This paper proposes a novel method for early detection and classification of arrhythmias from electrocardiograms, ECGs. It combines a recently developed metaheuristic optimization algorithm with existing machine learning algorithms, such as support vector machines, SVMs, k-nearest neighbors, KNNs, gradient boosting decision trees, GBDTs, and random forests, RFs. The optimization algorithm was used to tune the hyperparameters of these algorithms, resulting in higher accuracy than other approaches. The proposed method was evaluated on three publicly available datasets, achieving an overall accuracy of 99.92%. This demonstrates the effectiveness of the proposed approach in detecting and classifying arrhythmias from ECGs. This article was authored by Mahmoud Hassaballah, Yasser M. Waysery, Ibrahim E. Ibrahim and others. We are article.tv, links in the description below.


Hello and welcome to the session. In this session, we will discuss a question which says that, first part, find the product a cube minus a square plus 1 the goal into 2 a cube minus 5 the goal. Second part is, simplify b square plus b cube into b plus 1 the goal and third part is, find the product 2x minus 1 the goal into 3 minus x the whole. Now before starting the solution of this question, we should know a result and that is the product layer of exponents which is x raise to power n into x raise to power n is equal to x raise to power n plus n. Now this result will work out as a key idea for solving out the given question. Now let us start with the solution of the given question. Let us start with the first part and the first part we have to find the product a cube minus a square plus 1 the goal into 2 a cube minus 5 the goal. Now we will use distributive property to multiply the two polynomials. Here we will multiply each term of first polynomial by the second polynomial. So this is equal to a cube into 2 a cube minus 5 the goal minus a square into 2 a cube minus 5 the goal plus 1 into 2 a cube minus 5 the goal. Now to multiply the terms we will use the product law of exponents which we have discussed in the key idea. So this is equal to now a cube into 2 a cube will be 2 into a raise to power 3 plus 3 which is 6. So this will be 2 into a raise to power 6. Now a cube into minus 5 will be minus 5 a cube here minus a square into 2 a cube will be minus 2 into a raise to power 2 plus 3 which is 5. So this will be minus 2 into a raise to power 5. Then minus into minus is plus and a square into 5 is 5 a square plus 1 into 2 a cube is 2 a cube and 1 into minus 5 is minus 5. Now combining life terms we get now here minus 5 a cube and plus 2 a cube are life terms. So this will be 2 into a raise to power 6 minus 2 into a raise to power 5 plus of minus 5 a cube plus 2 a cube. The whole plus 5 a square minus 5. Now this is equal to 2 into a raise to power 6 minus 2 into a raise to power 5. Now minus 5 a cube plus 2 a cube is equal to minus 3 a cube and plus into minus is minus. So this will be minus 3 a cube plus 5 a square minus 5. So this is the required product and now let us start with second part. Now in the second part we have to simplify b square plus b cube into b plus 1 the whole. Here in bracket we have b plus 1 and only b cube is multiplied with it. So we open the brackets by multiplying the terms and using the product law of exponents. So this is equal to b square plus b cube into b plus b cube into 1 which is equal to b square plus. Now b cube into b will be b raise to power 3 plus 1 which will be b raise to power 4 plus b cube into 1 is b cube. Now here you can see but there are no like terms. So we cannot add these terms and this expression will remain as it is. And finally we will write this expression or you can say we will write this polynomial in descending order of powers of b. So this will be equal to b raise to power 4 plus b raise to power 3 plus b raise to power 2. So this is the required answer for the second part and now we will start with the third part. Now in the third part we have to find the product 2x minus 1 the whole into 3 minus x the whole. Now here we have to multiply the two binomials. So here we will use the same method which we have used in first part that is here we will multiply each term of first polynomial by the second polynomial. So this is equal to 2x into 3 minus x the whole minus 1 into 3 minus x the whole. However this is equal to now 2x into 3 is equal to 6x. 2x into minus x will be minus 2 into x raise to power 1 plus 1 versus 2. So it will be minus 2x square. Now minus 1 into 3 is minus 3 and minus 1 into minus x is plus x. And now we will combine the light terms. Now here 6x and x are light terms. So this will be equal to 6x plus x the whole minus 2x square minus 3. And this is equal to now 6x plus x is 7x minus 2x square minus 3. And now we will arrange this polynomial in the second order of powers of x. So this will be equal to minus 2x square plus 7x minus 3. And this is the required answer for the third part. So this completes our session. Hope you all have enjoyed this session.


Nanotechnology has the potential to revolutionize the agricultural industry. It can be used to develop more efficient and environmentally friendly methods of crop production, such as precision farming and improved pest control. Additionally, nanotechnology can be used to detect and treat diseased crops quickly and accurately. This article was authored by Jogendar Singh Duhan, Ravinder Kumar, Naresh Kumar and others.


So I'm our snake and I work for a company called Sec Theory out of Austin, Texas around hackers and slackers and this is Jabra. How's it going DevCon? Ridiculous numbers there. Ridiculous numbers. So I'm Jabra. I work for a company called Rapid 7. I do a lot of pen testing. I write some Pearl. I work with the backtrack guys. We do, you know, the remote exploit thing. It's all good. So yeah, that's me. Cool. So we decided to do a talk on de-anonymization. We've done a lot of talks on, you know, hacking browsers and hacking websites, but we really wanted to kind of change it up a little bit and talk about hacking individuals. So, you know, quickly why this all matters. I mean, we all kind of care about our privacy at some level.  But people I think oftentimes think that they're very secure, especially in this industry. You know, I've done my due diligence. I'm using a proxy and therefore I'm secure. So we decided to go after, you know, kind of our own to kind of demonstrate that there are quite a few holes in kind of our mantra around our own privacy. So why is privacy good? It's good because, you know, a lot of people want to drop docs on you, right?  You don't really want your information all over the internet.   Say for for people who have fetishes. For good or for bad. Say for for whistleblowers as well. So I think there's a lot of different reasons why privacy is good and we all kind of, you know, encourage ourselves to try to be private if we're doing anything sensitive. And ultimately increases freedoms. So but there's a bunch of reasons it's also bad. It's a safe and for evil doers and I'm not going to try to define what that is but it's sort of it's up for interpretation but allows them to attack, you know, and kind of retreat and exfiltrate the data all relatively quickly and without ramifications and therefore hurts law enforcement whether you're pro or against it's kind of relevant and it prevents the social, you know, compact that we all have one another. If you come up and say something bad to me and to my face I can do something about it but if you say it over the internet it's a little bit harder so it's harder to enforce that over the internet with privacy. But either way privacy is broken and we're here to kind of demonstrate quite a few of those different things because it's too complex. Ultimately if you can find someone's IP address I think that's kind of the gold standard. If you know the real IP address then you can go do something about it. That's sort of the big thing that we want to find about each other. Not that that's particularly difficult. So but what about if we can do stuff that's even better? So we found quite a few ways to do that. So let's start with a basic de-anonymization guide and then we'll break that. Alright so the first thing that you do when you're looking at being anonymous is you look at okay what can I do to mask you know what I want to do on the internet. So can I use things like a proxy and then just traffic. I'll just send all my traffic through this proxy. So something like Tor is really ideal because you'll have you know all these proxies communicating and you're just sending your information into the proxy and then at the end it just goes out through this end node. So that's pretty cool. You can also do things like you know clearing your cookies clearing your session using no script. You know really doing the things diligently to protect and mask your identity. You can also use links so no one knows really what you are and where you're coming from. That sort of stuff. So yeah the next component is using things like free email systems right. So you can you can set up like a Gmail server if you want to log in to you know some new application. You have things like Lala or whatever. You can just create a free email account and then just log in with that bogus email. They won't be able to track you back to one you know one particular email which you use for all your data like your corporate email. You just use this other account. So it's it's a pretty good way to do it and you're you're basically you're dividing up all your user accounts so that no one can actually track you back to you know your corporate account. Okay so now the client side certificate stuff right. So what I did was I looked at taking a client who's connecting back to a server and they're using like some sort of public key. So this information is stored within your browser and what happens if you're going in using this with Firefox is you browse through a website and you have your public key within your browser.  I'm trans transmitting my public key to a server and it has nothing to do with the server that I was actually supposed to be sending this information to. So it's like well that's kind of bad. So we go on to the next slide and so what what information is actually stored within the public key. Well there's a whole lot of information about your name, your email, the system that it's running on. So hypothetically you can tie this back to okay I know it's running in this example Fedora Core 4 on you know some you know EDU or whatever it's just like an example right. But if you look at gathering information about the actual target all you need to do is really grab this public key. So can you use something like TCP dump and you can put it and you can just you know snip that traffic grab the public key and I have a screenshot we can show later. It's just like using Wireshark to actually grab this public key and then you can see the information just clear text right there with Wireshark. So it's kind of good to be able to actually gather this information and then if we go to the next slide what we'll see is okay so if you have this information about the client so we have their email address or their name or some piece of information a lot of companies will use a common email schema to actually determine how we're going to create this email address. So it's really helpful as an attacker to be able to say okay so in traditional phishing what I would do would be to grab a list of employees and just create my email list. Well this is sort of the reverse of that all I need to do is just grab the email address and then just reverse it back to a full name of the individual. So now I know their name you know hypothetically I know their handle and now I can start trying to get into that server because based on the public key I know when it expires so all I need to do is just you know sort of do a brute force attack and you're you're much more likely of actually grabbing a shell because you're doing it you know with all the basis of this knowledge. That's sort of how it follows. So I think a lot of people here have heard of Tor yeah a few of you have you heard of it. So it's a pretty common way to anonymize yourself you just kind of bounce through a bunch of proxies. There was a couple guys minimum a couple guys who compromised some Tor exit nodes and were logging information as it as it went out of their network including a hundred embassy passwords and the reason why a hundred is an interesting number is because it's exactly a hundred. It wasn't a hundred and five wasn't ninety six it was exactly a hundred which means that there's probably a lot of other information that they didn't give out. In fact I know there's a lot more but there were such amazingly good passwords as temp and one two three four five six and Egypt with a I instead of a Y very very clever. So breach actually has a project where they have a bunch of different honey pots set up so you know bad guys will you know route their traffic through it and they're kind of track tracking all this stuff and saying okay well here's what bad guy traffic looks like and sort of monitoring that that kind of information. So ultimately you know you got to find a proxy that you trust which is very difficult because it's not your machine remember somebody else's machine and hopefully it's not linked back to you so you can't really have any prior knowledge of it which makes that very difficult. So Jabra worked on some way to create a hacked version of Tor that would actually do all the same stuff that the same guys who did the the Tor exit node hacking would be able to basically make that whole process a lot easier for everybody but we just sort of ran out of time so. So this is this little image tag here is a very quick way for you to de-anonymize or at least detect that someone is coming through a Tor node because onion routing has its own protocol or its own TLD rather. If you have a server set it set up inside the Tor network you can actually detect them coming through and pinging it and it's your machine because you put it there or you can use this piece of JavaScript to say yes you are or aren't on Tor. So it's a very if you're running JavaScript it's a very easy way to detect that you're coming from JavaScript space. So yeah like probably a year and a half or two years ago or something I created this thing called Mr. T was based off of Ronald's project Black Dragon I think it was called but basically it's a way to enumerate a bunch of plugins history screen resolution and a bunch of kind of the basic components that give you information about your target and allow you to go after them not great for de-anonymization but great for you know potential for exploitation you might be able to say well if you've got this specific plugin I know that you're going to be vulnerable to this particular thing because lots and lots of plugins have major major issues with them. So I was looking at utilizing this browser exploitation framework you guys you guys know about this browser exploitation framework yes no yes all right cool so it's a really awesome piece of software and what it does is it says okay anyone who goes to a malicious website that I've actually modified with something like cross-eyed scripting or my website I can attach it to this framework and I can do a lot of cool things once you're attached to this framework so what I can do is just basically detect what types of things are in the browser I can detect all the plugins I can detect you know what are you doing all your cookies all that sort of stuff I can do keystroke logging bunch of cool stuff so for this talk what I did was I said okay it's really important to actually be able to improve the quality of this browser exploitation framework because what we really want to do is really really just want to get a shell but we're going to build upon all this detection information to do that so for this talk what I did was I said okay what do we have for detecting you know various types of operating systems okay that's pretty good okay what what other things can we look at so I said okay there's VMware which there was a currently there was a module in there that use ActiveX I said okay this is not as good as the ideal where I could use something that is going to work everywhere we'll write it in Java it'll work pretty much anywhere and then you know you can use it in Linux you can use it in Windows whatever it doesn't matter so that's what I did for this talk and you know I've incorporated that in the new version of beef which should be out in a couple of weeks incidentally a lot of this stuff we have demos for but we need to race through the slides to make sure we get to the end then we'll we'll show the demos yeah all the demos are going to be online there's URLs at the end of the talk so everyone's gonna you know everyone will be able to go and see the demos awesome next slide okay so the cool thing is that cloud computing is where all the businesses are going that's where everything's going everyone's you know putting all their data in the cloud right so to be able to detect if you're running within something like VMware or QEMew QEMew is a open source virtualization mechanism or virtual box or Amazon EC2 all we really need to do is be able to get the user to run a piece of Java within their browser so just a simple Java applet that would detect the MAC address and then do a simple regular expression check to say okay are you within this range and you look at the first three octets you say okay compare that and then just determine what we're looking at so that's that's already incorporated pretty good and we can actually for Amazon EC2 it's even better we can say okay I know you're in this particular region so like US East or Europe West that's pretty nice so this pretty much works everywhere again so IE Firefox Linux Windows add a couple of issues with Mac but you know talk to the Apple guys and they say yeah that's awful work so awesome so what we're going to be able to do is we're going to be able to leverage this sort of information in our attacks so we don't really have any attacks against you know the virtualization mechanisms but you know well that's up that stuff will come in time so the next component that I looked at was actually taking this to the next level and actually getting shells based on you know the sort of information so if we can detect that the user has Java within their browser just like Java dot enabled and such all we need to do is just create a self-signed Java applet self-signed by something like the Microsoft Corporation and they just run the applet and we get a shell that's pretty cool and we'll just customize another one for Linux the same thing for Mac and you know it's it's pretty nice so if they're running in Linux with pseudo cash to rootpribs great now get a root shell pretty nice and if we're you know if they don't have Java enabled we'll just redirect them to browser auto-pone which is the the metasploit exploitation framework so the next component so in summary I did a ton of work on beef we have tour detection we have the Java pink sweeper that our snake wrote and what it is it's basically determining based on some really cool Ajax which you can talk about if you want determining what are the internal IP addresses for this organization for this person who went to my page we'll just do an internal pink sweep on their network to determine okay what else can we see wouldn't it be able to be great to go to a page and get a complete pen test that's what we're going for so the next component is just looking at increasing and just integrating all this stuff into beef so it's really just a full detection engine for your pen test and then getting all that information to be transmitted between modules is what we're going to work on next we also incorporated some of the cool stuff to be able to determine okay give me the Alexa top 500 of where this person has been so now I know okay they've been to you know Google you've been to Twitter all that stuff cross-site request forgery all that stuff comes into play so a new version coming out so there's a bunch of different ways to get internal IP address range or the IP address of the actual box you're on I'm not gonna spend much time on this stuff what a really good one I thought was SCP when SCP used to have a vulnerability where you could actually get people to upload files to you which was interesting word PDF bugs you'll find this stuff on decloak net interestingly I went through the about config just kind of hoping I could short circuit a lot of this research and just kind of jump right to the protocol handlers and look at them turns out that most protocol handlers that are really interesting don't actually reside in about config at least not for protocol handler you think it would but it doesn't including ITMS ITMS is what iTunes uses to communicate in fact I've talked a lot with Apple over the last couple weeks and Firefox and the IE guys all about this issue because who owns this bug so you come to my web page I spawn ITMS protocol with there's a bug in ITMS that allows me to make it visit any page forget that for a second just assume it worked that way naturally so I get you to visit my page but instead of going through the proxy that you set up your instead following the proxy settings of Firefox which are different than that of the base operating system it doesn't matter what operating system we're talking about but you know let's say it's Windows and then you connect directly to me so now I've got your real IP address as well as the proxy IP address as long as I submit some sort of payload in the DNS request so and this is already on decloak net it's been there for a couple months I just did never posted about it but if you go check it out it's already there so we spent a lot of time talking with the guys like whose bug is this where does it belong I don't think we ever came to a real conclusion but I'm more and more thinking that it actually is Firefox's bug except that if they ever fix it it'll make a lot of people's lives a lot worse because they won't be able to have a proxy inside inside Firefox as well as using everything else so the conclusion to that is if you want to be anonymous and you're using Firefox you have to use something like Tor button not Tor browser to our button they're very different one is totally insecure and the other one is very good so just FYI so David Byrne came up something probably a year and a half ago or so called res timing so he could basically check how fast something was coming up by instantiating it like a thousand times so if you instantiate a thousand times and it's not there it's a different time than if it is there which is great you can enumerate anything on the file system but it just takes a long time so not particularly useful and as it stands by itself I made it less useful by porting it to a non-java script version but you know hey now you don't have to have javascript turned on so then I came up with something called S&B enum and I didn't publish it but here I tell you all about it right now so I told Rich Mogul about this you know I'm able to enumerate your hard drive when you visit my website and here you go and I gave him a link and it was it was telling what he had installed and he's like what the fuck and that's right I mean it's it's kind of like you don't expect that to happen that is definitely across zone boundary thing that's vulnerable and IE in multiple ways both with res timing and S&B also included in beef also included beef sorry and I'll show you what that looks like in a second but usernames and computer names are really what we're after you know we don't IP address is great but what if I can get your you I want to know who you are maybe there's like 20 users on that box I want to know who you are but more importantly it's easier to track you down if your name is Bob Smith it's a little harder but but you know I mean it's you know how many you know Robert Hanson's are there in the security world like two or three you know it's makes it a lot easier so one example in IE if you can get someone to cut and paste this URL it'll actually drop the username and the full path of where where their user directory is or computer name and full path of the of where their user directory is you know I office get it a little bit uppercase lowercase kind of thing so basically you send them a broken link in an email you say hey can you please you know click on this or whatever that they can't click on it because it's a broken link but they'll cut and paste it into IE and boom you got all that information works pretty well S&B again a different way to do S&B inside of an iframe you have something as simple as file colon slash slash slash and then some IP address which is the location of where your S&B server sitting on the other side as long as you got Windows networking working I was told that about 50% of networks don't have the ability to have outbound S&B through you know outside the the corporate firewall whatever but 50% is still pretty good which means I can actually get all of your information and when I do mean all I mean all computer name your name what service pack you have all kinds of crazy stuff so as long as you got something sitting there watching the wire you can actually get all kinds of crazy information from that payload so S&B num is great but it's and it's pretty fast I mean you can you can probably enumerate it I don't know probably several hundred things in a second or a couple seconds it's pretty fast so how it works is it basically does a file colon slash slash slash slash for the local drive and tries to pick out files so in JavaScript space you're only allowed to pull out certain things like images CSS JavaScript I'm not allowed to pull dot exes or dot log or anything else that would be very interesting I just can't do it but with this information I can actually narrow down what you do have and then combining this with res colon now I can actually pull out this very specific granular thing you've got and not just kind of the big picture of what your drive looks like so use S&B first res timing for the granularity and then you start owning them based off what you actually know this is pretty good at being it's pretty accurate with the exception of once you uninstalled something a lot of times in the uninstall process it leaves images in place but other than that it is pretty accurate I talked to the IE guys about it they know about it I don't know if there's a patch forthcoming I think it would be kind of difficult to fix this is an unauthenticated state but it doesn't matter because you're local to the drive so the other thing that we tried to do and I actually threw away the code I built it and then I threw it away I was you know so frustrated I'm like I hate this but I was able to do username detection the problem actually numerate usernames the problem is the key space for usernames is absolutely ginormous and if I have to go through and pull images for every single every single one of these different things so let's let's take one of these for example if I had flash and flash had an image that was based inside my user directory I could look for you know okay and I know you have flash but now I got to look for your user directory so you can actually use them in combination to figure out where usernames and usernames are on the drive the problem with that is that it takes a very long time to enumerate in fact I never got it to work unless it was only like 20 usernames so if you know it's one of 20 things it's pretty fast but if you know it's one of 20,000 things the user will be sitting there for a very long time might even crash the computer so so all that stuff's great it's fantastic except for it all relies that I have a trap so I have to like convince you to do something or I have to sort of know that you like want to come and attack me and I have to kind of lay this trap out which is I mean that's fantastic and everything but it's not all that practical in a lot of cases or have to you know do some of the job or stuff and actually automatically own every single one of my users and then you know go back and say okay who were there all those users that I compromised you know it's sort of like it's it's too much of a wide you know range to it's like a thermonuclear weapon when I just want to take out one person so I was thinking about other ways you kind of go backwards in time and try to do stuff or like have such a such a passive looking listening device that you'd be able to kind of grab all this information so first thing I was thinking is malware writes the obvious thing if you can get malware on people's boxes it would be great but again noisy and you'd have to do it to everybody and not not you know kind of OS specific that kind of stuff second is stuff like the end of spyware you know like come on give me some spyware you know I'm talking about like Alexa or something this phoning home all the time saying where you are trying to give information out but that relies you on you being Alexa or having all your users have Alexa and it's just not that common of a plug-in or toolbar or whatever so what about Google what about safe browsing so so I went back and I started really thinking about it and and it turns out that there's some things that are going on in the hood of safe browsing so safe browsing is designed to protect you so let's say you go to a phishing site or malware site the browser will kind of pop up alerts say you're not supposed to go there you're gonna get compromised or whatever so it's great for consumers it's actually great for security except for the fact that it's phoning home all the time so I left it running for a day and I got somewhere in the neighborhood of you if you average it all out to around 30 requests per hour out to Google which is quite a bit so it does it's not like perfect sometimes it's a little bit more sometimes it's a little less it goes in burst sometimes it's like 15 at once and then 12 and then 18 you know so it's kind of it's not all very consistent and I talked to the Mozilla guys about that and they said well you know it really shouldn't be honing phoning home that much there might have been a bug there and there could easily be so that was just my test you feel free to test yourself but the important part here is that it's phoning home and actually setting a cookie so we all know cookies can be user tracking you know if this might be actually a unique identifier it might be a hash an algorithm that they use to say when we deliver this encrypted payload you can decrypt it with the key that you just sent us that kind of thing so public private keys sort of thing but that's irrelevant I actually don't care what that keys consists of all I care about is that it's unique you can clear your cookies all the time and people are pretty good about that let's say you wake up in the morning and you're gonna go hack somebody so you log in you turn on your browser you go get a cup of coffee it's phoning home setting cookies right and then you turn on your proxy and you decide you're gonna go hack somebody well so the nice thing about this is that it actually does follow the proxy normally you want to go outside the proxy and you want to try to identify who someone is directly but in this case it follows the proxy it's very polite and does exactly what it's supposed to do the problem with that is that let's say I'm on the other side and I'm China and I want to kill that dissident or whatever you know it's it's great to be able to say okay well you know I know I'm getting hacked from this proxy you know maybe someone else has some information about it maybe I can go try to break in that proxy but maybe it's outside the country maybe there's all things other things that get in the way or maybe they aren't my minus RF on the way out or whatever but it's been phoning home the whole time so I can go to Google and I can say hey Google can you give me the IP address and all associated IP addresses with this cookie over this timestamp so this cookie came in this timestamp tell me everything else outside of that and as a result they can actually get everything that's correlated to that so they can get your home you know IP address they can get the Starbucks down the street they can get whatever right just depends on wherever you've connected from and it doesn't matter if you clear cookies on the what as you're booting up or as long you know you have to do it out as well as when you're shutting down so you clean your cookies before you start because you don't want to leak information out that might be going to that the hack the client that you want to hack or whatever so you want to tear down your session after it's over but now you still set that cookie was still funding home that whole time is a new cookie and now you're using the new cookie when you tear down your session and you're using it from your own personal IP address so it really doesn't matter whether you turn it off and one place or the other you have to do it in both places to be consistent you have to always do it and so not that many people clean their cookies that religiously where they're going to never get caught by that the dangerous part about this is now you're thinking well I'm going to go and turn that off well it doesn't matter this is all backwards in time so this is all in the logs so if you've ever done anything ever illegal that when you're using Firefox or Chrome for the last probably a year and a half or so actually maybe longer than that they have the potential of having that logs so now whether they do have the logs or not is in question they say that they keep all logs for two weeks then after that they keep in aggregate so there's two ways to keep things in aggregate you can keep like global statistics like the amount of people who visit the site or something that's a that's an aggregate another aggregate is IP address cookie and time stamps that is easily enough information in aggregate to de anonymize anyone who uses your browser so they also say we're not going to give let's see they say there's their terms of service you know we have good faith belief that access use for preservation or disclosure such information is reasonably necessary to satisfy any applicable law so any legal entity that comes down says we want this information theoretically has it regulation legal process or enforceable government request government request enforce applicable terms of service including investigation of potential violations thereof detect prevalent or otherwise address fraud security or technical issues or protect against harm to the rights property or safety of Google its users or the public so basically they pretty much have carte blanche now let's say that they were totally benign and they had no intentions of ever using this ever for anything bad it kind of doesn't matter so let's say the FBI comes down within that first two week period and let's say they are getting rid of everything let's say they're they're really trying to do a good job the FBI can still come down say you need to hold on to this information for an additional I think it's like 60 days or something can anyone fact check me on that 60 no one knows that wow it's bad so I think they can keep it for like 60 days or something after that fact and say well I don't have the subpoena or warrant what's that 90 days alright and then they can force you to hold it indefinitely after that if they do have if they do have the subpoena or whatever so it and they also say we don't correlate this to your username well again they don't do that but that is irrelevant the government can still force them to do that correlation on their behalf so it almost just doesn't matter what their intentions are in this it still can be used so I'm sorry I was sort of in my head thinking you're all going to be very close and could read what's on the screen but basically this is just the transmission of the cookie back and forth and and the shawar and some of the payloads going back and forth but this information will be posted online if you want to take a look at it or just open up a proxy and just watch the information go by it's pretty simple Chrome however has an interesting thing so the hypothesis that they're doing totally all this all benign and they're not meaning to track anybody and that stuff kind of goes out the window when you're talking about Chrome Chrome has an additional two pieces that are going across the wire when it does updates updates and happen 30 times an hour they happen once every five hours so significantly less amount of time but they do send two additional pieces of information which I think are pretty interesting machine ID and user ID so why do you know to need to know my user ID to give me an update right it doesn't make sense to me I mean I can figure out maybe it's plausible to it's important to know what my machine information is so you can track it and know hey maybe we should have more updates for Windows through you know server blah blah blah this very specific variant but user ID you know so I I think it's a little unusual to pass that information out to the web that's certainly a huge privacy concern and certainly can be tracked back to your user over time because that information doesn't change so with that I think we should just get to the demos so this first one is being able to identify all the different websites that the user has been to so all they're doing is they're like connecting to beef and we just detect all that information so this is the new version of beef and it's just the the visited URL so as you'll see here we have the Alexa top 500 and all we need to do is just click send and then you get the information now the new version of beef is really awesome because it has this new improved logging functionality so the older versions didn't really have this and now all the information is just right there and all you get is the information these are the pages they've been to you don't get any junk where you know they've been to you they haven't been to this website they just get the good stuff so that was using the CSS history hack that you're all probably familiar with using the view you know if a color of a link is changed based off of whether you been there or not you can detect that in JavaScript space you don't have to use JavaScript but beef heavily uses JavaScript so this one is just detecting the plug-ins within the browser so as you can see you have like tons of information with all their plugins they have a vulnerable plug-in all we need to do is just go about actually exploiting it so you guys can see how we're going with this right you're getting information about the client you're going after them based on that specific piece of information instead of just dumping a bunch of stuff which is going to cause a lot of pop-ups problem with hacking browsers is there's a lot of warnings through every single one of those steps so the more you can sort of reduce that the more likely it is that you're going to get a shell on the box or you know compromise or network or whatever you're trying to do without causing that that user to be aware of that happening and that's what we're all about we're all about getting shells so this is the virtualization detection mechanism the older version had the detection of the mware but this actual version actually detects QMU virtual box Amazon EC2 so this demonstration is just Amazon or this is actually the mware and this will be released in the next couple of weeks this is interesting for a couple different reasons a lot of security dudes happen to use some sort of virtualization so if you don't want to pop your shell inside of a security guy's window it's kind of nice to know that you're inside of a VM it could also be interesting to know where geographically they are or maybe they're using it's a virtual host but it's a bad one or maybe the network isn't well secured so once you're on a virtual box it's essentially shared hosting and you can start attacking the network all kinds of stuff okay so the next one is using browser auto phone so I couldn't actually get the newest version of browser auto phone to work because I didn't have a VM where a system to actually exploit so I just use Netcat on Backtrack 4 so it's pretty good it's all we're going to do is we're just going to inject an iframe and just redirect them to this page so what we'll see here is just modifying the configuration information I've already included the RC file as you guys will see up there but this is just redirecting them to a Netcat session just listening so obviously if you're going to do browser exploitation all you would do would just be you know have your metasploit system listening and then just send your exploits so there we can see the client connected they sent their information in Netcat game over now the Java applet this isn't really really cool and what we would do if we actually had a client on Linux or Mac we would just detect actually what operating system they're running and then present them with the corresponding VM or Java applet in this case to actually exploit their system just get a shell do something a little bit different this particular actual exploitation is downloading an exe you know MSF payload and then just you know run it and this is self-signed by the Microsoft corporation obviously for Apple you would just do Apple and must be secure yeah must be so I just called it update Microsoft corporation switch over to Linux box zoom in and there's our shell do you all catch that like you can compromise people by going to web page single click one click pretty easy I get a shell done come on there's no patch for this there's no patch for this this works as by design okay now the SMB enum stuff thank you alright I can actually see you guys now supposed to picture you naked that's a SMB enum I think I'm good on picturing them yeah I know I know I was gonna say I'm good new so bingo we got we got all the software that's installed in this box so this is a I put this list together in like literally 20 minutes or something so that could be greatly greatly improved it's just a matter of time how much time you really want to spend making it go through and making those SMB requests it's local so it's pretty damn fast you could probably do it up to maybe a thousand or two thousand within just a few seconds but beyond that you probably want to find some other way to enumerate patches accepted yeah come on guys so this demo is actually disabling safe browsing so you know you can send this to your mom or your dad just disable safe browsing okay let's give them a quick how-to and full screens on there we go so this is one way to do it you can also do it through tools security and then click the two buttons but if about config is your is your sweet spot you can also do it there simple enough of course you know the Mozilla guys were in the audience when we did this at Black Hat and they said well we really don't recommend that people turn safe browsing and you know safe you know safe browsing off all right I'm sure you all appreciate bright lights after a hangover all right but anyway yeah we talked to them they're like yeah we we we really appreciate people to keep it on you know it's it's better for their pride better for their security and all that stuff and that's true but it's just a matter of understanding the trade-offs if you happen to be a security guy and don't happen to be vulnerable to a lot of that stuff or happen to know that your target isn't going to try to exploit you back then it probably is a good idea that you turn it off so yeah that's pretty much all the demos I had one more component the client side stuff this is just an example of sniffing a client side certificate so as you can see you get like common name and all this information about your organization or whatever and that's just an you know just using wire shark and you know public certificate so this is just a quick example of how to set it up I'll put this stuff on my blog and you know you guys can take a look it's pretty easy all I did was I just used open SSL and created my own certificate and then I just had it listen and correspondingly accept client-side certs pretty easy so more and more banks are starting to use client-side certs not so much the United States but definitely a lot more internationally a few banks here have started doing it as well trading platforms that kind of stuff it's kind of more common like for smaller companies who want to protect themselves without kind of a lot of the hassles of a lot like tokens like actual hardware tokens that kind of stuff so we we actually are going to be in room 106 for Q&A if you guys have any questions but I appreciate you all coming out let's just show them where they can get like the slides and such okay so he's going to put the slides up if you want to write it down otherwise just meet us in room 106 right here all the slides are going to be here thank you very much guys thank you


starlight was a rise heart and then immediately after we pulled the mirror jade timothy sus Shout out to timothy sus in the chat very nice Sick name He's sus of all of us. I think is what's going on that rhymed by the way. That was kind of dope Okay, come on starlight be number three make it happen for us All right I'm on a roll, baby.  No, it's just not oh triple tag is thrust very nice It's just not jared.  It's it's a tribulation. You're living with man I I respect you for living with such poor taste. I understand. It's pretty impressive honestly like I gotta respect it. I gotta respect it never backing down from like in such terrible movies Guess your pulls have made you money or lost money. Well, so far with those it's probably gonna help I don't actually know though. We'll have to see how many we pulled up everything richer 199 thank you want to open a ghost from the uh past Case so in 2021 so the first ghost in the past case The dark magician that would be kind of fun. Thanks for the 199 We're actually pulling the vent strat to avoid sub goal pretty sus to me Wow ex gamer. Wow Flipping on me man pineapple on pizza is the go never heard that one before I'm just kidding. Well now using plural with movies disrespectful Will you like wait I can't remember. I think I feel like you said that you don't really like uh rise of skywalker that much It's single hand made me reconsider everything I was interested in I know a lot of people that it's the same thing for them My brother doesn't even watch star wars anymore because of the sequels. It's sad He won't watch any of the new stuff.  I'm like, dude Come on. Give it a chance. He's like, no, no, it's terrible. I'm not watching it Dude your top one to 100 list Dude, it was painful.  That's pretty bad All right, we're getting down. We're gonna move these because we need uh To get down right here What up david? How's it going? All right, here we go Can we do this Can we pull a third star like game of thrones season eight did that to me? I can never watch it Yeah, I'm never gonna watch that again either Uh, it's so bad game of thrones season eight is is horrible It's It's up there with the last Jedi. It's really bad You got a friend in me You got a friend in me When troubles get over any miles and miles from your nice warm bed All right, mando. Very nice. Mando is sick. It's coming back march 1st. Pretty excited for it Game of thrones season eight doesn't exist true. Good point. Secret rare. Good Yeah, god season eight that happened New series of mando, it's gonna be fire for sure. There's another secret rare All right, let's that Best season ever pog Yeah, it's pretty poggers. That's how I would describe it poggers. All right. We have oh a triple tactics thrust Triple tactics thrust triple tactics thrust. Yeah Right to the super okay Breaking bag that is good if we start to finish breaking bad's great. That'll call sol's great um tg thrust All right Mega pack we've opened some mega packs. They were pretty rough to us so we haven't been opening them since then because They kind of waxed us but Where's the 10 star light pack? I don't know. I haven't been able to find them yet Uh, where's the super wait? There it is. Okay. All right Now this is pog racing Pog racing All right, let's go Glad to karibo. Don't forget him. He's clutch I want to know how many of the good cards I pulled Have you seen spartacus blood and sand? I have not I have not Me another glad to karibo cool Little toaster Dude the little toaster those were good times man made me instantly bored watching it Dude the the great little toaster whatever he's called. I remember that from when I was like four years old Yeah, I remember that back in the day Where you've come since those dark little vids? Thank you, man. I appreciate it Are you finishing the packs? Of course, of course. We're gonna finish these. We're gonna try and pull another starlight How many cases of 1k packs four cases? It's a little bit more than a thousand actually but Brave little toasters the best movie. Yeah. Yeah, it's game. We'll stop hating on the brave little toaster, man Ultra rare cool Okay Keep it going. Don't give in guys Remember to hydrate All right Can we get more star lights ultra rare cool cool? We can do this we can pull the starlight Not a top 100. Well, probably not a top 100. Yeah, that's fair. Okay secret rare. I'm good Okay, just in case I knock those over i'm not gonna put those star lights under those just in case that could be I want to put them over here on their own uh their own side I am very excited for the 25th anniversary. I think that's going to be super hyped Last Jedi bad. Yes Very nice Playing against runics is worse than eating pineapple on pizza. Wow, that's uh, not that bad then Took a sip right when you said it nice When does metal raiders get released? Uh, the the individual ones I think is after the 25th anniversary I think it's like in june or something But the 25th is in april Uh-oh Let's go Here we go super I cut that one open First set I bought a case for pretty hyped to open this week. Oh nice. All right. Good luck with your case, man Hopefully pull starlight Can we pull the The love The love of the star lights. Do you think they'll slip in quarter sensor rares? No, I don't think so I do not I think it'd be cool, but I don't think they will. How much does the 25th cost? Uh, 32 bucks. I think per box something like that Can we get a starlight rare, please I've stacked these commons like they're like a over a foot now I think and there's like a bunch of different. Oh, I cut this one open too I was being a little too aggressive when we were opening these Making you hungry. I'm hungry, man I want some food. I'm gonna go eat after this I don't know what I'm gonna eat though How long's the foot's on hypernova code good for I think the cases are sold out I don't know if they were boxes left or not Uh, you'll have to look but I know they've sold out of cases. I think I know I think is what I said. So yeah, I think I'm not totally sure Come on, baby. Give us something good Can we get it can we get something good? To day to day Okay, super We need to pull something. Oh, there we go. I haven't pulled that kind of while Let's get a third starlight guys. We're gonna make it happen. It's gonna happen. It's gonna be hype It's gonna be awesome. It's gonna be epic Okay, not that time getting down toward not the end probably like It's probably a little bit less than a case maybe a case something like that I don't know I think therefore I am ruxin nice nice. That's a good quote by me Good quote by me Oh, no, these are falling all over the place All right, go to chilies do chilies is the best man. We go there all the time That's sound pretty good to be honest. Maybe we will go there Good show videos. Thank you. Thank you. Matthew. How about I thank you as well? Glad you like them Morphing jar from champion back. I turn it back turn it back to and for when before time Maybe went to get a plushie because it was so adorable seeing little foot when he was a baby Yes gamer. That was maybe the funniest message you've ever sent When before time maybe want to get a plushie because he was so adorable seeing little foot when he was a baby That's funny. All right, 20 more likes for a thousand likes. That would be awesome We got to a thousand today. Oh, nice secret rare. Cool Land before time still makes me cry. It's I'm very emotional Okay thoughts on bambi bambi thoughts on bambi thoughts okay We're getting you guys can see The packs are getting a little low up here. I'll show her ice jay. No cast archvind sir I can't read farfa probably True you explain different kinds of secretaries. I'm really difficult differentiating them. What do you mean different kinds? Well, the regular secret rare The only different secret rare is the prismatic secret, but that's a whole different rarity basically We've got 30 minutes to pull another starlight Might be able to do it. We'll have to see Sol the bambi dark meme too much. Oh no sound sketch sound sketch 12 likes away From a solid 1k Oh that one I cut open clearly super Hope you get some hot pulls today. Thank you very much. I hope I do as well So far we've had some good ones, but we are looking for Uno mass one more Okay cast archvind cool You got about an hour. Okay. We might be done in an hour. We'll have to see Soon depends how fast I open these Open my case now at the same time as your video. Good luck from germany. Hopefully you pull something good, man Homeward bound is a real tier juggler. Those were classics. I watched those a bunch. Homeward bound and homework bound. Isn't there three of them? I watched two a lot. I feel like 1k likes equals mega pack. We've done a few mega packs, but we haven't had You imagine if we'd done a mega pack with both those starlights that were so close together Dang, that's a missed opportunity right there. We could have gotten two starlights in one mega pack That would have been insane That would have been awesome Where are you? starlight rare I believe there we go ultra air cool. We'll take that One guard skip super rough and special two guard skip beyond two I mean, I don't know if you need to add another one It could just be all super rucks and special or it could be ultra rucks and special I think it could be ultra rucks and special for three and then if it goes for four or more You could call like a secret rucks and special which is like we'll never have you hardly ever happened. So Yeah, maybe it maybe could be cool Flocks in the house made you cry. Yeah, it was a sad one Very sad The lion king. Yeah true true Homeward bound behind the scenes ruins the movie really There's a behind the scenes for homework bound Thank you, Romeo Make sure to subscribe to the channel if you're enjoying the stream Thoughts on yogis winning a third MVP. He's been balling man. He's been balling. It could happen Unfortunately, I had like Janice and Zion or my two picks that I did uh You know preseason stuff on So, yeah, not gonna happen for Zion. Obviously, Janice still does have an outside shot. I think but He's still playing really well. So Interstellar I have seen it. Yeah Will we get a star? Oh upside down galactic rainbow. Nice Check discord in general little foot plushy. Can you play? Okay, yeah, let me look I'm gonna look at it. I'm checking the discord I'm checking the discord for the little foot plushy. Okay Let me look at it. Where did you tag me? Where is it? Where in the discord? Didn't bet on luka the luka had the best odds. So it was not very good value Speaking of where's josh Where is it? Where in the discord ex gamer? I don't see it Yes gamer. Tell me where it is. I want to see the little foot plushy And then make sure you guys join the discord if you haven't already hop in the discord I bought an ultra rare l.o.b. darman just from tcg player general. Okay general general general. Let's see New mentions. Yeah, you gotta tag me Okay, here we go That's not a plushy.  All right. All right. Cool. Cool. Cool. Good try. Good try. I can imagine the plushy though. I can imagine it I'm sure it's cool It's not a plushy, but little foot being cute true fair Ultra nice. Okay. These are all flipped over. It's getting on my nerves At what point does it stop? There we go the first one traumatized me Dang Somebody somebody put the discord link in the chat so everybody can join if they haven't All right Ex gamer exposed Let's go exposing ex gamer for not having a little foot plushy Four cases four cases a little bit over a thousand. It's 288 times four Troy, I've not seen that. I've heard it's good, but I've never seen it. Okay, super rare Keep it going Keep it going. Send me a little look on the chat guys YouTube sub twitch sub thing comes for a circle No, it's not the same.  Nice. Okay. I'm excited to see that Modern little foot plushies aren't purple though. I don't like the brown one Wow disrespecting. Oh, come on, man. Wait little foot still has modern plushy. They still make land before time It's still a thing I didn't realize it was still going Didn't they have like 28 movies back in the day? What are they on like land before time 486 Where the star lights where the star lights Brave little toaster didn't mess you up. I don't remember what happened in it. I just remember that I liked it Pirates of dark waters. No, I have no idea what that is Still online, baby. We're not quite to the three hour mark, but we're getting there all right Land before time 27 global war me disaster Dinosaurs returned because they were frozen in the ice in uh the in the whatever it's called the north pole Have you seen grave of the fireflies? No, I haven't Need to bring back last Jedi luck true Dude, if we pull dust dragon pull the top three star lights, this would be the most high opening like out of four cases ever Okay I've seen lord of the flies, which is pretty weird as well Very weird actually Okay, okay I'm invested in opening videos. It's so fun.  Nice been a while since we pulled one of those Yeah, it's exciting to pull a big card. It's really exciting. Okay, super Not grave. Is it a sketchy one? Oh triple tactics thrust now. We're getting the fire, baby Had a local open up two cases and had no luck with star lights. You're doing better than him Yes, we have opened so this is four total cases. We have pulled two star lights, which are The top two so we have had good luck um We're still looking for hopefully a third one that'd be cool, but I think we're on ratio with two So we'll see if we get lucky and get like if we get another one, it'll be really lucky It's gonna be 14 of the land before time movies Ladies from 2016. Okay. I remember there was a ton of them back in the day like in early 2000s ultra rare ice jade cool, which is better letters in english or in japanese Well for me english because I can't read japanese, but Definitely not something light-hearted. Okay. I'll avoid it then I'll avoid that one big time Cool All right super rare. We're still looking for star light here logs Oh, that's stuck to my fingers. That's not a good sign. Okay. I thought it was going to be a good sign We were going to pull something crazy and it wasn't And not once seen yugioh cards were set. What in japan? You never saw yugioh cards I feel like every time I see something from japan It's people talking about how they found yugioh cards cast ira theosis cast ira theosis is very good Fight club. I did watch that. I have watched that I watched that in college. I think At some point so been a few years now that i'm an old man and i've been in college for a while Gargoyles, I do slightly remember that. I don't remember much about it though I just remember them. They were like the gargoyles that were on top of the Uh, you know like uh buildings or whatever It's been two hours, but I am back. Nice. You've returned Making your epic return Can we get one more big starlight rare? Did it happen yet um rhyme style? Would you like to see the goods? Um These are the two we pulled these back to back Did you get anything? Yep, are there starlights? Yep, I'll be done in An hour or 45 minutes or something like that. Okay all right Yeah, so we pulled both of these Uh, very nice top two starlights of the set now we're looking for the third one Was the best part of that show interesting My my stack's getting really tall of the pulls. It's getting very tall right now Yeah, we we kind of got we kind of went off we pulled them within a two minute span like It was insane. We went for really long time without pulling one then we pulled back to back and we haven't pulled one since Your son pulled the uh the moonbree on in one pack. That's insane. That's crazy. Look. Yeah, that card's really hard to pull I don't know how hard it is compared to like starlights, but I know that the box is like 300 dollars So it's very expensive to get a lot of boxes of that Oh my goodness. We are almost there Not sure how many are left looks like a decent amount, but not too much. You can see the tops now Can we get one more starlight? Yeah Justice league animated series. I never did really watch that one myself All right This is it ultra rare nice nice nice How many starlights are in this set five? There's always five in the core sets After since they changed it used to be four and then they added a fifth. Okay galaxy photon dragon I feel like the uh the good ones are not I didn't say ghost race. I said starlight rare starlight rares are twice as hard to pull as ghost race, so There is a there is a significant difference between those two Um unless you're talking about about as legend crystal revenge with a one in a case Um, I'd be surprised if it was harder to pull than that Like a specific starlight or one in 10 cases It might be kind of like that with the other alters. Um, of course looking forward to the 25th anniversary I've seen dragon ball and dragon ball z Some of super but I didn't really watch it that closely when I watched it. It was a long time ago Cash tier rise hot the rise hot So many good pulls so far another one of that guy. I feel like we got a lot of him ultra rare Just pretty good. I think he's decent Getting close, but we still got a decent amount of packs if we get one more starlight I'm gonna be ecstatic with this opening. I'm already really happy with it and like Like, you know, we've done more than the average for sure So if we can pull one more it'd be real crazy Starlight ghost record. There is not but that would be pretty cool I watched 20 minutes of dragon ball and fortnight that one time Hey, I think they're bringing it back aren't they isn't a dragon ball coming back to fortnight if rhyme style is here He would know Or maybe it already did happen Okay to Oh, no Don't knock the cards How many so far we've got a couple Gotta get a quick stretch. Ah quick stretch. Oh, that feels good. Oh, that feels nice. Ah, wow, that was That was good. I've really like stood up this entire time How long has it been three hours now? Okay Three hours of opening Photon fortnight is still a thing. Uh, yeah, it's pretty big. Oh, it's fortnight. It's pretty huge Okay That'd be like asking if cod was still a thing. It's like, yeah, of course of this I would not I would not watch last Jedi for 10 gets its ups. That is not worth That movie is awful. That movie is like traumatized me Secret rare nice Oh, super Can we get a starlight tonight? How much is a ghost rare rainbow dragon worth in lp? I'm not exactly sure depends on first dead on limb You could check a collector app or tcg player To figure it out Agreed. It's awful. Good Good. I'm glad you agree For a ghost rare. No, you'd have to give me like It'd have to be like 10k for me to watch it And even then I'd be like, do I really want to watch this? But it's like it's 10k. It's kind of a lot of money But Like at one k even I don't think I would do it for one k. It's just like it's like no I just I just can't I can't it's just too bad.  I'm not faking this. I actually hate it that much That's why we talk about all the time because Jared brings up how good it is all the time What are you doing with all the comments sending him a sassy out of I'd rather watch paint dry than watch the last jedi. I I agree. I agree That is very true galactic karibo. Cool What about 10k dragon to make you watch it? Nope. Nope.  I answered this earlier, but the 25th anniversary, of course That's basically all I know then the gay guardian stuff. But that's all we really know right now It's hard to really say that because you don't know most of the sets this year Revenge of the set definitely the best one for sure.  I would hate it though. Just keep that in mind. I would hate every second. All right. I'd be way. I'd like please end Every second I would think that Yeah, it starts off promising like the bat the beginning is not too bad. Okay. The beginning is a little goofy though That's I it was off to a bad start but they were like making jokes back and forth I was like, okay Feels like a marvel movie, but okay And then uh, yeah, it didn't get any better from there, but it's still probably the best part Episode three is the best. I don't know how they didn't think that in the first place. It was great I guess the classic. I mean the classic three. It's hard to beat those but Yeah episode three is pretty awesome What'd you miss?  Yeah episode episode five is good episode four and six are good too though. I like all of them Nine is horrible too.  They still could have gone the right way But they didn't it was after that one when they really threw it away ultra Can we pull something big? Can we pull something big three hours of opening today? And we have pulled pretty well, I would say Dr. Strange. I think a lot of people didn't like Dr. Strange. I thought it was fine, but A lot rise skywalk is terrible, of course. It's really bad I think I said like a three out of ten when I watched it It was something like that I was like man that movie sucked But it wasn't like a negative one out of ten like uh last Jedi for me But then I started thinking about I was like man that movie was terrible So maybe it was worse than a three out of ten Never even watched nine after eight. Yeah, I think a lot of people did that. They just were like, yeah Amazing spider-man x-men 90s. I don't think I watched those Or what those the cartoons maybe I did Yeah, well, it's not good, but it but they hadn't ruined everything yet You know, it's like it's not a good movie, but they hadn't like ruined anything. So It's kind of like, okay, whatever. Maybe it'll turn around the next one All right Trum Superhero movie is worse than the last Jedi what any superhero movie What is everyone's best starlight pull? Yeah, what's everyone's best starlight pull in the chat? What's your best one if you've pulled one if you haven't, you know, that's understandable, but Okay, I'm back. Still no star. Yeah, we haven't pulled one Since you've been gone. Uh, yes gamer since you've been gone Okay, let's move this over here They ruined luke true big time. That was the worst part Okay, another one of that guy. I feel like I've pulled so many of him Now can we get him in starlight? No, not that time Got the ice jade rip All right, so it's good Never pulled one Haven't never owned a starlight.  Nice red eyes dark jacoon. That's a good pull Now we have dogmatica. Is that it again? Starlight Stratos, that's sick. Yeah 10k dragon and blue eyes. Why wait blue eyes like the ocg one Wait, you guys are getting starlights Wait a second I've only pulled access code in superpoly. That's pretty good Blackwing armor master not bad either oppo. That's really good. Okay Okay Right leg of the forbidden one you got a little exodia action haven't yet. Okay. Good luck to you guys who have not pulled one Hopefully you'll pull him Okay, this is what I'm gonna start a stack over here. I'm gonna move these packs. Okay, we can do this Pulled a starlight dragoon Very nice. What if these aren't my hands? I'm just talking It's somebody else's hands There's a second person hiding under my desk. Just like opening packs Pulled the arise heart yesterday from two boxes. Dude. Nice Just pulled a starlight. It's the link five triber gauge. Nice. Congrats I'd say your best starlight pulls the ip massacre in it. Yeah, definitely the two ip's in the same case It's not gonna be beat. It's gonna be hard to beat that in terms of starlights So close but yet so far away galactic karibo Will we pull a starlight rear definitely big inspiration getting back into collecting hope you pull starlights in this set Thank you. Nox. I appreciate it. I had to hear that Oh, man Oh, nice. That's a good one upside down pack Buddy pulled a king regulus. Nice. That was uh Dimension force, right Rare desk mosquito.  I'm sure people will be hyped for that Des mosquito coming out starlight rear Four out of five have been super weak. No, hopefully the fifth one will be better, man You need something big Starlight on the way. Yeah, you got to believe man. One of them is gonna be fire Animation chronicles blue eyes. Yeah. Yeah. Yeah the the ocg one nice I like ghosts better. I pulled the ghost dm. Nice. Ghosts are nice A few more good pulls in here. Hopefully a starlight and we'll be real happy Let's go. We're getting close to the end Yeah, captain at carry Shout out from Ohio sending all the luck shout out to Ohio. Let's go know what you know pretty well over there I'm my brand of deck in high rarity. Nice okay Getting close to the end. We got three hours and 10 minutes in nice pressured planet to end it good Or getting close to the end People running about starlight now that would be a very very expensive one Cast your rise heart With drake from drake and josh nice But the starlight blackwing armor master I pulled has a crease That is rough man right out of the pack. That's that's pretty tough That's got to be a bummer It's all right. No, oh, hi. Oh nice The old Ohio Collectors were a hungry burger if they had one dude, they better have that that would be so funny The wall of packs has slowly disintegrated Has disappeared We are waiting for a big starlight where it ended off. That's an ultra rare. Cool I have pulled a card out of a pack that wasn't supposed to be in the set We pulled the monster reborn that one time it's in my top 10 error Moments video if you have not seen that you can see it. We pulled a monster reborn from the wrong set Yeah, it was out of uh It was uh the blue I set right whatever it's called The 2016 set the shining victories I think Shining victories. That's what it is. Okay, we're gonna move these over because Getting really tall in terms of the pulls Come on one more starlight guys. You got to believe that it'll happen We can do this These are our packs left All of our packs right here This is it Super rare Let's go Super rare Let's go No No My butt hurts. I've been sitting too long Oh Imagine air neo starlight. Yeah, that would be out of nowhere if they did that. Thanks for the one month in the send cards. Appreciate it Come on. Here it is Weekends going good man, we've had some good pulls today Other than that good as well I did a beast one. I have a top five sets of 2022 if you want to check that out I also mentioned the worst one So I have a whole video about that that you can watch basically if you want to know the answer to that Uh a couple of weeks. It was at the end of 2022. So it's about a month ago Okay, super Let's hopefully we can get some more like a thrust and then you know They get the cashier stuff at the end as well That would be good Super Starlight pot of greed Pot of greed Do you get any more star lights? Uh so far we have two So these are our last few packs. We're hoping to get one more here Three hours and 15 minutes into the stream Can we get something big will it be epic? Will it be awesome? That's a super rare Is it barren to floor getting reprinted this year? Yeah in maze of memories, I believe The gate guardian set big welcome labyrinth good ultra. We'll take that Pot of greed. Will you pull us a star light? A few more packs spam luck in the chat guys. We need some luck To pull it. Let's go Hype it up Super Last time I got him right as I was complaining about it. All right. Yeah, I'm angry.  Give us the star lights, man Is it more hype to pull a star light the first pack or last pack? Definitely the last pack because it's all the build up I'm like not being able to pull it Barren gonna be a short print a rice heart nice pull. Uh, probably No economy probably We'll see nice C67 cool Give us another star light, baby. You gotta believe in the hot of the cots Oh, there it is. I was like, where's the super? Setting the luck in the chat guys. Here we go. We're getting out toward the end Can we pull the final star light rare? Oh, there we go Right soft. That's a good one to end on. Okay. This is it. This is all our packs left Out of our four cases Will there be another star light inside? Did we shuffle it to the very end? Let's go. We have an ultra rare ice jade Okay, gotta readjust We have Great insect We have super rare We need luck guys We need luck. I gotta hydrate before this hydrate up for the end Everyone hydrate and then continue to send luck. We're down to What appears to be seven packs left super rare six packs left The end this is where we pull the star light rare super. Okay. We got five packs left. Here we go We can do this. There will be another star light ultra rare. That's not bad Will be another big one. Let's go. Come on Heart of the cards.  Oh secret rare. Not bad. We'll take that. Okay two packs left It is a super rare here comes down to the final pack of the opening four Cases were open. Will we get another star light rare? Let's go one two three four. You got to believe we have mental tuner couple of aces manticore smashing the spring ins Light of the branded dramatic stories. Send me luck in the chat guys gishki grimness the cast here overlap and A super rare. I'm on this hive. Hi. Come on. All right. All right overall a pretty epic stream Pretty amazing pulls we not cannot complain with these two star lights. I had a lot of fun Thank you guys for being here Good youtube stream shout out once again to collector for all the gifted subs and to travis who also gives it a bunch of subs So thank you guys for doing that or should I say memberships big difference. All right I'll see you guys the next one. Thanks for watching on this saturday. I'll see you guys more videos tomorrow tomorrow's videos Are banger by the way, so keep an eye out for it. Peace


I'm in my pajamas in my living room because I'm actually traveling for a couple of days and I didn't want to miss out on my self-tape practice because if I was going on vacation any other time of the year I would still take my self-tape audition stuff like my tripod and my microphone in case I got an audition while I was traveling. It's very difficult to carry this with me so I'm going to grab this scene from out of here, show it to you, I'm not going to look at it, and then the day that I need to film the self-tape then I will watch the video and see which scene I need to do. Here's day number 18. Here I am taking just a few minutes away from being with family so that I can do the self-tape practice and something that I was thinking about is that I feel very much like the same when I'm doing every scene. It just feels repetitive as far as the character that I'm playing because I'm trying to be as truthful as possible so I'm like being me. I don't know if that makes any sense. Anyway, I just thought that today's scene is a monologue from The Grinch which is great because I'm doing this like so last minute but at the same time I'm a little afraid of this monologue because it is so extremely iconic. I mean it's how The Grinch stole the Christmas and it's just very particular. I am going to try and relax and not think about the fact that somebody else is going to see this. This is an exercise. I need to decide where in this monologue I'm going to start and stop because it is a very long monologue. Let me take 15 minutes to prepare it, boxes or bags. What would I wear? I'm green, isn't it? I decided I'm just going to do the beginning of the monologue because it does give me a good taste of The Grinch and it will allow me to play with both sides of like this is somebody who hates Christmas because all of the past experiences that they've had but at the same time they're like wanting to love it and be a part of it because really everybody wants to belong and be loved. So I'm definitely going to play it like suspicious, angry, but curious. I've been alone for so long and I have been treated poorly by everybody for so long that I decided that I'm the best person to be with myself. I'm finding it a bit difficult because I'm trying to really just look at the text, look at the lines and not think about the movie. I keep trying to practice it starting just really mad but the maybe Christmas doesn't come from a store really brings me back of like thinking about like what is the meaning of Christmas? Maybe I should just go for it. Okay I have one more minute to prepare for my 15 minutes so I'm just going to try and go for it. If you don't know what I'm doing first I apologize for like the terrible lighting because I am traveling right now and I just really had to squeeze it in today but I'm doing self-tape practice every day in December until Christmas so that I have some acting practice and I do a 15 minute timer in order to prepare it and during those 15 minutes I just play around with the scene or monologue and then I perform it and show you the best take. Take one. I'm taking too long I'm like dragging it out. I'm gonna try it again but a little bit faster pace. One of the first few takes I liked best or the last take so I can usually feel it when I just seem off or I said something wrong or the rhythm is off but anyways let me show you the best take from today and I'll see you tomorrow. It came without ribbons. It came without tags or packaging or boxes or bags. It's because I'm green isn't it? Maybe Christmas doesn't come from a store. Maybe perhaps Christmas means a little bit more. The nerve of those who's inviting me down there and on such short notice even if I wanted to go my schedule doesn't allow it. Four, wallow and self-pity. Four thirty, sir into the abyss. Five, solve world hunger until no one. Five, thirty, jazz or size. Six, thirty, dinner with me and I can't cancel that again. Seven, wrestle with self-loathing. I'm booked. Of course I could push self-loathing to nine and still be back in time to lay in bed and stare at the ceiling and slowly slip into madness but what would I wear?


I'm interested in tuning your ticker and that I mean I'm interested in heart health. Now if I tell you about heart health your imagination will automatically spin to old people or people that are middle-aged but it's just not true. We're seeing evidence of children as young as seven years old having disease blood vessels having poor heart health and we think that this is related to the poor lifestyle decisions that they're making today and there are a number of these but we don't know which one is most important it could be how physically active they are it could be what they're eating it could be how much sleep they are getting or it could be how fat they are we need to focus our attention in one direction and I want to know what that direction is. At the moment we're doing a nationwide study in children age eight to ten years old we're going into schools and we're testing each of these things we're testing their physical fitness we're sending surveys home so the parents can tell us what they're eating and how much they are sleeping and then in the schools we also measure what their their body composition is like as well as taking different measures of their heart health and their metabolic health like things like blood glucose and how much of the bad fats they have inside their bloodstream. We know for instance in the United States that children the children of today are not expected to live as long as their parents there's a landmark study several years ago saying they're not going to live as long as their parents there's no reason to believe that these trends are going to be happening just in the United States kids are living poorer and poorer lifestyle something's got to change and we need to know where we're going to focus our efforts to ensure that that doesn't happen here or at least we can reverse that trend.


Hey everyone, welcome back to our channel. So we launched the Artless Women Creator Fund with the goal of empowering women creators and creating a space for women to tell their stories and make their voices heard in this industry. After going through hundreds of submissions from over 40 different countries and with more than $10,000 worth of prizes on the line, we finally found our three winners. So without further ado, we give you our three incredible creators. First up, we have Ashley. My name is Ash O'Neill. I'm a video director and a creative director based in Berlin, Germany. My film is about one woman meeting the personification of her inner voice. I'm super excited to dive into pre-production and figure out everything I need to do in order to take the vision in my head and make it a reality. So thank you once again to Artless and to all the mentors. Let's do this. Ashley's unique video uses surrealism and the hyper glossy aesthetics of fashion video. She'll be mentored by none other than Cash Bunny, an LA based director and visual effects artist who's worked with top brands. Next up is Katherine. Hi, I'm Kat and I am a video creator from Toronto, Canada. My film 26 and the Six will highlight 26 diverse women in Toronto all with names that start with a different letter of the alphabet. I'd love for my film to serve as a resource for female creatives to turn to for inspiration, for support and for community. Katherine will be mentored by Karen X. Chang, an award-winning creative director who's worked with the likes of Puma, Beats by Dre and many more. And finally, our third winner, C. A content creator based in LA, but I'll just let her tell herself.  Artless messaged me. We sent you an email a few days ago just wondering if you got it. Wait, why would they text me? And then I realized. So yes, this is me. I still don't believe I get the chance to even tell you my story. The story is about an Asian woman breaking the norm, trying to discover a wave in China and be the first woman to serve every state in China. There are actually 34 province in China and I will produce an episode on each province. At the end of the whole trip, I will produce a film out of all the episodes. Again, I'm so honored to have this opportunity. Thank you again for your support and I hope you have a great day. C will be mentored by Premier Gao, the founder, host and creative director of Gao Media Creative and YouTube Superstar with views in the millions. Ashley, Katherine and C also won $1,000 to help bring their vision to life and of course, gear. Thanks to our incredible sponsors, Nenlight and June, they'll each have gimbal kits, light kits and editing software to make their films perfect in every way. These women's stories are so important, now more than ever. We're so excited to help bring their visions to life and can't wait to see their creations. Big things are coming, so stay tuned.