All right, so it may be the last day, but we still have first-time speakers and we have a first-time speaker here In case you weren't aware First-time speakers must hydrates before they before they speak So he has elected for hydration and we is going to give it. We're going to give it to him Here's to you guys I think you're ready Yeah, if you if you sat through that that that autonomous talk yesterday, you should probably get a shot Hey, thanks for coming today. We're going to be talking about the internet and internet security Over the next 45 minutes, we're going to go over a little bit of fluff who I am why I'm here we're going to go over some remedial networking because There may be some network pros out here, I'm sure there's at least one You know person who's around the birth of the internet has a staff made from in you know transatlantic cable and will be Casting spells on me if I say anything wrong, but first but there's a pretty wide range of people here We've got reporters. We have security experts. We have people who specialize in networking to people who never deal with networking at all so we're going to go over just some of the basic concepts and then we're going to transition to the basics of how the internet works itself and For those of us who don't have a home Cisco lab and you know aren't set up to build it build a home network and Try some of the attacks. We're going to go over today. We're going to show it We're going to go over some tools you can use to build your own internet at home And then we're going to go over some tools we can use to break it We're going to go over some of the ways the internet is already broken We're going to detail we're going to do some demos of some of the attacks that are out in the wild right now and then we're going to Explore some ways in that we can damage the internet a little bit more now. Who am I? I'm Lane Broadbent I'm a security engineer with the Vivint Inc. Vivint is a home security home automation company Also has this cloud storage and is a wireless internet service provider Some of you may know us Some of you may have had our sales guys come to your door The demos and tools that I'll be using today you can get a github I'll be posting them after the after the talk as soon as I can get reliable internet access I Was actually sure when that'll be but I'll try and get them up today definitely now What's bond this here's a here's an announcement from us sir Mentioning well talking about how nation states are targeting internet infrastructure devices and internet routers now Mostly when we talk about routers being attacked people are what we're talking about is home routers with poorly configured credentials and and Backdoors from unknown from firmwares that haven't been updated in a long time But there's also the routers that make up the core infrastructure of the internet that have to be considered and Those are what we're going to talk about today now a Little bit of remedial internet and remedial networking here. We have an IP address and Insider block notation An IP address is a 32-bit number. I'm sorry this slide actually didn't come out too great but internet any IP addresses are generally broken up into Four blocks of eight called octets and this is an octet notation and the after the slash is your subnet mask, so The first 24 bits of our network of our IP address signify our network address Or as we'll be calling it from here on our prefix If for addresses that match that have the same network address in you as you on say your homeland As a simplification You generally you can access them directly for those that have a different network address You generally have to go through a device a device called a router Routers can are connected to multiple networks and they'll they'll take that packet They'll look at where it's trying to go and they'll compare it to the information they have about where they can get to Now routers will have different routes to different networks and they'll there may be multiple routes That'll match so they'll go through the most specific route or the route with the longest match so Quick example that first one ten dot slash eight doesn't match at all. So that's not route that's going to be taken that leaves us with To two routes that do work However, one has a slash 23 and the others a slash 24 24 bits is longer than 23 bits. So We're going to the router is going to choose that route and send the data that direction Now I keep saying router. I know a lot of you probably cut your teeth on these Raise your hand if you have one of these laying in your closet somewhere. That's right Now these are generally called routers, but what they are really is it's a converged device They're a wireless access point their DHCP server firewall that provide NAT DNS server They're neat. They have an ethernet switch web server configuration And they also act as a router which is connecting those two networks and forwarding traffic between them What we're going to be talking about today generally look more like this This is a dedicated router and what it does is it functions as a router And also if you need a nap it's an excellent space heater So quickly what is the internet? Yeah Are one of our elected officials in earlier net neutrality debate informed us the internet is a series of tubes So let's talk about some of those tubes Here we have a you know a greenie hacker. He hasn't earned his of his black hoodie yet He's trying to get to the DEF CON website here He has this tube and that's kind of what it feels like usually you type in an address you hit enter and all of a sudden The website picks shows up on your screen. What's really happening is closer to this Where to get from sign it from one side to the other You have to go through a series of Intermediate networks and these are called autonomous systems and these autonomous systems are what actually make up the internet There is no one provider that gets you from point a to point B You have these different systems such as your ISP which then connects to another autonomous system that it For is the traffic to and so on until you get to your destination So what is that autonomous system? It's a group of network. It's a network a group of networks I'm in control of a single entity using example here of Vivint wireless some company I work for Identify by autonomous system number It connects to enroute traffic between what one or more other autonomous systems. So this autonomous system connects to a hurricane electric and level three communications and They announce an internal IP address space and address space to learn through their peers that they can they can forward traffic to This autonomous system advertises these particular two particular routes as well as others Here's a graph I pulled off hurricane electrics website, which has some great BGP tools So if you want to learn about BGP Here you can see we're connected level three and hurricane electric He's it and then those two autonomous systems connect to a large number of other autonomous systems Now level three is what's called a tier one network tier one networks Are are the big dogs or if you think about the internet this they would be the core of the internet From a tier one network you can get to any play any address That's publicly available on the internet. They generally have thousands of miles of cables spanning countries if not continents and They don't pay anybody for access to their networks. It's either they They have a no-cost agreement with other tier one networks or they have other networks that pay them Hurricane electric has to be a tier two network because they pay somebody else, but then they have a large number of people who also Buy their services and access to their network Now all these autonomous systems communicate over the border gateway protocol so they can exchange routing information So autonomous systems they will agree to interconnect there's a business agreement you pay for access to a network or or you are paid or you have one those as a transit-free agreement And then your autonomous systems Your BGP routers will then announce their routes to their neighbors So you connect to another autonomous system and it says I can reach this address space and this is how I can reach it That's the AS path and the prefix and then when the packet comes in that needs to get to a destination the Most specific prefix most specific route the light route with the longest match is chosen And the data is forwarded through that next autonomous system After that the shortest path and those other attributes and local admins can set policies to prefer certain networks as well Now I said BGP and they'll announce the space. So here we have three different autonomous systems each one with its own Prefix that it's going to be announcing. So we're going to look at autonomous system three and Follow its announcement over to autonomous system one Autonomous system three says hey, I can route to 13 slash eight It tells that to autonomous system to autonomous system two then records that says hey I can get to this prefix through autonomous system three It then announces that to its neighbor autonomous system one and autonomous system one now knows that you can get to 13 slash 8 Through autonomous system two and autonomous system three, which is the final Which is where the address space is serviced and then That continues and eventually every autonomous system on the internet knows how to get to 13 slash 8 Really big quick primer on BGP announcements It's something to know about border gateway the border gateway protocol and autonomous systems There's no central authority that actively monitors it manages and forces who can announce a prefix When you you're assigned a prefix through IANA and its regional registrars The same you as we will receive an address block now. There's no There is no definite link between an autonomous system and an address block You can also have an autonomous system without an address block and You can have you can have a block of that addresses without having an autonomous system There's there's nothing that says that one person can can announce a certain space and then When you come with an agreement to peer your autonomous systems, it's Really the who manages that is between is between those two autonomous systems They'll agree. Hey, you can pass this information to me and I will then pass that round and rounding information on to the neighbors There's there's no one central authority that says this person can announce this route And there's some pretty good reasons for that as well Autonomous system can connect and disconnect to its neighbors at will you can always take down your link And when you do that your route will disappear and and and your draft traffic will take a different route You can take your IP addresses. You can move into a different autonomous system If you if you have a provider that's announcing your address space for you And you want to upgrade or you're say you're under an attack and you want to move to a different provider Then you do that you say Announce this space for me and they start announcing the space They don't have to check with anyone to make sure they can do that first and you can also announce from multiple locations any cast Traffic will I use any cast what it does is it you'll have multiple geographic locations So it'll announce a certain space and and your traffic goes to the closest one Google's DNS and other DNS servers to do that as for example and something to note that the Since the routing decision is made at every autonomous system along the way. There's no definite path That your traffic is going to take you can take one path to the destination and then the return traffic can always take a different route So let's talk about some tools that we can use to build our own internet see how this all works and then destroy it first up Is mini net mini net is a network emulator that you can use to Stand up a realistic network on your your host it doesn't require the You don't have to set aside a host like you would with a hypervisor Well depending on your hypervisor It's a simple tool that you can use to create a network namespace and stand up hosts routers firewalls If you want to learn about software to find networking it uses open-flow switches and you can control that you can set up controllers Important for this discussion is that it is cheaper than buying going out and buying a bunch of Cisco equipment and setting up a home lab And it's a lot more flexible and you don't need the Cisco knowledge this do it and it's incredibly fast So I say it's fast. So let's do a little demo see how fast we can set this up Let's create this network here a nine hosts for four switches Let's get over here primed. All right So really quick. We're gonna set it Okay, not so quick All right, I guess we'll do it in Windows Media Player then okay, so we ran the command it set up the network Created all of our hosts created links between the switches. We don't skin ahead of me now We just did a ping test between all of them. They can all communicate with each other We can we can run commands on the host. So we're gonna tell one host to ping another host that works and Just to show we can still run commands. Let's get the IP address. All right So now we've set up a network. We communicated with the hosts and that was all 21 seconds to set up that network And how do I get back into presentation on this? No, that wasn't it Somebody shout out. How do I get this?  See that's why it's a good group to have a technical problem with All right So another tool we're going to use is NFQ and live net filter queue NFQ is an IP tables target that basically Instead of accepting dropping or rejecting a packet it allows you to throw it into a queue That queue is then accessible from user space. You can have a program in user space examine that packet make the routing decision And pass it back down to the kernel. You can also modify that packet before it's accepted Really quick to set it up. Here's here's the command IP tables that we're going to add NFQ I we're going to send traffic to destination port 23 to NFQ and from there It's accessible from user space. Now. What do we use to deal with those packets? We're gonna use escapee those of you aren't familiar escapee is a Python module that allows for packet manipulation decoding We can craft raw packets And most and we can interact with the with net filter queues now We can craft packets and what we have here is a quick one-liner that to generate a DNS request without Going through the different layers we set the destination. We're saying UDP We're going to make it a DNS packet and put a put a name in it and then we send it and that's it one line Okay, so let's get back to the internet Now we how can we exploit the internet? There's too many things we're going to talk about today IP spoofing and prefix hijacking IP spoofing is changing is changing the the source address on your packets as you're sending them out Why you might want to do this you want to hide your identity impersonate somebody else to incriminate them or just annoy them Or you could be doing for the general reasons like load balancing or testing again Here's another one-liner for escapee where we're going to see we're going to forge the IP address of a packet and send it out So why does this work? The routers aren't examined necessarily examining the source of a packet where their main concern is the destination and They're not always configured to care where the packet came from so it's hard to say that a certain autonomous system shouldn't carry the packet because the routes aren't set and those IP addresses are portable and And it's also it's easier to trust somebody than to distrust them You have a relationship with with somebody you trust and to be doing what they're supposed to and not making your life more difficult So you say okay, they must be sending me legitimate traffic There's also the issue that some people don't care or they haven't configured their systems correctly an example This is bogon routes where an autonomous system will advertise private address spaces like 10 10 dots 1 9 2 1 6 8 Various address spaces that shouldn't be used on the the public Internet If you want to see who's doing that Hurricane Electric has a page. They'll give you a report of what different people are sending out bogon routes. It's actually kind of interesting Okay So using IP spoofing. What can we do? we We're gonna talk about state exhaustion attacks specifically sin floods and we're gonna do that really quickly because It's kind of solved, but we're gonna we're gonna come back to that later and Volumetric attacks specifically reflection attacks really quick sin floods older attack TCP To former connection you have to go through a three-way handshake where you send a sin packet that To a server a server responds to the SINAC and then you acknowledge their SINAC You synchronize and you know have a session with them to Initially when doing that you're the server would set aside a certain amount of memory and to attract that session waiting for the SINAC packet because of course the person is going to respond with Correctly to it and everyone's gonna be happy they're gonna communicate you send a lot of sin packets It consumes a lot of resources the servers and no longer longer able to take new connections Mostly solved with things like sin cookies, but we're gonna show how we can do something similar to that again And now volumetric attacks specifically reflection attacks. Oh We're gonna have a demo where we go through one of the more dangerous ones that are on the internet today really quick though IP spoofing Let's say we want to get talk to DNS server host A says host B. What's the address for? I love puppies said with a source address of host A It responds back looking at the host at the source address and says host A. I love puppies is that whatever address? Alright, so let's say we want to spoof Host B. Give me everything you know about a lot of puppies. Sincerely host C We're gonna throw host C's address on as a source pack source address It then responds to host C with all the information host C says, huh? I didn't ask for that. So now we can scale that up We can have our botnet All of our zombies that are then sending spoofed requests to a large number of DNS servers or other UDP services These are gonna act as reflectors And they're all gonna have a source address of whoever we want to target So our botnet's gonna send a lot of traffic to our reflectors The reflectors gonna send an even larger amount of traffic back to our target our target's not gonna be able to handle it and that's the premise behind a Reflect distributor reflection to denial of service attack. So the one way of classifying these is a bandwidth amplification factor US cert uses that Basically what it is is you're looking at the size of the payload in the responses and comparing that to the the payload in the request Now certain UDP services a different reflection a bandwidth amplification factors bit torrent 3.8 So you sent it for every bite you send it's gonna respond with 3.8 times as much to Whoever your target is SNMP v2 6.3 DNS 28 to 54 NTP 550 about and then the latest hotness is memcache so what memcache is is is a In-memory data store that basically allows you to get to put information in quickly and then quickly retrieve it It's often used with web servers to manage web session state 10,000 foot overview there so and this said so let's set up this attack in our It's set up a network and mini net use the tools that we have and perform it so We're gonna simplify it a little bit We know the internet is just a series of routers that make routing decisions so we can replace that with one router We'll call that the internet and then we have our tacker our reflector in our target So let's see how this works Okay, so really quick set up our lab we created our three hosts a router and set up links between them In the background we've got a packet capture running Really quick so it shows in the package capture. We're just gonna send a ping from our attacker to our reflector okay, and Another one the adiata. All right, so let's start up our memcache service on our reflector We're gonna tell we want to listen on all ports and and all address interfaces and that we want to use We want it to use UDP right and let's quickly send our one spoof packet Now there's a little bit of magic sauce behind this to get a higher amplification factor But we don't change any of the settings in it and then we've sent our one packet using our targets Our targets IP address So let's see what happened. We like I said we had a packet capture running in the background All right, so here is the spoof packet that we sent Highlighted there It's got about 15 bytes worth of payload one single packet and also for comparison You've got our pings so we can see what that we did actually spoof the address Here's the response so that's the bottom one there is packet 761 part of it that's part of the response and These are full UDP packets So what do we have we sent one packet with 15 bytes worth of payload and our response with 753 packets with 1,051,705 by payload bytes So that gives us a bandwidth amplification factor of about 70,000 And for those of you who've been spending too much time in the wireless village here. It isn't decibels. All right, so According to us or mem cash D 10,000 to 50,000 band amplification factor. We just showed it can be 70,000 It seems to be some area of debate with how effective this is but as you can see no matter what it's a very effective attack Earlier this year this attack was used to generate 1.7 terabit per second of traffic Towards the service When you're dealing with that you're not actually taking down the services running on the hosts You're not necessarily taking down the hosts either. What you're doing is you're taking down all the infrastructure around it When you start getting 1.7 terabits worth of traffic your upstream providers are going to start shutting off your ports because it's taking them down as well I provide some sample code, but the code I provide is simplified doesn't have the magic sauce It just uses the stats call so it doesn't produce 70k bandwidth amplification factor So really quick way some defenses know your attack surface know what services you're running if you're running UDP services Why are you running them and if you don't need them shut them off? Blunt Form a good relationship with the upstream provider in case you're this the you're the reflector or the target make sure that you can Work with them to to filter your traffic and monitor your infrastructure. You know if you're participating So let's go on to be in BGP prefix hijacks So what happens in these is as I showed earlier autonomous systems learn how to route traffic by announcing their routes to their neighbors What happens in a prefix hijack is that a malicious autonomous system? Advertises a more specific route than the route that's already out there if there's a route for slash 23 and announces a slash 24 All the all the traffic for addresses within that slash 24 will go to them because they have the most specific route The neighbors then pass on this route to their neighbors and eventually Everyone has that route and all the traffic is route is heading towards that route I early example this in 1997 the as 7,007 incident a Network disaggregated all their routes into slash 24s and Through their their own autonomous system number on it and then advertise that on on the internet So now that it's 2018 we can do a high-tech computer simulation of what happened the internet traffic on that day So here that little pink dot is the as 7,007. I think it was in Virginia They announced their routes and all the internet traffic started to go into them They also apparently turned into the Death Star So what happened was base large portions the internet ended up black hole for several hours also their upstream providers shut them off and ended up having to reset Reset large portions of their network I Most routes aren't slash 24s and the equipment in that time wasn't made to handle the entire internet as slash 24s So the routers would crash come back up relearn all the bad routes from their neighbors crash and the cycle to repeat It really couldn't have been better if it had been planned So there's certain height there's certain defenses you can have here's just a list of them probably the most prominent is the As a routing registry where you register your routes say this autonomous system is going to be advertised through this And this IP free-fix is gonna be advertised to this autonomous system And there's other ways to ensure that communication is secure authorized and everyone's on the same page So let's see how that how well that's worked Here we have in April 2018 the eat my ether wallet calm attack. I don't know if any of you I'm sure nobody here uses cryptocurrency, right? Yeah During the hijack it wasn't actually a hijack against the servers themselves. It was a hijack against the DNS infrastructure that my ether wallet was using specifically AWS and militia Poison DNS requests were returned pointing to a Russian provider Now there were defenses in place not all the not all networks carried the bad routes But enough did really all what you all you need is one person who's not configured correctly to pass along the information And all the defenses break down do these trust relationships So really quick how are things are supposed to work on the left side there? We have a client trying to get to the to my ether wallet calm On the right Amazon who route 53 was providing the DNS services Announces its route to the internet. So starts to propagate its route The client asks its DNS server how to get to my ether wallet calm It doesn't know has a cat has a miss so it hits Amazon It says hey, how do I get to this response is returned it caches passes it to the client Client then connects to my ether wallet calm and logs in okay That's how it's supposed to work what really happened Was that another autonomous system likely on behalf of one of its customers began advertising a slash 24? for Amazon's DNS server space where Amazon was using slash 23s so Advertising more specific routes when those propagated up I'll request to Amazon's DNS servers and went to this malicious DNS server The response is returned to a credential for a credential harvester Clients connect to the credential harvester for some reason the attackers decided not to get about SSL certificate so they were agreed people were greeted with an SSL warning and Some of them decided not to heed the warning and Ended up losing money So let's let's give it a try Now I credit where credits do this is a modification of a lab From Yeah, oh But quick note defcon 16. There's an awesome attack against the actual IP address for the defcon web servers I believe trying to remember exactly what it was Go check it out. It's good. I'm not going to demo it here because That's their thing. It was awesome So here we're going to do a prefix hijack base We're going to modify a demo that's already out there and on the mini-net website if you can get to it But we've changed it to be a prefix hijack instead of a path hijack So here's our three networks, but we looked at before as one two and three advertising 11 8 12 8 13 8 we have a web server on AS 3 Well am I doing on time okay good not bad not great Okay, so really quick Here's our here's our environment top left we're going to start up We're going to start up our network Bottom left we're going to we're going to be controlling whether or not we are autonomous systems are running and On the right we're going to be trying to hit our web server to see what happens So really quick. Let's pull the routing table Okay, so looking at looking at that routing table. Sorry. This is broken up Here's the routing table that we have from autonomous system one It can see that through autonomous system two and autonomous system three it can get to 13 slash eight All right All right, so I'm back in our attack We're we're now hitting a website on that web server over here on the bottom left we're going to start up on our Autonomous system four which is going to advertise a slash nine compared to a slash eight for this the 13 slash eight web space our IP space and On the right in a second. You'll see it switching over to the tackling web server Okay So pulling our routing table again We can see that we now have another route. You probably can't see very well, so let's pull it up We started autonomous system four and it Announced a more specific route for slash 13 which caused all of our traffic to divert to our malicious web server now It's not the most exciting attack and the reason for that is that everything worked the way it's supposed to Somebody advertised a better way to get to to an IP prefix so everyone took it So without defenses, this is the correct operation So defenses would be registering your register your routes and an IRR established that relationship the upstream providers So that they know what you're advertising and they're able to defend against people trying to take over your space filter prefixes that you receive from others I To avoid having a website taken over use DNS sec HTTPS with HSTS and make sure you're monitoring your infrastructure All right, so let's move on to a little bit more theoretical So at the beginning we showed that alert. It says Nation-states are trying to take over routers basically, so why should nation-states get to have all the fun? Let's let's let's do some of these attacks ourselves. Let's try it Let's we don't know exactly what people are gonna be what what attacks are gonna be done but we can make some guesses and one of the ways we can make some guesses is because We already know What things are gonna be done because we can see them now in certain pieces of infrastructure really quick We know that if you have control of a router as with any, you know You just think of it as your network monitoring equipment you can monitor traffic and redirect traffic which we saw you can modify Traffic as it's passing through you can block traffic and you can flip the switch and just take down a chunk of infrastructure Now we don't really need to imagine much because we already see this in action There's malicious network equipment widely deployed now malicious is is relative to who's performing the operation So you intrusion detection system tonight intrusion prevention systems other firewalls Internet service providers doing service prioritization or denying access to certain services and then you have nation-level monitoring and filtering enforcement such as You know a country putting up a large firewall to restrict internet access So we can already see what is what can be done with this because it's already being done corporations are already doing it And my cell phone providers blocking my VPN access for some reason, you know, we already see this in action But what else can we do so we know that when you have We know that you can you can prevent IP spoofing by registering a route and having making sure that people aren't passing bad routes But we can also defeat that if we have control of one of the routers So if you have a router on say an internet service providers network It has the ability to talk for addresses on that network and no one's going to question it because It's supposed to be the one carrying that traffic. So we can we're doing that we can defeat IP prefix filtering We can spoof any host we want on that network. It doesn't need to exist doesn't particularly otherwise But but even in this case we can we can now have a bi-directional communication We can send traffic for a host and then receive the response and we can reduce our botnets from thousands of devices To just a handful of routers And I say we can have bi-directional communication Before you can't really spoof TCP traffic because you have to have that you have that handshake and you have to be able to Go through the synchronization But since we're receiving the responses we can now would have Open up TCP sessions other bi-directional communication that we wouldn't have been able to do otherwise And this is kind of concerning because it breaks our attribution models a Lot of you might get daily weekly or whatever threat feeds that with Part of what they have is a list of IP addresses associated with certain activities You throw them into your intrusion detection systems You block them on your firewalls and and that's good but now we can We can change our IP address at will because we can act as any of these other devices We can no longer really trust the IP addresses that we have in our threat feeds Now this is on a symmetric route saying it gets received it receives a response now What can we do if if if we want to still want to spoof traffic from a different network and we're not receiving the response? Like I said before you can really can't spoof a TCP connection because you have to there's a you have to synchronize With the server and this can be using a randomized sequence number However, if we control one of the routers along the path to that spoofed host We can and we can still send our traffic from a different portion of the internet and have a full bi-directional Be able to maintain bi-directional communication and go through our TCP handshake. So we're gonna Do a quick little attack here? We're going to spoof a sin packet we're going to capture the response on the second router the router on the right there and then We're gonna have that router send the information to our to our attacking our attacker computer specifically the sequence number that it needs to Sequence number that needs to Complete the handshake and then we're going to complete the handshake So it was simplified a little bit for the demo We're replacing the routers with switches and running our our interceptor on the spoofed host, but same effect so No, that's So really quick. We're gonna see what our IP address is and we're going to Request a page from a web server that's gonna respond with our IP address that matches up 10 0 10 90 and Then we're gonna make it so we can no longer communicate directly with that host Just for the purposes of demonstration. So now we can no longer communicate with the web server Just so you guys believe me and we're going to spoof TCP connection so here we're gonna send a sin packet That's gonna be intercepted and sent back to us and then we're gonna complete the handshake and make and request traffic Oh, son of God That went too fast. All right All right, so here we're making our HTTP request and Here's the response that we receive back. We're able to complete our TCP handshake Using spoofed traffic and then make a request and receive that that response as it's being sent to the address that we're spoofing now To do this. We need a communication channel Have I I've been I had it out of full screen mode for a while haven't I? Somebody tell me these things All right So we need a control channel to be able to do this we need to communicate between our interceptor and the The host that's doing the spoofing and how can we do this? One way is network steganography steganography is hiding data and its presence from an observer There's numerous ways of doing this with network traffic, but some of them are pretty slow You'll flip a flag and in the in a header which gives you about one bit per packet not the quickest thing ever But if we want to trade a degree of stealth for increased data rate What we can do is we can inject traffic into other packets as their traffic as they're passing through a node and then strip that data out Before it's passed on to its final destination and to do this HTTPS and other encrypted traffic using that as our cover medium is ideal Really quick. Here's a TCP packet the payload can be assuming payload usually can be up to 14 160 bytes But a lot of traffic is either has a full payload or has no payload as an act packet there's a bind there's a bimodal distribution on the internet and Basically, you'll have a lot of traffic that's being received and a lot of act packets for that received traffic So these act packets have a lot of free space that we can use There's nothing that says that you can't send data with an act packet. In fact, it's normal. I Got a clap for that. Okay. Oh I Made a meme All right, so Very long how we do it on time Okay, I can't see anyone anyway. So all right. So what I'm proposing is we do we use access space It's not being consumed and we inject our own traffic into it now We need to make sure that it can't be read as well Yeah, we want to make sure that it can't be read so we're going to encrypt everything At the end we're going to put a counter that We're an encrypted counter that says how much data we're going to put in it So we can quickly then pull that data out check for the flags at the beginning the end of the data that we're sending and Know if it's if it's actually our traffic or if it's a mistake So three steps before we get to our data that allows us to quickly toss out traffic that looks like our data But it's not If that makes sense. Sorry. I'm rushing to make sure I get this closed Why are we going to use HTTPS? Most the internet is HTTPS It's expensive to monitor HTTPS traffic and there's little value in recording it You can gather metadata about it, but there's If you record HTTPS traffic at large scale what you have is a bunch of data that you can't read That's going to fill up your drives and when properly implemented encrypted data Pretty much statistically indistinguishable from random data So we can take our we can take this already encrypted data throw our encrypted data on the end And there shouldn't be any way of determining that we've added data This was the demo that I was going to do As you might be able to guess it ended up being kind of busy So we're going to simplify it and we're going to do a demo just between two hosts that have been had their traffic blocked basically Right on this let's say autonomous system one autonomous system for just to show that it works So we're going to bypass some blocking through our covert channel Don't let me forget to go back in full-screen mode On you guys All right So here we're just testing that we can reach the web server on 10 0 10 90 and Then we're going to set up a listener through our using our tunnel to on local host 87 65 Now we've just blocked access to it on port 80 so we can no longer directly access that web server on port 80 so now And that still doesn't work. So now we're going to start our covert channel What what we're going to do is we're going to start on the Other end we've already started our listener and then we're going to run this quickly run the script starts the listener on this end That creates the channel and then gives us a bunch of cover traffic And I'm just using watch and coral command to generate a bunch of HTTPS traffic Okay, so we've started it and let's see so now we have a Channel that we can use that here's our HTTPS requests We got to the server that we couldn't access before what we did is we hit a local listener on our box sent that over the tunnel using HTTPS traffic as our cover medium and Then had the other side complete the connection to the web server and return that traffic back to us So means of creating a covert channel there and what does that look like? At the packet level and going back into full screen Yes, so here's the original packet and then here's here's the packet with our data added on to it and At the end I left the counter unencrypted so we can look at that So what you have is traffic that looks like the traffic that we already have there Generally indistinguishable from what should be there now if you're going to monitor If you're going to monitor sessions and keep track of seek of acknowledgments You might be able to detect this is going on But if this isn't on a connection that you would expect to be malicious or you want to monitor Chances are you're not going to be doing full session monitoring and this is going to slide by along with the other terabytes of HTTPS traffic Okay, thanks for listening appreciate you coming


Thank you. I'm so honored to be here with you today. I want to thank Sister Patricia Patton, the Board of Trustees, and the IHM Sisters for inviting me and salute the administration and faculty for your hard work in preparing the graduates. And most of all, I want to congratulate you, the Class of 2015, on your outstanding achievement. Feels good to be a mighty Mac alum, right? I think we should also thank all of those unofficial members of your Macalata Bucket Brigade, all those moms and dads and grandmas and grandpas and loved ones and siblings. Let's give them a hand. Now, I've heard it said that a commencement speaker is a little like the dead body at an Irish wake. They need you there to have the party, but nobody expects you to say much. So with that in mind, I'm going to keep it brief. You know, it wasn't that long ago, actually, that I was listening to a commencement speech at my own college graduation. Well, I should say it doesn't feel that long ago. In truth, it was nearly two decades. You could maybe guess that from the four children that my husband, John, and I brought here with us. But I still remember, though, how I felt that day. I remember I felt so joyful, so thankful, and so alive. And I wanted that feeling to last. I think that's a very human desire, isn't it? Our yearning to hold on to the joy of these mountaintop moments. And I imagine that's probably how the apostles felt on the occasion the church celebrated this past week, the ascension of the Lord. Here they are on the Mount of Olives. Jesus has just told them to preach the gospel to the ends of the earth. And then, in a cloud, he's gone. And they're left behind, filled with the joy of the Holy Spirit. Yes, but probably also a little unsure how they were going to sustain that joy when they headed back down the mountain. In a sense, I think that's the same question that's facing you today. As you head out into the world armed with your new degrees and all that you've learned here at Immacolata, how will you maintain the joy and the gratitude that you feel right now? And how, in a culture filled with workaholics, shackled to their cell phones, driven to distraction by our 24-7 media culture and caught in a frantic quest for more status and more stuff, how will you avoid the same trap? Now, these may seem like odd questions coming from someone who drafted her first resume in sixth grade or spent her career in media and has been known to check her iPhone just a few dozen times a day. I've made nearly every stop on the print and broadcast media circuit, so I know the good that the media can do. And I'm grateful for the chances I've had to watch history unfold at the Vatican or the Oval Office. I'm also grateful, though, lately to be devoting more time to my books and speeches. It's good, good to let an idea bounce around in your head a while before broadcasting it to the world. Of course, our media culture doesn't encourage that sort of thing, like most journalists I've known the daily, even hourly pressure to, as we say, feed the beast. And whether that beast is empty newsprint or empty hours of airtime, the effect is the same. We tend to focus on the urgent at the expense of the important. That focus then gets passed on to you, so you find yourself swimming in information, much of which you don't need to know. Some of which you'd probably be better off not knowing, Kardashians, anyone. And all of which, necessarily, leaves you less time to ponder the things you really do need to be thinking about. It's the same with social media. Twitter, Facebook, Instagram, Snapchat, they can all be used for great good or great distraction. And we may find ourselves wondering, are my gadgets and habits helping me to lead a more joyful, attentive life, or are they getting in the way? These aren't new questions. Every generation has asked them. Socrates worried that writing would weaken the power of the human memory. Some said the same about Gutenberg's printing press in the 15th century. And in the 1930s, Aldous Huxley envisioned his brave new world of tech addicts who were so numbed by entertainment that they couldn't tolerate silence or defend their own rights. Technology changes. Human nature doesn't. We've always been tempted to use our work and our toys to avoid facing what St. John Paul II called our original solitude. We're the only creatures capable of an interior journey. And yet, we hesitate to take it. That's true of some of the greatest thinkers and leaders in history, even the saints. Take St. Teresa of Avila. Before she was a doctor of the church or a legendary religious reformer, this 16th century Spanish mystic was a case study in distraction. Teresa spent her teen years fixated on her own good looks, gossip, romance novels, and a forbidden fling. She eventually joined the convent more out of fear for her soul than zeal, but her trivial pursuits followed her in. So she slogged through her religious routine, focused more on earning praise than developing an interior life. At age 39, Teresa walked into the chapel and came face to face with a statue of the suffering Christ. Something about his image, bloodied and bound as he awaited crucifixion, moved her. Teresa was pierced with regret for the decades that she had wasted chasing distractions instead of following her true calling to a life of prayer and service. From that day on, Teresa's desire for silence and solitude intensified. Distraction still plagued her, but once her interior journey began in earnest, she quickly grew into the leader and author we still celebrate, 500 years after her birth. So what took her so long? Teresa didn't have a smartphone after all. God didn't have to compete with Instagram to get her attention. Yet like many of us, Teresa felt too bombarded by the world's noise to seek the deeper purpose she craved. As she said once, I knew perfectly well that I had a soul, but I did not understand what that soul merited or who dwelt within it until I closed my eyes to the vanities of this world to see it. Now, we tend to hear that and think, well, how nice for her, but I have some work to do. There are people who need my help, a market that needs my skills, student loans that need my repayment. This is the season for action. When I'm older, I'll worry about contemplation. Here's the thing though, action and contemplation reinforce each other and it's very hard to succeed at one if you neglect the other. Teresa's life is proof. Her most lucid writings on prayer and her loftiest experiences of it came as she was battling critics inside and outside the church, braving treacherous conditions to establish new convents all across Spain and caring for hundreds of other women while suffering near constant sickness and exhaustion herself. Teresa couldn't have done what she did without tapping into supernatural strength beyond her own. It was the same for Blessed Mother Teresa of Calcutta. She used to tell her sisters, until you can hear Jesus in the silence of your own heart, you will not be able to hear him saying, I thirst in the heart of the poor. To make time for silence isn't to shirk our duty, but to remember why and for whom we're doing it in the first place. Even just a few minutes a day can help us recover our sense of wonder and wonder leads to joy. That's a lesson I learned from my father. Dad was diagnosed with Alzheimer's disease my senior year in college. In the years that followed he went from forgetting to pay bills to forgetting to dress himself or to read the masterworks of theology and history that he once loved. Yet Dad never forgot his joy or his sense of wonder. Even in his dementia he saw the world as shot through with hidden grace. And when I set aside my distractions long enough to learn he helped me do the same. Seeing Dad stroke my mother's cheek as she would button his shirt or class me in a bear hug every time I entered the room or carefully re-read the same worn pages of scripture that he'd been praying over all his life. I began to understand what he'd been doing all those mornings when as a little girl I would rise before dawn and find him praying alone in his office. Dad had been filling his cup. He was filling it with that living water that Jesus promised the woman at the well. The water Jesus says that will become in him a spring of water welling up to eternal life. That promise came true for my father. I remember the day I knew for sure. I was driving down the interstate on my way to run an errand. The thought popped in my head I should see Dad. I resisted. Dad was in end stage Alzheimer's by then. He couldn't walk or eat or speak. Visits were agonizing and I'd already made several that week. Still something told me to go again. So I veered right just in time to catch the exit for Dad's nursing home.  We hugged and I pulled up a chair.  He raised his arms to the sky then lowered them back to me. He repeated the gesture several times as if trying to tell me something.  As we sat there face to face I told him everything I wanted him to know before he died. I told him that I loved him that he'd been a wonderful father that it was okay for him to go home to heaven and I asked him when he got there to ask God to send me a baby. My husband and I had been battling infertility for four years at that point and the doctor said we'd probably never conceive. Dad's eyes brightened as I spoke of heaven. He began gesturing again toward the sky and when I mentioned a baby he smiled and opened his arms wider than ever. I leaned into them and we embraced again. We spent three hours together that day. The longest dad had been awake in months. When I finally turned to go I took one last look at him over my shoulder. Dad was still gazing longingly at me from his wheelchair so I walked back and knelt down beside him. His blue eyes brimmed with tears as I gave him one last kiss. Dad smiled, flung his arms wide open and managed one parting word for me. Joy, he said, just joy. A few days later dad slipped into a coma. He was dead within a week and seven months after that I conceived twins. I shuddered to think what I would have missed that day if I'd had a smartphone with me. I hope I still would have made that fateful turn off the highway but I still would have given dad my undivided attention for what turned out to be our last conversation. The truth is though, I don't know. And that's the thing about the present moment. There's just no way to know until it's over what you might miss. You always think you'll know when the big moments arrive that they'll be as clearly demarcated as a commencement ceremony and you'll spot them and you'll say, oh, this is important. I'd better pay attention. But most of life's mountaintop moments they sneak up on you. And if you're not watching for them, they slip away, never to return. Resolve today that you're not going to let that happen to you. Resolve that whatever else you do after this day, you won't pass your years in a distracted fog that you'll cultivate the silence and the space you need each day to recognize the miracles all around you. If you do that, if you make that resolution and keep it, I believe you'll achieve levels of excellence you never dreamed possible. And your success will be that much sweeter because you'll know that you achieved it without missing what matters most. So congratulations again, class of 2015. I can't wait to see all you'll do and even more all you'll become in the years ahead. Thank you.


Around Dodge City and in the territory on West, there's just one way to handle the killers of the spoilers, and that's with a U.S. Marshal and the smell of guns smoke. William Conrad, the story of the violence that moved West for young America, and the story of a man who moved with it. I'm that man, Matt Dillon, United States Marshal. The first man they look for and the last they want to meet. It's a chance, a job that makes a man watchful and a little lonely. Maybe you're about to hit the jackpot. Maybe you're on the point of inheriting half a million or finding oil. Chances are, though, that none of these lovely things will happen. Chances are, if you want a bonanza in the future, you'll have to save it up. Now there are a number of ways to do that. Some people stuff their mattresses, bash their cash behind a loose brick in the fireplace, or slip it under a floorboard. None of these methods make sense because money so stored isn't making a cent for you. Not only that, it may get lost or stolen. Wouldn't you rather your savings made more money for you? Wouldn't you rather have them theft-proof, lost-proof in every way? Of course you would. And you can, the United States Savings Bond way. Through the payroll savings plan where you work, or the bond-a-month plan where you bank, $3 will get you for un-maturity every time. Nice thing of all, it's literally impossible to lose your money. If baby shreds your bonds into confetti and drops them out the window, you can recover your cash-plus interest in the United States Savings Bond. I just don't understand why you couldn't sleep, Mr. Jones. Unless you had the colic or something. I feel fine, Chaucer. I just got a few things to take care of at the bank, that's all. But the bank's open all day. Yeah, it's the early bird that catches the worm, I say. Well, my mommy used to tell us that one about being healthy, wealthy, and wise. She used to route us out of bed every morning at the daylight. I don't count of. That's a good saying, too. I don't know what to become of my brother, but I sure ain't living in a very big house. Yeah, maybe you ought to come in here more often. I've got no business with the bank, Mr. Jones. Good morning, Mr. Hogg. Good morning, Chaucer. Good morning, Marshal Diller. Morning, Mr. Hogg. I'll be over there in a minute, as I straighten this stuff out here. Good morning, Marshal. Oh, good morning, Mr. Papp. Are you taking money out, Marshal, or putting it in? Neither, Mr. Papp. This is a government business. Cassia, I haven't a minute to lose. Certainly, sir. What can I do for you? I want a loan of money. I'll meet you in a minute. You say? Yeah. Papp is pretty excited, ain't he? Oh. Do what we can, sir. First of all, how much do you want? $20,000. $20,000? Uh, Mr. Papp. Right away. Excuse me, Marshal. Gentlemen, this is our president. You'll have to talk with him. I heard you say $20,000, gentlemen. Now, that's a lot of money. What do you have for collateral? My collateral is right here in his envelope. You may look at it, but don't reveal it to these other gentlemen. These are playing cards. Don't name them. I'm afraid I don't understand. Look, I've been in the poker game at the Lady Gay all night. And right now, there's about $40,000 in that pot. There's some good hands out, and I've put every cent I have into it already.  Well, I certainly wish you luck, sir, but I never heard. You've seen my hand in that envelope. You can lend me the money on that. Surely you don't expect the bank to enter a gambling game. These gentlemen are also in the game. They came along to see that those cards aren't changed. And the other men are watching the table in the back room at the Lady Gay. It's all fair and square, I assure you. Well, gentlemen... I'll gladly pay you 10% interest, Mr. Papp. You've only got five minutes left, hook. Come along, gentlemen. We'll step into my office. Marshall, I'd like to see you before you go. Yeah, sure. Now, that's about the craziest thing I ever did here. Well, I must have a pretty good hand. No, but you don't think Mr. Papp's going to lend him no $20,000 on it? I doubt it, Justin. There. Let's take care of this stuff, huh? Government business, Mr. Hogg, you know what to do with it. Certainly, Marshall. Well, let's see here. Marshall! Marshall! I want you to come with me. What? These gentlemen, there's a poker game. I've got the money here. I think you'd better come along just to be safe. You mean you gave him his $20,000? Yes, of course. Come over here, Marshall, I'll tell you. That man hook there has four aces and a ten in his hand. It's a sure thing. Why, the bank stands to make $2,000 on this loan, and it won't take but a few minutes. You run the bank, Mr. Papp, but are you sure that you ought to take a gamble with other people's money this way? But I can't lose it. There's no chance in the million. I want you to protect this money until I get it back here. All right, I'll see nobody takes it as a point of a gun if you think that'll help. Yeah, come along then. Hook's only got a few minutes to get back in the game. Mr. Shin Wez has my money. I'm calling. You must have a pretty good hand hook, all the trouble you've been to. You'll see it. What do you got? All blue, five little hearts. They're no good. Four aces. Well, look at my hearts. They read two, three, four, five, and six. Straight flush. Your aces lose, Hook. Four aces. How could he have a straight flush? I got it dealt right out of the deck, Hook. Right out of the deck. Nice part, huh? Adding up? He won. Mr. Pap, I don't know what to say. $20,000 just like that. $20,000 and it's not even my money. Mr. Pap, don't you worry. I only borrowed that money. You get it back. You have my word as a Confederate gentleman on that. Hook, hook, hook. I've got to have it back. It's not my money. I have to put it back in the bank. I'd be ruined if people find out about this. You only loaned the money. I lost it. I'll send for it today, sir. Why are my agents? They'll have it on the next train that leaves St. Louis. No, Hook. No, I don't think that'll happen. My word is a gentleman, sir. But you must be patient. I shouldn't have done it. I had no right to do it. Chester, go tell Doc. I want to see him, huh? All right, sir. Listen to me, all of you. I don't want a word said about this to anybody. The bank is important to Dodge. And this could ruin it.  All right, then see to it that there'll be trouble for all of you. I could have listened to you. I'm ruined now. Maybe Hook's got money. I don't know. But if not, we'll figure something out. People will give you time. Oh, no. No, they won't. As soon as they hear about this, there won't be any bank. They won't trust it anymore. They have to. The only bank there is. What do my wife think? My children, I can't face it, Marshall. I just can't face it.  You've got to give it time. Sure. Sure, Marshall. I'll go. I'll go. Marshall? I mean, sorry for that man, but he has no reason to worry. I'll send for the money once. Yeah, you do that. I'll send for the money. Now, what are your names, gentlemen? My name's Sheenways, Marshall. I'm sorry for that banker, but it's nothing to do with me. I won this money fair, and I'm keeping it. Certainly, of course you are. Who are you, mister? Gordon. And I agree with Sheenways. Gambling money's fair money. Nobody's arguing about that. Just remember what I said. Don't talk about this. Oh, Matt, there you are. The trust has said you wanted me. What's happened? I didn't hear any shooting. Everything's all right, Doug. Oh, oh. Hey, you look familiar. Don't I know you? I haven't had the pleasure, sir. Oh, maybe not. No, I guess not. It's my mistake. Never mind them, Doug. Come on with me. Doug, I want you to go over to the bank. Mr. Papp is pretty upset. See what you can do for him. Give him a bromide or something. Oh, sure, yes. What's wrong with it, anyway? He just lost $20,000 in a poker game. He what? He wasn't playing. He lent the money on the strength of what looked like a good hand. That man, Hook, came into the bank for it with the other two. Oh, he brought his cards along and raised the loan that way. What? How did you know? Well, I heard of that once, man, down in New Orleans. Years ago. Well, what happened? Well, the same thing. Finally got the money and lost it. That's all. You mean it was fixed between him and the others? Oh, sure. Oh, it was fixed on. How did they find out? Well, the fellow that borrowed the money got drunk and talked. They put him in jail, but the others got away, please.  Are you sure that you never saw him before? Oh, a lot of people look familiar at first glance, Matt. You know how it is. In New Orleans, you didn't know the men who pulled the trick on the bank, did you? Well, now, people said that they'd come down on the riverboat. I was doctor on the Tennessee Bell, then. But I never met them, not to my knowledge, anyway. Do you recall hearing their names? Well, it was a long time ago, Matt. Look, Doc, those three back there may have pulled the same thing just now. Hook looked familiar to you. Now, maybe he remembers you, too. Well, did you say that he'd never met me, Matt? Yeah, but he could be lying. Well, sure, but I can't place him. Probably never saw him before. All right, go see what you can do for poor old Pappy's in a bad shape. Sure, Matt. Speed laws and other regulations as restrictive? Well, that could be more infantile than believing one can prove his superiority by ignoring a stoplight. Unfortunately, too many drivers on the road subscribe to that kind of emotional outlook. The result is tragic. Almost 85% of all traffic accidents in America are caused by careless, childish driving. We hope sincerely that your attitudes are adult. We hope you know our traffic laws and the people who enforce them are there to help save your life. Hello, Matt. Kitty. Uh, you know, Mr. Hook, this is Marshall Villain. We met earlier. Yes, indeed. I could be to come with me, Hook. What for? Just do it, huh? Whatever you say, Marshall. I'll be back, Miss Kitty. Yeah, sure. All right, Mr. Varden, Mr. Shaneways, you're coming with me. What? What? Now, is this an arrest? Now, what would I be arresting you for, Shaneways? Nothing. You got no reason. That's right. All right, come on. Let's go. Mom, these men want their pictures taken. Now, wait a minute, Mark. Can you do it right away, Mom? Yeah, I certainly can, Marshall. And gentlemen, you'll be the very first to stand before my new drop, the ancient temples of Greece. It'll lend you dignity and power. What's the idea, this Marshall? A lumb here is going to take your pictures, that's all. Front and side views both, a lumb. Certainly, Marshall, certainly. And if you gentlemen leave Dodge, any one of you, it will make it a lot easier for the law to find you and bring you back wherever you go. This is outrageous. I'm not going to stand.  But since we've done nothing wrong, we have nothing to fear. Sure, hooks right, Varden. I'll go first. Are you ready, Mr. Lumb? Right this way, sir. Lumb? Oh, yes, sir. Bring the pictures over to the office when they're finished, huh? Yes, sir, Marshall. Good photo for Mr. Lumb. Hell, it's not bad. Lock them up in the safe, would it? Yes, sir. Do you reckon this will keep them in Dodge? No, not if they really get scared and won't. That guilty all right, ain't it, Mr. Lumb? I can't prove a thing, trust you, one way or the other. Oh, hello, Doc. Well, what's the matter? I'm out. Bad news. What is it, Doc? Mrs. Papp sent for me here a while ago. I just came from there. Yeah? Matt, he killed himself. Suicide. What? Papp? An hour ago. Oh, that poor man. Mrs. Papp taking it. Well, not a tear so far, but I suppose you'll break down later. A neighbor woman's there with her. Does she know why he did it? Yes, he told her all about it. And then he went out and shot himself. There's no stopping it now. The story will be all over town in no time. Well, what are you going to do now, Matt? I don't know, Doc. I just don't know. Drink, Kitty. Oh, gosh, I'd like it, Matt, but I said I'd join Herk over at the table. I'd like to talk to him, too. I'll just sit with you for a few minutes. Fine with me. I don't know about him, though. I think he'll object. I just got time for a smoke hook. I didn't think you'd mind. Well, I know you're quite welcome, Marshal.  No, thanks. I want you to know I sent for that money today, Marshal, just as I promised.  Late? Mr. Papp shot himself. He did. You mean Mr. Papp the bank? Yeah. Why, Matt? Maybe Hook will explain it, Kitty. Now, Marshal, you can't hold me responsible in any way at all. I didn't say I could, Herk. You seem kind of nervous about it. Well, naturally I'm upset after all the man did me a great favor. I don't know. Sure, sure. Tell me something, Herk. When were you in New Orleans last? New Orleans? Why do you ask that, Marshal? I'm just curious. I've never been in New Orleans. Does that answer your question? That's good enough. Goodbye, Kitty. I'll drop by later. Sure, Matt. And Hook, it still goes about not leaving town. I like it here, Marshal. Yeah, you should. Del Monaco's Lady Gay ever worked. It's the last place to hit. What is it, Chester? Here. Just you read this. Marshal, we're taking Doc along. If you follow us, we'll kill him. Where'd you get this, Chester? He was under the door when I opened up this morning. I run up to Doc's right away and sure enough, he's gone. Come on. Now, you go check the depot on the stage line. I'll go to the delivery center. I'll meet you back in the office. What can I do for you? I want to know if you rented out any horses last night. Oh, sure. Phew. What? Did you rent four to anybody? Four in a bunch? Oh, yeah, sure did. They'd be back today, so they'd say it. Those sons. Oh, they're strangers to me. They made me in pants so they'd be in horns. What time was this, Marshal? Oh, it was late. Yeah, way after midnight was it. Why, something wrong? Tell me, Marshal, what did they look like? Well, one was an old fella, you know, gray hair. He didn't give his name, though. I don't think I got much of a look at the other fella. Do you have any idea which trail they took out of town? No, don't. But one of them said something about St. Louis. That's not much help, is it? That might be. Thanks, Marshal. Oh, one thing, Marshal, if you're riding after them, those horses they got are just cold feet. I didn't figure they could handle anything better than that. This is Dennis James with a longtime favorite. I don't know, over the years, is Kellogg's All Brand. Since 1919, America's favorite natural laxative cereal. Kellogg's All Brand is the safe, gentle way to overcome irregularity caused by lack of bulk in your diet. It tastes good, too, and it never gets mushy and milked. There's only one All Brand, Kellogg's All Brand. So relieve constipation the way millions do with Kellogg's All Brand. A, double L, hyphen, B-R-A-N. Yes, you're so right to stay regular with Kellogg's All Brand. Try it, okay? Nothing to do but take a chance and ride east. Luck was with us, though, and within an hour we cut their trail. Four horses leave a pretty fair track and we follow it, right and hard. By dusk, we could tell by the sign that we'd nearly caught up with them. And soon after dark, we spotted their fire. These were gentlemen, maybe, but they were mighty poor hands on the prairie. We left our horses and went ahead on foot. Are you going to shoot it out with us, John? No, we can't chance it, just because they'd kill dark. Hold up a minute. Yeah, that's their horses just ahead. Are you sure it's taken them a good piece from camp? Yeah. They're mighty green at this game. I think we can steal their horses without any trouble at all. Just leave my foot, huh? Yeah.  I'm going to crawl into that tall grass just to the left of the fire there and hide until morning. Mr. Dillon, why can't I go with you?  We won't be able to do everything alone. Chester, what do you do, as I tell you? Yes, sir. Now you just wait until you hear gunfire and then you ride in fast. And bring all the horses. All right. Good luck. I was half-burrowed into the ground and covered by blue-stem grass no more than 30 feet from their camp. I could hear their talk all right, but I couldn't see them unless they were on their feet. Shanways had already gone out after the horses, and pretty soon he was back. It's their ropes. That's why they relaxed one of them. Who are we going to do now? You and Shanways will go after them, that's what. I'll stay here and guard Doc. But hurry up, we've got to get moving. Come on, Martin. We'll never find him. You can have his country, Doc. I don't know why you ever left that solid berth you had on a Tennessee bell. Well, I didn't have to leave it. That's more than you can say about New Orleans.  Or whatever your name is. Doc, if you hadn't talked so much in the first place, you wouldn't be where you are now.  I might have seen you somewhere, but I sure couldn't connect you with that New Orleans business. Anyway, you've given yourself away now. How? Don't you know there wasn't a thing the law could do until you ran? Well, you'll be caught sure now. Then why don't you untie my hands and I can't eat this way? You manage. I let Dark and Hook wrangle on until I figured the other two minutes worked about a half a mile from camp, and then I waited until Hook had his back to me. I stood up, slowly moved, quietly forward. Doc saw me, almost spoiled a game, but he caught himself in time and then started another argument with Hook.  All right, don't move, Hook. Marshall. Here, I'll take your gun. Come on. Easy now, Marshall. Don't shoot. Now get Doc's hands untied and be quick about it. Yes. Grab that off, I should take it easy. Ah, that feels bad. Hook, if I weren't a professional man, I'd punch you right in the eye. Never mind, Doc. Here, put his gun on your belt. Yes, I'm just mad enough I'd like to have an excuse to use. Sir, what are you... Well, you'll have them back here in no time. Or have they got the money, Doc? Well, get that saddle bag over there. All right. You got the yellow one? Get it, will you? All right, get on that horse, Doc. You too, Hook. Quick now. There they come. See them, Mr. Dylan? Yeah, I see them. They're shooting at us. They can't hit us from there. Come on, let's ride. We've got you, Doc. We've got Hook and we've got the money.  None of us knows how to live on this prairie. Maybe they'll learn. It's a good way. Put your murder in those men. They'll be all right for a few days, Hook. We'll all meet in prison. All right, ease up. We've left them. What are you going to do about them?  That's all. I want to cap to kill them to take them. In a few days, they'll be so hungry and scared we can walk right up to them. Nobody will get hurt that way. Neither them nor us. Mr. Dylan? Yeah, what is it, Chester? Mr. Dylan, later in a couple of days, let me come back and bring them in. It's just me this time. Ah, Chester, I... Please. Okay, Chester, you can do it. Alone. Right a little faster there. We ain't got all day. Got a light, buddy? It'll cost you only 70 million dollars. Americans have some 180,000 lights at the wrong time and place each year. Each one flares into a torch, crossing the country miles of magnificent forests. That means millions of board feet of valuable timber burned. Wildlife, fish, game birds, cruelly destroyed. Soil erosion started. Watershed crippled. Crippling in turn, communities and industries that depend on them for pure water, power and life. Homes are leveled, lives are lost. A waste? The word is hardly adequate. And to think nine out of ten of these fires are caused by human carelessness.  Crush out cigarettes. Break matches in two after using them. Ground campfires, stir the ashes, then douse them again for good luck. It'll be your good luck as an American. If we can cut down the forest wire toll this year. Gun smoke. Produced and directed in Hollywood by Norman McDonald, stars William Conrad as Matt Dillon, U.S. Marshal. Hollywood specially written for gun smoke by John McMuffin. Featured in the cast were Harry Bartell, Ralph Moody, Dexter Patrick, Vic Tarran and Jack Moyle. Harley there is Dexter Howard McNeer. His boss in Georgia Ellis is getting. This is George Walsh inviting you to join us again next week when CBS Radio presents another story on gun smoke.


Everybody forced here ripping it's 20 21 upper deck skybox battle universe champions hobby one box number one random pack style So there's 15 spots 15 packs I got everybody's name and numbers 1 through 15 and separate randomizers are gonna randomize them both the same amount of times to see Who's getting which pack as we get started what I'm gonna do is I'm gonna open the box and just take the three stacks and set I'm out like that and we'll go Left side top bottom middle top bottom right top also go. Yeah, you'll start with a one and you'll end with 15 on the bottom right essentially That's exactly how I'm just gonna pull them out just as we're laying there And go left side down middle side down right side down All right, let's go ahead into random Good luck everybody We'll go three times three times names first one two and three Keith see down to Jesse see and three times on the pack numbers one through 15 now one two and three Four down to eight Move all this over there you go. There's your pack numbers guys Keith see with four one fourteen Utah to Leo three Nam queue nine Keith see six Ruben with seven Leo ten Keith also has five thirteen fifteen Jung he K-12 Keith see eleven Jesse see a let me get those posted and we're gonna get right into it Again, those random results are posted to the site. I'll get your link right now, and then we're getting we're opening it. We're doing it Good luck everybody How about a big PMG right away for a big auto have I haven't pulled I don't think I pulled an auto yet I've only ripped a couple boxes though All right, all righty Here we go Just like that pack one here we go street baller Tim Grover Matt Savoy you've got a Shane right metalized rookie An auto first pack is Tatiana Weston Webb Very nice Tatiana Weston Webb auto non numbered First pack congrats on that pack one is Keith congrats Keith Tony Finaw and Justin Fields How about that did not take long at all as the first all I pulled out of this All right Jason Isbell Chloe kid Chloe Kim. There's a fresh foundation Jonathan Kaminga metalized Carlos Alo Sen Nice and Shray Lance blast furnace Hope he's ready for next year, man Is a shang du or down and a LeBron pack three Stan dude look at the the the chops and mustache are impeccable on Stan Smith here. Look at that Crazy. Oh, there he is John Taffer Dude, I saw a video that guy like pouring beer Nah, dude. Nah. Hey, he didn't do it right. Oh, what's that? We got Naomi Osaka Fresh fresh foundation and looks like a nice Michael Jordan skybox premium Congrats on the Jordan pack three. Good box so far. I an SQ Ryan Whitney and Olivia Taylor Dudley Remember what for yeah for Sheen right Jalen green metalized Jalen waddle Fresh foundation trail ants and a intimidation nation Colin more a kawa Nice more a kawa good first few packs here pits and baron Laura Every box has one PMG auto or So one per box you get either an auto PMG rare insert or low-numbered parallel That's what it says on the checklist the retro PMGs are a lot rarer though Melissa Humana parade ace Wagner red Gerard a metalized Adley Rochman Be now Scottie Barnes Benson All right pack what six are we on Yeah Pack six. So yeah, it should always be just stacks of five pack six Kayla shifrin Pat Perez a metalized John Montero Cocoa golf fresh foundation nice a metalized Devante Smith precious metal gems 147 of 150 Congrats pack six Key see there you go. You got an auto and a PMG a metalized rookie PMG It's nice right there. John Montero and Dot Richardson What's up Anthony number seven good box so far we got Sarah winter Colby Stevenson will Monday as Jalen green metalized rookie a metal universe. I'm not this is all middle universe, but blast furnace Trevor Lawrence Toby Miller and Tommy Caldwell number eight Elliot Sloan Derek trucks fresh foundation tray sermon a metalized Carlos Coleman Aras Skybox premium Najee Harris moody and tiger number nine That is the metalized PMG look really good Nice card Rob panel AI Bayer and Laura fresh foundation a intimidation nation Kyle Pitts more Kawa in Jay check and Lexi Thompson Number 10 now to gala Jalen Johnson metalized to gala fresh foundation BJ Boston that was that BJ Boston. Yeah Vontay Smith nice one there Adley and Weston Webb All right last few number 11 There's the great one Kaminga fresh foundation Trevor Lawrence a Tycut it is Naomi Osaka are Reaching for the stars nice Naomi Osaka Keith of Pac-11 Jalen waddle Osaka again and the kid Ken Griffey Jr. Onto 12 pretty solid box Asahara Munoz MJ card one top of the MJ metalized Kyle Pitts Got fresh foundation Najee Harris and Ken Griffey Jr. Blast furnace The kid but he's older there, so I guess not literally the kid anymore Najee Harris and Page, I don't know how to say her last page something 13 right now 13 now 13 Did a green Jordan would be pretty cool a green Jordan PMG retro Kispert Allison Gushi we got Mac Jones metalized a Jalen Johnson skybox premium Nate Robinson and Gabby Butler number 14 The intimidation nation does a good Wilson fresh foundation tail female Lopez Got metalized Moses moody a Nice an arc weld Ken Griffey Jr. Now arc weld Vante Smith Seth Avent I want to say even and last but not least number 15 Let's see is there something else hiding in this box It's hard to keep track of all the other things you get Boston Matthew Wolf a fresh foundation Lexi Thompson get a giddy Macias Trevor Lawrence and Troy Mullins Yep, Troy Mullins, and that'll do it. Thanks again everybody. We've got more of these skybox coming up next


Boop beep boop beep boop beep Hello and welcome to Con Phone! If you know the name of the conference you'd like to attend, press one now. Beep Please say the name of the conference. Kuby Con Uh, Constance, did you mean Cube Con? That's what I said. In a cloud native world. Two chairs. Hey, I'm Constance. Hey, I'm Steven. We're your co-chairs. One conference. Four days. More talks than you can stick in a Kubernetes cluster. It's Kuby Con Cloud Native Con North America virtual. Coming to your couch, makeshift office. November 17th through 28th, 2020. Registrations open. Bring your yellow rulers. Stretchy pants. And snacks. We look forward to connecting with all of you. Stay safe.


Well, I want to thank you all for helping to make it possible for us to meet here today. Times like this, living up above the store, isn't too bad. Ed Rollins has told me that with the leadership of David Murdock, your national chairman, and Mike Curb, and Keith Brown, you raised almost $7 million to support the reelection effort. And I have also been told that every penny came at personal financial sacrifice. The presidency is a trust, it's a compact between the people and their leaders, and yours is what I call a very special trust. And I appreciate all that you've done. Together we earned more than the privilege of meeting here today. We gained an impressive mandate that's already paying dividends for our country. The MX vote was the first test of that mandate. No one can doubt its importance to our security and negotiations in Geneva, or that the other guy would have unilaterally given it away if he'd won last fall. So you can count the peacekeeper as a victory for the presidential trust. Now, there'll be more victories to come as our mandate meets renewed tests, but with your continued support and resistance assistance, not resistance, resistance to some things that are going on here, we'll translate last fall's victory into a leaner budget, lower taxes, and a dynamic economy. Together we'll keep the people's trust. Now I just want to welcome you all here as friends, say once again how grateful we are for your support, and I can't resist. I just, maybe you've heard it and not, but I know some of the people on this platform have, but there's a little story that just so aptly represents some of what takes place up there on the hill and what we're trying to combat. The three fellows that were out in the town got back to the car and found they'd locked themselves out. And one of them said, get a wire coat hanger. We can get in that way. And the other one of them said, no, you can't do that. They'll see us and think we're stealing the car. And the second one said, they said, wait a minute, I got a knife.   And the third one said, well, we better do something pretty quick because it's starting to rain and the top's down. Thank you all. And God bless you all. And we'll try to keep the faith. All right, very, very happy to have him plunge through the crowd there. Have you been? Ah, you've been. All right. It's more exciting this for you than the last one. Oh, yeah? I mean, by now you kind of feel like shoes are the right size in that crowd. And the suit fits and everything. Exactly, exactly. I'll let him plunge through. Sir, step off the stage, please. The Vice President? Yeah, I'd like to see it.


Marcus Freeman, one of the coolest dudes of all time. He's about to be, we are here. Like this is what we're going to do. We have a house where we already built a goddamn team. We're going to get going. Congrats to Marcus Freeman. There we go. Is that the Dick Corbett head football coach? Is that like the great, though?  If imagine if Corbett's last name was Pound. Oh man. And we were able to get back to back days of Dick Pound references. I mean, that would have been a big time thing for us. Dick Pound, by the way, Olympian. Get off of it. Exactly. Anyways, congrats, Marcus Freeman. Yeah. The moment where the strength coach who is usually the closest with the team, because you're with that there's not as many rules for how much time the strength coach can be with the team. The strength coach is with the team at 6.30 in the morning, all off season, all summer. When the coaches are recruiting, the strength coach is the closest coach to the team. So the strength coach has to have a great relationship with the team, I think in most places.


What's up everybody, Jason here for JaspysKaysRace.com. 2022 triple threads, nine box picker team number 12, R&B just sold out. This is for the Rays, the Mets, the Twins, the Marlins and the Brewers.  And again, it's a serial number break. If there's any hits for these five teams, it's gonna be distributed by the serial number. First number on the left side of the serial number dash. I remember there is gonna be some base cards that are not numbered, so that'll go to all one lot, one person at the end. And of course, you guys know how it works there. Dice roller, customer names, numbers, perfect. Roll, five out of three, eight times, good luck. One, two, three, four, five, six, seven, eight. Logan down to Todd, eight times. One, two, three, four, five, six, two, down to three. Logan, two, John Paul, nine, Michael, five, Jeremy Port, zero, any and all redemptions. David, four, John Paul, seven. Jeremy Port, also one, any one-on-ones. Nice randomizer for you. Todd with eight, Allen with six, and then Todd with three. There you go, guys. So coming up next is to break yourself. Good luck, guys.


For everyone here in the audience today who is dissatisfied with the work that they're doing, with their career, with where things are going, as well as everyone watching at home, if you're dissatisfied with what you're currently doing, I'm going to challenge you in the next seven days to get real practical and to carry out these steps. To begin building your body of work. To really get inside the head of someone who you'd love to work with.  I'd encourage you all to begin with someone whose work you are already familiar with. From there, go and meet them in person. From there, follow up, immediately follow up, and then put together your pitch email. Begin as soon as you send, right in your next. And if you keep doing this in a matter of weeks, you will have a position with someone that you would love to begin working for. Now in life, we can hear great ideas, we can hear great action plans. However, it's only from really following through, the results will come. Matthew in his dating work is very fond of the saying, the most dangerous thing about regret is that we don't feel it yet. It's kind of a cheesy line, but I think it's very true. You do not want to come to a conference like this, and not put the techniques of the likes of James and Sasha into practice in your romantic lives. You do not want to go away and not sort out your health.  Likewise, in 10, 20, 30, 40 years, you do not want to wake up with an unsatisfying career. Mentorship is a lifelong process. I myself am really just getting started here. But I hope this talk has been helpful in getting you on the first step of your journey. Thank you. Awesome. Ed Bruce. Great stuff. Who's got questions? Could I also just add, I've put together a guide for everyone who's really serious today, and they want to go and take this on. I've put together a guide, the nine steps to getting the most out of a mentorship. So when you really get started, or if you're already in a position, these are the nine things I wish I'd learned at 17, or I'd known at 17 to really get started. And you can get this at attract our mentor.com. It's just for you guys here today. The first thing I want to say is I really feel like people should believe in themselves a lot more regardless of how old you are. Because just a quick story about me. When I was in college, I decided that I didn't want to work for anyone. So I told my teacher and my role models that I was going to leave. And they all said it's not going to work. And I said, watch me. So I left school, and about three months after, I'm making one of my school teachers. And it's all because I took that chance. I think your talk is great. Thank you. That's awesome. And just to make very clear for everyone here today, I'm not saying that you can't go out and do that. It's clear you can. However, you must still bring mentors into your life in one way, shape or form. If there are people who already have mentors in their parents or in their teachers, use them. This is ready for people who, again, they want to do something different, but they just don't know how to get that first step on the ladder. So with the numbers game aspect of mentoring, obviously you can't just hit up 20 people and hope that one of them wants to be your mentor. Where's the good balance there? So in just the terms of the number of people you go after. If you're looking for a specific mentor, maybe on business, how many people would you contact one at a time, or two or three, or ten? So this approach, if you're going through all of the steps, if you're literally consuming everything that this person has ever put out, that's going to take you at least a week to do. If it's taking more than, let's say, two, three, four weeks, you're probably going after two bigger person.  You have to pick someone who's at the right level. You have to try and get in the shadows of someone who's moving, ambition being a key thing. But if you're doing this, it shouldn't take more than I would imagine two, three, four, five attempts max to really get in with someone. Hey, Ed. Hello, Sash. I actually don't have a question. I just have a statement. I've known this guy for four years, actually since he was 17. And even back then, he was always asking questions and really listening intently. And he was never shy to just get in there and be like, what do you think of this? What do you think of this? And he just had an awesome energy and curiosity. And I just want to say I'm really proud of you.  Oh, thank you. Thank you. That's lovely to hear. We have a question here on discipline. Could you expand a little bit more on discipline and the need for that at a young age? I think it's a very interesting concept. I really buy into the idea that habits, that you have a finite amount of willpower. And if you're looking to build discipline, you have to automate habits. I have this idea that you should try and get healthy before you get rich, as it's much easier to automate your health than it is to automate your business in a form. You can automate habits such as eating the right things, going to the gym. People differ on the number of days it takes, some say 21, some say 28, some say 66. But you have to try and get to a level where you're focusing on just one thing that you're really devoting all of your willpower to. And then from there, moving on, automating it and putting your energy into something else. So you want to get to a stage where it doesn't really feel like discipline. It's just something you do. So with work for me, I've been working, well, working with Matthew, if you're being forced into a position where you're working really damn hard every single day, that just becomes the norm. It's not something that you're necessarily exerting yourself over and above the norm to do. Ed, you and I were talking earlier. I wanted to see if you could follow up with a little bit about finding a mentor, their values versus yours and where you distinct the line between monetarily what they're doing, literally what they're doing and the importance of those. Yeah, this is a really interesting idea. When you're working with someone, at times there will be areas that you disagree on. There'll be points of friction in the way that they do something and the way you would like to do something. Now, it's easy for someone to say that this is the way and for someone to get really bought into this person's idea. But these points of friction are your unique selling point.  So don't in any way buy into, as James was saying earlier in his talk as well, do not buy into just being into everything this person is saying. However, take the parts that work for you and adopt as much as you can. Great speech. I have a question about, I think a lot of people will have that question back home.  What have you had any negative consequences from that? Any negative consequences. I would say that if you're not very wary of building a solid social life in going out on your own, that can come back to bite you. And it did bite me a year or two ago where I found myself. I was in London and I'd really become a bit of a hermit in a lot of ways. College going to college, going to university is an amazing chance to make friends, to meet people and to build connections. I think I could have been a lot smarter in the way that I went approaching things, so I would say that's something to watch out for. Just being very wary of being proactive in building social connections. No way. I'm in no way against college and university. This is a very sensitive subject as for a lot of people it's a necessary stepping stone. You can go, you can have an amazing time, you can learn a lot. However, there are certain people I just don't think that it's necessary for. What I'll add is that if people, again watching at home here, if you choose to go to college, that is putting yourself at the bottom of the food chain. You should still be building your body of work, you should still be writing a blog, keeping a YouTube channel and doing things that will allow you to differentiate yourself from someone. Great stuff. Man, Ed Druse. Awesome. Beautiful speech.


Hi everyone, my name is Jessica and I'm from the United States. I took the 120 online TAPL certification course with the tutoring component to hopefully prepare myself so that I could teach English abroad. The course provided me with a very thorough review of all of the basic grammar points in the English language and that includes some topics that maybe a native speaker wouldn't have thought to go back and visit. So it was a very good review. Let's see. My one issue with it is that it was only an online course so anything you read in a textbook or you could always watch videos of other people teaching you can understand it in theory but it's nothing like actually going to a classroom with full of students, live people and teaching your lessons. So if I were to prepare myself any further now I would want to somehow get an in-classroom teaching experience. Thanks for listening.