As we begin our discussion of coding and data science actually want to begin with something that's not coding. I want to talk about applications or programs that are already created that allow you to manipulate data. And we're going to begin with the most basic of these spreadsheets. We're going to do the rows and columns and cells of Excel. And the reason for this is you need spreadsheets. Now you may be saying to yourself, no, no, no, no, not me, because you know what, I'm fancy. I'm working in my big set of servers, I got fancy things going on. But you know what, you too, fancy people, you need spreadsheets as well. There's a few reasons for this. Most importantly, spreadsheets can be the right tool for data science in a lot of circumstances. There are a few reasons for that. Number one, spreadsheets, they're everywhere. They're ubiquitous. They're installed on a billion machines around the world. And everybody uses them. They probably have more data sets in spreadsheets than anything else. And so it's a very common format. Importantly, it's probably your client's format. A lot of your clients are going to be using spreadsheets for their own data. I've worked with billion dollar companies that keep all of their data in spreadsheets. And so when you're working with them, you need to know how to manipulate that and how to work with it. So regardless of what you're doing, spreadsheets, or specifically CSV comma separated value files, are sort of the lingua franca, the universal interchange format for data transfer to allow you to take it from one program to another. And then truthfully, in a lot of situations, they're really easy to use. And if you want a second opinion on this, let's take a look at this ranking. There's a survey of data mining experts, it's the Katie Nuggets data mining poll. And these are the tools they most use in their own work. And look at this, lowly Excel is fifth on the list. And in fact, what's interesting about it, it's above Hadoop and Spark two of the major big data fancy tools. And so Excel really does have place of pride in a toolkit for a data analyst. Now, since we're going to go into sort of the low tech end of things, let's talk about some of the things that you can do with a spreadsheet. At this point, they're really good for data browsing, you actually get to see all the data in front of you, which isn't true if you're doing something like our Python, they're really good for sorting data, sort by this column, then this column, then this column, they're really good for rearranging columns and cells and moving things around, they're good for finding and replacing and seeing what happens. So you know that it worked right. Some more uses, they're really good for formatting, especially conditional formatting. They're good for transposing data, switching the rows and the columns, they make that really easy. They're good for tracking changes. Now it's true if you're a big fancy data scientist, you're probably using GitHub, but for everybody else in the world, spreadsheets and the tracking changes is a wonderful way to do it. You can make pivot tables that allows you to explore the data in a very hands on way, in a very intuitive way. And they're also really good for arranging the output for consumption. Now, when you're working with spreadsheets, however, there's one thing you need to be aware of, they're really flexible. But that flexibility can be a problem. And that when you're working in data science, you specifically want to be concerned about something called tidy data. That's a term I borrowed from Hadley Wickham, very well known developer in the R world. Tidy data is for transferring data and making it work well. There's a few rules here that undo some of the flexibility inherent in spreadsheets. Number one, what you want to do is have a column be equivalent to the same thing as a variable, columns, variables, they are the same thing. And then rows are equal, exactly the same thing as cases. And then you have one sheet per file, and then you have one level of measurement, say individual, then organization, then state per file. Again, this is undoing some of the flexibility that's inherent in spreadsheets, but it makes it really easy to move the data from one program to another. Let me show you how all this works. You can try this in Excel. If you've downloaded the files for this course, we simply want to open up this spreadsheet. Let me go to Excel and show you how it works. So when you open up the spreadsheet, what you get is totally fictional data here that I made up, but it's showing sales over time of several products at two locations, like if you're selling stuff at a baseball field. And this is the way spreadsheets often appear. We've got blank rows and columns. We've got stuff arranged in a way that makes it easy for the person to process it. And we've got totals here and with formulas putting them all together. And that's fine. That works well for the person who made it. And then that's for one month, and then we have another month right here, and then we have another month right here, and then we combine them all for the first quarter of 2014. We've got some headers here, and we've got some conditional formatting and changes. And if we come to the bottom, we've got a very busy line graphic that eventually loads. It's not a good graphic, by the way. But similar to what you will often find. So this is the stuff that, while it may be useful for the client's own personal use, you can't feed this into R or Python. It'll just choke and it won't know what to do with it. And so you need to go through a process of tidying up the data. And what this involves is undoing some of this stuff. So for instance, here's data that is almost tidy. Here we have a single column for the date, a single column for the day, a column for the site, so we have two locations, A and B. And then we have six columns for the six different things that are sold and how many were sold on each day. Now in certain situations, you would want the data laid out exactly like this. If you're doing, for instance, the time series, you'll do something vaguely similar to this. But for true tidy stuff, we're going to collapse it even further. Let me come here to the tidy data. And now what I've done is I've created a new column that says, what is the item being sold? And so by the way, what this means is that we've got a really long data set now. It's got over 1,000 rows. Come back up to the top here. But what that shows you is that now it's in a format that's really easy to import from one program to another that makes it tidy and you can reminipulate it however you want once you get to each of those. So let's sum up our little presentation here in a few lines. Number one, no matter who you are, no matter what you're doing in data science, you need spreadsheets. And the reason for that is that spreadsheets are often the right tool for data science. Keep one thing in mind though, and that is as you're moving back and forth from one language to another, tidy data or well-formatted data is going to be important for exporting data into your analytical program or language of choice.


Live from Dublin, Ireland, it's theCUBE, covering Hadoop Summit Europe 2016, brought to you by Hortonworks. Now your hosts, John Furrier and Dave Vellante. Hello, everyone, and welcome to theCUBE, special presentation for our European adventure, our European vacation, our European Cube. This is the kickoff of the spring tour for the SiliconANGLE Media's theCUBE, where we go out to the events and extract the signal from the noise. This is a European edition for Hadoop Summit 2016 in Dublin, Ireland. And I'm excited to be here with my co-host and co-CEO SiliconANGLE Media with myself, Dave Vellante with wikibond.com, chief analyst, and again, co-CEO SiliconANGLE Media. Again, this is our European tour. If you're watching and you're running events in Europe, contact us, we're doing a full expansion into Europe. Greg Stewart, you can contact him and ping Greg Stewart on our Cube team or Jeff Frick if you're interested in more events. I see a lot all over the world. Dave, big data, Hadoop Summit. We've covered every single of Hadoop event since the inception of Hadoop World. And then when Hortonworks spun out of Yahoo, we've been covering the space from day one, present at creation for this big data revolution, starting with the Hadoop ecosystem, expanding out into the entire world now. Big data isn't just about Hadoop anymore, although obviously Hadoop Summit, Hortonworks, it's the core open source community that's driving all the innovation. Your thoughts here in Europe, smaller show than the USA, but again, the requirements are different. Data governance front and center, security front and center, carrier grade, enterprise grade, data connect platform. These are the conversations. This is the presentation. Your thoughts on the keynote this morning. Well, we're here in Dublin. I learned this morning that Dublin and San Jose are sister cities, but Herb Kunitz told us that's not why we're here. We're here for the Guinness. I'm all for that. And you know, good crowd. I mean, a lot of doers here, a lot of people who are actually using Hadoop, a lot of Hadoop practitioners, probably about a third of the audiences, at least some kind of Hadoop going on in production. Only about 10% of the people here were just here to learn because they really weren't doing anything with Hadoop. So we're starting to see that maturity. We talked about this at our research meeting the other day at SiliconANGLE Media. Hadoop's sort of reaching the adolescent phase. The Hadoop market's now 23 billion. It's growing at 14% compound annual growth rate through 2026 when it hits almost $100 billion. So it's a nice segment that's growing. The really interesting thing there, John, is most of the market is still not software. Mark Andreessen says software is eating the world. It's sort of eating the big data world, but it's all free. It's free. It's open source. And so professional services is still the dominant take. We expect by 2020 that's going to change as applications start to come into the four, packaged applications have been few and far between, frankly, in this ecosystem, John, and we're waiting for more of that. So that leads us to the conversation about developers, kind of your wheelhouse and what you're seeing in the developer world. Well, obviously, Dave, we saw at Big Data Week where we had our Big Data Silicon Valley event. Big Data Week is where Big Data Silicon Valley, Big Data New York is on in conjunction with Strata, do our event and O'Reilly's event. We saw that in the States where the cloud was a big driver in all this. And if you're talking about the cloud and developers, you cannot not talk about Amazon web services. Amazon web services, absolutely crushing it. Now forecast to be about $10 billion according to Jeff Bezos. And we predicted that in theCUBE years ago. You and I had that conversation and we were kind of like, laugh it, but look it, we were right again. The queue was always right.  What is the cloud presence for you? And that to me is where everything's coming together. The confluence of what is in the cloud is going to thrive really rapidly. The innovation and acceleration of all the Big Data, native applications on Apache, all the way through the business intelligence, homegrown, purpose-built appliances, and software for the big companies. The cloud is where the action is. And again, you got Redshift, you got Kinesis, Amazon's moving in with services on these areas. This has been a success for Amazon web services. Now in the Big Data world, who can keep up? And again, I've always said this on theCUBE. It's like a NASCAR race. If you watch NASCAR, you know, everyone stays in the middle of the pack. Someone gets out front and they drop in and draft. And then someone slingshots around at the end. Of course, people hit the wall and crash and burn. But the bottom line is, this is what's going on now. You're going to see a whole another level of racing going on with, and this acceleration of the cloud will drive the Big Data application. And I see the developers really, really getting into their wheelhouse with integration and certainly the power of the cloud. This will determine the winners and losers of this next generation. Mile marker, if you will, for the Big Data world. And again, Hadoop is a critical ecosystem. Not the only game in town from a feature standpoint, but the ecosystem of developers will intersect with commercial cloud and commercial vendors. So Rob Bearden this morning, as Kino was really emphasizing business value, business impacts, which for years, of course we've geeked out on yarn and more recently Spark and obviously all the zoo, all the animals in the zoo. So it's interesting to note he was giving some examples of customers that John that wanted a 360 degree view of their business. He gave an example of a retail customer, another example of an insurance company. I tweeted out that those same companies wanted a 360 degree view of their business back in Y2K and they thought their EDW was going to help achieve that. So I want to better understand why people in this community feel as though Hadoop and Big Data will live up to that promise of a 360 degree view of the customer and find out if people are actually achieving that. What are your thoughts?  Okay, I don't think that ever happened. Data warehousing and business intelligence just never was up to the challenge. Not because it was just a technology architecture issue. They didn't have a lot of data and they had limited data and they would use that data and fence it in, run reports against it, but they missed so much data. Now we're living in an always connected world. You heard Mark Zuckerberg yesterday at Facebook talking about connecting the world. We are living in an era day where everything's measurable. So the notion of getting new data doesn't make it mutually exclusive for the data warehouse business intelligent old guard like Terra Data Informatica. We heard from them last event we were at. They will have a nice little coexistence, but it's all this new data. The connected data from IoT, the big data that's coming out of the Hadoop ecosystem, this is the focus. And I think Hortonworks CEO Rob Beard nailed it when he said connecting the data is a core value proposition at the end of the day.  Again, back to the cloud. And when you bring in the cloud or on-prem, enterprise security and governance is huge. Obviously in Europe, that's a big conversation. Obviously different countries. You have a lot of different data from IoT now completely complicates the mix. I mean, imagine you're in your car driving from France to Germany with telematics and big data. Who manages the data? I mean, it's a nightmare of a scenario on the deployment side. But you cracked the code on that. Huge value, absolutely huge value. Well, you've always been down in the term data lake.  So now we heard a lot today, a lot of talk about data in motion, bringing life to that data. Like an ocean. Kind of like an ocean. Kind of like a data ocean if you want. You know I love data ocean.   Mainly because it doesn't represent what's going on. It represents a pool of data. Doesn't give the dimension of like, during currents, temperature, different dimensions of data with IoT, fast data, slow data, tides, rip tides, all that stuff as a better metaphor in my opinion. Well, but it actually in some respects does underscore what people are doing with data today. They are just kind of throwing it in a bucket or a lake. And sort of just trying to figure it out as opposed to what you're prescribing which is this much more dynamic environment. Well the ecosystem drives what's in an ocean like take Monterey Peninsula down in Cape Cod your area where we grew up. You have different ecosystems in those areas that are feeding off of the different environments. That's very much like the data market. You got Alchemy, you got all kinds of interesting big data dynamics. So the ecosystem of the application is the subject of its environment that it's in. And so I think the data, you can't just say data lake and pile it up. Yeah, certainly you got to have a data lake, pile the data somewhere and apply to it. But in a business value context, it's not driving that business value. So the other thing you mentioned was IoT. And we heard a little bit about IoT this morning and we've been studying that at Silicon Angle and Wikibon Research side. Edge computing, there's a lot of things we talked about this a couple of segments ago at HPE Discover in London. We were talking about some of the basic things that have to happen for IoT to take place. You pointed out, well, if you want to instrument the windmill, you better have connectivity there or it's really not going to be that useful. The other piece we're seeing is edge computing. You've seen Amazon make some announcements there. Microsoft was up talking about edge computing today. Certainly Rob Bearden talking about bridging all these data silos. You're not going to move the data. It's going to be done with computing at the edge. So a lot of infrastructure has to take place for companies to realize business value from that notion of Internet of Things. I mean, you mentioned the silos. The silos in the enterprise really limits your entire view of the entire data set. That's really been a key challenge for everyone. We've heard that on the keynote. We've been hearing it on theCUBE. That's why integration is a very, very big part of the new normal and the enterprise success formula for startups and existing companies. You got to integrate in. So whether you're running a big MPP database or a Vertica or a big engineered system purpose-built hardware and software, commercial software, two open source, they got to work together. The glue layer in all this is really, really important. The second thing Dave, I want to highlight is that, again, to reiterate what we say on theCUBE all the time, the importance of community really is huge. The ecosystems that are developing around the software developers and now with cloud accelerating the advancement of applications from a deployment standpoint really is about which community you're playing in. And with a great community, you'll see great, great advances in innovation. No community, there'll be no traction, in my opinion. Community has to be factored into all aspects of the developer ecosystem. You know, the other thing I want to bring up is some other data points. As we talk about disruption all the time, but for years, I've talked about the rather rich get richer. When you look at the big data space, we just released Wikibon's latest forecast and market shares on big data. I think our sixth year in a row doing that. If you look at the list of companies that are dominating that business, if you look at the top 10, there's only two companies that one would consider big data pure plays that cracked that top 10. Splunk and Palantir, you know, the very secretive company. That's it, those two. The rest is IBM, SAP, Oracle, HPE, Dell, Teradata, Microsoft. I mean, the big whales. So it's going to be interesting to see if these large legacy companies that failed to deliver on the promise of 360 degree view with enterprise data warehouse can live up to that promise. Or we're going to see new entrants. Amazon has probably, I mean, this industry's been in oligopoly now for a while. Amazon has started challenging that. But it's going to be really interesting to see if these players can step up and deliver on that promise. Yeah, and that's going to be ultimately data driven. That's going to come down to how open you are with the data, how you're handling your application development, and see what happens. So, super exciting. Again, at the end of the day, actionable intelligence, breaking down those silos, having real impact with data for the applications. And whoever gets it done, does that first. We can talk about Splunk. They have one early example. They put the data to work immediately, and that's going to continue to be the benchmark as we look at the scoreboard, Dave, of who's out there. So, we're going to be breaking it down here live. Here in Dublin, we're in Europe for the SCUBES, special presentation of Hadoop Summit 2016. Follow the hashtag HS16 Dublin. Go to crowdchat.net slash HS16 Dublin. Join the conversation, be on the record. We'll be following all the trending stories, following all the influencers. We'll bring that commentary. You have any questions? Just go to crowdchat, put the questions in there, and we'll bring them on the CUBE. Thanks for watching. We'll be right back with more here live in Dublin after this short break.


Appalachian Wireless offers forward pay. No contract, no credit check, no problem. Plans start in 1999 a month and include unlimited talk and text or take it to the max with unlimited data plus for only $89.99 with 50 gigs of high speed data because we are you. We are Appalachian Wireless. Home Appalachia has made the shift from starting an LGBTQ inclusive bar to being an event and community center for downtown Pikeville. After speaking with hundreds of people at this point and really learning from them about their experiences and, you know, taking that into consideration with all the data that I was collecting, there was something that just kept popping up and it became harder and harder to ignore. And that was just a lot of struggles with addiction in my community. A lot of struggles with specifically alcoholism. And I started to dig into you know why that may be and where that might come from. And it felt like all these pieces sort of kind of started to align. With safe spaces for the LGBTQ community, typically being bars, Sam's wanted to do something different. I think there have been a lot of negative consequences that have come from our safe space as being bars historically. And that's really kind of where the shift started is just thinking about is that something that is a true need in Eastern Kentucky, especially a region that's been, we know, so ravaged by addiction. Home helps to include floating and dedicated office space, workshop opportunities for early stage businesses, event space rentals and entertainment. So now home is really kind of taken on a related but separate lens, you know, looking specifically about how our community can contribute to a rural town, you know, thinking about what we can bring to community rather than us just existing in the community. I think is where we're focused at this point. Home helps bringing inclusivity to Appalachia will keep people from leaving the area. I think in short, those individuals are going to continue to leave those communities. And we know that there are historic outflows of folks from Eastern Kentucky at an alarming rate. And it's unfortunate that those individuals are leaving simply because they don't feel welcome or accepted or they can't find individuals who are like them. We know that they're going to the Golden Triangle. So what we're going to see is exactly what the data says we're seeing. And that's that the urban areas of Kentucky are going to continue to grow and the rural areas are beginning to shrink. And so unless we want to change that and start by making sure that everyone feels welcome, I think that's one of the biggest reasons why it's important to wrap your arms around everyone who's part of Appalachia. To learn more about home, they're on Facebook at Home Appalachia and on Instagram at Home Appalachia. For Mountain Top News, I'm Brianna Robinson.


All right, welcome back to the wireless village If you are standing you're doing it wrong come in sit down take a seat play a game watch these two guys talk I'm gonna give an introduction for these two because I don't know. I just think it's really worth it We've actually had a relationship with the scene This scene we've had a relationship with him for about three years now We we accepted his talk and then he had some visa problems And then we didn't accept this talk and he came by and brought us Turkish delight and since then he doesn't know it, but his nickname is now Turkish delight and This year we decided to give him another chance. He kept submitting and we decided we like this talks We we allowed him to to come back and he even brought his friend who is now apparently a cowboy So Two sunglass cowboy and Turkish delight everybody Hi everyone Welcome to our talk Backside can you hear me? Yes, okay, thanks today we will talk about a do driving and we focus a feed information about edu room networks and But firstly I want to say we love Wi-Fi hackers always and I am working as security engineer at barricade cyber security in Turkey and I am working at training site in all fancified and Before then I attended to black hat arsenal a lot of time and I write book about wireless attack monitor defense But language is Turkish if you want to learn secret information from my book you should learn Turkish and I developed tool name of tool Wi-Fi Hunter and can detect Wi-Fi pineapple activities and Karma attack activities and can detect and block malicious wireless network activities So today we will focus About edu room like general information Mis-configuration and mislead and gathering pseudodon information tracking pseudodon and academic staff with edu room request and We will explain something about threat in edu room and for edu room users and We collect some information and we will show How can hack the edu room users with collected information? Before we start Did anyone ever use edu room network before? Yes. Oh, oh Alright, alright, you should turn your phone Edurum Initiatives started in 2003 with six country the technology behind edu room is Based on the IEEE 802.1x Standard and here are Shikof radius proxy server. It is used by student academic academic and university guests and Here is better view of edu room started and expanded throughout the year the years Right now edu room is accessible worldwide So let's talk about the problem in edu room networks Each country in each region has their own provider In Turkey the provider explained how university should set up their internal Network and how client should connect to their edu room network as you can see on the picture This is Turkish Not that it says to able to connect the network client needs to use secure w2 software But in our research we noticed That some universities don't apply that With Google door we can identify Identity identify which university uses PAP in PS2 authentication and as you know PAP In PS2 authentication is not secure because Transmit username and password as clear text Here are some example how misconfigured are shared on university website The problem is even you could set the concept things in advance way It's set to law with security When we ask it some expert they say It is for usable across all smartphone in edu room network The information that is shared on website is so useful to attacker because it contains pattern of the System like if you catch one person you can guess others so here is the look of Internated inter internal configuration of radio server as you can see PAP is there in radio server configuration in internal The second problem for me and for other edu room users We encountered is auto login feature is advised directly on I'm directly and Forced me and enforced other edu room users for connect with out Autolog in auto There are many students with different background some now security and some don't Some are computer geeks some are not and because of useful and easiness Most people choose the enable auto login because when you want to connect the edu room network it is Very difficult. So people select and choose auto-connected option and Now we are talking about how can track tracking? edu room users So before we start on this topic We shall inform you that These informations and these research like these activities is being done for our research So no malicious intent is being done and we will only share anonymous and Informations no users are informed no passwords are included. So this is done for just for the research Yes This is normal probe request and now we will compare normal probe request normal a AP identity Request and we will explain how can track edu room users in normal probe request as you know sent just with my client make addresses as a source and Can you see you can see SSID information in probably probe request and Our devices cannot think location-based. So always send probe request to environment for connected the network when If there is a hacker in environment collect all probe request and obtain some information like make addresses and Who want to connect to? SSID the Okay And in a e app identity request as you see We can obtain just username with surname sometimes and sometimes with Domain name, but so when we obtain the user info this is app identity in the edu room networks and we can Obtain a lot of information at about edu room users with this request So like email username or student ID student or staff University and website and country and city We can obtain all information from a student request in edu room networks This is this is an analyze of my mail that university gave me Here we can see It identify me as a student and give my username that contains my first and last name and Thanks, it for not forgetting putting dots to clarify Clarify where my name and surname starts Let's see another example which is Oxford University on site example We can identify the department with the app identity request as you see You you can see a department information in app If you want to know special and ukes University email pattern, we just Google and find it Here we see a different form of classification. You can find with the Google door and University in University website Yeah, is there any black cat officials here? All right This is that We didn't inch and intentionally did type black at smaller. So just informing you that yeah, and Now Defcon. Yes. I I did use techniques for tracking student and academic over at room with at room Identity request and we do risk we did research in black cat and Defcon and Collect a lot of information about student and academic and we we did found Approximately 15 50 University in Defcon and black at a different And by the way, these are just a unique list. So yes Some students come from the same university like two students three students. So we just filtered it and just uniquely Showed you the universities. So some university has a one student here some of three students and We always filtering the informations So we didn't catch the passwords. So we saw it, but we didn't write it down So just want to clarify it Yes, and now I want to show a Picture about tracking students and if you ask Yourself if you ask yourself, how can Collect information about edu room users. This is answer and if you use extra GPS Trek for tracking user Base a GPS based location you can use some devices and We can collect information about location email username ID university name city and country and Device deep with from manufacturing information as you know in same in probe request You you can collect MAC addresses and resolve first 24 24 bytes for resolve MAC addresses and you can find manufacturing information Okay, thanks now Legendary Go on Hi again My name is Najar my nickname goes with legendary Najar And I work in the same company with Basim at cyber Barricade cyber security and I am just a geek. I am just new on the field and yeah, I work a lot to rise my Potential and try to learn many things as possible and I like is I don't like SQL I hate it. Yeah, and I like mmrpgs Black Desert online so yeah So basically when we remind you again When we obtain the information the app identity we saw the username, right? So before the ad that clarifies who is the student or the stuff? So Some universities uses the student names stuff name Some users some university users school numbers and we We found in Turkey that some Universities show or sometimes the social security number as well. So that's the most important thing about this So even you don't catch the password, which is not our main idea here This is very critical information So with that information we can use Google doc to find if a university shared anything about this And if there is a username or specific name, we can Google it and find their Social accounts and then the things happens. So we noticed that in our research That students likely to use the same passwords On their social accounts as well. So our only applications is done in Turkey So we didn't do anything in US if any feds around here. So yeah So in our example, we just Google doc as you see There is a link that is shared by the university so we can identify Sometimes the user's school number or if you don't have the name we just Research about the school number and we found the person's name. So basic Google doc open source intelligence We find our target and We are testing the passwords on their social accounts and yeah, usually worked and Let's say like we use VPN for precaution and like LinkedIn Instagram catch us like said, this is very suspicious. So they didn't let us in but we Can verify that they didn't say oh password is wrong. So yeah so When we can do this in automatically way We can create a map like some other tools like use that To research on internet. So in a durum We have the emails emails the username sometimes the school numbers and when we collect is all we can Connect all the students with each other. For example on this map like on the top North and the west students like they have they share the same city They are from same city, but they are not on the same university. So you can identify this or if they are on the same University, but name not same city you can identify this and create a map of students and stuff and We didn't input this but I want to mention that if your password is catch Especially for the staff members like professors It's very critical because you'll likely to share your Papers with each other like maybe in your same university colleagues or Separate university colleagues. So when you do it is not public research like I Malicious people can catch that from your email because what we noticed it That university emails doesn't do security check For example, when I try to log in to Gmail with VPN, it says oh this looks suspicious But in university mails, they don't say that so I can easily log in if I catch your password And then I can do whatever I want. So find Where you write whom you speak and if there is a PDF file attached in your mails, I can download it and For more I can use your email as a phishing. So yeah So when we want to create a profile of the edum user Like we can either like Analyze their passwords as well because some universities do a classical pattern Like for instance in my university, they just gave me a random patent number and every Students have that so when I collect all of them I can like create a rule for example hasket rule and run it and Imagine that like like I mentioned before they use the same password on social accounts other email accounts Like Gmail Outlook and forms as well. Maybe student forms. Maybe Like business forms or gaming form doesn't matter and yeah gaming accounts and streaming platforms like Twitch or Mix and The other critical part is your ad room account is synced with your School account. So when you want to connect to the room you use your school account as well So it is the same. So when I catch your password and username from the Edurum app identity. I now have your old school portal Connections for example, like I mentioned email, but maybe you have a stuff specific stuff Portals as well. So I can access that if you are an important Member of the school. So yeah, when I have the password, it is all applied same password on on the campus So this is very critical as well. And if you have active directory in your school domain Yeah, I can easily access it because some professors like whole day Windows desktops or machines like on their room and bring a Mac maybe with them and Do rtb. So if your machine has an rtb port open like I can connect it and yeah, and maybe at the home as well, so The threat is everywhere. So if For let's I did it I say it before like every university has a different rules different setups And for example, we font is on internet their webpage like they are saying that with your account You can access the internet Like log into your labs and like print something Yeah emails and other possible connection devices and Here says like to clarify that is officially say to the members like we are not saying this by our own It is officially shaped by the universities to students and here you can say that they have a specific Internal network wireless network called IIT secure So it's not called it room, but used by the same ID and password and they say use it room if you go on the Foreign university or another university to access the internet But this shows that same ID and password is being used And here you can see they are warning from this as well like don't use it room Ed room in your own university so But the other threats might be like if I open like an access point that you connected I can do DNS hijacking with your same Authentication when we try to catch it For instance when I access your student portal and I can change your lecture registration on the registration Time so I can mess your academic life schedules and if I catch a staff member and if there is an exam Time I can change students maybe exam notes. So yeah, it is very critical if you think like this And if I want a persistent use a persistent technique, I would rather choose to not Show myself. So I will stay in the ghost And like follow your emails read your emails and follow other staff member students what they do So this is a critical thing because I can include this with Automatical tools to your to my edit driving map. So if your University doesn't Put a security option for login. I can write an Automatical tool and do this by its own so nobody will detect it and here are some examples, for instance, I Accessed I'm a friend of mine. Yeah, but Google said yeah, you need to Show something but on this example, this is a very critical show to show weakness Some universities in Turkey use Gmail as a business portal. So this student never put a security option So I just said here Tamamlandi like it is completed means so I when I clicked it. I just Reached the males. So there is no security behind it even they use Gmail because students doesn't care about their security and yeah This is an Instagram attempt As it says like we detect unusual login. So it prevents and wants to me verify myself and What with what we did is after we for example Find this person we did then open source intelligence research on internet and found the person's Real gmail address we could access it with the same password, but it says again, you need to verify yourself and As you see there is a on the first option tap yes for on your mobile phone on the tablet And for the prank I just sent always this option and wait if the user might click yes But he never did so yeah and another thing on the business side like students Maybe like nerd like myself don't usually care about LinkedIn But some other departments care or students So yeah, it is very critical social platform as well for official business deals like business talks And yeah, we could access the with the same password for LinkedIn as well But like I said LinkedIn Yeah, blocked us as well And this is another thing very critical as I said student portals so We accessed a student portal and there was a student picture as well like some portals Don't show it but some portals show it so it is very informed Important information for the malicious person. So I blew it or the clinical Places like the picture as well, but yeah to prove it. I put it here And it is very critical as you see there is a like school numbers your social number as well Like what major you have like I have all the critical personal information to identify you who you are What you are what you're doing etc Yeah, as I mentioned before like what can you do more like I said like In progress academic papers, etc And maybe if I am too much malicious like I can release a ransom me with phishing Or if there is a weak point on the network when I try to use our dp like and if the windows has a leak like I can use Share my ransomware on the network like wanna cry So internal security and external security is very important in universities But we see they do not apply most of the time And our recommendation is Do not use a room but basically We would like to remind you that whenever you want whenever you are just never checked This auto connection settings because it is it shares all the time probe request and leaks your data When if it is a normal personal virus, maybe it is not that much important But still important but not critical like this But if you use an enterprise network like edu room, please always Disable the automatic login Because it shares all your information and trust me Because of this misconfiguration It is possible to catch your school passwords all the time So it is because the misconfiguration. So if you are Staff member in your university Please ask your university change their second phase of authentication from tap to ms shop version two maybe Yeah, the pap is the weak point So ask them to change because yeah, it is always recommended, but we don't recommend it And for furthermore, we are in progress to create our mapping tool Just for research like just it will Record the person username, maybe or email just no passwords Maybe if you we can't put optional we didn't decided yet, but we will share our tool in after future in this repository so Thanks for listening. Mohammed sir Yeah, thanks I want to share another threat before game before over and If you collect email addresses with If if you create a fake access point with host apd or host apd mana or another tools You can collect information And user always use pap and you can Catch your password and You can collect email addresses if you collect email addresses You can send phishing for Spray malware or another Thank you so much Thank you Don't use edu room networks And learn turkish for learn secret information


Thank you once again for attending stronger through water the U.S. government hosted event to showcase domestic and international action on water security. It is now my great honor to welcome Ambassador Linda Thomas Greenfield representative of the United States to the United Nations to deliver welcome remarks. Good evening. Wow this is a good evening everybody. You guys are tired? Did we keep you too busy today? Let me start by welcoming all of you to the New York Public Library and this is such a special venue for this important event. Mayor I've been planning to come to the library since I got here to New York and I didn't do it so I look forward to coming back for a real visit but before I get my remarks started I just want to extend sympathy to one of the co-hosts of the UN water conference to Jikistan where a horrible earthquake took place and to express our our deep sadness our hearts are with you and with your people. Tonight we're fortunate to be joined by local, state, federal and international leaders in particular Mr. Mayor thank you so much for co-hosting this event with me and for being such a strong partner for all of our UN initiatives and Assistant Secretary Medina thank you for making the trip to New York and for bringing a special guest with you and for all you do to advance clean water. I see you over there in the corner clean water initiatives and let me tell you it's been it's been a while since I felt this kind of buzz in at the UN. This morning I saw lines of people waiting to get into the conference stretched around the block I hope none of you were in those lines because I think most of the people who were there are still in line because they were long. I think there's so much pent-up demand because we haven't had a UN water conference since 1977 that's right 1977 it's hard to believe in this long overdue and I'm sure that many of you who are in the room weren't even around in 1977 I was. For most of us privileged to live in New York we don't have to worry about whether our water will turn on in the morning or whether we'll have access to sanitation services but not everyone around the world including too many people here in the United States enjoy such certainty or confidence as we speak billions of people across the globe lack access to safe drinking water and sanitation or regularly face water scarcity billions that's with a B and then and here's the most troubling part we're headed in the wrong direction a 2022 study by the University of California Los Angeles estimated that almost half of the world's population will suffer severe water stress by 2030 for me this isn't an abstract problem over the course of my life I've seen the impacts of water issues with my own eyes my home state of Louisiana is facing the devastating consequences of rising sea levels and as a refugee coordinator stationed in Africa when I was a bit younger I met with countless refugees who didn't have enough water to meet their basic drinking cooking and sanitation needs in my current role I have traveled to so many countries where conflict and climate change have ravaged water supplies and exacerbated food security the water crisis is a humanitarian crisis it is a security crisis it's a moral crisis and it's a global crisis one that demands global cooperation and the UN water conference is a perfect venue for such cooperation it's an opportunity to come together around shared goals and to turn our shared goals into concrete actions because it's not enough to simply talk about what needs to be done as president Biden likes to say don't tell me what you value show me what you budget and I'll tell you what you value for our part the United States is committed to action to making major investments in water security at home and around the world and we're excited to show you our budget just yesterday I was proud to announce that the United States is committing 49 billion dollars toward equitable climate resistant water climate resilient water and sanitation investments that's 49 billion this announcement builds on the first ever White House action plan on global water security the action plan laid laid out an innovative and unified approach that brings together us diplomatic and development twos as well as science and technology to respond to rising global water insecurity and this plan engages civil society and the private sector to support a more water secure world for all since the launch of the action plan our targeted investments have helped to provide more than five million people with water and more than six million people with sanitation eighty percent of those reached with sanitation services had never had access to sanitation here's what these numbers tell us it's within our power to stamp out water insecurity to ensure farmers have enough water to grow their crops and feed their communities to ensure that children can wash their hands and fend off disease to ensure the water that comes out of people sinks is safe and reliable these are basic needs they are fundamental to health to peace and to life and it's on us all of us the government civil society and NGOs to build a future where water flows freely for all so let me in by thanking all of you for being here thanking you for your commitment to that brighter future and with that I want to welcome the mayor mayor Adams the stage is yours please welcome mayor Eric Adams 110th mayor of the city of New York and I want to thank the ambassador for her powerful words and real signal of how the Biden Harris administration understands the imperativeness of the moment in their financial contributions and allocations of funds to our pursuit to ensure we have the proper protection of our water here and the ambassador is right of here in New York City and in America the issue of turning on their tap one's tap the issue of having water ever presence it's not an immediate threat to us but it is a real concern in New York City we have allocated $1.6 billion to retain a tanks in the Gwana section of our city where flooding is taking place we contributed almost $2 billion just to the infrastructure causes that we have here in the city but I want to take you a little further I take you a little further then that is the known when we talk about water think about the fact that 60% of our body is made up of water think about how you feel after a very difficult and stressful day and you're able to just soak in a hot tub or that morning shower that starts your day think about the real relationship that we have with water not any obvious but go deeper than thought to see the significance of water it is a liquid flu fluid that carries us in our mother's womb and always say we have two mothers one that gave birth to us and one that sustained us and as we leave the birth canal of our mother that physically gave birth to us we enter the reality of that fluid of mother earth and we have to ask ourselves have we been abusive to her have we loved her have we nurtured her have we created an environment where we shared the water supply and all of the natural resources that this wonderful planet has to offer and the question could be turned into an exclamation point if we all are united together and say yes there's a reason that United Nations sits on our East River and the Statue of Liberty is on the west side of Manhattan because we believe that we have to be united together on this issue this week is significant issue 50 years has have gone by before we stop pause and reflect it on what are we doing with our water what are we doing with our planet I really commend the United Nations leadership and so proud to have the ambassador here and she's bringing the imperativeness of this moment in highlighting it with a clear focus on our water and on our planet it's time for us to engage in real conversations with our young people to engage in real conversations on how we properly use water we have since the 80s reduced a third of our water's water usage in this city and there's a direct correlation between those countries that are struggling across the globe and the lack of water is tied to impoverished areas of the globe and many of us that are part of countries with in abundance we need to now reflect on our brothers and sisters and other parts of the region I strongly believe in the quantum physics theory that we're all connected to each other and I cannot do you harm without doing me harm it's the yin and yang but it's not only the two symbols that are connected to each other is the black dot is inside the white dot and white dot is inside the black dot so we are part of each other we need each other and it's time for us to recognize how much we need each other I know that and there's a universal call I believe right now across the globe that if you close your eyes and get away from the philosophical and political aspect of our existence and start tapping into our inner being we will see that 60 percent of water is connected to the water that are in our oceans connected to the water that we drink connected to the water that unites us connected to the water that held us in the wombs of our parents now it's time for us to be gentle and kind and nurturing to the mother that say stained us I'm willing to do that and today your presence is telling me that you are willing to do that let's do it together thank you