Right, so once again. Good morning our next talk our next speaker today this morning is an independent security researcher He founded the past and CTF group, which some of you might know her I've heard of and he has previously worked on open I boot please give a big round of applause to oan of Raham Thank you Can you hear me? Okay? So I'm going to talk about how I hacked emmc chips Or how he fixed that galaxy s3 devices First an introduction about myself. Where am I? I am one of Raham 25 years old security researcher based in Israel Mike I'm currently walking at a startup called the medigate. However, this talk has no connection to my employer whatsoever I previously worked on open I boot which it was an open source alternative bootloader for apple iOS devices We aimed to boot linux on iPhone 3g 3gs and iPhone 4 We had some success. I also found vulnerabilities in The early iPhone Basebands which were used to unlock Seem free these devices and I'm also a CTF player with the past and team We're playing tonight. So good luck to us This is my contact info if you if you want to reach me You can find it on my website and then there's also my Twitter username Okay, so an outline about this talk I'm going to start with an introduction about the story how I got to hack emmc devices Then we'll talk about Samsung's emmc patch which they used for galaxy s3 devices and Then I will talk about how I obtained such firmware and the few more of these emmc chips and Analyzed it We'll cover the bug itself that was in Samsung galaxy s3 devices And then I'm going to talk about how do we resurrect the devices like bricked devices? So let's start with the introduction This phenomenon was called a sudden death syndrome This is what the name that they gave it over forums and it started in 2012 Samsung galaxy s3 devices Just started dying with no apparent reason you you could use your phone and then one day It will get stuck and if you try to reboot it it won't boot anymore The phone is basically a brick And if you're lucky the phone will boot into the boot loader So you will see a loading screen, but it won't boot Linux or Android and If you're not lucky, then it's just a brick. You can't you can't use it You can turn it on if you plug in a USB cable. You'll see nothing You can't even charge the battery because the actual charging Mechanism isn't powered on so yeah And there were a lot of friends in forums So this is an example somebody said this is happening to a lot of people I hope Samsung do something about this and Actually, they they did But it wasn't like a proper fix and we'll talk about it later So let's talk about how do you diagnose such devices? So this is a walk in s3. You can see the beautiful background and Everything is powered on and this is a dead one Yeah, the screen is just black. You can't do anything Actually, as I said before if you're lucky, you'll see this screen which is Drawn by the boot loader, which is called Samsung gas boot And it won't but you this is the last screen you'll see and if you press a specific combination of keys, you'll get this screen, which is called download mode and we'll talk about it later So this is my Understanding this is my current understanding on how s3 walks So this is a rough schematic. It's there's a lot of different peripherals that aren't there but We obviously There's the main CPU which is called Samsung Exynos. It's an ARM based CPU and then you have the EMMC chip, which is a storage device It's the standard storage device for phones And there's some NAND flash inside of it. So it's a it's one package and If you if you inspect the silicone, you'll see an NAND flash chip Okay, so Then Samsung dropped the patch and what happened is that they said to their press that they just fixed this this bug and Since the Linux is a gpr licensed. They had to publish the source code So the patch was called soft patch moving on the VTU double zero M EMMC failure and it's it's they they modified the file responsible the code responsible for Communicating with EMMC devices. So in order to understand this patch, we have to talk about what is EMMC and So what is the EMMC basically? So it's it's that de facto some standard storage for phones actually nowadays high-end phones are starting to use UFS, which is the bus that replaces EMMC but the majority of phones still use EMMC and it's If you can think about it as SD card in BGA form So it's it's a package that you can solder onto a PCB and it's basically an SD card It's it uses the exactly the same bus And as you can see some company called hard canal made and a PCB which have an EMMC chip soldered onto it and you can they made also an adapter Which you can plug and there's no logic to this adapter. It just turns the EMMC into an SD card device And it works so EMMC is essentially an end flash chip with convenient bus, which is the same bus as SD cards So for this reason some people also call this an internal SD card or something like that and if I'm going to say card Later in my talk I'm going to talk about the EMMC chip So When you when you communicate with the EMMC bus There you you send commands to the to the code And there are 64 commands and they are denoted from command zero up to 63 And for example, you have a command 17 which is read single block and command 24 Which is right blocks and each command takes a single 32-bit argument So you'd send a command it has a number and an argument and all the commands are categorized into classes And there's one specific interesting class which is class 8 because if you look at the specification you'll see that Command 60 up to 63 are reserved for the manufacturer. So If something interesting is going to happen, it will probably happen with these commands So let's go back to the patch. So Samsung said they fixed the bug, right? So S3 devices shouldn't get bricked anymore and Let's so this patch actually The first thing does it it's come it compares the cards name to VTU double zero M Which is the hardware revision of the faulty chip and then they compare a number to the value F1 And this is actually the firmware version of the of this chip And then they call a function which is called MMC start movie smart Which isn't that interesting so I'm not going to talk about and if all these comparisons are true Then it will call MMC start movie operation, which is the main logic responsible for fixing the chip and the thing to know to note about this patch is that It this code runs every time you put the device so every time the emmc chip is powered on this code runs Okay, so let's talk about MMC start movie operation. So this is I edited the code for brevity It's not the the exact same patch, but this is basically the logic that they use And this is very interesting. There's one strange thing about this function there's MMC movie erase command and erase is Is an MMC command which? takes two arguments It uses two arguments because you proceed it with a different command so you can give it Two arguments and the first argument is the start block number to erase and the second argument is the end block number to Erase and it erases all the blocks in between So what should happen is that the first? Call to this function should erase all the blocks starting with forty three hundred up to block number 403 b5 10 right this doesn't make any sense and then the the next call is That they had like the the range is overlapped and this was very strange So my guess was that this is probably not an erase command It is probably something else somehow and the next thing to to note about this function is that you see The first two calls are MMC movie CMD and the last two calls are also to the function MMC movie CMD and MMC movie CMD is basically command 62 which is a class 8 command so it's reserved for to the manufacturer and my guess was that The first two calls Basically enter some secret backdoor mode that some some song hid inside the MFC chip and the last two calls leave this mode So when you're in this mode erase command doesn't do erase anymore. It does something else And then I saw that if you inspect the first argument you'll see that the numbers are consecutive on the increment by four except for the last number, but All the all the first the first five numbers are consecutive and The next thing so it looks something like memory addresses, right? And If you if you look at the second argument, I Noticed something very interesting If I assumed this is memory data Then if you look at it like as as little and the numbers you'll see 10 be 5 so it starts with 10 be 5 and I used to code a lot of arm assembly and 10 be 5 is push in thumb and thumb is an instruction set from the arm specification and Functions in thumb start with push, right? So this is an emcee next to a thumb and Basically, this is my current understanding of our emcee works So you have this all emcee chip, but there's not only an nand flash inside of it There's also a microcontroller and in Samsung's case. This is an ARM based microcontroller which contains some firmware so I thought this patch might Modify the internal memory of this chip some somehow So what they wanted to do is to examine what what this patch does so I just took all these data that it writes and Put it into a binary file, which I called patch dot bin and this is I just used Ida to To see what what is going on there and this is Samsung's patch So at the bottom you can see the actual thumb instructions But if you're not familiar with thumb, you can see also a C like pseudo code and What they do is basically they call a function and if it returns zero the chip will go in into an infinite loop And this is interesting because later on I understood that What was there before this patch? It just it was just a call to this function and there wasn't this check so they took a single call to a function and turned it into a Call to the same function, but if it returned zero Just they just go into an infinite loop. So my thought was This can't fix anything, right? Because the chip is either going to do the same thing as before or it's going to go into an infinite loop and then I Read some threads of our forms and I saw this thread ultimate galaxy S3 unusual freezing thread And this is a quote from the actual thread You can see that galaxy S3 is freezing with lockup screen not responding ending up with an usual rebooting and boot looping and Angry S3 users reporting this problem and it keeps freezing every five minutes or 50 plus freezes a day This is insane, right? This phone is not usable. I can't use it as my phone if it's a if it's freezes every five minutes and I had an S3 back then and I know I started observing freezes in my phone as well So the next step that I wanted to do is to obtain the emm emmc fumer in order to understand how it works So how do you get a fumer? The first way to do it is to write so I can I can write the emmc's memory Right, so I can just write code to random locations and hopefully it will get run some somehow and then just write things to different addresses and Do lucky guesses and maybe I will see something on the emmc bus and then try to to obtain the fumer But this is like a shot in the dark So the next thing I thought about doing is to fast different comments like use a command 60 61 different class 8 commands But they didn't want to destroy my own emmc Which was still working So the the last thing I thought about doing is to look for clues So how do you look for clues? I just googled these these numbers that Samsung used to enter this backdoor mode And I saw a different patch So this is a patch from a different device and it's called a patch the fumer of certain Samsung emmc parts to fix a bug And it uses the same the same mode as before So notice that they they use arguments effac 62 ec and then it's 10 21 and four zeros and this is Important so they use 10 21 four zeros right and then they write The value ff to the address for the d9c But then there was something else afterwards So if you continue to read this patch, you'll see this thing this this is a snippet Which isn't closed by if death, which is called test emmc fumer patching and they use the same if a 62 ec as before but now they use the the argument 10 21 002 and The next thing is that they they use an erase command with the same address as before but then they they do a read command, right and I Was wondering hmm This might be Samsung's way of reading the memory address of the memory of the emmc chip Because they use an erase command with the same address as before The second argument is for which looks like an like a size and then they read a D word from from the emmc So I took this snippet of code and modified into modified it into this snippet of code Which is basically just loops over all the addresses in the address space. I I just guessed How big the address space is and I just read the view a single D word every time and dumped it into a file And I think I got this thing Which looks like a fumer, right? so the names aren't the names that you see like our NMI and hard fault These are my names what what I saw was addresses, but this looks like a thumb vector table so I understood that I basically got the fumer of my own chip So the next step was to reverse the fumer in order to analyze what the bug is So luckily for me the fumer contains strings so I can use them as part of my reversing process But actually it contained a string A single string and it was this string Which isn't very useful if you're trying to reverse a fumer And as you can see this is a snippet of my reversing process I used a lot of like names flip bit in somewhere and Memory map tile thousand 2d words or but I basically understood the the high-level logic of this code and I got to the point which I can in which I can understand most of the fumer So let's talk about debug Before we talk about the bug we have to talk about how what is what is emmc exactly? So let's talk about normal storage First this is like hard drives You have two operations which you can do you have a read operation which reads data from the device And then you have a write operation which really writes data into the onto the device right this is pretty normal Then you have a non flash storage. So if you have a non flash storage you can Do a read operation which still reads data and this is as before but write operation actually turns off bits If a bit was already zero it won't turn it into into a one So this is basically applying a mask To bits on on the storage and then you have an erase command So you have to you got to have some some way of reversing this process An erase operation erases a whole erase block it Turns it all the bits in this block into into one into ones But it is a slow operation and There's another problem Erase blocks have a limited program erase cycle So if you issue something like a thousandth or maybe a tensa thousandth or hundred thousandth erases the block will eventually die And then it's not usable anymore so something you have to some software have to do this translation right to take this occurred storage and Do an abstraction which will show it Like normal storage. So this is called an FTL or flash translation layer this is common and the FTL is responsible for many things but some examples are Well-leveling which is spreading out erases among different blocks. So no single block gets erased a lot of times And then it also does bed block management if block already died Then it will remap it internally to to a different block it actually have spare blocks and then It the firmware in Samsung's case is also responsible for the EMMC bus communication or some of it So what is the bug exactly so When you do write operations on the device the FTL has to save some metadata for itself Because it has to keep track on with how many times this block was erased and What is the internal mapping is and so on so it has some metadata that it saves for itself and When you do write operation write operations it has to modify this metadata and the actual bug was a miscalculation in this Code which not always but sometimes made the data corrupt and Once it happened it should only happen once if the data got corrupted This is before Samsung's patch Every time you try to power on the EMMC chip The FTL will try to pass this data and it's corrupt. So it will raise a CPU exception And the default exception handler in Samsung's case is just an infinite loop So the device so the device you use it the device and one day the metadata get gets corrupted and then you try to turn it on and It tries to pass the metadata and it's it's corrupt so it throws an exception and then the EMMC goes into an infinite loop and You can't access it anymore And the EMMC is basically essentially dead because you send commands into it and nothing responds because the firmware is the one is The software that is responsible for answering EMMC commands. So Samsung's patch was something about this something like this Right before the metadata is about to get corrupted how to the CPU. So there's no bug, right? Right before the bug is about to happen just how the CPU So it never happens And this turned like sudden death syndrome into sudden freeze syndrome So I wanted to fix my own device So a quick recap we got I got the EMMC firmware by analyzing Samsung's patch The firmware had a bug causing FTL corruption Once it happened the chip won't boot anymore and Samsung's patch was to avoid the bug happening at all So the next step is obviously to resurrect dead phones, right? Yeah, what? How do I So the EMMC gets into a loop at boot But what happens before it gets into this loop? So I took a look at the firmware and I saw This memory layout as you can see at address zero does Something that I called a boot ROM and it's it's a ROM you can't write into it Yeah and it is a code and What it does it initializes the EMMC hardware and it loads the firmware from the NAND flash chip itself And this is strange because if the boot ROM is already there Why don't why why doesn't it already doing that the things that the firmware is responsible to do So my guess was that the firmware was too too big to reside wherever the boot ROM resides So they had to like bootstrap it from the external NAND flash and then it also has its own machinery for EMMC comments Which is strange because all it has to do is just load the firmware, right? So my guess is that during the production process The NAND flash is empty and there's no firmware and then when Samsung produces this This chips They plug them in and there's no firmware. So the boot ROM goes into some kind of recovery mode and it exposes an emmc bus and from there you can write your new firmware and The boot ROM is basically a stripped-down firmware. There's no FTL, but it looks like the the firmware itself And this is my my current understanding about how S3 works. So inside the emmc you have two silicon dies The first is an arm chip which has a boot ROM which loads the firmware from the external NAND flash and then boots it So if we could ever talk to the boot ROM this might be interesting because we could maybe some do something interesting But the firmware loading actually succeeds because because the firmware is still intact The boot ROM will try to load the firmware. The firmware is still there and it will jump into it and the firmware Executes and goes into an infinite loop. So there's no chance of ever talking talking to the boot ROM, right? though actually not this is not correct because On boot and there's this function at address 7 dbc and a timer is being set for 35 milliseconds and if during this time period some interrupt fires, this is interrupt number seven I don't know what it is yet They read a value from a memory mapped IO address and they compare it to this constant magic And if this comparison is true Firmware loading is skipped and it goes right into this recovery mode and my guess is that so this is a schematic of the boot process and The right that the left column is the normal boot process And if we ever get to the right column that we will we will get into this recovery mode So my guess is that this interrupt number seven corresponds to some emmc command and this Value that they read from memory mapped IO is probably the emmc argument because it's 32 bits so Dead emmc is get stuck on boot. So this is if the chip is already dead However, right before it gets stuck. There's a time window and during this time window if you somehow trigger this interrupt the boot process is Aborted and it goes right into emmc boot ROM recovery mode, which is interesting But the phone is already dead. How do I even talk to the emmc chip? So I could have used the hardware mode like the soldier the emmc and send commands externally, but I wanted to like do something with software because I don't know how to disolder the GI chips So the next step is to talk to the emmc by some kind of magic and then we'll access the emmc boot ROM And then we can repair it from this boot ROM recovery mode So I said if you're lucky you'll get this screen. So this is the phone's boot loader This is S boot and it is saved on the emmc chip itself So how do you get this if the emmc chip doesn't respond? How the phone all the main CPU gets to execute this boot loader? So apparently if you read Samsung specification You'll see that the their emmc has two partitions and it's it's not a partition in the file system sense It's a partition in the emmc sense And there's a boot partition and a user partition and the boot partition holds S boot in Samsung's case Which is the boot loader for the the main CPU and the user partition holds everything else so it it stores Linux and All the Android File system and all the apps and etc So the boot partition has its own FTL metadata and the user partition also has its own metadata a friend of mine had a brick S3 which does load S boot so it gets this screen and It's what what I understood that happened is that only the users but the user partition meta data got corrupted So the boot partition is still intact and I suspect this is a common scenario because When you write to your device you usually don't try to the boot partition you write to the user partition So if something is about to get corrupted it probably will be in the user partition So this is how S3 breaks The main CPU will power on and try it will try to access the emmc and ask give me S boot and the emmc passes the boot partition And It will Return S boot to the main CPU and then S boot will try to access the user partition in order to load Linux and Then the emmc tries to pass the user partition metadata and it's corrupt. So it goes into a loop So S boot actually has a device firmware upgrade mode that is called download mode And there's a protocol of a USB the phone side is called lucky and the computer side is called Odin I guess this is a reference to the most mythology And there's no way of sending low-level emmc commands. So if you ever saw this screen, this is Odin software It's a software made by Samsung to talk with this protocol and in this protocol you can't send But raw emmc commands to the emmc chip. So I need to Send Comments to the chip, but the code isn't there in S boot. So obviously the thing that I have to do is to exploit S boot, right? And run my own my own code So this is this is taken from USB pit packets handler from S boot This is a C pseudo code that I wrote so you control this variable is dump and If it's one it will read something from the USB packet that you sent to it And then it will give you an a buffer and it will use this Number that you gave it as an offset to this buffer, but it doesn't do any boundary checks at all so This is our out of bounds read vulnerability, right? And then the second case reads a size from the USB packet and then it reads it into this buffer Which is constantly allocated on the heap. It's a it's of size are two thousand But it doesn't do any boundary checks at all either so this is a hip overflow vulnerability, right? So eventually I found out this is not actually a zero-day If you take like an s8 or a 7 these two vulnerabilities are fixed but For s3 which is end-of-life These vulnerabilities are still there. So if you have an s3 you can use it So let's talk about some some the S boot heap implementation So if you wanted to allocate some size and The heap chose to to use a chunk which is larger than the size that you wanted to allocate It will split it from the end and we'll see an illustration in a moment And the thing to note about this heap implementation is that there's no security mitigations at all It's very basic so let's say that you wanted to allocate 50 bytes and The chunk that it chose was a hundred bytes then it will give you this part which is the bottom part of the buffer and the buffer that the chunk header has a size number a size Parameter and it will use this size to go to the end So I wanted to achieve right what were in order to exploit S boot and I I use I exploited this chunk splitting technique So the first thing to do was to fake a chunk header which I can control with some large size So it will get split and then I had to figure out its address and I can do this with the first vulnerability the relative read and Then the next step is to make sure this chunk is actually selected when you call malloc And then it will try to give you the bottom part of the buffer So it will start from the chunk address and then it will go all the way to the bottom which is Adding chunk size and then it will go back the size you wanted to allocate, right? And we want to control this number and we can control this number. So if I just Turn around this equation If I want to control address I can just use this number as The chunk size and then it will give me this address So the actual details in my opinion are boring so you can find exploit under this repository It's public so you can just take an s3 and use it And this is a demo This is download mode and this is hello world as boot exploit, right? So it works Okay, so what if it's really dead what if this happened right what if also the boot partition is gone So obviously something has to load has to talk with the emmc and load as boot, right? so there's also Another piece of code which is called Exynos boot room and it it is it resides in the in the main CPU and What happens normally is that the Exynos boot room starts and then it loads something which I call the first boot loader Which is Prepended to sboot and is signed and it just verifies the signature of sboot and then Jumps into it. So just you can just think about it like It's together with that with sboot and then sboot loads the kernel But the boot room has to load the first boot loader and some and sboot from somewhere So what does it try to do? So it first starts with the emmc, but if this fails it goes to the external SD card So I just took sboot and the first boot loader and Drop them onto an SD card, but this that didn't work because Sboot boots into in this case the Sboot puts into SD card mode in which there's no USB protocol So you can't exploit it and as I said it it is signed so I can't patch it But apparently some people over a Forum they The nicknames are Adam out there were bellows and rock dev They found out that there's a development board called odroid x which uses exactly the same CPU So it's the same boot room which uses the same signature, but it uses a different first boot loader Which doesn't do any signature checks at all so if you to if you take this first boot loader and Append it Append to it a patch test boot It will jump into this patch test boot and then you can just exploit it and run your code And this is the modified boot process. So you start with x in a boot room you plug in an external SD card the external SD card has Odroid x first boot loader which is signed so the boot room will jump into it and then the first boot loader will Jump to the patch test boot and then you can exploit it and run your shell code and no hardware mode is required required at all So if the boot partition is still intact the phone loads as boot and it's stored on your emmc But if it is corrupt the phone uses the external SD card and either way I can load as boot And then I can exploit a vulnerability to gain code execution and as boot and the next Step is to access the emmc boot room and As I said before I I Need to trigger this interrupt number seven and send it send down this argument somehow So I just iterated over all the possible emmc commands Which is from zero to 63 and I powered off the emmc powered it back down so the boot process some gets started again And then I quickly sent command x with this argument and I waited some time for the boot process to finish And then I sent any command which is supported by the boot room recovery mode And I checked if I got any response and I said that this is how Maybe it's going to work. Maybe not and then I tried command zero and it failed and I said yeah It's never going to walk and then command one walked So this was very exciting for me because this is the first time the emmc actually responds and Up until then on my on the brick device. I tried to Send several comments to the emmc and I never saw a response And this is the first time I actually saw a response back from the emmc This was very exciting and the emmc boot room even has command 62 and all this back door mode So let's fix it right let's repair the emmc So there are two revisions of this faulty chip the first revision uses a firmware f1 which is buggy And then there were phones with firmware revision f7 in which the bug never occured So probably some song fix the bugs fix the bug in later hardware revisions So my goal was to update the chip to firmware f7 and format the FTL metadata. So the corruption is gone Okay, so what I did was to write a dump tool a few more dump tool Which is a kernel module and then I had to convince anybody over The internet to run my code which sends low-level emmc commands to on their own device and Thanks to Artezia, which was courage enough to Try it I got a dump of firmware f7 and it worked And I would just had to write it to the emmc itself So this is absolutely doable because I could have used the memory write back door To write my own code and access the NAND flash chip And write a new firmware, but then I found out something simpler So there's another back door which is command 60 And it has two firmware upgrade modes for some reason So the the former mode which is CB AD 1160 Supports FTL metadata format you can send an erase command and it will format all the FTL metadata And then you can write a new firmware and it will do everything for you so How do I fix a dead S3? Just I just just get the dead S3 Which should be this is important to note that there are many There's different revisions of galaxy S3. I'm talking about a GTI 9 300 which is the international version Boot to S boot either directly If the boot partition is still intact or by using an external SD card Then exploit S boot to run your own code From the shell code reboot the emmc into boot from recovery mode And then use command 60 to format the FTL metadata and flash the new firmware F7 firmware Then we put the emmc so the female loading actually so the firmware boots and then you can write S boot to the emmc's boot partition and There's another step which is to profit And this means it's demo time So I pray to the demo gods that it it's going to happen. It's going to succeed So yeah Okay So I have a brick device. I break it on purpose This is the device if I try to turn it on this does battery inside Nothing happens. It's bricked If I try to get into download mode nothing nothing works And I have this external SD card which is which does have As Boot as I said before If I plug it in And I try to boot device Should boot into Yeah, okay, so it boots into something and now I can use Just go back to the and I can I can plug it into the USB and As boot answers And now I'm going to Run a shell code which fixes the emmc Yeah, it's retrying. It's okay. Yeah, she'll got started It's rebooted the emcee to boot from out and now it will write the new firmware And it should take a couple of seconds. So Hold tight as it said Okay Yeah, so the next thing it's going to do it's to reboot into the firmware and then Change the boot partition size. So there's actually a boot partition yeah, and now the shellcon is done and I can just use a Different SD card which Loads S boot normally and it goes into SD card mode and in this SD card mode it will write S boot to the boot partition so Just Yeah, okay. So this is SD card mode. I think you can't see but if I now remove this SD card, right? And just reboot the device. So the battery is outside. I know it's Yeah It should boot into yeah, so this is S boot. So the device is fixed. Thank you so Conclusion a Few shout outs. So rebella, Saddam Outler and Radek Dev did all the Exynos U boot first bootloader or droid X walk. So Thanks to them. I couldn't I if it weren't for them. I couldn't boot brick devices Entropy 512 was involved in the emcee research back in 2013 And Banyan Exobs held a wonderful talk here at CCC some years ago And they talked about hacking Chinese SD cards and they mentioned my research and this motivated me to complete it because it was still in progress So this was this is the reason which for which I'm talking today. So thanks So I can basically own Samsung emcees I can fix Brick test tree with just software And in my opinion, this is just a use case because now you can do interesting stuff with your emcee chip and What I think we should do next is to look at newer emcees Which I suspect still has this back door because I tried some some chip which I could get my hands on and it had this back door so Maybe even the new ones also has this mode and Then there's a UFS, which is the bus which replaces emcee and it is based on SCSI and Samsung also produces UFS chips, so it might be wanting to see if there's a similar back door and It's also interesting to look at different vendors of emcees and maybe one day write It's an open-source alternative firmware for these devices So this is question time You can find the code that I wrote to experiment with these devices over the following links and you can find the slides in the bottom link It's already public so go ahead and if you have any questions, this is the time so thanks So thank you very much all on for a really interesting talk if you have questions There are two microphones in this aisle and then two on the sides and first question from microphone number two Yeah, hi, okay, really amazing what you did Do you have any feedback or contact with Samsung about this? Yeah, so I published my research back in 2012 2013 sorry Over forums and I I didn't use it from a security perspective. I wanted to fix S3 They never Responded or they didn't contact me in any way. I Didn't contact them about the bootrom Recovery mode because in my opinion, it's it's not a security issue And it can be fixed it can be fixed and Regarding the S boot vulnerabilities does know it's already it's already patched. So No, then says no So the way I understand is this is the only way to actually fix some of the phones that are broken out there, right? Yeah, I don't know any other way to do it. Okay. Yeah, thanks microphone number one After seeing a real-life FTL do you still use SSDs? Sorry after seeing the code of a real-life FTL You still use SSDs or flash device. Yeah, this is a good good question it's okay and I don't There's no alternative, right? So But we might make something so yeah number three do you have any Do you have any idea what other devices have this model emm see and and like support the same Commands that let you access the firmware Ah, there's other devices that have had bad MMC Okay. Yeah, so the Some Galaxy S2 had a similar bug and Kindle fire I think one of their versions and some of them got Pitches by Samsung and it's usually was something like this like patched them internal memory every time the device boots So the bug never happens. I think in the other Devices the bug was actually fixed But are you aware of any non Samsung devices that have Samsung MMCs in them that might be the same? MMC I'm sorry. Are there other devices that aren't Samsung phones. Oh, yeah. Yeah, still have Samsung parts in them Yeah, so there's not a lot of emm see manufacturers and Samsung is a big manufacturer So a lot of different phones on devices use Samsung emm sees. So yes, it's irrelevant to non Samsung devices Number one hi, thanks for your amazing talk and research Two questions There's the Samsung galaxy note 2 that has More or less the same bug. That's your fix and your research also apply to that device and Is there a way to do a chip of thumb? Without erasing the FTL and the contents of the card Yeah, so this is a good question. So the first the first question was That's as to has the same bug, right? The note to I don't know. I never had a note Oh, so okay. I have one that is bricked that way. Okay Interesting to try. Yeah, true. Let's talk and Regarding the second question. So my code actually formats all the FTL metadata, which is Not that good because it erases all this information about how many times every block was erased a More proper fix would be to actually fix the corrupted metadata, but I haven't got to the point in which I can Fully understand the inner walkings of the FTL So this is my current code, but you're welcome to try to improve it Wonderful I'd like to know what the time frame was from you starting to work on the issue till you had the first fixed s3 Yeah, so I I obtained the firmware back in 2013 And I had the walking device and I didn't want to do like I'm bad stuff to it. So I Stopped back in this year and then Last year a friend of mine said that he has a brick test tree. So I said, let's try to fix it So I think if you like accumulate the time, it's probably going to be like time frame which I walked which I Actively walked on this was something like a few months probably four or five months But it started back in like for four years ago and And I finished it something like a couple of months ago. So Thanks number one Do my am do Samsung SD cards have the same undocumented commands. Yeah, I suspect they do some of them I actually bought some Samsung SD cards and they had Controllers made by Silicon motion, but they read over the internet that some specific cards I think it's a evil plus evil plus Have Samsung controllers, which should have the same vector. So I'm trying to Buy one But as soon as I find out I will probably Thank you number three Hi, thanks for the great talk So I'm still using an S3 as my everyday phone So what actually happened a few months ago is they broke down But so I still saw the Samsung bootloader that's put what he described and Afterwards it got stuck at the boot screen from the OS so in my case It was a notch mod, but also when I flashed on something else lineage OS or the default something's from where it still got stuck So really had to reflash everything and then it worked again That somehow sounds really similar to the buck you described, but in a way it also it doesn't so yeah Do you think it's the same thing? So if it's related my guess would be that Your device have this in-memory patch which freezes the MMC and When you used lineage OS or what it was before This infinite loop triggered at some point in the boot process So the device actually froze before it got to the to boot Android But then when you refreshed it Somehow the internal block mapping got changed and now it doesn't trigger this freezing but If your chip is a VTUW0M and its firmware is F1 then you definitely have the bug Okay, thanks. Yeah Number one Hi, thanks for the great work One question you said you upgraded the firmware of the MMC with a newer revision Are these filmers actually signed or can you flash anything on the AMC controller? You can flash anything Yeah, they have a simple heuristic which checks if the stock address is It looks normal, but other than that it just puts every film you'll give it So I think I think in newer newer emmcs, which is a emmc 5.1. There's a mechanism of Flashing new filmers and I think it should be signed, but I don't have a newer emmc So I Don't know about about it, but yeah, thank you So I have one last question About the Samsung patch. You said that it basically goes into some sort of infinite loop But do you think they might have tried to do some busy wait or they waiting for something to happen? No, I think they just Did you just want they want the bug to never happen? So Yes, I my phone froze a lot of times and I waited like I don't know 30 minutes And the code in the Linux channel doesn't do anything and the code in the emmc a few more doesn't do anything So my guess is just waits forever Yeah, so I see no questions. So again big round of applause to all on for great work


Nanofibers wound dressings have been developed to accelerate the healing process by providing a scaffold for cells to grow and repair damaged tissues. These dressings are made up of nanoscale fibers which mimic the structure of the body's own extracellular matrix. They are designed to provide optimal conditions for wound healing by promoting blood flow, removing excess fluids, and encouraging new tissue growth. Nanofibers are also able to absorb moisture and release it slowly, allowing the wound to remain moist while preventing bacterial growth. Additionally, they can be infused with medicinal plant extracts to further enhance the healing process. This article was authored by Amiya Sharma, Divya Thir, Indarbya Singh, and others.


Welcome. Let's take a quick look at what you can find in the new Research Data Australia. I'll show you how to search, browse and explore. The first thing you'll notice in the home page is very modern and uncluttered design, a simple search bar right up front and centre. You can start searching from here, simply type your search term into the box and hit search. If you'd like to restrict your search to a particular field, click on the all fields and make a selection from the options here. If you're not ready to search and just want to browse, you can come down here to the Browse My Subject and click on any of these and you get a view of the data we have in Research Data Australia across a range of broad subject groupings. Clicking on any subject will take you to a list of the data in that subject group and from there you can continue to browse or search. In the Adventurers, there are some new ways we are getting through Research Data Australia. You can have a look at themed collections and here the data has been gathered together into areas of similar themes, a description of the themes at the top and some data collections noted below. You can also have a look at services and tools. The services featured on this page include simulators, instruments, visualisation software and other discovery services. You can enter the collections looking by Open Data and this page highlights the openness of the data being described in Research Data Australia. A recent change has enabled the records to be tagged as Open and it includes a link to download the data or access the data via a service. The goal is to maximise the reuse and citation of data described in Research Data Australia. You can also have a look by grants and projects and here you can search for descriptions of grants contributed by funders including the ARC and the NHMRC and project descriptions contributed by institutions. Where these exist, links are provided back to data collections in Research Data Australia. Links are also provided to publications described in Chrome which have been tagged with relevant ARC or NHMRC products. Customised filters are provided for searching this area of Research Data Australia including grants and completion dates and funding amounts. If you want to get back from here to your regular Research Data search then just click that one there. For more information about searching using filters, spatial searching and MyRDA have a look at one of the other videos in this series accessible by the Help page.


The Progressive Congress, APC Vice-Presidential Candidates, Senator Kashim Shatima, has assured Nigerians that if elected Ashurwajibola Tinumbuz administration will be just fair and inclusive to all Nigerians, irrespective of tribal, religious and political affiliations. He was speaking at the One Year Memorial Service for Dr. Emmanuel Biodun, father of the Governor of Ogunstate Held at the St. James Anglican Church, Peru Rehmoi, Kenelika Governmentary Ogunstate. He called for the rebirth of a new nation, he, however, commended the southwest part of the country for their religious tolerance and generosity, where people are judged by the contents of their character, competence and ability. One President, Onushadun Obasengio, is the President of Nigeria. His Progress 8, or Andy Uba, will be Eje Kasumi, Charles Solidu, Ruhu Ibaru, Narsim Ashurwajibola Tinumbugethi. And apart from Lady Demi Otidola, there was no Yoruba person among his program 8. And the southwest of Nigeria is the place worthy of emulation by all of us. Because it is a passion of religious tolerance and generosity of city. It is a place where people are judged by the contents of their character. I want to assure the congregation that we are going to be just and pure to all of Nigeria. We are going to be all included. With Mandan Producers, a society can thrive on anger, but no society can thrive on injustice. Injustice is something that is according to all religions. Injustice is something that is opposed by all cultures and traditions.


People use many verbal communication styles at work, which makes communicating effectively that much harder. Being more conscious of our audiences' communication style enables us to flex our communication style, which improves our ability to communicate effectively. Ineffective communication at work is commonplace, and this firstly wastes a lot of our time, because we need to resolve confusion by answering questions and restating our message in several different ways for it to be received properly. Secondly, it wastes our energy. As we get frustrated, confused, worried, angry, the emotions involved in communicating take up a lot of our energy. And third, it can damage relationships through misunderstandings, which makes working together much harder. We all want to avoid wasting time and energy. Communication between people is complex, and understanding different communication styles improves how we communicate. Today, we're going to go through. Firstly, effective verbal communication is more than talking. Secondly, four different styles of verbal communication. Third, simplicity being the key. And fourth, three huge influences on communication. The three influences on your verbal communication will literally make or break how well you communicate at work, so do stay for these. My name is Jess Coles, and if you're new here in Hans Dot Training Shares, people management expertise, resources and courses to speed up your journey to become a great manager. And I've included links and additional videos in the description below, as well as the video timestamps, so do take a look at these. And if you like this video, please give it a thumbs up and subscribe. When working to improve our verbal communication styles at work, the first thing to really understand is that effective verbal communication is more than talking. Let's just touch on what we mean by effective verbal communication. How you speak is part of communicating. Effective verbal communication requires, firstly, you to clearly convey information to your audience. Second, your audience to receive that information correctly. And third, your audience to understand the information. For example, you could be speaking clearly with great positive body language and tone of voice, yet using language the other person doesn't recognise, such as technical terms, team or company specific sayings, acronyms or other non-common language. Or your non-verbal language might be in conflict with the words you're saying, resulting in your audience being confused and therefore not receiving your message properly or at all. Or your audience may have very different assumptions and reference points to you. Therefore, how you convey information is received with a different meaning than you intend by your audience. These examples are just some of the reasons for miscommunication, or why what you're saying is not taken in or not understood properly. Good communicators tailor the style of delivery of their communication to what is best for their audiences. When using face-to-face communication skills, a huge part of how to communicate effectively is using the feedback from the other person in front of you to flex and change how you're communicating. So they receive the message correctly and understand it. So the next way to improve our verbal communication styles at work is to be conscious of four different styles of verbal communication. Understanding our own verbal communication style preferences is a critical first step in improving face-to-face communication. There are several different models on verbal communication styles that we can use to improve our conscious understanding. When we understand our own preferences, we can consciously try to adapt these to match the preferences of our audience. If flexing our communication styles increases the chances of the information we are communicating being received correctly and understood. I'm going to touch on these four communication styles. Firstly, analytic communicators. Secondly, personal communicators. Third, intuitive communicators. And fourth, functional communicators. When we are communicating, we will use different levels of each of these. We will, to a greater or lesser extent, subconsciously adapt our styles to the other person and they'll be doing likewise with us. Making yourself conscious of what is happening gives you greater control over how well you can communicate. So let's dive into the four styles. Features of an analytical communicator are, firstly, they use a lot of data, numbers and facts within their communication. Secondly, they don't really like ambiguity, they use a lot of very specific language. And third, they don't use many emotional words or convey feelings as much. And when speaking to an analytical communicator, include facts and data, be clear and concise and logical in your communication. Be prepared to answer questions and give them time to think and reach conclusions themselves. Features of a personal communicator are, firstly, lots of use of emotional language and focus on reconnection. Secondly, they assess what you are thinking and feeling through how we're communicating. And third, they tend to listen well and value building and maintaining personal relationships. So when speaking to a personal communicator, use more emotive language, be authentically yourself to build relationships better and actively listen to what they say. Show you are considering impacts on relationships, particularly when discussing decisions and actions. Features of an intuitive communicator are, firstly, a focus on the bigger picture rather than worrying about all the details. Secondly, they make decisions quickly and cut right to the chase. And third, they tend to be impatient in their communication style and don't analyze too much. When speaking to intuitive communicators, keep your communication quick and to the point. Share the big picture vision and focus on the end result and provide a variety of ideas for them to think on. And if you can, use visuals to help land your points with them. Features of a functional communicator are, firstly, they like the details, timelines and well thought out plans and processes. And secondly, they prefer a step-by-step thinking and the same in their communications. And when speaking to a functional communicator, provide clear context and structure in your communications. Connect each part of the conversation to points in the plan or process and explain how actions or steps impact the overall goal or result. Flex your communication to the person you're speaking to. If you're speaking to a group, then try to cover the key points to talk to each of the communication styles. So the next way to improve our verbal communication styles at work is to focus on simplicity being the key. Making your messaging as clear and concise as possible while covering all the points needed by different communication styles takes skill and practice. You don't want your message being long, complicated or poorly structured. This makes the information you're trying to communicate hard to take in and hard to understand. So remove irrelevant information, stories, paragraphs and words. Keep the main thing, the main thing in your messaging. The simpler you can make your messaging, the more likely it'll be received as intended and understood as intended. The simpler and clearer you can make your messaging, the less of everyone's time you'll take up, including your own. Make your messaging simple. Then finally to improve our verbal communication styles, we should consider three huge influences on your communication. In my view, these three influences on your verbal communication style at work are huge. They will literally make or break how you communicate with your team, manager and other stakeholders that you need to speak to. They are. Firstly, communication is always a two-way street. Good communication is as much about active listening as it is about talking. Good verbal communication is a back-and-forth process. So pay attention to the verbal and non-verbal communication of the other person. See what is landing well and see what is causing confusion. Change how you are communicating to improve how they are receiving it. Ask lots of questions to check their understanding and provide summaries of what they are telling you so you can check your understanding. Secondly, practice humility. Two key elements are vital. Firstly, keep in mind that your view or understanding may be wrong. This keeps your mind open to new or better information and solutions. And secondly, communication is not about you. It's about your audience. So talk how they like to hear. Use the language that they know and understand. Thirdly, trust and your reputation matter. Both are huge influences on how your message is received and understood. With little trust or reputation for dishonesty, your message may not even be received through being ignored, for instance. Your actions, not what you say, build trust and your reputation over time. Make sure your actions and reputation help not hinder your face-to-face communication skills. Communication styles when meeting face-to-face do matter. Work to consciously be aware of your audience's preferences and flex your own verbal communication styles at work to best suit your audience. Effective communication needs three things. Firstly, you need to clearly convey information to your audience. Secondly, your audience needs to receive that information correctly. And third, your audience needs to understand the information. Without this, you're going to waste a lot of time and energy. Make your verbal communication styles focused on building two-way communication, showing your open-minded and listening and make sure that your actions and reputation support your communication. To recap, we've been through. Firstly, effective verbal communication is more than talking. Secondly, four different styles of verbal communication. Third, simplicity being the key. Fourth, three huge influences on your communication. If you have any questions on improving four verbal communication styles at work, please leave them in the comment section below and I'll get back to you. Thanks very much for watching and I look forward to speaking to you again soon.


Did you know that there are over 2,200 known religions in the world? We are all born into one belief, religion, or faith which influences how we see the world and everything and everyone in it, including ourselves. Do our beliefs divide and separate us, or do they bring us together in greater harmony? When you look up with awe on a star-filled night, do you ask who or what created all of this? Have you ever had a profound or deeply challenging experience in your life that changed your beliefs at the core of your being? Enlightened Pathways takes us on a journey of discovery to understand just how spiritual transformational experiences impact our lives and the world around us. Join us now as we deeply explore all that nourishes, heals, and inspires us. Welcome to Enlightened Pathways. Welcome to Enlightened Pathways. My name is Robert Cabeca, and I am your host for today's spiritual journey. And our guest today is Mark Andreas. Welcome, Mark. Thanks so much for having me. My pleasure. Thank you for making time to be here today. I'm at Mark in about 2019 through a training course called Core Transformation, where I also became a certified coach in the methodology, and we'll talk more about that later during the interview here. Mark grew up with parents Connie Ray and Steve Andreas, who were some of the original adopters of neurolinguistic programming, or NLP, which has greatly influenced his life and the lives of many other people, mine included, and immense amount of gratitude to them. Mark has been working with his mom, Connie Ray, and aunt, Tamara, further developing NLP and core transformation techniques, making them available to other practitioners, like myself, and ways to continue to transform people's lives at very core levels. Mark has taught and continues to teach numerous workshops online and around the world. He spent several years working as a wilderness therapist for Troubleduse to use that word a little loosely there. He is also the author of Sweet Fruit from the Bitter Tree and Waltzing from Wolverines. Please welcome Mark Andreas. Thanks so much for having me. Very welcome, Mark. And yeah, so you grew up with some pretty famous parents, so to speak, and at least to me anyway.  Maybe not sure you see it the same way, but they've had influence in my life and the lives of many other people, and it's probably allowed you to do the same thing. But what was it like, the impact that that might have had upon you as you look back on it growing up compared to what you might have experienced in that type of environment as a belief system? Yeah, well, I would say probably not too much the difference between growing up and looking back on it. My dad always said he's a big fish in a small pond is how he put it. So if I was at a particular NLP training, then in that context, there were people who were like, oh, your parents are blah, blah, blah, whatever. But it was a pretty limited thing and we didn't hang out at NLP trainings that much. So it was a pretty normal upbringing. I didn't get my ego inflated too much by fame or fortune or anything like that. So talk about some of the beliefs that you may have recognized early on in your youth that you feel supported you or influenced your abilities, your abilities as a younger man to interact with, you know, the world around you as you were growing up. Ah, interesting question. Yeah, so I don't even think about anything particularly in terms of a belief so much as what comes to mind when you ask that question is just how much, especially with my mom, but both of my parents, just the communication within the family and having a space where we could share about our experience and have that validated and work through things. So, you know, when my brothers and we're getting into it with each other, often my mom, sometimes my dad would be able to communicate with us about what was happening for the most part. Not all the time. Nobody's perfect. But we had a lot of family meetings and got a lot of experience like actually working through things. And I think a lot of people growing up, they don't get that they it's sort of like, well, that's how it played out, whatever, move on or something like that. And we got the space to really communicate about our different needs and find solutions to that. And that definitely informed my later interest in piecing global studies, studying that in college and then work with wilderness therapy and then inner work. It sounds to me like you had a lot of opportunities where you and your parents were able to adapt and communicate in a way where you were able to get better skill sets that further allowed you to communicate and respond and grow and learn. Yeah, definitely. That's an evolutionary process. And actually what you were just saying about like when you said, I know my parents did the best they could, sometimes we wish that was a whole lot better. But but that actually, I think, is the belief system from my parents that has served me the best and been kind of the biggest through line. And that's, of course, a presupposition and LP that everybody, you know, everybody does the best that they can and every behavior, every thought, every feeling is motivated by some is some positive purpose is trying to achieve something positive. So that actually, I think we zeroed in on the belief that it's been most valuable to me. And that's something that I fully believe and in my experience. Yeah, that's fantastic. I'm curious if there was a time in your life as you were growing up when you started to question what you were receiving as learning, as, you know, quote unquote, spiritual trainings and beliefs and knowledge and consciousness where maybe you started to question anything that you were getting from the various sources. So yeah, I think so. I mean, in maybe in smaller ways, I grew up in the in a where there wasn't a whole lot to the question necessarily, because my father was an atheist, but he wasn't so so and my mom grew up with a Mennonite background. And so she grew up singing the hymnals. And, you know, her favorite part of it was the singing part of it and the music. But I grew up, we didn't go to church. It wasn't like we were, you know, indoctrinated as atheists, but we also weren't didn't have like a standard religious practice other than singing Christmas songs at Christmas, which was always nice. So I didn't really have a strong kind of any sort of strong belief system imposed either that I that I felt I needed to push back on or needed to question. Both my parents were pretty so my dad was very much scientific oriented. So he was he had a very much a perspective of curiosity. And let's find out how things work. Let's find out how the world works. And and so that's already a question. Yes. Yeah. And I think that curiosity is the core to all exploration and growth and being able to, well, let me ask, I was going to say, you know, being able to exercise that curiosity, but I know that in some of my own life experiences, when safety becomes an issue, curiosity is not a resource that's readily available. Yeah, I think often that's the case. And so I wonder if you could talk about maybe that for a moment. Yeah. Well, that's something that my dad always said, curiosity is a wonderful resource because you can't really have too much of it. But it's very true that often when people do feel or what did he say that about curiosity or he definitely said that about gratitude. But but curiosity was another resource that he really liked and just saw that it had a lot of value. And you're absolutely right that a lot of people abandon that when they feel scared or threatened. And think that they can't have that, that that would be somehow an inappropriate kind of resource to have. And through a lot of the NLP processes, often with clients, they find that actually they can be even safer with that sense of curiosity. One of the themes running through the the sweet fruit from the Bitter Tree Story that's or the book that I wrote, it's a collection of true stories of conflicts that people found creative outside the box solutions to. And the kind of the the the theme that I saw through all of those stories was some kind of connection that none of those transformations would have been possible without some kind of connection between the person who might have become a victim and a person who might have become some kind of a perpetrator. And so. And I don't think that would have been possible without some sense of curiosity of what's happening with the other person's experience. And did you ever find yourself exploring, maybe out of curiosity, what some of the other religious faiths or beliefs were? And if there were something that may or may not have resonated with you at some point. Um, so I remember, like in preparation for this interview, I was thinking about I have a memory, you know, certainly of talking about like, oh, like as a kid in middle school, like, do you believe in God or like, what is God, you know? And I remember saying, you know, my sense of it at that time and I would say it's the same is maybe I'm just rigid in my thinking. I don't know is the like if I were to say what God is, for me, it would be everything like all the atoms in my being, all the atoms in your being the universe, the energy, the stuff we haven't discovered, the whole thing. Who knows, maybe even something beyond that, but like the whole that would be that would be my definition if I were to to come up with an answer to what is God, which is probably not a a very something that I would be very successful at answering. But if I were to try, that's what that's what I would go for. Well, I don't remember myself personally, you know, because when people ask, you know, what are your like, if you have religious beliefs or what are your personal beliefs? I yeah, I don't really know how to answer that question because I don't consider myself an atheist. Like, as my mom pointed out, that's its own religion. It's it's being, you know, it's it's knowing that this is how things are. But how would you know that? So. But but also I don't like the word agnostic either, because it's not like I sit around questioning all of the time. And I'm really more mostly interested in what I can do in this lifetime. And one of the books my dad wrote has a nice title that I think kind of sums it up, it's called Is There Life Before Death? And so that's that's my focus is what can I do in my short time here? Yeah, that's fantastic. Thank you for that, Mark. Yeah. As you were responding, I was thinking a little bit about. You know, I just know that my own travels growing up that I've always been questioned about my upbringing and the Catholic religion and what have you, why do they leave the Catholic religion and what religion did I go to, etc, etc, right? And what happened? There was a kind of basis for this show to explore a spiritual evolution as it were. You know, the person I was as a kid with growing up with the beliefs that were imposed, you know, as a young kid because we just absorb those beliefs. That's what I believe us human beings do best as we absorb. You know, we have thought about the outside before what we know what we're doing. You know, we spend some time trying to analyze that or sort out, filter it out, find out what works best for us. And I recognize that in having conversations about religion with people that, you know, it can get contentious because this is what I want to explore here. I think is that some people have a conviction about their faith, you know, a strong conviction that is unshakable to them. And I know I was in a place like that in my life as well. And how would we go about or what would you? Well, I'm not sure how to ask this, but what kind of conversation would you have or maybe you have had conversation with folks who have had that strong conviction? How do you honor that and talk to it and are able to represent your own belief and choices as well? Oh, I would say I just don't bother with it. Oh, great. OK. I like it. So I don't mostly I don't really care if other people think the same way as me in terms of a spiritual or religious belief system. And as far as client work and coaching work, I've certainly worked with lots of people who have very different beliefs than me. And it's just outside of the realm of what I even do or what people come to me for. So so it's really kind of just another realm that it doesn't matter really what some of these beliefs are. Unless unless it's getting in the way of what they want, in which case, then there's no conflict because I'm just there as a guide to help them find congruence within their cell and then themselves of a belief. And way of being that's going to serve their all of their outcomes. So that makes it really easy because I don't have any agenda of of needing to convert anyone to any anything particular. And of course, as you know, the core transformation work, which which you're deeply involved in and any other NLP tools, these are processes by which we can, if used well, we can and it's hard to use core transformation badly. That's one of the things I love about it. It's it's very user friendly that it can really it's a it's a it's a it's a neutral. It's it's belief system free and it's a process to uncover and find more harmony and peace within your each person. And how do you recognize personally if there's something that comes up for you that may be preventing you from going beyond where you presently are? So put that again to me. Yeah. Yeah. OK. Sorry about that. So as you continue to evolve and express your beliefs and exercise your beliefs and how do you go about recognizing something that might come up for you that might be preventing you from getting to the next stage of belief or where it is that you want to go in life.  I love that. So in terms of obviously, that doesn't mean that I'm like evolution is a really important value of mine. So and I feel like I'm lucky enough to be in a family and in a place in history and society where it's very supportive of that of me doing that. And there's not not too big of consequences. You know, some people in different times in history were, you know, it was it was not a very, very OK thing to just express themselves the way they want to. And so I feel pretty fortunate, very fortunate to be in an environment where I think it's it's pretty easy to just be who I am and evolve how I want to. And yeah, and no one's going to persecute me for it. So right. Very grateful for that. Yeah. OK. You know, I guess what I would say in a more practical level of of, you know, these like core transformation is a tool that I use when when I feel stuck emotionally or like something just, you know, I didn't behave the way I wanted to. And I'd like to evolve that kind of a thing. Then, you know, core transformation is my go to right now. And how would you present it to other folks? Who might be recognizing something that they're stuck with that they're not able to get past or having difficulty getting past? What might you recommend to help them get through that? Yeah. Well, first thing, I mean, the really easy thing is to get the book, which I have here. You could do that very easily. And some people have gotten really impressive transformation just reading the book and guiding themselves through this process. And there's resources, video resources, sources online as well, some intro videos for myself, Tamara, my mom, Connie Ray on YouTube or on our website. So there's it's very accessible. And there's there's various levels of other training and involvement. Of course, you can get from us and. Yeah, yeah, maybe that's the first thing. Yeah, yeah. Yeah, yeah. And thank you for that. And that's important because I know for myself, I recognize there were certain times in my life when I just felt absolutely positively stuck and nothing was working. And I was trying everything.  And I think that well, maybe you can talk to this a little bit, too. It's like that curiosity, that open mindedness, you know, how do we really hold on to that and not let go of that curiosity and open mindedness to allow us to keep moving forward, no matter what? Well, that's the wonderful thing about the court transformation process. And for those listening and viewing in a nutshell, it's a process whereby our limitations become doorways to these profound states of being called core states that then transform that limitation. So so it just is a very easy way to go about transforming in a really enjoyable way because anytime I have some feeling, frustration, anxiety, fear, whatever it might be, or a critical thought or a habit or behavior that it's not serving me, that itself with this process becomes the doorway to discovering that positive deeper purposes and ultimately to this core state experience that a lot of people describe in terms of spiritual experiences that then can transform that limitation. And so it's a very easy way to work and it can include all of those things that you're talking about when we feel stuck, when we feel like we want to give up or like it's not worth it. There's a very easy way of including all of those parts of our experience in the process itself. And that's often where people get get stuck and unable to move forward is when something like that happens in their experience and they don't have a way of including that also. And so sometimes I describe it as it's a process. It's a process for change where no willpower is required. You don't have to make anything happen. It's easy. Yeah. Yeah, and thank you for that. Yeah, that was really wonderful. Thank you. I was thinking about your book, Waltzing with Wolverines and how that book came about. And based on what you just said, can you relate it to your experience with the youth that you worked with? So with the and I actually worked not as an official therapist, but as a triple leader. So so my job was to be with them 24 seven to run the group processing to help them one on one and to keep them from running away. Hopefully we didn't always succeed. It was definitely like a crash course and all sorts of different possible human behavior and experience. And so I didn't really have an opportunity to use core transformation as a process, but the underlying core of the process in terms of just being aware that every behavior that was experiencing when I'm cussed out by somebody when somebody threatens to stab me with their tent stake or whatever it might be, which these things happened. But there was some positive. There was something positive wanted in whatever those different expressions might be, and that was a really useful and valuable, like foundational perspective to have and being effective in that environment. Yeah. And, you know, often I think about in terms of like in in college, I said, peace and global studies kind of at a societal level of how do we how do we get along, basically? Then the wilderness therapy was that in a group level. And then now with the one on one coaching and core transformation, and it's really the same thing. It's just within ourselves. How can I how can I get along with myself well internally and, you know, the whole thing about being the change you want to see. So I see it as kind of all the same thing, just that different levels of social group or societal, social and personal. Yeah, we just have a couple of minutes left. Unfortunately, I love where this conversation has taken us. So I guess the thing you touched on a little bit earlier that I'd like to ask if there's one particular thing they'd really like the audience to know that maybe they can utilize to help them move forward through any challenge or struggle that they've got going on. Yeah, I think I mean, I think that the number one thing is to to check out this process core transformation, because it's a really user friendly process. You can guide yourself through it. If that's not working for you, you can get a guide. You can do a training. There's just so many resources, and it's just a very practical way of transforming and evolving in those moments where you go, I just don't think I can. Yeah. And thank you for that again, because I know how I came across core transformation was going through another NLP certification a few years ago. And your mom, Connie Ray, came on to do a talk with us. And she did like a one hour talk with us, and it was great. And I was like, what is this magic? What is this magic? Because up until that moment in time, a couple years ago, I experienced NLP as being, you know, just a little bit manipulative, you know, at some level where core transformation, none of that exists. There's no manipulation. We're not trying to get someone to a place where we think they should be. There's no coercion. It's just connecting and just letting the core state evolve and expressing itself. One of my colleagues described it as non-violence at the internal level. I love that non-violence at the internal level. That's fantastic. So unfortunately, we are out of time, but thank you, Mark, for spending time with us today and the conversation. And letting us get to know you a little bit better. I really appreciate your time today. Yeah, you're so welcome. And I think I didn't mention our website where you can find out all about these resources is AndreasNLP.com. So you can find out more there. And just a few closing remarks and a shout out to today's executive producer and sponsor Bridge to Heaven Healing and Leap in Lizards, which is the premier source for healing crystals and readings with four locations, including 449 Forest Avenue, Portland, Maine. You can visit www.LeapinLizards.biz for more information. Also, a big thanks to our co-executive producer, Dr. Anna Cabeca, the creator of Mighty Maka Plus. Visit Dr.AnnaCabeca.com for more information. Also, if you would like to get more information about this show to reach out to us or to sponsor us, please visit www.deepbeing.org. And a quick shout out to the crew, Director Packard and Carton, as well as to the Portland Media Center and their team. Thank you for watching Enlightened Pathways and spending your valuable time with us today. Until next time, play, have fun, be happy.


Principles of Planning Welcome The learning outcomes for this presentation are to consider the need for change and to describe the definition of planning. In the dictionary, change is defined as to make or become different or to vary the way of doing something. Before we try to do something differently in a health setting we need to consider a number of factors who is affected by the activity we are thinking about changing both healthcare providers and consumers or patients. What additional resources or training will be required if we do decide to do things differently? And what is the likely long-term impact? Because of these issues whatever change we are considering it will have to be planned. Planning is an activity most of us carry out every day but we may not recognise it as planning. For example, we are planning when we consider going on a holiday or a trip. Planning has two components that work together they are called organizational process and logical process. In organizational process we try to understand all the different interconnected components that influence our work. We then use these components to create a strategy or framework for change. The logical process details all the activities we need to carry out in order to achieve our desired change. There are four basic stages to planning. Firstly, we need to understand where we are now, here. To do this we establish our present position and this lets us decide if change is required or even possible. The second stage is to identify where we want to get to in the future, there. This future is usually three to five years away. In stage three we work out how to get from here to there. We do this by logically arranging activities and selecting the best methods to help us get to where we want to be. Finally, we carry out our plan effectively and with efficient use of resources. Success. To finish the presentation we are going to look in more detail at the program planning and management cycle. There are six steps to the activities in this cycle. Stage one of planning, if you remember, is understanding where we are now. This stage has two steps in program planning and is known as a situation analysis. In step one, we assess the needs in the community, identify the relevant strategies for primary, secondary and tertiary prevention and assess the resources already available at each level of delivery. And in step two of this stage we identify the gaps in current provision and determine the priorities for action. Stage two of planning involves understanding where we want to get to. And there are two steps to program planning activities in this stage. In step three, we convert the prevention strategies we have already identified in step one into a plan of action with clear objectives which have targets and indicators. And in step four, we prioritize our objectives and create a budget and timetable for the activities needed to achieve them. We also, vitally, secure the resources we need to carry out the plan. Stages three and four of planning are about ensuring we can carry out the plan effectively. This is the implementation phase and planning activities here are referred to as monitoring and evaluation. Again, there are two steps. In step five, we carry out several activities, often more than once. We monitor progress of implementation, identify problems and solutions, review implementation and if corrective action is needed, we revise the plan. In step six, we evaluate the program of work that resulted from our plan and decide if the plan can be scaled up elsewhere. In conclusion, in this presentation we have considered the need for change, described the definition of planning and looked in detail at the four basic stages and the key steps involved in program planning and management.


Appalachian Wireless and Samsung have VBL and Wireless all January. Samsung Galaxy S9 just a penny. Galaxy S9 plus $99.99. Note 9 just $249.99. That's $200 off normal pricing. While supplies last, two-year agreement requires e-store for details. Some other family members or people there at the residence said this kind of escalated from a bedroom into a hallway then led into the kitchen. That's probably where the knife became evolved. She probably got the knife inside the kitchen and then, you know, it went downhill from there towards the escalation of the violence. But there was a laceration to the neck and multiple ones in the head and threw out her torso on her body which were just small puncture wounds. The laceration in the neck was kind of severe. She just took over to the pipe of medical center where she was treated. I think she was released yesterday. The victim stated that she had confronted her daughter over possible methamphetamine use and that's what escalated the argument and it ended up becoming a stabbing force.


My presentation is called Heritage Shall Be Our Light Motif. As you can see, there is a picture, a symphony in green. It's a picture of our World Heritage sites, our World Heritage property in Austria, one of the component sites of the UNESCO World Heritage of prehistoric high dwellings around the Alps, which is, as you probably know, a trans-boundary, a transnational serial world heritage. And as you can see on this map, all these little red dots are high dwellings, high dwelling find spots. Not all of them are on the list of the UNESCO World Heritage property, but 111 of those little red dots are on the list. And our biggest challenge, probably, in the management of this World Heritage, when I say we, is, as in Austria, as the codatorium file button, like the management body of this World Heritage site in Austria, that there is also, of course, in every country, there is a management body, and there is a joint group, the international coordination group, and all the session organizers are part of this group. And so when I ask what is our biggest, on my point of view, what is the biggest challenge is how we can find this kind of golden thread in between this World Heritage, this component sites, because it's quite confusing, and it's also a very large time frame. We have more or less 4,500 years, maybe more of prehistory, six countries, different areas, different landscape types. So it's quite complex. And how can we do this and are there good recipes for that? And when I designed my idea for the session, I had the idea that we would just make an online survey and find other places, other maybe older transnational sites. There are not so many there. There are seven inscribed sites or inscribed properties in the group of 1,092 World Heritage sites, all in all. And so I thought maybe it's easier. It's good to ask the others, how do you deal with this context that you're a transnational site. You have to take care on the local conditions, the local context, but you have also bring everything together. What was kind of problematic is that when you look, for instance, at the official World Heritage center site, you have all the listings of the inscribed sites. And of all these 37, you can find only seven sites with a joint presentation. So it's kind of limited. I thought every site, every World Heritage property should have or would have a joint management, a link, a website address where you can find more information and contact. And it's not even possible to find the contact for most of the World Heritage sites. So to give you a very quick overview, there are of these seven sites with a joint presentation you can find, for instance, the Struve Geodetic Arc. They have something like a de-keep. That's their joint presentation, which is already a little bit outdated. I think the last update was from 2010. You can find presentations like this one, the Venetian works of defense between 16th and 17th century of Italy and Croatia, I think. But when you click on the Continue button, then you end up on an Italian web page with little information about the joint, the World Heritage. You can find sites like this, the Pyrenee Montpellier, which is basically more a touristic site. And one of the few examples where it's really an attempt to bring everything together is this natural heritage site, the Badensee between Germany, Denmark, and the Netherlands, who bring everything together and start from a position of a joint World Heritage. So I failed to have this online survey because I still need to get contacts. So maybe there are some concepts, but you can't find them. That brings me back to our own web presentation. That's just a random screenshot, which is, I have to confess, also something that is, in that form, quite a recent status that we already had from the very beginning for the joint website. But it was very much focused on the perspective of Switzerland. Switzerland's lead partner in this nomination was kind of dominating this website. After more or less five or six years, we did it a little bit different, also recognizing that there should be a more balanced presentation of the joint World Heritage. But we experienced that in all the countries. What is our daily life is that the people close by to the component parts, to the actual sites, the fine spots, they're only connected to their own heritage in front of their buildings, in front of their villages. So that's part of a research project that we did together with schools in Austria. It's translated, I tell that the people of 6,000 years before already knew how beautiful it is to live here. That's a kind of culture that not everybody got. And you should see that it's nice that we have something like this. Or it's important for the identity of the inhabitants or the locals that they know they live in a very special region. So in many of these, we did a lot of interviews, or the school kids did a lot of interviews. In many of these quotes, people refer to this local identity. And that's the only thing that they never refer to a global identity, or a joint identity, or a common culture. So it's very much focused on the local level, which we can also use, which is every now and then very useful. So for instance, all the part of this research project was that we created or encouraged also local narratives. And so we, for instance, there's a story about a canoodle, a dumpling, which became part of the local heritage, which is, of course, something that is rooted in ideology because they found something like a bread, remnants of bread. But people made something new out of it. So it's very useful to start with these local narratives. But on the other side, it's a little bit too limited and connected with many problems. In the preparation of the European Year of Cultural Heritage, there was also one of the many studies, preparation studies. This one is made from Markuzi Pruc, European identity, made for the European Parliament. And he said, accordingly, it would be most striking and indeed irresponsible of nation states but also the EU were not to pursue any action or even formalized policies aimed at strengthening collective identities. Identities, again. So we're working with identities. But a little bit earlier, he already says, in a nutshell, no identity is stable over time or eternal. No identity is intrinsically superior to another and no identity is indispensable. So he already, in his report, is quite clear that the concept of identity is a very problematic one. Going back to the World Heritage in the UNESCO, you can find another quote, heritage constitutes of sources of identity and cohesion for communities disrupted by bewildering change and economic instability. Creativity contributes to building open, inclusive, and pluralistic societies, both heritage and creativity, later foundations for vibrant, innovative, and prosperous knowledge societies. So I thought it would be wise when you think about these additional dimensions of our heritage, especially a global heritage, when we think about training that to a next level to look a little bit more on the identity aspect. What is clear, and I think most of us already touched this topic, is that heritage and archaeology, in particular, can act as means to create a local identity. It's very useful, as we did it, with the dumplings that can put society together, opposing things like rural exodus. But it's a very constrictivistic concept. We all know that, I think, that the concept of this local identity or cultural identity is very problematic. And it's, of course, and that's very important. Also, in the context of the global heritage, which should be something for all, it's very exclusive and very rarely inclusive. So I think we have to find a differentiation. And when we speak about identity, we should maybe define the terms, the terminology, a little bit more. So quite often people speak about a cultural identity, but then maybe we should think much more about personal identity or the identification with something. To make it a little bit more clear, I brought some examples. So what is identification? That's what you call an English spin beautiful, some single word, thank you. And I use that quite often for workshops. So I have a workshop with teenagers, also including teenagers with the migration background. One of the guys was from Tajikistan, I think, and he was very close, quiet, language problems. And when I showed this, and my point was to ask the teenagers what they think, what kind of object is this, in most cases. A small wheel or a model of a cart or something like this. But this guy immediately recognized it because his grandmother, she still uses a single wheel tool for threads. So he found this as a hallmarker, and he got an element to identify with this topic with the pilot warnings and the heritage of the pilot weather. So that was something on a very personal level. And he had the chance to identify with that. And then the rest of the workshop, he was very open and he really enjoyed the workshop. If you think about personal identity, how can people identify with culture as a model of a piloting house from France? That is kind of difficult to approach. It's very far away. Isn't it much easier to identify with something much more recent? There are also still houses in Southeast Asia, Myanmar, for instance. So they're much closer, I would say. And maybe that's even closer, having holidays in a luxury stint house, holding in the meadow dyes. Maybe the persons there are much more identifiable for the persons, for us, for people living in the most Australian piloting areas than to identify with this very far past. And cultural identity is the concept, as I said already, that is not really existing because it's always connected to something that is created and very artificial, for instance. Probably I don't know how many in this room already saw the sound of music, not so many. But if you go to Austria, almost nobody saw it. But if you ask any American, for instance, what would you, from a cultural aspect, connect to Austria? Maybe the first thing would be sound of music. So people start now in marketing to connect the pilot dwelling with sound of music as a commercial package. But it's nothing that is connected to our Austrian cultural identity. So that's something that is very artificial and not useful. That struck me always that people who are very fond of their national identity or state national identity, they refuse to identify with certain elements of this identity. So that's a quote from the German former German president, Gauck. There is no German identity without Auschwitz. And the guy who blocked this is a far-right activist. And he asks or tells this president, remember that you have been elected as head of state to represent the German nation, people and not to be great. So he's, on one side, always referring to the German identity, but he's neglecting this identification with part of it. It's probably you will see other features of this event. I have to hurry a little bit. It's tempting to use identity and national identity. And we are also not immune to that. So we had this event. It's an international log boat regatta where we bring together a whole group of people involved in the world heritage and the pilot dwelling heritage. And as you can see, we also, as a team, we have the Austrian team, which is kind of contradictory, contradictory, rowery, because it should be on a different level. I will skip that because it's, I think, presentation on its own. So I just wanted to bring that in as maybe something that can take home as well, think about the world heritage as places of otherness. My last slides, just a little bit. I think if we try to find a solution how we can connect to the people and how we can describe, how we can talk about these cultures, what is a culture? But if we talk about the past, is that we maybe remind ourselves on our profession. Archaeologists are, as many people say, interpreters of the past. So they are used to work with transformation, typologies. Inter is the in-between. So you have a distance with room and space, time in-between. And there is a French philosopher, François Chouin, and he said, transformation is the root of culture. So it's impossible to fix a cultural identity in one place at one spot. So he is very strongly opposing the concept of a cultural identity. And he proposes that we should focus on the transformation, not on the differences, which are obstacles. And they are very static and isolating. But he says that if you think about space and distance in-between and try to analyze it, then it's dynamic and brings the in-between into the light. So that's also, again, a piece of transformation that could help us to display cultural heritage. Coming back to the title, Heritage as a Light Motif, I would suggest that we, in our representation, interpretation also, when we do, I don't know, museums, exhibitions, and try to think of new ways how to tell stories about the past, create a narrative. Then we can think also, imagine this heritage as a piece of music. That's also something that we always discussed in the World Heritage together. Can we find something like a common general narrative as a foundation, as a basis? And when you think of this common light motif as this basis, then that could help us to create something new. And there are also room for deviations, two of my favorite hacks of the past. Stone tools in new design with the 3D printed handles or these hipster Greek sculptures. You can find a more, I don't know, not so serious way to talk about heritage. So to conclude my thoughts about identity and heritage, I would suggest that we cherish the distance, not the distinction, and create open ends into the future because that's also something that is really strongly connected to this idea of having a transformation and more something that is not separated and put into separated pieces. And also to try to find easy access for heritage, create a soundtrack for identification. Thank you very much.