Make no mistake this world cyberspace is a world that we depend on every single day It's far bigger than just the little thing. We used to call the internet. There's so much more to worry about today.  I have reached now It's all about the data it always comes down to the data They're there to steal your money, but they're also there to turn up interesting corporate secrets or government secrets We're also seeing bad guys start to go after These other non-traditional devices and so might be a tablet or a mobile phone or smart phone Get angry about the fact that crime is happening there get involved and say that's not acceptable and not be shy Cyber space is real if somebody wakes up in the morning So are the risks that come with it and they have the time the money the skill and the inclination to purchase It's the great irony of our information age. There's not a lot you can do to defend against that your odds of getting Caught or far less than 1% if you're committing a cyber crime Cloud actually has great potential to improve security and privacy in a way that wasn't possible before I see Cloud computing as an opportunity to really raise the bar overall make no mistake. This world Cyberspace is a world that we depend on every single day Hello, and welcome to protecting cyberspace. I'm Lily Wyatt with the governor's office of emergency services Nothing has changed the world as dramatically and quickly as the internet has a decade ago Only information technology experts would talk about information warfare It wasn't a topic that anyone knew it involved using computers in the internet as weapons much of it is still theory But we were told that before too long It might be possible for a hacker with a computer to disable critical infrastructure in a major city and disrupt the central services still millions of dollars from banks And sabotage the systems all over the world Today, that's not only possible. It's actually happening plus a lot a lot more. We don't even know about That's why President Obama has made cyber war defense a top national security We cannot look back years from now and wonder why we did nothing in the face of real threats to our security and our economy And that's why earlier today I signed a new executive order that will strengthen our cyber defenses by increasing Information-sharing and developing standards to protect our national security our jobs and our privacy This this Senate Commerce actually Committee unanimously approved the bill back in July all of our systems today from power to water government and other industries depend on computerized switches on networks and they're all at risk if an Arbitrary work to get in they could essentially destroy those components today We're going to talk about that very crucial issue in the world with three government officials who are part of the california cyber security task force if you have any concerns about this topics or if For if you're if for any of our guests rather Please email us at questions at Cali MA that ca that GOV or even yet join the conversation via Facebook and Twitter We have a lot of talent and knowledge in this subject in this room this morning first We're happy to welcome Michelle Robinson to start us off She's the state security officer with the California Department of Technology and assist us in assistant coordination of the California Cyber Security Task Force. Thanks for joining us today. Thank you for having me Lily So we're gonna start with what President Obama said most people aren't aware that there's a cyber security bill in Congress Are you aware of this bill and what's his intent? Sure? I believe the bill is referred to as a cyber security act of 2013. It was introduced by senators Rockefeller and Thune And it proposes to focus on four key areas of cyber security protection Well, the first being ongoing voluntary public private partnership in the development of Cyber security standards and best practices to reduce risk in the area of critical infrastructure Secondly it proposes to strengthen Cyber security research and development programs and strengthen programs such as cyber defense Competition programs that support cyber security workforce development. And then finally it's proposing to promote greater public awareness and Preparedness in the area of cyber security. That's awesome And now is the legislation and funding or is there legislation and funding that may improve cyber security efforts? Absolutely sure and the the Rockefeller Thune bill is an example of Such legislation if successful would help improve cyber security efforts So a funding and investment are a really important topic critical to improving cyber security efforts And not just at the federal level so Department of Homeland Security Preparedness Grant allocation for 2013 totaled more than 1.5 billion to assist state tribal and territorial governments as well as Non-profits and private sector so However, I think it's important that we be cognizant that these funds are not necessarily an ongoing Allocation we can't rely on them to be an ongoing thing. There are limitations to their use So they may allow us to conduct research and even secure products which help us mitigate risk But efforts initiated with those funds often will require some ongoing Investment in personnel to maintain and sustain those programs and products and solutions So what is your role with the California cyber security task force and what has been accomplished so far? So my role is to assist with the planning and overseeing the efforts of the task force and its subcommittees We've formed seven subcommittees that are working on specific objectives Which are aligned with the the objectives in the legislation To improve cyber security. Oh, that's wonderful. Now attacks are usually evolving. What are cyber criminals after? Can you explain? Sure Cyber criminals are after money or data that can be sold for money Interlectual property such as trade secrets state secrets and really in that area They're looking for information that's going to give them some sort of a military political and or economic advantage So as an example For our state government entities or local government entities Procurement officials may exchange in dialogue via email regarding Upcoming procurements and opportunities for competitive bids and so Cyber criminals may be looking for that type of information as well. I see now. What is the cyber security environment right now? Excuse me Pretty concerning right now Challenging I'll say challenging if we consider the types of media unfortunate events that we're hearing about and learning about today It's really challenging. You know, you think about the types of active shooter type scenarios that we're seeing and hearing about in the in the media What most people don't know is that our networks are under the same type of attacks On a daily basis. And so our unsung heroes are those it professionals who are working day in and day out to protect the networks from Successful attacks. Now see you say that it's it's really concerning However, when we asked the general audience what their concern is they really don't think there is that much to worry about Can you explain? Sure. Um, you know, so one study Did show that 61 percent Of individuals who responded to the survey felt that National security was a concern of theirs. Whereas 27 percent felt Only felt, you know corporate security wasn't as much of a concern. So Age does make a difference though. My understanding in that survey is that those that are 18 to 20 year olds They were less concerned only 20 of those said they cared about national security So there's a big difference there And I think the need for awareness in how those younger individuals may be directly impacted by cyber security events And I have one last question What could compromise the systems as we improve really to To make the systems better as we digitize. Are we more prone to threats? Um I would say yes, absolutely. However, based on incident data Incidents reported to us at the state level, you know paper records with personal information Are just as problematic and just as risky as if if that data were digitized Um, you know, some might even say more so because you can't encrypt paper records, right? Um In any case, you know a failure to assess risk and consider Um Consider security and privacy concerns up front in the design of systems whether they're digitized or manual Is critically important to making sure we're protecting that adequate and how do you feel? What is your take and this whole cyber security? Do you feel like, you know, we need to start educating our kids from when they're They start because right now any kid can actually get a cell phone And who knows he might be sending emails. So how do we how do we teach our kids? I have a three-year-old granddaughter who is very Proficient on my um smartphone. Uh, so yeah early education about the implications and direct impact to them from cyber security events Um, is critically important Yeah Well, margillor ducci the director of the california governor's office of emergency services co-chairs the california Cyber security task force that michelle and i are talking about He explains why more cyber security emergency preparedness needs to be created and what callow. Yes is doing to help We need to do everything we can to not only train and and make people aware of the threat but also to harden our systems In the way in in two ways one is the way our culture and the way we approach every day We sit down at the front of our computer. How do we do that? What are we doing to ensure that we are not making it easier for the criminals? And secondly by making sure that we harden our systems and put security measures in place that make it much much more difficult for intrusions to take place so what callow. Yes is doing as the as the You know the state's homeland security agency is is One we established a task force, which is uh, uh very unimparalleled You know task force of public private academic sectors To come together and talk about the threat and and and really leverage what we have in california You know, we've got silicone valley here. We've got some of the best universities here So we're bringing all these players together To talk about the threat and what we can do is a state To mitigate against it and then ultimately that will roll it up into the governor issuing An executive order guidance to the state and to the private sector on what we should do To ensure that we are as safe as possible With this increase of computer attacks sabotaging our system one of the biggest challenges is finding cyber warriors Bonnie beinstein actually Did an interview about this programs that they have in maryland. Let's take a look Today's global economy depends on secure and reliable computer networks The countless files of sensitive information stored on servers all over the world Serve as a fertile ground for cyber terrorism And with the university of maryland within a relative stone's throw of our nation's capital It's no wonder the subject is garnering attention from students and faculty Cyber security is a huge part of national security moving forward We do banking we control the electrical grid We control nuclear power plants and dams and gas pipelines with stuff that is accessible via the internet Maryland's been expanding its reach in this area through its innovative cyber security center It features programs that provide research to workers in an emerging field as well as integral partnerships And several years ago students created their own cyber security club and started going head to head with other universities Competitions really give the students a way to participate that really isn't available in the classroom The umd cyber security club has already made its mark in several national level competitions These serve as incredible opportunities for our students to harness the theory and skills They've mastered in the classroom and use them to defend real-time cyber attacks simulated by professionals We won Maryland's cyber challenge this fall We went to nationals for the collegiate cyber defense competition a couple years back We tend to do relatively well in most of the competitions that we go to I can tell that the team is learning a lot even in the competitions that we don't win It was kind of eye-opening learning just how easy it is to break into things And just how vulnerable so many things are According to wasser computer science courses tend not to emphasize cyber security And students are more consumed with creating the next great app than protecting their assets and information Even if the students aren't necessarily going into cyber security as a career It's still very important to know about because it's a very important thing to keep in mind as they're actually developing software Interest in cyber security is growing among umd students Particularly with the increased attention it's received at the national state and campus levels Well, that's in mariland, but you're if you're here in california There's actually the western conference Competition and uc in cal poly actually won first place this year So they're gonna go to the national conference that bonnie was referring to if you're here in california also many of the CSU uc and community colleges Offer cyber security courses and degree programs including the university of southern california and san josez state university We've got to mention that the us bureau of labor statistics says the number of information technology security roles in the us Will increase by some 22 in the next decade by 2020 creating more than 65 Five thousand new jobs. That's good news for the u.s economy Joining us now to share more on this fascinating subject are mitch madagavitch The cali oes deputy director of the district's management and michael cruce You're the acting information security officer here at calo es. Thanks for joining us this morning and for Educating me and the rest of us. Thanks lilly. So we're gonna start with Cyber security what it really means because there's a lot of people that that Think that is just cyber war and that that just makes it very You know just catastrophic and terrific cyber crimes cyber espionage. Can you explain a little bit more on the difference on all of those? subjects well You know, I think with cyber crime there's a big difference We're talking about the speed and anonymity of crimes that happen online and it's usually really hard to distinguish between the various different types And I think usually the easiest ways to define it is by looking at what is the threat with regards to Say public security versus national security And you look at your various actors that are involved with that and then you can also distinguish it by the funding they receive Whether that be a they're looking for trade secrets or state secrets as mentioned as michelle mentioned earlier and conceptualizing it I think really is Some of the key elements that really help you distinguish between the various types is really their motivation What are they looking for? What do they want? Obviously organized crime? They really have a focus on financials, you know getting money stealing money essentially um pilfering data for uh, essentially competing organizations or corporations I mean like mark had mentioned in the brief earlier, uh, you know, we have a lot of intellectual property in california other things is um hacktivists or activists As you mentioned really, you know, they want to influence public policy change public opinion And then of course, uh, a majority of the crimes are probably going to be perpetrated by lone wolves out there You know, uh, kitty scriptures things like that, but nowadays it's not very it's not very difficult for someone To perpetrate those types of cyber crimes and that's what really makes it difficult to distinguish that Say between all the other types of perpetrators out there And it doesn't take too long to make the people that are affected like when uh, google was hacked that you know The whole world was like what happened to google. So it doesn't have to be that big for it to cost um A sense of unease in the country now, mitch How can maybe a cyber attack cripple the u.s economy? well, I think cripples probably a strong word the nation's economy is very resilient and Certainly very robust What I would say though is that the economy is Can certainly be damaged through cyber and it poses a tremendous threat to the country Our nation is always prepared for armed aggression and armed threats And done so very well in that layered approach, whether it's through the department of defense then through the cia the fbi Customs and border patrol local sheriff pd and in that so on down to the individual user who's has an alarm on their house and has Maybe even self-protection But when you get into this we're almost cyber those same layers of defense are not necessarily as actively thought out Or as aggressively thought out particularly at the individual level And that's where we really need that that involvement from it. And so when We have losses from espionage when we have losses from banking when we have losses from intellectual property All of those contribute to the degradation of the economy. So You're not going to Unless you are actively involved you're not going to be able to to stop some of those actions from taking place and And ultimately that'll lead to Potentially somebody's loss of somebody's job Yeah, but see that's why it's so important to have the california cyber security task force that you guys have been a part of How is your task force helping strong information security practices? Well, I think first and foremost the task force is is raising awareness I think that's the most important thing particularly in california Is um, you know, one of the things that in fact just about two weeks ago three weeks ago. We actually held a naval postgraduate school executive Seminar that we held with all the various state agency Secretaries under secretaries directors and deputy directors which really elevated I think awareness of not only what the threat is but most importantly, how would we respond collectively as a state To to a cyber threat Now in this task force that there's not only government agencies, but also Private the private sector and educational sector. How are is everyone contributing? in the infrastructure protection Well, we have there's kind of a two-fold piece that's taking place Or one is you have private industry that is assisting us every day with technological advances and that Assist us both with a hardware and software and that implementation in their own Awareness campaigns and their own discussions and prompting the the same awareness that we're looking for from the public The other piece to that Comes from the individual companies or that we work with on critical infrastructure protection that come together and voluntarily Let us assess Discuss their their weaknesses that exist there and help them to develop a plan for improvement That's awesome. Now, how can we as individuals create a safer culture around technology and to cyber security? I think one of the things that's important is is really just educating not only yourself But but also your family your friends be Be skeptical. That's that's one thing. I think I try and and invoke with my family my wife To let them know that not everything is what it seems on face value So definitely be skeptical Be cognizant of what's out there. It's definitely It's not safe in some places. So so even There's simple little practices that you can do for example Don't use the same password that you use for your banking that you would use at work to log into your workstation Simple little things like that is important.  You wouldn't advertise You wouldn't leave your valuables in the car in plain sight for folks You have to take the same precautions in the cyber realm And how we get there to get that message out so that everybody treats it the same way with the same level of Seriousness is really the challenge. Now we just we're wrapping up October which is national cyber security awareness month. What have been the successes you think of this National campaign and and why do you think it's so important to have a month dedicated to cyber security? Well, just like I mentioned earlier, I I think raising awareness is really critical About how to protect yourself. I know this campaign's I think in its tenth year now It's successful I I think we Michelle from her office definitely does a very good job of encouraging all the various state Departments and agencies to take part in in in the actual campaign Which is great and we you and we here at the agency do a lot with trying to raise awareness we have our internal security awareness training that we push out and We actually use utilize posters to bring up awareness and so forth and and what's great is when I'm walking the halls I'm always approached and asked really, you know questions that I really want folks to ask me And you actually bring up a good point the in many sectors Maybe employees are not even aware that if they get an email it would be a phishing email But if they get an email with congratulations, you just want ten thousand dollars, you know Click on this link to claim it and there are still people out there that could click on that link Again, it's all about being skeptical if it's too good to be true It probably is now since you're in this task force and this is what you guys do for a living What is your real concern? What do you think is going to happen in five years? What are your hopes in this topic? That's a that's a tough one. What what are our hopes and dreams for for the cyber security task force or just Cyber in general for the cyber in general, you know, I'd like to say that I hope that that it doesn't take a 9-11 type event in the cyber world for us to take this seriously and Our hope is that through continued collaboration and continued partnership With all the various sectors in the task force, whether it be academic, tribal, our private industry, government at all levels Coming together so that we can bring that awareness so that we can Educate so that we can inform and that we can develop the the protocols To deal with a cyber event and to help to mitigate this threat Absolutely, and now speaking of the task force. It's a young task force. It's what a year old or less than a year Probably less less than a year. What have been the successes that you've experienced so far that you can say We're doing great. We're doing something to change the cyber security in california and all over the world I think one of the one of the successes right now the national institute of standards and technologies is currently developing a national strategic framework on how to Strengthen our critical infrastructure protection and that task force is a body that's actually going to be providing input On how that strategy is developed and and that's currently ongoing. So I for me I think that's a critical component of one of the successes right now Wonderful and and we are definitely leading the nation in this in this charge It's our intent and our hope to to shape the national discussion And and put california where it should be which is prominently in the forefront and and leading this effort Well, great. Thank you. Thank you for joining us and what we might not think that there is as I mentioned before An immediate and direct threat Uh to we need to stop and think this is real and the california advisor for the department of homeland security Marcela Ducci who works here at calo. Yes He explained what really keeps him up at night Actually, it's twofold one is for the economy of the state, you know a cyber espionage is becoming a bigger threat Foreign states that want competitive edges with california california bean One of the states that is the driver of the economy for the world. We've got more industry more innovation going on here Um That can that innovation that those those trade secrets those things that help are the engine of of the economy move forward Can be vulnerable to cyber espionage and so i'm very concerned about Foreign governments hacking in or even individuals even even national Here domestically uh criminals that that want to be able to get data banking information Trade secrets, etc taking that information and the second thing is Something much more broad and that is has to do with The concerns for for state actors or foreign governments wanting to commit some level of Cyber terrorism and and that is something where Through the the computer systems. There is a denial of service attack to Critical infrastructure systems like a skater system or something that controls our dams or our fuel system or You know something our communications telecommunications Impacting that those systems can have a devastating effect and and quite frankly a catastrophic effect If we cannot thwart them off so Those are the two areas from the standpoint of the security of our state Certainly after we have disasters in california Whether it be fires or earthquake the state is vulnerable and and that's also a period of time when we can be attacked so working with our counterparts at the private sector and with other law enforcement agencies throughout the state and of course with the fbi and the department of homeland security at the federal level We are working very diligently to build And harden our systems to ensure that that these foreign actors don't impact california that much brought up a good point that maybe those cyber criminals out there are Just waiting for that particular moment when our state or our nation is in a weak spot To target us. Can you elaborate on that? Yeah, I think um, you know those opportunities particularly for state sponsored criminals or or rogue states things like that It it does pose a threat and what makes it even more challenging is that here in california? Yes, we have mutual aid. We're very we're very responsive to earthquakes fires mudslides and things like that What's really challenging is how do you respond to a cyber event? It's not necessarily something that just happens on zero day. It can be something that occurs over weeks or months One thing that's really unique about california with regards to our response efforts is is the development of emergency functions As part of our state emergency plan and one of those functions Which is unique is efa team, which is strictly focused on cyber security, which michelle robinson is is the lead on that So the that's work that continues to evolve as we start figuring out our best methods on how would we How the state would respond to an incident where if it was a combined say attacked Masqueraded over say a natural disaster. So it's definitely something I think that the director had mentioned that keeps people up at night. It's It's definitely problematic Very similar cyber is a very unique challenge It's a very unique threat from anything else there. You're not going to see that that flame burning necessarily out there If we do in a fire or the flood waters rising or that hurricane approaching A cyber attack it can be masked can take weeks months and be ongoing And and put you in a vulnerable situation And then of course the the skater threat that the director mentioned is one that would we would see much more rapidly if it affected one of our critical areas of critical infrastructure But many of the other industries It would be masked and you would have disruption of those services taking place over a Over a period of time. So the response To those those threats Is much more technical in in nature and requires bringing folks in and getting that response team together a good analysis and identification and then a mitigation effort right away to Reduce the damage and the effects of that attack. Okay. Well, thank you so much both Michael and Mitch for joining us today to talk about cyber security And this is a topic that we should not forget just because October is over in this half hour We have learned so much from both Mitch Michael and michelle And we want to remind you that there are still things that you can do and you can follow Right now that you can practice brats brad alexander explained Here are the 12 steps in protecting your computer from the threat of e crime We begin with passwords Use strong keywords and change them regularly and be creative Next your email you're on it every day. You should always be attentive to viruses and email attachments links and automatic downloads You should have antivirus software installed on your system and download updates frequently to ensure that your software has the latest fixes for new viruses worms trojans and bots It's important to always use a two-way firewall So you can block those bugs if there's software on your computer that you're not using you should toss them out click and uninstall it You keep sensitive paper documents under lock and key, right? Be sure to establish physical access controls for all computer equipment. Remember to back up your information Use an external drive to back up important files pictures folders and even software Check regularly to make sure you have all the latest critical software updates and security patches Online attacks are only becoming more sophisticated So be sure to do your part in investing in proper updated security software for your computer implement network security and control access to your network Keep your data private limit access to sensitive and confidential data Establish and follow a security risk management plan with your family to make sure Everyone is doing their part to keep information safe. Remember if you need help call your software it support After all they are just a phone call an email or a chat away Stay safe and think before you click If you have any questions for our experts or for us, please email us at questions at kali ma.ca.gov And remember to share this video with your family and friends visit us at kaloasmuseumrather.wordpress.com Have a great day and remember to visit staysafeonline.org for more useful tips and to stop and think before you connect Have a great day


In this set of slides, we will talk about data exfiltration in advanced persistent ref. We have mentioned when discussing APT that one of their goals is espionage. If you recall the APT lifecycle, once the APT has gained access and established its footsault in the target network, it will actively gather and extract information of interest. Such information can include intellectual property, customer information, and state secrets. Data exfiltration in APTs is often a structured approach, which makes sense given the sensitive nature and the value of the target information. Data exfiltration goes through the following or some of the following stages. First, the APT will take care of establishing access to staging servers, that is servers inside and outside the target network where the gathering information can be temporarily placed. The following operation will then be once the information of interest is available to copy it to the internal staging servers. Once enough information has been gathered, this will be aggregated, compressed, and encrypted. At this point, the data are ready for the real exfiltration, which entails copying data from the outside to the outside staging servers. Finally, data is removed from the staging servers to cover the tracks of the attack. There are several methods for exfiltrating data. These methods can be generally categorized in two orthogonal ways. First, the channel can be either overt or covert. Overt channels are channels that are in use also by other computers for transferring data between locations. HTTP download or FTP are some examples. A overt channel is likely to be monitored, but on the other hand, the advantage of using an existing channel is that the target network allows it to use. In a covert channel, information is intentionally hidden, for example by embedding it into another protocol as it happens in tunneling, for example. Both overt and covert channels can be encrypted to add an additional layer of protection against detection. Let's now have a look to one example of covert channel, namely DNS tunneling. Tunneling is the operation of embedding a protocol inside a different protocol. An example is to tunnel IPv6 traffic over IPv4, that is, by encapsulating IPv6 packets into IPv4 packets. In this case, tunneling is used for enabling connectivity in case a end-to-end IPv6 path does not exist. Tunneling is therefore a transmission mechanism and not per se malicious. In case of DNS, data can be embedded into DNS queries. DNS is a good candidate for data exfiltration, or for tunneling more in general, because it is in most cases not heavily monitored from a security's perspective. A large number of DNS queries leave daily the target network for the name resolution process, so it will be easy to sneak in some additional packets. Also, DNS tunneling does not mean using crafted packets with destination port 53. That exfiltration using DNS will make use of the regular name resolution process in practice behaving like regular DNS traffic. Let's have a look at how DNS tunneling works and how we can exfiltrate data over it. On a higher section level, a tunnel allows communication between the client side tunnel endpoint and the server side tunnel endpoint. Using the tunnel, data that are inputted at the client side can be received at the server side. Under the hood, the server side endpoint runs a DNS server that is authoritative for a forged domain. The client side endpoint will embed data in DNS query by manipulating the subnoun name part of the query. After the name resolution process, this query will be delivered to the server side endpoint, which will extract the data and use it. Let's keep another example of data exfiltration, steganography. Steganography is defined in general as the practice of concealing information within a different message. In cybersecurity, this could mean hiding information inside a file, image or video, for example. Steganography is different from cryptography because cryptography aims at hiding the meaning of the message, while steganography hides the message itself. Of course, steganography and cryptography can be combined to make the detection of hidden channels more complex. The question is then where a message can be hidden. Steganography allows an attacker to be creative and a message or part of it can be hidden essentially everywhere. In unused protocol fields, in redundant spacing files, among frames in a video or audio. Let's have a look about this last example. Voice over AP has been used in several ways for implementing a covert channel. The overall idea is to embed data into VoIPedStream in a way that the overall perceived performance is still good enough for the user not to notice that something is at hand. There are several reasons for choosing VoIP. For example, because VoIP session uses several protocols, therefore there are more options for hiding information and a higher chance to remain undetected. Also, VoIP can achieve a relatively high steganographic bandwidth, that is the bandwidth at which you can exfiltrate data. For example, with a voice stream of 50 packets per second, you can achieve a bandwidth of 50 bits per second just by adding one bit of information to each frame. Researchers have identified several techniques for VoIP steganography. Steganophony refers to adding additional data to voice payload, taking care that the overall quality is still okay. Also, as we mentioned already, data can be added to a news field in VoIP related protocols. Audio packets can be intentionally delayed, since packets that arrive late will be discarded by real-time multimedia protocols, but they can still be picked up by the covert channel endpoint. Data can also be exfiltrated by masquerading it as voice over AP traffic, by converting data octets in audio tones and faking a call. Finally, the hiccups technique inserted malformed packets in the VoIP stream, leveraging on the fact that those will be dropped at the destination, but again, they can be intercepted by the covert channel endpoint. As for APTs in general, it can be fairly complex to detect data exfiltration, mostly given the multitude of options an attacker can choose from to exfiltrate data. In any case, data exfiltration detection is one of the steps that will mostly take advantage from a shift of focus, namely from detection of incoming malicious activity to detection of outgoing malicious activities. A large spectrum of techniques can be applied when detecting data exfiltration. Network monitoring and host operation monitoring can identify anomalous data flow or host performing suspicious operation, like frequent encryption and compression of data. Digital watermarking can, for example, help in tracking data from forensic reasons. Also, with respect to mitigation, several techniques are possible. At the base of those, however, there is always the need to properly define security policies about who can access what data and if and how data should be encrypted. Some systems are proactively trying to deny access to data or they do not perform some operation if suspicious activities are identified. This could be the case, for example, of a mail server refusing to forward a suspicious attachment. Another example of mitigation is implementing self-protecting data, namely an additional software layer implementing corporate security policies that takes care that access to the data is available only to authorized entities.


So you just want to extend an image beyond its original frame. Not a problem. There are two different ways to do this. You can do it all at the same time, or you can do it piece by piece. The first requires you to pad the image. To do this in GIMP, drag the image in, go to image, canvas size, set the new size you want, move it where you need, or just click here to center it. Then just go to file, export, and turn it into a PNG. And Photoshop, go to the image, canvas size, set your new dimensions here, then file, export, and save it as a PNG. If you don't have Photoshop and you don't have GIMP, you can always use the tried and true glue of Microsoft Paint. Right click your image, open with MS Paint, Control-A to select all, Control-C to copy, resize, pick however many pixels you want, Control-A to delete the canvas, Control-V to paste your original image, move it where you need, file, save as PNG. Once you've padded your image one way or another, in Dolly, hit upload. If you're using the MS Paint version, edit image, and left click to erase everything around your image and try to remove all the white space. If you exported from GIMP or Photoshop, this step is done automatically for you. So from here, just left click anywhere in the empty space, the prompt will drop, type in whatever you want to fill that empty space with, hit generate, and the AI will imagine outside the image for you. Now, if you don't like what it gives you, at this point, you can always just adjust the prompt, hit generate again, and you'll probably say something better that looks a little bit different. Now, if you want to generate new areas piece by piece, you can actually do it without needing to add extra padding. Just upload the raw image, crop, accept, Control-Scroll down to zoom out, click here to add a new frame, and you'll be able to left click, drag a box to represent a new section that will be created. Once you've placed the box, go up to the prompt and describe what you want. Press generate and you're done. It'll give you four variations to choose from. So just pick the one that you like the most and hit accept. Do this for each area you want to generate, and when you're done, just go up and click this arrow on the right to save it. For those of you who are wondering what the difference between the two methods is, basically when you generate piece by piece, you have a lot more control. But sometimes it's harder to keep things consistent because you're essentially generating a different area one at a time. But the first method generates all the empty space at the same time. So there's a higher chance that the background will probably match itself altogether. So, hope that helps. And as always, hope you have a fantastic day. And I'll see you around.


Mae'r rhaid i'r gweithio ar y cyfnod yma ar y cyfnod gyda'r ysgolion yma. Felly, rydyn ni'n ddod, rydyn ni'n ddod i chi i'ch gweithio'r gweithio'r gweithio? Mae'n ddod i chi'ch gweithio'r gweithio'r gweithio'r gweithio'r gweithio'r gweithio'r gweithio'r gweithio. Dydyn ni'n begendfans ar y rhaid, ond rydyn ni'n gweithio'r cyfnod ar y gyfnod digwydd yma. Felly mae'n gofynu'r gweithio'n gweithio cyfnod y dweud ac i gweithio'r lecternid gweithio'r maen i chi i i'r EIA. Mae hynno fyddwch bod upswch a'r lecternid isio'r nefyd gan cyfnodau cyfaradur yw'r cyffredinol ar ei ddydd, ond y cyfnod hynny. Mae'n ddau'r ysgol yn ymdegol. Mae'n ddau'r ysgol yn ymdegol yw Professor UCD. Mae'n ddau'r ysgol yn y Cymru Wilson. Mae'n ddau'r ysgol yn y Cymru, a'r ysgol yn y Cyfrifol Cymru UC3 a'r ysgol yn y panel ar y cwm. Nid yw Professor Acon yw ymddangos i danau mae'n de応ol yn ddau'r ysgol yn ymdegol, mae yw'r cyfrifol gyda'n eu cyflosfeydd. Mae'n gweithio at bwysig o gwybodaeth ond sy'n dysgu'r cyfrifol yn ymdegol i gyfan gyfer Cyfrifol Cymru. ond, mae'r cyd-widdig yn tra bobl maradwm, ac mae'r cyd-widdig yn dweud ar gyflawni'r pedig. Mae'r cyd-widdig yn ddod o'i ddweud ar gyfer ei gwaith, amryl yn gyflawni'r parodion am y Amazon sales chartiaeth i China. Dyna dwi'n credu'r cetch. Mae Llywodraeth Llywodraeth ac mae'r c fadingoedd o'r plankrawl o'i china. Mae'n pawb i sixon i'r cethaig. Mae'n cethaig. I think that's quite an amazing accomplishment, so Mary, we're really pleased to have you here, it's a great honour and you know Mary's an international speaker, she's just back from London, so we're really pleased to have you here today and we look forward to your presentation. Thank you very much. Thank you very much. I'll school and set up a watch here because I'll lose track of time when I start speaking. So thank you very much for the invitation, I'm delighted to be here at the Institute of International European Affairs and thank you to everybody for coming today. So I really want to get to the conversation part where we can chat, so I'm going to just flip through my slides and really put up constructs that I want us collectively to talk about. So I'm not going to explain anything in great depth, but really just sort of set up pointers to generate discussion. So living in cyberspace is what we're going to be talking about today, yes, and I'm a professor at the Geary Institute. So I was approached by the European Investment Bank a couple of months ago to write a piece, they had this series, they called their Big Ideas series, and they wanted me to write on life in cyberspace, they'd done a piece on water and on forests, and they asked me to write about on cyberspace, which I thought was interesting. So if anybody is interested in reading the paper, this is the paper I'm going to be talking about today, or just a PowerPoint presentation on it, you can go to eib.org and you'll find it under essays, life in cyberspace. So first of all, what is cybersychology? It's the study of the impact of technology on human behaviour, and in fact Ireland is a centre of excellence for cybersychology. We have cybersychology modules at an undergrad level, master's level, and we have doctoral candidates now coming through with PhDs in cybersychology. I was one of the first to get my PhD in cybersychology. Effectively, I originally studied psychology back in the day in the 80s, and when I came across artificial intelligence in the 90s in the form of chatbots, for me it was that sort of moment of everything changed. I looked at chatbots and I thought about, you're all familiar with chatbots as a form of AI, and I thought, wow, they could be incredible for kids with maybe learning difficulties, or I also thought about social isolation. And then I stopped and I thought, or maybe not, maybe this could be the worst thing that they could do. And immediately I decided that I need to know more about this, so I went to the literature, started looking at it, and it came across cybersychology. And then in the 2000s came across the masters and decided to go back and to re-qualify, do my masters and do my doctors. My specialist area is forensic cybersychology. So forensic cybersychology is criminal, deviant and abnormal human behaviour online, and unfortunately I'm kept very busy. So the first thing that I want to talk to you about today is a paradigm shift. People like me have been talking about cyberspace as a place for a decade, 15 years. So when you go online, you are logging in, you are going online, you are getting into a space. And I had been discussing, and cybersychologists discuss this as an abstract space. But in 2016, NATO declared that cyberspace was a domain of warfare, an environment, an actual place. And nobody paid attention. And I think it's a very, very important issue that cyberspace now has been officially recognised as a space. And what NATO was acknowledging is that the battles of the future will take place on land, sea and air and on computer networks in this space. And the acknowledgement of this environment, this cyber ecosystem has implications, social implications in terms of the psychology of this space. It has legal implications in terms of jurisdiction. How do we treat this space, international air, waters, air space, and business in terms of industry operating in this space, and also political implications. So I like this definition. It actually comes from the US Army Cyber Command Joint Protocols. It's a definition of cyberspace, a global domain, information environment, interdependent networks of information, telecommunications, embedded processors and controllers. But what's very interesting is that the Joint Protocol actually divides it up into three layers. The physical network, which we're all familiar with in terms of the actual infrastructure, if you will. The logical network, which is the communications in cyberspace. And the cyber persona, that's us. That's the humans. So think of these three things interacting with each other in cyberspace. And now if we think about cyber persona in cyberspace, we can actually go back and draw on the literature and the learnings from environmental psychologists such as Prachanski and his work in the 80s, who actually conducted extensive studies regarding the impact of environment on human behavior. Now think of cyberspace as a place, as an environment. And think about the impact on human behavior on the individual in terms of the psychology of the individual and on the group in terms of from a sociology perspective. And then how do we transpose that knowledge and information in terms of traditional learnings in psychology into this new space, this cyber ecosystem? Just touching on here the construct of state and trace in cyberspace. So we see powerful behavioral drivers. In other words, human behavior mutates in cyber context. We see the power of anonymity, which is a super power, almost a mythical power of invisibility that comes with great responsibility. We see the online disinhibition effect, the work of Seuler, where people will do things in cyber context that they will not do in the real world. We see cyber immersion, the psychological power of this space. Now at the moment we can think about interacting with our devices at a distance, but the next evolution of technologies, HMDUs, head mounted display units, not only will we, and young people in particular, be psychologically immersed in this space by the time you're putting on your head mounted display unit, you will also be physically encased in this space. I say to parents, if you think you have a problem with your kids turning up at the dinner table with their mobile phones in their hands, wait till you see a row of them in helmets and try communicating with them. Then we have escalation. I've been involved in a dozen different research areas, everything from the impact of technology on the developing infant, cyber babies, through to cybercandria, which is a form of hypochandria manifested online, through to organized cybercrime. The one thing that I've observed, and I say observed because I don't have the studies to prove in terms of causation, is that whenever technology interfaces with a base human disposition, the result tends to be amplified and escalated online. And I called this effect the cyber effect. I believe it's the E equals MC squared of this century. If we can figure out this escalation particularly in negative context, we can then also figure out how to de-escalate, how to stage intervention to deal with negative behaviors online. I get criticized for focusing on negative aspects of technology. I'm absolutely pro-technology. I'm a cyber psychologist.  But the reason I focus on the problems or problematic use of technology is with the view to solving these problems, to come up with technology solutions to technology facilitated problem behavior.  I'm over here saying it's not so good. And my intention is that that introduces balance into the debate so we can meet in the center. Online syndication, I'll come back to that because it's on a slide here. We know cybercrime. A cost of cybercrime is soaring. It's just one stat, 600 billion. Hard to estimate but it's a McAfee stat. We have a basic typology in terms of cybercrime. We have internet enabled crimes. For example, fraud existed pre-internet. Now we have cyber fraud. That's one half of the typology. But then you have internet specific crimes such as hacking, which did not exist pre-technology. So the digital world, and these are just extracts from the paper, has transformed almost every aspect of our lives including risk and crime. And crime is now much more efficient. However, the cost of what goes wrong in cyberspace is not just financial. We are also paying a high price in human terms with the evolution of trolling of online bullying. The rise in sleep, interruption and deprivation, particularly in children and young adults. The surge in anxiety and depression in young people associated with technology use. And again I say association, not causation because we need more research in this area in terms of complex modelling of what's happening. But what we have seen is we've seen a 70% increase in anxiety and depression in young people in the last 25 years. And what we see is the widespread commercialisation of human data. After this when we're chatting we can talk about GDPR and I can talk a little bit about my work on the digital age of consent and why I was convinced that it had to be 16 and now thankfully is 16. And then we see the gamification of electoral process evidenced by the manipulation of constituents' behaviours online. So you're familiar with this in terms of Brexit, you're familiar with this in terms of the US election. I've published a paper on this which is published on the Wilson Centre. It's in the resources here in this tech and it's called Manipulating Fast and Slow and it looks at Canaan's theories in this area. When you talk about behavioural manipulation online it's good to do a deeper dive and understand what actually does that mean. How do you manipulate behaviour online? And with the general election looming in Ireland we need to be focused on this in terms of this potential vulnerability in terms of how voters may be persuaded in a best case scenario and maybe manipulated or coerced in a worse case scenario in terms of what's happening online. It's going to touch on this. This is a Europol map. It's a heat map. It's a cyber crime heat map. So you can see the darker areas are where cyber criminal infrastructure is more prevalent and it's just it's a mapping of where cyber crime is happening. And when I saw this map at Europol I actually thought about another map and I thought goodness this is interesting. So here's another map. Just bear that image in your mind for a second. Data visualise it. This is the Shodan map. Does everybody know what Shodan is? Shodan is the map that shows all devices connected to the internet at any point in time. So you can see the heat map here where you would expect. Now let's think about going forward in terms of looking at predicting future threats. Effectively look at all the dark areas that are not connected in a meaningful way at the moment. And if we think that we are having a problem with cyber crime at the moment what will it look like going forward when we have this sort of heat map of connectivity worldwide. Now let's jump out of cyber security and do my favourite thing and go into a completely different area. Now let's think about global warming. Can anybody see what might happen here across the equator when you have global warming? When you have a catastrophic event like a famine or a drought and where you have populations in these areas that have no way of actually providing for themselves or their families other than using the connectivity afforded by the internet to engage in criminal activity not because they want to be criminal but because they are doing it to survive. And from a societal point of view we need to think about this in terms of staging interventions not just with global warming but interventions in terms of how technology will be deployed in these areas in a way that actually is going to make it sustainable for all of us over time in terms of the internet being sustainable over time and not subject to catastrophic shifts in terms of either climate events or other drivers. So this is a report for ARM. ARM is the manufacturer chips and processors. They make about 70% of these for devices worldwide. I'm an academic advisor to ARM and we're doing a number of projects at the moment. My work with them specifically is in terms of educating children in terms of best use of technology. And we're looking forward at IoT, a trillion connected devices, so the internet of things. So again, let's think about this another way. So this cyber utopian, this cognitive dissonance, that it's a good idea to connect to trillion things and not to think that something could go wrong. So at the moment from a cyber security perspective and an Irish perspective, we actually talk about security threats and attacks and attacks on critical infrastructure. The point at which we have a trillion connected devices, we won't be talking about potential attacks on critical infrastructure, we'll be talking about attacks on all infrastructure. Now come back to the physical network, the logical network and cyber persona from the joint protocols and let's think about Ireland's resilience in this context. The great news is that we're an island with limited points of entry for the internet. So if we did have a massive attack on all infrastructure, we could actually look at a physical solution whereby we might secure our island with these limited points of entry. We're not like Luxembourg where it's a thousand connecting points. The second thing in terms of the logical network, we might start to consider alternative communication pathways if the internet goes down for a short period or for an extended period. Do we move to satellite? Do we move to radio in terms of being able to communicate? Or do we have an intranet within the country that we can shift off the internet and move on to another communication pathway? Then in terms of cyber persona, we have so many tech companies HQed in Ireland. We have the capacity to have an incredible act of response force and I would suggest that we start thinking about the creation of a cyber reserve. Can you imagine having that many cyber defenders on call that we could actually draft them in to deal with some catastrophic event? Online syndication, so this is, I describe it as the mathematics of abnormal behaviour online. So today the incidence of abnormal behaviour has been capped or maintained by the laws of proximity and domain. What does that mean?  What were the chances of us coming together to normalise and socialise our behaviour? It was capped by distance. We weren't likely to come into contact with each other and in addition to that there would be great personal risk involved in us expressing a particular preference until we go online. Now under the cover of anonymity and fuelled by online disinhibition we can syndicate to find each other. My prediction is, and I hope I'm wrong but probably not, is that this will actually drive the incidence of criminal, deviant and abnormal behaviour in general population. There's an argument in terms of causation correlation. Does the connectivity afforded by the internet cause bad behaviour? Possibly not. I sometimes think, if we think about this connectivity at this psychological level, let's think about it another way. Maybe it just shines a very bright light into the darkest reaches of human psyche, what young called the million year old man, and maybe we're all just game of thrones underneath it all. I hope not, but it's a possibility to think about it. So anonymity. I think that for us as a think tank, like this institute, I think we should not be afraid to challenge what I call the sacred cows of the internet. Just because the internet was developed and the premise of anonymity is almost embedded into it does not mean that it is the way to proceed. Yes, we want a dissident in an oppressed regime to be able to wake up and tweet or blog, but at what cost? If the cost of anonymity online is soaring cybercrime, if it's trolling, if it's the sextortion of children by anonymous predators or those who have a commercial interest in the child, then we have to have that conversation about the greater good. And maybe going forward, we work with anonymous protocols rather than anonymity online, and that's something we can talk about when I finish up. So this is my book, The Cyber Effect, and when I was working on it, I got a call from an editor in Washington and she said, Bob would love you to come to his house for dinner. He's very excited about this book he's heard about it, and I said Bob who? And she said Bob Woodward, and I was like, oh my goodness. And I went to dinner with Bob and there were four or five guests in the house. I know there were four or five guests and he literally grilled me for three hours. I didn't eat anything. Every time I lifted a fork, I was answering a question. And what a brilliant man, what an incredibly fine mind to jump into a subject that he literally had. There was very specialised and really get to the bottom of every point very quickly over the period of time. And I was embarrassed the next day. I actually rang his wife and apologized. I said, I'm so sorry. I ruined the dinner. I spent the whole dinner talking about my book and she said to me Mary, don't worry, Bob's house, Bob's rules. If Bob didn't want to talk about your book, we wouldn't have spoken about it. But Bob actually very kindly reviewed my book and he wrote that just as Rachel Carson launched the modern environmental movement with her Silent Spring, which is Rachel Carson's famous book, Mary Aiken delivers deeply disturbing, utterly penetrating and urgently timely investigation into the perils of the largest unregulated social experiment of our time. And while I'm beyond flattered that Bob would even think of my work in any way as being in the same league as Rachel Carson, what he did make me think about was the environmental movement. Now, let's think about cyberspace. Let's think about this environment. Now let's transpose a fundamental principle within the environmental movement into cyberspace, into this new environment. And one of the fundamental principles is the precautionary principle. So in the environmental movement, the precautionary principle dictates that it's not up to us to prove that the oil company is contaminating the sea. It's not up to us to prove that the water utility company is contaminating the water. It is up to them to prove that they are doing no harm. Come back to cyberspace. When we have spills and pollution in cyberspace, when we have, you know, if you look at social media, when we have live killings, live streamed online, when we have children exposed to extreme and violent and adult pornographic content, when we have children accessing self-harm sites in terms of anorexia or cutting sites, who is responsible for the pollution of cyberspace? And who is responsible when something happens on a motorway and there is a horrific accident and images are taken and then disseminated in this space? Is it the device manufacturer? Is it the internet service provider? Is it the social media platform? Is it the app developer? Or are they all collectively responsible for this space? And should we in a social context, in a political context, in a legal context, from an industry perspective, should we be applying the precautionary principle to cyberspace? Should we be forcing all parties who prosper, who commercialize, who monetize this space to step up and be responsible and be accountable? And going forward, what are the issues that we are going to face? We need to look at these problems from an ethical perspective. This is a recent development by a research group at MIT. They are proudly boasting, if you will, that they have developed the world's first psychopathic AI. What could go wrong? What happens when this thing jumps out of the lab and gets in the wild? What happens when it turns its focus to unsupervised children who are actually growing up in cyberspace? There is no shallow end of the swimming pool online. The internet, another sacred cow of the internet, it was founded on the premise that all users are equal, but this is not the case. Some are more vulnerable than others, and particularly children. So what do we need? We need research, we need more investment and research in this space, which is why I'm delighted to be here in an academic forum to talk about it. We need to broaden scientific investigation, and we need to consider how we handle behavioural problems in this environment that are evolving at the speed of technology. And in my paper, I argue that I don't believe scientific breakthroughs are achieved by metaphorically sitting on the fence. We need cyber leadership, and we desperately need academic first responders. In terms of research projects, by the time you apply for a grant, by the time the grant gets awarded, by the time you hire the people to collect and analyse the data, by the time you do your analytics and you write up your results and then you submit to a peer-reviewed publication, you're talking about probably a three to five year timeline. It is likely, if not probable, that the phenomenon under study has already passed by the time we have the evidence based studies to inform policy. And what I am arguing is we don't have to wait, yes of course we want an evidence based approach over time, but we also need expert opinion and expert intervention and working groups and policy forums to actually act now, children are being born, they are engaging with technology. We are, these problems are happening now. My great friend and colleague Mcmorran, an Irish garther who actually rose to the level of a director at Interpol, he says we are facing a tsunami of problem behaviour and criminal behaviour coming at us down the line online. So, instead of thinking about cyberspace and all things that pertain to technology in these silos, you know, communications separate from children and youth in terms of departments, defence over here, justice over here, health over here, finance, what I am arguing for is that what we need is a polyvalent policy approach. We need to join the dots and bring these silos together to look at these problems. And how do we do that? You know, in coming back to cyberspace as a continuum, think of cyberspace as a continuum. On the far left we have the keyboard warriors.  And that is based on a fundamental idealism about freedom of the internet. And then over on the right we have social media, social technology industries who also have an idealism around not wanting to see too much regulation in this space because there's a cost associated with it. And you have these two entities who are somehow strategically aligned. And the rest of us, the 99% of us, 99.9% of us and our children, we get to live in the middle with no say in this space. So my plea here today is let's take back cyberspace. Let's look at how we can collectively approach ethics and governance and best practice in this space. And effectively the best approach is transdisciplinary. Now anybody in this room who's involved in an academic context will know how difficult it is to bring different disciplines together. I was at one such brainstorming at the Royal Society and the social scientists couldn't agree with this computer scientist and the mathematicians couldn't agree. It was an interesting day. And so was the report that had to be painfully crafted as a result of the session. But now everything is changing. For me the way through is actually look at all these disciplines that we now have. Cyber psychology, cyber ethics, digital humanities, cybersecurity, health tech, fintech, computer science, robotics, AI. What do we all have in common in a transdisciplinary context? We are all speaking the same language of cyber. And therein lies the hope to create a fantastic forum to actually debate and discuss these issues in a transdisciplinary manner. And I would like to use this opportunity, if I may, to call for the consideration of some form of digital futures forum where we could bring this vision together in an Irish context that may help to inform European policy, that may help to inform global policy in this area. And I'm just going to leave you with something to think about. So for Irish cyber society going forward, we have three aims in an age of technology. One is an aim of achieving and maintaining privacy. The other is an aim of delivering on collective security. And the third is to ensure the vitality of the tech industry. And the most important thing is that none of these aims should have primacy over the other. Privacy cannot trump collective security. And the vitality of the tech industry cannot trump individuals' rights to privacy. And the key going forward is really to achieve balance. I get very worried and concerned regarding how we can deliver on collective security where there are now encrypted domains that are effectively beyond the law. And this will be problematic going forward. So just last slide from my paper. What is new is not always good. Technology only brings progress when we are able as a society to mitigate its most harmful effects. Thank you for your time.


والذين هم للزكات فاعلون يجب أن يفعل ذكات ذكات في القرآن يوجد ممتاز مجرد مجرد صداقات مجرد مجرد مجرد ذكات مثل ذكات الفطرة مجرد خمس مثل بسم الله الرحمن الرحيم إنما وليكم الله ورسوله أمام الصلاة ويؤتون ذكات وهم راكعون إن صحينك يكونوا أمامهم ومعهم صلاة أمير المؤميني عيسلام قف صدقه not ذكات لكن الله رفع لله صدقه as what ذكات يعني ذكات يوجد مجرد مجرد في القرآن وليس ذكات فاعلون لا تفكر only بالنجوم ، تعتبر عن يفسي ، سأعلم سيارة وعندعم ألوير. Okay well why? I ask some youth. Why do you want to become a lawyer? Because I make good money. Or I want to study hard become a doctor. Why? Make good money. I said to them, okay you made good money then what? You have achieved your goal. You retired at age of 30? That's it. You retired. You're done. You made money now. You bought a nice car. Bought a nice house.  حاولوا بعملهم. حاولوا بعملهم! هذا يتفاق. هذا يعتقد على أعلى السابق. هذا يتفاق. يتفاق. إذا كانت تفاق كما يقولوا يتفاق فهي يتفاق. لا ، يتفاق. يتفاق أعلم الذي أعطيك. يتفاق أعلم الذي أعطيك. ملتاة آخرية. لدينا خطأ من البلدان. العراق today is about 37 million approximately which is about the population of Canada approximately out of those 37 million 4.5 million orphans يعني almost almost the population of Toronto يعني imagine the whole population of Toronto is composed of orphans can you imagine and these orphans don't have fathers and it's not just about the money this son or this child who lost his father and he's let's say 10 years old think of the trauma his father was here today tomorrow he's gone خلص that's it finished how is he gonna deal with the situation so at least let's try to help these orphans and how many orphans do we have globally from the followers of أهل البيت عليهم السلام how many millions only in Iraq we have 4.5 million think of other places Afghanistan, Pakistan, India are you there widows orphans try to give but give قربة إلى الله تعالى give قربة إلى الله تعالى help قربة إلى الله تعالى you save one orphan you help him educate achieve inshallah a degree then you've turned his life around I don't know if you've been to Iraq or maybe India, Pakistan and you see these orphans begging on the street what future does this child have think about it he's now maybe 10 years old when he becomes 20-30 what's he gonna what's gonna happen to his life whereas if you come to him you take him to an organization to a group that is reliable trustworthy and you say listen you take care of him educate him his clothing whatever and I will take care of it I'll pay you the funds and you make sure that this child grows to become inshallah with some bachelor degree with some university degree then imagine his life of this individual around you've saved him Allah made you a reason to save this child that's what zakat does it creates this love in the community love in the society a person one day came to me he said sheikh I am sleeping in the shelter and my family members you know cousins others he says they go to Hajj every single year they go to Ziyara every single year they spending thousands of dollars جزاهم الله خيرا but I'm sleeping in the shelter I don't even have money to pay my rent we need to think of others when you do think of others you'll see how the people will love you you'll create that love in the community I'll tell you this one incident it happened with me a mu'min came to me and said through the conversation he didn't even tell me through the conversation he said I'm putting my house for sale I asked him why how come he said you know job is not very good and I can't afford the payments anymore I looked at him I said okay when you sell your house what are you going to do he says I don't know go find some rent I said so you're going to sell the house that you're living in right now and go find some rent how much do you need he said X amount of dollars thousands of dollars I said okay wait called some mu'min within a matter of couple hours they said we'll give him the whole amount and don't even tell him who it is in fact they don't even know who it is wallah they did not even ask who it is I said to them there is a mu'min who's about to lose his house so he's putting it up for sale and this is in Canada they said tell him not to sell his house we'll take care of his mortgage payments they used to give the money to me from me it goes to his bank directly he doesn't know who paid and the payee doesn't know to whom it was paid but how many of such people do we have that's really the essence of iman iman is not just about standing for salat that's between you and Allah but what about what do people see of you your akhlaq that's what they see of you a group of people came to imam al-sadaq عليه السلام and they told him اللهم صلى الله عليه وسلم they said يبنى رسول الله we come from a community that is all your shia they love you they follow you they obey you they do this they do that imam صلى الله عليه وسلم okay they pray wonderful he says tell me how do they deal with each other does the rich help the poor does the young look after the old do they look after each other they said نا يبنى رسول الله none of this he says then these are not my shia these are people who love me they love us they are our lovers but don't say that you have come from a group of our shia our shia are people who care about each other والمؤمنون والمؤمنات بعضهم أولياء بعض الله says مؤمنين male and female believers they are to be supporters of one another taking care of one another and we read in زيارة عشورة which I recommend to the mu'mineen to read every single day every day read زيارة عشورة and insha'Allah you'll see the fruit of زيارة عشورة reading it every day in دنيا before the אחرة you have problems you have issues read زيارة عشورة health problems read زيارة عشورة it is very important to read زيارة عشورة it brings a lot of barakah in your life in زيارة عشورة we read we say الذي أكرمني بمعرفتكم ومعرفة أوليائكم الله the one who has honored me through recognizing you يا أبا عبد الله يا أهل البيت I recognize you indeed it is blessing from Allah it is an honor that we know who our أهل البيت عليهم السلام and insha'Allah we follow them that's an honor not only it's an honor to recognize you and to recognize those who are the followers your followers ومعرفة أوليائكم meaning us knowing each other is an honor to us think about this brothers and sisters is this how we deal with each other in the community or while we're having chai here did you see this person look at that person look at him look at this person oh now this guy is standing for presidency he can't even pay he doesn't even own his house how can he become the president unfortunately we have this kind of mentality we judge people based on how much their wealth is we don't judge him based on his taqwa on his deen on his religion on his iman how good of a mu'mina she is how much she helps she contributes and sometimes you don't even recognize you don't even realize but Allah brings the barakah in the lives of those who help there was a lady from Kuwait this lady used to build masajid without her family even knowing she had a contact person in Iran she would tell that contact the trustworthy person she tells him go find the villages in Iran that don't have masajid poor people small village tell me how much will it cost to build a masjid there and I will send you the money she built 14 masajids 14 then she died nobody knew one day a person from Kuwait goes to visit Iran for Ziyara runs a vehicle a car and starts driving goes around from one city to another city he stops in one of those cities the small villages on his way he wants to pray he goes to the masjid he's wearing his Kuwaiti attire he enters into the masjid prays the salat the imam of the masjid afterwards comes to him السلام عليكم عليكم السلام where do you come from I'm from Kuwait oh masha'Allah did you know that the person who built this masjid is from Kuwait she's a lady from Kuwait he says really oh no I didn't know that I came by coincidence I was passing by he says yeah this lady she passed away رحمة الله عليها her name was Fulana so and so he said really that's my relative I know her so he goes back to Kuwait he contacts her children this elderly lady he said did you know your mother had built masajid in Iran he said no Allah we had no idea nobody knew but Allah wanted to show the work why because it was done قربة إلى الله so Allah wanted to show is it a coincidence that this man from Kuwait happens to be passing by this masjid coincidence that the imam of the masjid knows that it is built by that lady coincidence that the imam approaches this man and talks to him Allah wanted to show the عمل الصالح even though the lady kept it a secret but Allah wanted to show it's قربة إلى الله تعالى she never told anyone and later her family recognized after her death that she had built 14 masjids now how many people did she help through that how many you know communities were served by that that's when you don't think about yourself and that's what another meaning so when you إن شاء الله become successful whatever you do as a mu'min try to help other communities help them with your علم like that dentist who goes and travels he has knowledge he shares that knowledge with the people or those doctors there are some doctors who travel and they share their engineers go they build homes for the orphans they are sharing علم people who pay they say we'll sponsor an orphan we'll sponsor widows we'll sponsor books publications we'll sponsor orphanages schools we'll do that نور على نور that's the essence of the Zakat which means you look after the community the society and not only that even here I know here they have a program called out of the cold out of the cold those people who look after that who participate in that program we have to look after the weak in the society and صدقات are acceptable for those who are non-Muslims you can give صدقات to a non-Muslim إن شاء الله you'll get the edge إن شاء الله


Okay, so I'm not done with this one, what's that? Are you a vlogger? Is it okay? No one wants you in their video. Oh, I guess they do. Everyone does. What are we doing here this morning? We're playing some hockey. Am I playing hockey?  It should be a good morning. We're here. So, sled hockey definitely isn't as easy as it seems. I'm up here in Denver at a ice hockey ring, which is fun to actually be out in public.  But it's fun to actually watch. This is a group of ABT's that goes and tries different sports, and so I'm just here watching and meeting people. Did you win? We did win. We won. You won? We won one to zero. In the world's lowest scoring hockey game. A lot of chaos out there on the ice today, but a lot of falling, a lot of me falling particularly.  That's impressive. Maybe I shouldn't talk to the camera with a police officer right here. Especially the driver shouldn't. So this was our first real outing in public today, and I've been told by many people this would happen, but it was my first time actually experiencing it. We stopped by Starbucks to get some delicious sugary Christmas drinks. And I found out that kids will stare. Like hardcore, unashamedly, without blinking stare at you. Somebody crossed the table from this little girl, probably 12 years old, and she was just like staring at me and my leg. So that's interesting. That's a weird experience to have, but I was warned that it's exactly what would happen. People will definitely stare. So that's a weird experience to have as a new amputee, but it is part of the game and it's a new adventure. We're still learning. So that was a long and fun day today, guys. I look forward to seeing you in my next video.


Insolvency is the state of being unable to pay the money owed, by a person or company. On time, those in a state of insolvency are said to be insolvent. There are two forms, cash flow insolvency and balance sheet insolvency. Cash flow insolvency is when the person or company has enough assets to pay what is owed, but does not have the appropriate form of payment. For example, a person may own a large house and a valuable car, but not have enough liquid assets to pay the debt when it falls due. Cash flow insolvency can usually be resolved by negotiation. For example, the bill collector may wait until the car is sold and the debtor agrees to pay a penalty. Balance sheet insolvency is when the person or company does not have enough assets to pay all of their debts. The person or company might enter bankruptcy, but not necessarily. Once a loss is accepted by all parties, negotiation is often able to resolve the situation without bankruptcy. A company that is balance sheet insolvent may still have enough cash to pay its next bill on time. However, most laws will not let the company pay the bill unless it will directly help all their creditors. For example, an insolvent farmer may be allowed to hire people to help harvest the crop, because not harvesting and selling the crop would be even worse for his creditors. It has been suggested that the speaker or writer should either say technical insolvency or actual insolvency in order to always be clear, where technical insolvency is a synonym for balance sheet insolvency, which means that its liabilities are greater than its assets, and actual insolvency is a synonym. For the first definition of insolvency insolvency is the inability of a debtor to pay their debt. While technical insolvency is a synonym for balance sheet insolvency, cash flow insolvency and actual insolvency are not synonyms. The term cash flow insolvent carries a strong but perhaps not absolute connotation that the debtor is balance sheet solvent, whereas the term actually insolvent does not.


What's up, everybody? Jason here from jaspyscasebreaks.com. Joe's a 1920, Pinini, Opelins, basketball, one box break, half case break, ground up teams number 11. Just sold out. Again, 30 spots, all teams in, guys. All teams in. There you go, Dice Roller. Here's the list of customer names from Lorenzo. Matta all the way down to Richard, who bottomed straight up. And then you have Jeremy Port down to Roper, who won those in contenders. Pack break number four. Now all the teams in. Let's roll it. Five out of five, 10 times. Good luck. One, two, three, four, five, six, seven, eight, nine, 10. Robert Dunraw Runkle, 10 times here. One, two, three, four, five, six, seven, eight, nine, 10, son, none of the Blazers. I said, Robert, you have the Phoenix sons. Nick with the Clippers, Brad with the Grizzlies. Nick with the Heat, Richard with the Knicks. Robert with the Wizards, Jeremy with the 76ers. Matt, yeah, the Pelicans. Jeremy, poor with the Jazz. Matt with the Spurs. Robert with the Nuggets and Bucks. Michael Hansen with the Bulls. Sean Mattock with the Nets, as well as the Hawks. Deacon, Stanny, Kings, T-Wolves, and the Lakers. Roger, you have the Warriors. Richard with the Magic. Richard Apples, that is. Richard Burbank with the Hornets. Robert with the Mavericks. Braddy of the Celtics. Kang with the Cows. Matt with the Raptors. Jeremy S with the Thunder. Justin with the Rockets. Lorenzo with the Detroit Pistons. Richard with the Pacers. And Robert with the Portland Trail Blazers. So if anybody wants to trade, guys, let me know. Alex gets a spot in the Chiefs R&B. Roger gets a spot in the NT Filler. All right, guys, this is 1920. Most recent draft class, of course. Zion, Jawa, everybody else in there. All right, this is from a fresh case, guys. So we have another one box break up on the website. And we'll be posting the filler up right now. So second box will be for our random teams, number 12, I believe, and it's the only one I cut. So top or bottom, one, two, three for the top. Four, five, six for the bottom. Six. One, two, three, four, five, six. So this would be four. Again, RT number 11, or 12, sorry. All right, everybody, here you go. One box break. All right, first up, we got us for the Spurs. Little Kelvin Johnson. Number 10 out of 39. San Antonio Spurs going to math. We have a little Kurt Rambus. It's Phoenix Suns edition, five out of 10. Phoenix Suns is going to Robert Runtel. We have a little Bogdan Bogdanovich, 20 out of 79 for the Sacramento Kings. That's going to Danny Connell. We have a little Pony, Kristoff Porzingis, Dallas Mavericks autographs going to Robert. 10 out of 49. I got a couple more of this. Little Brad and Clark for the Memphis Grizzlies. Brad Newman with that one, 23 out of 25. We've got a little Carl Malone. USA basketball, a little Jersey and autograph. And inscribed number 11, USA. That's pretty nice. Five out of 79. So Carl Malone, of course, go by college rules since his team USA. That'd be Utah Jazz. Pretty much played most of his career there. Not just a few years. So Jeremy Port with that one. And the last one we got here is a rookie and it's a booklet, four out of five, PJ Washington Jr., which will be going to the Charlotte Hornets, Richard Burbank. Wow, look at that. Nice little patch right there. That must be the shoulder patch that the NBA allows the sponsorship to be. There you go. Very, very nice. PJ Washington Jr. is a stud. Four out of five. Very nice. And there you go, guys. That was the break. This was Opulence basketball, one box, half case break ground, team number 11. Number 12 is in the store. We can get that one done tonight as well, guys. See what's in hiding in the next one. Appreciate it, jazbykatesbreak.com.


You know, we all are part of this tribe of humanity, and we all occupy a different spot in that tribe. You know, I like to think in terms of gifts, that each person is born into different kinds of gifts. They could be, you know, personal gifts, or they could be gifts of money, education, whatever it is. And no matter what gift you've been given, the deep impulse is the same, that you want to give this gift forward in some way. You want to devote this gift towards something that's beautiful to you. And I think that's universal.  And its expression is unique to each person. People sometimes ask me, who do you admire the most, Charles? Who's your hero? Who's your role model? And they're expecting me to say, mmm, Gandhi, you know, or Martin Luther King or Nelson Mandela or somebody. But I bring this example. What's coming to mind now is this kindergarten teacher. And I remember she would kneel down in front of a child and just look him in the eye and speak to him with total respect, no, no, no, no patronizing note in her voice and total love and, and confidence in this person as a capable, beautiful being on the kind of systems level thinking, you know, like, well, that's all very nice. But you know, what about climate change?  She's just in a little kindergarten. And another part of us can sense that her action sends ripples out through another matrix of cause and effect that we've blinded ourselves to in our dominant culture. We marginalize that kind of thing. We marginalize in general the kind of things that women do. And I think we need to begin listening to that. And when we do, our understanding of what an activist is begins to expand.


I think we'll see a continued trend in the rollout of the Internet in particular. You have incumbent industries, in particular telecom and cable television, that have been in charge of rollout of the Internet. But these industries have a strategic interest in preventing that rollout because it's going to disintegrate their existing cash cows. I think what you want to take a look at in terms of innovation is ways to circumvent these particular industries. And I'd also like to give a shout out at Google Glass and how ubiquitous recording might change social values for the better or worse is a matter of perspective, but we'll all have to relate to it. I think anyone daft enough to answer that question is just a lot braver than me. The one thing is certain is whatever I said would be wrong and rather than actually cause a large audience to be laughing at me, I think I'll duck that if you don't mind. Today we are working very closely with the automobile industry in terms of looking at the transport vehicle of the future. I believe there are a lot of innovations that will come from that in terms of not only saving drivers' lives or passengers, but also in making the car much more intelligent to a point of optimizing the transport system, but also increasing the whole safety. I think the next big innovation is mass collaboration and the European Internet Foundation, which is a collection of forward-looking MEPs of identifying this really as the dominant paradigm for the next 10 or 15 years, and I very much agree with them.