What is up, you guys? Welcome back to another one. If you're new to the channel, I'm Bill Pony. I do new car truck SUV reviews on YouTube. And today we are in the new 2021 Mazda CX-9 courtesy of Jack T Mbalvo Mazda in York PA. For more information on their inventory, please feel free to check out the link in the description box below. And so this is Mazda's largest SUV. Three rows do come standard on this CX-9. So I wanted to check this one out today, known for great reliability as well. You guys can check out consumer reports for that. And there's actually a couple of nice changes for the 2021 CX-9 as well. So having said all of that, what do you guys say? Let's just go ahead and jump right into it. And as always, let's start with pricing. It's so as you can imagine, there are several different trim levels for the 2021 CX-9. First one being the sport, starting at $33,960. Touring for $35,750. Carbon edition, which is a new trim level for the 2021 CX-9 starting at $41,080. Grand Touring for $41,940. And lastly, the signature starting at $46,605. And by the way, that was all pricing for the front wheel drive configuration. If you wanted to add all wheel drive to any of those trim levels, simply add $1,900 to any of those prices. And so, but regardless of trim level that you go with, the power plant on the CX-9 is going to be the same. Powering this beast is a 2.5 liter turbocharged inline four cylinder, putting out 250 horsepower at 5,000 RPM, 320 pound-feet of torque available at 2,500 RPM. Power set to front wheels or all wheels, so a six-speed automatic. And I will say paddle shifters are available on this one. If you wanted to go that route, red line comes in at 6,300 RPM, zero to 60 times, 7.2 seconds. With MBG numbers coming in at 22 in the city, 28 highway for the front wheel drive, 20 in the city, 26 on the highway for the all-wheel drive. Premium fuel is recommended for those increased power numbers I've rambled off to you there. But regular fuel is okay. However, you will see pretty substantial decreases in those power numbers if you were to fill this one up with regular unlit of fuel. But so then before we do any kind of acceleration test here in this CX-9, I did want to mention there is one drive mode that is the sport drive mode. That switch is located just to the left of the shifter. And so when you press that up, it does give you sport driving mode adjusting things like the throttle response and the shift point. So definitely going to be useful for merging onto the highway if you wanted to hit it then or really more acceleration at any given time. So that's always nice to have that kind of thing there. But having now said that, what do you guys say? I'm going to leave it in that sport driving mode that I currently just pointed in. And let's find a straightaway. Let's put this thing to the test and let's do a quick little acceleration test here in our CX-9. And let's see how quickly this one is going to get us up to speed. I wish you guys a little bit of a rolling start. But ready? Here we go. Nice slipping. That's good. It's all wheel drive. But yeah, that'll definitely do the trick. Definitely not going to have any issues emerging onto the highway. That was plenty of an acceleration for a three-row SUV. I'll put it that way. But to go along with that acceleration, as always, braking is equally important.  In the back, 12.8 inch solid rear discs. As far as that 60-0 stopping distance goes, it actually is going to come in at 123 feet, which is plenty respectable for a three-row SUV. A lot of them will come in in the upper 120, some of them even in the 130. So 123 is perfectly fine. As far as that braking feel goes, as we are now pulling up to a red light, it is perfectly fine. There's no brake pedal delay. It's not spongy or anything like that. So no issues for me when it comes to the braking feel in this one.  In the back, independent multi-link rear suspension, front and rear stabilizer bars, but the very best part of the CX-9 without a doubt, even comparing it to every other three-row SUV out there right now, is the steering feel. I will say I just got done reviewing the CX-5 as well. I would say the steering feel in the CX-9, the three-row SUV, as opposed to the two-row, is even better. The steering feel in this thing is weighted perfectly, definitely on the heavier side, and it points you in the direction that you want to go instantly. It's really for somebody who is looking for a little bit of fun, a little bit of driver enjoyment, at least when it comes to the steering and the handling in a three-row SUV. Because most three-row SUVs out there are going to give you very numb steering feels, kind of on the loosey-goosey side, and that really doesn't lend itself, of course, to a more enjoyable drive. But with the CX-9, it's 100% on point. I actually enjoy driving this three-row SUV. It's a blast. The steering feel is absolutely amazing. Anyways, touching on ride quality, that has been perfectly fine as well. Definitely no issues there. It's pretty much as expected for the CX-9. Cabin noise, that was another thing that surprised me. It's actually a lot better than I thought. A lot of times with other three-row SUVs, once you hit 50 miles per hour and up, you get a little bit of wind noise. That's really the speed of my head I always look for. Once you hit 50 miles per hour, sometimes that wind noise creeps into the cabin, and it can get a little bit annoying. But with the CX-9, I have hit 50, 60 miles per hour, and there was no wind noise whatsoever. So cabin noise is definitely on point. They have insulated this thing quite well. So there's definitely a plus as well in this thing. Then touching on visibility, I can see perfectly fine out the back with the exception of those third-row headrests. They are absolutely mammoth. So we'll say, if you don't have any third-row passengers, might as well just fold that third row down because those headrests are of course going to impede visibility quite substantially because they are massive. So I do have them up right now. So I do have to mention it. But anyways, other than that visibility is perfectly fine. I will say that. And to go along with that actually, rain-sensing windshield wipers do come standard on every single trim level of the CX-9. That's something Mazda tends to do. And when you're comparing that feature with other three-row SUVs, a lot of times there's rain-sensing windshield wipers only come in the upper trim levels of other manufacturers. But with Mazda, they put it on even the base trim level to sport. So absolutely love that. Essentially what that is, is when the CX-9 detects any kind of mist or rainfall, it is going to automatically turn on those windshield wipers. So it's just one less thing you got to worry about, kind of like automatic headlights basically. But also wanted to mention, along the lines of visibility, there is a head-up display that will come standard on the grand touring trim level and up projecting your speed, speed limit, and other safety information under your windshield. Help you better keep your eyes on the road so it's a little safety feature there for you as well. But that about rounds out the performance segment of this review, you guys. Let's now go ahead and take a look at the exterior of this beautiful 2021 Mazda CX-9. All right, so here she is, you guys. The new 2021 Mazda CX-9 finished in sole red crystal metallic with the candy cane in the background. That's right. It's around Christmas time. Anyway, so let's go ahead and start up front of the CX-9 here. First, I wanted to start by mentioning, when it comes to ground clearance, 8.8 inches is what that number is going to be. So a decent amount up there. Front grille is actually going to differ slightly dependent upon the trim level that you go with. For example, you will find chrome horizontal bars with the sport touring and grand touring. That's what you're looking at right now. Dark front grille with the carbon addition. Of course, that makes sense. Any unique silver front grille with the signature. And by the way, LED grille accent lighting also with the signature trim level. And that is definitely a very high end look. I've seen that before. It's pretty darn cool. But anyways, to the sides, LED headlights do come standard across the board. Even the sport trim level is going to get those LEDs. That's pretty nice. They do, of course, come with the automatic feature as well. Meaning when it starts to get dark at night, those headlights will turn on automatically for you there. LED daytime running lights also coming standard as well. LED fog lights down below. If you were to go with the carbon addition trim level and up and it is going to be optional on, let's say, the touring here that we do indeed have here today. But anyways, adaptive front lighting system. This is pretty cool. This is going to come with the carbon addition trim level and up. Essentially what that adaptive front lighting system does is when you're going around a bend at night, those headlights will swivel dependent upon the steering angle. So it's going to better help illuminate what is around that bend. So you're less likely to hit a deer or possum or really anything. So that is definitely a nice safety feature when you're driving at night there. Matte black front lip is going to come with the sport and touring. Again, you guys are looking at that right now and you will find some silver accenting down on that front lip. If you were to go with the carbon addition, then trim level and up. But now let's go ahead and make our way to the side of the CX-9 here. So I've climbed in the woods to bring this side shot to you guys here. But aluminum roof rails with satin chrome finish is going to come on the carbon addition trim level and up. Rear privacy glass, of course, coming standard across the board along with chrome windows surrounds as well. When it comes to the side mirrors, they are body colored power adjustable side mirrors for all trim levels. Also, LED integrated turd signals actually coming standard for all trim levels as well. That's one of those features where you usually see an upper trim levels of other manufacturers. But again, Mazda puts it across the board. I absolutely love that. Heated side mirrors also coming standard on all trim levels. Same deal there as well. And you will find automatic power folding side mirrors with the carbon addition trim level and up. And specific to that carbon addition, they will be gloss black side mirrors as opposed to body colored side mirrors that of course you're looking at right now.  So silver accenting on the side skirts then can be found on the carbon addition trim level and up. And then taking a look down at the wheel setup, 18 by 8 inch aluminum alloys coming with the sport and touring. That's what you guys are looking at right now. Then that gets bumped up for the carbon addition grand touring and signature to 20 by 8.5 inch aluminum alloys. So not only the size but the width as well is going to be a little bit more. So I did want to mention that all of them though wrapped in all season tires of course. But then let's now go ahead and make our way to the back of the CX-9 here. It's been now since we are around back of the CX-9 shark fin antenna with a body colored finish all the way on top there. Just below that rear spoiler with an integrated brake light. Just below that rear window wiper led tail lights. Once again coming standard across the board. Gotta love that signature badging coming with the signature trim level only as expected there. And just below it all dual exhaust outlets with chrome tips. So having said that I do believe you guys know what we have to do next as always here is that exhaust clip. It's open now since we are still around back when it comes to opening that rear lift gate. It is a power lift gate if you were to go with the touring trim level and a hands free power lift gate if you were to go with the carbon addition trim level and up. And so since we have the touring trim level few different ways to go ahead and open that rear lift gate. There actually is a button on the key fob itself that is one way there is also a button on the lift gate itself that is yet another way. And if you were sitting in the driver's seat there's actually a button by the driver's side left knee as well that is yet another way to go ahead and open that rear lift gate. But having said that once opened up it didn't open up quite as much as I thought it would. And so I've been even six feet tall and when I went in there to check it out a little bit when it came back out I basically swiped my head on the top of the lift gate. So it doesn't open up quite as much as I would have wanted it to. So I did want to mention that. But nonetheless once opened up cargo space comes in at 14.4 cubic feet behind that third row then behind the second row with the third row folded down 38.2 cubic feet and with all rows folded 71.2 cubic feet. So for a three row SUV quite honestly that isn't all that much unfortunately even my 2017 Hyundai Santa Fe it's a three row SUV that comes in at 80 cubic feet. And I know the Telluride, the Palisade, the Pilot, the Highlander they all come in ranging from basically 84 to 87 cubic feet with all rows folded it's a 71.2 and a three row SUV really isn't all that great if I'm being honest. But still I do like the fact that the CX-9 offers a third row. I will say that. But since we are in that cargo area though I do like that there is some in-floor storage back there. That was definitely quite nice. 12-volt power outlet back there as well. And there was some grocery hooks back there as well. I always love seeing that. A little bit of cargo lighting back there as well. So pretty much everything you would want back there besides having a little more space wouldn't have minded that. But anyway let's now go ahead and make our way to the third row legroom that is going to come in at 29.7 inches. So for comparison's sake my old four Mustang in the back seats came in at around the same thing 29 inches. So for reference I mean even six feet tall really not a whole lot of space whatsoever for adults. However you may be able to fit a small child back there if you wanted to. So I did want to mention that third row USB charging ports actually come standard for the carbon edition trim level enough that's also pretty cool one to mention that. But anyways make your way to the second row rear legroom there comes in at 39.4 inches. So again I'm even even six feet tall this is how much space I had in the second row plenty of space for me in that second row. So definitely find there two rear USB charging ports for the touring trim level and up gotta love that. Heated second row seats for the carbon edition trim level and up absolutely love that spoiler rear passengers a little bit. I know everyone's going to ask when it comes to a six seat configuration versus seven seat how does that all work. And so the way that works is that third row is always going to be two seats no matter what. But the middle row is either going to be three row seating or captain's chairs being two seats. So if you were to go with the sport trim level that is going to give you that center bench seating that is going to give you seven seats and that setup is going to be optional on the touring and grand touring trim level as well. But for the most part most terms are going to be the center captain's chairs being the six seating configuration and that's going to be the touring trim level the carbon edition the grand touring and the signature and of course that is what you guys are looking at right now as well. But so another thing I really liked on this one tri zone climate control comes standard on every single trim level meaning the rear passengers can set their own temperatures as well. So I found that pretty cool. Also rear window sunshades coming standard on the carbon edition trim level and up that's always a big plus especially when you have a new board coming in from the hospital or small children keep the sun out of their eyes. You know the Walmart ones they just don't work as well as the factory provided ones. I will say that but absolutely love the rear window sunshades back there as well. And of course you have plenty of cup holders back there and there are some armrests for their second row passengers as well. But then making our way to the front seats on the CX9 six way power driver seat with power lumbar actually comes standard on the sport and touring you don't always see power adjustable seats on the bottom trim level so that was pretty cool. Six way power adjustable passenger seat coming with the touring trim level and up eight way power driver seat with the carbon edition trim level and up cloth seating with the sport leather seating for the touring trim level and up absolutely love that heated front seats again with the touring trim level and up and those heated front seat buttons are actually located directly in front of the shifter right around the climate control settings there in case anybody was curious. Napa leather seating coming with the top trim level being the signature and you will find ventilated front seats with the carbon edition trim level and up overall seats are plenty comfortable definitely no issues with seat comfort I can see myself going on a long road trip in the CX9 so no issues there for me either. But so now taking a look front and center at the steering wheel just tilt and telescoping however it doesn't telescope out all that far I will say being six feet tall I have to push my seat back a decent amount wouldn't have minded if the steering wheel came out a little bit further that kind of matched the distance that I have to push the seat back in order for my legs to be comfortable since I am a little taller I guess you could say so usually with other three row SUVs it does telescope out a little bit further and I know I might be being nitpicky when it comes to that I still was relatively comfortable but it could be a little bit better that's all I'm saying but leather wrap steering wheel coming on all trims and it will be heated on the carbon edition trim level and up so now let's make our way to the startup let me first start by showing you guys the key it's a pretty cool key actually Mazda logo on the one side all of your buttons are actually located on the side of the key I like that lock on lock the button to pop the rear hatch and of course that panic button as well but it is of course all keyless entry with a push button start so all I am going to do simply leave the key in my pocket put my phone on the brake and press that engine start button which is located just to the right of the gauges and speaking of when it comes to that gauge setup tachometer is all the way to your left speedometer is front and center and there is a small digital gauge cluster all the way to your right to control what is on that digital gauge cluster there is an info button located on the left side of the steering wheel there that is going to give you different information like your outside temperature how many miles you have left until you hit empty when your next oil change is due trip a trip b of course safety information and quite a bit more as well so the really the list goes on there everything you could possibly want on a digital portion of the gauges up there but now let's take a look at overall interior quality there is a power moon roof that comes standard on the carbon edition trim level and up it is optional on the touring I love that overhead led accent lighting again with a carbon edition trim level and up auto dimming rear view mirror with home link controls coming with the touring trim level and up sometimes those home like controls usually come on the upper trim levels so I really like that they're on the touring and that's for up to three different garage doors you guys are looking at that right now gotta love that overhead sunglass holder coming with every single trim level across the board of course already mentioned the tri-zone climate control it's always nice aluminum interior trim coming with the carbon edition trim level and up otherwise that is replaced with a silver plastic unfortunately with the touring trim level that we have today and also the sport of course so wouldn't have minded seeing the aluminum on the carbon edition trim level there wireless phone charger also with that carbon edition trim level and up however I will say it is optional on the touring we do have it it's located directly in front of the shifter and it's with a rubberized bottom and it's facing downwards so it is less inclined to slide back into you of course so it's pretty much impossible for that to happen so a little bit of storage up there as well but just behind the shifter you actually have an electric mechanical parking brake two cup holders just behind that and a decent amount of storage within the center armrest and there's actually two usb charging ports in there as well and overall really when it comes to overall interior quality musty usually does a very good job but I will say that really good job really just pertains in this case to the carbon edition trim level and up because like I said the aluminum trim is replaced with plastic silver trim on this touring trim level and there are some hard finishes on the doors and also around the passenger side glove box things like that so wouldn't have minded seeing a more upper trim level but really it's not all that bad one of the things they did right here in the cx9 is right around the shifter they finished that in a gloss black smooth material a lot of other manufacturers will leave that a hard gray plastic or something like that so I really appreciate that and that continues right around the circular dial-in buttons which are going to be used to control the tech display so let's make our way to that now I really like this actually one of the new upgrades for the 2021 cx9 is every single trim level is going to come with this 10 and a quarter inch infotainment screen it is not a touch screen but to control what is on that screen again there is a circular dial-in buttons directly behind the shifter and it was very easy to use and it is something that you're definitely are going to get used to it is kind of a reach for it to be a touch screen anyway so I don't mind that it's all controlled using the circular dial-in buttons quite honestly but that's going to give you a ton of different information there like bluetooth and audio streaming android auto apple carplay of course meaning if you have a smartphone simply hook it up to the cx9 you have free navigation displayed up on that tech display it's always a big plus for me at least factory navigation system coming with the grand touring trim leveling up although you really don't need it if you got a smartphone anyways because of what I was saying there radio settings you can also control up there as well and by the way when it comes to the sound systems of the cx9 you will find six speakers with the sport and touring trim levels however there is a 12 speaker Bose sound system with the carbon edition trim level and up that sound system is going to be optional on the touring we do have that today so having said all that what do you guys say let's go ahead and turn on the radio so we got playing today and let's test out this Bose sound system that we do indeed have here today actually I could tell it wasn't the best clarity when it comes to the radio station that we were listening to but there is a ton of bass with that Bose sound system and I said this in my other reviews I've actually had both sound systems in my cars previously and they've never failed me that's never broken on me Bose is a very reputable sound system company and it is really quite a nice sound system for the cx9 so I would definitely recommend going with that one it was quite nice but last thing on the tech display at least I wanted to mention to you guys is of course when you do put this one in reverse you will find a rear view camera coming standard for every single trim level across the board I did want to emphasize the clarity on that rear view camera is excellent I do not see it this crystal clear that often so I do want to emphasize that 360 degree monitor though coming standard with the grand touring and signature trim level as well and as always that is going to lead us into safety and so to start the 2021 Bose the cx9 is an IIHS top safety pick plus which by the way is the very highest designation given by IIHS so pretty much says it all right there front side side curtain airbags do come standard in the back you're gonna have latch aka lower anchors and tethers for children for the rear car seats rear child door locks also coming standard tire pressure monitoring system but really when it comes to the fun more advanced safety features that come standard there are a ton of advanced safety features they do come standard on every single trim level across the board they are going to include a blind spot monitor with rear cross traffic alert that usually comes on upper trim levels of other manufacturers so I love that lane keep assist lane departure warning system smart city brake support with pedestrian detection smart brake support with collision warning and adaptive cruise control with stop and go as well that is a ton of advanced safety features coming standard in addition to that though the carbon addition trim level and up is going to add to that front and rear parking sensors a driver attention alert system and reverse automatic emergency braking as well and so overall when it comes to my final thoughts here of the cx9 this is perhaps the very most fun to drive three row suv in the segment I will say that mainly because of the steering feel and the handling because every other three row suv as expected they're not really built for driving enjoyment it's a loose steering feel and it's just not as much fun to drive so if you wanted a good balance maybe the cx9 is going to be for you also excellent safety it doesn't get any better than top safety pick plus with iihs you got to love that as well great power actually as well for a three row suv at least 320 pound feet of torque is quite a bit you got to love that I like the new 10 and a quarter inch infotainment screen as well definitely a huge fan of that really when it comes to the trade-offs in the cx9 a wooden of minded multicolor ambient lighting that is really a cool feature that I always appreciate and it's found in cars like the palisade and the tele-ride so I do like that but having said that it's not necessary it's just something I think it's kind of cool really big trade-off that with any mazda suv's is going to be the cargo space they're considerably smaller than the competition really no matter which mazda suv you're looking at but having said that the cx9 is still mazda's largest suv it's just smaller than the competition so that's also if you didn't need maybe as much space as a highlander as a pilot as a palisade then maybe the cx9 is going to be a good bet for you so overall the cx9 is really a solid pick so long as you don't need quite as much cargo space as the competition other than that it's really among the best so I will say that but that is about it for this one you guys thank you so much for watching feel free to follow me on social media at the bottom of the screen there if you like be sure to hit the subscribe and the bell notification button if you're in the new car reviews that is what we do here on this channel after all do appreciate you guys watching more than you know and I will see you guys all in the next video stay gold


Tom, you were here last year, and go back again. So welcome back. But this time you're my friend. So Tom, Tom and Haydour, everyone. Hello everyone. First of all, thank you for coming. We really appreciate it. Today we're going to talk about turning deception outside in and how to trick attackers with open source intelligence. So my name is Adar, and with me today you have Tom and Tom. We are a security researcher at Illusive Networks. And this is what we're going to talk about today. So we will begin with covering what open source intelligence is, how attackers and defenders look at it. Then we'll briefly explain what deceptions are. And then we'll move on to combining the two concepts and explain about our research where we planted deceptions in open source intelligence. We will wrap up with summary and some takeaways. So what is open source intelligence? It has a cool and formal definition. You can all read it. But in general it's the concept of collecting information about your target, your objective, from publicly available resources. And we all know that attackers really love open source intelligence. They use it all the time mainly to compromise networks. They want to infiltrate the network. So they begin with collecting information from OSINT. And the things that they're collecting are, there are a lot of things they're collecting. They're collecting credentials like user names, passwords, email addresses. They're looking at private information. And they're looking everywhere. They're trying to find these information, these pieces of information in public base sites, search engines, social media, and so on. And there are a lot of resources that attackers use. It's being used so widely and so intensively that people already automate the process of collecting information from OSINT. So you have awesome tools like the Harvester, ReconNG on the open source site. And you also have commercial tools like Maltigo, Shodan, and they are being heavily used by attackers, red teamers and so on. And Defender, OSINT really works in real life, okay? We spent two minutes on Googling and we found two awesome examples that demonstrate how attackers are using OSINT all the time. The first example is this guy. He posted a comment on a blog and he mentions that he lost $50,000 in AWS charges. He accidentally pushed his credentials on his public GitHub account and that led attackers to find it and that cost him a lot of money. The second example is the guys at UpGuard, they did a research and they found that another company called Viacom had a lot of confidential data under S3 buckets. So OSINT works, attackers use it all the time and it's easy for them to leverage it. Defenders, they have a different take on open source intelligence. First of all, not all defenders even know that there is information about their organization in online resources. But the ones that do know, the first thing they do when they find out that there is information about their organization online is they tank and they try to remove the information from the internet where we all know that removing stuff from the internet is not an easy thing because the internet just never forgets. That's me from 2006. The second thing that defenders try to do when they find out about information, they try to make it obsolete. So if you have a user name or credentials that leaked, you try to go on and modify that user's information in your network and that's okay. But that's not always an easy task because if your network diagram leaked, then change your entire architecture is not an easy thing to do. So not always the case. We suggest doing something else about it, not just removing the data or making it obsolete. We suggest using deceptions in OSINT to make your detection better and we'll explain how we do it. So I'll hand out to Tom to explain what deceptions are. Thanks, Adar. We like to pitch by the way. Okay. So put a pause for a second on OSINT and cover deceptions. So what are deceptions? Deceptions are basically pieces of information plundered by defenders in order to make attackers make mistakes. One example from real life or real wars was in the Second World War, the allied forces used dummy tanks and other means to fool the German forces. What you see in the picture is an inflatable tank that six people can lift. The meaning was that they wanted to German to believe that they're going to attack from a certain location so they deployed it. If you go to the digital world, so deceptions are also referred to as any tokens, breadcrumbs or lures. And one example of how deceptions can be used digitally is fake credentials. An attacker, when he compromises an endpoint, he will try to leverage which credentials that already end the endpoint. So from the defending perspective, you can take and plant deceptive credentials. They look very attractive, very real. An attacker when you will try to leverage them will not be successful and get detected by defenders. So this is an example of defenders making an attacker making a mistake. In this talk, we'll add a new twist to the concept of digital deceptions because we plant the information on the internet. Usually deceptions are planted inside the organization by the IT or the security team. So in this talk, we plant deceptions where it's available to everybody and see out influence attackers. So going back to the same slide that Adal just showed you about the resources that attackers are going to look for deceptive, look for informational organizations, the same places can and should be used by defenders to place the deceptive information, the deceptive username, deceptive IP, deceptive OSNAME in the same exact location. So now that we understand what is OSINT and what are deceptions, I'll let Adal to combine the two and explain what we've done. So like Tom said, hopefully we now have a better understanding of what OSINT is and what deceptions are. And we want to share with you what we try to answer. You probably ask yourself what we did. So we wanted to make sure if attackers will use deception to move laterally in a network and not only use it to infiltrate a network. That was our main question. And in order to answer that question or these questions, we had the following steps. Please know that we had to take two extra steps because we didn't want to do our experiment on a real organization. We wanted to make the initial experiment on a fake company or on a fake environment that we control.  Then we had a planting of the deceptions in OSINT resources and we monitored the attacker's activity or their attempts to use those credentials. So the first step was in my opinion one of the most fun parts because we could create our own company. We decided to call it aviado mining because everyone's doing crypto mining in crypto currency, right? It's the hottest thing right now. And we had some employees on LinkedIn that even got job requests from recruiters. We had a coming soon website, of course. We had Twitter account and a GitHub account with pieces of code that relates to crypto mining and cryptocurrency. And we had a good presence online right now, okay? The next step was to create a computer network for aviado mining. So we chose a random cloud provider. We created servers, computers. They were all joined on active directory domain. We had computers and user accounts that were part of the domain. And we added a jump server theoretically for users to use it from home. But actually we wanted attackers to compromise that server and then move on to his lateral movement in our network. That was our goal. The entire operation was monitored using a pretty simple architecture. We had Sysmon deployed on the servers and endpoints. We had NetFlow logs from the cloud provider and a splunk server to correlate the entire thing. And now Tom will talk on the actual cool thing of planting deception and the results. Thank you. So as I said before, we planted different deceptions in different hosting resources. Actually we planted tons of deception with various complexity levels. We planted internal resources like IPs and host names of the jump server and other internal servers of the network. We also planted credentials to do servers like username and password or API keys. And we also, since we know that attackers upload credentials to the internet, we planted some credentials dump too. For example, NTDSD dump or Mimicats dump. We planted it in various hosting resources. For example, paste sites, public mailboxes, code repositories and file uploads. We wanted to show you what it really means to plant deceptions on hosting resources. So let's take a classic example of paste bin, which is a public paste site. As you can see, we uploaded like 20 mails of our Aviatum mining company with their password. And we also planted an external IP of the jump server which contains a username and password, which we'll monitor later. Another example to resource to plant deceptions on is public mailboxes. For example, Melinator, which expose an API that attackers can use in order to find interesting data in the public mailboxes. Credentials can be found online not only due to attackers' activities like uploading credentials dump to the internet, but also because of user mistakes. For example, here the user by mistake uploaded a script to Github which contains a clear text password. A more complex resource is file uploads. For example, we uploaded an NTDSD file to VirusTotal, which is a database of the active directory that contains hashes of the password of the users in the domain. For example, the correct password of J Hoffman is password 2. And as you can see, there are open source Seattle rules which attackers and defenders can use in order to find this NTDSD files on the VirusTotal. And actually, we had many others more ideas. For example, RDP shops, Github geists, cloud storage, IRC channels. And we also failed on some resources. For example, while uploading credentials dump to hacking firms and read it, we just got banned. So our goal was that the company will be visible on the internet. So before the research was started, if an attacker search for our company name on Google will not find anything. Not on Google and not on automatic tools like the Harvester, which is a public website where you can enter your email address and it searches it across all the databases in the internet. After we planted all the deceptions we talked about, this is how it looks like. Google finds all our deceptions and also the automatic tools found our credentials dump. So actually our goal was achieved now. Our company is visible to the internet. We ran the experiment for two months where we use unique user line for each resource in order to easily distinguish the resource. Our monitoring focus on usage of deceptions, of successful or gone of the deceptive users and attempts to move laterally. And we didn't care so much about scanners and brute force attacks. Also we saw some of them, which we'll talk later. So let's talk about the findings. What did we found? We found like close to 8000 successful logins with our deceptive user names. Over 700 distinct processes which were executed on our jump servers and close to 20,000 failed logins attempts of non-existing users probably which are scanners. Let's most, let's monitor now on the most attractive resource which was paced by far and let's try to explain why it was the most monitored site. First of all, the average time between deception planting and attacker attempt to use them was four hours, which is the fastest of all the authentic resources. The exposure was amazing. We got a pace like over 7000 views in one month. And we also paid attention that every time we post a pace, the pace gets 40 views after several minutes. Probably by automatic tools which scrapes these public sites like dump monitor, have I been pwned, paced Hunter. And actually our research show that as the time went by attempts to use the deceptive user decreased drastically. So if you want to remain relevant, you should constantly be posted. GitHub is a great example too. But in contrast to paced being, here the average time between deception planting and attacker attempt to use them was days and not hours. The exposure was much less, only tens of views and not thousands of views. And in contrast to paced being here the automatic tools scan only specific repositories and not scan all the, all the GitHub content. For example, Repo scanner and GitHub. Let's talk about the activities that were done on the jump server and let's, I'm sorry. Let's talk about the activities. We saw different activities. Some of them were expected and some of them were less expected. We used the cool forensics tool that we took a screenshot for every successful logon and for every one minute. We saw lateral movement attempts like trying to add a local admin user or scanning the network in order to reach our internal servers. We also saw some privilege escalations since the deceptive user was only a domain user and not a local admin user. And we also saw some generic malicious tool like some Bitcoin miners on Sentry MBA and also some weird stuff like an attacker who entered YouTube and searched for Rihanna Diamond Son. And now I will let Tom talk about the summary and the conclusions. Thank you. So let's review everything we covered. We talked about what are the definitions of OSINT and the deceptions. We shared with you what were our research questions. Will attackers use OSINT information to infiltrate the network but also to move laterally. And we shared with you the experiment that we found and shared some of the findings. We will release in Monday more detailed report with all the findings so you can find the website down there. So we have multiple conclusions from our experiment. The first thing that we found that we were surprised that how many human operators tried to compromise our servers. We had human operators connecting via RDP to our server either installing Bitcoin miners or as Tom said doing weird stuff like opening YouTube and searching for Rihanna. So we expected much more automatic scans but we found human operators. The second thing we were surprised from how fast the attackers operate. It took only up to four hours from the point of time that we uploaded the credentials to the point of time that somebody knocked on our door. It was really, really fast. And all that was achieved while we had to revise our deceptions again and again. We discovered it's kind of an art form. You have to, in order to make deceptions look realistic, you have to invest the time and think what will look realistic in the eyes of an attacker. So it also took us a while to get this. If we go higher a little bit, we understand that our results were influenced by the fact that we had an unipot organization. And if you use a real organization versus an unipot organization, we expect quite different results. We saw a lot of attempts tried to compromise the initial server and less attempts to move laterally. And we believe that using a real organization, we'll see a shift and much more attempts to move laterally in the network because attackers will have an higher motivation to move around. And this is something we expect to do in a future research. And one question we also, whether it refers into a real organization that came to our mind, will planting this type of information online will increase the motivation of attackers to try to compromise the network. That's something that we had to think about. And what we see during the experiment is that because so much open source information is already available online. So if you have a fake organization that nobody knew about, it will may increase the motivation of attackers. But because your organization probably already has information filed online, you can all gain from adding additional deceptive information. If we'll take from this talk only three things. We really advise you to be the following. The first thing, when you go back home to your company, use one of the open source tools that we share with you and see what kind of information is available online. We promise you to be surprised of the amount and the type of information that's already out there. The second thing, turn the problem into an advantage. Because once something is online, you cannot remove it. We urge you to monitor that information. If there are username, emails, see how they're used inside your organization. You may be surprised and maybe find attackers that already compromise your network. And the last and most important one, add deceptive information to the open source resources. The first thing, it will confuse attackers. They will not be able to distinguish between the real information and deceptive one. And most importantly, it will increase the detection capabilities and enable you to detect attackers that already compromise your network. Thank you very much.


Hi, welcome back to the video course biological psychology and in this video video 3.6 We're going to take a look at the perception of touch Touch or sometimes called somatic sensation is not really one thing Touch is not really one sense in the way that for example hearing is one sense rather touches sensitivity to various ways in which Various forms of contact essentially with our skin for example Sensitivity to pressure to heat temperature itch pain tickle and also sometimes Special touch a particular kind of slow slow stroking of the skin that we experienced as being very pleasant is also considered a specific form of touch All right, so touch refers to all those different things that we can be sensitive to now And there were many different Receptors mostly located in the skin that allow us that sense these different aspects of touch, right? So I'll walk you through them. This is a list. This is not a list that I would normally know by heart It's just a list that you can look up in the textbook of the different kinds of photos Oh, not photoreceptor skin receptors For example Meissner's corpuscles, which are sensitive to pressure and local frequency vibration Merkel's discs Also sensitive to light pressure Raffini corpuscles stretch, right? So it's sort of a bending of the skin Pesinion corpuscles short-term pressure high frequency vibration Free nerve endings sensitive for example to temperature and pain so all these all these different receptors are located in the skin and Support different aspects of touch From these very different touch receptors the signals right? So these these are that's the sensation of touch and the signals travel up through the spinal cord to our brain and Then in our brain Touch is primarily processed by the somatosensory cortex, which is part of the parietal lobe Now so we've seen for for vision if you've seen the video on visual perception that we have a primary visual cortex in the back of our brain, right? V1 in our video about Hearing we've seen that we have a primary auditory cortex where auditory information is processed And in the same way we have a primary somatosensory cortex as I said for part of the parietal cortex Where where where touch is processed? Now and we've already taken a look at the the concept of topography in the context of vision and audition, right? So in for vision the retinal topography is preserved the kind of spatial topography for for hearing The topography of pitch so high versus low pitch sound is preserved And the somatosensory cortex also has a topography very literal topography No, namely it has a somatotopic representation of the body So what it means that adjacent parts of the body are Processed by adjacent neurons in your in your somatosensory cortex And that's what you see in this picture on the right So you see for example, right if we zoom in on a particular You see that for example your forearm is processed by a region of of your cortex here And then right next to it there would be a region that is that is that processes touch of your wrist, right? So those are very close together You also see that Not only is the top sort of the topography of your body preserved in the sense that neighboring body parts are represented by neighboring parts of the somatosensory cortex But in addition to that you see that parts of your your your body that you that you are very sensitive in right? Things like your nose your like your face in general, right? But also your your hands, right? You're very sensitive to touch on your hands Are represented by larger parts of your somatosensory cortex than the parts of your The parts of your body that you're not so sensitive to right? So also kind of your sensitivity in a way is is represented in the somatosensory cortex Now and if you you may notice these these sort of images of sort of a neanderthal looking figure with very large hands and very big lips That is the sensory homunculus and that is essentially a doll that is skilled based on how how Strongly different parts are represented in the somatosensory cortex For example the very big hands of the homunculus are supposed to represent the fact that our hands occupy a very large part of the Somatosensory cortex so if you see that image then then now you know what it what it sort of colloquially represents Pain is also a sensation right and it is processed in the somatosensory cortex just like just like other forms of touch But pain also has a very strong emotional component right that normal touch doesn't really have in the same way Maybe pleasant touch has kind of a Emotional component, but most forms of touch are not inherently emotional in the same way that pain is and This is the fact that Pain has a link with with with emotion is also reflected by the fact that pain is also represented Processed by the limbic system and specifically the amygdala, which as we will see in the the lecture on emotion Is a very important brain area in the in the processing of emotions mostly negative emotions So pain is is a special kind of touch that is has an emotional component and the emotional component of pain is also evident in the fact that pain Is processed differently than normal touch So the amygdala and the hypothalamus the singulate cortex the hippocampus all of those areas are part of the limbic system But the amygdala is especially involved in the processing of negative emotions Now what is quite interesting is that the limbic system is also involved in mental pain So right you should not over over interpret that that phenomenon, I suppose But in a way it shows that negative things whether regardless of whether they are mentally negative Or whether they're physically negative are processed in similar ways, right? With that let's move on to the next video video 3.7 in which we're going to take a look at taste and smell


Moving beyond the CMS, I entered the digital experience platform, if you will, and I'm going to talk about an open-source approach. So maybe a little bit about myself. I'm Nick Vienhoff. I've been involved in the Drupal community for the last 13 years. So that means I started with Drupal as a student. I got forced into making a community site as a school project, and then we said, wow, this is really weird software. We hacked for for sure because 13 years ago nobody knew anything better. But then I really fell in love with the ecosystem, with the community. I went to Anquia as well, spent a lot of time contributing, well, a particular module and also contributing to the search API module. So lots of integrations with Drupal, trying to really go in that, in what Drupal is about. But also, and very important for you, very technical, I'm the CTO in DrupSolid, which means that mentoring 40-ish engineers at this point, but also I'm the leader of a product development team. Now, let's talk about the end goal of the website. From all the people in the room, all the 80 people, I suppose all of you are web developers-ish, or at least are in the process of creating websites where it's creative or analyst or development. Maybe just to get a quick questionnaire towards the room, what is according to some of you the end goal of the website? Getting paid. So I try to speak a bit louder because I can't hear you very well. Getting paid. Getting paid. Well, that's your end goal for the website. What's your client's end goal? Selling products. Our product is one thing. What's the end goal if the site is spilled for the government, for example? It's missing full. That's not a satisfaction. So probably publicizing and making sure people see the information. So there's a couple of things. In technical terms, they call it convergence. So indeed, with a commerce site, you can buy products. So you convert it as a user to buy something, which means it's a success. Ultimately, getting money also from customers or somehow converting people or citizens into seeing the information makes that successful. So why do we build websites? Not just people, but also the clients. Is it selling products? As we discussed, probably sometimes it is, but not all websites are e-commerce. The distribution of Drupal websites versus Drupal websites with e-commerce model. I don't know exactly the number, but there's many, many more without e-commerce parts than without. So we need to focus on maybe helping find the visitor to write a product or helping find the visitor find the right information. I don't know how many of you talk with the customer and say, which is the metric that after one year after the launch of our website, we will go back and then say the project was a success. Probably you don't. And does your customer even know when it's a success? Sometimes you say okay with analytics and you look at how many visitors, and it's okay going up and SEO-wise we're doing really well, but that's more or less where it stops for many. I'm sure some of you or people that are listening in go further and try to define metrics on how many products are bought or how many forms of missions that we get, the lead capturing, all that stuff. I'm not going to talk about that a lot more. But what has happened? Maybe some of you also saw the blog post of Drees that Acquia now got into the DHP quadrant and it's important to understand what these companies are. So Gartner is an analyst company, and what they do is they kind of go to all these big companies, big companies basically, and they try to do an analyst analysis of all the products that they have and then see okay, how do they compete. There used to be a CMS quadrant where you had also Acquia or Drupal, it was automatic with WordPress, there was also Adobe, Sitecore, AdServer, LiveFray, etc. But Gartner decided the CMS quadrant is no longer exists, it's right now with DHP quadrant. And then I'm sure you all have similar thoughts about okay, but what does this mean and who cares and what does this bus work again? Am I wrong? Probably not. But then ultimately you also want to figure out okay, what does this mean then and where are those companies going and how can I as maybe a site developer or as a company that's a bit smaller scale also take profit from that trend in maybe the mid-market or towards government or other excuses. So let's take a look at some of these competitors and take a look also at what they offer. So here we see Adobe and Adobe says okay, we have all multi-channel and then below we have the building blocks for the digital experience platform, all very fancy works. But what we see also there is that the pure CMS, it's just one little block of web content management. But we also see that there's personalized marketing, whatever it may mean, but this is how it presents all their products in a single block. Take a look at Cypher, you see very similar things. You see multi-channel at the top and then there's CMS components as management and contents, product information, maybe media, things that are also kind of... And then you have the Cypher AIEA with analytics, insights, decisions, automation. So this is where the kind of claim, okay, we can make different decisions based on visitors on the site, also known as personalization. There's also some marketing automation on the right that they have, so it will then connect it to this customer data. So it will still vary fate on what that actually means, but this is how it presents what the solutions, okay? So if you take a look at Acquia, Acquia has three pillars. They have this Drupal cloud, which you all know, I suppose it's Drupal, it's the open source software that we all have. But they put it on steroids on a cloud provider or they are the cloud provider and they give you a lot of the guarantees, but they also have this quick start. And there's the Content Cloud. This is some more of a CMS thing, but then the more interesting part is on the right, this is Marketing Cloud. So that's where they have the Matic software, which is a marketing automation open source software very comparable to HubSpot, for example, but also Lift. And Lift is interesting in this case because this is a proprietary software where all the data goes to to allow personalization. So we have open source, open source, proprietary. Take a look at LifeRay. LifeRay goes into this functionality requirements and personalization, social collaboration, etc. You can see this strength of personalization coming back and of trying to understand the intent of a customer and tuning how the site looks like according to what's happening on the site. Okay, maybe one more, an Edgey server does a very similar thing. They have this visitor intelligence and they segment their visitors and they claim behavior, business intelligence, all very nice marketing words for claiming, okay, we captured the data, we'll do something with that data in that customer data platform that you see as well. And then on the right, you can see that there is this content recommendations, content service, that's the CMS part, but still very dynamic CMS part. Also personalized search. It's interesting, but this whole diagram is how they deliver it. Now, if you take a look at DropSolid, which is a much more small-scale company, we try to go to the market in the same way, but then with only open source tools and open core ideology, so we have Drupal for the CMS and then we get marketing automation, we also follow logic in that sense. But then we have an interesting part which is the customer data management, which we use at Edgey you know me for. I'll get back to this in a bit. I'm trying to explain how you can also compete with those bigger behemoths in a way to create those actual practical digital experience platforms in how they claim they can deliver it. Let's take a step back. Driz on his block posted in January 2014 the following sentence. He said like, as the Drupal community, we need to stop taking a Drupal as a content management platform and start looking at it as a digital experience platform used to create ideal visitor experience. If you were like me, you said, yeah, this is marketing speak, but that's five years ago. I think Driz on his way ahead in understanding where the big enterprises were going towards, but ultimately also the smaller enterprises or the mid-sized enterprises are following. We didn't really have an idea on what this meant in practice and also to give you a personal insight I was working at the Acreology five years ago and I was building this product but I didn't fully understand why and I was also concerned about the privacy aspect and the whole movement towards privacy, GDPR those things that we know today are becoming more and more important. So I understood the technical requirements at that point so I didn't really understand why and what customers or websites really needed to use this one. But again, why should you care? Because you are the people in this room are the people that are listening in, you're the ones building those solutions. None of these companies that I mentioned except for Dropsolid are actually building websites.  So let's take a step back again to Gagner and we asked them what is this digital experience platform and maybe some of you have seen the talk of Dominique yesterday and it's a very vague word and it's also quite hard on the internet to find out what it is not. So this digital experience platform is not a puppet of products you cannot just buy this thing it's not a website, it's not an app it's not a tool you cannot buy a digital experience platform it's not a one-way communication vehicle it's also not standalone it's not a D or marketing it's not monolithic but then what is it then how can I translate these analytic words or these words in trying to define what are the capabilities into technical solutions how can I do this with Drupal without buying very expensive licenses toward other software let's get technical a bit so in the beginning of the software evolution there's a very interesting article on Medium they say ok it all started with custom software in 1980, 1990 and it was very revolutionary you could write software and everyone started to write software and basic for example as a software language but that evolved a bit and then it moved towards commercial of the shelf software this course thing what does that mean for most of you you maybe remember Windows 95 it was a CD that you could buy and suddenly you had this amazing rating system and it was off the shelf and you didn't have to do anything about it this was like a whole new era where everything came on physical mediums alright they had to run Microsoft made a lot of money on this commercial of the shelf software and then another revolution started and it's software as a service there's a really interesting book about Salesforce Salesforce said software is dead but they basically meant this commercial of the shelf so software on CDs is dead they were the first really big company to bring software online only and they brought it as a service and then the last the last revolution which is the one that you're actually actively taking part of and this is why this camp exists this is why Drupal exists for the last 20 years it's a commercial open source software it means that there is a business model or that are businesses that have been created around open source and open core software like Drupal but also Amazon for example is built around open core they have some contradictory ways of doing business but for example Drupal is is being used as the core for their production product they have Docker for some of the Kubernetes orchestration so they use a lot of open source software and then ask people to pay for the hosting and the maintenance so this is the next really big phase so data shows there's an amazing website media that this open core model is the dominant business model used by the most successful commercial of the shelf software sorry, commercial open source software companies out there if you really are embedded in this open source software if you know that core if you bring out the basic of that software and get how core Drupal or anything people will come to you for support for just getting enterprise hosting all those kind of things they don't want to do them themselves but they do trust you because the open source software is trusted a very good example is also the red hat so they have the open core they have the free version but then they also have the version with support which is the support premium that you pay for when you start up new instances just take a look at that website and see if all the companies have created one of those companies it's just a little weird that the list product is proprietary but all the other examples that I have shown in my opinion they're doomed because they don't follow that same revolution they're still stuck in the SaaS world and software is a service but fully proprietary and with licenses here in the Drupal world I think we are way ahead and that's sometimes also the frustration that we have against some of these software service products but it's an opportunity okay so let's take that apart and see what that means for Drupal and what are we missing in Drupal to build such a digital experience platform for a customer and so you can also replace the sentence with what that means in the Drupal ecosystem to build such a website for a customer basically it's the same but it combines a lot of functionalities to show different contents or different experiences as you will to the visitors of that website so this is the management pillar it's like look okay we've got some profiles, groups, structured data all of this seems very positive for Drupal which it also is so these green items it's my opinion that Drupal does really well it's really well suited for creating groups and communities it has structured data I think it's most structured and embedded, CMS out there, roles and permissions it's like an A plus team site but keeping the customer profile it gets a little tricky we don't track all of the actions that a customer or visitor does and there's a profile e-commerce site we can track the purchases but it doesn't really go into that you could maybe do it with Drupal but it's not really well suited for same with voice and immersive elements you could probably do custom coding but it's still quite new and then also it's authentication authentication etc there's lots of modules out there but it requires some knowledge and maybe that's also like lines or like people go to Drupal ad experts to get this done still doable ok if we go to the next phase which is the platform there's a couple of things here that are also where what Drupal is very good at maybe you can detect them already by reading this but in my opinion it's the following so Drupal makes custom development very easy it allows integrations to be created and expose interactive data in the same sense that it's multi-channel handlers, a couple of hybrids you name it you can do it the biggest advantage of Drupal is the development community and this is like really something that Garner or also other analysts first look at it how easy is it to make custom code for a specific software the development community is huge here and also this pre-packaged component part which is the module ecosystem in Drupal that's an A plus the next thing is it's like ok we probably passed but it requires custom coding and deploying in public or private cloud quickly PHP isn't cloud's best friend so if you look at Amazon or Google or Azure if it quickly looks down upon you and saying well I prefer to know a couple of other softwares which can be really contained and create artifacts during Drupal hosting you have specialized companies that run Drupal in the cloud platform and say Shankwya, Dropsolid and etc it's possible to do this yourself but it requires a lot of effort ease of use for site visitors content editors, development analysts Drupal also gets some criticism there for having quite a complicated user interface I think we can do better but we still kind of fast it's probably fine but also creating alternate UIs we have the layout builder now in Drupal it's being used to create different kinds of UIs with breakpoints and whatnot but it's still not really stable enough for content market here to really figure out how to get there it doesn't mean that with these other products or these other companies I've shown it's any better and then I think that Drupal doesn't really do is like the AI parts the line generation, neural networks etc the line user is to make a few other sessions to use plus search API or less search is I think it's one of the most powerful features that Drupal has towards really building complicated workflows and sites but then if we can stop further making sure that we can personalize that search or boost results with AI adding recommended content further it's search and then the marketing automation to boost that gets a bit more tricky and that's not out of the box and then in the Ease these are even harder to do and capture anonymous and authentic traffic change the site for your content introduce personalization these are all at this point you require another software as a service tool to help you with this and it's not fully integrated with Drupal we cannot ask Drupal to be fully un-cacheable and then making sure that every request comes in that it's different so that that requires another tool perhaps another technology and I know in this morning there's another session I forgot by whom and talks about personalization like Netflix I don't know how he's solving the problem but he's solving basically the same problem like this how do you embed personalization in Drupal okay so what do we have translated we have a Drupal and massive ecosystem in community on Drupal.org there's intensive integration with solar elastic search using search API for the whole search problem that we're trying to solve there's an open source logic tool and software to do marketing automation very similar to HubSpot and so at least we can do email newsletters, making workflows trying to understand what the visitor does with this tool it doesn't mean that we can change the site according to that info and then there are many vendors for hosting the Drupal site on steroids and making it easy to deploy in the cloud there's a lot of technology for solar and elastic so that's it what are we missing we don't have this these three things we don't have a customer data platform where does the data all go putting it all in Google Analytics is not enough because it's hard to export it's hard to customize it's harder to own we don't have personalization and we also don't have consent management consent management means that it's somewhere on track who clicked on okay or who clicked on what do we allow then how do we translate that to art personalization Google Tag Manager is often used there but it doesn't mean that it stores the consent that the user gave it also doesn't mean that the visitor can see what is all stored and tracked before the visit so what if we go from this what are we missing to this by introducing a new open core a new open source software system that has the same freedom like Drupal that has the same freedom like Montek that doesn't require licenses and etc so this is what I'm going to show you now in another video hopefully the video plays well over zoom so far so good yeah so what we're seeing here is that we have to suffer and explain what it is afterwards it's capturing anonymous and authenticated traffic I selected just the title which was not a link or anything and we can see in Chrome that it captured that and now the interface in the Drupal which is just a connector towards this open source software shows you all these profiles and shows you that this person actually selected that text and so this is very basic tracking of authenticated and anonymous traffic what we can then do is based on this data we can create rules and the rules we see segments can be detected in real time and then Drupal suddenly knows ok, people that select this text need to show different content to them what you see here are all kind of properties that are available out of the box for example if people submit two forms it could be that they're very interested and then I want them to be in a segment of highly engaged visitor and show different content to them so that's one thing if we go even further if we want to change the site according to that intent so we now created that segment now we're in Drupal in Imami and the software is called Unomis it's a little confusing with those two words but there's a Drupal module where you can say ok this is the server similar to Solar you connect it to what it does right now maybe for a second is that it shows a drop down of those segments in paragraphs and you're able to select which paragraph you want to show to which segment so people that fill in two forms for example they get different content a different paragraph block than people that don't fill in two forms a bit more guidance people that fill in two forms are already quite engaged it's just one case so that's an integration that already exists and if we couple it and then go even further this is an example of the Dropsolids tool that analyzes this data which is the open data from the Apache Unomis case it's a machine learning model that tries to figure out what are the four main groups that exist in my side traffic you can also say that there's eight this is the magic of machine learning you just give it all the data you say this is the algorithm and try to figure out what are the most esteemed groups in the case of Dropsolids that are people interested in applying for a job there are people interested in what are your customers and what kind of solutions do you do and then there are people interested in technical decisions work that now to these segments so what happens is that we want to auto detect the intention of people visiting the site without creating rules of people that click on this link and then on that link how does that translate to the site changes based on the applicants based on people that are interested in business decisions based on people that are in two forms you now have personalization based on mathematical calculations of chance that people are in a certain pocket and it gets a lot easier to start personalizing and to start detecting it alright so how does that then translate into numbers that there's also dashboards that can say give me all the applicants give me all the business decision makers etc you can also think of these segments as personas remember in the beginning you're in control of the customer you're in control of what this website needs to do you basically define and also who is this website form so this is very similar these are the personas that this website is for I'm going to change the website for these personas what you can then see and this is a dashboard that we've built just for the drop solid sites like how many profiles are in this segment how many forms of myths etc so then you can start to do analytics but also a test ok so let's move on a bit like how do we do this how can you do this there's a software from the factory foundation called you know me pronounces you know me and it's used to capture data it's a java server that is linked to elastic search and it captures all the data management it has the rules engine it can do a real time segment there's no license fee it really follows the whole open core principle the open source principle it's not any different than for example factory solar and I see tremendous potential here for Drupal to do really in-depth integration with Drupal to comply with those new requirements on personalization on tracking on privacy management etc so to put the theory to practice we created this module the you know me module a couple weeks ago we were testing it internally already but this module is not tied to any company at all so you can set up this you know me software and set up this module and it will work it doesn't have an interface at this point but I'm asking for maybe some help to get that interface what also exists is that there is a client library it's a you know me SDK it's an PHP library so you can also use it for example symphony a bunch of others there's even a you know me SDK node module we use it in the platform where you saw to build those rules or to make those rules it's all built using Angular that uses this library so we're creating as much as possible as open source so that you can also start to create such solutions for your customers without getting into SaaS software with expensive licenses with a major part of this where you will have a lock in if you start to use optimally or a couple of other solutions out there you're locked in many of the vendors have great software as a service but they own your data you don't know where it stores you have no idea what to do with it and the sentiment in the world is that there's more and more protectiveness on that data why shouldn't you be able to control who hosts that data you can say with this you know me software I'm hosting my own elastic search because I don't trust you and I want to use and control that data myself so this is some suggestion that I have for you you believe in Drupal or you may or may not believe in logic but it's open core you believe in genetics and docker all these other technologies why would you settle for less when it comes to data somehow we're not thinking about that too much but we say okay I want to host everything myself or I want to have everything and control myself but data well know we push it to Google analytics we push it to organization SaaS software like AcreoViv or like optimistically there's also segment IO I don't think you should accept that that's the only thing that exists I think we as a community should also embrace what's out there in terms of open source and open core software and follow that principle as much as we can I also believe you it's the next phase of the business model of that and that it's not worth it to invest in anything else so in my idea or my future of the web it means that this is the bigger picture and we have multi-channel we have Drupal as API first with React or Angular or Gatsby could also still be Drupal with HTML rendering using connected logic for marketing automation that is also connected to as you know me for your data platform and customer data platform content management personalization those three components are really really powerful to fill in most of the needs of modern or future web development needs but obviously that's just my opinion I'm happy to answer any questions about this and also hoping that we're able to hear most of what I said thank you for this any questions anyone? no questions we got any questions on zoom can you say no no can you hear me? yeah just be loud enough how does it work with search engine for example if google search board comes to a page with personalized content so how do you recognize him and what do you give him that's a very good question googlebot will come to your website and you will see the non-opinionated version of the site so you always have default state and google will see the default state I think this is one of the next challenges that also google will have is to find or maybe create a standard on how to figure out what kind of variations all exist and I'm not sure if that challenge will be easy some of the content that you will only show to certain groups after detecting okay they are interested in business will not show up in google what was your question about yeah sir you about know me what is if you compare know me with any other SaaS personal engine platform what are the key gaps do I know the know me being open source with every new project so what are the key gaps and key challenges that you have seen while implementing it for a production customer whatever I don't know if the question was finished sorry yeah questions okay yeah so that the key gaps right now with Apache know me is that it doesn't have a user interface you could say well that's strange but if you think of Apache solar Apache solar also doesn't have interface to integrate with Drupal Drupal over time so I do think this key gap can be filled in but it's not the responsibility of the contributors of the Apache you know me team to fill in this gap I think it's our responsibility to fill in that gap and to really say this is our opinion on how personalization on the web needs to work these are how we create our dashboards somehow and then the question is does it need to live in Drupal or is it another tool next to Drupal that integrates with that API of Apache those are all questions that still need to be answered over the course of the next couple of years any other questions you got a question I don't know a question yeah okay hello Rodin I just want to let you know that we're going to switch around the closing keynote and the lunch so the lunch is set for 12.50 and the closing keynote is set for two o'clock so Drupal Drupal London team will be doing the closing keynote and it will keep it nice and short so what we like to do is if you guys can come back here at 12.50 we'll keep the keynote and after that you can go for lunch and then everyone can go home a little bit early how's that sound all good thank you very much Nick you're very welcome have fun and stay safe cheers


The Enugu state governor, Peter Umba, says his administration is committed to strengthening the security architecture in the state through community policing. He gave the indication in a meeting with community leaders in town union officials at the old government house lodge Enugu. The governor said the security and safety of citizens was paramount to the current administration stressing that governance is a collective responsibility. Umba urged the community leaders to support the policies of his administration, explaining that the government expects imputes from them and all the useful information that will be of benefit to the rural dwellers. I really do want to call on you to galvanize your communities, to get them to understand that there is no such thing as seat at home, whether it's on Monday or other days. If there is a public holiday, it will be formally announced that there is a public holiday. And we can do that because you gave us your mandates to lead you, but you should never allow someone you have not given your mandate, someone that is unelected to give you those others and you heed to it. Hello, hope you enjoyed the news. Please do subscribe to our YouTube channel and don't forget to hit the notification button so you get notified about fresh news updates.