Okay, what we're going to do in this section is we're going to take a look at flow in a circular pipe and we're going to look at a little differential element of a circular pipe and what we'll do is we'll apply the energy equation to that section and we will also apply the control volume analysis specifically the momentum equation along the axis of the pipe and with that we're going to come up with a relationship that is going to move us one step closer to being able to resolve pressure drop within pipe flow. So let me begin by drawing the schematic and then we'll work through the energy equation and the momentum and then we're going to do some dimensional analysis. Okay, so here is a section of pipe and we have fluid flowing within the pipe from position 1 down to position 2 and we do have a gravity vector and so the weight of the fluid it could be driving the flow as well in addition to pressure and we can see that there's a linear shear the pipe itself makes an angle feed with respect to the horizontal so I've drawn out on the right hand side here some angles and these are important because they lead to certain trig relations such as the gravity vector and delta z is equal to delta l sine phi which we'll be using in our analysis so with that that is the schematic that we'll be referring to so we have fluid flow coming in this direction and moving out of the pipe down here and what we're now going to do we're going to apply the energy equation and then we will apply the momentum equation in the direction of x so let's begin with the energy equation. So first of all it's steady flow so q1 is equal to q2 and that is equal to a constant and the mean velocity we will denote that by capital V in the analysis that we're doing here and v1 is equal to v2 given that the cross-sectional area of our pipe is not changing so looking at the steady flow energy equation so that is the steady flow energy equation we're dealing with fully developed flow so we're away from any entrance regions so what that means is that the velocity profile is not changing as a function of x and with that alpha 1 is going to equal alpha 2 be it laminar or turbulent we haven't specified that yet and v1 will also equal v2 given that the flow rate is constant we can make that assertion as well so with that what we can do is we can rewrite our steady flow energy equation I'm going to rewrite it and I am going to isolate the head loss term onto the left-hand side of the equation so from our energy equation a number of terms cancel out given that v1 and v2 are the same we can take that out and that out and what we're then left with is just the pressure terms and the elevation terms and we can then solve for hf is equal to that so what we're going to do we're going to park that for a couple of moments and after we look at the momentum equation we'll come back to this equation and we will couple it in so let's move on to the momentum equation using control volume analysis now we're dealing with steady flow so the first term will come out of the equation and looking at the x direction actually I should get rid of the x there because we haven't specified it yet we will now so we're now going to look at the x direction of the momentum equation and what we have for the forces on the right hand side it's going to be a balance of pressure we will have our body force and then we have the shear stress around the perimeter and then on the right hand side we have the momentum flux in and out and that term isn't really going to be all that interesting because the we're dealing with a very very small differential element and the momentum flux in is basically identical to the momentum flux out but let's work on the force terms on the right hand side okay so what we can see the first term here this is our pressure balance and multiplied by Pyra squared the area cross-sectional area then we have the body force term and I've corrected to give us Gx so the gravitational vector oriented into the direction of the pipe flow X and then that is multiplied by the volume of the cylinder to give us the mass and then finally we have shear stress and that is multiplied by the circumference of the pipe cross-section multiplied by the length delta L and the shear force is going in the opposite direction from either the body force or the pressure and then on the right hand side of the equation given that we're dealing with a small differential element what we're seeing is that the mass flux is not really changing at all nor is the velocity and consequently the momentum flux in and out are identical the velocity profiles not changing there so that term disappears and essentially what we have is a balance between pressure and including the body force and viscous shear and what we're now going to do we're going to make another substitution and then try to simplify this a little so pulling from those little diagrams that we drew earlier and rearranging when we do that we get that term there and what I'm going to do I'm going to divide through by rho g and pi r squared and when you do that you end up with delta z so we're dividing through by this rho g pi r squared so delta z by itself and I'm going to take the tau w over to the right hand side so we get that there but if we look at this this term here going back to our energy equation that is the exact same term which we said was equal to hf so delta z plus pi over rho g we can say that that is also equal to hf and that's from comparing energy with momentum okay so what does that do for us well we have this relationship now between the head loss and our shear stress we're now going to use dimensional analysis and so we saw the Buckingham Pi technique earlier on in this course the variables that we're dealing with here the important variables we can say shear stress is going to be a function of rho v mu d and epsilon epsilon is a quantification of the roughness of the pipe internal roughness because you can have smooth pipes and you can have rough pipes and they will definitely have different pressure drops so if we take that and we go through and do dimensional analysis much like we saw earlier with Buckingham Pi we can come up with the following we can come up with the following relationship and here what we're doing we're introducing a new constant and this is going to be something that varies depending upon Reynolds number and the roughness of the pipe but this is called the Darcy friction factor and when you're estimating pressure drop in pipes it's all about determining the Darcy friction factor that's really the main obstacle or the main goal but right now it's just some non-dimensional constant that we don't know much about so what I'm going to do I'm going to make some substitutions here I'm going to use the thing that came about when we balanced the energy equation with the momentum equation and then I am going to use the result that we obtained for tau w I will rewrite that and and the Darcy friction factors so that gave us the following so that's what came out of dimensional analysis and I'm now going to basically couple these two together the densities cancel so we get this equation let's clean it up a little bit more so we get this equation here and this is an equation that relates the head loss that we have in our energy equation to this yet to be determined friction factor and this is known as the Darcy wise back equation and a few comments about this equation so we see it's valid for either laminar or turbulent there is nothing in the derivation that we did that would assume one or the other our next step is to determine the form of the function f for flow and when I say for flow that could either be laminar or it could be turbulent and we will find that f does vary depending if it's laminar or turbulent and what this term does is it represents head loss in a pipe due to friction okay so that's the Darcy wise back equation a very important equation in pipe flow and what we will find is we will come up with a way to be able to determine what the friction factor is for laminar flow that one is kind of clean but when it gets to turbulent flow it's going to get a little more messy and that's because we have to rely very heavily on experimental data but that's what we'll be doing in the next lecture and we'll be working our way through and determining what the friction factor is and we'll come up with the equations for estimating it for either laminar or turbulent flow


So welcome back to session number two of the sixth day. We are lucky to have before us Professor Sudarshan who will be talking in the area of database security. I am sure most of you have studied this course databases, some of you may be teaching it and in that connection you might have had the opportunity to hear about the textbook on databases probably the most well-known book in the subject. Professor Sudarshan is a faculty member in this department, in fact he is the head of this department and has been one of the most dynamic heads. So with that brief introduction over to Professor Sudarshan. Thank you Professor Banner and good morning everyone. Today we will be talking about database security. Given that we have just about an hour and a half or even less to cover a pretty vast area I am going to just be scratching the surface. So I will start by motivating database security. So what is database security? There is data in a database and there are certain people who are authorized to view the data. There are certain people who are authorized to update certain parts of the data. And data or database security is basically protecting the data from malicious items to either steal or just view the data or to modify the data which can have other repercussions. For example, adding money to your bank balance without actually having deposited money. Now why is prediction of data getting, you know, it is not just important, it is critical to life today in some sense to modern day life and that is because there is just so many things which are online these days. If you have a bank account and every one of us does, all our information about the money we have in our bank is stored online. If you own shares, it is a DMAT form and stored online. If you use a credit card, all your expenditure is online. When you want to make a purchase with a credit card, obviously it is contacting an online database. Similarly, your salary, income tax, if you are a student, your admission information, your marks and grades, if you own a house, for example, the land records now are increasingly online. It is still mostly on paper but a lot of it is going online because of fraud on paper. Then there are licenses for various things, driving licenses, taxi licenses, auto rickshaw licenses and so on, which are also going online to a large extent because of fraud on paper. Then there are medical records, which as of now in India are not very much online but the trend is clear. Increasingly doctors are going to write your prescriptions on tablets, not the medical kind but the iPad or Android tablets. That is where your health history is going to reside online. The tablet is the interface. Pretty much any information about you which is critical to your life and well-being and your wealth is online. That is from your perspective as an individual. From an organizational perspective similarly, data is key. If you do not have and if you do not protect your data, you are in trouble. Now when there is such important data out there, obviously people are going to try to hack and get access to it. There are various ways in which this can be done. And this is just a very small sample of headlines, meaning the headlines are really the biggest data breaches that have occurred. The smaller ones never even make it into newspapers, let alone become headlines. So here is just a small sample. I have tried to pick some from across different years. Just a few days back there was a report about Chinese hackers breaking into the US federal employee database. It is not clear what information they got but there is a lot of potential for using that information to target individuals who have high security clearance. And if you have security attacks that target individuals, you can put more effort and break in and thereby get into high security government databases. A few months back there was a break into eBay account information. eBay is the mother of LX and other similar things. It is there in India but it is really big elsewhere. So eBay's account information including usernames and passwords were compromised. And this means that people can access eBay accounts, make purchases, spend money and so on. And even more insidious attack happened not so long ago in December where the target store is one of the biggest chains. It is like you heard of Walmart. Target is slightly more upscale version of Walmart. It is a little smaller overall but it is a huge chain. And hackers broke in and got access to credit and debit card information along with PIN numbers which is extremely dangerous. That particular one did not hack into the database. They actually hacked into the point of sale terminals but equivalently if they got into the database they could have got similar information. A little bit earlier in 2010 there was a big article which was called The Great Cyber Heist. Talking about how billions of dollars had been stolen from banks. And it turns out that the key technique used by those people who broke into the banks and credit card organization was something called SQL injection which you saw probably yesterday or day before and you must have had a lab which showed what you could do with SQL injection or SQL injection. I'll be using the word SQL and SQL interchangeably. People in the field use both of these. And you have seen how to do SQL injection and it turns out that the repercussions can be enormous. In this case billions of dollars were at stake. And the number of places that are vulnerable to SQL injection is unfortunately enormous. People have been very careless programmer. In the early days back in the early 2000s people didn't realize the risk and coded dangerous things without realizing it. Soon after that people understood the risk. This was taught in courses. So the current generation of programmers ought to know very well what are the risks of SQL injection. Unfortunately many people still don't and there are still many bugs out there which people are creating today not to mention a lot of legacy code which has these vulnerabilities. Coming closer home to India there have been many such examples. In 2009 there was a thing about medical records which was sent to India for digitization being put up for sale. What people would do with it and why they would pay money for it I'm not very sure but clearly there was a market for it. And this had a lot of repercussions because it gave India a bad name and would have diverted a lot of the BPO market away from India causing economic harm to India. In 2010 there was a fake registration certificate racketed the road transporting in Hyderabad. I believe that people would steal cars and then you need a RC book to sell the car and they had broken into the RTA and could generate those things and then they could sell the stolen cars. And a little bit earlier still in Delhi they had an estimate of they had issued about I think 1 lakh auto-rickshaw licenses and a sample showed that there were at least 2 lakh autos on the road. So half the autos on the road were illegal they were not paying taxes and the government decided to clamp down on it. So they said that this is happening because of paper records we will now have everything online and all licenses have to be renewed and everything is going to be done on the database online. Very nice idea. They went through with it and at the end of it they found that from 2 lakhs the number of autos had come down to 1.5 lakhs but there was still only 1 lakh licenses that means half of the licenses were fake even after putting it online. So then they investigated what had happened and it turned out that somebody had accessed the database and wiped out the records after a bunch of autos had been registered allowing fresh registrations against the same license number. So then 2 autos with the same license number could exist in the city without anybody knowing and they only paid tax once. So this kind of fraud is common and dangerous.  Here is the data sitting in the middle and here are all these people trying to hack into the data and it's your job to protect the data and obviously you'd be extremely scared about what is going on. The amount of money at stake has gone from literally in dollar terms from hundreds of thousands to millions to now billions. It's an enormous increase in scale. So I'm not going to be able to cover everything in this vast space as I told you but I'm going to cover a few things and for each of these I'm going to give you just a little bit of overview of what is going on and then I will leave it to you to dig deeper into these areas if you are interested. So first of all we will cover the levels of data security and below are the actual levels so I'm going to go into each of these levels in more detail in the physical data security. I'm going to talk about authorization, application level security protection against certain other attacks such as insider attacks and then I'm going to talk about two topics which are more at the research level today one of which is security with outsourced databases and the other is privacy. I don't think you have had privacy as a topic here I have a list of topics down here so again privacy is a very big area I won't get into much detail but I'll give you a very quick issue of some of the issues quick overview of the issues. So this is what a modern information system looks like you have users who are connecting over the net now here it shows a very old drawing of somebody with a CRT monitor today of course it's not just desktop computers here but mobile devices are actually dominating but be that as it may they usually connect over the internet to an application program which is sitting somewhere and that application program is going to access data in a database the database system itself is running on top of an operating system such as Windows, Linux increasingly this database is not a centralized database but is actually something which is highly parallel and underlying all that is the actual disks and hardware on which this data is stored. Now coming to the different levels of data security against which any organization which has an information system has to be aware of all these levels and take precautions against breaches at any of these levels the highest level is humans now obviously there are some humans in the organization who have access to all the data if this human can be subverted then there is a problem now how do you protect against such things that's not an easy problem in the no single solution to it but anybody building a system has to figure out ways of it and we will talk a little bit about this now the next level the human is connecting to the application program over the network and there are a lot of opportunities for breaches over here I'm not going to talk about it because you have been covering that and will be covering that in a lot more detail in this course further down is the database application program and we are going to spend a fair amount of time on security at this level and the application program in turn connects to the database system so we will talk about security here now the database itself typically runs on top of an OS if somebody can subvert the OS they can get access to data again we are not going to get into that although that's an important problem and then finally there is the physical level now we are going to talk a little bit about protecting data at the physical level coming up so I'm going to actually cover these in reverse order I'm going to start with the bottom and then go upwards roughly speaking let's look at the physical level security now you must have heard about Snowden and how he copied data from the information systems and is now busily embarrassing the US many of us probably think it's a good thing because he revealed a lot of unsavory things that the US government had been doing but obviously the US government doesn't view it that way and they would want to prevent something like this happening again so in this case Snowden had access to unencrypted data and he copied it to a USB key we are not going to deal with how to prevent that kind of access but the question is what if somebody had data in a laptop and this is a common situation in a business management often needs low level data to do analysis if somebody steals the laptop then they have got access to the data if somebody manages to break into a hotel room copy out your disk and leave without you knowing it they have got access to your data so that's a serious risk so how can you protect against this kind of a risk similarly if you had a USB key with data which is lost and this happened again to the US apparently there was a lot of military data on USB keys in Afghanistan and USB keys are extremely easy to steal obviously so these things were being sold in the market in Pakistan containing critical military information so how do you protect data which is stored on these things and which has leaked out and the obvious way is to encrypt the database at the storage level so most commercial databases today support encryption of the entire database so if anybody gets a copy of the disk if they don't have the key then they cannot access the data so that is whole database encryption now whole database encryption is good but there are certain situations where that is either too high overhead or is not sufficient and the next level of security is column encryption so this is very commonly used for sensitive data so supposing you have an account with let's say Flipkart Flipkart has your credit card number and that is considered sensitive information now if they store it in plain text if somebody gets access to it there is a problem so instead what they do is the database itself may not be encrypted but the column containing the credit card numbers is stored in an encrypted fashion and if Flipkart's application program wants to access the data it has to be decrypted so as long as the database is kept physically separate from the application program containing the decryption password then if somebody steals the disk they are not going to get access to the sensitive information at least so this has lower overhead than full database encryption and is used quite a bit there are issues with this still for example key management if somebody manages to steal the key then they have access to your data but it's still a very important aspect of security and most commercial databases do support both of these levels today whole database and column they also do file system encryption most operating systems today support some form of encryption of a whole file system so you could do that too so now encryption of sensitive information such as credit card numbers is not just a good idea but it's actually the law in the US under the HIPAA law there are certain sensitive information which by law cannot be stored in plain text in the database so you have to encrypt it let's move up one notch and come to the database and application program so here security is not just about preventing access to data because you do need access to data here but it's about authentication and authorization so you need to authenticate users to know who the user is and then you have authorizations to specify to the database what a particular user is allowed to do so you are going to get into more detail here so there are many types of authorizations at the application program level there is usually a screen level authorization which controls which users to get to see which screen so a typical application program has a very large number of screens each of which allows certain things to be done so most application programs would have an authorization mechanism built in which says that this user or this category of users can get access to these screens in addition the screens themselves will take certain parameters directly from the user login so if a user is logged in they get the user ID so a screen which shows your salary for example would directly take from the login your employee ID and you will only get to see your own salary not anybody else's salary so the screen enforces that the salary of the currently logged in person is made available so that's the screen and application program level authorization now if you go down into the database the application program itself connects to a database and does various things to it and so there has been a lot of work on authorization in the database anybody who has taken a database course would have probably seen some of these things and here are some examples of the types of authorization these actually technically these are privileges you have a read privilege, insert, update, delete and a variety of other privileges so now this is encoded in the SQL language the entire authorization mechanism built into SQL and this is based on four different notions there's a notion of a privilege so I just told you what are the kinds of privileges read, update, insert, delete and so on and then there are objects on which these privileges can be granted so in a typical database the object could be a relation or it could be one or more columns of a relation so you can have access to column A but not to column B and then there are users and roles so now what is a role? it's a notion of the kind of work that a particular set of users might be doing so let's say a role is a manager so if you look at this example here it says grant select on employee to manager employee is a table and manager is a particular role so all people with the role manager will now get the ability to run a select query on employee's table and see all the roles in that table so the objects as I told you could be relations, columns but it could also be views, thought procedures and so on so there's a fairly extensive set of objects on which you can grant privileges and there's actually more kinds of privileges for example for thought procedure you may not be able to read the thought procedures definition but you may be allowed to execute the thought procedure you might be able to execute the thought procedure as yourself or you might be given the authorization to execute the thought procedure as the user who created the procedure in other words you may not directly have access to a particular table which that procedure uses but when the procedure is executed it runs as the user who created that procedure and can therefore access the table so there are a lot of such functionalities built into SQL in the current SQL standard however the authorization on objects is not at the level of roles you cannot say that a user can access this role of a relation but not that role and I'll come back to this limitation later there has been some work to remove this limitation then there's also a way to grant roles to users for example grant manager to Bernard because he's managing this course now I'm not going to get into more details of authorization in SQL it's fairly standard if you've done a database course you would know it if not see any database text now let's come back to the application level as I said the application connects to the database and executes queries and updates in there so how does the database know who's connecting to it it's a connection which is coming across the net the socket is open but how does the database know who is opening this and typically this is done by using a password a database password which is stored in the application program and so the database has no idea who are the users out here all it knows is that there is a single user under which the application program is accessing the database now the application program obviously is comprehensive it has to do various functionalities on the database therefore it has to have complete privileges on the database it should be able to update any data, read any data in the database so what does this mean? it means that if this password leaks first of all you are in trouble but even more important if somebody is able to fool the application program is able to subvert the security of the application program the database level security is useless it's completely useless because the database only sees one application program user and it has no idea that this particular update that came is not a legal update but rather is a result of a breach of security here the database cannot find out so that's a more serious problem we'll come back to this so it turns out that the biggest problem of security today by far is not inside the database but really at the application program so poor coding of applications in particular SQL injection which you saw yesterday or day before is one of the biggest problems here but there are many more for example application might easily forget to implement an authorization check on a particular screen so there's a famous case a few years back there's a site called applyyourself.com which is used to handle applications to various universities it's a site which many universities use so what happened is that in there students were supposed to see the results only after a certain day so universities get time till a particular date to update their admissions information after that date the results are made available to students now what happened is they use some interface for universities and others to see the data and that interface did not have the time limit and they had a similar interface for users which also did not implement the time check and this particular thing was not publicized to users but it was there on the system unfortunately and as luck would have it somebody chanced on this interface I don't know how they got information about it but what they did is they typed that extra suffix to the URL on the browser and lo and behold they could connect to that interface and see the results before the results were declared unfortunately this could only be done if you are already logged into the system well fortunately or unfortunately unfortunately for the students I would say because some students came to hear of this and they said hey I want to see my results early you know what's a big deal nobody is being hurt by this so they went ahead and used it to see the results but unfortunately for the students applyyourself.com was logging what was going on so it was able to trace all the students who had accessed data through this interface and it went ahead and turned over that information to the university and many universities actually cancelled the admission of students who did this so it hurt those students quite a lot the university said that hey these students are doing unethical things we don't want to admit them so that's a big impact on those students so it's very important to code the application to avoid these kinds of problems but of course this is easier said than done way back about 11 years ago we had a workshop on data based security here in IIT Bombay and there was a student who built an interface for registering for this workshop and there were some people in a company in Pune who were working on security one of them said hey let me try to see if this particular registration application is vulnerable and what happened is unfortunately it was he was able to see the passwords by a small trick which was well known and he could have accessed our database and done anything to it of course he didn't he told us about it but that's another example of application vulnerability so let's come back to SQL injection which you saw earlier I'm just going to remind you briefly about this before going into techniques for avoiding SQL injection attacks so here is a form which takes a username and a password and here is a badly written application which tries to authenticate the user as follows it has a query select user info from user where user ID equal to and note the construction here the query has a string plus user ID equals and then there is a username which is typed in here and then there is a and password equal to and a password which is typed in here so now this username was supposed to be this particular one I think is missing some quotes there should have been there's a typo on this slide there should have been an extra pair of quotes before and after username and similarly before and after password so that in the SQL query which you get the username and password are enclosed in quotes which is the SQL language requirement that you have quotes around this identifier so now a malicious user types in a username that looks like that the following XYZ quote and then dash dash now what is this doing as I said there should have been a quote here as I said there is a small mistake in this slide so now there have been an opening quote for username so it should have been something user ID equal to quote and then XYZ close quote that closes the string so in a SQL query what comes after the string well the remaining SQL constructs in this case dash dash now what is dash dash in SQL it's a comment so what is the effective query that is run select user info from users where user ID equal to XYZ and then the rest is commented out that's it, that's the query and this query is going to return a result now normally if the user had not hacked it the query would return a result only if the username password matched in the user's table so if the user gave a wrong password it wouldn't allow login but now the password check has been commented out so the user is in trivially by just adding a quote and a dash dash how much easier can it be to break into a system so this is the problem with SQL injection attacks they are extremely easy to execute so how do you write code to avoid this we will see that in a bit as I told you the great cyber highs where millions of dollars were compromised was initiated totally from SQL injection a little bit later Sony had online games for their gaming console, PlayStation and somebody hacked into it again using SQL injection and was able to get credit card information login, password, all kinds of information about the entire set of users so it hurt the company enormously so SQL injection is extremely dangerous so how do you protect against SQL injection now all languages which are used to connect to databases have a notion of prepared statements or there are a few other ways but prepared statements are by far the easiest way of protecting against SQL so I am going to spend a few minutes talking about the JDBC API specifically whatever I tell you here has is equivalent in other APIs so if you use PHP or Python or anything else you would use a corresponding method over there so all these APIs for accessing databases have the following model you open a connection to the database you create a statement object and then you execute queries using that statement object and then there is an exception mechanism to handle errors I am not going to cover that so that is the basic model so here is a sample piece of JDBC code which shows the overall thing and in the next slide are the details which we are going to focus on so this is kind of the wrapper for what we are doing so do not worry about the specific syntax here it is loading some oracle driver first and opening a connection to this URL db.el.edu for 2000 connecting to db with the user ID and password that were passed in here using a particular protocol, JDBC oracle thin so all that is not of concern to us for security the connection is open in this statement and now from that connection we create a statement and the statement is used to do the actual work which is in the next slide you close the statement, close the connection and wrap up so that is a typical model for accessing a database from JDBC now here is the actual code which uses that statement variable to execute whatever is required so if you want to update the database you could write a thing like this statement.executeUpdate and here is a SQL string insert into instructor values blah blah blah so new tuple is added to instructor and that is an update similarly if you want to execute a query you could say result set r set equal to statement.executeQuery and here you have a small SQL query being executed and then here is a loop which loops over the result set and prints out the results of that query let us not worry too much about the details of the syntax but let us focus on this particular thing here you have a statement.executeQuery and a string and the problem is if a string is created using input from the user then we have a problem so here is a string which is being typed in it says select star from instructor where id equal to single quote plus user id plus single quote so whatever user id is typed here is enclosed in single quotes now the double quotes are the java language string terminators and the single quotes are the string terminators within sequence so this is how this particular query is constructed so here the quotes have been done properly sorry for the mistake in the earlier slide so now if the user instead of typing a real valid user id type something like just a single quote directly semicolon delete from r this is the example of SQL injection you have seen then the query becomes select star from instructor where id equal to quote that quote came from here and then a quote which came from the use this thing what the user typed in semicolon delete from r semicolon and then there would be a quote after that which is added here which might be a syntax error you could put a dash dash here to remove that quote also so now this is going to run two SQL statements select star and then delete so that's a second kind of vulnerability so now how do you find out if a particular application is vulnerable it turns out to be very easy in fact there are automated scripts for doing this so you have tools which will type in strings which look like this quote star star star into a box, why star star star that's not a valid SQL statement it will cause a SQL error and the quote will terminate a string if you had a vulnerable application and then this will cause an exception and the exception will immediately cause the application to output a message in some cases the application actually outputs the entire error message and it turns out that the error message often has very valuable information to the hacker what kind of information it tells the user what was the query it tells the user what were the tables in the database it tells them what are the columns so using this the hacker can now get more information and probe deeper into the database starting with no knowledge about the database so that's another problem printing error messages which the database has thrown to users is actually a security whole, many applications do this even today so how do you prevent this kind of an attack the simplest technique is to use prepared statements so how does a prepared statement work well it looks like this this is the JDBC prepared statement you say con.prepared statement and you pass the SQL query but in here you do not pass any values which are taken from the user so instead you put question marks for each value which is going to come from the user so this is a fixed string select star from instructor where id equal to question mark is a fixed string it cannot be modified by user input however there is a question mark indicating that this is a point where some user input is going to be provided and the next line here pstatement.setString1 to use already one meaning the first question mark in this query string that is being said to user id and then you execute this prepared statement so what this particular thing does is the set string looks for quotes in the string which is being passed in and adds escape characters so in particular if the user typed in quote semicolon delete from our blah blah what is going to happen the set string is going to add a backslash before the quote with the user typed in so backslash quote is treated by sql as an actual quote in the midst of a string so now this becomes the entire string the string becomes single quote semicolon delete so id equal to single quote semicolon delete blah blah which of course is not going to give anything useful and so this protects the system from SQL injection so this is by far the simplest way of avoiding SQL injection use prepared statement if you read up instructions on how to avoid SQL injection there are other alternatives which are provided for example you could use stored procedures and then you say call with a thing with strings which are enforced as strings but that's a little clumsy because you don't want to create a stored procedure for every query another alternative which is widely used is to write your own function or use a library function that adds quotes as above before you form the query now this is again not recommended because instead of doing this yourself leave it to the database to do it prepared statement will take care of all this why do you worry about how exactly it's to be done so this form actually tells the system what you want rather than how to do it by escaping quotes so it's better to do it at a higher level so you should never ever take a user input and concatenate it into a string directly you should only pass it to a database by using a prepared statement and set string, set int or whatever depending on the type of the input which you got from the user if you do this you are pretty safe from SQL injection now there are other vulnerabilities here for example passwords in scripts for if I told you about the database workshop hack at IITB this was what was done actually in this case there's a php I think but the same thing happens with jsp so these are scripts which are stored in a directory which is accessible directly from the web the only thing is that when the web server finds a file with suffix dot jsp or dot php it reads it as a program and executes it if it finds a file with any other suffix it simply displays the file so now what happens is if you edit the file in the directory with say emax editor which probably few people use today but it was very popular it creates a file with the same name with a tilde attached to it other editors do something like have a file called dot swp so it's something dot jsp dot swp so what happens is the hacker sees a particular URL let's say file one dot jsp and then types in file one dot jsp tilde since it's jsp tilde the server simply displays the file and if by chance the database user id and password was actually stored directly in that file you have a problem that file has been shown to the user who now has the database user id and password and this is what actually happened in the back in 2003 so there are a few things which you obviously need to deal with to prevent this first of all you should never store scripts such as java jsp in an area accessible using the basic HTTP protocol and second you should never store passwords in scripts store them in config files which are in a separate area which even if there's any error will never be revealed through the web server the web server does not have access to that area with the password so that's that's a basic thing which anybody developing an application has to take care of and finally even if the user if the hacker gets the database id and password they still have to connect to the database and make modifications there so another basic technique which must be used is at the database you list the particular set of IPs from which you can connect and execute query so this IP will include the application server but not anything else so if a hacker tries to connect from some other IP they will not be able to execute any queries from the database so even though they have the user id and password they still not able to go and modify data unless they additionally break into the application server itself and then execute query from there so that's a few things which any application developer has to keep in mind ok I think this is a good point to take a 2 minute break and see if there are any questions


The study found that high-resolution laser lipolysis using diode laser at 915 and 980 nanometers wavelengths resulted in satisfactory and promising results for body contour improvement, with no complications and an early return to work and physical activities. This article was authored by Rodrigo Pinheiro-Mata.


This video is meant to introduce you to the corona and in this case, we're going to use the soho Observatory data and they have a little movie theater where I can select what type of image and in this one I want the c2 Image I'm using the lower resolution and I've already picked out a couple of dates and again I've pre loaded all of this otherwise you hit generate and it would take a while for everything to load So here's our image and just to know what you're seeing in order to see the corona Which is much fainter than the surface of the Sun. We have to actually block out the Sun so this disc here is blocking out the Sun and This white line shows us how big the Sun would have been if we could see it But again, if we didn't block that out, it would overwhelm the entire image So the corona is everything you're seeing around the outside Now I'm going to go ahead and hit play and then show you a few different features One is you watch this you'll notice that there's a general outward flow all the time That outward flow is what we call the solar wind Occasionally, you'll have a larger sort of blip or belch or you could describe it in several different ways a Envelope of gas that gets lifted and thrown off of the Sun. Those are our CMEs There was one that was a little bit of a mild one. There's a little bit more Little bit of one over there Little bit of one over there And so on as it goes around Now occasionally in addition to these CMEs or these bright eruptions You'll also sometimes see darker regions and those are sometimes called coronal holes It's a region where there's not as much solar wind going out from the Sun at that particular location at the time Now this is your introduction video to answer the questions in your lab manual You're going to need to watch the second video, which is the observations of the corona


Elijah was born in Canada in 1843 to two fugitive slaves. They had escaped from Kentucky with help from the Underground Railroad. They eventually returned to the United States and settled in Ypsilanti, Michigan. Elijah's parents were poor, but they managed to save enough money to send him to Scotland at 15 so he could study mechanical engineering. It paid off. When Elijah came back to the United States, he went to work for the Michigan Central Railroad. Trains at the time were no good. They overheated constantly and needed to be completely stopped and cooled down just to replace the oil. These stops cost the railroad's countless hours of lost time. But that all changed in 1872 when Elijah patented a brilliant new device that automatically oiled locomotive parts while the trains kept moving. It was a massive breakthrough. And his invention was so good that other engineers quickly started copying his work. Nothing came close. No matter what his competitors came up with, Elijah's engineering skills were unmatched. And Elijah didn't stop inventing. By the time he died in 1929 at the age of 86, Elijah, the son of former slaves born 20 years before the Civil War, had earned 57 patents and founded his own successful manufacturing company. His very name became famous for superior quality. As the railroad workers used to say, anything less just wasn't the real McCoy. More stories about men and women like Elijah McCoy can be found in Lawrence W. Reed's new book, Real Heroes. Published by ISI Books. Buy it now at store.fee.org.


The study found that applying nanouria with 75% nitrogen through prilled urea was more effective than applying 100% nitrogen through prilled urea. The application of nanouria also resulted in lower nitrogen loads, reduced GHG emissions, and increased energy use efficiency. Additionally, it showed comparable soil nitrogen levels and dehydrogenase activity compared to the conventional fertilization method. This article was authored by Praveen Kumar Upadyai, Abir Dey, Vinod Kumar Singh and others.


We used wokamas to add an extra charge to our checkout which we called VAT and what this would do is that it would get a flat fee of 5 and then also get an 18% of what our cut total is and then it would add together those two fees and then eventually it would throw them out as an extra fee. Now the challenge with this is that not everyone is a programmer and they would probably find this inconveniencing. So what we're going to do is we're going to make this available to the shop manager maybe if they come to this particular page or whatever it is they can quickly add a 5 or 10 or whatever depending on the change that there is and they can even add a different percentage without having to look into the code but the code itself will pick up what's been written and then it will automatically put it out. So what we're going to do is we're going to add two wokamas settings in the different sections that we do have here. So these are different sections like general, products, shipping, checkout, account, email, integration and advanced. So let's use the products page to help us to get that or we can even use the general to make sure that someone gets it the moment they land here. So in today's video we're going to create our own tab that we shall call a VAT pricing and we shall just add it here and to allow us to add our particular settings that we'll use in our plugin. So let's go back to the plugin here and then we'll start on that. The first thing we need to do is add a filter and what we're going to be looking for is the wokamas settings tab. We're going to be looking for the wokamas setting tabs array and that's the hook we want. And from here we're going to add our own function and the function will be take a price, add VAT pricing. Now of course we'll delay this by giving it a higher priority of 50 but anything above 10 would do but let's make it very obvious by choosing 50. Now the next thing we need to do is open up our function and then we shall start writing our code. Let me put some space here so that we are on top of our game. So in here we're going to be getting a settings tab array of information. That's why I return it first and I'm going to pass it inside as an argument here. Now we shall get the settings tab and chain on our own ID for our pricing. So I'll just use this to sort of do the same thing so I'll copy and add this ID take a price VAT pricing and then I'm going to use that as a translatable string to work this. Of course we'll need our text domain, we'll copy this and add it here but we're going to have a title and we're going to call this VAT pricing and if we save this come back to our wukama settings and reload this. You're going to see that we now have a new tab here and it has already the save changes button. That's the beauty of using what's already existing. So all we need to do is just add our own settings that will allow our shop owner, shop manager to make those changes quite easily. So we go to the next step of adding the settings. Now in here we're going to use an action hook which is called a wukamas setting tabs and it expects for you to chain on something this here what we used our ID take a price VAT pricing which I'll just add that on and now we're going to add the function that's going to run with this hook. So I'll copy this here pricing and I'll add on the word settings to make it obvious that we're going to be dealing with settings. So we'll write that function as well and let's not forget its name and basically what this one what this function needs is to get the wukamas admin fields and we're going to be adding our fields inside this particular function. However we can choose to add another function that just stops the admin fields. So let's just do that and say get take a price add VAT pricing settings or we can just say take a price VAT pricing settings. So I'll copy this because this is what we need and I'll make another function here and that's where we'll write all our settings in this particular case. So the first thing we want here is to return the settings of course. Now you can make this also feel terrible so that someone who uses your plugin can also tab into it so you can actually use the apply filters function in this place so you can apply filters and with the apply filters all you need to do is add a unique ID that people can use so I'll get take a price VAT settings I'll just add on something very simple so filter underscore so that someone can quickly pick this up as a filter and then add in any other settings they want. So we're going to get the settings here and we're going to start chaining onto them so we'll have our settings already there as a filter sorry as an array and we're going to add an array of information here so when these settings are picked from this function that will be sent into the Wukamas admin fields right here and that will be passed into this action and then we will be getting our fields back on the backend of our site so we shall start adding our array of settings in here and the first thing we shall do is say the first component we're working with is going to be called a settings title and this will have of course an array of information in it and then we'll move on to the next piece but in here we're going to have an ID so we'll have an ID, a description, a type and a name in this particular setting so let me just wrap this with single quotes and then I'll chain on with our arrow and then of course with our single quotes here now the ID for this should be very unique and I can decide to use the same thing that we have here and just add on settings title at the end of this and so we're going to have a description and say this is section for handling VAT information that will be a description the type will be a title and then we're going to have the name and say this is VAT pricing information and the only thing that's left is adding commas right here so if I was to save this come back to our backend here and reload you'll see that we now have our VAT pricing information and we have a description following that particular title now let's add one field or two fields so that we can be able to finish up on serving the particular pieces that we need so I'm going to duplicate this two times and then we shall just change the information and the need arises so what we need for VAT pricing here is we need to have the flat fee flat fee and then we're going to get also the percentage so we'll call this dynamic fee for now so we'll just call this name will be flat fee then this will be dynamic fee the title will be a text because we want it to be a text field we'll have a text for this as well description we can just say the flat fee flat fee number and then I'll just get this VAT pricing flat fee for the ID then copy this and then just change this also here for the ID and we'll call this percentage of tax so if we are to save this come back here reload we shall see that we now actually have two fields that are reflective of what we want however they have jumped out of our section and we need to have them above our particular button and the way we do that is by introducing a section end so that the button knows where it needs to actually go so we'll come back here and then I'll duplicate this and we're going to have a section end sorry this should actually be section title to signify that we're beginning with a particular section and what this is going to be the type will be a section end it doesn't need a name and it just needs an ID so I'll copy section end and then change this to that and then when I save this come back and reload here we'll see our section title coming fast and then our section end here and then we'll have the button showing up here so let me try to save a flat fee of 5 and then save our percentage as 18 you'll see that it does not save currently so we need to add that functionality to save our particular form that we have here so come back to our code and then we are going to add some saving settings so just like we opened up our form we can actually use this same information that we have here to add our saving options here now the only thing that we are going to change here is instead of having section tabs here we're going to change this to update options and we'll have our take a press VAT pricing just like this ID of the tab so this is the particular action hook that we need to save our settings and change this to update options however when we come to the wukamas admin fields and the function that we have for these particular settings all we need to do is just say wukamas update options and then we shall pass in the function that contains our settings fields so what I'm going to do is just save this come back here, reload this and I'm now going to save our 10 and then I'm going to save our 20% which should be 2 and then when I save this we have our setting fields actually changing and saving so let me save this to 5 let me save this to 0.18 and then save this here you'll see that we have this particular content now I'm going to go back into our code right here and then I will change this from what we have here as static data and then make it dynamic that will always be fed by the setting options that we do have here so to get that information we just need to use the default VAT press function of get options and when we are getting options we need to pass in the ID of that particular option and how do we get the ID of those settings is we come here and look for the ID of those particular pieces so what we need here is the take a press VAT pricing flat fee and then we shall need also the dynamic fee so I'm going to get options for this duplicate it and we need to get also the dynamic fee right here now what we are going to do is save this as variables so get that variable copy this place it here and we need to change the name because we can't have one variable equal to different pieces of information so just like the flat fee we have here we are going to change this here and we are going to get our dynamic fee from here and we are going to change it here and so when I save this come back to our checkout page let me reload this here the reason we have this failing is we have an undefined fraction of get options this needs to be singular option so I'll come and make amends here and then save this come back to our checkout page to reload it and you will see that our VAT is actually the same as we previously had it's 95 so what happens if I change this to 10 and save it if I come here and reload we expect now it will be 100 and we have it as 100 so this is one way of allowing your shop manager actually have all this content available for you whereby someone who is not a technical person in writing code can just come and fill out this information and then you can use it on the front end wherever you want to use it so we found the video very hopeful like it leave a comment in the description if you feel like you have a question or you have something to say you have a different way of doing this let me know in the comment section and don't forget to subscribe if you haven't subscribed yet because we have so much good information coming up in the nearest of time so thank you for watching and bye bye


Good morning. Hakimi asubu isana for Friday. See, Friday is what isn't equal to holiday. Matiatiangi to number of circle. Anyway, hi. Good morning. My name is Valentine. Or at Color Me Thou on everything. Kini cha mui mulia ni hashtag social Friday. What is so social about your Friday? Stashema. Yay! Starting your weekend on a weekday. Namu yame fanyi pa me fukiria. Welcome back, Masai. Yay! Tukatu me kumis. Okay. Sosa salimi, autoengiriwa studio. How are you, ni? Nimesi yabiba. I'm sorry. Nimesi yabiba ni kumis. Nanafili yame nishalbis. Jumzai yandabali. Muna wakatua fana zi. Ali yandabali Wednesday. So what you doing? Nimesi yandiba ni kumis. Wakatua fana zi. E kwaandani. E manzis kuza mimi kenyemi mihari bika. Kwanini. What happened? From Wednesday. Wednesday, Thursday, Friday. Kwaandu ya kitu kiyadikanga tuivi plaz. Nani naba kitusa sasakilek tuwi na bika. Sliper ni sloka. Katu kutuivi. Manze wasangu wa dika. You know what happened? Manze, I got arrested. And I decided to go to court. Amu yu sii? Mi ni loyal keyan. I mean like best. Muna niya good civilian. Muna niya good civilian. Muna sabu. Mafanzoku wali pa samzi kibadu? Kwaida. Wada, akunam tuzi stopreg? Nne. Miki nani pakea. Ispokua Chris Dali. Okay. Kwaida. I feel like big isekali for non-social media. And I'll see how to con a guest, to con so many guests to know. Hapa. Hapa kapa nani. To slay. Alright, let's get it. Atami na itwa bari apaivi. And weekend is a jano. So any continuation to weekend. Muna zain patakama it's very Mokwam tenda wa kijami. And it's always a pleasure as I always say. So we'd like to do like a recap of entertainment news in Akunjila every single Thursday. Ussiku at 7 on Y254. But by Philangeel, Hequeen. Yes, Philangeel. Thank you very much for the story. So we'd like to do a recap, to go see how two stories happen over the week.  Okay. The only thing I took away from that situation is Akuna Rasta, Way 30. Wooo, nyewele true. Lakin zili kwa. Sia kili because na fokwani nene. Okay, so ya over the weekend Doti Fabili's reggae DJ Chris Dalim caused a star online after kneeling before the former Prime Minister and ODM leader Raila Odinga during the rally. Aha. Kamkunji grounds in Kibera. Ya. Watoa nikuwa na different things to say about this particular scenario. Shutu saan zana DJ Muenza ke. Atu wambia na fukirianeni. Amekusete. Amekusete. Okay, mejwa kwa entertainment kwa politics in two different things. In two different things. Awa kwa politics akatu saa. Lakin nikuwa entertainment alifei lua Rasta. Alifei lua Rasta. Mraasafai kupigi ya binadamu Mwaguti. Ya. Okay. So kwa politics, aku. Tuhu nausimatu akatu saa. Tudampe saa po. Tata ibailewe yun. Ya. So na zashkua kwa kwa uwa nks time. So we see. But tell us what you think about Chris Dalim. Miilewe uwa Baba o former Prime Minister Aila Odinga on White Fire 4 Channel on Twitter. White Fire 4 underscore channel on Instagram. White Fire 4 on Facebook. That's our first story. The second story is about Bonna Boy cheating on Steflon. And I predicted this somehow. but it happened. So social media has been in a frenzy of rumens of Nigerian, Nigeria's Bana boy cheating on his girlfriend with actress Princess Shai, hey, Shingyao. Okay, Stevlon Dawn has reacted to put the matter to rest. According to her, social media fans should turn their heads away because the videos of Bana boy and Princess circulating are old videos and nothing to worry about. While this was going on, some people on social media have a reason to believe that Damond Platinum also allegedly cheated on to Nasha during a baby shower. Wow, what a disrespectful list down. Yes man. We would know. Ish, but Bana boy and Damond, I don't know which one is true, I don't know which one is a lie. I don't know who did what, but social media man, don't believe everything you see on social media. Wow, she's heavy. On to our next story. Kali pa Holiske has told you that you're in Damond situation. Yes Damond. Holiske, what happened to you? Me na onatu Damond na koto saa. Kumi teki kenyari cheat na, kiti koto rumanze. Kani ombog. Anansu na cheki, saa na niya kwa settlement courage cheating patu na cheki, Tanasha kwa playground. So definitely. Kali pa asya wujimga. Asya wujimga wa. Onani feels na. Mini kwengeanda wa chome niyu hotetu. Acha niyuna, mimi na senditu mungu aitu mu. Mungu aitu mu, because nii kiamza kwengea, ita ni cropped. Mungu wa laali, anyway. Muz Kali pa piyali shake wa kwa situation, na Asian twins. It's a trend. So by the boy and Damond, I don't know man, but Damond kwa kwa after party, after the baby shower. Wow, very disrespectful man. Zeke wujimga wujimga wa mlambez and Tehtema. Yes, do you guys care about Tehtema kwa baniwa? Me I care a lot. You care? Yeah, my favorite. Okay. Umai chaza last thing. Every day. Every day. Mujimga wujimga every day. Mujimga wujimga wujimga afrikan king. So definitely afrikan music. Anyway nii saawatu. Tehtema tu kwa clubu wujali sayo mo. Yani atu jaban pandana. Atu jaban. Labu wujimga wujimga wujimga wujimga. But pandana is a clean song. Is a clean song. Eh. Pandana. Yeah. That's why, no numbers nii changi. Yusis to rezenu. Hello. I don't see you brother. Oh my God, oni twin wa bari. Runi jeni o pecha. Runi jeni o pecha. Uyo. Ah, Igi de. Before, before I came, before the before one. Uyo, apomu isho. Akisuni twin wa kekiki. Uyo. Umo yako na maniweli. Uyo. Nako na two beads. Uyo kwa na kwa kwa. Wachano, uyo akwa the extreme. Uyo. What's this, left ears. Ah, ah, ah. That's your twin, baby. Arudiko a kinyozi. Me atu nyueli. Na oge. Even daughter. Kido. Bronsia to woge. Tepeta padana. Unoge alji. Na oge. I do kinyozi. I do. Two ears. So KMCB boss Ezege utua on Tuesday proposed a restriction of wablambez entetema in public places because of sexual innuendos contained in the lyrics. Sexual what? Innuendos contained in the lyrics. Uno rita futas. Daripata. Sexual innuendos. So, Khalifa. Majulizalio in the 90s apo. Waulizalio innuendos. Waulizalio innuendos. Ah, ah, ah, bro. Aiii. Atu kushpadi shatio. Before, we were going back to double. Mkwamangafu mwizalio innuendos. On, on. Karizu mkwamazote ina wangabot. Kakit. Sensuohilin. Sensuohilin. Ya. Ida ni dem, kasi dem ni amani kuflos. Three things. Three things. Love, flossing. Ene yo. Na mungu ilisei dingine. Like, sista tatu nomi ya ku'i jenera. Ku'i sekula. Ida ni love, yeo kiltungine na yoi yoi. Eda mani love na yoi kiltungine. Ewi nge nge ni sere kali. So, in a tweet, Dr. Mutua said Na homo na nupima sa nesaw. In a tweet, Dr. Mutua said the two songs of Numbes by sailors and to Temo by Ray Vani and Damun Plashinam 8-9 mtkta na hpihakumin nula jumble'u. 9-9 maa ambili nula kramewe yun unfuolid nila Crimea nila, 9-9 maa p Duro kumili nula ria Fuuu, nila, 4-9 maa Apuquo yun nula kuwa completion Tevasa, 5-9 maa Tenzani, Tenzani, 10-9 maa tenzani, 9-9 maa Tenzani, 10-9 maa Tenzani, 10-9 maa Tenzani, 10-9 maa Tenzani, 10-9 maa So teteaba, nikama umenini is not obscene according to basata. I think basata is a standard body ukule tanzania. Kebs? Ya ni kebs. Kebs yamangoma ukule tanzania. Si matu kule teteama ina diriku mbaia wa mbaia. Giku umpea na uminyonim. Bro. Okay. This is subject to debate. Nona kila amtu apa kuna opinione hake. Kila amtu anatwongali ana hake, sdifrendi re. Sdim ni text. Ni text na rata rata. Do it is on text. Na tawel, atwet 5-4 on Facebook. Quite 5-4 chan on Twitter. Hashtag is social Friday. All right. On to our next. And the next is about Chippukizi defending Katello. And the Kenyan comedian Chippukizi who hosts the Chippukizi show, exited his show after the TV station has him to terminate his collaboration with Nick Chage alas Katello. Leondona Joaji na Katello. Atasura Chippukizi is not happy. Yatwili kwanza. Is not happy. So in a post on his Instagram, Chippukizili disclosed that the producer, the producers moved to have Katello dismissed. There was as a result of the show being allegedly too ghetto. He has however vowed to continue supporting talent. And his show on YouTube. That there is wording. All right. So eish. Got it. Long post alas. Hey guys, a quick word. So I've received an email from Hebrew TV asking me to terminate my agreement with, my agreement and collaboration with Katello on my show. They say they are a bit concerned that the show has become bits to ghetto. There's lots of bits there but because of many youths coming musicians and comedians on the show. They requested that we try to change the format a little bit. The rest you can find it on Chippukizili's Instagram. This is one of his most recent posts. So ghetto is not for TV. Do you guys agree? What does that even mean? Ataminda un ajarbu ku eleo. What is that? Aji, come again. I think the EOTV station is going to be in a target for certain people. Certain audience. Yes. So we are going to have two venues in Nairobi. We are going to have two restaurants in Naijua. So we are going to have cool kins. And we are going to have a dinner. All right. So we are going to have a dinner. Yes, we are going to have a dinner. We are going to have a white fight. One has to feel way. One has to feel way. All right. So the president is on Chippukizili. We wish to clarify the issues that have been in the public eye. Chippukizili has been part of the Hebrew family for over a year now, over a year and a half, even though this has not been an easy relationship. As part of the census campaign, we asked our in-house influencers to push the census campaign for us. On our social media seeing that Kattelo had built an audience, we contracted him to do so at Afii. At Afii, which he agreed to, and signed a contract to which he was paid. So the problem is Kattelo, so they are claiming Kattelo was paid to promote the census campaign, but how could deliver? Like a midwife. She said you are short-lived reflectors. Does that mean we deliver? Delivery? No, li kwa wa apiwewe. Baya reflect on baka ya kwa. We did not watch it. We asked after stress. So it was in Kachini. We said it was a kings. We can play. No, reflect. Reflect. So I don't know what exactly trans. Tired. Yes. Trans-pired. We'll see the truth shall always come out Amaz yi bhunga, or is waiting on his lawyer aki Maunozaki To represent him, but we'll see what comes out of this If geto even mean first And if geto is not for TV in this country What does that even mean? indikue. It was a bit expensive, mind-spending. Nesimaji sawo Buddha, masimaji waza si wongali wa wasap. Nangali angiivi, like, what is this? Aga jari bukonvastu. Nihipasambo nakaivi aki, hale kini sawo. Sinipasa tuki dogo, buys two planes. Weh!  Oneni? Ay, ashawri enu. Pandeni line umpate passport, eh? Alafu tembe. Eh, ashawri. Ashawri, mutu oneni zi shida poa poa. Majua, oki kuja, siya ti mipe kiyanguna benefiti. Tuna benefiti, see what ya. Ah, ya. Nizi einda utimi efea, kuwa mene. Skize ni tuge Kenyan boy chal. Meanwhile, other people are getting free planes. Oneni wama ewa chungulu, kaf. Eh. Kaa huzi kuja kaa. Skize ni. Skize? Kaa huzi kuja kaa. Okay. So the mistake was noticed months later when the company, yes, a few months later. Atasie a tiri umiye. Shinde ni tuwa po na kina VDJ Khalis. Yes. Nambia muka e kwa mamayako. So, masida ni tofauti. Ken na kule Saudi kuja kukwe tu, masida ni tofauti. Niki juzi ni tuwa niloramuse na V8. Nituwa jii epozzi manze. Epoza mika, ini V8 ya mika epoza po na huza. Uu nekimani. Like. Mama wagi. Uu nikimani. Kwanimise yo. I am speaking as a spokesperson. Just because you are. I understand. I don't mean you are not. Real recognized real, okay? Thanks. Ina V8, ano huza. Epoza. Okay. Nini apu ama apu. Nini si alikwana huza, si muza epo ama epo epo. Se sono na huja lue li bidu utwone shio kuna epoza. Mama dis li epo ya. Epo mamber kawka bro, kawka, kawka. Misha zi shi. Misha zi shi. Otwone shio atu sai. Okay, clarification. Niki ni agriski. Epo electronics, epo fruits. Fruits. Ya. Niki ame pakigari apu. Ame zi eka apu. Una na bili waso na pakini probox ni kaka beji. So ni probox ni mezo eka mezo saia. Niki ya. Tumia kukulik. Times are hard. Una mje ka minama shimo. Niki, simple. Ni aibu ban na. Niki ni aibu. Ni aibu. Una prefer kule wa stanasosa wa umbefeya. Uza uto haso. Udu you prefer na tanze kutembe ya ka. Uza uto ane apiga sensa. Aki umbepa, aki umbepa. Uza apige tu haso. Uza urobe hiya shia nini. Excuse me. Kwa jukona iPhone? Kuna pizanga pisae kwa bank? Kuna bangos? Kuna bangos? Pesama bank. Dari min mongeya bank. Kuna statement ya kwenongeya jino kuna aso. Kuna reisha. Reisha. Gari. Fiyue. Simu bangos. Okay. Sindo. Amani meko seya. Okay. But yes. So, didjint. Isdori isdori isdori isdori isdori isdori isdori isdori isdori isdori. Sindo Surinswi about pollutiaIt's a legend. through social media do yo. What is this? Ni ni ni apam na na miss yo ni. Umtoa mesama yora mentor. Read between the lines. Why? What in between? Bona na taftangashida. Ham na bitu zingina zakfanya. Eh? Ume sabiwa. Una sumwa na DM zam tu. Marangapi, wewe umesabiwa. Kwa nyumbangapi wewe. Wachara na ringto. I. Noon ni ni kuwa kwa.  Hei, thanks for the love. Kus foto? Awe you puto amon insta. You took amantuni. Ha ha. Okay. Your photos are good. I hadn't seen the message, I just saw it now. Thanks. You look good too. your number kana have your number hini, hini DM ma ma hini comment DM hini hini DM DM hini hini slide hini but make up yake conflict Godja, wu hini? mwenyali hini they accused they accused hini hini hini hini but that's his name hini hini hini hini hini hini hini hini hini hini hini make up hini hini but let's see less yume na labda ni kwa kerewa anekerewa mama ni kwa kerewa anekerewa kwa kerewa anekerewa ma chero na mi ni kiyonge am trans kuskeva wona nimi na kubaliwa konge wa hini hini hini but i like his dress waw swaga na wana funa na kiyasi by the way sasa bari zi na stu rege hama hama uda na fukar na mama yake hama student suz mimi saveri over twitter yas nasa wana impili wubo ya so wu jama nasa ma mimi saveri alim block alafu so aizi monitor operations asere kali za yuganda kama ko block from social media but hakin na mimi saveri piyona se ma wu jama alikwa nongi ambaya sana so ilibidi akule block so ya suz mimi saveri over twitter blocking and i think is the last yugandan who is going to study in heaven after i go upi after i yugandan who is going to study in heaven jwana sumwa anyway tell us what you think about the stories white five four channel on twitter white five four and the school channel on instagram white five four on facebook kaushai block iwa i think the gates are open you are allowed to sue now my name is bari moses so niki ku block nimi tani sue straight i will not only block report and block nani piga screenshot na mone ni tumen pashu so the cases take a little bit long to solve like a simple case i will take how many days over three years so it might take long but i am taking you to courts just try to block me try asha se mangwe mimi napenda challenge challenge accepted i will now block him from all my socials including whatsapp report nani bangapi ni block zote ni block zote zote anyway we have a lot lined up for you projo mo jimwat jillad we have the cute boys association leona natakua natakwomba ku join a poyo group boys association kalefa cute boy akina tuachemi adarat sasa point 0 cute boy association point 0 we have a lot lined up for you you don't want to miss what we have for you dj kalefa wu pangianini between moto moto so you don't just say moto moto easy i go by the request miki ni ambi ni tiziki mi mi ato mo ato mo kwa zatu ambi guest tijana nani nitule tua po nimi hands up nani dem ni babes amani miki nami ni mali ua na fall nani babes shalat so all the babes kula ingestikam kuna tabia zama dj wana umepia but in tatwambia asya babes zara tatwambia anyway think it's about that time nizongia sasa me shilu kini crop mese man taku report and block ah when umegu kini aga kwa pansan wadfaifu on facebook wadfaifu on channel on twitter hashtag is social fighting


What's going on everyone? Sam here with Leighton Sportsguards. We're in 10 box Tuesdays 10 box multi-year Bowman Baseball Mixer number 155 Random Team Style. There's a look again at your random results. As always you can find these on the website under the results tab as well as the link in chat. Before we get started I'm going to drop you guys a link to our 6 box F1 Mixer. That is breaking next. We've got five to go still on it. Five to go. Let's get that filled up and we'll continue rocking and rolling. They get their Dallas taking some spots in playbook later today. Let's start with Sapphire. 22 Bowman Draft Sapphire. 22 Bowman Draft Sapphire edition. There's two colored parallels in this. Let's see if we've got like a Pad Parashia or something in here. I'm not a mat pulled one the other day. Let's see if we can pull it red maybe. That'd be pretty cool. Mikey Romero, Jonathan Cannon, Drew Gilbert first. I learned the struggle of a five box Sapphire Mixer top loading yesterday. Cole Young first. It was rough. Might hop in the Obsidian. Obsidian Mixer is pretty solid Natty. Obsidian Prism Mixer is definitely a lot of fun. Brooks Lee first. Nice one there for the twins. Candler is still in here. He's bringing the red mojo in 21 Bowman Draft first edition. Crooks. Warming Burnabelle. Colding Freeze Malone. Noice Joyce. Connor Priebus. Should have our two parallels here hopefully. Yep, there's a yellow of Jacob Marcy. 26 of 99 for the Padres. Nice one there. San Diego and hopefully a little lower number. Yep, it's going to be a green to 50 of Thomas Harrington. 38 of 50 for the Pirates. There you go. Congrats Pirates. I would do 22 Bowman's Best now. Chill, chill Bowman's Best. 28-22 Bowman's Best. The best. See like a trout come out of here or something. See something silly. Ryan, there's a Henry Davis atomic. Yes, that is a 2019 Bowman Jumbo. Yeah, then 2020 Draft Super Jumbo, 19 Bowman Chrome, 2020 Bowman Jumbo, 18 Bowman Chrome, and 21 Bowman Jumbo as well. There's Otto, you're Donny, Velo Santos. Oh boy. For the Pirates. Green Mini Diamonds, Bryson Stott to 99 for the Fills, refracted Ryan Reckley. Oh yeah. Keep an eye out guys for some baseball over here and on Match Channel of 2019 Bowman's. We got, I don't know how many cases I think at least five we have right now. O'Neal Cruz rookie, which is pretty awesome. Yeah, this is actually it's on your credit card worm. This is a personal for you. There's a gold wonder Franco, gold lava, 13 of 75. Go into the raise. What a way to start man. Holy cow. That is sick. Let's go dude. Hell yeah man. So we would like to see you right there. J-Rot and Jordan Waller. Big time way to start here ladies and gents. Love to see it. Love to see it. Again guys, five box F1 mixer breaking after this. Five to goop. Breaks next. Five to goop. What a way to start man. What a way to start. Yeah, some of this stuff is a redemption. Bowman's bestie seems to be pretty much live in all of it, which is good all across the board. Jayne Bad at all. Lubaab, Mackenzie Gore. That's pretty sweet. Sweet wander. Speaking of, there he is again as a rookie this time. Masterpieces, there he is again as a rookie. Ray's doing well now. And Lindor. That is a sweet, sweet, sweet wander. There's Auto, Felix Valerio for the brew crew. We've got a Bowman Masterpieces. Lava, Juan Soto to 50. And Bobby Whit, Refractor. Yeah, J-Rot and Tanya pretty much are the only redemptions. And then Betsy of like Trout. There's Lindor. Mini diamonds to 2.99. Earth, Alex Thomas. Elements of Excellence. Jordanne, Tamar Johnson, Erty, Detomers. And Auto, Mason Power Hour. Mason Hour. Also going to be Ray's. We've got Christian Santana, UFO, and O'Neill Crews, Refractor. Alright, Bowman's best is done. So we want to do next. Do 22 Inception. Now we'll do 21 HTA Jumbo. 2021 Bowman Jumbo. Yeah, I was kind of surprised Wander was live, to be honest. Kind of wild. There's a lime green, Miggy to 3.99. Paper for the Tigers. And Zach Veeam Green, 61 of at 99. Green Mini Diamonds Veeam. There you go, Walt and the Rockies. Paper base. Not really any big paper we're looking for in this. There's an atomic. Use Neil Diaz. Paper. Again, all cards do ship on this, so you will get all of your paper, all of your base, all of your chrome stuff. There's a Rookie of the Year favorite, 6-0. Sanchez. Junior Severino to 4.99. Refractor Auto for the twins. Nice one there. Grats, Minnesota. 2, 4.99. Ozalisi. Jeremy De La Rosa. Paper. There's a lot. There's a lot of big chases in this. Like Wander and Jayrod are the big ones out of 19 Bowman. Otani out of 2018 Bowman Chrome. Obviously all the guys that we saw out of the last year in 2020.  Yeah, it's a good, it's a good, very good chase. Base Auto. Brian Boyle bus for the 8s. Get a raise for this one. Chrome base. And Lime Green, Hunter Bishop to 3.99. Excuse me, on the paper. That corner ding on the bishop. That one right there, that is, right? This one? Bottom right? Yeah. Yeah. We'll sign in a few box and wrapper with the Giant. Sorry about that, Giant. She just caught that out of the... Oh, it's like Austin Martin. It's probably the biggest chase. Like Blaze Jordan. Atomic, Austin Wells. Base. No like crazy, crazy big chase in this. Couple of solid prospects though. For sure. There's Daryl Collins. Base Auto for the Woods. Daryl Collins. And Magenta Shimmer, G-Rod. Grayson Rodriguez to 1.99. Yeah, Kevin Alcantra. Damn, should have been the Yankee legend. So weird, because this first is a Yankee. It's so odd, dude. I hate it. It's so sad. Sam Hoth, Rookie for Armstrong. Base. Raymond, Groshan's. Sixth, though. I have to imagine the J... Has the J-Rod super been pulled? I'd have to imagine, right? What's up, man? Well, I guess they're just letting anybody into this Twitch chat. And Base. Alright, I'll do it for 21, Bowman Jumbo HTA. Let me drop you guys a link really quick again. Two hour, six box, F1 mixer. I tweeted it out. Thank you, sir. We've got five to go. Breaks next, everyone. I know there's at least one of the... What's it called? It's been pulled to one of the Reds, obviously. At least one of the Reds. 22 Inception. 22 Bowman Inception. Whoa, whoa. That needs five more. The South Freight to 75. Nice one there. We've got Gold, Jonathan Mejia, 21 of 25 for the Cardinals on the Gold Signing's Auto. Very nice. And Sam Buckman, 14 of 99 for the Angels on the Blue Auto. Yes, that is done. Hi, Manny. I'm here. Alright, 2021 Bowman Draft, first edition. See, Candlers here. Let's see if he pulled a Red, because Candlers here. That would do. Got the Texans in what, Manny? Because we were hitting a lot of Texans. I forget what Breaks were. IMAQ, I think he was in last night. IMAQ had a good amount of Texans. There's a Blue, Matt McColski, 2150. Yeah, okay. Yeah, you did well, then, Manny. Nice. Let's go, Manny. Blue, Marcello Meyer, 150. Nice. There you go, Red Sox. On the first, first edition. Andre Johnson Auto, nice. Yeah. Alexander Vargas, that's sick. I think there was that Mechie, and then Might of it appears as well. I don't remember. There's a Yellow, John Rhodes, the 75 for the Oaves. There's Aqua. Again, we kind of just float through the base on this one, just so whatever card's on the back. Unless it's like this, it's in the base pack. Again, you will get all of your cards shipped, so do not worry about that if we miss a first or something. Vasilevis, Bassabe, Silzotto, Machii Black, Soxotto, and Andre Johnson. Wow, it's pretty solid. In one case, IMAQ, that's very good. There's a Yellow, Maximo, Acosta. It's a solid squad, though, for sure, Manny. There's a Gold, JC Correa, 50 of 50 for the Stroves. JC Correa, Bass, Delomador on the back there. There's a Blue, Ethan Wilson, 150 as well for the Phillies. I miss a Kevin Cops, Bassabe, please go back and mag it up. Choo-choo-choo-choo-choo-choo-choo-choo-choo-choo-choo-choo. I'll enter off the break. Got you. Chad Dallas first. How could I be so careless? This guy. Ruben Ibarra, first aqua. Again, guys, we've got Sixbox F1 mixer breaking up after this. Russell Smith first. Breaking after this. Another elite court, another elite court. Five to go on that one, everybody. Five to go. I did, actually, Manny. It's pretty insane. Gotta get that filled up, guys. That breaks next. Five or Sixbox F1 mixer, Willman DS. Then we've got two Fivebox Sapphire F1s, and then we're into basketball and football for the rest of the night, everybody. Let's get those breaks filled up. Nick Gonzalez has been in trout and otani redemption. We'll keep going then, Manny. Austin Love. You need to buy the Angels in every single break and get the Angels in every single random team. You gotta guarantee yourself trout or otani redemption. Gordo Garcia. And last pack, a 21 first edition. We'll go into Super Jumbo after this as well. And CJ Abrams. Pretty upset we won the stadium. Club breaks. Oh, no, what happened? Mark P picking up a spot later as well. Red Alonzo. Uh, 2020. Bowman draft Super Jumbo. Good luck. Bull nun shucks. And this is gonna be a blast from the past right here. Some of these prospects, I bet. This'll be fun. Person talker, man. First refractor, Ed Howard. Wow. Ian Bedell. Bobby Miller. Ed Howard again. Two Ed Howard's. And Chamberlain. Gordon Westberg. Cole Henry. Trent Holmer. There's Zach McCambly. And McCambly. Purple, Nick Bitsko. 2250 for the Rays. The Sky Blue Paper. Trevor Larnack. So 499. Got Elliott Ramos. First, Casey Schmidt. George Kirby. Ladolo. Patrick Bailey first. Emerson Hancock. Wow. Jordan Walker. There we go. Nice one there for the cards. Person talker, Austin Wells. And it's just fun to look at these. Max Meyer. I guess it's not kind of, I mean, I guess we've ripped enough Bowman draft sapphire from this year. But yeah, Walker would be sweet to come out of this. Oh, Purple Paper. Tink Hense. 2250. Jeremiah Jackson. David Calabrese. Ace. Mauricio. Zach Veen first. Tink Tink. There's Kyle Nicholas. David Redwards. Ozalacey. Nice one there. He was pretty hyped up. Kyle Nicholas as well. Got to repeat on the refractor first. Just kind of odd. It's going to be an Adley Ruchman. Mini diamonds. Nice one there. And Takola Roby to 499 for the Rangers. Okay, guys. Just five to go on Six Box F1 Mixer. Breaking next. Five to go. Breaks next, everybody. Grab your spots up for that. Two boxes of hobby. Three boxes of hobby. Three of light. If you found my note in one-on-one Sam motto, let's go, Walt. Is that the most expensive card you've ever pulled here? That would be Donnie looking at Cheeto fingers over there. She had to wash down his Cheetos in this four-local. That's what I'm doing. Exactly. Robert Hassell first. Nice one there. Got he's in this, too. That's a big name. Gerard and Cardenas, you know. Robert Hassell again. Very nice. Let's see how Hassell here. Come on, baby. That is Jeff Criswell first base auto for the A's. I've been, like, not paying as close to my mouth. Oh my god. I'm tired. I've been not paying close, paying attention, close, paying attention. Yeah, I wasn't paying a lot of attention to chat with all of you the cards in top of it. Yeah, you were carrying in top of it for a bit there. Yeah, that was a good one. I'm just tired. Burleson, to Barnett Burleson again. Base four-local kicking in is right. Purple, Kaden Mladzinski to 250. And base auto, Clayton Beter for the Doiers. Yeah, started to slur my words. Probably will, Blake. I wouldn't be shocked. Rattle Per Domo to 499. Will, Blakeson. Tatum 35 plus lock. I'll be score 34. Hey, William. Top loading Thursday and Saturday. Then Wednesday I'll be here, but I won't be top loading. loading and shipping? Yeah. Get caught up on the shipping. Oh, yeah. Ooh, green. Not back there. Ian Seymour. Clayton Beter, Ian Seymour. Come on, baby. Give us a big green. Big green. Big green. Big green. Jordan Walker green. Robert Hassell green. That is Hunter Barnhart. Nice one there for the race. 57 of 99 to 150. J.J. Bleday. Base. David Vich. We are now moving into 2020 Bowman Jumbo. Then guys, let's fill up our six box F1 mixer, everybody. Six box F1 mixers. What we've got to fill up next. Five to go. Let's get that filled up, everybody. Gonna be a fun time. We're looking for the F1 mixer. I did actually mess the schedule up for a minute. So Boris fixed it. Thank you, Boris. So if you are looking for the F1 mixer just on the schedule, it will be there now. 2020 Bowman Jumbo. I still do 19 next. 19 Bowman Jumbo. Pull out of there. Hopefully 19 is relatively similar. There's a purple auto of Damon Jones to 250 for the Phillies. Purple, Damon Jones. Rookie of Governments. Well first, but not of the guys we're looking for necessarily. Let's fill up the F1 mixer, everybody. There's Dominguez. Six box. Five spots to go. Alec Mino at a 250. Gonna be a good one. Both the first chrome. Poisson. Base.  Did you? Yeah, it buzzed it. Oh, wow. Yeah. Yeah, I had my girlfriend buzz it. Because it was getting way too much, dude. There's Omar Estabets. Base first auto for the Dodgers. Volpe first paper. There should be another way around. Considering you wear a hat 99% of the time. It doesn't really matter, yeah. And base. I think you sleep with the hat on.  God, Matt. He's so uncomfortable. I know, I really would. Yeah, right. Bobby Witt. Let's go. Wedding photos came in for Manny. Let's go. That was post style scare, too. And guys, six box F1 mixer breaking next. Base, base. Let me do one thing really quick. Again, guys, six box F1 mixer breaking next. Five to go. Five to go. Let's get that filled up.  Then we'll be in the basketball and football to end the night. That blue paper is Michael Baez. First to 499. It's all good. All good, Ed. Dominguez first. Chrome. Still one more auto lurking in here somewhere. I think that will be it right there. Refractor. Charar and Carnation. 499. Nice one there for the Marlins. That's Miami. Charar and Carnation. Hell, there's a Witt first paper. Peña first Chrome. Worm, all you got to know is you want Red Bull or Mercedes? 250 or Ferrari. Or Ferrari, but I don't know. Red Bull and Mercedes are the ones I know are like first stop and then Lewis. And pretty much all base in that pack. No big first or anything. No auto, no color. So we got in this last one. Looks like a blue shimmer. Blue shimmer. That is going to be O'Neill Cruz. Nice. The 150 for the Pirates. It's an early-ish O'Neill Cruz right there. All right, so 2020 Bowman HDA Jumbo, dude. That is wild. 2019 Bowman HDA Jumbo, I should say. 2019 Bowman. Big names. Is this for Little County? No. Is that 80? Maybe. No, that was 80. It's hard to remember all the years of everything. Sometimes it's like, they know who's the one of them. I don't know which one. I can never remember. I have to go. One second, guys. Check one thing really quick. All right, let's do some 2019 Bowman. 2019 Bowman. You're saying the wrong name there. 2019 Bowman HDA Jumbo. Chugol Geradotto. I'll freak out, dude. I will freak out. Ryan Hayes. Victor Victor Mesa. There's a ready for the show, Tautis. Speckle is Brewer Hicklin. 299 for the Royals. Mauricio first. I forgot he was in there, too. He's another kind of low-key name. Kind of a low-key name for sure. The show for the show. First, Marco Luciano, nice one there, too. Johnny Jr. Alex Shreve. Kessin Hira ready for the show. Nate Pearson. Josh Chisholm. And first of Roberto Larramos. Oh, yeah. Central huge box right here for sure. For the Oz. James Cannon. Morjean Tucker. Danny Jansen. There's a judge. 80-something throwback. Nice one there. Anniversary, I should say. There's a J-Rod first paper for the Mariners. Logan Webb. And Ryan O'Hearn. Kobe Allard. Dwell Lugo. Dick Bowers all in the rookie. Names there. 100 Logan Allen. Mitch Keller. There's Cal Quantrill to 125. Teal Shimmer for the Padres. Is that something to do with this? I have looks on the phone. Brandon Lauer. Stewart. Honeywell. There's a Purple Daniel Johnson to 250. I don't think that was a judge auto. It's like a reprint. Okay. Judge auto would be sweet though. I was just thinking, I don't think I have to make anything. Sanchez, Nixon Zell. Keegan Thompson first base auto for the Cups. Nice one there. Keegan Thompson. Corey Ray. Hernandez first. Chris Navier first. That's pretty solid. Strauss. Navier first paper. Dwell. Down to four to go guys. Four to go on our six box F1 mixer. Four to go. Breaks next.  Breaks next. Let's get that filled on up. That guy too. That guy was hyped up. We got some looks. Remember when this was like brand new? Back in my day. Jessica Sheffields. Moans. Easley. That's the anniversary corner. Tucker. Jose De La Cruz. Anthony Siegler. God man. Launch of prospects in this. F1 mixer. Is he actually? That's pretty awesome then. Good for him. Dress him down. Victor Mesa to 150. That's one there. What's up Shane? I know Julio is almost unknown. I remember that. Julio was not the biggest guy even by a mile. You were chasing. The initial hype around Wander was insane. It was insane. Nice. That's good. Good for Blaze. I'm sure I have a first thought of him floating around somewhere to crush Davis. Riley Brock Brock Deathridge. That is 284 out of 499 for the Tigers. Looks his name looks like Brock Deathrage. Deathridge. Nice one there for the Tigers. Mize. Victor. Is that Victor? Victor Mesa. I'll be Mark's first paper. Blaze Alexander. Two to go. Gorman. Purple Anthony Kay. 250. Joey Bart. Nice little short print right there as well. Downs Evan White. Royce. I remember that initial hype with the Mesa's. Victor Mesa and Victor Mesa Jr. Mero and they first got signed. Both by the Marlins. Both with the freaking same name. Kessith Hira. It's not a first right now. Alright. There's a trout. Martinez and base. I'll do 18 Bowman Chrome next. Down to three to go guys in our F1 mixer. Thank you Brett taking a spot. Appreciate you buddy. Three to go everybody. Three to go. That is it. That is all. Three to go. Let's do it. Let's get that filled up. We'll keep on moving everybody. 2018 Bowman Chrome coming up next. 2018 Bowman Chrome hobby. Then we'll finish with 19. Just because I haven't ripped 19 yet. So I've ripped 18 a handful of times. So we kind of know what to expect at this point. See if we can pull some sort of show head. It would be nuts. Yeah right. That's what I'm saying Alex. And that's like 2019 too. You know. Scherzer, Josh Harrison. That's 2019. That's like insanity that a card sold for that much. Like a prospect card sold for that much. That wasn't like the number one, number one guy. Shimmer Sheldon Noisy to 655. JP Crawford. Dugo Rookie. Evan Steel. Tyler Molley. Purple Ultana Hauke to 250 for the Red Sox. That is Lorenzo Cain and Andrew Benitendi. Yeah. I think so Tim. I think so. Chase Pinder. Gregory Soto first. Nice one there. Great reliever in the MLB now. Hicks and Soroka. Cespedes. And then Walker Bueller Rookie. Thomas and Nito. 2018. Shohei Otani. We got a gold. Troy Tulawitsky. 250. Nice one there. Blue Jays. Too low. Atomic Labor to 150. And Justin Upton. Come on. Big Auto. Big Auto. Big Purple Otani. Oh Purple. We got the first half right. That is Kyle Young. 22050. Nice one there for the Phillies. Blackman and Yuan Monacada. All right. 2019 Bowman Chrome to finish us off. 2019 Bowman Chrome. Good luck everybody. That is a pretty cool tool though actually. I'm in on that for sure. I'm in on Troy Tulawitsky cards in 2023. For sure. Thank you Marlin taking a spot. I think we're down to two to go everybody. Two to go. Six box F1 mixer. Breaking next. Two to go. Thank you. Thank you. Thank you. Thank you. Appreciate that. Just two spots left in that. Let's get that filled on. Tea swag. Thanks Travis. Appreciate you man. Blue Bob. There's tea swag. 250 for the pirates. Blue Bob. Looks that tracker. Andrew Kinzer. John Duplancer. Purple Shimmer. Nick Magigal. That's not missing it. Not numbered. They do that sometimes though. That is O'Relvis Martinez. First base auto for the Blue Jays. Nice one there. Toronto Rice Harper and Chris Bryant. Stat Tracker, Juan Pablo Martinez. Edwin Incarnazion. Ray's Red. Nice.  What? Sweetie? Do you like this one? No. Would you rather be a chalkboard? No. Definitely not. I take that all day long. Okay then. Yeah. Don't know. I didn't know I lived in a world that's my only two options. The 499 has to be Swanson for the Braves. UC Kukuchi. Nice one there. Christian Pache. Austin Riley Rookie. Nice one there. Carter Keyboom. Gold. Logan Gilbert. Nice. That is 8 of 50 for the Mariners. Nice early Logan Gilbert. Rinsen, Josh Bell. That's why Jake cut his hair. I thought he did it anyway. True Blue. Owen Miller. That is 81 out of 150 for the Padres. Congrats to San Diego. Kyle Tauker Rookie. Alex Bregman. And last pack. Good luck everybody. See what we got. There's Jonathan India. Josh James. Ryan O'Hern. That is awesome as the chair sounds. Do a quick recap guys. We had Owen Miller. Arovis Martinez. Kyle Young. Rock Deathridge. Keegan Thompson. Brewer Hicklin. Just a judge. Random one. Gerard Cronacion. Estevez. Damon Jones. Hunter Barnhart. Clayton Beter. Jeff Criswell. Tako Arobi. Nick Bitzko. Sam Bachman. Jonathan Imejia. Daryl Collins. Brian Boilbos. Junior Severino. Mason Auer. Felix Valerio. Yordani De Los Santos. And Wander. Gold Lava 275. That will do it for the break. Thank you guys again for the fill. Let's get up. F1 mixed.