permission. It's not about control but about engagement. I mean as an artist you would notice if you're looking for control of everything that you've done if you picture so you will not get engagement you will not get trust you will get nothing. But we also have been discussed at a global level and also been discussed in Switzerland like so far Acta, Pipa and other ace. The internet builds to disconnect people like we have in our neighboring France with Hadope. I mean is there anything more ridiculous these are culture and culture the cure of these ideas because they are respected of network. We have to resist their language urge you the federal office of culture and other politicians not to go down this direction. This is technical Wall Street Journal had an article about the future of the film business and what they do here is they hide their roles of film while everybody else is popping up all over the place in creating other ways to watch their movies. Now let me ask you a simple question 32 million Americans are subscribing to Netflix which is their flat rate music service for 10 dollars a month. 32 million. How come the service isn't available on a global level? How come it don't happen in Switzerland? Or in India or in China? I call the answer simple because there is cable that's having a lot of coverage. We're supposed to use that because it makes more money. So when you think about this piracy piracy is unmet demand. So this is very important for the commercial business because piracy is a driver. What we need is well-native business models and as this beautiful cartoon says we can't tax a cat. We can't prevent people from doing what they want on the internet. If we want to do that we have to become China and even there it's not working. So I would submit to you that traditional copyright is a burning platform just like the BP platform here. It's a burning platform because neither the word copy nor the word write is something that is really relevant on the internet today because everything we do is a copy. You're listening to a YouTube statement, it's a copy. You can convert YouTube I'm sure you know about this into everything. That's how people get music. Everything on the internet is a copy. So what are we going to do about this? We need a new platform. Here's the example of my colleague Ross Dawson who was there who's talking about the future of news. This may be interesting of some of you in general as a business man. Basically what's happening here is that we're finding out that the value of news is not the report and the smart writing that is of course the basis of it but all the extras with filtering the interfaces the relevance. Being inside and designing the reputation giving example I subscribe to the economists I don't bring all this life or opinions or the reporting but I'll have the writing but here's the only reason why I spend a hundred dollars on the audio version of what they write in the car. If they give you a nap you can download the app you can listen to the audio volume by then that is the only reason. I don't have a subscription because I love what they write or how they write. I do but I only have... So we must learn in the cultural industry in the cultural business to build value around the content not with the content not just the content. New York Times has a paying wall you pay 300 dollars a year you'd have to be totally in love to pay 300 dollars a year which they have 800,000 which is a lot of profit but not America's 320 million people not really an accomplishment I would say but Netflix is pay will and we're about paying wall as a band. So the future of media is here this is NASCAR on Twitter. NASCAR is a channel on Twitter now using the Snapchat where they publish short movies and tweets and this is becoming a TV channel. You guys know Ted.com a TV channel. So the future of media is about real-time peer-to-peer distributive media and I'm going to breath out pretty soon because otherwise we'll be here in the evening I won't be here anyway but I'll be talking but what's coming next this is very very important I mean we're not in Europe out of 500,000 a year this is what's happening with money I'm going to tell you what's called sustainable capitalism one form of capitalism that does not just use externalities to make money off and this has a lot to do with culture culture is the part that can make money also sustainable we can learn from art to stay how to be sustainable and not exploit the system I think of course the reality is it'll be both the equal to equal and money at the same time so a quick take away for you point number one we're living in a network society refusal is useless you can say okay you're going to go off the grid you could be in the matrix over here you can go under them you can do that a bit of a connected society will not be available to you if you choose to disconnect or if you want to disconnect but that's obviously not going to happen so we have to learn how to live with this what martial law is called chaos and noise that is something that we have to learn how to filter we're moving from an ego society to a biosphere, an ecosystem if you're a creator if you're the cultural business this is very very good news because culture and creativity always has to do with having a network with being connected and this is also what businesses can learn from artists how to actually now improvise how to set things up another irrefutable trend that no consumer and parliament everywhere okay still here that's good okay so we are the show that means we are actually what's happening on Facebook we are the show of Facebook I mean some people call Facebook a perpetual virtual reality show that's very true but if we weren't participating in Facebook and we can actually can make that happen if we want to we can leave okay so we are the show this is the biggest leap in the creative industries that we've seen since the invention of the phonograph social local mobile take some time off use waste to waste some time to be creative a few way up we're going to do about inventing something okay this is my final group turn up the sound please and this is too good to waste sorry I have to go into this and actually queue it up because okay so my final message on this is this one I always said life is like a box of chocolate you never know what you're going to get that's my final word let us know what you're also talking thank you very much and have a good day


Today, we're going to be talking about programmatic debugging.  I like to lead that up, because it gives me like 15 seconds, and I'm done, and you guys are happy instead of saying, hey, why didn't you talk more? I was raised on a computer, had one of my seven or eight dead work for IBM, took the programming, really liked it, then went and got a degree, started out as a vocal performance major. Trust me, after CTF, this long you do not want to hear me sing. It would have to be some sort of Elvis melody or something, because I just can't hit anything high. So after spending a year and a half as a computer science major, I jumped into pre-med, because, well, I didn't want to go into computer science without testing other areas. And of course, Bachelors in Computer Science was in for me. Got out, got into a teaching job. And I don't know, computer sought me out, did a lot of fun stuff, and, well, I'm here. I do a lot of research into security issues by divine intervention, some help from friends, and, well, because I love it. I lead a capture the flag team called Last Place. Anybody heard of capture the flag? Lots of fun. I encourage you all to try out. You've got to qualify for it. So you've got to sign up a couple months ahead before DEF CON. So check out Kenshoto.com, and you too can have a lot of fun. I have a lovely family. And they see me probably less than they'd like, but more than some other people. I keep trying to tell them that, and they don't get that. What is programmatic debugging? Well, you might think, what do you think? Let me speak it out. Fuzzing, interactively automating the debugging process. Dude, that's really good. Can we relay this, because I don't want to throw that far. That was close, but I'm getting there. You're jumping way ahead. I'm sorry. The idea behind programmatic debugging is the use of debugging code in a canned fashion. So you write a program to debug another program. Not always, but we're talking rough definition here. So what's debugging? Well, it's getting rid of bugs, right? And if you think that, well, I should probably get out and let Martha Stewart come up and finish the talk. I don't care about getting rid of bugs at this very moment. And there's a reason that I maintain my anonymity, because I can say that now. In my day job, well, I can't quite get away with it. But what am I interested in when I'm doing programmatic debugging? Somebody, finding bugs. Very smart. I don't care necessarily to get rid of them, but I'm interested in finding them. A debugger allows you to access the important components of a running process. By the way, I've not slept much. I've been competing in TCF. So if I trip and fall, or if I fall asleep during my talk, somebody please get up and nudge me, and I'll carry on what I can. It's the access of a running program, its memory, its CPU state, and several other goodies, in a way that is outside of the program. Again, it's a rough definition. Some of you can argue that, but that's what we're going to go with. In the last couple of years, I've seen the advent of several very interesting tools that implement programmatic debugging. The first one that I ran into is Pi Debug. And some of you have heard of it. Pi Debug is a part of the Pi May hacking framework. Thank you, Pedram. It's a really cool tool. Unfortunately, it only works on Windows. It does work in Python, woo-hoo, which is good. ImmunitySec just came out with a debugger with a Python interface to it. Basically what it looks like, and I can't speak to their coding practices, but it looks like they took Oli Debug of great fame. Anybody love Oli? Oli's good. I like Oli on Windows. They took Oli Debug, or at least the look of it and feel of it, wrapped it into their own debugger with new themes of colors, and provided a Python programming interface. Kudos to them. The Python interface was very smart. Then Invisigoth, in a very unvocal way that is Invisigoth, wrote a tool called vTrace and released it to the public. vTrace is what we're going to be talking most about because, well, vTrace is my favorite. And I'm the speaker. And if you have a problem with it, you talk. I promise to a good friend, I'd tell you about Noxdebug a little. Noxdebug is a Ruby-based program debugger. Used to be that all debugging frameworks were just you had raw C code that you had to write to. So this is why GDB has, well, it's one of the few debuggers on the POSIX platform. And it's why there are so few real debuggers on Windows because we had this C interface. What I'm seeing, however, is your favorite programming language and mine. Well, yeah, Python. Coming out with their own hooks into debugging, such as pTrace on the POSIX side and the Win32 debugging routines on Windows. What does this mean? Who cares?  I don't know why you're saying this to me. You should care because we've just taken the difficulty gap and shrunk it immensely for you too to do amazing things using programmatic debugging. So what can we do? Well, a few examples. From, am I allowed to say that I helped the Intel Guardians folks in their venture against virtual machine environments? You guys heard about Intel Guardians, right? Intel Guardians, they rock. They're so cool. They put government dollars to good work. I know you don't believe me, but to good work, government dollars, yes. Same sentence, good. DHS money investigating the relative security of virtual machines. Why? Well, because you probably have virtual machines in your data center. And probably on most of your desktops, at least most of your desktops in this room, I know I've got one in every system I own to prove that virtual machine environments are not to be used as security divisors. You do not mix security domains on virtual machines. Anyway, I got to play a part in that. And it was really cool. I built a lot of tools and some since then. And I'm going to tell you a little bit about them. Life patching. Anybody hacked any video games? Get around keys or whatever. You don't have to admit it. It's illegal. I'm not encouraging it. But I know some of you probably have done it. In fact, some of my best friends got into security field by, well, something like that. So I wrote a tool called Life Patch. I give a memory location, and I give what bytes I want to see there. From a bash shell, it attaches to a binary, modifies the running process memory, and releases it. And it gets to keep spinning. Live dumping. This is something that I often couple with process grep. Live dumping is the idea of, from a bash prompt, I run my tool, I give it an address and a length. And it spits out in nice hex fashion all the bytes in that chunk that I've just described. Then there's process grep. I don't claim responsibility for this one. Although I probably will have to give it to you since Invisigoths saw a fit to remove it from his tools. Mem grep is really cool. You type mem grep from a bash prompt. You guys get the idea like bash to. You can use cmd.exe as well. The idea is you type mem grep, give a seed or a needle, as it's called. Mem grep attaches to a process, searches through that process for the needle in your haystack, or process stack, or whatever kind of stack it's looking at. And a tool that's kind of had to take a back burner recently due to preparation for CTF and a few other things that work. Vampire Jack SSHD. This is a tool that Doc Brown and I wanted to get ready for CTF this year. But the idea is you create a program that attaches to the SSHDman, handles children as they're spawned, and then basically Vampire Jacks in and allow standard and standard output to be written to a file, even though you're not the one that has the session open. Really cool, fun stuff. What else can we do? Well, basically everything that your favorite debugger can do, we can do with Vtrace or one of the others that we mentioned. I like search memory, the basis for Mem grep. Anybody done searching through memory, space, and GDB? Oh, my goodness, do I feel your pain? I actually, since then, since finding Vtrace, I have figured out a way to make GDB's very obtuse programming language do searching, but it's extremely slow. Mem grep is very fast, and search memory. In order to use Vtrace for all that I want to use it for, I found that I have wrapped it into my Python shell. Yes, I like to use Python as a shell. Interactive Python is an amazing way to compute. By using Vtrace, it allows me to attach, just randomly attach to a process or start one up, step through execution, searching, running, break pointing, everything that you would do in a normal program, I can do right in my Python shell. The real question here is, what do you want to do with it?  What are you going to present on next year? What are you going to do with this information? Too many people that are very, very intelligent, or motivated, or whatnot, simply lack the encouragement to be excellent. I want to take that, take this moment, and encourage you all. And I will do it again, because that's just how I am. People like pictures, so I threw these in. I don't know how well you can see them. On the left-hand side, I've got a Sands program written by my good friend, Ed Skotis, called Format Flaw. Sorry, Ed, I didn't ask your permission before throwing it in. On the right-hand side, I've got an interactive v-trace session open. So we run Format Flaw, we import my own interface to v-trace, and I tell it to attach to Format Flaw. Gives me a little back trace, tell it to run, and then when I overflow the buffer, we get, oh, what is this? Anyway, we get the different messages that I can't read right now. Sorry. Using a tool, just a little helper script that I wrote, it basically provides me with the view that I like to see in GDB. In v-trace, allows me to step, so you see my next instruction, tells me where I'm at. This is stack information and more stack information from a different perspective, all my registers, where I'm at, and what the next instruction is. So the real question here is, so what? Yeah, yeah, unless you have fun. Cool, we knew that. But wouldn't it be interesting if we could take this new knowledge and apply it in some applicable way? I know that Java has a bad name. Probably some of you would cheer for that.   And it was annoying, it was slow, and it got a bad name. The problem was, they had selected only one of the usable things of Java. So what do we do with each new piece of information? This went in, for example, how do we take programmatic debugging, or the ability to interact with a debugger at a Python code level and encourage vulnerabilities to magically appear? That be interesting? Well, that sounds kind of like fuzzing, right? I mean, you fuzz, and you make a program break, and that means that, well, you've got some sort of a vulnerability. Even if you can't exploit it for shell code, you can at least DOS the program. This is a little bit different. What we're going to talk about here is something that can be applied to fuzzing to help it. But the idea is more, how do we indicate that we're breaking? But more importantly, how can we indicate that we may break it? See, fuzzing is weak because only when you truly break something do you have anything at all, and then you have to try to track back how you broke it in the first place. If we could stop a buffer overflow before it happens and trigger and mention, hey, this might be a good place for you to go look, these things are more important, in my opinion, for vulnerability discovery than simply breaking a program. Although, I've got to tell you, I know some great fuzzers who break programs all the time. In fact, one of the Kinchotto guys was referring to what he does during the day, and he says, I think he says, I just throw a lot of poo and things break really cool. I like elegance. I'd rather know where that poo really hit. So let's take buffer overflows, for example. There are several major vulnerabilities in binary programs. Buffer overflows are probably the sexiest. So how do we identify a buffer overflow or a potential buffer overflow? Just so I know, how many of you have written any Python code at all? Raise your hand. Excellent, excellent. So you've probably heard of something called an object, right? Object orientation in classes? Well, Vtrace introduces a breakpoint class, which can be subclassed to do whatever functionality you want. So we set a custom breakpoint at key functions that are notorious for causing buffer overflows. We do some stack analysis and buffer analysis, and we can identify if this particular overwrite is going to go beyond the length of this buffer, or at least to a high degree of certainty. Yeah, there's a great deal of value in it. Give you a little example of attaching with Vtrace. We start Python. We run from Vtrace import star. That's how I roll. Me equals gettrace, and then attach to the PID. We add some breakpoints. I like to tell it run forever, especially in this type of work. This means when I hit a breakpoint, execute the code at that breakpoint that the object identifies. Remember, custom breakpoints. And then keep going. I don't want to break and take a look at the stack and look at the registers. Just execute the code and keep going. Then I tell it to run. So for the next few slides, I'm going to go through and address how we might approach this from some of the very most popular ways of causing a buffer overflow. So memcopy takes a source, takes a destination, takes a length, and copies from one to the other. It doesn't care anything else. So we break at memcopy, or at a call to memcopy, specifically, before it does its little prologue thing and sets up its new frame pointer. So we check the length of desks. We can find desks, the destination buffer, by looking at the stack pointer and moving up four bytes. That gives us a pointer to either, typically, either a heap location or a stack location. If you don't know what those are, that's OK. Don't get up and walk out.  But they are just two significantly different and very important ways to store information. On the heap, specifically targeting deal malloc in this case, we can often check the length of a buffer because the pointer to a malloc buffer is exactly four bytes after the length of that buffer. Kind of cool, huh? So we simply go to the pointer and we back up four bytes. And we read in four bytes. How many bytes, or how many bits is four bytes? 32. Why is that important? Yes, this talk will be focused on 32-bit operating systems. It's just the way I had to write it. 64 bits. On a 64-bit system, what would this number be? 7. Exactly. Give that man. Oh, dude. You are so poised. By the way, I got to give credit. He squires. I won't waste this on them. Invisigoth and squires, everyone.   That's Invisigoth. I got you. This one's got your name on it. You come back and I'll throw it at you. So anyway, as we were saying, thank you very much. So anyway, we jumped to the pointer for the heap chunk. We back up four bytes. We get the size, right? OK, in an ideal world, that'd be true. We'll go over in a few minutes how that's not always the case. But if you actually hit the pointer to a real buffer chunk, it does work that way. On the stack, well, stack variables are typically your local variables for a subroutine if you've written code. Hopefully, that'll make sense to you. All right, bring it on, baby. The truth is, the truth is, I am Atlas. I got a picture of one of those things stuck to my head last year at CTF. It's pretty fun. So anyway, on the stack, we generally store local variables for whatever subroutine we're in. And yes, you may have several of them. Most often, we are only intru- well, OK. The really easy to score vulnerabilities can be found. You bet. Love you guys. Dude, we need it. Last place, thank you very much. Although I may have you change that to whatever place we come in. Nice. Nice. Anyway, I'm in the middle of the competition right now. So I love you all a lot to leave my team and come talk. So anyway, it is interesting to overwrite different variables on the stack between you and return pointer. But if you can get to the return pointer, you win. In some cases. Anyway, but it's of interest to you, either way. So a very rudimentary way to look for buffer overflows on the stack is to check EBP plus 4, the base pointer, and beyond the base pointer is RET. So that's where we get the plus 4. And we subtract the destination buffer to see how long we have to go to overwrite the return pointer. So we wrote a, oh well, I wrote a very, this is a sparse version of memcopybreaker. If you want the real thing, go get Atlas Utils, downloadable on the web, probably at my website somewhere. Memcopybreaker, it's a breakpoint publisher, something else that I wrote. When writing a breakpoint, you simply overwrite the call to notify, or the definition of notify. Notify gives you a pointer to the breakpoint, the event, and the trace itself. So you can do all of your manipulation and investigation there. So just as an example, we pull in the EIP, the instruction pointer. We pull in the stack pointer and the base pointer. We use our special math skills to determine how long the copy is going to take, pulling that off the stack, too. We find out how far away ret pointer is. We get the dust in the source. We check to see how long the destination buffer is. And then we compare. If there's going to be an overwrite, we alert. Pretty simple, huh? Except when attacking certain libraries. Some subroutines don't start off by changing the base pointer. They use that base pointer for, well, whatever else they want to use it for. So measuring to the base pointer is not going to get us there. So what do we do? How do we overcome this? Well, there are several options. The one at the bottom, if you hate reading the whole book, the one at the bottom is the one that I found to be the best. But you can, and since this is my background, this is the first thing that came to mind, you can disassemble the whole code and use that to intelligently inform your tracker. It's kind of ugly. Most of those solutions, you look for stack setup throughout the subroutine, unfortunately. Well, for spaghetti code, especially code that could be jumping all over based on input that you don't know about, this can get really ugly. We can also take the bottom. Just before returning, you've got to clean up all that stack. So oftentimes, there are op codes that will tip their hat into how big a space you're living in. These are all very rough estimates, but they get you a start. What I actually found to be the best case in my exercises was stack backtracing. The idea is you start at your stack pointer, because, well, your stack pointer is your stack pointer. They don't use that to plot stuff all over and use it as a general register.  Take out that four byte. What's that? How many bits? You turn that 32 bits into a number and compare it against your memory maps, because your memory maps define to the computer what valid memory space looks like. If you find that that four bytes actually points to a legitimate memory space, you can then turn it around and do more analysis, such as, well, stuff on this slide. So if the 32 bit number that you've just reached is part of maps, the memory maps, we can then back up, and it's not totally trivial, but it's not that hard, to back up from that location and see if the previous opcode was a call. I say it's not easy because, well, if any of you have gotten into opcode disassembly, you'll recognize that, well, you can have a two byte opcode that performs a call or a jump. You can have, well, several other variations that get really nasty. So we just stuck them all in a list and we checked for all of them. And then ultimately, the more testing we choose to do, the slower the program goes that you're executing and the more accurate you become with your alerts. When hacking, I often tell friends, students, whomever, when hacking, you are iterative and not afraid of failure. Why? Because it only takes one win to make a thousand failures worthwhile. Who was it? Charlie, Charlie, yeah, Charlie Miller. Recently, not too long ago, posted on his blog a check from the government for $80,000 for one ode that he sold them. I think that's worth a few failures, don't you? So what we're trying to do is limit the scope of how much we have to look at to see if we can overflow a buffer or find some other vulnerability. And here's the majority of code for a part of the tool that I call FindRat. So we start at the stack pointer and we continue until we meet all those criteria that I just listed. Again, the final tool is in the Atlas Utils. You can take a look at it later. And hey, it's not perfect. I'm not perfect. I'm not the best person in the world. I just love to do fun stuff. Send me bug reports. Better yet, send me improvements. That's awesome. I will love to include you and list your name as a contributor. FindNextHeap, this uses... Oh wait, wait, sorry. What if we have a heap buffer? What do we do then? Remember, I said only in the most ideal situation do you have that magic length just before your buffer pointer. What about a struct? If you've got a structure, you may be memcopying in and out of that structure 20 times and never hit the actual base of the structure. Well, because you're accessing its elements. So if you try to take a length from the four bytes previous to the buffer pointer, you're probably gonna run into other areas of the structure. Ooh, that's toughy. So how do we overcome that one? Well, we write a tool called FindNextHeap and get connected chain. FindNextHeap says, all right, I have this address. I need to know what the boundaries of this heap chunk that I'm in are. Okay, so I create a buffer of 1,000 bytes, but I'm really only interested in, or I'm writing to four bytes in the middle of them or 100 bytes near the end, whatever. So we start at the beginning of heap memory and we traverse through a link list because, well, it's a big chunk of memory, but we have to keep track of it somehow, right? So we've got this huge chunk of memory and we create little allocations and they are linked. So we can walk through all the heap allocations by starting at the base. So we start at the base and we go through the range and when, well, we meet certain criteria to say that we're at the end, we stop. When we identify that we've now traversed beyond the address that I first handed in, we stop. We keep track of the address that we had before and we identify the actual chunk. Well, what's that get us? Gets me how long I gotta go to overwrite the next buffer. Why is that important? Well, the first couple of bytes on the next buffer can be sometimes useful. It serves as a good stop and often means that I've already overwritten something of value and sometimes means that I'll just crash the system because it's got a canary, but those are the things you gotta find out. For another example, stir copy. See how well my cliffhanger abilities have maintained. Stir copy. Well, stir copy is a great tool, right? If you're a hacker, what does stir copy mean? Well, it means I don't set how long of a copy it is. I simply say, okay, take this string and well, copy it as long as you don't run into a null byte. Copy that over here into this other buffer, right? Well, what if that other buffer is 14 bytes long and the original string was supposed to be seven bytes long, but well, the coder didn't really check much and it turned out to be 30 bytes long. We now have an overwrite. There's a, there are other more secure ways of doing stir copy, such as stir and copy. Stir and copy takes a little bit of mem copy, wraps it into stir copy and says, okay, copy until we get to a null byte because that's what terminates the string. Oh, by the way, if you go over 100 bytes or whatever number your programmer sets in, stop there. Cool, right? It was supposed to get rid of all buffer overflows having to do a string exception, stir copies. Problem is, just like everywhere else in security, if you fail to understand and implement a given security feature without considering its strength and its weaknesses, it's just another tool. Right? Stir copy, we check the destination pointer and the source pointer. We do the same calculations that we talked about for mem copy by getting a size. How long do we need to make this overwrite? And by the way, did it make it? Write your code, find out. Stir and copy? Well, we do a desk pointer and source pointer, but then we take size and we make sure that it limits it appropriately. Now, why is that important? Because the fact that my string, my source string is only five bytes long and I'm copying into a 20 byte buffer doesn't matter. That means you missed a vulnerability that time, not a problem, right? What about the next time? What if that string grows without bounds? Stir cat, very similar to a string copy, only you start at the end of the first string and append onto it. It's pretty difficult to get this one right.  So, stir cat, at least one point in the code, just kind of alerted, hey, I got stir cat here, you wanna come check it out. Enough about buffer overflows though. That's old hat. What about format string exceptions? Is there a way that we can tell if we're about to, if we have a format string that, well, it can be provided by a user or somebody across the network. Not perfectly, but there are some hints. If you break on printf, for example, you check for your string, for your format string. ESP plus eight, it's the first parameter handed into printf. The other printf-like functions have their own location because they take different parameters. When we get the address of our format string, remember, it is always a format string, whether it's provided by the coder or by the user on the other end of the network in some foreign land that hates us. Where does it live? Now, shortly after I started writing this talk, I ran into some folks from a vendor, which I will not mention, but they did very well on Ed's malware endpoint security product bake off, I think it was. So, go check them out. They were talking about the exact same thing. When they get certain system calls, they trace back much like what we were talking about in here and display and check to see, okay, where did the system call come from? Did it come from the heap? Let's stop it.  Well, something like that. So, did it come from the stack? Typically, you don't wanna be making this all imperfect. Okay, I'm only giving you options to investigate and trying to narrow them down. Yes, you may create a format string on the stack using various tools or other function calls. Most often, if you see a format string coming from the stack, however, you want to investigate because this should normally be something that at least originates in write only or read only memory. Aspirin.f, some more fun stuff. It just changes the locations pretty much very similar. Aspirin.f, hey, this is cool. We can limit that length a little bit. So, at least we're not creating buffer overflows, hopefully. Well, you wanna find out. Programmatic debugging will allow you to help or will help you, sorry. There are various others. ScanF, how am I doing on time? Yeah, that's kind of what I was thinking. That's why I'm blowing through these. GetS. I had one written and the notify was, oh my gosh, I have getS running. The man page for getS says, do not ever use getS. Gee, thanks, so I derived it. Well, they wrote it at a different time, but do not ever use getS. Why?  This is a problem. This is a good thing. I'll let you decide. GetS. GetS gets one byte. Okay, how can I do a buffer overflow with one byte? Well, oftentimes getS is called with a loop around it set to some number. Loops in assembly code are typically wrapped around the ECX register or RCX, depending on your platform. Probably a good idea just to go find the getC function wherever it was called from. Look at the logic around it. Look for the loops. See how you can manipulate them that way.  If you would like to be really elite, you start looking at assembly opcodes. In the program itself. Such as RepStow, RepMove, Rep is an opcode modifier. It can be wrapped around many different opcodes. And it says, okay, as long as ECX is greater than zero and I decrement it every time. Hey, that kind of sounds like a for loop, right? We then do this opcode. So maybe it's storing data into a location. Maybe it's moving it into a location. Either way, by seeking out in the disassembly any rep byte operations, you'll often find another loop that you can then investigate. Not a whole lot I can do for you in programmatic debugging on a grand scale. However, you can create a template that you can simply say, okay, stop at this point and start tracking. Tell me what ECX is. Things like that. It's a little bit more focused than everything else I've been talking about, but it still helps and it works. Reminder of how format strings work. And here we are to the most important part of the presentation. What else can we do? I'll leave that up to you. The force moves strong in your family. Pass on what you have learned.  And I'm looking forward to seeing you guys up here next year. Many thanks to my God, my wife, my kids, my friends. Last place, Visigoth and Conchotto. Squires and all the bullets that they shot at me. Anybody want some of this raw energy drink? The great folk over at the OCTF, is that what it's called? Thank you very much to Moose. Comes up to me, says, dude, we gotta get you some brondo. What the heck is that? Says, well, it's like Mountain Dew with echinacea and like, or whatever. All sorts of nutrients or whatever to help you win CTF. Electrolytes, there we go, thank you. All right, come get one. Thank you all very much. Have a great day.


Here are some tips on completing your parts of speech worksheet. When providing examples for each part of speech, five one-word answers will suffice for almost all of them. However, we'll need to clarify this for the gerunds. This is basically due to the fact that what you've written can either be used as the main verb in the sentence, that would be the present participle, or can be used as the gerund. For example, the word playing wouldn't be enough as it can be used both as the verb or the gerund. So an example sentence such as, I like playing poker would suffice rather than simply the word playing.


here is 2006. 2006, 2006, right? Yeah. And so Joe and ChemDog start chatting or DMing or whatever the hell. And ChemDog decides to give them, give Joe brand four seats. Yes. And they even named them the reunion seats. That's correct. Yeah. Because it was the reunion because it was the first time these various characters had started chatting again. Correct. After 15, 16 years of not talking. Yeah. Right. And so it was supposed to be four seats from the original bag was how the story went. The story went there were four seats from the original band. So they got popped and they got creatively named one through four. Since it was already A3D, let's do one. Yeah. They were they were named one through four. Yeah. So, you know, the forum era was a little bit different era.


Hi everyone, Joe for jazby's casebreaks.com coming at you with a quick little a random number block randomizer for Penini Spectre football pick your team number three, which is coming up in a separate video. This sells it out It's a number block break for all those teams right there There they are again So it's a number block break just for those teams and only for pick your team three big. Thanks to these folks for getting into it There are the numbers right there. Let's roll it. Let's randomize it Seven times lucky seven for each list one two three and Seventh and final time after seven we've got Greg down to Patrick seven times for the numbers one and Seventh and final time After seven we've got five down to four memory as you read in the item description I'm sure everyone read it zero gets any and all redemptions including one-of-one redemptions for that huge group of teams But one will still get any live one-of-ones So Greg with five Justin with eight Amber with nine Paul with three Patrick with zero So again any and all redemptions for that big group of teams right here Including one-of-one redemptions, but Raymond you'll still get a live one-of-ones Tony with two and seven Jordan with six Patrick with four So let's order this by number right there and Coming up in a separate video will be the break itself a two-box break itself stick around for that one Chatsby's case breaks.com


The whole construct of a bomber task force is to be a little bit more flexible, a little more agile. Go to areas where we don't normally operate out of and prove that we can actually still launch long range strike out of those areas. Our hosts have been phenomenal here. We could not have asked for much more. Colonel Said and the 11th group, who are basically the base commanders here at Morone Air Base, have been very welcoming, they've been very accommodating. We've had multiple static tours to again explain the bomber mission. Multisuit. See. I think some of the highlights that this BTF accomplished, we actually brought weapons with us. The very first week we went and integrated with some Latvian JTACs in Latvia. Then later on we were able to go into the African AOR and work with some of our allies. So obviously whenever we can bring weapons and practice that skill set with our allies, that's always a big plus. Two. One. Weapon away. We've also flown some incredible sorties. We were able to honor the fall on a B-day by overflying Seminole glies. We also did Allied Sky. We were able to fly over all 28 nations, but we've been doing that pretty much at least two to three times a week doing high-vis integration exercises with our allies and just basically showing that the long-range strike capability can be launched from Spain. Control. We have a 0-1. Flight over 2-6-0. What was unique about this one was we were able to come to a base that hadn't had bombers operate out of it for a long time. It can still be extremely successful, which again is a testament to the entire team that came out here with us. We've crushed every high headquarters director mission that we've had. I've got to just throw a shout out to the whole team that's been out here. Like I said, we don't get the scorecard that we get out here without every aim and contributing to that mission. We've had a very, very focused mission set. Everyone has been fully linked into the mission, both on the flight line, both in the back shops, because again it just shows the impact that they have on how crucial every aiming is to a bomber task force. We really do bring everybody for a reason and if anybody fails, the whole BTF can be in jeopardy. So the fact that the entire team has been so successful is just a testament to every airman that has come on this BTF.


Big Rami, Big Rami, or how do the bodybuilding boys say it? Big Rami, please?  Microwaving their food, it's not organic, it's not high quality. No nutrients, we're going to take a look at the one video that is available with Big Rami's diet. Obviously, this isn't everything he's consuming, but from what we can see, how much better could he be eating off camera. Plastic in the microwave, that looks gross. Now I eat my first meal, my potato, and my chicken. To the average person, this might look pretty healthy, but once you develop an in-depth understanding of nutrition, every single thing can be nitpicked into oblivion, just the tea he's drinking. Tea leaves are grown usually in heavily fluoridated water, they're full of chemicals, herbicides, pesticides, it's basically drinking liver poison and he added some more spices which aren't helping, that's for sure. The chicken and potatoes, yeah, they're conventional, probably full of chemicals, pesticides, but even the way he cooked them, they are dried out to begin with, heavily, heavily heated. So it's stressing the body's enzymes, it's not digesting well, it's causing oxidative damage. Then, he throws it in the microwave to nuke it even further in plastic, radiating himself, the nutrition out of the food, the endocrine disruptors in the plastic that he's making up for by injecting himself later. Even the smart water, it's just a bunch of chemical laboratory minerals added to water packaged in plastic. This guy's on his phone all day getting exposed to radiation. I'm genuinely curious if these top bodybuilders that look better than anyone ever has would benefit from implementing these lifestyle changes, higher quality organic food, prepared properly better cooking temperatures, natural cooking devices, reducing Wi-Fi in the environment, sleeping in a low Wi-Fi environment. I'm genuinely curious if anyone's implemented that. Microwave again. I mean, who doesn't love listening to 300 music while eating their fish and rice? We didn't mention the sriracha in the first meal. At best, it's slight liver damage because of the chemicals, the low quality of ingredients that go into it. You can make a homemade, natural alternative that's much, much healthier and not too difficult to do. Fish, super heavily polluted. We did a video on that. I don't think anything that comes out of the ocean is really safe to eat right now with the exception of some high quality fish roe and caviar. The rice, as with anything he eats really, if it's not organic, there's always going to be a chemical concern. What type of water did he cook the rice with? This was from Jet Fuel, a meal company. We know in order for these meal companies to make a decent profit, they can't be using organic ingredients and the highest quality stuff.  It was prepped in a kitchen with low quality ingredients.  It was frozen, shipped to him, thawed out, reheated in plastic and a microwave. You honestly can't get much worse than this guy's food quality. Obviously, there's a lot of nuances with the stuff these guys are taking and how that plays into their metabolism, but who knows if someone actually followed a high quality bodybuilding diet. He didn't show any other meals in this video. He had a few shaker bottles here and there. I'm assuming he had a pre-workout. I'm assuming he had a protein powder. But overall, his diet is stressing his body's enzymes. It is not high or significant in vitamins, minerals, or fatty acids. Look, it's not the most inflammatory diet you could be consuming, but it really is devoid of anything besides pure protein and pure carbohydrate energy. That's really all he has in this diet. You can go look at what those golden age bodybuilders were eating, steak, eggs, milkshakes full of high quality cream. The food quality was much better back then in general across the board. Those guys were much healthier. They looked a lot better and they lived a lot longer. You could look at what Ronnie Coleman was eating 15, 20 years ago in videos. And that compared to what Rami is doing, it's a very drastic decrease in food quality, the nutrients contained in the diet. And I bet if you looked at the lifestyles of these people that have been successful for longer, such as Ronnie Coleman, eight Mr. Olympia titles, you have Marius Puginowski who won the world's strongest man five times, I believe. Compare their diets, their lifestyles, how they slept. All of those factors to the current athletes, there's some obvious discrepancies that can be made from the Wi-Fi exposure perspective, the food quality, as well as the sleep which is impacted by the Wi-Fi. So thank you guys for joining me today, hopefully you learned a little bit. But if you guys can please leave a comment down below, drop a like on the video, subscribe so that YouTube can unsubscribe you next week. And if you do want to support me further, definitely check out frank-defauno.com. Thanks again for joining me, guys. I'll see you for tomorrow's video.


Israeli Prime Minister Benjamin Netanyahu is trying to dissuade his opponent from full men, a government as he seeks to hold on to power. Centralist party leader Yair Lapid has until Wednesday to build a coalition. A media report from Israel say he is close to reaching agreement with ultra-nationalist leader Naftali Bennett. Netanyahu, Israel's longest-serving PM, fell short over the decisive majority of the January election in March. The fourth in two years, Lapid could be close to reaching a delay according to the BBC's media analyst, Sebastian Osher.


A glitch in the matrix. That wasn't just a plot device, you know. Sometimes things don't quite hang together logically. And when there's a disruption, a break, an inconsistency in the story, it takes you out of the story. Like when you experience a deja vu or a synchronicity, it immediately brings you into awareness of something bigger than normal. Synchronicities always land for me anyway with like a little sense of wonder, a sense of a mystery, a sense of like a religious experience. I'm always humbled by them, which is natural because you can't make a synchronicity happen. It is utterly beyond your control and so it comes into your life as a gift.  And that's why it is actually true. It's not just a plot device. When you experience a deja vu or a synchronicity, it means that something is changing. It's not only the world is changing, but even the past is changing. Even what is ancient is changing because we're stepping onto a different timeline.


Hello friends, welcome back to another video on the channel. I hope you're all doing great for anyone new to the channel. My name is Lee, also known as Osiris. And yes, it has finally happened. We've got the cloning menu glitch back in version 1.1.2. Going to take you through all of the steps with how to do it in today's video. So, hop over to our switch. What you want to do is have, want to be standing outside a Pokemon Center. Best way to gauge whether you're outside the Pokemon Center or not for knowing spaces so you can go straight in is going to be just going into the Pokemon Center, coming back out.  Then you want to have your poker catch device open. You're going to have to have it on the hidden moves section and have your cursor hovered over fly. And what you want to do on this screen is kind of mash in all together until you get the map up on the screen. So, you want to just do this over and over. You'll finally get it. I take a few times, there we go. Okay, you want to be listening as well to your character because at this point you should be able to still move your character. So, I'm just going to plug my headphones in so you can hear what you're doing. And you want to hit up to go into the Pokemon Center. So, as soon as you're in the Pokemon Center, what you want to be doing is going up two spaces. So, one, two. Then you want to go across like seven steps. One, two, three, four, five, six, seven. That should take you down the escalators into the Union Room area. You want to hit, when you're down there, when you've heard all that animation finish, you want to hit right again. And that will take you back up. And then when you're up here, you want to hit left five times. One, two, three, four, five. And then down three times. One, two, three, or two times, whatever. But you'll get outside the Pokemon Center doing this. And once you're outside the Pokemon Center, then you want to change over to your right analog stick because that's not going to move your character, but you are going to be able to go over to different places on the map because you want to select somewhere that you can fly to. So, this next step is a bit tricky. What you want to do is hitting A and then X after it. The problem is, if you get this wrong, it will freeze your game. So, before you start this whole process, it is worth just saving your game before you start this. So, if it does go wrong, if it does freeze, you can just restart your game and then boot it up again. What you want to do is hit A and X, like I said. So, you're going to bring up the option to fly somewhere so that yes or no, but you want to have the menu over the top. It's getting the timing right of it really in this screen because I've done it a few times and it's crashed a few times and I've done it a few times and go to right. And it's just trying to get the timing right. So, you want to let about here. I think it's worth just letting you know at this point the times that I've got this right is when I've let the city name or the location name kind of populate in that box. So, sunny show city is where we're going right now. I've let sunny show city and the question mark appear in the text and that's when I've hit X and that's when it's been successful every time. So, it's kind of just getting your timing right. Don't prematurely hit the X because that will cause the yes or no option to not appear and then you're going to be stuck in this screen and you're going to have to reset. But if you let that kind of location place populate and then hit the X just as it's finishing in the text box, that should be the way that it kind of works. So, here we go. You can see I've got the option to fly still but I got the menu open. So, I want to hit yes, it will fly but the menu will stay open when you're doing this. Like I said, just be patient with this step because like I said, getting it wrong will just make the map just appear and you can bring the menu back up but you're not going to have that option to actually fly anywhere which makes it a little bit tricky. So, if it does happen, if it does freeze just reset your game. Like I said, just save before you start this whole process. And when you do have to restart you have to go bring the menu, the map up, go into the Pokemon Center, come back out again stop this whole thing again to do it properly. But now as you can see we can move our character around if we want but we have got the menu up. So, it does work. Rather than moving your character around with your left analog stick, just use your right analog stick and you'll be able to use, go through the menu without moving your character. So, what you want to do is go into Pokemon and then go into boxes and you can see here if I go, I've got an empty box here, I've got a box here. So, what you want to do on this screen right now you want to just hit, click into a Pokemon. So, you've got this list and then you want to hit X. And then what you want to do is you see the menu glitches appearing again. So, you've got a menu inside a menu you want to go into this menu you want to go inside these boxes and the box that you want to clone you want to hit Y twice. Select the Pokemon and come back over, drop them here and then you want to hit B. And then you want to hit B and then you want to go down and check summary and then congratulations, the box will be cloned. And as you can see, oh, you can do it again and again and again if you want but there is the glitch. So, you can go back in and do this again if you want. If you've got another spare box to do it but that is pretty much how you do it. Just press B and press B out and then you are fine. And then you can come back in and you can check that you have done the glitch and you can see items have been cloned and Pokemon have been cloned as well. So, that is how to do it. And as you can see, if we go back to our home menu you can check on the version. Just press X on here and we are on version 1.1.2. So, there's the proof in the pudding. The trickiest part is I think friends is being able to do the flying part of it. So, when you've got that menu open once you've been in the Pokemon Center come out and you want to fly somewhere it's getting that menu screen open while you're flying. So, that is the trickiest part. It will take a little bit of patience because getting the timing right of that is a little bit tricky but we have got a way to clone Pokemon clone items again in 1.1.2. So, possibilities of doing other things that we've done before are endless now. So, we will be covering other updates with the glitch what we can do with it. Other advantages that you can have in-game as we go forward. If you'd like to see more do let me know down in the comment section below. And if you've enjoyed today's video and find it useful please leave a comment down below, leave a like on the video and do consider subscribing to the channel. And we'll leave it there. So, thanks for tuning in. Have a great rest of your day and I'll see you for the next one. Take care and bye-bye.


Hello and welcome to another episode of our special cities meeting all odds in this series. We are recognizing we're honoring leaders who despite all the challenges and problems in which is thrown at us by this lockdown are ensuring that economy and our businesses remain active. They're trying to contain the damage that this crisis can cause. With me today is one such special leader Mr. Naveen Khemka media CEO media com South Asia. Mr. Khemka especially is very special because it's very difficult to catch him. It took me 3 years to get an interview with Mr. Khemka. Thank you so much for having me. Thank you so much. This is actually a very good time. Most of the times I would get replies like he's travelling, he's not available. Now I know all of you are at home. So at least that level of excuses is gone. At home but not alone. It's almost two weeks now that we're all at home and we're almost entering the third week. What are the challenges the main challenges that you have faced so far in running your business from home? I would say we were actually we saw this coming. Nazia to be very honest because we were following this situation very closely in our global offices of China which is where obviously it first and we saw it coming and therefore we were preparing ourselves for a lockdown like this almost three months in advance. So you know we took a lot of initiatives. Yeah we took a lot of when we started in China so we actually took a lot of initiatives and learnings from our China market and our China offices and and you know what we did was we actually started making sure that all our systems were checked for remote working. We also gave our entire staff almost 80 to 90% of our staff before the lockdown started. We actually also give them all laptops. In fact the day of the lockdown in the day the lockdown got announced and it was from midnight that day we obviously didn't have any more laptops to give away so we actually transferred all the remaining desktops to people's firms. So that was one thing that we did from a readiness point of view and also from a systems point of view we ensured that every system you know beat beat planning beat all the tools beat all the softwares beat my entire billing system everything was remotely functioning and a around the 12th or the 14th of March we actually went on a national lockdown ourselves as a group and we tested the entire system remotely and so as when the lockdown happened from our from a work point of view we were very seamless obviously we went a bit slow we went a bit slow because you know systems are a bit slow and everybody does not have fiber or you know very good broadband connections at home so it went a bit slow but yes from a compliance point of view from a GST point of view I think we are absolutely 100% compliant as we speak and all our clients whoever I reached out to and said that for the next two three months will be not sending physical bills will be sending e-bills and they are all GST compliant so every client has actually come back and said that they really appreciate this move and they will accept not physical but digital bills going forward so yeah so I would say apart from apart from not being in office the office is almost functioning I would say almost at 90% efficiency and 100% capacity wait you were even ahead the government yeah you know we are in a service industry and we have to be prepared for the worst so this is despite 90% efficiency from your side I don't know how many clients are actively working right now so particularly you have clients like make my trip you have clients like Hilton these industries have really been hit very hard by the crisis yeah you know you know there are two so yeah so it's a complete question yeah I was asking like what kind of solutions are you working on for industries like these or what do you suggest to other agencies also for media or hotels tourism or travel industries so yeah you know I would say I would say two things there are two scenarios one is the pre-lockdown scenario and one is the post-lockdown scenario in the pre-lockdown scenario pretty much we were getting briefs from all clients except for maybe yeah the travel and tourism and you know and the retail those were the sectors which are obviously very hard hit so those clients I'll deal separately pre-lockdown we were pretty much working for all clients we are working for fantastic campaigns in the April May in the April May June quarter in the April May June quarter and that being the largest quarter for us given that IPL happens in that quarter and given that you know a lot of start of the financial year we have a lot many new campaigns planned so things are pretty much normal once the lockdown got announced and which means the entire country has gone into the lockdown which means which means that you know the entire country is in lockdown which means all shops and markets are closed which means that even if people want to go and buy some products they can't so that is when the stress started when all the beef started drying up and all activities that were planned had to be pulled out or no new activity was no new campaigns were to go on air even though even though they were planned earlier basically led by the disruption I would say two things a people sitting at home obviously not having the opportunity to buy and second thing is obviously given the fact that the entire supply chain in the country got disrupted with so many trucks and so you know so many people got getting stranded on the highways and movement of goods between the states and the districts not allowed so that is how it the regular business got affected and some of the categories that got affected basically like like you're likely saying the retail the the multiplexes you know the the hotel industry in the travel industry because I make my trip is your client Hilton is your client absolutely how long will they take to recover or what kind of suggestions are you giving to these clients? Yeah so I think these clients basically what we are telling them and and we have we have constantly in touch with them and what we are telling them is they also realize that that you know when when there's a big storm and this is like a storm for that industry you cannot fight that storm. There's nothing you can do about this you have to just let the storm pass. So what we are telling them that's right so just hold your just have have have patients hold your horses do not get do not take anything which is knee jerk make your make sure that your teams are together make sure your employees are together keep the morale high keep the employees engaged and things will start looking up in the next four to six weeks. Engagement can you do at this time you know when your industry is shut? No so it's a good question actually so so you know we are in fact at media comm group M we are actively engaged with our with our teams so apart from forming WhatsApp groups obviously which everyone I think would have done by now so we have about 250 odd people everybody in that one single WhatsApp group and which is extremely active that's one the other things about what we are doing is that leadership level we are connecting with our teams on a daily basis in the mornings and the evenings something unique that we have done which now obviously everybody is appreciating within group M and also globally at media comm we identified there are about 20 kids 20 young people who joined media comm who are actually what we're calling them home alone what I mean by home alone in home alone is when the lockdown got announced you know they couldn't travel back home and they are not stranded in Delhi Bombay Bangalore staying all alone or staying with a roommate and obviously feeling lost so we've actually created a group called the home alone kids and I'm engaging with them on a weekly basis we've also connected them to a lot of people around them who did not they did not know earlier was staying very close to them so in case they need any help so therefore they don't feel as if they are lonely they don't want to be called the home alone kids yesterday those kids told me that that's very boring we want to be called flying solo so that's what they have named them they've named themselves flying solo and professionally what kind of engagements are are you people yeah so so that's a from a from a from a people point of view just keeping them engaged in fact one more thing we are also doing a lot of webinars we're also doing a lot of training sessions we are also doing some stand-up comedy acts getting some yeah we are getting some friends so that's people are really appreciating that so that's more from my engagement point of view so and from I would say from a work point of view I would say we are missing a lot of time in doing something which all of us want always wanted to do and never had the time so I would say we upscaling them we are rescaling them people have been told to take at least one initiative every week at least one you know we have hundreds and thousands of programs on our global pages which are like training sessions so everybody has said that every week they will do at least one of them and they are maintaining a tracker which all of us are tracking so yeah so I understand the work could be a bit less I understand that we are all working remotely but this is also the time to make sure that we are upscaling ourselves and a lot of clients actually have reached out to me and said can we organize some trainings for them so we are also also trying to see what sort of training can we organize for some of our key clients. So Vivo is one of your very big client and were you expecting something like IPL getting postponed or cancelled I don't know what kind of damage has it caused or I don't I just want to understand the scenario that what are you doing for Vivo right now because it's the title sponsor of such a big property which has been yeah which there's so much uncertainty about IPL now so yeah it's a fantastic question actually and with team Vivo we keep discussing it every day in fact as to what we should be doing so you know I think V as Vivo and Mediacom totally invested on IPL what IPL has done for Vivo is unprecedented Vivo's today household brand name today in the country right in such a short span of time and IPL has a huge role to play in that so we are totally invested with the IPL and we are in constant touch the team Vivo with the BCCI to find out what are the solutions that we can offer we definitely want IPL to happen obviously in conducive environments however if IPL cannot happen in this quarter so I'm sure between BCCI and Vivo we will you know come to a conclusion as to when is the best time to hold this tournament because everybody in the country looks forward to this tournament A because such a high viewership event A and also Vivo had lot of launches planned around this event so having said that we are still gearing up for our launches as in when the lockdown goes down and I'm sure yes yes of course of course no no so you know understand there are two things IPL is an opportunity for a launch however if IPL does not happen the business has to go on so therefore there is a plan B also in case IPL does not happen what will we do in the next three four months to make sure at least the three or four phones that are that are lined up for launches are done and also that the stock that is getting piled up right now because of the lockdown how are we going to liquidate that stock in a very short period of time so yeah there are multiple strategies being worked out as we speak right now and I'm sure I'm sure in the next two three two three weeks you will see a lot more a lot more of this taking shape if you really look forward to IPL it's more like a festival for the entire country so you also have a PNG you know which is a consumer beautiful client and it is the demand is still on so what kind of strategy do you have for a client like this which is irrespective of the lockdown or people are still going out they're still buying consumer products so PNG be still be advertising and spending on marketing right now yeah I would say I would say on a client like PNG which is obviously seeing seeing no loss of demand right now it is life as usual there I mean the teams are working on and PNG follows a July junior so therefore this is the time when my teams actually work on the annual presentations you know category by category we've been brief for the next year and we are working on those annual presentations and you know there's a lot of work happening from a from a July July June 2021 point of view so that's one part of the story and from an immediate point of view apart so I think they will be absolutely fine as in when the supply gets restored apart from that I don't think PNG as a client is facing any challenges so a the factory has to obviously the factories have to restart assuming one and be the supply chain has to get restored beyond that I think it's pretty much work as usual on PNG in fact we are doing some fantastic work for them for some of the brands of what we called as moment marketing now especially for for a brand like Wix there we have some some very innovative stuff right now around the COVID-19 and trying to you know propagate social distancing trying to propagate messaging in a very in a very Wix sort of a way talking in general not just for your clients this is the time when worship is at its peak you know people are spending back numbers we will have new back numbers today news worship has increased by some 200 300 times even GEC time spent on digital as well as TV has gone up so yeah should I mean there are that what what sectors can take advantage of this and you know still advertise is PNG or consumer or I mean I don't know you would know better which sectors can right now make use of this opportunity so you know I you know I would say I would say it isn't it isn't it is an opportunity it is a media opportunity but not necessarily it is a it is a it is a sales opportunity right because everything outside is closed even if you look at it from an online perspective even online players are facing a lot of disruption in distribution and how they will deliver and so on and so I would say yes the opportunity is big because people are spending a lot of time on media not necessarily would lead to sales so therefore one needs to be very careful one needs to be very careful into how they want to invest money behind this opportunity and I would say even grand-building today I would say one needs to be very careful because the environment the mood the mindset of people is extremely extremely negative so at this point in time do you want to obviously build a brand you want to build a new brand you want to say that my brand is so good for you and so on and so forth I'm not sure so I'm saying yeah you have to be very careful especially if you are an online brand like I would say like a gaming app or if you are the news news app or if you are a news brand want obviously consumption to rise on your platform so it's fantastic opportunity because people have the time and they will sample your product you have daily hunters also your client right yes of course of course so you know we have MPL we have MPL which is a very large gaming client and we have daily hunt and they are seeing unprecedented surge in in traffic onto their apps unprecedented so for them I would say yes it is an opportunity because people have the time to sample their products and people have the time to spend on their apps but for the others I would say yes the opportunity is there but it is not time to be opportunistic it is time to exercise a lot of caution so this this disruption has definitely will leave an impact on our economy we still do not know how long will this go on but looking at other markets how much do you think this is going to impact in if you have to give some numbers overall how much will it slow down I'm not yeah you know I'm not the authority for this but still you know I'm also reading what you guys are reading yeah I would say the revised GDP is around 2% to 2.5% so if that is about our industry yeah that's what I'm saying if you if you now correlate the GDP to the to our industry I would say I'm assuming the GDP is at 2.5% 3% this year from a growth point of view and pretty much I think we are looking at wiping off all the growth that we are projecting this year at the bare minimum so if you are projecting the growth of 8 to 10% for the entire industry I would say I'm assuming this quarter is the washout quarter or this quarter is when things will not be so stable and from July onwards possibly things will go back to normal and I would say pretty much we can we can say that you know the the growth that we are projecting for 2020 at least for this year for the 1920 for 2020 sorry is what is going to get wiped off and in case in case we de-grow as compared to what we did last year then then there are huge repercussions on the industry and and there are certain media which is already at a huge stress which are not going which actually de-growing they are the ones who will see a face the maximum burnt are you referring to print sector no I would not say yeah so there are there are mediums which are under a lot of pressure so today print is under pressure today our door is under such tremendous pressure because people are locked up at home today any so you know there are today cinema media cinema is under so much pressure because all cinema also closed yeah so I'm saying yes I mean I'm apart from TV and digital I would say in every other media will go through a huge amount of disruption and as an industry we'll have to then get together and see how we can what we can do to save save all these media from from going into a negative trajectory so before we close I would want you to give a message to the industry about how can we really all of us can come out of this situation despite all the problems and estimations that things are not going to be very good in the next few months what is that one thing that we can look up to and still hold ourselves I think it's a it's a very good question and I keep thinking about this myself and being responsible for almost you know as a group we are responsible for three to four thousand people directly indirectly on a day-to-day basis we also feel very responsible towards everyone who works with us and also obviously all our clients so I would say the three things actually I think and you know which I keep telling everybody now and I call it the three hours basically I think we should be a should respect everything this is a huge lesson for everyone we should respect everything human non-human irrespective of whatever small job that a person is doing the time has come to realize how interdependent we are on each other so yeah so respect everything and do not abuse the environment that's one be responsible I would say the second hour is be responsible as a citizen and everything is not about money everything is not about success so we have to be responsible and we have to do things which are right for the society and a third thing is restraint I would say the third hour we might have all the money we might have all the luxuries in life but a little bit of restraint is good just to take care of everybody so it's very important to follow these three principles and then ensure that we are living behind a fantastic company for our juniors or a fantastic world for our children that's how you look at it and professionally you know people who have just started up or maybe young entrepreneurs who just started a new agency what kind of piece of advice would you want to give them actually actually if you see my heart actually goes out to them to two sets actually somebody kids who've actually passed off class 12 and are waiting to start college kids who've actually passed out post graduation are waiting to join new organizations have job offers in and are looking for jobs those two those two two communities and the third one is obviously somebody who started a new setup my heart actually goes out to them because I think they are the ones who actually looking at life so positively there's so much to look forward to new job getting into college and suddenly life seems to be just being very cruel to them so all I can tell them is that we are all here to help them please do reach out to us in case any of you are in trouble and we will see how best we can help you so anybody who's getting into anything thank you so much for your time Mr. K. Mka and I really this was inspiring and I'm sure a lot of youngsters would want to reach out to you for help after this I wish you all the best stay at home and stay safe and thank you so much for talking to exchange for me there thank you sir thank you so much thank you so much stay safe and be in touch please thank you so much


It is a golden opportunity for us to directly support the victims. Taking those out to make room for supplies, extra people in case there are injured people on the ground that we can move somewhere else. Or if there's water or food or medical supplies that we can move from a central location out to someone who might not have access to that otherwise.