Ladies and gentlemen silent Mike back with another video today We're talking about squats and deadlifts and if they're necessary and if they are the king of exercises before we dive in do your Boy a favor subscribe. Let's see if we can get a thousand likes on this video Give me a little thumbs up comment below what topics questions you want me to cover in the next video Let's dig in we got a comment from my guy. He said deadlifts and squats are mandatory exercises and you must do you must do now I might disagree so first off when we're Choosing our exercises exercise selection does matter very and it's very dependent on the athlete the history of the athlete and the ultimate goal of the athlete if your goal is to be a three lift powerlifting the sport of powerlifting is squat bench deadlift Then I agree with my man deadlifts and squats are mandatory because you're going to have to compete in them And you're going to have to perform a one rep max in those movements If you never do them if all you do is lunges and all you do is is hamstring curls and calf Raises and then you hop in a powerlifting meat chances are you won't hit a good one rep max You're best one rep max or even hit them to competition standard But if we're talking about the regular public who just wants to get a little bit fitter Look a little bit better.  Maybe you play basketball in high school college or professionally football or soccer American football rugby hockey doesn't matter I would disagree and I would say that there's a number of exercises that we can implement instead of the deadlift and squat It will depend on the athlete now in the past I worked with a lot of collegiate athletes both rugby and basketball in particular That's just the community I knew and those are the sports that I played and we had a good a very good athlete Shout out to my my homie little Chris Very good score and basketball. He was probably about six three six four six five as he started going getting older I coached him from in basketball as a freshman in high school and then in strength conditioning up until he was in college and For one he grew very rapidly from freshman year to when he turned 18 He probably grew from five eight to six five and then two we played basketball and he played a lot of basketball very hard So he had a little bit Tender knees sometimes maybe tender night is Soar knees etc etc in which case we just did a deadlift and we hardly squatted We do a lot of stuff to warm up his legs a lot of different mobilities We would do box squats sometimes even high box squats I just want to get some kind of stimulus and strength into those legs We did a lot of Bulgarian split squats both weighted and unloaded bodyweight movements And then for back stuff, you know Yes, deadlifts are one of the best hamstring glutes and low back movements for overall strength But we can get around stuff like that. We can do back extensions We can do rows chin-ups etc to hit the upper back And again reverse lunges walking lunges in tons of different hamstring movements hamstring curls even For some team athletes are very applicable now if we're talking bodybuilding, you know I think there's a big definition here also when you start to talk about, you know IFB IFBB and maybe enhanced lifting In a natural bodybuilder or someone who does not take PEDs of any nature. I think that someone who does not take PEDs Yes, squats and deadlifts still are probably one of the best movements you can implement for overall muscle building Strength building when we're adding as much load as we can Deadlift is often an exercise if not the exercise that every human on earth can perform with the most amount of weight If the number is bigger not only are we using more muscles in our body The stimulus is greater and also the progression is greater. So number one if again I talked about this another video if I'm doing a hamstring curl a single leg hamstring curl And I'm using 30 pounds on one hamstring to add a 5% to that load is gonna be really really hard It's gonna end up being a pound 2 pound 3 pound which sometimes you don't have the increments on the machine But if I'm to add 5% on my 500 pound deadlift now adding a couple plates every other week once a month Etc is much easier not only on our system But for the overall progress not only daily weekly monthly yearly and through our whole career We also have to look at the goal of the individual if strength in general is even the ultimate goal If you're playing a team sport if you're an endurance athlete if you again just want to look a little bit better strength training will always help, but if you're one rep max or Optimal strength top-end strength doesn't necessarily have to be the goal I think that all sports can benefit even marathon runners can benefit slightly from some strength Training, but the overall goal of that strength training isn't necessarily top-end strength. It's Durability it's muscle and balances. It's building a little bit of muscle and it's almost like recovery for some of those athletes To be able to even out body parts that may get overused in their sport in their daily lives Again, I don't think there's any Definites in anything we do in any sport there's always workarounds especially in the weight room and that's kind of the goal of the strength and conditioning coach the Personal trainer the whatever it is their goal or their task is to have this huge huge pool of Tools and allow them to think it through Problem-solve critical think and how to apply them and when to apply them to work around now I learned it all through training athletes soccer moms The elderly and power lifters over the last ten years And so some of it just takes time a lot of observing a lot of reading and a lot of application itself some failure Some successes and you start to figure out what works, but my ultimate Decision my the stamp in the foot. I'm drawing the line in the sand squats and deadlifts are not Necessary they are great, but they are not necessary. I appreciate it guys Be sure to give this thing a thumbs up comment below find me on twitch We're streaming every single day my new podcast 50% faxes on itunes spotify anywhere you want. I appreciate you Sound like I'm out of here


It's a topic that either you're here to come and refresh your knowledge or to learn from the beginning. If you're here to learn from the beginning, it's kind of like taking a jug of water and pouring it into a cup. When I teach this course, I teach it in about 40 hours. I'm going to try to condense that for you a little bit. You going to work tomorrow? But when I do teach it, and I take the whole 40 hours, I can tell you that my students are completely conversant in the Palestinian narrative. The Israeli right-wing narrative and the Israeli left-wing narrative, the nuances, the challenges, the statistics. And I think this year we've graduated at least 100 students that can go out there and speak about Israel in a very comprehensive and knowledgeable way. And that's what I want for you. If this is your first time, you're going to need to learn it a few times before you own it. But this is a conversation we have to have. We have to seek out these conversations. We have to get our story out there. The anti-Israel narrative is very strong, and they come up with new stuff every single day. The last one I heard is that Palestinian men beat their wives because of the pressure of the occupation. It's every day. We have to know our story. We have to know our history. I also want to tell you that at the end of the 40 hours that I teach the chorus and I adore my students, I always end up, I ask them, I want to ask you something. Do you think I'm right-wing or left-wing? And they have no clue. And I'm very proud of that. So I'm going to tell you the story as I understand it from the best election of scholarship. So I'm trying to squeeze in here the religious, the indigenous, legal and moral claim into the narrative of the Arab-Israeli conflict. Like I said, I shortened it a little bit. I'm going to try to do it justice. I'm kind of new with the clicker. So biblical rights, I hope you were here at last week's lecture. Rabbi Breiderwitz went over very completely the biblical claim, and that biblical claim is also the historical claim, the Torah tells of Abraham's journey from one person who discovered God and his dedication to teach the people around him to God's promise to Abraham and to his descendants to make him into a great nation in a very specific place and to fulfill the covenant between God and God and the Jews in that very specific place. And it's not Argentina and it's not Uganda, it's only one place, it's Eretz Yisrael. God said to Abraham, I will make you a great nation.  We're blood-related in our nationhood.  And we know very well what the parameters, the boundaries of Eretz Yisrael is. There is no question of where God meant for his Jewish people, for his sacred nation to be. Out of the 613 commandments in the Torah, 50 of them can only be fulfilled, 50% of them can only be fulfilled in Eretz Yisrael. And as Jews, we mention Israel, Zion, Jerusalem, and our prayers no less than 50 times a day. I want to talk about indigenous rights, it's very much linked to the biblical story. Indigenous rights means not that you're a native of a place, but that your nation is indigenous to a place. It is the land, it is the genesis on a land of a people's spirituality, religion, culture, and their language, and their blood connectivity that resulted in nationhood. We are the most indigenous people to Eretz Yisrael. You can have two indigenous people to one land. We are the most indigenous that is still around. We have been conquered many, many times. First we conquered the Canaanite tribes as God had told us. We settled the lands, we established our nationality, our spirituality, our culture, our language, our bloodline in Eretz Yisrael, and we were conquered and exiled. Many times we've been exiled and occupied by many, many different captors. But never, never in the history of our exile did we forget where we're supposed to be. And I think that the exile, 586 B.C. from Babylon, from the Babylonians to Babylon is really where we begin the story of Zionism. Where we commit to never forget Zion, that we will always look to that place. That's the place we're going back to. That is our indigenous homeland. So I want to talk for a moment about the name Palestine. The Roman Emperor Hadrian, who the Romans had conquered the Persians, who had conquered the Babylonians, who had conquered the Jews. They renamed Judah into Judea. I'm really precise about language when it comes to this history. And a lot of you insist on calling the West Bank Judea and Samaria. And if you want to be correct, it's Judah and Samaria. Judea was the name given by the Roman conquerors. So Hadrian renamed Judea, the Provincia Judea, to Syria-Palestina in 135. After those nasty Jews revolted for the second time, Hadrian had enough of this. And he renamed Eretz Israel, Syria-Palestina after the Philistines, our arch enemy, our nemesis. He also built a temple to Jupiter over the remains of our Baitamikdash. And really what he was trying to do was erase Jewish memory, which he couldn't do, but he tried. The Philistines were an ancient Greek people who in ancient times conquered a little bit of Eretz Israel that would be around today's Gaza. But they were wiped out in 722 by the Assyrians. Probably the most famous Philistine you'd ever heard of is Goliath. So what is Palestine now? I can tell you that between the end of the Roman Empire and that area between 638 and 1920, there was no ever a political geographic entity called Palestine. Why the name stuck? It really only stuck amongst British academics and archaeologists, but there was never a place called Palestine, not for hundreds and hundreds of years. In fact, under the Ottoman Empire, this is what the map looked like. It doesn't say Palestine anywhere. It doesn't say Israel anywhere either. It was made up of San Jax and Villayets and people felt most connected to Syria, not a place called Palestine, which for the most part they had never heard of. So that was from about 1515 to 1920. That was the map that Eretz Israel looked like. I'm going to go quickly from 1515 to 1914. World War I, the prevalent understanding of war is that you get to keep what you conquer. And Britain was quite sure it was going to reap a lot of booty after this war, and it was trying to set the stage for the territories it was going to come under. It was going to conquer after World War I. And so Britain went to the Arab leader Hussein and said, listen, why don't you fight with me, even though you're in the Ottoman Empire, which is on the other side of the war? Fight against the Ottoman Empire on behalf of the Allies, and in return, when I've won that place, I will give you, I will make you an Arab state or states. I don't know exactly where, but I'm going to make Arabs an independent state or states. And the Arabs hold on to that Hussein McMahon letters the way we hold on to the Balfour Declaration. So really at the same time that the British were wheeling and dealing with the Arabs, they were wheeling and dealing with the Jews. Why don't you fight in Eretz Israel against the Ottomans, and in return, we will make you, we will look at the wording, view with favor the establishment in Palestine of a national homeland for the Jewish people, and we'll use their best endeavors to facilitate the achievements of this object. And what an unbelievable moment in Jewish history where the military might of the world was giving some kind of approbation to the Jewish people. But if you look at the wording very carefully, it actually is absolutely meaningless that the British, that the Majesty's government views with favor. I don't know what views with favor really means. The establishment in Palestine, is that all of Palestine, some of Palestine, a street of Palestine, a national home, is that a house or a village or a community for the Jewish people. So, while we're celebrating that the might of the world is backing us up on some level, the wording here doesn't give us very much to hang our hat on, and the rules of war changed completely after World War I. You don't get to keep what you conquer. But I want to show you that the British had set up the conflict between the Arabs and the Jews before the establishment of the state. So, I guess it took Britain by surprise that no longer do you get to keep what you conquer, but there is a League of Nations and international law will be set. And they decided, the League of Nations decided in 1920, that the administration of Palestine shall be responsible for enacting a nationality law. There shall be included in this provisioned frame so as to facilitate the acquisition of Palestinian citizenship by Jews who take up their permanent residence in Palestine. Now, we're going to get a little bit more into this legal document. This is different than the Balfour Declaration or the Hussein McMahon letters. They're nice letters. They're not legally binding. What we have now is international law that's legally binding. They also decided to create a system of mandatories. Those would be countries that were developed and could lend their expertise and could tutor these new countries and help them develop into flourishing democracies. It was a sacred trust of the mandate to help, in this case, to help the Jews create a country. And the borders were very specific, ratified in 1923. The borders were, I refer to, as diamond-shaped Israel. You've got to remember that map. That's really important. That's the legal map of the state of Israel. By the way, at the same time, that they conferred on the Jews nationalism in Eritz Yisrael. They also created Syria, Iraq, and Jordan as brand-new Arab states, and we all have the exact same birthday. It's 1920. We're all created on the same day. The British mandate, the British became the mandatory power, that sacred trust to help the Jews develop their country. Their obligations were, number one, to reconstitute the national Jewish homeland. The word reconstitution is very important. It's not to create, it's to create again. It's to bring back what once was, the reconstitution of a Jewish national home. And to work with the Zionist organization to create a Jewish home. That the Zionist organization would be de facto the government working with the British mandates to facilitate Jewish immigration. And I mean, I've narrowed down the document, but it very specifically says Jewish immigration. It doesn't say Arab or Muslim or Christian. This is designated as a Jewish country, and the word country comes up in the mandate for Palestine. It says no land of that diamond shape, Israel shall be ceded, no land shall be given away. And the other peoples living in the new Jewish country will have civic and religious rights, and very specifically not national rights. National rights are reserved for the Jewish people in their reconstituted new Jewish country. And that's our legal case. De facto we build a country before our Declaration of Independence in 1948, and I am really so proud of what the Jews managed to do out of sand and sun. Before 1948 and probably mostly early in the 1920s, the Jews, the Zionists built Technion, that's the MIT of Israel. They built Hebrew University, and they built it very specifically in a place that straddled Jewish and Arab neighborhoods so it could be open to all. They built Hadassah Hospital, also in an area that would straddle Jewish and Arab neighborhoods so it would be open and welcoming to all. Hundreds of kibbutzim, Moshevim, villages, cities, big cities, shipping industry, specifically a port in Tel Aviv and shipping industry business, national health care. Decades before Canada had national health care. National labor unit, a national bank, compulsory and free education. A defense force in a democratic government. So I will tell you that that state of Israel was created long before 1948. But in those years, the British who had the sacred trust to facilitate Jewish immigration to work with the Jewish government to make sure that no land was seeded broke their responsibilities many, many times in that period between 1920 and 1947. So in 1936 to begin with there had already been belligerence between the Arabs and the Jews. Three new countries wasn't enough. They could not tolerate that Palestine would be a Jewish country. And so with Britain's kind of desire to just make this go away they proposed a joint council between the Jews and the Arabs they would sit per capita. Now we were outnumbered by the Arabs and basically they could vote away a Jewish state. Luckily for the Palestinian penchant for absolute rejection of anything Jewish they refused to sit on this committee. Good for us. The British also put down several white papers limiting Jewish immigration. The McDonald white paper specifically in 1939 at the beginning of the Holocaust. Now I would never take blame away from the Nazis but it had not been for the British those millions of Jews would have had somewhere to go. They also proposed in 1936 the Peel Plan which would divide the country of Israel into an Arab state and a Jewish state again breaking their promise no land shall be seeded giving us absolutely indefensible and ridiculous tracts of land that we actually said yes to but fortunately the Arabs said no and I am very grateful for their rejection. The League of Nations of course disbanded in the wake of World War II and out of the ashes grew the United Nations so now they are taking on the mantle of international law and they were very clear in Article 80 that was what was gifted to the Jews and Iraq and Syria and Jordan in terms of mandates would be transferred to the UN so just because the League of Nations went away does not mean our legal right to the land of Israel went away it was brought on by the United Nations the British though had really had enough of the belligerence, the violence between the Jews and the Arabs they had decided several decades into the mandatory power that they really were siding with the Arabs they were also exhausted after two World Wars they were really no longer the military might of the world and they wanted out and gave the whole problem the whole issue over to the United Nations and the United Nations decided to partition the state of Israel into a Jewish country and an Arab country so I take a look at the borders that they proposed we would have all the dust of the Negev we would have actually fertile land around the Sharon area and we would have this coast which is good, it has access to the only fresh water Jerusalem would be an international city but considering the hatred of the Arabs we would never have access we said yes they said no again I'm really grateful they said no again I also can't understand for a nation of lawyers why we said yes if I could go back in time I would say why are you saying yes to this we were supposed to have diamond shaped Israel and no land shall be ceded but they said no every Arab country said no the Arabs within Israel said no we were exuberant this was another watershed moments even if it was half a state we were going to have a state and it was utmost important by 1947 to give a place for those survivors of the holocaust that were still languishing in DP camps whose conditions were better than the concentration camps however with the rejection of the Arabs came the war of independence the country surrounding Israel and Saudi Arabia some help from Sudan brought their forces albeit not their full force to attack Israel in order to destroy it I didn't put the numbers up but I want you to listen to the numbers the war of independence we lost 1% of the Israeli population 6,400 Israelis were killed and 7,000 Arabs were killed it kind of raises a question with all these Arab armies coming to destroy us how come they didn't why didn't they it's a good question but that's another hour lecture now I'm going to call the Arabs and Israel Palestinians they saw this as a catastrophe for many reasons 750,000 Palestinians at the outset of the war got up and left if I were them I would have done the same thing if a war breaks out in Canada damn straight the first thing I'm doing is taking my kids I'm loading up my van and my dog and I'm leaving taking my husband too you're driving what do you mean the truth is that there were Arab villages between Tel Aviv and Jerusalem that were expelled by the Jewish forces most of the Palestinians that left never saw a Jewish combatant they were compelled to leave for many different reasons mostly they don't want to be caught up in the middle of a war staying would mean that they were complicit with the Zionists they did not want to stay if that meant that Palestine would be ruled by Hajimina Husayni which was the power of the Palestinian people but hated by many people and they're also promised by the neighboring Arab countries just leave it's only two weeks will flatten the place and you'll go home and they really did expect it would be logical with five armies descending on a new country that they would win they didn't and that was a catastrophe what's interesting is that over 60% of the Palestinians that left because of the war went specifically to those areas of UN Resolution 181 where Israel would be split into a Jewish country and an Arab country they went specifically to those places designated as an Arab country that they rejected so more than 60% of them end up actually in Gaza and Judah and Samaria you might know that as the West Bank many others went to the interior of Egypt, Syria, Lebanon Jordan was the only country to give them citizenship every other country keeps them as today as refugees we won and in terms of diamond shaped Israel we lost some land Judah and Samaria was taken by Jordan Jordan called it the West Bank East, West, it's not the West Bank of Israel it's the West Bank of Jordan Egypt took Gaza, they kept these territories for themselves they did not win it for the Palestinians to create a state they took it and they kept it that's also by the way called the green line because originally those borders were mapped out in green pen almost simultaneously but this population transfer that through the 1950s 850,000 Jews in Arab lands were one way or another kicked out of their country but they had somewhere to go, they had Israel and they did not live as refugees they became full citizens, unlike the Palestinians wherever they happened to find themselves Israel declared its independence in 1948, it's interesting to note that it was a unilateral declaration of independence it wasn't ratified by the UN until 1949 Ben Gourian said we better just do it now before something else happens, let's just declare it if you have the opportunity to read the full document it is such a beautiful declaration in Hebrew it reads like Shakespearean Hebrew if you're conversing Hebrew it is magical but it really reiterates the historical and indigenous right of Israel too, of the Jews to the land of Israel the land of Israel was the birthplace of the Jewish people, their blood their culture, their language, their spirituality here their spiritual, religious and national identity was formed here they achieved independence and the culture of national and universal significance here they wrote and gave the Bible to the world and that was worth celebrating the Arab countries around us never relinquished a state of belligerence, Israel understood that it was coming back that those wars were coming back again and going to fast forward a little bit to the 6 day war I'd love to spend an hour just talking about the 6 day war wow Israel knew it was coming mostly because the Arab countries said it was coming Jordan, Iraq, Egypt, Syria the Palestinians all said we are going to annihilate you we will push you into the sea and I think especially after the Holocaust Jews take that pretty seriously Egypt expelled the UN peacekeepers they mobilized 100,000 troops onto the Sinai border 1,000 tanks, 500 heavy guns along the borders Syria and Iraq and Jordan mobilized as well we knew the attack was coming Egypt closed the streets of Turan to Israeli shipping which by the way is a declaration of war and it was quite of an interesting waiting game for the first shot understanding that the person that throws the first shot is somehow responsible for the war it was a tough waiting game Israel knew that if it threw the first shot it would be held accountable for starting a war they even had this idea of floating an empty ship through the streets of Turan so that Egypt would blow it up and then we could counter attack and not afford to absorb the first blow coming from every border and so we struck at Egypt first it was really, militarily it was brilliant a very good friend of ours was a fighter pilot in 67 made one of those six sorties a day the decision was the first thing that Israel has to do because they can't cover air and land at the same time on every border was to take out the Egyptian runways so that the Egyptian planes could not get off the ground then knock out almost every single Egyptian plane now the tank battle begins in the Sinai but the Egyptians have no air coverage Syria had tanks and not much of their air force left either so at the end of a war that lasted six days we like to say it was really six hours I want you to take a look at the territories that we captured in the 60 war so this is Judah and Samaria and this is Gaza so that belongs to the original map of Palestine under the mandate so I will tell you that this is not occupying a land but taking the land that was ours legally I will tell you that taking the Sinai desert is in fact an occupation taking the Golan Heights is in fact an occupation however not every occupation is an illegal occupation international law states that you can keep some land if it is vital to your security we also did commit from the very beginning to exchange land for peace so what are the borders of Israel well the mandate of Palestine outlines the map of Israel diamond shaped Israel and declares that no land shall be ceded so if my point of view the boundaries of Israel is still diamond shaped Israel UNGA resolution 181 Israel into an Arab state and a Jewish state does not constitute law it was a UNGA recommendation not a security council law plus the Arabs rejected it so if I offer you half of something I own and you don't want it it reverts back to the owner that land is still ours however big problem here is that when we took back Judah and Samaria we annexed all of Jerusalem giving the Palestinians living their 67,000 of them full Israeli citizenship if they wanted however almost half a million Palestinians came under military law so while I will tell you that the land is not occupied I cannot say in good faith that the Palestinians were not occupied living under military rule Israeli military rule was not nice and I don't think it's really good for the souls of the Jewish people to be occupiers neither did we set out to be occupiers we did say yes several times to partition the land here take a piece they rejected it and they became under Israeli occupation very unfortunately for them the sixth state war also saw the final finally the reunification of east and west Jerusalem we finally got everything that's holy to us back and we found it in absolute ruins the Kotel was transformed into a garbage dump and a slum 29 synagogues were raised to the ground we found in Jude and Samaria tombstones from the mound of olives were uprooted and used to pave roads and make toilets so I'm glad we got that back so that we could consecrate again our holy spaces I'm going to fast forward to the Yom Kippur war we knew it was calming the Arabs were still declared a state of belligerence but there was a massive intelligence failure it was actually Jordan that tried to war in Israel that Egypt and Syria are going to attack I don't know how I don't know how we missed it we were on this side of the Suez Canal watching the Egyptians mobilize and somehow it didn't register I don't know why the truth of the matter is Egypt was not all in this was not a war that Egypt wanted particularly they wanted back the Suez plus 8 miles into the Sinai they just wanted to restore the honor of the army and the faith of the people in the president so that they wouldn't assassinate him but Egypt wasn't really all in the war really only lasted 20 days and I want you to listen to the numbers again 25,000 Arabs were killed 3,000 Israelis were killed and I'm telling you these numbers because I want to come to the conclusion that which the Arab states did it's not worth going to war with Israel you're not going to win and the first country the most belligerent country was Egypt what Egypt really wanted was to get out from under the USSR to become an ally of the US to have stability to attract Western investments and grow their economy so it wasn't surprising that they came forth to make a piece with Israel what did we win what did we lose it really was a pretty good lasting piece it was a cold piece but it was a lasting piece on a really big border what we had to give them was everything that we had built up in the meantime and that's 1,000 miles of road to oil fields that would have made Israel oil independent for the rest of its life we gave up a buffer zone we gave up security the Egyptians also got $36 billion but we did it we made peace and it was a lasting piece and I want to point out that if people are willing to make a lasting piece it has always been Israel's declaration that it is willing to trade land for peace so now that kind of ends the Arab-Israeli conflict but seeping in in the background is the Palestinian-Israeli conflict and the PLO, the Palestinian Liberation Organization become a political force and I want to read a little bit of their charters Palestine with the boundaries it had during the British mandate with the boundaries the Arabs had during the British mandate because they're waving that Hussein McMahon letter is indivisible territorial unit so they're claiming all of diamond-shaped Palestine Israel as Palestinian in 1968 their charter says that only through armed struggle armed struggle is the only way to liberate Palestine this is the overall strategy not merely a tactical phase they are dedicated to a war with Israel in order to obliterate it not the 181 boundaries not the green line, all of it that's from their word their mouth, their written word and their deed and they have not backed away from that at all in 1974 they changed it up a little bit there's two ways to read this any step taken towards liberation is a step towards realization the United Nations sees this as look at that the Palestinians are willing to negotiate any step it doesn't have to be an armed struggle they're willing to negotiate let's invite Arafat to the UN to speak all Palestinians know that what is embedded here is called the strategy of stages we'll negotiate for something and from that stage we'll get this and from that stage we'll recover all of Palestine the UN brought Yasser Arafat to speak at the UN in 1975 the UN declared Zionism is racism thanks UN the first Intifada broke out in 1987 to 1993 in Judah and Samaria and Gaza this is not surprising so the Palestinians had been living there for 20 years under military occupation and I'll remind you military occupation without going into graphic details is not nice we should have expected an uprising it consisted of striking, demonstrating and violence and Israel responded with Shamir's iron fist and that did not work out well for the Palestinians again so a thousand Palestinians were killed by Israeli forces but another 500 Palestinians were killed by Palestinians so you've got like in Syria not everyone's on the same page and people are vying for leadership and if you might be a collaborator we'll kill you and if you might really be pushing for a Nashashibi government we're gonna kill you and 500 Palestinians were killed by Palestinians I guess really because of the Intifada terrorism works to some degree terrorism really works and it brought Israel to the negotiating table and Oslo was not a peace plan but a roadmap to peace where it was hey let's take five years out and in five years the Palestinians you stop terrorizing us and we will in phases give you autonomy and we'll give you a police force and we'll give you the guns so you can rule yourselves and we will back away slowly and after five years when you haven't killed us and we've given you more territory and we've developed trust then we're gonna talk about the tough issues we can't possibly talk about now and those tough issues would be what will be the borders of a Palestinian state what will be the status of Jerusalem will it be your capital can we share the capital can we repatriate Palestinian refugees it was an idyllic plan I want you to know that at the onset 70% of the Palestinians wanted this 70% of the Israelis wanted this it was a good plan if only and from the announcement of the plan terror began to rain down on Israel and no matter how much it rained down on Israel we kept on giving them more and more autonomy an autonomy meaning not one Jew and not one IDF would be amongst those villages, cities and towns that were gifted to them with autonomy so Israel removed every IDF and every Jewish presence from the major Arab cities Jericho, Ramallah Belechem, Calculia, Tulkaram Janine, Nablus and 450 villages we gave them guns for their police force those guns were turned right around on us and whether you like the plan or not I want to tell you what I like about the plan from Oslo on I don't believe that Israel is an occupying force I don't think that Israel can really soulfully be an occupying force it doesn't want to be an occupying force it's not good for us and I think that Oslo removed that stain here you have autonomy your autonomy can lead to independence all you have to do is not kill us and I think that morally at this point we have the high ground and they blew it again but I feel absolved of being an occupier so with Oslo came horrible horrible terror attacks this became the era of the suicide bombs the buses were blowing up and the pizzerias were blowing up and the Passover satyrs were blowing up and people standing in lines at ATM machines and going to disco techs were blowing up we were giving them land for autonomy we came up with the most clever solution which was the security fence I think 94% of that fence is actually chain link only a little percent of it is that really ugly cement wall that you see the security fence is not nice but it is the most effective and nonviolent strategy of stopping terrorism all you have to do is go through security check now I don't really like going to the airport three hours early either to go through security check but I'm really glad I do and I'm really glad everyone else is checked before I get on that plane so the Palestinians complain that it really hampers their mobility it does the way any security check hampers anyone's mobility take a look at this in areas where there's a fence there is no more terrorism all we have to do is be vigilant about that fence and be careful about who we allow to come through and not come through and there could be no terrorism that's why I put the hummus charter I wanted to mention the first in Tafada going back a little bit sorry to confuse you the first uprising of the Palestinians the Palestinian leadership was nowhere to be found they were based in Tunis not along the borders and it was really a grassroots organic and I think natural uprising but what came to fill that power vacuum in the absence of the Piola was hummus the hummus charter it really reads like the Palestinian charter except that with the destruction the complete and total destruction of Israel and every Zionist creation cultural educational architectural will be replaced with an Islamic State and for some reason this was read as the PLO are now the moderates and hummus is the worst people but ultimately they're talking about the same thing and they start to take hold of the hearts and the souls of of the Palestinian people so you've got competing leadership now amongst the Palestinians and Judah and Samaria and Gaza hummus and what becomes not the PLO after Oslo but the PA forward here and despite the terror we go to the table again this is Prime Minister Barak and Yasir Arifat sit down at Camp David with Bill Clinton and we offer them the ceiling 91% of Judah and Samaria compensated with land swaps 130% of Gaza it's not a mistake that means they get 100% of Gaza plus a third extra of the territory contiguity between Gaza and Jude and Samaria so they could pass through easily when Arifat said no no Bill Clinton laid a blame squarely on the feet of Arifat he said all the guy came with was no he offered nothing in return he made no counter offers all he said was no not surprised that is the history of the Palestinian people to reject any offer unless it's the total annihilation of Israel why Bill Clinton said that and I happen to agree with him Arifat's identity as a Palestinian is founded on the rejection of my identity as an indigenous person to Israel if he agrees to any piece of it what he's doing is giving some recognition to Israel and he personally would have no raison d'etre so as soon as the no came down we've heard the no many times a second into Fatah broke out look at the numbers again 3,000 Palestinians were killed and 1,000 Israelis were killed I bemoan every death of every civilian of every Jew of every innocent person but the numbers are going to keep on indicating when if you go up against the IDF in Mittendrinem we decide to disengage from Gaza why there's 8,000 Jews living in Jewish neighborhoods you might know these neighborhoods as settlements 8,000 Jews living amongst 1.5 million Palestinians that want them dead so the IDF have to be there constantly defending these 8,000 it was a huge huge amount of resources to protect these 8,000 people and Ariel Sharon with the approval of the government of the Knesset decided to completely remove every Jew every IDF from Gaza that Israel would maintain the right to the borders on the ground to survey what's coming in, what's going out we maintain right over the Palestinian airspace we maintained right over the the borders on the water to make sure what was coming in was not aimed at our destruction and as we are disengaging the rocket attacks from Gaza don't stop and they're actually getting worse as their rockets get more sophisticated they're not just hitting steroids although it seems to me that hitting steroids didn't make an impact on too many people in Israel but once it started getting further into Ashkelon and Ashtod and there's a threat in Tel Aviv we went to war three times with Gaza you should look at pictures of Gaza on the internet I cannot understand why they keep going to war with us the devastation is horrible in Gaza the Israel's goal each time in going to war was to just to disable Hamas's ability to launch rockets at Israel and to collapse the terror tunnels it did not want to reconquer it or reoccupy it it wanted to disable it from killing Israelis or threatening Israelis the wars resulted in the death of 2,700 Palestinians and 240 Israelis and if you want to talk about disproportionate force let's get the facts straight proportionate force doesn't mean you kill 10 of us we can kill 10 of you if there is an arsenal that is aimed that is meant for military belligerent purposes it becomes a military target proportional force means how much damage can that military target do is as much force as I can apply to that target even if there's a civilian sitting on that target even if there's 20 kids sitting on that target it's still a military target so disproportionate force doesn't mean we killed more of you and therefore we're bad it's taking away their ability with proportional force to kill us and in the middle of that we go back to the bargaining table President Prime Minister Omer sat with the new president of the PA Mahmoud Abbas and offered him basically exactly what Barak had offered him plus the repatriation of 5,000 Palestinian refugees into Israel proper wherever that may have been they hammered out a deal Barak Abbas said no no let me think about it I'll get back to you and that was the end of the conversation I'm glad they rejected it so I can't I hope I've done a good job you know telling you that biblically from a biblical point of view from a religious point of view from the definition of indigeneity this land is ours that we now have I think I feel I sleep better knowing that they have autonomy and that Israel is not an occupying force I wish for the Palestinians I wish them peace because we're not going to have any peace until they buy into peace I wish for them what Israel has a magnificent flourishing progressive land where all citizens are equal everyone has equal rights all religions are respected I wish that for the Palestinians I wish that they could get to the place where Israel is where we are so abundant that we can give to the world I wish for the Palestinians that for them to want peace I think that however I think giving them an independent state in Jude and Sumerian Gaza would basically mean at this point that they would arm themselves to the teeth with the intent to destroy Israel and then we would have to fight back and they would not win as the numbers would show they would not win they would be devastated and I wish them peace


Hi, thanks for attending this session. I hope you enjoy it. So, in this talk, I'm going to talk a little bit about Embedded Linux security. So, the idea here is to have an introduction on the topic. So, we're going to talk a little bit about what is security? Why should we care about security on an Embedded Linux device? We're going to talk a little bit about thread modeling. So, we don't have much time to go over the topic, but we're going to talk a little bit about it. And then, we're going to talk about a lot of mitigation techniques to improve the security on an Embedded Linux device. So, we have a lot of technical stuff in this presentation. Before we start, so, let me introduce myself. My name is Sergio Prado. I've been working with Embedded Linux development for more than 15 years. Right now, I'm a team leader at Toradex. I also have a company that do some consulting and training services. Usually, or casually, I contribute some of personal software like Build, Route, Yocto, and the Linux kernel. Sometimes, I write some technical stuff on my blog, that's embeddedbit.org. So, let's start with an introduction to security, and then we can talk about the technical stuff. What is security? When you talk about security, we really mean we want to protect something, right? We want to protect something that has some value. In an embedded device, we're talking about, for example, our code, right? We want to, for example, protect the integrity of the code. Or maybe we want to protect the data that's inside the device, right? We want to guarantee the confidentiality of the data in the device. And of course, to protect the system, we're going to have to implement mitigations. We're going to have costs to implement mitigations. So, security really is about managing risks, right? You have to identify the risks on your system and mitigate these risks, right? And of course, we have some costs, and we're going to see a lot of this in this presentation. Some concepts about security. So, we have some, we have owners, right? The owners are those who benefit from the product, could be the manufacturer of the product or the final user. We have assets, right? And that's the real reason we have security, because we want to protect the asset. That could be our data, that could be our code, that could be our reputation, for example. All of these assets are assets. We have threats. Anything that could act against an asset is a threat, right? And we have threat actors that are those that want to manifest a threat in our system. Could be a malicious hacker or, for example, the government, right? So, a threat actor would try to exploit a vulnerability in the system so a vulnerability is a weakness of the system via an attack factor, right? So, for example, we have a device with an internet port. So, the internet port is our, is an attack factor. A threat actor could try to exploit a vulnerability inside the device, for example, in the TCP IP stack to have access to one of our assets inside the device. So, those are some of the basic concepts of security, right? And I really like this diagram because it shows really that security is a kind of cat-and-mouse game, right? We have the assets, that's what we want to protect. We have vulnerabilities, right? The assets, and we will always have vulnerabilities. As we're going to see in this presentation, there is no such thing as a completely safe or secure system, right? The system is always secure enough, but you won't have a 100% secure system. We have threat agents that want to exploit a vulnerability in the system via an attack factor to have access to the assets, right? On the other side, we have the owners, could be us, that are developing the system or the final user. We want to prevent some threat agent or threat actor to exploit a vulnerability, so we will develop countermeasures or you're going to mitigate the risks of the threat actor to have access or exploit a vulnerability to have access to our assets, right? And as I said, this is really a cat-and-mouse game here, right? The threat agents are already trying to exploit the system and we are always trying to implement mitigations to protect the system. And when you think about security, as you want to see in this presentation, and as I already told, we are really trying to manage or minimize the risks of our assets to be compromised. So there is a process, there is a formal process called a threat modeling that could help us to try to identify the major threat to our system so we can have a plan to mitigate it. That's the real objective of a threat modeling process. The result of a threat modeling would be the threat model of your product with all of the risks in it fired and ranked probably because it's important to rank for the most important or the most impactful risk to the less. And then with this threat model at hand, you would try to mitigate the risks and improve the security of our device. I'm going to talk a little bit here about how the threat model works, but it's going to be just three, four slides that we don't have much time in. We really want to talk about the technical parts of the security. So threat modeling basically is represented by this diagram that I created. So we have the assets that we want to protect. We have threats or risks on these assets, right? And we want to mitigate this. So the threat modeling process would help you to identify all of the threats and would help you to find out a way to mitigate the threats. And that's really what threat model is. There are a lot of defined process to help threat modeling the system. Unfortunately, at least I don't know any threat modeling process or methodology that is specifically for an embedded device. So I'm going to talk here a little bit about the Microsoft methodology that's called the Stride and Thread. Just to have an idea of what a threat modeling methodology is. So basically here we have two methodologies. We have the Stride methodology. The idea here of the Stride is to help us identify the threat. So basically we have a category of threats. So we have basically six kinds of threats. We have, for example, spoofing. Spoofing is a kind of threat where they use someone, pretend to be someone who he doesn't use, right? So for example, your device has a web interface, but you don't do any authentication. So anyone could access the device like being someone else. So to mitigate that kind of risk, you would implement, for example, an authentication mechanism on the web page of your device. So we have here basically six kinds of threats. This stride stands for spoofing, tampering, reputation, information disclosure, then our service and elevation of privilege. And then we would try to identify all of the threats using this methodology. And then we have the Dread methodology where we would take all of the threats that we have already identified and rank them. So the idea here is to have a list of the threats organized by the most important threat or the threat that could cause the most impact on your system, right? As we can see here, we have five rating categories, how much damage the threat could cause to your system. We have low, medium or high, how easily it is to reproduce the threat, how exploitable it is, how many users would be affected by the threat, and how easy it is to discover the threat. So you would rank all of your threats from one to three, and then in the end, your threat would be from, as we can see, right? If all of the categories is one, it would be five, or if all of the categories is three, it would be fifty. So you'd have a rank of threats from fifteen, that's the higher point here, and five. Basically, in the end of the threat modeling process, what you would have? You'd have a kind of table with all of the threats that you identified, ranked, and mitigation for that threat, right? Of course, you could extend this table adding, for example, the cost of this mitigation, because that's also important, right? If the cost is too high, like it's higher than the value of the asset that you want to protect, it doesn't make sense to implement the mitigation, right? But that's the basic idea here of the threat modeling, to help you identify all of the threats, rank them, define mitigations, and then plan and develop and implement the mitigations to help improve the security of the system. So if your device has requirements related to security, it's very important to have a good threat modeling process in place, and have a good threat model of your product. So you have a plan on how to improve the security of your device. Well, for now on, we're going to basically talk about mitigations, right? So our focus here is on the technical side of the security. So we're going to talk about a lot of technical mitigations that we could use to improve the security of an embedded device. So let's start with secure boot. So you want to protect your code. Your code is important. You want to protect it. You want to actually protect the integrity of your code, right? You want to make sure that you are running the code that you develop. For that, you need a secure boot process in place. You need to implement secure boot on your device. And as we're going to see in this presentation, every mitigation has some costs.   Probably it could make your device harder to develop if you have a secure boot, but it could work around that. Anyway, you're going to have costs, of course, implementing. It's always a trade-off, right? The usability, with security, with functionality. Usually we take functionality off of the device to improve the security, for example. How does it work? How secure boots work? Basically, of course, it depends on the implementation, but usually a secure boot is implemented using digital signatures. So every component of the device, when you talk about an embedded Linux system, you have at least three components, right? The bootloader, the Linux kernel, and the root file system. So every component should be signed. So you sign it to one component, and the component before that component is going to check the signature of the device. So the root file system is signed, and the kernel is responsible to check the signature of the root file system. The kernel is signed, and the bootloader is responsible to check the signature of the Linux kernel. So because we have one component of the system checking the other component, we call this the chain of trust, right? So one component trusts in the other component. And we have something like this. So this is a general example, right? We have the root file system that is signed, and the kernel will have a public key. We're talking about a nice symmetric public key algorithm. So the image is signed with a private key, and on the device, we have a public key to check the signature, right? So you don't need here to care about the keys. The keys are public, so there's no problem with keys. That's different when we're going to talk about encryption. You're going to see that it's a little bit different. With encryption, we're going to use symmetric algorithms. So in that case, we need to care about where to store the keys. But we don't have this problem here. So the root file system is signed. The kernel is going to check the signature because the kernel is signed. We have the public key that was used to sign actually. The image is signed with a private key, and the public key is going to check the signature. Of course, we're going to see here that the key is not inside the kernel, but it's going to be in a hard disk that's going to check the root file system. And then we have the bootloader with the public key corresponding to the private key that was used to sign the kernel. And the first component is very important because we have to trust in someone. So the first component we call the root of trust. So in this case, it's the code inside the SOC that we usually call the wrong code. And of course, as we can see, we need support in the hardware to implement a secure boot. If our SOC doesn't have the support, we can't basically implement it because everything starts inside the SOC. If the SOC can't check the authenticity of the code that is going to load to his internal memory, you can't implement a secure boot process. In the next two slides, I'm talking about how it is implemented on IMX6, how we could implement it on the SOC line from an XP called IMX6. Instead of showing these two slides, I'm going to show the diagram that I created. Basically, it's what I already explained in the other diagram, but here's more detail, right? So everything starts inside the SOC. In the case of the IMX6, we have a piece of hardware called Hub High Assurance Boot. And then this is the secure boot implementation from an XP. Then we're going to have to store inside the SOC the public keys. Actually, we don't store inside the SOC the public keys. We just store the hash of the public key. And then when the boot loader inside the SOC, the wrong code load the boot loader to memory, it's going to also load the certificate and the signature. And inside the certificate, we're going to have the public key. So he's going to take the public key, calculate the hash, match with the hash that he has inside the SOC, then to validate the public key. And that public key is going to check the signature of the boot loader. And the boot loader is going to have the public key of the Linux kernel. We usually, when we implement a secure boot on Linux, we usually use an image format called fit image. So the fit image is an image format. Basically, it's a container of images with hashes and signatures. So we can add any kind of image with any kind of signature. And the uboot is capable of opening the fit image and extracting the images inside this container image and checking the signature of each image. So we have inside this fit image, we have the Linux kernel itself. We have device trees, possibly, if we're talking about ARM. And we're going to have our RAM disk, a RAM disk image that's going to boot to check the root file system. So each of these images is going to be signed with private key. And uboot is going to have the public key to check the signatures. And the last step, when the kernel boots the RAM disk, they need from the RAM disk. The RAM disk is going to be responsible to check the signature of the root file system. For that, we have some options. It depends on if you are using a read-only root file system or a read-write root file system. In the case of a read-only root file system, the option that we have to validate the integrity of the root file system is using a device mapper module in the kernel called dm-varit. That's, for example, the way that Android works. And if we are using a read-write root file system, we have two other options at least that I know. That's called, they're called IMA and dm-varit, dm-integrity. Let's give here an example using the dm-varity. So basically the root file system is here. It is read-only. Basically at build time, we're going to use the valid setup tool that's going to hash all of the blocks of the root file system. It's going to create a hash of each block. And then after that, it's going to take every two blocks and create another hash. After that, take another two blocks, create another hash, and it's going to build a hash tree. And of course, in the end, we're going to have one hash that represents all of the root file system. And this hash is signed, and the hdisk is going to check the signature. And during execution, if you change one bit in the root file system, the hash won't match. And then the file system access won't work. So it really guarantees the integrity of the root file system. Of course, we could have and we have a whole presentation on secure boot, so we don't have much time to go deep in this topic. Nothing is 100% secure, of course. So if your root of trust is compromised, all of our systems are compromised, right? And that's what happened almost three years ago when vulnerabilities were found inside the high assurance boot of the IMX devices from an XP. These are the links, if you are interested in this, have a look. Basically, you could craft a specific certificate that would basically crash the home code of the IMX and would bypass the secure boot process. These vulnerabilities were fixed with new silicon, but of course, if you are using silicon manufacturer before these dates, you could really be using vulnerable devices, at least in respect to secure boot. Well, secure boot is good to prevent, to guarantee the integrity of your code, but you would prevent anyone from having access of your code. But if you want, for example, to protect the intellectual property of your code, or that's more common, right? If you want to protect the data of your device, you will need to use encryption. I would say it's not common to encrypt applications on Linux. You could, for example, encrypt your applications, but for example, encrypt the root file system is not very common for some reasons. For example, you are using a lot of open source code, so it doesn't make sense to encrypt open source code, right? Because the cost is higher and it doesn't make much sense. The other problem is GPL V3, right? Because with GPL V3, you have to provide some kind of access to the user to update the software on the device. And if you implement some kind of encryption, you won't make this possible for the user. So I would say that's not very common to encrypt code in Linux, in bad Linux devices, but it could be a requirement related to the data, right? And what we have to work with encryption on Linux? Basically, we could use two approaches. We could do a full disk encryption, or we could use a file-based encryption. With full disk encryption, we basically have a device mapper module called DMCrypt. Basically, this module stands on top of the block device, so every access to the block device would go to the DMCrypt module that we would do at runtime encryption and encryption of the block device. And if you want to do encryption on the file system, on top of the file system, we have two options, FFS-Crypt. That's basically an API provided by some file systems like X24 or UBFS. Another option is E-Crypt-FES. That's a layer that you could add on top of any file system. So it could be other file systems. For example, H3 could be, I don't know, any other flash house system. So it's really a genetic implementation that you could use on top of any kind of file system on Linux. Just to make it clear an example, imagine a system where you have secure boots and with encryption. What would change? In the end of the boot, the root file system would mount. So in this example here, we have a dedicated partition with the data of the device. And the data is encrypted. So an script would run in the initialization to mount this encrypted device. In this example, I'm using the E-Crypt-FES. So it could be on top of any file system. And then we would have a secure boot system guaranteeing the integrates of the application with encryption to guarantee the confidentiality of the data. Here we have one problem, right? Because when you talk about encryption, we talk about a symmetric key. And then the problem is where we would store these keys. This is a very good book. If you are interested in harder hacking, I would suggest you to read this book, Hack in the Xbox. The link is there. It's the book's public. You can download it. It's a very good book written by Andrew Bunny-Hank. He was the first that hacked the first generation of the Xbox. So this is the picture of a small device that he developed. He just connected this device between the CPU and memory buses. So he could just sniff all of the communication between the CPU and the memory. And then he created a special software basically to look for the key inside the data that he collected with this small board. And he could find it. So basically the Xbox had the keys inside the flash memory. And the keys during boot was just read from memory. It was laying there in clear text. And he was able, after he found the key, he was able to encrypt any application, run any application in the Xbox. So the message here is, if you work with encryption, you must protect your key. Your key needs to be protected from the rest of the system. And you're going to need the hardware for that. So you're going to need help from a hardware device to protect the key. Actually, there are some alternatives. If you are developing a device that has some interaction with the user, you could derive the key from a password of the user. That's for example how Android works. So in that case, the key would be encrypted with an algorithm that could be using the password of the user. But usually an embedded device doesn't have this interaction, right? You don't interact with the device. So yeah, you're going to have to think about a good way to restore the key that you're going to use to do encryption. We have some options here. For example, if you are lucky and your SOC has some cryptographic modules, the solution is there. For example, on IMX devices, again from NXP, there is a cryptographic module called CAN. This piece of hardware inside the SOC has a kind of master key that's a unique device. So you could use this master key to cryptograph your key and store your key encrypted in your root file system, for example. So this could be an option, right? But if you are not using an SOC that has this kind of capabilities, what you could do? You could use an external device, for example, a secure element or a TPM device. Both are devices that provide cryptographic functions and secure storage for you. A third option would be a trusted execution environment. I'm going to talk a little bit later about it. So a secure element is basically a secure device, a secure computing device with code running inside of it and providing you secure storage. A good example of a secure element is smart cards. You could use a smart card on a bad link device, but I would say it's not that common compared to a TPM device. Actually, a TPM is not a device. A TPM is a specification, is a nice or standard and specifies cryptographic functions and devices implemented this specification. The TPM device usually has the I2C or SPI connection, so that's why it's more common on an embedded Linux device. Well, none of this matters if your code is buggy, if your code has vulnerability, right? Because, yeah, of course, you could implement secure boots, you could encrypt your device, but if your code is buggy, the threat actor will find the vulnerability and will exploit your device. So it's very important to think about the quality of your code you are developing and, of course, the code that you are using on your device. So code with security in mind is very important if the security is a requirement for you. This is just an example and we have hundreds of examples of vulnerability. So this vulnerability is from the Linux kernel. It was there for several years. If you're running a device that has a kernel from 2.6 to 5.2, you're vulnerable if you are using the rich IO subsystem of the Linux kernel. Yeah, that's why we need to care a lot about security because if our device is vulnerable, it could be exploited, right? So what kind of indications do we have to protect our code? First, use the static analysis tools. So this is kind of tools that could improve the quality of our code finding problems like buffer overflow and things like that. We have very good open source tools like CPP Check and Clank. Clank has a very good static analysis tool inside of it. We have also some commercial tools, but yeah, you're further developing code in CC++ in softwares that are using languages that are not member safe like CC++. You have to use, we have to have some kind of static code analysis in your system. You could also enable runtime protections, right? So this is kind of protections that I run as the name implies, right, at runtime. So for example, Valgrind is a very known tool that is capable of checking memory access and identify, for example, memory leaks. Another protection that is very common, and you have to enable if you have security in mind is ASLR, address space layout generalization. So imagine, for example, that your kernel is crashing. When your kernel crashes, you have the dump, right, the kernel ops message with a lot of memory addresses and things like that. That's what the attacker wants, because then you have the addresses of the functions. And it's very easy for the attacker to develop an exploit using this information. But if you enable the ASRR in the Linux kernel, it would randomize the addresses during boot. So every boot is going to have another address. So it would make very difficult for the attacker to develop an exploit. Of course, it's not impossible, but it would make it more harder for the attacker. Another tool that you could use to improve the security of your software is Fuzzy. Fuzzy is a kind of technique that you could use to basically automate tests, right? So these two escape will generate inputs to your software. Imagine you have a software that collects data from a network interface. So a Fuzzy tool would send data to the network interface and try to crash your application. To find bugs, find that kind of corn case over application that you difficult test. You don't usually test it, right? There are some very good Fuzzy tools. For example, this is a tool that's used to fuzz the Linux kernel. And it has already found hundreds of bugs in the Linux kernel. Well, you could protect your application, but you will always have bugs. Shoppers always have bugs, right? They say basically for every thousand lines of code you have one bug. Yeah, you're going to have bugs, and how do you mitigate that? Even with trying to minimize things you could do, use Linux capabilities. So the idea of Linux capabilities is to basically help you drop the privileges of a root user. So your application would just enable the capabilities and then drop the rest of the capabilities. So if an attacker exploits your software, you would want to have the capabilities that you enable. So for example, there are some implementations of the ping command that has only the natural capability enabled, right? So although it runs as the root user, it doesn't have all root access, right? And that's good in terms of security. But the capabilities is not that flexible. If you want an access control that's more flexible, then you're going to probably have to use mandatory access control in a secure model from the Linux kernel. So we usually, from a unique system, we usually use it to work with that description of the access control. That access control flag is like read, write, execute from user group, the right? But this is not that flexible. For example, you want to prevent an application from access all TCP ports, but port 80. You can't do that with that description of access control, but you can do that with a Mac, a mandatory access control. Basically, in a Mac system, you will have objects and subjects. Object is everything in the system, like a file, a socket, and a subject is basically a process. So you would define what a subject can do with an object. There are some Mac implementations in Linux using the Linux security model. I would say the two most famous are S Linux and API Armor. For example, Android uses S Linux, API Armor is used in Ubuntu. Yeah, and another layer that you could add to your application is sandboxing the application. So the idea here is to run your application isolated from the rest of the system. There are some approaches for that. We could use virtualization, but virtualization is very costly for an embedded device. I would say nowadays we could use on an embedded Linux system containers and T trusted execution environments. So a container is basically a minimal file system with the application and all it needs to run. And a container with some help from the kernel would run isolated from the rest of the system. So if you compromise a software that is running inside a container, only the container is compromised, not the rest of the system. That's the idea right off of containers. It's not that containers is secured by default, right? But you could use this to run your application inside a container to improve the security of your system. Another approach to sandbox your application is using a trusted execution environment. I won't go over much of this topic, but the idea here is that with a container, you can protect your applications, but you can't protect the kernel. So if the kernel is compromised, the system is compromised, right? With a trusted execution environment, if the kernel is compromised, you can still protect the system, protect your assets, because your assets would be protected by the trusted execution environment. That's basically the idea. Let me show you this diagram. So you would basically have another operating system running side by side with your operating system. That would be Linux, right? What you want to trust, you would put the trusted execution environment. Of course, you need harder support for that. So some of you may have heard of Trezone, right? Trezone is a piece of hardware inside the ARM processors that help you implement this kind of segmentation of the system. And it's very common today, right? The team implementations. Like we have teams inside our smartphones, inside TVs, inside set of boxes. Well, just a couple of more slides. All of this is important, right? But you have to have an operating system because bugs exist. You're going to have to fix the bugs. You're going to have to update your device. And then we need an operating system for that. If your device has security in mind, you really need to have an operating system. It could be OTA, of course, that would be good to be OTA over the air because you could update anytime you want. Your third device is connected. It could be offline also, but it's important to update your device because bugs will happen, especially security bugs, and to protect against security bugs you have to update your device. There are some challenges to implement an operating system. And of course, we could have a whole application on that. We have to think about security integrity. If it is atomic or not, the bandwidth that uses speeds, if you have rowback capabilities and things like that. We have some strategies to update the system. What is important here is to have an operating system, a good operating system, an operating system that is basically able to not break the device, right? That's atomic. That's really, really important. And of course, if you are implementing an operating system with some connectivity, you have a network connectivity, you're going to have to think about the security of your network device. And yeah, network is a whole other topic. I won't go much over it, but it's very important to think about it. One really important thing here is that you have to basically decrease the attack service, right? So disable everything you don't need. Disable every protocol, close all the ports that you don't need. If network security is very important, enable an EDS system to detect intrusion, create firewalls to prevent, for example, denial of service attacks. All of this is important to a secure connected device. Yeah, and I would say here that there is no one solution that fits all, right? If we think about security, as we can see here, we have layer on top of layer on top of layer on top of layer, right? We need to protect our code. We need to protect the integrity. Let's use secure boot, but the code could have bugs. Let's use that analysis tools. Let's check the software during runtime. Let's use a mandatory access control. Let's run inside a container. So if an attacker could pass one layer, it's going to block in the other. That's the idea, right? Make it more difficult to the attacker to have access to your assets. And I think that's what this image brings to us. Yeah, so let's close here the presentation. Some general rules about security. So we really need to think about the defense in depth, right? Layer on top of layer of security. Security involves all levels of the system. So if you only think about the security of our device, what about the security of the cloud system that the device is connected on? You have to think about it also. Always use the least privileged principle. Don't use a scoolage or obfuscation. Don't invent our own algorithms. Don't do that. And of course, as I said before, there is no 100% secure code. You will have some kind of visual. So we try just to minimize the risks of our assets to be compromised. So if your device has some kind of security requirement, think about it, design the security in mind, create a thread model to identify the assets, threads, attack vectors, and mitigate risks. Always follow good practice. Don't invent anything. Always use what is there, no techniques, no tools, and have a good update system. If you can't monitor software vulnerabilities and patch the system and update the system. So yeah, this presentation, the idea was to have an introduction on the top. So basically we saw here the main techniques to improve security of an embedded Linux device. I hope you enjoyed this presentation. You have here my contact. So feel free to send me an email. Feel free to get in touch with me on Twitter or LinkedIn. And again, I really hope you enjoyed this presentation. Let me know if you have any feedback. And now we're going to the question and answer session. So thank you. Hello everyone. Thanks for attending. This is me now live here. Thanks for attending this talk. I hope you really enjoyed it. I try to answer most of the questions during the presentation. We don't have much time now. It's less than a minute right now. I'm sorry about the glitches during the presentation. I didn't know that when we record that you didn't get any feedback on the recording. So I would record again, but I didn't know we had some glitches during the recording session. So sorry about that. You can find these slides on sketch.com. I just uploaded today. So if you don't find, feel free to write me. This is my email on Twitter, LinkedIn. Feel free to connect with me. And I'm going to be a while in the Slack channel, in the Bad Links Slack channel. So feel free to go there and ask me questions there. So again, thanks a lot for attending this session and stay safe. Bye-bye.


cannabis stocks and CEO interviews brought to you by rich TV live what's going on everybody Aaron here from Departures Capital we're here at the rich TV live what's going on rich well it's just the glorious day and we have had such an amazing bounce back since the last time we talk if you remember oh yeah really guys we were in the deep red it was panic mode the market was over everybody was panicking everybody was getting out everybody was saying it was done we were decimated it was over everyone was crying and panicking what did I say I said when they cry I buy and what happened we both said don't panic everything okay this industry is powerful and it is not an industry that I would try to short and since that day my friend we have seen green every single day since in fact we've predicted multiple winners and a lot of members have been winning oh yeah I mean yeah I watching ACB at seven I just couldn't help myself seven eight it was just like we're hitting $10 for ACB today so let's look at nice and I bought some ACB and I sold it and I bought teagot and I sold it and I've been buying a lot of stocks and I've been making money and I just again bought ACB teagot and I'm sitting on the bid right now with a thousand shares of BVO Xenabis keep your eye on it it's going to be a monster yeah teagots run yesterday was epic oh yeah and I think 36 we were together doing a video and I told everyone it was my number one pick of 2019 yeah one was my number one pick of November 2018 and so far they haven't disappointed no for sure it's just so nice it's just crazy how everything changes so fast you know everything everyone's in the gutter and and at that at those times you need people like us just to tell you like it's gonna be okay because for people who just got in this first rally like say you got into the canvas market two months ago and you're making money making money and then it crashed and you're down you haven't been in the game that long so you don't know what to do it's it's it's nice to have like somewhere to get some peace of mind get some advice just you know what I'm saying well yeah I mean like everyone's like you know rich you don't ever panic I'll come I'm like I've been watching this for two years straight yeah exactly doing videos almost every day Aurora was at a dollar Afria was at a dollar canopy was at a dollar at one point these were all really really cheap and they've all exploded so this industry has been very forgiving mm-hmm they go down but they go up and they go up but they go down so that's why I've said and I've developed the strategy of buying the red cell in the green be patient and investing great companies yeah I bought Aurora I bought teagot they might be down right now from what I bought it I don't even know I'm not even watching but I do know at some point they're gonna go up so I'm not really worried right if they go down I can always buy more lower my cost so I have a strategy if a stock goes down and my strategy is if the stock goes up as long as it's up 10% or more I'm always thinking about selling yesterday Aurora was up 6% and I sold it I took 230 bucks because I thought about it was like you know what I can pay a phone bill I'll take it you know I was up on teagot two grand I sold it went up even more after that but you know what I don't really yeah I feel kind of shitty about it I lost a thousand bucks because I sold too soon but I still made two grand you know that pays my mortgage payment you know I'll take that profit out thank you for the winnings I thank the stock gods for my daily bread and I move on you know and today's another day and I look for another entry and that's just the way I trade I don't really have too much emotion I don't hold on to my trades you know I make a trade I get in try to get out with a profit and then I move on to the next one and I forget about it you know I just kind of the way I trade I think that's the way you have to trade but that's my strategy exactly I mean trying to you can catch it at the top sometimes but you're never gonna like you're never gonna every time buy it at the bottom and you know every time gonna sell it at the top but if you're making profit that's the most important thing I think right companies you're going to be okay if you focus on investing in great companies you will be okay yeah if it's a penny stock if it's a shady company if they've got a shady past that they've got a stop sign on them those are the most risky place those are the ones that I might just go in and out quick in and out because I feel a little bad inside deep in my gut I'm like I don't know what this company you know but if they're like fully reporting bulletin board company you know OTC QX exchange those are the best exchanges if they're on the TSX like a company like in met in met is one of the most undervalued companies they're on the TSX they're at 50 cents they just jumped yesterday huge 17% they went up again today they're at like 75 cents they're a great company on the TSX I think they can go up 10x but right now they've been getting beat up those are the ones you want to get in on when they're beat up at the lowest price and then wait for the explosion because it's going to cut it's going oh yeah for sure I mean I've been very impressed with the rebound we've seen recently this past week it's been nice don't get me wrong I was very I was impressed by the the sell-off but at the same time I wasn't like you said I wasn't crying I was just thinking wow this is a nice decline it's a great opportunity I mean it was a buying opportunity for all the bankers all the institution yeah oh yeah everyone that was waiting for legalization it was kind of like alright guys now it's a fire sale yeah load up and it's like everybody's loaded up and now it's like rocket fuel time and I made a prediction if you remember last yep I believe that we are going to have an explosion between now and Christmas you know we keep hearing we keep hearing shortages not oversupply so that like it's simple economics that's got to tell you something we keep seeing cannabis shortages throughout Canada so I mean hey everyone's like oh there's gonna be too much production there's gonna be too much supply the price is gonna go down well I mean I don't think it's going down right now well it's a brand new industry they have a lot of things to figure out a lot of companies that have been hype machines don't really have any cannabis some cannabis are going to be the ones that will explode and those are the ones that we are identifying here at Rich TV live and at the Partridge capital you know in the next topic like Rich TV live is not just a company that talks about stocks okay capital is not just a company that talks about the market we do that Rich TV live is a digital advertising company okay if you are a private or public company if you're in the cryptocurrency space if you're in the cannabis space if you're in any space the gold space oil and gas and you need exposure you can contact me you can contact a Partridge capital we can help you create a plan to build you exposure okay and it's not expensive it is very cost affordable and we try to make it and tailor make it to our clients so that they're getting a real social media experience and they can get their message delivered on all major social media platforms and we are really growing we're growing quickly departures capital is what is growing quickly and what we're trying to do is we're trying to really quarterback media for companies so if they want to deliver a message in any industry we can work together with the Partridge capital Rich TV live and all the other YouTube channels that we work with and collaborate with and we can deliver that message so just imagine if you're a private or public company and you need exposure you can contact me at Rich TV live at Rich TV live at gmail.com to through my email or you can reach me at Rich TV live com through our website and we are taking business every day and I know you can also reach to Partridge capital is that correct yes partner partner at departurescapital.com and tell me a little bit about the business that you're building right now because I know that you're starting to get a lot of new business and you've been in this game for only a few months and the growth of your channel has been nothing short of amazing so please tell everybody kind of a little bit about what you've done because I think it's important for our average people like you guys that are watching at home to do this as well and be a part of this growth because Rich TV live and departurescapital wants to work with you yes a hundred percent so when I built this channel originally my goal was to provide news I wanted to report news every day and follow the stocks and investments that not only do I have and do but the ones that I'm just interested in so I wanted to build like you have all these big news these big news networks and channels like Bloomberg and all that kind of stuff and do a fabulous job reporting all of the headlines but I'm more niche you you come to my channel if you want to know about a couple sector specific topics like cannabis like like maybe crypto or mining I do like mining commodities so originally my goal is commodities and then I jumped on cannabis because not only do we invest in it but we also just like I love the industry it's a new booming industry not to mention I'm Canadian so that was the thing we were like okay tune into departurescapital every day get your updates you don't have to you know it's just like five or ten minutes and boom you'll know exactly what's going on and all the cool stuff but basically anyways my subscriber base grew so fast that I'm continuing that but now we're actually we have enough exposure where now we're working with LPs like licensed producers in the cannabis space doing digital media advertising for those companies and yeah I just want to work with all these different companies to provide exposure to help their business and it's great because Rich has helped me so much Rich was the biggest contact that I've made and he's helped me he's mentored me he's you know I've learned so much and that's also part of the reason why I've grown so fast and I've done it the right way that's the most important thing is doing it the right way not being all shady not just you know trying to get some money for promoting stock whatever it's just like we're doing it the right way we're setting up real business this year and yeah we just we just want to work with all of the companies that need that social media exposure because we've got such a great subscriber base now and people listen to us like it's just awesome so far so I'm super excited for the future for my channel for Rich's channel and on top of all this stuff you know I was thinking about a way that I can offer my subscribers a little more value so I did launch a monthly subscription service I didn't want to make it too expensive I don't want to do a private stock market group but it's $9.99 a month and it's weekly info package called your VIP trader program and it covers so many different sectors packed with information stocks to watch so go to DeparturesCapital.com check it out and that's basically what we're up to for now and you have a clothing you have clothing line too right yeah sorry I forgot about that so you know it's so funny like I had no plans to sell merchandise absolutely no plans to sell merchandise I made a couple t-shirts from an online t-shirt logo maker and I was like oh I'm gonna make my own t-shirt and I'm going to wear my t-shirt DeparturesCapital logo whatever so as I started making these videos and my subscriber base kept growing people were like where can I buy t-shirt where can I get a t-shirt the first couple of messages I was like oh maybe I'll just order some and then sell them to my subscribers and then I got more and more messages and I'm just like holy crap I need to set something up here so now we're working with a great company we've got hoodies, sweatshirts, water bottles basically everything that you want if you want something with your DeparturesCapital logo on it feel free to check out our website DeparturesCapital.com click on merchandise and yeah we've got our clothing we've got our clothing fun now so it's just it's been fun it's been interesting and I'm so excited for the future there's just so many things that's happening so can you imagine guys you too could start a channel yeah collaborate with us grow with us and you too could be one day in the CBD space like your boy Rich we have our own CBD company guys and we work with licensed LPs multiple licensed LPs and we're now doing digital media and advertising services for not just LPs but private and public companies and conferences all over the world and we also have our own data company so if you're a private or public company and you need data services we can provide you with all the data services if your cannabis company and you want to know the water intake the amount of nutrients the amount of light the amount of anything you need to know we've got a data company that can get you all the data you need you need a co-packaging company you need to package and label your products you want a white label your CBD's we can do that for you too so the sky is the limit and we're doing this internationally all over the world with some of the largest licensed LPs you've ever heard of private and public so it's such an exciting time and you're talking to a guy that has been on YouTube for less than two years Aaron's been on YouTube for less than like less than a year he's been doing videos for less than six months really right yeah it's crazy and he's going to be one of the largest youtubers in the cannabis space anywhere so like the sky's the limit we'll see you guys on the moon thank you guys for watching remember Rich TV Live is strictly for education entertainment purposes do your due diligence do your research before you invest in anything that we talked about here on Rich TV Live and I want you to listen to the words here it's true all right Aaron man let's do it again soon my friend yes fabulous collab all right guys have a good day happy trading let's get that green remember if you're not winning you're not watching this is your more rich with air from the march chopper world peace peace