Good afternoon. Today is January 6th, Thursday and it's a new day and another coronavirus day. My name is Ken Burtness and I'm talking to you from the North Shore. And my name is Deanna Honaker. I'm talking to you from IA today and Ken and I are going to be discussing mental health in regard to the coronavirus. Absolutely. Last year I celebrated my 50th year living and working in Hawaii. It's been a great, great time here. But the last two years have been coronavirus years and it's been a game changer for all of us. It has turned the world upside down. And Deanna and I are here to talk a little bit about that. I don't know about you, but I've never seen what's happened in the last two years. It's been the biggest change in certainly my lifetime. How about you, Deanna? Absolutely. Absolutely. And that's one of the things I wanted to talk about today was, you know, I'm a licensed marriage and family practice therapist here on the island of Oahu. And, you know, my practice looks really different today than it did two years ago. You know, before the pandemic, I saw my clients in person. I still work with individuals, but I used to work a lot more with couples and families because we could be in that room together. And yeah, everyone's had problems in the past before the pandemic, but the pandemic's really intensified a lot of people's problems. And yeah, it's made their problems worse. So that's before we get into that therapy side, Ken, you know, we just want to make sure we have our little caveat too. Yes. And the caveat is what we call a disclaimer. We'll be talking a lot about what you can do, what we all can do during the pandemic in dealing with life that's changed so drastically. This is not a therapy show. We are not supplying therapy. We are discussing things and trying to come to some sort of understanding of what's going on and what's going on is changing all the time. Now, we're all together in on this. We're all facing major, major problems, but each of our problems are unique. And for therapy to work, therapist or the counselor has to work with the individual and their particular problems during this really stressful time that we're going through. So take this, not, well, let me put it this way. If this is making you in any way dysfunctional, having major problems at work, major problems with family, things have changed drastically, you're feeling different as a person. You are not feeling like the same person you were before the pandemic. So much so that it has gotten in the way of your life and the quality of your life. That's when you need to go to a counselor or a therapist because they can treat your individual problems. Deanna and I will be talking about the overall effect of the pandemic. And most of all, it's changing nature, which it is doing continually. Absolutely. And when Ken and I, we started thinking about which direction we wanted to go in our conversation today, the first thing that came up for me for all of us, whether we're in therapy or not, is this emotion of fear. That's a very, very strong emotion and it can impact every moment of your life. And that's today what I wanted to talk a little bit about is these feelings of fear and how they intensify our life experience. A lot of times, unfortunately, towards the negative. And what could we do? I'll jump in with a little bright spot as I was sitting here this morning thinking about what I could share with you. I was thinking about, we're coming on basically the two-year anniversary of the pandemic. We're going to hit this two-year mark of the pre-pandemic life and the post-pandemic life. And life is really different than even the beginning of the pandemic where we didn't understand it, even the scientists didn't understand it. We didn't know how vulnerable we were. And I was thinking about simple things like going to the grocery store and that was a fearful experience for me in the beginning because I didn't know whether me going into a store and touching something that someone else had touched before me, was this a lethal activity that I was doing? And so we do know a little bit more now that we do have some ways to protect ourselves. So, yeah, the fear is still there. But we need to take a moment too and think about we've come a long way. Absolutely. And I think one of the major things about fear is the fear of uncertainty. I mean, we've been up and down this ladder so many times. It is so difficult to grasp that. I was looking at the figures from yesterday. Yesterday we had around over 2,500 new cases. And that looks promising and that our weekly average up until that time was around 2,700. But today, I tuned in today at 9 a.m. today, K-H-O-N is reporting over 4,500 new cases. So just as we started to breathe a little bit easier yesterday, all of a sudden, we're back and it's looking horrific. Now, of course, there's a bright side to that and that's one of the things that Deanna and I want to talk about is there's always a but in this. Well, we're doing bad but or we're doing good, but it's never an easy picture to look at.  It's always well this but that and then there's this. Now with the coronavirus thing, our cases are going up like crazy. Our hospital admissions are not going up as fast and our deaths are not going up as fast. So what do we focus on? What do we look at? Well, one of the things the experts are telling us is that Omicron is sweeping the country and causing surges in every place but it doesn't seem to be as dangerous as the other variants like Delta. Well, we're so early in the case we don't have enough data to substantiate all that. So this fear of the uncertainty, this fear of well, things are okay today but what about tomorrow? And if we sit there focusing on tomorrow and not enjoying today or dealing with life today, we're in trouble. I don't know. Are you seeing something like that with your clients, Deanna? Absolutely. This focusing on the future, right? So as you're saying these things, Ken, the first thing I thought about was one of the techniques that I use with clients sometimes is taking, you know, kind of going on a news diet. So, you know, going on a diet doesn't mean you don't look at any news at all anymore, but maybe kind of pace yourself with it. And one of the yardsticks or the measuring tools that, you know, that we use sometimes is if like, let's use that statistic that you had about how many cases we have daily. If that number isn't really going to change your behavior, if you're not going to do something different tomorrow, whether it goes up or down, you might consider not looking at that number and giving yourself a day off and just saying, you know what, I'm going to focus on the good things that are going to happen tomorrow, how I take care of myself. So yeah, the amount of information that we take in and what our sources are, I mean, how often we look at them, you know, if you look and see that the coronavirus numbers in Hawaii, you know, they're up, you know, to 3,000 a day and you're looking at it two or three times a day, that really reinforces about how scary that is. It's only happened once, right, when the number only comes out once a day. So really kind of monitor ourselves and are we frightening ourselves and your very good point, Ken, about we're losing our today, right, our peace of mind or enjoyment with our family or some of the good things that are happening today, worrying about what that means tomorrow. Absolutely. You know, and one of the big things that's driving this is our social isolation, the disconnect with so many different people, which really reduces our ability to not only be with people, but to get help from people or to give help to people. And that's been very, very difficult. We see even not only the problems with the coronavirus causing physical and mental problems, but it's also affecting our other problems and that we're less able to focus on those problems. And there's the fear of, which was really apparent at the beginning, of going to the hospital.  And hospital populations were up because of so many people in there with COVID. It's not only scary that there's an unknown, but where is the help? That is unknown also. Where is the comfort? That is also problematic now. It's been especially difficult for people with loved ones who are isolated in the hospital or in care homes, not being able to see them, not being able to give them hope or comfort. And that's been a big fear. What happens if they leave us before we're able to get there and tell them how much we love them? This weighs heavily on a lot of people. I will say I have seen just, you know, talking about that fear. I do have clients who have loved ones either in some type of home care facility. And those places, it's very, very strict. There are people that didn't see their loved ones for over a year. And I was really pleased to see staffs embrace technology because a lot of times it's our elderly population. And they may not know how to use an iPad, but I really saw the staff ramp up the clients or the patients' exposure to that and help them out and to be able to see the faces of our loved ones. Thank goodness that we are in the state of technology that we do have. Look at us right now on Zoom. There are ways to mitigate it. One of the things that, as you were speaking, Ken, I was thinking about, you know, we do have Zoom, we've got the phone, we've got FaceTime, things like that. But again, putting parameters on some of that, if we're constantly talking to people we love and care about, but all we're talking about is the pandemic, right? We're losing all those other aspects of our life, and we can kind of reinforce that fear as opposed to alleviating it. So I do know that, you know, I've had conversations with friends where it's like, hey, let's not talk about the pandemic. You know, let's just take a little break. Like, what else is going on? And you're right. Like, sometimes it's not always fun stuff.  And let's make sure that, you know, we're having rich whole lives and not just being hyper focused on the pandemic. Absolutely. And one of the big fears that's associated with that is that the feeling that we're not in control of our life, that not only we can't see our loved ones, but we can't do what we used to do. We can't be at places we used to be. We can't travel. We're isolated in so many ways. And what we do next seems to be out of the control. It seems to be like there's this wild animal loose. I'm reminded of the movie, the Korean movie, The Host, from a number of years ago where there was a monster let loose. And the really scary thing about that monster going loose was the fact that he was chasing all these people and you never knew who he was going to get. You know, you could be right by him and he could ignore you and take somebody else or he could come after you. And then he would disappear. And you wouldn't see him for a while. And you'd start thinking, well, he's not here anymore.  That's the really scary part of thinking, you know, because we're used to being in control of our life. We're used to saying what we're going to do. We're used to doing that once we've said it. We can make our own agendas in life. And now it doesn't seem like we're able to do that, especially with changes in, are we isolated? Are we locked down? You know, what can we do? What can't we do? Where can we go? What can't we do? Sports is a good example. You know, is it going to happen here in Hawaii? All of a sudden we're in the holiday, the Hawaii bowl, excuse me. And then the day before it's canceled. How can we predict, you know, and that's a big fear, the loss of control. And yet in many ways, that's the wrong fear because no matter what's going on in the external world, we still have control of ourselves. We still can make choices for ourselves. But sometimes that can be very difficult in understanding that we do have that ability and we lose perspective on that. I'm guessing that some of your clients see that as well. Oh, absolutely. And it almost sounds like a bizarre reframe, but to take that fear and see it as an opportunity for creativity and flexibility and developing these other aspects of ourselves. So I have started to hear language change changing. And, you know, oh yeah, I've got this birthday party I'm going to go to. But if the numbers go back up and they restrict it, we're going to do this. So I am seeing people think in different ways, which, you know, I'm very, very excited to see that, that we don't get so much into this all or nothing thinking, you know, we're going to have the party or we're not. It's, you know, we decided everyone was going to stay home and we were going to zoom, right? So there's that flexibility in thinking. You were talking about traveling. That definitely I've seen a big change in that, you know, that we're here on our beautiful island. And a lot of us are used to traveling to other places. And now it's either too difficult or there's too many restrictions. And I love the term staycation, right? That sometimes, well, maybe it's time to explore this place that I live. And what are the things, you know, fortunately, we're not shoveling snow today. And there's we can be outside, you know, if that's the type of activity that you'd like to do, or maybe when's the last time you've explored one of our own museums or things that you would explore and other places and use this as an opportunity. I know personally, like I really enjoyed not having as much traffic for a while. And, you know, I started to do a few things that normally I was like, it's like, Oh, no, this is a good time to do that activity. Right. So opportunity is being presented to us. And rather than looking at it, you know, what can't I do? What is my loss? What are the things that are being taken away from me? Is that making space for me to do something a little different? Absolutely. You know, when I came here in 1971 and moved here, my friends in the mainland came to me and they said, Don't you get island fever? You know, you can't get in the car and drive forever.  There are so many wonderful things. One of my friends who was with the Hawaii Mountain and Trail Club. Every year from my birthday, I said, Look, don't get me a present. Take me someplace I haven't been on this island. And he would take me that place. And I would see something I had never seen before on this island. Not that far from me.  You go five, 10 minutes inland. You're in a new place and a place much different than the places, you know, that are shopping centers and our malls and everything. And this is a glorious place to live. And so many of us don't take advantage of that. Maybe we did when we were younger a little bit. But then as we got older, we became more stayed and more, you know, sort of restricted more in the habit of things. And you're right. This is a time for creativity. This is a time to break out of habits and look for joy in places that we haven't looked for in a long time. Right. Well, I'll show one of my personal experiences. You know, one of the gifts of COVID is I had more time because I wasn't in the car as much. And then I had this choice of how, how was I going to fill this time? And for me, it became a challenge of doing something different. So I learned how to stand up how to work. Right. And that was something that was safe. I can see people, but I'm not close to them. And definitely gave me a feeling of normalcy. This is something, you know, whether there was a pandemic going on or not that I could do. And this is some of the brainstorming that I do with clients. You know, maybe there's a list of things that you've always thought about, like I've always wanted to do or, you know, go see on our Island. Okay, what do you have to do to do that? Right. And yeah, maybe there's things that aren't open. So that, you know, gets knocked off the list, but keep being creative and keep trying new things. That is part of, right? Our mental health, positive experiences. And I think that's the other thing too.  We can reach out to our friends, our family. And like, this is what I'm thinking about. I want to do something different.  And then we just got so busy. But then with doing home, you know, distance learning with school, we were with each other a lot more. And we started doing things that we've just gotten too busy to do. So, you know, there's a great example of a family capitalizing on that time. And, you know, not just plugging into screens and being isolated from each other, but doing something and reviving, you know, memories of fun times together. Absolutely. Now, I'm guessing from the thing at the bottom on my screen, we're running a little short of time. Is that true, Deanna? I'm not seeing that. Oh, okay. We got some more time. What I was trying, what I wanted to say to people was, because we've got another program coming up, is that fear is like an onion. And we can peel off the various layers as we go.  And in the future, we're going to be talking about those as well. And I wanted to make sure before we run out of time here that we let the audience know, and the people viewing, that we're going to be talking a lot about these things. It's a very complex problem. And there's lots of facets to it. But like Deanna says, there's lots of things we can do to bring us joy, to deal with it, to make choices for us that will make our life more positive rather than more negative. So I just wanted to get that in. Yeah, absolutely. And my little message up there, Ken, is we have about six minutes, so we're good. We're good. We'll spend a little bit of time. Maybe it's now a good time to talk about, tell our viewers about what they can do if they want to ask us questions or give us some of their thoughts. And I know you have that information, Deanna. Yeah, I do. Anyone that has any more questions for us, they're welcome to actually just saw it up on the screen. They can email us at questions at thinktechhawaii.com. And we'll either respond to you via email or we will address your question in a later show. Just circling back, Ken, to what you're talking about, the concept of fear and peeling back these layers. Yeah, one of the huge important parts about this fear is what are the behaviors that we do when we're afraid or when others are afraid? And how can we help ourselves with that? Sometimes, again, I was just kind of going in that direction of like, oh, this gift of time and all these great things that we can do with it. But for a lot of people keeping busy keeps negative feelings at bay. If I'm too busy and I'm too tired, I don't think about those things. And maybe I have too much time now. But, you know, Ken and I very much like to talk about maybe some of those underlying issues that we do have strategies that people can use. One, I do want to slide in here real quick that you and I have talked about, Ken.  If you're having a crisis, you know, the hotlines are to prevent a crisis from happening. I learned from one of my clients that he uses warm lines. And I had never even heard of them before. And more because of the coronavirus, more and more these lines are opening up. And it's pretty easy. You can Google them. And they're an opportunity just to have another person to talk to. So I do want to give people that tool that, you know, if you are finding yourself, you know, just not feeling that you're in crisis, but definitely feeling isolated, feeling alone. Things are happening. Things are, people are creating programs to improve that situation. And you can be a part of that. You can be a part of the receiving end. And for some people, it's possible for creating opportunity to help others. So, you know, that's one of my little pearls of the day is, you know, go check out warm lines and find out what they're about and see if that's something you could use, or maybe somebody you know. Yeah, absolutely. I think that last part is very important as well. Because the people we know, the people who are friends, who are family, are some of the warmest lines we can hook into. And the interesting thing about the pandemic is we are able to go virtual and make contact with a lot of people that we haven't been able to make contact with before, or have just been, like you say, too busy to do so. Some of my relatives on the mainland, we now zoom regularly. And I'm talking into relatives and friends that I haven't talked to in a long time, virtually. The other key to talking to them and making that line warm rather than cold is to share. A lot of times in the past when we've shared with email or snail mail or any other kind of communication, we've stuck to more surface type of things. We haven't, we've saved our very deepest thoughts and feelings for when we're together in person. And what I'm encouraging everybody to do that I know, including my family and friends, is to share that stuff that is very much more important. The important stuff of what we find valuable, what we like, what we care about each other. This is the time to say it, especially when so many people are leaving us. Now is the time to tell them how much you care and how important they are in your life, you know, than waiting until they're gone or waiting until you can't talk to them anymore, that they're locked away in a facility that you can't visit. So now is the perfect time to make your lines, whoever they're to, make them warm. Absolutely. And I do like the part about not waiting. You know, if anything, Corona has taught us about the unexpected and, you know, that concept of us not knowing what's going to happen next, we need to capitalize on right now.  Most of the time you'd be pretty well rewarded, I think. Yeah. And I really emphasize the fact of who has made a difference in your life. The sad things is that I had a number of teachers who I really admired when I was young and a number of mentors and they've gone. And I never was able to tell them how much they meant to me in my life, how important they were. And most of those people, teachers and helpers and people who have done you a service, they never get full that. And sometimes it's like you're out there trying to help people. And you're never knowing if you really were a help.  I love that. I really love that. And the sense that it how little, you know, would cost a person to say that, but how big the gift would be. And I just got then a note that we have one minute left. Yeah, I think that's what a great thing to think like, you know, who am I going to think today? Is there somebody, you know, and I think we get the reward from that as well when we see the response from that person. And it's healing for both of us, right? Absolutely. And I want to thank all the viewers who tuned in today for joining us. I also want to thank Jay and Haley and Eric for supporting us and Think Tech Hawaii. It's been a real pleasure. And I hope that we'll see you in future shows. If you want to know when we're coming on, just check with Think Tech Hawaii and they can tell you when our next show is. And we look forward to it. We look forward to peeling that onion and talking about all the facets and especially the changes that are happening all around us that you may be worried about or concerned about or have questions about. So thank you all for tuning in. It's been a pleasure. Thank you. Absolutely.


stones and the first item of business this after noon is time for reflection and our time for reflection leader today is Father Vincent Lockhart St Monica's Parish Cotebridge Presiding Officer and members of the Scottish Parliament good afternoon today marks the 400th anniversary of the death of St John Ogilvy at Glasgow Cross and important day in the life of the Catholic community John Ogilvy was born near Keith and Bamsher and raised in the Calvinist tradition. At the age of 17, he converted to the Roman Catholic faith while studying in Belgium. He then entered the society of Jesus, the Jesuits, and was ordained a priest of that order in Paris in 1610. After his repeated appeals to be sent to minister to the few remaining Catholics in his native country, Ogilvy arrived in Scotland in November 1613. However, within a year, much of it spent on the run. He was captured and imprisoned and tortured in Paisley jail. Although Ogilvy recognised the king's temporal authority, he refused to accept his jurisdiction in spiritual matters, and for this he was tried for treason and executed on March 10, 1615. St John Ogilvy was officially proclaimed a saint of the Catholic Church by Pope Paul VI in 1976. Some 87 years prior to Ogilvy's disembowling and hanging at Glasgow Cross, the Scottish Protestant reformer, Patrick Hamilton, was burnt at the stake as a heretic by the Catholic establishment outside St Saboteurs Chapel in St Andrews. Some years later, two other Protestant reformers, Walter Mill and George Wishart, met with the same faith. Hanging, disembowling and burning at the stake are no longer used against political opponents in Scotland, as far as I'm aware. We have come a long way from Glasgow Cross and North Street in St Andrews in the past 400 years. As a nation, we still owe much to the example of these Catholic and Protestant martyrs. They were men of principle who were not swayed by popular opinion and who valued integrity over personal comfort and safety. Rather than seeing our past crimes against one another as an obstacle, our acknowledgement of them can also make us humble and more open to tolerance and dialogue. Last month saw the warm and cordial meeting of the right reverend John Charmers, moderator of the Church of Scotland and his holiness Pope Francis in the Vatican. In his speech, Pope Francis said, we are pilgrims and we journey alongside one another. Let us be grateful for one another and for the fact that we now live and journey together in peace. Thank you.


My name is Ann O'Shea, and I'm here with some of our team, and we're going to talk about our project, which is about assessment for learning, and it's about developing resources for first-year undergraduate maths modules. So there's a lot of tie-in with the work that Tom has been talking about, and also Lisa's project. OK, so the partners, as you'll see, are Minuth University, AIT, sorry, DKIT and DCU, and of course the National Forum has given us the money. Most of the people involved are either from mathematics departments or engineering departments in those universities, and we're working together to try and improve the resources available for formative assessment for first-year maths courses. So our aim was to develop an audience response system that we could use in classrooms. There are lots of these around, and people have already talked about clickers and so on, but unfortunately they don't work so well in maths classrooms. So it's a work to a certain extent, but what we really wanted to do was to be able to have students draw a diagram, draw a graph, give a little calculation, and the lecturer would be able to get that feedback straight away and then be able to respond to it on the spot. So Seamus, who's here from the engineering department in Minuth, had already developed a system like this, and most of the work in this part of the project is going to be to develop that further, and especially for use in both Android and iOS systems so that students on their smartphone just upload this kind of stuff instantly. So I'll talk a little bit more about that later. The other part of the project is to develop tasks and resources to look at conceptual understanding in first-year mathematics courses and see how technology can help us with that. So in order to figure out what we should concentrate on, we conducted a survey of staff and students to find out what it was that both staff and students wanted, what kind of areas they thought their students had difficulty in, and what kind of resources they wanted, and what kind of resources also they actually use so that we wouldn't be reinventing the wheel. The audience response system, we don't have the system yet. We actually spent most of this semester hiring a programmer because we wanted to get somebody who would have the skills to do this properly, and we held interviews. We had a very good set of applicants. We held interviews and we got our first choice applicant as decided to take the job. We will start work next Monday, actually, and she will spend the summer trying to develop this response system. We hope that at least a version of it will be ready in October to start trialling in classrooms next semester. We also had discussions within the group over the last few months about what we wanted from the system, what changes we wanted from the version that already existed, and we have identified some things that we will include in the next version. The Staff and Student Survey, Katrina, has done a lot of the analysis on that, and she will talk about that in a second, but I just wanted to say that we met, the group met a few times over the year. The first meeting we really concentrated on how to design the survey, what we wanted to know. We designed the survey, we piloted it, we ended up revising it a little bit after that, and then we administered it. We had students in the four institutions where we had about 450 responses, and we also had a staff survey which we sent around to people who were involved in teaching first-year maths modules, and we've had 32 responses to that so far. The analysis, and that's from people all over the country, you'll see in a second when Katrina talks about it in further detail. So the data from this project is one of our major outcomes so far. The tasks and resources that we wanted to work on, we decided to try and come up with things that were in two camps really. There's a lot, a huge amount of resources available online already, so we didn't want to go and do everything again. So what we want to do is try and package a lot of the things that we really like that's out there, and be able to give easy access to people, to both staff and students to that. But also then we wanted to develop new things, where are there gaps, what can we do about it. So some of these things, you'll see the first one, a web infantry of useful existing resources. A lot of that has come out of the survey from both staff and students saying what they use, what they really like. So we want to compile that all in one place. Using Khan Academy, Khan Academy came out when students were talking about what they use quite a lot and also with lecturers. So Fiona's going to talk a little bit in a minute about how we're going to package those resources in an easy to use way. We also want to design, use some of the features of Moodle to design lessons. These lessons are where you can combine content and tasks in the same thing, rather than having some content and then click somewhere else to do a quiz on it. It's all combined and students can develop their knowledge as they go through. We also wanted to look at screencast projects. Again, there had been use, we had thought maybe we'll create our own screencasts. But then we saw some other projects, including some in Dunduk, where the students created their own. And we thought, yeah, that's a good idea. We'll steal that idea. So we want our students to come up with screencasts to share with the rest of their class. And we think that there's two benefits. We'll have nice screencasts that students have developed themselves, but the students in developing them, we feel that that's the real learning is going to take place there. And we also want to develop a suite of interactive tasks based on conceptual understanding, trying to develop conceptual understanding in different areas of mathematics that we have identified from our survey. And Shaleid is going to talk, are going to show you some of those that we have worked on so far. So I think I've probably said that stuff already. This is the progress. So we've got some resources. We're going to make a website, which we haven't, our programmer, when she starts is going to be involved in doing that. The lessons in Moodle, we have some prototypes already. We're not going to show you any of those today. We'll focus on the Khan Academy and interactive tasks. And I've already said about the screencasts. So I'm going to hand you over to Katrina, who's going to talk about the data we've got. And then we'll see some of the other resources we've developed. Thanks, Ann. So as Ann said, there were two surveys carried out, one for students and one for lecturers. So in the student survey, they were essentially asked for three different types of information, their background information. Then there was a set of likered questions, 23 different question types that were asked to rate their ability to do and understand those questions. And then a set of open responses where they were asked what particular topics they found difficult in the year and what resources they used to overcome those difficulties and then what would their advice be for us in this project in developing resources. So what I've shown here in the graph really is what came out of that survey is the significance of the mathematics leaving certain level that the students had, whether they were higher or ordinary level students. And you can see from that there that the vast majority of the students in D.C. and Minuth had higher level maths taken and in AIT and DKIT their ordinary level and their responses to the questions were dependent on their level of maths. In the lecture survey, as Anne said, we got 32 responses, 16 from the IOTIs and 16 from the universities, and they were simply asked for open response questions similar to the students based on the concepts and procedures that they considered were most difficult and the resources they would advise us to use. So if we look at the student likered analysis, when you look at overall for the understanding do, 77% of the students reckon they can do and understand all the question types. So, and there was a significant difference there between what higher level students said and ordinary level students said. The main areas that came out of that where they might actually agree they have difficulties on our functions and drawing graphs and so on. So I also made a note there that they were asked about differentiation. None of them really indicated that they had a problem in differentiation in the likered analysis, but when you look at the open responses they're all talking about the problems they have with differentiation and they included integration which they weren't asked about. So some of the likered obviously didn't match up with the open responses. Now when you look across the two, evaluate the two surveys together you see that I just took one example here of the graffing basic functions because 20% of ordinary level students indicated their problems with it. 25% of the students in the open responses indicated their problems with functions and graphs. And we also saw that coming up in the lecturers responses. They find the students, but the lecture responses might give you a bit more detail of what exactly the problem was. For example, there were a number of lecturers who said it was compositions of functions or the students had problems with domain and ranges whereas the students themselves couldn't really pinpoint exactly what their problem is with the area. I thought as well it's worth saying there overall the students responses were heavily based towards calculus and stuff like that whereas the lecturers responses were mostly towards basic algebra, basic arithmetic but when you delve down into them you see a lot of them saying the same things. And because we asked them the easiest topics and something that kept coming over again is that the student, I put this up here, the students said the things they'd covered in leaving cert. That's what they found the easiest when they came to second level. When we asked the students and lecturers about their resources they found helpful they were spread across books, handouts, videos, websites. Students found handouts useful because they're step-by-step examples and this came up over again, step-by-step examples and solutions. Lecturers found them helpful because students seemed to like to look at them in class and helped retain information. They also liked the Khan Academy, Wood from Alpha and then the lecturers mentioned things like the Math Centre, the Math Tutor and GeoGebra and as Ann said we're taking all those on board and developing our resources. In the advice zone resources as well the students equally kind of advocated they like printed resources, websites and videos. They like a print out even if it's unmoved and they can print it out themselves they like something that they can take away and have to look at the step-by-step. From the lecturers point of view most of them want online resources so again I said this is what we're going to develop here. One of the resources that we're going to focus on is looking at existing resources and listening to the students' responses to the surveys Khan Academy came up again and again and we're also aware of the Mathleets challenge that is bringing Khan Academy into second level and primary level that's going on currently in Ireland. The problem with a lot of the resources is that students felt that they couldn't name the topics. Going out and trying to find the resource that they actually need is a problem. Our idea here was to take one resource that students highlighted was useful and try and package it, try and using the topics that they have named as problem topics put together what we call a Khan playlist so that they could a bit like this so that they can go to this moodle package, this moodle course and they can be led through resources and directly to resources, videos and quizzes that they can use. That's the main focus of this element of the project but as it came up earlier it's very important that students can see and use these things in context and that lecturers are able to facilitate student use of these resources so we also want to through this moodle page highlight some of the functionality inbuilt into Khan Academy, the monitoring facility that's available through their coach class setup, the possibility of creating playlists and predefined missions which can guide a class group to particular tasks and allow lecturers to see what students are interacting with and to highlight problem topics very early and also the recommendation structure which would be particularly useful in learning support environments where you're trying to tailor resources to particular student needs so that's kind of the essence of what this aspect is about. We're also developing some interactive tasks. No, great. Sorry, does anybody know how I can show this on the drive window? Oh yeah, great, thanks. Yeah, drive it right up. Oh, thank you. Thanks very much. So we had developed some interactive tasks. This is one using GeoDebra which is a freely available dynamics geometry software and the focus in this part, these tasks is on conceptual understanding, developing conceptual understanding and students' mathematical thinking skills. So in this particular task we're looking at graphs of functions which is something the students have highlighted as problematic and the effect of adding a constant to a function, to a function value or to the independent variable. And I suppose this is something that traditionally students would have been shown in class, would have been told and then they would be required to remember or reproduce it. But here we want the students to explore the effects for themselves and to describe them. So here there are a number of different mathematical skills involved for the students to complete the task. They need to experiment. So the idea is that if we change the value of A here you'll see that actually we have a graph of two different functions. So if I change it to 1 and we want to see how the graph changes as the value changes over. It's 1.1. So the graph, the red graph, which is x squared plus A as opposed to x squared, it's moved 1.1 units vertically. If we change the value of A again, so if I change it to 5 for instance, it moves 5 units vertically. So we want the students to be able to recognise this and articulate it. And there are different things they can do with this apple, but that's basically the idea. So I won't bother putting up our last slides, but it was really to talk about the national impact and the top three things that we hope come out of this. And what we really want is that we create a bank of resources that are tailored to the kind of courses that we teach in first years in universities and IOTs in Ireland and that these would be readily available to lecturers and students to use, that the research coming from the project is going to be available not just to people in Ireland but disseminated around the world. We're going to a conference in September in the UK to talk about the data coming from our surveys and we hope that that will continue with the evaluation. We want to evaluate everything we do. It all should be research-based so we know what works, what doesn't. And that the app, the app's a lecturer and student apps for the audience response system, we hope they'll be useful in lots of areas, not just mathematics but we could see them being used in lots of STEM subjects in particular and that they would be readily available to everyone in the country. So that's it really.


Welcome, so we have 25 minutes to talk about freedom safety How the future of smart cities and autonomous driving is going to be impacted by technology and what that means in terms of our own sort of life choices liberty and so forth Briefly Simon Levine. I'm a venture capitalist at mosaic ventures We focus on series a investing across Europe and I should say I'm a Investor in nexar one of the companies here on stage. Perhaps you can introduce yourself Josh, too Josh Moore managing partner husk ventures. We're also investors in nexar I ran uber, New York for about five and a half years prior to that Bruno Fernandez an advocate of data also CTO of nexar and one of the co-founders So just to sort of roll right into this You know one of the things that often gets discussed is how quickly Will autonomous driving arrive and there's lots of estimates that have been put forward in the market You know perhaps Josh you you know from your uber experience where there's obviously been lots of internal debate What's the view there in terms of the range of dates that we can start to see? Autonomous driving arrive. It's a really good question I think in the in the u.s. It'll vary by city and how the Governments and and regulators sort of see it I think in places like the West Coast the desert where it's sunny and clear 360 days a year you'll probably see it sooner than in Manhattan But what people don't I think always think about is that this isn't going to be a big reveal Where all of a sudden we wake up one day and we see autonomous out there are our cars already have Features that are semi-autonomous controlling speed based on the Vehicle in in in front of us lane management things like that So I think in some ways we're already there today in Manhattan, maybe 10 or 20 years, but I think Bruno would probably know better so there's different levels of autonomous We should probably spend just 30 seconds on that there's famously sort of five levels of autonomous and you know today We're at sort of level two three You know the chap that lost his life on the Florida highway Driving into the side of a truck was it was in a cruise control mode in his Tesla Trying level three which didn't work so well unfortunately tragically for him But you know Bruno, what's what's the kind of necks of you on when we can start to see level four level five In the market not necessarily pervasively, but in a mixed environment perhaps and if you can give us a date That will be even more fantastic. Yeah, I think it's January 24th 2019 Seriously, I think level four automation which you know for folks who do not know about it Is this really when cars drive in safe environments that are actually known advanced we think it's still We'll see cars in the road probably in the next couple of years that actually come this actually Testing that testing that there's a trial going in Chicago right now So it's not like it's unknown now for that become mainstream. We think it's really they get away, right? Even level five, which is the next one in an environment is definitely multiple they get so so several decades away You know just by context, you know, how long did it take for? Cars to get penetrated into the population or a dash to get penetrated Maybe you can sort of help frame that why that's an amazing so we you know We came from search advertising into the space We didn't know much about autonomous cars. We just thought like, you know a lot of data will help and one of these we learn is like Mercedes Benz, for example, launched the first car Build the first car in 1886. It took 82 years until 1968 for the US to have 50% of cars 50% of the households to have cars So that's definitely not exponential like some people are saying now Hey, we'll put it on those cars and we'll come even if you look at more recently autonomous drive even adaptive cruise control launched by Mercedes Benz again in 2002 if you look at 2015 you know with 13 years later that was still 2% penetration you look in the market It's still 2% penetration adaptive cruise control So it's very interesting when I talk to you guys as VCs and I go around like hey It's a soul problem. We got like oh my no straight in my denation cars Do not have these today and they will not have for decades to come So to summarize the sort of view here. We heard it both from Josh the uber task for you and Bruno at Nexar is multiple decades Before autonomous driving becomes pervasive and we can kind of give up the steering wheel And I guess in the meantime what we're saying is there'll be some kind of mixed fleet on the road or heterogeneous Vehicle population is that that that's next ours key assumption about how we design the company is Let's not wait decades for that to come. Let's start actually getting a hybrid environment between humans and cars Autonomous cars if you look at autonomous cars one of the issues they have is like, you know You come to an intersection and there is a human driving another car How do I tell us the autonomous car tell the human driver that I contact you and I have when we drive in it's like Yeah, I want to go I don't want to go you let it pedestrian go you you kind of move your hand you flash the lights all those things we do Humans cars kind of do it. So you need something else. That's what Nexar is It's a network that connects the car so that whether it is a human on the wheel or some autonomous car in the car You can actually start solving autonomy now And so just to put that in context I think there are a billion plus cars on the road today worldwide The fleet is getting renewed. You know, there's maybe 70 million plus new cars each year So just to cycle through what's there is already a 15 to 20 year replacement Cycle and we're saying that given that not every car today is autonomous. That's being put out on the road many decades So But I mean, I feel like I should stop you there I think will you know 100% of the cars be autonomous in Helsinki in five years or ten Maybe not for 100% for it to be perhaps even illegal to drive your own car decades away I agree, but I think it's going to be much sooner To this hybrid world where Trucks going across long journeys are going to be driving themselves where there is an Uber Lyft, etc Option for autonomous driving. Some of these services are already piloting this You'll start to see humans getting less involved right now There are certain cities where you can request an Uber and a car an autonomous vehicle with a sort of a Safety engineer in the driver seat will pull up I think over time that person may be leaves and it's monitored remotely or they're shifting to a different seat I think you will see those kind of changes where it'll be possible for everyone here to have the experience of an autonomous trip Within five years. I think it's further away to a complete autonomous Jetsons type society Maybe on the the open road environment I think I would agree right if you look into what automotive car manufacturers are doing today What is in the road? What is in the pipeline driving in a freeway driving a daytime diamond sunshine driving a truck platooning use cases for trucks Those are going to be solved in the next five years driving in an urban environment with snow with fog You know fiends here for example when they take a driving test They actually need to drive in the snow and sleep the car There's no autonomous car that's going to be able to drive in Finland the snow for decades So I have an iPad here with questions from the audience I encourage you to to prompt me like this, but someone saying why do we need autonomous cars really? So what what is the raison d'etre? Is it safety? Is it because we're lazy and we want to be watching a movie? You know, what is the reason that autonomous cars are important? So you so I'll do the productivity. You know, we are Wasting, you know billions of hours in cars For commutes, I don't have the stats off the top of my head, but people spend a lot of time commuting I think we can all sort of agree to that And if you could repurpose that time to be productive to be able to really engage in Conversations to get work done to watch a movie whatever that's a that's a huge benefit to society Which I think is probably the second Most important thing the first most important thing is safety really so with Next are the reason we created company was actually safe in lives and he came we came to realization There are about 1.2 million people that die on the road every year We drive as a community 10 trillion miles and the 1.2 million miles Sorry one 2 million people that died on the road the cost of society per death is two million dollars So you start multiplying those numbers you go like Beyond the personal drama that represents. It's a huge cost to the economy. So two three trillion dollars So that's a few a few percent of world GDP each year We're losing on the roads and not necessarily and he's preventable Which is that the thing that I think drives us as an XR and many other companies to really try and solve the problem You actually see that the technology the computer vision technology and the radar technology The artificial intelligence required to solve these problems available now So you could be very very cautious to wait decades to roll it out or start rolling out Progressively and start saving lives now and so that was the the mission of next are why you co-founded the company Can you just spend maybe 30 seconds telling the audience a little more about What that instantiates itself into today and the roadmap for the company going forward So the best way to look at our company is if you go to New York, for example We have you know a large number of Uber leaves Juno's get How many cars on the street on any given day are you next in a good day They're probably about five six thousand cars in New York that are equipped with this Which is roughly about two percent of all the hours of driving What these does is what are you driving while we're trying to do is these cars to be connected to each other So the humans can talk to other humans in this case the computers talk to their computers when they drive around They're issuing warning. So right now we get in tens of millions of warnings. Does this people drive? They're actually getting those warnings. Hey, there's something that is 15 seconds ahead of you and that's actually really critical because all their Technologies that can help you like a radar a lighter again What you find in a Mercedes Benz we find a BMW you find in Tesla even has a range as far as the camera goes You just go 150 meters Maybe even 200 meters. I was just really far But in an urban environment your blog to have a car in front of you There's this maybe a pedestrian crossing. You don't see it That's exactly where we're trying to get to and that's the world that you can experience already today as an Uber driver in New York So it's a kind of vehicle-to-vehicle mesh overlay network kind of like air traffic control that's Augmenting the driving experience for those Uber and Lyft drivers. Is that correct? It is correct It's air traffic control, but imagine, you know You know, there were 10,000 airplanes in the air at any point in time So right now, you know, you look over at our skies 10,000 planes on the road at any point in time There are 250 million cars so air traffic control is centralized you can centralize it Well, we're trying to build is a decentralized Cooperative overlay between these cars actually regulating the traffic regulating safety and so You know at what degree of penetration do we start to think that there will be Safety benefits and how big do those have to be for it to make a difference? in in our world with because you know So the answer would be if you were trying to just do DSR That what it's called vehicle-to-vehicle technology or Wi-Fi Which is the approach that the regulators in the US and Europe have tried for many years You would really require 25 30% penetration, which is very very high So it's a lot of people have got a co-operate and it's a lot of time It's a lot of money a lot of time right so that's you know There are studies that say it's a cost to the US economy alone about 200 billion dollars over a 40-year period It's about 2.7 to 3 billion dollars per year at the peak of 2023 and actually takes seven to eight years for that 30% to happen Now our approach the next our has been V2B is just part of a solution. It's not the solution You need a camera you need other sensors to actually help you when you do that and vehicle-to-vehicle Over a cellular with a camera with all these things that are available in your phone that everybody has we seen that at 1.5 2% that's 10 times less in terms of percentage right we start seeing that vehicle-to-vehicle Actually has impacts in preventing collisions and we measure it We have 25% recorded less collisions on people who are exposed to these than people who drive in a control bucket And Josh when you are managing the uber fleet in New York Obviously, you know 5,000 of drivers a day using nexar was it a popular product with the drivers? Was it did they feel safer in some way shape or form? Yeah I mean so just to back up what the what the product is the drivers are putting in their cars on a phone a little Video camera so the reason that the penetration can be low But still have that outside impact is because from that screen it can see all the cars on the roads You're not just getting the vehicle that it's in but also anything that that's in line of sight the safety benefits Are not theoretical the insurance companies that New York City uber and Lyft drivers have to buy insurance from Which can run four or five thousand dollars a year We're getting 10% off just for using this product because the insurance companies right away saw that this had a tangible impact on Risk and they priced it accordingly so drivers were thrilled it gave them the security of having the camera running So if there's an accident there's some kind of evidence, but also the insurance companies saw that They understood the technology and the benefit and the kind of alerts the drivers could get which could ultimately keep everybody Safer and we're willing to reduce the rates because of it Okay, so the title of this panel was freedom or safety and what we've heard The two of you say is if we can build an autonomous co-existing fleet We should be able to prevent many of those 1.2 million deaths and not you know countless other accidents maiming an injury Property damage and so forth. So that's the payoff the cost is Quote-unquote freedom and so there's different parts of that But we should try and unpack it for the audience because there is a a moral ethical element to this discussion And in particular if you're putting all these cameras Real-time creating an overlay that ultimately is Creating a kind of digital representation of the public space in real time There's a privacy issue. That's so why don't we spend a few minutes just on that question, you know From an uber perspective from a nexar perspective, how do you think about privacy and who owns the data? So I don't work at uber anymore. I'm not going to speak for them I think in in society there are trade-offs that we implicitly make you were you were saying this yesterday when we met You know, we have to drive on on roads and stop when the light is red and start when the light is green. These are sort of These are we give up our liberty just to go through the right light I can't just drive anywhere. I want I have to obey traffic signals They're sort of these societal norms that all existed when we were born and so we sort of accept them You know, I think the the trade-off will be easy saving lives for a little bit of freedom that says for example You can imagine when my car pulls into a stoplight. I lose control for a second It sort of you know locks me down or I'm just sort of making this up But it controls when I do the turn or it tells me that something is coming Those will be worthwhile trade-offs, and I don't think that to me seems like a no-brainer And Bruno the way that we we at nexar have thought about things is the data owned by Governments is it owned by the users themselves? Is it some kind of shared entity? Our model is the data is owned by the users and from the very beginning, you know, it's true We had a governance approach does Can we share the data with them? Whether it's for enforcement or any other purposes and our policy has been very clear We do not the data is owned by the user and that's it But the issue I think is more profound than that right is we can now extract out of the data things like What are the traffic signs? Where are the parking spots? How many counts of people are if? You know somebody came to the company could actually start extracting faces and license plates and recreate your whereabouts So I think them the more fundamental question to us as nexar is how do we want to do that? Do we want to let the governments run these things for us? I'd be looking at UK right in London today the three to five million cameras on the road It we're already living in the panopticon in London. We just don't know it ultimately. Yeah, so the question is whether you want To be the governments that actually ran that and who controls the government or are you okay? That is an environment what is open where users actually have access to the data themselves They can use it to defend their civil liberties and we had a few cases actually in the US with you know The police the cops stopping some of our drivers at a traffic light after doing what is called a California role and the driver say well Here's the footage Demonstration that I haven't done it so to a degree what feels like it could be a bad side effect Actually, I think for the people who truly care about their civil liberties. It tends to be actually a good thing so transparency empowers citizens or empowers non-governmental entities to Provide a record of exactly what happened okay the what about sort of folks who Kind of think about their car as a symbol of liberty and kind of driving down the desert highway You know, is that something that our grandchildren are gonna enjoy or instead they'll be reading a book and Catching up on Wikipedia instead. I sure hope they don't have to drive. I have a three-year-old I've basically made a bet that she'll never have to learn how to drive and I think I think I'll probably be be right about that And certainly as a parent that's sort of a wish of mine That's an incredibly dangerous situation when young people Learn how to drive and they go out so to avoid that, you know entirely I think would be a really great outcome and Let's assume that Your daughter never does have to drive one of the questions we have From the audience is Her car that an algorithm is driving with a network overlay provided by Nexar or someone else Has an accident Who's responsible for that from a legal perspective from a moral perspective? Is it The algorithm that was driving the car Well, I think I'd have to know more about the accident of my you know as long as she's okay I guess I don't really care But as far as the like general sense of whose fault is it? It's not always easy to ascribe fault in accidents today, and I think there'll be a case-by-case I think there's sort of a myth about what will the car decide will it hit the old people or the young people? That's not really how it works There will certainly be Malfunctions in the idea of the the Tesla accident that you mentioned at the beginning a white Truck sort of pulled in I don't know all the details But I know that it was white and the and the sensors didn't quite understand See it against the horizon. Yeah, and so that's a bug and In that case at at the same time the driver was not Using the autopilot the way that it was supposed to be used You're supposed to be alert and sort of hands on the wheel And so I don't know but I think it'll be case-by-case What I do know is I'd rather trust Machines even if they make mistakes when they're ready for prime time I'd rather trust the machine than everyone's sort of own fault and falling asleep and being drunk and being Distracted and all those things. Yeah, so in the aggregate the world will be a better place Just one or two other questions. We have a few minutes before we have to wrap up From tarot asks who will own the the data and the platform is this another kind of Google and Apple Amazon Network effect, you know, how does citizens or the public at large? Feel that their side is being fought for right so As I mentioned next are we all the data that people record belongs to those people What we are saying is we would like to use the data to develop autonomous drive technology We use the data to learn the algorithms, but we do not actually use the data for any other purpose If we were to provide the data to an insurance company It would be for example because you was as a person driving says like I want to benefit like in New York, right? I want to get a 10% discount Then is you who obtain into hey next are can you please share my data with insurers so I can get a discount? But we are not going around and sharing the data The only artifact that we create is really the one that generates safety and generates welfare in our society by removing those Lives that cost two million dollars each Going back to how we started the conversation At what level of kind of density do we start to believe that Those lives are going to be saved. Are we there at three four percent in New York? In the next year is that already going to have an impact on road safety in the city? I think the wild factor will happen in New York Within the next six to 12 months When we will have a car every minute a car every 200 meters a car in every intersection all the time And when you come to make a left turn when you come to make it right turn You don't know whether there is a pedestrian or there is a car and we can warn you That would the first time that somebody is that worried they'll go like wow I couldn't see a cross the corner I couldn't see there was something behind that track. So the point is it's not a theoretical discussion about 12 months Yeah, this is in the next six 12 months and Hopefully that saves lives I'm trying to think if there's anything more that we can add to that Should everyone download the next our app on their phone right now. I should feel free to do some Probably give a little in any market. Okay, wonderful. Well, thank you very much Josh from task Bruno from next are really appreciate being here on the slush stage This is a real fire. It's actually hot. I Just thought everyone


Hey everyone, this is Gabby with Brain Education TV. If you're new to this channel, consider subscribing. We make weekly wellness videos for the brain. And if you're already a subscriber, welcome back. In this video, I will talk about consciousness and how the different levels of consciousness can affect your life, your happiness, and even your enlightenment. So what is consciousness? Consciousness is the state of being aware and responsive to your surroundings. It's like your awareness and perception in the present moment. So why does how conscious you are matter? It matters because it shows how connected your mind and your body are. Think about this.  If your mind and body are too disconnected and if your consciousness isn't in the present moment enough, you can feel scattered, anxious, depressed, and all those kinds of emotions. But when you take time to bring your consciousness to the present moment and connect with your body, you can feel more calm, more relaxed, and more at peace. That's why in many yoga, tai chi, and meditation practices, the teachers always tell you to bring your awareness into the present moment so that you could create that bigger connection between your mind and your body. Another interesting thing about consciousness is that there are levels to it.  So we use a chart like this created by psychiatrist David R. Hawkins to study the levels of consciousness and their different frequencies. If you look at the chart, for example, and see that your consciousness level is in fear, apathy, guilt, or shame, you can see that what you experience is in action. If someone is in those levels for a long time, that's when people become depressed, suicidal, negative, and life just doesn't seem to work right for them. If you ever feel those emotions, you can see that they are in the levels of force. In force is something that low human consciousness levels live off of and thrive on. When you go up the levels, you can see that the more higher and positive levels of consciousness come from a place of power, genuine power, and strength in living virtuously. When you move up more, you get into desire, anger, and pride. These are linked to hyperactivity, which are also not good, especially if they come from a place of overindulgence and having too much pride for yourself and others. If you move up even more into courage, neutrality, willingness, and acceptance, you can see that when you're present in those levels of consciousness, you can have better chance of happiness and productivity. The level of reason is shown to have peak performance without any stress. And then finally, when you move up into love, peace, joy, and enlightenment, those levels show to have extraordinary outcomes for you and your life. So your consciousness level can change by the minute, depending on what you're feeling, thinking, and your mood. And it tends to be harder for people to get out of the lower levels and stay for a long time in the upper positive levels. So the key here from this chart is to raise your consciousness level as much as possible through meditation, training, connecting your mind and body, being more in the present moment to create what you want in your life and get positive outcomes. Looking at this chart, what do you think your current level of consciousness is? Your current state of being at the moment. As you're living your daily life, try to take notice of what consciousness level you're mostly living in. Are you mostly in a place of anger, shame, or pride? Or are you mostly living in a place of peace, love, and acceptance? I will link three videos below that we created on this channel and they can help you get out of lower consciousness levels like anxiety, depression, and negativity so you can try them out and see how you feel afterwards. So that's all for today's video. I hope you enjoyed this mini lesson on consciousness and the different levels of consciousness. If you have any questions, comments, concerns, please leave your comments down below. We check them and we answer every single one. Okay, thanks for watching. Make sure to subscribe for more videos and I'll see you next time.


Hi, I'm Alexandre, a security researcher at Yoast Secure, and today I'm with my colleague Olivier to showcase our RDP Interception tool, PyRDP. PyRDP is a tool that can be used to perform real-time RDP interception, which we designed to support both honeypots for malware research and offensive capabilities for intrusion test engagement. Today we'll be highlighting core features for both use cases. In this section, I'm going to introduce you to PyRDP's core feature set, which can be used in both offensive and defensive contexts. In the environment for this demo, we have the PyRDP system deployed in front of a Windows Server 2016 system. PyRDP is running on a Linux system and deployed using our Docker image. The client will be a Windows 10 system running Microsoft Terminal Services, also known as MSTSC. In its default mode of operation, PyRDP will collect a lot of information, but only output significant events in its logs. The player component, which has more granular information, will be demoed later. Let's take a look at the default flags to use PyRDP. In this example, we run it via Docker, and we map a volume here to make sure that we have access to the artifacts generated with PyRDP after our demo, after the interactions. The dash P here is to give the host access to the port, so RDP being on 3389. This will ensure that any connection to 3389 on the host is redirected to the Docker image. This is the Docker image name of the latest PyRDP. The monster in the middle executable that is used here, and this is the target server. Whenever something connects on 3389 on this system, it will then forward the connection to this IP address and do its monster in the middle capabilities. Let's start the PyRDP man in the middle. You can see that SSL information or private key and certificate are generated upon the start because we didn't give them in the Docker image and the volume, so they don't exist and they are created on the fly. This should probably be customized for most users. Now let's take a look at what we have if a user connects and plays around. I'm going to start the Microsoft client here. You can see the certificate error that is being generated. The PyRDP system by default will create a certificate for a host name called www.example.com. This is probably not the best.  We provide a tool called PyRDP Clonesert to do that. Clonesert will connect to a specific server and copy the information from the certificate in a certificate key pair that you can then use with PyRDP. This is the reason why we built this tool, is to train users to avoid clicking through certificates. Since if there is an attack tool that is efficient, then users will be enticed to be more careful, just like what Firesheet does with the SSL attacks. It changes the mentality of a lot of people and made TLS enabled by default everywhere. With PyRDP we hope that system administrator will be more careful about those certificate errors and deploy PKI internally, which is very rarely the case in our engagements that we see. So we're going to click on yes. Now we can see several interesting things happened on the log section of the screen. You can see that the client random is logged, which is very interesting. If you ever take packet capture, you can then decrypt and do very granular protocol level analysis of the RDP connection. On the system we get a password prompt, which is different than the usual password prompt because we downgrade the authentication and it's now interactive. It's now part of the session. So I'm going to write the password, made a little mistake here, I'm in. There's a secret file on the desktop. But you can see in the logs that channel information is logged, username since it was not typed and not sent by the client is not there. You can see that clipboard data was instantly intercepted. You can see that there is credential candidates from heuristic here, scary demo gods. This is being done with a heuristic since it doesn't happen at the protocol level. We are interactively entering credentials inside the started RDP sessions. That's because we are downgrading the client's request for NLA, since NLA will resist two monster in the middle attacks. This attack resistance is rather complex and has been partially circumvented in specific cases, which we will cover in the Honeypot section later. By default, the clipboard content is intercepted. And we can see it, we'll demo it right now. So if we open this many secret file and we put it in the clipboard, you can see right away instantly that it was intercepted on the server side in the logs. What's interesting that you might not have noticed here is that I didn't interact with the MSTSC client when the output showed in the logs. So let me just give you an example to highlight it again. So I copied in Notepad, not even touching the MSTSC client screen. However, the information was sent to the server. So the clipboard content is being very shared, very enthusiastically with MSTSC. And also this is what happens with most RDP clients. Let's copy a few more times just to see. You should be aware that this goes beyond this. So this Windows machine is in a virtual box system running the MSTSC client. The virtual box will also notify the guest, Windows 10, of clipboard events that happen on my host. So this is very interesting because, for example, if I would paste a logline here on my clipboard, what we would expect is the information to flow from my host to my guest, from the guest OS clipboard to the MSTSC client and then to the intercepted system. And the expected happened. You can see that the clipboard data is visible here. And it happened pretty fast. So this is a very interesting capability that will probably allow some information to be leaked if we ever intercept bad actors or in a penetration testing context. You can gather a lot of information if an administrator leaves an RDP window open in the background for a long time. You'll be able to get clipboard content with most likely sensitive information, including passwords, if the user uses a password manager like KeyPass. What happens here is that PyRDP just receives a message about new clipboard content and will send to the client a message saying, I need it. The content is then never forwarded to the server. So it's just a standard operation. There's no update of the clipboard on the server side. So next up in the demo is the file collector. RDP allows clients to share a drive UPON connection. Let's configure it. So let's disconnect. We go in local resources and then we can share whole map drives. That's interesting because the share is not at a very granular level. So this gives a lot of opportunity for attacker. A new warning is given to the user saying that it's potentially dangerous and it can harm the computer. So that's very interesting and it's new. It was not there on older MSTSC clients. Same certificate error. Let's take a look at the file share in action. So we can see that the C drive on engineering 13, which is my client, is visible through the RDP session. What happens if we click on it is we get access to the information on it and we see at the same time information being collected by the PyRDP system. If we open the secret.txt file on the root of the C drive, we also notice that the information was saved by PyRDP in the output folder. To finalize this part of the demo, we're going to stop PyRDP and look at the artifacts generated. The PyRDP output folder has several items in it, replays, which are recordings of the exact sessions, including keystrokes and screen capture, which can be replayed later. There are logs and there are files. If we look at the logs, we can see that the SSL log is also here, available here. So this is very useful, again, if you do packet capture in order to decrypt them with Wireshark or other tools. There is a JSON logs, which will be covered later. And there is a Man in the Middle log, which is the exact output that was available from inside that you could see on the command line. And if we look at the files, then you can see all the files that were collected by the system. We can take a look at the secret file that we saw earlier, loaded from the C drive, is here with the content. The mapping of the files to the events is available through the log files. This concludes the PyRDP demo of the monster in the middle component. If you need fine grained content like keystrokes and see the screen during an active attack, you need to combine the use of the PyRDP MITM tool with the PyRDP player. Let's launch both tools right now. Here I'm bringing up the previous command that we used to run just the monster in the middle component. And now I'm going to add dash I and an IP address to this execution. The dash I flags tells PyRDP to send recorded RDP events to a PyRDP player over the network. This allows a player that is decoupled from the attacker's machine like the setup we have here. Now we are going to launch the player on my local system, PyRDP dash player. You can see that it is a QT interface and that it has tabs for live connections and replays, so live activity and replay or previously recorded activities. Let's connect a client to the monster in the middle and see what the player sees. In order for the demonstration to be complete, we'll ensure that we have a map drive here, so the C drive is shared upon an RDP connection. Then let's connect. You can see that there is some activity already happening in the player interface. Now you see that a tab open called engineering 13, which is the host name that is sent by the client. The screen is visible, including the pointer position, which is hard to see right now, but if we see here with the yellow dot, now if we enter the credential, you can see on the below interface exactly the keystrokes being inputted, including special characters like space and shift or control. This is very interesting and important to have an accurate representation of the connection, which could be used in many contexts. You can see that you have also a pixel perfect representation of the interactions. This can really demonstrate the impact of an attack on RDP to executives, for instance. Additionally, if the client mapped a drive, you can explore his drive without his knowledge. So we can browse here and we can right-click and download a file on our local system RDP demo, download this here. You can also browse and explore the user's file system. So here, for example, we are loading into Dave's files and looking at his documents and we can download the many secrets files. Then on our system, RDP demo, here we go. This is a pretty interesting demonstration of the dangers of mapping a drive. You basically allow the server to query anything using file.io on your map drive. Normally, that is fine, but as you can see with Pi RDP, it can be abused. And it could also be abused with a malicious RDP server. Another feature of the player is the take control button that you can see right here. This will be demonstrated later by Alex in the offensive section of the demo. Lastly, is the ability to replay previous captures. This is called a replay in Pi RDP's context with the player. I'm going to demonstrate to you by loading a previous capture for our previous demo. So this is Susan's interactions. So what we see right now is the state, initial state. You can see that you can change the speed, play. And once you play, you do have the clipboard events, not the clipboard, but the keyboard and clipboard events at the bottom of the screen. You can also seek in the video. We see the clipboard data also here. You can scale the window so that it's easier to see globally, especially with 4K environments. And you can increase the speed of the replay. So this is very good if you're hunting for a specific session for specific interaction. This concludes our demonstration of the player's features. Pi RDP also comes with a converter tool that can be used to convert pre-recorded replay files into videos. The converter tool also accepts PCAPs and can output to replay files. Let's take a look at its option. Here we will convert a previously recorded session into a video that we will play. Pi RDP convert, P4 as the format of output, input file is RDP replay. And let's have a default output file name. Now let's look at the resulting file. In this section, we will describe Pi RDP's feature that are useful in the context of running honeypots. Part of Pi RDP's honeypot features is a headless mode. This enables server-side deployments running it on non-X86 systems like a Raspberry Pi and allowed us to significantly reduce the size of our Docker image. For example, this is a cloud system where we want to deploy Pi RDP and we are going to run the headless image. This is the common line from Pi RDP. This pulls in the latest master branch image and we are going to use the slim tag so that we are going to use the smaller version of our image without the graphical interface features and the video conversion features. Now let's see how long it takes. The new image is 70 megabytes, which is pretty good for a Python Docker image with native code, down from 600 megabytes for our latest release. And you can see that the service is running right now. Headless mode also means that we needed a headless player. Otherwise keystroke data is unavailable for command line enthusiasts. Let's see the headless player in action. We can remove the port, it's no longer required for the player, but we still need the volume mount. If we look at the options, we can see a dash dash headless at the bottom. So usually the player is the graphical interface with the QT, but the new headless feature allows us to look at replay files without the GUI. The lina file, the dump is one-shot deal. You get all of the output at once, but you can go back and see everything that was collected, including clicks and stuff that was sent during the connection. So as is common with the beginning of RDP sessions, you see a lot of control character released or impressed in order to reset everything. Then you can see that I entered credentials, so demo. So the password is scary demo gods, and I made a mistake here. So this is lowercase o. You can see also the backspace that are pressed. So I started with demo instead of scary. So DE, backspace, backspace, scary. But then I made a mistake, so I authenticated again. You can see that as soon as I was authenticated, the clipboard was shared, and this was my notes was sent to the server. Then you can see some clicks. And then during that demo, I pasted several secrets to show how easy it was to leak data to the server system and easy for our PI-RDP to collect. And then I disconnected, which ends the stream. So with the headless player, you have access to all of this from the command line instead of having to load the graphical interface. Another feature specific to Honeypot use cases is credential replacement. This allows your Honeypot to accept any credentials entered by the client and relay to the server the correct set of credentials for login.  So let's do the demonstration. For this, I'm going to go back to using the man in the middle. As you can see below, I'm going to input the correct credentials for the VM and start the man in the middle. Now, using the MSTSC client, I'm going to put a different username here, admin lulz, to make sure that it doesn't exist. And I'm going to try to connect to the Honeypot. I have the warning because I have a map drive and I have an error. Let's try again. OK, transient error. So we have this certificate error and we got connected. And if you look at the log, you can see that in the client info, the admin lulz was supplied. PI-RDP has the ability to intercept files in transit and to allow client file system exploration from the interactive player. Last year, these capabilities were extended to allow active file querying from the monster in the middle component. When a client connects, PI-RDP will list map drives and download all the files which match a specific list of allowed files patterns. Let's see this in action. So we issue the same MITM command as during normal operation, but we add the crawl flag. Let's run it. Now we connect from the window system and its files using a map drive. And its files will be explored by the manager middle component. Let's connect. So we have the certificate error. Yes. Now what we see here, we need to authenticate before the file system is exposed to the server by the client. We authenticated. And now what we see here is a begin crawling disk C, saving secret to PI-RDP output files, Claudia secret.txt. So this file was at the root of the C drive. And so this is why it was the first to be collected. And it was quite fast. You'll also be able to notice that the directory structure is respected. So as the crawling happens in the background, the files are going to be recreated locally on the PI-RDP system. We can see it's starting now. So it matched a directory in the user's folder and documents, stuff.ssh, and then stuff passwords that keep pass database, flag, and so on. And you'll see also that temporary files and executable under the user directory are going to be saved by default. So it can take a while to gather all these files based on network conditions. The list of files to collect or to ignore can be tweaked on the common line. So with this feature, we hope that we'll be able to gather very interesting information, especially on Hunnepot system deployed in the wild. PI-RDP can also be used as an offensive security tool to gain a foothold or pivot within a network. Let's look at some attack techniques. Session hijacking can be used to take over an intercepted RDP connection. First, PI-RDP-MITM is launched with the target server and the player address to connect to, in this case, local host. Next, the player is launched and waits for intercepted sessions. The player can handle multiple sessions at the same time and will automatically display the live feed of the connected session. Clients who connect to the malicious server will receive a certificate prompt. The certificate can be customized to spoof the common name of the server. The likelihood of the certificate being accepted is considerably high, since most companies do not deploy fully signed private key infrastructures for RDP. After a successful connection is intercepted, the player can be used to monitor the screen and input of the session. When the attacker clicks the Take Control button, PI-RDP takes over the session and redirects all player inputs to the server and all server output to the player. The real RDP client appears frozen during the hijack. Once the attacker is done, the session is returned to the client, which unfreezes. This technique is noisy, but looks like a network error to the untrained eye. After the real client recovers control, there may be artifacts on the screen because the server and client will be out of sync. In order to avoid that, the screen should be left as closely as possible to its original arrangement when control is removed. Priority-specific server does not scale well during engagements, because it will most likely redirect intercepted sessions to a server which isn't the one that the client tried to connect to. Priority-P supports transparent proxying with the help of a few firewall rules. Note that this technique only works on Linux and requires running Priority-P as root to use IP transparent sockets. Use the firewall rule templates from the documentation directory and modify them to reflect your environment. Here, we use the address range that we will ARP spoof. Because we're spoofing the stuff that we are in, we exclude our own IP address to prevent packet reduction loops in IP tables. Next, create a custom running table for Priority-P's intercepted connections. Table ID is a number identifying the table. Ensure that IP forwarding is enabled and create a pre-routing rule that will mark all traffic distance to the server range for transparent proxying by Priority-P. The last firewall rule is used to mark traffic coming back from the servers to the clients for transparent proxy. The last step is to ensure that Mark packets use the Priority-P routing table created earlier, which will be responsible for delivering the Mark packets to Priority-P through the loopback interface. With the firewall configured, make sure to launch Priority-P as root and provide the transparent switch to enable transparent proxying. Start better cap on your LAN-facing interface and ARP spoof the subnet to intercept. Here, we set ARP spoof internal to true because we are spoofing our own subnet. This is not required when spoofing an adjacent subnet. For the demonstration, we are only spoofing one client. When the victim attempts to connect to their destination server, they will be intercepted by Priority-P, which will then establish a connection with the intended server. This technique scales well for internal engagements and worse in combination with other attacks. The last technique that we will cover is command injection, which automates session hijacking to seamlessly run a payload for an intercepted connection. Using the same transparent proxy configuration as the previous technique, start Priority-P with a PowerShell payload that acts as a stature. This stature will query a web server which hosts the real malicious payload and execute it in the context of the intercepted session. The payload delay and payload duration parameters are used to control when the payload should be executed and how long to hijack the session for. The malicious payload consists of a simple PowerShell reverse shell for demonstration purposes. This shell will connect back to the Priority-P workstation on port 888. Start Minusploits multi-handler to catch the reverse shell once it is established. Next, use Python's built-in web server to host the payload that the stature will retrieve. Make sure to disable exit on session so that multiple sessions can be intercepted. Lastly, start ArmSchoolP to intercept RDP sessions as they are established. Once a session is intercepted, everything will proceed as normal from the client's point of view until the payload delay is reached. After the delay has elapsed, the client session will appear to freeze while the payload is being delivered and executed. The stature retrieves the code from the server and executes it, causing the reverse shell to connect to the Metasploit listener and giving the attacker covert access to the target server. Even if the client later disconnects from the server, the reverse shell persists. This technique is powerful and we can easily resolve in multiple sessions when using less detectable payloads. This concludes our brief tour of priority piece features. If you'd like to see the full feature set or get the source code, make sure to check out the priority in GitHub. Lastly, if you have any more stories to share, we'd be happy to hear about them. Thanks for watching.