Any questions about internet security? We want to be able to secure our data sent across a public network across the internet. We've got different ways to do it. We've gone through several times the different layers application, transport layer security, network level. With regard to network level security, and we're using the example of using IPsec. So that's one protocol that allows us to take our IP packets and encrypt them before we send them across the internet. Everything sent across the internet in our perspective we're using the internet protocol, IP version 4. But IPsec adds this extra feature to allow us to encrypt those packets. As a result, someone who intercepts those packets cannot see the original content. So that's our aim, to keep the data confidential. But we saw there are different variations of IPsec. In this case, in this example, if someone in the internet, so between router X and router Y, so even though it's shown as just a single link here, it's in fact, there may be multiple different networks, if someone malicious there intercepts the packets, so on one of the devices or one of the links in between these two they intercept, what do they see? Do they see the data sent between A and B? Then what do they see if they don't see the data? Header and ciphertext. So because it's encrypted, the data which HostA generated, it was encrypted by IPsec here. So we can think that data is the plain text when we return to encryption and therefore the ciphertext, the encrypted data, is included in the packet. And we still have an IP header included in this packet. We cannot encrypt the IP header because to send data across the internet, the internet protocol relies on reading especially the destination IP address in the IP header. So when HostA sends an IP packet and eventually arrives at router X, why did it arrive at router X? Because the destination IP address in that header says B and using the routing tables it knows to send to X. And then X has this IP packet. You can think it has the header which has source IP, A destination IP, B and other fields and it has the data. And the data is encrypted here, the ciphertext. And X uses the destination to be B and realizes, OK, I need to send it to another router and it goes across the internet until it arrives eventually at B. So be aware that if you think of the IP packet, the data is encrypted but the header is not because we need the header to be in the clear so the routers can forward the packet across the network. If we encrypted the header, then the routers would not be able to send it on because they wouldn't know who to send it to. The routers use the header to know who to send to. So if someone intercepts in the internet, they see the ciphertext, they don't see the data, but they do see the header. We had another case using IPsec, another variation where we used it from the host to a router and then this last portion of the path, this last segment, we don't use any encryption. The benefit being that host B doesn't need to know about the encryption, host B doesn't need to support IPsec, the router does it on its behalf making the setting up of this host simpler. This router can use IPsec for many hosts inside the internal LAN. And then a last one, we use IPsec between two routers. So different options, router to router, router to host, host to host. And we can have combinations of different levels. We've used IPsec as an example, I think one slide here. There are other protocols that do similar functionality and the two that you'll often come across are called PPTP and L2TP. Point to point tunneling protocol and layer two tunneling protocol. But they are used in a similar manner to IPsec, so there's not just one. And these are used to create a VPN, a virtual private network. Anyone have a mobile phone? Open it up and see if you can find the VPN features. If you have a mobile phone, see if you can find something about network settings and see if you can find anything referring to VPN. And tell me what it says. I don't know where it is, it's usually under network settings, maybe advanced settings. It should be something about VPN. VPN, okay, and when you select VPN what does it say? Some warning, okay, keep going. See if you can set up a VPN. So on the iPhone, just go back. On VPN settings in the iPhone, you can add a VPN configuration and you see three different types of VPNs. L2TP, PPTP, and IPsec. So on the iPhone it will be different than Android. And on Android then again you can select different types of VPNs. So it depends upon the operating system. So on Android you see PPTP, L2TP, and IPsec, different variations of IPsec. So what you can do with your mobile phone is set it up like this scenario. Where your mobile phone is host A, I think that's the VPN client. And let's say there's some router on the internet, say the SIT router which runs a VPN server. And if it's configured correctly what you do on your mobile phone is you set it up so that you enter into the, I think you'd enter in the address and some maybe username and password for the VPN server. SIT has a VPN server. And what would happen then is when you use your mobile phone to access the internet, those applications that use the VPN would send their data using IPsec or one of those other protocols encrypted to the VPN server. And then on from there to wherever the destination is. So you can set it up on hosts, a mobile phone as an example. And that's a difference between, one of the differences between network level security and let's say transport level security. To use the network level security, the VPN, you need to set it up on the host. And in fact there needs to be a server running to allow you to use it. So you need to do something. When you use, let's just go back, when you use HTTPS which is specifically HTTP over TLS or SSL, do you need to set anything up? No, you just open your browser and you type in HTTPS and then some domain. And then it does the encryption for you. So with HTTPS or transport layer security in general, the user in practice doesn't have to do anything which is much more convenient from the user's perspective. So with transport level security, the security is built into the operating system and it's performed automatically if you use HTTPS in this case. So the user doesn't need to configure anything. Whereas with network level security, the user usually needs to configure something on their host and in fact usually there's a server set up to support the other endpoint. So that's why in fact network level security is not as common as transport level security. That's one of the reasons. So if you use network level security, you need to set up usually the endpoints. The user needs to do it, which takes some effort and not everyone can do that. Someone's in the internet and intercepts. Are you referring to this one? Yeah, yeah. Can that see the packet routine analysis? Okay, we'll get to that in a moment but let's see, what can someone in between host A and host B see? What can they see? Well, they can see, as we said, we can see the ciphertext, it's encrypted, and we can see the IP header. And that's it with the data transfer. We'll see what that gives us but that's all they can see. The packet is encrypted. So with the data transfer, all they see is, they see the packet, they don't see the contents of the data, they do see the header. How about the packet? If they see the packet, I think you're getting a, can they do some analysis? Yes, they can see the time when the packet got here, because they know when it arrived if they capture. So they can do some analysis about when the packet was sent and received, how big the packet is. But many encryption schemes use fixed size packets anyway. So maybe you cannot determine anything about what's happening. So the main point here is that they cannot see the data, but they can still see that there are packets being sent. Let's continue on that point. Let's look at, with the tunneling mode of IPsec, what happens is that there's the original IP packet and it's put inside another IP packet. So the original one going from A to B and the data, so this is the IP header, this is the data, is actually put inside another IP packet which is being sent from A to Y in this example. And the internal packet is encrypted. If you intercept on the Internet in this case, what do you see? If you intercept, someone's on the Internet and they can intercept the packet being sent in this example, what do they see? This gives the hint. This is what they see. This is the packet. This red part is encrypted. So from the attacker's perspective, they don't see anything here but random bits. They cannot determine anything about the contents. But they still see this header. What do they learn when they capture this and intercept? What does an attacker learn if they can intercept here on the Internet? Anything? We know they can't see the contents of the message. What do they learn? The time. There were thousands of packets so they can see things about when the packet was sent because if they can capture, I receive it at 11.55pm then we know something about when the packet was sent. The size of the packet, although often there's some compression done there. What else do they learn? Where it's from, who it's to. Again, the IP header is not encrypted. An IP header includes many fields but two important ones are the source IP address and the destination IP address. So in this example, when you intercept on the Internet, what do you learn specifically? The time, size, number of packets and source and destination which are in this case A and Y. Some of the intercepts on the Internet see that this packet was sent from computer A going to computer Y. So now we're starting to move into the area of not so much about can the attacker see the contents of the message but could they do some further analysis and learn something useful to the attacker? Some traffic analysis to work out who is communicating? How often they're communicating? What types of patterns of communications with respect to time? At what time of the day are they communicating? So even if we encrypt the data, the attacker can still see the outer header and at least can learn who sent and who received but look at the differences. In this case, if we intercept on the Internet, we'd see that the source is A, the destination is B. We'd learn that A and B are communicating. In this case, the attacker if they intercept in the Internet would learn that A and Y are communicating. So they don't really know that A is originally sending the data to B. They just know they're sending to this router Y. So whether it's host B, C, D, E or other hosts that it was destined to, the attacker only knows it was going to router Y. So we've hidden some detail from the attacker in that case. We hide the fact of the specific destination. And in this case, if the attacker intercepts in the Internet, who do they know or who do they think are communicating? X and Y, if we intercept this packet, we see the source address is X, the destination is Y, so the attacker, all they learn is that this data is for communications between X and Y. So they cannot learn the specific hosts which are communicating. Let's say this represents SIT, our campus. This is the Runxit campus. Then the attacker knows that someone on either of the campuses or both of the campuses are communicating, but they don't know specifically who. When I say who, they can't identify the specific source IP address and destination IP address. They can only identify the routers which are communicating. So we're moving into the issue of privacy. What can someone determine based upon intercepting packets in the network, even when we use encryption? And in IPsec and similar, in this case, someone can determine the routers which are communicating. So let's look at that a little bit more and look at how people can track what others are doing in terms of communications and how some of those things can be hidden. Let's come back to... Yeah, question? Host to router, this one. Of course, we have another router. Okay, another router here, yeah? So we could use another form of encryption if we had here. In this case, we're looking at, let's say this is the public internet, where someone intercepts. So it depends on where they intercept as to what they can do. So if there was another IPsec from this router Y to some router Z, well, if the attacker was on this portion of the network, they would intercept between X and Y, but if they were on this portion, they'd intercept between Y and Z. So they'd learn the source and destination based upon where they intercept at. The same can be applied across multiple segments. Can them... yeah, how? Okay, so what can the malicious user do? In this case, we're assuming, let's for now assume the malicious user is in the public internet. For example, this portion of the network may be internal to an organization. So the malicious user can't get physical access to intercept here. That may be common. And therefore, let's say they can only intercept on the internet portion in our diagrams. So in that case, they cannot see any data sent across here. That's encrypted. All they can see is the source and destination address of those packets. And in this specific case, A and Y. How do they outsmart or how do they defeat that? Any ideas? What else could they do? Let's look. And let's now address the issue, well, what could a malicious user learn about people communicating? Even if they cannot see the contents of the data, can they determine who is communicating? So this is the issue of privacy. Not necessarily privacy of the data, but privacy of what you're doing, trying to prevent others from determining who's communicating. So in the internet, every point, we use the IPsec to connect each other. So if the malicious user attacks our internet, they only know that only some loaded, only a shorted part, only a host to host. Yes, if we extended this and used encryption across between one router and another router, and then different encryption across another, then yes, we can start to hide some of the original source and destination a little bit better. And we'll see a way that that's done, but note that there's a big problem with setting that up, in that every router needs to be set up at each endpoint to use IPsec. The benefit of, or the problem of setting up security is that we need to do something on these computers before this works. If we need to do it on every computer in the internet, it's just not practical. But if we can set IPsec up on one router, inside SIT, and maybe require the users to secure connections to set it up on their phones, maybe that's practical. So we'll see, hopefully get to a case where we can start to hide the communications. Let's look at what the interceptor can learn. So let's focus on privacy. When, let's say host A is a web browser, host B is some web server, if there was no encryption here, does the web server know who contacted it? Does the web server, what does the web server know about who requested the web page? And how does they know anything? So I'll just go back to one of our first pitches, just ignore encryption. This scenario, host A is you on your browser. Host B is some website you're visiting. And let's look at privacy and think, okay, what does the web server know about you? What do they know? IP address, okay? Because we're sending an IP datagram, it's sent across here, remember the IP datagram, the header contains the source IP and the destination IP. So that's received by the web server. So for sure, the web server knows who sent the datagram. It knows your IP address. What else? Does it know your name? Well, not necessarily, maybe. It knows your IP address for sure. We cannot avoid that. Port numbers, okay, not very useful because the source port just identifies some application. If it knows your IP address, what can it learn about you? What can the server learn about you? Do they know, can they find your name? Country? Yeah, if we look at IP addresses, the way that IP addresses are given out, that is, how did your host get an IP address? They're actually distributed by internet service providers. Let's say this is your home computer. The IP address that your home computer or more precisely, your home router gets is an IP address in the range managed by your ISP and that range the ISP has is publicly known because there's a register that maps ISPs to the address ranges that they have. And in most ISPs, we can then work out which city they're in and which country they're in. So IP addresses, it's usually not too hard to map an IP address back to a rough location, a city, a region, a country at least. So, host B, the server knows the IP address of the source. They know where they come from roughly anything else. So they can learn that about you. So if you want to keep that private using just the normal internet communications is not possible. That is, a server can learn about your IP and from your IP learn your location, your ISP even, which company you're going via. Can this web server learn your name? How? How does it learn your name? Like your real identity, not your IP address as the identity. Well, two basic ways. If you log in, if this is Facebook, of course if you log in, they now know who you are. Okay? That is, if you log in as some user then that web server could associate this login with this IP address. And maybe the future time someone contacts that server from that IP they could assume it's the same person. Okay? So if there's some past behavior that has given out the name then maybe the web server can determine that. But how else is that done? What's the technology we use for logins? You eat them? Cookies? Okay? Maybe when we log in, for example, there's a cookie stored on your browser and that may be stored permanently on your browser. The next time you visit that website your browser sends the cookie to that website. Even if you don't log in it may send the cookie. So the cookies are used for the website to get more precise tracking of who you are and what activities you're doing. If you've logged in once and you return to the same website even without logging in the cookie is still sent to that website and the web server can identify who you are or map it back to the previous communication. So the cookies are used by the servers to track more precisely who is contacting this server not just based on IP address based upon user names in some cases and other things. Now the server can learn how often you contact it because every time you send the cookie it knows that it can keep a log of how you've contacted it and even if you change your IP address here at the host but your browser sends the same cookie and now keep track that it's you again. So even if you have a different IP address the cookie allows the server to keep track of who's contacting. So IP addresses can be used to track who is communicating with the server and IP addresses can tell us roughly the location of the client in terms of web browsing cookies can be used to track who is accessing a web server and they usually give more precise information because sometimes IP addresses change whereas cookies remain the same. How do you not get tracked? Well, yeah, but if you use some private mode in your web browser what does that do? Okay, don't use cookies there'll be one way that your web browser not to use cookies but I think you find many websites rely on cookies to provide that feature of personalizing the website. So if you don't use cookies you never send them you can still access the website and it'll be harder for them to track you but you may not get the features of the website that it normally offers. So there's a trade-off there of the convenience and the privacy. Do you use cookies? Is there anything else? Does encryption help? Not really. So you're just encrypting with HTTPS again with HTTPS the IP address is still included the cookies are still included so you gain nothing in terms of privacy in that case. That is privacy from the perspective of the server identifying who you are. If you use encryption to track your communications but the server still can. What other issues? I think you've all seen similar websites which tell you your IP address. If I open my browser and access some website there are websites that will tell you the IP address of the client. That is I'm accessing from my browser to some server, the server tells me what is my IP address to some website that will look that up and it tells me my IP address is <IP_ADDRESS> the ISP is Tamasat and it tells me my location on a nice map so approximately it tells me accurately to the city level. So this is what the server knows about my client about me. Similar, if someone intercepted the packets on the internet being sent between my browser and the server they could determine this because it's just based upon IP address. So if someone here intercepted the packet I was sending that server they would see my IP address and they would know my location and similar for the server they'd see their IP address and be able to identify their location. If they could get cookies and other information they could maybe even get does this IP address identify my laptop? Anyone else have a phone or a laptop you want to visit this website? What do you get? What is myipadress.com Let's see what people get. What do you get? Same or different? It's the same. Your IP is the same as mine. What do you get? The same. Well that's not right, you know that computers have different IP addresses but in practice things are a bit more complicated. Inside most organizations we use what's called NAT Network Address Translation and what happens, you think this is the IP address for SIT My computer has one IP address 10.10.6.something Your computer has a different internal IP address but when we all access the internet we all send packets to the SIT gateway which performs this feature of changing our internal IP address to this public IP address 203 address and then the SIT gateway sends the packet to the real website So when the real website what is myipadress.com receives the packet the source is this 203 address from everyone here and when they send back a response the SIT gateway this network address translation does this thing of converting back to the original IP address so my computer receives it so you may have studied NAT in another course but it's common in organizations to have say one or several public IP addresses like this one everyone internally from the outside world connected by this one public IP address that's why you see everyone with the same address if you're inside SIT so maybe we've improved privacy a little bit here the web server or someone who intercepts this packet will find this IP address they'll recognize this is someone at SIT but they can't identify somebody or someone else inside SIT they cannot find that out so we've hidden to some extent the internal user and on the public internet people can identify just the network or the organization is communicating to the server questions? correct the information that's known by the server is just the IP address but there are mappings that I said that internet service providers have a range of IP addresses so therefore they work backwards given this IP address what range is it in it's in Thomas Hart's range so now they know the ISP and then you can have databases that say where is Thomas Hart University located roughly well here's the city region and country so it doesn't give a precise GPS related location it gives a location of where that ISP is registered normally maybe there's an ISP maybe you're on the Thomas Hart University network but you're in maybe if you're in another campus or some other location accessing by this network you may not be in Bangkok but it will show you as in Bangkok the location is really just some address of the ISP some mailing address of the ISP they will show the public IP they will show the public IP too no they do not okay so in this case in the the normal setup my computer address from SIT what is it my wireless LAN 10, 10, 11, 10 that's my computer IP address that is only used internally inside SIT that's my actual computer IP address your phone will have a different one 10, 10 something but when we send a packet outside of SIT the SIT router changes it to this one public address therefore anyone outside of SIT will never see that internal address unless something is set up wrong or some other special feature is enabled but in the normal case no they'll only see this as the source address and therefore only identify that so can now someone at the server or someone who intercepts so again the server sees this public IP address 203 someone on the internet could intercept and see that 203 address can they still map it back to me ignoring cookies how could they find out that it was me Steve accessing that website and not someone else what's needed in that case let's say a law enforcement organization is trying to trace who accessed a website who sent a particular message or posted a message on a forum they know where it comes from this public IP address that's easy to obtain either intercept the packets or the logs from the web server how do they work back to find who's the particular person that sent that message what's needed for that to be possible they would need to know so let's say they know this address they would need to go to Thomas Hart specifically to SIT and say at this point in time someone used this public IP address and that would map to a local internal address some 10.10 address which computer had that local 10.10 address at that point in time so they would need to go to the organization that has this public address and if they have logs let's say of the past one month which internal IP addresses map to this address then they could work back and find the internal IP address so it depends upon the organization that has this public address say SIT if they have some logs some record of who used this at what times IP addresses then another organization could trace it back to the original person okay does SIT have logs in some countries it's a legal requirement to have such logs and yes SIT would have logs of specific IP addresses your MAC address of your device maybe even your login for your SIT login who actually sent via this public IP address so in most cases they do have logs that's how people can trace back to the original sender even if they're inside an internal network but that requires some non-automatic means some legal means or some personal contact to get that information across the with a protocol how do you hide from that if there are such logs even if we know the public IP address we can eventually get the internal one is there a way that users can still remain private that is visit a website without someone in the internet intercepting you visited that website what are some technical ways you could do that a proxy a proxy let's try so here's my IP address I visited the website it identifies me it's refresh let's hope it works I'm now in Japan my IP address identify from this website that I accessed the 106 address and it locates me at this different ISP in Japan why well what I did is I set up a proxy so that my browser instead of sending direct to the website my browser sent to some intermediate server a proxy server and that proxy server then sent on to the website the website identifies the proxy server which is some server in Japan so that's one way to hide the communications in how do you do that or what I do in Firefox there are two steps in the advanced settings in your browser usually you can go up to the network settings and you can set up proxies and I'm not going to go through the details of how that works but I set up a proxy to use some 49998 and then the second part well I need an account on a proxy server you cannot just connect to any proxy so I have an account on a proxy server and I set up the connection from my computer to some proxy server and the result is when I visit a website my browser sends that request via or it sends it to the proxy server the proxy server sends forwards the request on to the real web server when the response comes back the real web server sends it to the proxy which then sends it back to my browser we can draw that so just quickly what happened we had my browser we had a proxy server and the web server the one I wanted to contact what happened is that my browser was configured to first send the request to the proxy not to the real web server so it sends the request to here that get some web page the proxy then creates that request then takes that and sends it to the real web server but the source I appear address here is my browser my browser computer and the destination is the proxy and then the proxy sends the same request get some web page but the source address will be that of the proxy and of course the response will come back and I'll draw that in a moment so three computers involved now my browser trying to access a website but it was set up to request from my browser to a proxy and that IP IP packet that was sent across the internet the source address would be that of my browser the destination that of the proxy server if someone intercepted this between my browser and the proxy server they would see the source address and destination matching these computers so that be able to identify that my browser is talking to a proxy my proxy is set up to then send that onto the real web server because in fact this packet includes the address of the real web server I will not show the details but it includes more information here the proxy sends the request to the real web server the real web server thinks that the request came from the proxy that's the source address and keep to log saying the computer with this address just contacted me and sends back a reply to the proxy maybe 200 ok the real web server doesn't know I used a proxy it just sees the IP address of the proxy without knowing any more details then the proxy forwards that final reply back to my browser as a result the web server doesn't know it was me that contacted it knows it was this proxy it knows the IP address of the proxy server and someone who intercepts between the proxy and the real web server again they don't know it was me that contacted it because when they intercept all they see is the source and destination address and that identifies the proxy and the web server not me so this is one way to hide the source hide it from the server and also hide it from people who intercept here any questions about the proxy in this case ok so as you saw the web server identified in my example my the proxy in Japan some websites provide content based upon where the source comes from where the client comes from some location based serving of content so in fact if I visit a google via that proxy I think google or the search engine would show the search page in Japanese because it thinks I'm in Japan if I visit from a proxy in Germany then maybe it shows the website in German ok so in that case yes the server doesn't know anything about where the original source is it thinks the source is where the proxy is and therefore would serve content based on where the proxy is especially if it's a location based content so if it's content like streaming videos which you're only accessible if you're in a particular country then the same thing works what's the problem slow ok we have a performance issue here instead of going direct across the best path in the internet we're sending to one server which then sends to some other one so in this case if I was accessing a website in in Thailand what happened my browser sends to a proxy in Japan the proxy sends to a server in Thailand and then it sends back to Japan and then back to Thailand where my browser is so that's very suboptimal in terms of performance what's another problem can someone trace can the server find out who you are specifically your IP address or how can they what do they need to do they know who contacted them that is they know the address of the proxy can they find out the original source the same way that someone could find out based upon the public SIT address who the original source was if the proxy keeps a log of who sent this request so if the proxy has a log of what happened in the past and if the server could then request that log or get access to that log then they could find out who accessed it so you're placing your trust in the proxy operator they now know the proxy operator now knows the websites you visit and if the proxy operator has a log then it's still potential there's a potential that the server operator who the original source was but maybe it's better than not using proxy in that case but now we shift the trust or the point of failure to the proxy and of course you need a proxy which has some cost and some performance degradation so we're just going through different issues with respect to privacy in internet communications how to hide who is communicating not just the content but the people or the entities communicating why hide why do we need to hide why why hide any good reasons protect to hide from attackers okay so if you want to hide from malicious users who are trying to find out who is communicating with a particular server yeah maybe okay maybe we will not discuss it but you can think of different ways why would you want to not let a server know you're contacting that server okay and there are many valid and as well as maybe invalid reasons for people to do that okay why do you want to keep your communications private I think you can think about different ways different reasons for that maybe you're in some organization or in some country which is not allowing you to access some servers but you think there's a valid reason for doing so therefore hiding the fact that you're doing it maybe a way to get around it so many websites provide a few policies and you said the policies have a cost okay benefit to note let's say my intention at the browser is so that the server cannot identify me as visiting their website that's my intention so by going via proxy the server cannot identify me but the proxy can identify me okay the proxy knows I visited that website because I sent a request for that website to the proxy so you must place some trust in the proxy not to release that information so running a proxy has some cost involved okay it's an actual computer or multiple computers so if there's a free proxy then what do they get out of it maybe some people are doing it for free for the good of mankind but in other cases maybe they're providing some advertising maybe they're collecting your data so they're collecting information about what you're visiting to maybe sell that as advertising and other purposes so if the free proxy or any proxy is compromised if an attacker gets access to this proxy then the attacker now knows which websites you're visiting and can release that so yes you place your trust in the proxy now so if someone wanted to intercept and providing here I have a free proxy connect via me and now that proxy knows if everyone uses it knows where everyone else is visiting so maybe that's an attack in its own right can we improve yes how use multiple proxies maybe send y1 which gets it to send via another which sends via another making it harder for the server to trace it back to the original source okay but performance is much worse now because we're sending via all these proxies use encryption now although we haven't mentioned here that this communications can be encrypted proxy can offer encrypted communication so that the request from browser to proxy at least is encrypted and that's what happened when I did my demo and in fact the the the next step up is in fact to consider like using multiple proxies multiple intermediate nodes to send via so instead of a single proxy plus using encryption and plus using encryption in a way such that one proxy can only determine about the next proxy but not the subsequent one in this case the proxy knows the server so the proxy learns the server you're contacting a better approach and we'll not go through it but the idea a better approach would be have a picture somewhere to finish off for today a better approach would be say your A the destination is F to go essentially go through multiple intermediate nodes so you want to send let's say F is a web server you want to send a request to it you don't want F to know who you are and similarly you don't want the intermediate servers to know that you're communicating with F if you have a single proxy it will know who you're communicating with and we won't have time to go through the details but just the concept then the concept is to see if we can draw it what A does to send a F it negotiates secret keys for encryption with each of these intermediate nodes and I'll denote them as what K let's call this one KB KC KD and KE and A has those keys as well we'll ignore the details of that step but let's assume that they have some secrets shared between them let's get this correct so let's say they have secrets so that A and B know KB so if we encrypt something with KB or A only B can decrypt it C cannot, D cannot because they don't have KB so we have these secrets shared between these nodes A wants to communicate with F what A does it creates a special packet how do we draw it it creates a packet with some data need some space draw it here the data that it wants to send to F and I'll draw the entire packet and then explain this is we created the source A this is the data and inside these header parts these special headers contain the destination destination F this will be destination E D C and B and it encrypts portions of that so this part is encrypted with KE this part is encrypted with KD and we keep going put it in KE and the last part we created at A wants to send this data only to F but we want it to be private and private in two manners so that F doesn't know that it was A that contacted and that the intermediate nodes don't know that A is communicating with F that's our aim and this is the concept that A initially exchanges secrets with each of these intermediate nodes then A creates this packet containing the data and we can think of this as an IP header where the source address doesn't matter the destination is F in this second one the destination is E, D, C and B this part is encrypted with KE that plus the header saying destination is E is encrypted with KD and this part KC and all of this with KB this packet is created at source A sends to B the first step now we send this packet to B let's see if someone intercepts at this point who do they know is communicating so if someone intercepts the packet here the source is A it's coming from A, it's going to B if they intercept they know A is sending a packet to B they know the destination address the source address would be A in this case so they know A and B are communicating but the contents of that packet so here's the header the contents, this part on is encrypted so someone who intercepts cannot learn the contents B receives this what does B do B decrypts B knows KB so B removes the header decrypts the internal part because they know KB therefore they can decrypt it and they get all of this now look at all of this, what is it it's this part, C and the rest is encrypted using KC does B know KC no KC is shared between A and C not B so from B's perspective this packet needs to go to C but it doesn't know the contents B knows so far I've received a message from A I need to send it on to computer C so it sends on to C if someone intercepts there they would see just a message going from B to C they don't know it came from A so B sends on to C C received this part it's the destination it was encrypted with KC C decrypts it removes the header and now we have destination D and the internal part encrypted with KD what does C know who sent it from C's perspective B sent the packet from C's perspective the destination is D does C know anything about A what do they know about A do they know A sent this packet you're right the key is known to be shared with A in fact so you've gone a step ahead of me the keys can be also exchanged in a secure manner that we're using for the data exchange a private manner forgetting about the keys what else does C know about A in terms of the IP source and destination address C received a packet from B source is B destination is D so C knows that B and D are communicating forgetting about the keys for a moment C sends it on to D you can see what happens the same it removes the header decrypts realizes it needs to send on to E E removes the header decrypts with KE realizes to send on to F sends to F F receives the data and has the original data ignoring the keys for a moment if you just look at who sent it, who received it each node with its source and the next destination C is only aware that the packet came from B and went to D C doesn't know that it's actually going on to E than F because all of that from C's perspective E and F the values are encrypted with keys it doesn't have when E receives the packet it doesn't know that that packet came via A, B and C because all that sees when E receives the packet this part it sees E is the destination it knows it came from D because D just sent it and it knows it needs to send to F when it decrypts but it doesn't know that before D there was C and similar you can see that each node only knows about the one that sent it to it from the previous link and the one it's sending to on the next link as a result when E receives from E it doesn't know if it came via D, C, B or A so the end result we'll come back to the keys in a moment is that the destination doesn't know the original source and the intermediate nodes do not know the original source or the final destination all they know is on either side of them the way that we do this encryption they cannot learn about who else was in the past and that provides the true privacy of communicating to a server without the server knowing who you are and without people intercepting and finding out who you're communicating with if someone intercepts here all they know is that C and D are communicating they don't know A and F are communicating it's encrypted but come back to the keys we said at the start A needed to exchange keys with D for example but in fact the key exchange uses the same approach we do it one step at a time such that D when it receives a key it doesn't know it's from A it has a key but it just knows that it's for this type of packet it doesn't know who is the original source so the packet is created this packet is created a source it has multiple layers what's it called the packet any names what has multiple layers and as you send that packet to B B takes off this and sends the inside to C C takes off this layer sends the inside to D and eventually F receives the data we start with a packet with multiple layers and as we forward it along we peel off the layers what do you peel layers off of what food do you peel layers off an onion this is referred to as an onion okay so he likes onions so this is the concept of people talk this is an onion and as you forward it through you peel off layers until the contents the original data gets the destination and the name of this concept is called onion routing that's where the name comes from onion routing we're routing packets and the concept is that we have this layered packet which is referred to as an onion and the abbreviation is called tour tour onion routing or the onion router so this is an anonymous routing or anonymous communications protocol that's used on top of the internet to provide that true privacy of servers not identifying the source and intermediate nodes not identifying the source and destination of communicating tour is one example in the concept that we've discussed yes but of course in any security scheme there's always practical issues to consider so there are always limitations either due to implementations this assumed all of these nodes A through to F we're using this protocol this tour protocol and in this case the server cannot identify the source but in practice if you want to access a normal website that doesn't use the tour protocol then you have some extensions to handle access to normal websites so tour provides anonymous routing or anonymous communications among special sets of computers in the internet these onion routers these devices we're not going to go into any details of that that's just an initial starter no questions in the exam on tour there's no questions on that any questions on some of the issues we've raised about privacy privacy from the perspective of not letting others find out who is communicating not just the data but the entities communicating we've seen several issues what you should know for the exam about privacy is maybe just the initial things that we started off for example if someone intercepts if there's an exam question what do they know about the entities communicating what privacy or what level of privacy is provided by this IP set configuration or another configuration and in terms of privacy think about who can we identify as being as communicating we can always see an IP address a source and destination but which computers are they identifying in this case in this example if we intercept on the internet we'd see it's A sending to Y so we'd be able to identify A and Y communicating what else have we gone through tour will not be in the exam just that general concept of privacy the proxy so we had this example of a proxy proxy related to privacy is not in the exam but if you go back to firewalls you'll see there are some slides about proxies in the firewall topic they used as a firewall as well so that may be in the exam but proxies related to firewalls not related to privacy okay finish for today questions yeah how we can take from the government agency in theory this provides some protection okay in theory if you have enough not just with six but if you have many of these special onion routers then you can start to communicate in a public internet anonymously of course things like let's say some attacker runs these anonymous routers runs many of them then it becomes hard to protect against but assuming they're not owned by the attacker then you can start to protect okay Thursday what will we do Thursday we'll just mention the exam so this afternoon I'll put some hints on the website about the exam I will not start any new topics on Thursday anything that we need to go through on Thursday so read the hints on the website today maybe look what's the time if not by 1pm then look maybe after 4pm today you'll find the hints on the website I have a lecture I need to put them on there and then Thursday I'll just be here to answer any questions or provide any comments about whether they're covered in preparation for the exam the exam is when Monday less than a week


What's up everybody? Jason here for jaspyscasebrace.com 21-22 Kanini Donner soccer hobby just sold out This is a two box break random country number 17. So here we go guys 17 total spots all cart ship Please note some countries won't have any autographs, but from Argentina down to Udawai Here's the customer names teams Clubs countries I should say let's go roll Three and a five eight times. Good luck one two three four five six seven and Eight three and a five eight times Scott down to James You know three or five eight eight times one two three four five six Was eight right? seven eight Netherlands down to Belgium I just got yet another is Robert with Germany Chris with United States Kevin with Korea Chris with France Matthew with Poland Nicholas with Portugal Chris with Columbia Matthew with the combo team Sweden or Croatian Scott with Brazil Matthew with Spain Nicholas with Argentina Allen with Italy Recon Mexico Chris brother or you're a Y a Band with England and James with Belgium Now does anybody want to trade in the meantime guys? I think I can turn on the top camera Turn on the top camera guys, and I'm gonna just start ripping these packs Just so that way once we close the trade window really quick. We're just Just start breaking So this actually is the second to last two boxes of the case to my knowledge I think someone said maybe there wasn't a kaboom pulled yet. So I'll post it the next one right now once we get done with this break Well, it's like I have to break tomorrow, but at least try to see if there is one here or not So like I said, I'm gonna rip these You guys can see on the top camera the packs are just right here on the On the screen right here. All right by the time I finish this second half of the box ripping No trades. We'll just close it. So I guess no trades. All right, cool There's the first box here guys and good luck See we got for you guys are early long base. So we're gonna kind of skim through the base cards Go through the Crohn's Jude another lens along Zalinsky Zalinsky Pope press proof and a gents feature Red. Oh, is that gold? Oh Thought that was for a second there red team Carl Swidersky That is Five out of ten for Poland was Poland Matthew there you go man little gold gold Michael Tulsa Procala, you have Yicheng Wang John Terry Camille, I don't messy Verati Carasco Tulsa and a Rodrigo to 49 Mohammed red Pedri, I feel like I'm gonna hit the autograph yet. That's a tidying right here somewhere Pedro neto See you day. Have a great night. See ya. See you buddy. Many junior. I'm starting to get a little word here Where's the autograph? It's like be the first time I didn't see an autograph. Didon Sancho England 2 3 4 now or maybe not Donnie van de Beek The beautiful game and an Aronson Ronaldo and Luis Maria Press proof Alrighty, so there you go. Here's the first box right there. Nothing super crazy. No kaboom. So I don't know Have we pulled the kaboom there guys? I think it's rare when it ends up being like the last break or two second box We're getting guys after this we got to do a quick filler for the prestige to give away some spots in that impeccable After that we'll do the quick immaculate hanger break to give away the last spots in a mac of the basketball and we'll do a mac of the basketball Take a dinner break Come back do the pack filler Sell a pack filler for the baseball mixer. We'll do the two-hour baseball mixer pretty much Come back Do the pack filler again for prestige to give away the last spots in impeccable and Then Run the R&B for impeccable And then break impeccable and then call it a net That'll pretty much occupy us for the next like four and a half hours and again only just because Baseball mixer might take us over an hour and a half. I'm thinking it's going to be more an hour and a half But I just never know sometimes I don't guesstimate it, right? Sometimes it's a lot more. So that's why I'm giving myself two hours just to be safe It's quicker even better. We have a Bernardo Silva for Portugal song and Lattaro Martinez press proof We have a Brandon Aronson Tomas Muller That is tonight and I in the beautiful game for Germany Germany's gonna rob a ronkel Ruben Diaz Martinez the sack and we got Morton Thorsby Here's a good color coming. That's a rookie too Teji nom for Korea Korea Republic Kevin. There you go. Halon marvels and Padre marvels press proof Andre Silva Ryan Sterling Georgino for the Netherlands Blase kid series Nuno Mendez Herving Lozano Virgil press proof Lozano and Phil Fulton Alrighty guys, we'll know Google in this one. Like I said, I don't know if there actually still is one We can look back at the previous videos But number 18 will be the last two boxes of the case and if there hasn't been going pulled technically should be there But again, it can be on average where there might not be But there you go guys to autographs there molar Donnie van de Beek a little gold a couple relics I appreciate you guys. Jasper's case breaks.com


Evaluating Web Resources – Understanding and Evaluating Information in the Digital Age. Brought to you by John M. Found Library at California State University, San Bernardino. So by the time you complete this tutorial, we hope that you will appreciate the complexity of the information landscape and human information behavior as well as the challenges these pose when it comes to evaluating information. We also hope you'll be able to use best practices and various tools to assist in evaluating the accuracy of information you encounter online, and finally, we hope that you will be able to overall apply critical thinking skills in your own research. So let's talk about the information environment. Fake news, tabloids, sensationalism, propaganda, etc. is not new, and you have some classic examples here on this slide, one of which is a bit more recent than the other. But social media and the speed at which information travels is new. So let's talk about some terminology you might have heard. First is misinformation. This is incomplete and perhaps misleading or vague information, whereas disinformation is straight up false. And I have an example here of disinformation. There have been claims that you can prevent or even cure COVID-19 by consuming certain foods. This is absolutely disinformation, and we will come back to this example later. Some other serious examples of disinformation and misinformation are related to the fake news industry. Fake news is a business and American clicks are where the monies act. This image is from a 2017 investigative piece CNN did as they were thinking about what the information landscape might look like running up to the 2020 election. They explored the country of Macedonia and they discovered a lot of political fake news was coming from there. They found that the actors could get money from advertisers for each click. And so the idea was that false stories were created specifically for American consumption to specifically make money. I don't care, said a man they interviewed, because the people are reading. At 22, I was earning more than someone in Macedonia will ever learn in his entire life. Scary stuff. So as I mentioned, this story ran in 2017, so social media and politics has, as we all know, grown even more increasingly sophisticated, and things are changing quickly. Beyond the phenomenon of fake news, the media landscape is really, really complex. Most media sites are businesses, so there's always content that's missing and content that is reflective of particular interests. Remember that most mainstream news is owned by a few companies like Time Warner, Hurst, Comcast. The key for us is to decipher which is more trustworthy than not. It's always important to look at multiple sources, which we will talk about later.  This is not particularly helpful. Tools like this can even be misleading, leading viewers to imagine the content in the middle as okay and not having any sort of bias. Be skeptical of everything. Many outlets publish information that is okay, and also publish really bad or biased stuff. Some outlets that aren't traditionally taken seriously like Teen Vogue have produced really excellent political analyses. And many of those outlets do not even appear here on this chart. So the lesson here is that there are no shortcuts like what you see here. You need to consult multiple sources or read laterally, which we'll talk about shortly. Critical information literacy is a matrix of skills and critical thinking, using background knowledge, applied in context to information. It's also really useful to know what your own shortcomings and biases might be as a consumer of media too, however. So let's talk briefly about information behavior. Information behavior is something that information studies scholars look at, and it includes both cognitive and affective dimensions of engaging with information. So the first piece here is confirmation bias. This is the idea that as humans we seek out or interpret information in a way that confirms our pre-existing beliefs. No one is immune from this. I do it too because I am a human, so it's really important to know sort of what's happening in our brains in the background when we view something. The second piece here is satisfying. This word is a combination of the words satisfy and suffice. And it's the idea that humans often pick information that is good enough, but not necessarily great. And then finally, you might have heard of filter bubbles and or echo chambers. This is when it turns out that we are curating our information environments so that we see content from select users or publishers, right? So think about defriending people on Facebook who don't have the same political views as you. That is one example of creating your own filter bubble. However, we don't necessarily do this intentionally. So I highly recommend that you see the film, The Social Dilemma, if you're able. This really gets into the ways in which social media companies specifically tailor what you're seeing on your phones and on your computers. So what can we do about all of this? Beyond a complete overhaul of our information ecosystem or rewiring the human brain, there are some things that can help. So first, read laterally. Reading laterally simply means that you are not staying within one website or one web source. It means that you are looking and moving to other sources to investigate what you're viewing. There are some important questions that you can ask and you are probably familiar with this line of thinking. It's who, what, when, where, why, and how. So who is creating this information? This could be the individual author. It could be the media outlet. Find out what other sources are saying about this person or this outlet. Are they credible? What are their credentials? Do they have any bias? If so, what does that mean? What? What is the content of what you're reading? In the example I shared earlier, maybe you encounter an article that says you can cure COVID by eating garlic. Well, see what other sources are saying about that. When? When was this information produced? Does that matter? Is it relevant anymore? Where? Where was this information produced? Again, is that relevant? And if so, how? Why? This is a big one. Why was this information produced? Right? Again, does the author or the outlet have an ulterior motive or a bias? Do they have an agenda? You can only sometimes figure that out if you read laterally and explore what other sources are saying about your source. And finally, how? How is the argument or how are the claims being made? So for example, one source might arrive at a completely different conclusion than another source using the same data set. So it's important to really explore how claims are being made. And again, why? So I'm going to review briefly some tools that might help. One tool are fact checking sites. You might have heard of some of these. Snopes.com is a very popular one. I also like factcheck.org and politifact.com. One quick way of investigating a claim, for example, is to do what I call a smart search. And this is when you type in, in a search tool, it could be Google, it could be duck.go. You type in your keywords. So here I have garlic, COVID.  So sitesnopes.com. I'm going to go ahead and click on this. This will open up that search. And we can see here, will garlic water cure coronavirus from Snopes.com? And no miracle foods or diets can prevent or cure COVID-19, also from Snopes.com. So I can click on that. And what Snopes does is it presents the claim. And it has very obviously here the rating and this rating is false. So that claim, according to Snopes, is false and they do provide supporting evidence and some background information here. So Snopes is a great, great tool. I highly recommend it. So I alluded to this before. It's also important to determine what other reputable sites are saying about the website where you found your information. So again, you can do a smart search. This is a little more complicated, but you will type in the search bar again, Google or DuckDuckGo, whatever tool you use. You will type in the website URL. So in this case, wnd.com, let's say we read an article there.  What you're doing here is saying, hey, I want information about wnd.com, but not from wnd.com. So if I click on this, my first result here is from Wikipedia. The second one is from Washington Post, Library of Congress, and so on and so forth. And so these can all give me some good information about what I might find on WorldNet Daily, which is the website. Okay. And finally, you can find out who owns the website, which can at times be illuminating. There is a tool called whois.com, which gives you information about the registration date, the name, the organization affiliated with the URL. So you can click on this and it opens whois.com. And in the top right, you can enter your domain or IP address, so I will do csusb.edu. And what this tells me here is that it gives me the registrant and the address, which I know this is California State University's address, which is legitimate, contact information, and so on and so forth. So as you can imagine, this can be a really useful tool if you are unfamiliar with a website and you want to dig a little deeper. And as far as images, you can also search for images and see where they have appeared on the Internet over time. So memes are really big right now. I'm a big meme fan, but sometimes it's really useful to find out where that original came from. So there are two resources you can use. One is TinI, and this is, again, is a reverse image search. And you can either upload an image here or you can enter a URL for an image and it will show you the results. I will close this. Google Images works in much of the same way. It's images.google.com and you can type in your URL or you can upload an image here. And it will show you other instances where that same image has appeared online and you can hopefully hunt down the original. And last but not least, it's always important to follow the breadcrumbs. So if the web resource mentions or gestures to a scholarly journal article or a research study, use what information is provided to get to the original. Either the author's name or the name of the journal is included in a newspaper article, for example. If they don't have that information or you're not sure where to start, please contact the FOW Library. Librarians are happy to help you hunt down those scholarly journal articles and get the information that you need. So let's practice together. If you recall, I started out today's tutorial with this image. You might have been curious about what you were looking at. So here we have a man who looks like he's mowing and not far behind him. There is a massive tornado. So I was really curious about this image and I did a snopes search. So I did man mowing tornado site colon snopes.com and I will show you what I found. So the article or the excerpt says man mowed lawn during tornado. It's got that image. This is actually true. So this is always a humbling experience for me because sometimes you are wrong. And then the final image I want us to explore together is this really adorable image of a frog on a turtle's back. And this one sort of gestures to the complexities of what we see online. This is from a PBS news hour. And news hours source the photograph from Getty Images, which is an image database. And it turned out that the photographer told news hour in an interview that he had purchased the animals in a pet shop and then he staged the image. And so there are some concerns here about not only animal welfare, right? Whether the animals wanted to be picked up, you know, they might have been terrified being around one another and also, of course, journalistic integrity. In my opinion, this piece is intentionally misleading, however adorable it is. And so this might not exactly be misinformation or disinformation, but it certainly should cause you to question what you see, especially all those really cute animal pictures out there. So wrapping up, today we talked about the complexity of the information landscape. We also talked about human information behavior, some of the affective and cognitive dimensions of information seeking. We talked about the challenges these pose when it comes to evaluating information because we are up against a lot. We also talked about best practices like reading laterally and not relying on simple lists of good versus bad sources. We also covered some tools to assist in evaluating the accuracy of information that we encounter online. And then finally, I hope if you take nothing else away that you are encouraged to always and consistently apply critical thinking skills in your own research. Thank you very much.


We got a gift that my wife and I opened on Christmas Day. Look behind me. That gift was from GameDeus and inside was this and this. So this glove is meant for comfortable gameplay that lets you have prolonged hours of gaming. They have, look what's that? It's a gel pack that gives you a wrist support so that when you're playing games you don't need the gel on your mouse pad. You can play on any surface and it helps keep your wrist from getting carpal tunnel syndrome or any fatigue. And the material is also very comfortable so it can help you play with your mouse for a lot longer. And this is the brand new headset. Notice there is no ability to extend the earphones and that's because they've made the strap flexible.  So all your big heads and small heads rejoice. This headset will work for you. It's very comfortable. It's very light. The previous headset which was the white one that makes you look like the Star Wars Stormtrooper, that one is a little heavier and it doesn't have this strap. It just lets you adjust the height by pulling on these earphones. So I personally prefer this headset because it's lighter and it's more comfortable. And I'd love to hear what you think. Do you have either this new gaming glove for long longer gameplay or this headset from Game Deus? Tell me what you think in the comments below and even if you don't, tell me what you think from just looking at this headset that I'm reviewing here. I am George and this is freedom. Freedom is giving away a $20,000 car when we hit 100 billion views to you. How do you enter? Click this card right here, that little I. That'll take you to the $20,000 car giveaway and how you can win. Freedom is also YouTube certified. What that means is we passed a hard test and we got a lot of training from YouTube in audience development so we can show you how to grow and we have a piece of paper proving that we're certified in that category. What does that mean for you? Click here. That little I will take you to all about YouTube certified and how freedom is helping you grow because we are now certified. And I am the founder of MGM, the multi gaming network and MGM is for me because I'm a gamer. Are you a gamer and is MGM for you? Find out at youtube.com slash MGM. I am George and you've been watching. Let's discover freedom. Click the first video to learn what is freedom and how it helps you grow. Click the second video to learn about sponsorships for all freedom partners even if you have just 10 subscribers and click the other videos like how do I leave freedom to learn more. Click get more views to learn how to build your audience faster on YouTube. Click get more CPM to learn how to make more money from your channel and click get more music to learn where to get more music to spice up your videos. Click the first playlist to watch the George show on freedom. That's my show or watch the Anthony show or the Alex show also on freedom and we will grow together as a family because this is the freedom family. You are part of it. We are all part of it and we are all growing together. So grow with us and partner with freedom. That play now button right there on the video bar is all you need to click to get started.


Welcome to Toffie TV, it's the Tuesday topic. Yesterday was the 5th of November. Did you remember? I did, cos I can hear bleeding fire, I don't know if it's five minutes at all. Does your dog not like you? He's okay, he's okay. I say that for any other business. 5th of November 2017, Everton played Wafford at home. A 3-2 victory for the Blues. A real tain on point in the season for me because I honestly thought that night if we'd been beaten. You thought that a couple of times. That night it was a victory, a much-needed victory. It was a massive win. But 10-3 weeks later you told me we were down. But it was a huge win. It was a big win, but obviously we were playing Wafford and at that time we established the fact that we wanted Marhw Silver. So a big tain on point for Everton Football Club and away isn't it? I think that night we made it very clear to him somewhere, someone pulled him aside. It felt like from that point on his head was completely tained by Everton Football Club. He wanted to become the manager, which obviously he did. So a year on a lot's changed, hasn't it? Massively. And that night we actually asked Wafford Cup we spoke to. That permission, because obviously you've been in the press before it. It was a mad game. It took me 26 minutes left and we were out of the game. We asked Chase shutting down and the next minute we won the game. But 12 months later, that night, Sunday night, Sunday evening game, there was only four players started on Saturday from that team. It self tells you, you know, picked for the Colm and a couple of others. So it tells you that the changes that have gone on in that 12-month period. Where the club was then, so where it is now, feels like a million miles apart in terms of... Because I think this time last season, when this fixy came around, obviously Ronald Coomber had been sacked many a dozens in charge. It just felt like everything was going the wrong way all of a sudden. We'd had the optimism, obviously. Mishiri took over and we had Coomber coming in. We had Walsh coming in from champions and we spent some money, you know, and then we had an all right season. And then that summer we'd gone out and splashed the cash and we were made up. And then the wheels were seen to fall off. Everyone was quiet around the club. Mishiri was quiet. And he was like, what's happening here? You know, and we know that there was rumblins behind the scenes at board level and there was rumblins. So it was just a very tabulent time. And you're fast forward 12 months, like you just said. We got Marko Silver in. It was the man far up Mishiri made quite clear from that day he was, you know, we offered him £20 million for him, which is a mad amount according to the room show. You know, a year later we've got him and we've got Marcel Branzi. We tried to get in three years ago before he got Walsh. So, and we're seeing, we're seeing the semblance of a plan. We're seeing what they're doing. We're seeing stuff moving forward now off the pitch as well. And it just feels like a different place now. Yeah, yeah, it was. I mean, obviously we played the game on the Sunday. We played Leon on the Thursday night. So we were basically out of Europe as well at that point as well. So everything felt that it had gone out now. Everything felt that what had been worked for had ultimately disappeared. It just... Exactly. It was a really, really dark time in that game. I remember being tunneled down and just thinking, this is all fallen, this is all gone. It's all gone, but out of Europe we're about to lose another game. I think we were going into an international weekend as well. So it was that feeling that we were going to have to carry this for another couple of weeks and how low we all were. And it was also because we'd already sacked the manager. So it was, where do we go from here? Snareddon had been sent off on the Thursday night as well. Sigarton had played the front against Leon. We just felt, I don't know, we just felt so, so low. I think the following was the following fix of the Crystal Palace game. No, don't. My show? My to be. My to be. So obviously from this game we did pick up a little bit. Nias got, as you said, he'd got a goal in this game. My palace was when he got sent off after winning the penalty. She scored in the game as well. So there was a little bit of an up team from this game and obviously so many things in this game happened. Beans get a penalty then. There you get a penalty in the last minute and Tom Cleverly conspires to miss it and just felt like for a little period everything was just things were on our side. I remember Richard Allison played for them and he's obviously scored a really good goal. And then again you go a year in the future and he's playing for us, he's doing well. And as you just said, everything feels different and it's not because you couldn't have told me then. Things seem to fall apart so quickly in football and I think we feel at times that it takes a long time to put things back together.


One of my preaching professors, Barbara Lundblad, once said that hope has to be as tangible as despair.  There's no way around it, even for a pathological optimist like myself. And in the midst of actual and existential despair, we need a message and movement of hope that the light shines in the darkness, and the darkness has not overcome it.


Hi, you guys. It's Lindsay and it's Monday, which means we are back for another video in our series about how to sew a commercial sewing pattern. Today is the second video of four. And today we're going to talk about the instruction booklet that comes with every sewing pattern. So again, I'm going to change the camera angle so you can see what I'm talking about. And let's get right into it. OK, so as you guys know, we are working with Butterick 5466, just this skirt pattern. And inside the pattern envelope is an instruction booklet. This is the same for every sewing pattern comes with one of these. And what you can see from the instruction booklet is really everything you need to know to sew the entire garment. So we're going to talk a little bit today about all the information that you can find in here and how this will help you along the way. So from the from the very first page, you can see that it will tell you the pattern name. And it will also tell you how many pages are in the instruction booklet in case you think you might have lost some of the steps. You can refer to this here and each of the pages are numbered. So you can see this is three of three and this is one of three. And then it's going to remind you of what you're making and the different variations that are available. Again, those line drawings there so you can get a more precise idea of the style lines of each variation. And then below that is going to be all of the pieces, all of the pattern pieces that are going to be in this sewing pattern. So you can see they kind of sort of resemble a skirt and resemble a belt. And it'll tell you piece one is the front. So you can refer and say, oh, that's what piece one looks like. It's the skirt front. And then if you wanted to see specifically thirteen and fourteen, you just follow along until you find thirteen fourteen. And it's the front facing and the back facing for skirt D and E, which is different than the front facing and the back facing for skirts A, B and C, which had more of the rounded facing versus more of just a rectangular facing. Now, if I were making skirt A, for example, what I would do is I would go through this list and I would find skirt A and then I would note everything I needed to cut out. So piece one, piece two, piece three and piece four. That's all I need to make skirt A. And then if you follow along down here, it restates the measurements again, which is helpful so you don't have to necessarily grab the pattern envelope and find the measurements there. You can just find it all here, all in one place. And then we'll get into the fabric cutting layouts. First of all, it's going to tell you what this little bullseye means. And we'll talk about this a little bit more in next week's video as we start to look at specific pattern pieces. This section will also tell you that there's a five eighth seam allowance and that the seam allowance is included in each pattern piece. That's pretty common, both the seam allowance and the fact that they're included in commercial patterns. That's that's pretty standard. This little chart here, though, is something that I refer to very often when cutting, because if you have pieces that are supposed to mirror each other, it's very important that you have your fabric facing the right way and your pattern facing the right way. Also, as we go through here, it gives you some basic information about cutting and how to lay out your fabric to prepare for cutting. So it'll tell you that your options are to cut through single thickness or double thickness and that then we'll get into more specifically how to know which one of those to do. Once you cut into that fabric, as you know, like you're committing to it. So make sure that you've double checked all of this and read through it and really understand it. But basically what happens after that is it gives you fabric layouts and layouts for the pattern specific pattern pieces. So again, we're going to assume that we're making skirt A here. And remember earlier, I said I was going to go through this chart over here and notate the pieces that I need. Well, here's another checks and balances. So it'll tell you for skirt A, you need pieces one through four. So that's that's pretty clear what you need there. So you can double check and make sure that you have all your pieces and what they're supposed to look like. And then it'll tell you if you're making the skirt A at a 45 inch fabric. That's what this is right here. This is how you need to cut it out. So you're going to lay your fabric on top of itself, folded over with the selvedge. That's what the S.L. means and the fold right there. So you're going to fold your fabric over and then see that shaded gray part refer back up to this. And that's going to tell you that that's the right side of the fabric. So you know that the right side of the fabric needs to be facing each other. So right sides together with the fold towards you and the selvedge away from you. And then you're just going to lay piece one here. And remember piece one is dotted. So that means piece one is going to be flipped upside down because up here it said that's the wrong side of the wrong side of the pattern. So piece one is going to be laying face down.  And then you have your two facing pieces here. And it shows you how to cut those. But if you're making piece, I mean, I'm sorry, if you're making skirt A and you're not size eight or ten, your size 12 all the way to 24. This is what your pattern layout is going to look like. You can kind of see how the fabric is only folded over halfway. And then both of these pieces are placed on a single layer. So you'll see there's a selvedge here and a selvedge here and a fold here. So it's only folded over a part of the way. Again, the fabric is facing right sides together for the fold. And then for the single layer, the fabric is facing up. And then piece one is placed upside down. And then piece two, you need mirrored pieces. So you have one facing up and one facing down. And so you'll see it goes into the what a 60 inch fabric is like. So all for those are for all sizes. Yes, so all sizes of 60 inch fabric for skirt A would be like this.  And those charts that we refer to whenever purchasing our fabric, those are based on these drawings here. So you want to go through when you want to say, all right, I'm making skirt A and I have 60 inch fabric. Here's my pattern layout diagram. If I'm making skirt B, you want to say, all right, skirt B, I have 45 inch fabric and I'm a size 20. So that's going to be this chart here. Now, it'll also tell you what how to cut out the interfacing. So you'll see for skirt A, there's interfacing for the facing. So they're all going to be the same fabric widths, but the sizes are what's going to indicate this layout versus this layout. And OK, here we get to the sewing information here. And it'll reinforce that the seam allowance is five eighths and that the allowances are included and then it'll have a separate illustration key for all of the instructions. So you had one illustration key for laying out your pattern pieces and you have a separate illustration shading key for actually sewing. Now, you're not necessarily going to see all of these. It just depends on what the pattern calls for. Now, also it has a glossary here like number 20. It'll this is an instruction step that indicates that you need to slip stitch side edges and it's in all caps like that to help you know that there is an explanation of what slip stitch is. So then you would just go back over here to the glossary, find slip stitch and it'll tell you how to make a slip stitch. Other patterns have a longer glossary with different terms, but these are the ones that they chose to explain in this pattern. And then we get right into the sewing instructions. So you'll see skirt ABC, this gray bar, everything under this. Is going to be instructions for skirt A, B or C all the way down here. And then you'll see you'll come across another bar that just says Facing A. So if you're making B, you don't need to make Facing A. You would you would follow along the pattern instructions. Follow along and then here comes waistband B. So if you're making B, you're going to do instruction step one, two, three and four. And then you're going to jump over to your waistband step number nine. And then if you're making skirt D or E, your instructions don't start until we get way over here. So skirt D and E on a gray bar and then start the step. Start over with one here, one and two and so on and so forth. So there you go. That's the pattern instruction guide for Butterick 5466. Don't forget, we are going to be doing a giveaway with this video series. McCall's Pattern Company is giving away three patterns to one lucky viewer. All you need to do to enter is subscribe to our channel. Subscribe to McCall's Pattern Company's channel and I'll have a link to their channel below so you can find it easily. And then in each of the four videos that we are posting for this series, there's going to be a hidden word somewhere in the video. You might have seen it already. Hint, hint. And then on our fourth video, just leave a comment with all four of the words from each of the videos in the series and we'll pick one of those people to be our big winner. So thanks so much for watching. I hope you really enjoyed this video. If so, please give it a thumbs up. Next week, we're going to be actually opening up some tissue paper and we're going to be looking at some specific pattern pieces and all of the information that you can find there. So I hope that you'll tune in. Thanks again. Bye.


My name is Staff Sergeant Leonard. My position here is a senior mechanic. I've been a mechanic for the military for nine years now. I was a mechanic before I joined. Growing up my dad had race cars and stuff and we built race cars is when I was young. Me, my dad, my brother. So it's kind of been a family thing just in my DNA I guess. For me being a mechanic I knew when Bravo just seemed to fit what I like to do so it was just too easy for me to choose that. My favorite part is teaching the younger soldiers. Sometimes it does get draining for soldiers in this MOS just taking stuff apart putting it back together not knowing why they're taking part or why this how the function and form of everything works. Basically like the theory of operation of all how all that works so I could teach them that theory of operation and why something was messed up or hey why are we doing this. Kind of gets them more interested in it if they want to be. The most important trait as a leader in this MOS is appearance. A leader of presence and appearance because if you use a leader as a mechanic if you're a a senior mechanic or even a squad leader mechanic and you don't know your job you can't expect your soldiers to follow you. So I think being a professional and being present and even learning alongside your soldiers hey I don't know how to do this but let's get the TM out and let's go step by step and figure this out. I'm a staff sergeant but I have no problem getting in getting my hands dirty and getting in there and helping these guys work on trucks. I just want to be I guess the best I can be at what I do.