All right. Hello. Welcome to Track the Planet. Today we're going to be talking a little bit about user enumeration in Azure, and I hope to demonstrate to you today, it's kicking up, a little bit about why user enumeration is a vulnerability and why it should be taken seriously. So with that, a little bit about me. I'm Nick Skeek. I'm over at Trusted Sec, but this research is my own. This talk is about user enumeration, and there are no zero days being announced here. There's nothing really like no hotness, really except for some, really just taking advantage of things that are already existing. Microsoft knows about all of this. There's nothing new being announced that's going to be a surprise to them. Well, maybe. So first let's really just talk about user enumeration and why it matters. So what is it? User enumeration is the ability to determine if a user is valid on a system. There's various ways of doing it, especially in Azure, but some examples here you can see verbose responses just saying if the username is invalid or not. There's time-based ones, and then or you might do one that's web-based. Maybe it's a 404 if it doesn't exist in a 302 or a 401 if it does exist. So there's various ways of doing this. And it is a security flaw. We use it all the time in pen testing. It enables all of these different attacks, primarily password sprays, phishing, and then the occasional targeted RCE that can affect users if you have their email address. It's an unnecessary feature. It doesn't need to be here. It's purely cosmetic, and then it also allows the identification of targets, right? So we often use first dot last name. We use our identities in our email addresses. So when that's possible, it's possible then to not just identify a username, like a numeric username, but when it's John Smith, you know that person's identity. You can find them. So this is a dangerous thing because it allows all of these different attacks to happen, especially with password sprays. I just want to mention on this real quick, it is enormous. If you're on a pen test and you can't do user enumeration, you're going to have a bad time. If you're looking at, for instance, J Smith format, if you're using census data from 2010, that's 4.2 million lines. If you can reduce that to 2,000 lines or less, right? If you can find just the valid users, now all of a sudden you're not wasting a day doing password sprays. You can rotate every hour or as often as you can without selling their lockout out. So it's huge for that. It wouldn't really be possible if it wasn't for user enumeration. It would be not worth the time. And often, if you've ever dumped a domain controller, I'm sure that you know that there's always one or two bad passwords in there. I can count on one hand the number of times I've dumped a DC and not found anything that I was like, oh, yeah, that's, yeah. So instead of thinking about it like you're trying to guess the password when you're doing password sprays, assume that there's going to be one out of those hundred top passwords in there. Instead, focus on finding the users, because if you can get complete enumeration, you can almost always find a weak password. So think about it that way instead of thinking about it as trying to find the password. You're trying to find the user with that weak password that we assume exists somewhere. So it really matters in Azure because everybody uses Azure. Not everybody, but nearly. So in the Fortune 500, for instance, 99% have Azure tenants, whether they use them or not, right, they might have just registered it. But out of those, 96% had SharePoint enabled, and I've identified valid user names via OneDrive in 89% of the Fortune 500. So they are being used. It is widespread. If you look at state government adoption, every state government uses Azure. This is so widespread. Everyone is affected by things that come up in Azure, especially with user enumeration. There are federal government agencies that use Azure. Everything has the same vulnerability built in there with OneDrive and other user enumeration methods. So who might not want to be enumerated, right? Who might want to stay kind of hidden from view? There are a number of areas where you think maybe we shouldn't allow them to make lists of potential cyber targets, right? People that might be targeted with phishing, password sprays, et cetera. And it's not new to think about user enumeration as a vulnerability. This has been recognized by many large organizations. It shouldn't be the case that Microsoft makes the argument that user enumeration isn't a vulnerability. And you can see that they don't take it seriously because if you look from back even to 2014, that's a decade ago almost. That's when I believe the first exchange time-based user enumeration was identified. There are multiple loans after that you can see. And it's just persistent throughout all their products because they don't consider it a vulnerability. You can see this actually if you were to go to look at their bounty page out of scope submissions and vulnerabilities, these are not in scope for submission. So it's not surprising. I submitted the SharePoint OneDrive enumeration vulnerability to them. And you can actually see they actually gave us a really nice verbose response. So the parts that I want to point out are basically we would not consider it on its own security vulnerability and that it's similar to knowing a website IP address. And that's something that's public, right? That's not something that's considered private information at all. So that is their stance on it. It's not a bug. It's a feature. It's built in. So with that, we arrive at stage one, user enumeration. So knowing that OneDrive can enumerate users and it can do so silently via HTTP.  And you can tell if the user is valid or not. It's basically web scraping. There's no authentication attempt, unlike graph and other methods where you have to actually try to make a login which is sketchy if you're going to try doing something on a large scale. But OneDrive doesn't have any of those problems. You can use this and nobody can see it, except for Microsoft. So there's a few different Azure enumeration methods. These are the popular ones that I'm aware of. The graph one has a log on attempt made. It shows up in any logs. That's the normal one that people use to attack oftentimes. Oh, sorry. My bad. So the next one down seamless as a so, that's a quiet one. But you get false positives with it. There's the team's presence, but you need to have the external access enabled. We'll be talking about that later. And so we have OneDrive. OneDrive has no rate limits, no false positives. It's simple. It's easy to script out because it's so easy. You can in fact use Durbuster if you really wanted to do the same type of enumeration. Now, in order to enumerate a OneDrive user, there are a few things that you need to know. You need to know the domain name and you need to know the tenant name. But you don't always know what the tenant name is. Oftentimes, it will match the domain name minus the TLD, but that's not always the case. And in fact, a good portion of the time, it's not the case. And so that's an important requirement to doing the OneDrive enumeration. And thankfully, Dr. Azure AD, who is amazing, identified a way to do this. He published it in AAD internals and then Trevor Spray added it into their tool, which is also amazing and you should check it out. And it identifies the tenant names using a Microsoft lookup service. So I implemented these into my own tool, OneDrive enum, and I started enumerating users.  For this, I used Clue, which is not a codified likeness, but it's a cloud lookup utility. And so that would just talk back to my Tron server and sync up word lists, et cetera, and then you could run your enumeration on there. And I had the original Clue crew was only a small squad, but after about six months or so of doing this, I decided to go a little bit harder and we upped it up a little bit. At one time, I did reach 56, but it was a little, that's too much. 40 was my running. And over the course of a year and a half, I was able to enumerate 24 million users. So these are users at the largest organizations in the world. Not just limited to Fortune 500 and 1000, but I did specifically look at those. So for reference, 20 million users, it's kind of hard to imagine, but it's about the state of Florida or Australia or New York state. So it's a lot of users. So let's take a look at some of the results of the user enumeration that I did. The total user names that were found were 24 million. The unique were about 10 million. Took about 556 days and averaged around 40K or so a day.  If somebody really wanted to do it, they could scale it up a lot. So this is the total operating budget for this, by the way, was about $5,000. So it's more than I wanted to spend, but it's something that proves it would be so cheap for anybody in the world to do this. Now, looking at user name formats, when you're trying to identify... So, I don't know about this. Microsoft doesn't want this to happen. Okay, well, let's see what we can do here. So to identify user name formats, I used a survey script. And in doing so, I would run a set of different user names against that, and then you can get back the number of the matching formats. So for instance, here you can see J. Smith was the top format. Let me just see if I can jiggle some stuff here. I might be able to get it going. Well, so going through the different user name formats, I actually sprayed this against all of the Fortune 1000 companies, and we can see overall what were the most prevalent user name formats. We have John Smith as the top, followed by Jay Smith, etc. It's just kind of interesting to see. The one thing you have to realize, though, is that this is probably not really perfect. Obviously, there's more variation in John Smith user name formats than there are in Jay Smith. So it's going to be a little bit skewed. John Smith is probably underrepresented in this survey here. One of the interesting things that I identified when I was doing this is that I had originally assumed that people would have one user name format. That it would only be the single one. But that's not the case, right?  If you're starting with Jay Smith, you have to do something when you get that 2000 user or so. You can do it a few ways. You can either go up in digits. You can add a format. You can switch over from Jay Smith to Jay Smith, for instance, something like that. Or you truncate it. Those are the main areas that I saw organizations would move as they were doing this. So I went through and I kind of did a catalog of that as well, looking at what combinations were used. You can see here that it's actually sorted also, limited by popularity on each level. So the third and fourth lines down, they're basically the same thing but flipped, right? So it's just kind of interesting to see the variations and how they fall out. So looking at Fortune 1000 companies, I just pulled these out specifically just so we'd be targeting large organizations and not picking on anybody really small. But just to show kind of what type of user enumeration is possible. And you'll notice here that a lot of these actually are over a hundred percent. And the reason for that is with OneDrive, you actually, the user, the URL exists until you delete the user and then you empty your recycle bin. So if you have a long retention policy, that's going to keep them in there a long time. And or if you have a high turnover, that would also super inflate your findings there. But at any rate, even for an attacker, that reduces it drastically. So it's still worthwhile. So in Azure, there are tenants and then there are domain, your email address is associated with those tenants. There are some multi-tenant domain or organizations like Microsoft where you can see they have their main Microsoft, but then they also have APC in Europe, etc. And this is just the breakdown of the users I found there. I got about 126k in Microsoft's main tenant on Microsoft.com. You can see LinkedIn is in there. I had forgotten that they had acquired that. And then you can see actually there is a Microsoft APC or Microsoft Europe. Yeah, both of Microsoft.com domains there. So you can see how they're actually split up. So if you're an attacker, you could actually target one of those specific geographic locations based on that tenant name. So got phase one done. Does anybody remember what phase two is? We're going to do some presence enumeration here. Stage two. So to do this, we're going to monitor teams. Before we talk about that, I'm just going to give you a real brief timeline here about teams and prior to that Skype for Business and prior to that link and before that Office Communicator, I guess. But they're all really the same thing. They're just incarnations of it again. They label it new, but they all have the same problems. So here it started out with being called Open Federation and that lets anybody from anywhere message people at your organization. That's back when it was link. I just want to point out here in 2016, Carl Fossum spoke about Power Skype and attacking federated Skype for Business at Derbycon. That was the first talk that I'm aware of where anybody discussed using presence enumeration and he had a great tool for it there. They eventually did shut down the PowerChill APIs that were on the back end, but it had a good run. And so this problem with presence enumeration is not new. I actually had a little side project here. I was going to release it, you know, how things happen. It doesn't, you don't end up getting around to releasing it. But I was trying to prove, you know, that this is a problem back then. And so I took a bunch of the CEOs from the biggest corporations in the world and I would, you know, monitor their online presence so you could look at a website and see if they're online or not. You could message them directly because they have external access enabled. So that was just kind of a thing to prove out that this is an issue back then. So this is not a new thing at all. Right now it's called external access and that's in Teams. And it's the default setting to have it enabled to let anybody speak with you. You can see it right there and you might recognize it from an outlook if you ever see a green dot show up next to somebody's email and you have the Teams plugin installed. That's what that is. So again, it's not a bug. It's a feature. So one day while I was playing with graphics floor, I noticed that there's a feature in there for presence lookups. So you can look up somebody's presence and you're using unauthenticated, you're on the outside and somehow I was doing the presence lookup and I was like, wait, that's kind of weird because you need to be licensed, you need to be logged in to do that. So I started playing with it in Burp and turns out there's a weird bearer token set. And if you're familiar with bearer tokens, that is not a normal bearer token. So I went digging around and lo and behold in the source code, they have a bypass to make anonymous presence lookups. It's on GitHub even. And so here you can actually see they're proxying the graph request through graph.office.net. So with this, if you have the UUID which is that last item there on the right, the long string of characters, if you have that for a user, you can check their presence via this lookup. So enter teamfiltration. So this was released last year actually at Defcon 30. And you can use it to enumerate teams. Microsoft mess a little bit with the external access enumeration, but you can still do it if they have external access enabled. Prior to that, you could tell even if they didn't have external access enabled, you could still enumerate them via that. At any rate, what we're looking for are the GUIDs that they can look up for teams, right? So we can now pull down a list of users GUIDs and using that previous trick, we can start looking up their presence without having to worry about any authentication. We're not using an actual account or anything. So you can do this purely anonymously. Now beware, there are limits on this, right? There are rate limits on this. And so keep that in mind. There will be a tool drop later. If you're looking for it right now, I'm sorry it's not there. It will be later today. So keep your eye out for it. My Twitter handle will be out later. So check that. Now so what should we do with something like this, right? This is pretty cool, but what should we do? We should track a company. And who better than Microsoft, right? This is their feature. They have enabled it by default on everybody's. They have to know how it works. And if they don't, who can be expected to know how it works? So I don't really feel bad about doing this because it's it's their feature that I'm demonstrating. So I started doing some monitoring around April 28th. And I started graphing it out. And it's kind of neat, right? You can see their their daily activity throughout the day, how many people are online. And it was great. I submitted the DEF CON. It's gonna be good. And then a week later, this happened. I was so bummed out. I was like, okay, this, this will be way more complicated now.  But I waited. And a month later, it came back. So I don't know what happened. But things are working again. And, and you can now do this. I'm gonna be, I'm actually not monitoring that anymore. So you guys are free to use this and not worry about the rate limits. Yeah, so here, here's something interesting that popped up one day. Any guesses on what this is? It's an all hands meeting there for just a little bit like, and you can actually see two of them, right? There's one for probably in the Americas and probably one for overseas. There's actually a you can, you can see a Microsoft build event there, where they announced that. And then the two days that they're actually out there and busy on those days. I just want to put this up here for a second while I take a drink of water. So you can also draw heat maps. You can find out what day people are active, how many available users are active on any given day. And you can actually see, I think, I think the fourth of July this week being on a week day, you know, I think that mess with people taking off. People were still checking their phones you can see on the holiday. They were, they were more off on the weekend before. But yeah, it's kind of on Fridays, of course, look on Fridays, summertime. So I took all their out of office messages to these are also all available through the presence lookup. So team filtration will do this. Yeah, you could. So I've got all their out of office messages and just kind of it's not very useful, but it's kind of neat. But so back to identities and emails being linked, right? So you can go on LinkedIn, right and find members of the Microsoft security team. And then enumerate their email addresses and pull them up to make sure they're the right one because teams will tell you their display name. So you can verify that that's actually who you're looking for and not just somebody else named Jay Smith. So if an attacker were to do this, there are a few things that they might be interested in, right? Are they online right now? Who's on vacation? Who's out of office? Who should I call to talk to the person that's out of office? And then the other thing is it doesn't even have to be an adversary. This could be, you know, some marketing person that wants to like reach somebody when they're at their desk, just find out what their schedule is and now I know that they're going to be there right now and I can email them. So the other thing is that even if the usernames were completely anonymous, right, you can still tell a lot about somebody based on their schedule. Like when are their normal hours? Are they in night owl or are they up in the morning? What holidays are they taking off? Are they taking religious holidays or are they taking holidays particularly to one nation? Even if you use numeric usernames, you could still identify a lot about people by putting a game of 20 questions there, you know, figuring out this or that, this or that, and you can really narrow down who that could possibly be. So that was the end of that one. Stage three is the really interesting part, guest enumeration. So just real quick, know that it is possible to enumerate guest users in Azure. So you should consider any guests that you have to be public information. Real quick, how it works, right, you invite somebody to your tenant in Azure. Beware. So anything I'm going to show you some stuff here? These do not imply business relationships. Anybody can invite a guest user by default, even other guests. So if, you know, if you invite a meet to your tenant, I can then turn around and invite a random third party to your tenant, because that's a default setting there. And I don't know how many people actually go through and change that. But I'm just telling you that's what it is by default. So there's a lot of like ambiguity here about relationships if you're trying to infer them by looking at guest, guest users at an organization. But on the other hand, if you see that there's like maybe 30 or 100 guest users at an org, that might not be just a coincidence. So it's actually, this is all out in plain sight too.  And it's not too hard to decipher what we need to change, you know, from the email address to get to that username. And because user enumeration isn't a vulnerability, it's a feature. So I have to say Dr. Azure AD is the first one to discover guest enumeration. I ran across this and he actually found it four years ago. So this is not new at all, not new in the least. He didn't make a big deal about it. And it was kind of published midway down. And I also think that the other reason this hasn't received much attention yet is this will not come up on a pen test. This is not in scope on a pen test, right? I can't try pivoting to another tenant there. So why would I even care if I can enumerate users there? But it's been possible this whole time. And so I'm rather certain that people are using this already. Why wouldn't they? You know it's been out there? There are various ways of doing this. So why wouldn't people be doing this already? So keep that in mind while I show you these next ones. So real quick though, I'll show you how it works, right? This is how simple it is. How simple. You can do it from a browser yourself if you know the email address is. So on the left, that's an invalid. One fake user underscore domain dot com ext Microsoft dot on Microsoft dot com. So that's Microsoft's tenant there, Microsoft on Microsoft dot com. You can see on the left side, I'm showing you some valid user. You get redirected to a sign-in page if it's a valid user. So you can tell immediately, you don't even need to authenticate. You're simply entering that username there in that sign-in page. So another tool drop that will be out. There's another method of doing this too that I identified, which is via graph enumeration. So the same enumeration method that we use for other enumerations that are interactive. Same thing works there. There are a few differences though. Graph-based user enumeration is an authentication attempt against graph. But you can't log in this way. So even if you have the valid password, it won't let you in. It won't tell you if it's a valid password or not. Nothing about it. It's not possible to log in via this avenue with that guest account. So it's not really a log-in attempt, but if you decide to use this method, just keep that in mind. In the tool, the password is set to a really long GUID, so there won't be any chance that somebody actually has that password. But you can't leave the field blank. So it has to be either just be aware. It will show up in logs and defunders.  You can't get in that way, but do know that somebody's found out about that account. Now, what can we do with this, right? If only we had a giant list of usernames from somewhere. Then we could do something interesting. We could try identifying some partnerships between companies. So I started by looking at, you know, going to Google, say, OK, so-and-so partners with blank. Who comes up? Let's look at that. So took a few consultant companies and I got some hits back. OK, this works for real. I can prove it out that it's actually actionable attack in the real world. This is not just, you know, an idea. So this is what 30,000 guest connections between companies looks like. So these are a lot of big companies in America. Now, this one is in Color Code. I left Microsoft in there because, again, this is their feature. But I'm going to show you here in just a slide or two here. But we identified guest accounts among all these giant organizations, ones that maybe they don't want people knowing who potentially, you know, right, because we don't know for sure if there's actually a business relationship there, but potentially could be because of this guest relationship. Now, one more sip of water. Where was I? So let's look at Microsoft's guest relationships. I've taken out all the names. I'm sorry, not going to be that fun. But you can see the diversity of relationships there. Now, any of the blue ones are where Microsoft has guest access to. Any of the red ones are where that entity has guest access to Microsoft. Now, by default, you know, they might just have guest access and no actual group membership, et cetera, and no special privileges, but they are there. Any of the green that are interconnected are in between partners of Microsoft that also have a connection to Microsoft. So you can see between various entities there. And then the larger it is, the bigger, or the greater number of connections there are to that node. So that's what you're seeing here. Now, again, this is Microsoft's stance. This is pure user enumeration. Nothing about this is an attack. This is user enumeration. Pure. So, I want to focus on Microsoft, but to show the width of this and how it affects everybody, I'm just going to show you a few other large companies here. So for instance, here's Metas. You can see we've got Tesla. Might be interesting. Again, I apologize, this is not more juicy, but. Here's a company in Palantir. I don't know if anybody's heard of that one. Remember that Blue says that they have guest access to that tenant. So, looking at the most widespread companies, I'm just showing you a few of the top ones here that I found the most connections to organizations. And these are distinct hosts that they have connections to. You can see a bunch of consultancy companies there. Not too unusual. But so, speaking again about users and identities and enumeration, with this type of information, we know the email address that's there, right? So we have their identity oftentimes. So, you can actually do some deeper digging and give it some more context with what years these guest relationships were active because almost nobody cleans up guests. They almost always just leave them out there and maybe they disable them or whatnot, but they almost always leave them there. So you can at least see when they are. The oldest one that I identified personally that I verified was like 2018. So that's a little ways to go. So, how does this matter, right, for attackers, right? If you're looking at these guest relationships, now all of a sudden, if you're trying to hit a hardened target, you might wanna say, hey, let's see what we can do around these peripherals. You know, can we compromise another tenant and see if we have any access? You know, it might be a fruitless effort, but it might be something. So I mean, this is providing a roadmap to allow attackers to identify their next steps. And this is pure user enumeration, right? Not a vulnerability. So, one of the last things I wanna say is that this is a US adversaries dream, right? You have nations that love to do data collection. Do you think that they're not doing something with this yet? Do you think that they're just letting this sit out there because it's not ethical to collect this? I mean, look at these different industries. All of America is tied up in this, right? State governments, federal corporations, and if they don't take this seriously, they're not gonna fix this. They're gonna let this sit. And this isn't just like a short-term investment. This is a long-term investment. Names are durable, right? How many times do most people change their name in their life? A couple times, maybe a few, but most people don't change their names very often. So once you make these lists, they're valid for a long time, right? They might switch organizations, but that person's name, you still have that. You can make permutations out of that and try those other places. So I mean, this isn't something that I think we should let. Is this something that we want? You know, is this how we want to have our stuff run? I think that we should maybe recommend politely that they take this a little more seriously. I mean, so we've demonstrated that's possible to get 24 million users out of Azure. We've demonstrated 100,000 users every 30 minutes. So twice a day, that's a huge number of requests. We're able to do that. We can monitor an entire company as big as Microsoft. We can select out users from there and monitor them exclusively if we wanted to on even finer rotation. Then we've shown that we can do guests enumeration, right, between different companies. This is all user enumeration. This isn't an exploit, at least not by Microsoft stance. It's, this is all just user enumeration. So I just want you to remember though, in closing that I am just the messenger here. I'm just showing you what the logical conclusion of this is, right? I'm not anybody special. I'm just some dude that, this is basically sysadmin 101, right? I made a SQL server. I stood up servers and I had to report back. I made a Python script. It's not hard stuff. And it only cost me about 5K, right? If you're a nation state or somebody who really wants to invest in this, you can do something much bigger than I did. This is just like a hobby that I didn't spare time to try to get Microsoft to fix this. And that is why I did this. I want Microsoft to fix this. I don't know how else to go about it. We've talked to Microsoft and they don't take it seriously as an issue. So at this point, I just wanted to share this with you. So at least we can all be on the same footing and know what's possible out there. So with that, some shout outs. Dr. Azur A.D. Tech Romancer, Carl Fawson, he's awesome. RootSecDev, Flagwick. And then everybody at Trust and Sec, of course. These are some links to the different tools. The last two will be out later today. So just keep an eye on that. Follow me on Twitter. And thank you so much.


Marcia Helen Suss, NDSU Extension Agent in McKinsey County. Today I'm at the McKinsey County Fairgrounds where we plant Junior Master Garden Program in our raised beds. We have had this program for about eight years and our raised beds weren't great for planting the gardens with the kids. Our beds are eight by four and they're filled with topsoil and each year we fill them with soil amendments to keep them nice and rich and they work great. Today we're going to show you how we plant in our raised beds. First off, when we work with our kids, we decide what we're going to plant where. We start with our vining plants that we will plant vertically. That would be things like peas, like cucumbers, and tomatoes which will plant in cages. Then we look at the plants that we will plant singly like peppers, like potatoes, things like that. Lastly, we look at the plants that will plant in rows so that would be things like radishes, onions, beans, lettuce, things like that. We decide with the kids what we want to plant where. Usually we plant the things that we want to plant vertically on the outer rows. Today we have three year master gardener and 4-H here with us, Darby, who's going to show us how she plants a few things in her garden. Today I'm going to show you how to plant peas.  They're going to have to be about half an inch apart and then cover them up. Next I'm going to show you how to plant onions. So you need to dig a hole that's like the perfect size for the onions so they can just go right in. And the only thing that you want to see on the onions is the very top, like that. Thank you Darby. Warfwood gardening in raised beds is sometimes called condensed gardening because you can plant a lot of vegetables in a small space. Once the kids have all their beds planted, we make maps of where everything is planted so that they have a history of what they planted where. We do not want to plant the same vegetables in the same spot every year. Also when the vegetables emerge then we know what is coming up, as well as we label all the rows too so that everything is labeled, of course. Okay so we planted three rows after the vegetables emerge. I'll line all the rows with soaker hoses which would be about 25 feet of hose. And after the vegetables emerge, guess what else emerges? The weeds. So we have to keep the weeds pulled just as much as you can and in time the vegetables take over and weeding is not a problem in the raised beds. So in summary, raised beds are great ways to plant for beginning gardeners to plant with kids. You get a lot of vegetables in a small amount of space. You have to decide what you're going to plant where, rotate your crops, and then make sure you keep after weeding so that it does not become a problem. Every year the raised beds are always a great fun and a highlight of my summer. So enjoy planting raised beds. Give it a try. I know you'll enjoy it. Thank you.


ॐ I am the King of India and I am here right outside the stadium. I don't know if you can feel it, but I can feel the zest in the air and then the dawn of the fans is so fabulous I'm going to take you right into the middle of that. ॐThe thing is, I'm more excited that India qualifies for this World Cup for the first time for FIFA. ॐ It is better that you are not against the success of the Indian National Team. ॐ So, today is the first day, just tell me, if we qualify for this, will you still come back to India again and again? ॐ Absolutely. We will come again to see that because it is the peak of India and we will be with India. ॐ ॐ ॐ ॐ ॐ ॐ ॐ ॐ ॐ ॐ ॐ ॐ ॐ ॐ ॐ ॐ


Hello. What are you doing? Looking at a cock. Dirty. Dirty, dirty. Hey, welcome back to our series of Corbin. I'm Rick. And if you're watching this, I'm going to do it for more juicy content. Thanks for the Patreon, so I'm just going to subscribe because I'm not like my name. Oh, my nipples are ready. Always need to prep the nipples. Yes.  Technically no. You're thinking about it. Yeah, technically no. I've had things that have been clamped on my nipples, but they weren't store-bought nipple clamps. Today we're doing a movie review. Very fitting opening for this film. Yeah, for this film. Perfect opening for the family-friendly. Sorry, everybody. Long awaited. There's going to be so many who saw the review and they're like, oh great, we started off with a cock. Then we, so sorry. The long awaited review for us because remember, we had been Teach the Kids. Known about this film very early on, I think. I think we reacted this extremely early on in the channel because we were exploring American, I think we were reacting to the trailer, all that kind of stuff. And we just had yet to get to it, but it's a 2017 film, Secret Superstar. Not to be confused with Superstar Rosnick, huh? When he's hiding. Not in this film. When he's hiding, he's Secret Superstar. Oh, well, yeah. If you play hide and seek with him, he becomes the Secret Superstar. Directed by Advait Chandan, who is also the director of Laos and Chhada. Yeah. As well. The movie that everybody's watching and now realizing was great. He also wrote the screenplay for this. It was produced by Amir Khan. Yes. And he also has a supporting role. He's not the star of this film. No, he's the jockstrap of the show. Yeah, jockstrap of the show. Yeah, he's the supporter. And it's starring Zehra Waseem, whom we've seen in Dangle, Skies Pink, and multiple other things. Really talented actors. Well, those three. Really talented actors. And also Mira. Yeah, Mihir Vej plays Mom, right? Yeah, who we've seen in a few things as well. And then Raj Arjun as well, who we've also seen in quite a few things. But obviously it's gonna be 100% in one of you. It's came out in 2017. Most everybody, it's actually, I think one of the highest grossing in terms of how much it made in comparison to how much it was. I think it was one of the I did really, really well. Yeah, really well. I don't know specific. I don't follow box offices. You guys know, I just, people told me that. So it'll be 100% as far as we've ever watched it. We saw it on Netflix? Was it Netflix? It was Netflix. Was it Netflix? It absolutely was. But so if you haven't watched it, go watch it. Come back. Rick, your initial thoughts, please. Well, for those of you keeping score at home, this is our 35th Hindi film of 2022. Absolutely nobody. Our 164th Hindi film all time. Wow, almost at 200. Our 60th film of 2022, our 267th film of all time. 267? 267. Okay. We're close to 300. Okay, yeah. So, what did you think I would think of this movie? I thought you'd like it. Did you not? Yeah, this is, I'm, I just, when it ended, I had been watching it and Drani was doing her own thing and I said to her, I just, I'm a sap for everything that Amir Khan touches that is family friendly and has a nice message. And there's a lot of things I'll talk about in regard to the details of what I liked and what I didn't like. Cause there were some things that I didn't like, of course. But yeah, this is overall, I have way more that I like about this movie than I don't like. I really, really liked it. Yeah, it's, did you cry? No, I didn't cry. No, I didn't cry. At the end, okay. So I saw, some people said they were, I saw Jimmy's review and he apparently watched on a train. He said if he wasn't on a train, he would have wept. Oh, I said stop with the toxic masculinity, Jimmy. Seriously, God, full toxic. If I had just been in the throes of full absorption, yes, if I had been alone, which I often, oftentimes watch movies, in the throes of passion. That explains a lot. It explains some of the ones I don't like. Because, comparison anyway. Because I got a couple of phone calls and texts that I had to pause it that pertained to stuff going on with my dad. That pulled me out of what would have been the normal flow. If I had been in it from start to end uninterrupted, I probably would have gotten a little misty eyed. I wouldn't have been sobbing. It wouldn't have been the full cry. But it did and there were some moments in it that were just too adorable to not love. Yeah, I loved this movie. I really did. Me and my wife watched it. And it was one of those films, and not like this is like, I'm not saying like a Gumbelange night. So I think it's just a masterpiece. No, it's not that kind of film. But it wasn't trying to be that film either. No, it doesn't want to be that kind of film. It was trying to give you a good message in a commercial family friendly film. Just like Mimi does, just like Jaišta. Joe, whatever that Ran Veer one that I saw was that everyone hated that we loved. I know that we loved. Your guides are weird. I love the list you did on Twitter. I know, man. People are so weird to me. It makes no sense.  Well, not the whole time. Well, yeah, they're... Not the whole time. Not the whole time. But like even though there are some moments in it that they did really well, and I think the protagonist in this did really, really well in his job, or the antagonist, sorry. I know who you meant. And there were some really moments in this that were intense and awful, and you got wrenching, right? But it's still kind of like Mimi. It always went back to that happy. You knew it was gonna end well. Yes. Which I love. Rom-Coms you know are always usually gonna end well. They do. And this is one of my favorite things about a lot of Amer-Con films. And there's a place for it. To me, there's two things that cinema does in its storytelling capacity because movies are storytelling and there's always a moral to the story. One of the things that cinema does is hold up a mirror to the world and shows you how it is, or was, right? Another way is to show you how we wish it could be or how it ought to be. And Amer-Con way more than not shows you the things about the best in us and what we really wished the best of us could be. And I don't know how you can't like that. It's very easy for me to be forgiving of some of the other things that aren't expressly artistic because the goal in this kind of a film isn't to do that. It's kind of the bonus you get. It's like having a really nice dessert and then discovering the whipped cream was homemade. It's like the dessert was great, but oh my goodness, in addition to it. And I felt especially our young lady carrying the film, I thought she did an exceptional job. She's done an exception on everything we've seen. I mean the three films, right, that she's been in and I don't know what she's doing now because I don't see anything from 2019 on. I did a little homework. She's referred to, if you look her up, it says former actress. Oh, okay. Studying on school for now? No, no, no, she got a lot of hate. What? Yeah, she got a lot of hate and it has to do with religious things. If for some, in some way, shape or form, if this bullying children is fun, if this cut to Zara in some way, shape or form, if you still love acting because you're gifted and Oh, very gifted.  Oh, very. And have been since a really young age. Please don't not pursue it. If it's for other reasons and she's at peace with that, totally cool. Yeah. But if she stopped doing it because of all of the hate and things of that nature, that's a loss for the industry because she's a very talented. Very talented. Very talented actress. That'd be very sad if she hung it up for good. Me too. Because I think, it's hard to find good child actors, honestly. She has so many natural instincts that are, she had some difficult things to do in this film. Like the scene where the dad is about to beat the mom and he tells the kids to go into the other room. Her little brother did great too. Yeah. And she goes in there and all you hear, you don't see obviously the dad beating the mom.  And she has a fantastic, I don't know how old she is. It's not a surprise that the casting was so good because one of the casting directors is Abhishek Banerjee. But the three main kids, her, her brother. And the love interest. Yes. Yeah, he was adorable. He was wonderful. Yeah, he was great. I didn't see false moments for any of them. And granted, this wasn't the kind of depth you get for child actors in like the Florida project. But if she doesn't, if they don't bring you believability in those moments, it really ruins the power of the underlying story that's the most important, which is the struggle that this family is going through with another solid actor, man. I immediately disliked the dad. Never stopped disliking the dad. And it's a credit to how well- Raj Arjun? Raj Arjun played him. He did an exceptional job. He did. And I recognized him immediately. We've seen him in multiple things. Shamshera and a couple other things. He's a very, very good actor. He's a very good actor. He played everything real. Yeah. And he assumed as the character, this is how I do things.  I'm in charge.  I'm in charge. You should submit to that. He doesn't think he's the villain in this. He thinks he's right. He does exactly. I'd love- Well, real abuse of people do. I'd love to have the conversation with him about it because of my guess based on the final product of his work is that he's very much of the school of a trained actor who understands that you don't judge the character and that you find, that's one of my acting coach, Howard Fine, who, you know, I'm starting back with him next week. Oh, cool. In-person stuff. I'm so happy. But one of his things, which comes from the Uta Hagan School of Acting, is you really, you must find yourself. Don't ask what would the character and do in this situation. Ask what you would do. And find yourself, and especially in the negative characters, because too often when we think of ourselves, we think of ourselves as the hero all the time. And when we're, for example, in traffic and we cut somebody off for cutting us off, we assume we were the hero in that moment. I am.   That's right. So anyway, I just felt he all did a really good job. I wanna shout out the mom who put on a great performance. Another great performance. Me, is there your name for me? Yeah, and forgive mispronunciation. If it's not Meher or Veej, I'm gonna assume the correct pronunciations. She did a really good job. I loved the relationship that they built from the beginning with her and her daughter. I cared immediately about everybody.   No, that's not right. No. But like, she did what a lot of people do. It's probably especially in India with how the culture is there a lot of times and it looks like she couldn't read as well. So she's probably not at least fully educated or I don't know. Yeah, they're captive ignorant. Yes, yes. But her relationship with her daughter, you always were rooting for it and it was almost the daughter was kind of parenting her a little bit. Very much. And the mom didn't want to stay but she saw no other option because she was like, I need to care for my children and I can't be on the streets. Right. I mean, I guess I'll just, this is my lot in life to get beat up all the time. Which this is gonna seem like a weird segue but it's applicable. That whole current throughout the film which is clearly the heart of the film because at the very end it gives credit to moms and motherhood and to the struggle of women in general. That core story is at the heart of what we saw last night which was Don't Worry Darling. Please don't, it's another film. I know this is an American film but it is a film that has been kind of hurt at the box office because of gossip and BS when you're gonna miss out on a really well done film that has at its core that it does have to do with the struggles of women. And I felt that for a family, I told it to Andrani watching it. She's asked me how I was liking it and I said they've done a really good job of making a film that's accessible to family to as young as like probably nine or 10 depending on how you parent your kid but also introducing really uncomfortable subject matter that might be the very first time a child has to be introduced to it. Like mommy, why is the daddy hitting the mom and explain that this happens and you may have some friends whose mom and dad do that and you need to understand that that's not right and love them. One of my favorite moments as far as like all of the gushy-gushy when he asks her what her password is. That got you. Oh man, I made an audible. Aw. I liked the moment when the little brother tried to build the computer back. Yeah, that was really cute. There were several super sweet, super cute moments. Yeah, and then the whole obviously storyline of obviously the new age of the internet using the computer even though there's no way her audio would have been that good. That's, those are the forgivable things. There's so many things. I was not gonna judge a film like that. That audible being that, you know, and her first video going viral like it did and all the other stuff. There's a lot of stuff that does strain credulity for sure. Well, I thought that it for a second but then I was like, this might be a famous song from Bollywood and so that that would get you. It could be. And that could get you the clicks on top of the fact that she's wearing a burka. Absolutely, we could. It's not impossible. On top of the fact that she's wearing a burka and so then it'd be probably political and so then we've talked about in the news obviously that wasn't gonna judge this film like that. Obviously they weren't gonna tell the story of this kid who became an internet sensation but obviously couldn't and all that kind of stuff. And they did, I'm very thankful for a few things. They did justify the connection to the attorney who could help her with the divorce. They did justify the moment. I believed the climactic moment at the airport. I believed that the mom finally, just as we watched Zara's character, she goes from feeling waif-like and unable to defend for herself to like, I love the moment when she tells the man, that's my seat, that's my seat. Uncle, that's my seat that she had to fight for that and she's made an example for her mom. And that in a healthy mom-daughter relationship it goes both ways, especially when the daughter reaches the age where she's starting to become a young adult. If you're a good parent, I feel you also begin to learn from your kids. They don't just learn from you. Yeah, yeah. What do you think about America? I loved it. It was so ridiculous and I loved it. At first I was like, oh, whoa. Yeah, this is a lot. Yeah, it is a lot to stomach. But then it gets better, because it opens with obviously him and they're kind of impersonating American Idol and all that kind of stuff. It gets better. But then I realized he's clearly putting a character tour on of a bunch of different kind of produce. Yeah, he's blending everything and making a character tour exactly. It's like when people do, some people do drawings of people and it really looks like them and then there's the over-accentuated drawing. He was the over-accentuated drawing. Yeah. Which actually I thought was fun to see Amir Khan in this ridiculously over-the-top. Yeah. Just flat, call everybody Bebs. Bebs. Bebs. Super hits, Bebs. Super hit. And I watched, did you watch the number and the credits? Yeah. I had to. And I love it the very end of that when he goes, that was a super hit. If you don't agree, change your taste. Yeah, and I also, because for the longest time before I, I was kind of informed before as well, but for the longest, I thought this was an Amir Khan film. This is not an Amir Khan film. Right, I did too. Obviously he produced it, but and he's not, He's barely supporting. Yeah. This is not his vehicle. This is her vehicle and the mom and the mom. And the mom vehicle. Yep, 100%. And their story. Even her little friend is more supporting than Amir Khan. Which I like the fact that you know, I didn't know if it was gonna be, like come part of his story as well. Yeah. He was just supporting her story the whole time. The whole time. They didn't really go into his. Like he, Yeah. They didn't go into, is his ex-wife lying? Thankfully. Or is it him? Thankfully. Yeah.  Another credit to it. Which he probably is, that's what I assumed he was probably a garbage. Yeah, another credit to it is, as always, you know, there's no reason under the sun, except for the fact that the theaters need their intervals to make money. That's a business decision that's been going on for decades in cinema. I get it. This film does not need to be that long. But it didn't bother me. How long was it?  Oh, I didn't notice. That's the thing. It didn't bother me. Yeah, I thought the pacing was really good. The pacing was very good. It's just you really, you could trim it. And that would be one of the few critiques I have of it, if I was gonna say if there's anything I'd do to, you know. I don't think I would trim anything. I actually, You like it? I liked it. Cause like, I didn't even- It didn't bother me that it was that long. I didn't even notice that it was two and a half hours. Yeah. It was just, it was a happy, fun ride. And so I was just long for it. Where'd you get that Yankee mug? This is actually my dad's. I know, but do you bring it in? I didn't see you bring it in. No, I knew you were gonna make hot coffee. And so I brought this in to drink the hot coffee out. Anyways, go on. So, no, it never dragged for me. It's just still my preference. And it's, I know it's conditioning of what I grew up with. Two and a half hours for this type of film is long. The score was beautiful. Yeah. All the songs really, really nice. All the songs really, really nice. By our host, Amit Trivedi. I love the line when she was like, when she gets the email from Amir Khan, he's like, why couldn't it have been A.R. Ramon? Yeah, I did. I love that too. Yep. Just shoot me an email. Absolutely. And you was email. No, I did too. And what's important in a thing like this is to make sure that the songs that you claim are gonna be these super hits actually are. When he started making her do the sexy things. Like, oh no, don't do that. I love that scene. Don't do it. I love that he was fully, cause that's gonna be a hard thing to do to be talking to a young girl and like trying to make her to sell it as a sexy song. His character would do it. Oh yeah. But as a person, I would feel so disgusting doing that with my counterpart actress who's that age. Having to make those sounds with her. I would be like, this is so disgusting. But it was hysterically funny. And that too, why would that character who's clearly a prick listen to her in the moment? That strains credulity, but I didn't care at that point. I liked that. And the ballad, it's a very nice song. It's a really pretty song. Oh, the one that she turned it into. Yeah, that's why I like the fact that her song that she writes that goes viral. And then. Did she write it or she was at a Bollywood song? Or no, that she covers. Yeah, whatever it is, that song sounded good enough that I believed it would have gone viral as well as the ballad version of his song. It's a credit to the songwriting team of Ro-Hit and Amit. I didn't know if the ones that she was doing on YouTube were her songs or if. I don't remember. I assumed they were Bollywood songs that she was covering. And that's actually why she got the traction because if you put a song title, it's gonna pop up. If it's a popular Bollywood song, it's gonna come up on people's feeds. That was actually. And did you notice? What? Did you notice? What? She really plays the guitar and the notes. I saw it and I was like, Rick's gonna be happy. And the notes matched her fingers. I was like, Rick's gonna be happy about it. Because it doesn't matter if you can really play the instrument if the notes don't match the fingers and they matched very nicely. Thank you, director. And her, she clearly learned. She did, but it's also, it's in the hands of the director because you could, as is the case, like on the hunt, he knows how to play the piano. But did the notes match? Come on, revive it three years later. We need more. No, never. Yes. Never talk to me ever again. But yeah, overall, I really love this film. Me too. Cause I strained to put it, I don't know if I need to have to, I guess. Like if you're ranking Amir Khan's films. The rest of his films are him and the lead. Yeah. I don't include Dildak Nadoo cause he's just a voice of you. So that's not his film. It's not. It's still a very much it's an Amir Khan film. Yeah, kind of. But I don't include that like if I'm ranking his films. No, no, no. But I'm like, he is enough in this that I guess you would have to include it in his films. I would. But this would be, I mean, I don't know where specifically, but this is one that you just, I enjoyed fully. I gotta tell you, I have a really hard time ranking the films. Amir Khan's films. Yeah, because. The last, the last one we watched was your least favorite though, wasn't it? Yeah, I just didn't like that one where he was the soldier in Kashmir and I don't remember the name of it. Oh, Fana. Yeah, Fana. Yeah, Fana. Did not like that at all. Yeah. But the immediate ones of Three Idiots and PK and like stars and by, not by Shiromastani. Yeah, I'd have a hard. Rang de Basanti. I'd have a hard time. But this one would be one that would probably be one of the most easier watches of all of his. If I'm pointing people to the one that is the most elevated artistically, it's Rang de Basanti. Yeah. But if I'm talking about the ones that are stereotypically Amir Khan heart, which Lawl Singh Chhada is up there. Yeah, Lawl Singh Chhada is up there. Way up there for me. Obviously, you wouldn't do this one for like performance. You'd be like, okay, this is not his normal. He's putting on a shtick. Okay. No way. This is a great film if you had like, like if you had a family who wanted to know, is there a good Indian film that our family could watch together and we just enjoy and it would make us feel good? I would, this would be way at the top of my list. This is up there with like the Mimi's. Mom. Not mom, sorry. English, English. English, English. Yep. Of the world stuff that's just, you watch it, it's gonna have a good message, but it's gonna be, you're gonna be happy most of the time. Exactly. And get great performances, especially from the kids. And I guess this director likes that style of film because Lawl Singh Chhada. Yeah, like Stars on Earth, Lawl Singh Chhada. Well, he didn't direct like Stars on Earth. Oh, but it was part of it? He was just part of it. Okay. Cause I think like Stars was actually Amir Khan. Yeah, Amir Khan directed that one. But I think he had another one as well. Or maybe not. But yeah, I guess he likes nice films. Yep. Secret soups are, short film, Lawl Singh Chhada. He's probably been working on Lawl Singh Chhada for a long time. Probably. And hopefully it will be continuing its wave of popularity streaming because it deserves it. Anyways, let us know what you thought about the film.  Yeah, all it'll be about. It's fine. And what should be our next Amir, hard to believe, we have a lot more of Amir Khan's films to get to. Crazy. And would love to talk to you, sir. Yeah. Really would love to talk to you. Yeah, that'd be great. And to her again, if you wanna act, please do. Please keep going. Please.  So weird. Yeah.  Well, you know. What's wrong with you? Well. What's wrong with you? It's a problem with a lot of the world of the human being for eons, which is predominantly, well, if you read up about it, you'll discover a lot of it has to do with religious sentiments. I don't read.


Item number SCP-700 Object Class Safe Special Containment Procedures As SCP-700 is immobile, one security team is to be permanently placed at the site to prevent the entrance of civilians and unauthorized personnel. Following incident 701, this part of the containment procedure is no longer necessary. See incident log 701 for more details. Description SCP-700 is a large abandoned building similar to a factory in design, located in a rural area of U.S.A. It contains room floors, one being underground, each containing rooms. Many of these rooms are built in a way that does not appear to serve any specific purpose. Containing, for example, redundant machinery, sewage pipes that are not connected to any kind of disposal unit, and numerous power cords extended across the room in a manner similar to sash cords. Graffiti pictures designated SCP-702 can be observed inside SCP-700's rooms. They usually depict humanoid creatures, although animal figures were also observed. All instances of SCP-702 have shown the capacity to move around the walls of their rooms. Their frequency of movement varies, depending on what room SCP-702 is located. For example, rooms blocked with iron bars will turn SCP-702 mostly immobile, with only slight movements being made at seemingly random periods of time. It is currently unknown if the graffiti are sentient, but as their movement patterns are erratic and considering that all attempts at communicating with them have failed, it is assumed that they are not. Inside the central room of the underground floor is a circular hole designated SCP-701. It is 10 meters deep, and with a radius of 1.5 meters, an iron hatch is connected to the hole. There are 0.3 milliliter plastic syringes attached to the walls, all positioned 1 meter above the bottom of SCP-701. At the center of the hole's floor is a 1 by 1 meter grate that leads into an unlit chamber. Removing the syringes from the wall is possible. However, new syringes will grow to replace the lost ones a few moments after their removal. The syringes at the bottom of SCP-701 are constantly producing a yellow liquid, composed primarily of human data expunged, including menses. This mixture produces a fragrance deemed to be very attractive to all humans that come in contact with it. If SCP-701 is left open, the smell will spread through all rooms of the building. Upon smelling this fragrance for a small period of time, usually within minutes, subjects will begin to unconsciously move towards SCP-701. If not stopped, they will throw themselves down SCP-701. The fall will usually result in fractured bones, but all observed subjects seem to be unaware of the fact, concentrating solely on consuming the liquid dropped by the syringes. After a human falls inside SCP-701, the hatch will automatically close, and loud mechanical sounds will be heard coming from an undetermined place within SCP-700. At this point, opening SCP-701's hatch will reveal a solid concrete floor instead of the hole, and will also bring the sounds to a halt. Approximately minutes after closing, SCP-701 will reopen by itself, revealing the hole again, but the human inside will have disappeared. During the tests, all recording devices, like cameras, placed inside SCP-701, were destroyed by unknown means, as soon as the hatch closed. Hours after the disappearance of the subject, a new instance of SCP-702 will be found in one of SCP-700's rooms. SCP-700 came to the attention of the Foundation, after various reports of a man called Mr. R. selling living art, painted on concrete blocks. When confronted by Foundation personnel, Mr. R. attempted to flee, and injured one agent before killing himself, when it became clear that he could not escape. The coordinates for the location of the building were found at his house on R. The Foundation was able to find and destroy R. of the blocks that Mr. R. sold. The owners of the blocks were giving class B amnestics. Addendum 701 Staff working inside SCP-700 have reported sightings of a featureless humanoid figure, silently walking inside SCP-700's rooms immediately after a human vanishes inside SCP-701. This entity, designated SCP-703, disappears when researchers try to make physical contact with it, and it does not respond when communication is attempted. Thus far, SCP-703 has proved to be harmless. Any changes in SCP-703's behavior are to be reported immediately. Addendum 702 Recently, researchers and D-Class personnel that observed pictures of SCP-702 claimed to have momentarily seen the graffiti in some of them moving. Further tests have confirmed that SCP-702 depicted in photographs will appear to move only to subjects with a previous history of data expunged. What causes this phenomenon is currently unknown. Incident log 701 on Dr. R. R. brought four D-Class personnel to SCP-700 with the intention of discovering the nature of the chamber below SCP-701. To achieve this, D-9462 was provided with a crowbar and was instructed to use it to remove the grate located at the bottom of SCP-701. When D-9462 struck SCP-701's grate with the crowbar, a loud shriek could be heard coming from all rooms of the building. SCP-701's hatch closed immediately after the shriek ceased. Since the incident, opening the hatch will only reveal a solid concrete floor. As of... SCP-701 did not reappear. Manifestations of SCP-703 have also stopped occurring. As a result, SCP-700 was reclassified as safe. Lesson complete. If you missed the previous orientation, go watch SCP-699 Mystery Box right now. Or for the complete course, watch this playlist.


Monday morning at the entrance to the ports of Auckland, truck drivers found they were refused entry by protesters following the sacking of 300 port workers last week. Are you still stopping members of the public trying to go around their lawful business and getting into the port? No, we didn't stop members of the public.  They were letting them through. They were letting through anybody that was going through, except other union members. Well, I'm sorry, you've got no right to do that. You've got no right to do that in a free country. You're allowed to protest in this country. You're not allowed to stop other people going around their lawful business. Helen Kelly, that's Billy Takas. No, that was a lawful packet and you are allowed to protest.


Forum – Start discussions Being able to discuss our learning with others helps us to progress, and Moodle offers several different types of discussion forums for you as a teacher to enable your learners to do exactly that. To add a forum, click the Turn editing on link from the gear menu top right, then in the section you'd like to add the forum, click Add an activity or resource. We can add several forums of several different types, we don't only have to choose one. Clicking Add an activity or resource brings up the activity chooser. Forum is an activity because students interact with it on the Moodle course, and we can add a forum by clicking the button once, and then clicking Add at the bottom, or by clicking the button twice. There are a lot of settings for the forum, but we only really need to give it a name, a description, and then to save it. The name will be what the learners see on the course, and the description, if you wish, may be displayed by ticking the display description on course page box. We then choose the type of forum we want. The default is a standard forum which allows anyone to click a button to add a new discussion topic. However, if you click the drop-down box there are other types as well. For instance, a single simple discussion allows for the teacher to start a topic and all the learners can do is respond to that particular topic. If you want to know what the other forum types are, then clicking the question mark you see the help and you can find out more. There are other settings which might be worth exploring. For example, you can decide the number and size of attachments that you wish to allow your learners to attach, and you can set a word count which learners will see when they add a forum post. Another important element is subscription. Do you want your learners to be automatically subscribed to the forum, to automatically receive notification of replies, or do you want them to be able to choose? Discussion locking allows you to close a forum if no one has replied after a certain time. To get started on our forum now, we just need to scroll down and save and return to course. As a teacher, if we go into the forum and add a new discussion topic, we can do something students cannot do, and that is make a forum post sticky by pinning it to the top of the thread. If we click that option now and post to the forum, you can see what it looks like. Finally, it's useful to learn a little more about forum subscriptions. Here is a course discussion forum on a different Moodle site with a different theme. Learners can choose whether to subscribe to the forum or not, but they can also choose whether to subscribe to individual discussion threads or not, and therefore get notifications of any replies. Our participant here is already subscribed to the top discussions, as shown by the envelope, but she's not subscribed to the bottom discussion. She can subscribe either by clicking the icon, or when she goes into the discussion, she can subscribe from the link at the top, and she can also set her notification preferences when replying to the discussion. If the site administrator has enabled it, she can also reply to the forum posts by email, but this is a setting that is disabled by default.


So, you want to get your animations from Maya to Unity 3D but you have no idea how. Not a problem. In the next 30 seconds you will know everything you need to get your beautiful animations into the world of game design. Alright, let's do this.  Then turn off all selection types except for joint and drag select all the joints. Then go to file, export selection, name your file. At the bottom under files of type select fbx export, choose the location you want to export probably your Unity asset folder. Under file type specific options select animation and bake animation and tell it from what frame to start and what frame to end. And export selection, you're done. And now if you go to Unity and click on your file under animations you can see that your character has survived the trip with all of her animations intact and ready to go. If your character has texture maps make sure you drag those into the assets folder too. You might have to create materials for those textures and then drag those materials onto your model but you'll do that in Unity not Blender. Hope that helps. Thank you so much for watching. If you enjoyed this video please don't forget to like and subscribe. As always hope you have a fantastic day and I'll see you around.


From London, England, it's theCUBE. Covering Discover 2016 London. Brought to you by Hewlett Packard Enterprise. Now, here's your host, Dave Vellante and Paul Gillin. Come back to Excel, London, everybody. This is theCUBE. We're accelerating the information flow with a worldwide leader in live tech coverage and Paul Gillin and I are here covering HPE Discover 2016, wall to wall. The always articulate and interesting Flynn Malloy is here. He's the vice president of services marketing at Hewlett Packard Enterprise. Great to see you again, my friend. Great to see you. Thanks for coming on. So, I want to start you off with a comment that Antonio made to one of my questions. I said, well, it's interesting to see the reorganization and the new focus and really your pure play infrastructure company. And he said, oh no. And I said, I know where you're going. Services. Absolutely right. And he said, it's a huge part of our strategy. So we don't see ourselves as a pure play infrastructure company because of services. Well, very much so. I think for the last few years, we've basically approached our largest customers as with the run conversation. We've got the enterprise services business, which is a really strong, very excellent business for our customers, outsourcing, applications business. And with the announcement last year of the spin out of ES with CSC, that really changes our profile in the market. And so we've always been a services company, but now as we move ES out of the company, this is an opportunity for us to approach our customers with an advise and transform message. Very different than a run message. So what's happened? Since you made that announcement in the summer, right? July? Yeah, June of last year, yeah. June of last year. So how did that conversation change? Well, so, as we say, for the last five, seven years when after HP acquired EDS and became our enterprise services business, this was the tip of our spear. And so as we approached our largest customers, the conversation was, let's take over your IT, let's outsource your business. And a lot of specialty applications business and a lot of specialty ways of doing IT that in an outsourcing business were better economics for those customers. And that's a run conversation. And those were the largest customers we had. And that was the way, from a services perspective, we approached the market. And the outsourcing business and the market has changed over the years, it is, we won't call it a niche business, but it is a very important business for some industries. Public is very exciting. But the combination of ES and CSC is very exciting for that business and for those customers. And as that separates from Pula Packard, in a way that frees the rest of the company to approach with a different mindset. So this is where we go in instead of a, let's talk about running your IT for you. Now let's talk about how you can transform your IT. We're bringing forward, of course, our great infrastructure capabilities and technology, but it's about digital transformation. It's about how can we help you get where you want to go? And we believe in HB, and we've said it before, that we believe hybrid IT wins. We believe that everything computes from core to edge. We believe everything's going to be software defined, push button simple and instant on. And these beliefs are really how we built our advice, consulting and services business, with what's staying with Pula Packard Enterprise. Digital transformation, probably the biggest buzzword of 2016. What are you doing differently? How are you defining this differently to be distinctive? Well, I think it all starts with what, why is digital transformation important? That is a buzzword. But go to what the customers, what our customers want to do for their customers. So what can the modern technology do for customers today? So let's take for example, Meg talked about yesterday, customers want to digitally transform their customers experience, right? So for example, Levi Stadium, that's something that Meg touched on yesterday. Ordering popcorn from your seat in the stadium is an exciting thing. Being able to see how long the queue is for the bathroom, while sitting in your seat in the stadium, that is a new experience for those customers, right? That drives revenue streams, more popcorn from your seat in the stadium, it's a better customer experience. The venue of Levi Stadium, that's what they want to do for their customers. So that is a digital transformation. Not to be difficult, but that strikes me as an incremental improvement. There's nothing transformative about seeing how long the restroom lines are. Tell me why that is. I totally disagree. I think that getting up out of your seat, walking over and ordering food when you can get it right from your seat, I think, and that's just one example, think about all the rest of the connectivity that you get from watching all of the live streams, from having a better IT experience in the venue. You can live stream, you can Google, you can Facebook, you can order your food from your seat. Yeah, you can see the bathroom. The attendance is declining, and they have to do something. But I'll give you a perspective of that. Maybe, but that is just an example. Just to say, that is an example of improving and changing your customer's digital experience with your company. There's like, every industry can come up with an example of how digitization and digital transformation can change the customer's experience. But Jeff Frick had the CIO of the 49ers on, I'll give you a little insight here. What he said is, and this is right after Jerry Jones built that big stadium with the big screen TV, and they were building Levi's, and he said, we're not going to take a similar approach because that big screen TV that Jerry Jones just built is going to be obsolete in two years. Rather, what we're going to do is we're going to wire Levi's stadium, and we're going to send video to this device. There you go. So we're never going to be out of there. Or two or three devices. Yeah, so that. Now that you see a football team that people want to come out and see. Yeah, well, I mean, look it. A lot of businesses would love to have that kind of attendance. Okay, so that's just one though. So changing how your customers do business with you, creating new revenue streams, finding new markets from technology. I think those are other ways that a digital transformation, there's lots of those examples from Uber to others, finding new markets, and then don't forget the importance of digitizing the core business processes. That's a huge way to transform, whether it's better ways to move bags around the airport or not. Like that is a big, all of those things represent digital transformations that customers look at and say, I want one of those. I want to go do that. Which begs the question, it's a good point. Is digital, what are customers asking for now? Are they looking at digital transformation as being operational efficiency, cost reduction, or are they looking at it as, you know, the Uberization, disruption, all the big picture stuff? Where are they really focused right now? Well, I think it depends on the industry, it depends on the customer.  So a lot of the hybrid IT conversations are around, you know, I need to improve my core operations. A lot of the edge conversations, it's not a core operations conversation. That's a Uberization. That's a, you know, I can see my competitors going faster than me. And, you know, they're using IT to do it. I want to do that too. You know, I think big data is a similar thing. When you think of the big data opportunity, you know, that's not about improving your core operations. The big data opportunities are about getting ahead of your competitors, digitally transforming, getting new information, new insights, you know, sharing that with your customers. So it depends, I think, on what you're trying to do. You know, another really hot area, which I think also is not around core processes, but is around new markets, you know, is around speeding ahead of your competitors is, you know, one of the important areas that we're spending a lot of time having conversations in around, you know, workload and application migration and modernization.  This idea of democratization of dev ops, right? Where before dev ops is a sandbox that central IT owns and plays, right? Well now, you know, with you bringing in that, you know, all the different business groups want to play. You want to put out, you know, cloud native apps. They want the open APIs in order to play in their own sandbox. And so being able to take dev ops out of central IT and, you know, democratize it, you know, allowing other business units or even branches in a campus branch environment to have their own sandboxes to play in, you know, that's a really exciting area. And you do that with hybrid IT infrastructure. You do that with, you know, building for cloud native, you know, being able to do both, manage both across the environment, build a dev ops environment that everybody can play in. That's a really exciting area. That's one of the areas that we're investing in. And again, that's not about improving your core operations. That's about, well, gosh, if we could make a dev sandbox available to everyone out there and all the business groups, well, they could go faster time to market, right? They could put that out there and grab that cloud native thing they want to do, make the changes and put it out to their customers. Everything speeds up. So that's something, that's an example of digital transformation changing how they're doing business, right? So four or five years ago, we had Scott Weller on and he's the first one that sort of said to us, look, we are moving beyond break fix and we're moving beyond pure product oriented services. Absolutely. And then you guys came up with data center care and we've seen flexible capacity. We've heard a lot of buzz at this zero. So what we're looking for in the context of digital transformation here is those kind of IOT services that next generation that's going to bring IT and OT together. You've got a Ruba, I always use the analogy, you know, why not instrument the windmill before I instrument that I want to connect it. And so I can avoid truck rolls, right? Okay, so you've got that piece in play. We're excited to see, and I know it's early days, sets of services that really drive that IT and OT transformation. I totally agree. Talking about DevOps. When can we expect something like that? I mean, it's, again, it's early days. Is it a year out, two years out, five years out? What should we expect? Well, no, I think you're going to hear a lot from us this year on that subject.  And intelligent edge is not just the sensors in big data. The intelligent edge is moving compute out to the edge, is bringing the edge, you know, into the rest of your environment in a way that has never happened before. And so we think that, you know, we've got a lot of big brains in our consulting business today around how to do that and compute at the edge, you know, which is, again, not exactly the same thing as I think the IoT conversation that's going on today. It's taking IoT and bringing that more into the IT side. So as you say, you know, the operations in IT together, we've got a lot of methodologies, a lot of thinking around that. And I think we're going to be talking more and more about our practice around that in 2017. Okay, another question. So what's always been missing to me anyway in the HP ecosystem is the big SIs, Accenture, E&Y, PWC, Deloitte, you know, you go to places like Oracle Open World, those guys are driving so much business. How has the conversation with those organizations changed since you announced the sort of EDS spin merge? Well, it's a great question. And, you know, some of the first phone calls we got, you know, once we made that announcement, we're from, you know, our big SI partners who are very excited about doing more business. You know, a lot of those guys look at HP as really being technology leaders. And we are, you know, when it comes to the bottom of the stack, while we'll work with anybody's stuff, we're not agnostic. We believe we've got the best bottom of the stack in the industry. We're inventing the future of software to find, you know, we're passionate about that.  Every month, you're getting different, exciting top stack.  And you know, we're not in the business of teaching banks to be better banks, but we will teach banks how to be better banks with IT.  And a real strong technology powerhouse and we're having a lot of conversations about getting deeper into some of those bank conversations, for example, but with, you know, our bottom stack and our understanding.  Well, they're still partners. They're not, we're not jetticing them per se, but... Okay, but you don't own them anymore. Actually, you do kind of own them. We do. And your shareholders own them. They're our best partners in the industry. You're right, there's nuance to these spin merges and they're quite an interesting vehicle. But nonetheless, it's different, right? It's not like they're going to be a fundamental part of your marketing message and you're not going to be marketing those brands nearly as much as you had before. They're going to be part of the partner ecosystem. My point is from a services TAM standpoint, it sharpens your focus, which is a good thing, but I would think whomever is the head of services is going to be thinking, all right, well, I could seep into that business. You've got a swim lanes conversation that you have to have with those partner organizations. My question is, are you a product company or are you a services company? We're an IT company and yeah, we're a services led company. Antonio will be a first to say, if you want to digitally transform, all due respect to the amazing technology that's coming out of labs in our R&D, if you want to, as a customer, if you want to get where you want to go and you need to digitally transform to do it in all the ways we talked about, that's more than buying a server. You need to go through a process. It starts with, let's understand what your outcomes are, what do you want to do? Let's take a look at the management of change. What are all the processes that need to change inside of your company? MOC, management of change, big part of our secret sauce of our consulting business, well, we'll sit down and we've helped 30 other companies change in the exact same way. Here's our learnings. Here's the blueprints for how to go from where you are to where you need to go. And then includes management of change and includes all these other elements. And as you, we put that blueprint out there, we will take you on the journey from where you are here to where you go and plug in the best technology in the industry in the process. But that's a journey and that is a services led journey. As Antonio will say, that's the company that we are and that we will be in the future. The weakness of systems companies being in the services business has always been that fundamentally, you know, you're there to try to sell your hardware. Right. How do you get around that? Or maybe you don't, maybe you are there to try to sell your hardware. Well, you know, I think, if you asked me that question five years ago, that was a touchy thing. I think a lot of the big customers would be like, well, you know, we want to have a conversation with you and you're brilliant consultants, but you guys just want to move your technology, right? I think that you are not technology agnostic five, six years ago was a topic that came up a lot in our big pursuits.  We've got a lot of HP, but because you're not product agnostic, that used to be an issue. I think that if you were to sit on, you know, as a fly on the wall in our last, you know, 50 big services pursuits in the company, not the ES side, I think you'll see that that is not an issue that it used to be. What people are more interested in, what customers are more interested in now is not the bottom of the stack. Are you agnostic? Are you not? I have my own preferences. It's all top stack. You know, it's what are the applications? This is my baby. These are the things that I want. You know, that top stack agnostic is, you know, we think a much more powerful differentiator and a reason to choose us than bottom of the stack. Most customers don't, if you're delivering that fluid infrastructure, I don't care if it's all HP, you know, the bottom of the stack, make it look better. That's fine. I don't have preferences there. What if it's all Amazon? Like GE says they're moving large, most of their organization to Amazon. Is that going to be your sweet spot as well? Well, you know, I think as we said before, we believe hybrid IT wins. We don't believe moving everything to Amazon or moving everything to public. We don't think that that's where the end solution is. I think what you're seeing in the industry with all of the tool sets that are coming out, replicating what you find in pure public cloud. I think what you're seeing in the industry is the price points, the tool sets, the efficiency is starting to get, you know, what public cloud used to have. It's starting to be replicated in the on-prem environment and more and more and more and more. This cost points are converging. And if you take that totally out, if you take the efficiency, the tool sets, the cost points, totally out of the conversation, where do you want to land your workload? That is the question. And if all of those other things being equal, they're not going to put it all out over there. We don't believe that's the answer. I don't think you guys do either. Well, no, and IoT is the other reason because we've, you know, our analysis clearly shows that if you're going to put stuff at the edge, you can't go IoT all in the cloud. It's just way too expensive. You're moving too much data. Absolutely. And it's just not going to be real time enough. And you're right. Our data is about two thirds going to be on-prem, about a third in the cloud. Obviously the public cloud is where it's growing very rapidly. Oh, there's some great innovation. Everybody wants to take advantage of that innovation. We encourage our customers. Absolutely. That's where so much innovation is coming from. But your data, whether it's your regulations, your data, your crown jewels, you know, there's a hundred things that customers, if given the choice, that they're going to put it here. They're not going to put it there. Well, the interesting thing that's jump ball there is the other part of our analysis we show about $200 billion in IT labor that's today doing a bunch of, you know, provisioning of LUNs and servers going away. Absolutely. And that creates some really interesting opportunities for digital transformation, how to apply those resources, and it frees up budget. I totally agree. That's what's exciting for your business, I think. Well, and I think, you know, going back to the technology, another really important why people choose us and why they're going to continue to choose us is that technology insight.  You know, the puck is going in different directions and a lot of why customers are choosing us and will choose us is related to that innovation that's coming. And so I think, you know, that is going to continue to change. The dynamic on how all of that, you know, what goes there, what goes here, how you can use it, you know, how you take labor out of the equation, how do you build out software defined, you know, push button simple, I can do it in my pajamas at home data center. You know, the more you can get there, the more people are going to have the, they can choose where they want to land their workloads. And you're, and that's why, with that technology moving, if everything stayed the same now, you could make the argument that there's a lot of public cloud out there, but everything's not standing the same. You know, as software defined moves, as it changes, as all those price points converge, it really will be where do you want to land your workload? Everything's going to be equal and you can take your choice. Well, services, exciting business, a lot of energy. They put in an executive with energy in charge of the marketing. Flynn, thanks so much for coming to theCUBE. It was always a pleasure to see you. My pleasure, guys. I look forward to it. Thanks for coming out. Keep it right there, but we'll be back with our next guest. It's theCUBE, we're live from London. HPE Discover, right back.


Welcome to the Argos assembly guide for adult cycles equipped with v-brakes. This video guides you through the basic steps in assembling your Argos cycle. For this cycle, we recommend allowing 60 minutes for completion. This cycle has been rated a level 3 difficulty. Some help may be required. There may be some slight variations between the cycle assembled here and the cycle you have. This is okay as the procedure is the same. Remember to stay safe and legal with lights, cycle helmet, lock and many more accessories available at Argos now. Unboxing the cycle. Remove the seat and accessories from the box. Take extra care when lifting. When ready, remove the cycle from the box. Help may be required. Start removing the protective packaging. Use scissors to cut the cable ties where necessary. Open the kit box or bag containing the pedals, tools and all the accessories required to assemble the cycle. Attaching the handlebars. When attaching the handlebars, first check the quill nut is loose, which is located at the bottom of the handlebar stem. If not, use the Allen key provided to loosen the quill bolt by turning it anti-clockwise. Make sure the gear and brake cables are not twisted around the frame. Make sure that the front forks are facing the correct way by ensuring the bridge is facing forwards. Check that the front forks, frame and handlebars are correctly aligned before inserting the handlebars. When the handlebars have been inserted, remember to check that they do not exceed the maximum height mark. Finally, tighten the quill bolt to secure the handlebars in place. Attaching the rear reflector. Some rear reflectors come fitted already. If yours does not, you will have to attach it before fitting the saddle in place. Slide the reflector onto the saddle post and tighten the screw to secure it in place. Inserting the saddle. Align the saddle post with the bike frame. Insert the saddle post to the desired height. Remember to pay close attention to the minimum and maximum height marks. Tighten the seat clamp bolt with the Allen key provided to hold the saddle in place. Attaching the wheel. Located on the front forks, unclip the guide pipe noodle from the v-brake assembly. Fitting the front wheel is easier with the cycle upside down. Some assistance may be required. Firstly, remove the axle protector caps by pulling them off, not turning them. This will prevent the wheel nut from getting stuck in the cap. When ready, insert the wheel so the axle is located at the base of the forks. Now that the wheel is in place, move the retention washer to the base of the forks and tighten the outer wheel nut with the spanner provided. To finish attaching the wheel, re-attach the guide pipe noodle and rotate the bike upright. Attaching the pedals. Firstly, unwrap the pedals. Note the left and right markings. The right hand pedal always attaches to the side with the chain. Screw the right pedal clockwise and tighten with the spanner. When fitting the left hand pedal, remember to screw anti-clockwise. Attaching the bell and front reflector. The bell and front reflector may also need attaching to the cycle. Starting with the front reflector, loosen the screw and attach to the handlebars. Once attached, tighten the screw to keep the reflector in place. Follow this same procedure for attaching the bell but place on the left near the hand group for comfortable operation. Inflating the tyres. Use a pump to inflate the tyres. Check the tyres are inflated to the correct pressure. The recommended pressure will be located on the wall of the tyre. Pre-ride checks. Before riding your new cycle for the first time, let's do some pre-ride checks. Check the saddle is secure by twisting it left and right. Spin the wheel to make sure there's no side to side movement. Make sure there's no excess play in the wheel hubs by moving the wheel left to right. Check the pedals are fully secure using the spanner provided. Check the brakes are operating correctly. Make sure the handlebars are tight and are turning with the wheel. Assembly complete. Congratulations! You now know the correct procedure to assemble your new cycle. Remember to take extra care on your first ride.