How have my eyes been so blinded? How have- From the tales we've read, from the stories sent Which one we neglect? The one we forget? The door that's burnt? The screams that we had? The breaking of ribs? The anti-crib Until this day it sways And golfed in a blaze It still does rock It still does rock And nights turn away Yet she did lay I turn away Yet she did lay Holding him tight I turn out Yet she did lay I turn out Yet she did lay I turn more In so- Masha'Allah In so- Does my mind of the world So unkind to take his life? So why'd you end up the child That led before his birth?  He'd bleed As a Shahid But's not so young But's not so young His little heart stops To the fleshy drops His little heart stops To the fleshy drops Prepare the shroud for Little heart stops To the fleshy drops Prepare the shroud for Masha'Allah The steps of the tired How for the truth This door opens So that I Sit I neglected And yet I neglected He is your Mohsen I neglected He is your Mohsen He is your special The unborn grandson Of the Rasul Like his brothers Hassan Hossein Sacrifice So I do vow To not tell the past If I have This great loss Until everyone Of the youngest one Tell everyone Of the youngest one To give his life El Mohsen Until everyone Of the youngest one To give his life El Mohsen Masha'Allah His light World's dark Shining star Who in times of stress Is whole The poet of Sayyidah, Fadima al-Hakim I'll carry his light In this world's dark Shining star Who in times of stress Is holy light The one with no sin The one with Scott's skin The child Mohsen His holy name I will I to pass Till I to pass Even at death With my last breath Even at death With my last breath El Mohsen With my last breath


Hi, this is Chicho and it's been a while since I put out a video regarding facial hair and if you've been following my my channel, you know I every now and then I you know change the look on my face or share something that That I love about facial hair right may it be beers or goatees or we're even clean-cut There's some beautiful aspects of living a clean-cut life, right now since it's been a while Since I did anything related to facial hair and One reason is because I love the goatee look. I love this look and it's It's easy to maintain and and it's a nice feeling and it gives me the sensation of being clean-cut as well as having The ability to pull on my face right with that with the hair and give myself a little bit of face almost I still miss the beard when you When you're able to you know pick your beard comb your hair Just get a nice nice facial massage, right? But one thing I have been doing that I wanted to share with you guys, which is which is something new for the last few months and Just so you know I Guess I'm categorized as one of those people that you know Facial hair grows fast. All right, I've been shaving since I think I was like 13 years old or something 13 12 or 13 years old And I guess my hair grows that for me. It's it's it is what it is, right? I don't consider to be fast or slow. It's just I'm used to this right and this is about a two-day growth I have right now. Okay, so since the time I was basically 13 years old I've been shaving and I've gone through a few different cheese brands of things of shaving cream of razors and stuff like this and that and at some point I'm gonna start shaving with a straight edge, right? straight razor I just haven't got into it yet And I know it's gonna be a little bit painful initially because I'm gonna cut myself a few times, but I have had Straight razor cuts at the barber and they're amazing. There's nothing that comes close to straight edge cut, right? So at some point I'm gonna start shaving with a straight edge and I will you know Hopefully once they get the hang of it, I'll You know make a video of do's and don't do's that I find out anyway that I encounter but one thing I have been doing for the last few months, which I think this is gonna be a keeper and It's amazing because one of the main things about shaving is The razor is very important, but the main thing that's extremely important is the cream that you use the shaving cream that you use because the face is very sensitive and You know You got to treat your face Properly and that's one of the reasons that I sometimes don't shave for long periods of times and grow a beard because it gives my face My skin a break, right? So shaving cream I find to be more important for me anyway as when I'm shaving as compared to a razor of how What the sensation is what the feeling is and you know after I'm done how how I like it or not, right? and One thing I started doing a few months ago was using coconut oil as shaving cream and I really this is the best Sensation I've had when when it comes to shaving and after shaving because a lot of creams I've used in the past they leave a film so You gotta wash it off with using coconut cream a coconut oil I Haven't had to do that, right? I just give myself a wipe with a towel Maybe just to get rid of some of the hair follicles that are left or little hair bits that are left But the coconut oil that I've been using is absolutely amazing My skin loves it and it's one of the easiest shaves I've ever had So I figured I'll show you you know share with you what I've been doing for the last few months And I think this is going to be a keeper. I don't I don't see me going away from this I'm not sure what happens when I hit the straight razor if it's gonna work with a straight razor or not But with the razors that I've been using You know just whatever gadgets you can buy This is working amazingly. Okay, so I'm just gonna show you what I end up doing and all I do is put You know coconut cream or coconut oil and why I keep on calling cream with coconut oil, you know, just a Little bit you don't need this much. It's just a little bit you grab and it's summertime right now So it's fairly liquid, right and just a little bit and I rub it in okay And the beauty of this is coconut oil is amazing for the skin Absolutely amazing for the skin, right and I usually do this and You know in the washer where there's a sink, right? And I keep the tab running Very little on hot water because hot water or clean your razor plate With the coconut oil, right because oil becomes it becomes liquid and heat, right? So this is all I do. I just you know, take a little bit do this and what I have Just a compensate for The tap right I got my razor here and I put a little bit of warm water in a cup, you know a different cup So i'm just gonna tap it in that when I feel like my razor is Flesh anyway, right? So i'm just using a triple razor right now So all I do is It sounds rough, but you know, it builds up a little bit. I'm not sure if you can see that but Not much and a little bit of water that comes back with the razor Maybe I'll take a little bit of coconut oil and put it on this side because The skin really I have dry skin. So my skin really loves the coconut oil. It just sucks it up, right? And this isn't a new razor that I've put in there. This is I've been using it for a little while Not sure how many shades of that on this But I've had it for at least a month on here and I don't switch up my razors very often First of all, it's extremely expensive. I don't Think I need to and I The way I'm what I'm looking at right now is The video camera is a little screen, right? Usually in the bathroom I get a Cleaner cut because I can go closer, right? I did do I did bring a little hand mirror here so I can take a look and So that was the main part of it. I got a little towel here that I'm Because your hands do get oily, but you know, give it a little wipe and Right, and it's not oily, right? The skin loves coconut. It loves it. I got a little mirror here Brass I think so all I'm gonna do on the edges, right? You can see that I didn't really Put too much oil on my face and I haven't really You know Replaced it right with a little bit of water and this is like super smooth That's how I cut close. I've cut it if you know if you've been shaving, you know what that feels like, right? Going down fairly smooth and again I am one of those fast girls people Look at these things my sideburns to make sure they're even, right? Look fairly even And let's take a look at Yeah, it looks good and the beauty of it is I don't have to wash anything off, right? This coconut oil whatever is left over I just rub into my beard and that's the only oil that I use for facial hair It's like I don't I don't oil my My beers or my goatees at all. I just any other oil and coconut oil usually and I've been using coconut oil for a few years On my skin and I never really thought about shaving with it. It is absolutely amazing, right? I just grab a towel and That is a really clean cut Beautiful cut, right? If you do end up using this, I hope you enjoy. I hope it works for you For someone who shaves a lot. I know it's it's difficult finding the perfect mix perfect balance of Shaving instruments tools that you can use for your skin and this just happens to work for me And it feels amazing I'll see you guys in the next video. Bye for now


All right, okay All right Let's get started. So this panel is all about, you know, how virtual teams around the world collaborate and Contribute to an open stack or an open source ecosystem So we have an esteemed panel here. I'll shortly do an introduction, but before we do that, why are we here? And how many of you have actually been working with the open stack community? Okay, a lot of you are so you know what it is What it takes to contribute and work with the community? How many of you are remote or virtual? Yeah, about 50% of you and that's kind of the reality of you know, how things work in the community, right? So we have panel members today We're gonna talk about the challenges and how things work when you're dealing with people from different cultures from different countries The last statistic from open stack is we have more than what? 850 organizations 3,000 plus developers and contributors across 140 countries Speaking different languages in different time zones. How the heck do you get all this working together? That's what we're gonna talk about today and we have some great panel members who've had experience with this sort of thing For a long time. We have folks from Verizon from rack space From red hat and we'll do shortly an introduction just to give you logistics wise We'll do a little bit of an introduction first And then we'll go through some questions around our discussions and stories that these folks will share with you and We'll have about 10 minutes of Q&A towards the end. Okay with that Let me go ahead and let's start with introductions of the panel members You're starting with you Fred if you could do a very quick one minute no longer than a minute Who you are and you know, maybe a 30 second Elevator pitch of what you're gonna, you know, what challenges you see in this in this kind of an environment Okay. Yeah, my name is Fred Oliver. I work for Verizon. I'm located in Waltham, Massachusetts And I've been working on open stack for I think about three years at this point different implementations of stuff We're basically trying to transition Verizon from a kind of a legacy mode and to some more what dynamic New application styles development we have Development groups all over the world Probably our biggest one is in India right now from our remote location, but certainly we'll all scatter all around the the United States and I'm actually the only person that's involved them with my group. Everybody else is scattered around the United States.  I Guess the biggest challenge is really just making sure that Kind of general communications and this is making sure that people are aware of what everybody else is doing there is Kind of we have a follow the Sun kind of methodology and Following that model requires big peaking and keeping people up to date. We don't want to wait 12 to 24 hours for the next communication metric part Karen Hi, I'm Karen Levenstein. I work at Rackspace. I am the US team lead for the Rackspace private cloud documentation team and our the documentation team is actually Spread across two continents half of us are based out of San Antonio and Austin the other half of us are based out in Australia and We support a dev team that covers the UK the US many parts of the US and also Australia so There's that and then I also am helping to coordinate work on the OpenStack installation guide and as the focus team on the guide We took a page basically from the networking guide team, which there's a presentation later this afternoon plug plug for one of my employees On a collaborative documentation, but anyway, that is what I do biggest challenge right time zones time zones and time zones and time zones Grant Shipley I work at Red Hat and I am a manager of OpenShift, right? So I'm responsible for You know the open-source project as well as you know managing and Maintaining integrations across different open-source projects like OpenStack. I've been remote for the last six years. I live about 10 minutes from the Red Hat headquarters, which is a skyscraper in downtown Raleigh, and I've been into the office about three times Everyone on my team is remote spread across the world and it was a big challenge You know initially doing that right and so a lot of insights there my biggest challenge is same time zones like Scheduling team meetings is impossibility sometimes Thank you My name is Beth Cohen and ironically Fred and I share an office Although not we didn't That's correct, right? That's a yeah So I also work for Verizon and I'm a product manager and I work with Nobody that's on my team is Located in Waltham. They're scattered all over the world We have people in Amia Latam Asia pack You know all over the United States Trying to schedule meetings when we cross six time zones is basically impossible And I also work with a lot of outside, so I do a lot of customer work And working with outside vendors. So, you know coordinating that stuff is near impossible I would say my biggest challenge is trust That the team will work together and produce something Terrific. Okay. My name is Kamesh. I'm Raju. I'm the moderator for the panel today. I work for Marantis I focus on partnerships within Marantis I've been involved with OpenStack. I guess ever since it started so I was with Dell prior to this and doing a lot of Contribution and on the marketing side on documentation Today at Marantis same way as the other panelists here. We have teams spread around the globe We have teams in Russia in Poland in the UK in France and you know all over the US Again same kind of challenges, you know, how do we work on that? So with that? Let's kind of get started with some interesting questions here. We talked about the challenges. So we'll start with you, Beth What would you consider is your most successful remote team? You know work or project you've been involved with and what made it successful? That's a good question. I don't even remember what I thought of So I'd say actually the the project that I'm working on now With secure cloud interconnect as a product that's on the product one of the product managers for it and Verizon is let's say it's a traditional telecom. So it's it's moving toward a mode of becoming more of a I wouldn't say startup because it's not a startup, but more agile And we were able to get this project out the door in about a year Which for by Verizon standards is amazingly fast And I think what really did it is very very good product project management. So we had a couple people who Really ran those meetings, you know drove to decisions You know road heard on the people to make sure that they were actually producing something And I think that applies to the oh actually I have another example Which is that I also was I was one of the people who wrote the open-stack design architecture design guide and That was a great experience and we were from every possible company Every possible, you know different languages, etc. And we came together and really was focused on the goal so one one question The biggest question is you know when when people get together Usually they are not people that have worked together in the past, right? I mean, these are not long-term colleagues that have been working together for a long time And when you had the successful, you know project that you're you're talking about where these people that are all new That came together for the first time and if so, how did that bonding occur and and what made it, you know Successful, that's a great question and in fact the the for the architecture book We had nobody had ever actually met in person. We were all coming from different companies We had never worked together as a team We will not again Unlikely although every time I meet any of them in the in the meet-up here I'm like oh long walks buddies, so I think I think the real key is is you really have to work on on bonding The team together, so there's there's some standard methods of you know, it's called Storming norm, you know form. I was it called forming Storming norming and performing and and I can't tell you that that really does work You really have to go through those stages and you have and you and and I think just Understanding that that is something that you need to do to get through to create a team is really important Just understanding that process So when you're busy yelling at each other because you know you didn't produce the thing that you promised You know Understand. Yeah, this too will will pass. Let's ask Grant because the interesting thing with Grant's work is he's not doing open Stack he's doing open shift, which is another open source project So interesting insights you want to share Grant when you have two different open source projects trying to collaborate with each other How does that work? It's It's basically the same, you know, I don't you know I think the key to being successful with any remote distributed team is even if people are in the office We treat everyone The same as a remote employee, right? And so even if there's a small cluster of people we never schedule conference rooms or anything like that Right. We have everyone use the same media all the time for communication Whether that's IRC or Google Hangouts or or Skype or whatever the case may be It's important that everyone working Uses the same media and so when we interact with other open source projects We use the the media communication vehicle that they use right and that's very key for us So You're you're working with the documentation right so how is I think you work with development teams as well Is that true? Yeah, our documentation team at Brackspace private cloud We work directly with the developers to build our so in your in your experience again successful project and how how is Documentation teams different from any other contribution like court contributions in your opinion I would argue that Documentation isn't that much different necessarily I think what the main the main success that we have as far as working with say development teams is ensuring that we have good ways of Asynchronous communication since not everybody can be there. Not everybody can be at every demo So some things that we've had real success with is For instance schedule recording demos So like video recording a demo if like the development team has some code They need to show off or a new feature that way the team on the other side of the planet can actually watch the demo as if they were there really being Really being committed to Arranging meeting times. I mean even though you can't have Even though eventually somebody is gonna be inconvenienced, you know Somebody's gonna have to put in a late night or somebody else is gonna have to put in an early morning You kind of have to accept that and just be committed to that to make sure that people get the face time and the talk Time that they need Really with documentation and in some ways There are certain ways that it lends itself to asynchronous development that like you can write the doc and then hand it off You know when you when you're going to bed for instance you you at the end or at the end of your day You're handing it off to the up to the other part of the team to continue to work on or to review And then when you come back the next day you can hand off it again But I don't know I don't necessarily see that as different from code. So what about language barriers? Documentation in particular is kind of interesting and I don't know if OpenStack has documentation different languages. Is that there is translation? I have not personally been involved in the translation effort. So I can't really speak to it But they I know that the documentation team for OpenStack has had to develop tools and tool chains to make sure that stuff gets translated And what about English barriers in other countries? How do you deal with that? Well, you know the one thing that we run into is that the Australians and the Americans spell things differently And you know sometimes and we you just kind of have to agree on what you're going to standardize on I mean we agree we Generally agree to standardize an American spelling which means that sometimes the Americans when we edit we have to take out some U's and change some SS disease But it's you just sort of have to find a standard and stick to it Okay, thanks. Let's get to Fred Same question successful projects and how do you specifically? I want to ask you more about cultural issues that you might have run into as you deal with global teams around the world Yeah, so I think there's been a I guess I think I think about the in detail the because our most successful project is we have a management addition we're adding to the OpenStack environment and from an orchestration perspective and Developing that in been interesting in the sense of Building up a new team and I think as you should describe it There's nobody really knows each other and what they're each other's capabilities are so there's a bit of a trust factor and we don't want to be in the mode of Kind of one person developing a you know a design specification handy it off. We were on a collaborative environment so there really is a At least I'm a mode of having to in some sense inconvenience everybody in scheduling meetings At offsetting times so that everybody has to be up at different times at some point But from a kind of a cultural perspective, I think they it kind of it what I've seen at least is Depend from some of the Indian Group we've been developing They're kind of a used to kind of Accepting a design document and then developing it from the design and not necessarily Questioning some of the design decisions that were made Where we want you know They're as intelligent as anybody else and have the experiences anybody else and we want to have feedback as to what we're doing so instilling the the ability for them to question what was proposed and Suggest alternatives is probably the thing we are trying to nurture more and and get them to do more in this project So that's a good segue. So I'm gonna throw this open to the panel anyone can answer this So typically if you're if you're dealing with these kinds of remote teams They are typically leaderless Right, there is no one single and tell me if I'm wrong But you're dealing with collaboration of teams and you know kind of designs emerge in some cases in some cases Somebody is driving the design So what's your opinion or recommendation? Do you recommend a? Single leader that kind of drives the whole agenda and kind of comes up with the blueprint and everybody follows Or do you recommend more of a hey? Let's collaborate and do things and kind of muddle through stuff Who wants to take that one? All these give an initial things. So I think there needs to be somebody with the kind of a vision of where this thing should go If you have a committee that's just completely open to making suggestions often doesn't reach a kind of a I guess a clear path very quickly And so I think there is you want somebody who can describe what The vision where they're going can also act as a moderator But I think the you know that person or kind of group small group people has to be wants to be very open and Solicit feedback for ideas and alternatives and work with that for a time I'd like to add to that so I'm I also teach at University of Phoenix, which is a completely online school and Every single one of the classes requires a group project and this is online So these people are all over the world etc. And it's all asynchronous So there's no they've never talked to each other And what I find is these are again leaderless teams and what I find is the most successful teams actually have Either somebody who naturally steps up or a wrote actually even better is a rotating leader So that everybody feels like that they can become a leader during during the pace of the course of the project So completely leaderless tends to kind of fall into you know sort of nothing Don't worry the the challenge with leaderless is it could just muddle through and nothing gets done in the end because everybody has Their agenda or things that they want to push So on that note, I think we should circle back to open stack because we've been talking in general terms So again, I'll throw this open to the to the panel. What is unique about? Open stack and and you've been working with open stack teams. I'm assuming how is that different from any other? Internal project you might be doing With distributed teams. What's your what are your thoughts on that? Who wants to take it? Well, I I'm not sure there's well I'll say there's a huge difference between when the way Verizon has done some things and in the path and past and how we're Kind of approaching the open stack environment in the sense. It's very in kind of legacy Verizon it's very much a waterfall model and you plan what you're gonna do a year from now and Six months from now you kind of re-establish that because you're not making any progress on that goal So I think the biggest change and that is to make a lot more short-term Milestones have Deliverables at those milestones that you can do that are short-term To a month or three months depending on what not kind of miles that you can do And then have kind of rapid turn as to what the requirements really are at that any one point and be able to adapt to the Change in circumstance over time. So I'll ask a grant You know because grant is doing open shift and you've been dealing with a couple of different open source teams one open shift and the other open stack What do you see different or unique or? Different about open stack as an open source community and open source project. Yeah, so I think All pure open-source projects are pretty similar, right? And the reason developers are attracted to them is because maybe they are not fortunate enough to be able to work on the open Stack or open shift during the day and so they you know love software development so they begin to do it in the evening and Regardless of the project that you decide you want to contribute to there's you know a couple of steps that you take One is establishing relationships and establishing your credibility, right to one day get commit access instead of just you know submitting You know pull requests or something like that and you know to come back to the leadership question I think in most open-source projects the leadership kind of for the most part except in very very large Open-source project works itself out through commit access, right? Once you gain the trust of the other developers on the project you're granted that role. What's different with? open-source projects with a lot of company interest behind it, which we see a lot is You know you may not be working on the Specific feature you want to you may be working on the feature that your boss is paying you to work on and so That's a little different as well. The political landscape in these you know huge open-source projects is vastly different as well in that you You know you're you're working with a lot of companies that may be your your enemy during the day But frenemy when you're working on open-stack, right? Because you're all trying to get the open-stack project to the to the next best state, right? And so you're working with with people that would love nothing more than to put your company out of business, right? But you're working on this feature together and collaborating and best of friends, right? And so it's really interesting I'd like to add to that that you do have to be very careful so the I'm I'm working on the on the telecom working committee and You know all of our rivals are on that committee and and so we have to be I mean I have to be careful about what I say and what I can't say and what I can share and what I can't share So and I'm sure that and I know that's true for all of these open-stack Projects and and as you mentioned, I I've also seen the Conflict between you know what what the company wants to put what the feature set that the company wants to promote and the feature Set that the community wants to promote is not always in in sync. So that's that's actually a big issue That that is a tension that that we in in private cloud deal with a lot it partly because for one thing Those of us who are writers on it I mean part of our job description is in fact you will work on private cloud docs and you'll work on open-stack docs You'll be a member of the open-stack community and also our Ansible deployment project which is now community began life as a rack space thing And so there's there's the tension between as you say like what the business wants you to do Versus what the what is what the community wants and I mean we really do have a foot in both camps I mean my my boss who is sitting over there.  I find and you know And the good side of it though is that you always have something to do because when the internal project is maybe in a Slow planning period you can switch gears and work on open-stack for a while and it it keeps you know It keeps you fresh in both directions. I think I want to go back and touch on the leadership Question earlier. It's it's if you look at the open-stack community. It's not like there are no leaders There are PTLs for technical projects Over the last three or four years. There's been this whole question about where is open-stack heading? Right and and as a result of that and in the dynamics that some of the panel members have been talking about Which is companies trying to push their agendas, you know big companies having a cloud You know that we don't want that in the community, right? At the same time there was kind of no roadmap or no product management in the traditional sense that was going on in the community and now I think this summit. I believe right we started the product management enterprise committee, which is really all about You know determining what the future direction of open-stack is what are the features? We should prioritize on not what company X is or what what white company Y says, right? So that's so there is leadership. It's not like it's a little leader less community So with that, let's let's continue with a few other kind of tricky questions here So if not everybody is pulling their weight, right? So we're talking about a a community of folks that are working together There's some who want to really push their weight around some who don't contribute So how do you kind of deal with that kind of a dynamic? Let's start with Beth. You know if you could share some thoughts there. Yeah The so that's that's a huge issue So what I find with and this is applies to me, but applies to any and I think any team is that went first of all if you're not pulling your weight and you're just coasting through do not think that the other team members aren't aware of this and They will resent it very greatly and so my advice is You know if the if the team member is really not there cut them out, you know, that's that's their problem That's not your problem but sometimes it's a big problem because You know, they you know, they've committed to a key piece and they've let the team down and I find that When this happens, there's a huge sense of disappointment and resentment So, you know my advice is as a you know as a person who's joining a team Be sincere and you know commit to what you can commit to and deliver Because you will get a bad reputation in the community if you're not delivering Just to add to that. It's okay. If you you can't follow through mistakes happen Sometimes just let people know as soon as you know, right? That's the most important part in any project We expect failure and in fact, you know failures good the more you fail the better the next version is right? But just be honest and truthful about it and let people know Yeah, especially since you know OpenStack has a six month You know cycle of cadence if things don't come through then the project is not happening, right?  We've seen this happen with neutron How many of you use have been you know kind of following the neutron debacle over the last year? So it's going back and forth and I think finally in kilo it seems to have reached some level of maturity, but But it kind of yeah, it's arguable so I mean I think Neutron is a great example of where things can go off track and People kind of doing things on their own or pushing their own agendas and stuff But getting back to the point here, right? Let me kind of hear from other other panelists here People are not pulling their weight or not contributing Karen in documentation for example somebody supposed to do something they don't come through You know, it's a similar problem It's if you find that somebody has committed to you know work on a specific Chapter work on a specific document a specific feature or whatever and they they can't deliver You know as Beth says, I mean eventually you have to say look Fisher-cut bait here, you know and It's I mean really this is this is this also loops back to just communication really is you know Both whoever has taken the leadership role and also the people who are delivering have to set expectations It's one thing to say, you know to say yes, I will do the thing and then drop it without a word But it's another thing if you say yes, I will do the thing and then maybe a few weeks later You come back and go like okay. Look, I have gotten way overbooked here. I need to prioritize How can I reallocate this? I mean that's that's the kind of communication you want from people And if you don't get it you're they're not going to be a useful member of the team Interesting dynamic because you know in a traditional environment, it's your boss and doing a review of your performance It's not so in a community. You're kind of getting reviewed by everybody in the team, right? I mean if you don't pull your weight if you don't contribute if you don't do what you promise Then your karma points will catch up with you at some point and you'll be ejected like a virus, right? So I mean it kind of happens automatically, which is kind of interesting in one way Which also means that you have to be really honest about what you can and cannot do in a community Because word spreads very quickly and everybody says oh that guy don't deal with him anymore, right? Fred, what do you think? What have you seen in your experience again? I don't have much more to add to what the other people have said I think that's exactly right is that if Be honest about what you can contribute and if it changes over time that you can't contribute as much as you expected Just let people know and then it I think is very fair The community notices very quickly if you don't produce because you have a communications lines You know if they're open and everybody's communicating, but then there's also situations where somebody goes completely off track For whatever reason, you know, maybe they don't have the skills or you know, maybe they were told by their boss go do something else That that that does happen, right? so How do you deal with that? What are some examples that you guys might have seen? Can you point to some concrete examples from your experience of how you dealt with that? So I will tell the example. This was a team from hell It it started out as a five-person team and then three of them dropped and it's got down to two people and They were each calling me telling me that the other person was horrible And that they couldn't you know and and they had each one had like this totally different idea about what they wanted to do So in the end actually they handed in two pieces of work. I Would say that was the absolute nadir of teamwork It's hard I have four kids at home and Sometimes I look forward to going down to deal with them because their problems are more adult than some of the other problems You see in the community sometime and so, you know I think there's a lot of different personality types especially that's attracted to open-source projects and Honestly, it just takes time to get used to it and how to react to each one Specifically on a team because everyone's different right and it's a challenge. There's no magic bullet I mean shit happens no matter what what project you're on I will say in like a community-based open-source project If you're not pulling your way It may be a little bit longer than in a traditional office environment before someone notices But the reaction is typically much quicker and you can never repair the the trust issue that you've failed with Where's in a traditional office environment working on a product team? You know if you completely screw up chances are you're not going to get fired, right? It's not really the case in open-source projects Because so much relies on trust because you are distributed you don't you don't see them every day, right? And so people just expect you to deliver on on what you're committed to Okay, we're getting to Q&A time in a few minutes here But there's another question that comes to mind now We talk about communication keeping these lines open and having all these different media types where people want to communicate But some people by nature are not people that want to come out and talk or communicate in any any form, right? But they're great greatly skilled folks. They know they can do their job So the challenge here is these folks are somewhere remote on the other side of the world They don't want to get on you know Skype or whatever, you know Google hangouts and even if they do they'll probably say one word because of you know language barriers or what have you How do you how do you kind of call these folks out and keep the communication flowing? Have you encountered? People like that at least I have so I just want to hear your thoughts and on how how you have handled those those kinds of things Fred you want to take that you're saying I I'm not really sure you need to or want to call them out because they can produce some wonderful work but I think it requires you know At least some effort to try and get them to Minimal communication that might require some kind of a okay, just Write down a change log of what you did for the last week And then at least you could have go somebody else go back and look at what happened But I think it's if they are producing but not communicating It's kind of right on the edge as to whether it's useful or not But in certain circumstances it is still useful work. It's just have to somehow Convince them to do at least of a bit of communication right one other question So nowadays we have you know video that is so easy to get on to you know Whether it's Google hangouts or Skype or what have you has that made any difference in in in terms of better team work? Or do people use it? Well, I will say at Rackspace we have a video conferencing system that we use extensively and Honestly, I think it's made a huge difference especially because we are so distributed and I mean there's Our docs team every week we have a meeting that's last thing in the day for the US first thing in the day for Australia And that little half hour or so that we have to actually chat and see each other's faces is Really helpful. I mean it really it is a bonding moment if I can say that I mean and you know There's there's always like this sort of five-minute thing at the very end of the meeting after we've gotten through all the business Where everything kind of goes off the rails and we get silly and it's it's fun I mean and you need kind of that kind of interaction and like for our The development team for our private cloud they have regularly scheduled just video hangouts where it's like it's not a meeting It's just everybody plugs into their video client and they're all there on their headphones and whatnot And you can sort of sit and chat and it's like being in you know a room with a whole bunch of people You know you have casual conversations You can ask questions not just over IRC, but just like verbally and I think it makes a huge difference personally At least in my experience. It's been very beneficial. Yeah, what are the other other folks think here? There are some some folks who don't want to show their faces on video. Yeah, that's true So Ironically Verizon kind of flunks video We have we have a telepresence room which I have used and it's actually really wonderful But apparently it's like totally booked and I never see anybody in the room So mostly we use tele you know teleconference and I am and What I find is first of all people never Introduced themselves in the I am so you have to guess what they sound like And they're usually doing we're so we're talking, you know teleconference and frequently we do by consensus So there's like 15 or 20 people on these calls And probably half of them are busy doing something else And then and then there's these side conversations in I am going on so it can be very very confusing and And you know very challenging for people who you know can't multitask And and and this applies to the open stack the IRC's drive me totally bonkers. I actually have a hard time following them So I think um, you know, it wasn't that long ago Maybe a year ago I would come to a conference like this and meet someone introduced myself that introduced their selves turns out We've been working together on a daily basis, you know for years But we had never seen or known what each other look like And just recently we started using video conferencing for everything, right? And that has made a big difference. Sometimes we still chat on RC when we're on video conference. It's really weird It's it's a yeah, it's a steep learning curve But yeah, I would say it's harder for like if you're all at the same company employees at the same company is very easy But if you hop on a video conference with with a collaborator that works at a different company There's some challengers associated with that. And what are you going to use right? Is it Google Hangouts as a web? anybody from Microsoft But I would say it's made a huge difference, you know, come back to what she said it does make us feel You know more like a team because we're all remote We'll see something in the background of their office at home and we'll joke about it and laugh about it One time I showed up to a video conference last week wearing a full tuxedo, right? Just to just to be silly and stupid right and because we don't have this day-to-day Office face-to-face interaction we value those I think we need to get to questions here so one story I quickly want to share I have a colleague who works in North Carolina and Whenever I get on the video conference with him. He has his he has a cat sitting on his head Literally, I mean it's staring at me and I'm like I'm not looking at Nick anymore I'm looking at this cat is get that cat off of your head, right? I mean anyway, so we have a we have you know about three minutes five minutes Yeah, five minutes for questions. So if you could come up to the mic if you have any questions for the panelists That would be great. Thank you. Hi You touched on this at the beginning, but I would like you to go a little deeper if you can about the you know what happens when You're participating in a project the project is going in a certain direction But your company wants to have you push things in a certain way and then the dichotomy between having a project manager in the business world and The open source model where there is no one guy in charge of everything is really more Collaborative and we all decide together Can take that So I think a lot of it has to do with the company cultures that you're coming from too So as it so happens Verizon's a very collaborative culture So I think although we're kind of new to open source I'd say the the collaborative nature of the the way the company does business is actually very conducive to open source but that's not always true there's other companies that are very hierarchical and And that is it does become a clash definitely has been a problem I can I won't name names, but Definitely, yeah, okay one more question I wanted to ask about more like details how you organize the organize the communication during meetings because It looks like you sometimes need certain rules and do you have the onboarding process for this meeting? participants with specific set of rules you use into video conferencing or do you have a Moderator who tries to enforce these policies. How do you work with us? Always have an agenda always have a moderator It may not even be the same moderator every time But for the love of God have an agenda because there is nothing worse than a whole bunch of people getting on a video conference And all just kind of staring at each other or everybody just talking in no particular direction And there has to be a moderator because somebody has to keep things amen amen to that That's that's I think with this one takeaway from this whole discussion today have an agenda have a moderator That's the only way these things can work. We have to stop here Unfortunately, you can certainly talk to the panelists after we have about ten minute break now So thank you so much for the model for the panelists for joining us today, and thank you all for joining


And we have some New York City factory footage. They put stuff inside. That's right. So this is the Disney headquarter thing. They're trying to put things in there. Alright. I wonder if that's parking.


sometimes you get a Google Doc template or a Google spreadsheet template and you try to use the template and that new copy of it, the private copy that you're using for yourself ends up in the wrong Google account or the Google Drive account that you weren't intending for it to copy to. So let me show you on the screen what that might look like for you and what you can do about it. So here's my screen and let me go ahead and find the correct screen to share with you here. Okay. All right. So you can see here on my screen, there is a use template. Click here for the spreadsheet template.  All right. So I'm gonna click on use template now and so what happens is now I've created a private copy. I click on use template. I was already logged into my Google Drive account and then now this is a private copy within my Google Drive account. The first thing you should always do is to rename this.  Jane Doe's business plan, whatever. Okay, renamed it. Now the thing you should check is click on yourself, your little bubble in the top right corner and notice, hmm, is this the right Google account that I want this template in?  So here's what you do.  So I'm just gonna show you a more simple way of doing it. So this is in your incorrect account. Simply click on the share button on the top right and then share it with your correct account. So share, I'm gonna share it with my correct account, which is George Cal, George Cal at gmail.com. Okay, I'm gonna share it with my correct account. I'm gonna make my correct account editor. I'm gonna notify my correct account as well. I'm gonna click send. Okay, now the next step, let's say I don't want this template in my incorrect account, okay. I don't want this template in my George Cal team account. I want to remove it from this account. What do I do? I click on share one more time and I click next to the correct account I've shared it with. I click on editor and I click transfer ownership, transfer ownership, okay. And it'll says you'll be the owner until this person accepts ownership. So I click send invitation. All right. So now this is pending owner. So now when I go to my correct account, let me go ahead and pause this recording. I'm gonna show you my correct account now. All right, I've gone ahead. I'm gonna go ahead and share my screen now. And you can see I am now looking at the same document or spec sheet using the correct account that I want. It says you're currently signed in as that. It's kind of telling me, okay, this is the correct account you wanna be in right now. So I'm gonna click okay. And what I'm gonna do is I'm gonna put the share button on the top right and I'm gonna accept ownership. Remember the wrong account, who is the owner, transferred it to the correct account. And now I'm accepting ownership. Okay, accept ownership, accept. All right, good. Now what I can do is I can remove the wrong account, right? The wrong account, which is George Caltin. I can click on editor. I can click remove access. Voila, and it says pending changes. I'm not done yet. I now have to click save. So now, one more time, I'm just gonna click on the share button just to show you the ownership and the privacy here. Only the correct account is the owner slash editor of this document. So the other person, the other account will no longer be able to find this document. So I hope this is helpful. And I know this is an issue with a lot of people who use Google Docs. So please do comment below if you have other suggestions for this kind of issue for others who are watching this. Thanks.


You may be surprised to learn that there have been far more animals sent up into space than there have been humans. Most of us know the Soviet Union sent a dog up in the 1950s but there has actually been hundreds of different species of animals sent up into space starting as far back as the 1940s and even into the present day. Animal rights organizations have criticized these experiments but science and world governments are adamant it is essential for humanity's efforts in space exploration. In this video we will go through the history of animals in space and the purpose of these tests involved. Wait until you hear this. So sending animals into space originally only served to test the survivability of space flight before manned space missions were attempted. But later animals were flown to investigate various biological processes and the effects of microgravity and space flight might have on them. To date, seven national space programs have flown animals into space. The Soviet Union, the United States, France, Argentina, China, Japan, and Iran. Animals have been used in aeronautic exploration since 1783 when the Mongolia brothers sent a sheep, a duck, and a rooster aloft in a hot air balloon. The duck serving as the experimental control. Back in the day after World War II, the limited supply of captured German V-2 rockets led to the US use of high altitude balloon launches carrying fruit flies, mice, hamsters, guinea pigs, cats, dogs, frogs, goldfish, and monkeys to heights of up to 144,000 feet. These high altitude balloon flights from 1947 to 1960 tested radiation exposure, psychological response, life support, and recovery systems. So starting in the 1940s, the first animals sent into space were fruit flies aboard a US launched V-2 rocket on 20 February 1947 from White Sands Missile Range, New Mexico. The purpose of the experiment was to explore the effects of radiation exposure at high altitudes. The rocket reached 68 miles in 3 minutes and 10 seconds, past both the US Air Force 50 mile and the international 100 kilometer definition of the boundary of space. The blossom capsule was ejected and successfully deployed its parachute, the fruit flies were recovered alive. To the 1950s again it was the US launched a mouse into space aboard a V-2 but the rocket disintegrated because the parachute system failed. This was followed by the Soviet Union who launched the R-1 3A1 flight carrying the dogs Sagan and Desik into space but not into orbit. These two dogs were the first living higher organisms successfully recovered from a space flight. Both space dogs survived the flight although one would die on a subsequent flight. Then everything went quiet for a while until 1957 when on the 3rd of November the second ever orbiting spacecraft carried the first animal into orbit, the dog Lyka, launched aboard the Soviet Sputnik 2 spacecraft. Lyka died during the flight as was intended because the technology to return from orbit had not yet been developed. At least 10 other dogs were launched into orbit and numerous other on suborbital flights before the historic date of 12 April 1961 when Yuri Gargarin became the first human in space. On 13 December 1958 a Jupiter IRBM-AM-13 was launched from Cape Canaveral, Florida with the United States Navy trained South American squirrel monkey named Gordo on board. The nose cone recovery parachute failed to operate and Gordo was lost. Telemetry data sent back during the flight showed that the monkey survived the 10G of launch, 8 minutes of weightlessness and 40G of reentry at 10,000 miles per hour. The nose cone sank 1300 into nautical miles downrange from Cape Canaveral and was not recovered. Monkeys Abel and Baker became the first monkeys to survive space flight after the 1959 flight. On 28 May 1959 aboard Jupiter IRBM-AM-18 were a 7 pound American born Rhesus monkey Abel and an 11 ounce squirrel monkey from Peru, Baker. The monkeys rode in the nose cone of the missile to an altitude of 360 miles and a distance of 1700 miles down the Atlantic missile range from Cape Canaveral, Florida. They were stood forces 38 times the normal pull of gravity and were weightless for about 9 minutes. A top speed of 10,000 miles per hour was reached during their 16 minute flight. The monkeys survived the flight in good condition. Abel died 4 days after the flight from a reaction to anesthesia while undergoing surgery to remove an infected medical electrode. Baker was the center of media attention for the next several months as she was watched closely for any ill effects from her space flight. She was even mated in an attempt to test her reproductive system. Baker lived until November 1984 at the US Space and Rocket Center in Huntsville, Alabama. On July 1959 a launch of a Soviet R2 rocket which reached 132 miles carried two space dogs and Marfusa the first rabbit to go into space. A September 1959 launch Jupiter AM 23 carried two frogs along with 12 mice but the rocket was destroyed during launch. These were the crazy days of the space race guys, can you imagine the tension that was building up? During the early 60s the Soviet Union launched an incredible amount of animals including the dogs Belka and Strolka along with a grey rabbit, 40 mice, two rats and 15 flasks of fruit flies and plants onboard the Sputnik 5. It was the first spacecraft to carry animals into orbit and return them alive. Incredibly one of Strolka's pups Pushinka, bred and born after her mission, was given as a present to Caroline Kennedy by Nikita Khrushchev in 1961 and many descendants are known to exist, you can be the judge of that one guys, believe it or not back in the days of the great space race the French were in on the action. France flew their first rat into space on 22nd February 1961. Two more rats were flown in October 1962 and on 18 October 1963 France launched Fichette, the cat aboard Veronica AGI sounding rocket number 47. The launch was directed by the French center CERMA, Fichette was recovered alive after a 15 minute flight and a descent by parachute. Fichette had electrodes implanted into her brain and the recorded neural impulses were transmitted back to earth. A second cat was sent to space by CERMA on 24 October 1963. There was a delay in recovery of the capsule and this cat was found dead when finally recovered. The final French animal launches were of two monkeys in March 1967. When China were at it launching mice and rats in 1964 and 1965 and two dogs in 1966. There were dozens more launches by the US and the Soviets during the 60s 70s 80s including on board the Apollo mission but we'll skip ahead a few decades to the 1990s where Japan launched its first animals a species of newt into space on 18 March 1995 aboard the space flyer unit. The last flight of Columbia in 2003 carried silkworms, garden orb spiders, carpenter bees, harvester ants and Japanese killfish. Incredibly nematodes from one experiment were found still alive in the debris after the space shuttle Columbia disaster. In September 2007 during the European Space Agency's FALTAWN M3 mission, charter grades also known as water bears were able to survive 10 days of exposure to open space with only their natural protection. On the same mission, Nadezhda a common Russian cockroach was sent into space inside a sealed container and became the first earth creature to give birth outside the earth giving birth to 33 young on board. In March 2009 during the countdown of the STS-119 a free-tailed bat was seen clinging to the fuel tank. NASA observers believe the bat would fly off once the shuttle started to launch, but it did not. Upon analyzing the images a wildlife expert who provided support to the center said it likely had a broken left wing and some problems with its right shoulder or wrist. The animal most likely perished quickly during discovery's climb into orbit. On the 31st anniversary of its revolution in 2010, Iran became the latest country to launch animals into space. The animals, a mouse, two turtles and some worms were launched on top of the Kavish Ghar three rocket and returned alive to earth. And we will leave it there for now guys of course these are but a few notable selections and there were a dozen more launches. We hope you enjoyed this video and found it a little bit different. Thanks for watching and remember the ways by which we arrive at knowledge are hardly less wonderful than the discovery of these things themselves.


To achieve that color, they're dyed over and over again in a sulfur dye. And if you notice it getting worse throughout the day, that's your body heat warming that stank up. Yum. There are a few things you can do to get the reek out, but the best way to avoid it is to give them a sniff in the store. And if they smell bad, don't buy them.


What's up trade hackers welcome to today's update today is Wednesday August 19th I hope your trading is going well taking a look at the markets So the S&P looked like it was just gonna continue this March higher and then all of a sudden about an hour ago At time this recordings is 145 central so about 1245 or one all of a sudden the bottom kind of dropped out now If you look at a daily chart, I mean this is nothing as far as a move down But if we take a look at a intraday a five-minute chart Do a little bit more justice on this move? I mean it looked like the market was just gonna continue to kind of grind higher like it has the last couple weeks and then boom I got a little drop here. I did see that federal reserve Jerome Powell came out and said Hey, you know what? I think this coronavirus thing is gonna weigh heavy on our economy like thank you genius So anyway, that that's what they're saying may make this drop But who knows I could just be a little profit-taking or algos or whatever else But anyway, it is what it is. So we'll see how the session ends. We've still got a little over an hour before the The cash market closes So what did we do today? Well, we did a nice trade in targe a target Go back to a daily chart. So target announced earnings this morning before the market open and And so we have a very specific Strategy that we teach in our earnings course a post earnings trade So if a stock gaps up after earnings above its expected moves, I've got this I just kind of mark this on the chart here That's kind of the expected move is about five and a half bucks Obviously it opened higher than that and we we took some long positions and target just exploded so we entered right near the open did exactly what we were hoping it would do and We actually got out of the trade just a couple hours later with it over a 100% return On that trade so very nice trade in targe And that wasn't even in Tissa. That wasn't even supposed to be a day trade, but here's what we did on our day trading Let me bring over my tasty works platform here. So this is what we did. So Mighty 90 trades were just okay. I was actually down a little bit overall a lot of our members were positive on the day But my monster trades were my pairs trades Not a monster, but my Russell Nasdaq couple hundred bucks there But my monster was in gold silver. You can see I booked over 2,900 in silver 340 in gold So up over 3,300 for the morning. So great day of day trading and So that's what we got going on there If you are interested in following us, we I mean we stream this live every morning for the first 90 minutes of the market and And it's been it's been awesome. I think we had almost a hundred people in there this morning and It's been cool. So if you want to check that out if you want to follow You want to you want to be part of that live stream and watch this trade live? Just go to navigation trading comm slash day trade and you can check out that So what else did we do today? We put on a couple trades one in Tesla TSLA Put on a one of our iron duck trades here So we've got no risk to the upside and we've got a huge buffer down here where we can hit max profit and Then we've also did an earnings iron duck in in video And so kind of a similar thing we have no risk to the upside And we've got a huge buffer all the way down to about this level where we can book max profit And so we'll see what happens in Nvidia So the ultimate goal would be for Nvidia Nvidia to just kind of hang out and go down a little bit But if this thing rips higher no matter how high it goes will still book a little bit of profit So great strategy for earnings So that's all I got for you. Everybody have a great evening. Talk to you tomorrow. See ya


Hello everyone, my name is John Hammond welcome back to their YouTube video and in this video We're gonna be taking a look at the last challenge that we've got on the November 16th rendition of the guide point security CTF the capture the flag competition that went on this past week So I am connected to their VPN I am logged in on the scoreboard at 10 10 100 100 and I can hop on over to the challenges page here We've finished the Jeffrey box and we finished the bell box So all we have left is this 500 point challenge challenge in the challenge category Nice. It says ready for a challenge. This one doesn't have a walkthrough and we are given a downloadable file So I'll copy the link location and then hop on over to my terminal where I've already created a challenge directory For this challenge and I can W get this down. So It whines about a certificate. So let's go ahead and supply that argument that it specifies No check certificate and then we can download this it downloads it with the token here. So it looks kind of messy I'm gonna go ahead and move that challenge and rename it to just simply Challenge.zip as the file name should originally be and of course it is a zip archive Indicated by the file extension and we can just check it with file to see those file signatures Let's go ahead and extract this I'm gonna run unzip on this challenge And now we're given a spot flag one two nine eight three three Dot j s file. This is present here in our current directory. So I will open this up in a text editor and Looks like it takes a little bit of time to load. We have this thing Which is a variable being defined and a lot of hexadecimal character is kind of encoded in a string here And I'm scrolling with my horizontal scroll bar and this is absolutely ginormous, right? You can see there is a lot of stuff here. So this seems to be obfuscated JavaScript We can try and de obfuscated with an online tool So let me hop over to our web browser and I'll clear out all the stuff from the previous video There we go. And now let's look up. How do we can de obfuscate JavaScript in Google, right? So we have JS and nice which will work for us and let's try that looks like that failed actually Weird, I'm not running a proxy or anything. I guess we'll just totally ignore that then let's go on to this de obfuscate JavaScript and we'll paste this in This will take a long time to de obfuscate and actually is already slowing down our browser If I try and click that de obfuscate button, it finally gets it But the problem here is that this whole file is like La tech a h this whole file is literally three megabytes So even that jjs nice location would yell at us because like hey, we can't process a file over two megabytes in size so This one at de obfuscate JavaScript comm does actually behave, but it gets a lot of output So we're gonna have to copy this into a file that I'll go ahead and call de obfuscated Dot JS for JavaScript now I'll paste all this in and we can start to examine what this does Looks like it creates a var Ws 652 and that's creating a new object or an active x object that allows us to use Wscript dot shell hmm That's kind of peculiar because that language an active x object isn't really Pertinent to JavaScript as we traditionally know it in the realm of client side code that can run in your browser actually Active x object and using the w script dot shell component there is native to J script or kind of the Microsoft and the Windows dialect rendition of JavaScript Interesting and peculiar maybe we're probably looking at some sort of code that will run commands or do things specific to a Windows target then we create this var 0x 6 8 3 c or 6 3 8 c and that has a lot more of hex encoded stuff as a string and Apparently this de obfuscator didn't do a very good job of actually de obfuscating this because this still seems really messy and hard to understand with the random variable names at all, but It we have this function It looks like it's being created in line and passed and called with all these arguments stuff into an eval so That's interesting to me because the eval command is going to try and execute code That's passed into it as if it were a string Or let me reword that it will take a parameter. It'll take an argument and that May oftentimes be a string and it will interpret that string as code and executed or evaluate it right eval so That tells me and it can tell us kind of as analysts that What is being passed into this function is going to be something that is more code So if we're trying to understand this if we're just trying to know what it does and figure out what's happening behind this layer of obfuscation We just want to see what that code is so rather than actually executing it and like letting this Potential malware or badness kick off right we can display out what it's doing So I can change this eval to a console dot log function And now we can just try and tell the JavaScript like interpreter right whatever we toss this into our web browser Maybe just throw it in a development tool see if it handles it Well, or we could give it to node or node.js that server side kind of runtime environment for running JavaScript code So, let me go ahead and try that I'll just simply have node.js, which I have installed and can by default give you a little interpreter But we'll pass a file as an argument here. We'll use node.js on our de-obfuscated script here Now if I run this it immediately winds and complains it gets an error because this active x object is not defined remember what I was saying this active x object is Permanent and kind of more necessary in the realm of windows when we're running J script That means that node.js over here on our Linux side Doesn't know what that is and it won't understand it so We can try to Temporarily remove it in fact just to do a simple sanity check Let's take a look and see if this WS 652 variable is used anywhere else in the code I'm just going to control f for that variable name and it only has one match that is actually all that it's ever used It just simply defines this object. So if it's completely not needed and Our little console.log and trying to understand the rest of the code will run it just fine Let's kind of comment it out Maybe the code that comes from this obfuscation technique will end up using it But we'll be able to see that in the future layers that we peel back. So Now let's try to run our node the obfuscated.js one more time and That had console.log outed again Apparently or I mean we've run that and we got all of this noise and nonsense Which looks very very similar to the obfuscation that we had just seen originally This is a lot of output and let's redirect this to like 00 RAN.js or something and I'll move that so you can see I'm just redirecting with the greater than symbol there Now let's go ahead and examine what that file looks like. Ah We could try and de-obfuscate this if we wanted to we could pass it to the exact same Web page and let's let's do that just for the sake of our learning I suppose but this looks pretty much like the same syntax at least the function a bcdefg and the eval kind of as we had seen before so If I were to let this de-obfuscate it really isn't doing anything else interesting here I am noticing though that it's creating this var Ws random number string object one more time with this Wscript.shell active x object again, let's look for this variable and It's still not being used in the rest of this strange obfuscation here We can see all the way at the very very end of this too that we are again calling an eval based off of a specific function So let's use the same technique one more time Let's change this eval to a console.log so we can see what code it's Trying to execute and as you've seen now, we're actually just getting another abstracted layer of the code and it's Slowly peeling off the layers of this onion. Let's see what comes from this layer We'll node.js 00 ran and Again, we have to remove that active x object. So let's comment that out and let's run our code More output with the exact same kind of functionality here or the exact same trick or gimmick being abused Let's redirect this one more time to a 01.ran and let's see what we've got here. I'll open that up Once again, new ws object with this active x object Wscript.shell that is not in use and another var and another eval function Okay, I think we have determined that there is a pattern here What we can do is we can try and loop this because we don't know how far down the rabbit hole this goes We've still got a lot of seemingly strange and random hexadecimal characters that are being passed in as a string here And we keep seeing this eval little Matroyska dollar. I don't know how to say that I always get that wrong and the internet yells at me but this technique with a ws object being created still keeps getting in the way and we were gonna have to remove it so let's try and write a script that will be able to loop through all of this and Funnel down or drill down until we get more code. That's better than this eval function or how far deep are How many layers do we have to work through? So let's do that. I'm gonna create a simple bash script I'll call this like unravel.sh and Let's use the proper shebang line for bin bash Trying to type and let's actually supply it as an argument So we can supply the file name right as sort of a parameter to our script Let's just test if the supplied argument or dollar sign one and again noting as a string with double quotes there If it's equal to an empty string, then we obviously haven't supplied it. So let's go ahead and echo the like usage Can be our unravel.sh script taking the replace with the dollar sign and then like the file Right. So after that we can simply exit Let's verify that this will work with a little chmod plus x on our unravel script and dot slash it now We just supply the file. Okay, so let's pass in the de obfuscated script But our code doesn't know what to do with it because we haven't written that yet. So Let's go start to build out the functionality of what this script will do We know that inside of our de obfuscated.js file we have this potential Ws652 notion and That is creating this active x object that does not exist when no JS tries to run it We're also seeing that at every single layer of this obfuscation. So we're gonna have to remove that Let's go ahead and do that. Let's just check first of all if this is a Like new layer of code that we want to try and de obfuscate by the presence of that eval function Because after all that's really what we changed here when we tried to run this So let's simply cat out the file and let's let's kind of create a file variable for it Let's say file can equal the value of the argument that we supply and let's cat out the file and grep for that eval command Let's redirect that output To dev null. So we don't have to see it I just want to do this so I can logically test if that grep returns something The way I'm gonna check for that is by using the like return code and we can access that as a variable, right? Let's say dollar sign question mark if that's equal to a zero and that means it did actually find it And it had a successful return code then we'll do a little check here echo like we have a new layer How about that? Let's test it and run it and that condition works just fine so Now that we know that that's a layer that we want to work with let's try to remove the Portion that we know is bad or that active X object in the W script So we should probably do that in a temporary file though We should probably do that and if we know we're going to be looping through this We're gonna make the changes to a new file every single time So let's just copy the current file to like a temp one and then we could again proof of concept just cat it out There we go. There's all the nonsense now. Let's try and remove this WS the variable that's created and We know that's gonna go through a specific pattern when we've looked through all the other layers manually It's WS some sort of digits that's creating a new active X object Interestingly, that's the first line that we see every single time. So let's use said in this case Let's use said to substitute and replace this active X object WS script dot shell Semi colon noting the very end of that kind of command there and take it from the very very start of the string We'll go with every single character that matches up until we see this active X object W Script dot shell and then we'll replace it with nothing that way. We know that we're removing it That's what this forward slash here is denoting what we can replace it with nice and easy, right? So now that will return out on standard output Let's go ahead and see that here and I'm gonna pipe this into head just so I can see the very very top of it and Because there are so many lines it not going to work well for me. So I'll pipe that into less now that top line is completely removed I Used it with this active X object W script dot shell up to the semi colon purposefully Because when we got into these other Obfuscation layers remember we saw each of those with this var WS object with a random number all on a new line It was all compressed onto one line So I wouldn't be able to the limit with a new line character I'm gonna have to trust that the semi colon will be all that we need so Now that we've removed that we want to change that Eval that we used to see into a console log so we can get the next layer of obfuscation Let's do that again with said We can use said tack I to do that in place on the temporary file And we can also supply I believe at just another substitution that we might want to change So let's replace the eval With a console dot log Let's actually not use tack I to start with because I want to see if we'll get that output the way that we should see it and Let's unravel this here and Pipe the output so we can examine it. I'll scroll down to the very very bottom Okay, and our eval has not yet taken place. So let's Modify this let's take the said output of The original one we remove it and then pipe it into said and then do our replace that makes a little bit more sense to me And now that output will be redirected to the next iteration that we want to use So let's start to keep track of like an iterator. Let's do iterator equal zero and then new file can equal the iterator I'm using the dollar sign and curly braces here to denote it because I want to get just another Dollar sign variable in their iterator and the original file. There we go. So now let's copy new file to temp and set this iterator to a New value after we've redirected into this new file that we've created new file Now we want to actually increment our iterator So I'll do that with let so I can actually use math in bash Let's let our iterator equal the value of iterator plus one and we can't have any spaces because bash is going to tokenize it It's going to be a little bit sensitive now We'll want to change our file variable to equal the new iterator with that file prefix in there so Let's try and change that up let's say file equals The value of new file Now when we go through this I don't think I'm doing a very good job of cleaning this variable actually because File will equal the obfuscated and the new file will equal zero underscore the obfuscated We'll do the change and replace and then we'll reset file to the value of new file Now when we go back to loop through this again, once we add in our loop, we'll have new file equals One underscore zero underscore the obfuscated So we're going to be ending up accidentally staging, but I don't care. I think I'm cool with that I just want to be able to see it build out all the different and Peel back all the layers of this so now that we've made that change Then we can redirect it into the value of the new file We've created that new file. We're iterating and incrementing and we are resetting our loop So let's not loop this just yet. Let's see if this proof of concept will work. Let's echo out like iterator iterator With new file being the value of new file. There we go Now let's run this just once Iterator zero with new file creating zero de obfuscated JS. Do we have zero de obfuscated JS? We do Good Now this is the de obfuscated rendition though and we need to actually Pass that To node JS so we can get the next layer So maybe our logic isn't quite right just yet We're copying this file to a temporary file and then we're outputting it from temp and redirecting it into this thing. So Let's make this operate off of the original file right and Let's make this read Direct into temp So then we can run at node JS on temp and redirect that output to the new file Does that make sense? Let's try it. Let's see if it'll work. Let's unravel this de obfuscated process that worked now De obfuscated has the original value in here, but temp has the Modified rendition of it with the W script active X object removed and eval replaced with console log Now we ran that with node JS and save the output into zero de obfuscated And there we go. Now we have the next layer and our loop will begin to process that Now that we have that decent proof of concept. All we need to do is loop this so let's go back to our unravel script and check if we see eval Which is kind of the the notion that we've been doing beforehand If we see eval in the file that we're working on We'll do this loop if not we'll fail or break out of our loop So let's add an else statement here and let's just add a break because we didn't see eval in the script And then let's make this a while loop with while true and now let's do and Done and let's Indent all of this code here Okay, so now Let's try and unravel our de obfuscated script and let's see how many layers we go down one two three four five six seven and then it breaks, okay, so We went down the rabbit hole and you can see it has that weird funky appending number that I tried to tell you about But if we check out this final script, what do we have here? Ooh, var var is equals all this and that looks like something new so let's go use our de obfuscate javascript web page and de obfuscate this De obfuscate, please. That's not seemingly doing anything Can I Run this please Okay, can I like beautify this beautify javascript just so it's a little bit easier to read online javascript beautifier Paste that in beautify code and now we've got this okay, so sub all like final dot j s And what are we looking at here? We have var var set to seemingly a base 64 string and we have a dl a function var b is set to IP addresses and then some Weird number here and then we split on it by every single space character, okay That's a delimiter and then for I is iterating through each object of B Well, then we go do ahead. We do go ahead and use wscript.shell we create an environment variable with a Oh, no, no, no, we grab an environment variable and add in a Random exe name. Okay, so we're probably setting that to fn like a file name Dn might be zero for like downloading maybe ActiveX object. Oh, oh, oh, oh, so okay, so it is going to download from one of the IP addresses With some specific variable key that might be like something that it's using to keep track of the the client and Getting the FR. What is FR set to? Where is FR? Oh, oh, that's the that's the string argument passed into it Nice, okay So this must be downloading specific files From these I guess command and control servers, but we have two IP addresses here But this other one is really weird and I have no idea what this is. Is this just like Regular decimal let's try and get into B Python So I'm gonna use B Python so I can do a from crypto dot util dot number import long to bytes and I'm gonna use long to bytes as if it's a decimal string that's actually representing some other data So let's use long to bytes and I'll call it L to be just so I don't have to type that all over and over again Let's run L to be with this giant number string in there and let's see what this returns Nothing good. I Can't read any of that. That's not our flag. That's not really intelligible. That's not human readable. Okay So what else could this be? It's not a hash very obviously It's not hex numbers because I don't see any a through F. Actually, I don't see any I don't I don't see any like numbers greater than eight Or nine in this Maybe this is octal is this octal What if I Let's let's zoom back out. What if I were to do like That number represented in octal format so Python. I'm gonna use zero and oh prefix to the note That's an octal number. That's converted a decimal now. Let's run long to bytes on that. I don't have anything there That's really weird So at this point, I was kind of struggling. I'll be completely honest. I was like I WTF I don't know what to do with this number It's weird. So I went to Cyberchef for a while and I started to just bump around I Wish I could give a better clear answer as to how I got to what I got here But let's let's try and run magic and see if that will actually get anything And I set this to like intensive mode and see if it finds literally anything Letting it bake for a little bit No potential things coming through if I switch the depth to one if I search for like a crib for flag Does it get anything? No, it tries to X or the option with hex string and it gets nonsense Again not our flag is there anything else that comes through here I Supplied the thing flag and I would have expected that to find something but There's a lot of output from magic just trying different things From base 64 over again. I saw from hex. I saw an X or I also saw a rotate But no notion of flag so far Is there any actual can I copy and paste like all this Copy raw output to the clipboard. Yeah, let's just slap it in. Okay. That's not what I wanted it didn't work so I'll be honest when I was looking through all these I kept trying some of those different things some of those different options that it Was giving to see if it could get potential text and I had tried like the rotate right one Because I did see that here like there's a rotate seven here and I thought like all right I guess I'll just try to like rotate Right and I changed it to different amounts, but I had to get this number from decimal right because this is already decimal data let's try to use from decimal and It doesn't have any spaces in there. I let's let's like convert that to hex. Let's take this To hex and let's give it to cyber chef as something that it can easily process and understand So let's do from hex and now we can try to use like magic one more time magic Intensive mode Bring this down. Oh, and that finds it with that rotate right function with it with one as the rotation I don't understand why I don't understand how that happens rotate One or rotate right. Sorry Bringing this in and just letting it rotate it once Works and gets you the flag I'm not Extremely sure why that happens and why that works If I were to take that L2B number like from the original and if I were to rotate it by one Naturally like within Python if I use that shift operator and just move the bits to the right or rotate it It gets the flag, but I don't understand how that comes out of what we had an octal So I think if you literally take this value and we shop around with it Because you could try to be like, okay decode from octal and look for an online tool There's a lot of stuff out there, but none of them seem to just straight up get you the flag So input data octal to text submit this Nonsense give it to this thing. It needs that weird separator Representation and nothing comes out of that octal text that can't figure it out That tool doesn't work all that well Try this one here Convert we need to split it into groups of three You could do that, but this one here octal system base eight Well, it convert an octal to a base and converter and you could slap this in and have it convert to like decimal or binary hexadecimal And I would try some of these and I would get a different number that I got within Python Which was weird to me So I tried to copy this and then do long to bytes from this and I would paste it in and it would get Port of the flag like a portion or half of it, but this tool is explicitly telling you like hey look I'm not showing you all of the digits here. I think it says like Where we're removing some of these digits and only sharing some of them with you So I try to like recreate this algorithm that they showcase on this conversion link here Where is the How to convert a number? Please see the base and conversion tool So I clicked on base and conversion and then I would try and understand this algorithm But I guess I just didn't get it right or I don't know. I I'm not a thousand percent positive Why I couldn't get it from octal because if it's just octal that would make sense to me And this apparently the decode website says that it is but with everything else I had to rotate it and shift it by one and that's confusing in my mind But either way we have drilled down through this rabbit hole We found some kind of neat stuff it was fun to write that script and and kind of parse out the logic of what we can't use this active X Object we can just switch our eval to a console log and that was very very cool because at the end we're seeing legitimate code that is very well used by malware like Using these techniques for with J script to greatly object and download files and write them with an environment variable location for the temp directory That I think is pretty a real world and very very cool So that was a that was a fun challenge, but I'm still beating myself up about that stinking octal number so That's it. Holy cow. That is the flag, right? We did we did get the flag so we can go ahead and submit it and we can call this guide point CTF Done, but that was a blast. So hey, thank you so much for watching Thank you so much for tuning in tolerating this if you did like this video Please do check out some of the other ones in this little mini series here If you did like the capture the flag challenges or this event in this competition go play guide points next game They're doing this CTF for like a week every month for like the next six months or five months or four or something But it it's a rolling series and it's super duper fun So I really recommend go jump in expose yourself to new technologies Try to solve some clever problems and you're gonna really learn a lot of fun stuff. So thanks so much for watching everybody I'll see you in the next video


What's up everyone? Tiktok here. Welcome back to another video. This is an annual video that I do every year and it's to look back at the previous year and look forward at the new year which 2020 was the craziest year in my life. A lot of crazy things happened. Of course, we had the huge pandemic which at the time I'm recording this is still ongoing and I think it's going to be for the better part most of 2021 unfortunately that we are going to have to deal with this and our way of life is going to be altered for the next couple years at least in my opinion until they have this thing under control and there's a vaccine but I don't want to talk about the pandemic for the entire video even though that took up most of 2020. A lot of other things happened in 2020 and a lot of great things in my opinion for me personally happened in 2020 and I'm going to be talking about some of them as well so enough of the COVID-19 talk. I know it was you know something that's still happening and affected tons of people and I don't want to look past that but I want to brighten up this video right now and stop talking about COVID-19. So the first thing that happened for me in 2020 was meeting my beautiful girlfriend Ashley which she's already been on this channel or at least we recorded the video prior to this one coming out and she absolutely loved it. She's the one that insisted on doing the video for it a munch pack taste test and she loved it so I'm hoping to do more videos with her in the future but this year spending as much time as I did with her and her family was a blast. She is amazing and I absolutely love her. We started to officially date on January 19th so that was just right before the pandemic but we're still able to spend so much time with each other and because of the pandemic at least in our opinions it really brought us together because we were able to spend so much time together in a short amount of time so I absolutely love that and it was awesome start of 2020. Then of course everything pandemic ended up happening. I unfortunately ended up getting laid off from work.  It's been a struggle. It's been very difficult emotionally not being able to work. Luckily the government has stepped in here there but I know I'm gonna have to be paying back a lot of taxes this year so I am saving up a lot of that money that they ended up giving me but with that aside this year ended up being great for the channel which I'm really thankful. Thank you all for all of your love and supports, the comments, everything that you guys do liking the videos everything really boosted my channel. This past summer I reached 1000 subscribers and at the time I'm recording this video we are so so close to 1500 subscribers. It's been crazy. We earned almost 1000 subscribers in 2020. This past summer after getting that threshold of 1000 subscribers which is the only thing I needed to get ads back on the channel I had over 9000 watch hours and you only needed 4000. I was able to actually go and be able to get ads back on the channel which I know a lot of people don't like especially for a small youtuber but by doing that it has helped me out. I'm getting anywhere between 100 to 150 dollars a month from youtube and I'm putting that back into youtube. So my taste test videos different things like that different unboxing videos my ring light that I got recently all of that was with my youtube funds and I'm really thankful to not only be able to make youtube videos but to use a little bit of this money to better my content on the channel and get more stuff to unbox and taste test and different things like that where I couldn't before. Prior to ordering another munch pack it's been two years since I did a munch pack. The reason I stopped is because I couldn't afford it anymore. It was something I tried out on the channel. I'm going to be slowly bringing things back and trying new things by using my youtube money to be able to fund that. So thank you guys for all of your support. It helped me get to the threshold to get ads on my channel and get even a little bit of money in on the channel because of you guys. Even though it's 100 to 150 dollars a month that really doesn't sound like much definitely nowhere near a full time job but that money definitely was put back into the channel and definitely has helped out the channel long term. So thank you guys and that also by me getting ads back on the channel I was able to do a video game giveaway and the person who won was over in the UK and they absolutely loved the game. That was the Deadpool game so if it wasn't for my youtube money I wasn't able to do that giveaway so I'm glad I was able to do a giveaway finally and give back to my channel and I want to do more stuff like that in the future. Now the rest of 2020 after the summer had a huge roller coaster effect on me but going through the holidays and everything for Christmas it was really really small this year but thankfully because all your love and support I was able to get through 2020. It's been an emotional year especially with not working. Thankfully I had you guys to fall on and you guys helped me out with a lot of love and support. Thank you to Leanne Riley and Do You Nerd, Tom and Lacey because those are my top supporters that are on YouTube and they really helped me along with everybody else that comments on my videos has helped me through this year which was a really tough year and a special shout out to my beautiful girlfriend Ashley for helping me throughout the whole year because we helped each other the whole time and if it wasn't for her this year would have been really hectic for me and it would have been really harder for me not only to make better content and to do the things that we've done this year but it definitely helped me out mentally and emotionally as well and now that 2020 has come to an end. Finally happy new year hopefully 2021 is a lot better and hopefully the pandemic is not as bad as it was in 2020. I believe it's still going to be ongoing for a little bit of while now but I definitely think it's not going to be as bad as 2020 at least I hope not. Hopefully in 2021 things that I want to do better for number one the channel I want to make better quality content if you guys want to see new things for me let me know what you guys want to see I want to try out new things and dive into new aspects of the channel maybe different unboxings, taste tests or just new things in general if you guys want to see new things with just me myself or with my beautiful girlfriend Ashley we definitely want to bring more content your way. This year I definitely was hoping to travel especially last year I was but I don't see me traveling much other than small road trips within our area me and my girlfriend might do that and the other thing that I want to do for 2021 is get back to work whether it be the casino opening I'm back to work there or finding a new job I definitely think that is my focus for 2021 so definitely spending a lot more time with my girlfriend Ashley and doing more adventures in our area nothing that's too far away especially because COVID-19 no big travels better youtube videos working more on the channel and definitely hopefully getting back to work so I can get some flow of money and luckily I have a lot of savings and I've always saved up so that's helped out with 2020 but I definitely need to get back to work so once again happy new years normally I'd ask how your 2020 went but I'm assuming just like it did for me 2020 was not the greatest year for anyone so I'm just not even going to ask this year hopefully 2021 is a lot better and I hope you guys have enjoyed the content that I'm providing for you guys and making because anymore I'm trying to make the content that you guys want to see but also make content that I want to create because like I said from day one on this channel if I make content and I'm not enjoying it there's no point in me making the content anymore on my youtube I have to enjoy what I'm creating to create more of it and keep this channel going so far so good and 2020 video wise has been a great year and I've come up with new ideas and the quality of my videos has definitely improved some this past year so thank you guys for all of your love and support I'm gonna leave this video here happy new years hopefully 2021 is a lot better peace