Happy New Year everyone. I welcome you all to the Hindu News Analysis by Shankar A.S. Academy for the date 1st of January 2024. Displayed here are the list of news articles that we will be going through today. Now without wasting time, let's start the news analysis. Look at this news article. Recently, the government appointed former Nithya Yoga Vice Chairman Arvind Panagariya as the Chairman of the 16th Finance Commission. The 16th Finance Commission will recommend devolution of funds between the centre and the state for the next five-year period. This is about the article. In our discussion today, let us see some problems related facts about the Finance Commission. First of all, what is a Finance Commission? Finance Commission is a constitutional body constituted for every five years. It is constituted by the President of India under Article 280 of the Constitution. Know that it is a quasi-judicial body. The main purpose of the body is to give recommendations on the distribution of tax revenues. This means how the distribution should be made between the union and the states and amongst the states themselves. Moreover, it also determines the method and the formula for distributing the tax proceeds between the centre and the state. The Finance Commission also decides the share of the taxes and the grants to be given to the local bodies in the states. Now let us look at the composition. The Finance Commission has a chairman and four members appointed by the President. See, they hold office for the period as specified by the President. Note that they are eligible for re-appointment. Now let us see the main functions of the Finance Commission. According to Article 280, Clause 3 of the Constitution, the Finance Commission will give recommendations to the President on the distribution of the net proceeds of tax between the union and the states. This is called vertical distribution of taxes. Moreover, it also makes recommendations to the President on the allocation of the net proceeds of the taxes between the states. See, this is called horizontal distribution of taxes. The second function is that the Finance Commission will also decide on the principles which should govern the grant in aid given to the states out of the consolidated funds of India. Thirdly, the Finance Commission will also decide on the steps taken to augment the consolidated fund of the state. See, this will supplement the resources of the panchayats and the municipalities of the states on the basis of the recommendations made by the State Finance Commission. An important thing you should note here is that the recommendations made by the Finance Commission are of advisory nature only. Therefore, they are not binding on the government. It is up to the government to implement the recommendations on granting money to the states. These are some of the important functions of the Finance Commission. So, that's all regarding this discussion. In this discussion, we covered some basic problem-solid facts about the Finance Commission. Now, let us conclude this and take up the next news article. Look at this editorial article. It talks about the perennial issues of floods in India. Here, the author took the case of Chennai floods 2023. He spoke about the general steps taken for combating floods. He also analyzed the steps and the efficacy of the steps. This is about the article in general. In our discussion today, let us understand some points about urban flooding, its causes using our mains answer rating approach. Let us look at the question of the day. Let me read out the question. The frequency of urban floods due to high intensity rainfall is increasing over the years. Discussing the reason for urban floods, highlight the mechanism for preparedness to reduce the risk of such events. This question was asked in 2016 mains paper. Now, let us see how to approach the question. See, this question has two parts. In the first part, we have to write the reasons for increasing urban floods in India. Moreover, in the second part, we have to write some steps that can be taken to prevent urban flooding. This is a straightforward question. So, let us start answering. Let us start with the introduction. Since the question is about urban flooding, we have to write the definition of urban flooding in the introduction. We can also give some data to substantiate to your answer. Now, let us see the definition given by the NDMA, that is the National Disaster Management Authority. According to the NDMA, urban flooding is the inundation of land or property in a built environment, particularly in a more densely populated area. Know that the primary cause of urban flooding is excessive rainfall in a very short period of time. This increasing water level will exceed the capacity of the drainage systems and lead to flooding. See, the urban flooding is significantly different from rural flooding. This is because urbanization leads to developed catchments, which increases the risk of flood from 1.8 to 8 times and flood volumes by 6 times. Now, let us see some recent examples of urban flooding in India. In India, significant flooding incidents were recorded in the cities like Hyderabad in 2020 and 2021, Chennai in 2015 and 2023, Ahmedabad in 2022 and Nagpur in September 2023. This can be your introduction. Now, coming to the body of the answer. In the main body of the answer, first we have to discuss the causes of urban flooding. Second, we have to suggest some practical solutions to tackle urban flooding. Let us start with the causes of urban flooding. See, the causes can be divided into two sub-bedding. First is the natural cause and the second one is the anthropogenic causes. Now, let us see the causes one by one. Within the natural causes, the first reason is the meteorological one. See, India witnesses a very heavy rainfall throughout the monsoon season. Apart from this, the coastal areas of India, particularly the east and coast, experiences storm surges due to cyclonic activity. Here, storm surges are nothing but abnormal race in sea level caused by the cyclonic winds. See, this storm surges along with high tides can inundate low-lying coastal areas. This causes flooding in the urban zone present along the coast. This is the first cause. That is, heavy rainfall and storm surges causes urban flooding. Secondly, India is prone to frequent thunderstorms. These thunderstorms can produce intense and short duration rainfall known as flash floods. The flash floods can in turn lead to urban floods. Thirdly, hydrological reasons like overbank flow can lead to urban flooding. See, overbank flow typically occurs when there is an excessive amount of rainfall over a watershed. If the rainfall is intense or prolonged, rivers and streams can exceed their capacity. This leads to overflow of water from the riverbank and causes flooding in the adjacent urban areas. These are all some of the natural causes of urban flooding. Now coming to the man-made causes. The first main cause is encroachment on drainage channels. See, due to increased land prices and less availability of land in urban areas, new developments have come up in low-lying areas of cities like encroachments over lakes, wetlands and developments. This narrows down the natural drains available for the rainwater to flow during heavy rainfall. This in turn results in urban flooding. The second important cause is poor urban planning. See, urban areas with inadequate or poorly managed drainage system can cause significant challenges during cyclonic storms. For example, due to poor maintenance of drainage system, blocks can develop along the drains. This leads to restriction in the flow of water during heavy rainfall. This can prevent proper water flow and in turn can cause urban flooding. The third important cause is climate change. See, the human induced climate change has increased the frequency of short duration heavy rainfall. Sometime, this leads to higher water runoff in urban areas and causes flooding. Fourthly, unplanned and sudden release of water from dams and lake can lead to flooding in the urban area. For example, the 2015 Chennai floods was caused due to unplanned release of water from the Chembarambakkam lake. Finally, illegal mining can also cause urban flooding. Illegal mining of river sand for use in building construction depletes the natural bed of the river of the natural river sand. It causes soil erosion and reduces the water retention capacity of the water body. This phenomenon increases the speed and the scale of water flow and causes urban flooding. These are all some of the important causes of urban flooding in India. Now moving on to the second part of the question. In the second part, we have to suggest some practical solution to tackle urban flooding. Firstly, the government should take necessary preparedness in the pre-mournsoon season. This includes steps like removing the encroachment along the water bodies, desilting of the urban water bodies, proper maintenance of the drainage channel. It also involves estimation of the emergency needs of the people, familiarization of the stakeholders, particularly the community through training and stimulation exercises. This is the first step that the government can take. Secondly, increasing the flood vulnerability mapping can also help reduce the impact of urban flooding. Flood vulnerability mapping involves identification of the vulnerable areas by analyzing the topography and historical data of inundation. See, these activities can help to reduce the floods by micromanaging the areas of repeated flooding. Thirdly, we can improve the urban flooding governance by emulating the best practices of the world. It includes implementing the techniques like mobile walls of Germany and sponge cities of China. Now let us see about the sponge cities in brief. See, sponge city is a type of city which is designed in such a way to act as a sponge for rainwater. Here, the water is absorbed and allowed to naturally filter through the soil to reach the aquifers. In turn, these aquifer recharge will help fulfill the water needs of the city. The fourth step is with respect to the governance of urban area. See, generally urban governance is plagued by various issues like lack of functionaries and lack of funds. This affects the capacity of the corporation to combat urban flooding. This can be reduced by various steps like devolution of funds, election of mayor for the corporation. Finally, existing green cover of the cities should be protected. The other steps like reforestation and removal of debris from catchment area could also prevent soil erosion. This in turn reduces the impacts of urban flooding. Here, note that schemes like Nagarvanyojna, Smart Cities, Amrut and Smart City Mission are very important. These are also some of the possible solutions that can be taken to address the issue of urban flooding in India. This is the body of the answer. Finally, let us take up the conclusion part. In the conclusion, you can provide some way forward. Your conclusion can be like this. See, urban areas are important centers of economic activities due to presence of vital infrastructure. Our country is undergoing massive urbanization phase. This is evident from 31.16% urbanization in 2011 census. Moreover, according to the World Bank survey of 2030, 40.76% of the country's population is expected to reside in urban areas. So, any hazard like urban flooding will lead to deterioration of life and property for our country, as most of the city assets are in urban areas. So, the government must give necessary priority to conserve the urban areas. Moreover, our government should aspire to have a climate resilient infrastructure in line with the sustainable development goal lover of the United Nations. This can be your model conclusion. So, that's all regarding this discussion. In this discussion, we saw the causes of urban flooding and we also saw the steps that can be taken to address urban flooding. Now, with this, let us conclude this discussion and take up the next news article. Look at this article. This article is providing an analysis of sovereign gold bonds in comparison to physical gold as an investment tool. In this context, let us understand about sovereign gold bond scheme and the important details related to the scheme. See, the sovereign gold bond scheme was launched by the central government in 2015. It was launched under the gold monetization scheme. The main objective of the scheme is to reduce the demand for physical gold. In simple terms, the sovereign gold bonds are government securities denominated in grams of gold. They are substitutes for holding physical gold. Investors have to pay the issue price in cash and the bond will be redeemed in cash on maturity. The bond is issued by the RBA on behalf of the government of India. The maturity period of the bond will be for a period of 8 years with exit options in 5th, 6th and 7th year. Now, let us see the eligibility for the scheme and the limit. The eligible investors include individuals, Hindu undivided families, trust, universities and charitable institutions. Individuals can subscribe up to 4 kilograms. It is the same for Hindu undivided families. In the case of trust and other charitable institutions, they can subscribe up to 20 kilograms. Now, what are the benefits of this scheme? The first benefit is that the investors get a safe investment option. The second benefit is that when investors choose sovereign gold bond instead of physical gold, the risk and the cost of storage associated with physical gold are eliminated. The third benefit is that the investors get assured periodical returns. The last benefit is that the sovereign gold bond scheme is free from issues like market changes and purity in case of physical gold or jewelry form. This benefit makes the bond more attractive for the common man. These are the some of the benefits associated with the sovereign gold bond. Finally, let us see the concerns with the bond. The first major concern is the maturity period. The 8 year maturity period may make a lot of investors uninterested in sovereign gold bonds because the 8 year maturity period makes the sovereign gold bond less liquid than physical gold. The second concern is that the investment in sovereign gold bond may result in a capital loss. How? Let me explain. Let us assume person X has 1 crore in excess cash. He has no business ideas and don't know how to invest. So, what is the easiest option? The person X deposits the money in a fixed deposit account in a bank. What will the bank do? The bank will use the money deposited by person X and provide loan to person Y who actually has a business idea. So, through this, the non-productive capital in the hands of person X is converted into a productive capital in the hands of person Y. But what happens if the person X decides to inverse his 1 crore in sovereign gold bond? The bank will not have money to provide a loan to person Y. This is why I mentioned that investment in sovereign gold bond may result in a capital loss. These are some of the concerns associated with the sovereign gold bond. And that's all regarding this discussion. In this discussion, we saw the basic support sovereign gold bond and we also saw the positives and the negatives associated with the sovereign gold bond. Now with this, let us conclude this discussion and take up the next news article. Look at this news article. A petition was filed by World Boxing Champion Neetu Gangas urging the authorities to review and grant her the Arjuna Award. The Delhi High Court has responded to her petition and issued a notice. This is the news given here. In this context, let us see the important details about the Arjuna Awards. See, this Arjuna Award was created in 1961 to recognize outstanding achievement in national sports event. It is given for good performance over a period of previous four years and for showing qualities of leadership, sportmanship and discipline. The award includes a cash prize of Rs. 15 lakhs, a bronze statue of Arjuna and a scroll of honour. The award was given annually by the Ministry of Youth Affairs and Sports. An interesting thing to note here is that this award is named after Arjuna, one of the characters of Mahabharata. He was seen as a symbol of hard work, dedication and concentration. Note that Arjuna Award is the second highest sporting honour of India. So what is the first highest award in sports? It is the Major Dayanshanth Kail Ratna Award. Now we will see some points about this award also. The Major Dayanshanth Kail Ratna Award is formally known as the Rajiv Gandhi Kail Ratna Award. In 2021, the award was renamed after Major Dayanshanth, who is an Indian field hockey player and regarded as one of the greatest hockey players of all time. It is the highest sporting award given by the Ministry of Youth Affairs and Sports. Major Dayanshanth Kail Ratna Award is given for the most outstanding performance in the field of sports over a period of four years. It carries a cash prize of Rs. 25 lakhs, a medal and a scroll of honour. This award was initiated in 1991 and the first recipient was chess legend Vishwanathan Anand. Olympic gold medalist Abhinav Bindra is the youngest sportsman to receive this award. So that's all regarding this discussion. In this discussion we saw certain prelims related facts about the Arjuna Award and the Major Dayanshanth Kail Ratna Award. Now let us conclude this discussion and take up the next news article. Look at this news article. This article is about the Aroma Mission. See, Odisha's tribal communities were facing difficulties in earning a livelihood from rain-fed agriculture and limited natural resources. But now they have new alternatives to sustain their livelihood. The CSER launched the Aroma Mission in 2016. This mission was launched to enhance the cultivation of aromatic plants. The Aroma Mission was first initiated in the Moon Kashmir in 2016. It was also known as the Lavender or the Purple Revolution. It was later extended to other states including Odisha. Various aromatic plants like menthol, mint, rosemary, damas, crosses were introduced to the Odisha's tribal people. This is because Odisha has favourable climate and availability of vast amount of land. Many areas in Odisha have taken up strawberry and lemongrass cultivation to augment their livelihood. This is about the article given here. See, this case study can be used in the main censor to give you an edge over your competitors. So, make note of case studies like this and try to include it in your answer-writing practice. So, that's all regarding this discussion. With this, we have come to the news article discussion session. Now let us take up the practice prelims questions. We have four practice prelims questions today. Let us see them one by one. Look at the first question. This question is about the sovereign gold bond scheme. Four statements are given. We have to find the correct one. Look at the first statement. They are issued only by the Government of India. The statement is incorrect because the sovereign gold bonds are issued by the RPA. Okay? Look at the second statement. The interest earned from these bonds are free from taxation. This statement is also wrong because the interest earned from these bonds are taxed. Okay? Now look at the fourth statement. They provide a flexible interest rate. This statement is also wrong because they provide a fixed interest rate. Okay? The correct answer is option C because these bonds can be used as a collateral for loans. Okay? This is about this question. Now moving on to the next question. Which of the following grass is cultivated as a fodder for livestock? The answer is D, elephant grass. Elephant grass is actually grown as a fodder for livestock. Okay? Moving on to the third question. It is a three statement question. Three statements about Arjuna award is given. We have to find how many of the statements are correct. Look at the first statement. It was the highest sporting honour of India. This statement is incorrect because from our discussion we know that Major Dayanchand Kel Ratna award is the highest sporting honour in India. Okay? Look at the second statement. It is given for achievement over a period of four years. This statement is correct. This we saw in the discussion. Moving on to the third statement. This award is not limited to Indian nationals. This statement is incorrect because this award is only limited to Indian nationals. Okay? So here only one statement is correct. So the correct answer is option A, only one. Moving on to the last question. It is an assertion reasoning type question. Now let us look at the assertion statement. The finance commission prescribes the framework for the working of the planning commission. This is false because firstly there is no planning commission right now. Also the finance commission does not prescribe the framework for the working of the planning commission. So the assertion is false. Moving on to the reason. The jurisdiction and the functions of the finance commission are outlined in the constitution of India. This is true because it is given in section 3 of article 280 of the constitution. Okay? So the correct answer here is option D, A is false but R is true. With this we have come to the end of the news analysis. If you like today's video, like, comment and share it with your friends. For more updates regarding UPSC preparation subscribe to Shankara IS Academy's YouTube channel. Thank you for listening.


TFNN, headline, news update. Hi everyone, Basel Chapman, here is the Tiger Technician, Zawa, about to start in another few minutes, but we'll first have the Tiger TFNN update. This is noon and it does up 122, it was up quite a bit more, it was up at the 28,944 level earlier this morning, suddenly it kept sliding, it looked like it was just pulling back over 200 points up and it pulls back to about a plus 22, and now it's back up at 119. This is very interesting because for quite a few days here you've had many Dow stocks just in complete opposites.  You've got Apple up 9 at 326, and you've got, what was the other one, and Boeing this time is up, and then you've got a number of Dow stocks down. This is going to be a very important week when we finish on Friday, so let's go through the numbers. We're looking at the Dow having dropped sharply from 29,300 to 28,600 now in the middle of the range, and we've got the S&P a little bit better. It is up 10 at 3286. It hit 3,337 on the 21st, dropped to the 3234 level three days ago. Now it's rallying, but it isn't great. It's looking okay. It's really looking like we're going to get a peak D in the weekly chart. That's going to be important. Look at the QQQ, the NDX100, and this NDX100, quite a bit influenced by Apple. It's at 222, it's up 70 cents, had a high of 225.88 four days ago, a low of 3 days ago of 217.28, and it's trying to rebound, but it looks to me with that Dow G candle in the weekly chart, there's a really good chance that this could be a top for a little while. If we start to trade above the highs that were made four days ago in any of the indices, that's very positive action. I think it's going to be difficult to do. We've got the IWM Russell 2000 very week. Gold is trying to come back a little bit here. It's unchanged at 1570. It's really stuck in a range. Crude oil is in fact trying to rally as well. It's not looking too great. It's at 53, but it's the TLT that we're going to talk about in this next segment coming up, the Tiger Technicians Hour, and I will be back in a few moments. Hope to see you there, and I'll see you tomorrow.


I'm gonna introduce Nathaniel Rubin he has been here last year with a talk that he got some bashing for This year. He's gonna ensure. It's not the programmers fault. It's the language in itself No Well, here we go. Well, here we go. Nathaniel. He's working for parameter X in Tel Aviv. Well come on stage your talk Thank you very much Thank you. Thank you Last year I stood right on this very stage and I talked about several of pearls less thought-out features now, I Got some bashing from the pearl community but Mainly what happened was that the pearl community completely rejected my talk claiming that the the language is completely fine and great and All of those stuff are just improvements It was clear I had to give another talk This is why I am very proud to present Pearl gem to the camel strikes back At the last talk I showed that lists are expressions used in Many confusing ways. I also showed how CGI parameters can create lists Directly from user input, but most importantly I showed then when these two things combine Shit happens But the real interesting part was the pearl monks response The pearl community The pearl community had a long discussion at the pearl monks forum that started with the words sad news from Germany a Bit dramatic, but who am I to judge so after a long long discussion They came to the unavoidable conclusion that my talk was in fact Apollemic shit and they should all just piss on it Wink they also realized.  The first was that I should read the fucking manual Which is funny because I thought I was the only one who did and The second is that I am using the old ancient pearl and not the new modern pearl Remember these two points carefully as I later break them in the presentation, but enough with the intro Let's start with the new madness So Pearl allows declaring variables without specifying their data type of course This functionality exists in many dynamic languages and it's completely fine and very convenient But as usual Pearl took it to a whole different level Pearl went as far as removing data type declarations from function arguments You can see that in this example, I'm just receiving two different arguments without knowing what type there are Let me be clear about that. You don't get to choose whether you want to specify argument that types or not You can't specify what data types you're expecting to get So even if I build a function that only works with strings I have no way of forcing that at the function declaration. No, that's annoying but the real kicker is How this feature is used Apparently it is very common to write two completely different blocks of code One that handles scalar types like strings or ints and one that handle non scalar types like arrays or hashes Let me repeat that Write in multiple code for multiple data data types in one function is a pearl standard and that's sad You shouldn't write Redundant code because the language lacks the capability of letting you decide which cases you don't want to handle By the way, Python doesn't let you declare your function argument data types to but unlike Pearl Writing redundant code to cover that up is definitely not the standard Anyway said as this may be this pearl convention is not dangerous The dangerous part begins when hashes and arrays are considered as secure data types Mainly because they can't be created by user input These results in this kind of code where if the function argument is a hash For example, it is used unescaped in dangerous functions hashes Specifically are considered so secure that even if you use taint mode, which is some kind of safe mode for pearl Hash keys are not tainted meaning that even if you use that safe mode They can be still used in dangerous functions without any validation as opposed to other data types Now this kind of code appears a lot in pearl applications and apart from the many bugs This method can cause it also makes your coid exploitable So we know function arguments are of unknown data type and we know developers treat hashes and arrays as secure data types inserting their values into dangerous functions But these practices isn't something that was created a long time ago and found only on redundant code Because of how the language is built. It's supposedly Restrictionless type of developing even now it is the natural way to code when you're using pearl and That's the real problem pearl is like a shotgun with one trigger, you know about and a dozen that you don't So for now we know that if we'll somehow manage to create these secure data types with our user input We could exploit the code So the only question remaining really is What are we gonna exploit and the answer again? Is bugzilla? Like every other pearl project bugzilla is heavily using Functions that treat scalar and non-scalar argument types very differently This is one of them the load from DB function is responsible for extracting object specific data Out of the database like I just said it treat scolars and in this case hashes very differently If the function argument is a hash It takes one of its values and insert it as is Unescaped into an SQL statement Again because hashes are considered secure. So there's no point of escaping them on the other hand if the argument is a scalar it converts it into an integer and Only then use it in an SQL statement because scalar values are not secured Hashes secure scalar not secure This means that if we could control the function argument Entirely including its data type. We could control the SQL query Effectively exploiting an SQL injection attack by inserting a hash containing that specific value but CGI input doesn't allow hashes, right? The whole pearl security module is built on that assumption The problem is that like us Developers are assuming CGI input is the only input method available CGI But CGI isn't the only way to go Baxilla developers miss the fact that their own System is also featuring an XML RPC and a JSON RPC both Supporting input of non-scalar data types like arrays and hashes But I'm not blaming them. Yes, they forgot that there are more ways for a user to input than CGI But still they're just the product of how parallel programming is taught Filled with false assumptions and inconsistencies Expecting anything, but this kind of security problems is just naive But back to the vulnerability if we'll use one of these RPCs Sending our input parameter with a malicious hash instead of just a regular numeric parameter We will be able to exploit the SQL injection So if we'll send this regular request using the JSON RPC interface The number one will be used as the idea of a bug to extract But if we'll send this request where instead of an integer will supply a hash Then suddenly we will be able to inject any SQL we'd like into that statement effectively compromising the entire database Now when you look at this request You realize that this is not a sophisticated vulnerability All I did was just change the input data type from Scalar in this case to a hash and that's it The system is compromised It was so heavily built on the assumption that hashes are secure that it offered me almost Unlimited access Security-wise The funny thing about that is that although it's so simple The attack has existed for over five years that that's there. I was born in So we now proved this unknown argument type feature is a huge source for problems We also know writing different code to handle different data types just causes a lot of false assumptions but most importantly Treating non-scalar data types such as hashes as secure just because they suppose they can be created by the user is Very very bad. Just x-esque bugzilla But the shocking part really is that again? This is the pearl Standard you're not Expected to use it you have to as you don't have any other choice This security mess is a fundamental part of the language The problem is that creating non-scalar data types is impossible in some cases We can't rely that some kind of RPC will exist in the code and support different data types And we can't create data types using regular user inputs, right? Let's have a look at how different CGI modules and a different kind of input First we'll take the most trivial scenario a single values parameter Something that looks like this request where the few pro full parameter is assigned a string bar in this case a Scalar is created on all three CGI modules Which doesn't really help us, but it's pretty much what we've expected it is secure but what happens if Instead of sending a single valued parameter will send a multi-valued parameter like in this request Now things are starting to get complicated on CGI PM as we already know at least is created Which is very useful for us? But not what we're after Let's have a look at what the new Perl modules are creating. We'll see that both of them are returning arrays containing our values Arrays What I thought you can't create this kind of data types with regular input after all they're considered safe But let's continue What happens if instead of sending a regular value will try and upload the file in that parameter? Now things are really getting out of hand because CGI PM now returns a file descriptor and catalysis and modularity modules returns a hash What? We just Exploited the most popular Perl project in the world because they assumed hashes can't be created by the user and Now we're finding out that not only we can create hashes.  The whole Perl security standard is built on that assumption That user can't create non-scaler data types and now suddenly these are features But let's send a Multifile upload request as in several files in the same parameter Watch closely Because this is where it gets ridiculous now CGI PM returns a list of file descriptors Catalyst returns a list of hashes and modularity returns an array of objects What? Almost any Perl project in the world Uses one of these modules for parsing CGI input Just think how many developers assumed the exact same thing Baxilla assumed and treated hashes and arrays as secure data types So if you're using CGI PM Instead of the expected scalar value you could be getting a list a file descriptor or a list of file descriptors And if you're using catalyst you could receive a scalar an array a hash or a list which is basically any data type So expecting your function Yeah, so expecting your function argument to be of a specific data type is false Expecting hashes and arrays to be secure is also false Expecting a scalar only user input Is a major false and to be honest it seems that in Perl Expecting is false You just can't expect anything Even the most basic of things such as what data type your variable is made of you just Don't know But I felt all of these points Will go unnoticed Without an extreme example of Perl's absurdity So I found an extreme example One that will clearly show the ridiculous nature of the language and this is it All this code does is sprint and uploaded files Content and to show you how basic and simple that code is I'll explain each line The first line just creates a new CGI instance so we could get the file from the user The second line checks if a if a file has been uploaded in the file parameter The third line gets the file descriptor from the CGI module While the fourth line loops through the file and the fifth prints it That's it again. All this code does is get a file and print it That's it a user has uploaded a file to the server and the server is just returning its content It's not saving it anywhere. It's not moving it anywhere. It just prints its content There should be absolutely nothing dangerous in this code It contains literally five lines yet It's demo time So trust me, you don't need to see the text. All you need to see is that when I'm sending a regular request Nothing happens. We're gonna send it now. Nothing happens. I'm just getting the file content. We're having fun You don't see the burp. Okay. No nice, okay, so Me just I Have no idea where my mouse is. Okay, so I'm sending a regular request. Nothing happens. Just getting the content. I know you can see the text and When I'm sending my malicious request Something interesting will pop up watch closely. It's gonna be quick Ready. Oh, you haven't seen it. Oh, it's in the different skin. Just a second Duplicate I'll magnify you So Watch closely Well, whoo, what was that? Let's see it again Well, just a second So you're probably asking yourself right now.  Was that a terminal screen? And the answer is yes. Yes, it was Specifically the IP config command outputs or in other words what you just saw Was me exploiting that five lines With an remote code execution attack So now that you saw the magic happens. I think it's time for some explanations The first line responsible for checking if a file has been uploaded in the file parameter Doesn't exactly do as it says Instead of checking if the file parameter is an uploaded file It checks if one of its of its values is a file descriptor Let me clarify that Instead of checking if the parameter is only a file. It checks if the parameter is also a file I Mean that uploading a file and assigning another scalar value to the same parameter will still work and bypass that check What? creative fellows those guys are So now we can assign the file parameter both a regular file and a scalar value But what happens when we try to get the file parameter value in a regular request? It should return the uploaded file descriptor But now that we're adding another value to that parameter param returns a list Containing all the values we sent the file we've uploaded and our scalar value But the file variable can't contain two values, right? So instead of converting the returned list into an array Pearl only uses the first element of that list So if we'll send our scalar value Before we send our file The file variable will be assigned our scalar value Instead of the uploaded file descriptor Which means that file is now a regular string What? But what happens to this operator when we use a string instead of a file descriptor? Well, the break it operator doesn't work with strings, right? It works with file descriptors. Why should it work with strings? Well, that appears true Unless that string is argv That's not a crazy part in that case the break its operator closely Loops through the script arguments Which in CGI comes directly from the query string instead a command line and it treats them as file paths inserting each one into an open call What that made sense in some point, I guess So all of this basically means that now instead of displaying our own uploaded file content We can display the content of any file on the server But that's not the end as we haven't executed code yet To execute code We have to look at the open function again This is the function being called with the argv values as file paths Open is responsible for opening a file descriptor to a given file Unless a pipe character is added to the end of the string And in that case Instead of opening the file it executes it Acting as an exec all Full sender exploit containing our uploaded file The argv malicious scalar value and the ipconfig command followed by a pipe This is what we get What? What?  This is how it could be exploited. There's no exec alls The file is not saved anywhere and we're only using a print The soul responsible for this mess Is the pearl language? Pearl is the one silently expanding glyph Pearl is the one mixing up your data types pearl is the one executing user input with no exec for calls Pearl is the problem Not its developers And until this god damn bizarre dangerous language is fixed You could only stop Using pearl so I guess we have some time for questions now Maybe and I have the funny feeling we will have some questions now Okay, so we have some microphones here. Please queue up. We are not please do not shout in Because we need to record it on the stream Well, here we go. And we also have some questions from the internet. Don't we? Oh, oh, yes, we do But before you we come to the technical questions the IRC wants you to know what you did to it It felt like there were explosions and camels everywhere and incidentally They want to know if you have a list of those camel pigs somewhere. I think Google has it Just your search camels So for the first for the first question or Pella wants to know if the takeaway is that pearl project authors So shouldn't trust input and instead verify types with ref and always use prepared as well statements That's a good question the takeaway should be the takeaway should be that Well, how will I phrase it? I don't know. I think I have a slide Somewhere. Oh wait Where's my slide? Don't worry. I have it right here but really Trusting user input is always a bad idea and most developers know it the problem is that Well, at least from the code I saw written in pearl and that's a lot of code trust me is That hashes and arrays are almost always considered secured as they supposedly can't be created by user input as I said but When you're expecting your user your user input to be a scalar a string Or even a list. I don't know and instead you get a hash from I don't know unexpected directions You get confused and You can't always live in the fear of not knowing what Data type you're trying to handle. Well, not trusting scalar data types is a wise decision because It's not it's dangerous, but not trusting your hashes as well not trusting your arrays What's next like not trusting your own code? You just can't expect Anything to really work as it should when you're writing pale. You're all since you're constantly constantly Attacked by by all of these different directions and even the data type direction is a problem now. I Hope that answered the question Beside the slide. Well, then we're gonna go over and start with number one So, thank you for opening our eyes. So even I use pearl I would say for cooking and I remember you sorry, I remember from the last talk. No, no. Oh, you're new So I can say I'm not guilty of that, but I still would say yes pearl is like cooking a bit like cooking with my mom so sometimes I put something into the The with the boiling thing and sometimes she sometimes I go away sometimes she go away and the only thing you can do is always taste and Yes, you are maybe right pearl is a language where you never know what comes out But it's real cool. So if you get the right response, you can use it if you use it to write web applications I would agree web applications a professional one at least are not for cooking But for doing funny things and have some fun. I think it's perfect language. I think pearl is a lot of fun. I Completely agree on that Then we're gonna go over to two Was your life ever threatened while interacting with the poll community? Could you please repeat that? I was your life ever threatened while interacting with the poll community. Definitely Definitely, I'm getting hate mail every day living in a fear and Over to the three, please. I think I speak for all of us and thank you for this wonderful talk Thank you Thank you, really Brilliantly executed, but you spoke about Five I think yes, and as some of you might know this Christmas So tomorrow Ingo Blechschmidt is going to give a talk about how Post six will make everything better and how everyone should start using post six and it also grabs rainbows. Yeah, of course My personal comment is wouldn't have happened with a statically type language, so I think some Nice folks at Haskell on IRC are waiting for you poll developers to please come join us Thank you We're gonna take the next one. Oh, sorry answer first one. I'm sorry. I'm not answering. I'm just a quick note about pearl six This talk is all about pearl five. All right. I pearl six came out like a couple of days ago and From at this point what I saw pearl six is to pearl as C++ is to see It's the same name, but it's a whole different language. So yes, this is pearl five Maybe I'll come back next year about pearl six. Who knows I'm looking forward to that already Yeah, you're the ones to know Of course you talked a lot about CGI PM Which you knew was removed from a repository from Pearl even before your talk last year So what about it's replacements from C-Pen like CGI simple? I don't know. I haven't checked it when I've Decided on which modules to check I took CGI PM because even though it is old It is the most popular in the world as of today and I took modulations and cat and Catalyst catalyst because they were a Really popular too. So I didn't take the newest modules. I take the most popular modules and I think that's the important aspect of Deciding and over to one, please Hi part of the port community and But I just start with pearl five and I Didn't you We use pearl for almost every module what we have at work and it's work really fine and Yeah, I don't know why you're picking pearl as a language to attack. It's a really old language It's also every language that you can pick that has Problems, but it doesn't mean this has to die or stop using it You're right on the why you're right. You're right. First of all, you're completely right because a language shouldn't die It should improve see got criticized and it improved PHP got criticized and it improved Why can't pearl be criticized too? Why why is it like a cult when you say something bad about pearl then I know a herd of pelomonics jumps on you Why don't improve the language? Don't use it in your work though. It's dangerous Then we're gonna jump over to five please Hi I'm not a pearl developer, but I use a lot of Ruby and Python Is this really limited to pearl or does this apply to more or less any dynamic language? As I said in the one of the first few slides Some of it also applies to Python specifically that the thing when you can't specify what data types your argument your function arguments can get but What's unique to pearl is that? Writing different code for different data types in one function is very very common You can do it in every language of course, but it is very common only in pearl and That's what unique about it. Of course besides the thing that hashes and errors are secure. That's That's of course pearl pearls only fault Good. Now we're gonna go over to six, please Hey Did you say wet more while preparing the stock or while holding it? Both Did they rent that was the right Did you say it more while preparing it or while holding it? I'm missing your word man. Can you ah? What what? Oh Yeah, both Yeah, okay, do we have another from the internet? Does your exploit also work in tainted mode? I know I believe not no it doesn't and another one Is there any pearl of you? Op you skated code exploits like this for a catalyst or a motorless yours? I have no idea man. Maybe I didn't check it. Of course. I didn't check every module for every exploit I ever want to create but On on cgi pm, which is again the most popular cgi library So Maybe the internet can find more exploits. I Know it. I know it can Bring it on. That's it That's it Thank you Thank you very much. Thank you


In this video you're going to learn how to use further and farther. These are one of the most confusing pairs in English even for native speakers but don't worry I'll make it nice and simple for you. Of course I'm Jennifer from jforisenglish.com and this channel is dedicated to helping you sound like a fluent confident natural English speaker. Now before we go any further make sure you subscribe and hit that bell icon so you're notified every time I post a new lesson. Now let's dive in with this video. Today let's talk about the difference between further and farther. Now both of these are adverbs and they're both used to talk about something that's to a greater distance or degree so they can be used as the same meaning. So what's the difference? The easiest way to remember the difference between these two and which one you need in your sentence is to remember that farther is used for physical distance and the way you can remember that is farther has the word far far and far is used for physical distance so that's a great way to remember this one. Now if farther is used for physical distance further is used for metaphorical or figurative distance. This is best explained using an example of course. So let's imagine that you're going on a road trip with your kids okay.  A road trip is when you go from one destination to another destination by car and it's generally a long trip so maybe 12 to 24 hours driving or maybe even longer.  So you tell your kids that you still have 12 hours left it's a long road trip so you're driving, you're driving, you're driving. Now you get to this point where you can't drive any farther you can't drive any farther so physical distance. So let's imagine you get to a construction site and the road is blocked off you can't drive any farther. Now you see there's a police officer and you want to get some information about what's going on so you ask the police officer why the road is closed and he tells you that there's construction he gives you a short answer okay. So now you can ask him do you have any further information do you have any further information because you want information beyond what he gave you greater than the degree that he gave you so further because we're not talking about physical distance this is metaphorical do you have any further information now the police officer could give you a few more details and then he could ask you do you have any further questions same thing it's like saying do you have any more questions do you have any more information further and it's not physical distance. So that's the easiest trick to remember them farther is with physical distance now just keep in mind that native speakers confuse these all the time and often use them interchangeably so if you're ever in doubt and you don't know which one to use I recommend using further further because it's the more common choice and it's more likely to be grammatically correct in a sentence so you have better odds using further so if it's clear that it's physical distance use further if you're not sure I suggest just using further so now you know the difference between farther and further and you probably know more than a native speaker right now so before you leave it's time to practice I want you to leave two examples in the comments below of course one with farther and one with further and if you found this video helpful please hit the like button share it with your friends and of course subscribe now before you go make sure you head on over to my website jfrisenglish.com and download your free speaking guide in this guide I share six tips on how to speak English fluently and confidently and until next time happy studying all right awesome job now you will never confuse these two again right nice and simple for you now make sure you practice them so you remember that rule and I'll see you in my next video bye


So this is the Epson eating-based watch. You have this launch on the market. So you call this the smart canvas. So what's smart about it? Very difficult to explain. Even in Japanese. So what is happening here? This is a time? Yes, time, date and time, and the character changes time by time and day by day. So every day the character changes. And every hour this character changes. Nice. So how many different characters can it be in the watch? That's the top secret.  That's pretty cool. And what's going on here? You can check the date, date and time very clearly. And for the other graphic, you can check the beautiful graphic. And that clock shows the correct time. Nice. And can we look in the back? So sample. Is it okay? That's okay. So this is wool. And this is... Moomin, I think. Moomin. And then you have, right here you have a football team. Domestic football team. Yanaga FC. Football team is doing like this. And this is the football mascot? Yes. And then what happened here? Some different mode also you can click somewhere. What happens if you touch here? What is this? We are always... I don't know. Sure, a bunch of different stuff. So the idea is you can buy a watch and the price is around $180. And it's for sale. Since when? It's for sale. It's very new. Just started now. Some months ago, it's not in the sale. So you have all these nice different designs. Cool. And it's for sale in the stores? No. On the internet? Absolutely. Internet shopping. Nice. So this is perhaps the coolest Japanese watch so far. How long has the battery life? 3 years. Nice. Because it's not the LCD but also this is the EPD. You work together with Seiko? Same company. So Seiko work with Epson on the E-Ink watch. They have a very cool E-Ink watch. Very special one. Only collectors, right? Very expensive. The one they have. This is... Right here. Cool. So the movement is Seiko watch. So there's a Seiko movement inside? Yes, Seiko movement. And also we have printer. So we use this area for our future. Our Epson printer. For the belt and the NUMI logo as well. So how about maybe in the future there will be smartwatch? Bluetooth connection? It's possible. It should be possible but no plan. No actual plan. Nice. And there's a nice one there too. This is... Good old one.


What's going on guys welcome to another video and today I have a pretty cool topic You know this topic right here has probably been the number one topic that everyone's been asking me You know I've had so many people I can't even tell you how many people I've had it asked me about this topic And I'm finally getting to talk about it. I'm not gonna whip out a sheet of paper and start You know Asking that you're talking about all these things. I want to make it really simple on you guys Make it really really really simple. I just posted a video a few days ago and I read a lot of comments You know and a lot of cops were like this, you know, I want to get my first sponsor and bass fishing How do I get sponsors? How do I go about doing that? How do I work my way up to that? and you know, it's really it's really more self-explanatory than you think and That's why I'm going to talk about this today And you know, I could go up to all my sponsors and say what are you looking for but I know what they're looking for and I Mean I could do a video on that as well if you'd like just more little in depth But for the most part, I know when most sponsors are looking for and I know what you could do to definitely benefit Benefit you and your fishing career and get some more sponsors So to start off with everything One question I want you to ask yourself, why do you want to sponsor? And you need to think about that you need to ask yourself. Why do I want to sponsor? Whether it's free bait or you just want to have someone on your jersey or you just want to start off in bass fishing You and you'd like to get a sponsor you know, there's there's many of Reasons why you may want to sponsor and so to go about this on my perspective on what to do social media is The new generation this generation is the best generation that's I'm thankful enough to be in this generation and social media is so Big in this generation. I know all you guys go into high school. You'll see all these kids out on their phones before class I've been there. You'll see people text them while driving and they're scrolling through Instagram while driving You'll see people laying in their bed before the good bed just scrolling all through I know you guys do it too. We know we all do it. I do it myself and Social media is so powerful. There's so many people on there and what I would like you to do There's many different ways. All right Back in the day when I wasn't around There's a lot of you know, there's a lot of pro bass fishermen that had a lot of sponsors They had a lot of big sponsors. They had a lot of big money sponsors, which is awesome You know, that's great. They never had to use social media. They use their results To get sponsors and that is great. You know, that's amazing. But how about you not only use results? But you use social media as well. That's double the killer right there. If not 10 times Social media is so big only so many people are watching All these big tournaments like online and going to them And if you figure out about this term is how are you figuring out who won this tournament? You're figuring out on your phone on social media. It's So big and so this is what I want you to do.  I'm gonna talk about Facebook first Facebook You know is a lot of I guess you could say some of the older crowd in a lot of businesses So that's a whole different audience Instagram's a lot younger kids a lot older people and everyone's on Instagram nowadays And that that's a really good platform YouTube, you know, you're expressing your posting videos But honestly, you don't even have to jump into that right yet I would just start off with Instagram and Facebook Twitter come along You I mean, I do everything from Instagram personally. So Instagram is the main platform So build up start posting or fishing pictures go out fishing, you know post a post a fish Fish picture that you caught that day or if you didn't catch a fish, you know post a picture of your rod and reel or post a picture of the water post a picture of a bait on your deck or your boat or post a picture of You fishing off the bank say I love pomp and who likes pomp fish and engage the audience Once you start to post this picture start using hashtags to start you off with start using bass fishing fishing You're using the chatter baits to hashtag chatter bait fishing Tag those companies. They use a chatter bait to catch that fish tag Z man. If that's the company Start reaching out people who come along the way, you know, people people will start to get on your page Once you build up a decent amount of following to where you feel as if you have a good amount of people watching you You need to create a resume not only stating You know, I want this turn. I want this turn. What else have you done? Have you done some seminars?  What's your grades? Put your grades in there. Put your achievements in there. Put what what you have done that's what you need to put in there and When you go up to a sponsor, I prefer going up to them in person if you can get to any of these expos I cast a bass masterclass. That's the best places for you to contact these companies or you can just contact them online But you know, most of these people get messages saying could you sponsor me much? I mean I could but why that's gonna be the first point. Why would I that's their first question? I my what I have built isn't just a personal thing. It's a business kicking the rest is a business and so I get what all these businesses say and When you go up to those companies, the first thing they're gonna ask you is what can you do for me? All right, that's why you need to have a resume built with everything you've done You need to have your social media on point say I post five times a day I'll tag you in all my posts. I have this amount of following. This is how many people are getting reached out to each post All these people are calming all my stuff You know, I'm making videos. I could actually do reviews over your products. I can go use your products I could do cool stuff with your products But why would they sponsor you? That's why you got to come to them. You got to be prepared That's the biggest thing you don't ever and there's one thing you don't want to do in the fishing industry one thing is all these companies Are all they all know each other. All right, you never never ever Need to break a bridge or burn a bridge whatever you want to say Never never never burn a bridge or the company Because they all know each other. So just be kind and polite as you can if you go prepared to these You know where you're talking to them or emailing them. Whatever you're doing. If just you have to what All right, say say you have a kuma over here rotten real company say That they're gonna give you 20 rods and reels for free But what are you doing for then I believe truly in my heart and what I've experienced with all these companies if they get I'm just using this as an example if they give you $2,000 a month You need to give them $4,000 in advertisement a month. You need to give them double of what they're giving you they will respect you a lot more your name will get bigger in the industry and You know, that's the best thing that can happen Not only in this is the thing once you get one of those sponsors as I promise you once you get one of those moderate big name sponsors Your name will spread you will you will start you'll notice it's gonna open doors Like I said, never burn bridges. It's gonna open doors into all these other companies You know I'm with this rod company. That's my first sponsor And all of a sudden they start talking that you know the soft plastic company or they start talking to strike king or somebody and then Hey, you should go check out this kid. Boom. You're in the door So put the effort in Before you get your first sponsor or getting some of the bigger sponsors Put the effort in create a resume build a platform that you could promote them on and I know you guys can do it I know you can do it. Don't say you can't don't say no, you know We don't have the platform that you have I don't care if you don't have the platform I know you can and I know you will Do great and create a good platform if you put forth the effort and you do 100% you will do it I know you can I know you can But you know, I could go really into depth with this like I said, I could talk to my sponsors about and say What do you think I should state in one of these videos? but I this is one I just want to keep around 10 minutes, you know short and simple and To the point where this is everything you need to really go get sponsors And that's some of the important tips that I would suggest you use to get sponsors But you know overall, thank you guys so much for watching Seriously, I hope you guys take these tips go apply it And hopefully go get some sponsors. Look, I love seeing the community grow guys Go create, you know Instagram Facebook fishing page and stuff and go. I love that. I love that I love seeing some of the younger guys, you know, you're in this is the perfect time that there's no rush No rush There's one thing is patience to be patient. I've been doing this for six or seven years And it's finally stuff's finally starting to come on Just be patient If you look at all the millionaires they never they didn't wake up one day and become a millionaire It took them, you know, five 10 15 20 maybe even 30 years You just got to wait and this is a perfect generation for it Especially missing young guys watching me 20 year olds 25 year olds 30 year olds even 40 year olds. You're not too young I think if you're 60 you're not too young if you have the drive to do it, you can do it, you know, it's just It's there If you have the drive deep down in your heart to do it You can be 75 years old and if you are able to get out there and do it and you have the drive and you can Get everything done then go do it you can do it. I know you guys can do it But thank you guys so much for watching leave a comment below on what you guys think about stuff that I said And hopefully this can help you out to get some sponsors and everything because this is one of the number one questions I get asked and I'm so glad I can sit down and finally like Express my opinions on this, but thank you guys so much for watching. I love you guys so much I'll catch you guys the next episode


What's up everybody, Jason here for jasperjase.com. This was our last filler to unlock Origins Football. We're giving away the last seven spots in Origins Football with this 2020 Prison Multi-Pak Cello Break, number 288. So again guys, first we do the break, randomize the customer names and teams, distribute the hits out, and at the end of the break we'll take all 32 customer names, randomize them, and the top seven. I know it's a little bit tight, but I don't think they changed this though, part of it, but top seven win, the last spots in Origins Football, which of course will be coming up next. And you get two random teams in that Origins Football as well. So here's the dice roller, let's roll it. We got ourselves 203 for five times, good luck. One, two, three, four, five. Peter, down to Eric. Two, four, there you go, five times. Bangles down to the Buffalo Bills. All right, again, there you go. No trans guys, stick to what you got. Quick little cello pack. Kamara with a Tua and Jason Huntley, Phillip Rivers, Shaq Thompson, and Terrell Lewis. All right, so there you go guys, quick little cello. Lost Boys is on in the background though, Hollywood. All right, let's switch teams now. And again, top seven, get in one and a two for three times, good luck. One, two times, top seven, get in. Eric's in, Gerardo's in, Jesse's in, Jackson, Chad's in, Joe's in, and Joe, look at that. Top two for Joe, nice.  Oh, it was probably the printer, good thing you could call Dylan. Yeah, the printer's right behind the mic, so that's probably why. So there you go everybody, top seven in. Congratulations guys. So coming up next is the break itself, which is a four box, two random teams each break of Origins football. Jaspy's casebricks.com, thank you.


Hello, everybody. I'm live here to answer your questions. I've got a few that have come in already, so we'll start with those. But I would love if you pop in, if you are here today, tell me where you're from. Say hello and please drop in your questions. I'm going to get my screen here so that I can see those coming in as I'm talking to you. And like I said, just feel free to drop in any questions. Say hello. Tell me where you're from. And we will be on for today's Friday afternoon live Q&A with Dr. Jill. I always love connecting with you here and answering your questions. And like I said, what I'll start with is a few that have come in beforehand, so we'll go there. So please stop in. Say hello. Tell me where you're from. Dana, you would ask a question when we mentioned that we were going live today. You said I have mold, Lyme, and Crohn's. I'm so sorry. That's a trifecta, if there ever was one. I had a doctor give me prednisone and it made it so debilitating the pain that I could not walk for a while. Is there anything you can do to reverse what the steroid did for me? Well, first of all, I really should say I'm not here to give you specific medical advice, because obviously I don't have a relationship with you as a patient, but I can give you some kind of general things and I'll do my very best to still answer all of your questions. So gosh, what probably happened? A lot of times steroids are used to treat inflammatory bowel disease or sometimes when there's nonspecific immune inflammation or autoimmunity. Steroids are one way that we've had for a long time that calmed down the immune system. So often doctors will prescribe steroids when the immune system is inflamed. So for example, someone who has autoimmune alopecia where there's scarring hair loss, often they'll get a steroid because of the scarring hair loss just to calm that down, but a steroid is very nonspecific. So it calms down the whole immune system kind of puts a wet blanket on it and downstream that can be problematic because it weakens the immune system's ability to fight infections. So our immune system was created and is made to actually fight those infections and those things like Lyme disease, Epstein bar or old viruses or things. So when you mention that you have mold and Lyme disease, when you take that steroid, you're actually suppressing your body's immune ability to fight off those infections. So it's possible that some of the flare of the pain came from that steroid suppressing your immune system and then old infections popping their heads up like Epstein bar or Lyme. Lyme in particular, Borrelia especially can cause a lot of chronic pain. So that may be the issue of why that popped up. So what to do? Well, what I would do is there's a lot of ways to treat chronic Lyme disease. That would be a whole hour lecture in itself, but there's many herbal tinctures. There's things like the Calvin protocol, Byron white formulas. If you haven't read Buehner's protocols or listened to maybe Darren Ingalls has written a book. Dr. Klinghart has written some books. Kindleer, gosh, I'm not even naming all the greats in Lyme to Dr. Horowitz, but those all are great resources on Lyme disease and it can be incredibly complex. The treatments often combinations of either antibiotics, medications or herbal. And I do find it works best to combine because just antibiotics alone don't typically cause a complete cure unless you use herbs and things to support the immune system. So that's a lot. But I would go after if you feel like the Lyme has flared with the steroid go after the Lyme with some tinctures. Some there are some essential oil blends and things as simple as that to get a start on the biofilms that might help. Other things that might help your pain are just SPMs. On my website, Dr. Jill health, you can find SPM active or SPM Supreme or even my very favorite mega mega, which is the combination of fish oil and SPMs together. And those are all really powerful anti-inflammatories for pain. Another one of my favorites is Dr. H. Rejoint at Dr. Jill health.com. And that one has a wonderful combination of celery, baswalia, garlic, all natural anti-inflammatories. If you have a lot of chronic pain. So, and there's other things like CBD tinctures and things that can help with pain too. And I'm so sorry you're going through that Dana. Bernie, he said I would love to see a doctor you could recommend where I live. I live in the Bay Area near San Francisco. I feel my team of doctors does not take the time to help me with issues and stick to the average lab results without taking into account symptoms. I suffer from Hashimoto's and probably heading into perimenopause and feeling so off. Bernie, I'm sorry. Gosh, it is sad, isn't it?  So I know how the system works. And they, there's a purpose for that if we're, you know, an accident or have a heart attack or something we want to be with the best medical center. But as far as looking for root cause or really taking the time as a medical detected to look deeper, you don't always find that. And I'm sorry you've had that experience. What I recommend is there are several organizations depending on what you're looking for that you might be able to find a doctor in your area that's well trained. I always recommend IFM.org, which is Institute of Functional Medicine Training Organization for Physicians Who Are Trained in Functional Medicine. You can look at A4M. They also train integrative and anti-aging medicine doctors. And if you're dealing with Lyme or mold, a lot of the environmental toxicity, you can look at ICI, which is International Society for Environmentally Acquired Illness, ISEAI.org. You can find physicians trained, especially with mold or chronic environmental exposures. And then ILADS is a great organization for specific training with Lyme disease. And that's I-L-A-D-I-L-A-D-S.com. And those are all great resources of where to maybe find physicians that can help you dig a little deeper. So thanks for that question, Bernie. Hi, Nola. Nola says, I have gluten sensitivity prior to H. pylori 12 years ago. H. pylori is an infection in the gut, in the stomach, and it can cause heartburn, burping, belching, bloating, and sometimes even pre-cancerous things. So that sounds like 12 years ago. Positive again on stool test as well as bacterial imbalance. Prior history of alcohol use been not so much in the past 10 years. Gallbladder removed in 2008. I have lymph nodes popped up on my fingers six months ago. Bad pain after last round of antibiotics. It's better but not gone. Feel best on a keto diet with fasting. Joint pain is rough. Staying away from gluten. Green smoothies with flax and chia, 25% fruit, pretty much off dairy but not coffee. So lots going on here. Kind of wanting to know what to do next. So is there any hope for me? Well, yes, Nola. There's always hope and thanks for asking. So first of all, let's talk about H. pylori. There is lots of natural treatments for H. pylori and I have found this to be successful and very helpful for some people. Mastic gum is one of the mainstays. So is berberine and so is bismuth and zinc carnicine. Those are my quad therapy for natural treatment of H. pylori. And if you do them in the right doses, they can be very, very effective. Usually you need eight weeks of those herbs. Mastic gum, berberine, zinc carnicine, and bismuth versus the typical two week course that's medication. But it can be very effective and especially if you have chronic H. pylori, taking those herbs together for a period of six to eight weeks can really, really improve your symptoms and often completely eliminate or eradicate the H. pylori. The other stuff, the bacterial dysbiosis. There's many herbs, things like berberine or undolysic acid or grapefruit seed extract or uva ursi. Just to name a few are great antimicrobials for the gut. And I'm a huge fan if you have bacterial or fungal dysbiosis with spore probiotics because they tend to increase diversity in the gut. So this is a great way to help heal your gut long term. The other thing I really like, no matter if you have fungal overgrowth or bacterial overgrowth, is gut immune powder. You can find on my website, drjilhealth.com. That gut immune powder has been shown. It's made of bovine immunoglobulins and it will passively bind some of those pathogens and things that are in your gut and be a real help to eradicating bacteria. So if you start with just a spore probiotic, my favorite is the one on drjilhealth.com. It's spore plus IG. And then if you want to add additional IG, you can use gut immune powder. And then like I said, you can do berberine. We have a product called Mastic Plus that has all those ingredients for H. pylori. And that's a real effective way if you want one thing that has everything. Hi, Michelle from Maine. Hi, Carol from Sarasota. Stop in, say hello. Tell me where you're from. Hi, Todd. Referrals. Yes, I mentioned that just a few minutes ago about where you might find other doctors. And I am actively working on finding more medical help at my office because I sure would love to help more of you out. So that is in the works, but still in the works. Hi, Don. Great to hear you here from you. And thank you for your kind words. What are my thoughts about bad IPS issues that seem to be not getting any better? I wonder if you mean IBS? Yeah, I think IBS would be irritable bowel syndrome. So typically irritable bowel about 60 to 80% of irritable bowel is actually small intestinal bacterial overgrowth. So that's SIBO, S-I-B-O for short. And that can come from dysmotility, meaning lack of normal motility of the bowel, often if we're in stress or fight or flight or all kinds of things, even old tick-borne infections like Lyme disease can affect gastric motility or the migrating motor complex, which is the motor agent that causes peristalsis in our small bowel. If that's stagnant and not moving, we tend to get overgrowth.  And so that lack of movement creates stagnation and then overgrowth of bacteria. Other things that can contribute to SIBO or IBS are lack of hydrochloric acid to lack of stomach acid or lack of pancreatic enzymes. And even lack of bile flow, if you have bile stagnation or problems with your gallbladder, can cause issues with SIBO as well. Bile is a natural agent that sterilizes a small bowel and prevents SIBO from occurring. I would say I would go with a breath test to detect if SIBO is present. So typically I use TrioSmart or Genova 3-Hour SIBO. Those are two companies that do great testing. TrioSmart is the only one I know that currently does hydrogen, methane and hydrogen sulfide, which are the three types of SIBO. So that's my favorite test. But there's many other tests out there, their breath test. You can also do organic acids in the urine to look at bacterial and fungal metabolites in the urine. And then you can look at a stool test. So that would be, if you have all the money and time in the world, the idea would be stool test, breath test for SIBO and to do a organic acid test. Hi Taylor, what's good testing for parasites? You're right, it sucks and it's really hard to find, that's what you said, so I'm just quoting, but true. It's really hard to detect parasites and they're surprisingly common. There are some independent labs called Parasitology Inc. and I think there's another one out there, similar name, and they are decent for finding hard to find parasites. Some of the tests like GI MAP, which is a stool test that's PCR, does do PCR for worms and parasites. Even so, if you're not shedding actively, it can miss those symptoms. Signs of parasites might be bloating that hasn't responded to other treatment or symptoms that especially are worse around the full moon. It's crazy as that sounds, it's typically more active around that time. So if you have cyclical symptoms that are worse around the full moon, you might want to check and make sure there's no parasites. Well, hello Karen, love you right back and thanks for saying hi. Amna, please share the best protocols for lowing viral load. Okay guys, so this is a big one because a lot of people post COVID are having some symptoms and what I'm seeing is a type of, what I'm seeing post COVID is a set of factors that are common in a lot of people. Number one would be activation of B cells and this would be more autoimmunity. A lot of the tissues are being from molecular mimicry being mistaken, you know, when the virus is there in the spike proteins and then all of a sudden that patient will develop autoimmunity after they get COVID. Number two is T cell decrease. T cells are the things that buy viruses and cancer and other bacteria and often you have a weakened immune state after COVID. Third thing would be reactivation of old viruses like Epstein-Barr. We're seeing lots of shingles, HSV, cold sores and these things will tend to pop up because that immune system is in a weakened state. And then the last thing that we're seeing that's kind of sad and contributes to pretty severe fatigue in some people is low cortisol. So I'm looking for these patients if they have long COVID and symptoms as such, I'm checking these markers and seeing. So your question, Amna, is what to do for viral reactivation or viral load? Lots and lots of different ways you can go about this. Some of my favorites are L lysine, humic and fulvic acids can be powerful. They're actually detoxifiers but also antiviral. I like monolorn at 1800 twice a day. I like olive leaf at about a thousand or more twice a day. And then there's lots of good herbal tinctures. I like Byron White, EBH6. And you can find all of these on my website, drjilhealth.com. And I also like the Beyond Balance IMNv2. Those are all real good antivirals that I've used. I don't use all of those together, but those are some of them. Other things like a stragglist can be powerful for some people. And those are the big ones for Epstein Bar and reactivation of viral load. And there's more cysts, cysts, tinctures that can also be helpful. And I usually just try a patient on a certain protocol and then reassess how they're feeling if the fatigue is better and check titers in the blood for those viruses to see how they're doing. Hi, Michelle. How can I help? My daughter is having upper stomach pains, gave her meds. Dr. Gave her meds and said it was IBS. She's 13. Oh, I'm so sorry. So upper stomach can typically be, I mean, it could be H. pylori. You might want to have her checked for that. It could be maldigestion. So she's not making enough pancreatic enzyme. And so it hurts when the food is sitting there. Even low stomach acid proteins might be more of an issue. What I would start with is checking for food allergies and making sure gluten isn't a trigger because that can cause inflammation. If there's a bit of gastritis, things like my gut calm powder could help. It's a real gentle combination of glutamine and DGL and some things that will soothe the gut. And zinc carnicine, which is our zinc soothe at Dr.JillHealth.com, can be really helpful as well for that stomach pain. In a lot of cultures, they use that zinc soothe product for healing gastrointestinal ulcers or gastritis at inflammation. So making sure there's no food sensitivities, trying some things like gut shield or gut calm powder. And zinc carnicine would be a way to start and check for H. pylori. Hi, Cindy from Pennsylvania. Thanks for joining us. Hi, Jean from Rochester. Thank you. Thank you. Dawn, LPS. Sorry, I think I read that wrong. So what to do with LPS? Thank you. Thank you for clarifying. So let's talk a little bit about LPS. This is a big one. LPS is lipo polysaccharide. This is the bacterial coating that can leak from your gut into your immune system. The blood stream basically just one cell layer thick. And that LPS is a potent immune stimulator. We know now that LPS is at the root of obesity of heart disease, diabetes, insomnia, anxiety, depression, and so many other conditions. So this is a huge player causing inflammation to the immune system and creating issues in the body. So what happens is in the condition of a leaky gut, that lipo polysaccharide coating can leak over across the wall of the cell, the lumen of the gut into the bloodstream. And it triggers an immune response. And that immune response then can cause weight gain, diabetes, obesity, heart disease, and all the things that I named. So what to do about it? Well, the first thing would be to try to heal the gut. But you really can't heal the gut unless you know what's causing that. Is it a fungal overgrowth? Is it a bacterial or parasitic infection? Is it a bacterial overgrowth? Is it inflammatory thing like mold exposure? And mold can definitely cause permeability in the gut. Is it a parasite like Giardia? Is it toxic chemical exposure? Is it poor diet with artificial preservatives and flavorings? Is it excess glyphosate because you're not doing organic foods? So all those things and more could cause leaky gut, which allows for that LPS to cross over. So the first thing you got to do is find the root cause, fungal overgrowth, bacterial overgrowth, and all the things that I mentioned. And then you got to start to treat that first. That's removed. That's the first R. And then after that, you can start putting in things like gut immune powder, gut shield, gut calm, anything with either bovine immune globulins or with glutamine powder will start to heal. And then ideally a spore probiotic is very effective for LPS and healing that gut microbiome because that will help to stabilize the issue. And then after you heal the gut microbiome, you can bind LPS with bovine immune globulins as well. So there's multiple different ways. This is not an easy overnight answer. I wish there were like one product or one thing that you could do, but it isn't a huge underlying issue. And it starts with diet, starts with removing the pathogens and it starts with replacing the things that will start to heal the gut. And then we're re-inoculating with healthy probiotics. Like I said, spores are our favorite, but you may need a combination of other things. We've got lots of different probiotics. We've got your daily probiotic. We've got your probiotic with IG. We've got your probiotic with sacro, if you have fungal issues. And we've got the probiotic 100 billion. If you have inflammatory bowel or more deeper issues. Okay. Let's see here. Hi, Taylor. Thank you to you as well. Hi, Michelle. What could you give an eight-year-old with major chronic cough from grass and ragweed? So this is like an allergic cough. So Michelle, I would say Corsitin would be real fine for an eight-year-old. You might want to dose like 250 BID versus higher doses. But Corsitin is quite safe. And I would say eight and above it'd be perfectly fine to try Corsitin as a natural antihistamine. Hi, Misty. What do you recommend for reflux? So reflux, there's lots of causes. You could have low stomach acid. You could have H. pylori. You could have issues with the lower esophageal sphincter opening up and allowing the reflux of acid. You could be eating the wrong foods. So I would try first, maybe elimination of gluten, dairy, sugar. See if that helps. And then second, DGL. We have a product called DGL Plus at DrJillHealth.com that's really wonderful for kind of coating and soothing that mucosa. If that doesn't work, you could try Zinc Soothe, which I mentioned before. And those two things can be really helpful at coating and soothing. If you prefer a powder or gut shield powder, really great because it has a lot of ingredients like the DGL and the Zinc Carnicine and it can code and soothe that esophagus. And that's probably your best bet. Okay. That is all the questions I have at the moment. Feel free to pop in and say hello or put another question in there. And I can stay a few more minutes if you have more questions. As always, it is so fun to be here with you and answer your questions. And I will, if you missed this month, I will try to be back next month for more. Okay. Hi Stace, is there anything to help bring back nerves or prevent nerves from dying? And thank you, Misty, for thanking me. So we'll answer this last question and then we'll come back for more next month. So and what's the best air filter? So first question is nerves. Okay. Nerves are tricky and there's a lot of people that are suffering now with neurological either numbness, tingling, because toxins like mold can create more issues with nerves. Infections like Lyme disease, Bartonella and some of those can cause issues with nerves. And this is tricky because I do believe you can stop the damage when there's autoimmunity or something causing the nerve damage. But there are times when you already have some damage that's happened, like maybe diabetic neuropathy that you can't always reverse completely what's already happened. So the some of the main ingredients that I really like for nerves are glutathione, methyl, B12, methylfolate, arlypoic acid can be really powerful or alpha-lypoic acid, anacetyl cysteine, and bostidylcholine. So those are some of the real core nutrients for the nerve regrowth and the nerve health. And there are some products like neurochondria from thorn that has all of those in it. I think brain sustain, neuroactive brain sustain from simogen is another great one. And again, you're looking for glutathione, anacetyl cysteine, lipoic acid, sometimes bostidylcholine or bostidylserine for the nerves. And one more question from Darla, what's the best air filter for your home or someone dealing with mole exposure? And you're welcome. So air filters, I'm a big fan of the air filters that have a VOC filter as well. So there's a couple brands. My number one is Austin Air. I have three of them here in my small condo and I have five of them at work and they have saved my life multiple times just because it keeps our air so clean. So I'm a huge fan of Austin Air. If you do ever want to know more, we are a dealer. And I did that just so that I could give patients a discount. So if you want to discount one in Austin Air, call my office. We can take care of it for you. But there's other brands too. You don't have to get it from me. Air Oasis and IQ Air, especially. I would be cautious about those that have, they sometimes react in the air to the molecular. They'll say like they have a UV filter or some technology that purifies the air. And while these are great for someone who's healthy with no issues, I find that patients like myself who are sensitive to mold and have sensitive lungs, sometimes that reaction to the process of the air, sorry, the chemical, certainly a chemical, but the process in the air of remediating the air can cause reactive oxygen and it can be irritated to the lungs. So I'm not a fan of those air filters. So IQ Air, Austin Air, my favorite, also Air Doctor, that's a new kid on the block. I have one of those in my office as well. Huge fan of Air Doctor. So well, everybody, thank you so much for joining me today. I will be back. Stay tuned for more and you can always watch this recording anytime you like or share it. And we'll see you soon next time.


With us today, we have Toshie Ayo-Ario. Currently, she is the co-founder of Uinclude, where she's building tech solutions that establish equity in the recruitment process and increase workplace diversity. Uinclude is a platform that empowers the most equitable and effective recruitment process for employers. Hi everyone, my name is Toshie. I am the co-founder of Uinclude, and Uinclude is a company that leverages scientific research and machine learning to generate the most equitable and effective hiring process for employers. So at Uinclude, we are solving two problems. The first is that is the fact that workplace diversity rates are severely lacking. In fact, only about 20% of people on the workforce are part of underrepresented groups, while on average almost 80% of the US, UK and Canadian populations identify with a marginalized group. The second problem is that hiring processes are costly, prolonged, and many times ineffective. So we're solving those two problems by addressing a major yet overlooked barrier to underrepresented candidates entering the workplace, and something that is also a major contributor to ineffective hiring processes, all of which happens in the job ad construction stage of the hiring lifecycle. And that issue is bias language and recruitment material, and more generally, the lack of inclusive and appealing language and recruitment material. In fact, our research shows that about 70% of job ads are actually dominated by gender bias and racially exclusive language. So many people don't recognize just how powerful language is in influencing people's behavior. This is especially true in recruiting. The language we use can perpetuate institutional inequality and deter qualified candidates from applying for roles. I really want to emphasize here, though, that it's often the subtle and the inconspicuous language that has the biggest impact. And why is that? It's because we don't know that these words carry harmful undertones. And because of that lack of knowledge, our job ads are often filled with off-putting language. So to address this, we took on two approaches. The first is to identify the subtle and the pernicious language that is deterring for candidates. A research paper written years ago discussed the impacts that gender bias language has on both female and male job seekers and their decision to apply. The paper also provided an extensive list of words that are gender bias that we should avoid using in our job descriptions. But when we started, you include, we couldn't find any research study that, again, identify the subtle language that is deterring for other underrepresented groups besides female job seekers. And that was a huge priority for us and will always be a priority for us. And so our team decided to launch our own scientific research study, starting with race-based, inclusive, and exclusive language. And our research report and findings are now available on our Research and Insights page on our website. The second way that we are addressing this problem is by creating our core product, which is an algorithm that has a number of functions. It scans your job ads and highlights all of the coded language that is in your job ad. And then it gives employers a breakdown of how gender bias, racially exclusive, and overall inclusive the job ad is. It also educates you on what impact those words are. What impact the words that are being highlighted are and how they may be impacting job seekers' appeal and decision to apply. And then on top of that, it provides you with suggestions on words to replace problematic language with. And then finally, it gives you tips on how to infuse inclusive themes into your job ads. We just launched a new version of our product a few weeks ago. We are obviously very eager to get it into the hands of employers so that people can start benefiting from this technology. And so we have three asks. The first is that if you are in a position where you are hiring, we'd love to have a conversation with you. We want to talk about your hiring needs and hiring challenges and determine if and how we can support you in those. The second ask is that we are beta testing our product and if you're interested in beta testing and providing us with honest and candid feedback, we'd love to hear that because again, you really want to solve your problem. And lastly, we are piloting with a few companies and working with them closely in order to understand their challenges deeply and tailor our product to better meet their specific needs. So if you're interested in any of those three things, please shoot me an email. I would love to hear from you. Thank you.