Everybody for us here ripping six box NFL 22 selecting Chronicles football hobby mixture number eight random teams Results on screen there can be found anytime late sports cards.com Let's get started with Chronicles first. You got four Chronicles to select Then we're sold out for breaks for the night. If you get a personal order in now I'll be able to get it done for you after group breaks. Okay a little bit later than normal 10 box Tuesdays tomorrow with Sam 5 p.m. Eastern start time on the main channel here You got soccer basketball and football and then channel to 6 p.m. Eastern starts have with all the baseball breaks with our Little all-star game promo. All right. You got Nick Chubb on the Jersey to 199 going to Cleveland Here Wilson at 199 with the clear vision Jets rookie Who'd you get this time rich? What'd you get you go the Patriots? That's pretty solid So pick it photogenic Pretty decent to 99 burrow Bengals Purdy score update got a rookie quarterback Running back in a receiver. So not bad got Brock Purdy. Well, they're speaking of there's a taekwondo and essentials rookie auto four of ten. Oh Wow was one of way rich here, right? There you go rich essentials auto taekwondo into ten It's not bit of buzz up with him right now Should be getting more play this year got a Kyle Hamilton dining on Ricky blue Ravens 25 nice one Ravens. There's a zappy and a purdy purdy photogenic Score update silver trail on Walker for the Jags Kenneth Walker the third prison black Justin Herbert to 75 when the prison black auto chargers Tom be there you go, dude. Nice Herbie auto silver prison black Jalen Hertz Eagles First box here Thornton auto to ten Herbert auto prison black Photogenic Eagles Jalen Hertz to 199 Pickens prison black Damian Pierce good start to the break Purdy Chronicles base Silver Flux rookie Christian Watson for the Packers John Dotson Packers on the jersey card Christian Watson to 199 Jelani Woods to 199 and play up a man of Colts rookie Hutchinson Malik Willis Prison life is good looking card It's literally just darker color prison, which is which I think is good Jelani Woods Colts rookie great iron Kings the 49 Lave what up Randy? Randy Panthers with a Johnny hacker auto to 50 Paramount auto Johnny hacker Orange rookie Flux Aidan Hutchinson the ones I don't know you could say that word on a stream hacker Do you call somebody that? Yeah, like Sam said what the heck so I I suspended it from work nice I'd rookie auto to 99 Johan Dotson great iron Kings. You can't say none of that not in this house Say heck all the time rookie sliver Damian Pierce. I actually knew a Actually, uh, I was at a friend's house when I was a kid.   Yeah, that's what happened to Sean's a fortnight streaming twitch But shake out of 25 chiefs Yeah, he says he's got 10 billion followers. I'm like that. There's more. There's less people on the earth Breeze Hall he's got people He's got people sign up for extra accounts Yeah, no, I was definitely it was definitely a good derby. It was a good derby Rams Jersey Baker Mayfield to 199 Russell Wilson to 199 Broncos Sam Howell score update Chrome can he pick it base? Trayvon Walker great iron Kings rookie to 149 Jaguars lock this Howell Niners essentials rookie auto Tyrion Davis price to 199 magnitude Cooper Cup Rams to 199 yeah to 199 Sam Howell on the prison black Picket momentum And the same night Kyle and personals pulled the one-of-one laundry tag of Baker Mayfield in the product for the Rams The 25 Breeze Hall rookie flux blue nice one there for the Jets pick it Falcons Desmond Ritter prison black rookie auto nice hit Falcons Silver is jet sauce gardener. Yeah, a couple legends got uh What's his name? Oh There's a one-of-one printing plate as an Eric Stokes raided rookie Packers printing plate You know 2021 optic football nice one Packers Silver Breeze Hall London Chrome there Donnie was so funny. Where is she? She's just really bad I don't know. I don't know patched to 25 Christian Watson for the Packers Go got to 99 olave clear vision for the Saints Donnie's hilarious Got to 99 sauce gardener gridiron Kings to the Jets Sauce gardener prison black There's a ding in the like a scratch on the sauce gardener prison black. I'll send a box wrapper to the jet spot In case you want to try to get down in place. I know it's a base insert It's like one Thornton on the rookie Jersey Auto Patriots the 99 timeless treasures Matt Corral on the red flux rookie for the Panthers 99 silver score update rookie sauce gardener Jets Dynagon Brock Purdy Kenny Pickett. There's a silver rookie in Hutchinson flux for the Lions there Kenneth Walker the third J Brown as a writer we got to 99 Ricky Terequil in Seahawks Lave and Rashad white. All right two slight hobbies. Come on. All right. There's an orange concourse George Kittle Number eight of 49 for the Niners got silver rookie premier level trail on Berks Titans Concourse red rookie Sam Howell nice how old two of 99 commanders Good card there and two ninety nine Cedric Wilson junior dolphins auto got a silver concourse rookie Trevor Penning for the Saints Arnold tricolor concourse at two forty nine for the Panthers Next up is a silver rookie premier level an egg barry for the Packers Gardner, there's an Olavenian icon silver sweet level Dante form in Panthers the guy who got fired Silver concourse Ricky James and Williams Lions Johan Dotson on the field of a rookie for the commanders interesting The 25 tight ever key patches a mirror white Raiders Concourse silver key and now in chargers Blue rookie premier level chargers Isaiah Spiller Your chargers out of one forty nine silver concourse Ricky Cam Taylor Britt for the Bengals Well, oh boy. Oh boy. Oh boy. Oh boy. Oh boy. Oh boy. All right. Okay. Okay. Here we go This is this could get real real quick here So here we go. This is a one of one XRC Mystery auto redemption. We know what the list is So we'll know who it is after you flip this over Auto number three Lions Jameer Gibbs Monster monster redemption Autograph black prism XRC auto three second running back taken in the trap Jameer Gibbs for the Lions that is huge I mean any of these would have been huge but congrats to the Lions Goodness gracious Who got Detroit in the random? Got Detroit where they at Mike W. Holy crap, Mike Crap. Yep. That's huge dude. That's huge silver Devante Smith phenomenon silver club level is Gino That's so awesome, man. That's so awesome Easy combat a 75 rookie auto dolphins. Yeah, that's awesome. What's up, Anthony?  Yo, what up Anthony got club level white Alvin Camara Saints to 35 You got silver premier level Goddard Yes, that's one of the biggest ones you pulled period out of the out of the whole product neon icons Ricky silver in Hutchinson Lions called level silver Trevor Lawrence Yeah, it's one of the biggest like cards you pulled out of the product so far XRC one of one on me Over What steps what steps see XRC one of one Silver snap shots deck Silver club level Tua That's like finding a gold drum right there Tideye field level Mark Andrews Ravens at 25 with a Neil Smith Bronco Super Bowl auto Silver concourse keen and Allen Chargers Premier level rookie tri-color is a mere white for the Raiders number to 199 Silver premier level rookie Jack Jones for the Pats Well, I was hoping to pull something big Happens got Kenny Pickett. Hopefully happens again in this box Silver field level Christian Kurt for the Jaguars It hurts Blue premier level McCaffrey Niners. This was numbered to 149 Zappy sweet level rookie concourse rookie silver J. Moe Lions Pickens to 99 Steelers in the Ricky Jersey concourse rookie silver Trevor Penning Saints Silver concourse rookie Cam Taylor Britt Bangles Premier level rookie purples Tyler Algear Falcons number to 75 silver premier level Brady Tampa Yeah, Nikon sauce Gardner followed by Desmond Ritter to 75 rookie Jersey auto Falcons Heck yeah, Falcons Brad CR will get that in a magoria blue rookie premier level Kyron Williams for the Rams Number to 149 Silver rookie premier level is McDuffie for the Chiefs Christian Watson Silver sweet level is Jordan Boyer for the bills Relics of George Pickens is a mere white tie-dye Christian Watson at 25 printing plate Eric Stokes one of one for the Packers We've got Baker Christian Watson Nick Chubb Autos Neil Smith easy Conma Cedric Wilson Tyquan Thornton Desmond Ritter Tyrion Davis Price Johan Dotson Johnny Hecker Tyquan Thornton at 10 Ricky Jersey auto Falcons Desmond Ritter to 75 XRC black prism redemption is a lion's one-of-one the auto of Jameer Gibbs Yep, yep, yep. Mm-hmm. Yep, and orange prison black auto to 75 Justin Herbert chargers. Thanks again everybody moving on to T-Mall


Lux presents Hollywood! Leverbrot, this company, the makers of Lux Toilet Soap, bring you the Lux Radio Theatre, starring Victor Mature, Colleen Gray, and Richard Widmark in Kiss of Death. Ladies and gentlemen, your producer, Mr. William Keely. Greetings from Hollywood, ladies and gentlemen. In recent years, a number of Hollywood producers have departed from the field of fiction in favor of portraying facts. Facts filmed where they actually took place. By doing this, they attain a reality that is powerfully dramatic. I'm using the same technique in the picture, which I'm making now. 20th Century Fox employed this factual technique, too, in filming their recent screen hit, Kiss of Death, which we present with its original stars Victor Mature, Colleen Gray, and that exciting new actor Richard Widmark. Kiss of Death is an absorbing tale of love and crime detection based on the original narrative by L.A.'s R. Lipsky, a former assistant district attorney in New York City, where our play unfolds. I think you'll agree there's no substitute for beauty facts, too, which is why screen stars themselves who must be sure of a radiant and lovely skin for camera close-ups depend so faithfully on luck soap care. In fact, I'm sure that goes for lovely women everywhere. I see by the clock it's time for Kiss of Death, and here's our first act, starting Victor Mature as Nick Bianco, Colleen Gray as Netty, and Richard Widmark as Tommy Udo. New York City, the criminal courts building. The office of Louis D'Angelo, assistant district attorney. You can sit down, Bianco. You know who I am? What difference does it make who you are? Never mind getting price, Bianco. I do the DA. Assistant DA. Nick Bianco aged 29 and died of a grand loss in the armed robbery of the Peacock Jewelry. Why can't I have my lawyer here? Mr. Earl Houser? Because I want to talk to you alone. Go on then, talk. You pulled your first job 12 years ago, Nick. You were 17. 60 days in the city reformatory. You've gone a long way since then, haven't you? What are you trying to get at? I want the names of those three men who will with you when the Peacock hold up. Get smart, Bianco. You know what this rap will mean. Six years, maybe 10. But it's possible I can help you. You want me to squeal? You're wasting your time. I've had office before from the DAs, and I haven't changed. You have changed, Nick. You're married now. The parole officer says you have two kids, two little girls. That could change things considerably. I said I haven't changed. Sometimes I think those doctors are right. All crooks are crazy. Imagine a guy with two little girls.  He don't like that. How old are they, Nick? I'm interested in kids. I've got four of them on. Me? Here. Here's the picture. Can I look at your pictures? What pictures? Pictures you've got in your inside coat pocket. Go ahead. Look at them. Beautiful kids, Nick. Cute, huh? No man's lucky to have kids. When having a father like you, I wouldn't say he's very lucky for them. No, Nick, your kids haven't had much luck. Look, I'll take care of my family my own way.  Do you know why you're doing it? Because you've got that good old hoodlum complex. No squealing.  Let your home go to pot. But don't squeal on someone. No good mugs who wouldn't turn a finger for you.  Then why waste your time on me? Because a guy who could have two kids like that isn't a crook. Stupid? Yes. On the wrong foot? Yes. But he isn't one of those mugs that don't belong to human society.  Give me that wallet. And no crook could make them that sweet. You're coming up before Judge Halstead. He'll throw the book at you if you don't cooperate. I said no deal, DeAngelo. And don't ask me again. All right, she'll be taken downstairs. Tell Mr. Hauser I'm sorry he had to wait. Yeah, me too. If you should change your mind later on, Nick, let me hear from you. Remember my name and get in touch with me. I'm your insurance policy. You don't ever give up, do you? I usually do. When I tried a little extra hard this time. So long, Nick. Hello, Mr. Halzer. Hello, son.  You don't have to worry. Good, Nick, good. Your words, all I need. Not that the boys were worried you'd squeeze. Oh, did they pay you? Everything's been taken care of. Good. Now, uh, I don't want you to expect very much in court, son. We have no defense at all. So what do I do? You trust me. Even when the judge gives you the works, just stand pat and rely on Earl Hauser. That's when I really go to town. On the parole? It may take a while, but I'll get you out, Nick. You won't serve a third of your sentence. Have you seen my family? Yes. And don't worry about your kids. They're fine. Good. If you can rely on me, they'll be taken care of. Thanks, Mr. Hauser. Thanks for everything. So you're Nick DeAngelo, huh?  I'm Tommy Udo. Yeah? Imagine me in on this cheap rap, six months, big man like me.  Traffic ticket stuff. You talk too much. You mean these dopey cops here? Just because we're handcuffed to a couple of cops, I should shut up. I don't even know they're sitting here. A real tough guy, aren't you, Tommy? Yeah. Hey, Nick. Nick, today's my birthday. Yeah, today. Congratulations. No kidding. Now tell yourself, big man. I never spent a birthday with a better guy. Yeah, sure, sure. Cheer up, cheer up, big man. It's my birthday party.  Look, I've got a lot of free feeds coming. Eight years of free feeds. You never learn, you guys. You just never learn. Hey, guard. Guard. What's the matter, Bianco? This letter you just gave me. Yeah, what about it? Well, look at the envelope. It says, pointing no longer at this address. That's crazy. She's got to be there. That letter is there, the one I sent my wife. Do you ever think she might have moved? Look, I wonder why she didn't like me. She hasn't written me for a month. It just doesn't make sense. I can do about it, Bianco. Nick, do you get me a word about your wife? No. Watch it, Al. We shouldn't be talking. It's OK. I'm supposed to oil the machines. The kids, you know, she knows how I worry about them. She ought to write. You know Harry Cooney, don't you? What about him? He's in it again. I just saw him. You're in the shop now? Yeah, that's right. Look, Al, get to him. See if he knows what's happened to my missus, will you? I'll try, Nick. I'll try. Thanks. What do you say, Al? Did Cooney know anything? Take it easy, Nick. Your wife, she's dead. Dead? What happened? He didn't know, Nick. That's all he could tell me.  What's going to happen to my kids? Hello, prison library, Russell. Number 8106183. Yes, sir. What time? 3 o'clock. He wants to look at some newspaper. I'm through with the newspaper, sir. I found what I was looking for, and I'd like to go back to myself. Oh, it's mad at Bianca. Don't you like her library? Well, just a minute. All you looked at is newspapers, old newspapers. Why? I said I found what I was looking for. OK, you can go back to yourself. Check him out, Donovan. Old newspapers, huh? Hey, let this one open. He said he found what he wanted. Hello? This is Russell, sir. Bianco's back in his cell. I thought you might like to know what he wanted here. Go ahead. It's an item in a New York pipe suicide yesterday in her flat at 627 Pearl Street. Mrs. Bianco's daughters, aged 4 and 5, were taken to an orphanage. Neighbors said Mrs. Bianco had been brooding over lack of funds. To visit her, Bianco, you know the rules. 10 minutes. Who is it? My lawyer, Mr. Houser? She don't look like a lawyer to me. Huh? That girl down there. Oh, thanks. Hello, Nettie. Oh, I'm OK, Nettie. How are you? Nick, you... you heard about your wife? Yeah, I saw it in the paper a few days ago. You knew I was living with Marie and the children? In her last letter, she said you moved away. Why did you move, Nettie? We had sort of an argument, Nick. I thought it would be better if I got out. I... I didn't know about what happened to her until a couple of weeks ago. I met Mrs. Harris, you know. She lives across the street. She told you? Yes. Nick, I felt so bad about the kids. I went to the police station. They told me they'd been sent someplace. But they're all right, Nick. The kids, you saw them. Where are they? In an orphanage on Long Island. I was going to write and tell you about it, but I thought maybe I'd better come and see you. I feel so sorry about everything. Tell me about Marie. She wasn't feeling so well when I saw her the last time. What did you fight about? I don't remember anymore. Okay. Well, I don't. Honestly. Was she unhappy? Oh, yes. Drinking? Yes. Anything else? No. No. Oh, no. What really happened, Nettie? You came here to tell me. Why did you change your mind? Was it about me? Marie was jealous. She always thought that you and I... No, Nick, no. Something else? Don't be scared of hurting me. Nothing can hurt me, Nettie. Oh, Nick. I think I know what happened. Marie and another guy? Who was he? Pete Rizzo. Rizzo? I had to come and see you. I don't know why. I'm sorry. I don't want to cry. Nobody's cried over me for a long time? Rizzo. When did it start? About a year ago. No, never mind. I don't want to know. Is there anything I can do for you? Yeah. Would you see the kids again? Of course, Nick. They're such good kids. Tell them you heard from me and tell them I'm working in South America. Yes, Nick. Yes, that's what I used to tell them before I moved away. You're all on your own now? I found a good job in a music store. I live uptown now. Just a rooming house, but it's very nice. I... Nettie, thanks for coming to see me. I'll write you, Nick. I'll write soon. Nettie, I... Bye. Nettie. Yes? Nothing. Fun in, Bianco. The warden will see you now. Thanks. Sit down, Bianco. You haven't been in here before, but I've had good reports on you. Something's gone wrong, though, I suppose. No, sir. Speak up, Bianco. What is it? Well, I used up all my letters for this month, but I'd like to send another letter off. They said I had to get special permission. That's right. Something urgent? Yes, sir. Very urgent. Whom do you want to write to? To the assistant DA, Mr. DiAngelo. DiAngelo? Better let me send it. He'll read it sooner. Yes, sir. You can send it. All you have to say is that Nick Bianco wants to cash in on his insurance policy. Nothing else? No, sir. He'll understand that. DiAngelo? All right, Bianco. I'll write him this afternoon. Hello, Bianco. How are you? All right, Mr. DiAngelo. You remember Detective Shelby? Yes, sir. So, here we are back in my office again.  Yes, sir. I think that can be arranged. Pearl? Something like that. Can I see my kids, Mr. DiAngelo? I'm pretty sure you can. Okay. Then I'm ready to talk. I want to know something first. We get a lot of offers from men in prison who feel they'd like to do a little squealing. Prisoners go a little cracked. Well, they feel like a ride into town. I'd like to know what changed your mind after three years. Give me a chance to decide whether your story's reliable enough to go to work on. Well, when I got sent up, I told you my family was being taken care of my way. I was wrong. My wife killed herself. My kids are in the orphanage. I see. Okay, Shelby. Oh, about the Peacock jewelry job. Who else was in on it? Eddie Williams. Big Eddie. Yeah. Who else? Tony Mangoni. You know him, Shelby? I know him. Who else? Pete Rizzle. Rizzle, huh? Who else? And me. What about Tommy Udo? Who? Tommy Udo. The tough boy. He was sent up the same day you were. He's out now. I never worked a job with Udo. Okay. Who drove the car? Rizzle. Which one of you saw go man Peacock? Mangoni. He's on the level Peacock's a cinch to identify him. Maybe. Who is the fence you used on this job? I don't know. I was grabbed too soon. Who would have handled it? Rizzle. Would Rizzle have gone to the fence direct? No. You mean you'd called somebody first and he'd tell you where to go? Yeah. Who would you call him? Earl Hauser. Earl Hauser. Another eminent shyster with connections. Nick, I better keep you down here in the city jail for a while. I, uh, I want you to go on cooperating with me.  That's what I mean. Okay. If? If what? If I could see my kids once in a while. You can see them. When your pals get pulled in, they're going to be pretty sure you did the singing. I don't care what they think. But I do. No sense in getting you killed. One of two things we can do to throw them off. Uh, what's some job you pulled that you didn't get caught on? You think I'm nuts? You've got to trust me. What? Thompson for a company. Four years ago last March. Were any of those mugs in on it? Only Rizzo. All right, show me. We booked Nick on the Thompson fur job. That's our excuse for bringing back to town. Can I take another wrap? Stop worrying now. We'll drop the case later for insufficient evidence. But why? I'm just trying to cover you up. And I told you why. I want to use you again. And you've got to be in there clear with Hauser and everybody else who knows you. I'll send out an order to pick up Rizzo. No, no, no. Rizzo drove the car. The only one who could identify him would be Nick.  Pick up Eddie Williams and Mancone. Then the mob will figure that Rizzo's the stoolie and that we made a deal with him.  No. Anyway, here's what you do. You get hold of Mr. Earl Hauser. Tell him about the Thompson wrap. Tell him you think somebody squeals. Sure.  With just one difference. We hurt bad people, not good ones. Yeah, that's right. And watch your step. Just watch your step with Hauser. He's a shop operator. And remember, you're no good to me if he tumbles. He won't tumble. When do I see my kids? I'll take care of that tomorrow. Thanks. Well, I'm a squealer now. Feel bad about it, Nick? I haven't any feelings, Mr. D'Angelo, one way or another. In a moment, we'll return with act two of Kiss of Death. Meanwhile, here's Libby Collins, our Hollywood reporter. Who's in the spotlight this evening, Libby? One of the most fascinating stars in Hollywood, Mr. Keely. Meryl Oberon. Oh, yes, Meryl Oberon. She's an RKO's new picture night song with Dana Andrews. Uh-huh. He plays a part of a blind composer. With Ethel Barrymore and Hoguey Carmichael in the humorous supporting roles. Well, it must have been a lively set to visit, Mr. No, it was. You know, Meryl Oberon, who seems aloof and exotic in some of her roles, I found to be the gayest, friendliest person you could imagine. She has a very appealing role in night song, too, don't you think? Yes. Yes, she plays a young socialite with a rare combination of sympathy and sophistication. Meryl Oberon is a truly glamorous person, exquisitely lovely. And, uh, Mr. Kennedy listened to this. She has very definite ideas about the right kind of complexion care. Well, then I'm sure that smooth, soft complexion of hers gets gentle luck soap care, Libby. It certainly does. Luck soap facials Meryl Oberon finds give delicate skin just the protection it needs. She's used luck's toilet soap for years for her complexion and for her bath, too. And, of course, now she's simply delighted with the new bath size cake. Yes, that big new bath size luck's toilet soap is getting rave notices in Hollywood. Screen stars love it because it gives lots of the creaminess of the creamy, fragrant lather that makes a luck soap bath a real beauty bath. The new bath size cake is available now to women everywhere. The same fine white luck's toilet soap, but in a generous larger size, specially created to make your beauty bath more luxurious than ever. Women love the delicate clinging perfume of luck's toilet soap. And the new bath size cake has that identical flower-like fragrance. Here's a shopping tip for tomorrow. Buy the big new bath size luck's toilet soap. You'll see it in the familiar Sampler Rapper. The whole family will enjoy this generous big luxury cake. Back now to your producer, William Keely. Intermission's over, and here's Act 2 of Kiss of Death, starting victimature as Nick Bianco, Colleen Gray as Netty, and Richard Widmark as Tommy Udo. Nick Bianco has made a deal. He bought his freedom at the price of turning in former. It's the following day, and with the assistant district attorney, Nick is at the orphan home, waiting to see his two little girls. You know, I'm nervous. They may not even know me. They'll know you, Nick.  Sister Veronica. She seemed pretty nice, huh? Yeah, this isn't a bad place at all for Ken. Children, Mr. Bianco. Thank you. Well, Ron and children, this is your father. Hello, father. Hello, father. Connie. Rosie. Sister Veronica told us you were coming today. You've been away for a very long time. Yeah, honey. You look different, Daddy. I thought you had FYI hair. No. No, I...  Let me kiss him, too. Let me kiss him, too.  Mama got hurt, Daddy. And we waited for you and said prayers for you every night. And God sent you back. Sure, Connie. Sure. We're so lucky, Daddy. Of all the children, we're the only ones here who have a Daddy. Nobody else has. Just Connie and me. We have a Daddy. I can't go back sometime, Mr. Daniel. I can see him again, can I? Sure, sure. Thanks. There's swell kids, Nick. What I've done, it's worth it. Just to see him again. Nick, as soon as we get back to town, we'll put you in the city jail.  The Thompson fur job, right? Don't worry. I'll keep my end of the bargain. Meet again, Nick. How are you? Okay, Mr. Houser. When I received your message, I dropped everything. Came right over. Thanks. Sit down, son. Sit down. How long have they had you here? Since yesterday. Well, we can say this much for it. It's a change, at least. I don't like it. Costs not. Costs not. Just making a bad joke. You've had quite a bit of trouble, I hear.  Maybe it wouldn't have happened if you'd done your job like you said. Your parole? Yeah, my parole. Well, I've been pushing it, Nick, and I'm going to get it. I gave you my word and I still give it to you. I'm going to put that parole through. Now, let's hear about this new trouble. Have they made any specific charge? Yeah. The Thompson fur company heist. Four years ago. Oh, that's reaching back, isn't it? Somebody must have had it in for you. That's one way of looking at it. How do you look at it? Like you said, somebody's been doing some squealing. I see. Who's handling this upstairs? The Angelo. Our old friend, eh? Think he's finally got hold of a squealer? That's what I think. Were you under suspicion for the Thompson job at the time? No. Ah. And who were you running around with in those days, Nick? I used to hang around with Pete Rizzle. He was your partner? Yeah. Rizzle was my partner. Pete Rizzle? Hmm. Did, uh... Did Angelo mention him when he talked to you? Nobody mentioned his name. Oh, I don't think they've got much of a case when Angelo finds that he's not going to scare you out of anything. That'll be all I need. Another rap and I'll never get my parole. Everything's going to be all right, Nick. I think I'll do a little checking on Pete Rizzle. Oh, say, if they start roughing you up here, you'll let me know. I can take care of myself. Fine. Goodbye, Nick. And don't worry about a thing. Yeah. Hello? Hello, Arthur. This is Earl Hauser. Let me speak to Tommy Udo. Okay, Mr. Hauser. Hello, early. I want to see you, Tommy. Your office? No, the other place. You know where. I've got a little job for you, Tommy. Now, right away. How's the speaking? This is Tommy. And how do you know that he's going to read? Just as long as you're sure there isn't going to be any more talking. Good work, Tommy. Any time early. Is Nettie Cavallo at home? In just a minute. Now, see. Thanks. Oh, Nettie. If there's a phone call from Nick Bianco, that's me. Will you call me, please? Sure, I'll call you. Thanks. We're out, but when? They didn't tell me last week. I didn't know last week. Oh, it's wonderful to see you like this. Like you used to be.  I wanted to surprise you, Nettie. I was hoping you'd be home. Oh, I almost went to the movies. Oh, Nick, what happened? I got a parole. No, oh, that's wonderful. It's... Nettie. Nettie. Come here. It's going to be all right, Nettie. Don't cry, honey. Just give me a little time. Nettie, will you marry me? My kids. We'll have a home for the kids. A real home, Nettie. Oh, yes, a real home, darling. I'll be right down. Excuse me, Miss Nettie. Yeah? Okay, I'll be there. I don't attend that Larry Young murder. I'll see what I can do. Goodbye. I've got to leave. Nick, please, don't go away like this. I've got to. I don't want anything to happen, Nick. Look, you've got to trust me. Well, then tell me where you're going. I can't. Look, I don't want you to know. I thought you wanted me. I thought when you kissed me... Look, you thought right.  But you've got to trust me, Nettie. I'm on a job and I might not see you for a while. Hey, hey, hey, stop looking at me like that. Look at me the way you did upstairs. I'll need that look. Oh, Nick. At a girl. I'll see you as soon as I can, Nettie. Now, I still can't figure out how you spotted me over there at the fights, Tommy. I'm Tommy Udo.  I'm a big man. Hey, Square Champagne was celebrated. Yes, Mr. Udo. Mr. Udo. How you like that, huh? There's class, huh? Would you like to dance, Mr. Bianco? No, you wouldn't like to dance.  Haven't I met you somewhere before, Mr. Bianco? I said don't stick your nose in. We're talking. We're pants. Champagne, Mr. Udo. No, no, no. That ain't going to be enough. Bring some more, lots of bottles. Don't you worry, big man. You'll be jumping in a couple hours. It's always hard on your busking, not it? Yeah. You gotta low to that music, huh? Sound's great, huh? Right upstairs, right upstairs. Always come here when I get strummed. What a big man at early house, you know? Remember what I told you, Nick. Take your rap and leave it to early. Always gets you out. Oh, that music, that music, that music. What's coming up, Nick? What's on the line? Well, I haven't figured it out yet, Tommy. I've got to have some fun first. You know, I'm three years behind. It's talking, it's talking. You heard about me, didn't you? No, in all papers. Pick me up for a murder rep. Was in all the papers? Yeah. Yeah, sure. Ask her, hey, Busty. Sure. Well, this picture, the one I don't like. What do you mean you don't like? What's the matter with it? I like the one we took together. I don't like it when they show you with a number on. Yeah, who notices that lot of squits? Listen, Nick and me, we're going to be busy. Go home. Wait a minute. Who are you talking to? Get out. I'm with a pair, see? We don't want no old ladies around. You're not calling me an old lady. Get out. You want something? No, I... No, I...  Okay, I'll be right back. James and no good if you want to have some fun. Come on, pal, drink up here. Drink up, drink up, drink up. They, uh, let you go, huh, Tommy? Oh, all the bullies. There was a squit, says he seemed to be bending over Larry Young right after he got plugged in. Then he says he ain't so sure it was me, he thinks. Larry Young, he used to own a big cafe when he was a little boy. He was a little boy. He was a little boy. Larry Young, he used to own a big cafe, didn't he? A squit. Pushing the wrong guys around. He got it good, Nick. Him and his college ring. College ring? A ring, a ring, a ring. What you wearing? Your finger with a couple of bucks. This joint's dead, it's sour. Let's go someplace where they got some interest. What do you say, Pear? I'm still three years behind, Tommy.   We go up, Tom. Tommy Udall, like you said, Mr. D'Angelo, to fight. When they were over, we went to a cafe. What cafe, where? Stasi's, club 66. After the girl left, Udall started to talk. He said he'd done the Larry Young killing. Alone? That's right, Mr. Shelby. He didn't know the guy that hired him. He never saw him before. Did he describe him? No, I couldn't push that. So you got nothing? Go on, Nick. Well, there were two things. He copped a ring off of Larry Young, the whole ring from some college. His girl, Buster, has got it. But she never wears it. It's not worth anything except a sort of a souvenir. Then there's a guy that saw the shooting. A fellow Udall called Sammy. Sort of a panhandler. Udall said that Sammy saw the shooting and beat it. Sammy who? I don't know his last name. Well, that does it. All we've got to do is find Sammy, produce the ring, and we've got a case. Congratulations, Nick. Yeah. You had quite a time, didn't you? Yeah. Wouldn't want to go through that again. I don't think you'll have to. That's all? That's all. You know, you might find out about Sammy by asking similar young friends. Maybe we'll do that. Well, so long, Mr. D'Angelo. Oh, Nick, wait. Everything all right? I'm going to be all right. You're going to get married, eh? That netty girl? Yeah. We're getting the kids out of the orphan home. The first thing. That's fine, Nick. That's fine. Oh, uh, what about a job? I'll get a job. Well, maybe I can help you. Here's an address. I wrote it all down for you. It's not much of a job, Brick Yard. But do your work there, and there won't be any questions. You, uh, think you can take a Brick Yard? After the pen? What do you think? I think maybe everything's going to be OK. Nick, uh, that girl, does she know? That I'm a squealer? Yeah. She knows. I had to tell her. Yeah. Good luck, Nick. You know, netty, there may be worse jobs than in a Brick Yard, but there ain't any dirtier. That must be awful. Yeah. That's not really awful. Hey, give me a towel. Here. Kids still roller skating? Yeah. They met me down at the corner. How have they been today? Wonderful. As always. Anything wrong, netty? Oh, no, darling. Except, worries me sometimes. What worries you? You, working in that Brick Yard all day, coming home every night to just nothing. Yeah. That's right. No excitement or anything.  Nick, please, don't make me worry too much. But that's what I need. Someone to worry about me all the time. Don't you ever let me get away for one minute, honey. Or maybe I'll start busting in the jewelry stores with a rod in my hand. Is that what you think? Oh, no, Nick, you wouldn't. Maybe I wouldn't, but you'd better hang on. Oh, I will. I'm mad about you, Nick. You're all I think of. I've loved you ever since I was a kid. And I feel the same way now as I did then. Every time you kiss me, I... Ah, that's pretty silly talk for an old married woman. No, it ain't. Well, get out of the kitchen. I gotta make dinner. I'll watch you.  Oh, I forgot. There's a telephone call for you. Who? Mr. D'Angelo. What did he want? He wants to see you Saturday afternoon. Did he say what for? No. He didn't say anything wrong, though. He was very nice. I haven't heard from D'Angelo in weeks. Something's cooking, Eddie. Something's gonna happen. That's the situation, Nick. I grabbed you two a few days ago. It goes to trial on Monday. I've arranged for you to get off from work. You said you had a sure case against you. Well, I wouldn't go to trial otherwise. Then what do you need me for? I need your evidence, Nick. I'm building my case that way. Evidence from a stoolie, a squealer? That's not going to help. We've got that ring. We've got Sammy. And they'll verify everything you say when we introduce them. Look, I've got to go on the witness data. Yes? What if I don't? You haven't any choice, Nick.  What would you expect? Look, I've got kids. I've got a home up in Nayak. I don't care about myself, but why do you have to take it out on them just because I was a mug once? Will you listen to me? Go ahead. It makes no difference. I've got no other way out.  At your job in your town, you're known as Nick Cavallo. I've got a school under that name. Who's going to connect you with Nick Bianco and how? My pictures in the newspaper. We'll see that no pictures are taken. Well, that'll help. Well, what's the matter then? Well, I... Nothing. I was just thinking of Udall. When Udall finds out that I... Look, I know it's going to be pretty tough. It isn't going to be any fun. But remember this. When it's over, you'll be through, clean. Yeah. That's something. I'll try and remember that when I'm on the witness stand looking at Udall. PA, confident conviction at Udall murder trial. Bianco testimony vital, blow to the fence. Udall jury is still out, verdict is expected tonight. Hello? Nick? Yeah. Still here. Young's college ring didn't help. How's it get over the point that there were 400 rings just like it made for Young's graduating class? Jury went for it. Not guilty. Udall went free as soon as the verdict was read. Got a tail on him, but he's pretty fast. Udall might shake him so we'll keep your eyes open. He'll be looking for me. I squealed on him. I tried to send him to the chair. You better come in and see me tomorrow, Nick. We are ready to do everything we can to help you. You'll need protection. Yeah. Goodbye, D'Angelo. We pause now for station identification. This is CBS, the Columbia Broadcasting System. In a moment, we'll return with a third act of kiss of death. Tonight it's our pleasure to introduce to you Miss Randy Stewart, young 20th century Fox starlet. Who, like so many successful screenplayers, began her career in the theater. A good preparation for the screen, isn't it, Randy? I think so, Mr. Keely, and so do other Hollywood actresses. June Havoc, for instance, made her first great success in a New York musical. And now she's playing an important dramatic part in 20th century Fox's new production, Gentleman's Agreement. The day I dropped in to visit my friend June Havoc on the set, I was introduced to Dorothy McGuire and Gregory Peck, who played a leading role. Both stars said how thrilling it was to appear in a picture that dramatizes the fight against intolerance. Without doubt, their portrayals help Gentleman's Agreement win the New York Critics Award for the outstanding picture of 1947. June Havoc proves she can handle a serious dramatic role, too. Yes, indeed. When I watched her do a scene with Gregory Peck, I was impressed again with her beauty. Mr. Kennedy, there's a luxe girl for you. Indeed she is. June told me she never realized till she came to Hollywood how demanding camera close-ups can be. She was grateful that she'd always given her complexion the right kind of care. Nine out of ten Hollywood stars have discovered those gentle luxe soap facials really do the trick. They give million-dollar complexions such gentle protecting care. Screen stars use their complexion soap as a bath soap, too. I just love that new bath-sized cake, Mr. Kennedy. Thank you, Mr. Stuart. I'm sure women everywhere will be delighted with the new bath-sized Luxe Toilet soap. This generous big cake gives you lots of the rich, creamy Luxe soap lather as the same delicate clinging perfume. For a truly luxurious beauty bath, try this new size. Look for the big bath-sized Luxe Toilet soap with the famous sampler wrapper when you go shopping tomorrow. We return you now to William Keely. We continue with the third act of kiss of death, starting victimature as Nick Vianco, Colleen Gray as Netty, and Richard Widmark as Udo. A few hours ago, a psychopathic killer was given his freedom, and Nick Vianco knows that sooner or later, Tommy Udo will find him. It's late at night, and in his home some 50 miles from New York, Nick enters the bedroom. Nick, where were you? I just went in the kid's room. I thought I heard something. Are they all right? Yeah. But I know I...listen. Oh, that's just the screen door, Nick. The wind. You haven't slept all night. What is it? I can't go to sleep. That's all. Ever since Mr. D'Angelo phoned. Nick, if something's happened, I'll read about it in the papers. Maybe I can help you.  You've been listening for something.  Yeah. You're right. You'll read about it in the papers. Maybe you can help me. They let Tommy Udo off. Oh, Nick. He's loose. After what you did. Yeah. Listen. Nick. I can't help it. I'm jumpy. The police. We'll call them. The police can't help me. I've got to go downstairs. Then I'll go with you, Nick.  For one thing, he doesn't know where we live. You'll find out. Not in time to come tonight. Nettie. I've got to talk to you. No use hiding it. He's going to come sometime. You can go away. Pete Rizzo went away. Remember what happened to Rizzo's mother? Tommy Udo did that. Yeah. We can all go away together, Nick. No. Some other town. No. All the heisters I've known since I was a kid. They don't stay in one place. They're in every town coming and going. The minute they saw me, they go straight to Udo. Wherever we went, we'd be just like this, waiting and sitting and waiting for it. What happened? We won't let it happen. Take it easy. It won't happen if you will help me. Anything. Anything. Then start packing, Nettie. Turn on the lights. That's a car. Listen. It's all right, Nick. Just the people next door. Start packing. You and the kids. You take a train first thing in the morning. The country. I don't know where. Just some place. Anywhere away from here. Stand away from the tracks, children. The train will be coming soon. Not a soul around, Nick. There's a guy sitting in that car. He's probably waiting for the train. I'm going to find out. Nick. It's all right. I've got a gun. Watch the kids. Hey, buddy. You calling me? Uh, do you happen to know what time the number 12 gets in? Oh, I'm sorry, but I... Well, that sounds like it now. Yeah. Thanks. Come in. Be careful. Stand back. Yes. Okay, Nettie. Nettie. Remember now. No letters until I call you. I'm to wire Mr. D'Angelo and tell him where we are. Yeah. Take care of the kids. Yes, Nick. And yourself. Nick. Nothing's going to happen. Let the kids think it's a vacation. I'm going to have a good time, Nettie. I know you'll always give them a good time. Can we get on the train now? Can we get right on? Yeah. Just give me one great big kiss. Goodbye, Daddy. Goodbye, Daddy. Look, I want you two to be good, you hear? And have fun. And always remember to mind Nettie. She's your Ma and do what she says. Uh-huh. Up you go. Bye, Daddy. Bye. Bye. Better get on, Nettie. Goodbye, Don. Goodbye, Don. Walking up and down. Jumping at every sound I hear. I got a gun.  Six shells. I ought to have more. No, six ain't enough. Six hundred wouldn't matter. A hundred in my own house. Why do they come and get over this? I would not speak to them. I feel good. I feel better than I felt ever since, D'Angelo. Shelby. You weren't lost in waiting the car. Better give me that gun, Nick. Yeah. Why didn't you come to my office today like I told you? I had things to do. Sent your family to the country. Oh, so that was your guy in that court, the station. Yeah. Nick, a man lost you two early tonight. I came as soon as I heard. Sorry, but I've got to take you in. For what? For protection. I'll protect myself. It's him or me now. I can't connect with murder, Nick. Yours or his. Look, if it's me that gets him, it'll be self-defense. You're wrong. I was having a thing on Udo now. He was acquitted.   My wife and kids won't be safe. I'll make you think he'd go after them. Rizzo's mother. We can take care of your family, too. Yeah. You mean lock us all up for the rest of our lives? Only until Udo makes his next mistake. Until he knocks off somebody else. Until he does anything.   And suppose he don't make a mistake. He didn't the last time. You made the mistake. You had the perfect case and he beat you on it. You couldn't even keep a tail on him.  Sooner or later, he'll trip himself up. You've got to trust me a little. I am through trusting you, the police, or anybody but me. There's only one way to get Udo, and that's my way. I'm sorry, Nick, but you're under arrest. This gun, violation of parole. Well, I guess that's that, then. That's better. It won't appear on your record, Nick. You came to us for protection, and we... I didn't want to do that, Mr. D'Angelo. I really didn't want to hit you, but that's the way it had to be. I'm finding Udo myself. I don't think we got any tables tonight, Mr. Bianco. I'm not looking for a table. Is Tommy Udo here? No. Thanks. I'll see you again. Take a tip, Bianco. Don't ever. Come on, step aside. I got a date here with Tommy Udo. Udo ain't here. Okay, I'll wait for him. Udo ain't here. Hello? Mr. D'Angelo? Nick, where are you? We've got a general alarm out for you. Never mind that. I'm on him. Where is he? I told you you were going to play this my way. Udo's my job, Nick. You keep out of this. Take it easy, Mr. D'Angelo. The 37th Precinct Police Station. Bring some men along. If my plan doesn't work, I'll be calling you there. How long will it take you to get uptown? About 20 minutes, but Nick, listen to me. Look, I'll give you a half hour. When you get to the police station, just wait for my call. Hey, you? I said, okay, if you want to use the telephone, you may stay, but you're too late to eat. We closed at 12. You see, there's nobody here. I'm looking for Tommy Udo. He's not here. I saw him come in a few minutes ago. You don't want a couple of others. There in that room back there. Just tell him that Nick Bianco wants to see him. My pay. Hello, Tommy. I'm sorry. I'm sorry. My pay. Hello, Tommy. Tommy, I got to talk to you. Go ahead, talk. I'm listening. I'd like to talk to you, not these characters. Are you crummy? Who asked you anything? My pay wants to talk to me.  Wait over here, Tommy. Okay, pal, what's on your mind? I've got to square myself with you, Tommy. There's nothing to square. You're my pay. You're smart, too. I didn't know how smart till I saw you in court. You fooled me, Nick. And that takes a big man. Yeah, a big man. Okay, play it straight, Tommy. I squeal on you. You got a right to be sore now. What are you going to do about it? I ain't going to do nothing. You did nothing to me. They let me off, didn't they? We're going right on being pals, you and me. We're going to have some fun together. Lots of fun. You got a wife and kids, ain't you, pal? Yeah. They're going to have some fun, too. I'm going to enjoy meeting your family. Lay off of them, Tommy. Why, huh? Kids like to have fun.  From now on, lots of fun. I'm telling you, lay off of them. Is that all you've got to say to me? I thought you'd listen to reason. But if it's trouble you're looking for, you're going to get it. Leave me and my family alone, or maybe I ain't through singing. What of it, pal? I'm clean. They can't try me twice on the same round. No, no, not only are they a young killing. Maybe I know some other tunes. When we were together, you told me a lot of things.   You sure, huh, pal?  You even gave me a pretty good idea where to look for those other witnesses.   You'd get life if they found a gun on you. Now, remember this. Touch my family. And you will hear singing like you never heard before. Now, beat it. Pedal your papers. Go on, blow! Luigi. Yes, sir. This is my pal, Mr. Bianco. He's a big man, biggest man in town. I want to show him what I think of him. I want you to give him your deluxe short dinner. Oh, no, sir. The kitchen is closed. Then open it, you squirt! Yes, sir. Yes, Mr. Yoda. Nothing's too good for my pal. Your best short dinner and a bottle of that good wine. Yes, sir. Right away, Mr. Yoda. Enjoy yourself, big man. Enjoy your dinner. Everything's on me. I just talked to Tommy Udall. I tried to scare him off, but it didn't work. There's only one thing for me to do now.  Nick, for the love of heaven, where are you? We'll come and get you. I'm setting him up for you, Mr. D'Angelo. He's waiting for me outside this place in the Black Sudan. I've needled him to the point where he's got to get me. It'll take you two minutes to get here. In exactly two minutes. I'm walking out to that Black Sudan. I'm having this call, Trace, Nick. You might as well tell me where you are. I'll tell you. Udall will shoot to kill. Maybe he does, maybe he doesn't. Come in from both ends of the street. Forget the sirens or he'll throw his gun away. Now get it. The name of the place is Luigi's. It's on 125th Street just around the corner from where you are. Luigi's, okay, Nick. Then come on. You've got exactly two minutes. Don't miss. Luigi. Yes, your dinner we've fixed it now. Eat it yourself. Something wrong with me? Here. Gone? No, no, no. Give me a gun. Take it. I won't need a gun anymore. Keep it as a souvenir. And in case anybody asks you, remember I gave it to you. What's the matter, big man? You turned yellow? You used to do your own shooting. Just say the word. Start the car. Give me that gun. All right. I'll start running. Why? Why, he says. Why, he says. Yes, yes. Quiet. Get out of the car. Come here, shall we? Is Nick all right? Is he dead? No. Get an ambulance. Yes, sir. Nick. Nick. Did you get him? Yeah. And alive. Thanks, Nick. I'm glad you got him, Mr. Bianco. I came as quickly as I could. Where is he? In the operating room. Is Nick... He may die, I don't know. The doctor will only say he has a 50-50 chance. Nick would settle for that. Yes, I think he would. Sometimes out of the worst comes the best. You got what you wanted, Mr. DiAngelo. Nick got what he wanted. And I got all I ever wanted. I got Nick. Nick is an exciting drama brought to life by brilliant acting. And I'm sure that all of us are eager to hear again from tonight's three stars. Who return to the footlights and answer to your curtain call. Victor Mature, Colleen Gray, and Richard Widmore. I'm sure our audience will long feel grateful to you for tonight's performance. Well, Mr. Keely, tonight's show was certainly a pleasant contrast to what we went through when we made the picture. Well, I can imagine it was pretty rugged. Shooting scenes in places like the New York tombs and sing-sings. The first time I've ever put behind bars for acting. No, you couldn't even send out for a sandwich without getting the warden's permission. Well, I imagine you and Dick Widmore have been going through a pretty tough schedule on your new picture, Bill. The street with no name. Yes, for nearly three weeks now. We've been filming scenes from seven at night till five in the morning. In fact, we're off for a downtown location as soon as we leave this stage. Duck to dawn. Sounds like a good cure for insomnia. Yes, sir. In one picture, they keep me in jail all day, and in the next, they keep me up all night. Well, for that matter, Vic Mature went through a pretty rough shooting schedule in his latest 20th Century Fox production, purely at Furnace Creek. That's right, Bill. This picture business sometimes makes me wish I were back in that soft job of selling refrigerators. If Darryl Zanuck is listening, I'm only kidding. Sometimes it makes me wish I were back in Minnesota. There, that we'd never stand for, Colleen. I'd hate to deprive picture-goers of the chance to see that lovely luxe complexion. You're right about the luxe complexion, Mr. Keely. I use luxe so faithfully. It's a wonderful beauty care. What's luxe presenting next week, Mr. Keely? Next Monday night, we have the kind of play that luxe is always proud to bring its audience, one that I'm sure every member of the family will crowd around the radio to hear. It's Metro Golden Mare's great-screen version of the yearling. That's a great story, Bill. Say, I hope you have the original fine stars of the yearling. Yes, all three of them. Gregory Peck, Jane Wyman, and Claude Jarman, Jr., who, incidentally, won a Special Academy Award for his performance. Marjorie Rollins' book was always one of my favorites, Mr. Keely. An MGM has done a magnificent job of faithfully bringing this warm drama to the screen in what was selected as the best picture of the year by the school children of America and their parents. Well, that's something to tell your friends about, Mr. Keely. I'm sure nobody'll want to miss it. Good night. Good night. Good night, and many, many thanks. Leave a brother's company, the makers of luxe toilet soap. Join me in inviting you to be with us again next Monday evening when the Luxe Radio Theatre presents Gregory Peck, Jane Wyman, and Claude Jarman, Jr. in the yearling. This is William Keely saying good night to you from Hollywood. Colleen Gray appeared by arrangement with 20th Century Fox. Producers, if you were meant for me, join us again next Monday night to hear the yearling with Gregory Peck, Jane Wyman, and Claude Jarman, Jr. Pepsidon 1 by 3 to 1. Yes, in a recent survey, families throughout America compared new Pepsidon toothpaste with the brands they'd been using at home. By an overwhelming average of 3 to 1, they preferred new Pepsidon witherium over any other brand they tried. They said new Pepsidon toothpaste tastes better, makes breath cleaner, makes teeth brighter. Yes, with families who made comparison tests, Pepsidon 1 by 3 to 1. Be sure to listen next Monday night to the Luxe Radio Theatre presentation of the yearling with Gregory Peck, Jane Wyman, and Claude Jarman, Jr. Stay tuned for my friend Irma, which follows immediately over most of these stations. This is CBS, the Columbia Broadcasting System.


Thanks. So this, as said, this is about the Kernel Self-Protection Project and sort of the umbrella for lots and lots of other people doing work. If you want to follow along with slides, they're at that URL, or they should be. And I'll just dive in. So for this presentation, you know, this is like security summit and context is kind of important. The fine security from my narrow view is more than just access control, and it's more than attack surface reduction, more than bug fixing, more than protecting user space. All of these things are important, but this is about protecting the kernel from attack primarily. And then, of course, you have to say, well, what are we actually protecting? What are we trying to secure? What is the justification for the work that we're doing? And we've got two billion Android devices. There's now a Linux supercomputer on the International Space Station. We've got a lot of stuff running Linux, as everyone here is well aware. Some scary notes on the two billion Android devices, of course, is that the vast majority of them are running a 3.10 kernel, which is extraordinarily old. Luckily for us, 318 is quickly catching up. So we're still gone from ancient to very old. But this sort of underscores a problem with bugs, like the security problems that kernel self-protection tend to focus on are flaws that violate the trust boundary between user space and kernel space. So if you think a bug is, you know, the lifetime of a bug when it was introduced in 3.10, has it been fixed in your phone? I don't know. And then another question is, well, how is this our problem, isn't that the vendor's problem? It's like, well, in a way, yes, it's a vendor's problem for not fixing your phone. On their hand, maybe we could have designed the kernel better to begin with. So we have fewer of these, or there's a smaller lifetime, which then begs the question, well, what does bug lifetime look in the upstream kernel? And John Corbett took a look at this in 2010 with the exact same question, like how long does it take us to find and fix a bug? And so he went through a handful of CVEs, and I should say CVEs certainly don't represent all security flaws in the kernel, but almost all CVEs are legitimate security flaws, so at least you can have a minimum baseline to look at. So John found in 2010 that there was an average lifetime between when a flaw was introduced in the kernel and to when it got fixed of about five years, which is kind of a giant time span. And I went and looked later, and I continually update this now, looking through the Ubuntu CVE tracker includes when bugs were introduced, as well as when they were fixed. And the hard work John did in 2010 was trying to figure out going with every CVE and then trying to figure out when the flaw was introduced. So I am cheating and leaning on the Ubuntu kernel and security teams who do that research now. Anyway, I was starting to get worried with each presentation I made on this, talking about bug lifetime, that slowly the amount of time, the average lifetime was creeping up and had reached six years, though luckily it has started to come back a little bit, and I can sort of show that in a hard to read graph. You've got kernel version on one side, so this is the past. That's the beginning of Git history. The top is 419. The red ones, the three red ones over here, really nasty CVEs, the critical CVEs that we've had. The rest are high, and I left off the medium and the low because it makes the graph even harder to read. And then, so the lifetime, the bar, the length of the bar, the bottom of each bar is when a flaw was introduced, and the top of it is when it was fixed. So you can see a bug with a long lifetime has a huge length. And the problem was, in doing this research, you'd usually stop at beginning of Git history, and you'd go, eh, it's been there forever. So all these bars that go plummeting to the bottom here, they were introduced at or before the beginning of Git history, and what I've actually been enjoying seeing is that we're starting to see the tails of these lifting up out of Git history, which I hope is true and not just an artifact of it being when it is now. So I'm hopeful that we're actually making progress on here, and we still have ones that have a long tail, but we're starting to see the averages coming down again, which is nice. And people ask me, so what, it's five years or six years or whatever, no one saw it until right before it got fixed. It's like, eh, it doesn't seem to be true. People whose job it is to find these flaws and exploit them tend to find them well before the upstream community.  OK. But most attackers are not publicly talking about how they found their ode, so it's a real issue, but it's not one that we can gauge particularly well, which I, in some doom and gloom, somewhere back in like 4.8 or 4.7, I said, everyone here has a major flaw in your Linux and you don't know where it is, and I generally say that. And it turns out that was Dirty Cow, and so we just don't know what's next, right? There is some other thing not yet on this graph, and I'm, I'd like to help us defend against them. The good news and hopefully why I'm seeing the graph getting smaller is that our bug fighting continues. We're finding bugs. We've got a lot of static checkers. We've got a lot of dynamic checkers. I include the kernel in that itself because it starts looking for operational behaviors that it doesn't like, and we're fixing them. I always say when people don't believe me, I said, go ask Greg Hartman how many patches are landing in the Linux kernel stable tree, but instead of going and asking him in person, I went and looked up 4.14.78, which is an LTS release. There are 7,529 commits, which is about 96 bug fixes per stable release, and that is general bug fixes, some subset of that are known to have security effects, but it's possible that there are unknown security effects fixed in there as well. So we keep making bugs. And they exist whether or not we know about them, which is the real problem. So whack-a-mole, while important, is not a particularly complete solution. Constantine talked about an analogy in the 2015 Linux Security Summit using the 1960s car industry as an example of things are designed to run well. You can talk about, we're driving down the highway and you're not getting sprayed in the face with gas and oil and whatever. So it's great. And that's sort of in a lot of ways where he was talking generally, but even in Linux, things run really nicely for us. But failure modes are not particularly well handled. So we want to try and handle those failure cases better. With user space getting more and more locked down, we're starting to see containers and other things painting quite a target on the kernel itself. So attacking the boundary. And then I always like to remind people, hey, lives depend on Linux. It's a little bit scary. But we've seen cases where flaws get used by oppressive regimes to go hunting for dissidents and crazy things like that. So well, most of the time we just have to worry about phones and other things. Sometimes those effects are far-reaching. So I want to try to get the kernel into as defensive a posture as we can get it reasonably. So as I've said, killing bugs is nice. There is some truth to saying that security bugs are just normal bugs. We should fix them like everything else. That's sort of underscored by the fact that some security flaw may not affect me the way it affects someone else. They're using NFS, and I'm not. And the flaw was in NFS, stuff like that. And we don't have a great idea of necessarily which bugs attackers are going to be using. I mean, some are way better than others. And bugs might be an out-of-tree code where, again, there is sort of an echo of not our problem. But if we could actually provide an infrastructure that was safe, those bugs wouldn't have a problem. So the focus is more on killing bug classes. If we can stop an entire class of bug from happening, we just don't have to worry about it ever again. And in fact, if we provide an infrastructure that has a bug class removed, out-of-tree code can't hit it. A good example of this is with format strings, with printf. The percent n, if you get a format string abuse of some kind, the kernel doesn't support percent n. So you can't turn a format string flaw into a write primitive. And that means that's still true. Even if you have a million lines of out-of-tree code, none of that code can call into the printf function and become a flaw. But like bugs, we're always introducing new classes of bugs.  Killing exploitation is really great. If we can just remove all of the systems that are in the kernel that provide attackers with easy-to-use ways to do their attacks, it would be nice to get rid of that. The tricky part here, of course, comes with this caveat that sometimes when we do this work, we make development in the kernel more difficult. So accepting the need for this is sort of accepting the understanding that there will be overhead in this. Going back to the car analogy, if you've put a titanium bar in the door or whatever so that when you get hit on the side, you're safer, the person designing the window and all the electronics and that is kind of sitting there going, well, it would be a lot easier to do this if I didn't have this bar across the side of my door. It's the same thing even in software development. Sometimes we complicate things in an effort to make them more secure. And my hope is to convince people that it is OK to do that. So as part of that, I started the self-protection project to try and collect people into one place and centralize discussion and give people a place to focus on things and what work there was to do. And I can't do it even a fraction of it all on my own, but there's a lot of people out there that were interested in this stuff, so I tried to get them together in one place. And I wanted to try and focus us initially on kernel self-protection. There's a lot of work in the kernel to protect user space from itself. And that's important work, and I want to get to it. And if someone's got time and interest to work on it, sure. Let's do it. But I have been trying to focus on the self-protection bit just because I felt like the kernel was pretty far behind in that work. I used to say we were slow and steady. This is upstream kernel development. It's not revolutionary. It's evolutionary. But Alexander Popov and his slides on Monday had a significantly better motto. And which is flexible and persistent, which is much better, I like that. So that's sort of the justification for why we're doing what we're doing. I can go through what we have done in the last year in the years worth of kernel releases. So starting with 4.14, we've been doing reference counting protections, which needed opt-in to replace use of atomics with ref counters. So we had a brief stall in 4.14 where we were sort of bike shedding about how to document it and deal with it. So only three went in, but they're more coming. A randomization plug-in from GR Security got an automatic mode where if you see a structure with all function pointers, you can randomize it. Got free list obfuscation. So as an attacker, if you manage to get an overflow into the heap free list area, this makes the attack much more unreliable. The struct leak plug-in for automatically initializing variables that hadn't been initialized when they are passed into a function. For example, if you specify some buffer and you pass it to a device driver that is supposed to fill it in, and then you copy it out to user space. Well, if the driver didn't do it right, then you're just copying kernel memory out into it. So this would look for all the pass by reference variables and initialize them first. VMAP stack, similar to what we had on x86, landed in ARM64. And that gets us unallocated pages between stacks in the kernel.  Another issue was setFS was specifying how you could copy memory in and out of the kernel, would check the boundary condition. And setFS would move it to include all of kernel memory for doing internal work. And this has been a source of bugs in the past, so now we just sort of check. On return to user space, did we forget to reset it? So we got coverage at a number of architectures. So we've picked up speed again with the reference count conversions. 4.15, to jog your memory, was when we got Spectre and Meltdown protections with PTI and RET Palin, replaced a whole infrastructure in the kernel timer list was we changed the implementation. This doesn't affect the kernel at all. Everything is operating almost exactly as how it was before. But the removal of this field out of the structure removes a target for attackers that was being used in several examples in real life exploits. So this is a good example of the kernel is just designed in a way that made an attack easier and didn't matter to the kernel. All we had to do was redesign things a little bit, and everything was, in fact, simpler. And there wasn't an account. So we gained fast reference counteroverflow protection. So the ref count protections that were going in had two implementations. This was the faster one based on what GR Security had been doing. And in a surprise move, Linus decided that %p, which prints out pointers to dmessage and sysfs files and other things, should just never actually print out pointers anymore. This was certainly on my list of things to do, but was not one I was going to try to fight for for quite some time. And he decided that we should not be info leaking quite as hard as the kernel was. So now %p just prints out a hashed version. So you can compare two values as being the same, but you have no idea what it means. So it would still work for debugging, but it would be significantly less useful as an attacker. More ref count conversions. We got PTI on Rn64. We had hard, excuse me, a hardened user copy already ported from GR Security. But this, and that kept, we couldn't copy things that were outside of the stack or outside of a slab allocation out of heat memory. And the white listing actually narrows that even further, where you say, I only want this specific field out of the larger slab allocation to be copied in and out of user space. So that narrowed how much could, how much of the kernel's memory would be exposed to user copy flaws when those bugs happen. And around here was also when the blue-born attack, which was a Bluetooth attack against user space and kernel came out, and it was a straight stack overflow, a solved problem. And the blue-born write-up says, yep, here's how I attacked it on all these devices that just didn't have stack protector enabled. Like, ah, why? So in looking at that, of course, it was once again sort of an infrastructure problem in the kernel. The kernel's build system didn't understand how to query what compiler was being used early enough that you could determine what sort of protections you could get. So the default was to build kernels with stack protector off. But that's insane. So this sort of fixed it, got fixed better in a following version. But now, when you build a kernel, you just get the stack protector if your compiler supports it, or you can specifically turn it off. So going from default off to default on was simply a matter of fixing all the logic and dealing with the weird bugs about compilers and build systems and everything else. But that doesn't change anything about the kernel's internal systems, just the build system, really. 4.17, we started VLA removal. So variable length arrays lead to a number of problems on the stack. We could have stack exhaustion problems. They're also not very, they have a poor performance characteristics. So we started grinding through lots and lots of VLA's to remove, which were difficult to deal with in certain situations. Clearing the stack on fork. When you would start a new process, your stack would be allocated from memory and wouldn't be cleared. So if you had an info leak, especially for something that's deep in the stack and you could arrange for an info leak out of somewhere on the stack, you could see what was in some location in the stack earlier. But it didn't make any sense since it would be much easier to just wipe the stack when you initially fork. Kernel. And this existed before, but it was behind a debug flag. And people said, well, this is clearly going to be expensive. Every time we fork, we're gonna write zeros to multiple pages in the kernel memory that's too expensive to turn on by default. So I turned it on by default and it sped things up, it seems. It looks like that may have just been cache priming. Like you brought in all this memory into the cache. A part of memory that you're absolutely writing to constantly as you're running and doing things. So maybe my performance metrics are terrible. I don't know, but it looked like a slight win. So that's nice. I really, really like security fixes that improve performance. More fixes on dealing with our limit, stack our limit on exec and how stack is laid out as a part of the stack clash fixes. Also related to stack clash was map fixed, no replace. So from, the kernel uses this internally when laying out an elf file when it execs. But you can also get at this from user space. Normally when you say map fixed, you say I want to put this in one specific location in memory. And there wasn't a way cleanly to say but don't do it if there's already something there. Like don't overwrite an existing allocation or memory out of VMA. And this was a problem in the Elf loader if you would get your libraries or other parts really close to the stack you'd just start clobbering the existing VMA and you'd run things together. So this solves that problem where if you get into the situation where you've somehow convinced the machine to misbehave, get the VMAs to overlap it will actually fail now. An interesting thing for 4.17 also was on the syscall entry, one of the ways to do strange things with speculation and cache stuff was you could actually find gadgets that were using registers that weren't part of the syscall but as the attacker you could populate the register contents from user space, make a syscall and that register would sort of walk along into the kernel and be available for speculation gadgets. And the idea with this was you effectively just clear all the registers that weren't used during a syscall and XORing a register by itself is incredibly fast. So no measure performance change on this and just kills that whole side of a way to do speculation gadget manipulation. And then we got more speculation control fixes, the SSB 4.18, continue grinding away on VLAs. There's a whole class of multiplication overflows of memory allocators where you try to allocate so large a memory that the math wraps around and you get a very small allocation and you do linear overflows and other things. So we added a bunch of overflow detection helpers and did a big pass on allocators doing open coded multiplication. We certainly didn't fix all of them but we did have a couple reports come in to security at kernel.org about exploitable overflows like this that overlapped with the fixes that were going in. So it was a nice validation of this massive tree wide change. We were in fact catching real bugs that other people were finding. Then we got SSB on arm 64. 4.19, 33 more VLAs removed. All the rest are gonna be gone in 4.20. We got them all done. So we had ads retract, multiply and divide, overflow helpers, we didn't have shift left overflow helpers, so that got added, or helper, that got added in 4.19. And the L1TF defenses, you can read up on that. Those are fun. And this is a user space defense which was in temp. We solved quite some time ago now the temp races with simlinks and hardlinks races also. But this meant that we killed a large class of bugs about temp files following simlinks by not allowing the simlinking following to happen if the users didn't match. But this shifted to finding software that would open a file in temp with ocreate without o exclusive, which meant that it would happily open someone else's file that they had made world-writable for you and then your program would write all sorts of information into it or however you were using it and the person who so helpfully created the file for you could then read it. So this effectively says it has a similar rules to the simlink restrictions that have been in for a while. It's sort of an implicit o exclusive. If the users don't match, treat it as if you had asked for it to be exclusive when you're in a temp directory in a world-writable directory. And this should hopefully close the last of the temp file races that still crop up. And we got the unused register clearing on arm 64. So coming for 4.20, as far as I can see all the VLA's are gonna be removed and we're gonna tend to add warnings, not errors to the kernel build. Maybe in a couple of years we can turn it up to a full error, but adding warn on VLA because we strive to make sure that the kernel builds without warnings. This will keep new VLA's from appearing. That'll be good. And fingers crossed the stack leak plug-in that Alexander Popov has been working on and ported from GR security will land for x86 and arm 64. Linus has yelled at us several times about these in past pull attempts. We think we're good again. So hopefully that'll go in. That will, that's a poisoning mechanism where on syscall exit, whatever portion of the kernel stack had been used gets wiped with a poison value. The idea being that when you come back in for your next syscall, uninitialized values are no longer under control of whatever the prior syscall contents set up on the stack. They've all been wiped out and so your uninitialized values are now initialized with a known poison value. This sort of matches the poisoning that we've had on heap and the buddy allocator for a while. And then we've got lots and lots of soon coming and not so soon coming features.  We're gonna see that from the compiler side. Integer overflow detection, this exists in the kernel address sanitizer. The, I mean, one of its sort of cousins, the undefined behavior sanitizer. Finding and getting rid of those. Link time optimization so that we can get a view of the entire kernel build at once so that you can do things like control flow integrity. Which is now in the pixel three phone. So forward edge, CFI, protecting against function pointers, function pointer overwrites, things like that. Gustavo's been working on getting the switch fall through markings finished so we can turn on no implicit fall throughs. We don't end up with busted switch statements. Getting a per task stack canary on non-X86. And those six pieces are all very compiler dependent, you'll notice. And we've got a whole bunch of other things that are less dependent on compilers and somewhat dependent on hardware and other research. So like memory tagging is hardware support. That leads to string and mem copy size allocation checks. Exclusive page frame owner tends to be mostly an issue of performance but that will solve an entire class of exploits where while you can't execute user space memory from the kernel in most hardware, you can still execute the mapping of the user space memory in the kernel's memory only if you know the physical location of it. But that's a real attack as well. Getting some fine-grained KSLR, SMAP emulation. Anyway, you can read the whole list here. But if anything in here is interesting to you, please join us. We're not done with the NAVs. It's nice to get other people's help even if it's testing, documentation, any piece, anything you're interested in or just telling us we're doing it wrong. Some people can show up and do that too. We get a lot of that. So our challenges really are the same challenges I've talked about before. We've got a lot of sort of cultural conservatism. Please leave the code alone. It's good enough. And people wanting to not accept the responsibility of, oh yeah, but that tree, that phone has lots of out of tree code running on it. Yeah, but it's still Linux. The sacrifice of needing to deal with the new overheads and the patience of both dealing with how long it sometimes takes to convince people or get stuff in and vice versa. And then there's the technical complexity, innovating in spaces where there is no obvious solution and collaborating with people. So yeah, we just need developers, reviewers, testers, backporters, whatever you've got. You can reach me there. Those are the slides again. If you want us to read more about KSPP, that's the Wiki link. And join our mailing list and say hi. And if you want to hang out on IRC, there's Lennox Harden on a free note. Any questions? So there's another major operating system out there that uses Hypervisor to kind of offer kernel protection integrity. Do you see that as being in Lennox's future at all? Is that the Hypervisor Magic Bullet? I do, that is the Hypervisor Magic Bullet. So one of the things that we're getting to the point where people are really making a lot more noise about, I'm sorry, I went too far, wanting to be able to sort of check the state of the kernel from somewhere else because they want yet another boundary in this. And things like the Samsung Knox had, we'll check the UID of the cred process from above or keep it mapped out. And getting a general way to do that, so we can declare, I want to protect these things from the kernel so we can give it to the Hypervisor to take over that responsibility. And while there are separate pieces for doing this in other forks and other stuff, there isn't a common way to get this communicated to the Hypervisor and I would like to see that. No one has really stepped forward to work on it and it's not been something that's been driven up my to-do list necessarily, but I'm all for it. Questions? Hi, thank you in case. It's a question with my Debian hat on. We are trying in Debian to enable GCC plugins, but for now we didn't manage to really do it because of out of three modules and we don't have really the infrastructure to actually make the plugins available for later. Is there something which would be possible to help us on that? Because as far as I understand GCC plugins are quite sensitive to the GCC version it was built with. So it's not always practical to use the GCC plugin later. Okay, so it sounds like you're attempting to ship the output of the build for later use. Well, yes, for out of three modules in Debian basically people when they try to install a module it's built on the user machines and not in the build the network. So they have to have the GCC, they can't rebuild the GCC plugin locally they need to use the binary build. I see, okay, nothing immediately jumps to mind but that sounds like something that we definitely want to get solved. I approached the Ubuntu kernel team also about turning on general GCC plugin support in the kernel because I suspected there were probably some problems we haven't yet uncovered but it sounds like you found them. But yeah, I mean the intention was that it should be possible to do those builds and that it would be, I mean always knew it would be compiler sensitive but the hope would be that you've got the source and you've got whatever compiler you're about to build it with and things would be okay. Sounds like there's more work to be done but yeah, I'd like to see more about it because we should definitely solve it. Okay, thanks. No questions? If not, let's thank you. Thank you.


was on FaceTime with NBA Youngboy. Yeah.  I'd be fired. So you was trolling and he was like Oh, y'all want to see a feature? No. Yeah. I know it to me. Yeah, I need to address this too. So basically like He had he don't have he don't have Instagram like he be on North Instagram He have Instagram. So who had me? Oh, it was the baby.  Like whatever. So I gave him my number.  I don't know. He wants to talk. Okay. So I'm like, all right So he FaceTime me the baby FaceTime me and I'm I'm like, yo, what's up, whatever and he's like, yo Somebody want to talk to you something and he's the one that's about to talk to me and he probably be a young boy The phone.  I'm mad confused and then I'm like, what's up, whatever and he's like, yo I see one of your videos where you had on a blue jacket. I think he's talking about my on-site song I don't know. Yeah That's what's cool. Yeah, whatever.   Do y'all want to see that people thought that I had a song with him I'm ready.   Yeah, we good Yeah, the baby. Yeah, okay. Hey guys, it's Taylor. Make sure you follow us for more exclusives at WW that talk of the town show calm like comment and subscribe