Here in Lagos State the government is currently building a large capacity rehabilitation centre. The project is to address issues of increasing victims of drug abuse in the state. Special advisers to the government on sustainable development goals and investments shall I quit Hammond? Disclosedest on Monday, it was at a press conference to unveil the official launch of a platform tagged Lagos SDGs Youth Alliance. The platform is designed to engage youth in productive ventures. First of the Africa's Government House correspondents love Ikuku Oyedokun reports. As a government, we recognise the value of collaboration and engagement. The use of psychoactive substances among young people in Nigeria is assuming a worrisome dimension. Coses have been traced to peer pressure and the desire to exploit. This press conference by the Lagos State Government is to discuss ways to mitigate these causes and the harmful effects. Special advice is to the governor on sustainable development goals and investment. Sholakwe Hammond leaks a conference. She introduces a plan for the largest rehabilitation centres in Africa. Perhaps the Lagos State SDGs Youth Alliance is a platform to the rescue. This is something that the state takes very seriously. The Ministry of Youth and Social Development has developed a handbook that we are all working to implement. There will be a lot of interventions around drug abuse. We are building one of the largest drug rehabilitation centres in Africa currently as we speak. Youths are supposed to be changed agents but many of them have been destroyed by drug abuse, rendering them unproductive. But the Lagos State Government is all out to bring these menace to its knees. Certainly we are starting a new journey and shaping an exciting future by enabling young people to immerse in a social reality and responsibility that will help unleash a new tribe of citizens that are committed to common good. Ladies and gentlemen, we are poised to make this movement a special purpose vehicle that will drive a society of resourceful youth whose potentials are yet to be harnessed to drive the greater Lagos ambition by channeling the energy, education, intellect and resourcefulness towards positive engagement for a better future. Now, having a substantive engagement with young women and men, no doubt will improve the efforts of the Lagos State Government to establish positive influence on the society. From the Bucalto Press Centre, Ikeju Lagos, love Ikuku Uye Dukun. Reporting for PLAS TV.


Hello, everybody. Welcome back to another AI video. In this one, we're in Agent GPT. It is a browser-based version of AutoGPT. Yep, that's a mouthful. What are we going to do with this? Well, I'm going to show you how AutoGPT works, but in a browser. And it's free to try. However, I've gone ahead and added in some settings here where I have my own personal little open API key in there. So I'm going to go ahead and use the paid version. So we can go probably a little bit further. I'm going to show you what I mean here. So let's just get going, and then I'll walk you through it and we'll chat about it. So here's the first step. Go to this website, agentgp.reworked.ai. The link is in the description below. And you've got to give your AutoGPT agent a name. So I'm going to call this secret agent man, because I'm original. And then the goal, this can be anything. Go nuts. It could be about aliens coming from another planet. It can be solving world hunger. You name it. I'm going to go ahead and create a joke maker. The reason why I chose that is because A, I like to tell jokes and B, AI doesn't really do well with jokes, I find. So let's give them a real tough problem or a tough task. Next step, click on deploy agent and then watch this. It is embarking on a new goal, create a joke maker. And holy smokes, it starts creating its own tasks. I just had to hit go and it's going and doing it. So what's it doing? Researching various types of jokes and humor styles, program the AI system to generate jokes based on user input. OK, I like it. Incorporate natural language processing to ensure the generated jokes are coherent. OK, create a database of common setups and punch lines. Holy smokes, implement the feedback system where users can rate generated jokes as funny or not. OK, integrate image recognition technology. What the heck? OK, so it's going bonkers here. And honestly, this is pretty wild. Now, you might not get this far if you go ahead and just click on the button. And the reason why is because, again, I've added in my settings. I've given it access to my paid account. So I'm using a paid account. And this way I'm getting all of these tasks. It's going absolutely ham.  Incorporate machine learning algorithms to analyze the feedback and improve the AI systems joke making ability over time. Integrate sentiment analysis technology. What in the hell? I will further incorporate machine learning techniques to personalize joke generation. OK, so this is what auto GPT looks like when it's going off. And I'll be honest with you. My API key with open API, I set a hard limit of $20 US.  And it's probably running up my bill. I don't know what it costs yet. But it won't cost more than $20 for me because that's where I capped it. I put a hard limit on that. So yeah, it might be mini bar pricing. I don't know. Anyways, this is what it looks like. I'm going to come back when it's a little bit further done. And then let's see if we can execute on any of this. Like download it or I don't even know what's going to happen. So I'll be back in a short second when it's done. All right, everybody, welcome back. So holy smokes. I don't even know what to say. This just executed looks like 100 different tasks. I don't know. I actually had to manually stop it because I'm not sure if this got thrown into some sort of infinite loop where it just keeps trying to come up with new tasks and it doesn't actually release like a working agent, so to speak. So again, if you guys are familiar with this or if you understand it's a little better than I do and you probably do, please leave a comment. Keep in mind this is in beta and you'll want to put a hard limit on any API keys because this thing looks like it'll just go until your credit card's empty. So anyways, this is what it looks like. It's beta, but it works. This is AutoGPT in a browser. Thanks for watching.


Sigonella's JROTC cadets finish off the school year with a ceremony to commemorate the unit with promotions and awards. To make it even better, they get to share this memorable experience with their friends and family. Today was the culmination of seven hard months of good work that the cadets had performed. It was the end of the year ceremony in which cadets get promoted and they earned ribbons. So in front of their parents, we gave all that out to them. JROTC commanding officer Junivie Ferniza said the cadets spent a lot of time working hard to be the best JROTC cadets they can be. Throughout this whole year, we've put in a lot of effort to ensuring that the cadets get a good knowledge of what the Navy is like. And also, we've taught them how to be leaders and good followers. And so throughout this year, we've just hoped to instill good values into the cadets. The purpose of the JROTC is to instill in students in secondary educational institutions the values of citizenship, service to the United States, personal responsibility and a sense of accomplishment. It's safe to say that this year our Sigonella cadets are quite accomplished. For Naval Air Station Sigonella, I'm Petty Officer Sean Hillier.


So we hear the ID Tech Act show here with the who are you? My name is Valérie Foucault-Gelosy and I'm new market development manager at Epson Europe And I'm here to show the latest Moveryo product. This is the third generation augmented reality glasses from Epson, right? That's correct and the real breakthrough is that we are going to introduce an OLED technology, an SI OLED technology, silicon based. Can you take it off and let's try to see if you can turn around and maybe you can try to look through a little bit. So there is a system to reflect the OLED display from the side. It goes into that that space there in France. So people can see a 720p display in there, right? That's correct. We have two system of projection of both sides that will just reflect through the lenses in the front one projected image that will be projected right in your field of view with very high contrast and super big color gamut and the resolution as you mentioned is HD. Nice, that's awesome. So it's running Android through the remote so there's a you have an Intel X5 CPU right here. Can you hold this one for a second? So right here is the specs. Yeah, right there also. So we have it's SI OLED, silicon organic lighting, we keep it in diode. 720p and there's a camera of 5 million pixels and we can see right here. This is the press release. It's very recent. And the product will be available from October 2016 for sales. So October is a few months from now and who's the market for this kind of product? Actually the market opportunity is quite big. There are a lot of different areas and sectors that will use the product. Probably one of the main will be the drone market. The drone? Yeah, because piloting a drone with the glasses is a perfect fit. Not only you can see your drone at any time because the glasses are see-through but you can see the video feed projected right in your field of view at any time so you can see both the drone and the additional data simultaneously. So this is great for drone, it's great for let's say airplane manufacturers because they need to see an augmented reality, what they are fixing on the airplane or on the rocket or on the car. There's lots of possibilities, right? The example of application is just extremely big and possibly limitless. And the market we're going to address primarily is really the museums, arts and culture but as well healthcare and anything related to education and training because as you mentioned, for example, aeronautics or automotive industry would like to train their new entrants or their engineers to maintain, to understand new materials and they can do that at the same time they are receiving the information right in their field of view. It can be information, augmented reality with a fixed overlay of an object overlaying the actual object and the beauty of it is that they can actually do the work while they are seeing this information because their hands are totally free. This is so awesome, the potential is amazing, right? With Android and with the camera on the side you can actually kind of like recognize things maybe and displayed information only when the system recognizes something specific. And that's exactly that. So actually the camera is a 5 million pixel front facing camera and it understands the surrounding world so it will render content based on what it sees and therefore you can tackle a lot of applications related to this recognition. And on top of that we have included new features. So you have Bluetooth, you have Wi-Fi, 2.4 and 5 GHz and you have the capability as well to tackle applications that are IoT linked thanks to Bluetooth Smart Ready feature. So the IoT stuff, the wearables can be connected as remote controls also maybe? Or as a display actually because you can display anything linked to this capability from any other kind of device. So it can be displaying information for example from a hospital or in a dentist's cabinet. We have a lot of opportunities in the healthcare area as well that we have started prototyping with the BT200 but that will be really with full capacity using the BT300. So this is a beautiful new design, right? It's lighter, thinner, more compact, a new display that's really amazing compared to previously, right? Yeah, we have tried to just make everything we could to achieve the requirements from our customers. Between BT100 and BT200 we could reduce a weight by 60% and here we have succeeded to reduce a weight again by 20% which becomes more and more a challenge but they could achieve that because our engineers now start to be very knowledgeable in projection technology and optical design. So before it was LCD micro-display projection and now it's OLED? Yeah, we have been working on our own technology. So it's a silicon-based organic light emitting diode display. So it's Epson OLED? Epson OLED, yeah, developed in-house and proprietary technology. And what does it provide better colors, better, what's it called, brightness? Yeah, so the fact that we are using silicon as a base wafer and a glass allows us through the manufacturing process to create a very small display and a more precise pixel complex to glass-based OLED. So that's why we could achieve such an output in terms of resolution in terms of quality and contrast but as well reducing the size of the entire product. And it doesn't have a light sensor so it increases or lowers the brightness based on the surroundings? Yeah, so the little point you see just below the camera is an ambient light sensor. So because we have increased the brightness as well by 20%, we are using this ambient light sensor to modify the brightness of the display depending on the ambient light and therefore optimize the usage of the battery which still can last up to six hours even with the new specifications. How does it work, this system here? It goes into some kind of shape that is perfect to reflect the light? Yes, exactly. You have two lenses that will just receive the projection from both sides and unify so that you can see one single image being projected right in your field of view. That's really cool. So I would like to see this as a mass production consumer device but this is more like a professional device, right? Actually the business adoption has been very fast and that has been the first one to require the product to take it on board, develop application and there are a lot of actual applications already developed and already in the field delivering value today. So the consumer market will grow as well but it will be highly linked to the fact that applications are developed and that really matters with glasses and not only something you could achieve with a tablet or a smartphone. So fundamentally the drone is a very good example having seen at the same time and simultaneously your drone and the image additional data being overlaid and it's just making sense. It's a perfect fit. It's not something you could achieve with your smartphone tablet and then this is already a consumer kind of big boom in terms of usage and we think that the consumer market will grow that way and exactly developing perfect application for smart glasses. It would be great for conferences where you have specific applications where everybody at the conference has one or there could be all kinds of potential people should just buy and develop their app and the batteries and the remote. How long does it last? So actually that's true. It's a very kind of common Android platform. It's going to run on Lollipop 5.1 and it's going to be a very standard basic Android platform therefore anyone who wants to develop can just accept the product and make its own developments and the battery as I mentioned is lasting up to six hours so there is a lot of potential to develop a lot of different applications from many different sectors. Nice, awesome. So October and the price is announced already or? It should be around 800 euro. That's cool.


The members of the board, my name is Craig Schubert, I'm the mayor of this city. It has come to my attention that your educators are distributing essentially what is child pornography in the classroom. I've spoken to a judge this evening, she's already confirmed that, so I'm going to give you a simple choice. You either choose to resign from this Board of Education or you will be charged. Thank you.


So, hello everyone, today I am going to speak about understanding the common cloud misconfiguration using the GCP code. Before going into the me, the small data introduction about me, I worked as a security researcher at the company called V45. My primary area of interest is around like a cloud security, DevSecOps and like a Kubernetes security. I regularly share my learnings via blogs or at project, at my website like www.jojsoythebre.com. So this is my Twitter and feel free to follow me or reach out to me in order if you want to discuss anything about the security or just have a casual chat. So the audience of the talk is like a red team who wants to understand the cloud security and the blue teamer who wants to know how to secure their environment in the GCP environment and anyone interested in the cloud security in specially GCP. Hey Josh, do you mind clicking present at the top right? What? On your slide share, do you mind clicking present at your top right? Yes. Can't you see my screen? Yeah, we can. But go to your slide, Google slides. I'll be just explaining this one. This is good, right? Yeah, but make sure you go into slide share mode. It's present. Click on present at the top right in Google slides, okay? No, I have to switch back between like other things. Okay. Okay. Hide on the little notification where to stop sharing next to it. Yeah, sure. Thank you. Thank you. Thank you. Thank you. So the take care of the talk is like you by end of the talk you will be able to understand the common cloud rooms configuration in the Google cloud services. So before going to the actual slides and other things I just want to expect why I have created this GCP code in the first place. So when I started to learn the GCP security back like years ago, there is no rule in order to for me to learn the GCP security. There are other tools like other tools like other tools for other cloud products like AWS for AWS that is like AWS code and for the tools that Kubernetes we have like a Kubernetes code and for Terraform we have like a Terraform code. But there is no tool in order for me to learn the GCP, GCP security. The one way in the back desk for me to learn is the reading the documentation. So being the person who has to read the documentation, I just started to create the tool. So the complete project can be found in this URL, gcpcode.bcpcode.gov, so if you access this URL, you will be able to completely access this project and also this project is under like a free open source license like you could see the codes and able to make the changes and like add anything pick anything and also the most resources it will the most environment that we are creating what's under the free tier. So in order to start in order to deploy the GCP code, we have to like a working Google account with the billing enabled. If you don't have the Google cloud account like you can sign up for the free tier which you get like 300 orders and like 90 days, 3 months free tier so we can make use of this one. So in order to start the project, you have to create a new project, you just have to the Google cloud console and select the project and create the new project and you have to enter the valid name of the project, it can be any random name or any project any name you want to give and once you have created, you have to go to the APA dashboard by following if you click the link it will take you to the APA dashboard, you have to click on this enable service, so in this enable service we want to enable like a three services, one is like a Kubernetes engine, compute engine APA and the second one is the Kubernetes engine APA and third one is the cloud SQL admin APA, the reason why we are enabling the APA was like whenever we want to access the services program we have to enable the APA, once you have enabled the APA you have to click the terminal icon so once you have clicked the terminal icon you will get the gcloud shell, so the gcloud shell is like nothing but a VM so whenever we are creating the project we will get the gcloud shell, so the gcloud from the gcloud shell it has we can interact with the other Google, you can interact with the project and the other services inside the Google, so before like cloning this repo make sure you are currently under this project, the project that you have created because like you don't, since the application contains the vulnerable vulnerable codes and some other things, we want to make so like you are not deploying in the production environment or any other projects, so and also by the end of this, by the end of after the performance, after learning the things we are going to do in the project so it is at best to create a new project instead of using the existing project, in the first step we are going to go is like cloning the repo, let's see what the repo actually consists of, so if you could see like there are three folders currently present there, so in the first two folder, folder is called infra, so in the infra we will have like all the code that is all the application that is deployed in the GCP code, in the second folder is MD docs, so the MD docs is like where the documentation is actually resides, like if you could see that this MD docs is actually reside inside this folder and the third folder is like a scenario, so in this folder only we are creating the script necessary in order to create the scenarios will be in this folder, so once you have cloned the repo you have to, so it's looked like this one, you have to clone this one in the big cloud shell currently I am showing in my local environment, we have to go into the scenarios folder and here you could see like there are like around six scenarios present there, let's see scenarios one by one, so we are going to see the first scenario, so in order to start the in order to start before going to the how attacking the compute engine, I just want to explain the what is compute engine, so the compute engine is the service offered by Google Cloud in order to create and run the VMs, so if you are coming from the AWS background you would think like it is similar to EC2 instances, so let's see what the script consists of, so every scenario has something like create scenario and create scenario, let's see what is consist, what we are doing, in the first step we are getting the project ID that we are creating, so in the previous step like I have already mentioned we are creating the project and getting the project ID, in the second step we are assigning the current cloud shell to the project that we have created, so make sure all the resources that we are creating is deployed in the current project, in the next step we are creating the compute instance, so we are creating the compute VM called named test and the size of f1 micro and in the zone Asia East, so I have chosen this zone like because like it is very nearer to me because I currently live in India, you could also make changes to the zones here and the base image that I am using is cost table, so the cost table is stands for like container optimized OS so I have chosen this one because like I am I am deploying my application using the target container, so in the next step what I am doing is I am, so in this step you could see something like metadata from file, so what we are doing is like we are executing the some script whenever they are creating the VM or restarting the VM, so I will show the script after f1 all the steps, in the next step what we are doing is like creating the firewall tools, so whenever we are running the services inside the VM or any compute services inside the GCP it is by default it is following the deny principle, what I mean is like if you are running some engine inside the compute engine it cannot be accessed outside the world, in order to access the service outside the world you have to make sure to create the firewall rules, so I am just creating the firewall rules and make sure the 80 bot is open, in the last step we are getting the IP access of the compute VM that you have created and echoing like this application can be accessed by this IP, so I will just show what the script consists of, so in this step I am just running the target container, so I am creating one variable application and executing the hacker application, so if you could see like it is like from this diagram you could see it looks like this application, you could see like it is like an internal down detector, so you probably heard of down detector in order to detect like check the status of various web application, web application and there is also like internal down detector where the company are internal using to detect whether all the services are running correctly and smoothly, unfortunately this tool has to be done to be accessed only by internal access, but it is it is exposed to the external world, from this application you could see there is a URL on the header, if you are familiar with web application security you may chances of you may you may you may probably find out like what the one of these in this application, so if you know I will just tell like it is suffering from SSRF, so SSRF stands for server side request forgery, so it is basically nothing but we are clicking the server to the server to make request to like a another domain, I will just show one picture and I will explain, so this is how the SSRF will take place, so as the user you are making one request to the computing on the server, from the server we are making the request to other server, so the problem with this one is like every compute instance that we are creating will access to the metadata server, so the metadata server is the place where they have like the they store about the all the metadata, all the metadata of the instance that they are creating like when it is created, what are the images that we are using, what is the project that we are using, it may also contains the sensitive information, so this is the place where the metadata is reside inside the in the Google Cloud, so that in order to access the metadata server there are like two conditions that are to be made, the one first condition is like you have to make the request from the from the VM, like you cannot make from the local machine to the metadata server and the second thing is like you have to pass this data, so in the previous version of the Google Cloud compute instance, this one is not necessary but in the recent version they have made this data as necessary, once you have like entered these two fields in this one and when you click check status you will get like a sensitive information about all these things, I didn't show like output of this one because like it contains the sensitive information, so this is how we will exploit the compute engine, so once we have executed the script, the folder also contains the delete scenario, so let's see what the delete scenario consist of, so in the delete scenario we are getting again getting the project ID and configuring in the current shell to access the project and we are deleting the VM that I created and deleting the firewall rules, I just wanted to like once you have done with the scenario, it is advice to delete the scenario because like chances of like some like malicious people which attack the attack and create damage to your account, the next scenario that we are going to see is like SQL instance, attacking SQL instance, so the SQL instance is the service offered by Google to manage the database, so the main reason people are opting to cloud because like most of the databases are offered by as the service, so you don't need to like don't need to worry about the underlying infrastructure and all other stuffs like whether the OS is updated, whether the software SQL instance is updated or like that you have to, you don't have to worry, so let's see what the script consist of, in order to start the scenario you have to go into the scenario two folder and see what the create scenario consist of, in the first step as usual like we are getting the project ID that we have created and configuring the current shell to use the project ID, so this script expects like we have to pass some parameter after this one, so if you could see like you have to pass something like a SQL instance name, it could be any random name, so the only condition it has to be minimum like a six letter in characters, so in this step we are seeing whether we are passing any parameter or not and if it is not passing we are just telling like please pass the parameter and the next step we are creating the SQL instance of the name that you have passed and we are switching the database version like mysql 5.7 and we are using the tire f1 micro because like I have chosen this this version because like it is like the smallest tire and work on free tire and in this one we are I am switching the authorised network, so the basically the authorised network is something similar to the firewall by default the SQL database is not accessed by the other services in the other account, in order to access the database we have to create something like authorised network but the problem you could see like I am putting like <IP_ADDRESS>, so what exactly do is like it is putting the database worldwide open, so this is in the last step we are getting the IP of the SQL instance and see whether and we are getting the IP address, so in the next step what I am doing is like I am using the nmap scan, so in the nmap scan we could see the recent like in the port 3306 the mysql server is running, so I am trying to in the next step what I am trying to do is like I am trying to access the mysql server, so in the mysql server I am just I am passing the user as root and the host as like the IP that I have got it, so in the next step we could see like I have get the shell inside the mysql, as the now as the mysql server I could see like it may contain the sensitive information or or I can do like mysql thing like deleting the tables or changing the values inside the table, yeah, so this is how we perform the attack in the SQL instance, what I want to say is like even though it is like a managed service there are certain features there are certain security things need to be taken care in order to secure the deployment, so once we are done with the scenario next we are just dating the scenario, so in the dating scenario we are getting the project area and configuring the current project ID, I am getting the shell and I am deleting the SQL instance, so this is how we will attack the SQL instance managed service SQL instance, in the next scenario what I am going to do is like I am going to attacking the I am going to tell like how we can attack the Kubernetes engine, so before going to the actual scenario I just want to explain about the Kubernetes in general, I cannot explain like a Kubernetes in like within like two or three minutes I just try to explain like a short introduction one on one in like a one minute one minutes, so before going to actually the Kubernetes we want to we want to understand like what the problem really Kubernetes are, so let's take the example we are you are running the simple verb application using the Docker container in the compute instance, due to some like viral view or something your website got huge traffic and like people are like one like two like people are start attack like using your websites, so due to IEAB traffic you cannot like access the the you could see like there is the website got very slow and people cannot start using accessing, so what you are trying to do is like you are trying to deploy the instead of one container you are trying to deploy like a four containers, so in order to in order to like make sure there is no single point of error you are deploying to container in the different VM instance and the different region, so may so the people can access easily but the problem with this one is like you have to make sure like all the containers are in sync to each other and all the container are very run in sync using doing this task manually is very difficult and not efficient and not disciplined in like a in in large product, so we have to use something like a orchestrator this is where like a Kubernetes came into picture, so the Kubernetes is the orchestrator you have for running the containers, so in Kubernetes this is the this is how the Kubernetes architecture look like it has like a two component one is like a control plane and the next one is like a worker mode in the control plane it is like that is one APA server, so the APA server is through which we can talk to the Kubernetes engine and the next one is the scheduler the scheduler will take care of deploying the application deploying the application in the it will decide like in which node the application has to be deployed and the HED is something like you could think like a brain of the Kubernetes it will ask it is it is simply a database which has the information about all the all the Kubernetes development and the third one is and this one is like a control manager, so the control manager the duty of the control manager is to make sure like all the all the application are in running state and this one is like an optional one it is like it is called cloud control manager, so the cloud when control manager what it does is like it acts like a bridge between the cloud and the Kubernetes deployment it will make sure like all the all the NF necessary are like created and the second main thing is like node so the node is where the actual application is deployed node there are two components the first one is like a Kubernetes proxy the Kubernetes proxy makes sure it helps to communicate between the between like all the parts and the Puglet it will talk to AP engine okay so so this is the basic introduction about the Kubernetes architecture so let's see what the script consists of now to start the scenario we have to move into the scenario defolder and let's see what the create scenario consists of so first we are getting the project ID as the every scenario and assigning the current cell to the project ID and next we are creating the clusters so we are creating the cluster with the base image over to image and in the zone how this ratio in order to access the application we have to we have to have some credentials so we are getting the credentials from this one and we are we are creating the firewall rules in order to access the services inside the Kubernetes engine in the last step we are using the kubectl tool to deploy the application inside the Kubernetes Kubernetes application so let's see what the mango mango construct so in the first step we are deploying the we are deploying the mango database so we are deploying the mango database using something called deployment so you could deploy you could think deployment is like abstraction over the application I don't want I don't want to go deep into this one explaining this one we can check out like a Kubernetes official documentation in order if you want to understand more about like a deployment and what all the things for now you could think like deployment as application so by default whenever we are deploying the application in the Kubernetes it cannot like talk to each other application so in order to talk to other applications and outside the world we are creating something called services you could think like service as something the way the application talks to other thing so there are like three ways that we can three common ways that we can expose the application to the outside world the first one is like a load balancer and the second one is the interest and third one is the node port so we are here we are using the type node port so the node port is nothing but like we are using the worker node and worker nodes I worker nodes to work on IP to expose the service that we are deploying in this in this scenario like we are using the three zero three zero three port so that's why we have created the firewall rules once you have deployed the scenario you have to execute this command so basically this command will show like what is what are all the what are all the nodes that are created so one when we are hitting this node you could see like hey it's showing that is MongoDB is running over there or you could like similar to the previous scenario you could also do like a nmap scan and you could see like the MongoDB is like running there once you have like that you could use like a Mongo client instance and try to access this one so instead of IP we have to pass the IP address that you have got from this step from from here you could see like we are getting the shell inside the database from this one we can see like all other informations from this database so this is how we can attack in the gk so if you are interested more in the Kubernetes I highly recommend you to check out the Kubernetes code by mazocola so the next thing I do that I'm going to explain is like attacking the cloud cloud cloud storage so the cloud storage cloud storage is as like other clouds the common in a the common attack surface for the Google cloud environment is the cloud storage you could see like the as probably many of you know like the common attack scenario is like exposing the sensitive information in say in the Google in the bucket and attack and try to get the access of the attack and try to get the access of the bucket and get see the see the sensitive information let's see what the scenario what the scenario consists of in order to stop the scenario or to go to the scenario four folder and see create bucket so first what we are doing is like we are getting the project ID and we are selecting the current send to the project ID so next to what we are doing is like for this scenario you have to pass some parameter to the shell okay to the script so we are getting the project ID and we are we are like creating the one bucket so to create in order to create the bucket I have used the tool called GSP so GSP is the tool in order to interact with the other in order to interact with the Google cloud bucket so in the next step in the next so the one thing that you want to keep in mind is like whenever we are creating the bucket their bucket name has to be in it like for across the Google cloud for example there are two buckets there are two buckets there are two uh there are let's say there are two companies company A and company B and company A is used to the bucket called test the company B cannot use the bucket even though it has like a even though they are using the different environment they cannot use the same bucket bucket name so in the next step we are creating something called service account I will explain more about service account in the later later later scenarios for now you would think like a service account is something like something like uh something like a something like a other account in so we are we are to this account we are assigning the storage admin permission so the storage admin permission is like the permission where he can the user can read the list the bucket read the bucket and read the content the bucket and read the content in the bucket and change the content the bucket in the next step so whenever we are creating the service account we cannot directly use the service account in order to use the service account we are creating the service key and the next step we are just copying the service key to project to the project to the bucket that we have created in the last part we are doing is like we are changing the permission of the bucket to worldwide readable so what we are doing is like after this one we are getting the bucket URL so once you have access to this bucket URL you could see like there is something called service you could see you could see something like this one so there is something called service key dot json so service key dot json so when we are using W gate to see what are the contents are present inside the service key so you would see like we are using we are seeing the service account so this is how we can perform the attack on the attack the perform on the google cloud bucket so we have to we have to please make sure like after this scenario after doing this one you have to dating the accounts dating the scenario so in the next scenario we are going to see how we can use the do the privilege escalation using the service account so the one thing that we want to make sure like before going to the scenario you have to create we have to done with the scenario and like do this do this scenario because like this scenario is based on the previous scenario so I just go into the scenario five-folder let's see what is consistent so in this scenario I am just getting the project ID and assigning the current cell to the project ID and after that I am get after that I am just downloading the Docker image and tagging the Docker image to the project ID so I can pull it push it to the Docker registry and remove the Docker image so Joshua you have five minutes oh yeah sure so so you could see like from the previous scenario we have gotten the service account right so from the service account we are we have to execute this we have to execute these steps so basically in this step what I'm trying to do is like I'm trying to switch to that account instead of using the my water my the current account so if you remember like we have used the storage admin permission so by default whenever we are using the google container registry all the container images that we are using will be will be used will be using the google bucket by default since we have permission to use the see the bucket we are trying to see what are the image that are present there you could see like there is image called secret so in the next step what we are trying to do is like we are trying to download the image that are present and in the next step we are getting this shell inside the container download container you could see like there is secret file is present you could see if you perform like a cat on the secret folder you could see like there is super security sprang so so in the real-world scenario you could like see it may contain the sensitive information like AWS keys and others APAs and all so once we have done with the scenario you have make sure like you are switching back to the original account and performing the delete account so the last the last scenario the last scenario that we are going to see is like a privilege escalation in the compute engine I quickly explain what the scenario is and just moving to the previous folder so I am just creating the one simple instance of the Ubuntu OS base and just creating the firewall rules to make sure that it is accessed by the user and just getting the IP address and the last step we are getting the creating the simple bucket called credit card okay once you have done with the creating we have to make sure like we have to access into the instance I have all had a step like how we can SSH like if you click this SSH but it will be getting the same inside the VM next you have to access next you have to access this so basically what this script is does is like it will download the python python application and start the python server once you have with the IP address you will get like a 401 404 404 but if you try to access this you are instead of IP address you are passing like something the IP address that you have got from the previous from the script output you will see like it will show like if you pass the joshua in the name parameter it will show allow joshua if you try to with the different parameter for example gcp code it will show like a gcp code so if you are familiar with the web application attack surface you could probably guess like it's suffering from template injection so the template injection is the security flaw where the template engine was deployed very fluently in flower way which will which remove which needs to the remote code execution in order to exploit the scenario we I am going to use the tool called tpl map it's similar to SQL map the only disadvantage of the tool is like it's still using it's deprecated and the tool using python tool so you have to pass this one this this common instead of IP address you have to pass the IP address that you have got from the script so you will get you will get the verification confirmation like you are it is suffering from template injection in the next step and we are getting the shell inside the container now we if you perform the gsqls you could see all the all the bucket percent inside the container the reason why we are seeing is like whenever we are creating the creating the compute engine it has like a default service account which doesn't follow the least privileged principle so once you have like done with the all the scenario I I recommend you to delete the project to make sure like there is no resources to end up so this is how we can contribute to the project like you can improve the documentation and add more scenarios to the code and improve the application used in the scenario and split spread the whole with the community so these are the my handles that you can reach out to me and I I want to thank you to all DEF CON crew for this opportunity and creating the awesome DEF CON Provisional Plage Virtual and I also want to take special thanks to Magno for helping me with the world project and the talk


Hello everyone, welcome to another episode of SugarMD. Today we are going to talk about types of diabetes. Now, what type do you have? You may know or you think you may know, but half the time people are wrong. Unless you are very typical type 2, you know, let's say you are 55 year old, very overweight, and then you are just taking some pills and you know, you're doing fairly okay. Yeah, that's probably type 2. Yeah, that's pretty typical, right? But there are a lot of people are in, is not in that category. So guys, I'm Dr. Ahmed Ergin. I'm an undergraduate knowledges practicing in Florida and New York, and I'm at diabetes educator. So today we are talking about types of diabetes. Let's get started. Guys, so like I said, if you may think you're a typical diabetic, you may consider yourself type 2 or type 1 and there are a lot of misconceptions around it. So when somebody comes to me, I don't label them like insulin-dependent or non-insulin-dependent or type 1 or type 2. I ask them, hey, what do you think you have? And they'll tell me.  No, you know, that's typical. If you have diabetes at a super young age, that is type 1.   So if they check your CPAP diet and that's close to nothing, and if they, if you have antibodies, which some of you may know, but I'm not gonna go into detail about this, your doctors can check that, but that's how antibodies typically they are, then your typical type 1. Now, not every type 1 has antibodies, unfortunately, it's because of the tests are not great, doesn't always catch the antibodies, but sometimes antibodies disappear after a while, so that is another reason that you may not have antibodies, but if your CPAP diet is low at a young age, you basically lost all your beta cells that produce insulin. I mean, you can't always get a pancreatic transplant, which is not the easiest thing to do. There are islet cell transplants in certain cases, but these are right now at least on selected cases, not every type 1 diabetic can get those treatments, unfortunately. Now, when it comes to type 2, we don't necessarily check CPAP diet to diagnose someone with type 2, because if you are not on insulin, or you don't require insulin to survive, then you don't have type 1. I know that. So why do I have to run a test, right? And then I don't run antibody testing on every type 2 because again, there's some people that I can tell, if they're not losing weight, if somebody's not losing weight, they aren't metformin, you know, they are on a few pills and their A1C is slightly high, that can easily be remedied. I'm not gonna question that. Now, but one thing that I question though is type 1, I have diabetes and a lot of people are not aware of that. Now, we're gonna talk about that now, but before where I would say the last but not least, I will also talk about Moody. Moody is a type of diabetes that most of you have never heard of it, unless you read my book right there, but I'm gonna have a brief touch on that Moody as well, because Moody is the most commonly misdiagnosed type of diabetes, as well as type 1.5, but there is more awareness now around the type 1.5. Now, why do they call it type 1.5? Because, or some people call it type 3, but the reason is it doesn't really look like type 1, but it's not really type 2, so we call it type 1.5. Simple as that. It's no brainer. Here's an example. Somebody comes age 40.  Things are not really working, especially they stopped working very quickly, and now, no matter what they do, their blood sugars remain high. I'm like, hmm, maybe you are not really making insulin anymore, especially if they are losing weight at that stage. So what happens is, those people have antibodies in their system, but those antibodies are not as aggressive, and their beta cells do not die at an early age like type 1 diabetics do. So they typically end up developing diabetes later in life, typically in their 30s or early 40s. Again, there is no, like, stereotyping here. I mean, it can happen. I have seen type 1 diabetes at age 85. I have seen type 2 diabetes at age 8, but I'm just telling you what is typical here.  They didn't need insulin right away, so they're not typical type 1, but they end up requiring insulin within the first 5 to 10 years of diagnosis of diabetes, and they are not typically super overweight individuals, and they generally get diagnosed early age, and they don't necessarily have to have a strong history of type 2 diabetes in their family. Again, type 2 diabetes is a strongly genetically inherited disease. 60% of diabetes is inherited, and 40% is environmentally acquired. So sometimes, no matter what you do, if it's in your genes, it may happen to you. But when you control your environment, you can definitely push that envelope and, you know, delay the process for a longer time and have a healthier life longer. Like, I have diabetes in my family, but I'm not depressed about it. You know, I'm just trying my best to not to get it. But if I have diabetes at age 55, I'm not gonna go depressed about it. You know, if it's in my genes, it's in my genes. You know what I mean? Instead of getting diabetes at age 45, I can push it 55 to 60 and have another 15, 20 years of, you know, disease-free life by eating healthy and exercising. Why not, right? But, like, some people believe that diabetes is just eating bad. Nah, that's not true. Eating bad is part of it, but like I said, genetics are a huge part of it. Now, back to type 1, I have, like I said, if you're a younger individual, you don't have a strong family of type 2 in your family, you're not necessarily eating bad and, you know, you're not overweight. We check antibodies, which sometimes checks the peptide for those people to just clarify some clouds and see what we can do for those people. And we discussed, like, a type 2 is typically stronger in the background. You all know that right now. So, now, what about Mordi? Mordi is interesting. We suspect Mordi, especially if people develop that at a very, very young age, like in teenager years and so forth, they get checked in a routine blood test. They don't end up with in the hospital, like a decay or anything like that. Their blood sugar never goes super high or, you know, they don't necessarily require insulin for most types of Mordi. Mordi 2 and Mordi 3 is the most common ones. The other ones are pretty rare, but there's like, God knows, like eight types of Mordi. So, but Mordi is an exactly a genetic disease. It's not type 2 diabetes genes. It's a different gene. So, every, like for diabetes to happen, a lot of things can go wrong, right? But for specifically for Mordi, one single gene, one enzyme can go wrong. Like glucokinase can go wrong. And in that case, you develop diabetes and you may have only a limited disease. Like your blood sugar may go only to like 141.50. Doctors will call you diabetic, but you don't necessarily need too much of like medical help and your diabetes is not going to progress. Because the defect is there, the defect, the enzyme defect is always going to be there. So, it's not because of insulin resistance like in type 2 diabetes. It's a totally different pathophysiology. Once you treat that with one single agent, it can fix the problem the rest of your life. Or sometimes some Mordi types, they don't even require any medication. And they never develop complications because their blood sugars are so mildly high, that's not enough to develop complications from diabetes. So, as a result, type of diabetes is very important. And these people are interestingly, doctors, the good doctors will ask families, right? Hey, you know, this is in your family, especially if they're suspecting this type of problem. And it's interesting to find out that actually everybody has diabetes in their family. It's not just them. Let's say the mother, the mother's mother or, you know, et cetera. So, it's kind of a linear inheritance pattern. You can easily figure that out. And then if they do not have the typical antibodies for type 1s, we sometimes send them for gene analysis for Mordi. And that typically turns the results. And these tests are not as expensive anymore. Insurance companies will cover as long as your doctor is ordering the right testing. And you may diagnose that as well. So, I hope guys that helps you to identify what types of diabetes you have. And if you do like this video, please spread the video. Let's give it a thumbs up. And we'll see you in the next one.


Hey everyone, good morning, I hope you're all well. Welcome back to my channel. If you're new here, my name is Sepi, and welcome to a new vlog. I'm so excited to vlog for you guys today because I'm going out. Woo-hoo! Actually, I'm just going to the mechanic. But nowadays, that seems to be a fun trip. And also, I have an evening shift on call. So if you guys watched my last vlog, then you know that I'm on annual leave. But there were some evening on call shifts for locum. So I've decided to do them. I did one last night, I'm doing one tonight. And in case you guys are wondering, what does that mean?  And obviously now because of the amount of people who are off sick with COVID or COVID contact and stuff, I think that we have a duty as doctors to step in if we're needed. So that's why I am locum-ing this evening and last night as well. So yeah, you guys are gonna come along with me today and just have a full experience with me. Obviously I am on annual leave, so I'm trying to run my errands and stuff, which is why I'm going to the mechanics for my car. We're shooting my outfit first. I'm wearing this gray Fashion Nova kind of turtleneck-y top. This white pretty little thing, puffer, my Gucci belt, and then these Fashion Nova jeans that are like skinny. They're skinny, but they're like half pleather, half jean. And then these are my shoes, which I absolutely love. They are from Public Desire. Also don't mind if you saw in the mirror in the back how I see my rumors. I literally have piles and piles of different clothes to be shooting for Instagram. Also my loungewear that I've been living in is also, I just need to sort out my room and my whole closet is full, so we're thinking of turning my spare bedroom into the closet, so we'll see if that happens. But you know, just keeping you guys in the loop, putting it out there, putting that energy out there.  So I've just come shopping in Waitrose, and I'm gonna get like all the essential stuff that I want to cook with that. I'm because, believe it or not, sometimes I cook. So also by the way, this is my favorite section. So all this food is like almost like half made, so it's so easy. Like look at this chickpea spice. It's so good. I love it. I love it. I love it. I love it. I love it. Chickpea, spinach and quinoa. It's going in my basket. This one's really nice as well, cauliflower, kale and couscous. And then you can season it more yourself. And then they have sauces too. So I'll show you guys what I end up buying. So guys, I thought I would show you what I got from Waitrose before I put it away in the fridge. So I am trying, as I'm gonna be home most of this week, I'm trying to make my own food and be healthy. My mom obviously makes food too that is quite healthy. But yeah, I just feel like I fancy doing something for myself. So I got some rocket or salad. I have that with teritamato, feta, balsamic. And then I got, I don't know why, it's just a little bit of a bag. I really wanted to try the truffle mayo by Heinz. I wanna see if it actually tastes of truffle or not. Then I got these shell passes because on my Instagram explore, we keep getting, I keep getting these posts that show these shell passes filled with like, ricotta and spinach and stuff. And so I wanna try and make that. Maybe I'll make it this weekend for soul. Then I got some dips. I got some guacamole, which is for people who have never tried it before. It's basically like smashed avocado with peppers and what else is in it? Tomato, sorry, avocado with tomato, lime, sugar, onion, red chili, coriander. And then I got some red pepper hummus. Clearly, I love me some pepper. I got some bell peppers. Just think they can be mixed and cooked with everything. I got some tomato and onion pasta sauce. Some creamy tomato pasta sauce. The waitress ones are my favorite. I like them more than the Lloyd Grossman and this and that, which might be weird, but my favorite. And then the sundried tomato waitress pesto as well. I've not tried the waitress-owned pesto, but I think if I like the pasta sauces, then I'll probably like the pesto too. Then I got some coconut and lemongrass sauce with lime and ginger and also a chicken katsukou sauce, which are just easy to pour on. Clearly, I like things that are basically 90% done for me. I got this cauliflower kale and couscous that I showed you guys in waitress and this chicken spinach and, sorry, chickpeas spinach and quinoa, which also looks so good. Like this is just so easy. You season it yourself and just add in the meat and you're good to go. If you're vegetarian, add in tofu. And then I got this brown rice and green vegetable stir fry as well. So I thought this would be the best one to match with the chicken katsu curry. I got some chicken fillets. So this is chicken thigh fillets for the chicken katsu curry. Mushrooms, because I love mushrooms so much. I'm like the opposite of a fussy Easter. I love everything and I really, really love mushrooms so much. I remember I used to have friends in school who hated the texture. I love it. Then I got some Monterey Jack cheese slices because they're perfect for my bagel sandwiches. Some raviita things to dip inside the dip. Some prosciutto, because the other day I made a prosciutto and cheese bagel and it was incredible so I always ate more. Some whole wheat tortilla bread because everyone loves a good chicken fajita. I'm eating all the bell peppers for our chicken. I think I have the seasoning for it in the cupboard so I can make chicken fajita with some of the chicken as well. And then I got this 2C bass fillet with coriander, lime and chili. I might have this now first with some of the rice because I'm quite hungry and this is the easiest to make because you literally just cook it for two minutes on each side. But yeah, I love food that's like already seasoned or like 90% done and you just need to throw it together because yeah, it makes your workload so much easier and you feel like there's like health, weight loss is quite healthy. All of this pain too by the way in case, I know sometimes people like wonder how much should your food shop come to, how much does it last to, came to 37 pounds and I think this will last me like a solid at least like, I would say like 12 meals. Definitely going to be enjoying my at home cooking at this time. I also think it gives you something to do during quarantine even if you're like me and you're not really doing much of the cooking you're literally just throwing together the ingredients that were put together carefully by waiters and partners. It still feels like you've achieved something, you've done something yourself rather than the ciabatta, bacon lettuce, tomato sandwich that I was going to order. So here we are. Okay, I'll show you guys what I make for lunch. So I've decided to make the cauliflower and kale couscous with the sea bass fillets with coriander and lime and chili. So I'm just going to get everything ready and I'll show you what it looks like. So my rice is ready. My mom is making me some salad churrasi but my fish wasn't cooking fast enough. So tips from the pro. Mise-girre de ma. So to put a lid on ma. Hello. So hi. Hello everybody. I'm sending positive energy to everyone right now. Yes, you are an always positive girl. I proud of you. Thank you. What have you been up to today? Justin. Ed. Yeah. Yes. Interesting. And then are you filming today? Yes. What are you making? Surprise, surprise. So for those of you that don't know, so many of you requested on this channel to see more of my mom's cooking when she cooked. So she is not making her own channel which has boomed. You have nearly 10,000 subscribers. She has almost 600,000 channel views. Are there? Yes. Almost 600,000 channel views. She's got like her own fan base and she does like a lot of cooking on there and talking videos. So. And they're like. I try to see.  I'm proud of you too. And this is the finished product. Okay, I'm gonna try it for you guys on camera. As a true Iranian, I'm gonna squeeze some lemon on my fish. I don't know if everyone does that. I'm under the impression that's like an Iranian thing. We have to have all of our fish with lemon. So, okay. I've got a nice bit of the rice that I seasoned with curry powder and black pepper and the fish. Very nice. I put too much curry powder though. It absolutely fell out of my hand. And I can really taste the curry powder. But it tastes really good overall. I'm just gonna add some olive oil and lemon to this and it will be beautiful. Also with my salad. Bueno. That's my name. Bueno. Can you please one day you cook for my Mizeger Demar? Of course. Oh, thank you very much, Ben. Whenever. Guys, let me know in the comments what you want me to cook on Mizeger Demar and I will cook that. That's lovely. Honestly, honestly, those food she love it, she make it perfect. It's not possible I can make it the same as her. But it's a special food. So, I'm going for my evening on call and I thought I would quickly show you guys my outfit because I'm actually obsessed. Do you know what? Let me bring you guys a bit lower. I'm wearing this skirt for my Zara haul. This is the softest top it's from M&S and I think it was my mom. Wearing it with tights and then I'm wearing these public desire boots that I also showed in my Zara haul. So, long story short, watch my Zara haul because pretty much all my workwear is from that. As well as this puffer jacket. My mom has also made me a coffee. So, I am gonna have that to go. And another thing I wanna say is if a lot of you guys were wondering, oh my God, is your feet not gonna break at work? I don't know. I'm gonna test it out because it's the first time I'm doing it in this new job where I'm gonna be all over the hospital. I don't know if that's really clever of me, but we'll see. Anyway, let's go on our evening shift, guys. My feet are killing me. I'm gonna go on my heels to work again. So, it is coffee time. It's 8.30 PM and I feel like I'm gonna regret this fate. I'm tired, but it's been busy. So, I need a pick-me-up, so. As per standard British weather, it is of course raining, but I finished my second and final on-call of the week. I'm now done. Woo-woo-woo! So, I don't think I'm gonna take another on-call because I actually want to enjoy my annual leave now. It's only three days. Anyway, it's like a long weekend because tomorrow's Friday. Taking one extra day. Guys, I'm never ever wearing heels to work again, by the way. It absolutely kills. I just want to quickly run through what I actually do on these shifts, by the way. So, this is called the A&E, the AAU take. And what it is, is when A&E sees a patient and sees them and thinks that it's a medical problem, my team, the medical team comes and sees them. So, I see they're like medical or surgical, you know, or they can go home straight away from A&E. If they think they need to admit them, then my team will see them. And so, I'm one of the first doctors who sees them and then I will see them again with a senior, with like my plan or what I think is going on. So, that is what I do. Never ever ever wearing heels to work again, ever. That being said, though, a lot of people complimented my outfit today, like a lot. One nurse said I looked like Ariana Grande. Another nurse said I was beautiful. Boy was I gassed. So, yeah, it looked nice, but it was painful wearing heels. So, I'm just gonna wear my, stick to my flat form boots from now on, unless I am literally not moving from my ward, because I was kind of like all over the place. All right, let's go home. So, I just got me some Briani from one of our favorite little takeouts. Love Indian food. Anyone else who loves Indian food or spicy food, let me know in the comments down below. This is how he greets me. Yay, look. Yay. Guys, it's official. I think I have found the world's softest pyjama-y hoodie set. This set from Fashion Nova. Oh my God, guys. Literally, this is the exact thing that I need to wear in order to eat my Briani in. Oh, he wants to go outside. Let me let the dog out. Where is my Briani? There we go. My mom leaves my food when I'm like coming home, but I'm not home at the right time with everyone else. She leaves it on the radiator for me so that it stays warm, but I want to unbox this to show you guys. My sister gets this Briani from, I want to say somewhere near Hillingdon, but basically it is like very like authentically made, run by like these ladies who started off with like just one shop and now they've got like a few kitchens where they sell these Briani's. So yum yum yum yum yum. I can't wait to eat this. I'm gonna devour this and I'm gonna relax now on the sofa. I am very, very tired now. Today has been actually very long. So when I woke up early in the morning and then I went to take my car and did the food shop. I then came back and made lunch and then I took some photos for my Instagram. I did some unboxings as well and just some shooting. And then I got changed and went to work and I've also been vlogging the whole day as well. So I feel like I need to sign off now for the evening and just let my brain chillax, which you guys already know what that involves. Three seconds to guess, two seconds to guess, one second to guess. Yep, I'm gonna watch some Netflix and chill and the old me would only watch Modern Family, but now I am going to watch The Crown because I'm almost done with it. Also, this eye of mine feels really swollen. This eye, I've been itching it all day today, so. So I will see you guys in the morning and I hope you all have a good sleep and good night. Good morning. I have a bit of an eye infection this morning. I think in both eyes because my eyes were just, this one was weeping so badly and they had like, what's it called? I know the Iranian word is so bad but the English word has slipped my head. The Iranian word is ghe when it just kind of collects at the front of your eye. So I'm gonna go by some eyedrops for myself and also buy an avocado for lunch. I'm gonna have a tuna avocado sandwich and I'm dressed like a snowman. This is my new aesthetic. It's a snowman aesthetic. I'm here for it every day, why, why?  There is a stain here. There is a stain here. This is brand new at Sinus from Miss Pat. Make sure you watch her Miss Pat haul. Oh my God, there's an apple right opposite me and all I could think about was twilight. Look at this. Doesn't that remind you of twilight?  Okay, so I'm gonna go by these eyedrops and the avocado and a coffee. I want a coffee and I also want a matcha. I can't make up my mind today but I also want to do a workout and the garden looks like really inviting for a workout. So provided it's also 10 degrees today like it was yesterday, I'm gonna do a workout because today I'm honestly not gonna do any work. Sorry, my dog keeps barking so I can let him in. It's like his doorbell. So, yeah, today I was taking a sign up. I was like, I'm gonna do nothing today because I have been working nonstop for I can't remember how long. Like even my days off, I've either been working in hospital or working on content and stuff. So yeah, I just wanna give myself a day off. So I'm not gonna take any pictures. I'm not gonna film anything for YouTube apart from this vlog. But yeah, I'm just gonna chillax and yeah, have a good day.  So I think the main question I always get is like how many hours do you work? So I think I've addressed this in another video but it's usually nine to five, five days a week. And then I think like every other week you have at least two on calls. Sometimes three, sometimes four, sometimes five. So last week I had five, next week I've got three. So yeah, they balance it out though so that everyone kind of does a similar amount. The second question I always get is where do I work? I work in AAU, which is the acute admissions unit. It's basically like the medical ward of like following A&E. So let's say you go into A&E and they think that you need to be reviewed by medics and it's not a surgical problem but you still need to be admitted and treated. Then you come into AAU, we treat you and then if you need like a longer stay, it's like a short stay. If you need a longer stay you can go up to a ward and if it's a short stay then usually you just stay with us and we will treat you until you're ready to go home. And then I think the next question that I always get is how much do we get paid? So as a junior doctor your salary starts at 28,000 pounds. That's like the basic salary before tax and that's in one year and it's great British pounds. So if you guys live in another country you can work that out.  And on top of it you can low come to earn money. So low coming you can make from the 30 pounds an hour for a shift. So let's say you do a whole day and that is how long is a whole day? 10, 11, 12, one, two, three, four, five, eight hours. In eight hours you will make eight times three, 240 pounds before tax, which isn't bad. Like starting rate. So yeah, there's definitely room to make more than just your baseline salary. And it does go up every single year.  When you then go on to specialise your salary will always be on a ladder until you become a consultant and then it really depends on what you're doing. So I hope that has answered a few of your medical FAQs because I know a lot of you guys come to me for junior doctor vlogs and info. So as well as showing you my life I wanna give you some insight too. So any other questions that you want me to ask in future vlogs, just leave them in the comments down below and I will do that. But for now let's go and get me some eye drops. So my first stop is Starbucks because I've decided I can't do anything without a coffee even going to the pharmacy. There's a queue at as long. I just got my Starbucks for free because they had a free drink for me for my birthday last year on my car so I'm so gasped. And now I'm in boots. I'm going to get some eye drops. Why not? This is like the most fun I've had since this lockdown started. I don't know if you guys heard me before but I got my Starbucks for free. So I used my Starbucks card. I don't know if you guys remember when I used to go to uni. I was used to order my Starbucks on my phone with the app and then come and collect it before I got on the train to go to uni. So yeah, I apparently had like a gold member because I used to buy Starbucks every single day on my way to uni. So I think you'd get that after like 30 drinks. And I think there's no limit. I was like, I don't know, maybe 30 drinks in a year. So it's quite doable if you buy coffee every day or regularly and you buy it from the same place. You can become a gold member and what that means is you get free syrups in your drink rather than them charging you. And every 15 drinks, you get a drink free. You get free drinks on your birthday. So I had missed my free drink on my birthday which was March last year. And they gave it to me now because they hadn't used my card since my birthday because obviously everything's been shut and even when it has been open, I haven't really been using this Starbucks card. So I'm so happy. And also I think I just collected another free drink. Like I had 14 points and you need 15 for another free drink. So I don't know what happened there but basically thanks Starbucks. This is the most freebie I've got in a long time and coffee tastes better when it's free. And if you guys are wondering what I got, oh, I forgot to say one pump. But I got a medium soya latte with one, I like one pump of sugary hazelnut but I think this has two because it's a medium. So I'm just gonna drive home now. I also got the avocados and the eye drops from Boots and let me see how long it took me to do all of that. I did all of that in about 18 minutes. So that's not bad. Did all three of my errands and the coffee wasn't an errand, you know what I mean? So I've eaten half of this already but my mom's made a tuna and a swaz salad and bagel. Which is basically the same thing that I have for lunch. Yum. It's basically the same thing that I have for lunch every single day but at work. But this is so yummy. I don't usually have tuna because I'm scared of getting food poisoning. So I just have a Greek salad because I don't want my food out of the fridge. But yeah, I'm gonna have some more of this. This is my third bowl and my mom's gonna have her bagel now. Yum. How nice are these bagels? If you guys wanna see how she made this, by the way, it's on me to get them on but it's so yummy. It's got truffle, balsamic, and olive oil. So how much calorie are these bagels? 160 calories. Yes, I said how nice is it? Yeah, it's like a very good healthy lunch. Very healthy. So I've come with my mom. We are going to get... We're going to get a package from Eminus because she ordered some clothes. So we're just going to collect it from like basically Eminus food, no? Yes. Which is quite convenient. But then you ordered by internet. Yeah. You can collect it from there. Yeah.  I think that sitting at home is very difficult and I can see how straining the lockdown is on everyone's mental health and how long it's gone on for. But I do want to say a huge thank you to everyone for staying home. I actually do want to thank you guys because as hard as it is and even me finding it hard too as someone who goes to work and comes home, I am really grateful for it simultaneously because I see the effects first hand. So I'm getting so invented with dinner seeing as cooking is the main fun of my life right now.  So I took off some of her chicken and added red bell peppers into it, cut up. And then once that water like boils the chicken, I'm gonna put the lid on. Once that water like boils the chicken and the red bell peppers and like this quite soft and stuff, then I'm gonna pour the katsu curry sauce in that I got from Waitress. Their sauce is really good.  Then I am going to season this rice and mix it with the leftover cauliflower rice thing that I have from yesterday's lunch. And then I'll have like a really healthy chicken katsu curry. So I'm really excited, but I did just have some quiche lorraine and a mini bagel. So that was like lunch and now I'm gonna be making this dinner. So exciting. Added in the stir fried rice. So I added the rice into the pot with the katsu curry just so that it becomes like fully like katsu rice because there was a lot of rice and I feel like my parents can have some of the rice with their chicken like later on if they want. So yeah, I can just kind of have my chicken in there with this rice. So I'm sure it's so much more appetizing than it looks, by the way. So I put twilight on, right? And my dad has never seen this. His eyes are like, why is he covering his nose when she walks into biology? Because she smells peng bro, that's why. So we have my food, which is the katsu stuff, right? Curry, we have my mom's food, which is the chicken and rice. And then we have some salad shirazi. In our mouth, I'm tongue going mandu roscada. You can make it in a tongue going in. What can you get if you want to see you try it? Moga shavana dashi na na na na na na na. See how? Cosmode, delicious. Okay, mom, you try it now. You keep saying it's nice, so I'm very excited. Gonna have this. It's really, really nice, I love it. Mom, who did you think Edward is? Ghost. And what do you think? No, you have to watch to see. I won't tell you. Oh, mother she's made in dollars. She shouldn't, she a mom. Derokula. Her reaction was like, her reaction was so funny. She's like, derokula. So derokula is basically Dracula, which is vampire in Iranian. She's freaked out. Good morning, everyone. It is Sunday, and in case you all know what I'm doing, I'm closing the cupboard doors in here. I might film something. This is my parents wardrobe, by the way. Basically, I've just done my eyebrows, so don't watch how red they are. My mom is hella talented. She can do eyebrows with the thread. So that is why they are really red right now, but I'm just gonna let them relax a bit. I was so freaked out last night because I walked into the kitchen again, and I saw that red apple again, and I was like, oh yeah, lol, the Twilight apple. And then I realized that that evening, out of the blue, Netflix ended up suggesting me to watch Twilight. And I watched it with my family, do you remember? That is so creepy. Like, as in, I didn't search Twilight to watch it, or anything, and you guys saw, we were watching it, and I didn't say, oh yeah, like that just freaked me out so much. Do you guys ever get that feeling that someone's, like, you talk about something? One of the boys actually from my work was saying this. He was saying how, when we were talking about my YouTube one day, he went home, and that night he went on YouTube, and he was like, it's happy I've never searched you before, like nothing like that.  So does anyone think that sometimes they're like phoneers, like listening or something, or like, well the TV can't be listening? I don't know, I just found that whole thing so weird. Yeah, I was just like in thought, like what is going on? I'm sure there's loads of like theories about stuff like this, and like, what's it called? The theory, the, I forgot what it's called, but you know when there's like these theories of like things that are, that's it Sina, thank you for chiming in conspiracy theories. I'm sure there's loads of conspiracy theories, but like come on, that was weird. Like all it was just like I attracted it, the energy of me seeing that apple and thinking of Twilight attracted it. But yeah, very, very weird. Anyway, I'm gonna end this vlog here. I hope that you guys have enjoyed coming along with me to my uncles and just kind of a day, a few days in my life seeing what I've been up to. If you are enjoying these vlogs, which loads of you guys are when the messages are making me so happy, then please comment down below and have a chat with me. I love speaking to you guys in the comments. Don't forget to subscribe right here, the red button and press the bell. Every subscription goes such a long way for me and it means the world to me. And don't forget to give it a thumbs up too so that I know to film more vlogs for you. My socials are always linked down below. My Instagram is Persian Bunny, my snap is sepi samoy and my TikTok is Persian underscore bunny. I love you so much and I'll see you next week in my next vlog. Bye.


North Korea has tested a new nuclear-capable underwater attack drone that can generate a radioactive tsunami, state media reported on March 24, as it blamed joint military drills by South Korea and the US for raising tensions in the region. During the drill shown on state television KRT, the new North Korean drone cruised underwater at a depth of 80 to 150 meters for over 59 hours and detonated in waters off its east coast. Dubbed hail or tsunami, the drone system is intended to make sneak attacks in enemy waters and destroy naval striker groups and major operational ports by making a superscale radioactive wave through an underwater explosion, state news agency KCNA said. KRT also confirmed the North fired cruise missiles on March 22 to practice carrying out tactical nuclear attack missions, confirming earlier reports from the South Korean military.