You know, like I said, we're going to come in tomorrow, tomorrow evening.   And one thing that I can say, we're going to stick together no matter what.  Do you feel like you had them where you wanted them at halftime when you were 13 or nothing? But what happened the second half?  I mean, I spoke whatever it may be, explosive pass or whatever it may be. So I think, like I said, especially come out of half, you know, we have to get on the field, stop them. We have to score, of course, you know, that's not my job.   I mean, explosive plays, you know, I don't know yet.  With the positive deep brush today and with obviously Landry out, it seemed like everybody was doing their part with getting to Daniel.  And like I said, it's first start with stopping the runs, getting, stopping them at explosive plays. We just got to sit together. We're going to come in tomorrow, take the coaching, fix it, go to practice with a great mindset, you know, we just got to tighten things up. On the details, you know, everything. So, I mean, we don't like this feeling.  It's always frustrating, no matter if it's him or, you know, whoever we playing against, you know, we, we never want to give up almost 300 rushing yards. And because I, like I said, we proud ourselves here in Tennessee on stopping the run. That was our number one defensive key and we didn't do a good job at it. So, and Shane, I would say, you know, he said our week, our camp, you know, take away all the explosive plays, man. We, we win a lot here. So, I think that's the first step, you know, stopping the run and don't give up that explosive plays. A couple of the touchdowns that you had and if you expected to play as big a game in the passing game? Every time I touch the field, I expect to play a big game.  They came with an amazing game plan. They came, they did their thing. And us as players, we just had to come out better and execute it. When did that start to develop? It seemed like there was a couple of players that were able to scheme to get you open. When did that start to develop as far as, like, you was a key role in that passing game? Oh, like I say, it's up to the coaches, you know what I mean? They may be making the calls on the sideline. I have no idea. When my number's called, I'm ready. I just take advantage of that. I mean, was there a point where they came to you like, hey, listen, you know, we see that you're catching the ball well and you're running around as well? It's all in the play cause. This is the coaches, you know what I mean? That's why I give my solutions to them and I appreciate them for trusting in me and allowing me to do what I need to do. What works so well in that, in that second touchdown pass there that you got so, what works especially well? Set again? On that second TD pass where you got to open what works so well in that play, can I kind of help get you open?  What's the feeling, Dr. Lewis, you guys go up 13-nothing and then you kind of answer a couple of their scores you go up 20-13, did you feel like you're in a pretty good position to win this game? Yeah, I mean, we stepped out on the first, first time stepping on the field was expecting to win the game. He was upset that we didn't and the fact that we, we felt shot and we just got to finish the games better. Did you get banged up, Lee? Uh, me? No, I didn't get banged up, man. No, next. So could you have played on the last drive? I could play one of them, you know. Little surprise that you weren't in there?  Like I said, it's not my call. Just leave it up to the team. I just went up with my numbers card. I'll take a minute to look. It's a 44-hour rule, win or lose. I'm putting this one behind you. You got Buffalo coming up next. Immediately. We on to the next one. Like, we got to learn from our mistakes here and just go on to the next one. It's a long season, so we got to take advantage of it and start chalking up wins. It gives the reason I was asking you about the last drive.  Yeah. Is that usually a sign of a player that's playing for a... I mean, I don't think so. I mean, it just, my numbers card, that's all. Sometimes that's the way the coin flips, so... But obviously, we're not going to put the blame on Randy for missing the kick. There's a lot of plays before that that we had to be better on.  You took out the one big run from Berkeley. It was a pretty good success inside the run of the ball. Why do you think that was today? I think it had a pretty good scheme against some of the things that we were doing. But at the end of the day, I don't think it was a whole lot of... It was some missed tackles, don't get me wrong, but I think we played pretty good. Like I said, in the first half, but second half, big run. Then he had another big run in that last drive.  Like I feel like for the most part, we've made them earn everything.  So those things, we got to eliminate. Thread to what Markley was able to do. I mean, I know that's a good player over there, but was there something they were doing to give you trouble in particular with him? No, he's a good running back. Like I said, I think they had some plays that they hit us on, the one right coming out of the halftime. Couple pullers got downhill, made a good move on hook and got all the way down the field. And then like I said, he had the last one on that last drive, kind of found the seam and got through there. So like I said, he's a really good running back explosive. And I said that, arm tackles aren't going to bring that guy down. So credit to him. Like I said, they played well. He had a good game. Most of this game is still a little bit of a shocker that here we are. Yeah, I mean, it was a tale of two halves. First half, we played really well on defense. They had a couple of plays, but at the end of the day, we made them earn everything. It wasn't no big plays like that. And then first two jobs in the second half, it's tied up. So those big plays we can't have, we have to stop the run. They had, I think they had over 200 yards rushing. That's not going to cut it. And yeah, I mean, like you said, I think it was just a tale of two halves. How good we know we can be and how competitive we are. It's always, what could I did more, more get the ball out, more and more sacks, more pressure, more hits. But I think it comes back again down on the second half, stopping the run. If you don't stop the run, you can't rush the passer. And they were just toting it in the second half. I mean, that just can't happen. If that's what they're going to do, they're going to keep running it until we stop it. First half, we were stopping it. So we're getting in the backfield a little more, but it just wasn't stopping it in the second half. So they were going to keep running it. No chances, as much, not as much chances to get back there. So. Thank you.


Rwy'n meddwl y gallwn i'n gwneud yn ei wneud yn y sesio final. Rwy'n meddwl i'n gweithio i'n ysgrifennu yn y dyfodol i'r gwaith, ac yn ystod yn ystod yn ei bod yn ei gweithio. Gweithio i'n gweithio i'r gwneud yn ei wneud. Yn y gallu, arweinydd am ymgylchig o'r William i'r meddwl i'r sesio mewn Priebelico. Felly yn ymdill wedi'u meddwl i'r Roedd Rheicon. Rydym yn priebelico Pai, ac mae'n meddwl i'r priebelico i'r signogol, I'm going to leave him to run through it from now on. Thanks very much. What's up, Defconn? You guys doing good? I technically threeed in my 321 because the day's not over yet. All right, so this is Probellico Pi and like I said, this is leveraging the network against the network without the network. And really what I'm doing here is I'm going to push a narrative a little further just given some of the things that I've experienced currently with various different things. So, all right, just go over an agenda. I'm going to give a kind of a brief introduction, right? And then I'm going to give a Probellico overview and that's the art of fighting without fighting. The reason I'm going to do that is not everyone is seeing Probellico and it's still amazing how many people in our community are still subject to group think that push back up against this constantly. I was here with the Cisco switch. I dropped it and proved that it happened. I've done it with an HP switch. These are enterprise grade switches. I've done it with netgear switches. I dropped this over at DC541 and just for a proof of concept, we even jumped on some networks I had zero control of and had all kinds of intel coming out of it. So what I'm going to do is I'm going to give a brief overview of that just so everyone's tracking what Probellico is and understand that way they can understand where I'm taking things. Next, I'm going to talk about the realities of physical and wireless penetration testing and the wireless threat landscapes of those two. Really what I'm looking forward to is just I'm going to give you just kind of a a brief summary of what that threat landscape looks like. Excuse me, what we currently inspect and real world demonstrate of impact. Then I'm going to talk about some of the Probellico shortcomings and that's actually some of the things that drove me to push this further, particularly data loss, data retrieval or exfil and also some air gap configurations. Then I'm going to talk about the key point here, which is there is no spoon and it's talking about your physical network controls and why they're no longer applicable and why it's important to go back to some of the original things. I think that we have a problem with a lot of vendors where they've sold us that the technical controls will save us and we disregard a lot of very basic principles and what I'm doing is I'm just pushing that narrative a little bit further and I'm all about the blue team. Who's on the blue team here? I love you guys. I do everything for you guys. This is a hard job. But I'm here to kind of help enable the blue team, especially those that don't necessarily have support in that area. Then I'm going to push the data forward with the live demonstration of Probellico Pi, which is the Intel extractor. Talk about the future of Probellico Pi and then offer some closing remarks and then just answer some questions. Okay, so obligatory slide. My name is William. I work for coal fire labs. We hack all the things, physical, human, API, blah, blah, blah. But that's enough about me. Really, I'm just kind of a person who likes to push the narrative forward and that's what I'm here for today. So let's talk about Probellico. Some of this content was borrowed from my previous thing, but basically I call it the Art of Fighting Without Fighting and basically it's a network analysis tool. I've seen some people start calling it like a scanner. It's not a scanner. Probellico does not broadcast or transmit anything. Basically it's something that I rage coded as a proof of concept. I did this because I was constantly being told that some of the things that I was doing was impossible. And so I rage coded it to provide a proof of concept and then everybody asked me to start building on some things and so that's kind of where it came from. But like I said, it gathers Intel through 100% passive techniques. It's zero touch and it's about 20% done, but it's going to need an overhaul anyway, especially with this push. So let's do a Probellico demonstration. So like I said before, the community totally believed me and got fully behind me as well as my management and some of those things. But after a while when I started proving some things, then the realities of what I had started coming in. And some of my guys on the blue side and some of our arm structure people were really concerned with what I was proving. So I was like, you know, yeah, let's take this to the world, right? And management, you know, they got fully behind me. My peers got behind me, you know, but especially management like, yeah, let's take this to the world and let's show them what we have. Actually, to be honest with you, there was a lot of fear about this. There was some talk about maybe we should just not release this, maybe we should take it from you, et cetera, et cetera. But my company really cares about Infosec, really got behind me and did, excuse me, did what they could to allow me to present some of this to you. So that said, this demonstration is a highly obfuscated virtual demo of what Probellico does. Spent a lot of time in a Hex editor and things like that and get an approval from the CSO and such. Okay, so basically on the right window, what you're going to see is I'm dumping my IP configuration and then I'm running TCP dump, which is gospel, which is proving whether or not I'm broadcasting anything. So I want you to pay attention to that in the background. If I'm broadcasting anything, it'll scroll there. And then here on the left, on the bigger window, I want you to show that there's this intel that's spilling. This is kind of a best case scenario for what you can get with Probellico. But as you can see, there's all kinds of intel that's actually spilling here. In some cases, it's unicast and there can be a lot of juicy things in unicast. I'm able to do all kinds of things like map out different ports and services that systems are doing, kind of map out host intent. Kind of I have this one technique that I call reverse port scanning, which is where I can map ports on a host behind a firewall that I can't reach as well as identify the host that's allowed to reach those. And I'm just doing some real basic hackery, based off of concepts of the three-way handshake and some of those pieces. But like I've shown here, I can get things as sensitive as SNP community strings. So I've had some infrastructure that they've got like two-factor authentication on the infrastructure, but the guy who deployed it had some really complex SNP community string that I would never guess myself. But unfortunately, that stuff spills on a switch. I'm doing all this without man in the middle attacks. And if you think about it from an OSI layer model, that's a problem because we build everything off of that, right? But again, you know, finding things like password reset server. Again, I want to thank DISA for approving the password reset server. So useful to me. Thank you. Or test backup server or rapid seven next pose console or anything that I got an ode in my pocket for. This is so useful and this is free Intel that's coming over the wire with next to little effort. So it looks like someone's spraying SNP community string. There's an SNP v1 community string that was somewhat like that. That's valid enough to leverage. Again, test backup server. I love altered client backup resource when I attack clients. Anyway, this kind of gives you an idea of how that works. And then per the request of the community, what it is I put in some backup support for reporting capabilities and some of those things so I'll let that go really quick here and then I'll kind of forward on because I want to get to the real meat of why we're here. So what I'm doing here is I'm open up a new terminal and I'm just going to run the Probelco, the old school Probelco reporting engine. And what that's going to do is just say, Hey, I want you to take a look at the information you gathered and tell me about the attack surface that's here. And you see there's all sorts of useful information to include identified hosts, potential SNP community strings, validated descriptions of what various hosts are on the network as well as some guidance about how you might go about attacking this. As I demonstrated last year, you can get very specific with listing listing networks and listing particular hosts within those networks and getting some of the data there. But I'm not going to drag that on too much. We did that several times and I keep dropping this everywhere. So if you want me to show you more of this later, let me know and I'll swing by and show you. But like I said, very useful intel that is gathered 100% passively. Again, that window in the upper right hand corner. I'm not broadcasting anything, so it's zero touch. All right, so let's talk about the physical threat landscape. This is my perception of physical security and just about everywhere I go. And I think really the bigger part of the problem that we have here is whether or not we're taking things seriously. I think that we're being sold this concept that the technical controls will save you. And so let's just so what they can get in so what they can shim doors and so what they need to the server closet things like that.  Unfortunately, though our industry, the way that we kind of manage this is we carry out these physical threat assessments called audits. And we take a look and we're like, yep, we've got to control there. We're good. And we declare victory, right? Unfortunately, your adversary can operate just like me and can walk their way into place. And I assure you if they're more malicious than me, which I assure you they are, they can absolutely destroy you with physical access, but it seems like a lot of the physical teams are the people that are trying to enforce physical controls are disregarded constantly. And it seems like a lot of the engagements that I try to pursue. People don't want to pursue these because they're costly or useless, which is truly unfortunate, especially when you're paying for a red team engagement or a physical pentess. You know, as long as destructive attacks aren't in play, I highly encourage you to pursue this. But okay, so that's that's kind of the thing with physical security. Let's talk about the wireless threat landscape. And I apologize. This is a really old school image that everyone's seen showing the other frugusial allocation just for the United States, right? So it's highly overused. I apologize. But anyway, point being is that this has all kinds of potential. For instance, I may or may not have built these and may have tried to leverage these during engagements, but if a guy like me can build these, anybody can. Some stuff is from hacker boxes or whatever else have you, but very useful during engagement. So this right here, for instance, is a USB data x field device that operates at 433 megahertz and a point to point network where if I can get access, physical access to a console that I'm quite interested in, I may be able to pass that over 433 mayors. This right here isn't. It's just a wireless bug.  Unfortunately, FCC restricts me from encrypting this. And so rhodio is rhodio and that's the best I knew. But let's take another device. For instance, this is a Raspberry Pi with a with the ability to talk over 3G 4G, right? And so we can passfully collect data, steal data, x field data over some of those alternate frequencies. Yet this is what our assessments consist of. So I highlighted the two red boxes where I typically see things and we're like secure wireless networks. We're good. Yet we declare victory again and these devices that are real world that I've talked about before operate completely outside of those bands and this is not just about my perception of things. These are real attacks. So this is a classic example of a blend of physical compromise and wireless compromise with a Barclays bank. They were able to get over $2.2 million and they could not figure out how the heck they were pulling this up. But they were literally working their way into into the server room having a KVM configuration and stealing data that way. All of their assessments and audits and everything past and they couldn't figure it out. They only got caught because they got greedy with an additional site. So here's the greed. Save Barclays. But the fact is that's a real world compromise involving physical security and wireless assessments. And again, that's operating out of those bands that we typically audit out of yet a lot of my customers are like I want to understand we're doing all the things and checking all the boxes. Why are they still owning us sometimes because your real world adversaries are desperate and like I've said before, you should never underestimate the creativity of a desperate individual. Okay, so let's just transition a little bit, you know, because this is about Probellico and let's talk about Probellico shortcomings, right? There are quite a few of them. I mean, first of all, I wrote this is a proof of concept out of rage to prove that switches spill. So it's an okay tool. But it kind of comes with some caveats. So like in air gap environments, you know, Probellico is, you know, not magic. It can't pull from a multiple air gap environments or that is it couldn't until now. But also Probellico depends on your position of the network. It's kind of interesting. When I run Probellico on some environments, I'll find that there's not a whole lot of data and then in some other environments, I'll find that there's a ton of data and I'm still trying to understand the drivers for that. But there have been instances where where I will execute Probellico and I'll see absolutely nothing until 4pm. I remember this one time with the customer. I said, hey, what happens at four o'clock? And the customer was like, oh, well, that's the sock change. Oh, okay. Yeah, those dudes hate each other because they both say they're doing it wrong. It turns out the way that the sock does things at 4pm was very useful to me. But you know, we're kind of dependent on based off that position of where we're where we're executing this via either overt or covert methods, right? So also device discovery can be devastating, especially in a red team engagement. I mean, I love dropping Probellico in a red team engagement because it does not transmit. You can't see it. Lots of data, but if somebody finds that little thing and they're like, what is that? Even if it says IT security, don't touch and they remove it. I lose my data. That's a sad day. So some of the ways you know that we try to go get that data is through X fill. There's various methods, right? You've got like C2 methods that you may want to try to pursue to get that data where you don't have to visit again and then you've got a sneaker net where you've got to visit, right? You've got to go visit that site, but that's also risky, especially, you know, if you're, if you have a scope requirement where it requires surreptitious methods of entry every time. That is to say you can't leave friends of evidence that you were there. That's a lot of overhead to be able to go and get that data via a sneaker net. So let's just talk about some of the shortcomings. First off, Probellico is awesome. I don't care if people don't like it. It's been very useful to me and I've gotten great reports back. Had a guy last year told me that it helped him take over the hotel network. I was a little concerned, but what he basically told me is there was a bridge that he wasn't expecting and that's what Probellico does. It challenges your assumptions about what you think the environment is and it turns out that the controls that they had weren't exactly effective and he was able to take that over. I encouraged him not to do illegal things, et cetera, et cetera, but you know it's kind of interesting some of the things that it's brought to light, even some of my assessments. So in my opinion, Probellico is awesome. But you know we know that we're going to be placed somewhere here on this network and we don't exactly know where, especially someone else's deployed device for us, you know, Jack. Where did you plug me in, man? I don't know. There was a switch there. I were a plug. I have no idea, right? And sometimes, you know, the Intel can be better on one side than the other. Just do the nature of networks and the way Probellico works. But the bigger problem is we don't know about the security controls that we're going to be running into because we're investing a lot of these technical controls, which are great. Don't get me wrong. I'm not knocking and saying that they're junk. It's just I'm going to prove that they're not as helpful as one might think. But the reality is, as an attacker, there's going to be this massive infrastructure, especially with the mature organization, and trying to ex-fill data technically is going to be a bit difficult, right? It's probably going to look something like this, right? And when I'm trying to think of a way to kind of ex-fill data, or when my friends are like, dude, you've got to help me find a way to ex-fill the data. You know, I'm going to leverage something that may help me kind of leverage a C2 to be able to ex-fill that data. But you know what, in some cases that's going to get caught, which is great. But some organizations need to be nudged forward accordingly, you know, to improve their posture. So using something that they're going to catch immediately is kind of useless, especially in my team engagements. So I'm trying to see here and I'm thinking, how can I ex-fill the data from Probellico without knowing what the security controls are? How does that work? What can I do to pull this off? It says I know me. And then it kind of hits me. How can I bypass the controls that I can't predict? What is way, what is kind of, you know, I was proposing something to my buddies and they're like, no, they know that. No, they've grown that. You've got to be more creative. Come on, help me out. And I'm just like, man, it's just I'm wracking my brains. You know, I'm doing ICM PC2. I've got a little trick with TCP. I'm just trying to figure it out and it hits me. There is no spoon. This is mind-blowing to me. And I'll tell you I'm the dumbest guy in the room. But what I realize is I'm trying to fight against all these security controls in this network. You know, why am I operating by those things that they've defined? Why should I operate that way? It's 2019, 2020. You know, things are coming around. Lots of stuff is improving around us and suddenly I realize I don't need to operate around those security controls. Why should I? My adversaries aren't. That was proven by Barclays several years ago, right?   You know, if I want to stretch an organization that just doesn't care about wireless or physical and things like that, I need to address my narrative because that's what we do as red teamers for the benefit of the blue, especially when they're trying to get those budget for the blue, right?  I don't need the network, right? Because there is no spoon. We've been operating with these adversario simulations under those controls, to test those controls. No, get me wrong, those are good to test and physical pen tests and things like that. But sometimes you reach a point in your organizational growth that you need someone to test you or push things beyond the limit. And we've been checking boxes, like I said, with wireless and physical engagements and everyone's just saying everything's good but we're constantly getting compromised. And then, like I said, there is no spoon. There's no network. There's no security control. And this is what Prevell Copai is about. All right, your versus goat theory. So what we have here is, and again for the haters that say this is impossible, I've got another type of managed switch. I dropped Cisco and I dropped a line from Cisco that said this is possible but I did this with a Cisco switch. I decided to bring an HP managed switch and what we have here are some really rough pine off of 64 boards. I tried to bring the enterprise to you and that's very hard and costly to do coming to DEFCON on my back.  So by now, the CAM table or the binding table of the switch is fully populated. And so what I'm going to do now is I'm going to get that. Don't worry about it, boys. I got it. I know what's wrong. Okay. Okay. So here we go, here versus goat theory. I want to point out, just a quick question for you. How many think I can extract information for your infrastructure without leveraging your infrastructure? Oh, some brave votes. Absolutely. Let's see what happens. This right here is nothing special. It's just a Raspberry Pi with a really terrible yet survived antenna configuration that I did and just some custom code. This chip here is very expensive. It cost me a couple of bucks. But it's not plugged into anything. What this simulates is, I'm at my hotel room after I physically compromised you and I want to collect that data or perhaps from around the world. Is that possible? Let's see. This monitor is me in the hotel or wherever I want to steal the data comfortably. That monitor is the device that's plugged into the switch that you can't see because Probellic was a ghost. Man, I sure hope this works. Right here, I'm stealing the data from your network 100% passively. Unfortunately, the VM is running in QRX. It's terrible. What you're going to see over 950M, something you don't audit for or look for is where I'm stealing the data. Thanks to the conditions of this chip because I care, it's fully ADS encrypted. But what I see here after physical compromise, I will see here remotely if it all works. So, let's just skip for a bit. I'll see what else I can do on a little load surface. I'll see if I need to use QRX to keep up. I don't know what it's happening. Is it transmitting anymore? It's wrong? They've all said the same thing. They've all said the same thing. Okay. What do I want to do? I've got another node plugged in here. I'm going to do some SSH stuff. See if I can do a little bit more traffic.  This is a hack. This is the best way I can renew an enterprise with 5.8 Alpha 64 ports, which is amazing, by the way. But let's see if I can nudge it a little further. Anything changing? Give me a minute. Let's try this. Unicast packets can't be captured on a switch and on anonymously or passively. That's not going to TCP port by simply logging in on a host on the network. My drug device, which, by the way, doesn't have an IP address, just will unicast packet. That's good to know. That's awesome. See what else we can do, though? I could actually log in and do something. So I can't see the monitor anymore, but it looks like I pulled an SNMP community one string remotely without leveraging your network. I'm stealing your data. I wish GQRX didn't fail me, but anyway, what you would see there is you'd see it go up and down and chirping. So I'm just going to let that run. Hopefully nothing else comes with it. But that right there is a Probellico Pi, at least the first part of it. So let's talk a little bit about some Probellico Pi exfiltration topologies. We're going to extend it a little bit further, right? Because I don't want to sit in your parking lot all the time. So here we have your typical corporate environment, and good old Willie, malicious as hell, is going to show up and is going to drop a couple pi transhevers or pi collectors or whatever the hell I want to do.  And snitches are kind of a special purpose device, special built device, and these things are designed to operate outside of your network, but steal your data in all kinds of ways that you can't see. Your technical controls are dead to me. So as demonstrated here, your corporate environment, mind you, it's just a couple feet, but you're talking miles. In some cases, I'm able to extract all kinds of useful data, maybe show up with a pretext, be able to work my way through it, maybe get a password. In some cases you can map out a potential ode inside and then just show up and root a host. But what if that's too far? Well, I can use a pie transceiver. So for instance, let's say that the facility I'm attacking is like, you know, a million square feet and it's got concrete walls all through it and trying to get that frequency all the way to my hotel is just rough. I might drop a pie transceiver, which as suggested to some of my peers might look like a really disgusting rat trap outside your building with solar power. And I'm ex-filling data out of your network. By leveraging the network against the network without the network, I'm stealing your information. Let's talk about air gap topology. So this came as a really specific request, trying to figure out how to do that and it turned out, it worked out just really well for me. So we've got air gap environments one and two. Oh, I labeled them right. That's good. I'm going to drop a couple pie collectors or transceivers or whatever on there and I'm going to be stealing your data from this air gap environment. But the beauty of this, since these things are kind of operating in a hive mesh-like mind, by the way, if you find one of these, they're just copying data to each other again without the network. Might deploy a couple of snitches depending on the scenario that I'm looking for. And again, I'm just going to collect that remotely off your site. Either nearby within a couple miles or maybe I want to extend that range a couple miles, maybe 30 miles or whatever, but again comfortably in the comfort of my own home or hotel. Well, the beauty of this is what I'm doing is I'm actually leveraging a chipset called Lorawan. So let's talk a little bit about Lorawan and why that's significant. So Lorawan basically is the Internet of Things. I forget the term that I coined a little bit ago, but I said that the Internet of Things would be leveraged by the adversary and it is quite convenient. Turns out there's a community of these devices that are hard to come by or not that support all kinds of things like gas meters, parking meters, whatever else have you. As those things gather data, we want to be able to aggregate that data in some form, but how do you do that without the Internet? Well, thank you to the Internet of Things communities. Thanks to them, I'm able to actually leverage the same kind of thing. So let's take a look at what that looks like. So basically all these Internet of Things or Williams Pi device can reach out to these devices that are all over the world, which I'll show you in a second, and that can push that data all out to me. So in a city that you're probably living in, it kind of looks like this with parking meters or gas meters or whatever all those Internet of Things are. And they're basically transmitting that data to a device that's connected to the Internet which allows me to reach the application server or Williams attack server. So they're really hard to come by, very few of them in the world, and they're easily accessible. Fortunately, the interesting thing about Probellico is that it's only going to transmit updated intelligence that it's found, so it's going to actually use very little data. And by default, it's encrypted, but the way I'm doing it, I have to do a little extra encryption myself. But basically the community will allow you to use these because everyone's excited about IoT, so everyone's setting these up in their house. And by the way, I can participate as well. Also, just a fun fact, it's fun to set up your own gateway and see the data that could potentially come through. It appears to be encrypted so far, but just wait. Okay, so we talked about the Internet of Things and all these gateways that are all around us that we can. There's over 8,000 that I saw the other night. So with that, if I don't want to sit in my hotel room, I can just go through the Internet of Things, leverage that, go over the Internet, and collect my data from wherever I'm at. Well, what kind of data? Are we just talking about network data? No, we've got to push that narrative forward, bro.  So everybody knows, or most people know, that USB wireless plus, or USB networking plus Linux and maybe something like Responder on maybe a USB armory equals credentials. If you don't know that, it's glorious. Unfortunately, you've got to go back and get that data. But if I add a really expensive $3 chipset to this and tell Pi about it, I get targeted off-site login credential exfiltration covertly. So if you had an air-gapped workstation where maybe somebody is changing a highly sensitive file at 8am every day and it's fully air-gapped and they have all of these controls, if I can physically breach that perimeter, I might be able to drop this and over the Internet of Things, I can get a hash password and do what I need to do. Just come up with a couple of other things here. I don't know if you guys know, but it's possible to potentially leverage a Raspberry Pi or Pi Zero in a way where you can man in the middle HID devices and get a basic key log around of that. Again, add this very expensive chipset. I paid a premium of $10 for this because I didn't look for a good deal. And what you have is an off-site keyboard logging device for exfiltration that does not use your network for exfil. But it steals stuff from your network and you won't see it because you're not opening the wireless spectrum and you're not taking physical security very seriously. My win, your loss. I've got an idea. Everybody has call centers. Wait a minute. Do we reset passwords over the phone in call centers or give away credit card numbers? What if we have a device that has voice to text capabilities and on key words decides to chirp over the Internet of Things and tell me the things that I need to know? Either for to back up my pretext or provide what I need to destroy you remotely. I got an idea. I love bypassing bad readers. An ESP32, sorry, an ESP key is a device that I absolutely love and adore that I love putting behind your card readers. And I steal your credentials as you go by. You can be like three-factor security biometrics, pin code, card. And I can steal that because it's all weekend. But what if we took an ESP key instead of having been in the parking lot interact with a web server within close range with some antennas or whatever else have you? Which is a little weird but highly effective. What if we just extract that data from across the world? Make myself my own little key. Maybe I can clone your cards from the other side of the United States when I'm working with one of my buddies on the other side. It saves me money and overhead. I don't have to fly people anywhere now. I can locally source them accordingly. He can drop the device.  And it's just beautiful, right? So that's what a snitch is. But really a snitch is just subject to creativity. There are so many applications that I can think of that I can apply this. But every single one of these things is stealing data from your organization via ex-filtration techniques that your security controls can no longer stop or control or see or whatever else have you. Again, the reason why I'm bringing this to the community is I'm looking to extend the narrative, the attack narrative that we've seen in real life but we want to pretend like it doesn't exist, like Barclays, and kind of push things along so that we are auditing all of the things and that we're not drinking the Kool-Aid of our security vendors that are telling us that this technical control will save you.  And I will do it for your benefit. But I'm the good guy. All right, so that's enough of that. Let's just talk about Barclays' future, right? First off, again, I made this thing as a proof of concept. Man, it is a hack. What I really need to do is rewrite this thing where there's a community-driven intelligence-gathering interface or kind of like a way where you can define intel that you want to extract and just upload that through push requests and such. And where the Probellacle Engine will process those files accordingly and then people can contribute to maybe little regexes that are interesting with data. They may notice that it's building a network that's beneficial for us all. Also, one of the things I really want to start with is Probellacle supporting full lower-wan. But that's just one of many instances that Py could be ex-feel from. I had a guy that said, I will stop you at 915 MHz. I was like, okay, well, I'll do 918 MHz or 450 MHz. You're not getting the concept here. You need to audit your wireless and understand what's chirping in your backyard. So what I want to do with that as well when I kind of define that center is be able to have a word of the community where people like you, which are smarter than me, can come up with something that's even better than lower-wan. Like here, here's a better idea to ex-feel data and we can provide a really easy interface to be able to define those things. But in the end, like I said, Probellacle will assist red and blue teams. I've spoken before about how Probellacle will be a very useful tool for indicators of compromise on the blue side. Since you can't predict a Probellacle instance, you can't see it because it doesn't transmit. It makes it really hard for guys like me that are helping on destroying you to leverage it accordingly. So like typically when I own an organization, maybe I can tell the scene to lie to you. That's useful. It's always fun to tell Windows hosts that it's Linux and watch it swear to you that it's Linux. I can do a lot of those things, but a Probellacle instance, I can't do, I can't do that because I can't see it. And on the blue side with Probellacle, given that there's no overhead, it's zero touch, you can have it kind of map out your environment and just let it sit. And if it notices something, something that's unusual, you may be able to leverage that as an IOC. So I think it'll be good for blue and red. Obviously this is more of a red update because that's what I do. I hack all the things. That's what we do at Cold Fire Labs. We steal everything because we want to have a brighter, better future. Anyway, like I said, it'll assist those through attack, audit and fence. But one last thing, this tool will not replace traditional methods of reconnaissance or exploitation. Stop asking me to make this thing do your pen test. Your clients deserve better than that. Your employer deserves better than that. This is designed to challenge your assumptions about what you think you know about reconnaissance. And I hope today that I've challenged your perspective on the real world of the attacks that were out there. So look, in closing, like I said before, switches or snitches, don't forget that. The people who say that switches don't leak data, they just don't know what they're talking about. It's been very useful for a lot of people. Like I said, this is good for both offense and defense, for bringing that 100% zero touch reconnaissance. And like I said, I think it's time for the offensive security team, guys like me to drive an error that forces the blue teams to consider validating physical security controls through actual physical attacks, not audit and check boxes and stuff, and auditing the wireless spectrum. I think that needs to be picked up again. Like I said, Probelka Pi permits this hardware-based out-of-band remote intelligence gathering and interaction allowing attackers to provide demonstrative impact of physical security compromises with very little overhead.  Physical security is important. And in closing, like I said, I'm not sorry, you're welcome. I do this for you guys, so. That's all I have for you. Are there any questions or concerns? Yes. Well, the beauty of this is that it's omnidirectional transmission. Unfortunately, William was kind enough to throw some AES wrappers in there. I am just a hacker. I'm not a programmer, but I do have AES encryption. I could kind of prove that with a Pi client if you want to see it. But what it does is it's omnidirectional spread spectrum. And what it is, what happened was a company got an FCC license and said, hey, we'd love to support the Internet of Things. And like all the Internet of Things guys got involved and said, I want to do that. I want to sell that and sell less that license and such. And now we have chipsets as cheapest like 10 bucks. So it goes everywhere. Yeah, certainly. So the question was, is Probelch always transmitting that data? Or is it storing it to get it later? How am I not losing the data? So these are actually operating kind of like a hive mind. The database here has the same database there. The beauty of this is I don't have to plug this into anything. Like I can literally just power packet. You know, I can hide it behind the fridge or whatever. I can put 100 of these around in the environment. When you start going around, it will be like whack-a-mole. But it won't matter because I've got this mesh-like infrastructure that's just pumping this data out. Drup-drup, drip-drup, drip-drup, drip-drup. And so that's how it's kind of dealing with the data loss. Back in the day when I have a device like that, if you were truly operating in a covert method with no transmission, in some red teams I would like I said I would drop this at a bank or whatever. Get a lot of intel out of it and they didn't know about it unless they were like, gyda'r dryn ein cyffreddau ac yna'r ddaw iawn. Mae'r dda wedi'u ddechrau, ac yn y cwysig, mae'r ddau ddod yn ei ddweud. Mae'r 5, 10, 20, 30 o'r ddweud o ddweud. Rhaid i'r ddod yn gweithio. Mae'r ddweud yn y ddweud, rhan o'r bwrdd rhan o'r rhan. Mae'r ddweud yn y ddweud i'n gweithio'r gweithio'r gwaith, yn ddweud yn y ddweud. Mae'r ddweud o'r transcefyr o'r ddweud o'r ddweud. That's the beauty of Lorawan, actually. So it means that I can let this run for a long time. Heck, I could penetrate your site physically and I could just let that sit for years if I wanted to until it came back one day and said, there's a test Windows XP host over there. And then I could show up on site and destroy you. So there's no more data loss if you actually go and start deploying these really expensive devices across the network. Does that answer your question? Awesome. The answer is no, because they're operating by themselves. There was a while back where I was going to try to go with this hub and spoke configuration.  And then it just hit me that everybody should be the master transmitter, right? I'm an equal opportunity guy. It's unfair for one of my pies to be the master. So I just said, you know, we're all masters. So then we call, you can do whatever you want. In this case, I use kind of a collector and a reporter kind of model, but to be honest with you, they'll have transceivers. So they can receive and transmit and repeat.  Does that answer your question? Awesome. Are there any other questions? Yes, sir. Absolutely, the question was, which is an excellent question is, what kinds of measures would I do to mitigate this risk? Well, most of us can't afford things like the federal government to try to wirelessly isolate a place. You know, so obviously that's expensive. I would say that we would start off with taking our physical security a little bit more seriously and the people that are working to implement that. Part of the problem with this right here is, this is hardware, so I have to breach you physically. I think that if we work to harden some of those controls, that would initially help out. Number two, it would help with port security to be enabled if you truly shut off a port and you lock access to that, that is, because if you have port security enabled, I'm just going to try to break into your closet, but if you had port security enabled where I wasn't able to just to sniff that data, that would kind of help. However, there's a problem. When you connect Perbellico proper, not even this, to just wireless networks as the DC541 group will attest all kinds of data spills from there, even open networks. In fact, sometimes frames float from your secure side to your insecure side, which is weird. I demonstrated that and talked about that a little bit, or I had some proof of concepts of that last year where I had a frame that came from one side of the wireless zone and floated its way all the way up this switch stack that was completely unrelated to me. I thought Perbellico was lying, but what happened was it picked up a frame, a wireless frame from a Roku device, all the way through this switch infrastructure to a physical system with a VM and it picked up, it mapped a TCP port, which meant that you have some sort of unicast traffic that's being transferred from a wireless network that's fully encrypted and passed all the way up the switch infrastructure to me where I'm not even part of the wireless network. So it's kind of a problem. I wish I had a better answer for that, but I really think that it would start to have effective port security. It's amazing how often I can find a place that's got open port security. I think you might have to really consider what true wireless isolation is with your open networks. I know it's cheap and you save a lot of bucks to share an open network SSID with an encrypted SSID or enterprise based authentication and sharing that infrastructure. I know that that kind of makes sense. I know that your vendors will tell you that it doesn't spill data, but whatever, download Perbellico and connect with some open networks and see what you see. Sometimes you're not going to see a whole lot, but sometimes it's surprising. Absolutely, so the question was, have I ever seen a secure environment where they've scanned for all open frequencies? Yes, I have. Those people are well funded by the sweat of our backs. Most people aren't going to be able to do that all of the time. I would argue doing it every once in a while. Might help you avoid a Barclays incident. And we're kind of talking internally about how we can help save some bucks on that because that's an expensive resource. But what we do right now as we say, we're not going to do that because we're just not going to do it. It's useless, it's pointless. Well, now I'm releasing something where you can do that, and I assure you I'm not the only guy doing this. I guarantee you, I'm just providing you a proof of concept where assessing that spectrum is important. In fact though, I've found Fortune 50 companies that have really expensive whips to infrastructure and they don't even leverage that to monitor just those standard frequencies because they've gotten lazy. And that may be because people aren't pushing that narrative. So I'm not saying that this is going to be cheap or easy, but what I am telling you is doing the standard check-in-the-box audit is going to put you at risk. And it happened with Barclays and it's happening probably to several organizations that we can think of right now. So, any other questions? Okay, well, like I said, I'm with Co-Fire Labs. We hack all the things. I want to thank Co-Fire for letting me come and give this talk. And I want to thank you for your time for allowing me to demonstrate this to you. Remember, switches are snitches. I'm going to do what I can to help the blue team out. I'm going to do what I can to help my brothers out on the red side, trying to push that narrative forward. If you guys have any other questions or concerns, you can reach me out. DM me on Twitter, if I'm on Twitter, and I can give you a signal and we can talk further if you want to. So, thank you.


Okay, we all set up. Let's move on. We can start now. Welcome to what the app is going on in Latin America and the Caribbean. Code pinks weekly YouTube program of hot news out of the region. In partnership with friends of Latin America, Massachusetts peace action and task force on the Americas. We broadcast every Wednesday at 430pm Pacific 7, 30pm Eastern on code pink YouTube live. Today's episode, Nicaragua expels the organization of American states. How will this impact Nicaragua and the integration of the Americas via institutions such as the lock, La Comunidad de Estados Latino Americanos. On Sunday, April 24, 2022, Nicaragua said it had closed the local office of the organization of American states, the OAS, a US based group that claims to promote solidarity and cooperation among countries in the Americas and revoke the credentials of several of its staff. The official government statement reads in part. Quote, the people and government of Nicaragua have denounced and continue to denounce the shameful condition of one of the political instruments of intervention and domination of the State Department of the government of the United States wrongly and falsely called the organization of American states. The people and government of Nicaragua do not and will not recognize this instrument of colonial administration, which does not represent at any time, the sovereign union of our Latin and Caribbean America. And that, on the contrary, is an instrument of Yankee imperialism to violate rights and independence is sponsoring and promoting interventions and invasions, legitimizing coups in different formats and modalities with the aim, which they have not accomplished of this of disintegrating through humiliation submission and surrender of our national sovereignty. And so that was a really very strong for our audience was a really strong significant event that happened on Sunday the 24th. And I'm really honored, and it's a great privilege to introduce to all of you. Hello, Nicaraguan Foreign Minister Dennis Mokala. He is graciously given his time to us today to talk about this significant foreign policy event made by Nicaragua on Sunday, and it's a great honor. Mr. Foreign Minister to to introduce you to our audience and invite you to today's conversation. Hello, Terry.  And I want to thank you for this kind invitation to take part in this interview in this conversation in such an important mean of communication. Well, thank you. I think, you know, for me, it's a great honor and privilege to be speaking with you today and for our audience. Foreign Minister Mokala is joining us live from from Managua. And let's, let's start with what, well, maybe we should go back a little further because in November. Nicaragua announced that it would be leaving the OAS that was November 19, I believe, traditionally, or my understanding is technically it's a two year process to leave. And so let's talk about maybe start with what happened in November, and why Nicaragua made this decision and I should also just remind the audience that this was November 19 was which was two weeks after the reelection of President or President and Vice President Rosario Murillo, what led to the November 19 decision and what accelerated things to happen on Sunday the 24th. On November 19, we communicated officially to the Secretary General of the OAS that we were going to denounce the OAS Charter. And that is a sovereign decision of the Nicaraguan government that is to say our government led by Commander Daniel Ortega and Vice President Rosario Murillo made the important decision of denouncing the OAS Charter and that is starting on November 19, last year, a process that is contemplated in the same charter in which established the possibility that all member states of the organization have the possibility to denouncing this charter. And within a period of two years, the country formally breaks the relationship with the organization. It is clear, Terry, that Nicaragua is a democratic and open country that promotes healthy international relations based on friendship, fraternity. But essentially, we emphasize the importance of having healthy international relations in accordance with the principles of international law with the UN Charter with the principle of living coexistence. And in our government, we analyzed the relations and the necessity of governing these international relations, respecting the fundamental principles of international law, respect of the sovereign equality of the peoples, the non-interference in domestic affairs of states, respect towards self-determination, the respect towards the internal policy of the states, the non-aggression, the non-menace with the use of force, the non-implementation of arbitrary unilateral measures that turn out to be illegal and inhuman. So the relations among countries are governed by the Vienna Convention and international law, the UN Charter, the OAS Charter among other legal instruments. And Nicaragua and our government undoubtedly demand reciprocity. Why? Because we are very respectful of independence, sovereignty and self-determination of the states and respect towards the peoples and the nations of the international community. Therefore, we demand precisely the respect of all these principles set forth in international law, the UN Charter, the OAS Charter, that is the topic that we are addressing today. So Terry, in that note that we submitted on November 19, precisely we explained why did we decide to denounce the OAS Charter. And it's because the OAS ended up becoming an instrument of interference used by the US to project their mandate and the execution of the Monroe Doctrine of 1823 that basically aimed at expanding the power of the OAS over the region. And precisely to stop the interference by Europe in the region. That was a stage in which the US was replacing the old colonizers and the old empires and they wanted to establish a control over the region. And reaching their empire in detriment of the countries of Latin America and the Caribbean. So basically, in that note that we submitted on November 19, these arguments. Terry. So, boy, I have a whole lot that I want to comment on and get additional comments from you on. So, I think, in general terms as I listened to you speak and I think for much of our audience that is very involved in Latin America and Caribbean policy and solidarity that in our policy work is specifically against US intervention in all its forms and economic and military and and policy wise that we can basically look at European interventionism European imperialism being replaced by US imperialism and US interventionism. I do believe and I'm not sure. Senior Moncavet what part of the OAS charter is specifically in, but there is language in the OAS charter that prohibits intervention in domestic policy of all member states is that correct I mean intervention in all forms in the in the domestic policy. So that sort of feeling is prohibited by the OAS and yet doesn't seem to be recognized by all of its members. Am I correct in that, in that understanding of the charter. Yes, Terry. There is an apparent contradiction between what is written there in the OAS charter and what occurs in reality and what the organization does in their daily activities. Since 1948 on the date of its foundation with the participation of 21 countries from Latin America and the Caribbean when they subscribe this charter and precisely the design of the this organization and the creation of this organization was established by the United States with the purpose of accomplishing the US mission of making their Monroe Doctrine in reality and the performance of the OAS and what they do their behavior the way the OAS ambassadors act in the different countries. They follow that mandate and those orientations defined by the US elite. So they always the OAS receives instructions by the US elite. So now that we make reference to the OAS charter. It is established in the charter that none of the provisions authorizes the organization to interfere in the domestic affairs of the member states. So it's very clear what is written there. It's a principle that is there and it's also in the UN Charter and the OAS Charter includes that principle because it's a regional organization and is it in its foundational charter but in practice this is a principle that is constantly broken, systematically broken, permanently broken. So this non-interference which is the ideal scenario would render easier that the countries could develop their policies as they pleased in an independent manner free from coercion in a sovereign way without having to be worried by interference and maneuvers the political behavior and the sanctions and unfair unilateral measures exercised by the US against many countries not only in Latin America and the Caribbean but also in Europe and Asia. So we can see here how a first principle is broken by the actions of the OAS based on the demands of the US elite in that organization. That is why we say and our government has clearly stated that we have expelled the OAS because we are not a colony of any superpower. Nicaragua is not a colony of anyone and we have reiterated this several times the government of President Ortega has said this several times. So if we are not a colony of anyone, why are we going to be there in an organization that is basically a ministry of colonies that has acted as a ministry of colonies and the same charter of the OAS establishes that peace and security needs to be guaranteed throughout the continent but what happens in reality? The opposite, the opposite all the actions and the measures taken in the OAS that are related to interference that are related to interference in domestic affairs of other countries. So they want to oblige us to act in a particular way. So the OAS has been hijacked by the Washington elite since the beginning. So countries that have become the subdued to this elite are following that mandate. Those countries that have assumed this behavior of colonized countries different from our case. So this principle is not complied with of guaranteeing security and peace throughout the region because all these unilateral coercive measures against us. This pretension of imposing democracy or certain type of democracy in our countries when we have for example a direct popular democracy, a participatory democracy that includes all the sectors. We are not an elite democracy of just a group of power. We are a true democracy of the peoples. That is why we have decided that in our country the people holds the power. So we have seen how the OAS charter is systematically disrespected by the organization itself. So for example, the organization should develop solidarity actions in cases of aggression. Let's remember the case of the aggression of the UK against Argentina with the case of the Malvinas Island. And what happened with this regulation? What happened with the Inter-American Treaty for Reciprocal Assistance, the TIAR, that needed to guarantee solidarity among the countries of Latin America? Precisely, the UK committed this aggression against Argentina in order to keep their domination on the Malvinas Island and to break with the sovereignty of Argentina. That is the true owner of the Malvinas Island. Yeah, and that conflict is still happening. So, oh gosh, let me, I keep hearing more and more I want to talk about this afternoon. So listening to you describe how and why what happened on November 19. I think it's really very clear to me and I want to reiterate this with our audience that this was to lead the OAS is a matter of preserving national sovereignty or Nicaragua. Domestic sovereignty, national resource sovereignty, sovereignty of the people and a democratic elected government. And I think it's really clear for any of us who have studied in depth what happened in Bolivia in October of 2019. We know very clearly what the OAS is capable of doing and what it's done in Honduras in supporting US appointed presidents in the past and what was attempted in your country in spring of 2018. And I agree with you, I think it is, you know, an instrument. It's an instrument created during the first or right on the heels of the first Cold War, you know to basically preserve US influence on the on the Americas and and the Monroe doctrine as, as you said, there was, I'm talking to all of you today from Mexico City and in September, President Lopez Obrador had reconvened Salah, after a four year pause it was a Salah summit here in Mexico City September 18 I want to say and Minister Moncada was here. And it was fascinating to me, many of the things that were said. And it can be for all of you listening, it can, you can listen to the entire cumbre de Salah on YouTube it's a five out was a five hour meeting, and it's quite fascinating to listen as everyone sitting around the same table in this room talking about the Americas and what each country would like to see Salah is 35 members I believe, minus the United States and Canada who were never invited to participate Salah is for Latin America and the Caribbean. One thing specifically mentioned in and I say this with some trepidation because I know the El Salvador government is controversial, but Vice President will you attended the Salah summit in September on behalf of El Salvador and he very succinctly described the OAS and he mentioned it as an instrument of the First Cold War, created 1947 I believe, and how in 1962 Cuba was expelled simply because they had a different political paradigm and, and he went on to mention the name, the Secretary General's involvement in, in election electoral results what we would call elect election coup soft coups be electoral means via legislative means very, and judicial means he was very very clear he was very succinct and he was very succinct and what he had to say in describing the OAS and he also said, you know look Salah exists. It's efficient. It currently exists and that perhaps we should use that to build a block and interface with the rest of the world. And I thought that was very profound. I'm listening to you describe all of this today. I wonder if you can comment on how leaving the OAS because now you are joining Cuba and Venezuela Cuba that was expelled chose not to come back and Venezuela who chose when Delcey Rodriguez was Foreign Minister to leave. How do the three of you as allies and now working together outside of the OAS. How, how do you see this transforming the Americas, and in particular, it's influence the three of you and your influence, or potential influence going forward with Salah. Very countries in Latin America and the Caribbean are moving forward. We are moving forward. And we have been working based on our interest and our projects and our policies and work for that. Precisely related to the example of a Simone believer and his fight for independence, Marty Sandino and other historical figures. How our countries are moving forward to attain a real independence status for the benefit of our populations. How can we break with this old slavery chains of these colonialism chains that have prevented us from developing ourselves as countries as nations and to progress to develop our states. And at the same time, implementing the policies that each people with their own philosophy, culture defines and decides using their freedom and using their cost, my vision for this progress. That is to say the struggle and that is why it's so important this analysis of the OAS and pay attention to the Salah role because we as countries have found throughout the years and based on the experience we have lived and seeing what has unfolded in the OAS that the US as an empire and the US elite. And it's important to clarify this. Let's not confuse the US citizenry with the elite. The intellectuals, the workers are not the same as the elite that controls the US empire. It's important to understand this because this power elite in the US has been the one controlling power. And they have acted in detriment of the peoples of Latin America and the Caribbean. And that is why when the Cuban revolution took place and with all progress and the vision of positive future for the Cuban population and the example that was set for the other countries of Latin America and the Caribbean, we started to see changes, reflections, political struggles, economic struggles, ideological struggles, structural struggles as well. And we are moving forward and you started to see the, you started to see phenomenons such as the revolutionary Sandinist movement in 1979 in Nicaragua and later on Venezuela. Precisely resumed this line of thought of Bolivar as it happened in Nicaragua, we rescued the ideas of Sandino that precisely were lost during the first and second decade of the last century. And Sandino after so many years of fight was able to expel the US Marines from Nicaraguan soil. As Bolivar did during his times, he expelled the Spanish empire, as you may all remember. And Bolivia that I was mentioning it before, Bolivia was able to progress and started to see successes. But we have seen in the last decade, Terry, how these nefarious presence of the US empire in the Latin American region has created instability. They have promoted aggression, coup d'etat. And when we take a look of what has happened in Haiti, in Venezuela, in Honduras, Paraguay, Brazil. Precisely when lawfare has been used against, for example, Dilma, Lula, as it has occurred in many of our countries. Precisely this, part of the diplomatic and ideological fight to defend our interests and to continue moving forward. And looking for benefits for our population, we have waged this struggle in the OAS as well. However, there you see a reiteration and a repetition of the use of that space as a ministry of colony, as an instrument of interference and aggression against our countries of Latin America. And they persist and they continue trying to keep that position. And Nicaragua suffered from this in the last years. The US attempts to impose a government in Nicaragua and they try to organize a regime change through groups that are involved with terrorism. And they want to break with the constitutional order as they attempted back in 2018 in Nicaragua. And we saw what occurred in Bolivia. The OAS terribly with their groups of electoral observers created the conditions in Bolivia for a coup d'etat in Bolivia. An electoral coup d'etat as we all saw. And the same they have attempted in Nicaragua and also in Venezuela. So that is why what should our countries do if we are part of an organization such as the OAS that has a foundational charter that establishes clear principles on how the countries should behave. Within the context of cooperation. But the organization itself acts in an opposite manner opposed to the principles. They act as an instrument for instability of pressure of interference of an extension of the mandate of the US elites. And so what they do is develop efforts to topple democratically elected governments such as the government of Commander Daniel Ortega and Vice President Murillo as the government of President Maduro in Venezuela. And as what occurred with the government of former President Evo Morales. So this needs to trigger our reflection and we need to understand that this organization does not comply with the fundamental principles of international law and of the principles themselves of the charter. Because we see that even though you carry out efforts of democracy of diplomacy but this interference ends up having a cost in our country because lives are lost due to this interference. Police and other officials have died and they continue insisting and saying the Nicaragua is violating human rights and we have reiterated no we have said that we protect human rights. That is why our policy the policy of Nicaragua based on reconciliation promoted by President Ortega is oriented towards common well being. We say we give preference to the poor without excluding any other sector. We are including all the sectors but these vast majorities that have been systematically for years they need to be given back their rights that were stripped from them long time ago but the US government doesn't like that. And they don't see any positive aspect of our government because our policy is oriented to the needs of our citizens and the citizens have assumed these policies as theirs. We have oriented our actions towards economic development and to guarantee food sovereignty our constructions of roads. We are trying to make sure that this energy matrix is based on clean energy environmentally friendly but this is not highlighted by the US. In the OAS the countries that are subordinated to the US act collectively against us approving resolutions trying to delegitimize popular governments that are not following the instructions of Washington such as Nicaragua's government. We that disagree with the aggression against other states. We that disagree with the policies of destruction implemented against certain countries and we clearly disagree with the illegal appropriation of natural resources of our countries and in this regard Nicaragua is very clear. We are very clear in our domestic policy and in our foreign policy. We are very clear we abide by international law and the fundamental principles of international law and the UN and OAS charter. So when we reached this reflection in this analysis we said wait a minute this body is following simply the mandates of the empire in detriment of our peoples. At that moment we said we cannot continue being part of this organization and that is why last year we started denouncing the OAS charter. And last Sunday we said well we're going to expel the organization from our country. We're going to close their offices. We're going to withdraw the credential of our ambassadors that are there in the OAS. We're not going to participate anymore in anybody related to the OAS nor in the general assembly nor in the permanent council nor in the meeting of ministers of foreign affairs. Nor in the summit of the Americas. That is not the summit of the Americas as long as not all of the countries of the continent are present there. So that OAS truly does not comply with its role and brings no benefit to any of the states of Latin America and the Caribbean. And therefore Terry it is justified this decision and why have we denounced this charter? Why are we withdrawing from the organization and why are we formally not participating anymore there? And simultaneously the CELAC has been boosted and reinforced and that is why CELAC exists. And about CELAC, if you want to interrupt me you can do it no problem. Well okay I have like so much I want to ask you. I don't know how much more time you have but really you're just giving me so much wonderful information that there's a couple things I'd like to follow up on and then let's go back to CELAC because I think the summit that happened in September was really crucial. The timing of it was so crucial for the Americas, for Latin America and the Caribbean. But just for me to be clear and for our audience to be clear what happened on Sunday the 24th was an expulsion of OAS staff, OAS presence in Nicaragua, but still there is this two year exit process that needs to occur that is being recognized by Nicaragua. In other words you announced on 19 November you would be leaving which means the full exit will be on 19 November what 2023. Is that am I correct in that? There just will no longer be OAS presence in your country. Correct Terry. That's the way the charter establishes it, yes. In the event of the denunciation of the treaty, two years need to pass for the countries and the organizations to be completely non-bound anymore and so that the effect of the charters may cease, may stop for the country. Okay, thank you so much for that. Then the other thing I would like to add, and this is really more for our audience to understand something that you said, Foreign Minister, about governments that the Nicaraguan government, the Sandinista government, the government of Daniel Ortega and Rosario Murillo have are interested in an R, not just interested R, building a domestic economy for all citizens with an emphasis on the poor but not ignoring the middle class or upper class. And so one of the things that I saw in November and I would say your comments are actually regional in what you said. In November I had the privilege of traveling Latin America and observing your elections on November 7. Then traveling to Venezuela for the 21 November elections. Those were regional and local elections in Nicaragua what those in the states would call mayoral elections and gubernatorial elections and then at the end of November, November 28, were the presidential elections in Honduras, and then in December, Chile, but in the case of November at the after election day and looking at the results in all three countries November, excuse me Nicaragua, Venezuela and Honduras, it was really really clear that a theme across the Americas and then let's also not forget on November 30, Barbados left the British crown was really, really clear that across the Americas, people were voting for national sovereignty for natural resource sovereignty and voting for governments with an economic plan, beneficial to all of its citizens and we say an economic plan because we've seen everything from one step to the left to revolutionary left economic plans but but in general people voting for governments with an economic plan, such as that in Nicaragua, that was focused on uplifting all citizens, not just benefiting the wealthy elite as we see predominantly in the United States I think to me that's a really evident theme that happened last year throughout the year there were elections across the Americas, all you know, all year 2021. Is that am I correct in observing that do you think that that's a reasonable conclusion to make. It's a combination between the lot for the homeland of our countries love to your land to your population to your environment to your nature to your resources to peace to peace to stability. And to the creation and the development of the conditions for the improvement of the economies, especially after the pandemic of the COVID-19 after hurricanes and other natural phenomena after so many gorgeous. We have faced gorgeous in terms of security of health or natural adverse phenomena. So, basically, population and our nationals have a sense of dignity, and they love their land, their country, their patriots, they want sovereignty. So, this has to do with the existence of human beings as free beings as independent and sovereign beings that love self determination after centuries of being slaves and suffering exploitation the sense of freedom of defense of your homeland of your fellow. Citizens of your dignity so important it's fundamental. This has to do with the political ideological nature. This sense of homeland is combined with the economic aspect to be able to strengthen stability and the economics and social peace and then non aggression and and to block the effect of the international measures we need to strengthen our economy and to guarantee food security and food security. Taking into account the material food, but also the spiritual food. So, that is why in Nicaragua, we have programs and policies that are very important and involve culture, gender equality participation of women to give a specific special role to young people to young women to young men to have a freedom of cult of religion. All these elements. Once our population works based on these values with the support of the government with honesty, using resources provided by the state and by the society for their own benefit. Always bearing in mind honesty and transparency as fundamental pillars. So, we have to deal with propaganda and falsehood and fake news and the attempts to twist the truth and trying to delegitimize this reality in Nicaragua, and you have had the chance to come here and you probably have seen these things with your own eyes. You had alliances that were very important alliances between the state government, the workers, and the private sector, the companies, the private companies. Here in Nicaragua, the private sector in their highest levels have participated for a long time in productive conditions, and this has allowed us to create jobs to speak with representatives of the workers and the companies finding the to reach the highest level of social justice for decent salaries, looking forward to obtaining social stability, avoiding political and social conflicts. However, unfortunately, that alliance that was effective for several years and that brought results to Nicaragua is broken by the interference of the government of the US that perceives these policies as inconvenient to their ideas of exploitation, domination, and control. And that is why here in Nicaragua, to the 18 when we saw terrorist coup d'etat attempt that resulted in destruction of infrastructure, we have had great experiences. So that is why I emphasize that we have focused not only in the poor sector, but we try to include every economic sector in our country, even those that hold great amounts of power. So you made a comment about national sovereignty being part of and natural resource sovereignty, equating to security and stability for Nicaraguans, economic development for the people that equates to employment, jobs, income. These are all really positive things and in my opinion, are reasons why Nicaraguans remain in Nicaragua, and to have no reason to and choose not to migrate, which seems to me would be something highly promoted and highly desirable by the United States. So Nicaragua is not recognized by the United States and we have huge issues of insecurity, violence, unemployment in Central America in El Salvador, Guatemala, and Honduras specifically, maybe less Honduras now, hopefully with their new government of power. But can we talk just a minute about why there is no or very little migration from Nicaragua. I think people that migrate, my observation is people that migrate from Nicaragua. It is personal choice, education and coming back things like that it is not migration out of dire need for work for physical security we simply don't see that. We do not see Nicaraguan people leaving their country the way we do in other parts of Central America. That's an interesting topic, Terry. It's very interesting because if you pay attention, if a country has stability, good security levels, and a good health system, and a good educational system, and the government and the state creates jobs and develop programs to make the country progress, taking into account the needs of population. When these phenomena take place, not only the US, but also some European countries try to promote and create conditions of instability in our countries in terms of economy in terms of politics, and they use every mechanism they can. And since they have so many resources and especially so many technical and financial resources to do that, their knowledge, so they design their policies to promote psychological and emotional instability in our countries. So they promote through some subversive activities, hidden techniques. They try to create among certain sectors of population, they try to promote these flows of migration from our countries abroad, because they use it to say, oh, migration is increasing in this or that country, because they are experiencing this or that problem, even if this is not occurring in reality. They make up stories. In the case of Nicaragua, we have a combination between a good government that aims at developing the best conditions for its population and a population that is well aware of the political, economic problems taking place throughout the world, and the suffering they have faced in the past, linked to the foreign interference. And so Nicaraguan people is very mature. Nicaraguans are mature politically speaking. But still, we see campaigns aiming at promoting Nicaraguan migration to other countries. But as you said, in Nicaragua, migration is minimum. However, you see how some media outlets say in Mexico, 2000, Central American immigrants have been detained. And then they say there are two, three or four Nicaraguan citizens that are part of this group. So some media outlets try to use Nicaraguans to say that there is a migration from Nicaragua to other countries to introduce this idea in public opinion and mentioning Nicaraguans as part of this phenomenon. Migration has structural causes. Security, politics in other countries. We have high levels of security in Nicaragua. We have positive policies developed by our government. We have educational programs in the countryside. And our universities are working shoulder to shoulder with our peasants living in our rural areas, and they have access to education to university and technical education, which is truly a very important thing to mention. So, Nicaraguans love their land, love their homeland. Thank you. I can share with our audience very clearly and with you, saying one part of it, that's very, very true that, and it's a one, it's a really beautiful thing to be among that when among your people that feeling of pride and happiness is general day to day life. And I, and I, you know, it is because of the security and the quality of life that you and your government have created. I wonder if you have time for one more question. Yeah. It's, you mentioned earlier when we started our conversation that Latin America and the Caribbean as a region is moving forward. And I think that's very true. And I, and not just in recent years, I think you can make an argument in the last probably 20, 20 years for sure. Moving forward as a block as a sovereign nations. And one of the reasons you're choosing to leave the OAS is to be able to operate as a sovereign nation equal in the international world to the United States and other powers. And I applaud you for that. Moving forward the region moving forward and, and, and this is really coming back to Salah, I guess, how, how much of this moving forward and I would maybe say multi creating a multilateral paradigm, or expanding it I think the multilateral paradigm already exists so expanding how much of that has to do with trade and foreign relations with with China. And I would also probably throw in Russia and Iran to but perhaps principally China. The foreign policy of our government as we said at the beginning of this conversation is a policy that is broad open that precisely aims at strengthening friendship relationships, fraternal relationships based on exchange based on and the strengthening of a cooperation relationship in international organizations and the participation in the in positions of power in international organizations. President Ortega keeps an epistolar communication and keeps a constant email communication with different heads of state throughout the world congratulating them for their day of independence for any other important day expressing condolences in the event of tragedies. So there is a foreign policy based on dynamism and very human and we have broadened our foreign policy I want to tell you Terry that through the UN with the presence of our permanent mission there and our ambassador, we have been able to broaden the presence of diplomatic relations with many countries and precisely we do that through concurrence because for Nicaragua is very complex and difficult to have an embassy, a physical embassy in each one of the countries, but we try to do it through the Nicaragua we have an embassy in a country and but we reach other countries as well to keep a direct communication mutual support solidarity and precisely contributing to strengthen international peace and security the exchanges in terms of mutual interest and with Iran we have a great relationship we have had very significant exchanges, visits of Iranian officials in our country, but also visits of Nicaraguan officers in Tehran so analyzing the cooperation, the investments taking place in both countries in agriculture, in agricultural techniques in the medical field and in areas related to medicine also with medicines, education so we have plenty of exchanges we organize mutual conferences between the University of Manawa and the University of Tehran so we have strengthened this communication and exchange relationship, our cooperation as a whole and technical support in the medical field and in agriculture and with China, with People's Republic of China we have been working for more than four months resuming the international historical relationships that the Sandinista Revolution had started back in the 80s at the beginning of the 80s and that ended up interrupted with the political changes that took place in Nicaragua of neoliberal governments that interrupted that relationship so Nicaragua has resumed an old friendship relationship based on brotherhood and fraternity and programs that are precisely oriented towards the resolution of the poverty problems of our populations and as you know China has progressed remarkably to live behind poverty so we have a great relationship with China that has improved with time and is a bilateral relationship with great solidarity, mutual solidarity in the different fields and areas so and can you comment on Nicaragua's relationship with Russia right now I mean it's you know for the whole world this is a pretty precarious moment and my country most certainly is not innocent in the current situation but how does Nicaragua see the current situation in Europe specifically Ukraine am I allowed to ask that? I understand that what happens is that you made a question naming some countries in order but I'm going to change the order of this question because truly the problem of this invasion has to do with the US, the NATO the European Union controlled by the United States Ukraine turning Ukraine in a sort of platform of weapons and feeding an attitude of aggression against Russia so the President of Russia Vladimir Putin has repeated several times before this military operation erupted and it called my attention the emphasis and the insistence of President Vladimir Putin and Minister Lavrov and I'm warning the US and the NATO saying them don't continue moving towards the east don't continue sieging us and getting close to our borders security is an essential and comprehensive principle let's talk about security for all let's continue moving towards Russia I want to be clear about this if you continue with this we will know go backwards he was very clear and insisted in sitting to have a conversation and to have a dialogue and to resume old agreement old security agreements that have been subscribed by all the parties in Europe in the region between Europe and Asia and it's clear Terry that if the NATO and in the US and the US using the NATO and the European Union Ukraine continue in this path Russia has the right to defend itself Russia has the right to defend itself and to defend themselves actively and this needs to be taken into account by the US the NATO especially because in the end Ukraine is being used as a platform as I said before as a platform for aggression a very dangerous platform for aggression this is a topic that involves the main superpowers but it's important for everyone in the world because even if our countries are far away from this place of conflict we have the right to live in peace and we have the right to have peaceful relationships with countries that live in conditions of peace therefore we can also say let's live in peace the US the NATO please stop threatening other countries stop threatening and sieging Russia because you are endangering the security of your own populations and the security of other surrounding countries let's quickly remember that recently there was an attend of Kudeta in Kazakhstan in Belarus and Kazakhstan has a borders with China so we are seeing a very critical scenario with a high degree of aggression and all the countries have the right to say those who are threatening Russia stop we all have the right to live in peace and Russia has the right to live in peace as well as the Europeans have the right to live in peace and the countries of Africa Asia and the Americas thank you so much thank you so much for your time you've been incredibly generous this afternoon is there anything that you would like to add to our conversation or before I let you go there I wanted to thank you I wanted to thank you for this interview for the interest you have in Nicaragua for the interest in sharing the truth of what goes on in Nicaragua because we are suffering the consequences of fake news and I want to tell you that not all the media outlets we are aware that are some powerful media outlets that lie and some others like you that tell the truth so thank you I wanted to thank you and to say that in Nicaragua we are moving towards a positive path we are part of other international organizations such as CELAC it has a bright future that is resuming this historical role of integration and this aspiration of sovereignty and freedom and we are trying to contribute from our place for peace and security at a domestic level at an international level at an universal level we all want peace we all want a new international order in which we can truly see multilateralism strengthen and the strengthening of democracy within international organizations and we would like to see a true multiplicity and it is actually taking place in this historical political and geopolitical moment in the world so a new international order for the well-being of all the countries in the world to live in peace in a peaceful coexistence in development and in progress a better world is possible and we can do it oh my gosh it's just so beautiful and so hopeful and I'm so thankful for those hopeful words in this particular moment in our global history as human beings I'm so thankful for your time today you've been incredibly generous to speak with us and it's been a real honor and a privilege to have this conversation with you I want to remind our audience that you've been watching what the F is going on in Latin America and the Caribbean CodePink's weekly YouTube program of hot news out of the region we broadcast every Wednesday for 30 p.m. Pacific 730 p.m. Eastern on CodePink YouTube Live also be sure to catch CodePink radio every Thursday morning 11 a.m. Eastern 7 what would that be 8 a.m. Pacific and that program broadcasts on WBAI out of New York City and WPFW out of Washington DC both projects can be found on Apple podcast and be sure to watch us next next week and thank you again senior Moncada just a real honor and a real privilege and I am so thankful for today's conversation it was just absolutely wonderful thank you a greeting to all of you


Let's look at a specific example of the work done on and by a gravitational field. In this example, we're sending a probe to do a flyby of the Sun to gather data. The probe starts its flyby at an initial distance from the Sun Ri and with some initial velocity, and it swings through the field around the Sun with a minimum distance of Rf, and then it continues back around on its way. How much work is done by the field from where the probe starts to its closest point? We could try to figure this out by calculating the force on the probe at every point and looking for the components in the direction of motion. This would be really hard because we'd have to cut up the path into a bunch of small segments that are roughly straight and get the angle between the force and the motion and the strength of the force for the entire path. Alternatively, we can just look at the change in potential energy between the starting point and the endpoint. This change in potential energy represents the work done by the field. As the probe gets closer to the Sun, the potential energy decreases. The gravitational force between the objects is causing the objects, mostly the much smaller probe, to accelerate as the distance decreases in its approach to the Sun, and this is transforming the potential energy to kinetic energy. As the probe comes into line with the Sun, the component of the gravitational force accelerating the probe is reducing. Once the probe has passed the Sun, it decelerates. With the velocity and thus kinetic energy decreasing, we know that the gravitational potential energy must be increasing. So given that it starts at a distance ri, and the turning point is at a distance rf, the change in potential energy will be the general potential energy equation we saw before. Due to conservation of energy, we know that this loss of potential energy is the work done on the probe by the field. So, without needing to worry about the initial velocity, or the strength of the field at all these points, or the direction of the field, we were able to look at the change in potential energy and figure out how much work the field did on the object, moving it from the initial position to the turning point. Finally, let's consider where the potential energy actually went. Well, we know the potential energy was used to do work on the probe. If you do work on an object, you add to its speed, which means you increase its kinetic energy. Thus, the field does work on the probe converting the potential energy into kinetic energy. If we were to look at the reverse situation with the probe coming back around the sun and travelling away, we'd find that the probe is doing work on the field by converting its own kinetic energy back into potential energy, and thus conserving total energy of the system.


Hello students let's work out the following problem it says the 8th term of an arithmetic progression that is AP is 37 and 12th time is 57 find the AP. So let's now move on to the solution. Now we know that the nth term of an arithmetic progression that is AP is denoted by AN and is given by the formula A plus n minus 1 into D where A is the first term of the arithmetic progression and D is the common difference. So you need to remember this formula because we will be using this formula. Now we are given the 8th term and the 12th term. Now 8th term is A8, A8 is 37 which is equal to A plus n is 8 n minus 1 into D that is 37 is equal to A plus 7 D similarly A12 which is equal to 57 is equal to A plus 12 minus 1 into D. So this implies 57 is equal to A plus 11 D let's name this as 1 this is 2. Now we'll solve equation 1 and 2 for A and D so we subtract equation 2 from 1 so we have equation 1 is A plus 7 D is equal to 37 equation 2 is A plus 11 D is equal to 57 now since we are subtracting sign will change so plus A gets cancelled with minus A 11 D 7 D minus 11 D is minus 4 D 37 minus 57 is minus 20 so this implies D is equal to minus 20 upon minus 4 that is equal to 5 so the common difference is 5. Now we can easily find out the value of A by putting x is D is equal to 5 in any one of the 2 equations in 1 so we have A plus 7 into 5 is equal to 37 so this implies A plus 35 is equal to 37 and this implies A is equal to 37 minus 35 so this implies A is equal to 2 so we have D is equal to 5 and A is equal to 2 now AP is given by the formula A A plus D A plus 2 D A plus 3 D A plus 4 D and so on now A is 2 A plus D that is 2 plus 5 A plus 2 into D which is 5 2 plus 3 into 5 2 plus 4 into 5 so this becomes 2 7 2 plus 10 is 12 2 plus 15 is 17 and the next is 22 and so on so this is AP that is arithmetic progression is 2 7 12 17 22 and if you see that here in this AP if you keep on adding 5 to the previous number you will get the 8 term as 37 and 12 term as 57 so this is the required AP so this completes the question do remember the formula for the nth term of an AP and you also need to remember how do we write the arithmetic progression so this completes the question and the session bye for now take care have a good day.