All right, good afternoon, everyone. Thanks very much for your patience today. Just a few things to talk about at the top, and then we'll get right to your questions. Per our announcement earlier this morning, Secretary Austin returned to work at the Pentagon today following his recent hospitalization. Secretary is glad to be back in the building and has expressed his appreciation for the great medical care he received while at Walter Reed and for all the well wishes. As his doctors highlighted on Tuesday, he's anticipated to continue his full recovery and the Secretary remains squarely focused on executing his duties as Secretary of Defense. Secretary Austin also released a statement earlier today following the conclusion of the NATO Defense Ministerial meeting in Brussels. In it, the Secretary reaffirmed that the United States will continue to stand with our NATO allies and defend the sovereignty and the territory of every alliance member stating, quote, every inch of it. Our commitment to Article V remains ironclad, end quote. Secretary Austin also underscored that NATO remains the greatest alliance in history and that NATO today is stronger, more united and more vital to our shared future than ever. The full statement can be found on DOD's website. Switching gears earlier today, the Department released its first ever resilient and healthy defense community strategy. The strategy will guide the DOD's actions in the coming years to improve both constructed facilities and the natural environment across our defense installations. More than 2 million military and civilian personnel live, work, train, raise children and spend time with their families on the Department's 538 installations, which include more than 280,000 buildings and 30 million acres of land. These spaces are critical to carrying out our DOD missions. It's therefore both the national security imperative and a moral obligation to ensure these communities are healthy, functional and resilient and that we're working to ensure a good quality of life for our entire force. Additional information to include a copy of the strategy is available on defense.gov. And finally, yesterday afternoon, the Missile Defense Agency and Space Development Agency launched six satellites to low earth orbit from Cape Canaveral Space Force Station in Florida. The satellites, which include two satellites for MDA's hypersonic and ballistic tracking space sensor and the four SDA tracking layer satellites are conducting initial testing. The launch of the two prototype systems will be followed by two years of on orbit testing and over the next few weeks, MDA and SDA engineers will run a series of tests and check out procedures to ensure the satellites are operating and communicating with the other systems as expected. For more information, I'd refer you to Missile Defense Agency, Public Affairs. And with that, I'd be glad to take your questions. Let me go first to Associated Press, Tara Kopp, who's calling in today. Hi General Ryder, thanks for doing this. I wanted to ask you about the White House briefing that just occurred on the Russian anti-satellite capabilities. Has DUD been briefed on what, I guess, NSE and the Intel communities know about this and has the Space Force and Space Command taken any sort of posture changes in order to secure US satellites? Thanks. Thanks, Tara.  We have been briefed on it. The Secretary, of course, is part of the national security team that's been briefing the President. I'm not going to have anything beyond, to provide beyond what Mr. Kirby briefed over at the White House. And as it relates to Space Command, I don't have anything specific in regards to any changes other than to say that, as you know, as Space has become more congested and contested and in light of growing threats by strategic competitors in Space, the U.S. Space Command and the U.S. Space Force were established several years ago to maintain a dedicated focus on this vital domain and to ensure that we have trained and prepared military space professionals whose mission it is to protect and defend America's interest in space. Thank you. We go to the room here. Orrin. The White House said there was ongoing outreach efforts to Russia regarding the anti-satellite capability. Is the Pentagon part of that? And has there been any attempt to set up a call between Secretary Austin and his Russian counterpart about this? Yeah, I don't have anything to announce in terms of calls, and I just refer you back to the White House on that. Liz? So the acting undersecretary of defense for policy went, is that in place of Secretary Austin going to brief on the Hill today? No. She was planning to go over to that. What hadn't been recovering, she would have gone anyway. She was requested to go over there and she's part of the sitting in on the briefing. Thanks. Laura? On the Russian anti-satellite weapon, can you say whether this was a new capability? Was there some sort of triggering event that this was put into the public discourse that Congressman Turner picked up on? Was there anything new here? Or is this something that Russia has been developing for a while? Yeah, thanks. Again, I'm not going to have anything to provide beyond what Mr. Kirby highlighted. I'm going to underscore the key points he made. It's not an immediate threat. It's not an active capability. It has not been deployed. And as you highlighted, it's related to anti-satellite capability. So just leave it there. And then separately, there was some reports that there was another Houthi attack this morning in the Red Sea. Can you confirm that or tell us whether there was an incident today? I cannot. I know that, as you've seen, St. Com has been issuing daily press releases on any activity in the Red Sea. So if there has been, then I would keep an eye out for that. Idris. I think one of the things Kirby said was some of the intel is months and potentially years old. When was the secretary, when was he briefed on it? Yeah, so I'm not going to provide a specific date. I can tell you he's tracking this particular issue. On a unrelated note, I think the last attack against US troops in Iraq and Syria was February 4th. Do you believe this sort of tit for tat? The current sort of round of tit for tat attacks is now over. You're right. We have not seen an attack against US forces in Iraq and Syria since February 4th. But we'll see, right? I mean, as we have been, we will maintain our focus on the mission that we're there to do, which is the enduring defeat of ISIS. But again, if our forces are threatened or attacked, we maintain the inherent right of self-defense and we'll take appropriate action. Is there an end to the retaliation for the January 28th attack? Or is that an indefinite sort of? Again, as we've talked about before, I'm not going to speculate or talk about potential future operations other than, again, we reserve the right to protect our forces and we'll take appropriate action. Joseph. Just a follow-up on the US question. Does the department assess that the US response, those two rounds of responses to these attacks led to this, what seems to be one of the longest periods that US forces haven't been attacked since October? I mean, that's really a question for the Iranian proxy groups to answer. Again, we'll see. I don't want to predict the future. We're staying focused on the mission that we were sent there to do, which is, again, to participate in the international coalition to defeat ISIS. Just a second one. US officials told the Wall Street Journal yesterday before that the US is probing Israeli strikes in Gaza and the use of white phosphorus in Lebanon from, I think, October attacks, including one of an Israeli attack on the Zhebelia refugee camp that killed more than 125 people. Do you have any comment on that? Does the department have anybody looking into any Israeli attacks using US weapons? Yeah, I'm not aware of any, Joseph. As far as the white phosphorus, I've seen those press reports, and you've seen that the State Department has an effort underway, so I'd refer you to them for any questions about that. You mentioned the white phosphorus. How about the attacks in Gaza? I'm not tracking the US Department of Defense conducting any investigations in Gaza. Tom. Thanks, General. Mr. Kirby said the new space capability, space base capability, was troubling. How troubled or how concerned is the Pentagon? Well, again, I'm not going to be able to get into any specifics regarding this particular threat due to the classification. On any given day, the Department of Defense monitors threats from around the world, and we work hard to mitigate those threats, and we'll take appropriate action in defense of the nation, and so today is no different. And separately, could you please give an assessment of how effective the US-led campaign has been at degrading Houthi capabilities? In terms of like? Well, we're still seeing numerous attacks and then self-defense strikes. The idea of this was to obviously act as a deterrent and also to degrade the capabilities, so. Well, the idea was to respond to a threat that the Houthis have been presenting since mid-November when they started to attack international shipping, and so the United States in concert with over 20 different nations have come together to help protect international shipping through the Red Sea, as well as work with international partners to conduct strikes against Houthi capability and degrade those capabilities. And so we do assess that we have degraded some of their capability, and again, we will continue to take appropriate action to prevent attacks against international shipping. As you've seen and as you've highlighted, we continue to see those attacks occur and we'll continue to take appropriate action. Our focus here, though, is not on fighting the Houthis. It's on two things. One, ensuring that international shipping and mariners are able to transit the Red Sea safely and securely. And two, as necessary, degrading their capability to mitigate and prevent these kinds of attacks from happening. Have you done an assessment of the extent to which that degradation has occurred because the tax is still... We're continually assessing? But you can't put it up. You can't put it up. Well, I mean, describe. Again, we're going to continue working closely with the international community to help degrade and disrupt their ability to conduct these attacks. And ultimately, again, as I've highlighted before, the Houthis have to ask themselves what price are they willing to pay to take on the international community and have these capabilities degraded and ultimately put their own people in danger. Buddy. Thank you, General. So in the last 24 hours, there's been escalation and series of attacks by Israel and Lebanon that led to the death of, in one incident, family of seven, including two children and another one, mother and her two children. First of all, is the department concerned about this escalation going beyond what we've seen so far between Lebanon and Israel? And my question is, despite everything we hear from you, from the secretary, from the department about the need to protect civilians, the toll keeps on growing, whether in Gaza, the West Bank, and or Lebanon. Does the secretary think he needs to have a different approach to his Israeli counterparts to maybe make his message clearer on this issue? Yeah, thanks, Fadi. So on your first question, I mean, we've been concerned about escalation along the Israel-Lebanon border since Hamas attacked Israel on October 7th, as you know. And so we have continued to maintain a very focused effort to prevent that escalation from happening. As you've seen in many of the readouts that Secretary Austin has had with his Israeli counterpart, this has been a topic of discussion. And you've heard others like the National Security Advisor just yesterday talk about the efforts that are underway to de-escalate that situation. So again, we'll continue to stay focused on that. As it relates to civilian casualties, as we've said, the loss of any innocent lives is tragic, whether it's Palestinian or Israeli. At the end of the day, this is Israel's campaign. It's Israel's operations. So I'm not gonna speak to their operations other than to say we can't be any more clear that we do not wanna see the loss of innocent lives. We also recognize the fact that Israel has an inherent right to defend itself against future terrorist attacks and that they're fighting an adversary that has embedded itself among the civilian population. So we're gonna continue to encourage them and continue to expect them to abide by the law of armed conflict and the international humanitarian law. And we'll continue to, again, as you saw in the readout last night that the Secretary had with his counterpart talking about the importance of taking civilian safety into account in advance of any operations. Excuse me, but when the department provides advice, intelligence, weapons, and support like this, and you talk about an enemy that is embedded among civilians, I guess you're referring to Gaza. What about the West Bank? What about Lebanon? And then to say that it's up to Israel to decide what to do. Isn't this department taking actually an important role in enabling Israel's actions? We're taking an important role in helping Israel defend itself, but also encouraging and helping to facilitate humanitarian assistance to the Palestinian people. Again, at the end of the day, the goal here is that Hamas is defeated and so that peace and security can return to this region. And as you've heard, not only the White House say, but us say work toward a two-state solution so that Israelis and Palestinians can live in this area with security guaranteed for both. Let me go on to some other questions here. Jeff. General, thanks very much. Given the deals that Russia has made and the help that it's gotten from countries like North Korea, Iran, support from China, is there any concern at the Pentagon that the new space-based anti-satellite capability, it's developing his result of collaboration with any other U.S. adversaries? And is there concern, perhaps, that Russia, because of other deals to get help with the war in Ukraine, might have shared any of this technology with other U.S. adversaries? Yeah, thanks, Jeff. Again, as it relates to this particular threat beyond what Mr. Kirby provided in his briefing earlier, I'm just not going to have any additional details to provide. Thanks. Chris. On the Houthi capabilities that have been degraded, Senkoms' interdicted vessels with weapons bound for Yemen, are the Houthis regenerating any of these capabilities? Are they being successfully resupplied? Look, I'm not going to go into any specific intelligence, but we do know that the Houthis are resourced and supported by Iran. And so, again, that obviously is highlighted in the statements that Senkom has put out. And so, again, that's something that we're going to continue to take seriously and continue to attempt to mitigate. Thank you. Let me go to the phone here. Jeff Schogel, Task and Purpose. Thank you. I know this may be a question for Soviet Premier Putin, but the God-awful thing that the Russians want to put into space, is it like golden eye? The thing from the 1995 Bond movie? And is it time for all of this from the ground to join Jed and the Wolverines? Jeff, I'm not sure how to respond to that. I guess we just have to live and let die. All right, let me go on to JJ Green, WTOP. Sorry. General, thank you for doing this. Again, on the Russian advance regarding space-based weapons. I don't want to ask you about intelligence or details about what's known about it. I want to ask something different but related. Russia has been pretty aggressive in space for a while now. And going back to 2020 when Russian satellites were stalking US satellites. In 2022, a Russian Ministry of Foreign Affairs official said that commercial satellites might be legitimate targets. So my question is what approaches the Pentagon take routinely to one, protecting US satellites and US military, I guess, assets, et cetera. But in general, it's just keeping an eye on what Russia's up to in space because of its aggressive and somewhat reckless behavior in the past. Yeah, thanks, JJ. It's a great question. And as I alluded to earlier, there is a recognition that space has continued to become more congested as you highlight all the capabilities that are there, but also more contested in terms of seeing strategic competitors like China and Russia putting capabilities into space that could threaten not only national security capabilities but also commercial and private capabilities that are in space. And so again, you have US space command which provides the operational capability to integrate national or military space capability, national defense space capabilities which can include ensuring that we're able to maintain our operations but also looking at protecting and defending capabilities in space. Not gonna go into discussing any classified capabilities, but part of this includes looking at things like how we present capabilities in space. And what I mean by that is disaggregating, right? Previously, in a simpler time, you would put a large exquisite satellite in the space that had lots of capabilities. That's a single point of failure versus going to much more numerous, smaller satellites that are less expensive that can be replaced more quickly, thus making it harder to take down a system in one fell swoop. So there's multiple different ways that we look at this but that's what the US Space Force comes to work every single day looking at to ensure that our national interests are protected in space as well as working with allies and partners on that same issue. All right, yeah. Thank you. According to US ambassador to Turkey, Jeffrey Blake, the Department of Defense is building three munition lines in Texas together with one of the Turkish state-owned defense corporations. The demand for especially 155-millimeter rounds increase after the invasion of Ukraine and the mechanical and chemical industry cooperation of Turkey produced them in some capacity in Turkey. What are the details of the cooperation and what is the expected monthly production capacity of this Texas compound? And the last one is do you have details such as chances for a US sale or delivery of these to Israel in the future? I apologize. I'm not sure I fully understand your question. There was a lot there. Sorry, yeah. The Department of Defense is building three munition lines in Texas with Turkish defense corporation and what kind of cooperation is there? Can you give us some details on that? Yeah, I just don't know. I have to take that question for you. Thank you very much. Yes, ma'am. Thanks, Pat. This is Tima from Al Jazeera English. I just wanted to see if you could give us anything further on Guyana and the urgent US military assistance that has been reportedly headed over there. Do you have anything further on that for us? I don't, and I don't want to wing it from the podium here. So let me take that question. Yeah, I'll come back to you. Time for a couple more. Yes. Moving back to that anti-satellite weapon Russia is developing. Did releasing this national security threat publicly yesterday hurt national security in any way? Or put anyone from the Defense Department at a disadvantage in speaking with the Russian counterparts? Well, look, I'm not going to characterize it. It is what it is. Mr. Kirby addressed this from the podium today in terms of the declassification processes and procedures. So I will do my part in terms of protecting classified information and referring from commenting any further on that particular topic. Is there a timeline for Secretary Austin to review the internal review on his hospitalization and how that was handled? Yeah, I don't have a timeline. As we've highlighted, he does have it for review. And certainly, again, we're committed to providing as much information about that review as we can. And so we'll continue to keep you updated on that front. Thank you. And last question. Go to Mike. Thanks, Pat. The Atlantic Resolve IG report that just came out, the IG noted that Ukraine is still operating under basically a Soviet-style doctrine in the field, and I was wondering, since I was under the impression over the last several months that the US has been trying to train them to operate under a more Western US style of war. Has that been a success? They're still fighting the same way and have not moved in seven, eight months? Well, there's a lot there in that question, obviously, depending on how deep you want to go. I would say broadly speaking, I think the results that Ukraine demonstrated after being invaded almost two years ago speak for themselves in terms of their ability to improvise, overcome, and adapt on the battlefield. Had that not been the case, we'd be in a much different place right now instead of Ukraine having taken back 50% of the territory that the Russian military occupied at one point. That said, as you've seen today, it continues to be a tough fight. The Russians continue to throw a significant amount of capability into the fight. Consequences be damned. And so we are going to continue to support them. We're going to continue to advise as best we can. But at the end of the day, it's up to Ukraine to plan and execute its operations. But what we will do and what we are doing is continuing to work very closely with the international community. We just had the Ukraine Defense Contact Group yesterday to ensure that we understand what their most urgent needs are, ensure that we can work together to get that to them as quickly as possible, but then also importantly, work with the Ukrainian military on what its future force looks like so that they can deter future aggression from Russia and prevent another invasion from happening. Thanks very much, everybody. Appreciate it.


Okay, hello everyone. Today we're going to be talking about leveraging web application vulnerabilities to carry out reconnaissance and, you know, gather intelligence for investigative purposes. Just a quick introduction. I work with the Center for Internet and Society as a security researcher and also work on issues of policy. I'm very interested in, you know, exploring different ways where user privacy and security can be affected with web technologies and services. So with that out of the way. So this is going to be a short primer on what, you know, intelligence gathering really is because a lot of you may be developers and, you know, you may not have the mindset with which an attacker looks at the products you create or the applications you make. So just for that purpose I'll be covering a very closely related topic to this, which is open source intelligence. What is open source intelligence? So any information that an attacker can gather from public sources or public is very loose in this case and then use it for, you know, painting a picture about an individual to say, if you know what kind of products a certain person buys or what kind of websites a certain person visits, that can, you know, you can abstract that to be related to open source intelligence, given that you use open sources to find it. And again, it is often used to aid journalists in investigative processes. So a lot of the times journalists will use information that is publicly available and, you know, try to find, I mean, to further the journalist and that they're trying to achieve. And for an example to that, there's this quite well known organization known as Bellingcat, which does exactly this. And if you can see on the screen, there's this article called Geolocation and a Philosopher's Stone in Kashmir, where they actually, so recently there was a plane that went down in the Valley of Kashmir and they used different images that were put up on social media. So what you're seeing right now is a panoramic image that they've created from three different images. And then they were able to sort of map that to what the actual, you know, locational coordinates were using Google Maps because if you can see the three trees at the back on top and the ones there. So that's sort of, you know, to give you a glimpse into the mindset of what this intelligence work requires. And yeah, to further go on that topic. So this is a project run by this NGO called TTC. And it's called Exposing the Invisible.  And I think, yeah, so this is just a glimpse from the actual guides that they've published themselves. But, you know, we can't go too much into that topic today, sadly. And another example is from a tool that was created by one of the people that works with Bellingcat. It's called Who Posted What. It basically uses the GraphQL API to provide a more searchable, you know, like a more tweakable search feature for Facebook because Facebook search is very limited in what they show you to, you know, provide more ease for the regular end user. Okay. And yeah, let's get into the actual talk now. The stock will mostly cover, you know, how the concept of carrying out active reconnaissance and gathering intelligence by finding and exploiting flaws in web applications, I mean, mainly web applications. And yeah, so since this is quite large of a topic, you know, like intelligence and other later aspects of it, like a lot of analysis is required. And that is something which will take a whole day to, you know, even just dive into how different bits of information can be correlated in piece together. But just to give you a picture of it, you can imagine that from a certain website, like say from Facebook, you get to know through the forgot password feature someone's last two digits of the phone number. And if they live in, if you have knowledge about the general area in which they live, like city or state, you can sort of start assuming the numbers which build the starting blocks. So like, you will get knowledge about the first two. If you know what carrier they use, like Airtel or Vodafone, there are like prefixes for those numbers. So you can slowly start uncovering the entire phone number just by knowing, you know, their online identities, but again, that's piecing together in correlation is a very, very wide topic. So unfortunately, we can't cover that today. Another thing which I wanted to cover was that since we live in a very hyper privacy world now after Cambridge Analytica, there is a tradeoff between, you know, sort of carrying doing open source intelligence and sort of the privacy, which websites like Facebook want to offer to the people and sort of to delve into that a little bit. And also just best practices to avoid mistakes, which will end up harming your users. And I mean, eventually your product as well. But just making applications which are more privacy, you know, conscious and yes. So this slide was called living off the land. And yeah, so I mean, one, one problem with resources like who posted what or stocks can is that since they're publicly available, you know, websites like Facebook will actually try and circum like make sure that service is not running. Maybe users have flag like concerns about the privacy, which actually did happen. So Facebook has cut out GraphQL access from most of these services. And you can no longer do custom search for different topics on Facebook. And yeah, so they're generally very rigid and you don't have a lot of flexibility. And that means you're only given a certain set of parameters where that will be useful to you. So this is a problem with like tools that are online available, like online now, which you can go and use. And which is sort of a foreign to how, you know, why you should rely on yourself instead. So we have application vulnerabilities and intelligence gathering. So this is sort of little, you know, figure that I created, which deviates from the regular open source intelligence sort of methodology. So here it'll go to target identification, then it will target identification being who or what sort of demographic of people you're looking to find information or intelligence about. Then source identification would be sort of what websites they frequent. And then, you know, from when you have a list of the sources where you can gather info from, you can start with the actual identification of flaws. And then comes exploitation. And the last bit would obviously be analysis. So part one is scoping and here. So I'm sure most people are aware, but services like says a matto, Prakto, and, you know, just the services for just about everything in the current year we live in. And that means that you can book medical appointments from your phone. You can find people to repair your AC or you can even rent a, you know, vehicle that will reach you at your doorstep today if you order it now. And what that ends up creating is a situation where there is, you know, a lot of information because it is generally not well protected. And so there's a lot of information you can retrieve about people just from knowing what services they use and then finding flaws in those services. And for instance, that could be, let's say if someone targets, you know, your motorcycle rental account and you've rented five different motorcycles over the course of the last year, they can know whether you're like bullets or if you like street bikes or sport bikes. And while that's sort of obviously it's quite a silly thing to glean from having access to that information, you can also, you know, figure out about people's location, which areas they frequent because a lot of these bikes do have GPS embedded in them just so the company doesn't, you know, end up having a stolen bike. And yeah, so that that can be a more serious aspect of that. And yeah, so here are the two primary methods of using, you know, the sort of method, what I'm proposing here, there is speculative targeting, which is similar to a watering hole attack, which most people, if they've taken a course in security in, I mean, would might know the watering hole attack is basically, you know, you sorry. Right. Yeah, the watering hole. Sorry, I made a false analogy there.   Again, finding this knowledge can also be done through open source intelligence. But yeah, and speculative targeting is where you know that I want to access information about, let's say, you know, people who get their groceries online, and that will again, give you the very wide set of demographic there. So common flaws. Now, the next slide, I think it's going to be covering the like the set of common flaws, which usually persists in web applications, which can allow for this sort of, you know, extrapolation to occur. But obviously, this is not an exhaustive list. This is just what I found from, you know, my experience of discovering these flaws. So there obviously, there's overly permissive APIs, which means that, you know, there's really no checking whether you're authenticated to access a certain resource. And then there's improper access controls and implicit user trust, again, which is closely related to the first. Then the third one is oversight in deprecating API functionalities. Now, what that means is, when you're updating applications, you will create a new API to serve, you know, the functions which you want to, but you will forget to take the previous one offline, or you may have a business choice, which says, okay, there may be people with older phones who can't update to the newer version of the app. So let's keep the API online. And that can sometimes also mean that security bugs that have been patched can be still exploited. And in some cases, it's as easy as noting that API underscore v3 is being called and you just change it to API underscore v1. And then again, use usage of insecure account or resource identifiers. Now, this means cryptographically insecure identifiers, as in, you know, say, when it's sequential, it's like one, two, three, one, two, four, one, two, five, and so on, but also identifies which have a particular level of importance in one context, and they necessarily may not in the other. So I'll cover that as well. And to sort of get into the first example here is right, this is a bug that was found on pay you by Srikanth Lakshmanan. So the bug, I mean, which what this basically allows for to happen is if you know someone's email address, who has ever used the pay you service in the past and pay you is quite a large gateway. So if you have carried out, you know, online transaction, there's a huge chance you may have once used pay you to process your details. And if that person used credit or debit card to carry out that transaction, and accidentally ended up not unticking the save my card function, you could just pull the last four digits of the of their card and the type of card. So like, in this case, it's American Express. And you could just pull that by entering their email address. And that becomes, I mean, that itself may be a little problematic, because it's only 16 digits. And, you know, you may be able to get the rest by other means, like American Express cards only start with a certain digit. And if you know information about sort of bank, they have been numbers are also quite, which are publicly available are also quite a way to figure out what the first four to six digits are. In any case, that's not all. So once you get to this page, you can just you have the option of paying now. So while you're only able to see the last four digits, the actual when you do click on pay now, the actual full card is stored. So it will carry on to the transaction and you enter the wrong pin number, I think three times and card is blocked for the original user. And yeah, so that becomes a problem there. And again, so how this actually happens is what I was mentioning earlier, the use of insecure account identifies. So an email is, as we know, not an insecure account identify in most cases, because, you know, usually isn't tied to your payment information in such a straightforward way. But then you have to consider either sorry, then you have to consider that if someone can just in the checkout flow, enter the email address, and there is no verification done, that that is a sort of example where email is probably not the only thing that should be used.  But yeah, so the problem here is that the website assumes trust just by knowledge. So once they know that, okay, this person clearly knows the email address, and that means they are who they claim to be. That is one sort of clear fault there. And the other one is that if something like an email is being used as an identifier to give you this information, then on top of that, it should also ask, okay, well, we're going to send you a confirmation to that email. But then that becomes sort of a trade off between convenience and security, which is what ails a lot of people. Yeah, so lessons, I guess, what I just said is to first not trade security for convenience always offer security. And the second one is to say, to not use, you know, context sort of agnostic, I would say, identifies since email can mean different things in different contexts. Okay, now this flaw is different than the last one and the one that will follow because it's not entirely a web application security flaw, although it does start off as such. So again, this is similar to the previous one where which existed on pay you which allowed you to find the last four digits. But this one requires a bit more work, but the fruit is also quite better than what you could get with pay you. So here, as you know, PayPal is well known, I think global payment website. It allows you to receive send money and carry out transactions, whatnot. So if you go to the forgot password page on PayPal, and you know, you enter someone's email address, so the attacker would need to know the email address of who they're trying to attack. You'll be presented with the last two digits of the payment method and the payment type, sorry, the payment method type. And from there, what an attacker would do after that is you call the customer support line, which will put you in touch, well not put you in touch, which will have you interact with the interactive voice response system. So the IVR of PayPal would, you know, the automated sort of voice you hear every time you call et al or whatnot. And so you have the chance to interact with that IVR. And what you could do then is, since you already know the last four digits, the IVR will ask you to enter the last four digits to be granted access to the account or to be granted access to, I should say, be able to talk to a customer support representative. But sort of a side effect of that is you have only a hundred tries that you need to get to the last four digits. And I actually did it. I tried it. So it takes around 35 minutes because there's a certain time, which it takes for each phone call. And in about 35 minutes, what you can do is you can find how much money any given person has just on the knowledge of their email address, who they're sending money to. And you know, the last transactions, if they received money, if they sent it out just by having the email address again, this sort of signifies how, you know, one piece of information can then sort of be used to glean so much more. And this will allow for very easy financial profiling for, you know, whoever is being targeted. And yeah. So I mean, there's multiple supporting reasons for this issue to exist. One of them being that the partial disclosure of the credit card itself happened here, which is again, a sort of business issue which ends up affecting user security. And the other contributing factors were that the IVR really had no way of limiting attempts. So maybe the last four shouldn't last four digits of payment information shouldn't have even been used as a way to authenticate you to the PayPal customer support. And then rate limiting, of course, is contributing because you just call, hang up, call, and that's that. So I mean, sort of takeaways from this would be that, you know, context does have meaning. And if you have, apart from your web application aside, channel, say you have an SMS sort of service which allows your users to change information about their account, the level of security you offer should be consistent. And primarily with sort of what is used for authenticating users, that's where a lot of the pain, a lot of the pain occurs. And for users would be, you know, whenever possible, for whatever service you're signing up on, avoid providing information that can be correlated across services. So like say Facebook has your number and so might Instagram, even though they're owned by the same company, they have different sort of backends which may have different, you know, vulnerabilities. So for instance, if you forgot to take off one setting on your Facebook account, someone who has their, who has your phone number on the contacts list can just use it to get to your Facebook account. And you know, there's some issues with that, but let's move forward. So again, I'm just going to sort of hurry over this slide because yeah, so this was a bug that is, you know, that was affecting this American internet service provider known as Comcast. And what happened there was this is actually the Wi-Fi provisioning page for Comcast. And so this was meant to be used by legitimate customers who are looking to, you know, do the first time set up for their router. And so sort of what happens there is the problem is that this link can be used over and over again. And what an attacker had to do was just submit an account ID and a partial home address. I'll get to that later. So like a street or house number or even just the pin code.  So you don't need to interact. You don't need to, you know, launch any actual attacks on the wireless network protocol itself. But yeah, so again, and there's, I think more information to the attacker is that even if the normally partial of the home address, they get to know the full of it. And as well as the router and sorry, the gateway IP address for the router. Right. So, yeah, this is obviously it's green shot off someone else's Wi-Fi name and password that I was able to access. Sorry, that the journalist covering this was able to access through the portal. Sorry. And yeah, I mean, again, so the information which allowed, which would, which an attacker would require for this is just the account ID and several, you know, like a very tiny amount, very tiny bit from the home address. So I was actually unable to figure out how many say like if your address is one, two, three hack away lane, if you would need to enter only lane and you would get to know the whole address. But from when I was able to test with it. So one, two, three, if you put that as the address would work for one, two, three hack away lane. And yeah, so just account ID and, you know, for an internet service provider can be found on the bills that they send you or the emails they may send you someone can shoulder surf and be like, okay, well, I have this person's account ID or, you know, just gather it from another area where maybe the context is not so damaging as in this case, because in this case, if someone knows your account ID, they can repeatedly keep getting your wireless network SSID and password. Unless of course you switch your router to something not provided by this ISP. And yeah, another issue is that user input input wasn't properly verified. So the website just assumed since that, you know, I entered 123 that I was meaning to enter 123 whatever comes next. That's sort of like an autocomplete. But in this case, it really would allow something drastic to happen, because the attacker would then actually get the full address as well. Lesson learned from this, I guess would be don't toss your pen the trash because the hackers gonna go find it and hack your router. And yeah, sort of defense. Now we're going to be covering. So for I mean, you know, as a developer, when you're making a web application or service, you have to ask if, you know, where are all the points where an attacking can interact with any sort of user information, even if about themselves, because then that will help you sort of create first a mind map than an actual map of everywhere where any, you know, data transaction occurs. And so questions you may need to ask yourself could be, does your application make use of, you know, identifies which are differently, like which have different levels of sensitivity in different contexts? Again, that can be email ID or account ID and whatnot. Could also be phone number because phone numbers, I don't think in 2019 are quite private anymore. So, you know, applications like true call or even if you don't have it on your phone, someone that you know may have it on your phone and then automatically your details are also made public, which is quite a bad thing. But yeah, so you have to be sort of, you have to really analyze your application in the way of, okay, if I make this for 10 people now, that will be fine because those 10 people are very small user base, but assume a month from now there's going to be 100,000 people using this application. Now how many of those 100,000 people will be vulnerable to something new which wouldn't be the case if they, you know, they weren't members of my application? That's again, some questions you can ask yourself. And yeah, so sort of addressing any scenario where the, you know, these identifiers can end up putting users at risk. And of course there are multiple other issues which can allow for this.  So again, that was that can allow for user information to be extrapolated. And, you know, ultimately, there's resources online like OSP, which have a lot of the OSP being open web application security project, which have a lot of the flaws which usually end up sort of, you know, causing any sort of information to be leaked or disclosed without authorization.  And it's not going to be, you know, that users are going to be adopting. Like they will sign up using a fake email address and a fake phone number just just because your website may potentially get hacked. So the onus falls on the developers again. But even with that, and users have, you know, sort of a way where they can protect yourself, but a question a lot of people ask is why would anyone want my data in specific anyway? And, you know, sorry. Yeah, so that's not, I would say like really a question you should ask it's similar, it's similar to, you know, I have nothing to hide. So why should I care for privacy?  And yeah, so that becomes important. And then you have to sort of really embrace using privacy enhancing and protecting technologies like not even technology is just, you know, keeping that in your head that, okay, if I'm going to be signing up on this website, really what information am I providing and sort of to adopt that mindset that, okay, if I provide this website with certain information, and that website with certain information, it can be clean that, you know, so they can be correlated for and intelligence purposes, and which will ultimately help you not, you know, end up in a database speech somewhere on the internet. And yeah, good operational security goes a long way. So again, that depends on your third model.  So that may include like getting a new phone number just to sign up on websites, but you know, that's again, something someone who's very paranoid about security and privacy would do. But again, so it does depend on your third model. If you think you, if you have reason to believe you're going to get attacked, you know, you may as well adopt it. Or if you just want to be on, you know, err on the safer side of caution, then you can do that as well. There were a few more slides, but I think this one is not the final document that I had. But in in most case, that that is pretty, pretty much it. And questions if there are any. Yeah, so I'll be putting up the resources for this presentation on my GitHub. I think my GitHub is okay, even my GitHub is limited from here, but you can follow me on Twitter. I will put up the resources for all of what I cited on this slide and, you know, sort of how to dive in as a person looking to do offensive security and also how to protect yourself as a developer, I mean, how to build applications that are privacy conscious as a developer. And yep. Any questions?  So if, you know, as someone working in intelligence, you are able to extract all this kind of information from different ends that may not really break a specific provision of the GDPR. Even in India, we're about to, I mean, we have a draft for the data protection law, which I think it's open for comments again, because it bring up new draft. So if you care about data security and privacy, I'd urge you to give comments to that about, sorry, side. Yeah. Any other questions? Yeah. Uh, thank current thanks for giving us a detailed view on the offensive security.


2023 has already seen gaming laptops become bigger and bolder. However, while everyone is going all in on 18-inch displays, Lenovo is bringing all the performance of Raptor Lake's 55W HX Series processors and the new 175W 40 Series graphics in a smaller 16-inch chassis. First off, Lenovo is kind enough to give you replaceable button mechanisms and keycaps in the box, as well as a plastic tool for doing the whole operation. Keeping up with Legion traditions, the Pro 7 has a sleek and minimalist aluminum chassis with superb durability. The laptop is rectangular in appearance, but there's still RGB around the place, especially the strip on the bottom panel. The new heat vents have diamond-shaped cutouts, which also look interesting. The laptop has a profile of 25.9mm while weighing 2.8kg, making for a heavy notebook that needs a sturdy bag and a fit owner. The keyboard and touchpad are among the best that we've seen on a laptop. The board not only has per-key RGB backlighting, but tons of key travel and satisfyingly clicky feedback. The touchpad is large and smooth as well. We noticed some issues with the responsiveness, however, it felt like a software problem that should be easily resolved. The port selection is staggering, as it's so much that it needs the space on the left and right, as well as the back. The left side has one USB Type A 3.2 Generation 1 port and a Thunderbolt 4 port. On the back, there's the power plug, two more USB Type A ports, an HDMI 2.1 port, one USB Type C 3.2 Generation 2 port, and a LAN port. Lastly, on the right side, there's the fourth USB Type A port, the audio jack, and a switch for the shutter. There's only one display available, but it's so good that you don't have to look for anything else. The 16-inch QHD plus IPS display supports G-Sync, Dolby Vision, and Display HDR 400, all of which make for a great gaming and media consuming experience. The panel gets really bright, up to 552 nits, while showing 98% sRGB coverage, so you can get busy with video editing and graphic design on the side. If you plan on that, don't forget our design and gaming profile, which improves color accuracy, giving you the almost perfect Delta E value of 1.0. We'll leave our profiles linked down below. The Novo is partnering with Harman for the audio setup of the Legion Pro 7, and it doesn't disappoint. While all speakers are found on the bottom, they produce really good sound, with no significant deviations across the frequency range, while the max volume is high as well. Only 2 per 100 people watching this video are subscribers. If you decide to just start following us, we'll be able to reinvest more in our laboratory thus making even more helpful videos for you. Thank you, you're awesome. Finally, we get to the good parts.  In benchmarks, the Legion 7 Pro shows less performance than both the MSI Raider GE78HX and the ASUS ROG Strix Scar 18. The laptop is still insanely fast, it's just that the other two are faster. The 175W RTX 4080 is very competitive with the one inside the MSI device as well as the new Helios 18 from Acer. However, it's best if you show some real world scenarios in games. We test on an external full HD 1080p monitor, so the FPS on the QHD plus display of the Legion 7 can be a smidge lower, but you'll still have a great time. In God of War, for example, we get 157 frames per second on the ultra preset. Far Cry New Dawn also runs very well, reaching 137 frames per second on ultra settings. If you prefer exploring a dystopian earth, Death Stranding is the game for you. The RTX 4080 is able to run the game at 192 frames per second on the very high preset. The task of cooling the laptop is left in the hands of a large vapor chamber with two fans. It does a very good job at keeping the CPU running at high wattages, spiking up to 171 watts for a few seconds, while being able to maintain 137 watts for more than 15 minutes. On the side of the GPU, the RTX 4080 maintains 174 watts without a problem, while keeping a clock speed of more than 2400 MHz. The high power limits do mean extra heat, which bleeds into the base, heating it up to 51 degrees Celsius in certain hotspots. This isn't a laptop oriented towards efficiency, so even with a huge 99.99Wh battery pack, we get around 6 hours and 40 minutes of web browsing, or 5 hours and 58 minutes of video playback. Lastly, the inside of the laptop houses two Sodom slots for up to 64GB of DDR5 memory of up to 6000 MHz. For storage, there are 2 M.2 slots that support the faster generation for SSDs. Both the RAM and storage slots are covered by metal brackets that should help with lowering the temperatures. You can check out our teardown video, which shows how to open the laptop for upgrades and maintenance, cleaning, repairs, and more. The Lenovo Legion Pro 7 keeps the Legion traditions going, offering a sleek twist on the gaming notebook formula. It's not alone in its quest for performance, so while you can get other powerful laptops, some even more powerful, there's nothing like the package that Lenovo's got going, so it's certainly a strong contender in the space for 2023. Don't forget to check out our detailed review on our website laptopmedia.com.


If you find yourself hungry in between meals, that's actually perfectly normal. Snacks can be a really important part of your diet. They give you energy in between meals and actually can prevent you from overeating at your meals. When choosing a snack, we're looking for two crucial things. Protein and carbohydrates. Protein helps to fill us up while carbs give us sustained energy. An example of a carbon-protein pairing can be anything from a string cheese or a piece of cheese with a piece of fruit or it could be peanut butter with a piece of fruit as well. Peanut butter and banana is one of my favorite combinations. Another example of that perfect pair could be something like nuts and seeds paired with a green yogurt. The nuts and seeds give you lots of good protein and healthy fats while the yogurt would give you protein and carbohydrates. Protein bars can be a really simple solution to on-the-go snacking but we have to make sure that we're choosing the right protein bar. Some of these can have as much grams of sugar as a candy bar so it's always important to check the label. My rule of thumb is looking for more grams of protein than grams of sugar. A couple of options that follow that rule are one bars as well as the cliff-way protein bars. Here's another example that does all the work for you. It's a package that comes with tuna that's high in protein and crackers that are carbohydrates. This is perfect for on-the-go. With all that snacking you might get thirsty. Water is always our best choice but if you get tired of water you can always try something like seltzer water or tea. We just want to make sure that our tea is unsweetened so it has zero grams of added sugar. Same goes for our seltzer waters or flavored waters.


We're here in Bilky, a village of 8,000 people with a total community size of about 20,000. In this community, five schools have been allocated by local authorities for housing of displaced Ukrainians. Most people are coming from conflict-affected areas around Kyiv and Kharkiv. People are extremely distraught, but local authorities are extremely well-organized and providing services. There are 32 people staying in the school behind me and roughly 1,100 displaced persons are staying in households around this community. Needs are looking at basically NFIs, mattresses in particular. They are well-provisioned with food for now, but they expect a large influx of new displaced persons in the coming days and weeks.


What's up everyone? Say it down here. Welcome back to another video. Today is a highly requested video and that is how you can use your PlayStation 4 external hard drive on your PlayStation 5 console. Let's get right into this. So if you already have an external hard drive that you use for your PlayStation 4, all you are going to do is simply unplug it from the PlayStation 4 with the USB cable and plug the USB cable into the PlayStation 5. That is simply all you have to do to be able to use it on your PlayStation 5. Now keep in mind that using an external hard drive on the PlayStation 5 is mainly for PlayStation 4 games. Not only can you store PlayStation 4 games on it, but you can also play those PlayStation 4 games straight from the external hard drive. Whereas some external hard drives you can download PlayStation 5 games onto them, you can't play them straight from the external hard drive in order to play that PlayStation 5 game. You must then download it from the external hard drive and transfer it over to the PlayStation 5 console in order to play it. Now if you're looking to expand your PlayStation 5 storage, what you're going to need is an SSD hard drive and there is actually a little slots underneath the cover of your PlayStation 5 just for this. Now it is recommended from Sony that you get one with a heat sink. If you do purchase one without the heat sink, all you're going to really need to do is to purchase from Amazon a 10 to $15 heat sink depending on your size. Install the SSD onto the heat sink and then you can install it into the console for your PlayStation 5 to extend the storage on your PlayStation 5. Right now you can get one terabytes of additional storage or a two terabyte option as well. In the future it's expected that there are going to be four terabytes and six terabyte options for the SSD, but right now you have the option of one terabyte or two terabytes and there is a slot in the PlayStation 5 to expand your storage. I do have another video on how to do that because I did expand my storage and put an SSD on my PlayStation 5. So there is a video I have on how to do that, but this is how you use a PS4 external hard drive on your PlayStation 5, simply plug it in, but it's mainly used for PlayStation 4 games on your PlayStation 5. Not only can you store it on there, but you can also play it. PlayStation 5 games, some external hard drives you can download on to that hard drive, but in order to play it you have to transfer it back, which is a hassle in my opinion. Getting an SSD and installing it in your PlayStation 5 is the better and easier option. Hope you guys enjoyed this video. See you guys in the next one. Please take care. Peace.


this coming Monday. I want every single one of you and every member of your brand to start your workday at 3 a.m. I'm just kidding. Take a breath. Here's what I do want you to do. I want you to spend the next several days heightening your clarity and awareness on the basics that you need to be focused on this coming year. I'm going to say it again because it's really important. I want you to spend the next several days heightening your clarity and awareness on the fundamentals that you and your teams need to work towards mastery of primarily during the unseen hours so that you can become the best version of yourself and make a maximum contribution to everyone in everything around you.


Proudly, We Hale! New York City, where the American stage begins, here is another program with a cast of outstanding players. Public service time has been made available by this station to bring you this story, as Proudly We Hale, the United States Air Force. Somewhere over Upper New York State, a plane flies, a multi-engine plane, identity unknown. It's a clear night, but many of the stars in the moon are covered by high-flying clouds. Why is this plane there? Where is it going? What is it going to do? It may be one of ours, lost, off course, or in trouble. Or it's an enemy plane carrying tons of destruction in its body. There's a vital job ahead for the Air Defense Command of the United States Air Force. Proudly, We Hale! All the officers and men of the United States Air Force Air Defense Command and all the civilian personnel serve with that command. Our first act curtain will rise in just a moment. But first, men, could this be you four years from today? A man skilled in the sort of technical knowledge that can pay him huge dividends the rest of his life? A man with a kind of experience that produces experts. A man with the confidence and advantages of world travel and a nation's respect and esteem.  Well, you know it can be you in the United States Air Force. Yes, men, you'll go places faster as an airman in the United States Air Force. If you qualify, you'll receive the finest technical training from top experts of the country. And you'll earn while you learn. That's a good deal right there. And there are more than 400 different subjects in which you may be trained, preparing you for such growing fields as radar, medicine, personnel, meteorology, and many, many more. And as an airman, you can gain the valuable experience and enjoy the thrills of world travel. Yes, indeed. You want a future that looks brighter. The United States Air Force will make it so. So you see your nearest Air Force recruiter right away. Get all the facts about your future as an airman. Remember, you'll go places faster in your United States Air Force. And now your United States Air Force presents the proudly-we-hail production, Danger Has Four Engines. Peter King's scramble is on its way. There's an unidentified aircraft over Rome, New York. It may be one of ours, or it may belong to the enemy on its way to destroy a major American city. Two jet planes, F-86Ds, piloted by Lieutenant Leland Rowe and Lieutenant Arthur Poole, are armed with air-to-air rockets and knifing through the night, ready to intercept it to shoot it down if necessary. But who first spotted this plane? How did it all start? Well, it all started at a ground-observist corps observation post in a little town of Barnabelle in upper New York state. It's just a bit after 11.30, Grace. A little less than half an hour to go. Oh, I don't mind. Never seems long to me. It's the mayor's wife. I can sleep late in the morning. But you have to be up at the crack of dawn to do your farm chores. This 10 to midnight shift suits me just fine. There are plenty of planes flying over at this hour. But on the other hand, if the enemy were going to try anything, it'd be more likely they'd try it at night. It's kind of dark tonight with those high-flying clouds pretty well hiding the moon and the stars. That's dark, but it's clear. The plane could fly low and avoid trouble by watching the lights on the ground. The ceiling must be up around 10,000, 15,000 at least. You hear that, Jim? Sounds like a pretty big one coming from the north. Could be a twin engine job. Listen again. I think it's a multi. Yeah, you're right. It's a four-engine plane. It's a little more northeast than due north, though. I'll agree with you there. It's heading this way. The sound of the engine is getting louder. I'm calling it in. Aircraft flash. The operate is getting the Syracuse filter center. The plane's flying very low. I guess about 2,000, not much more. And it is. Go ahead. Aircraft flash. One multi-engine. Unknown. Low. No time delay. Quibet Papa 4-4 black. Overhead. Flying southeast. What's that, Grace? Why would a multi-engine be flying so low in this area? As you said, he can't be much above 2,000 feet. It doesn't make much sense if it's one of ours. The mountains is high as 6,000 feet, not too far away. But if it's an enemy plane, trying to dodge the radar, then... Jim, you don't think that... I don't know what to think, Grace. I just don't know. Multi-engine low. Quibet Papa 4-4 black. That means that the tip belongs right there. That's the initial report on that one, isn't it? No, it's been a quiet night. That's the first call in I've had in 10 minutes. Maybe I should have stayed at the dorm tonight and studied. Ah, you wouldn't do that. We've got a schedule here. When you're scheduled for duty, you're scheduled for duty. Oh, come on, Charlie. Where's your sense of humor? You know I was only joking. But, seriously, I've got to buckle down. If I don't start studying, I'm never going to be graduated from Syracuse University. Don't take it from me. Speaking as a cab driver, I say don't make that mistake. I know what it means not having a college education. Oh, you haven't done so badly, Charlie. You've got yourself a nice wife, three good-looking kids in a house, and a pretty nice part of Syracuse. There are lots of guys with college education who don't have half of that. No, I'm not complaining, but... I'd still like to have had a college degree.  Lee? He sure is. With honor. Leland Rue. Now, that has a name that's real crazy. Well, maybe to us it sounds a little different, but Lee's from New Orleans, and down there it's a very common name. Way back somewhere his ancestors were French. Don't make a mistake. I think it's a fine name if you really love him. Think of it in a couple of years after you finish school, you'll be Mrs. Leland Rue. I know you're going to be very happy. I think so too. He's coming up here this Saturday for the big dance, and he's bringing a friend of his as a date for my roommate. Gee, I can hardly wait. They say that's love, but you better get on with your studying, and remember what you said a few minutes ago. I will, don't worry. I'm going to get ahead all the rest of this week, so I don't have to worry about books or classes all weekend. Smart girl. Uh-oh, there goes my telephone light. It must be another report. Air defense, go ahead. Aircraft flash, one multi-engine, very low, no time delay. Quebec Papa 3-3, northwest one-half mile, flying southeast. Roger, check. Thank you. Seems to be a second report on that multi that Barnville called in a few minutes ago. Yeah, I think so. Soon as I get this second pip down on the map, I'll have a track, and I'll call it into the direction center. Let's see. Quebec Papa 3-3 is just about here. I have an actual on. Quebec Papa 3-3-11-46, direction southeast, track number 45. One multi-low. Thank you for the center, Roger, and out. That's strange, Charlie. I just noticed. What? It is multi. What's it doing down so low over terrain like this? Hey, you're right. It shouldn't be flying so low. Unless it's in trouble or lost. But is it we're an enemy plane trying to dodge the radar by flying lower than the surrounding mountains? Ah, it couldn't be. Yes, it could, Charlie. Americans make a mistake when they keep saying and thinking that it can't ever happen. But there are lots of planes today that can fly over the North Pole or across the ocean and drop bombs, and some of them could even get back home without refueling. Yeah. It's kind of frightening. Well, it's good to know that we have fighter intercept the squadrons on the alert all the time, but just that kind of emergency.  He sure is. Hey, you suppose he could be on this mission? Now, take it easy, Charlie. We don't know yet that there is any mission. It could be just a scheduled flight. Direction center could know all about it. Could be. Time like this, though, that makes me glad I'm part of the ground observer corps. This one could be the first real enemy plane to try and bomb us. And if it got stopped by the air defense command, it would be because the GOC was on the job. Charlie, it proves we're needed, that we're important, too. Yeah, that's right. The radar net can only do only so much. It can't cut through mountains when the plane is purposely flying low. Although the highest mountains around radar can't work very well.  And they do, and they can. And that's the thing that'll save us. If? If what, Charlie? If the Air Force boys can find a plane in time. You're listening to the proudly we hail production, Danger Has Four Engines, and we will return in just one moment for the second act. It's tailor-made for young men. What is? Why the United States Air Force. You see, young men like a job with a future. A job that enables them to go places faster. A job where they can learn technical skills and gain the kind of experience that belongs to lifelong security. Well, if you qualify, that's the kind of experience you can get as an airman. Young men like to earn while they learn. And as an airman, you'll receive full pay all the while you train. And young men like a job with plenty of travel they like to get around. Well, airmen, go where the Air Force goes. Enjoy all the thrills and advantages of world travel. And young men like to belong. They like to be looked up to, respected. Well, believe me, when you're an airman, you belong to the greatest young man's team in the country. You wear the coveted Air Force blue uniform, admired by all. Yes, indeed. It's no wonder young men like the United States Air Force and believe me, you will too. Because the Air Force is tailor made for young men. As an airman, you'll have the opportunity to qualify for any of more than 400 specialized subjects. Receive valuable training in such fields as radar, photomapping, meteorology, air traffic control. You'll go places faster, so see your nearest Air Force recruiter right away. Make your future a sure future as an airman in the Air Force. As a leader in Air Force blue, you ensure your country's future and your own with a real fine technical training program.  So believe me, fellas, you see your local Air Force recruiter and do it today. It's tailor made, your Air Force for you young men. You're listening to Proudly We Hail and now we present the second act of danger four engines. It's a multi-engine plane. It was first spotted by the ground observer corps. It was reported the second time by a ground observer corps post. The filter center plotted its course on a large map and then called its position, direction, altitude, and type into the direction center. Now comes the big question. Is it one of ours or is it one of the enemy? If it's an enemy plane, it has to be contacted and destroyed before it reaches its target. And this is a job for the fighter interceptor squadron of the Air Defense Command. But first, the Air Defense Direction Center has to be sure. If the plane belongs where it is, it has to be left alone. Thank you, filter center. Now to check on this baby. Is there or isn't there a multi-engine schedule to be over in near Rome at this time? Well, let's see. One C-47 due to be over Syracuse at 11-10. Well, that's not it. Report says a multi-engine, that means more than two engines and a C-47 has only two. Two commercial flights due into Syracuse from the west around midnight. Well, if it's one of those, that pilot is sure lost. Multi, nope. As far as flight plans show, there's no plane definitely supposed to be in that area heading in that direction at this time. Hmm, I'd better call Stuart and fast. Get me the hot room at Stuart. Emergency, Roger. Now where is that Syracuse filter center's last report? Oh, there it is. Stuart, this is direction center. Scramble 2, Quebec Papa 3-7-3-5-1146. Direction southeast, track number 45. One multi, very low. 3-7-3-5-1146. Direction southeast, track number 45. One multi. Roger, Stuart, and out. This is where you came in. This is how our story started. The two F-86Ds piloted by lieutenants Leland Rowe and Arthur Poole have just taken off. The time, 1156, just 20 minutes after the first spotting of the plane over Barnabelle in New York. The two pilots check with direction center now that they're in the air. They too know where this unidentified aircraft is. This bogey in the sky that could be loaded with bombs could spell death. This is Peter King airborne at 56. Two chicks vectoring 3-1-5, angels five and climbing. Peter King, this is direction center. Bogey at 12 o'clock, 150 miles. Direction center, this is Peter King. Roger and out.  Roger Lee. This bogey could sure be it coming over the pole across Canada and then down across New York to its target. Roger. It gets us. Roger, Art. Roger and out. Another report on that, Malty. And how? And it seems to have changed direction. It's heading south now. It could be right on its way to New York. Direction center, I have an actual on. Quebec Papa 24, 1201. Direction south, track number 45. One Malty, low. Roger, filter center and out. Calling Peter King, calling Peter King. This is Peter King, go ahead. Peter King, bogey now at one o'clock. Heading due south, 100 miles. Roger and out. Two silver dots, street through the night, searching, probing. They're looking for a plane, a big multi-engine plane. But in the vastness that is the sky, this is like looking for a needle in a haystack. Fortunately, the two planes are not alone in their search. At Ground Observer Corps posts, there are hundreds of pairs of eyes also straining to see. Hundreds of pairs of ears reaching out to hear. Phone lines are open and ready. Hands are alerted. Alerted to plot the plane's course. This chain of defense, both military and civilian, is ever tightening on this threat in the night. This danger with four engines. Bogey now at 12 o'clock, low at approximately 2,000 feet, 20 miles. Roger and out. Got it, Lee. What now? Oh, you better start getting down, keep your eyes open. Don't worry, I will. It's clear enough tonight. I ought to be able to spot the plane from quite a distance. I wish those clouds weren't covering up the moon. You can't have everything, Art. Be thankful you have good eyes. Up ahead, Art. 12 o'clock. You see something? I think so. Could be. We better get in for a closer look, see. Roger. Rockets ready? Roger. This is Peter King, Tally Ho. Roger, Peter King. Identify aircraft if it's an enemy destroyed. Roger and out. Art, I'm going to make a pass. Give me some cover. Roger. What do you see, Lee? I would be sure. Looks like one of ours, a C-54, but better make a pass yourself. Roger. Wonder if it's lost or what? I'm going to make another pass and try to get its Air Force number. Roger. One. Is that what you see, Art? Two, three, two, one. Roger. Direction center, this is Peter King. Plane identified as a C-54. Air Force 28321. Heading 180 at 2,000 feet. Waiting further instructions. Peter King, your identification verified. Return to base. Roger. Me too. I missed you. Hey, look at Art and your roommate dancing. They seem to be getting along just fine. Oh, that's because I have a terrific roommate. Well, Art isn't so bad himself. Not bad, but I prefer you. I'm glad you do. I was thinking about you a lot the other day. Oh, only the other day? Well, particularly the other day. Why? We had a lot of excitement down at the filter center with an unknown multi-flying very low at night. Say, that's a coincidence. Art and I had a little trouble with one ourselves. What night was it? Tuesday. No fooling. About what time? I think it was just about 1146. 1146? Well, I have news for you, Miss Quinn. You and I were working on the same bogey. While I was taking the calls on it, I was wondering what he might be.  From all indications, it looked like the real thing. Was it, Lee? When I didn't read anything about it in the papers the next day, I figured it wasn't. But if it was one of ours, why did you have to go after it? I thought all planes left flight plans before they took off. And if it was lost or in trouble, it could have contacted someone by radio and reported itself instead of sneaking in and scaring everybody. Well, it seemed it didn't want to. What do you mean it didn't want to? It was all part of their defense command test. They flew low on purpose to simulate an enemy plane trying to dodge our radar net. And they kept radio silence to add to the effect. Did you find it in time? I'm sure it did. It helped that the night was clear, but... you know, I'm... I'm proud of you, Janet. Oh, Lee.  No, no, no. I was just doing my job, but... you and all the other ground observer corps people are volunteers giving up your free time. And you did a professional job. You may not know it, but you made our mission possible and helped make it successful. Without you spotting it in the first place, we still would be on the ground. It proved something. When the greatest Air Force in the world and the civilians it's protecting work together? Well, that's a powerful combination. Just like we're going to be. You and me. Yes, Lee. Just like you and me. You know, it's often been said that to speak in terms of a man's interest is to win that man as your friend. Well, that's what the friendly people over at the Air Force recruiting stations all over the country are doing every day. They're telling hundreds of career-minded young men about the outstanding opportunities available to them in the United States Air Force. And they're describing career opportunities that suit every young man's interests and aptitudes. For example, well, if you're an amateur photographer like myself you can turn your basic knowledge into a colorful and highly interesting career by taking full advantage of the free training available in the Air Force Photography School. The world's finest. Then on the other hand, well, maybe you're interested in the new field of guided missiles or rocket propulsion. Well, here too you can get free training that qualifies you as one of the best military technicians in the world. Whatever your interests, whatever your aptitudes, your Air Force has a job for you. So you visit your nearest Air Force recruiting station at your earliest opportunity and find out how you can become an airman in the United States Air Force. It's a career opportunity of a lifetime. Be a key man, become an airman. Train in one of the 400 jobs vital to your country and learn to perform that job all over the world wherever the Air Force is stationed. How do you find out about this? Find out about your opportunities in Air Force Blue? It's very simple, fellas. See your local Air Force recruiter. Complete information about you in Air Force Blue. This has been another program on Proudly We Hail. Presented transcribed in cooperation with this radio station. Proudly We Hail is produced by the Recruiting Publicity Center in New York for the United States Air Force, and this is Dick Herbert speaking and inviting you to tune in to the same station next week for another interesting story on Proudly We Hail.