all right so I love the mythbusters right I'm I'm here with my people because you all clearly love mythbusters too but for me it's absolutely because I'm an information addict and I like to learn new things and they they address things but not just pull up like random bits of knowledge but then like test figure out and actually decide whether it was you know factor fiction you know truth or myth and I think that we can apply the same kind of system to learning a little bit about securing our WordPress sites or even better yet just sort of being secure on the internet kind of securing ourselves and so that's kind of how I want to go through it I want to look at it a lot of these things that we hear about security and address whether they're actually helpful or whether they're not whether they're factor fiction and and I'm gonna start with security is scary right it's it's this big thing that we we know we have to figure out because we live on the internet and so we start to try to you know slowly plod through this weird thing investigating it figuring it out but at some point we all make this mistake where we get on Google and we do some sort of search and then the results come and we weren't really prepared it just absolutely overwhelms us and freaks us the heck out right it's too much you think I can do this no I can't do this it's terrifying there's no possible way that I can take on this whole security thing but that one's busted okay security is not that terrifying it's a lot to take in but it's not that terrifying so I'm Aaron Campbell I lead the WordPress security team so I dig into a lot of these bigger slightly scarier security issues this is Aragon Aragon was a family pet for about 10 years or so she is a bearded dragon the exact same kind that was in that video scaring the heck out of that cat and she she's actually super friendly and docile and she loves to just sit on your shoulder sit on your lap and watch TV she's vegetarian so that cat had nothing to fear it wasn't actually Godzilla but to be fair she's like an 18 inch long lizard and she does appear a little scary especially for people that don't particularly like lizards but my experience with her did not start like this when we got her she was about two and a half or three inches long and she could sit in the palm of your hand and and these things that look like scary spikes they were they were these soft little tiny things and and so handling her and dealing with her sort of every day as she grew I know that these spikes aren't spiky they're soft you can pet them they're gentle it looks scary but it's not but it's because I started at the beginning I didn't just try to jump in to the deep end so to speak and I think that if we do the same with our online security if we do the same with securing our websites if we start out with the basics and sort of grow and build our knowledge base then we'll be better prepared to sort of handle everything as it comes along we hear all kinds of things like it to me security isn't like figuring out how to secure your site it's not hard because of a lack of information it tends to be hard because of an overwhelming amount of information that contradicts each other there's so much information online so many people saying you have to do this or that to keep your site secure and those are the things that I want to look at first one of the things that you hear all the time is that you have to update update update update update all the things update wordpress and plugins and themes and if you run your own hosting you need to update PHP and your your database server and whatever it is update always run the latest that will help you stay secure but is that the truth does that actually help keep you secure who thinks that this helps keep you secure online updating all the things yeah who disagrees yeah so this one is absolutely confirmed I'm gonna start with the easy one here update update update update always especially around wordpress this is one of your sort of best things that you can do to keep yourself secure online and the counter argument that I always hear is but when a release first comes out isn't it more buggy isn't it likely to have more security vulnerabilities in it shouldn't I wait for the sort of point one release right or the the next iteration and no it's usually not could it potentially have more bugs and new features that's a possibility is it going to have more security vulnerabilities no every security vulnerability that we patch in wordpress every time we find a thing and we fix it we fix it in the current version absolutely so we're gonna you know the release of what you know whatever point something and then we fix it in older versions if that's applicable so that people still running some older versions can still update and get the fix and we also fix it in the next version right then at the same time so when that next version comes out the fix is already in the codebase it's already been sitting there we don't have any additional security vulnerabilities that have not been you know that have been handled for our current version that have not already been taken care of for our future version and so this is just how wordpress functions you can trust the that the updates are going to be the most secure version of wordpress that we know to exist and one of the most common ways that a site is exploited is through known vulnerabilities in older versions being you know programmed into a system that's just running through and looking for anyone running an old version of wordpress and breaking into sites so keep your stuff up to date something that I hear pretty consistently is this idea that no one will attack me this one's a little it goes something like this if I'm running a business site or an e-commerce site it's really really really important to pay attention to security and because people are going to target me they're going to go after me but on my personal site or on like my mom's blog it's less important because people are less likely to attack me are these bigger sites that carry personal private information more likely to be attacked than these smaller sites that don't is it easier to secure a smaller site is it going to be attacked less I get some shaking heads absolutely not we all tend to picture when we think about hackers breaking into sites we tend to picture a person sitting at a computer saying this is the site I want to break into I'm going to break into it and actively attacking that site those kinds of attacks do exist but they account for a fraction of 1% of overall attacks on the web the 99 plus percent of the rest of the attacks are scripted attacks it's bots it's software that someone has written to crawl the web and try to break into every site it doesn't care if this is a business site or a personal site it doesn't even know it just attacks every single site as a matter of fact if you've had a site on the internet for more than about five minutes you've been attacked you have hopefully not successfully but you absolutely have been attacked and that sounds scary and I'm sorry but it's also a fact I wish that this weren't the case it would make my job a lot easier but it is you're going to be attacked the good news is because most of these attacks are these scripted software attacks all we have to do is be better than that software we are our security practices need to deter this piece of software that's trying to break into our sites and if we can accomplish that then we can beat 99 plus percent of attacks on the web that's huge and achievable like we can do that and it's not even all that difficult as we work through the rest of these myths and facts around security if you can follow the general principles of the ones that are actual facts that actually help you then you will be able to deter this huge percentage of attacks the guy that I feel like put it the best Gerald Baron I used to work with him at iThemes he said it's not if you get attacked but rather how you prevent it from being successful and that's what we have to focus on because we can't actually stop the attacks but we can prevent them from being successful and that's where we focus the next one that you hear pretty often is that we need to lock down our files and the way this one supposedly works right is that if if an attacker gets partway in if they're trying to they've gotten far enough in where they can try to write some sort of backdoor into a file on my server if I have all those files locked down so that they can't be written to then they won't be able to a succeed they won't be able to leave that backdoor for them to use later in compromising my site we all see the the file permission sometimes it's like read write execute read write execute sometimes it's numeric 777 right we all see that what the question is does locking those down preventing them from being written to does that make your site more secure I see I see all kinds of all kinds of different responses this one can be this one can have some specific situations where things are a little different but in general this one is busted and here's why I think that there's actually a few reasons and one is I think it's putting security in the wrong place first of all to me this is like if you put in a security door between your living room and kitchen so that if someone breaks into your house they can't steal your china right let's just keep them out of the house completely that's where I want them to stay so if they're in far enough where they can be writing to your files we've failed somewhere else along the way additionally WordPress needs to write to some areas right we have uploads for media and things like that so if they can't write to one specific file or directory they're gonna try another until they find one that they can write to and chances are one exists because you like to be able to upload an image to attach to your post right that's normal use case so between those two like that that's one whole side of the argument and the other side comes more from like my point of view on the security team around automatic updates because if you've locked down your files so that they can't be written to then that means WordPress can't automatically update itself and I said that updating is extremely important to staying secure and for security releases we can do that for you when I push out a security release whenever the next security release comes out anyone that hasn't specifically gone in and locked down their files or disabled that you're automatically gonna get updated to the most secure version and usually I'm pushing that out because there's a vulnerability we need to fix I want to be able to secure your site whether you're you know having a meeting with a client or sleeping or it doesn't matter your site is updating and becoming more secure just sort of magically without you even having to worry about it and if you lock down these files you limit us from being able to help you and we have a team of like 30-something people that are particularly good at security and are constantly worrying about the security of WordPress and keeping it as secure as possible we'd like to help you by keeping your site is secure as we can too but if you try to lock things down like this you lock us out as well the next big thing who's heard this one before don't use admin as a username right you hear it all the time and it's actually sort of variation of your username should be secret you don't want people to know what your username is because if they know what your username is then they're halfway to breaking into your account because you only have a username and a password so if they know what your username is they're halfway there does avoiding using admin or any other known username does that make you more secure no smart people in here busted the who here uses Twitter yeah I do it's it's at Aaron Campbell now you know my username for Twitter right I use Gmail when I give you my email address which we all give out to everybody here left and right then I know your username for Gmail right a username is not part of your security a username is you claiming who you are it's like if I walk in my bank and I say I'm Aaron I want money my bank says okay prove it like they expect some form of ID or something like that as proof I come into my website login I say I'm Aaron Campbell and it says okay prove it it wants a password the password is where the security lies the username is just a claim for who you are and one of the reasons that I try to address topics like this having a username that no one knows it doesn't hurt your security just doesn't particularly help it because there are a lot of ways to discover a username or figure it out programmatically so these scripts that are crawling sites that maybe used to be hard hard coded to try the username admin are now just figuring out what your username is and using it spending a lot of time trying to keep that username secret to me that's you wasting time that you could be putting into efforts that actually make you more secure so these things that are myths it's not they're not all so bad that they're going to make your security worse but when you spend time working on things to make yourself more secure and it doesn't make you more secure you're less likely to do the other things that actually do make you more secure if you're going to do five things to keep yourself secure online I want them all to be effective because if four of them aren't then you're less likely to do more what about changing your database prefix who has seen the database tables in a WordPress install they're usually WP underscore users WP underscore posts like all that right that WP underscore that's configurable you can change that in your config file you can make it anything you want that's a valid valid in a database table name and the idea here is that as people are trying to break into your site and they're trying to send commands to your database to pull a list of users or to sneak in a user that you didn't want or whatever it is that you don't want them to know what your table names are you you want to hide them from them does this make you more secure no I get I get a I get a resounding no correct it does not make you more secure again this is one of those things that if you want to change your database prefix because you're running several sites in one database or because you have a particular naming convention that you like that's fine but if you're doing it to keep yourself more secure that's not helpful because similar to the admin username thing the scripts that we're up against now these automated systems that are going through and trying to break into our sites they're more intelligent than they used to be and they no longer hard code in database table names if they're somehow in your WordPress already then they're using the WordPress functions to pull the username just like the rest of WordPress if they're just directly querying your database they're asking it hey what tables do you have great I'll use those ones that's how these systems work now so again this isn't making you more secure what about moving or hiding the admin of WordPress every WordPress site you can go to either WP-login.php and you get your little login form or to slash WP admin and it redirects you to your login form if you're not logged in right every WordPress site and there's millions and millions of them online doesn't that make it easier for hackers that are trying to break into your site or these scripts that are trying to break into your site to try to log in because they just know where to do it so could you move that to some other URL and make that one that it used to be at you know 404 or something like that in order to keep your site more secure does this keep you more secure you hope so I am sorry you were so good with some of them busted um let's say that you build a brand-new house like it's just this beautiful house but you don't want people to break into this house right so you're on a nice street you've got this beautiful manicured lawn and you've got this little winding pathway up in a porch and no door no door because if people are trying to break in your house they're gonna try to come right to that door and break in and you have fooled them except they know you have a door somewhere right they know that you get in and out of your house somewhere and they're gonna find it these scripts are pretty similar they're they're very intelligent and they are capable of doing all kinds of tricks to try to find your login page they are pretty successful at it and that's okay let's just secure the login and not worry about hiding it and we can do that the other thing with this one is WordPress was not really designed from the beginning to move admin somewhere else and it breaks a lot of stuff that the the number of sort of external tools that struggle with this it can be pretty frustrating when you move your admin all the other things that that sort of as a rippling effect tends to bother and you will definitely hear plugin developers probably many of them hear that curse the fact that plugins exist to move admin because it makes their jobs so much harder so this has a tendency to break stuff but it also doesn't keep you more secure um what about SSL we've been hearing a lot about SSL over the relatively recent past especially as Chrome has pushed harder and harder to have SSL be like this big thing that's necessary we see all the SEO people talking about how it dramatically affects your your search engine rankings which we know it at least affects them some because Google has said it does but that's SEO and a lot of people claim that this also helps with security does it is SSL on your site is having your site be HTTPS instead of HTTP is that important does that help your security little bit more tentative on the answer but it eventually came yes absolutely SSL every site I want the entire internet to have SSL I want every site everywhere to have it it absolutely should and his prices have dropped dramatically to where many hosts are offering SSL for free or extremely inexpensively it should absolutely be on every business site every client site every fun site every meme site every like you know person's site about their collection of thimbles like every site should have SSL and the reason is that what that does is it encrypts all the traffic between whatever computer is accessing your site whether it's yours or one of your visitors and the server that terminates the SSL usually the actual web server and that's huge because that traffic goes through a lot of places there are a lot of routers between you and there that you don't know if those have been compromised and someone's listening in on traffic some people are accessing or logging into a site through coffee house Wi-Fi and you don't know who's on there listening and SSL means that even if that traffic is looked at between point A and point B it's encrypted so they can't just pull a user name and password and go I'm going to save this for later which is a very common thing to do these these systems that are trying to break into your site are also trying to break into routers along the way just to listen so that they can break into your site easier like that's that's a thing that they do SSL really dramatically helps with that passwords right I'm not even going to play with this passwords are important right I mean I even said it earlier right user names not so important passwords are important so why even put this in here and well passwords are really really really important and we all know that we should have good passwords the biggest thing that I see around passwords is that a lot of us don't really know what makes a good password there is just as much like totally terrible information about choosing good passwords out there is anything else so instead of just saying passwords are important I want to talk a little bit about what makes a good password long passwords the idea here is that longer is better always longer is better passwords are measured in something called like password strength is measured in something called entropy that roughly translates to number of guesses it takes to break your password and the idea is longer means more guesses that's better does longer make your password better yes yes longer makes your password better assuming everything else is equal everything else is not always equal but assuming that that everything else is equal longer is better more characters is better long doesn't mean like 8 to 12 characters long is like 20 plus at this point that's the kind of computing power that we're at my passwords tend to be 50 characters unless the site won't allow me to do it and then I grump about that site I get really frustrated and sometimes I just leave and go it's not worth it and sometimes I grump a little bit more and then pick whatever max link they let me what about substitutions we've all seen this right the idea here is that you can pick letters that can be replaced with a number or a character that looks kind of like that letter and it makes your password so much more elite so much more powerful absolutely right does this make your password more secure no it does not I am amazed most people say absolutely yes for that one but you all came right in with the no it doesn't and the main reason again is that these scripts that are trying to break passwords there they know that people do this so this kind of substitution is built in to trying to break your password and there's really only a handful of characters in the English alphabet that are easily replaceable and only a handful of replacements so while it may increase the number of guesses required a little bit it's not very much and it increases the difficulty of remembering your password a lot right you like was this was this L a one or an exclamation point oh no I just left it in L I had you know I mean you can never tell you can never remember but substitutions are not particularly effective they make it harder for humans but not harder for computers at least not much harder and that's really what we're up against what about passphrases so this is this is my dog King air by the way I was this picture was taken while I was on a video conference call I'm sitting in my chair I'm talking to my computer she thought I should be talking to her and so for like a 30 minute conference call this is what I saw the whole time just sitting there staring at me and the idea of a passphrase is that we can take something that's memorable to us and turn it into basically like a password is a sentence and so maybe I would make my password something like king air watches me on calls and this is a thing that I could remember pretty easy and it's long 27 characters long so do passphrases our passphrase is good do they make our passwords better do they keep us more secure online I love the air because I said plausible and here's here's why um length is good length is good um but raw length isn't absolutely everything just a raw entropy measurement is is based on kind of the raw brute force method of trying low what we see in movies right trying a b c right a a b a c trying to eventually get to your password that is rarely used that anymore because it's very inefficient a much more common attack is what's called a dictionary attack they take most commonly used words and the good scripts are hitting your site and going I want to break into air and decamble calm and so it scans my site sees that I have a link off to Twitter so it scans my social feed and it builds a dictionary based on words that I use so my dog's name which is really the only unique thing in here king air is probably going to be in the dictionary because I've probably tweeted about her before and so they build this custom dictionary and then they use that to attempt to break your password and with this comes a lot of the common things that we do who has numbers in their password but they're at the end right we all do it like you're like oh dang it makes me have a number at it at the end when you have to have a special character it's an exclamation point at the end isn't it it always is it's like my password is no longer password it's password right and these systems they they know that they and so they will build these dictionary attacks they try things like substitution spaces and no spaces when building sentences using punctuation at the end numbers at the end like these are the common things and so while this may take a long time to crack using sort of what we see in movies that rob root force kind of the adjusted entropy of only five words and it being kind of common words that I would use is not great you can make passphrases that are really good you can combine them with some special character things I've done things like pick a mathematical formula and put that in the middle of a passphrase or something and that can dramatically increase the strength of a passphrase and still make it pretty easy to use but the best thing that you can do is just use a password manager who here uses a password manager I love that this like the percentage is getting higher every time I give this talk I love it over like the last year or so in variations of these security talks I'm always trying to find out who's using a password manager because passwords are so important in the only way you can have good password practices online is to use password manager because good passwords are long random and unique long being like I said at least 20 characters random being actually randomly generated like that's the best case scenario because you would force these scripts to use the least efficient method of breaking your password is possible that sort of raw brute force and unique meaning it's only ever used in one place so if you log into a hundred different places you need a hundred different long random passwords and you're not going to remember those so you need a password manager to do that I use last pass a lot of people use one password I don't care which one you use there's a lot of good ones out there but you need a password manager so if you didn't raise your hand you were surrounded by people that did talk to one of them learn about password managers I'm basically out of time but I would like to see if anybody has like other things that they've heard and see if we get a minute or two to squash some myths right now I think that in in those situations where you know they're using social engineering and they're getting some sort of key logger in place whether that's on your system or somewhere between you and the end point that could be the case the number of attacks that we see doing that kind of thing compared to the ones that are just brute hacking like that's a small fraction so you're kind of hedging your bets that you're going to be hit by this little percentage whereas it's much more likely to be hit by the bigger thing if the key loggers somewhere not on your computer then SSL is going to help protect you against that because they're not going to be able to see it if it is on your computer and that's a thing that you're really scared of two factor authentication is the actual answer to that one not pass phrases and that's because even if they log that six digit code that you type in it changes 30 seconds later by the time they get the chance to use it because most of them aren't taking action immediately it's going to someone else they're using it later by then it's no good last question if you're on a terribly unreliable server that may serve up raw PHP probably but in general not especially the only risk there is if something has happened to your server to the point that it is serving that PHP and plain text to a person when they visit it and that should never happen so generally speaking no it doesn't necessarily hurt anything again but it's not a dramatic increase in security I'm Aaron Campbell I am employed by GoDaddy to work full time on the WordPress project I do that by leading the security team I am going to be around for the rest of the day because I see that there's more questions I would love to take them but I gotta seed this to the next speaker


We can keep copy that and ummm. It's me again, Mr. Roushaw. In this lesson we're going to look at the early history of East Asia and how it has impacted the region's culture. Now we believe that modern humans first arrived in East Asia around 80,000 years ago, but when did civilization actually begin in East Asia? Well, this begs the question, what is the difference between being inhabited and being a civilization? Now, Webster's defines a civilization as a relatively high level of cultural and technological development, whatever that actually means. Now anthropologists still debate the definition of what a civilization is, but most agree that for a people to be considered a civilization, they have to meet several criteria. Now what's chief among these criteria are that the people are developing cities. After all, the word civilization actually comes from the Latin word, which means city. In China, the oldest city discovered is Banpo Village, which is about 45 homes. Now it was believed to have been settled as early as 4500 BC. However, around 3700 BC, Banpo Village was abandoned and is probably due to the flooding of the Yellow River. But the Chinese civilization today stretches back an uninterrupted 4,000 years and its beginning also is along the Yellow River. Now to govern this civilization, the Chinese ruled by a series of dynasties. A dynasty is when a family passes down the right to rule the people from one generation to another, like a king or an emperor or a czar. Now what is impressive is that this stretch of dynasties continued for 4,000 years, ending only in 1912. Now due to time, we're only going to go over really over four of these dynasties and we'll also in our next lesson go over the Qing and Ming dynasties. So let's start at the beginning. Now the Xiao dynasty is considered the first dynasty of China beginning around 2100 BC. But many historians argue that the Xiao dynasty may have been just a legend, just a myth. So the first true dynasty was the Shang dynasty. This dynasty ruled for about 600 years and perhaps the reason why the Shang dynasty is more accepted than the Xiao dynasty because it was during the Xiao dynasty that the written language was developed. The first Chinese characters have been found echelon to turtle shells and bones during the Shang dynasty. Now the Chinese is a pictograph language which means its characters represents an object or an idea. For example on our last lesson I showed you the character for Shan which means mountain. And here is Zhang which actually means middle and you can see this it is a box with a line going through well the middle. So understanding this, which character do you think means two? I imagine you figured this out right? Two. Now the language does become more complex as not everything can be represented by a picture. Now through the years the Chinese would continue to develop their language they would start combining different characters to make one new character and they would introduce something called radicals. But as you can imagine Chinese is a much more complex system of writing than our own alphabet English. But through cultural diffusion we said that this Chinese writing system actually went back to Korea and Japan because both Korean and Japan uses Chinese characters in their own language even though their languages are spoken differently. So the Shang dynasty got things rolling and provided China with a written language. But while the Shang would give China its written language the Chen dynasty would give China its name. The Chen dynasty was the shortest of all major dynasties lasting for only about 15 years but there were many different reasons why this dynasty was still important. First the Chen dynasty came to power after a period of time known as the warring states period. See before the Chen dynasty came to power China was really a network of city states. Now for the 200 years during the warring states period these city states were fighting each other and this is before the state of Chen conquered them all in 221 BC unifying China for the first time. Now the leader of China would be known as an emperor than just a king and the empire would be named after the Chen state. This is what gives us the name China today. Now the Chen dynasty would also give us the building project that really defines China. The leaders of the previous city states had built walls to protect themselves. The Chen emperor would use peasant labor to be able to connect all these different walls into one wall what we call the Great Wall of China today. The wall would be continued to be expanded by later dynasties and would ultimately grow to be over 13,000 miles long. It would also be during the Chen dynasty that the terracotta warriors would be built and estimated 75,000 workers would be building this mausoleum for the emperor and over 8,000 clay warriors that were to guard the emperor after death in the afterworld. Now what is interesting is that these terracotta warriors would not be discovered until a farmer in 1974 unearthed one of them nearly 1,700 years after their first build. Now while the Chen dynasty built a wall the Han dynasty would build a under the Chen dynasty, China had expanded to most of eastern China. However, the mountains and deserts of western China really isolated China from the rest of the world. This isn't until King Wudi sent a general Zhang Jian and an army to go find out what is beyond their borders and be able to negotiate with the people they met. Unfortunately for the Zhang Jian nomadic tribes attacked them and killed all of his men except for him and his guide. And they also imprisoned Zhang Jian for 10 years. When the general returned to China 13 years later, King Wudi was still in the throne and Zhang Jian told him of all the different advanced civilizations that he had came in contact out into the West. King Wudi saw this as an opportunity to be able to trade outside of his kingdom. Now China's part was adding to a trade route that was already in place between Central Asia and Europe. But with China's addition, this trade route would become known as the Silk Road. Now rather than a single road, the Silk Road is more of a network of routes that connected now China to Europe stretching over some 5,000 miles. Now speaking of nomads attacking people, this is a good time to introduce the Mongols. Now the Mongols were nomadic herdsmen up until about 1206 AD. This is when a guy by the name of Timogen began to unite the Mongols into one empire that would later conquer most of Asia. We now know Timogen by a different name, Genghis Khan. Now beyond Genghis Khan's leadership, the Mongols biggest advantage was the Sturip, which allowed its warriors to be able to fight on horseback. This proved devastating to their opponents. By 1307, the Mongols had conquered most of Eastern and Central China. But the Sturip was not the only tool that they used to be able to expand their empire. The Golden Horde, which is what the Mongols were known as, also used cruelty as a weapon. Take for example the tax law of Genghis Khan. It reads like this, if you do not pay homage, which means to pay tax, we will take your prosperity or your wealth. If you do not have prosperity, we'll take your children. If you do not have children, we will take your wife because with your wife we can make more children. And if you do not have a wife, we will take your head. And people think the IRS has strict rules. So terrifying was the Mongols that villages would surrender before even trying to fight them. And for the cities and states that would simply surrender the Mongols without fighting, the Mongols for their part would pretty much leave them alone. At least until tax time each year when they would come to collect their prosperity. Moving south to the Korean Peninsula, the Koreans largely migrated from China and bringing many aspects of the Chinese culture and language. And much like the Chinese mythical Shao Dynasty, the old Choson Dynasty in Korea was supposed to been established around 2000 BC. However, this was largely considered just a legend. By the 4th century AD, the Three Kingdoms period came to power. This was a loose confederation of three kingdoms that controlled all of the Korean Peninsula and stretched up into Manchuria, which is the area north of the Korean Peninsula into what is now China. However, with Chinese assistance, one of these kingdoms, the Sheila Kingdom, conquered the other two kingdoms in the 7th century. And they would continue to rule the peninsula for another 300 years. Now the Goryeo Kingdom followed the Sheila, now beyond being invaded by the Mongols because, well, wasn't everyone during those times. The Goryeo Kingdom is important because this is actually where we get the name Korea from. Then there is the new Choson Dynasty. And this is where we get to meet King Sejong the Great. In 1420, King Sejong established the Hall of Worthies. The Hall of Worthies was a collection of specially selected 20 men who would study all matters of things and then advise the king. Together with the Hall of Worthies, King Sejong developed the Korean alphabet, Hangul. The Korean language by that time had diverged from Chinese so much that half the language could not actually be represented by Chinese characters. With Hangul, the entire Korean language could be written, both the Sino-Korean, which is the Chinese portion, and the native Korean language. More than that, an alphabet is much easier for people to be able to learn. Therefore, with the Hangul or the Korean alphabet, more of his citizens were able to read and write. And while it doesn't really look like an alphabet, we know it truly is an alphabet. For example, this is an H. This is an A. That is an N. This is a G. This is a U. And this is an L. Now, Hangul is actually considered by some linguists as one of the most logical and straightforward writing systems in the world. And how important is King Sejong to the people? Well, think about our own $10 bill. On our $10 bill, we have Alexander Hamilton, who in addition, having a really big play about him running in New York, he is also one of the framers of the Constitution responsible for the federalist leaders and established the Treasury Department for the United States. On the Korean equivalent of the $10 bill, the Koreans have King Sejong. Kind of a big deal. Then, there is Japan. Now, most of Japan was settled by people coming across to see a Japan from Korea. However, we believe that the southern islands of Japan were actually inhabited by the Austronesians. Remember, these are the same people who settled in Indonesia and the Pacific Islands, such as Hawaii. Until the fourth century, Japan was not a unified country. Then in the fifth century, the Yamato clan gained control over all the other clans of Japan. And this is when the Chinese first started talking about Japan as one country. Now, what has happened to the Yamatos in Japan? Nothing. In fact, the current emperor today is part of the Yamato dynasty. The longest ruling dynasty in the world today. But it's not always been smooth sailing. In the eighth century, a smallpox epidemic killed nearly a third of the population of Japan. And that's when things really started getting out of hand. This is when rich farmers began to exert their own autonomy. They even started hiring their own soldiers, the samurai. Then in 1192, the Mimoto clan takes over. Now, the emperor still has his title, but the control of Japan now rides with this military dictator or the shogun. Now, the shogunate would now rule Japan until 1868. During this time, they would not only fight off the Mongols, with quite a bit of help from typhoons that swamped the Mongol ships, but they also attempted to protect Japan's isolationism. In 1853, the American naval officer, Matthew Perry, sailed his fleet of Navy ships into Tokyo and demanded that Japan open itself up to American trade. Now, weakened by Perry's gunboat diplomacy, the last shogun resigned in 1868, and the emperor regained control of the government. As with any region, religion has had a big part in developing the culture of East Asia. Religion in China evolved for over centuries and was first developed through their beliefs and their worship of their ancestors, which they believed were always washing over them and could be called upon in difficult times. And if you're thinking, you're pretty much on the right track. But there would be three larger religions that would play a major role in China, Buddhism, Confuciism, and Taoism. In 551 BC, a guy by the name of Kongzi would introduce a new philosophy of religion. We now know this guy as Confucius. Now, Confucius saw many problems in the world, but he believed he had the answer to them. In order to get his ideas instituted, he first thought he would become a government official. That way, he could influence government leaders and have his ideas mandated throughout the country. But he failed, so he became a teacher. And what he taught was the three themes of Confucius. The first is peace and order, which he believed that could be established if everyone would just accept their role in society. The second theme was a respect for elders. After all, in traditional religion in China, if you were supposed to worship your ancestors after they're dead, why shouldn't we follow them while they're still alive? And the third is what he called ethics. This laid out how people were supposed to treat each other. This included people and their rulers, the rulers and their kings, husband and wives, and even friends. Unfortunately, Confucius, his teachings did not catch on until nearly a hundred years after he died when an emperor in the Han dynasty actually adopted Confucius because the emperor saw that as a way to be able to manage the country. Then Confucius became a widely followed religion and has remained a powerful force in Chinese history. At about the same time that Confucius was going around teaching, there was another teacher. His name was Lao Zhu. Although we don't know a lot about him, what we do know of him is probably pretty much myth. But we know his teachings revolve around the Tao, also known as the Wei. It is said to be the essential energy of life. Taoism teaches that you should seek balance in the contrast of the world, life and death, cold and hot, light and darkness. This is what they call Yin and Yang. With the seeking of balance, Taoism also attempt to live in harmony with nature and practice meditation and feng shui. Some even will take pilgrimages to five mountains in China. Then there is Buddhism. Now we've talked about Buddhism in both South and Southeast Asia. Mahayana Buddhism came to China around the first century AD and today is a major religion throughout the region. It would spread to China around the fourth century and then to China in the sixth century. Today, 18% of China, 36% of Japan and 22% of South Koreans are Buddhists. But 28% of South Koreans are Christian. And if you go to Korea and you go to capital Seoul, at night you will see the Red Crosses on the top of the steeples all around the city. Koreans associated Christianity with nationalism during the Chinese occupation and they've also been influenced by the Americans after the Korean War. All right, so now you should have a good idea of the forces that have shaped the culture of East Asia's culture. Next, what we're going to do is we're going to find out why their British love for tea led to us nuking Japan. Until then, keep on learning.


Hi, everyone! We here on the Moz Academy team are so excited that you're interested in learning more about the local SEO certification series. My name is Megan, and I'll be your instructor for this series. I am a senior learning and development specialist here at Moz, and I am so excited to take students through this coursework. I am also delighted to announce that Moz's very own local SEO subject matter expert Miriam Ellis will be featured throughout the series. By the end of this certification, you will be able to explain the pillars of local search and how they impact local businesses, establish solid plans for citation and reputation management, investigate local rankings issues, and so much more. With almost six hours of on-demand video content, tasks, quizzes, and a final exam at your disposal, you'll walk away from this certification with not only new knowledge, but also actionable and repeatable strategies for representing a business online. We've also developed a downloadable workbook for this certification. Upon completion of the certification series, you'll receive an official certificate from Moz, and you'll be able to add it directly to your LinkedIn profile. With that, I really hope you decide to join me on this educational journey. Thanks and happy learning!


For more videos on people's struggles, please subscribe to our YouTube channel. Here on the third day of the occupation of the Elbit factory, our morale was high but we just heard that Gaza was bombed last night. It was bombed last night by weapons made by Elbit systems. This is what happens to Palestinians all the time. They wake up terrorized by the bombs which are made by companies which are here in the UK across the UK. Enough is enough. This is happening all the time. We are so privileged to live in the UK. We're so privileged to live here but our privilege comes at the cost of Palestinians lives. We have to use this to protect people across the world and take direct action against these arms companies. The UK government has watched Palestinians be killed and massacred and lose their homes for decades. They were the ones who began this in the first place. It's up to the people to end this.