Welcome back to Cyber Underground. I'm Dave Stevens. Once again I teach for the University of Hawaii at the Kapiolani Community College campus. I teach in network security and ethical hacking. I also am the managing director of Kapu Technologies, a cybersecurity company right here in the Hawaiian Islands. And today with me I have two special guests. Don't laugh at me. You guys, that was pretty good. It was pretty good. Andrew Lanny and Gordon Bruce. How are you doing, guys? Thanks, brother. Andrew, I teach technologies right here in Hawaii. You're physical and electronic security. We do. And you're the DeFars Master. You're going to tell us all about you. You think? I'm the DeFars trainee. There are so many things that you've done for this state and thanks for being around. My pleasure. GGBN associates right now waiting to retire sometime in your 90s. He's not retired. He's never retiring. He just thinks he's retiring. I keep trying. His customers won't let him go. Yeah, with billable hours, how can you do it? It's hard to say no. Keep raising your rates and they just keep paying. Makes the governor happy. I mean, every time I cut that GE tax every, I do it one yesterday. Every time I send it in. Are you paying quarterly now? You're making way too much money. We're talking about federal acquisition regulation. Yeah. DeFars, the Defense Federal Acquisition Regulation is it system or security? What's that S for? DeFars? I don't think we know. Regulations. Regulations. It's the S. It's system. Yeah, yeah. So the DeFars comes on all your DoD contracts now. Or the Defense Industrial Base, or DID. Yeah. Pull the far up first. We have one slip. We got to keep our slides in order. Well, let's pull them up. I'll get confused. Let's pull up the slides. The acquisition regulation. This one is the bigger one. And we talked about just those baseline requirements in the FAR that everybody has regardless of DeFars. Now this has been around since 2014. Oh, the FAR forever. Yeah. We were supposed to do 2015. The NIST 800-171 was added, but it was self-attested. People weren't doing that. And the DeFars. And the DeFars. Yeah. The FAR is anybody, anybody gets federal money, has FAR stuff that they need to pay attention to. Yeah.  There's a FAR. There's a DeFars. Far, far away. There is a FAR. There's a FAR. So the FAR. In the DeFars. Can I do a time off for just a second? Sure. Anyone that is doing DOD work, some contrary or whatever, needs to comply with FAR and DeFars, right? Yes. So that's what we're here to talk about. So if you are a contractor that is doing work for the federal government, these are DOD. These are the requirements, the regulations that you have to follow that they were going to get even tougher with starting next year. Why does it make so much sense when he says it? Why is it relevant to the state of Hawaii? Well, why is it relevant to us? Okay. How many contractors do you think we have in Hawaii that are servicing the military? Well, with 11 bases in the state, 10,000. And so I'm throwing questions around just to get everybody interested. If I have a cleaning crew that's cleaning an office building in the in the federal space at DOD, does that cleaning crew have to be DeFars compliant? And we're not talking about technology or writing code or anything like that. What about the landscaper? They have to be compliant. But when we we're talking about a specific parts of the DeFars clause, there's other stuff in the DeFars. There's other stuff. So I'm just trying to clarify this. So I just want to clarify, there's a lot of things that are going to get tougher next year. Sure. And we're going to cover the technical side of it. Information security system stuff. This is the funny part. I don't consider this tougher. I consider this actually enforcing the toughness that's been there for years. It's best practice. It's going to get real. Well, it's going to get real. Best practices was in the far. That was safeguarding. Now nobody did that anyway. So now they said, oh, we're going to do it. We're going to make it tougher, but easier depends on who you talk to. Driving cars in the early 20th century, we had cars, we had roads, and then we started having signs and lights and people had to take a test to get a driver's license at a minimum age. Then you had to take training before you got your license. So it's a maturing process. I feel like I'm constantly taking tests. That's life. It is a maturity process. It is a maturity process. And there's a reason why it's regulated. Now it's called the cyber security maturity model, which is brand new to all of us, but now it's going to be enforced. That's what we're going to talk about. Let's put up another slide here. We'll try and keep it simple. Looking at, okay, so what we're looking at here is in DeFars, one of the numbers you can see on a contract, usually page 12, you're saying, or somewhere around there. It's DeFars. There's a long number. At the end of it says 7012. 7012 says you need to comply with a National Institute of Standard and Technology, or NIST, 800-171, which is a document that breaks down a list of security controls that you need to apply to your company to keep yourself safe in the cybersecurity realm. And it's broken down by these 14 families right here. And each family has a number of controls underneath it of how you apply these controls to cover this area. So access control will have about 26 or so controls. You apply those controls like multi-factor authentication, and you can check a box and say, yes, I can fly. So out of these is 110 physical controls, but they can get rather detailed. And it's hard to comply with all of these. 110 apply to all of these 14 family members. They're somewhere in these families. They try to make it simple by saying there's only 14 families and only 110 controls. But the controls in and of themselves have multiple pieces to them. Yes. Let's move on. Let's see another slide and see if we talk about this. Now, here's where it gets real. In that 110 controls, not all of them are stuff that you have to do. They're shared with vendors. Well, let's back up. Okay. So in the DeFars Claw, the 7012 which you ref, if you're using a cloud service provider or some of your services, IT services, there's a reference for the CSP cloud service provider responsibility. Right. They have to be fed. And that's, I forget that number, but it's in, it's ref in the 7012 document.  The CSP is what? And the cloud service provider. Okay, thanks. So the cloud service provider. They're trying to keep English here. And when we do these talks in these rooms, we ask how many people use, you know, Office 365 and buying large. I mean 99% of the hands come up. So there's your cloud service provider that's handling probably your email, perhaps your file storage. I don't know what else they may be doing for you. But when you do that, that's where these clause, this GNC clause for DeFars compliance comes from, is out of that cloud service provider responsibility.  If we go ahead and slide back, it's a good one to talk about. It's a really good one to talk about. The GNC. The GNC, because here's the thing to point out.  Well, if, if you're handling CDI, and this is an assumption, if you're handling, if you're handling CDI or controlled unclassified information, CUI, confidential information, you have to be Office 365 GCC high. Yes. I have no choice. I do, I only know of a couple of clients on this island that are doing that better at this level of Office 365. So, if they're saying, well, I'm running Office 365 E2, E1, E5, Home Edition, you are not compliant, and you need to, you need to be looking at moving to this now. Well, let's, let's back up again. Well, Office 365 without GCC, which is Government Community Cloud. Right. That is the, the regular service you can get, like E5, the Enterprise Level 5. Commercial. It is compatible with 800 171. You can be in this new cyber security module, maturity model. You can be level 3, but you can't go beyond that because you can't comply with DFARC and G, which somewhere in there, it actually says, if there's a cyber incident and you report it to us, the DOD, we have the option to come and take your physical hard drives to forensically examine those. Correct. Regular Office 365, you cannot do that because you're in a shared environment. You're not. Virtualized across the same machine. You could be sharing the same hard drive with multiple people. So, you have to move into GCC High where you have a dedicated virtualized environment. Right. So, your, those hard drives are dedicated to just you. And if you're, yeah, and if you're doing CDI or CUI, whatever, you have to be in that space. You have to be in that space. You cannot, you cannot coast into GCC. Now, here's the part. Oh, there's no coasting. There's no coasting. And here's the, here's the part.  You know, you have to find that. And you have to find the people that sell these licenses because you can't go to the Microsoft website and say, I need a hundred licenses of Office 365 GCC High. There's only five vendors in the US. There's only five vendors in the US that you can buy that from. That's, that's the only place. So, get in line because, because those five vendors are getting. Yeah, it does take a while to build the environment out for you as well. And then you have to move like all of your mail over to it. You've got to migrate all of your mail over to that new one and all the data and everything that goes there. So it's, it's, it's phase one and you should be looking at it now. Yeah, it wasn't an important point you made. The C, the D-Far C is actually the one that says, if there is a breach, you've got to notify the government within 72 hours. So you don't get that if you're not in GCC High from Microsoft or from your provider, they don't have that capacity to alert you. So therefore you'd be in violation when you come to the government. Six months later, go, by the way, we had a breach six months ago. They may like, boom. Boom, you're done. And then the G is the one for the, if they decide to investigate where you've got to turn over the material. They've got to comply with a lot more regulations than the regular. There's a good thing on this slide though that, so as of, as of January, they, they waived that minimum 500 licenses. Correct. That would put a lot of small businesses out of business. Correct. Because these are a little pricier type of licenses than the regular license. And you're going to pay, you're going to pay for an office let's say of a hundred. You're going to, your annual fee is going to be somewhere between 75 at $80,000 a year. And you're going to mix up serious money. Yeah, so the good news is you can also pass that, that cost on to the government. The government. Yeah, but we, they haven't spelled out all the hoops you're going to have to jump through in order for you to justify reimbursement. So the, the other part I think it's so important is, you know, you are compliant, but you still have to have proper licensing. You got to do system design. Yeah. And you got to configure all those shared controls. It's not just like, oh, they got me covered. There may be stuff on your end that you have to do. Yeah. And then the policy controls also have to be written. Your domain controllers are going to get modified. Oh yeah. When you move to GCC high, it automatically modifies your, some of your domain controllers, your active directory gets modified. There's a lot of things that happen that prohibit you from doing things that you could do in the past. IE install software on my laptop. No way anymore. It has to be an admin, a system admin. They're the only ones that can do it. So imagine if you got. Which it ought to be anyway. Anyway, I'm just hoping. Should be anyway. But how many, how many clients or organizations have I gone into? What they've got? Everyone's an admin.  You can't do that. It's not going to happen. So, so you've got to look at ways to do this. So this is, this is a barrier to entry for many small companies. This is an important obstacle that you're going to have to overcome. However, the good news I think is if you have a contract that requires this and you have multiple renewal years, what I've been understanding in some of these webinars we've been looking at is you will most likely be able to institute a change order. Once you've invested this money to come up to compliance, that change order will reimburse you for the cost of coming up to that level of compliance. The level of compliance, we'll talk about in a minute, the CMMC level. If you're going for level three, if you come up to level three and you have to go into the GCC environment, it costs you 150 grand. That's a change order. You can put that in. You will probably get that money back. But it's going to take a while. So, but you would have to show a percentage of work out of your office is going against that contract. It's the delta. So that's, it's kind of like if I'm an E5 and I go to GCC high, are they going to give me the whole amount? Or are they going to give me the delta between E and the difference? The difference. Okay. And in some cases it's the delta worth all the aggravation all the work that you're going to have to go through to get that. Pretty sure it is. So you can always, you can also go by your percentage of volume. So let's just say you do $10 million a year and you get a one-meter contract, 10% of your cost would therefore easily be justified to have gone to that customer. Now, do I have to start tracking this in my financials? Every time I purchase something or acquire something, do I have to say, ask just to say, I only did that because of having to be compliant? Well, I think that the GCC high licensing cost, the CPU and the storage, yes, I think for sure.  You need it for it, no matter what. I mean, well. No, but to be a FedRap compliant cost, to go to FedRap costs me more money than standing it on Microsoft's regular shared service. Exactly. And now you're going to get that difference in that cost, not the entire cost of being GCC. But I would take forward the advice going forward. Asterisk next to everything. Asterisk and just say yes, yes, yes. Well, and again, it's not appreciating your car. It's also not a requirement yet because it's not audited. It's not in the contract, so like, so in September of 2020, when it says you must be level three to bid on this contract, now you got full justification. Okay, let's talk about that right after the break. We're going to go away for a couple of minutes. We'll come right back until then. Stay safe. Hello, everybody. My name is Walter Kawaii. I'm your host for a monthly live streaming video entitled Ukulele Songs of Hawaii, where I bring on guests. We enjoy talking story about the music industry here in Hawaii, sometimes going back 50 decades if possible. And always having some good fun talking with entertainers. We're here located at Think Tech Hawaii downtown Honolulu at the Pioneer Plaza building. And in their studios. And so join me next month for Ukulele Songs of Hawaii. Aloha. My name is Wendy Lo, and I want you to join me as we take our health back. On my show, all we do is talk about things in everyday life in Hawaii or abroad. I have guests on board that would just talk about different aspects of health in every way, whether it's medical health, nutritional health, diabetic health. You name it, we'll talk about it. Even financial health. We'll even have some of the Miss Hawaii's on board. And all the different topics that I feel will make your health and your lifestyle a lot better. So come join me. I welcome you to take your health back. Mahalo. Welcome back to Cyber Underground. I hope you missed us and you stayed safe. We're here with Andrew and Gordo. The techs are and from IST on physical electronic security, Andrew Lanning. So where were we? We're talking about the cost and how to recoup the cost. When this is going to be actually required. So from the webinars we've been watching, there's going to be a third party. So it's required right now. Just let's make that clear. It's required, but you self-attest. And someone's already caught self-attesting and lying. And they were fined three quarters of a million dollars. That's a surprise. Somebody actually got caught. Whistleblower, whistleblower. Yeah. Nobody actually went and audited that company. They had to be whistleblower. It was a whistleblower. So in September, they're going to come out with a new document, which is the H-100-171 version B, which raises the stakes. And we can look at a slide here. We're going to see the slide here. Let's put up the slide. Okay, let's speak to the slide first. This is Andrew's slide. Yeah, this is good. This tells you we've got about 150 cloud service providers operating in the FedRAMP environment. It tells you how much money is flowing through there. About a third of the world's internet traffic is flowing through FedRAMP. So the important thing is what we've got is a good long track record of good security and good practice compared with the other environments which are not as secure. So I like people to understand something about why the government's pushing us here. This didn't just, somebody didn't just dream this up last week. This has been going on for years and years and years. And since self-attestation didn't work, like this, you know how they said, make sure you strap your seatbelt on when they passed seatbelt laws. Nobody did that either. So they had to start giving you a ticket. So that's why we're going to start auditing to make sure you get there because the government needs its information security. So we're going to talk about how we're going to audit. Let's roll to the next slide. So here's the new cybersecurity maturity model certification levels. So you'd see this on your contract as a requirement when you're doing a request for information, RFP, RFI. You're going to send in something in response to a contract that says you need to be CMMC level three. What does that mean? So currently the 800-171 revision one, that's the NIST document.  The new document 800-171B is coming out in September. Supposedly, we hope. And it will contain another few controls to get levels four and five. So guys, let's talk about these levels and how we're going to get certified. These levels, I don't think anyone has to get afraid or have a lot of anxiety because CMMC level one is a good basic cyber hygiene posture for a small business. You might not be able to make it work. Probably the basic safeguarding controls are covered. You might see that on your contract. Level two and three is going to be bigger contracts.  But I'll rest my case on the fact that CMMC level one, that a significant number of companies here in the state of Hawaii that don't do government work are not CMMC. Even the ones that do level one are not at that level. And they should be because that's basic. And so, but I can guarantee you that I could walk into some client say, let's walk through the 110. I'll do an evaluation right now. Give me four hours. We'll do a self-evaluation and we'll see where you're at on that. We'll just go down the list of 110. Think about four hours and I'll give you a graphing to show you where you sit. And then you can have anxiety. This shouldn't really cause you anxiety, right? Just admit it if you look at the control set and start complying now. Because it doesn't just apply to prime. It's everybody that's under the prime. It's a downstream effect. If you're anywhere near these vendors, if you're doing any business with the big, if Lockheed Martin's got a contract and you give them washers and nuts and bolts, you're one of the vendors.  And if you have subs, you got to make sure. You got to make sure.  That's right. And this is going to become required as of January. You're going to, okay, so here's the process. The DOD will hire or get a third party vendor to do kind of a train the trainer thing with CMMC providers. So it'll be a non-profit. Companies that do the certification will be trained by this non-profit organization. That's going to happen sometime around between September and January. January is when they want to kick off this training and people can sign up to be one of these CMMC certifiers. Which I understand. I want to be one of those technologies. I might be too. So maybe you and I'll partner. You're wonderful. Yes. Let's do that. I don't even know how to sign up yet. They don't have that information. Me either. I'm looking. I don't have either. That's no application. It's no application. As of January, that's the sort of the training people to do this certification. It's not going to become required to do an RFI or RFP until about September of next year. Well, rewind. No, RFI, according to the documentation, the class I took on Monday, RFIs are June of next year. It's June of next year. So June of next year, if you want to respond to an RFI, you have to be audited by then. That's going to be tough. That's going to be really tough. But that date did not change as of the update Monday. And then if RFPs are September. So, but the date did not change as of Monday of this week. Yeah, remember the contracting officers have full authority to waive that. So, you know, we all sitting here know there's going to be a backlog, right? There's 300,000 DIB companies to be certified. DIB? That's industrial based. Okay. I'm just making sure we're speaking. So, in that supply chain, the scrutiny has come down on the supply chain. Most of those big primes we talked about, Lockheed, Raytheon, VAE, these guys are handling secret, top secret material already. They are already handling the full NIST 850-3 stack. 1700 control. But their supply chain is what's brought this scrutiny to bear on the supply chains leaking a lot of information. Hold it back up for a second. This is a security standard, right? Yes. Lockheed Martin is your actual target. Let's pretend that's the castle with the king inside. You're not going to storm the front gate.  That's your vendor. So, you go after a vendor and the vendor is your easy pivot point into your castle. And a good example that people have already experienced is these movies that got leaked before they were released. And it wasn't because it got to Disney or Pixar or whatever. It was some little two-person shop somewhere that was doing the final little bit of edits on... CGI, sound.  They went there and they got them there. That's where they pulled it out of. And this is what's the whole point on this is that they're not going to go after the big guy. They're going to look for the little small guy down the food chain. Yeah. Yeah. And the unfortunate thing is that the large volume of small businesses here in the state and I think across the country... 27,000 small businesses in the world. There are a great number of them that are two, three, four, even one person. So if you do this, just 800-171 with very few people, that's going to be a challenge. Yeah. And the separation of duties, first of all, I mean, how do you separate? Yeah, yeah, yeah, we do. Yeah, the separation of duties, separating of networks, separating of infrastructure, separating of firewalls. I mean... We have these different accounts, right? Yeah. So you have to have an admin account, then you have to have your user account, blah, blah, blah, blah. Right. There's privileged access and unprivileged access. And that's tough for a small company. Yeah, yeah. That's a lot of extra work. Just think of you're a parent company and then you've got all these subs. And of which one of these subs is doing div work, right? Yep, something that's...  I think one of the other tactics is to make them let them have a client on your environment. Right. So that way you can put your controls down on them. If it's just one or two people that you're quite confident can't handle this material, that means you have to have a desk at your office, whatever it may be. It depends on what level of control your policies take. But you've got to look at those 110 items in there. You've got to look at this. You cannot share routers and switches. Oh, no. With none compliant. So if I'm a little sub company of this major company and I'm sharing all the router switches and firewalls, that's got to get spun off. Yeah, you need to stand up your own. You need to stand up your own. Your static connection. So Citibank had this problem. And how they handled it was, they virtualized the desktop on a central location. So you would log in via a VPN, and they would transmit the desktop to your personal computer. I like an instance. And you're locked in that virtual environment. You're in that environment. Period. You can't even use your home printer. So that's how they handle that. So when that vendor comes in, they might not be compliant. But when they work for you, they're actually seeing information in your environment. You're just transmitting the graphics to them. Yeah, and I like that virtual instance idea too. I mean, that's kind of going back to the old mainframe topology. I like the full circle way. Everything sort of runs out of cladding. We got away from mainframes, now we're going right back to mainframe.  And I started my career on it, and I'm going through my clients, okay, maybe you ought to buy a Z. That's a mainframe. Yeah, but a mainframe sells for $100,000 now, not like a million dollars like it did way back. And you can run Linux on it, which is part of the other dilemma. You could just run it in the cloud.  You can run it right out of the cloud. I'm finding it's better to run it in the cloud. There's no Fed, Rep, and Hoi. No, there's no provider. Not physically, no. But you're using Summit 7. So Summit 7 can move you into the GCC environment. But depending on your application, though, depending on your application, latency can be an issue. You must also mention that you can't just go to Microsoft or Summit 7 and say, hey, give me this. No. You got to walk in with a contract that says it's required for you. Yeah, you got to show them the cause. And then wait four months. They only took me a day. Thank you a day? A day, one day. One day. They don't know who emailed them. They told us, they told us, they're telling me it can be upwards of four months, but we're usually doing it within one. Yeah, it was one day for us. I can send you. Sounds like Scotty on the internet. I'll send you later. I'll send you later. It's got to take eight hours, and we'll do it in one. Yeah, let's see this. We'll get bombarded. Yeah, yeah. Yeah, I'll call her. So, could these, I've seen them, too. Minor all stood up. What's the first step? Four.  So, Norfolk. So obviously, I think the first step is an assessment, right?  Yes. And all this stuff is risk-based anyway. So, you need to have a strategy, right, as a company or what your information security system's going to do. My suggestion, support the U.S. cybersecurity strategy. What's wrong with that, right? That's a good strategy is to support them if they're their customer. So, you can download that U.S. cybersecurity strategy document. It just came out in, I think, October of last year. So, it's pretty fresh. And then align yourself with that. And most of this guidance that we're talking about is really laid out there for you. And I think if you step through that, I think you'll see, like, those 17 basics we talked about, those kind of align with the CSC top 20. So, there's, you know, if you're not in the DOD space and you want to understand how to get started, you can look at for this, what, the Center for Internet Security, CIS, top 20. And they have, of these controls, if you just look at them and start with number one, number two, number three, and work your way through them, you can get to a reasonable level of cyber hygiene, you know, and that's a start if you've done nothing. So, I recommend people do that. Now, if you're in the defense industrial base, of course, you're subject to all these regulations that we're talking about, and it's fine. What was that one in the California Foss Claims Act? Oh, gosh, I can't remember. It was, I think they were sued under the Foss Claims Act because they had... They self-attested. Self-attested, and they lied. Oh, fair enough. So, that's what I'd do to get started anyway. And there is out there, and it's free, is, you know, if you just took that 110 controls, there's actually a document out there that's free that you can get. You can download it. It's an Excel. You can self-evaluate and be honest with yourself.  Give it tables. It ought to report. So, as you're 37% compliant, you've got 25% in process, and the rest of these, you're not compliant. So, now you have to decide, okay, now what do I got to do with the ones that I'm not compliant? You make a poem. Plan of action, and milestone. Right, and so that documents are there, and you should be doing that now. Whether you've got federal contracts or whatever with all the stuff that's going on, you should be doing it now. All of this, this stuff we're talking about, it's basic hygiene. It's a start. We're getting the cue to close down the show. Awesome. 15 seconds.  I think I just said mine. Okay. All right, work on it. Get started. All right, everybody. Today, we had the tech czar and Andrew, the security guy. Also, Security Matters is Andrew's show. It's Tuesdays at 10 a.m., right? 10 10 a.m., and it's also on YouTube. We have full playlists of both this cyber underground and Security Matters. And if you want to see some great stuff, go back and watch Hibachi Talk, which is the show that we both spun off of. That was Gordo's show. That was Angus' show. And if anybody's watching us there, go see Hibachi Talk, and then come back on my show on YouTube and put a comment down. Tell me who Angus is. I want to know who Angus was. Awesome. Let me know. We'll be back in a couple of weeks, everybody. We're going to change the time to Thursdays at 12 noon in September, and we'll see you then until then.


Welcome to this edition of NASA Images. I'm Lynn Bondrant. During this show, we're focusing on historic NASA film showing electric rockets and more recent videotapes showing how we may someday explore Mars. First, let's go back to 1965 to see most of the film electric propulsion. Though made in the mid-1960s, much of the film is still current. A concept showing how electric rockets could be used to fly space travelers to Mars is included. Imagine for a moment that this is the period of the 1970s and 1980s, a period of amazing explorations in space. Imagine that the distant planet Jupiter is to be investigated scientifically by a spacecraft that will fly close by. At the correct place in its orbit, its conventional chemical engines are fired to accelerate it to the velocity needed to get to Jupiter. Imagine also that nine and a half months later, a craft with advanced engines is launched. It slowly accelerates until it escapes Earth's gravity one year after the conventional craft started. Of course, the first craft is well on its way. Since leaving Earth, it has been coasting and its velocity has continuously decreased. But constant thrust is applied to the second craft for six months, which continuously increases its velocity. Even though it escaped Earth a year later, it reaches Jupiter about eight months ahead of the conventional craft and carries three times the payload. What could make this possible? Electric propulsion as used in the hypothetical second spacecraft and it is now under active research and development. Since the advent of the space age, the roaring flaming spectacle of the chemically fueled rocket has become a common occurrence, carrying space vehicles into Earth orbit and deep space. The weight of such a payload is extremely small compared to the lift-off weight of the entire rocket because a chemical booster can put only two to three percent of its weight into orbit. This lifting ratio cannot be improved significantly. Yet today, the chemical rocket is the only means of launching a payload from Earth. Once a vehicle is in Earth orbit, a chemical engine can send only about one-third of its orbital weight to the moon or the near planets. Two-thirds is fuel and engines. The craft quickly burns the fuel of its final stage to accelerate the payload to a high velocity, which then coasts the rest of the way. This coasting flight takes considerable time to cover large distances, but many deep space missions can be performed better by applying small amounts of thrust during most or all of the trip. Over long distances, this continuous thrusting will accelerate spacecraft to very high velocities and shorten overall travel time. When perfected, electric propulsion will provide the continuous thrust needed to reduce travel time to distant points and will use fuel so effectively that a larger fraction of the Earth orbit weight will be delivered as useful payload. If the goals for electric propulsion are achieved, the entire solar system will be open to versatile exploration. The most difficult space mission of this decade will be the landing of men on the moon and getting them back safely. Man in space must be transported in the shortest possible time. Today, only an all-chemical propulsion system can do this job of moon exploration. But what lies beyond? To establish and maintain a scientific base on the moon will require the delivery of large amounts of supplies and equipment, a very expensive operation. To send large manned spacecraft and unmanned probes to Mars and beyond will require the propelling of very large payloads over great distances. Just to lift these heavier payloads into deep space with all chemical systems will require either building bigger and bigger launch vehicles or launching several vehicles into Earth orbit carrying engines and fuel and then assembling them to provide the propulsion needed. Both alternatives are extremely expensive. So a propulsion system is needed that will use fuel more economically. In a propulsion system, fuel economy can be increased by speeding up the exhaust gases. In chemical rockets, the exhaust velocity is limited by the temperatures obtainable from combustion. So methods other than combustion have to be used to speed up propellant gases. One way is to use the heat of a nuclear reactor to increase the exhaust velocity of a light gas such as hydrogen. This velocity is about two and one half times that of chemical engines. Therefore, nuclear rockets will use fuel two and a half times as effectively as chemical rockets. Another way to increase exhaust velocity is to use electrical energy instead of heat to accelerate the propellant gas up to 20 times or more than in chemical rockets. These high exhaust velocities in the electric engine increase the effectiveness of the fuel 20 times and more as well, resulting in much more work per pound of fuel. With this high fuel effectiveness and with the ability to apply continuous thrust, the electric engine is a promising candidate for true space propulsion. It cannot be used as a launch engine, but once in space, it can take over. After the high thrust chemical booster has given the space vehicle sufficient velocity to overcome the main effects of gravity, the electric engine is started. This small thrust applied intermittently or continuously for months or years will result in a very high velocity. The effect of a very small thrust applied over a long time is the same as a very large thrust applied for a very short time. Thrust multiplied by the time it is applied is called total impulse. A million pounds of thrust applied for 30 seconds will deliver 30 million pound seconds of total impulse. The same as a pound of thrust applied for 30 million seconds, which is roughly a year. Each flight in space requires a certain total impulse. The goal of deep space propulsion is to use the least amount of fuel for a given total impulse. In space propulsion, fuel economy of a rocket engine is discussed in terms of specific impulse, which is defined as the total impulse generated per pound of fuel used. The higher the specific impulse, the longer in seconds one pound of fuel will deliver one pound of thrust. For convenience, specific impulse is expressed in seconds. Chemical rockets are limited to specific impulses of about 450 seconds, and relatively little improvement can be expected. Solid fuel nuclear rockets are expected to deliver up to about 1,000 seconds of specific impulse. Electric engines, however, are now operating at specific impulses from around 800 to 10,000 seconds and higher in laboratory vacuum chambers. The higher the specific impulse, the higher the fuel economy. But unfortunately, as specific impulse increases for the same thrust, the electric power needs increase, and power plant weight goes up even more. So an optimum value must be found for each mission. But even with this compromise, for many manned and unmanned interplanetary missions, the electric engine appears to be the propulsion system to deliver significant payloads within a reasonable time. For missions to Pluto, for example, the electric engine is the only device that can deliver any payload at all. The power source for electric engines will be either a nuclear reactor or solar cells or heat concentrators, depending upon how much power is needed. Waste heat is rejected to space by a radiator. Heat from the power source drives an electrical generator. The electrical power is conditioned and controlled to provide the necessary voltages and currents. The typical propulsion system also includes propellant storage and feed devices, which lead to the engine itself. Three types of electric engines are under development. They differ primarily in the way the propellant is accelerated. The electrothermal engine uses an electric arc or resistance element to heat a propellant gas to a very high temperature, which produces a high exhaust velocity. Specific impulses from 800 to in excess of 2,500 seconds are possible with these engines. The electrothermal engines have demonstrated good performance in vacuum chamber tests. However, laboratory work must continue in order to improve performance. In electromagnetic engines, a fast-moving ionized gas is generated and used as the propellant. This gas is a plasma of ions and electrons. Electric and magnetic fields then speed up the charged particles to much higher exhaust velocities. A specific impulse range of 800 to in excess of 10,000 seconds appears to be possible. These electromagnetic devices are the least developed at this time. However, there are many promising designs under laboratory investigation. In the third type, the electrostatic or ion engine, cesium or mercury fuel is ionized and the resulting electrons removed. The ions being positively charged are accelerated to very high velocities by a high negative voltage electrode. These engines will operate at specific impulses from 3,500 to 10,000 seconds or more. Electrostatic ion engines are the most advanced electric type, but much work remains to develop larger, more efficient and reliable engine systems. Electric engines has been underway only since 1959. Great progress has been made in government and contractor laboratories. Thrust levels approaching a pound have already been obtained. Yet enormous strides must still be taken before larger, reliable engines are available. Goals for electric systems include achieving power supply weights of less than 40 and an ultimate goal of 20 pounds per kilowatt with lifetimes of more than 10,000 dollars. Development of the engines themselves strives for smaller weight and size per unit thrust and higher overall effectiveness. Eventually, the entire engine system must operate continuously for up to four years. By grouping engines together as building blocks, power levels up to 40 megawatts and total thrusts of over 450 pounds may be obtained. In addition to this laboratory work, electric engines must be flight tested. Space conditions cannot be totally simulated even in these advanced vacuum chambers. And there may be influential environmental factors in space unknown at this time. Small electric engines already being developed may perform early missions. The first application may be to control a synchronous communication satellite. These engines can deliver small, accurate bits of thrust for months or years using only small amounts of fuel. Solar cells will furnish the power. Another solar-powered application could be the raising of an advanced communication satellite from a low Earth orbit to its final 22,300 mile orbit. Solar-powered electric engines may also be used to slowly spiral out a scientific satellite to make a detailed study of the Van Allen Belt. Flight tests and early missions will provide data that will help perfect the larger electric engines needed for more ambitious projects. Large electric propulsion systems, when perfected, may take large amounts of supplies and equipment to the moon and do it much cheaper than all chemical systems. Chemically-propelled boosters will place the freight into Earth orbit. The spacecraft may incorporate a small chemical engine. An electrically-propelled lunar freighter will rendezvous with the craft, take it to the vicinity of the moon, and place it in a lunar orbit. The chemical stage will lower the freight-loaded craft to the lunar surface, while the electrically-driven freighter returns to Earth orbit for another load. It will continue to shuttle back and forth with periodic fuel replacement as long as its power supply lasts. Of course, the electric freighter will take longer to get to the moon, but for most freight, the longer travel time is not an important consideration. For the same amount of freight, this system will need far fewer expensive Earth-launched boosters than an all-chemical system would require. On small vehicle missions to the near planets, Mars and Venus, electric engines can deliver much more payload by taking a slightly longer time. A three-stage chemical rocket now being studied could get a 2,500-pound payload into an orbit around Mars in about 210 days. An electrically-propelled spacecraft substituted for the third stage could do as well in the same time, but by using a higher specific impulse engine and taking only 40 more days, it can deliver twice the payload. To those planets beyond Mars and Venus, electric propulsion gives both a payload and time advantage. It appears to be the most promising means of sending scientific probes from Earth orbit into the asteroid belt beyond Mars to Jupiter and farther. The greater the distance, the greater the advantages of electric propulsion. Looking toward the day when large power supplies from 20 to 40 megawatts and large engines of proven reliability are available, scientists have developed a concept for a manned Mars expedition with electrically-propelled vehicles. The concept suggests the expedition will consist of five space ships which will be assembled in a low Earth orbit before departure. The completed ships will each weigh 360 tons and will carry a payload of 40 tons. At one end of the vehicle, there will be a 40 megawatt nuclear power supply. Next will be power converter equipment. There also will be radiators to give off waste heat and cesium fuel tanks. At the other end will be a three-man crew compartment. There will be a total of 15 men to perform all the mission objectives. Three of the ships will carry piggyback Mars landing vehicles, while the other two will carry extra fuel for the return to Earth. Five vehicles will be used for safety purposes. If one or more fail, the men would be transferred to the other ships to continue the flight or return to Earth. After checkout and placing the flight crew aboard, the electric engines would spiral them continuously for 56 days until they escape the Earth's gravity. Then they would enter a transfer orbit around the Sun, traveling toward Mars. The ships would take 148 days to make the trip to the vicinity of the planet. Once near Mars, they would spiral into a low orbit. This would take an additional 21 days. Once in this orbit, one of the piggyback chemical vehicles would go down to the surface without men to land equipment. Then one manned craft would land to explore the surface. After 29 days, the party would board the landing craft and rejoin the ships. Then the landing craft would be abandoned and the fuel equalized between ships for the return trip. They would reverse their original flight path and head back to a low Earth orbit. This would take another 318 days, making a total of 572 days for the round trip. By applying thrust continuously over vast distances, travel time will be greatly reduced. Be used so effectively that a much bigger weight fraction of the space vehicle will be devoted to useful payload. Reduce travel time to the distant planets. Larger, useful payloads. These are the goals of electric propulsion, which will allow numerous missions to be carried out that would otherwise be impractical or impossible. Our next film is more recent from 1987. It's also about exploring Mars. Mars, commonly referred to as the Red Planet, is one of our closest neighbors beyond the moon. It has qualities that make it a potentially habitable outpost. Before all Martian exploration ended in November 1982, a handful of probes had made the year-long journey. Viking 1's orbiter completed nearly 1,500 picture-taking trips around the planet, while its lander studied samples and returned views from the surface. As a result, Mars is well mapped, but many questions remain. So researchers are designing systems to explore the varied Martian geography in anticipation of a return mission. On calm sunny mornings, Jim Burke can often be found flying this lightweight solar balloon in the courtyard at NASA's Jet Propulsion Laboratory in Pasadena, California. Mr. Burke views his study as an important stepping stone to a larger goal in gathering more precise information about the Red Planet.  Scientists, students, and engineers from JPL and the California Institute of Technology have taken the concept a step further by testing the feasibility of this 30-foot diameter solar balloon that might be used to study Mars. In theory, the device could be blown around by local Martian winds during the day to collect data and take pictures. At night, it would cool down, lose buoyancy, and lower itself to the ground to survey the planet's surface. The small, clear balloon holds the larger one off the ground at night so it won't get damaged. There are many regions of Mars that could be explored this way, according to Jim Burke. One very interesting possibility is to put the balloon in the atmosphere, get it inflated, operating up in the polar regions, and let the circumpolar winds drift it down across the polar cap over the layered terrain, which is in the canyons that spiral out from the polar cap, then across the immense dune fields that surround the polar caps and on downward into temperate latitudes on Mars. To remotely explore the surface of Mars, a number of devices have been investigated. They include early roving vehicle prototypes designed to crawl or wheel their way across alien terrain. Rovers continue to be designed today, based on some of these models. University of Arizona's Lunar and Planetary Labs graduate students and faculty have recently built this gigantic two-wheeled prototype, Mars Roller. Another vehicle being developed is this robotic six-wheeled version, which is JPL's latest test bed for understanding the control and vision systems needed for a Mars mission. According to Brian Wilcox of the Robotics and Tele-Operators Research Group at JPL, sending commands to a rover on Mars would be difficult because of the 10-40-minute round-trip delay. You can't just sit there and steer in your armchair from a TV monitor and make the vehicle do useful things because of this long speed of light delay. So we've identified several techniques to maneuver a vehicle on Mars in such a way that you can go useful distances in a day in spite of the fact that the humans are this long speed of light delay removed from the action. A rugged vehicle has two TV cameras for eyes and is capable of climbing objects a third taller than its wheel height. The proposed mission vehicle would have robotic arms to make measurements and collect rock and soil samples. Using rover's onboard vision system, scientists can freeze three-dimensional images from its pair of television cameras. They can then designate the pathway to follow, continually updating commands from Earth so that the rover is able to avoid obstacles and hazards. As more sophisticated visual systems are developed, greater artificial intelligence can help the rover find its own way if given high-resolution imagery of the Martian surface and a list of targeted regions designated by Earthbound scientists. The hope is to someday send a manned mission to Mars, but a more detailed study of the planet is necessary first, and these pioneering steps can be made by roving vehicles and balloons. Again, Brian Wilcox. If you imagine an expedition at Lewis and Clark trying to survey the Louisiana Purchase, they basically made one track across a very small fraction of the land surface of the Earth. It took them years to do it, and yet they found incredible things all along the way. We could certainly have a dozen rover missions which yielded equally interesting results. The exploration of Mars, sending unmanned vehicles as pathfinders for the future. That's all we have for this edition of NASA Images. But before we go, let me remind you that you're cordially invited to see the displays here at the Visitor Center at the NASA Lewis Research Center. We're located near Hopkins International Airport in Cleveland. Until next time, this is Lynn Bonderant saying goodbye.


When you desire one thing over another, or you want to become one type of person but not the other, you may think that's your personal preference. One psychological explanation of human behavior argues that we often have no idea what we want and hence just imitate others. Welcome to Mimetic Theory. Mimetic theory is the idea that there are really only two sides to human desire. Metaphysical desires are our cravings for utility, the intrinsic value of objects. Metaphysical desires are our longing for identity, what objects can say about us. If you are hungry, you may want to eat anything to satisfy a physical need, or you might wish to eat out, in which case you may pick a place that reinforces your self-conception, your identity, and the person you wish to become. In other words, you want to please your metaphysical desire. René Girard, the French philosopher who established the theory, argued that most of our desires are metaphysical and called them mimetic because we mimic them from the people around us. We imitate others because we long for their recognition, hoping that we will eventually become a heightened being that will be remembered, ideally forever. However, since this ideal is so abstract and so hard to achieve, we take shortcuts and make associations with objects and models whom we think have already achieved this status. And so our deepest desires and moral principles are fundamentally anchored by models and the objects, values, and culture associated with them. In school, we want to wear what the cool kids are wearing, and by the same logic, we never ever want to look like the social outcasts. This common longing for and against certain models raises a fundamental question, do we in fact have any autonomy? If we simply want what others want, our decisions are not truly ours, and we are far from being independent in our behavior. Individualism is a formidable lie Girard wrote, and this leads to a problem. The relationship between a subject and an object unfolds through a model, also called a mediator, who desires the same things. Eventually, this can lead to rivalry between subjects and mediators, especially if they start imitating each other. And as both don't like the thought that they cannot have what they want, they look for a victim who they can make responsible. As a result, they unify their imitative desires around the destruction of an agreed upon scapegoat, to the point where that person is singled out, expelled or killed. After the social order is restored and people are happy to have solved their problems, the cycle begins again. What do you think? Was Girard right, and are we all trapped in societies that tell us who we should want to become? Or do we have our own independent desires that go beyond our need for food and shelter? Share your thoughts in the comments below.


Hi everyone, Joe for JasperJasperysCaseRakes.com coming at you with the other half of that hip-raid basketball platinum case We popped open last night. This is randam t number two at the end of the break two great giveaways happening here two lists One dice roll two lists first list will be name on top gets a wax party spot after the randomizer And then the second list you'll get three of those 2003 2004 tops chrome basketball random packed break spots, too Get a guaranteed guaranteed pack in that break. That should be a fun one But first this very nice break here. So there's everybody got into the action We only had to do one filler that Donner is packed to don to Congrats again to the winners. Thanks to the people who bought their spots straight up All 30 teams are in let's roll it. Let's randomize it six into five eleven times her names and teams one two three four five six seven eight nine Ten and eleven the final time Dusty down to Michael and then once again six and a five eleven times for the teams one two three and eleven the final time After eleven we got the jazz down to the Rockets I will give this a trade window but trade at your own risk some nice stuff in here Crosses a bunch of different years Some great stuff who knows what's in here dusty with the jazz Adam with the T wolves Matthew with the spurs Barry with the wizards dusty with the Warriors Brian with the heat dusty with the Kings Jimmy with the Gris Brian with the trail blazers John with the Hawks dusty with the Lakers and pelicans Raymond with the Clippers and Pacers Jimmy with the Mavs Jimmy K With the net the Nets that is John with the Bulls Jason with the Hornets David with the Raptors and Nuggets Dusty with the Thunder Michael with the Suns dusty with the Cavs Jason with the Celtics Dusty with the Bucks canard with the Knicks Craig with the Pistons John with the Sixers Brian with the Magic and Michael with the Houston Rockets It's sort of alphabetically by team and we will pause the video when we come back We're gonna see if there's any trades then we'll have the break stick around BRB. All right. Welcome back folks So no deals were done and this five box break So let's see what we got in here hit parade basketball platinum edition five box half case random team to Think we can get through one more day without changing the toner. Let's find out. Let's see what happens I'm right marked all these two so we know they're from the same case. Could be some really nice Nice hits in here. All right. So the first one out of the gate is gonna be a bull. That's Patrick Williams Youth explosions autograph Patrick Williams I think he's been a little banged up recently. No Like he had a decent run going But maybe he's back Bulls blog saying Patrick Williams looking to just figure things out so But I think he uh He just recently came back from an injury. So I think that's been kind of bothering him a little bit, but anyway, it's got a good ceiling there that goes to John and the bulls Next box. This is box one out of 100 Obi-Wan, what's going on? I'm doing well How are you doing? Got a graded card boys and girls. What do we got here?  That's from 1920 impeccable 94 out of 99 cam reddish and the autograph at the ATL John with the Hawks next box next up is 16 out of 25 ascension autograph Joel MB your MVP Scoring champion, maybe Is he playing today? Not too many games left in basketball for the playoff playing games and then the playoffs. I think Philadelphia is in Toronto and Joel and bead has 16 points in 19 minutes. There you go. Sixers John With the first three hits All right, will this be a clean sweep for him got a graded card here PSA 10 and It's cam Johnson Cameron Johnson Rookie jersey and autograph for the Phoenix Suns Gemmin 10 33 out of 50 from obsidian basketball Nice Phoenix Suns Michael oce Michael L with that one by So there you go Michael He has a good if he has a good good run in the playoffs that could definitely help his value All right, and the fifth and final box good luck It's gonna be Nice Lonzo ball Four out of 25 from NT basketball Still Lakers colors right there, but on card autograph four out of 25 Colossal material autos where's zoe going to gonna go to dusty and the pelicans There you go dusty. There you go everybody All right now in addition to these nice hits. Let's give some stuff away So we're gonna go back to a new dice. The first thing we're gonna do is the wax party So We're gonna use nine for both lists five and a four nine times. So let's grab everybody's names Once again, this is for the wax party Five and a four nine times name on top only one winner one two three four five six seven eight and Once more right ninth and final time name on top after nine good luck drum roll drum roll drum roll At two-spot Matthew that two spots rough just on the outside But I appreciate you giving this a shot happy times though for Brian Frank you are in the wax party So you've got a chance to win some nice stuff We've been keeping track of this on the break schedule And that was for twenty one twenty two hit parade MBA Platinum random team number two here on a Thursday. Is that Brian's first entry? No, he got one over here So Brian has it has a couple entries here There you go. I think that's Brian's third entry congrats Brian and good luck whenever we get get to that promo All right now the next list is also very good We're giving way three of those two thousand three two thousand four tops chrome basketball that right there Searching for that that'd be pretty nice And you can still get some wax party spots there as well So we're giving three spots into that random pack break that chrome basketball pack break Let's grab everybody's names once again for the second list second blank list So use the same dice roll five and a four top three after nine Good luck one two three four five six seven eight and Ninth and final time top three after nine So from four on down it's sad times Very close Barry. Thanks for giving it a go Thanks everybody for taking a shot Top three though, you can get you're gonna get a random pack out of that. Oh three oh four tops chrome basketball break That's gonna be Jimmy K Dusty and dusty two of the three spots for dusty After nine there you go. Congrats to both of you. I'm Joe. I'll see you maybe later tonight for that break. Jasper's case breaks calm


Friends, I am Mr. P. P. Mitra Guthri, Associate Professor in Mechanical Engineering Department at Valchand Institute of Technology, Solaapur. In earlier session, we have studied velocity triangle and velocities in metal cutting. So you already know there are three velocities in metal cutting. That is chip velocity that is flowing along the tool chip interface, shear velocity flowing along shear plane and cutting velocity in the direction of tool travel. So we have to calculate, we have to solve numerical on these velocities and outcome of this session is you will be able to solve problems for establishing relationship between cutting velocity, shear velocity, chip velocity. So the problem statement I will read which is visible on the screen that is during orthogonal turning with single point carbide tool having rake angle of 10 degrees, a feed rate of 0.2 mm per revolution at cutting velocity of 100 meters per minute. Chip thickness after cut was measured to be 0.42 mm. We have to calculate chip thickness ratio r, we have to calculate shear angle phi, then we have to calculate chip velocity vc and shear velocity vs and we have to calculate it in terms of shear cutting velocity, shear angle and rake angle both velocities. So first step to solve this problem will be to understand given data. So given data uncut chip thickness, chip thickness after cut cutting velocity v and rake angle alpha 10 degrees from this data. Chip thickness ratio is denoted by later r which is ratio of uncut chip thickness divided by chip thickness after cut. All of you know this uncut chip thickness is t, chip thickness after cut is tc from given data t is 0.2 that is feed rate and tc is 0.42. So this ratio comes out to be 0.48, it is a simple calculation. Now once we know r, we can very easily determine shear angle phi by the formula phi is equal to tan inverse of r cos alpha divided by 1 minus r sin alpha where alpha is rake angle of the tool and r is chip thickness ratio. We know value of r, we know value of alpha that is 10 degrees, r is 0.8, 0.48 alpha is 10 degrees. Taking these values in this formula, we can write the formula as shear angle phi is equal to tan inverse of 0.48 into cos of 10 degrees divided by 1 minus 0.48 into sin of 10 degrees. We can calculate this angle as 27.8 degrees. By solving this equation, we come to the conclusion that our shear angle phi is 27.8 degrees. After knowing the shear angle, we have to use the formulas to calculate cutting velocity and shear velocity. The formula for calculation of chip velocity is Vc is equal to V cos phi divided by cos of phi minus alpha. We know value of V is equal to 100 meters per minute, value of phi is 27.8 degrees and alpha is 10 degrees. So Vc is equal to 100 into cos of 27.8 degrees divided by cos of 27.8 minus 10. So 100 into cos of 27.8 divided by cos of 17.8 which comes out to be 48 meters per minute. This chip velocity can be calculated by another formula because we know Vc upon V is equal to Tc upon T. So from this, we can say that Vc is equal to R into V. This means Vc is equal to 0.48 into 100 which is tallied that is 48 meters per minute. Now we have to calculate shear velocity in terms of cutting velocity and shear angle and rake angle. For that, we have to use the formula shear velocity Vs is equal to V cos alpha divided by cos of phi minus alpha where V is cutting velocity which is given as 100 meters per minute, alpha is rake angle which is 10 degrees, phi is shear angle which is calculated here as 27.8 degrees. Now shear velocity Vs is equal to 100 into cos of 10 degrees divided by cos of 27.8 minus 10 means Vs is equal to 100 into cos of 10 divided by cos of 17.8 by calculating it with calculator value of Vs comes out to be 103.8 meters per minute. From this, we can establish relationship between cutting velocity, shear velocity, chip velocity in terms of rake angle and shear angle and from this, one point can be noted that is chip velocity is always lesser than cutting velocity, shear velocity can be lesser or can be greater than cutting velocity and cutting velocity is nothing but cutting speed which is dependent upon various factors such as type of material to be cut, type of operation to be performed, machine condition whether coolant is employed or not and all other factors. From this, we will conclude that all velocities are interrelated and for further reading I will recommend held machine tool engineering and textbook of production engineering by PC Sharma and hope you will be able to solve numericals on velocity triangle very easily. Thanking you.