Hello, welcome. My name is Ron Soto and I'm here today to speak to you about detection challenges and cloud-connected credential abuse attacks. So let's get started. My name is Ron Soto. I've been in the industry for around 10 or 15 years. I used to work at Prolexic currently working as principal security research engineer Splunk and like I said before I used to work at Prolexic then I worked at Gaspita, a little bit of time in Akamai. I co-founded Hack Miami and Pacific Hackers. I also created my own CDFs and some of them you may have heard of them. One of them was command and control and the other one is no quarter CDF. So let's talk a little bit about this how the cloud permeates or permeates inside the perimeter. I think it's pretty clear at this point in many environments even in small businesses where I myself I used to be a system engineer have my own little IT company and I used to actually install Microsoft SMB server. I remember setting up exchanges which sounds crazy but yeah I used to set up exchange servers in offices of 12 to 15 to 20 people or even crazier things such as a blackberry enterprise server as small businesses. So because that's basically that was the way things were supposed to go and we didn't have the evolution of the cloud. Nowadays you really don't need a domain controller for example in small businesses and many large enterprises you still do although we see things such as off that taking over a lot of the the market but basically as you can see here even Microsoft has made a huge move into the cloud so we have Office 365 exchange online you no longer need to have a Microsoft SMB server or an exchange server or if you don't want Microsoft you can have pretty much most of it by using Google Apps and then you can have email presentation messenger, telephony, video, conference you name it so these are some of the examples of how the cloud now gets into inside the perimeter many of those all servers many of those infrastructure which some of them referred now as mutable infrastructure have gone away. The infrastructure at the cloud level is referred as immutable where usually the providers basically apply the setup and updates and patches to it. You can also see in this slide that I actually placed a graph where other examples of things that we use almost on a daily basis such as comb repositories for example like GitHub or GitLab or we have things that we use for deployment of technology or development of software such as CircleCI or any other technology that is applied to the same end goal. So here's an example of basically how the cloud and the perimeter can basically merge together we're going to talk about the what we call a converge perimeter and in this case we're looking at two couple of examples in this example we're looking at Amazon Transit Gateway or a shirt being it as you can see here we basically are seeing environments where this type of service basically allows the cloud real estate to be part of your perimeter and for all intents and purposes for your users this is invisible. They may be placing code, saving code, moving files, doing all kinds of operations, logging into a server via SSH, copying files across the WAN, pushing updates and basically they won't be able to realize that some of those instances that they are interacting with are actually not part of your formal perimeter they are indeed lease property or lease or rent the property if you want to call it, from the cloud providers. So in this case two clear examples of how this can happen this can also happen in an informal way which I will cover later on in this presentation. For example I call this the hotpotato why because there's always seems to be a not a clear idea it's very clear for the providers but for the customers it's almost like a hotpotato is it mine is it not they're not pass it around the truth is that many of these providers do have a line they they draw into why your responsibility is as a customer that have plenty of cloud real estate and what they provide to you and depending on the service model we know some of the service models or the most popular service models from the cloud providers are things such as software as a service platform as a service and infrastructure as a service in contrast with on premise which is basically when you own by everything you have it in a way where you can do whatever you want but once you start mixing up these things you have to be alert and be conscious that some of this stuff you might just not leave it to the provider there seems to be this false notion that because for example we're talking about like I said before a mutable infrastructure where many times the cloud providers do actually a great job updating hardening the resources that still does not guarantee the fact that this infrastructure can be vulnerable can be attacked I'll give you an example many years ago there was something called hardly and I was working on a company that basically we're looking at 30% of the internet at times and what happens is then the amount of servers even with embargo I repeat even with embargo because we were within an organization where there were embargoes for disclosure such vulnerabilities and this in particular was on their embargo even with the time on embargo the amount of service we had to patch it was almost impossible to finish it in time and the reason why I'm saying this is because these things happen and will continue to happen so when you have a number of different technologies you may have containers that run out buying for example you may have servers around a window you may have Windows servers out there as well which you can set up an Amazon or an Asia definitely it adds to to the mix it adds to the the attack surface considerations and in scenarios like this even as these things are mutable even as the co-provider to their best to protect them and harden them you're still responsible for it that your data is yours applications that are running in there that may be attacked as well because there's there they became vulnerable because of the disclosure or even in zero day these are your responsibilities and these are some of the considerations that we're going to see today as I walk you through some of the attacks and that I was able to research during this year and how to address them so coming back to this right we are talking about a converge perimeter converge perimeter is basically the cloud real estate that you're using leasing or whatever form or commercial use that you're doing what you're giving it plus your perimeter perimeter technically ends either in the border or your win or your internet gateway or routers and then once you have things such as the examples just gave you that you have a converge perimeter you basically if we if we're looking back at this figure where if you have real estate from a provider lost your perimeter and your users are formally or even informally accessing cloud resources then what this means is basically that this is part of your perimeter is a converge perimeter even though you are leasing or renting cloud real estate so the reason why I name it like this is because we are gonna look at certain type of attacks which is basically in our views of reuse credentials which is how Microsoft has looked at it and the reason what this happens and hence the title of this line is because basically when you have as I am bringing you up in my past lines this pair of technologies right all kinds of operating system versions all kinds of applications you need passage through this entities for many reasons functionality continues delivery continues integration deployment of technology you need mechanisms or in this case tokens or credentials or secrets that allow you to establish authentication authorization it's a sort of a trust and in this infrastructures that are now more complicated because you have a converge perimeter and you have to interact with all kinds of disparate technologies so yeah it is a feature this secrets this tokens or certificates for example you may have federation services which we're gonna look at later on you can use also certificates for for authentication are things that are used to facilitate the operation in passage many times of data many times of code many times of deployment of technology so here's where we are focusing at this point because obviously these are the key elements that we're going to be looking at because by obtaining this type of secrets token certificates attackers can do a lot so coming back from what I just said when you are in a federated environment and you use this type of technologies obviously as you can see it here is a graph where basically we're looking at disparate technologies but this disparate technologies can indeed communicate by using let's say you can use a federation for example what you use either off tokens or you can use SAML which is a a mechanism of basically authenticating between entities and what this shows here is that this is the realities of what we're facing today when we're looking at the interaction of cloud technologies and all kinds of operating systems mobile systems remote offices you name it you need something that will allow the interaction operation and passage and most of all you need the users at the end of the day the operators to use efficiently technology if we were to put or force for example what the factor of indication for example between many of these internal systems and external systems every time this basically will become suboptimal and and basically all the benefits that we use we take from things such as continuous delivery continuous integration or even deployment of technology that that basically knows it that basically was lower to a point where you have to consider is this even worth it so let's look at some key points on federated environments since we're going to be talking about abuse of cloud connected federated environments things that we need to look at are for example formal connections of perimeter and cloud real estate resources what I call the converge perimeter they help this this this the reason to bring it up in a way why is it that we're looking at federated environments and why are they important well they they they allow the increase of cloud utilization so as we said before move on move on on premise resources to the cloud they increase this utilization also provides the ability to increase the resource availability or even geographical reach we're talking about where they go and circumvally elastic technologies you can expand or shrink as you need it you have to have a local data center or you can have the minimum you can have inside the perimeter but take advantage of this and this obviously it's not the same thing to use or to create environments that you may need at the moment and then pay for usage that that is a wonderful thing that has helped a lot of companies and like I said before we're looking at standards that allows the passage of data identification authentication that's why we're looking at things such as tokens certificates even passwords and API keys of course formal federations are usually the ones where there is a to put it in a certain way a formal technology in place that identifies and authenticates entities between each other and that implements obviously and a stricter control of access of this resources and facilitates the use of it like simple sign-off for example at the at the GUI level and at the user level but you can also have what I'm calling formal federations the formal federations are places where because of the usage of so many cloud technologies in the state of at rest credentials secrets certificates API keys that are inside your perimeter for example by developers even though you don't have a formal federation an attacker if such attacker access those resources they can people into the cloud and even in some cases depending of how your setup is they can even people from the cloud to your perimeter and that's what we're trying to focus here today that we had to understand the risks of the expansion the the the subject of the converge perimeter so the converge perimeter risks scenarios some of them obviously we have credential leakage in public repositories we have for example use of vulnerable components from cloud and for example open source libraries or containers usually downloaded embedded they go through either for deployment because they're hosting a database or they're hosting an application that's needed or in some cases in development where they had the perfect environment to host a specific application or a specific API that's needed they don't get scan they get downloaded from public places and here there's that is a big risk you can also take a look at this brochure of cloud apps and infrastructure that may lead to internal access and I will give you an example of a campaign several campaigns actually rather that we have observed where where specifically this scenario interesting enough provided from cloud to internal access the reuse of federated credentials attacks such as a golden sammel discovered by cyber arc or things such as off talking hijacks or past the cookie for example we'll see some examples of it with actual examples and then we can see in the case of federations people think from cloud providers from one cloud provider to the other I actually seen that I researched it and then from there try to move into the converge perimeter the internal resources so here's some of the examples of cloud connected credential abuse here's a an attack which is not that difficult what you see on the top left is Mimi cats that was run against a windows host and then on the right you see for purposes of approval concept you see how I was not logged in I downloaded or rather discover reveal me cats against a windows host I was able to get the specific cookie then by the the same bra browser functionality inserted a cookie and there I was I was able to basically log in back this is not new but it still works I did it recently and this is something that can be done by somebody that has the possibility of access to in this case an employee so this is the first example here's the second example which was part of the research I did with Jenkel one for the net scope and here Jenkel actually did an amazing job by identifying things such as the off talking hijack from GCP basically as you can see in this slide you can extract the token and then once you strike the token this can be done basically by either access to an endpoint or the physical possession of a device that has obviously the SDK or the CLI for GCP and then all what you have to do is refresh the token and just so you know MFA does not protect against this because if the token has been authenticated already you can keep refreshing it for example there's another case scenario of off tokens hijack here's a one that had a lot of I guess chatter doing part because it's used in in the apparent use in the campaign during saw winds according to CISA and here's the I took this graph from this Cycnia advisory cyber art did also an amazing job and one of their researchers actually created a tool that basically strikes the sample assertion creates a force sample assertion and then passes it so once you do that as you can see in this graph this is a federated environment and in this federated environment we have basically likely a domain controller and in this domain controller we have active directory federation services you set up a federation and then from there you communicate and make it easy for users to basically use either office 365 or exchange online and what happens is if you are able to basically forge and it's not easy to say that it's not easy to forge it the providers I got him very smart they have become especially very restricted on the attributes because that's where you can change things such as the duration or the user so when you look at the sample assertions there are things such as attributes and then this attributes that you should be checked based on the identity provider basically to prove in a certain way before that they you are allowed access and the reason why this attack was so successful is because if you this can still happen by the way if you are taking sample assertions not likely with this providers this providers actually make it very difficult for you to do a sort of a golden sample attack but if I know that there are other open source and other even internal cloud setups and you are not strict on the checking of sample assertion interviews this attack will work and it's very dangerous because it basically allows access to every single resource that is dependent on the interaction with such assertion so here's another tool that obviously had to do although it's a tool that is ran against a likely active directory environment however can provide a lot and make work in for their environments let's come back to the industry Microsoft is still the leader Microsoft is for the most part the enterprise operating system active directory and there are tools such as a DFS dump which are not only you have to compile it every time to run it which makes it incredibly difficult to detect but they are great at obtaining keys that will help you forge certificates or even use this keys to forge sessions or make requests for further identification and recon of the active directory environment where you are so these are things that you had to consider because very hard to detect and we do have a little bit of a way of sort of looking at this from a certain perspective however this is not a civil bullet against tools like this so here's a like I told you before some of the actual campaigns that we have seen whereas you go basically full circle and how you go full circle wall okay so let's say you have exchange online or you have yeah exchange you let's start with exchange this list let's say you have an exchange online you can many times we've seen environments where there is no multifactor authenticator authentication so credentials actually remember we talk about federated active directory right passage authentication identification through all many environments so we have for example a exchange online right we have tools that can we don't even need tools we can actually if this is for example was a misconfigure exchange server you can actually use PowerShell to elicit a response that will give you a sort of a directory information usernames in some cases even depends upon how it was configured way way a bunch of information that may allow you to target users or you can just simply cardboard for brute force it and let's say you're able to brute force it and because this is obviously a federated active directory environment most likely the user repeats that's the same password for all their services so all what you need to do next is to find the VPN of this company or RDP servers that might be exposed to the internet so you are technically able to log in because you have obtained the password right so you have obtained the credentials you were able to log in an exchange online you were able there are other tools that you can use or even do it by a PowerShell and obtain for that information depending on what level of privileges you were able to obtain this user credentials and this user in particular and then from there you can attack log in and attack extract for the credentials use things such as emicats for example that we looked at it in the past the cookie example or adfs num which we also looked at and then forge credentials and then here's the full circle you go back to the cloud now you're in GCP you're in AWS you're in an Azure and this is what I wanted to bring up to your attention today this is happening right now unfortunately many times the expansion of the cloud and the connection of such cloud that has brought a lot of benefits you know nothing better that you know about the old times I went to my OW UA I remember I used to put all the UA's we know we know multi-factor authentication or even VPN it was it was seen as how cool we can access it and check our email we don't have to go into the office right that was that was actually the the original purpose of these things well there the times have changed and these things can no longer be exposed to the internet without some sort of protections or we seen actually cases where hardcore keys API keys passwords in a code had led to breaking through either VPN this happened this just happened by the way this happens at colonial pipeline they broke in via VPN that they didn't have multi-factor authentication or you can even exploit the VPN like it has happened sometimes and there are and I can tell you this because I see it and I've seen it there are tons of RDP servers that don't have multi-factor authentication and many of them are federated and with that then obviously you just had to execute your tools the best to your ability and then if you wanted to be in the perimeter either because you access via VPN or by RDP then you can expand further into whatever real estate cloud properties this vulnerable environments have which could be in any of the main providers that we all know and were aware of so as you can see it's almost like a circle you can go full circle and now let's say I was able to get in into or even break let's look at the other side let's say I was able to break into a certain a logging server that is part of a connected formally connected environment by one of those services that we just talked about you will be able to basically access servers or or or even endpoints that will be reachable because of this extended network and converge perimeter so this is basically something that complicates the current situation that we have and sometimes it gets even more complicated with where we're licensed not clear of ownership between the providers and the clients and now we're seeing an increase in this type of attacks that obviously require the use of federated cloud connected environments which I would say are the perfect environment to do this type of attacks all right so with that in mind how do we approach this attacks is there anything we can do yes we can do we can do a lot we can approach this attacks and this is something that has hopefully has started to happen in many enterprises but because bringing back what I said initially but because there's this false notion that somehow your provider is gonna protect you or you don't have to worry about it it was not very clear and he didn't help to be honest and this was one of the things that I realized as I was doing my research the cloud providers they want you to stay with them as far as analytics in as far as even obtaining locks from them is incredibly difficult it was it has become easier lately but before it was like talking different languages schemas and that poses a challenge for system admins for AWS administrators Asian administrators there is it companies are trying to avoid marrying to a single vendor so when every single vendor does not want to play with the other all what this does unfortunately I have to tell you because I've seen it myself is in pairs and security other customers because when you have an environment that has multiple vendors the best ways for all of them to collaborate the best way for all of them is to provide the easiest way to disability into their environments and that's what I'm trying to approach here the approach that we did here is we already know we can observe and analyze the endpoint right so give you some of the things that I've seen and related or associated in this attacks things such as the destruction and certificates or keys tools like the certutile.exe on common processes running in servers all of us all in that may give away for example the user a BFS dump things such as registration or or registries rather used for privileged escalation or the use of mini cats which for the most part a lot of the vendors can detect pretty good and then we can take a look at the cloud providers and in this when we look at cloud providers obviously we had to we had to focus on the specific of every technology right there are no universal technologies for federations some of the standards like the disarm all the off are being used by by these providers however the products themselves using in different manners that is why I'm putting some examples there of some of the things that we look at and I'm about to show you things that are even more specific that we believe will help you detect this attacks because it's challenging I can tell you if we take away one side of this slide you will not be able to detect this you will not like the past the past the cookie for example or the off I look at both longings from the long on perspective it looks like anybody and sometimes you can use for example security groups even using security security groups depending on the policies that you have you may not be able to see it and even worse if you don't have visibility at the end point level so as we have expanded into a converge perimeter we need to expand our visibility and that includes the cloud real estate so we have things that we need to look at and we need to get alerts from it if you don't if you're not getting alerts like for example if you have an ultra 65 that has excessive lowland errors then you're missing out you you you may be under attack right now and you don't know but consider this if you haven't all 365 from a federated server where where passwords are repeated then the the scenario that I just gave you it is likely to occur it's even worse as we go higher privileges do you have the soup admins you have admins per one or admins per land segments I seen that layers of administrators these are things that you had to consider that if they get compromised they may indeed provide access to all these resources here's a breakdown of the actual detection searches that we in my I developed this with my with my teammates at the Splunk threat research team and this is far what we do so here's someone of the TTPs that we're looking at endpoint for example they use a third util.exe which basically allows you to see the execution of it which is usually very rare this is not something that happens commonly on common processes an endpoint which may give you the presence of the execution of tools such as ADFS dump for example registry keys used for privileged escalation and persistence this is a T1546 012 then we have things such as Mimikatz which is weakened attack pretty good this is credential access which is T1003.001 this is obviously my third TTPs and we even have no one that is actually mimikatz via PowerShell in event code 40703 remember for you to have this you need a system on policy and you need a GPO that would allow you to get the event IDs that you need most of these event IDs are not audited by the phone so you need visibility but the visibility requires several steps just like the cloud you have to select a sometimes you need to sort of sync your log somewhere and then they need to get picked up by some servers that then senses somewhere else and this this can be actually cumbersome you had to do your homework at the endpoint as well you have to have a strict system on policy with all these consequences you know there will be a lot of logs they may have to be rotated there's a log lifecycle that you that I had to consider and of course with EVTX type of auditing you have to know the right GPOs and apply them and after that obviously you need a place to retrieve this doesn't have to be it can be okay or any other sim where you can build your own sim right but the bottom line is the events will be the same the logs will be the same so let's move on now let's take a look at the actual cloud TTPs so for example we have things such as AWS semiaxis by provider user in principle we had this one is a giveaway AWS semia of the update entity provider this usually when some of the attributes are modified this is something that is not very common and that you should have an alert for any means obviously to be locked property you have things such as excessive single sign-on logon errors service principle and other 65 that's also an indent in itself that needs to be monitored or the addition of a service principle there's also an event that needs to be considered an event to be monitored by itself and of course all 365 new federated domain remember what I told you about people team from cloud to cloud I was able to do that by by basically adding a new for the rated domain so these are the type of detections that will give you a way to address the abuse of federated credential abuse so here's a an example of a the search I created at using SPL code in Splunk and basically what this does is give you obviously at the latest stuff so or rather sanitize it to give away some of the the sensitive stuff in it but basically what you get here is when somebody went and said hey let me change the the sample provider and that was me by the way trying to replicate some of the attacks and this is a way to not only investigate but in combination with all of the other searches at the end point and at the cloud level then we can get a very good disability not saying we will detect 100% of everything but we get a good shot of detecting this type of attacks the abuse of federated credentials in cloud connected environments here's another example you can find this if you're interested if you're interested in looking more the code we have a github where you can actually see the actual code this can be translated into other technologies other languages but again I just showing how this translate into that technology and just like I show you the attacks I wanted to show you the detections and the investigations and with that in mind I'd like to thank you for coming today and watching this talk and we're gonna open for Q&A remember you can find me at RodSoto.net my Twitter is RodSoto and if you have any questions please let me know you can email me as well at rodatrodsoto.net and I hope you enjoy this presentation thank you


Part two is it's all about the patients. It's all about the patients the patients Bob Blaskowitz Appears on the live web show virtual skeptics. Be sure to check that out. That's every week Yes, virtual skeptics. Awesome. He also writes of course for Swift blog Here is his haiku So just like I said, here's part two of this lecture. There is no part three There we go. Please welcome Bob Blaskowitz How are you doing? In November 2011 Stanislaw Brzezinski Came to the attention of skeptics when a representative of his clinic Guy by the name of Mark Stevens sent pseudo legal threats to bloggers around the world who are critical of the clinic Including Reese Morgan who doesn't tolerate that type of stuff Stevens had been hired according to the clinic to provide web optimization services He was fired when this particular Optimization tactic blew black blew back in the clinic's face though Brzezinski never retracted the promise of legal threats When I read about Brzezinski at the time, I realized that I'd come across him before Over a decade ago a friend of mine whose son was dying of a brain tumor Had asked me about a doctor out west who treated people with a substance isolated from urine I looked at it for her and had to tell her that he was probably a quack Since then I had forgotten the doctor's name, but I never forgave the person who made me break my friend's heart When Reese and the other bloggers were threatened I looked through the news databases For references to Brzezinski and the popular press I found stories of over a dozen desperate patients around the world raising vast sums of money From their communities to go to Brzezinski's Houston Clinic for his unproven treatment and my first blog post about Brzezinski I reported that out of the 17 patients I could find outcomes for in the press or online 16 of them were dead Further searches uncovered more patients and more deaths and at some point Hunting down information about Brzezinski's patients and and threw them what goes on inside the clinic became what I did in my spare time As I got increasingly interested in the story I learned a lot about how patients become convinced that the Brzezinski clinic might have something for them I'm surprised and depressed By how many people point to Suzanne Summers book as an authority In recent years ever since it was featured on Dr. Oz's radio show a lot of people report Yeah, a Lot of people report being being convinced by Eric Merle's utterly credulous patient exploitation film Brzezinski cancer is a serious business He named it apparently without irony Yeah, but I think the most persuasive pitch comes from his former patients the ones who happened to have lived The clinic itself appears to use these patients as Ambassadors collecting and distributing the names of current and former patients who'd be willing to promote the clinic This is a List of pancreatic cancer patients given to a prospective client And you can see that in the comments column at the far right and maybe you can't see Patients appear to have indicated they're willing to either talk to prospective patients to appear on the website Or to talk to the media. I follow up. I followed up on the patients listed here At the time this list was given to the prospective patient Joseph was alive, but he died well within the normal life expectancy given his diagnosis Joanne too was alive, but she was dead within a year of starting therapy Irene S would be dead within the month and When my friend got this list Maxine was already dead Patients who have survived Brzezinski's treatment understandably understandably mobilized to promote him But a cult of personality surrounds him like nothing I've ever seen Some of his foreign current Former and current patients run the Brzezinski patient group website Which offers a ready supply of not just overly optimistic, but almost completely uncritical stories to an end-stage cancer patient Or somebody with a dying child who hasn't had good news for months The story seemed to point to a way out and they invariably point to a cure And for you know for a patient a patient who or a parent whose kid has cancer Anything less than that kid living in a normal life is going to be seen as a failure So they have to take you know, they have to take that leap this glaring hope of The Brzezinski patient group not only blinds patients to the reality of their prospects at the clinic But also to the many gradations of a successful treatment from delaying the progression of disease to palliative care and relief of pain This massive glowing endorsement was on endorsements was until recently unmatched by any sort of sustained critical Commentary by former patients, and I suspect that's because the people who would have written it are all dead Actually, and this is a right little slice of hell The version of the Brzezinski patient group website that was up when Reese Morgan was threatened in 2011 and you see it at the left It had 103 patients as members As of mid-June, there were only 63 and 17 of those were on the very original site way back in 1999, which is about three patients added per year Now you can't assume that the role of names correlates directly to a success rate But it's not the steadily growing fan club that we expect from someone who's doing miraculous things for cancer patients So We skeptics have taken it upon ourselves to give a voice to the patients Brzezinski has unquestionably failed and to do that We established the other Brzezinski patient group here we Here we gather the stories that have been left by patients online in forums on Facebook on their personal web pages and blogs in the Media in databases on YouTube and on Twitter Every bit of information we've posted was publicly available to anyone with the time to find it and we've linked to all the original sources So you can compare our interpretation to what the patients originally said, you know, we're not afraid to bring the evidence These stories weren't meant to be evidence one way or the other about the efficacy of the treatment It is and always has been Brzezinski's job to provide that evidence These stories were meant to be visceral persuasive reminders that this is not a miracle cure We have about 50 patient stories written up right now Which is a which is less than one-tenth of the total number of patient names. We've been able to gather As the number of completed stories grew our website became something I don't think we anticipated We realized that there was a lot more to the story than just unproven chemotherapy as we followed the case of Amelia S As it unfolded online Her father wrote numerous detailed accounts of what the family was going through and the British media followed her story closely for months giving Brzezinski a lot of unearned publicity in the UK and November 2011 I said I sent a note to to dr. Gorski About an ecstatic update that Amelia's father had posted on the Amelia's miracle Facebook page In which he indicated that the Brzezinski clinic Felt that a cyst was forming inside of the tumor and this meant the tumor was dying I had no idea what to make of this. I thought that you know, it seemed weird. Could I have been wrong? From the outside it sure looked like the treatment was working And dr. Gorski's reply was that while it was possible That a tumor might break up like that from the inside that the pattern was far more far more typical of a tumor that had outgrown its blood supply When Amelia's physicians in the UK examined the same arm MRI they agreed with this interpretation If this had just been an isolated case you could think that maybe Amelia's father just went with The possibility he liked more, you know the interpretation he liked more But going through the stories after the first 50 patients or so that we've looked at No fewer than seven excitedly reported that the tumors were breaking up in the middle including all of these children here And the story of the boy at the upper right chase is the worst thing I've ever had to write And even Brzezinski is a minor player in the predatory Alternative medicine world that as it applies to to chase. It's a horrible thing One such child Cody appeared in his local paper And who reported quote after two visits visits to the Brzezinski clinic and around the clock treatment for almost six weeks His parents say a recent MRI shows the tumor has not grown and its core appears to be breaking up Cody has limited movement on his left side because a treatment sometimes causes the tumor to swell Putting pressure on the brainstem his parents said This was 20 years ago in 1994 and Again, this is just seven out of the first 50 when you consider that this client David reported that Brzezinski is treated at least 8,000 patients by now You'll understand the sense of urgency behind the recent Brzezinski campaign David and I This client had an exchange on one of my websites, which he mentions in the video And at the time his wife Janet was going through treatment for ovarian cancer her Oncologists had given her three and a half to five years maybe on standard treatment and they said that wasn't enough A year after our exchange Janet's now dead I Should point out that once we linked to this video the guy who filmed the interview a supporter by the name of Pete a very Vocal supporter by the name of Pete took the video down Essentially throwing Janet's story into a memory hole, which I find difficult to excuse The optimistic prognosis given to probable ischemic necrosis that actually kind of bounced along In MRIs is just one facet of a larger Pattern on the stories by patients and their families they frequently report That getting worse is a sign of getting better For instance one thirteen-year-old patient named Rory vomited after starting treatment the family reported that their nurse Marlene Quote explained that as the antineoplastins turn off the cancer cells they die and the white blood cells rush to the area to clear Out the dead cells this causes swelling which can cause the vomiting She said as unpleasant as it can be it's actually a good thing Rory died in 2005 The family of Sipatra and that's the chest port that they they installed to administer this treatment Who had a brainstem tumor reported? Quote we were told last Wednesday that is the antineoplastins work to kill the tumor cells It is normal for the brain tissue to swell with all the dead cells in there This swellings what creates the pressure and results in headaches and vomiting If this is the explanation that patients are being given it's a side effect of the treatment That does not appear on this recent informed consent form that every A&P patient signs Swelling is listed as a possible side effect under most commonly occurring side effects It has a reported frequency of 2% and it's likely related to the enormous sodium load that Brzezinski's A&P patients carry you would think that the tumor encroaching upon your damn brainstem Getting bigger would be listed as a serious side effect But yeah, so what are what are these? What are these nurses talking about patients deserve to have questions like this basic questions answered An especially egregious case of getting worse being interpreted as a sign of getting better appeared and the US news and world Report Andrea's family reported that she was given a 30% chance of recovery by the clinic for a glioblastoma Another brain tumor when Andrea experienced strong side effects her mother's her mother said the nurses were jubilant Quote they said this side effect was a sign the tumor was breaking up after the tumor doubled in size over the next few weeks Andrea flew down to Houston with a friend who was a nurse They were reportedly told the tumor was dissolving and that Andrea would be going back to work soon So the family put another seven thousand dollars on their credit card for a month of treatment What happened next was reported in the magazine quote Andrea died on the airplane home on October 1st her luggage full of anti-neoplastins According to the FDA patient report Andrea Quote did not die under Brzezinski's care She is listed as having withdrawn from treatment on September 30th two days before she died I stress again her family reported that her suitcase was full of anti-neoplastins Two and a half years later her parents report they were still paying off Brzezinski's bill and Speaking of billing The treatments are not free the most recent prices I've seen for starting anti-neoplastin therapy range between 20 to 30 thousand dollar down payment and something on the order of seventy five hundred dollars per month for treatment You know every month thereafter on Sepatra's website her father claimed that innumerable little fees were silently tacked on until one day He learned that despite his down payment that he was four thousand dollars in debt to the clinic and warn future patients To be careful another patient Kathy visited the clinic for treatment of breast cancer expecting to be put on anti-neoplastins Hoping to be she made it clear to the staff in videos She took that she did not want traditional chemotherapy the gene targeted therapy Seems to be off-label standard chemotherapy And she didn't want any standard chemotherapy at any point anybody working in the clinic anyone who had answered the phone Or had talked to her Could have told her that she was not going to be eligible for the treatment that she wanted anyone like a Greg Brzezinski Stan's son an heir apparent who she filmed a Session with could have told her she was ineligible for anti-neoplastins because she did not have brain cancer And so after her trip to Houston she posted This on YouTube and underneath there it says I made this video in anticipation The patient that I'd be receiving anti-neoplastins apparently after spending over thirty thousand dollars here I found out that the anti-neoplastins are only reserved for brain cancer patients who've already undergone chemo and radiation Using the black cell is the only thing left for me to do and that's a highly corrosive nasty thing that she's going to Lastly and this one act this one really upsets me is the story of Denise D another breast cancer patient with metastasis She was working full-time while in treatment. She was uninsured She was on the chemo cocktail route and she was getting all of her off-labeled drugs with patient assistance from the drug companies Nonetheless, she reported the clinic was going to charge her $1,500 a month to receive and hold on to her monthly supply of one drug Her vision of the confrontation with the billing representative is chilling When I talked with Barbara T the financial manager at the Brzezinski clinic and told her that the charge of a thousand dollars per infusion And an additional $1,500 a month to handle the three small vials of Zemeda was just more than I could afford She told me well we have to survive here You want to see Stan just barely scraping by Andy Lewis found a picture of the well you can't actually see the house. It's there's a gate there It's a 10-acre 15,000 square foot six million-dollar residence with 15 bathrooms saunas and swimming pools That's an electronic gate with his gilded initials a guy has to survive I guess So far Brzezinski has beaten the system the FDA has failed to protect these patients the justice system has failed these patients the Texas Medical Board So far has been unable to protect these most vulnerable patients So who's left to stand for them? And I think it's us. I think it's skeptics We may not be able to fill the professional or legal roles of these authorities But we can educate about the public about the form of quackery being practiced in Houston and The last year or so I think that the continued and increasing skeptical attention to this issue has made a great deal of difference in the national coverage of Brzezinski and hopefully in the prospects for patients Skeptics who have public publicly criticized Brzezinski have received communications from Disatisfied patients and their families. We've put them in touch with the media regulatory officials legal representation and each other Skeptics have taken it upon ourselves to jump in and offer what we have found to people who praise or recommend Brzezinski on the Brzezinski hashtag on Twitter When newspapers or media report uncritically on Brzezinski or on patient fundraisers to see him We make sure that editors are contacted and lastly when somebody is fully committed to going to the clinic It's useless and distressing honestly. They have a lot on their plate to try to dissuade them from going So instead we put together a tip sheet about how to protect yourselves if you do go to the Brzezinski clinic You tips like make sure that you get an itemized bill every day Make sure that you let them know that you're making an audio recording of everything that's being said Those of us who are working on this case have a couple of projects in the pipeline and if we pull them off I think they'll be big I think you'll be surprised and I'll actually kind of be surprised too But when we deliver these mighty carefully aim blows We're gonna need your help The help of the entire skeptical community to make the impact as big as possible and light as many fires under his butt as we can This is not the type of case I think where we can be half in because the people who perpetuate this will not be a Lot of the people who support Brzezinski believe that their lives literally depend on fighting for him that we are trying to kill them a Few examples of what they've done so far. Well, there've been Some tickle fights on Twitter Yeah The clinics man Stevens not only harassed this dissatisfied critical bloggers, but also harassed a dissatisfied former patients including Wayne and Lisa Marie Merritt Threatening them with legal action calling them at home Wayne is still ill with with pancreatic cancer by the way, and he's doing well In the spring of 2012 a website went up defaming skeptics critical of Brzezinski as pedophiles I'd like I'd like to point out here that I'm being defamed. I'm at the bottom. I'm being defamed alongside Steven Frye and Simon sing best definition ever But still I've been labeled a necrophiliac, you know I Don't think that dr. Gorski talked about this, but his his medical board has been contacted by patients Well, the director of the Brzezinski movies wrote to the chancellor of the university where I'd just been hired Siding the virtual skeptics web show that I do with some friends He misrepresented me to my new employer and asked them to comment about my quote extracurricular activities the filmmaker then after basically Promising to to smear me while linking me to my employer in millions of homes Honestly making me fear that I might You know receive death threats or God forbid my family might receive death threats After he did that he he seemed to have pulled the punch to included footage in his his movie that looked like this Ultimately the video that he used in his movie was so dishonestly and deceptively edited I have a feeling that his lawyer told him to wipe all identifiers or You know, maybe just wanted to terrorize skeptics So how can you help? Um We have an action alert sign-up sheet out at the IIG table and I'm asking you to go over and and to sign up Ask for your name and your email address I would only use this when something big is happening So you won't get spammed. I'll send out maybe a confirmation email after Tam but I'm gonna ask for 10 minutes of your time at some point over the next four months I'm asking for a commitment to help correct some of what we have seen here So please sign up at the IIG table and I promise you will find something awesome for you to do I'd like to close, you know, kind of where I started kind of back at my title the title of the talk comes from the cover of the book This book right here There it is It's Galileo's lawyer. Yeah, Galileo's lawyer by Brzezinski's lawyer Rick Jaffe And the cover looks like a legal pad with notes scrolled on it and But down at the bottom here in all caps It says it's all about the patience I know I'm gonna be the first skeptic ever to say this but I suddenly take great comfort knowing how Galileo's trial turned out Thank you Bob last quits Thank You Robert


Russia's Wagner private military group is preparing for Ukraine's anticipated counteroffensive with the use of ex-prisoners and volunteers recruited by the group. VCHK OGPU telegram channel reported. The telegram channel claimed that ex-prisoners and volunteers who have been conscripted by Wagner are hastily being prepared for Ukraine's hellish counteroffensive and will be used by the Russian army until it all ends. One of the tasks before Wagner is to preserve old stocks of small arms which were stored near Ukraine's Solidar and Bakhmut cities. The channel said, reminding that the military group is suffering hundreds of losses every day. There is chaos in the Russian army in terms of the morals as well as efficiency of the troops. Ukrainian armed forces counteroffensive can become hellish. The losses and consequences can be very serious, incomparable even with all the losses throughout the war, the telegram channel said.


SCP-819 was discovered in a pediatric office in… After several reports of children being rushed back with symptoms including vision loss, severe nasal pain, and idiopathic unconsciousness, agents dispatched found that the lollipops offered to the children were causing different bodily fluids to disappear. The Candian question was confiscated, and the office staff, affected patients, and their guardians were treated and administered Class A amnestics. SCP-819 refers to the contents of a large box of seemingly normal lollipops, produced by It appears only the one package recovered is exhibiting these anomalies. SCP-819 consists of six flavors of lollipops, individually wrapped and on looped safety sticks, classified as SCP-819-A to F.


Captain Soop, present Inner Sanctum Mystery. This are the mystic marvels of manifold murder. This is your host. Extending a cordial invitation to step through the creaking door of the Inner Sanctum, where we probe deep into the dark and cavernous depths of men souls to see what makes them cure. Mm-hmm. Our clinic here is the whole vast world of crime. And you who listen in may hear us dissect our characters at a safe distance. And unless your nerves are strong, you'd better take my advice and keep your distance. Why, Mr. Host, that's not the kind of advice to give, folks. It sounds unfriendly. Well, what would you suggest, Mary? Well, give them some sort of friendly advice. Like pointing out to them the extra delight they'll get from a cheering cup of Lipton tea. Then go on to tell them why Lipton's is so downright delicious. Tell them that the reason is Lipton's brisk flavor. And don't forget to mention that brisk is the tea expert's own word for the spirited, full-bodied flavor of Lipton's. So refreshing and so zestful. Explain that Lipton's brisk flavor is never flat, but always lively and satisfying. And in closing, remind them to try Lipton's soon. Because in every cup of Lipton's, there's extra enjoyment. And now that's the kind of advice you should give, folks. Well, Mary, you seem to have given it to them already. So we can go ahead and get launched on Skeleton Bay. That's the title of tonight's story. An original radio play by Amiel Tepperman. It's about a lady novelist, a writer of mystery stories. It opens at a swanky hotel with private cabins situated on a storm-swept rock-bound coast. The story itself is all about you guessed it. Murder. And here's Betty Lou Gerson as Carola Winter, the lady novelist, who will give us a blow-by-blow description. I'll tell you first about the night I met Michael Barrett. It was in August at Skeleton Bay. I'd come to the hotel supposedly for a rest. That was what I kept telling myself. But in reality, I didn't know why I'd come here. I'd seen the name advertised months ago. Since then, it's your primary, hammering at the inside of my brain. It's like the voice of impactful things command me. Command me. Command me. Because I didn't like crowds. The hotel manager had given me a cabin near the beach all to myself. It was the middle of the night that I couldn't sleep. The wind came in from the ocean howling like a hungry beast across the shores. And the pounding of the surf mingle with the angry baffled growl of the sea. I sat at the window in the dark, staring out at the beach. I was restless, excited. It was then I saw the signal. It was just a winking little light a few yards away on the beach. Someone was blinking a flashlight. I was able to make out the figure of a man in boots and a leather jacket. He was signaling toward the hotel. I had the answer in a moment. A man moved past my window going down toward the light. Yet his collar turned up against the wind. His hat brim pulled low. I knew who it was. Mr. Field. A small, furtive man who'd come upon the train with me. The two men met. Barely a stone's throw from my window. I could hardly see them huddled closely together. This was excitement, mystery, intrigue. The stimulation I wanted needed. I had to know what was going on. I threw on a raincoat, opened the cabin door. The wind swept my hair in a streamer and the spray stung my face as I hurried down the beach. My blood began to race. My heart to pound. For those two men were not engaged in any conference. They were locked and struggled. It was a very silent struggle with only a grunt now and there. I saw the flashing gleam of a knife. I couldn't tell who had the weapons. The tall man in the leather jacket or the furtive Mr. Field. And then... Then I saw the blade plunge home into the throat of the furtive Mr. Field. I felt a sudden surge of wild elation. This was murder. I had witnessed it. The tall man at the body of Mr. Field slide down to the sand. Then he looked up and saw me.  Who are you? I'm Carla Winter. I have this cabin here number five.  Yes, I saw you. What are you going to do about it? I'm going to help you dispose of the body. His name was Michael Barrett. He lived on the opposite side of the bay in the house high up on the cliff. It won't be so easy to get rid of the body.  If there was some place to hide him for a day I could come across on the boat tomorrow night. You can hide him in the closet in my cabin. Nobody will look this way. Better lock the closet door. Yes, of course. You sure nobody will come snooping here? Nobody comes here but the maid. All right. I'll be back tomorrow night with a boat. Did you pick up the knife? Yeah. Got it in my pocket. Well, I guess that's all. Good night, Carla. Good night, Michael. All night I sat up alone with a locked closet door between me and the staring, sightless body of Mr. Field. Breakfast next morning they'd already discovered the disappearance of Mr. Field. And the maid says his bed wasn't slept in at all. I think he could have committed suicide in the ocean. I hurried through my breakfast listening to the gossip all around me. Now in broad daylight I hardly believe the thing had really happened last night. I didn't know the hotel manager thinks it might be murder. I was him fawning for the police. The police? I hadn't counted on that. Anything wrong, my dear? You look sick. I do feel a bit dizzy. I think I'll get some fresh air. Oh, poor dear. It must be quite a shock to her. She came up on the train with Mr. Field, you know. All in the open air I let the wind cool my fevered face as I hurried down toward the beach. It was only 9.30 in the morning. A whole day. A whole evening before Michael could come for the body. And the police would be around all day investigating, snooping. And all the time Mr. Field would be sitting in my closet staring blankly out of his sightless eyes. When I reached my cabin I put a hand on the door knob. Suddenly I went cold all over. The door was unlocked. It would still as a statue listening as there was someone inside. Someone moving around. I only had my handbag. I had a pistol in it. I always carried it for protection. But my handbag was inside on the dresser. Slowly, slowly I pressed the door open. Half inch. And then the door creaked. Is that you, Miss Winter? The maid. It was only the maid, of course. She'd be making up the bed. Why hadn't I thought of it? Miss Winter, is that you? Yes, it's I. What are you doing in that closet for those keys? Why, they're just my past keys, Miss Winter.  I didn't ask you to do anything to the closet. Well, but that's part of the job, Miss Winter. I'm supposed to do that in all the rooms. Well, you leave this one alone. Keep away from that closet, you hear? Yes, Miss Winter. But I was only trying to help. I want your help, I'll ask for it. Now please leave it once. Just as you say, Miss Winter. I'm sorry if I did anything wrong. Did she suspect anything? I hadn't liked her tone. Why? Why had I been so sharp with her? Now she'd surely think there was something in the closet. Something she shouldn't see. At lunchtime, I didn't want to leave the cabin. I sat at the window. And I could almost feel the sightless eyes of Mr. Field staring at me through the closet door. Summon at the door. Just a minute. Miss Winter? Miss Karla Winter? Yes, I'm Miss Winter. I'm sorry to trouble you, Miss Winter. I'm Detective Sergeant Smith from headquarters. May I come in for a moment? Yes, please do. What can I do for you, Sergeant Smith? We're out here investigating this field business. He hasn't turned up yet. I'm sure he will in time. Well, I wish I could be so sure, Miss Winter. What do you mean? We've gone through his room.  Queer things? It seems as Mr. Field's in some sort of racket. There's a good chance he may have been murdered. You don't say. I understand you came up on a train with him. Yes, yes, that's true. Did you have any conversation with him on the train? No, none at all.  The same. I've read every one of them. They're darn good, Miss Winter. Why, thank you. Do you think you'll get a plot out of this? I mean, Mr. Field. Well, I can't tell yet. I wish you'd keep me posted on developments in case it does turn out to have a plot. I sure will, Miss Winter. By the way, we found this picture among the papers in Field's room. I'm showing it to everybody around in case they might recognize it. It's an old newspaper item, about 10 years old. Can't figure out why it was printed around. It's about a guy named Wycliffe. It's one of a murder in Canada. Here, take a look at it. I felt the blood racing in my veins pounding at my wrists. The picture of the man named Wycliffe who was wanted for murder in Canada was a picture of Michael Barrett. Michael Barrett is a lucky guy with a beautiful woman ready to commit murder for him. Mm-hmm. But what'll he do when she runs out of victims and begins looking at him with a calculating eye? As for Karela, she's sinned heavily because murder is the greatest sin. Yes, if you ask me, she'd better hope for a depression because the wages will go down, including the wages of sin. Well, I never knew that murder and economics were related, Mr. Host. Oh, definitely, Mary. Take the high cost of living, for instance. Why, those prices are murder. Oh, yes, Mr. Host, it is difficult when the cost of living starts to climb. But then, so often, the things that really add up to good living are just simple, inexpensive pleasures, a piping hot cup of Lipton tea that many of us find waiting when we come down to breakfast each morning. As you read the morning paper and sip that cheery cup of Lipton's, the whole world seems brighter. It's simply wonderful the way that lively, spirited Lipton tea gets you off to a fresh start. For Lipton's brisk flavor gives you all a natural zest of tea at its best. Gives you extra delight, extra satisfaction. So remember this, folks, this time, dinner time, or any other time when you want a grand, refreshing drink. Pour yourself a cup of Lipton tea. And now, let's get back to the rock-bound coast of Skellison Bay and see how Kerala entertains the grisly guest in her closet. I don't remember now how I got rid of that Detective Smith. I told him I'd never seen the man in the picture and sent him away. The day was interminable. From my window, I could see the guests moving about the beach. But none of them went in swimming. The weather was too rough. I wondered if Michael would be able to bring the boat over at night. If not, how much longer could I sit guard over Mr. Field in the closet? Now and then I'd see Detective Smith poking around on the beach. And then, without warning, he was standing over the very spot where Michael had stabbed Mr. Field. I watched him bend down and examine something. Was there a telltale drop of blood there? Did Smith know that was the murder spot? I saw him frown. Then he stood up, walk quickly away. I had to know what it was he'd seen there. I slipped on a coat, went out. Started toward the spot on the beach. All right, sir, where, Miss Winter? Oh, it's you to take it. Are you going anywhere in particular? No, no, I'm just going up to the hotel for dinner. It's almost dinner time, you know. Oh, fine, I'll walk up with you if you don't mind. Not at all. Hey, could I help you? I'll take your arm there. Thank you. The sand is so soft. As is still wet, we had high tide last night. Oh, um, Miss Winter. Yes? You sound sleeper. Why do you ask? I just thought maybe you might have heard something last night. Like a fight or something? Fight? Yes, yes. I was just looking at the sand back there, down near your cabin. It's all messed up, stamped around. What's that got to do with me? Oh, darling, oh. Except I think there was a fight there last night. Maybe that's where Mr. Field was killed. You, you think Mr. Field was murdered? It's beginning to look more and more like it, Miss Winter. I don't know how I managed to get through with the dinner. I hurried back to the cabin. I stopped at the door, shocked and unbelieving. There was a light inside. Someone was in there. This time I had my handbag with me. I took the pistol out. Once more, I inched the door open. The thing I feared. The closet door was open. And there was the maid, stooping over the body of Mr. Field. What are you doing there? The body. It's Mr. Field. You killed him. Suppose I did. What are you doing with that gun? What do you think? No. The wind was high. And the weather was rough. Unfortunately, no one heard the shot. I pushed her body into the closet next to the body of Mr. Field. Closed the door. Now. Now I was a murderer too. Let me in, Carla, quick. Yes, yes. I thought you were coming. It's been a terrible day. What happened? Come here, I'll show you. Is he still in there? See for yourself. Great. The woman, who is she? The maid. She opened the closet while I was out. You killed her? Yes, Michael.  There are detectives at the hotel looking for Mr. Field.  And there'd be no one to talk. Yes, Michael, that would be smart. Go ahead. Kill me if you can.  We were two of a kind, both wild, both reckless, both eager for the thrill of danger. He too wanted to be like the wind. We'd both been brought together here by some force stronger than either of us. And we loved each other. Carla. We have work to do. Yes, I'll take them down to the boat. I'll help you. We carried Mr. Field and the maid down to the boat. I'll take them out away and dump them. And after that, Michael? After that, then I'm going home. To your house on the cliff on the other side of the bay? Yes, Carla. Michael, take me with you. What?  I'm sorry. I can't. You can? Why can't you? Isn't anything I can tell you. What are you hiding up there in the house on the cliff? You mustn't ask. Please, Carla, you mustn't ask. Why, you're married. You have a wife up there. No. Then what? I can't tell you. You're going away, leaving me forever. Not forever, Carla. Go back to the city. I'll come to your soul. I returned to the city and waited. I waited a week, a month. But Michael Barrett did not come. I wrote to him. But there was no answer. And then one evening, I saw him. I was returning home in a taxi and I saw him. Standing across the street looking up at my window. And he saw me get out of the cab. He turned and started hurrying away. Michael! Michael! Michael, don't go away! Michael, why did you try to run away? Don't you know? Well, you're afraid. Yeah, let's call it that. You love me, Michael, don't you? Carla, it's no good. There's nothing but ruin for both of us if I stay. We'll be together forever. It's impossible. I won't let you go back to that house on the cliff.   Goodbye, Carla. Wait. I'm going. Better forget about it. Don't go yet, Mr. Whitecliff. I saw the old newspaper clipping, Mr. Field carrying. I see. Why are you looking at me like that? You know why I killed Mr. Field? Because it tried to blackmail me about that old murder. Michael, dear, I'm a good deal smarter than Mr. Field. You see, I write mystery novels. I know how to handle such things. What do you mean?  I've written out all about you. Your real name and about that old murder in Canada would be found if I should ever be killed. Oh. Michael, darling, I'm blackmailing you. There's only one thing I want from you, your love. It shouldn't be so hard for you to meet my terms. All right, Carla. You win. We'll be married tonight. Soon after we were married, Michael began going out evenings. Once. Sometimes twice a week. Staying out all night. He'd return late the next day. When I asked where he'd been, his temper would flare up into something terrible. I stopped asking. But I couldn't rest. I had to know where he went. One evening I followed him. He boarded a train for Skeleton Bay. At Skeleton Bay, he set out to walk from the station. And I followed him. It was no longer summer. Trees were bare and the night was forbidding. I kept behind him when he skirted the bay to the narrow road that led up toward his house high on the cliff. It was a small stone house. And the wind whistled around it, against it, and above it, I stole to one of the windows. It was barred, like a prison. Carefully, I raised my head above the sill, peered into a lighted room. Michael was there, with a woman. For the first time in my life, I knew the meaning of frustration, jealousy. Michael told me he wasn't married, but this woman, I'd helped him to do murder. I'd killed for him. I'd lied to that detective for him. And all the while, this was the secret he'd been keeping from me. I opened my handbag. I looked into the room again. The woman was alone now. Michael was gone. So you came up after all, Carella? Michael, you... you sneaked out. You knew I was here. I'm sorry you saw through that window, Carella. Is that your secret? That woman? Part of it, but it's the part you mustn't know. But I do know it now.  That knife? You still got that knife? Yes, Carella. I've got this, Michael.  Now I knew why I'd really come to Skeleton Bay that first day. It was for this, to kill Michael Barrett. So he's dead.  Yes, I saw you. What are you going to do about it? Help you dispose of the body, of course. Help me dispose of the body? Those are the very words I'd said to Michael Barrett down there on the beach. Now this woman was saying them to me. Who... who are you? I'm Lisbeth Wycliffe. I'm Michael's sister. And you want to help me dispose of his body? See the bars on those windows? Yes. I've been a prisoner in this house for ten years. You what? Michael killed the man I was going to marry ten years ago in Canada. He murdered him. But this house, this prison... Michael brought me here. He's kept me a prisoner because he knew if I got free I'd tell the world he was a murderer. And that's the secret. The secret he wouldn't even tell me. Yes, I killed her too. There outside the house and she fell beside Michael. And I rolled both bodies over the cliff, down into the sea. This is the end of my book. The best mystery novel I've ever written. I know that in writing it I deliver myself into the hands of the law. So now... I'm finished. I will mail it to my publisher and wait for Detective Sergeant Smith to come and get me. It looks as if Carilla's mystery novel will earn a lot of money after she's executed. Yes, but I'd say it's tainted money. Why tainted? Because she'll be dead and a ghost can't own money. So taint hers. The trouble with Carilla was that her conscience was too little and too late. It told her not to commit murder after she'd done it. Well, that's certainly too late, Mr. Host. Oh, yes, Mary, especially for her victims. And now, what's on your mind? Well, Mr. Host, right here I'd like to say a word to our listeners on behalf of our veterans. You know friends, ex-servicemen are returning to civilian jobs with a lot to offer their employers. They've had valuable training and experience in highly specialized service jobs. Many of them were able to keep up with their civilian jobs and learn new trades through special correspondence courses. And they're coming home fully equipped to do the same fine job as civilians that they did in the services. So let's give them every employment opportunity to put their increased skill to work. Friends, we take our leave of lovely Carilla Winter. She would have been better off if she'd remembered that the pen is mightier than the sword. Because the sword is leading her right back to the pen anyhow. Oh, yes, and remember, friends, when you go on a vacation, always insist on plenty of closet space. As you never know what unexpected guests might drop in. Or drop dead. By the way, this month's Inner Sanctum Mystery Novel is Death in the Limelight by A.E. Martin. And next week, the makers of Lipton Tea and Lipton Soup will bring you another Inner Sanctum Mystery directed by Hyman Brown. It's about a young chemist who discovers the secret of perpetual life. But he made the mistake of getting involved with death. So, until next Tuesday. Good night. Pleasant. Here's a swell dish, folks. It's easy to make and mighty easy to take. Lipton's Noodle Soup. You can prepare it in a jiffy and the whole family will love its delicious, chicken-y tasting broth so full of tender golden noodles. Lipton's Noodle Soup has all the fresh cooked, homemade flavor of Grandmother's Noodle Soup. Yet it's economical. It costs less and makes lots more than cansoes. So get Lipton's Noodle Soup Mix tomorrow. And don't forget to tune in next Tuesday night for another Inner Sanctum Mystery. This is CBS, the Columbia Broadcasting System.


ASLO is an organization based in Venezuela that is dedicated to educating leading citizens in public health and prevention. In the pandemic we developed a bot together with students and medical specialists to consultations by WhatsApp. The health personnel in Venezuela are doing the impossible to reach their work. That is why we created Snack for Heroes. We have been able to give more than 100 plates of things to our heroes. Being part of the Generation Change Fellowship Program has made me understand that everyone has a perspective on problems and that each of us must face them in the best way, serving as an example every day of our life. I'm Daniela Leandro from Venezuela.


This video, we're going to look at how to use substitution in equations to generate a table of ordered pairs. So ordered pairs can be used to solve equations, to plot graphs, and so we come across them a lot in maths. You should already know how to substitute into equations if you're unsure watch this video first, and how to solve simple equations. And again, if you've forgotten, watch this video. So let's jump straight in. We have this relationship. The value of y depends on what the value of x is. So if x is 2, then y is 7. What if x was 0, 1, or 3? Pause the video and find the corresponding y values. Did you get them right? This table we have generated is known as a table of ordered pairs, or a table of values. It can be horizontal, like this, or vertical. We can then write out the values as ordered pairs. It's really important that we always write the x value before the y value. So 0, 1, not 1, 0. Then 1, 4, and so on. Writing the pairs as x, y is what makes it an ordered pair. The x and the y are both known as variables, because they aren't set values. They vary. Even more specifically, we call the x the independent variable, because we can choose any value of x randomly, or independently. But the y is known as the dependent variable. It depends upon the value of x. So sometimes you might be given a mixture of x and y values, and have to work out the missing values. Pause the video and complete the table of ordered pairs, and then write the outcome as ordered pairs. Did you get them right? Here's the final type of question to try. Which equation represents the values in the table? Pause the video and work it out. Did you get option C? We can then use these ordered pairs and plot them onto a graph, which we'll look at in future videos. If you liked the video, give it a thumbs up, and don't forget to subscribe, comment below if you have any questions. Why not check out our few school app as well? Until next time.