Everybody forced here ripping 2021 contenders optic football hobby ten box half-case Number nine. We're on number nine on release day Andrew P. Bills Bradley C. Dolphins Brennan R. Raiders Dan M. Patriots Daniel W. Steelers Don G. Rams Edgar B Washington Eric R. Bengals George Y. Broncos Chiefs Seahawks Henry J. Bears James H. Giants Jamie C. Panthers Jason B. Cardinals Jerome J. Ravens Jerry B. Vikings Jesse O. and Niners Jim J. Titans Joe M. Browns Justin B. Chargers Kendall with the Texans Kieran with the Cowboys Lost my spot dang it Kendall Texans Kieran Cowboys Matthew M. Falcons Nathan A. Colts Richard S Eagles Bucks Scott W with the Packers Scott M. Jags Jets Steve H. Lyons and Tyler K. Sains. Let's get it started. Good luck everybody. Thank you very much for joining Come on. Let's see more gold vinyl. Come on now One more gold. I want low numbers all big hits. Let's see what we got Let's see some heat Oh, we got I think we're at gold first pack We got a base mclauren and simi fohoco. It looks like we do blue rookie for the Ravens Rashad Bateman's of 99 And gold Cardinals winning ticket Kyler Murray Seven of 10 Nice Love to see a big congrats to Zona seven of 10 on the Kyler winning ticket gold That mag for you Broncos rookie ticket auto Patrick Surtain the second PS2 Uh, yeah, Sean's with me today Rookie ticket auto red josh palmer big palm rps to 149 Biggest card I pulled. I don't really know to be honest One of one tom brady kaboom was big That's what comes to mind. I've got a printing plate auto coming up. It looks like Anthem cracked ice. So we've got season ticket ryan tana hill Rashad Bateman rookie ticket Eagles cracked ice rookie davante smith Whoo, wait One of 22 There you go birds And we got x's and o's broncos bill romanowski and john elway on the silver Jaguars rookie ticket auto is luke ferrell and one-of-one cults rookie ticket auto Is kylin granson you go cults on the one-of-one That yellow printing plate the yellow ones always have like You could barely see anything because they're so bright Yeah, yeah, you're right. Hey, that was I don't even know if you've seen any davante smith autos today. They're car rondale moor rookie Silver season ticket Matthew Stafford rams And blue x's and o's for the dolphin zady and howard jalen waddle to 99 So the davante smith did not fit in a mag Redemption goes to the panthers rookie ticket auto blue jc horn nice Solid hit for the panthers on the horn panthers have a lot of hits in this Some hubbard and marshal all day today And jet's rookie ticket on card auto is michael carter michael carter Yeah, I think you're right nick. Hopefully you're right. I want I want to see a mac or trevor here So the davante smith like I said was not able to get magged it is cut just a little bit long It's like just a hair We'll still probably probably ship it though for you eagles We got cd lamb kellen mons silver for the uh ravens rookie rishad bateman In orange x's and o's packers jay ear alexander erin rogers to 50 I'll do my best p There's gonna be something big in that case. I think it was when it's only up like one case I feel like there's always something big Hunter long rookie ticket auto dolphins and sheaves rookie ticket auto nova gray Yeah, there's a few big names. We've seen very little love so far a lot of elusive guys in this product We've got dj mor and rookie elisha mor Red joe mixon to 175 vangals silver winning tickets cheats tyree kill. Yeah earlier. They were salkans rookie ticket auto ritchie grant I just said a second ago a panthers again here variation Blue rookie ticket auto on card terrace marshall jr. To the 30 Nice one there panthers color match, too Angels to do show hey a solid and trade him to a winning team like the red socks Let him contend, you know All right, we've got joe mixon ron. Dale more silver for washington antonio gibson Blue round numbers patrick sertan the second and gc whore the first two defensive players drafted To 99 we're all the die one two three top broncos four five six bottom panthers That is a two two top broncos Bengals rookie ticket auto chris evans captain america captain cincinati Colts blue rookie ticket out kylan granson got a printing plate and a blue now for granson It's a 99 Colts color match That was a uh, yeah earlier was Like I said, we're gonna be talking about that for a while Vic card. Come on big rpa. Come on. We're all ready. We're all ready for big rpa car and lance Got blue season ticket mark andrews ravens to 99 blue mvp contenders bangles joe burrow also to 99 there you go cincy jaguars rookie ticket auto mackay sergeant rpa cardinals rondale morta 50 Zona nice hit a lot of rondale today, too Rob, you did not just use contenders and quotes talking about the red socks as a twins fan We got base justin herbert and simmy fohoco Red christin mccaffrey out of Yeah, i don't 175 uh silver for josh allen mvp contenders bills Redemption ravens rookie ticket auto odape owey You go ravens and we've got Cracked eyes rookie ticket on card auto seahawks dwayne s-scrige Boom there you go seahawks We'll mag the scridge. I'll have to get a picture of that one send to the sam Yeah, we all have the yankees in your division Who do not lose baseball games? the red socks i think would be No more than like a game or two back and ended in the central right now Red Sox can beat up on a lot of bad teams lately man the record is looking a lot better Got kyler mac jones rookie base Got orange trask to 50 for the bucks not a lot of trash could they either? Optic illusion cults derrius lennard Is he the only optic illusion? I feel like we've only pulled derrius lennard optic illusions inserts It was uh half case number three, right? There's half case number three if you want to go back and watch it rob. It's uploaded J2 fele rookie blue ticket auto there 1099 jaguars See rob tied tied for the lead in the central if we were there Yeah, cleveland surprisingly good. I feel like they're always surprisingly good Got rookie ticket auto vikings on card. I'm here smith marcette. All right, come on Show us something big here contenders optic. Come on now Show us a boom. We've got base dk met cap and davis mills Blue joe burrow season tickets and 99 a couple of burrows to 99 for the bangles Up and coming deandre swift lions Ravens rookie ticket auto as tyson williams Bengals player of the year green pulsar auto joe burrow Trish Joe scheiste baby five out of 30 huge burrow Joe scheiste eric are there you go Love joe v's autograph man. That's the best Probably looking for some chase end up with some burrow. I mean Sometimes the owl goes to the bangles a pretty solid break. Let's see what we had Autos tyson williams jade souffle emeer smith marcette's jc horn redemption blue for the panthers Ravens odafe oa on the redemption rpa rondale more mackay sergeant kylan granson chris evans terrace marshal jr Richie grant nova gray hunter long michael carter luke ferrell printing plate kylan granson for the Colts On the auto josh palmer and patrick sertan the second We've been live for two hours and 13 minutes Got cracked ice rookie debonte smith. This one was cut a little bit long. It did not fit in the mag not quite anyway It was close But we're not we're not about to force that into a man. No way gold-winning ticket cardinals kyler murray to ten. That's a sick one cracked ice rookie ticket auto dwayne eskrid seahawks And green pulsar player of the year contenders auto joe burrow to 30 Heck yeah another half case coming up. Thanks everybody


God himself pouring out the full cup of his wrath the full cup of his indignation in full force upon the Lord Jesus Christ which the Lord Jesus Christ drank to the dregs He bore that wrath in his body on the tree the punishment of the Almighty God do our sin All the weight all the misery all the shame all the guilt that was rightly reserved for us poured out upon him And he bore that as our substitute that you and I might be free That we might be reconciled to God that we might be justified that we might be forgiven of our sins And instead of being poured out upon us in the fires of hell It was a poor it was poured out upon Christ our substitutes. He hung upon the cross


In my video on henna, I talked about the study that proved lead could be absorbed through skin and into the body. Researchers applied lead to someone's left arm, and then they measured the level of lead in the sweat coming off their right arm over the next few days. There was a big spike proving that lead can go into your body, but also proving that lead can go out of your body. If we can lose lead through sweat, how about using sweating for detoxification? Look, no person is without some level of toxic heavy metals in their blood circulating and accumulating, and hey, cultures around the world have viewed sweating as health-promoting from Roman and Turkish baths to sweat lodges and saunas. But what does the science say? When I looked up saunas, I was surprised to see this, a study on the detoxification of 9-11 rescue workers, with a regiment of exercise, sauna bathing, and supplements. They reported on seven individuals, and evidently during the month before the treatment, PCB levels in their blood stayed about the same. In contrast, all rescue workers had measurable decreases in their PCBs following treatment, and they reportedly felt better too. They had all sorts of symptoms, respiratory, neurological, musculoskeletal, but felt better after the treatment. Improvements consistent with nearly 400 others they treated with the same protocol. Wait a second, if they treated 400, why are they only reporting the results from 7? That's a bit of a red flag, but not as red as this. The detoxification regimen was developed by Hubbard, as in L.R. Hubbard, L. Ron Hubbard, the founder of the infamous Church of Scientology. And the lead author of the detoxification paper also appears to have failed to disclose his financial conflict of interest for presumably profiting off the treatments. Sweating does, however, represent a time-honored treatment in the field of medicine for mercury poisoning, going back centuries. But time-honored medical treatments include drilling people's skulls open to release evil spirits, or even giving people mercury itself. Remember Mercura Chrome? What do you think the Mercuro stood for? In fact, some believe Mozart died of mercury poisoning trying to cure ascephalus. Though, of course, all the bloodletting he got probably didn't help either. Another time-honored medical treatment that makes Scientology saunas look pretty mild in comparison. But a case report was described of a person who had apparently recovered from mercury poisoning after six months of sweats and physical therapy, but maybe he would have gotten better anyway. You don't know until you put it to the test. Mercury wasn't formally studied, but lead was put people in a 200-degree dry sauna for 15 minutes. And based on sweating rates, those 15 minutes in the sauna would force out about 40 micrograms of lead from the body, with some people getting rid of 100 or more per session. So you could drink like a gallon of chicken broth, and even if you absorbed all the lead, you could be back to baseline after just one sauna session, even after drinking bone broth. Is it safe for children? Based on what we know now, sauna bathing poses no risks to healthy folks throughout the life cycle, though medical supervision couldn't hurt. Now this doesn't mean it would be as effective in children as adults sweat a lot more than kids, and of course, kids are the ones who need lead detoxing the most. There's a clear need for robust clinical trials to test all this, but even if it works, it's not like some poor kid in Flint's going to have access to a sauna. That's why I was so excited to find this paper, the change in blood lead levels of basketball players after strenuous exercise. Saunas aren't the only way to sweat. What about strenuous physical activity? Evidently, there was a study that found aerobic endurance training led to a drop in lead levels with rowing better than cycling. But for how long, how intense? I don't know. I don't read German. Verzeihung. But I did find the study. It looks like they ramped up the stationary bike 50 watts every two minutes until exhaustion, so probably just a few minutes with no significant before or after difference in blood or urine lead levels, whereas an hour-long endurance exercise row did seem to drop lead levels about 12%. This one I can read, though, a single intense training session on the court and college basketball players blood levels dropped down to, wait a second, they went up? A significant increase in blood levels? In fact, by nearly 300%. They suspect it's because where they were playing was so contaminated. This study was done in Turkey where the lead levels in the air are evidently so high that all that extra breathing evidently made things worse, which I think underscores an important point. All the dietary tweaks I've talked about for lead poisoning and sweating it out could be thought of as more expedient and cost less than primary prevention, getting at the root cause. This, however, represents a retreat of sorts from a commitment to cleaning up the environment and getting rid of these hazardous pollutants in the first place, where lifestyle interventions should only be thought of as temporary. Solutions and continued emphasis must be placed on eliminating lead in children's environments in the first place.


Let's spice up the background a little bit What's happening everybody? So today will be a little bit of a different video We're gonna talk about how to stay motivated to make videos on YouTube for me This is a very important topic because making videos on YouTube isn't easy. It's a grind I had people asking me how do you make your videos look so easy? But in fact, there is a lot of work involved. There is no easy way to this There's so much going on behind the scene that you as a viewer can't really see to be honest Even though my channel is growing There are certain days where I question myself if all of this work I'm doing is worth the effort because at the moment I'm not really making enough money to sustain this channel I also wondered how other creators stay motivated to make videos on YouTube What is their motivation to keep going for that reason I teamed up with a couple of my Filmmaker friends from around the world to do a collaboration on this topic They all have different sizes going from below 1,000 subscribers up to 20,000 subscribers Hopefully by listening to their stories, you will find your own encouragement to keep going with that said Let's start with our first guest Hola, my name is Tony Leder Klarsen and my tips for staying motivated on making YouTube videos is Spend 30 minutes every day working on your channel I usually live here on the Costa Blanca in Spain But I recently went to Norway my home country to work for several months and in the beginning in Norway I will make stupid excuses for not making videos like when I get back to Spain Then everything will become much easier and then I'll make more videos and blah blah blah But the truth is with that mindset I would probably have made up stupid excuses when I came back to Spain as well because life happens There's always a reason for not doing something So I decided to start spending 30 minutes every day working on my channel I would set a timer for 30 minutes work on a video and when the timer was finished I would stop working on the video and I would cross it off in my calendar and after 30 days straight of doing this I had produced and posted Four videos on YouTube But the goal was never to produce one video per week The goal was always just to do something small every day No matter the outcome and this led me to rebuilding the habit of working Consistently on my YouTube videos and I'm so glad that I did and I actually picked up this tip from a course That I took a course from Matt Diavella about building new habits So if you're in the market for building new better habits in your life, I highly highly highly recommend this course Hey guys, my name is Tanya I'm a full-time freelance videographer and owner of the creative nest you can find me on YouTube at slash the creative nest So my number one tip for staying motivated as a creator So here's the thing this video that Bennett has organized where creators share tips for staying motivated is something that I should be watching And it's because I actually really struggle with finding the motivation to create content Consistently because I do it every day in my job all the time for other people my clients It's kind of that classic case of the maid with a messy house or the cobbler with holes in her shoes Do they still call them cobblers? I think that's still a thing But what has been a motivator actually is uh you other creators viewers fans if you will It's your comments subscriptions encouragement all of those things are so so valuable to a creator like myself The fact that someone is actually watching what you put out into the world rather than you know So my number one tip is just engage with your viewers whether that's five or five thousand respond to all of the comments Thank them for watching ask them for topics ask them if there's things that you could improve on Subscribe back to their channels create a community around the content that you're sharing when I don't put out a video for a little while I have viewers that hold me Accountable and because I've actually built a relationship with a lot of these viewers It's kind of like a friend holding me accountable for me It's creating content for an audience that I can actually put faces or user names to especially considering my channel is actually fairly niche I focus Pretty exclusively on content with the fuji film specifically the fuji x t3 So the fact that they're following me or commenting or paying any attention at all means that we probably have something really important In common now this tip also goes both ways This means that you should also be engaging with other creators whose content you enjoy watching or that you admire Subscribe to their channels comment on their videos Follow them on instagram make yourself known to the community that they are creating with the content that they're sharing Because while it might be hard to believe right now the internet is more than Politics or cat memes or trolls or guys named bob who live in their mom's basements. I'm sorry internet bobs of the world I'm sure you're lovely most of you are probably lovely. You got a little dorito dust in um this Whole region. That's a wrap for my tip. Thanks for watching now go out and make something awesome. Bye Hi guys, my name is pav and I'm a videographer slash filmmaker based here in london the uk And i've been thinking about the question that bennett put towards me which is About how to stay motivated to create videos on youtube So I think the biggest motivating factor for me personally to create videos on youtube is knowing that the possibilities are just absolutely endless Any idea I have I know that I can write it down on my phone and eventually Create some sort of video out of it and that's the kind of thing that excites me And even if I don't make A video of that exact idea I might work off of that idea and come up with something else Quite often what I will do for my find my normal line of work is to create videos for clients And working on client projects can be quite restrictive you they generally have a vision and they want you to try and stick to it So therefore having this outlet of youtube to be able to just go out Go travel go meet up with people and create whatever I want whether it be a vlog or a travel video or A tutorial or just any kind of Cinematic style video That just pushes the boundaries a little bit pushes me out of my comfort zone It's that is kind of things that motivate me the most To be creating stuff on youtube one other general tip. I would say Which probably goes against a lot of what other people would say But it's just something that I've thought about quite often when it comes to putting videos out on youtube is Don't feel like you always have to feed the machine of youtube or the algorithm Just because you know, that's The way it works to grow I think that can be quite one of the biggest demotivating things and it can quite often lead to burnout quite quickly because You could find yourself in a situation where you're working on a few days on a video that You feel like you just need to get it done and get it finished and get it pushed out And you're not particularly proud of it and those kind of things can quite quickly demotivate you and You want to generally be just excited about putting stuff out on youtube because especially when you're starting out You're doing all these kind of things in your own time for free and you're not getting paid You're not getting sponsorships Why struggle to put out videos that you're not particularly proud of just because you feel like you have to because you have to be on a schedule Take a bit more time and make something that you're really happy with really proud of something that excites you And those kind of things will just motivate you to keep going on further and further Thanks, Bennett. My name is Paf and I'm a professional photographer and filmmaker and Now I guess I am also youtube content creator I review cameras and lenses and photography video related gear on my channel and I'll do very occasional Tutorial firstly I think is chance to be creative although I do this for a living I am a professional photographer and filmmaker. This is a different level of of being creative. This is a Personal development. This is a personal way to approach creative creative Work flow. I don't know well, but whatever you want to call this the chance to to get better at photography and And filmmaking editing Organizing these and producing them editing them and publishing them on time all of this is drives me to To be better at all of it and every time I do one of these videos I strive to do another one better and every time it's kind of constant drive to to be creative with it, but also But also when I've started this channel originally I in my head I had an idea that I'm gonna talk about food and music and photography and cameras All on one channel. Obviously, that's not the right thing to do and But the main reason I went on YouTube a year and a half ago was to get better at public speaking I guess I'm terrible. I am absolutely terrible at Structuring speeches or or being a good public speaker. It's not that I'm shy or scared of audience. I just I'm just terrible of Talking too much. I guess so I wanted to go on YouTube to to get better at public speaking and Although that's probably not my goal anymore Every time I do video I'm actually better at being me Which is probably the biggest and yeah, the biggest motivator I've got for this It's just the constant drive to improve Everything I do and myself and by doing it a weekly Yeah, sometimes it's hard work. I tell you it's not it's not easy, but but the satisfaction the knowing that I can actually Do it to the best of my ability every single time It is definitely a drive enough for me personally How's it going? My name is you'll see I'm a filmmaker and youtuber from Helsinki Finland Thank you Bennett for having me in your video. It's a huge pleasure So when I think about how to stay motivated to make videos on YouTube The first thing you should remember is that youtube is a marathon not a sprint Every one of us has a certain amount of required practice hour set on our timer Or videos to be made before we can reach our goals So for me it took exactly two years to reach 10 000 subscribers on my youtube channel But within those two years there was this nine month period Where I barely gained any views or any subscribers and growth on my channel But then I made this one video that is still today my most successful video of all time And that video gained me 90 percent of my growth and my subscribers on my channel And that was a video that I actually least expected to be that successful My point is that no one really knows how much work you're gonna have to put in upfront And how many videos you're gonna have to upload consistently before you can get your breakthrough And remember with every video that you upload You're one step closer to getting from where you are to where you want to get And after you've uploaded enough videos and built a good foundation for your channel Then after that Every new video you upload has the potential to be your breakthrough video that will go viral and change your life So give yourself time to figure out this whole youtube thing And work hard, but most importantly Remember to have fun You got this So I guess it's now time for me to answer the question. How do I stay motivated? Well, you already have the answer You're not alone in some ways We all go through the same thing and knowing that you're not alone helps Some friends and families might not understand your vision of creating videos on youtube So it's important to surround yourself with a community of like-minded people Pav and I for example here and then do skype calls to talk about our youtube journey And it's really great because we can exchange our thoughts but also help and push each other Another big motivating factor are you guys, of course I think I'm speaking for everyone here without you without the community I probably wouldn't have come so far. So for that, I wanted to thank you for your continued support of the channel Whether that be through watching my videos posting supportive comments and sharing it through different platforms You guys are all fantastic and make these videos really rewarding to produce Another thing I do keep myself motivated is to deeply think about the question What I hope to achieve by doing online videos My biggest wish is to do youtube full-time so that I can build a community of like-minded people and focus on creating Videos that you guys value and really love I want to thank all of my filmmaking friends that joined this collaboration video. It was a lot of fun Make sure to check out their channel. The link will be in the video description below And make sure to show them some love if you have any questions Feel free to write them in the comment section below. I answer every single comment Make sure to subscribe to my channel if you're new and if you're looking for more youtube related videos Here are two videos that I recommend you watch Thank you so much for watching and see you the next time


We live and breathe everything around websites and web search. We'll be answering your webmaster and SEO questions. There's so many misconceptions and myths about SEO. Welcome everyone. Bonjour à tous. Mesdames et messieurs. Happy New Year. Buenas tardes. Buenas tardes.


So, first of all, I'd like to start with, who is this talk for? So, I just now, Leon did a poll, like many of you are beginners, right? So, actually this talk is for you. And some people may have used Arduino before also. So, yeah, this talk is also for you. Okay, so, start with the basics. What is the rest verify? So, I just copied the definition from Wikipedia. The rest verify is a series of credit card size computers developed in the UK. So, to teach people the basics of programming and computer size. So, there are actually many types of rest verify here. So, don't be alarmed by so many of this. Just, if you want to buy a rest verify today, you get this one. The one at the top right, it's called the Model 3. It's a Pi 3 Model B, which is actually released at the start of this year. There are actually many of these versions because rest verify actually started 4 years ago. So, they released about 1 every year. So, do not purchase of the day once. Obvious lah. Ya, because obviously once they are older, slower, less features. Okay, then also I like to special mention these 3. So, these 3 actually they are for special use cases. Here, the Model A Plus and the Zero, they are actually a smaller version of the rest verify. So, this is for space constraint applications. Then the complete module here, this is actually for industrial applications. Just for extra information. So, anyway, if you want to buy, just get this. The new one. So, this slide is for those who have a sub-experience in Arduino. Do not have to reach through all the specs. Basically, what this shows is that the rest verify is generally more powerful than that of the Arduino. So, the difference between these 2 is that Arduino is classified as a microcontroller. The rest verify is classified as a microprocessor. The difference between these 2 is that microprocessors are usually more powerful than microcontrollers and they require an operating system to run. So, the operating system is usually Linux. But for rest verify 3, it can run Windows 10 also.  But for rest verify and other types of microprocessors, your code is not the only thing that runs. It still has Linux and other programs running at the same time. So, that is the difference. Power consumption wise, you can see the difference. The Arduino is much less, uses much less power. So, if let's say you have a certain battery constraints, like if let's say you have to run a device for many days, then maybe rest verify is not for you. But if you need something very powerful, then you may need to use rest verify instead of the Arduino. So, what's the minimum start to get started? Let's say you want to buy rest verify 3. That's not the only thing you have to buy. Actually, you have to buy a HDMI monitor or you can use both DVR. If your DVR has HDMI input, then you can use that because the rest verify outputs the video through a HDMI port. Then you need a USB keyboard to interface with it. The power adapter, you need a 2.5Ah power adapter. So, most handphone chargers actually do not output 2.5Ah. So, you need to look carefully which power adapter actually can output this amount of current. So, the one thing I tested that works well is actually this iPad. So, this seems to work best. Even if you get those like 1M charger, your rest verify may not work properly. Micro USB cable, this is to supply power adapter to the iPad. Micro SD card, you can think of it as your small hard disk. This is where you store your Linux OS operating system on it. Then, you often need a computer to load the initial software onto the SD card. So, the step 1 is you need to download the SD card image. Where do we download it from? So, download from this website is the Resbian website here. So, you see, the rest verify as many available operating systems for this year. But for a beginner, I would recommend that you just choose the Resbian. Resbian, there are actually 2 types the Jesse and Jesse Lite. So, the difference between them just pick the Resbian without the Lite, which means this one too. Just download it, then it comes with a zip file and just unzip the file. So, you get this file here. So, how do you copy this image over to the SD card? So, there's another program, this one here. So, this is for Windows. For Mac and Linux, it's another tool altogether. But for this purpose, I assume it's a higher market share, right? I'm on the Mac computer also, so I'm using it both here. Anyway, just download these 2 here. Then, when you launch the 2, let me show you. Okay, very small. You never mind. Yeah. If you plug the SD card to your computer first. So, you see, it shows up here as a G drive. Actually, just be careful. Make sure you choose the correct drive. So, you can say 2 or 3 times drive and you're not sure which one. So, you just go to your computer and verify first. Okay, that's the G drive. That refers to my SD card. So, let me just... So, this is how you load the image in. Okay. So, I'm not going to press write because it takes about 5-10 minit to run the image in. So, I've actually already written the image in before this talk. So, now, I put the SD card in. Then, I'll switch the presentation now to the Raspberry Pi already. So, I plug up. So, a rule of thumb is that you plug in everything you need first before you plug in the power table. Okay. Okay. So, the first time the Raspberry Pi starts, it will take some time. So, this is normal. Just let it load to completion. No button there. So, just plug in the power and start automatically. Just plug it in. Okay. So, as usual, as we have any computer, it should actually eject and drive properly. So, eject button is here. So, now, I continue my presentation. Yeah. The top, right. So, you notice that I'm using live office now for Linux. So, live office is a rough open source of Microsoft Office. So, there's actually some initial configuration that you have to... Wah, I think I have to stand this way. Okay. So, there's actually some steps. So, the first thing you have to do is to set the Raspberry Pi initial configuration under here. References. Raspberry Pi configuration. So, go to localisation. Set the location here. So, we are not living in Britain. So, set to Singapore. But I'm time-lown also. No internet yet. Okay, the keyboard. So, by default, the keyboard has been set to the UK layout, which we do not want because the UK layout is slightly different. So, we set it to the US layout. When you press okay, they ask to reboot. So, I... Okay, just reboot. Also, you notice that the performance of Raspberry Pi is not that good as the normal computer, desktop computer. Because if you can see the size, it's so much smaller. So, a rough equivalent is that of a Pentium 3 and Pentium 4. Those who have viewed and lived through that time. So, that's about 10 years ago, the competitive performance. But that's very good, really. Imagine 10 years ago, Pentium 3, Pentium 4 is how big the desktop. Now, you get it in... What's the smaller size? Yeah, correct. Let's reboot. Let me go back to my validation. Yes, the label office is one of the default software inside. I've actually set up a 3G router over here. So, okay, let me connect to it. Do a system update. So, this system update, this is actually very similar to your Windows update. So, this is something that you should do for a new Raspberry Pi installation because sometimes there's some security issues. So, you want to make sure that your Raspberry Pi is secure. So, you download the latest update. But to do this, it's not as simple as point and click. So, you do something through a terminal here. So, a terminal here, if some of you may find it similar to a DOS Chrome, but actually this is very powerful for Linux. So, it's time to learn a bit. So, the command to do the update, actually there are two of them. Yeah. 21? 21. Okay, good. So, actually there are two commands here called the sudo app get update and sudo app get upgrade. Okay, the difference, sorry. Run away. So, the difference between these two is that here update means to look for new updates. Upgrade is to actually install the updates. So, sudo here means is to run the command app get with administrator permissions. Okay, so now let me run this. So, this will probably take some time. I just let it run first. Any questions in the meantime? Okay, very good question. What's the sudo password, right? Okay, the default username and password for Raspberry Pi is Pi. The password is Raspberry Pi. Yeah. But you can change it. Okay, it seems quite slow here. Okay, one more minute. Okay, I think never mind. So, after this command, it run finish, then it run this command basically. So, sudo app get upgrade. Okay, then the next one. Available applications. So, the applications is not the same as what you are used to. For example, web browser, maybe using Internet Explorer, Chrome or Firefox. For Raspberry Pi, the one they use is quite efficient here. So, just go into that here and click the web browser. Then, hand. Google. Yeah, it looks. So, this is the browser. Then, the Office applications just now I mentioned using LIGO Office. So, it's an open source office of web. So, the calculator is like Excel. Then, for PowerPoint, it's actually impressed that graph equivalent. Therefore, the middle player default. It does not have a middle player but you can install VLC. VLC is not by default. So, the command to use actually is sudo app get. Oh, sorry. So, you just add this command. Then, this will install VLC for you. But, I will not run it now. Okay, so, yeah, the default generally is high-res variant. Okay, so now it's time to introduce you to use the Power System Layout. So, in Windows, you probably see like C drive, B drive and so on. But, Linux doesn't use that. So, I will just show you here. So, you can see here, everything starts from slash. So, this is called root directory in Linux. Then, for your home directory, it's called slash home slash five or this to the symbol. These two mean the same thing. So, this is where you actually install media slash five. So, I'll apply my time drive again. Okay, I cancel. Here, media. Hi, and my time drive is here. Okay, so now, we turn the drive again. It's superior. Then, okay. Of course, you're not going to use a Raspberry Pi like a normal computer. You want it to interact with outside world. So, there are actually several pins in about 26 digital pins here. Over there. So, these pins allow Raspberry Pi to interact with external staff like LEDs, buttons and so on. And, something to take note that this is using 3.3V logic levels. So, for those familiar with Arduino, the logic level refers to a binary zero or one. When Raspberry Pi want to output a binary one, you output a voltage of 3.3V. And zero volts represents a binary logic of zero. So, you cannot actually connect these two together. If you connect these two together, when Arduino outputs 5V, it will damage Raspberry Pi. So, this is something to take note of. Sorry? Ya, some Arduino outputs 3.3V. Ya. But for the Arduino Uno, which is actually the most common one, it uses 5V as a logic level. Ok, so, for this example, I'll be using the Python programming language to teach you how to use the GPIO pins. So, the example I'll be demoing is that of the LED and the button. Ok, so, I've connected a button and the LED here to the GPIO pins. Do you have to install on special libraries or anything before you interact with the GPIO pins? Actually, the libraries are installed already in the default image. Ok? So, ok, I'll demo the code to just now the desktop. So, just now I copied this folder here, getting started with Raspberry Pi. So, the CT command here refers to change directory to go inside here. Ok? The LS means to show what's inside the directory here. So, I put it in the code. Ok. So, I'll just show the example first. So, it's like Python followed by the program that I want to run. Ok, see, the LED over there is blinking. So, adjust yourself. You cannot sit down. So, it blinks at interval of 1s. So, what is this code? So, I'll show you the code now. Size No. That's all ok. 30, ah. I think it's very good already. Ya, very good already. So, this is the code that I use to make the LED blink ah. So, I will not go through everything in the interval of time but I just show the important parts. Ok? So, here the GPR setup means that I initialize the pin that I want to use to blink the LED. So, I set it to the output mode. Ya. Then here, the while through essentially means to loop this again and again, non-stop. Ya. So, here I put a time slip means to pause the program. Then when the program slips for 1s it will change the LED status and write the new status in. So, here write, I put not is to write to toggle the status from true to false and false to true. So, this will do it again and again. Ya, understand? Ya. Ok. So, that is just for the LED. Well, of course, we don't want the Raspberry Pi to keep on outputting stuff. We want to send stuff to the Raspberry Pi. So, the next example will be I will be using a button so that I can send instructions to the Raspberry Pi. So, the next one is the LED button. Run it. So, you want anything? Ok. So, I just show you the code first before I run it. So, you can see here, right? Again, I do the same thing, a loop. And then, I read the input of the button. Then, after that, if let's say the button is pressed as if when I press here, this statement says if it's true, if the button is pressed then I'll toggle the LED. Supposed to work, right? So, now, I show you the demo here. You see? It doesn't work so well. Ok? So, this is actually a very common mistake. So, I show you the reason why. See, the reason is because here when it loops, right? It loops so quickly. So, it goes through here and then when you press the button, it detects as ok. Time to toggle, I'll toggle. But the human reaction, when you hold down, you probably hold down for half a second. But the micro processor actually times a second. So, that is why this code actually does not work. I'll show you the correct code. So, the correct code is here actually. This actually is called debouncing. So, I'll show you the demo first. See? When I press, press, press, press. So, now, it's working well. So, it toggles when I press the button. The difference now is this line here. So, what this line here is, I've written the command here, change status only and now it's greater than 0.2 seconds threshold. What does it mean is that this code here will only run let's say you press one time it will ignore subsequent input for the next 0.2 seconds. This is to account for the human when you press down, right?  You press and hold down for a few milliseconds. So, this is to account for that fact. You can adjust this threshold. Let's say you press down much longer, you can increase to one second. But there is another problem. So, the code is still running there. I'll show you the task manager here. Task manager? You notice the CPU usage is about 30-35% The Raspberry Pi 3 is a quad-core processor. So, when it stays here 25% CPU usage, it actually means that one of the core is running at full 100%. This is actually very bad because you generate a lot of heat. So, why is this the result here? So, you will come back to this code here, right? You see that, same thing, it looks through this very quickly. So, the next thing, that's actually the solution which is the number 3. Open it. So, the only difference between this number 3 third version of the code and the previous one is this line here. So, every time the code looks through, it will sleep for 0.01 seconds. So, now, I'll show you the task manager again. You see the CPU usage is like valuable and the response time is still about the same. Say, I press a button about the same, no different from the previous one. So, you save a lot of your power and your microprocessor resources. So, this is something that you should take note of. It doesn't mean something work right. It doesn't mean you should actually use it. Just be careful of this. Okay, sorry? Okay, what you're talking about is interrupt. This function exists actually outside the scope of this talk. I just want to introduce something simple. For those people using Arduino, you may not have actually add this sleep there. Because the Arduino is so low power, it's fine to actually just let it run continuously. But for microprocessor, because it's a higher power device, it's advisable not to just let it run continuously. Better to add the delay there. Okay, so, this coming to the end. So, I just showed one of my projects developed with the Raspberry Pi. So, this is actually an internet radio streamer. So, for your FM radio stations like, for example, 91.395, so on, they actually have some internet radio streams. So, I created this project to full the streams. So, I just get full here. Okay, so here, 91.3, you can see here. Ya, there's a sound here. Then, I have a radio station changer here. Like, here's 92. Ya. And I change, and so on. Now it's in 32.4. I don't know what's in 32.3. Okay, so now it's yes, 93.3. Huh? Okay. So, actually the code that I used to do this also written in Python. Ya, it's actually very similar to the code we saw just now. Just of course, much more complicated lah. Okay. So, this is just to show you what is possible with Python code lah. Oh, Python kan't by default, inside. So, those are like binary. So, it's also analog input. Sorry, analog inputs? There's one you have to buy extra something called a shield lah. It's an attachment. It doesn't come by default. Okay, ya, some more next. So, Raspberry Pi does not keep time of power.  But Raspberry Pi, right, there's no battery on it. You see, for most computers, it actually has a battery there to keep the time. But Raspberry Pi does not have. So, let's say you plug the power off, right? You turn on the power, you plug it back in, like 6 hours later, right?  So, the way to correct this is actually just connect into a network. The Raspberry Pi will automatically download the correct time from the internet. Then, do not connect your current HMB USB devices to it. I know if you see port there, you may be tempted to plug your phone there to charge, right? I do not recommend that, because there's actually a maximum current to it. So, here, you actually has a fuse, 2.5M fuse. So, if you actually blow this fuse, then ya, it's not good. So ya, just don't plug anything heavy to it. If you need to, then you use a USB, powered USB. Ya, that's awesome. Any questions? So, how do you compile the error? Sorry, how do I compile the error? Ya? Oh, what programming language you're talking about? I mean, for example, if you see compiler, if you're using GCC, right? Then, when you compile, then they'll tell you the errors at which line. Also, GCC, they have. I think, at least I think so. You run?  Ya, you have GCC here. So, let's do our version of this. 4x2. Ya. Any more questions? We run different OS on one hand. Is there any way to save? I think so. Ya, you can save to your SD card. When you say different OS, do you mean multi-board? Different like, we are going to respite or do like window stand. Just switch to SD card. Just switch to SD card. Ya. We can get one SD card for one of them. Ya, it's recommended that way. But will the settings be lost? What kind of settings are you talking about? No, it won't be lost. As long as you save into the root directory, the root directory actually is part of the SD card already. Ya, so any part of the SD card that you boot from, everything is on the SD card. Ya, it has no other storage. Unless you plug a thumb drive, that's different storage. Ya, question. Are there any other types of labels? Are there pressbaries? There is. There's no actual list. Actually, there's also actually notes. You won't do or not actually? It's a pie, right? Ya. There are other labels. Actually, okay. And you're wondering why is there a pie in the name there, right? Actually, it refers to Python. Because the rest of the pie was first ambition, they wanted to use Python as the main programming language. So that's why pie is in the name. I'm sure that exists ya. I mean, I can't say for sure, but it should exist. Given the large community. Ya. Minimum, I'll say 8 gigabytes. There's no... Maxome, I'm not sure. There could be a hard coded Maxome inside. I've not actually tried. I think just Google for it. So what's your foundation 16? I've tried 16, 32, 64. They work, but more than that, I'm not sure. Just depends on how they program. Oh. But I've actually tried that. Any more questions? Okay, the rest of the pie is not designed for such applications. But there's... I think some people they did... For example, the rest of the pie 1, was released 4 years ago, because I'm still using it today. So I figured it would be quite good. But I would not suggest use for industrial applications. In that case, you'll use the harder versions or the complete model. The complete model, I think, is designed for this kind of application rather than the full work. Oh, because while it's on, I stop it. There's no signal to tell it to stop. Turn off. It will only change state when I write something to the pin. Hang on. It's... Instead of full work, media centre work. So, when you install it, you hook it up to a TV. It becomes a full-blown media centre. So you can actually connect to a network. You can stream, Netflix. You can do some illegal stuff. Okay, so... That's what you might use It's very easy. It's very nice because it actually goes to the normal television remote. So a normal television remote will have an up-down network and an up-down network on your TV will be able to control the TV. So you can go to the file, select which movie or what it will actually do. I think you might want to do something who just want to get started and do something that is not too technical that might be something you might not want to try. Do you know which version for us to reply to this award? I've used the one that you think is actually a TV plus which is two versions and it will paste 1080p video to your phone. So you can go to TheRatRatPie.com And which one do you want? TheRatRatPie.com Can you go to where you see the... Where you see Grand piano one of it will say X, P and G. I think now it's played by another another name. Kodi, ya. Ya. So TheRatPie.com, you just do what they mean to you that means that you do this in your high-end and good-up. You don't need a keyboard or mouse to do this. Everything can be from your TV report. So... Hati-hati. And you just do an X, B and G ya? Ya. Ya. No additional hardware in there. If you want to buy a brand of a Raspberry Pi, you can install my camera so you can make it central. Yes, you can. There are a lot of things. Say if I want to configure a Raspberry Pi say as a CCTV now set up. There's actually a camera connector. It's called a CSI connector inside. So you can just buy the official module. I think it cost more $35. Then of course you need to write some code to access the camera video stream. So you can just write what you say. And Google Raspberry Pi CCTV there's somebody who will play the game and you want to try copy what he did. And you can let the Python code and everything be there for you. Just copy what you want to do. You can just change to you can just change to what you want to do. What you want to do. Okay, nothing else? Ya. So just a word of question. You remember to shut down properly. So a Raspberry Pi is an hour computer. I know for Arduino people you can just put the power. But Raspberry Pi cannot. So just shut down.


Celebrating excellence, a series of videos that highlights the importance of St. Lucia's Nobel laureates Sir Arthur Lewis and Sir Eric Walcott is back. My guests are Dr. Adrian Oje, Dr. Clarence Henry, Grenier Frederick and Dr. Anderson Reynolds. Watch before the evening news on Hot7 TV and on our Facebook page, NoBerloid Festival St. Lucia from the 8th of January 2023.


brack  సి ఏంతాన సిచాను వని సితారం చానిం సిసాను గాని గారౚర పది చాని లినంనని మిమన౿ సినింన సితూనిసి గాని మానిని సిని సినింనికంమి  మంరరహలమ్ననింణల్ర్ మంరర్నార్నింరిగ్ర్పెదాపి ినాల్లుడానాస్రేదాసారిపెనంరేస్స్నాస్పినార్పెయరికోపిరికోంస్వాసి మంరునిం� బాచుంత్త్ర్మ్లెందారునునిక్ముత్ందర్లెఎచదిస్ంది క్లెన్ము మారూదోన్ఞుత్త్సంద్సార్త్త్దిందాడిత్నాపెలపూడిక్సకాలి్దాత్బ మయఎదాకింణతి మారనారంరడిని కారంపతింరనినిసూసమాది ఆమదారంపిఆిటకూశాంని యదిలాటౕించారిశికంణ యదికిఆరింపినిం. so this is yet another example why you will do source netting and i will not go through this in detail and this is the one that i just will explain not the full syntax it should not appear to you that every packet we have to do all this work go through all the rules so usually what happens is that connections are now given state and packets are marked that if a packet is marked once that means it is a part of an established connection so it will entire all packets belonging to the same connection will get passed through okay this is called forward and so on so again i know it won't make much sense to dwell and explain it in detail but you should understand that also here are some small homeworks and puzzles how do you enable HTTP port how do you enable SSH packets so this is all needed as exercises and here is an example for allowing HTTP packets new connection request to port number 80 you accept this is in the forwarding table this is one rule well I spent some time this one says that in the forwarding table you accept connections to this port number 389 but use a limit do not accept connections unless it is within this rate what is that rate here it says 10 per second again do not worry about the exact syntax do not worry about how to actually do it what I am trying to illustrate is there is a feature where we can tell the firewall rate limit what is rate limit do not allow too many connections if mail server is getting too many connections from the same IP address it is most likely it is spam so slow it down allow only two connections per minute three connections per minute and if it is a genuine mail server they will wait and they will try after two three and your server will not get denial of service attack it will not get choked so this is another feature to limit dose attack okay so again I know we rush through this IP tables part but the goal was not to teach you IP tables in full the goal was to tell you what it does and recapping it can allow services from outside the world to your campus in a selected controlled way it can allow certain type of connections from your internal network and it can defeat a lot of attacks that outsiders are trying to do on your network because at the first point itself they will be it is like having a good security guard and having very few gates in your campus and making sure that id cards are used and checks are done then for the bad guy to get in is very hard but it still has it does not do a lot of you know if your web server or mail server is faulty if your web page has dual injection or it does not do redundancy failure protection if a particular route is down how do you come through another route and so on there are many still it is still a good starting point and setting up a good firewall configuring it properly and more important I did not show you specific syntax IP tables can also send logs logs means what information about what it is doing so just think do not do not believe me just like that IP table is a layer three software at the IP layer how many packets will it be seeing what is the speed of ethernet gigabit and if you are downloading a movie then you are downloading how many packets are coming huge number of packets per second in the millions and for each packet you have to write a log what will be the size of the log file if you write you know five words or six words in the log file I got this packet I got that packet I got this IP I got that IP some information you have to write right the size of the file will be so huge I mean IP tables trying to create logs should not be something that you take for granted so what do you think and this is the unfortunate that I do not have a slide on that but it is something that I am flagging for you to make sure you understand that selective logging that IP tables 99% of the packets it will not log you can put a rule that says if this happens if from a bad IP or if from a particular range of IPs a connection is initiated write a log you can choose what rule to write and you can choose under what conditions to write and you can choose what part of the information to write so if you do this properly then the IP table logs is manageable and more important it separates the wheat from the chaff this is the phrase that lot of security people use wheat from the chaff we have more of almost the more I think in India maybe we should say rice from the chaff you have seen right a winnowing mill when the rice is fold the grains fall down and the husk gets blown away so in IP tables if you put the logging rules properly then only interesting incidents which can have a security implication will get logged and the normal incidents will not be using up your cpu or disk page or bandwidth to write log so this is important so this is one part of today's lecture that how to do access control both ways from outside to inside inside to outside and what to use for that IP table so in any course on security which you teach firewalls will form an important part of the course and IP tables is the best I can suggest for you to make sure that your students do enough experiments understand and do well so now in the last half an hour of the lecture this morning we will now go beyond IP table let us say our firewall has been set up properly what else do we do at the application level what are the problems and how do we ensure that we minimize its impact so let us take incoming email so the best way to protect your organization from mail is to set up a few servers under your control which will receive all incoming mail for your organization even if you have many sub domain do not allow every department to have its own mail server each of them will face the same problem of configuring each of them will face the same problem of preventing virus preventing worms preventing spam what you would like you would like one main security guard one means two three servers acting load balancing mode and once they filter then you can give it to the department server inside because trying to set up a single mail server for all departments is again not a good idea so the right policy the right balance is to do internal mail servers under the control of the department for all mails within your campus but when they have to exchange mails with the outside world they get routed through a mail relay for incoming and mail host or that's what we call it for all outgoing so this server which is accepting mail on behalf of all the domains sub domain of IIT Bombay has to be properly configured and should not act as relays it should accept only for IIT Bombay should not accept mail from Japan for US and relay the mail why we should not do that we can accept from Japan for IIT Bombay but not from Japan for Gmail Japan for Yahoo mail we should not do that because then we will be used to route bad mails through us and Yahoo and Gmail will trust an IIT Bombay server this is the thing that you should I am going to spend a little bit of time on SPF sender protection filter that some domains are trusted and if you are used you if your domain can be used by spammers or hackers or others to send mail for them then you are what is called open relay so this DNS stuff will check all that also yes one more piece of information which in case you are not aware you should again learn and study and maybe teach it also I am sure most of you know how to configure mail clients and they always ask you what is your name what is your email ID so all of you or many of you could set up your email client whichever client you are using to tell that your name is Sivakumar and to tell that your email ID is sivastivaatitb.ac.in and then when you send out mails the from line will say from sivaditb.ac.in and you may be sitting in Kolkata and sending out this mail so some receiver in the US when he gets the mail the from line will say sivaditb.ac and you are writing mails as though it is coming from me is it possible today so does that mean that receivers of mail should be very very careful now every receiver of mail obviously should be very very careful but if for your organization you can protect that this misuse can be reduced not eliminated by what is called sender policy framework IIT Bombay has told the rest of the world that if you want to be extra careful if any mail comes to come claims to come from a user whose domain name ends in itb.ac.in please accept only if they come from these three IP addresses this is called sender policy framework that our domain name server tells the rest of the world that we have only three IP addresses from which we allow mails for users who use our domain in their from line so if the receiver is careful then when he sees the from line as itb.ac.in he will check in our domain server is the is the mail coming from an IP which has been authorized by itb to send mail for users within that domain I hope I conveyed what is the role of this of course you should read more in a little more leisurely way sender this then says that many other domains almost all the reasonable domains use it now will not accept mail if you try to send mail as the from line as itb.ac.in they will not accept the mail they will say this is a bogus address you are sending from an IP address which is not authorized by IIT Bombay mail rejected so that gives protection to our users that your IP cannot your name cannot be misused easily people inside IIT can still do it a student can try to send a mail as though it is from me but hopefully that is much easier to control because you have some administrative control over the users in your campus we will see that so all I am trying to show is that when you set up different services you have IP tables for the firewall similarly for mail similarly for squid there are many security related configurations that you should be aware of so that is one part of the lecture some part of this we will do in the lab we will give you examples to illustrate what you can do but the learning has to happen well beyond we have just 10 percent like the glacier you have probably only seen less than 10 percent of what is the scope of work in this in this area of configuring for it is called hardening hardening your services making sure that you do not leave holes there are best practices guidelines and so on and I tried to give you a glimpse but there is an even more interesting part so again we are now going to make a big jump we are going to assume that our firewall is beautifully configured our application services everything is set up perfectly we have followed all the guidelines we have understood all the latest developments so can we now go home and sleep in peace and this lecture is going to tell you know that it is not enough to just do the good things why because despite our knowledge of the system unfortunately is not 100 percent when we use a mail server or when you use a firewall we do not know if there are any other vulnerabilities all the known attacks all the known vulnerabilities have been told to us we have been learning about it we have fixed it but something new comes for instance in the SSL you might have heard there's a heart bleed attack it detected about two or three months back till then everybody thought that if you use SSL you are getting a lot of security but once this attack was discovered more problems came and detecting such attacks is not something that every user can do there are organizations which are doing that there are advertisements sent out there are alerts sent out and so on but what every user and every organization should do is this one it should monitor that if something unexpected happened is everything happening correctly is anything unexpected happening if something unexpected is happening you must be ready for it and that's what this quotation I hope some of you had had the time to read this that when your house is on fire when your house is burning then you don't think how should I dig the well so if all your servers are you know crashing something is going wrong mails are not coming that is not the time you start reading you know what went wrong where it went wrong why it went wrong so you should do that well in advance security cannot be an afterthought so if you do it at the design time security should be by design and by design one of the principles and this is very important that's what is called security assurance you must watch you must understand is something good happening is something bad happening the earlier you get alerted the more chance you have of preventing that so this again I won't read out in detail this is just telling you that essentially you must have full knowledge of what is happening in the network and all the value of knowledge we know as teachers we know and so on so forth and even IIT bomb base motto is nyanam paramam dayam knowledge is the supreme goal so let us see what do you mean by knowledge about your infrastructure so here is the question you should ask yourself that assume you are the system administrator of your college network set up all your services and all the things that we were talking about should you not be able to answer if your director calls you and ask how much traffic is going in how much traffic is going out at what time maximum traffic is going and within the users who is sending more data what type of applications are consuming more data if you say I don't know then you are not a good sysad nothing to do with attacks it is a matter of usage monitoring how many emails came to IIT Bombay yesterday or last one week this is very much harder to answer and it's not important to simply answer how many emails came you must know who are the top 10 senders from who is it coming from gmail is it coming from yahoo is it coming from us should we know all this why should we know all this we should know all this because of the following reason I can give you a case example that suppose you have been doing this information gathering somehow somehow is not so difficult and that's part of your lab it's called log analysis knowing where such information is logged how extract it analyze it and generate reports and suppose by doing this you know that normally on saturdays and sundays we get 1000 mail on weekdays we get 2000 mail this is the average that has been happening for the last two months now yesterday happened to be a weekday and we got 45000 mail nothing happened no server broke no bandwidth choke nothing went wrong but if you see this that for the last three months it has been 2000 3000 mail yesterday was 45000 are you going to keep quiet so if you are going to keep quiet saying no security no attack no user has complained then this entire lecture is a waste because what you should do is proactively try to understand any this is called an anomaly an anomaly in usage it could be a sign of something very bad yesterday you could have handled that 45000 mail your server would not have crashed but tomorrow it may go up to one lakh 10 lakh your server will crash all your users will lose mail so you have to find out why this is coming is it legitimate mail is it some attack is it the starting point is somebody testing the waters are they trying to see if my server is doing and then will they scale up the attack tomorrow how do you do all this is anyone attacking academic office from the hostel our students are not above board and grades are stored in servers inside it bomb it is not only people in china and pakistan will attack us students may want to change their grade they may not succeed but very fact that they are making attempts what is the meaning of making attempt if some hostel ip is trying to connect repeatedly to the web application or the server which is storing the grades should you not know if they may not have broken it there may be no SQL injection there may no attack nothing might have succeeded but should you not know that last night from hostel 6 for 3 hours somebody was constantly trying to scan look at the ports was trying to log in or should you say that is ok nothing as bad as gone wrong if somebody complains then I will go and see so that is the difference between security assurance and reactive panic firefighting so we do not want to do firefighting so that is the goal of the last 5 10 minutes of my talk that varies all this information how to find out and more important by a very nature of the network and application this information is not available in one place you have to correlate information from traffic which is available in the router interfaces how many packets so log application log so ip table security log in different places of your network different servers different locations and all this information has to be collated and understood holistically analyzed these are buzzwords but I am sure you know what I mean that you cannot look at only one you cannot have what is called blinker division I am in charge of mail server I look only at mail no you need that integrated view and therefore to do that I am going to tell you show you something first very quickly that in IIT Bombay we do have graphs like this most of you may already have seen graphs on you may have graphs for your organization also called MRTG multirate traffic grapher or something like that which tells you the bandwidths used how much bandwidth issues I will explain a little bit about that by showing a more detailed diagram so this is data which is old not yesterday's data but it is giving you the full picture that around 4 in the morning the traffic start reducing the green is the amount of traffic coming into our campus from outside on one of the van links there are three van links but all three van links are showing a similar pattern why at 4 am you know traffic is reducing finally people are sleeping okay so at 8 am they start waking up different people of course at different time but the trend is the same day after day after day and then around noon and 2 o'clock it peaks then again at 8 o'clock after dinner it peaks midnight is another peak then around slowly declines 4 o'clock then and you can see this trend if you map it historically like this one is showing you will see this trend every day sometimes you will observe weekends are different so these are trends which are just seen by looking at the shape now if your director shown this graph he will be reasonably happy that okay this is what I want this is expected behavior but what you will not be happy is there is another line hidden somewhere in the bottom which may be here as a blue line what is that blue line how much data is going out of your network okay that is not having much of a pattern it is having but in fact there is not there is not even much traffic even if you scale it and this is something that if you are you are not in charge of course if very few people want information from you if no information is going out the only information going out is mail then you have to think why why are not people coming to my website this is another type of analysis this is not at the security level but at the utility level okay so we will see that also later your director may ask you questions like that who is sitting my website why are they not downloading my pages why are my faculty pages are not seen who is seeing it how many times they saw which person's page they saw most he may want it for making some other decision promotion this that so but who will give him that information this is sad it is not that you have to set policies but you have to be able to produce this information so that is what this is not going to produce that this is only telling you the overall overall data going out overall data coming in so that is the very first level and even here you can put filters you can write scripts which will alert you if it exceeds this much alert me if it falls below this much alert me this up to you to decide what you want but the tools exist which you will see in the lab on Friday where you can configure the tool to keep watching this data because a human being watching and reacting is definitely not the way a software should be running and watching the output data input data and you should write scripts or triggers if this happens tell me tell me means what email or sms or depending on the priority depending on the alert that is what this part of the lecture is about monitor react intimate react escalate so in the interest of time let us move on this is showing you the monthly graph hourly graph hourly graph hourly graph is good data more more people are using the link and so on so forth and output is always much less than input than nageous is another tool which monitors again i will not explain in detail but probably you will do a similar tool in your in your lab inside my campus are all the servers up or all the services running properly am i able to connect and so on and a red light means something is wrong and it will tell you when it went wrong why it went wrong and so on this is something that you will be doing on the lab on friday i am not deliberately i have put logs from long back ten years back privacy concerns and this and that and so on but here is a type of information which you should be able to generate easily if you do it it will have value it simply says for each date in january one two three four how many males came in 34,000 males 33,000 males weekends are slightly less i do not know who is an expert but my guess is january four and five were weekends can be 11 and 12 were weekends number of males coming in on weekends everybody is taking time off and so on outgoing also is reducing on those days six five so my guess is those are saturday sunday and there is a hyperlink which is telling the top 25 what is the total incoming size of males what is the total outgoing size of males who are the top 25 senders and receivers and this is why i took the old data that a table like this will actually tell you which user is sending out who is receiving maximum number of males who is receiving you have to have a policy who can see this information director yes head of the department no like that so that is a different issue but first you must know what tools are available and what they can do then those who are in charge of the information will make the information policy who can see who cannot see and so on but as a sysad you must be able to generate this on a regular basis here is another important part again i am sure you cannot read this in in the slide on the screen but later on when you download it this is telling the server what was the memory usage what was the cpu usage how many page faults on the server receiving the mail there are many os related performance statistics those statistics also should be monitored why this space may run out slash tmp may become full many other problems may happen on the service so that is something you can again monitor so that is a scanner status how many viruses came how many did i find how many did i quarantine which network it came from just because you are doing your job properly is not enough you must also understand are there more coming less coming and triggers for that then this is the web proxy usage this one is giving you a sample of how many people visited your websites the 10 dot because you are doing this filtering cse website e website how many people came where they came from okay and that will also again i do not look at the table in great detail it will only tell you may be i will show you in the next slide the country domains yeah this one this one is saying that which people from which country and from where which domain visited your website from us educational domains from commercial domain dot com dot edu why would you want to know this okay so suppose from malaysia one day you find that people never visit but that day a lot of people visited then you would want to know why and they visited only chemical engineering department this could then be a information that is flagged and told to the department head this is happening so they may then say yes it is because we have a conference next week and a lot of people registering for that conference so we need to understand what is happening and why and to do that you need to do what is called log analysis so the last important technical point that i want to convey or a name of a tool or a software that i want you to note down is what is called r sis log i already told you that interesting information about what is happening to the network and application is being generated in many places now if you do not consolidate that information it is much harder if the if you have to log into this server to read that if you have to log into that server to read that that is what r sis log is is a centralized logging that all these logs are not only written locally they are also at the time they are generated with suitable filters sent to this centralized server so this centralized log service main job and you will be learning little bit more about this tomorrow in the lecture and in the lab on friday it is called security s i e m security information and event management so a lot of information could keep coming to this server from various places and then we can generate alert identify trends and use open source tools to generate useful reports and that is the part of the lab that is coming up on friday so r sis log can tell who should receive it did not receive logs from everybody it can allow sender udp logs to come from 10.5 kerala tcp logs to come from 10.99 it can tell which ip can send what logs to me and then it can filter similarly on the machine sending the log you can need not send all the log lines to the centralized server you can you can put your own format year month and so on so forth and then you can say if it is tcp denied send it to this server if it is some other message send it to this server or this port so that differently it can be logged it did not be all logged in the same place there is all this like I said wheat from the chap messages which are very normal keep it in some other place which is a very particular so that it is easier to analyze so just again giving you an example that our centralized log server has different directories three or four for different mail servers mail incoming mail outgoing imap three or four for web proxies this a reverse proxy this is quid then some for the imap itself some for eldap the directory server all these logs of which date and this is the last slide with information 2014 may you can see this is the log size gigabyte 53 gigabytes or 500 gigabytes or so per day compressed is stored but it is available and it is a legal requirement also how to mine this logs what is the information in this log what is the useful content in this log that is tomorrow and in your lab tomorrow's lecture will be about the lab it will not be the lab itself but tomorrow morning 9 30 to 11 me and some of the two or three mts will come and explain to you the tools that you are going to use and these tools will allow you to do this collect logs from various places watch the logs set triggers generate alerts and allow you to understand what is happening in your network so this was today's lecture was simply to give you the background and the two parts ip tables is an important part you may not do much about that in the lab but the second important part log analysis monitoring alerts and preventing security incidents is going to be a focus of what you do hands-on in the lab so with that i will stop the rest of course i encourage you to ask questions tomorrow now that you have assimilated a little bit of what i said and you have the slides with you you can also take your time to raise the questions and send it online or offline then in tomorrow's lecture i'll address some of the questions and then in the lab okay rrd is a term used by that mr tg it is a database that it maintains round robin database or something it's a cumulative incremental data only of what changed from last time that is written and it is a terminology used by this particular tool mr tg i don't know the exact expansion but something to do with the round robin data or something like that which which comes in in an incremental form the log file is archived for the graph to be plotted you saw the daily usage monthly usage weekly usage so that that database size does not become too big they have some techniques for storing that data hello good morning sir my question is that what is the spoof attacks and sin attacks how this attack can be blocked so i will respond to that sin attack the other one may be later the tcp is connection oriented protocol so most applications for instance let us say you want to send mail you have to first open a connection on port 25 and tcp has something called a three-way handshake that if i want to send you mail i have to first send a packet saying i want to open a connection to you on port 25 this is called a sin packet and the receiving machine can decide to accept or not if it accepts it will say yes please start sending data which is real data but you start from this sequence number some handshake is done and the third to complete the connection establishment this the initiator has to send the third packet saying yes i got your permission i will start and you use this sequence number so this is three way i send you a request saying i want you say yes and i say okay let's do after that the real data which the application wants for smtp or whatever goes on now a sin attack is an attacker simply says i want to start a connection the other guy says yes go ahead now this fellow doesn't complete the connection he just leaves it like that why does he leave it like that because the other server now has in his kernel allotted some space in the table saying that this guy is going to connect i have sent him this sequence number he's waiting for that handshake to complete and he has used let us say 25 bytes of memory if i do it once there is no problem because then after some time it will time out he'll say this fellow is not replying and he'll throw away the packet what if i do it thousands of times each this called a half open connection each half open connection uses up some resource on the server so if i keep doing this i start the connection but don't complete start the connection keep doing this at the high rate and your firewall is not doing this rate limiting then pretty soon your server will not be able to respond to real call so i will give you a real energy and then stop that let's say you have a helpline in your college for answering real queries for students how to pay fees or how to do the application and you have three lines people are sitting there now if i keep calling those three numbers and saying i want some junk have you heard this song have you heard that song then the speaker is going to hang up saying you are not a real student but if i keep doing this what happens when real students are trying to call the line will be engaged and these three people will be so angry they will not give him a good reply also even if he gets through that's what is called denial of service attack so sin attack is something that ip tables can help you to limit limit the rate and also do not allow this to accumulate hello morning sir good morning go ahead morning sir my name is shoyab and i have a question like can we use image processing you are talking about firewalls first so can we use image processing techniques to filter certain image patterns that yeah and give like more effective to like parental controlling thing because there are so many site is that abuse you side so the spirit of your question so let me answer this in two steps the first one is doing it at the network level ip packet level is hard but if you have a proxy server and then there are many tools available squid only normally they drop bad content only based on ip address and url having some name or keyword okay but content based filtering what you are talking about many tools implement that any image they will scan for how much of the 50 percent is looks like skin they will say this is a bad photograph and they will not allow it how do they know it looks like skin that is your image processing clothes and skin if you are seeing my face now on your screen this part is they will know skin this part is skin they will know this is cloth okay and right now the percentage hopefully is at least 50 50 so they will not think of this is an obscene picture but if there is a picture where the image processing program says 90 percent is with skin then the program will drop it such things are specialized content based filtering it is called an image processing is indeed used for allowing web browsing and not blocking site fully only blocking bad thing now but of course it is a very slow process that server needs to be very fast needs to run many applications and therefore it is a resource consuming activity so I hope that answers part of your question and you can look up more on this good morning sir good morning sir there is one question that you have as told earlier that about how much traffic is in out yes who is a larger center in receiver of emails yes is there any software or simulator by which we can install in our lab and find out that what is happening on the network yes of course that is the goal of your Friday's lab I am very glad you asked that question and it is not simulator it is oh you want to say how to do an experiment okay let me answer two parts first is synthetic data versus live data that is part of your question and you use the word simulation for that that you want to give experiments to students or is it that you want to understand really what is happening the real world real data sir it is for real data for real data the tools that what you are going to do the real data will be in your servers if you have a server receiving mail it will have in the war log mail log it will start adding information the tools that are used to analyze that you will be doing in the lab on Friday the mail log analysis tools but if you want to give students homeworks and experiments you can generate fake data or if you want to what is called mask the privacy reasons the real data you do not want to give the student you do not want to know who received mail from whom and so on the real names then you can do what is called anonymizing you can write scripts that will blank out or replace with dummy names and dummy IDs or dummy values the real log life and you can have tools that generate such patterns so that students can be this is actually may be an interesting question that many of these certification programs on security and so on many of them are of course not trustworthy but the ones that are good they give students scenarios like this they give a sample synthetic log file and say you find out three top problems that happen they give two gb log files and they know you should know which tools to use that is what is part of the training and using those tools you must analyze the logs and find out three or four bad things so if you pass that then you get the certification now to the extent that you want to do it in your course and your lab we will give you guidelines hands on later on but in friday we will be giving you sample data which you can use and from which you can see how the tool works what it can do what type of information reports it can generate last point yeah one point and then yeah see there is a difference between static analysis analyzing data three months back versus real-time analysis that also you must understand that analyzing old data and giving the report tomorrow is easy that can be done there are many tools you can write your own but analyzing data as it comes in i told you know our syslog is receiving data so on the fly every five minutes every six minutes analyzing and telling this is when going wrong that is going wrong is much harder and that will be the goal of friday's lab yes go ahead one participant has one more question last good morning sir yeah sorry you have explained how to prevent d i mean doors denial of services attack by limiting the number of traffic incoming traffic into the firewalls but how to prevent d doors and how to prevent d doors and what the role of zombies how to avoid how to prevent this kind of situation so this is actually uh beyond uh short two minute answer because this is one of the most interesting research topics d doors attacks are the biggest threat and even the top post not that i alone don't know this code doesn't know okay how doesn't know okay IBM doesn't know and the researchers are applying their mind to have effective techniques to prevent this the reason that d doors is hard to prevent is because you do not know in advance what are all the ip's in which these bad things can happen and how to know that you know you know one single ip makes a lot of connection different ip's share part of the load okay and therefore so best of my knowledge there is no simple answer for your question it is something that can become an interesting research project to figure out that a d doors is happening distributed denial before it actually becomes dangerous so i will leave it at that and maybe tomorrow give you some pointers to see more useful material about this thank you sir okay so we'll stop the first lecture today