It does not matter how good your skills are. If you want to be a stand-up player you need to be physically fit. In this video I'll show you a handful of soccer conditioning drills you can use to take your fitness to the next level. If you don't know about me I used to be a huge underachiever but through obsessive self-improvement I found my success. Earned a college scholarship, played for my national futsal team, a youtube channel with over 100 million views, I've helped players worldwide and I'd love to help you improve faster and achieve more. You can have all the skills in the world but if you aren't physically fit you're not going to be able to make the impact on the game that you would like. You won't be able to get on the ball as often as you would like, you won't be in the right spot at the right time. When you do get the ball at your feet your legs will feel heavy because you're out of shape. Being fit makes the game easier and I'm sure you can relate to this. Being unfit it makes the game very difficult and unenjoyable. When you prioritize your fitness you get yourself into great shape, you're going to have more fun and you're going to be more effective on the field. You can use this video as a resource for ideas on how to improve the different areas of your fitness. This first drill is tempo runs. You're going to work from 18 yard box to 18 yard box. I'm just going to take off and go about 60% on my top speed really focus on opening up your stride, focus on good running technique, calm breathing. When you get to the other 18 yard box you're just going to slow down, walk to the end, walk back to the top and repeat. This next stamina drill is called short and long. You're going to work hard on the long lengths of the field from corner flag to corner flag. When you get to the end you're going to jog slowly and recover. So you're going to work hard let's say about 60%. When you get to the end you're going to focus on your breathing, your recovery, slow jog. As soon as you get to the other corner flag you're going to take off, put in that work and repeat all the way around the field. I call this drill four corners. I would usually use it as a finisher to a workout. You're going to start on one corner flag running a figure eight to all four corner flags and finishing where you started. You're going about 60-70%. The whole way no resting in between just focusing on good technique. It's so important when you get tired, focus on your breathing but focus on your running technique.  So as you get tired focus on that good technique. If you ever freeze, feel flat footed or heavy-legged when you have the ball at your feet these agility drills will help you feel lighter on your feet and sharper. Practicing agility drills like these it's really important that you push yourself. You push yourself. If you make mistakes, trip over the ladder, the ball or your own feet that's not a problem. That's probably a good thing. It means you're pushing your comfort zone and that's the only way that you're going to get faster and sharper. So when you're challenging yourself and you make mistakes stay positive, shake it off and go again realize that it's just part of the development process. It's first COD drill is just a basic cut. It seems like it's nothing but really it's everything. Learning to do the basics very well is going to help you be more explosive on the field. So this seems like nothing but take it seriously. Your ability to quickly change direction, sharply get away from an opponent will make you more effective on the field. Ever changing direction, focus on your body positioning. So you want to jump into that turn, get low to the ground, push off with power and really focus on those first two, three steps carrying yourself away in the opposite direction. Watching myself doing these drills, I really want to focus on getting lower to the ground and pushing off with more explosive force. Here are some jumping plyometric drills to help you improve your vertical so you can win more headers and be more dominant in the air. However, these drills are also going to help you become more explosive so you can sprint faster and have better overall movement on the field. This first speed drill will help you with your basic understanding of body positioning when you are sprinting and especially accelerating. You want to think about leaning forward, almost falling forward.  When you run like this, you'll be able to generate more power as opposed to standing up straight. Hill sprints are a great way to add some resistance and help you with an explosive acceleration. Finally, you want to think about practicing basic sprinting. You can do 20 yards, 50 yards and even move into 100 or full field sprints. You need to look at sprinting as a skill, something you practice. Most people just think you're fast or you're not. Well, really sprinting comes down to technique. Yes, some of us are blessed with more pace than others. But if you improve your technique, you can improve your speed. If you're wondering how many repetitions to do, how many sets, how much rest between each drill, don't worry about that just yet. Just make sure you're subscribed to my channel because later in this week I'm going to release a video that will explain exactly how to plan your individual training routine. And it doesn't matter if you watch these videos if you don't do anything with them. So if you take nothing else from this video, I want you to change your mindset towards fitness. Fitness is something that you want to do. Yes, I said you want to do it and that may seem crazy. But if you want to win, you should want to prepare. You should want to get yourself in the best physical condition that you can because when you do, you'll be so much more effective on the field. The game will become easier to you. So want to do the fitness. Look forward to those sprints. They're making you better every time you do the stamina and agility drills. You want to do fitness. Number two, view your movement as skills that can be improved with practice. So just as you would look at your shooting as a skill that you can learn about, you can understand, you can practice more to improve, you need to focus on your running, your sprinting, your change of direction, your sharpness and quickness of your feet. These are all skills that will get better if you practice them more. So if you are unhappy with your running technique, if you are unhappy with your speed or your ability to change direction quickly, you can do something about it and you need to do something about it because now you know it's just like any other skill with practice, with understanding, it can become better. So instead of feeling sorry for yourself, it's time to do something about it. And number three, be consistent. It takes time to see noticeable results. Everyone wants to get faster after one sprint. You want to improve your stamina after one fitness session. It takes time, but you can improve your results faster if you do things more frequently. So instead of destroying yourself with a two hour fitness session once a week, maybe do 10 minutes of fitness every single day. Your consistency is going to produce the results and the changes that you want to see in your game. If you like this content, check out the Soccer Success Planner. You can download it for free. There's a link in the description below. And for advanced training, check out the Online Soccer Academy.


It's a lot of sacrifice for them. So My name is Sachin I work for a company called ideas and ideas basically provide solutions for hospitality and car park industry We help them decide right prices for their products in order to make Maximum revenue. So what you see what you see on the screen? is You know the overall distribution of our clients you you see they are spread all across the world and There are more than 7,000 clients were using our products. We are there for more than 25 years and You know we are considered as leader into this domain. So I mean there are more than 100 Big hotel chains were using our products right now and these are some of the prominent name from those hotel chains So coming back to today's topic. I have nourished Jen with me So he's going to help me out with this presentation He has been consulting with our organization for more than a year now And he has been a big catalyst there to you know to transform our development and testing practices so The agenda agenda for today's discussion. So The title of the session is death of inspection sounds very scary, right? So first we will spend some time in understanding. What is inspection? Okay? I'm sure many of you will correlate when we describe that term and when we describe the death of inspection So we will see what is inspection? We will see what type of challenges this inspection Brings forth into our development and into the faster deliveries, which is the need of the hour Then when we realize that you know we need to change What we tried to come out of these challenges and initially when we tried to come out, you know, we Took a little bit wrong path, but then how we course corrected that part after we realize that you know This is not the right way to solve the inspection problem so we will talk a little bit about what we tried to come out of inspection and Of course, we'll share the Experiences across this journey. So this journey started a couple of years back I would not claim that we have reached the destination. We are still in transition But during this journey whatever experiences we had there were a lot of learnings There are a lot of learnings right now and we thought it's a good Time now to share whatever we have learned so far with the larger audience So that many more people who might be in the similar situations get benefit out of it. So Let's first start with what is inspection. Nareesh, would you like to take it up?


Okay, Hano is a freelance journalist and security researcher. Sometimes he tricks semantic into getting their math wrong with regards to TLS keys, and otherwise he just throws random crap at freely broken source software as part of the fossing project. So please welcome Hano. Yeah, hello. So today I want to present some methods to you how you can improve your software if you write software and like introduce the little project I have been running for a few years. So I run the fuzzing project, which is also supported by the Linux Foundation's core infrastructure initiative. Yeah, and I generally try to improve the security of free and open source software there. And I occasionally find these bugs where I think like these bugs should really shouldn't happen. So this is this was a bug in keepers xc. So which is like the standard free software password manager people use these days. So there was a string of 48 bytes and that was stored in that variable. So does anyone see anything wrong with that? Huh? Huh? Zero terminator. I heard it. Yeah. So the thing is if you have a string in C that's zero terminated. It means it has a zero byte at the end and this zero byte at the end has to be stored somewhere. So if you have a string of 48 byte length, then your buffer needs to be 49 bytes. This code was part of keepers xc. As I said, it was executed when you started it and it was copied over from a project called zxcvbnc. So this is an algorithm to judge the quality of a password. It's been ported to various languages and this is kind of the C version of it. So So the situation we have here is we have a buffer overflow which gets like triggered right at the start of an application. It comes from a security tool. Then it gets copied over to the code of another security tool. So that's kind of a bit worrying. I mean, this is probably not exploitable in any reasonable way because like there's no attacker controlled input or anything, but it's clearly a bug and it's concerning if these bugs happen. So yeah, why did nobody notice that? Another example, Zumba. So you probably all know Zumba. It's kind of the Linux version of this Windows network file system protocol. And you probably heard of the Shadow Brokers, which was like that group of unknown origin that dropped a bunch of exploits a while ago. And they are presumably from the NSA. I mean, we don't know for sure, but that's what everyone assumes. And most of these exploits were against the SMB protocol. So the Windows network file system. And I had the idea if you run these exploits against Zumba, like the open source implementation, maybe that also triggers bugs. I mean, the exploit probably will not work, but it may trigger a bug. That did not happen. So I didn't find any bugs triggered by these exploits, but I found a couple of other bugs. So this one here, if you look at this, it may seem a bit odd. So you have here two structs that are basically pointing to another struct and to the size. And then you have the size of the struct. But you have here key twice. And on the right side, you see key and rack. So something is weird here. So what it really meant is that the second line should also be rack and the size of rack. And then this is a very classic bug. This was a function that was accessing a string at position minus one and checking if that's a new line. But the string could be a string of zero size. And if you have a string of zero size and then access minus one, you end up in invalid memory. So these two bugs and one other bug, so two of them I found by running make check, like the test suite of that application. And one of them I found by just running somewhere and trying to access it. So yeah, how did I do that and why did nobody else find these bugs? Because clearly, okay, they were triggered by the test suite or just by running the application and trying to access it. So and what I'm using here is a tool called address sanitizer, which is a feature that is part of the compiler. So it's available both in GCC and in Clang, which are the two usually used open source free and open source compilers, which you can activate with this compiler flag. So that, and here's a very simple example. So that is kind of a textbook buffer overflow. We were like defining an array with three elements, and then we're writing to element three. And given that we're starting the counting from zero, then the elements zero, one and two are valid and element three, that is invalid. I have this code here as an example. There it was. So what do you think what happens if we just start this? Anyone? Yeah. Yeah, so it will just do what we expect. It prints the five because it apparently at this point it can write to that memory, nothing crashes. And so we won't notice that bug. We have a buffer overflow, but we don't notice it. And now if we add this sanitize flag, if sanitize address, and then we start it again, then we get a crash and a really nice error message. And if we add g, which adds debugging, then we even get line numbers. So it says, okay, we have an error address sanitize stack buffer overflow right of size four, and here we get in line four. So that's very nice. So now we get very good information what's going wrong and that we have a buffer overflow here. This is another example. This is a classic use after free bug. With use after free, it's kind of unpredictable what happens if you just run that code. So what we're doing here is, okay, we're allocating some memory, and then we're copying a string to it, and then we're freeing that memory. You're shaking your head? As a quotation mark missing for last test. As a quotation mark missing. I fixed that, but I didn't press reload. Yeah. Sorry. And then we're freeing that, and then we're trying to print that. So if you compile that, then nothing happens. But if we compile that with address sanitizer and debugging again, then again, we get a very nice error message. And for use after free bugs, like, oh, it doesn't detect it as a use after free. Yeah. Okay. It thinks it's a buffer overflow. It's not working perfectly, but you see that there's a bug here. So yeah, address sanitizer, though, it's a very powerful tool to find bugs in your C code or C++ code. And I'll just say, if you're responsible to develop or maintain any kind of C code, there's just no excuse not to test it with address sanitizer. And if I see, like, that tools that are security tools or something like Samba, which is very exposed to attacks, that they apparently have never tested their code with this tool, which is freely available and really simple to use, I don't get that. So I really try to tell people, hey, this is a very powerful tool to improve the quality of your code. Please test your code with it. And to get back to the example from the beginning with key pass. So I've compiled that before, because if I would compile it during the talk, you would have to wait several minutes to see the compile, which is not very interesting. But if I just try to start it, I get this very long stack trace and tells me, yeah, right of size one. So that was the buffer overflow we saw right at the beginning. Yeah. So when addressing it, I find all these bugs, you could wonder, okay, what happens if we try to build a whole system with it? Like just a whole Linux system. I mean, we have all the code. We could do that. And that's so what I did was that I was created a gentle system. I mean, with gentle, it's kind of convenient because it's anyway a system that you compile yourself. It wasn't that easy because you kind of have dependency issues and you need to get the right order in which you compile the packages. But eventually it worked. And I was able to run a full system compiled with address sanitizer. You end up that it's getting very slow and it needs a lot of RAM because it has a huge memory footprint. But it works. And this is just a list of applications where I found bugs just by compiling them and running them with address sanitizer. So at the beginning, I had to fix some of those bugs so that I was even able to use that system because like bash was crashing all the time. And it's not very usable. So, but eventually a lot of bugs got fixed in a lot of important packages. Yeah, yeah. So address sanitizer is part of kind of a whole suite of different sanitizer features. They are developed mostly with people from Google and usually in Selang and some of them are then ported to GCC. And address sanitizer is definitely the most powerful one. So it's very easy to use and it finds bugs with high impact. But the others are worth looking at too. So there's undefined behavior sanitizer. So if you follow discussions about C, there are a lot of situations where the C standard says, okay, if you do this, that's undefined. And after that you can have no expectation that your code does anything correct. So a typical thing is an integer overflow. If you're overflowing an integer and for example, checking after that, whether the integer has overflowed, that does not work because then the compiler can say it is an integer overflow that can never happen. So we can just optimize that check out. Or another thing is invalid shifts. Like the shift operations you see there are a lot of rules. You cannot have a shift by a negative value or you cannot shift a negative value. And undefined behavior sanitizer finds these things. Then there's memory sanitizer that finds use of uninitialized memory. So yeah, typically you're using your initializing, you're defining a variable and then you're reading it before you've written anything into it. Things like that. The problem with that is it's a bit more tricky to use because there you not only need to compile your application with it but also all the libraries. And if it's C++ then that includes G-Lib C. So using that is a bit annoying for small applications. It works for bigger applications. It gets really tricky. But so Google has built Chrome with it. So it is also possible to build huge applications with it. But you have this dependency issue. So it's not as straightforward as address sanitizer. And then there's also threat sanitizer which finds concurrency issues which is mostly interesting for more complex applications. So race conditions and things like that. Okay. This is a security advisory for TCP dump. And there's a large number of CVEs. 41 if I'm not mistaken. More than half of them were reported by me. And when you see something like that it usually means someone was using fuzzing because you just find a large number of bugs with that. So let's talk a bit about fuzzing. So fuzzing, the basic idea is you're testing software with invalid inputs. So you have kind of a fuzzer that is it's taking some input, some example input, and then just adding random errors and like hundreds a second and testing the application again and again and again. And see if it crashes at some point. And if you have a crash, a crash is usually high likelihood of being some kind of memory corruption. So it might very well be a security bug. And traditionally there have been like the very first idea of fuzzing is to do dump fuzzing, which just means you take a valid input and add random errors to it. That's already quite effective, but you don't find the more complex bugs with that. And then in the past, like many people have then written fuzzing tools that were specific to a certain file format or a certain protocol. That is more effective, but the problem with that is that it doesn't really scale because like you need a specific fuzzing tool basically for every application or at least every format you're testing. And then there's been a new development in the past couple of years, which is so-called coverage-based fuzzing. And there the fuzzer itself gets kind of smart, but you don't have to do anything about it. And that is there are fuzzing tools that are detecting what code paths are triggered within an application. And that gives you a feedback what inputs are interesting. So if I have, I don't know, a JPEG file and I'm fuzzing a parser for JPEG, and then it's okay, if I change this byte to something, then it triggers a new code path within my executable. That means that is an interesting input. It may trigger some unusual feature and then it can use that input to do further fuzzing as a starting point. And that has turned out to be very effective. And the tool that kind of first introduced this technology is called American FuzzyLob. Here's a screenshot of it. So yeah, shows you lots of information. The most interesting information is the upper right, which tells you how many crashes it already found. Yeah. It's relatively straightforward to use. The one thing you need to consider here is that you need to recompile your application because as it needs this feedback mechanism for the code paths, it needs to add special code instructions to the code.  And it's really straightforward. So it's not a lot of work. And that's also, I think, why it's quite a popular tool because you really get started with it really fast. So yeah, I would say AFL has revolutionized fuzzing. And it's also like occasionally you have debates with people who have ideas about fuzzing that are, as they outdated. Because fuzzing has been around for decades. But what has happened in the past couple of years is just that we have tools that are so much more powerful that it doesn't really make sense to use the methods that have been used in the past anymore. You should use those modern fuzzing tools that are much more powerful than what we had in the past. So AFL, I tend to say, it basically has found bugs in every major piece of software out there. I'm just naming a few. That should be OpenSSL. So there's another error on the slide. So in OpenSSL, plenty of errors in OpenSSL, in Apache, in libjpeg, libpng, which are the major image libraries, SQLite, Knoopg, Bash, whatever. Basically, but these are just prominent examples. But really, if you go to the web page, you can find a list in what has already found bugs. It's extremely effective. And I've earlier talked about address sanitizer. You can use both together. Because address sanitizer enables detection of additional bugs, these bugs that don't necessarily crash an application, particularly things like buffer overreads. Usually if you read past the bounds of a buffer, most of the time doesn't crash because there is still valid memory that you can read beyond the buffer. And combining the fuzzer with address sanitizer will detect those. It will slow things down, but it will increase the number of bugs you find massively. There's another tool called libfuzzer, which is based on the same basic idea of fuzzing. It's using this coverage-based fuzzing with code path detection. But the difference is AFL is testing executables and libfuzzer is testing functions. So here's an example. So what you're doing there is you're writing this kind of test function, which takes a buffer and a size. And then you pass that to the function that you really want to test. And in this case, this function expects something that is zero terminated. So I'm allocating a buffer that has one byte more and add a zero at the end and then copy this input buffer to my temporary input buffer. And the function here, RS create query, belongs to C RS, which is a DNS library. And yeah, I have a demo here. So I have already compiled that library with some specific C flags and with C length. So libfuzzer only works with C length. It does not work with CCC. And now I'm compiling this fuzzing stuff. So this file libfuzzer CR is something that is the code I just showed you. And then I link in the static version of the library I just compiled. Then I link in libfuzzer itself. And then, okay, it needs the include file, which is in the current directory. That's trivial. And it needs the thread library. And then I add address sanitizer, again, because I want to find more bugs. And then I add this flag fsenitize coverage. This gives the fuzzer the capability to find these code paths. And then I add g which adds debugging so I get better error messages. And if I run this, and this is kind of an older version of that library, you see basically in an instant I get a crash. And this is a real bug. And this was used in an exploit chain against Chrome OS in a really complex exploit, but that was kind of the initial attack vector. So that was a real bug. So if anyone had fuzzed this function before with libfuzzer, it would have found that bug. So I kind of retroactively created this fuzzing stuff after I knew that there was a bug in that function. But I think it shows how powerful that is. And I didn't even give it any starting value here. I was just basically starting the fuzzer without a starting value. So it starts fuzzing with random bytes. So we have a real bug with real severe impact. And we can find it very easily. So the advantage from libfuzzer over AFL is that it's much faster because we're calling functions and a function call is faster than calling an executable. Because loading an executable has a lot of overhead. The disadvantage is it's more worked because we usually have to write some kind of code. I mean, you can see it's not a lot of code. There was a code. But it takes longer. Like if I start to fuzz something with AFL, it takes me maybe like five minutes and then I get started. If I want to fuzz something with libfuzzer, it's more like half an hour. It's not dramatic, but it's definitely a higher barrier. So you probably all remember this, right? The heart bleed bug, which was like a very severe bug in OpenSSL. And I decided to make a little experiment. I wanted to know, could we find a bug like heart bleed with fuzzing? And so I have to say something about it. Heart bleed was basically found with fuzzing. So it was found by two people independently, but one of them was using a fuzzer. But that was a specialized fuzzer for the TLS protocol. And also it's commercial. So it's not publicly available. It's not free software. So I cannot look at it and I cannot easily use it. So I did an experiment where I tried to like fuzz the handshake of OpenSSL. So I created a little application that would basically do a handshake with itself. And while doing that would write out all the handshake messages into files. And then I added a functionality that I could swap out one of these handshake messages with one that I gave it over the command line. So with that I was able to run a fuzzer like AFL against it. And in combination with address sanitizer. And after six hours it found heart bleed. So if that would have been done. And I mean it's all kind of tricky to say, okay, you retroactively found something that's easy. But I would say and I mean you can read my blog post about it. I would say that I didn't use any specific knowledge about the heart bleed bug. It was really just fuzzing the handshake straightforward what you would expect if you want to find bugs in a TLS stack. Interesting also lip fuzzer. I didn't know lip fuzzer back then but then I got an email from its developer who said, yeah, I tried to recreate your experiment with lip fuzzer and it's much faster. It can do it in five minutes. So that shows like how much faster it is. Okay. Differential fuzz testing. So what I told you until now was mostly about these memory safety issues, which is like the typical bugs you have in C code where you have buffer overflows, buffer over reads. But there are also very different kinds of bugs where you can use fuzzing. And differential fuzz testing means that we're fuzzing something and we're comparing the output of different implementations. So when we look at crypto, I mean crypto is ultimately just math, right? We're doing some calculations based with some keys which are in the end just numbers. But a question we can ask you is the math always correct or what if there's a bug? Because like if you have bugs in the crypto that can be pretty devastating. One example for that is the so-called RSA CRT bug. So if you're doing an RSA signature, what most real world implementations do is that they do some kind of optimization where they split up one big costly calculation into two smaller calculations. And I cannot go into the details, but what happens here is that if one of these calculations has an error in it and it doesn't matter what kind of error, then the signature you get reveals your private key. And that is pretty devastating. And there was a very nice paper by Florian Weimar who's working at Redhead where he was just connecting to all the servers in the internet and seeing if they give him signatures with this bug so he could get their private key. And he found like a couple of hundred. So it's very important that the math we're using for our cryptographic algorithms is correct. And so one thing I did was that I did a calculation with this input from a fuzzer and then compare the output of two different implementations. Like for example, you take OpenSSL and you take LibGCrypt and you do some maybe a modular exponentiation which is the basic operation for RSA and Diffie-Hellman and many other algorithms. And then you see if the result matches. Because I mean it's math, there should be only one result if you do an exponentiation. There's no ambiguity here. So if we have a different result, that's definitely a bug in one of the two implementations. And that turned out to be pretty successful. So I found a bug in the modular exponentiation of OpenSSL. I found one in NSS. I found several bugs in the elliptic curve operation of Nettle which is the library used by GnuTLS. I found a bug in the Poly 1305 authenticator in OpenSSL before it was officially released. So it got fixed for release. That's always nice. And in matrix SL and here with the matrix SSL bugs, I very much suspect that some of the keys Florian Weimar was able to extract from devices were due to this bug. Yeah. So this kind of shows that you can also use fuzzing to find completely different classes of bugs. Yeah. Now I want to talk a bit why this all matters. So I mean we heard earlier that many of you are using Linux. That's great because it's free software. It gives you freedom to change it and so on. But how secure is that? And we have actually some pretty scary attack surfaces on typical Linux desktops. So there was a very interesting exploit a while ago. So there are a couple of browsers that automatically download files and put it in your downloads directory. For example Chrome does that but also Epiphany which is standard GNOME browser. So basically that means a web page can create files on your hard disk which may be concerning. Then we have desktop search tools that automatically index all those files. Like GNOME has something called tracker and KDE has something called baloo. And then like these search indexing tools then use a lot of code to kind of index your file for example to extract metadata or generate a thumbnail or whatever. And if you can find a bug in one of those parsers that's exploitable then you end up that from a web page you can exploit that code running on your Linux machine. And these tools use many parsers that are not very well tested for security issues. And Chris Evans is a security researcher. He found a bug where he could use a parser for Nintendo sound files which is more or less kind of like an emulator of that sound chip in Gstreamer to exploit a Linux desktop from a web page. So web page downloads the file. The file gets indexed by a tracker. Tracker passes it to Gstreamer. Gstreamer passes it to some kind of Nintendo sound file parser and that could be exploited. So we're exposing all this code which is very often not very secure to files from the internet. That's a bit concerning. Yeah, that basically sums it up. So I've given a whole talk about this at FOSTEM. If you want to look it up it should be online on YouTube. So GNOME in reaction to this has sandboxed the desktop search now and also the Thumbnailer because you have a very similar issue with the Thumbnailer. So if you open a file manager then it will automatically create a small version of the like a small image of that file and that also exposes a lot of potentially insecure code to untrusted input. KDE has not done anything in that direction. So if you're using KDE you should be maybe a bit concerned about this. And also in reaction to that I've started fuzzing Gstreamer and it also led to like 20 bucks fixed. But there's a lot more code that is exposed through these mechanisms. So to get to a conclusion. So I know that a lot of people say we should no longer use C at all. We should rewrite everything in Rust or whatever in Go or Haskell or but realistically there's still a lot of C code that we're using. So probably your operating system is written in C, your browser is written in C and most of the other applications use also. But with a combination of using these sanitizer features and with fuzzing we're able to discover a lot of these typical C bucks. And we should do that. And I mean the tools are free so please use them. Yeah, that was it. Thanks for this. So if there are any questions we have two mics open in the middle. Go get there. Hi Hanno, thanks for the talk. It was very nice and entertaining.  So thank you from my heart. But you can do that too. Hi, I had a question. You said you find the hard bleed perk using fuzzing. But as I understand it, the hard bleed was one that leaked information without doing any sort of crashes or anything. How do you find that sort of... That is where Address Sanitizer comes in. So hard bleed was a classic buffer over read. So you had a length and a message and you could give a longer length than the message and then it would just read random memory. But Address Sanitizer detects exactly these things. So if you read past the bounds of a buffer then Address Sanitizer will crash your application. Of course. Good answer. Thank you. In the front. Hi. So you said that you recompiled Gen to using ASAN, right? Yeah. The Address Sanitizer. So actually I did the same, but like when I tried to use WGet I already found a bug. So I give up on that part. I'm happy that you go down that part and find all those bugs. So, but have you told, because if you know Gen to also has a way to test each package after you build it. So maybe you could also run the test suite and not just try to use the system after you compile it. I actually did that. I didn't go through all the things that it found and reported it because it was just too much. But I went through the relevant packages and did that. Thank you. In the back. Thank you for that awesome talk. So I've never used the code sanitizer, but I used Volgrind. How do they compare? Yeah, okay. That's actually a good question. So I think Volgrind is mostly deprecated these days. So it's an awesome tool for what it's doing. But Address Sanitizer kind of covers most of the things that Volgrind covers. It covers bugs that by definition you cannot find with a runtime tool. And it's much faster. The only thing Volgrind finds that Address Sanitizer doesn't find is uninitialized memory. Therefore, there's memory sanitizer, but memory sanitizer is a bit more tricky to use. So there kind of Volgrind may still have a use case. But it's actually something that I'm trying to preach a bit that Address Sanitizer is kind of like Volgrind, but better. And if you're only using Volgrind these days, I'd say you're doing it wrong. Hi, thanks for your talk. What do you think about sanitizers as security features? Yeah, okay. It's also a good question. I thought that's a good idea, but I was corrected. So Address Sanitizer, so I had the idea to say, okay, it has a huge overhead, but maybe you can afford it for a high-secure system. The problem is that Address Sanitizer basically disables ASLR and a bunch of other security features. Then you can use Address Sanitizer's crash reporting to get root if you have a Stuart binary compiled with it. So there are a bunch of issues with it. There was a very detailed post on OSS security where someone said detail all these issues that come up. So it's basically not designed to be a security feature. It's a debugging feature to find bugs for developers. And do you see some way to make it more security feature? Maybe modify it somehow. That may be possible, but I don't have a good answer to that. Maybe that's possible, but one would have to go into the very details on how it works and check that. But I mean, the thing is there are some new exploit mitigations that are available, but that are not widely used. And the thing with exploit mitigations is people only use them if they have a very small overhead. I mean, it took us more than 10 years to convince Linux distributions to enable ASLR. And you won't sell them a feature that has 50% overhead in runtime and even more in memory use. So I would not be overly optimistic. And I think maybe it's just not the right tool for exploit mitigation. Thank you in the front. What's about some complex systems like NVIDIA QDA if I want to find out if there are some bugs or security vulnerabilities in it? Because the QDA library and NVIDIA driver are closed source and NVIDIA GPU and firmware are also closed things and there are domains between it. I have no idea, sorry. I mean, yeah, that you're basically going to a completely different architecture with different system design and yeah. I don't think the things I presented here apply to that. It's just kind of a completely different domain. Are there more questions? Three, two, one, no. Okay, then thank you, Hanno.


In this study, researchers developed a new method to create flexible carbon framework electrocatalysts from nanosellulose fibers and carbon nanotubes. This method involves freezing the materials into a desired shape and then assembling them at the interface. The resulting material is both mechanically flexible and highly efficient at catalyzing oxygen reduction reactions. Additionally, they were able to use these materials to build a solid state zinc air battery which offers improved performance over traditional batteries. This article was authored by Huiping Peng, Meng Wang, Pei Pei Sun, and others.


Hey guys, how are you? Alright, this is just a little bonus video and if you haven't been following what I've been doing lately, I've been really loving making all sorts of handmade halfway art. I don't know what else to call it. They're kind of embellishments. They could be standalone pieces of finished artwork, but I love having them laying around to little things that I've made or put together that I can take that and add it to some charms or add it to a journal page and it just finishes it off. This is a good example. This is a piece I made not long ago and it could be a finished thing. It could just be finished. Or it would be really great on a background, maybe a watercolor wash background with a little bit of stamping in it or something where this is the focal point, right? So I love the idea of not only having these, but having these organized in one central place. So I have this Sterilite bin that I've actually was using for something else and that didn't work out for that. I think it's going to work out great for this. It comes with the dividers in it. I got it at Target and I probably don't have enough of these little finished bits to fill it up, but now I'm going to have to make some. So these are the different compartments. So I'm going to just quickly sort things into the different compartments, sort of by type. Does that make sense? I have some of these kind of tag embellishment things that I've done, different kinds of them. I have hot glue texture, just different little like grids and things with hot glue and string that I've made on my silicone mat and these are great to cut apart and to put into gesso or gel medium onto a page or a canvas. I love having them. I'm going to put them right there and I love these. These are just, these are great. They're a little big. This one actually is big. It might have to rest on top, but that's okay. Yeah, I just, and these could, these would be great just, you know, on a page. There we go. Some more hot glue. I've got some pieces, something else that's really I'm loving is plastic packaging and then taking it and either doing Sharpie on it or alcohol ink or something like that. And I'm actually going to put this here and then having a stash of those or sometimes I stamp on them and then shrink it. Sometimes I don't shrink it and just different kind of plastic. This is one I want to do that. That's why it's in here. So I don't forget and lose it. But these make a great embellishments against a piece of white paper or against the muslin or burlap. And then I have these beads that I made inspired by Jerry Bellini's video and if I will try to remember to link that in the description below if I forget somebody remind me. So I love these. So they're going to get their own pocket. These I didn't make but my friend made them for me. I got them in Happy Mail and so but I love them. So they're going to actually go in here and that's something I might actually pinch her idea and make some. This is some stamped strips of muslin stamped with my some of my rubber stamp line and are they cute? So and there they could be made into something or it could be finished so it's going to go in here. But I love the idea of having this in all one central plate and I don't know why this is in here because this doesn't attract I know it's a watercolor thing. I'm not attracted to using it at all. So it's actually going to go in the bin. I love having these in one central place that I can just pull this bin of sort of semi done things halfway art and I can have it and I can use it and put it on a page. I can put it into a glue book as is. I love that or I could put it send it in Happy Mail or something. I love it. So anyway, this is my idea. You could use anything but it's going to work for me I think. That's it for today everybody. If you want to send me Happy Mail, join one of my Facebook groups, support my channel by shopping in the Etsy shop, email me, anything like that, check out the video description. It's all down there. Besides all that, go out and have a great day. Do something nice for yourself because you deserve it and I'll see you later. Bye guys.


Sometimes customers request large one-time orders at a reduced price, and management must decide whether or not to accept it. There are both qualitative issues, like if the plant has capacity to accept the order, and if accepted does it hurt regular sales, and quantitative issues, like if the incremental revenue is greater than the incremental cost. Let's look at an example. Assume 7-11 stores want to purchase 50,000 football cards for a special promotion and at a special price of 50 cents per pack. The manufacturer, CardsRS, has total production cost per pack of 80 cents. So should management accept this special order from 7-11? Well, to answer the question, we need to perform incremental analysis and identify the relevant data. So the special price of 50 cents per pack is relevant to the decision. So is the direct material cost of 15 cents per pack. So is the direct labor cost of 5 cents per pack, as is the variable overhead cost of 10 cents per pack. Here I've created a table for the incremental analysis. Incremental revenues total $25,000. Incremental variable costs total $15,000. This is because the direct material, direct labor and variable overhead total 30 cents per pack. Finally, there is not an incremental change in fixed costs, so they are irrelevant to this decision. Thus, management should accept this order because it increases operating income $10,000. What if the cards need a special hologram and a 7-11 logo? And CardsRS must buy a machine that costs $15,000 to do this. Now fixed costs have changed, increasing $15,000. Management should reject the order because this special order would cause a decrease in operating income.


What's up everybody once again is brand man Sean and this is actually my first link up with 24k golden we started a new series he's actually responsible for the name he gave it a name and was making history right here man I'm excited to talk to him if y'all don't know with 24k golden do you call it do you ever say carrot or you all say no I just 24k yeah if you ever if you all know who this man is man look he's an artist who's been in this game for four years but he has a track that went crazy on the TikTok 14 million views on the YouTube video I even checked the Spotify it is 14 million views on the YouTube video I'm sure it's crazy on Spotify right now and look in this interview we just gonna talk about how he got here he's been so grateful to offer to drop a lot of knowledge and kind of tell his story so 24k what's up bro how you doing how you feeling man good morning good good man I already told you that I like the I like the skateboard in the background you want to set the vibe of where you are right now exactly so I'm in my apartment downtown LA right now got some anime on the wall I won't show too much so we can make sure this get monetized yeah just woke up chilling okay so as a matter of fact I went ahead and checked the Spotify has 88 million right now 88 million plus you know nothing to sneeze at light work though and well I want to like before you even get into that and how that that took off and you you're at where you are right now man let's go back cuz you said you know you've been in for four years what made you want to rap in the first place so I would say I always had a passion for music it was more just kind of finding out what role I wanted it to play in music you know middle school I tried out you know playing around with with garage band and stuff like that producer stuff but I was always kind of a charismatic person I like I like attention you know I like being front of the scenes I like entertaining people making them laugh making them feel good and once I had the confidence I was like yo I should be artist and I had a mentor that had a he was an artist as well in San Francisco paper boy and he had a studio and I known him for a couple years and finally when I was a sophomore in high school he was like yo want to make a track we got the studio right here and I just kind of hop on that opportunity immediately dope dope it was a let me see so at that time cuz I'm gonna go ahead and speed up to the fact that you got that I just recently saw your the dropout of college video which is crazy so now makes me want to ask were you in college at this time did you actually go to college yeah so after high school after I graduated high school I got a full scholarship to USC for business and I was like I get to live in LA for free I get to eat in LA for free meet cool people learn some shit and and this is the best city for music so worst-case scenario I'm gonna I'm gonna give it my all and I'll leave a great school to business degree but she ended up going my way so I'm happy about that yo yeah that's crazy I I didn't expect that the full ride so you we already know that you sharp man like you already know what you're doing you smart moving throughout the game did you play any sports anything while you were in high school no I never played sports I was always like I was kind of like chubby and short until like sophomore junior year high school and I just like it puberty hit me different like bloomer alright I know how that goes y'all y'all be the worst man y'all y'all come for go for revenge with the woman everything we already know what's up man you live in life right now I can even lie yeah all right well I check this out then um but when you you went to college and then how long into college was it like no actually what was the process like you know you start making music cool and we know it didn't blow up immediately and you actually did go through a process was there any ever any doubt while you were in college like what was that day-to-day they didn't like because you didn't immediately just decide to drop out of college yes so so I've been doing music in high school from sophomore year to senior year and that was such a valuable learning experience just because it's like music grows best in the community and when you're in high school you're instantly plugged into this community of not only your school but if you live in like I'm from San Francisco so which is it's a big city in the schools but it's real compact so everyone from all the schools knows each other so basically like once I got my music popping in my school I was able to go because everyone got friends in different schools I was able to get it spread it across through there so being in college was super valuable for for my music career just because it was another like it was like another territory to kind of take over and and conquer and make my own and I already had that experience of how to promote music at school that's like you can make a whole episode on that alone right there yeah so so from being in college you know just staying consistent keep making music keep meeting people and then I made the song called bitch I go to USC and we did a video for that too all USC rappers directed by my boy Elon via USC produced by Chris Papa USC everybody USC so that kind of like made me the school's champion and everybody wanted to support my music from there but but that was that was right with with three months of being in a school at USC I had gotten a record deal from Columbia and I was like all right well this is for real now and that was in the first semester so second semester ground and I'm like damn I cannot do both at the same time so I dropped all my classes except for one so I could still have the scholarship and live here eat here and all that and then once the year was over I was just like I'm gonna take a leave of absence I didn't really even drop out I could go back whenever I want in the next 10 years okay okay interesting like so how did you because that's that's fast I didn't expect that quick of a turnaround and you get signed so how did that and I was after the USC song though right yeah but but they had already we had already started talking about that before I dropped the USC song was that through somebody like paperboy that kind of that connect or did you already like or did you have a mindset of going to talk to people like I want to get signed at some point so I'm gonna go find some people and kind of get on their radar but you just didn't expect it to happen that fast well at this point in the beginning of 2018 I dropped my song balling like Sharif and like learning from you and a lot of other people I was like all right let me see how I can market this online and this was the first song that I really created a thorough marketing plan for so I was submitting it to blogs I was doing all that and it was starting to get a bit of buzz and I remember a DJ booth this writer Herschel Pandia he tweeted out an article called the stigma of SoundCloud rap and he talked about how artists shouldn't be judged for the platform they put their music on they should be judged for the quality of their music yeah that sounds like Martin Luther King I got you and at the end of that article he was like yo if any so-called SoundCloud rappers want to send me your music I listened to at least 45 seconds to it and as soon as I saw that on Twitter I sent it to him DMed him followed him and kind of just forgot about it and two weeks later he did a follow-up article saying I listened to these SoundCloud rappers music here's what I thought and he's like out of all the songs he spoke about Bond like Sharif the most highly it was like yo I would be surprised if you never heard of this kid 24k golden again and D.A. Doman D.A. got that dope he saw that article and he reached out to me and this was before Taste and ZZ and those songs he was it was like maybe a couple months before but we started building a relationship he thought I was super dope and then his shit started to pop off so he um when record label started coming at him for you know we want you to be an A and R we want you to do XYZ he would tell them about me and he told Barry Weiss who's the head of records which is a subsidiary under Columbia and Barry was super excited and he played in the Valentino song and from there they were like yo we need to sign this kid immediately like yeah they just try to get me like that and everything worked out in the right way okay yeah I could imagine if I heard that song I already already knew what it was and it was crazy about that song is that we always knew was gonna be a hit like I literally wrote that song probably two years ago it next to my computer as a senior in high school and when I recorded it I stepped up to the booth the engineer flow he was like yo this is a hit I was like yo this is a hit and I ended up saving that song it didn't it didn't release for a whole like a year or a year and a half after I actually wrote it because I knew it was such a good song that I had to put the right resources behind it mm-hmm all right so you wrote it and you recorded it immediately and didn't release it late or you just kind of like did you re-record it when you decided to release it or did you record it back then no we got it mixed again but that recording I can't even I probably couldn't even record it the way that it's recorded now like my voice cannot do the same things that it was back then so that was a blessing like that that's that I was a little bit more with a pre-puberty type you remember me of course you already had puberty but you hit it like four or five times I don't know what's coming exactly yeah and it's crazy well before we get off of anything like college related especially because you did mention you you you move throughout high school and you move throughout college using what you learn about high school there's so many people that are in those environments and don't realize while they're there there's so much value to it and they need to leverage it what are some tips or some of the things that you learn in terms of how to navigate and leverage and maximize the education environment so I think a lot of people that that do music in our in school they don't want to be known as oh that's that soundcloud rapper or whatever you know and because at first some people are going to talk shit because you know if you're in high school at college you're probably not at the peak of your music making abilities right but the key thing is just to know who you are and know that if this is what you want people are going to see people can see you as whatever you want but it's more about what you see yourself as and the confidence that you bring to that and focusing on the people that do support you and people that do appreciate what you're bringing to the world rather than the ones that don't so I would say number one is to own it you know be own own what you're doing and then uh number two is like tell people about it don't be afraid to self-promote shamelessly like when I was in high school on valentine's day I took this picture right of me shirtless in front of the mirror flexing and it said uh it was like it was like it was like one of those like mean valentine's cards I should have put I don't want to valentine I just want valentino I'm gonna do that for this year's valentine's day but it said that was before the song it said uh I love you almost as much as I love myself and it had hearts around and it just had my soundcloud link all over and I used my school's free printing and I printed out like a thousand of them bitches and was just passing it around in school so everyone at school immediately was going to know who I am and even if that doesn't mean they go and click on your link or go follow you on instagram them knowing who you are and knowing that you make music is so valuable so that was a big thing in college I made these uh stickers that were based off those little those little uh porn ads like this ugly son of a bitch is fucking super hot bitches or whatever I made it I made it this ugly son of a bitch is respecting super hot chicks and I put my face there and I threw those up all over the college campus and eventually it just kind of became like well known like oh that's the super ugly son of a bitch that's respecting all these hot chicks and he makes choir music like you just got to keep going hard being consistent yo I mean so the things that I love love about what you said one of course you're that owning it and not being afraid because everybody has to overcome that hurdle you're not getting where without it but the way you market it I talked to so many artists and when it comes to marketing it's so disappointing the lack of creativity that they use in their marketing you know what you did in high school what you did in college the approach to the valentines and the whole porn flip like actually created something that's that's worth talking about like that part is is huge because again as long as they have you in their mind they know who you are that's step number one you don't need them to love your music the moment they get to know you like that's it's like a relationship like oh what's the rush don't move that fast but yeah okay you know who I am bet and I think a really good point to make is like you can't just copy what I did and expect the same success because the way that you market has to be authentic to your brand and me I'm a funny guy I'm a ladies man or whatever and that that rang true with my marketing people could tell that from talking to me they see it from the things I posted on internet and then they see it in real life like finding out what your brand who who you are as a person and who you are as an artist understanding yourself is key because from there that's how you build on all your marketing plans that's how you build out your music and all that stuff yeah I mean that right there that self-awareness I feel like a lot of people don't necessarily have and they're spending so much time or I always say you know of course I talk about branding a lot and marketing a lot but I always say you can't start with that stuff you're listening to so much of that stuff that you're trying to create who you are based on these hacks and tricks it's like no you got to figure out who you are so then you can you and then apply accordingly the things that make sense for you like that simple so the fact you got that self-awareness is big because everything becomes easy after you actually know who you are you know I mean yeah that's what's up um Valentino tell me a little bit more about that song though like how did how did like get more into the creation process how'd you come up with that idea I mean that's a that's a that's a hard flip by the way like that that's that's one of the things that for one is obviously is just funny then people already feel how they feel about Valentine's Day and then girls are always like this is the this is the perfect error for that when they like don't give me love give me a check city girls and all that kind of stuff like this is the perfect error for that so how how did yeah how did it come about man so so I mean I was on that two years ago like literally two years ago before everybody all these rappers were wearing Valentino and all these k-pop stars were wearing Valentino just because personally I'm I'm very into fashion so I've been hip on Valentino a minute ago and that kind of just goes along with being authentic to yourself like I like fashion I'm kind of a fuck boy I've been told so it's like combining combining the two of those together and just and finding inspiration wherever you go like it was it was around Valentine's Day so Valentine's was on my mind and I was just like I don't want to Valentine I just want Valentino and I was like well that that that line right there that's like a punch line that's a tweet that's an Instagram caption that's that's a shirt you know that's that's a slogan basically like Valentino could use that theoretically for a can for a Valentine's Day campaign yeah it's that good it really is and it was just like I don't know bro there's there's a lot of times these moments are random inspiration where the stars align it's just like this is what we're gonna do and it ends up working out really well okay so you you kind of mumbled it to yourself of course it was obvious when you when you figured it out and and then you said I need I need to record this immediately like when you wrote everything because obviously that kind of created the idea of the song did you just then fill in the lyrics special for that or did you think about a relationship how did that go so I felt uh once I had that line I I was just going through YouTube beats and kind of like figuring out because back before I signed and moved to LA pretty much all my songs were off YouTube beats so I just kept finding one until I found one that I was like you know this is hard and then I don't want no Valentine I just want Valentino and I don't know just line by line writing it keeps saying it over myself it probably took like an hour or two to write but it was worth it you know it's just like a lot of people think that being a artist is easy you could just go in freestyle whatever and then you're gonna blow up but this this is this is a work this is a job this is not even a 9 to 5 this is a 12 to 12 25 7 25 8 like like job you know your whole life is a job so so it's just putting the due diligence in to to make sure that your writing is solid your delivery is solid your performance is solid that's real have you have you got crazy with the performances yet have you do you feel like you're in a space where you're good or you got a lot of growth you want to do no I'm very happy with my performances especially for the level that I'm out right now because I've been performing since I was a sophomore in high school you know I was doing that school I was doing free performances I was doing the performances where you had to sell 25 tickets or else your ass was paying 500 to open up like all these all of those experiences combined that's the shit that nobody wants to do everybody wants to be at the big stage at Coachella going crazy everyone wants to be at the top of the line for rolling loud but very few people want to to put in the groundwork that it takes to get there and for me I think why I've been so successful is because I love the process I love the process of getting there and every day is just a blessing to be able to wake up and do what I do I feel you man I like to hear that because one thing that I think about when I think about those shows you mentioned where you even had to sell right I know a lot of artists they there's a lot of negative feedback right a lot of artists don't like that people ask me is it worth it blah blah all the time and everything isn't necessarily worth it as a direct marketing ROI or something like that but you can't look at everything that way especially when you're not at a level that justifies it but that process still it builds character it builds hustle it builds understanding of those small parts that you I mean now like it's obviously that it's obvious that you got to work at you understand the game and you research and then things like that so like that kind of stuff it is it's extremely important as far as that process now I gotta go back to this because you mentioned the fact that you found that beat online the youtube beat now this is a situation that people they fantasize about I want to do I want to get I don't want to get this beat or should I get this beat because this might blow up or I believe in this song you actually got to be it actually blew up what was that process in terms of did you actually buy it or did you just I only got the money I'm gonna record and I'm not gonna even buy it and then what did it look like that like in the background like where you did it wasn't too much trouble and all that kind of stuff when the time when the actual blow up happened honestly it was a very very smooth process I I think what I did was I got a lease for the beat first um just an untagged lease so I could record on it and if I because I didn't plan on holding it for as long as I did it was just something in the back of my head they kept telling me not not yet don't release it yet so I got the lease and I put I recorded on it and honestly it was just kind of hoping that no one would buy it before I did and in my situation it worked out because you know once once I had the label and the management they were like all right we need to buy this beat immediately and hopefully no one had bought it I gave them more money than they were asking for it on youtube just like to be fair you know because everyone knew it was going to be big and you don't want to be the guy that that that paid $200 for a beat right and then the song goes on to make a million dollars because it's like it's just not a it's not fair and you know I believe in fairness everyone there's enough bread for everybody to eat so I got lucky but I would say for for people in a similar situation like first you got to be realistic for yourself a lot of people think songs are going to be hits that aren't going to be hits you know like you got to think what what is it about this song that is going to make it a hit is the melody so so crazy that it's infectious and everybody that listens to it can't help but sing along is it a concept that's never been done before and so crazy that takes it to the next level is is the delivery something that hasn't been heard that's going to catch up people's ears is it is it good for tick-tock and you could there's a dance challenge associated with it if it doesn't have at least one of those things it's probably not going to be a hit and you're probably going to be fine not buying the beat or just doing the least but but you'll know if it's a hit if you're honest with yourself and and yeah gotcha who's whose decision was it to get on tiktok with it um honestly I think there's a woman Rachel from digital marketing and I had been doing some stuff with trailer before I still do stuff with trailers sometimes but they they were like well there's this new app coming out and they're getting like a hundred million new 100 million 100 million new like users a month we want you to go on here we think you'll be good at it and we think your songs could go so they put all the songs on there and I had done a couple videos just like not really understanding what tiktok was or how to grow on that platform but just using my song and they didn't really do anything but people like the song Valentino and I do do some some miracle it it got the right people that the right creators that needed to see it saw it and the song just kept going and going and going and I caught on that it was starting that it was gonna blow up at probably around like 12 000 videos because every time every hour I would refresh it every day every hour I refresh it would be another thousand videos every day another five thousand videos ten thousand videos so once I started going up I was like I'm gonna I'm gonna make my own tiktok account and I'm gonna continue using my own tiktok account and just make videos for my songs for other songs funny videos pranks whatever just so that like people would know oh that's the Valentino guy and we want to follow him because he made that song so now people fuck with me not just my song and now I could promote whatever song I want on my own tiktok I got like 650 000 followers on there now and a couple much but you know a lot of artists don't do that do that some people they'll never want to be on tiktok just because they feel like it doesn't fit their brand or whatever or they're going to be super late to when when everybody's there and it's obvious for them but even now like a lot of artists who are moving now and getting songs blow up on there they're not thinking about yo I need to actually create content I have a hard time getting artists to create content when we're making their songs take off because it's like okay yeah I'm happy with the results that I'm getting over here it's like no you need to do what you said right you go from hey I like this Valentino song to hey here's that Valentino guy all right and oh I like that Valentino guy yeah next thing you know this Valentino guy has another song and now you know you're just 24k golden you know like like they're not willing to take it through that process while it's free and easy and you have something recognizing of that you can be recognized for like when what was your experience as a content creator on that side of things did you feel like it flowed naturally for you or was there a kind of like a few a period of like bumping your head and having to figure it out uh there was definitely it was a learning process you know luckily for me I just turned 19 in November so I'm at the age where where I think it would be easier if I was in high school because it's like organic everyone's using tiktok and now people are using tiktok at my age but it's like it's still it's it's not a platform that we grew up on like we're not being introduced to it at the same top excuse at the same time that we're introduced instagram or twitter so it was a lot of just watching videos just always being on tiktok and just letting my brain like soak it up like all right what is doing well what is on my for you page and then also reaching out with tiktokers like you think tiktokers don't want to meet meet up and collab with a rapper like take most tiktokers are just regular people that that that blew up or that wanted to do social media and for me like being a rapper is like the coolest thing that that you could do basketball players want to be rappers man fucking brah the patch wants to be a rapper like everything your rapper like yeah so so I leveraged that too to to collab with other people that were more familiar with the platform and that could that could give me knowledge about how to best use the platform too so so steady learning researching yourself and then leveraging other people's knowledge and flipping understanding your position so I think one thing that I think that's going to help you win big brah is multiple times out of this conversation I've heard you have self-awareness about your position at the moment and then that allows you to flip it to the next point right yeah right because a lot of people don't understand being a rapper is a thing being a having a certain stigma well listen I use stigma that's with that negatively but like having a certain perspective that people view what you do us even if the numbers aren't there there's still this idea like there's some I don't know let's just say like jet magazine or essence magazine right it's not a popping magazine or something to this day but a lot of black people used to you know that was popping in the day and if they asked me to do something even if their name isn't popping just because I have that perspective growing up and understand what that might look like to my family or something like that right it's like just for all other types of reasons understanding the position of where you are in the brand like you can do a lot of things that might not seem to be justifiable because of how people see you versus the the regular landscapes I think that's real I don't know to me that stands out man that you were able to kind of figure that out as far as like hey I'm a rapper these people are still normal even if they got more followers than me or whatever right that that makes me somebody to them so um like all right you mentioned Triller which one do you like better kick-talker Triller um why I honestly I like how Triller is so easy to use in the sense that all you have to do is load up a song make three videos are you dancing press shuffle and you're good and I think that that makes it a lot easier for people to use you know they're recently monetizing views and videos on Triller so there's more incentive for artists to come on there and get their songs blown up because they'll make money off of it but I feel like the community on there isn't the same as the community on TikTok like with TikTok it's like it feels more of like a social network than than Triller does in that sense but I think they're both great platforms and I do use them both it's just different different pros and cons to each one got you got you and when you say it feels more like a social network you're just talking about the level of engagement and and how it spreads yeah and how there's there's a TikTok community you know there's a community of TikTokers that go link up and collab there's TikTok drama there's TikTok true true on Triller got you got you I mean to me that's one of the reasons why I'm bullish on TikTok in the long game right I mean it's not that the other apps don't have their home benefits but at the end of the day it just comes down to where our people and where's the most interaction going from a business standpoint like because that's where the money's gonna go but um all right dropped out of college bro I got it like that was a wow that's video that blew me man um that that was it was weird that that video feels like it could have been throughout multiple eras to me like when I was probably I might have been in middle school or elementary school I don't know if you know that song Stacey's Mom Stacey yeah yeah that reminds me of that video except in a completely different fashion but just obviously dealing with the mom and how that came what was it like recording that video and that experience and then what was the feedback that you got like what was it the feedback that you felt when you first dropped it I mean just when uh so Nick Jondore Nicholas Jondore he directed that one he wrote the treatment for that and when I read that treatment I was like oh my god this is like this is like viral material right here like every every every kid in school dreams of that one hot teacher you know that they had right and then everybody probably also got a story about one of their friends that had a super hot mom and it's combining the two of those together it's a teacher and the mom and and it's like the way that they shot it was like very like grady bunch like knock them in the middle kind of feeling and and again it just goes back to that self-awareness like I wouldn't want to do anything that I didn't personally like or think was funny and like I'm a funny person like that's that's part of what my brand is you know so so I knew that it was perfect it was super fun shooting everybody was very nice very very chill very like it was just a good time it was fun shooting it and I think that really translated across the video too like when people watch it they laugh they have fun and uh that is like to to date that's my that's my like most viral video in terms of how fast it grew it grew and the numbers that it has I think it's at like 6.5 million right now and it's been a little over a month whereas that's half of the views that Valentino has in like a sliver of the time so I think that's going to go on to to really go up especially once you know we do a genius uh interview for it and all that right right hey I look I'm not surprised man when I am surprised I was wondering if you had actually like did that concept through and through because it's so on brand for you right that that was a magic parent right there how that came together that seemed like I was like oh yeah this is like he probably just I don't know was fucking around and came up with this but but it's cool like I think like like it kind of goes uh another important thing is having people around you a good team that understands what you're going for and who you are you know like with Nick John Dora he did the games on your phone video too which is completely different but it's in that it's on it's on brand you know it's it feels right for the song it feels right for me and having people around you that are better than you at what you do or at what you're trying to do you know I'm not a screenwriter I'm not a director I'm not a videographer but Nick is and he's better at it that doesn't mean that we're not going to incorporate my ideas I'm not going to have feedback but it's just understanding what your weaknesses are too and bringing the people around to compensate for those got you yeah I got you see back to back to the self awareness once again you mentioned the the dropout video in a month blew up to where it is it's still doing numbers that actually made me think after you dropped Valentino or actually yeah how long since you dropped Valentino did it take to get on to tiktok so I think uh after six months after dropping five to six months after dropping uh the song we put it on tiktok and then a month or two after that in and august is when it started blowing up all right so it took only about a month to start well all right when you say started blowing up is that like that 12,000 video range yeah around there yeah so it took a month to get the ball rolling and now it's at 860 something thousand videos so it was just like what was really interesting though about Valentino compared to a lot of other songs is the um the crossover rate from tiktok to other streaming platforms because you can look at a song like lottery uh k-camp that's the renegade renegade uh I know it will whatever like shit right yeah right so that that song has over 10 million videos created to it on tiktok if you want to Spotify it only has 12 million plays because people are are using that song not because they like the song so much but they like to beat to dance to for their videos so it's important to know like what how's your song going to be used on tiktok you know like it every every every sound has a different purpose and not every sound is blowing up because people like the song necessarily yeah man that's key because what I find from tiktok campaigns you're just doing them tiktok you'll have those different ratios the beauty is is going to expose period the song even if they like it just for the beat it's still going to find that ratio and you'll get you know you can get a lot of legitimate views but if it's very much so just for the song and everybody's hearing it and they're thinking about the song first then you'll see those wow ratios and numbers obviously Lil Nas X had more stuff start to happen later but you know obviously he's at the billions with that video and there's only 1.1 million have I think videos created to it on tiktok which is less than a kcamp video yeah so like that ratio definitely but that's any marketing period right like I can be with one artist and I'll run an ad for him and I might spend $500 and the things start moving like crazy and then another artist I might spend $2,000 and they're like yo what's going on and it's like yeah people just don't like it you know what I mean and that's the and that's the difference sometimes right sometimes it's the audience but sometimes it's just like this is not the song you might need to go back and then go get another one and try another one so yeah that's that's a huge observation that I don't want artists to get to the point where they feel like I could just put any song on tiktok and it's not a genre thing though it's not a genre thing it's a very specific it's a song to song judgment that's what I find yeah yes like I remember yesterday I was with some friends and there was this new dance whatever song starting to grow up and it was basically like an EDM jazz song like like I had never heard anything like it before but people were doing this little dance to it it was the the videos were starting to go up it was becoming the trend and I think it'll probably blow up within the next three or four weeks or so and it's just like Valentino is not an EDM jazz song and Old Town Road is not Valentino you know all the song which is not falling which is not love songs by Cash Page it's like all these songs are very different you know it's or it's not Roxanne you know it's just it's just finding that it's like it's like a like you could turn the dials whichever way you want and different combination of turning the dials are going to give you that same result of having your song blow up I understand and I know that sucks to hear for some people because the thing again and again about music industry really is life in general is the fact that people get trained in school to think that it's A, B, C, D and I can copy your paper and I'm gonna get an A too it's like no I'm music you can copy somebody else's paper and fail that's just the way to set up and then you can have completely different answers and then win too just like you said those different combinations so that's that's cool to see you understand that do you think there's anything you have in the chamber that you might run back to tiktok at some point I mean at this point we're putting every song on tiktok right now and me me me having leveraged my own account to to where it is right now gives me the ability to try try things out without having to spend money on influencers right let's say you somebody has 500,000 followers you're probably going to be paying them at least $100 per video to do something to your song right and if you drop a project with eight songs on it that's $800 and let's say multiply by however many influencers you're trying so for me it's like I can try songs over and over again with different trends different challenges different types of videos and see what happens so I think drop that a college the song is blowing up right now on tiktok it's got like 8500 videos 8600 videos and it's like 100 new videos every single day steady steady and then my song City of Angels is starting to blow up too on tiktok it's like maybe 1300 videos right now a little more slow growth but people like that song a lot so I expect that will have its moment when the time is right so yeah I like that man that well yet again another benefit of actually creating a profile and figuring out what that looks like for you even if you're not you got personality and all that stuff at some point though like the mysterious artist who actually takes the time to figure it out we'll figure out a way to how to be mysterious and popular on tiktok it's all gonna happen yeah yeah just a matter of time who um who are you been inspired by by the way as far as music goes um a little bit of everything bro like I have such a such an eclectic taste and I think that really shows in my music too like if you listen to the drop that a college EP every single song on there is different I got like rock songs I got R&B I got pop I got banger like just like like they dropped out of college was like distorted bass just straight rapping shit so right now what I'm focusing on is finding my sound more and when I think of artists that like in that are in the same direction of where I want to go I'm thinking the Post Malone's I'm thinking the Drake's like kind of crossing and towing the line between hip hop and pop in the same way that that Drake toes a line between hip hop and R&B but I like to incorporate other influences too from different styles of music especially rock music got you I can see you playing off a little bit of uh Drake in that brand stuff too since you're talking about you a fuckboy yeah I mean it's kind of funny though like well I remember uh Justin up as as Drake for Halloween like in eighth grade I had like a fake beard I glued on some bushy ass eyebrows and that was before I even knew that I wanted to be an artist but I definitely just look up to him in the way that he was able to he's like a black and Jewish guy I'm black and Jewish too that that used to do acting I used to do acting too like commercials and she has a kid so it's like I see myself I definitely look up to him a lot so what city are you from by the way I'm from San Francisco a city that has kind of been because the Bay Area has pop and music sound but like there's never been an artist from San Francisco actually the city that has done what I've done like it's kind of crazy to think about and at 19 years old I'm the biggest artist that ever come from my city the big that sounds like a big statement man it is it's true no other rapper from San Francisco has done what I've done all right so now this makes me wonder are there like some area specific nuances that I don't know about not being from San Francisco because like if you think about Atlanta where I'm from you know it's oh no but that's really Decatur and that's really Clay like all that kind of stuff so when I hear about artists like E40 and Too Short and what's his name what's the I don't even want to wait what's he do he's regular what is it what's the white guy's name G easy G easy I was gonna say something else yeah that's what I was gonna say that yeah okay yeah yeah yeah so those artists are they not from San Francisco no they're they're from the Bay Area I think G easy from Berkeley or Oakland E40 from Vallejo Too Short I think he's from like Oakland or somewhere else in the Bay Area too but that that because of because of gentrification and show like that you know people have been pushed out from San Francisco like my family we've been living there for for like 15 my parents have been living in the same house for the past 14 years 15 years so we got able to be locked in on rent control and stuff like that but a lot of the the culture has been pushed out of San Francisco just for techies and shit because reasons out of our control so there wasn't really a big music scene in San Francisco proper like the city of San Francisco but Oakland Richmond Vallejo Antioch Pinot all that stuff like like that's that's really the Bay Area sound but out of San Francisco there hasn't really been anybody except me me and Larry June we're like the the biggest two right now Larry June what kind of artist is he he like he's more rapping I'm more melodic okay got you got you all right interesting to just put me on to some education man yeah but yeah well I I'd never thought about that whenever I thought Bay Area I was always thinking San Francisco not realizing the differentiation between the two and and one thing about one thing about the Bay Area is that it has a very distinct sound like you could tell if an artist is from the Bay Area by the way that they rap and and one thing that I was really conscientious about excuse me conscientious about was I didn't want to sound like everybody else because you're not going to get different results by doing the same thing so I was just like I'm gonna try my completely own thing out and it ended up working just because people I think were excited to hear something different that they haven't heard before but make sense make sense oh you definitely got something different and you definitely I mean music stuff is popping and I see I definitely say something else popping off with you on on tiktok what's your favorite platform as a as a whole by the way just as bum bum as an artist just as a regular person when you're just on a platform to just look at content yourself probably like tiktok or twitter tiktok or twitter yeah I feel like instagram has kind of become more like a resume a business card like rather than like I'm just trying to look at funny memes or funny videos yep man it's so interesting you said that because that's so I tell people all the time tic not tiktok instagram is the new website yeah right like that's all it is so it's not dying like in the same way when social media happened you have social media but people still had their websites for a while and then facebook did its thing and that died out like these other platforms I feel like are gonna be the ones tiktok youtube is always has it has its unique space right twitter but people are gonna be over there to engage but you know run ads like facebook instagram is your website your resume and I can run ads to it but I'm not going to expect anything to build organically off of my instagram anymore it's just that simple it's just like it's just like the home base now like everybody comes to the instagrams you want to if you want to stay in touch or stay in the loop about this certain person or the certain thing and if you really like them then that's when you go follow them on twitter that's when you go follow them on tiktok subscribe to their youtube watch them stream on twitch or whatever it is yeah yeah and the funny thing about it is I felt like when tiktok came it actually used a lot of people's mind and anxiety because people started to get into this like this trap on instagram what do I post what do I do I gotta have this perception I'm building all this out where on a platform like tiktok it's like do whatever you know what I mean you don't have to worry about being judged as much twitter is kind of the same outside of worrying about the media digging up old quotes and stuff like that yeah you don't have anything like that to worry about do you no I didn't really start using twitter until uh like like seriously start using twitter until like like posting twitter on twitter until like the past year so all of my all of my like it's all like controlled controlled ignorance not too wild very wise very wise all right cool man well hey I appreciate you linking up again man it's been dope to talk to you and really interested to continue to follow your eyes because the what when was the first time what was that that wasn't even what maybe it was a year ago or even like eight months ago the first time my DMD was uh 2018 I think like summer 2018 yeah so the the the black and white you know what I mean the day and night of what could happen in the year and obviously hearing the hustle of 24k like I'm so glad you you see on two things if I have to take anything away from it like hustle self-awareness like those two things and how you win it like I think you're a model for a lot of artists in terms of not just that front base and stuff but the actual person how they move so I'm really curious to watch where you go branding wise if you flip into other industries you got personality so I feel like you are yeah but yeah I'm interested to watch the plans man do you want to you have anything that you want to leave people with bro yeah make sure everybody out here follow me on tiktok at 24k golden follow me on instagram at 24k golden and make sure to go listen to the new dropped out college dropped out of college EP because you're gonna find at least one song on there that'll be your favorite song your new favorite hey once again everybody this is the very first link up linked up we're gonna get the actual title you know specific but this is the very first one 24k actually got me on this one we were on something else not going to tell you what the other name was but once again y'all have a great day like this video if you like it if you like it you might as well share and you not subscribed you know what to do hit that subscribe button


Today on The Journey, we'll be talking about direct response marketing and how it attracts more customers. So I've heard of direct marketing, but how is direct response marketing different than that? Good question. So direct response marketing is different because direct marketing, you're just talking directly to the client like an email. But direct response marketing, you're doing something to elicit a specific response from your potential client. So what are some examples of this? For instance, you have a video that you put on Instagram and you're telling people about what you're offering, a service, a product, and you tell them, I want you to call now. They have to take a specific response in order to take part of it. So when handled the correct way, it can be very beneficial and bring about some interesting results. For one, it takes out all the intermediaries. It's just between you and your customer. You don't have to have the middleman. Second, it's pretty cost effective. You don't have to have mass market saturation with traditional marketing methods. And then the third, it's also measurable and trackable. You can see your ROI. And then also it adheres to some good old school marketing methods and it doesn't go with some of these trends that are flighty. Gotcha. So an example be I do an Instagram post specifically for, let's say a new backpack that I just came out with and then I have a link and they go and they buy that. Exactly. So when crafting your direct response marketing, there's a couple of elements that you want to have. For instance, the proposal rather than thinking, hey, by my product, you actually want to go into some details, especially like trial period, what the person is going to sign up for answering a lot of the questions that a person may have. So part of this proposal is you want to create some urgency. You want to give them all the information and kind of lead them down the funnel. Why is this important? What are the details? And at the very end, maybe this is a trial period. I see this a lot with webinars or different online courses. You know, it's a limited time offer within the next three days. This is introductory price and the price goes up, right? So you're always kind of leading them down that funnel and giving that sense of, wow, this is important. This is what I need. And I can't wait. I need to buy this now. You want that in that response. You wanted to make that person feel like they can't miss out. So let's say that I'm an online business coach. I've just opened up my online one-on-one coaching and I'm going to let my subscribers know about this. So one way that I could do this is through a webinar and I'll let everyone know that, hey, one time only I'm doing this webinar. I'm going to give you five tips on how to crush it in social media and this is the only day that I'm going to do it. So I'm creating that urgency so people will come. They'll sign up. Hey, I'm not telling these tips anywhere else. This is the only place you're going to find them. I'm never going to do a blog post about them. I'm never, you know, I'm just really creating this like, you got to be their moment. And for them to register, that will be the response that you want. And in the webinar at the end, I'm going to let them know, hey, I've opened up my online coaching. I only have 10 spots. And you guys here watching this webinar are the first people. You're going to get the first chance. So if you want to, here's my special introductory price. And after that, once I hit those 10 spots, done. So if my goal was to get 10 new clients, this would be a great way to create that funnel, create that sense of urgency and hopefully be an effective way to get those new clients. So today we talked about direct response marketing and how I can bring you more customers. We would love to hear from you in the comments below. What other topics would you like us to talk about? And of course, be sure to like, subscribe to our channel and hit that notification bell so you're always notified of our next new video. And until next time, this is the journey.


There have been several games this year where a Loyola has fallen in love with the three early in the game to their own Detriments switch up there. Marcus Townshead Bowman in transition Neither team is getting it there Chapman the turnaround jumper along the baseline had to handle a bad pass Custer with the behind the back dribble Okay, this is a shooter lost it. He was stripped by Mitchell who's on the run and the big man With two hands Everybody spread out five guys outside the three-point shot Shot clock at six Hamilton trying to hurry from the free throw line over Agu Nani tough shot freshman on freshman Having a tough time identifying here Custer was able to poke it out now Towns on the drive he swatted away by Stefan Mitchell the game number four Tabs also a freshman That's a three Christian junior the freshman sharpshooter a spark off the bench for Boston College Agu Nani Great job Hounds with the take inside the block from Popovich three against two Half-second difference between the shot clock and game clock Hamilton is just gonna take it to the rim He gets the basket and the foul Coming out party for him Plays for sure Also, you have to be prepared for the press when you're ahead this much in the game and that guy There's a press breaker by himself. He didn't seem impressed by it Not much offense in the game here Like Ron out to Towns. He's been cold But maybe now it was a 16-point Boston College lead and Loyola has cut it to seven BC will have to inbound it goes right back to Bowman That's a to Hamilton from the corner. He's creating his name Bowman Joe so was on Chapman right now. He's a good defender Bowman fades back Smokes the jumper. That's a 10-point lead for the Eagles