OK, let's get started. This is the last topic of this year. And actually, thank you so much for all of you for staying there to join my talk. And being the last topic, actually, is not bad, because many studies show that people tend to operate, tend to remember what came first and what came last. So I would hope you enjoyed. OK. My name is Bing. And my first name is Bing. It is easy to memorize, because Microsoft, Structure Engine has the same name with me. I don't know why they use this name. And I have been working for Intel for 10 years. And now I'm part of Android Security. And today my topic is about Android Security's storage and how to virtualize it in one of our projects, which is based on automotive hypervisor. And we have a lot of contributors for this, because this is a complicated project. And actually, one of the guys, actually, Thomas Winkler. Can you raise your hand or stand up? OK. He actually is an expert for the RPNB. I'll talk about later on what is RPNB. He's the MMC RPNB expert. I believe he's the first one to try to upstream RPNB kernel driver to the Linux kernel. So I'm going to skip this. So this is our agenda today. And first of all, I'm going to talk a little bit about the problem statement and explain why we need to build a secure storage for Android. And then I'm going to talk some more details on RPNB. RPNB is a replay protected memory block. And this is the fundamental knowledge to understand how to build a secure storage in Android system. And then I'm going to talk a little bit about the secure storage architecture and what it looks like. And after that, I'm going to go through the secure storage virtualization in one of our hypervisor projects for automotive product. And finally, I came to conclusions. OK, so the reason we need to secure storage is actually it's all about data security and privacy. So we have a couple of examples here to explain why we need that. Because for example, first of all, it's a screen unlock. So everybody has a phone, right? If you forget the password, you may try it again and again. But probably after you five times retry, you may need to wait maybe 10 minutes, for example. Then after 10 minutes, you can retry a password again. Then if it fails, then system may need ask you to wait for one hour or even much longer. So actually, the implementation behind this is because the time delay policy depends on the time failure counter. So we need secure storage to save that counter, which means that if someone can change that counter, then they can continue to try the password until a correct password is found, right? So this is one of the requirements for screen unlock. And there are some others which look pretty straightforward. For example, we need secure storage to save the system image version so that we can disallow attacker to downgrade the system image to old and vulnerable version, right? So the other use is we need secure storage to save the factory provision in the keybox, like for usage, the content protection, you need those keyboxes to decrypt the content key so that you can play back your movies, something like that. And also for testation, private keys. And for the device, as a fingerprint, you need secure storage to save your fingerprint image data, which is called template. This is not only about security, it's also about privacy because typically your fingerprint template data may be used to uniquely identify a person, right? So this is just a couple of reasons. And then if you are working for Android development, you will know that Android CDD, CDD is compatibility definition document. So if you want to get the GMS or get your Android phone to be certified by Google, you need to pass the minimum requirement defined by this document. And since from Android Marshmallow, this feature is introduced, so from now, from Android now, OAP, this feature actually is managed. So let's take a look at more details about the RPMB, this is replay protected memory block. So basically, let's take an EMMC as an example. So if you have an EMMC, there is a small partition which is called RPMB, and it's a special partition. And you cannot increase or decrease this size as long as this EMMC device vendor manufactures this device. So typically it's maybe only two megabyte or four megabyte, it is pretty small. But according to specification, it can be, it could be a 118 kilobytes to six kilobytes, but typically actually in our many reference board, reference platform is only four megabytes. So it is pretty small. And actually, in this picture, there's only one RPMB partition, but in the latest specification, like UFS 3.0, NVMe-based flat storage, it can support multiple RPMB partitions. So I will talk about that later, a bit later on this. So let's give you more details on this partition. Unlike other ordinary partitions, reliable accesses partition must have, must require the syndication key. And basically, if the key is not programmed to this device, any access will fail, because the error code indicates that the key is not programmed, you cannot access, you cannot really cannot write. But as long as you program this key into the device in a factory, in a safe environment, and this key cannot be changed anymore, it cannot be reprogrammed, it's invisible to any software because the hardware doesn't provide any interface allow you to change this key, or reprogram the key, or extract this key. So basically this key, so basically, after the key is programmed, then you can, if you have the key, then you can use that key to write the data. I will talk about a data example for write operation. But for read actually, even if you don't have this key, you can still read the data. But the problem is that you have no way to verify whether this data is modified, it's a replayed data. Anyway, so this also means that if you have a secret data, a key, something like that, you must not directly say those data in this partition. So you must have to encrypt it, and that encryption is responsible by fast software. So software need to encrypt data before sending the data to this partition. And apparently it can provide a replay protection. And for write access, this hardware provide a built-in monitoring counter which is used to detect the data replay protection. And for read access, because in read operation, software is responsible for verifying the data to ensure to check the data freshness. So software is responsible for generating a random number which is used to provide a replay protection. And now basically, I'm gonna give you an example of how it works for authenticated write access and how the replay protection is applied on this partition. So suppose that this block, the left side, is a EMB hardware, and it has an EMB data error which is saved the data sent by a software. And it has a built-in HMAC engine which is used to calculate data, mark value, mark its message as indication code. And it has a built-in Fuse OTP register, OTPs one-time programmed register. This register is used for software to program the key in the manufacturer, as I just talked about before. And this key can only be programmed once. And out of the program, there's no way to get it from software. And it also has a built-in Montana counter. This counter can only be increased by the controller, by the hardware, followed by each successful RP&B write access.  So now we have a software. So the right side represents a software who may want to write some arbitrary data to this partition. Then we need to get the authentication key, right? So in the implementation, actually, we can derive this authentication key from some trusted hardware or firmware or something like that. And basically here, we assume that this software can already get this key. And this key is the same key with the key in the hardware that is provisioned into hardware. And then you have the counter. This counter, actually, the counter is readable, so you can just read this counter from hardware because this counter, actually, it's not a secret. And then you have, you need a software HMAC engine. Then if you want to write the data, then you need to prepare the data and prepare the metadata like the data size and the block address which the data will be sent to. And then you can calculate this data with the counter and then use the authentication key to calculate the MAC value. We can call this MAC message as an authentication code as a signature, right?  Then the hardware will extract this data and the counter and recalculate the signature, which is the MAC value. And then we compare this MAC. If this calculated MAC is matched with the MAC value sent from software, then it means that the software may have the key, right? And then also need to compare the right counter to make sure the counter sent from software is exactly the same counter, which is really from building internal counter. If the counter is matched, then it means that the data is fresh. So then after these two values are matched, then the data can be right to this partition. So this is the last, actually this is last, this is last stop. The last stop is after the data is successfully right to this area, the counter here will be automatically increased by one, which uses that for the next right, you cannot use the previous data to replay a tag. For example, you replay the previous data, you recorded the previous data and send the data again, then the counter obviously will mismatch. So basically this is how the RPMB works, which is defined by the specification for this, for MMC, UFS and MME device. So next I'm going to talk about the software full stack. I mean, how to build this, the software stack for the, to enable this RPMB partition to build a secure storage solution. So basically we, actually in these two days, many people talk about how to protect Linux, how to secure Linux, but here I'm assuming that the Linux Android system is compromised, so we need to build a TE secure environment which is on the right side. So actually, if this is our ARM system, you know that the ARM trust can support the two world which the secure world and now secure world. And in X86 platform we use a virtualization technology to isolate the TE environment. And if you look, actually this is not something new. If you look at Windows, since Windows 10, Windows has a built in virtualization based security which is called VBS which uses the exact same architecture. So here we just use the virtualization to isolate the world but actually all the device, especially for the storage device, the Android Linux kernel owns the, all the native data. We don't want to let them storage here. We just use the virtualization to isolate the world. And then, and you can see that in this block the trustee TE is providing enough service in the, there are a couple of TAs here, TAs trustee application and but actually I'm not talking about all of them here. I just only focused on the secure storage TE which can provide the, as previously mentioned, we have a syndication key, right? We need, we use this secure storage to manage that syndication key and also we need to provide encryption to make sure that the data confidentiality. So this is what secure storage architecture looks like and at the right side of this secure storage TA and it can derive the RPMS syndication key and also can get the secure storage and encryption master key after each reboot and these two key must be protected in the TE solution so that Android cannot have this key. So even if Android compromises the data which is saved in the RBMB cannot be decrypted or cannot be stored. And we have a very, actually Google implemented this file system, a secure file system in this secure storage TA and we, if we wanna save the data, we use encryption key to encrypt the data and use the syndication key to sign the data then send the data over the IPC communication channel to our proxy in Android. And this proxy then can talk with, talk to RPMB over the RPM position over the RPMB driver here. The reason is that the, actually the MMC device is single head device which means that this two OS cannot talk the single device simultaneously. So we need a proxy here to send the data up. And we assume that this path is untrusted path but anyway, because we have, we can keep the storage encryption key and syndication key be secured so we can make sure the data can be protected. And as you can see that we also have extra data flow which send the data to a Linux, ordinary Linux system. I will explain why this later. And basically this secure storage can provide two different service to the TE environment system. And one, the first one is a tamper we call TP and which is a tamper proof secure storage. As you can see in this picture and all the data after encryption I mean, including both data and file system metadata and they both send, eventually send to RPMB partition. So we do this because of two good reasons. First one is we can provide much higher level secure protection because if attacker doesn't have the key then they cannot tamper this data. So this is what we call tamper proof or tamper resistant. So another reason is that this, the data saved in the RPMB can survive from factory set. Now this is pretty good for the usage. Like if you have some key of materials and you need to provision into factory then this RPMB, this service is the best for you, right? And but we have the problem here is that the sites constriction are constricted because typically the only two or four megabits it's very small, but most of the cases if you only use this for key materials as a key material storage then it should be fine because think about the TPM actually TPM just only have maybe seven or six kilowatts it's pretty, pretty small than this. And so to solve this size constricted problem we provide another service which is called a tamper detection secure storage. And as you see that this, we split the data and metadata and we send the data to the ordinary data partition in Android as the main storage, right? And but we send the file system metadata in the RPMB. So in this case we can support a large amount of data, right? And this is very useful, like it can be used to save your fingerprint template data because if you do factory recede then all the data will be gone. That's fine, right? And however we also provide actually the building file system provide the capability to detect the data, for example if the data is altered, if data is replayed then we can detect the data is changed. So this is what we call the tamper detection or sometimes we call tamper evidence secure storage. So we have already talked about the, we call it the native environment and but now we, I'm going to talk about the secure storage virtualization around our, one of our project which is called ACORN. ACORN is actually, it's the name of the seed of this oak tree, anyway. And this is the open source project. It's a lightweight hypervisor which is built for IoT and automotive use, automotive industry. And you can, actually it's Linux Foundation project. You can take a look at the details of, this is our future website, we can give that up now. And but here I just only have a quick view of the architecture looks like. This is the one of usage, there are some other usage like for real mode, for IoT industry, for real mode, guest support, RTOS support. But here we are using for automotive.  So we can use this hypervisor to build a multiple and your guest VM to save the cost because we can use a single SOC to support a multiple OS. And here the, and in this case we have a service that runs on the left and this is a privilege OS, it's a closed system, it can provide the, it has most of the native drivers, including the RPNB driver, including the MMC, or the Stardew driver, and can provide device mediation or device emulation for the other guest VM because all the guest VM take a Stardew as an example, the guest will see the virtual Stardew. And it can also provide a guest user, we call it as a user VM, a UOS, it can provide a UOS management. And since we, since we need to support Android here, so we build a similar trust execution environment in this, on top of this hypervisor. And we actually, in this architecture, we further reduce the NAF code, this native hypervisor, by introduce a new concept which we call the one word, sorry, one VM, two word. And which basically means that in the hypervisor we only create one single VM data structure, but we create two different virtual CPU, context error, in order for saving with each word, virtual CPU state. And just like a traditional process or thread context switch in the operating system, we call this the word context switch because the trustee in the secure or secure world and the Android, they are actually a time-saving on the same physical processor. So we can switch back-force between them by save and restore the virtual CPU state. So let's talk about how the secure Stardew is virtualized on top of this system. Then you can see that we have a hypervisor. We have a native driver which is inside the service host kernel and we have a EMMC device, but assuming that this device has only one single RPNB partition, right? So during the board time we send the authentication key RPNB syndication from firmware to hypervisor and have whatever is sent to the service host kernel so that the service host can access the physical RPNB because service can have this key, right? However, for the virtual machines like Android VM on the right side, they all don't have the directed physical RPNB driver, physical EMMC driver to access. So we need to build a virtual RPNB module in this device model process. The device model process, you can imagine that this is something like the cumul. We don't use the cumul because the cumul is too complicated to run and it's not nice and friendly for commercial use because someone, many other motive vendors doesn't want to disclose their source code. And so in this virtual RPNB module, when this module started, we generate a virtual RPNB key and we hand over this key security to the trustee world so that from trustee's perspective, it doesn't care whether this is a virtual key or this is a physical key. It just uses this key as the RPNB authentication key to talk with the backend RPNB emulation module. The emulation module exactly behave as the behavior of the hardware RPNB controller. So as long as the trustee world get the authentication key then it can send the data over the proxy and then because there is no physical RPNB driver so we need to write a front end RPNB driver and talk with backend RPNB service over the virtual IO framework and then send the data to the virtual RPNB module. Then the virtual RPNB module use the virtual key to verify the data and then extract data then send to cumul and the cumul will use physical RPNB to send the data and send the data to eventually the physical RPNB so we can build the whole flow like this. And by the way, if there is multiple Android start we use a different virtual key here. For example, this is the virtual key one, another one may be a virtual key two and this key can, I mean, this key can, they are different and each user VM cannot see the other VM virtual key. And we have different process isolation so that the different processes in the service also cannot see other virtual key here. So this is the basically RPNB virtualization works in this hypervisor project in which we can support a multiple Android and provide a temporary system to secure storage for those multiple Android as a guest OS. Wait, but still we have a problem here. As we previously mentioned, the secure storage not only provides the data as an integrity and also provide a confidentiality. So we also need a secure storage encryption here to encrypt data before sending the data over the proxy to service OS, right? So I'll talk about how to generate this secure storage key in this system. Okay, so this is how it works. The, actually there is a platform seed which is what we call a P seed. This is unique per each platform. This key is bound to hardware in UK. And the firmware, the root of the firmware generate this key and send this key to hypervisor and then whenever the guest VM user starts then the hypervisor will derive this key. And over the UI, the UI ID is the user's unified ID and this ID is fixed as long as it's created. And we derive this, we derive a user, sorry, VM seed for this specific VM. And then we use this VM seed to derive the secure storage encryption key for this trustee. So if there is another VM start, we will use the platform seed in hypervisor to derive another different VM seed. And then that VM seed can be used to derive a different secure storage master key here. So in this case, we can isolate the data because even the service or us can have the knowledge of the physical RPNB driver or how physical RPNB can, it cannot know the data, the play text data which is encrypted by different user VM, right? Because the service doesn't know the platform seed because hypervisor never send the seed to, the platform seed to service or us. So this is how it works to make sure the data confidentiality protection in this on top of this virtualization system. So let's quickly come to conclusions and some future considerations especially for improvement. And now we know that we can provide temporary system and temporary evidence secure storage in native Android and in this virtualized environment which can support multiple Android VM. And we also can provide the data integrity and the confidentiality protection. And but for replay protection, we can achieve that obviously for native Android but we have problem for virtual Android in on top of that ACON hypervisor because although and also it's implemented in a closed system as well as has no knowledge of secure data encryption key for each virtual Android VM but as also does has actually RPNB, it means that the SOS if it's compromised it can recall the data and then replay. So in this case, the virtual Android guests doesn't know that, right? So this is the one of enhancement in the future of what we need to do that. And by the way, the entire solution depends on the verify board and the chain trust because we start firmware and the firmware start hypervisor and hypervisor start service OS then service OS to create a device module like QML to create each multiple each Android OS. So we need a trust chain to build in this flow. And for the future consideration, first one is actually as I previously mentioned, the latest YAMC, I don't think YAMC will support multiple RPNB but UFS since from 3.0 now has already supported maximum four RPN partitions which means that four partitions can program with four different authentication keys. So if we take this into consideration for build virtualization on the hypervisor, for example, we can assign each virtual Android with a dedicated physical RPNB then in that case we can prove when RPNB replay attack as I just previously mentioned. And we also have to do the enhancement for the service OS integrity protection like that. Okay, so this is all. Thank you. Questions? This isn't actually a question here but could we have a round of applause for Elena who's been doing such a wonderful job doing the MCs. Now back to your regular questions. It's a bit out of my order. So do we have a question? Do we have questions for speaker? Sorry for the ignorance, I'm not familiar with the hypervisor but what kind of trusted execution environment we're talking about here because is this like a vendor independent or this is TXT or some other Intel new stuff? Oh, this technically this is not something new. It's just based on the virtualization technology. So it uses VTX which is supported by CPU and also use VTD which is also, we call IOMMU provided by chipset. So currently we don't use some new technologies like SGX or some other un-disclosed technology because this is built for the multi-product and we build based on autumn-based processor because on that processor there are many advanced technology actually they are not available yet in that hardware. Okay, but the hypervisor targeting Intel platforms. Hypervisor only targeting Intel platforms. Sorry, what is the last sentence? Hypervisor. I'm just. Targeting Intel. Oh, targeting Intel architecture. Okay, thanks. Okay, thanks. More questions? Hey, let's send thank you speaker. Thank you, have a good weekend.


Patriot Prime Reviews is a channel for adult collectors and may not be suitable for children under 13 years of age. Viewer discretion is advised. This video is sponsored by ToyHacks.com. They're your one-stop shop for reproduction decals for your vintage G1 transformers and upgrade decals for your modern bots, weaponry for your figures from the ToyHacks Armory and great-looking backdrops for your display from Toy Stages. So check out ToyHacks.com and make your collection stand out from the rest. And tell them Patriot Prime sent you. Hey what's going on guys, Patriot Prime here once again with another Quick Looks video. And the subject of this video is the brand new Transformers Legacy Amazon Exclusive Reckon Rule Collection Diaclone Universe Twin Twist. That was a mouthful. So taking a quick look at the packaging, this is that new fully enclosed box that features some outstanding artwork of Twin Twist jumping into battle. I love the looks of this. And note of interest right here, that looks like Whirl. So will we be getting a Legacy Whirl soon? I hope so. So going on over the box a little bit more, we've got Diaclone Universe Twin Twist, Transformers Legacy, Transformers Along the Side, Takara Tomey, Top of the Box, Reckon Rule Collection, Bomb of the Box, Words, Back of the Packaging. We've got Twin Twist in Robot Mode and his Vehicle Mode. And of course, this is a remold or repaint of the Titans Return Twin Twist. So you have his Titan Master slash Headmaster, who is not named on the packaging. But according to the Titans Return version, he's called Flame Out. So now, without further ado, let's get Twin Twist opened up out of this packaging and check him out. Don't forget to like, don't forget to subscribe, and welcome to Patriot Prime Reviews. Now once you get Twin Twist all opened up and out of the packaging, you'll see he does come with a sheet of instructions, another piece of the cardboard Wrecker's Hammer. I believe this is the handle, but we'll go over this once I have all of the sets. And you've got his blasters. They come packed in Combine Mode, and of course, you just unpeg them for the two different guns. Now, as I said earlier, this Twin Twist right here is a repaint of 2017's Titans Return Twin Twist, which was a great reimagining of the original Generation 1 toy. Now before we get into the comparisons with Twin Twist here, there is a couple of tolerance issues that I've discovered already. First off, the knees are pretty loose. Now if you try to just stand him up, he just falls right over. I really had to get him in kind of a leaning forward position to stand him up. The other Twin Twist, no problem whatsoever. So I don't know why this one's knees are so loose. And the other issue is the waist. When you go to rotate the waist, it pops the mushroom peg loose. Of course, it's not... Oh, there you go. So yeah, that just pops right out. When I first opened it up, I thought, okay, it's not in there all the way. So I pushed forward. You can hear it snapping to place. But as soon as you turn the waist, you can feel it pop loose and it just slides right out again. So another issue that I don't think this one has, yeah, you've got to add some force to pop that off. So a couple of tolerance issues. So now let's go ahead and get into the comparisons here. We'll bring in the Titans Return Twin Twist compared to the Wrecker version. But first off, let's go ahead and look at the heads. We'll pop off both of the Titan Masters here. So here we have Titans Return compared to the Wrecker version. And both head sculpts look really good, blue eyes, silver face. Of course, the Wrecker's has the blue helmet, where the Titans Return has the white. So I'm unfolding these into their robot mode, which is flame out. I do like the paint applications on the Titans Return a lot better, though, excuse me, the Wrecker is a lot better. But I do like the fact that the Titans Return has a paint advisor. So that's it for the two Titan Masters. And now let's compare the two figures together. And as I said earlier, the Titans Return Twin Twist is an homage to the original Generation 1 toy, where the Wrecker's Twin Twist is an homage to the Diaclone toy. And I really appreciate Hasbro giving us these figures in Diaclone colors. Now I do want to point out that my Titans Return Twin Twist has been enhanced thanks to Toy Hacks decals. So we'll go ahead and take a quick look at the detailing on the Wrecker Twin Twist here. We've got painted shoulders with the red and yellow, silver paint here and here, a blue Wrecker Autobot logo right there on his stomach, down on the knees, got some yellow and red. And really that's about it. He does have painted treads, but we'll look at that more in vehicle mode, which we'll take a look at right now. In vehicle mode, both figures look really good, but I'm still going to have to give the edge to the Titans Return version. I just like the way the colors pop some more on this one. Aside from the Toy Hacks decals, you still had nice paint applications right there with the yellow. The silver looks a lot brighter on the Titans Return, and of course you just got the extra details right there on the tank treads. I think the black and the white contrast a lot better. But the Wrecker's version, I mean it's pretty much spot on to the Diaclone Toy, and just not a lot of paint applications. You got the yellow and red up here, gray for the treads, and as I showed just a while ago, the drills are just a little duller. And as you can see, the Titan Master can fit right here inside the opening cockpit. It's just hard to get open. So yeah, there you go. Right inside there. So all in all, the Wrecker's figure isn't bad, both of them bring something a little different to the table. So does a Transformers legacy, Amazon exclusive Wrecker and Rule Diaclone Twin Twist belong in your collection? Well, if you do not have the original Titans Return figure, absolutely. Because I know he's going to get his partner Top Spin at some point sooner or later. I just really wish the tolerances on this figure were better as far as the waist is concerned and the knees. But nothing a little pledge floor polish won't fix. So there you go guys, the Transformers Legacy Wrecker and Rule Twin Twist. Now guys, if you enjoyed the video, don't forget to like, don't forget to subscribe, and don't forget to click that bell icon to get notified when I upload new videos. Also if you're in any position to help out the channel, I do offer channel memberships here on YouTube. I have a super thanks button and I want to give a huge shout out to all my current channel members because it's support like yours that helps keep this channel going. Once again guys, this is Patriot Prime, signing out. Hoorah!


I'm Penetrator Gensbeck, we, so we just presented on the main stage a framework for interfacing with the vehicular ad hoc network rather for, oh true, I'm sure we get one of these guys. We just presented a framework built on the mainline Linux kernel for interfacing with connected vehicles, so this concept of V2V V2X using by make modifications to the drivers for cheap accessible consumer off the shelf hardware such that you can do this now with a $20 Wi-Fi card rather than a $5,000 DSRC radio. We're going to jump around the slides here a little bit more. We're going to skip a lot of the sort of high level theoretical things. The concept of V2X just to reiterate a little bit for those of you who weren't at the talk. The rapid high throughput exchange of safety information between participants of this vehicular ad hoc network to enable, you know, enhanced safety and behavioral optimization functions within a highly dense traffic environment. So what this means is cars and infrastructure points are exchanging state information constantly in order to optimize things like traffic flow. Sure. So, okay, so some of the critical features or aspects of this stuff is to, you know, I mean, first and foremost it's safety to actually allow the cars to provide information to each other that they can't get through the normal sensors. So, you know, you can't see inside the car, you can't see inside the engine and the ECUs and all that stuff. So they have to encode that into, you know, over the air radio message so that other cars in the vicinity can actually decode it and get an understanding of where the network status is and kind of route their traffic around that and, you know, coordinate. So, you know, it has major impacts on the, on every aspect of the transportation network and really this reaches out into most every aspect of society as we know it. The transportation infrastructure and especially the connected transportation infrastructure will touch all the other sectors of critical infrastructure systems from energy and power distribution to financial to medical, etc. So the impact of having these connected vehicle technologies is that you enable unprecedented levels of safety functions that are simply not possible with the sensor networks on board one specific platform. It has, let's see, we're going to skip around a little bit. There are already some deployed technologies using VitaX, so these are rolling out already in commercial automobiles for the last couple of years like cooperative of that cruise control. I mean, you see a little picture of here where the members of the network exchange state information and do some math in order to, you know, reduce the amount of stress and breaking and to really smooth out the behavioral flow of these vehicles. We have, you know, collision avoidance, advanced driver assistance, automated ticketing and tolling is sort of to be implemented almost unquestionably in the future. This we might not like so much, but it is unavoidable. So you want to take this one? Sure. So our, our approach to kind of developing these things is to create an open source software solution that allows you to use commodity hardware, particularly, you know, specifically the Atheros 9K chipset on Linux to actually do this 5.8 to 5.9 gigahertz transmission in OCB mode and, you know, do V2V to allow people, to allow anyone to develop their own systems to test, to validate and to kind of further development of the V2V systems and vehicular ad hoc networks in general, so that the future standards can build upon, you know, the cooperative data collection that anyone can, you know, buy into essentially. So I have a particular taste for this because I spent about two years before I brought him on it, it was one year, digging around the depths, the solus chasm that is Linux kernel trying to understand the attempts to integration so far. And what we come to realize is that pretty much every group that has gone out to develop an open source framework for doing V2V has failed, has orphaned the project partway through a gone closed source and produced an incomplete and now obsolete implementation that is being considered for deployment. It's simply unacceptable. So what we've done is modify the mainline Linux kernel and, you know, a set of standard Linux network and drivers that enable you to interface with VAnet using a $20 Wi-Fi card and any computer that runs Linux. So, right, lessons learned, everybody sucks, sharing is caring except for herpes. Standards committees are, need some serious assistance developing these kinds of, you know, highly complex safety systems that require the participation of the security community. Hence, this goes back to motivation for developing this framework, giving every member of the security community, every person here and worldwide the ability to sit down and start developing applications and understanding fundamentally without, you know, doing an analysis of the protocols and the standards. What? I got a question. Is it a really good question? Because otherwise, I'm kind of wait, or if it's a really good question, I mean, yeah, come on up. Yes. Well, because the standards committees aren't really being engaged by a whole lot of the security community. I mean, I know the, so I know those that were, in fact, were part of the committee for, or the distribution that's developing the security layer, very much incomplete, very much lacking, in fact. So, right, V2V systems are being deployed without any existence of a functional 16092 layer that to me says that these people need some help developing them, right? And that's, and that's the standard is incomplete and still under revision as it is today. So, I mean, you know, one of the examples, one of the examples in 16092 that raised some concern for me was the actual generation of certificates, right? I think that they're supposed to be refreshed every day, right? I mean, that was the current, that was the scheme, I believe, no? So, I mean, no. But look, let's talk about this after we got about 20 minutes left. I'd be happy to have this discussion with you and we can come over some of the distributions of the committee. So, hey, hey, check your privilege. So, we're going to do a stack overview, right? We go from the physical layer 8211P. Actually, I think we'll go back a couple years. So, the physical layer is comprised by, and the MAC layer by IEEE 8211P, the management plane by IEEE 1609, and the application layer by SEJ2735. So, just to go over these quickly, 8211P. So, multicast ad hoc mesh networking mode that specifies no use of authentication, encryption, or association. Over 5.8 to 5.9 gigahertz ITS bands, ITS intelligent transportation systems. They use five and 10 megahertz with subcarriers within these channels. And this modulation scheme called OFDM, which is a standard, you know, standard Wi-Fi modulation scheme. Okay. So, all right, moving on to 1609. So, we have the definitions for the security services in 0.2, or in 0.2, the networking services, and the, you know, the sort of encoding dictionaries in 0.3. 0.4 is the multi-channel operation. And 0.12, I believe, is the identifier allocations for provider service IDs, which are kind of unique strings issued by IEEE to identify particular service types. All right. And then J2735 is the application layer grammar message dictionary that specifies the safety messages that will be used, you know, in interoperable V2V systems. So, basic safety message is the one that has been most developed so far. Messages that will be continuously transmitted at periodic intervals between all members of the VA net that include state information, things like the dimensionality, the heading location of the car, such that you can perform, you know, behavioral optimization, dispatch, reactionary, reactionary actions to the vehicle bus to augment the behavior. So, they have been under development since 2005, 2006. The, you know, NITS has been drafted in documentation, I think, since about 2004 on this. There's been a lot of talk, has been many major overhauls to the standards without really, without a deployment of a fully complete and compliant implementation. Still today. So, the development is very much still in flux. All right. So, some major changes to the standards. The actual message encodings have encountered some slight modifications, but significant enough that the actual parsers wouldn't work between, you know, going from I believe WSB 1 and 2 to 3, I believe. And the message dictionaries in J2735 have changed dramatically in the actual entire scheme. The encoding CMS changed. So, they're completely in compatible. Aversionally using this thing called DER and then to VR and then to UPR. So, three completely different, semi-related but incompatible encoding formats that change sequentially through each major revision of the standard. So, you have ASN1 specifications that are entirely incompatible. And in fact, the most recent one that was published doesn't actually compile and also uses type systems that are non-standard in ASN1 processing utilities. So, basically, I even went so far as to buy the spec, which is something I try to, I try to never do. And what, you know, it doesn't actually compile and you can't actually use it or parse it. So, what we did is take this cobble work of a broken standard and implement some of it in C so that it's digestible and functional and we'll show that in a little bit here. You know, there's some question in our heads about the development of the standards. So, there's been a lot of ambiguity that's being introduced. There's, you know, things like the message CRCs, the verification codes were removed in the most recent revision of J2735 from the roadside alerts, from the emergency vehicle alerts. The rest were the same, but you take out the error checking code. It's kind of weird, right? After 15 years of reservation for these, for the ITS bands for use in intelligent transportation systems, now suddenly they're up for sale to the, to the telecom, talking about being used for LTE. And we just described the overhauls of ASIN 1 and 2, a non-standard format. And then furthermore, there's just a, there's a lot of ambiguity that existed previously in the standards. She'll talk about it. Oh yeah, sure. So, I mean, these, these aren't necessarily designed flaws. These are just issues that can potentially lead to some implementation fuzziness. They're, the way that the information elements are packed, they're variable length, and the specification in a couple places, you know, waste, like a byte encoding the length. And in other places, there's actually a bit of ambiguity as to whether or not there should even be a byte there to begin with as to whether, you know, indicating whether a certain block would be there or not. And that just, it leads to some issues that could go further down in the pipeline, not in the standards, not on the standards level, but on the level of implementation where you could have someone develop buggy implementations that cause issues. And, you know, that's undesirable, definitely. So, I want to get into the code here since we're, since we're pretty short on time. I just went over a lot of this. But this is, this is important real quick. I mean, big attack surfaces, so right the, the nature of the VA net is that it's accessible from a single endpoint. From one, compromising one endpoint, you can propagate a message over the entire network. In this distributed mesh networking fashion, such that you can say, store information on a vehicle that does not get distributed until it goes, I'll say, across like a certain border. And, and you can propagate it further.  So, not only, it's not just malformed DSRC messages, it's compliant, compatible DSRC messages that you can store, you know, deliverables in and propagate at an arbitrary point throughout the entire network. You can perform privilege escalation in the public key infrastructure to hijack, say something like an emergency vehicles certificate, you know, cause cars to move out of the road or, you know, execute something like a platooning service to disabled vehicles. And, and, you know, probably the most obvious one maybe we should have started with is it acts as an entry point to isolated systems. So, the DSRC radio is hooked into the vehicle control bus and, right, so if you can send reactionary actions based on, you know, proximal network activity, that means that you can also send malicious actions based on your desires, right? So, there's active and passive adversaries. Can, can you wait ten minutes? Pretty please. Pretty please. So, I've spent two years, hey, check your privilege, buddy. All right. Please don't interrupt me during a talk. Please don't interrupt me during a talk.  I mean, just like quiet for a minute, please. I'm plenty happy to argue with you when this is over. So, yeah, the, we're going to go up to our solution and how you use it, right? So, how to interface. I mean, so this talk, really, is about providing interface or a framework for interfacing with connected vehicles. Using Linux. So, right, it's never been easier, right? Just use Linux. We modified the Linux networking subsystems, MAG AT211, CFGA AT211 to support AT211P and then developed 60, developed a kernel driver, which we're, which is being integrated into the mainline kernel for the, all the 1609, you know, data elements and, and, and members such that you'll be able to use a J2735 networking utility, much like IW, which we provide to dispatch DSRC messages from the standard Linux wireless interface. Where we start is, so, bottom of the stack, modify the regulatory domain ad definitions for the intelligent transportation systems channels to the atheros wireless drivers or, you know, to the, to the arbitrary wireless driver right now. While it is built into the mainline Linux kernel, manufacturers of hardware specify a specific regulatory domain that hardware can operate in. So, you have to make a few slight modifications to each wireless driver, which are rather analogous and, and, and pretty much equivalent. We, it looks the same in the RTL and will release support for a wide set of standard drivers. You modify the regulatory domain in the kernel and in the user space utilities. So, in the net wireless interface and also in the CRDA and wireless REGDB at the, at the user space layer. And then modify the regulatory domain of the wireless driver as shown in the second picture there. And then you just, you define the filtering mechanisms for the 8211P frames. So, you, you know, there's, it, it is defined that 8211P frames that are compatible are data QS and action and specifically the types that are listed here. And you just enforce the use of multicast addressing. So all messages there are transmitted from 8211P and you need to use this broadcast BSSID, wild card BSSID, 6 octets of all Fs. And then in order to implement this in the user space, you, we made some simple modifications to the IW utility, which I'm sure everyone here has used Linux is quite familiar with. You add a definition to, to join and leave the OCB channels. You add compatibility for 5 and 10 megahertz with subcarriers within the channels. You, and then you can run this command, which we'll provide an example of in our GitHub repo to, I mean, it's that command right up there. And the result is that you're able to successfully join a 5 gigahertz channel in OCB mode using exclusive use of the channel and 10 megahertz subcarriers. So this is 8211P implemented. Next we're going to talk about implementing WAVE. Okay. So the implementation of WAVE is mostly to do with the actual messaging coding all the way up from the, the short message and, you know, the constituent fields in there. And, and that's primarily to do with actually just making really big parsers, or really big parser in a really big encoder, and encoder and decoder to actually allow you to turn these structures into a byte stream that goes and inject it into the wireless interface to go over the air. And then along with that, there's also the channel switching capabilities that need to be done to switch between the service and the control channel, which are handled through IW, just dispatching of IW set Chen, right? And then some user space links that allow you to use stuff like P-CAP inject to just send it off to the wireless interface directly and handle it all in user space and not worry about any kernel messiness. Still you? Let's go to the structs real quick. Okay, so here is the WAVE short message struct. I mean, this is a pretty simple definition, right? So you have subtype version, TPID, you know, then we have the end header information element extension, which is just a block of extra information regarding like things like location and heading or RF information like transmission power, data rate, that kind of thing. Moving on is the actual information element block, which contains these optional fields for the RF parameters, the routing, you know, external DNS's and various services that are provided potentially by the actual peer. Here are the sort of ancillary structs that are filled in there. We got the routing advertisements, service advertisements, and then the channel information and service information. I mean, these are all just, they encode the, I mean, more particular information for the advanced functions provided in the higher level, higher layer services that are built on top of this. Yeah. So then J2735 is, is analogically easy to implement, so we pulled some, some specification from the, from the broken ASN1 files, J2735 provided. So we, here's the struct, say for one of the messages, the basic safety message, which is one that most compatibility has been added for. We fill each of the fields up with data elements that are within the, the accepted range as specified by the standard. And then we take one of the structs that Nick just described. We fill it up with data and pack the basic safety message just into the, into the data field, serialize it using an encoding function that we wrote. And then dispatch it to the wireless interface using PCAP injects. And we can see, when we pulled up in Wireshark, it recognizes that a WaveShort message was transmitted. The Wireshark plugin for 69 is incomplete and, and doesn't recognize all the, all the types of packets and stuff yet. But we provide, you know, means to, to do this, to do testing and injection. What you can see here is that we have successfully using a nine, atherous 9K, $20 Wi-Fi card injected a DSRC message into the VANET spectrum. And the same thing you can do with other kinds of safety messages, emergency vehicle alerts and roadside advertisements. These are just simple examples of the same thing. And they're just as easy to transmit and inject. And then when you examine, right, the, the capture from Wireshark, you see all the data is there with all the proper padding. I mean, it's not really going to be too easy to see here, but. So what can you do with this, right? What, we have described so far as a means to, as we said, transmit and inject into the, into the, the wave spectrum, the intelligent transportation channels to interface with the VANET.  These are five, five sort of levels of increasing complexity. You can perform denial of service on, say, single antenna. Well, you can perform denial of service on the PKI infrastructure. The example here we give is on single antenna systems where you can actually cause a collision attack by transmitting out of sync with the rest of the nearby network. On top of that there, I mean, so you can enumerate over, so the actual nature of the, of the network is such that you can enumerate over the actual services provided just by observing the traffic across, and that allows you to characterize a great number of the architectures in the cars that are along the road. And if you can gain information about the architecture, specific stuff, the implementation specific stuff on the car, you can actually fingerprint that and say that, oh wow, you know, this car is running something that I know is vulnerable and I want to inject and mess with it in some particular way. You can, as we described earlier, hijack or perform privilege escalation in the public key infrastructure to hijack a certificate for an emergency vehicle or some other kind of privileged user that's allowed to execute built-in services like platooting which drives, which makes a vehicle come to a stop on the side of the roadway or, you know, et cetera. And if anyone would ever want to do that, right, you can also become a mobile toll booth. Sure, I mean, if the compromise, it requires, you know, the exploitation of these privileged users to actually gain access to their certificate. And if you're able to do that, you can swipe their privileges and actually start masquerading around along the road and do things you're not supposed to, right? So, I mean, that's the idea in terms of these exploits, or, you know, not exploits of these particular attack vectors. Yep, yep. So, and there's, you know, this also introduces other types of, of putting a potential for exploitation of vulnerabilities that exist today.  And moreover, if an entry point has a vulnerability that is implementation specific, not even one that exists at a theoretical basis and the standards, that provides you the ability to compromise all other systems that are compliant that might not harbor the same vulnerability. You can reverse engineer, wirelessly now, reverse engineer vehicular architectures the same way that you would reverse engineers say a vehicle control bus by performing enumeration of built-in diagnostic services in the DSRC protocol. You can, let's see, you wanna talk about that? I mean, so I mean, some of the nature, or the nature of this, of the vehicular ad hoc network in V2X particularly is that these vehicles communicate to each other right, but the vehicle also bridges out to external networks, be it through Wi-Fi access points or LTE. So if the vehicle's able to be compromised by messages going across DSRC, then you can actually use that LTE, the card, the cell phone chip on the card to actually pipe data up to wherever you want and potentially even get data back down and plug in backdoors, whatever the hell you want. I mean, that's the idea. Yep, and even more than pining, the whole point of this, while it is, it is neat to showcase, right? These kinds of attacks, it's more about providing a platform that allows everyone homogenously to participate in the development of these standards and of these future architectures. The state of them today very much reflects the need for participation by the security community to develop these to a point where they are resilient and robust and ready for deployment in safety critical infrastructure systems that are gonna involve more network traffic than we've ever seen before in this kind of system. So you get to participate. This code, we've released our framework on GitHub and we're going to continue development and contribution to it, to extend support to a wide range of wireless drivers and to continue developing the J2735 interface as the standards become developed further and eventually integrate 1609 when the full family is complete and ready. So, unfortunately we don't have more time to do, well we'll be doing some stuff over in the Cracking Village you can come and ask us questions and we can show you stuff. I wanted to thank these guys, especially that one there in the middle for helping us get through this over the last couple years. So here's the GitHub link, here's some references and thank you very much.


We are studying statistics in psychology and in last lectures we gone through how we define our statistics and why statistics is important particularly in psychology. As we know now, statistics is a science of numbers, dealing with the numbers, analyzing data and then making inference about the data and solving real world problems. All these statistics help us and we discussed that statistics are descriptive or inferential and in descriptive we discussed that descriptive statistics mean when we organize data, summarize data and present data. So in last lecture we talked about organizing data and summarizing data and presenting data but today we will formally step by step gain it. So in organizing data, when we collect data, we have so many data points, so first thing we make it a frequency distribution. Frequency distribution is that frequency tells you how many times a number is coming in your data. For example, as you can see on the screen, 1, 2, 3, 4, 6, 9, 8, 5, 1, 1, 9, 9, 0, 6, 9. So if we calculate the frequency of number 9, we can see that 1, 2, 3, 4, 5 times 9 is working. So in this way we make our frequency distribution by taking and organizing scores in one column and then frequency for each score that is how many times each score is occurring in second column. And frequency distribution basically is an organized tabulation of the numbers of individuals located in each category on the scale of measurement. Frequency distribution. You can present it in numbers or you can present it graphically in frequency distribution and today we will talk about it. Let's take some data and actually construct frequency distribution. For your ease, I have already put everything on the screen but I will explain step by step how we did it. So we have a first column that is x. You can see in your raw data, for example, this is my raw data which has values from 1 to 5. And I have to see how many times each number is occurring. For example, I have written the data in descending order in 1, 2, 3, 4, 5 x column and then I have to see how many times each score is occurring. For example, if you look at 1, it is occurring in 2 data, so I have put its frequency in 2. Similarly, if you look at 2 in x, then how many times it is occurring in 1, 2 and 3 times it is occurring, so I have written its frequency. So when we place two columns, 1 is x and second is f, this is pretty much a frequency distribution. In this, we have made a distribution of scores. That explains how many times each score is occurring in a given data set. Additionally, we can calculate its proportion and its percentage as well. Percentage, of course, you all know that if we have this total f, how much is our n 20? So in frequency distribution, our third column is of proportion and our fourth column is of percentage. Similarly, x and f are to give you a lot of information, but for our convenience, because we have to use this frequency distribution for further analysis, that is why we have to add a definitive column, which I will explain shortly in our next video, why this column is so important. So, it is easy to get its percentage, but proportion means that you will get it out of one. For example, if the total observations are 20 scores and our data points are 20, that means n is 20 and if you want to get its proportion, then you will get it out of 2 by 20, which is 0.1, which we have written and if you want to get its percentage, then you will multiply it further from 100, which is equal to 10 percent. Similarly, for each score, you have got its percentage and its proportion. So you can imagine that in real, when you are collecting data on a real issue, for example, for your thesis, for your group research, data is in hundreds and hundreds. So, when we have such a large data, we can organize it in classes and the advantage of organizing is that we get to know at a glance that in the data, how the scores are spread and in which category more people are coming. We will use frequency distribution further in the next lectures and I will show you how helpful these distributions are for other descriptive kind of functioning or analysis.


Your coca-cola bottler presents Claudia Claudia based on the original stories by Rose Franken Brought to you transcribed Monday through Friday by your friendly neighbor who bottles coca-cola Relax and while you're listening refresh yourself Have a cold and now Claudia Is David dressed already? I better start something. No hurry mom. He's still in the shower.  Oh, he locked me out. Mm-hmm coming to his senses. I tickled him mama. He's got the patient of Joe be your husband Oh, I don't see what's so wonderful having patience sometime try marrying a man without it. I'm married now. Thank you Stop walking around like a lost puppy. Claudia. You're making me dizzy. I'm waiting for David Have you seen my glasses? Where'd you put them? If I knew what I'd be asking you You might don't get up. Mama. I'll look for them. Are they in the kitchen? I'll look for them myself It'll be less trouble really you can't ever let anybody do anything for you. Can you anybody? Yes, you know I don't trust you wait till David hears David will understand Hey, where are you going into the kitchen to look for my glasses? Do you mind? Yes? I do here they are Where were they right there under David's shirt? How did they get there? I wonder oh, I can't imagine mama Got that cuff fixed yet. Well, I thought I had but doesn't look right somehow give it here I'll fix it. Claudia. I'd rather do it myself and have David walking around with one cuff two inches shorter than the other But he's my husband still better reason. Look, you just show me how I've got to learn sometime mama besides It's all your fault my fault. Well a mother is supposed to prepare a daughter for marriage Cooking sewing you know all the femininely things nobody can tell you anything not even that femininely is not a word You understood what I said didn't you have it now watch carefully. I'm watching first Claudia you're breathing down my neck. How can I watch otherwise come over here? We'll sit on the sofa now First you edge the sleeve part then you sew it on to cut your heads together over your sleeve mama showing me how how what? Put something up and put it together silly. Yeah, what you doing that shirt anyway, I stretch if you don't mind I do mind in the future David see stretch before and after your shirt It's terrible to sew another one of the sacrifices of marriage Stretching only before and after Claudia. I can't see with you leading over me like that Well, I can't see if I don't mama David do me a favor locker in would you come over here darling? Your mother doesn't appreciate you only child. She has to My you feel nice and cool and smooth now what to put on what do you mean? What did I put on your hair same stuff water? Nice, I wouldn't buy anything else cheap to here David. No all done. Oh, thank you mother What do I owe you couldn't afford it now? Where are you going to get dinner ready?  Take it easy a while. Don't take me any time at all. Say I'll get dinner tonight Oh, no, you won't then since you're so stubborn. I'll tell you what what I have an idea What we'll go out. We'll do nothing of a kind. I've got a perfectly good steak in the ice. Oh, we'll keep why should it? Because I like to eat out.  The waste of money. I shot mama. Do you David? Where do you like to eat?  Oh I suppose you like those places where the the main using handwriting in purple ink Mm-hmm and where the chairs are all on chairs carpets, too Oh, I was afraid of that. It was too good to be true. What do we both like to eat out now? We'll never be able to decide where to go.  Which kind you Really that woman she went into the kitchen again. Do we have to watch you every minute? Claudia Let's really go out tonight. What do you say? I'd love to David. She's been working awfully hard. Come on.   What is all this nonsense? No nonsense at all. We're celebrating What are we celebrating? Listen to her, David.  Claudia Do you think we ought to break the news to mama that she's a year older three months too soon? See that's right. I didn't think of that Mama, do you mind being older sooner? I'd rather be younger later Say I know what we'll do we'll celebrate your last birthday tonight, right? That makes you Let's see nine months younger tonight than you will be in three months. That's settled So put on your best bib and Tucker and we're off to celebrate come on. I've had enough of this birthday already Where we go? You leave that to me the best restaurant in town You too serious? Of course we are. It's your birthday, isn't it? We've got to eat out Normal person hasn't a chance around here normal. What fun is normal?  I struggled And hurry up mama. We're going to give you a wonderful birthday party David how much longer do you think we'll have to stand in line? I'll give them uh two more minutes at my house No standing in line personally. I find the backs of people's heads fascinating. Don't you David? Don't I what find the backs of heads fascinating? Say look, there are only seven people ahead of us now at my house We're first well if you'd wear tails and stiff front front shirts when you serve mrs. Brown I wouldn't mind eating at your house.  I see it sounds if you're the only person who'd ever had a house. Have you? No, but we will on Friday won't we David? We will what? How much my shoe hurts stand on the other foot your name, please Uh not and how many in the party mrs. Milton? Three? We'll take care of you in a few moments mrs. Milton right after this party No, thank you. Say look three people are leaving. No point. It's rude. David tell him we're next I will not mama.  It wouldn't do us any good. These things are organized Uh, right this way mrs. Milton. We have a table for you right over there Ah, you see virtue is its own reward mrs. Brown I'm sorry. We kept you waiting so long mrs. Milton. I wish I had known it was you No, quite all right quite all right. Here we are. Thank you very much. I'll send the waiter over for many of us Thank you David who is you? I don't know It's funny mama all david said was who he was and and look at us sitting down If I wish you told me what your name was so effective I'd have married you myself. He wouldn't have had your mama. Would you david? Well, she might be helpful around the house David how do you suppose we got this table? How long those other people? Oh, I'm a very Distinguished-looking husband mrs. Norton. I think that claudia thinks that david I had no idea they had waited for that. I'll tell you a secret. What? I think he thinks I'm heartily heartily Yeah, when I gave him my name norton it probably struck a bell Heartily norton, you know that rings a bell in the best restaurants in new york. Well, I no longer impressed. I'm embarrassed So am I a little Actually though, I think it's very funny funny at my house you can eat even if you aren't anybody's brother Hush out mama. Yeah, no odious comparisons allowed on your birthday. You know that what's the good of a birthday Here are the menus mr. Norton. We'll call when we're ready to order that will be fine, sir Rippling handwriting just as I thought Here mommy your glasses. I remember to eat now ladies Now try to make up your minds. What'll it be? That's a fast David. There's so much to read here I don't know why it's so much fancier to write than to type mama. Look what's the matter claudia look at the prices I've been looking at them I decided David is absolutely crazy state 450 a piece Mama, how much is that steak at home to 37 for the three of us day. Did you hear that? No, I'm not interested 459 12 1250 just for steak for us 1350 steak all right with you mother I should say enough it's sticking my throat. I'm having the salad you are not Steak it's subtle steak is a birthday dish 1350 Mama how long does 1350 feed us a few days and very well too. We're paying for the carpets and the music You know that don't you David? Well, let's see steak and what else nothing else Steak and baked potatoes Asparagus and salad all right David you don't have to show off from me of claudia, you know We're married to you already Is this or is this not your birthday mother it is not and that settles it no more discussion What are you gonna do you'll see waiter Oh waiter you wish to order yes Three turtle soups three medium rare steaks with baked potato Asparagus and mixed green salad David. I won't hear another word on the subject. It's not about that. Then what is it? Onions don't forget the onions. Oh, yeah. Oh waiter french fried onions with each please onions But of course I'll bring the soups. Thank you Well mama, what do you think of your birthday party? You really want to know what I think? Of course I do. Don't you David? Well, I think claudia, but you're married a very superior man Who's sleeping David? Good night Good night David Do you think mama was pleased What do you think? I think she was very That's what I think You know, she never says things not for me anyway, but that's how I can tell sure Good night, darling David what now claudia just one more thing. All right. All right go on You know, I agree with mama. What about I think you're a very superior man, too So do I you do why you can see that person but of course I do I've thought so ever since the day you asked me to marry you You mean you think you're a Of course of course who cares we're married now. That's all it matters And all that ever will matter David now. This is for good darling Good night David Oh and go to sleep claudia Someday when we're very rich darling You think mom and mind having two birthdays every year All story material used in this broadcast of claudia was under the supervision of rose franken and william brown meloni That there's more coca-cola available Once more when you step up to the familiar red cooler and ask for a cold bottle of coke. You're pretty sure to get it Now you can enjoy the pause that refreshes by yourself or with a friend Yes, there is more coke now It's the same coke as always And the price is still five cents Every day monday through friday claudia comes to you transcribed With the best wishes of your friendly neighbor who bottles coca-cola So listen again tomorrow at the same time And now this is joe king saying au revoir and remember Whoever you are Whatever you do Wherever you may be When you think of refreshment Think of coca-cola For ice cold coca-cola makes any pause The pause that refreshes


Hello and welcome to another episode of the Private Property Home Shopper Show and today we have another first for you. We are here in Stain City. So many of you have heard about it. It is Dyle Stain's enclave at the back of Fourways right between Dane Fern and guys there is so much here for you to love. If you're in a question they've got an in-question center. There's a restaurant, a club house, a mountain bike track, a running track and green bolts all over the place. Everything you need including schools are located right here but I'll tell you everything you need is right in this house with no reason to ever leave it. There are so many very very nice touches on this house and the first is just behind me on the front door you'll see a carol boys door handle leading so much class to a house this beautiful. So I'm gonna take you through it and guys in the comments I want you to let me know your favorite features so let's get to it. Walking out of the entrance hall you find yourself right here between your sitting area and your dining room area there's so much space double volume ceilings windows all over the place aluminum frames double paint keeping you warm during the winter and nice and cool in summer saving you on your heating and your cooling bills below me beautiful beautiful wood flooring and the thing that your eyes drawn to immediately is that cast iron fireplace there real wood fireplace chimney leading all the way up through the double volume ceilings drawing the eye up to just how high these ceilings are beautiful chandeliers flanking just over the sitting area as well as a dining room area and guys you can see how much space there is both the sitting room in the dining room area have their own double doors leading you off into the beautiful garden I've been told that many many homes in Stain City don't have gardens and this one not only has its very own garden and its very own heated pool but quite a spacious one at that so we've spoken about the sitting room area we've spoken about this beautiful dining room area with tons of natural light so let's walk into this kitchen because the beauty does not stop there as soon as you get into this kitchen lady with this stunning natural resource wood floor you see in the center marble kitchen island the down lighting in top of it see green gloss it really does give you just that touch of color that this house does wonderfully right over here for all of you aspiring chefs you've got a smeg five burner gas cooked up with an oven built in just underneath and another oven also smeg right over here stunning plenty of cupboard space both behind me as well as underneath this island and across to this side of the kitchen you've got a lot of prep space if you're busy cooking up a big meal and just underneath plenty of drawers for all your storage options but behind me what's a beautiful breakfast look so much like you can really start your day off on a positive note there's another exit there to those beautiful grounds letting you into your garden but there's so much more to this kitchen guys and to my left there's a scullery as well as pantry so let me show you some of the features over there walking into the scullery you'll pass the pantry on the left hand side plenty of shelving space there for all your dry food goods and then you'll find yourself in the scullery double sink for all your washing up needs but if we're talking about washing up there's not one but two smeg dishwashers built into the left and right hand side and this is built in to the actual cupboard space so it's hidden from view it keeps everything looking very clean and very neat and now that you've seen the scullery and pantry and those really cool dishwashers I want to let you know that the fridge is done exactly the same hidden fridge you pull it right out of here it doesn't take away from the facade of these beautiful cupboards but there's a lot more to show you come over here with me and then because we've spoken about the fridge this year top to bottom is a huge built-in freezer cupboard space there cupboard space above and here we go your very own wine cellar exposed brick behind it beautiful wood keeping your wine separated and I think it's the third wave looming I think this might have to come with me so coming out of the kitchen we're gonna walk across the full living room area we're gonna pass an office on my left that we're gonna show you in just a moment and you're gonna find yourself within your lounge and this lounge area is stunning it's got its very own central air-conditioning system gas fireplace in front of you beautiful plush carpets windows all the way around and they're all double paints you can imagine how nice and cozy this must get in this coming winter month and really it's just a very very nice place to be in I love lounges with lots of light and this lounge has just that again as I'd mentioned the curtains can come with the house if you'd like it all the doors are sliding doors so it saves you so much space so what I'm gonna do is I'm gonna pop this fireplace on put something good on Netflix and I want to see you in a little bit so another really cool feature that this house has is it has not one but two garages both of them are double garages so this house will easily accommodate four cars these garages also have plenty plenty of storage area as well as cupboard space but come over here let me show you this guest room and at the end of the hallway you'll find yourself within the guest bedroom located on the bottom floor this is the only bedroom downstairs and this bedroom is easy access to you can almost say it's an in-suite bathroom because this in-suite bottom is just outside and it's a beautiful bottom all of the bathrooms in this house have been done up so well I cannot wait to show you the master suites bathroom but yeah we are guest suite again plenty of light plenty of air what this house has done so well that so many houses struggle to do is have light in all the rooms and that double paint glass make sure that the warmth the light it never becomes overwhelming it never makes the rooms feel stuffy or too hot it is light and cool and that's exactly how we like it come here light and cool cameraman let's go the guest bathroom is beautifully done tiles on the floor give it so much styling character then the vanity has got almost a Victorian style turd with a marble countertop toilet with hidden cistern and a walk-in shower really makes this bathroom even though maybe a guest bathroom feel like a main feature so as you come up those stairs you'll notice just how beautiful and how airy this house is right over here on this bridge you'll see both of the chandeliers it looks stunning it feels incredible the white along with the pale wood it is stunning I actually can't say it enough but also it's really good quality as well I mean if I had to shake this nothing moves and that's what's so important when buying a house these days is you want to buy a quality home but right here we'll find on the left there's a pajama lounge you could use this as another living room maybe even an office and that's kind of how it's been set up right now double paint windows looking out onto your driveway and right over here we find one bedroom another bedroom just behind you guys and the bathroom here so let's take a look at this first bedroom so as I mentioned this is a four bedroom four bathroom house three of those bedrooms are located upstairs and this is the first now this bedroom has got plenty of access to the outside garden looking through these windows as well as plantation style shutters on some of the windows fan above me as I'd mentioned as well there is a central air conditioning system that also purifies the air so this house has really got it going so much cover space behind me beautiful plush carpets let's take a look at the bathroom and then let's take a look at the second bedroom located upstairs let's go now this bathroom has done something special again different tiles on the floor giving you a completely different feel those tiles match the vanity as well as the sink they double sink so you can easily cater to those two bedrooms in the corner of their house then walking shower as well as freestanding bathtub really quality bathtub love how it looks frosted glass windows and then a toilet just around the corner now let's come to the second bedroom just before we go to the master suite again plush carpets fan above you access to their central air conditioning systems windows overlooking the front of the house frontation shutters these bedrooms really are big they spacious they can easily accommodate your children as they do grow up or they'll make perfect playrooms office space anything you want to do the house and the bedrooms will easily accommodate us so coming off of the landing into the master bedroom the creme de la creme as I've mentioned it it's got so much central air conditioning system fan windows overlooking the gardens this plush carpet plenty and plenty of space including cupboard space and its very own hallway with frosted gloss now this master bedroom has been styled really nicely got this beautiful wallpaper showing a vista of trees just behind where the bed is we've got so much space in the corner right over here just between two windows looking out onto your ground that you can utilize for a little sitting or reading area we all like reading nooks but you might be looking this and saying to me Chad that is a really nice bedroom the bulkhead ceilings Chad I like it but we've seen so much more where's the walk-in closet Chad where is the fireplace and you know what I've actually got a lot more to show you to come with me and yeah we are what a walk-in closet this is this actually reminds me of a Santin boutique it's done so nicely beautiful mirrors on all of the wardrobes with that X pattern this stunning chandelier yeah center floating island with a mirror in set and something that I like and I think a lot of you ladies might actually tell me I might be right here but let me know if I'm wrong it's just in the corner is a place where you'd be doing your makeup but there are two windows facing out there with those plantation shutters so when you do your makeup you've got natural light on your face instead of either halogen or down lighting so you can see exactly what you're doing I love what they've done here again that plush carpet underneath me but wait until you see the master bathroom let's go take a look and here you go the master suite bathroom this bathroom is incredible like I've mentioned done so different from all the other bathrooms I mean what bathroom do you know that's got a chandelier above you on my left hand side marble countertop double vanity those Victoria style cupboards all of the faucets here those beautiful gold faucets are st. James we've then got a walk-in shower that is done reminiscent for me at least like those London style apartments the glossy segmented into little rectangles I love how it looks the flooring those tiles continue right into the bathroom and into the shower I love what's done in the corner where I put you guys I'm sorry guys I love you but I put you where the toilet is situated the toilet door can be closed so you can get a little bit of privacy all the windows around you and trust me there are many one two three four windows all frosted beautiful bathroom all you bathroom connoisseurs I want you to let me know in the comments what you think about this beautiful bathroom now located downstairs as well is your very own private office I mean you can use this room for whatever you'd like to use it for but sliding doors separate you from the rest of the house giving you just that bit of privacy where you're trying to get some work done and here we are outside this beautiful outside area as I'd mentioned not a lot of houses within Stain City about their own garden and this doesn't just have a garden it's got a full wrap around garden with servants quarters as well as a pool and this pool is heated solely heated pool guys I love this outdoor patio it matches the house it's nice it's fresh it's neutral toned we've got beautiful exposed stonia a prep sink in case you're looking to do some cooking outside along with the bride so what I want you all to let me know is what do you think about this house what do you think about living in Stain City can you guys envision yourself living in this beautiful estate and that is also the close so for myself Chad Rivera everybody at private property the team here thank you so much for tuning into another episode of the home shopper show we're gonna see you again same time same place guys we love you and goodbye the rest was I think we need to go this guy might want his trampoline back


The capacity of the state-run Ezra Long Laboratory to respond to COVID-19 has been significantly boosted following a donation by the St. Lucia Electricity Services Limited, Lucillec. Lucillec has contributed more than $160,000 to the Ezra Long Lab. This is the second donation the company has made to aid the lab in testing for COVID-19. More in this report. The ability to test quickly for COVID-19 is a critical part of the national response to the virus. This is especially so for health officials managing cases in this fourth wave. And that's where the Ezra Long Laboratory at the Owen King EU Hospital comes in. It is tasked with a 24-hour turnaround of test results. Laboratory director Dr. Wayne Felicier says it is a commitment the lab has been able to meet with the assistant of the St. Lucia Electricity Services Limited, Lucillec. Lucillec thankfully has done a second donation to the Ezra Long Lab and my extension to St. Lucia to assist in the testing of COVID-19. And this has gone a long way to us trying to meet our turnaround time of 24 hours in terms of testing. That contribution alone has gone a long way to reducing the spread over this period of time between the months of August and September. The numbers are high. We can't get around that. The positivity rate is high comparatively but we think it could have been a lot worse if we did not have these extra resources just to facilitate proper testing. The director is speaking of a more than $160,000 donation of test kits and consumables donated by Lucillec in July. It enabled the lab to deliver COVID-19 results in quick time. Dr. Felicier says testing and providing results quickly are critical steps in managing national COVID-19 infections. When you look comparatively, when you look at January, February, when we had significant backlogs. We were extending our turnaround to 60s sometimes and accumulated samples of almost 1,200,500. We were able to turn around samples within 24 hours. Eliminating backlogs, persons getting the results within a reasonable time frame and a lot of companies, government services, police able to make decisions in real time as opposed to having six-day time lapses and having persons in the community who have been exposed developing positivity and back-stention spread in the virus. This is the second donation Lucillec has made to increase the testing capacity of the facility. Chief Medical Officer Dr. Sharon Belma George says Lucillec's donation has really assisted in managing the cases in a very timely manner. Lucillec has been supporting our testing capacity at the Azure Long Lab and this isn't the first time but this second donation of test kits and consumables to the Azure Long Lab is very significant and if you look at our management of this fourth wave where we've noted a vast increase of cases within a shorter period of time, this is the most cases we've managed, our testing capacity per day has gone up to up to over 500 per day and the lab has been able to maintain the 24-hour turnaround time and this is because of the support of Lucillec. So the testing kits and the consumables they've ensured that we've kept in terms of our stock and we've been able to facilitate the turnaround time. We have not had a lag in terms of our resources or the accumulation of samples from not being able to test and this has really assisted us in managing the cases and their contacts in a very timely manner. So we are extremely grateful for that level of collaboration with Lucillec. Testing is a necessary and expensive part of managing COVID-19 on Ireland. Lucillec Managing Director Trevor Luise says it is for this reason that the company responded quickly to such requests from the Ezra Long Laboratory. The two donations made to improve testing capacity at the lab totals over a quarter of a million dollars. Each COVID-19 test costs approximately 150 US dollars and is provided free of charge at respiratory clinics across the island. From the Government Information Service, Lisa Joseph reporting.


I have played and had fun playing and everything on this list I have gotten a platinum trophy out of so let's just get right into this Up first is the Lego video games literally any of the Lego video games has basically the same Build and the same kind of mechanics I have only played two Lego games But I purchased four of them the ones that I own our Jurassic world Lego superheroes Lego Batman 3 and Lego Avengers and Out of those four the ones that I have played our Jurassic World and Lego superheroes Basically what you do is you have to do two playthroughs of the game of the story and then go around the hub to get all The remaining collectibles this game does require like I said two playthroughs Which a lot of people are against but the main reason I picked up these games is because number one a lot of them are regular $25 to $30 I bought them when they were on sale around Christmas time for $8 each So number one they had a lot of savings at the time that I purchased them And I see them all the time on sale more frequently now and also it reminded me so much of my childhood I remember having the physical Lego and also the Lego video games from back in the day on the computer And that's why I wanted to try out these ones here. So like I said two playthroughs you basically play one playthrough as Normal whatever characters they select for you for each mission Once you have that done then I usually go and I go through the hub and try to get all the collectibles there and then I go back to one more playthrough where you can go and Choose any character for any level and it makes it easier And you can get finish off all the collectibles in the second playthrough because there's some that are restricted to certain characters And the only way you can get those certain characters is to go and play I think it's called free play and you can select any character along the way So definitely would recommend them like I said I have Lego Batman 3 and Lego Avengers I'm gonna wait till the end of the year to play them because I have so many games on the go right now That I'm working on I don't really have time for Lego games I know I can get the platinum on them in the future and I'm definitely can't wait because there are a lot of fun to play These ones here I don't typically like games that required two playthroughs, but the Lego games were a lot of fun Next up on this list is a game called onrush. I got it free from the PlayStation store a couple months ago It is a fun game. It's a racing game where you have to smash opponents in different events There's different rules and different things that you have to do But honestly, it is a little bit of a grindy of game But if you play co-op with somebody you can play campaign as co-op Team up with a friend.  This is one of my favorite games of 2018 It was a sound game all around the mechanics were phenomenal I bought this game because number one. I'm a huge fan of Marvel. I'm a huge fan of spider-man I remember the spider-man games back on the computer back in the day And I enjoyed them, but I was expecting bigger things because of the new technology for video games as of right now in the current market And spider-man the mechanics was phenomenal. I enjoyed the game in the game There's so much to do the story was amazing.  There's side missions. There's collectibles There's a whole bunch of other things photos that you could take around the city There's so much to do in the game. It is phenomenal Like I said, I did get a platinum I played this for about two to three weeks straight and I did have a job at the time So I had a lot going on and a lot of people got the platinum sooner But it took me two to three weeks because I was just on my free time I'd play it and I'd only play this game on my free time And that's how I got the platinum in two to three weeks. So story was amazing. I had fun with this game I kind of wish there was more super villains in it I kind of wish for Venom and Sandman and Green Goblin But hopefully there's talk that there's gonna be a second game in a couple of years for Spider-Man a continuation from this one and I'm really excited for that I already know Avengers is gonna be coming out at the end of 2019 Maybe it's gonna be 2020 and I'm really excited for that But I want to see another Spider-Man game in the future. The next game is need for speed 2015 Usually when it comes to me, I can't platinum racing games But this game was very special because it was so much fun I remember the need for speed games back on the PlayStation 2 Which I fairly enjoyed because I got so many of them and I had fun doing it because I'm the type of person When it comes to cars, I love the customization factor. I don't care so much as to what's under the engine I just want to make it the most stylish vehicle that I can and I care so much about customization That's why I love need for speed in this game They brought back and I kind of advanced one of my favorite features in racing games and that is drifting in this game It was so fun to drift because you can have one single car You can change the adjustments to make it a drift car or to make it a race car One thing I want to say with the newest one and need for speed payback that I'm not a fan of is the fact that you have to Purchase a different vehicle for each class not like the 2015 version where you can use one vehicle for any class You just have to change how you use it So that's why I love 15 so much got the platinum some of the trophies are a little bit of a grind You have to do specific things, but it's a lot of fun So if you have the time and dedication and you want to play a racing game if that's what you're into Racing games is one of my favorite genres of video games. So I definitely would recommend need for speed 2015 Next on this list is literally any telltale games The ones I have played are the walk-and-dead game of thrones Batman and Borderlands Most of these games I got for free on the PlayStation store over the five years that I've had it But you can get them relatively cheap Usually you get them from anywhere from five to ten dollars out of all of the telltale games that I own and that I downloaded from PlayStation Store, I only spent less than ten dollars on all of them Like I said, some of them I got for free a couple I got for a dollar or two And I think the most that I spent on one game on for telltales was five dollars So there is discounts there and one thing I want to mention about telltales is since the company is no longer existing There is rumors that all of the telltale video games are gonna get pulled from the store relatively soon So if you're interested in the telltale games, I recommend downloading them as soon as possible now as the time this video gets Uploaded it might have already happened because I never checked as of right now to see if they've already pulled their games But that is the rumor right now basically telltale games The gameplay is iffy. There's not much to do. You're basically making decisions along the way But it honestly doesn't matter what decisions you make because the telltale games are gonna play out the way They're supposed to regardless of your decisions very minimal gameplay, but the graphics are unique to telltale It's almost like it's hand-drawn, which most of the time I'm not a fan of in video games where it's kind of cheap graphics But in this one it makes completely sense So I would recommend trying any telltale games My favorite was the Walking Dead, but you have to try out and see what you guys enjoy the most Grand Theft Auto San Andreas This is a game I got back on the PlayStation 2 and I never really finished the game because back then I was just kind of Chilling blowing stuff up using cheat codes, but for Grand Theft Auto San Andreas when it came out on the PlayStation 4 The one thing was with the trophies if you use a cheat code It disables all trophies and me being a trophy hunter I wanted to get all those trophies because when I purchased it and looked at the trophy list It seemed like something I can get a platinum out of it wasn't something that I intended to get a platinum out of but I did It was a lot of fun Not only playing the story got you a lot of trophies But after you complete the story or along the way if we're completing the story There's a lot of trophies to go ahead and go and do kind of like side missions the ambulance missions firetruck missions different things like that We're a lot of fun Purchasing certain things going and doing certain things got you the other trophies So it wasn't just complete the story and you get the platinum You complete the story and you do a whole bunch of other stuff which were fun to do and then you got the platinum So at the end of the day for me at least This reminded me so much of my childhood. It was so much fun to do I really enjoyed playing it and if you have yet to play it on the PlayStation 4 or Have never played it back when it came out on the PlayStation 2. I highly Recommend it the last game on this list is in my opinion one of the most fun ones to play and that is far cry Five not only is the gameplay amazing and the story is amazing But the story itself is so unique and this is honestly the first far cry game that I played And I can't wait to play more in the future I might go back and play some of the old ones because honestly I had such a blast with this game in far cry 5 There's not only the story to go and do but there's so much to do after that There's hunting fishing Whole bunch of stuff to do so the fact that it's not just complete the story and get the platinum trophy for it Which they are kind of fun to do as well But the fact that there's so much to do and outside of the campaign That's what really made this game so much fun and so awesome to play There's also multiplayer, which is really fun to do It was a little bit of a grind for the trophies, but it was really fun to do and I'd recommend playing that But one thing I didn't like for the trophies is there's a lot of solo trophies So you have to go and play the story in the campaign on your own Pretty much one run through to get all those trophies and then you can team up with somebody and play campaign as co-op And to clean up and get the rest of your trophies But like I said, you have to play at least one run through as a solo on your own and complete the whole Campaign in order to get a lot of those solo trophies for me I'm not a fan of solo trophies if I want to have fun if I want to bring a friend in and play co-op I should be able to do that and get the rest of the trophies But it's still a fun game and I would highly recommend it so much to do so much to see in the game The gameplay is amazing. There's so much wildlife, which I was not expecting at the end of the day I really enjoyed this game So out of this list the top three that I would recommend would be spider-man Grand Theft Auto San Andreas and Far Cry 5 The only thing I want to say with Grand Theft Auto San Andreas is it is not a remastered It is not a remake. It is the same old PlayStation 2 graphics So I wasn't really into that It was hard with the controls because the new GTA is like regular games nowadays with the controls But back then they're kind of iffy and hard to use So it was hard to go back and play that so the gameplay was a little bit hard to get used to But I did get a platinum trophy out of it. So those were the three Most fun ones not that anything else on this list was not fun to me to get the platinum for But those are the three that I would highly recommend everything on this list Honestly, I would recommend because I had so much fun playing and getting the trophies and getting that platinum But like I said, I did not purchase these video games in the intention of getting a platinum I purchased these video games to have fun and to play these games And it just so happened to turn out that I could get a platinum trophy and get a whole bunch of trophies At the same time and that to me getting the platinum trophy and all the other trophies was just a bonus I just bought the game to have fun and to play and to get a platinum out of it was a lot of fun So that's why I wanted to make this video to share with you a bunch of fun video games that you can get a Platinum trophy for That way if you guys want to have fun and boost your trophy count and boost your platinum count You can do that and have fun doing it So hope you guys did enjoy this game if there's any games that I've missed Maybe I have yet to play them and you had fun playing the video game and you did get a platinum trophy out of Leave them down below. I really want to see other games. Maybe I'll expand and I'll get into different games Not really with the intent of getting a platinum, but to have fun and play that game Let me know what you guys play down below and gotten a platinum for but I'm gonna leave this video here Hope you guys did enjoy. Please take care. Peace