Did you have Altec Lansing leaking the Nintendo Switch 2 on your pingo card? Okay. I highly doubt any of us had Altec Lansing as an audio company potentially leaking when the Nintendo Switch 2 was gonna release but that's exactly what happened today. That's right. We have to call this a leak because it does come from a real legit company. It happened through CES. It's pretty crazy and if this is true, Nintendo is going to be very pissed off that this company leaked it out there. Although there's a caveat with what they said and we've got to dive into that caveat but first before we even dive into it, we need to make sure we get to the news itself. So we're gonna go ahead and head on over to Digital Trends. Look, this is being reported on at a bunch of places. This just happened to be the place that I saw it first. So let's go ahead and take a look here. As you see, Digital Trends says an AI company may have just leaked Nintendo Switch 2 name and release month. Going down here, you see as part of an ongoing wave of AI related news at CES 2024, Altec Lansing revealed an artificial intelligence-powered successor to Game Shark called AI Shark. More interestingly, the press release regarding the software claims Nintendo Switch 2 will launch in September of 2024. Formerly known as Game Shark, AI is set to redefine the gaming landscape with its revolutionary AI enhanced technology, Altec Lansing explains in a press release. The innovative gaming software is set to mark a significantly forward in the gaming experience, bringing enhanced gameplay for beginner level users. The official launch is planned to coincide with the Nintendo Switch 2 in September of 2024. Now again, Game Shark was a tool that allowed you to do cheating in games, so this would presumably be a more modernized version that would allow you to cheat in games on Switch 2. Of all things, that is pretty interesting. But there's more to this story, because Altec Lansing declared this is very odd considering Nintendo has not confirmed the name of the next console or the release window for it. That's right, this one has actually confirmed Nintendo is going to call it Nintendo's Switch 2 as well. Pretty crazy. That means Altec Lansing either revealed this release window and name information earlier than it was supposed to, or it's speculating on the name and release window. Nintendo's next device, in order to draw up hype for its AI product, which is probably the more likely thing. But we're not done, there's more to this story. In a follow-up to Digital Trends, Altec Lansing backtracked on the September release month, but confirmed that the tenant of launch for the platform is Fall 2024. It, as at Nintendo, has not officially set the launch date yet, but does not deny the existence of the device or the fact it set the launch this year, which is quite interesting because Nintendo hasn't said jack squat about anything related to this platform other than that it exists. They ever had anything confirmed to launch this year. Alright, Digital Trends did reach out to the Nintendo to confirm the accuracy of the press release and will provide an update when we hear back. As for what AI Shark is, Altec Lansing says it's a utilizing exclusive XGPT technology in real-time, tensor processing units acceleration to elevate gamers' users' experiences by providing personalized hints and assistance that keep up with the fast-paced competitive gaming. Press release unveiling AI Shark does not explain what dataset it will pull from in order to give players that advice, so we also asked Altec Lansing for clarification on that, regardless of what they're saying it's true, Nintendo Switch 2 might be hitting store shelves as soon as September of 2024, and that is pretty insane. If Altec Lansing just accidentally leaked the Nintendo Switch 2's name and launch date, that would be damn and that is we don't give two Fs. Now to be clear, Nintendo has never really worked directly with Altec Lansing. Maybe they're involved in some of the technology behind the audio in the Switch because that is what they're known for, is their audio stuff, so it's possible there is some sort of partnership there that we're not aware of, but if they would have had to leak this stuff out there, I think Nintendo's canceling that partnership post-hace and there might even be a lawsuit coming their way if this is like legitimately what happened. I don't know if Nintendo's gonna go that far, but there's some grounds for it here because this is the device Nintendo has not announced. It is pretty insane to me assuming that this report is true. Now this is where we have to get into the caveat. Let me pull off something here quick for you guys. Now here's the interesting thing about Game Shark. Madcats acquired Game Shark from Interact for like five million dollars. This happened all the way back in January of 2003 and I double checked. Madcats has never resold the Game Shark branding. I find that to be 100% fascinating that another company is bringing up Game Shark. Now if we go back to the original article here and we look back at the actual press release here, formally known as Game Shark, AI Shark. I don't know what to tell you all tech land scene. You don't own Game Shark. So formally known as Game Shark, are you also announcing at the same time the purchase of Game Shark from Madcats? Are you also by the way announcing that maybe you have purchased Madcats or have you announced a partnership with Madcats? I actually did some digging and none of those things have happened. So all tech land scene is likely doing one major thing. Lying out there. No, I'm serious. They are lying out there now. To be clear, I'm not saying that AI Shark doesn't exist. I can't possibly know that. I'm not saying they don't know when Nintendo Switch 2 is coming out. I can't possibly know that. I'm not saying they don't know the name of the system and the release date of the system. Those are things I don't. I can't say they're not legitimately making a product that's licensed to use with a Nintendo Switch 2. I'm not saying any of that because they very well could. All tech land scene is actually not like a vaporware company. This isn't just some random company out there. This is a legitimate company that makes real products and has been around for decades. Okay. This is a trusted brand. So I'm absolutely not saying that. What I am saying is the product they mentioned in Game Shark, they do not own any rights to. So there could be a partnership behind the scenes or not. I'm not announcing right now that could explain this, but it's very fishy to me that they're saying Game Shark is now being called AI Shark when they don't actually own the rights to Game Shark. And when you look at Madcats, they're their own company and they're located in like Hong Kong. They're a Chinese based company. They own themselves. They're a self-owned company. I don't understand what is happening right now. This is one of the most confusing reports I've seen, but it's everywhere. It's on IGN. It's on GameSpot. It's everywhere. Everyone's reporting this because of course they are. How can we not? All tech land scene is a legitimate company that makes legitimate products that many of us have heard of. You go through their catalog of products, they make products that people use. They also, by the way, have partnered with a lot of tech companies over the years. So they are a legit company and that's what makes this so confusing to release, to be so bold at CES 2024 as to release a press release that boldly says we're releasing this product alongside Nintendo Switch 2 on X month. That is someone either made a big whoopsy or they're doing this for attention, right? That could be the big thing, but this is negative attention. This is going to be negative attention if it's not true. This isn't going to help AI Shark. This is going to make people not want to buy AI Shark. So I'm just curious and again, I'm not saying AI Shark is vaporware. This is not a vaporware kind of company. They make real products. They've been around a long time. We'll just have to wait and see what happens, but hey, it technically is a leak because this is a legitimate company. The question is, do we think the leak is real? I don't know. The press releases, that's for sure. Thank you guys so much for tuning in and I will catch you in the next video.


Man, these are some very interesting devices from Samsung. I'm talking about, of course, the Galaxy Fold 5 and the Flip 5. Now, I'm here in South Korea, in Seoul. I came for Galaxy Impact, and I got to see the devices firsthand. I do have them here. We did a lot of camera stuff, so you'll see that soon, because I'm staying in Seoul until the weekend, and then I'm heading to Japan. And I've got a ton of fun camera videos for you guys, but I still want to do a gaming video, and we kind of know what the Snapdragon 8 Gen 2 does, but how does it function on these devices, and what can we expect? Now, this is Thunder E from Board of Work, and if you're a Joe Nurse for the first time, hit that subscribe button notification icon so you can watch more videos like this. But okay, let's put it this way, right? We have two devices that one feels exciting, which of course is the Galaxy Z Flip 5, and one feels kind of stale, which is the Galaxy Fold 5, but that doesn't mean they aren't some really exciting functionalities built into these two devices. So let's start with the fun one, right? This is the Flip 5, which has an external cover display, 3.4 inches. It looks pretty nice, and I would love to do some gaming on that cover display. We've seen that with Motorola, but let's put it right now. I can't because the cover OS, or at least the cover Good Luck app is not available yet. The device is not launched, so I can't judge it on that. I just have to wait and see when it becomes available. But that being said, though, it's nice and smooth to navigate through. It doesn't say if this display has a fast and refresh rate, so we don't know about that, but we'll wait and see. Meanwhile, the internal display is massive 6.7 inches. The crease, you can still feel it, but you know whatever it is, what it is, 120 Hertz right there, right? And we've got some really banging speakers on both devices. And yeah, watch my speaker test video, but listen to it when we get to the gameplay sessions with this. Now, the Fold 5, this looks like the regular Fold. It's got, of course, that cover or front display that is slimmer. It's a bit wider than last year, but it's in like millimeters, not that much. But we do have 120 Hertz in that front display, and then we also have another 120 Hertz with this internal display. So we've got that there. And honestly, when it's opened up, it looks fantastic. Just look at that. Let's look at Spider-Man right there, right? It looks pretty good. It looks really nice. It's solid. But what about gameplay? What do we expect from this device while gaming? Are we getting anything different? So when we jump into that gaming and honestly, guys, tell me what you think about the camera angles here. I was using my GoPro to shoot it. I figured it would be fast and easier for me. Again, I'm on the road. But the gaming experience feels very comfortable and the performance you should expect with the Snapdragon 8 Gen 2 for Galaxy. So in terms of benchmarks, you're looking at games like Call of Duty Mobile on both devices. Both the Fold 5 and the Flip 5 are doing a solid 89 frames per second. No stress, none of that stuff there, all right? And then we move over to PUBG Mobile. Again, a solid 60 frames per second on both devices. But you know what? I can keep talking. I want you guys to just watch some of that gameplay and see how well it performs with both devices. All right, it's pretty cool. Works well, no problem. Now, what about Genshin Impact? Well, the Snapdragon 8 Gen 2, it should perform exactly the same as the Galaxy S23 Ultra. And it does. For both devices, you're gonna get 60 frames per second and it's gonna drop down a little bit. I didn't play for hours like I usually do. Played for about 30 minutes and I was still held high 50s to 60 frames per second on there. So performance is great and those games handled well. But what about temperatures? Now, temperatures kind of rose high a little bit. You know, it was getting closer to about 45 degrees is what I got reading off the device. I was using the game plugging app from Samsung and also just used my temperature gun, which read about 43, so 45 internally actually kind of makes sense. On the Galaxy Z Flip, while on the fold, it was closer to about 43 or so. So again, those temperatures are kind of high and I think Samsung, even though they claim they have vapor chamber there, I don't think they've done much improvement in the past. So as a mobile gamer, you're gonna get solid performance from both devices. You're gonna get solid gameplay here. Now, I say for the Galaxy Z Flip 5, this is more of the part where I'm excited because you're getting some really good performance. Battery drain was actually pretty solid here for a full hour of gameplay. I lost maybe about 15%. So that was actually pretty good. And I wanna see what it does with the cover display once we actually have that capable and available here. On the fold, it's solid. I do like the fact that yes, when you fold it down and you use the cover display on there, it feels like a 21 by nine aspect ratio. It's really nice, especially for a lot of shooters. And also it expands well. I do like the fact that Samsung does a good job for switching between the cover and of course the main display quite effectively. And you can game with two apps at the same time. So there you have it. So what do you guys think? Do you think we should care about gaming on foldables or are we just a bit disappointed that Samsung didn't do much more with the Galaxy Fold 5? I still like this device. I know that cover display kind of hurts people a little bit but I think it's really solid and the hinge on this thing is just check this out, check this out, check this out. Look at that, look at that, look at that. I can hold it this way. It's not even closed but you can see how it stays pretty well. And also this cover display should be fun. So anyway, leave your thoughts down below. Let me know what you think. Otherwise don't forget to like, share, subscribe and always enjoy your entertainment. All right, let me show you my view. This is pretty awesome. Just look at that. Very, very cool.


Market segmentation is the activity of dividing the broad consumer or business market, normally consisting of existing and potential customers, into subgroups of consumers known as segments based on some type of shared characteristics. In dividing or segmenting markets, researchers typically look for common characteristics such as shared needs, common interests, similar lifestyles or even similar demographic profiles. The overall aim of segmentation is to identify high-heeled segments, that is, those segments that are likely to be the most profitable or that have growth potential, so that these can be selected for special attention i.e. become target markets. Many different ways to segment a market have been identified. Business to business be to be sellers might segment a market into different types of businesses or countries. While business to consumer be to see sellers might segment a market into demographic segments, lifestyle segments, behavioral segments or any other meaningful segment, market segmentation assumes that different market segments require different marketing programs, that is, profit offers, prices, promotion, distribution or some combination of marketing variables. Market segmentation is not only designed to identify the most profitable segments, but also to develop profiles of key segments in order to better understand their needs and purchase motivations. Insights from segmentation analysis are subsequently used to support marketing strategy development and planning. Many marketers use me STB approach, segmentation targeting positioning to provide the framework for marketing planning objectives, that is, the market is segmented, one or more segments are selected for targeting, and products or services are positioned in a way that resonates with the selected target market or markets.


Hi, my name's Todd Bacchastot. Welcome to Geospatial Intelligence and the Geospatial Evolution. This is lesson four, the second lecture. This lecture focuses on the human aspects of the Juin tradecraft. As I said before, analysis or problem-solving is core to the tradecraft. The Juin tradecraft might be described as problem-solving chaos. I have some tools that may help this. However, it can be said broadly that it consists of three stages and organized in two repetitive parts. The stages are analytic stage one concerns problem-solving initiation. This stage broadly outlines a general analytic question which you should go back and investigate the geospatial components of. Analytics stage two concerns information foraging. Here the analyst collects data and also refines the question. As you collect data you may reinterpret your question, go back and enhance it. Analytics stage three, this stage is about sense-making. It results in the development of a detailed analytic assessment. There are two major repetitive parts of this and that is foraging and sense-making. Foraging recognizes that analysts tend to look at a broad body of data and then narrow it down as they proceed. Much do and work never departs the foraging stage and actually consists of extracting information and repackaging it. The second repetitive action is sense-making. This is the ability to make sense of ambiguous information. When geospatial analysis departs the foraging and completes its sense-making process, it yields an analytic product. The process of interpretation begins with data which is generally context-free. Information is derived from data by the human craft and implying a geospatial context. This is what we discussed before. It is place. The craft is a concept of technique which we discussed in lesson two. For example, if we have a crime at a location in a time it's really just data. However the crime to have meaning we need to put it into a context. For example, we had an armed robbery in daylight. The geospatial context is critical because the space and time determines the interpretation of the data. There are three general geospatial contexts within which we put data in order to have the data information translation. These include behavioral space, physical space, and cognitive space. Behavioral space is thinking about the relationship between the human and objects in the physical environment. This is place. It's exemplified by the image I have the United States at night. It shows where the humans live. We try to build models of this to explain these patterns. We have some success but it is difficult. Physical space focuses on the scientific understanding of nature. This is reasoning about the physical aspects of place. Thinking about this involves understanding and models of way nature works. Cognitive space involves how one thinks about place in an abstract. An example is how one prefers one place over another. It's difficult to build models about this. It's in someone's mind. It's very difficult to do. An example I have here is actually a student drawing supposed to draw Penn State. What this individual did was drew a map of Pennsylvania with the University Park on it where I am today. It's interesting because it's a window onto the student's mind. If you look off to the right hand side, you'll see X's which would be the state of New Jersey. I think they have them labeled as a wasteland. This shows what this individual thought of space, how they considered it. Let's briefly discuss confidence and analytic judgments. As you may recall, intelligence is not truth. It's an approximation of truth with some level of confidence. Confidence in a judgment is based on three factors. The number of assumptions, credibility and diversity of our sources, and the strength of our argument. Each factor should be assessed independently and then in concert with the other factors to determine the overall confidence level. Multiple levels are stated as low, moderate, or high. An interesting point here is that oftentimes people don't do this final assessment correctly. Let me give you an example. If I had a scenario of three events, each with a probability of 70% certainty occurring. Most individuals simply average the probabilities together to have an overall assessment of 70% certainty. However, statistically, the correct probability would be 0.7 times 0.7 times 0.7 or 34%. A major difference between 70% and 34% probability. When we state our judgments, we state them as we judge or we assess. These are used to call attention to the confidence we have in any assessment. The figure shows the guidelines for likingless terms and the confidence levels with which each correspond. Let's discuss bias. We all have them. It's knowing your bias is the important thing. Much of the difficulty analysts have in their analysis is cognitive and not related to the tools. In other words, GIS. Oftentimes we know how to use the tools. We don't know how to use our brain. Unfortunately, every analyst might see the same piece of information and interpret it differently. In essence, one perceptions are morphed by a variety of factors that are completely out of the control of the individual. These cognitive patterns are potentially good and potentially bad. On the positive side, the models we use these patterns tend to simplify information for comprehension, but they can also bias and interpretation. The key risks are that analysts perceive what they expect to perceive. Opinions what's formed are resistant to change. New information is simulated, sometimes erroneously, into existing mental models. Conflicting information is often dismissed or ignored. Quite honestly, I do it all the time. It's understanding that you do this is the important thing. Let me give you a few simple visual examples. What do we see here? Is it a chalice or is it two faces? Actually it's both. One person will see one thing and another person will see nothing and oftentimes I flip between them. What's this image? Is it a young woman or is it an old woman? It's actually both. When you study for a while you can actually flip between. Since people observe the same information with inherently different biases, we have a few safeguards. These are structured analytic techniques. Let me introduce these to you. They are aimed at overcoming biases. They're also known as SATs. SATs are toolbox. They are toolbox to help the analyst mitigate their cognitive biases and their limitations. SATs taken alone do not. SATs taken alone do not constitute an analytic method for solving geospatial analytic problems. They are simply tools that help you overcome some biases. Most distinctive characteristic of an SAT is it helps one decompose their thinking in a matter that enables someone to review it, to document it, and potentially for other people to redo it, see if they get the same thing. It's actually a publication that explains 12 of these that are frequently used. This is a tradecraft primer for structured analytic techniques for improving intelligence analysis. It highlights a few SATs used in the private sector, academia, and the intelligence profession. The document can be found at the web at this address. Structured thinking is at variance with the way the human naturally thinks. Most people solve geospatial problems intuitively by trial and error, or as I like to call it, see of the pants. Structured analytic techniques can help you at least approach it in a much more methodical way. Structured analytic techniques help the mind think more rigorously. They don't solve the problem for you. In the geospatial realm, they ensure that our key geospatial assumptions, biases, and cognitive patterns are well considered. The use of techniques helps us document analysis and identify our causes of error. Thank you. This completes my second lecture, lesson four. Over the two lectures, I've defined the geoint tradecraft, described the relationship between GIOScience, Geographic Information Technologies, and the tradecraft, and discussed a few of the tools of the tradecraft. Thank you again.


Hello beautiful. What's up? I just came back from a little vacation. I'm feeling extra spicy, also very sad. Because for now, this is the last and final season of America's Next Top Model that I have to react to. And that is cycle 23. And Tyra Banks is not even on this cycle. So that makes me even more sad. We have Rita Ora this season, which is fine. I have nothing against Rita Ora.  And then also, let me just tell you before I begin watching this, cycle 23 and 24 do not exist online. You can't find them. I looked for 45 minutes and then somehow really easily ended up finding it.  But I did find the cycle and we're gonna watch it together. So grab your, grab your popcorn. We're gonna watch it. It's gonna be super fun. And I just can't wait to see these makeovers because they are more current. I've been watching cycles from a long time ago, most recently and girl those makeovers are wild. So hopefully we get some crazy updated looks. I feel like we're gonna get some fashion colors going on this cycle and I am ready for it. Let's watch cycle 23 of America's next model. Let's do it together. Let's do it. Come on. Let's watch it. Oh, we're in New York. Look. As you can see, you are standing on the set of your next photo shoot.  Oh. Every fashion icon has a trademark style that makes them complete. Take Ariana Grande's long ponytail, Alec Work's shaved head, Beyonce's golden looks, and me with blonde hair and red lips. Oh, we just said me. So we've created a trademark look for each of you. Inside of these envelopes are the secret ingredients for the new you. Oh yeah. My makeover card says block shave and I think high top. Look, I'm getting a bob. So what I got was fairy dust lavender rainbow. What does that even mean? I'm sorry, wait. Fairy dust lavender rainbow? Is that what she said? I'm not rechecking that, but I'm pretty sure that's what she just said. Oh, this is what I needed today. And then we got an ombre bob and some other going on that I heard about. And all these crazy faces being like, what are they doing to my like? I'm so ready for it. This sounds fun. So, woo. Being the redhead frackled girl, my whole life I've been called ugly. I had to learn how to love myself and now I feel like they're just gonna change who I am. How do you know it's gonna be red, red, red? It's gonna be red. Because this is my hair. This is every strand is a different color. It's gold, it's yellow, it's red. Like all they're doing is enhancing the color and she just started crying and started breaking down about it.  First of all, they're still keeping her as a redhead. And second of all, it's not that serious, okay? Maybe if they were completely changing her hair to like black or blonde, I'd be like, okay, her hair is very pretty and I feel like it's what makes her really beautiful. And you know, she is right. Her natural color is really gorgeous, but whatever.  You knew the makeovers were coming. What did you expect them to say? You don't need anything? I have seen that happen before, but like, come on, you were definitely about to get a makeover and you know you were.  I'm joking, but no, I'm really not. Nobody has to do this. You're gonna bottle my hair to make it. Is that what everyone can get?  Really acting like a boss.  Literally, I'm like, am I confused here? Why is she freaking out about having red hair if she already has it? Not understanding it. Nice to meet you. Oh, nice to meet you. I'm so excited you're here. I'm so excited. Are you excited for your makeover? I can't wait. I'm so excited. You just have such strong features that we're just trying to bring that out. I'm seeing all sorts of gloriousness happening right now. I'm seeing highlights be put in. I'm seeing bangs be cut. I'm seeing all kinds of changes going on and I just want to see the makeovers. I'm kind of upset that we didn't get like any cards to show us what the vision was before we actually did the hair. You know, Tyra would have done that. It's Rita, what happened? Maybe I'm even more excited for the surprise because I have literally no idea what any of them are getting. My trademark card says bigger and better. I need to feel girly. Girl, you're going to look great now. This is going to be just so exciting for you. You know, my sister and I, my sister is an androgynous model. I'm very girly and I don't want to be masculine. We're not all scheme to be that. We're not all scheme to change how you are or how you act. I just want to give you something that people go. That's a... I'm just really trying to stay positive but when he took those clippers out, it's a little scary. She is very beautiful. I'm kind of sad that they're cutting her hair. I really do like the length that it is but maybe if it's a little bit more shaped up, it might give her a more masculine vibe. Like she was saying, she does have very prominent bone structure and it's very square. So she may look a little more androgynous after which I personally love. She doesn't want to look like that but we'll have to see. What are you going to do?  Bread. We're going to buy bread. We're going to buy breader.  If I am to do this, my hair won't ever be the same. That whole interaction just made me so uncomfortable. I don't know if they edited it to look how it looked but the way Sally just completely disregarded everything she said. I don't know. That was a lot. It doesn't give me a great vibe but you know, you never know what people are going through that day. I think what the girl needs is just a little bit of like, it's going to be okay. It's going to look great. You know, you can grow your hair back out. It's not that serious type of vibes and Sally gave her the cold shoulder real quick and she was literally just trying to be nice. Like, hi, I'm so and so nice to meet you. It probably is a huge deal to her. I kind of understand. I kind of just think, you know, just get your hair done at the same time and you knew what you were signing up for. I see both sides. I feel like I'm just going to come out and look at the super stuff. Did you see all that plastic on her girl's head?  Yo, she got a plastic helmet going on. Damn. I'm getting a sassy bop.  Something's happening in there. She's cooking up. I've never seen that much plastic on one head in my entire hair styling career. And I've seen a lot of plastic wrap on people's heads at this next level.  Hell yeah. That's what I want. I want it to look into a room.  That's her. That's India. It's incredible. I think it works perfect for her skin tone. I love the haircut. It works great for her face shape. I'm glad they kept it long and majestic. That purple shadow root with the light pink ends. It's giving me everything I want. I hope they show me another picture of it. But damn, that was hot. That was f***ing hot. As a competition, I would like to make you look girly because then I'll be the edgy one. I don't want to be edgy. That's not even making this business. They switched our looks. I identify as being the tomboy and my sister identifies as being the girly girl but I'm not scared to get something new. Gotta love a NTM.  They can really manipulate things when it comes to the makeovers. Like they can give one girl a bad makeover that clearly makes them uncomfortable. Therefore, they cannot perform to the best of their abilities and so on, they get eliminated and all that. They just switched the tomb girl twin with the more feminine twin and gave the tomb girl twin a more feminine look and the more feminine one and more tomboy look. That is going to confuse them so much and probably annoy them and they're probably going to get eliminated, which is shady as hell. I'm on to y'all. I feel like my makeover is very masculine. Looking like a boy kind of bothers me, you know? It's a little hard to look at myself. Wasn't a huge fan of that. Whatever was going on there. They kind of like shaved the sides of her head and left the top long and it just looks like kind of not finished. I feel like she needs a new color as well or her color needs to be like brightened. Something needs to happen here because something's not working for us. Tosh is a little upset, which I don't really feel bad about because last night, both of the twins came at me and I'm not saying Karma's real, but like Karma's definitely real. Oh, the drama.  You're not always going to be dressed up as a girly girl. Are we posing as a girly girl? It's not how it works. My favorite part about this whole scene is the way they edited it to make it look like you could hear this girl from in the bathroom and everybody's making faces. Like, you know nobody could hear her from in the bathroom. She's wearing a mic, but they edited all the faces being like, like, what's she talking about? I just love reality competition shows. Oh, so good. I'm absolutely loving my makeover. I just want to flip my hair and make all the girls that got their hair cut like super pissed. Her hair looks the same. She looks the same. I think she's beautiful with her darker hair, but not much going on there. I could honestly see her with a bob, like not a totally short bob, like under the chin area, still really dark and really straight with those intense brows and like just a little tuck behind the ear on one side. She would look fierce. Her bone structure would look incredible. I would love it. This is when the brand, the boss and the business separate. Yeah. Because at the end of the day, your look is probably always going to be changing. Right. Right. I'm going to worry about my look. Right. And I'm going to go sled. Right. Because that's what a boss does. And I'm a boss. Yes. I see a boss. Thank you.  That's right. That is the kind of energy I need to bring into my life today. Okay.   It is completely different. I thought everybody loved the makeover episode and like that was their favorite and it was a big deal. And the format they had was good. Maybe budget got cut or something happened, but we have no before and after pictures. So I will be playing role of editor and director here and trying to piece together some before and after photos for you because I want to know what their before and afters looked like. So I'm going to look up some befores on my phone because usually when they do the group photos in the beginning of the show, they show all of their befores and then we'll put the side by side of the afters and we'll judge them. All right. Y'all better be playing me with season 23 here because it's been a lot. It's been a journey. All right. I have them all pulled up right now. They're before images from the first shoot they do in the season. Hopefully we can figure out who's who and match their before and afters. Let's keep watching. I'm very flattered that they would choose this for me. It's definitely something different. It looks like a smurf of your head. But in a good way. If you're ever looking for me, you can just say oh the one with the purple hair. I don't know if it's me being self-conscious, but I just can't whip off a robe and be like, okay, yeah, let's go run around naked. Okay. India, you're giving me more younger vibes with the pink and the purple moment going on. I don't know. She looks so gorgeous in her before image. It's cool. I really like it. But for a model, I don't know. I feel like it's giving me more like overdone or a kill. I like her brown hair better. I don't know. It suits your skin tone better. She looks kind of flawless with it. Sorry. Shouldn't have changed it, but it's a fun vibe for like somebody wear on the streets or like somebody who's not a model. You know? I'm into it. An important thing to remember in a group shot is to work as a team and to make sure that everyone looks good. I popped my virgin cherry. My hair will ever be the same. Cherish, cherish, cherish. After all that drama, this is your before and after and that's what you were crying about. Girl, it looks the exact same. I mean maybe like a half a shade darker, but nothing really noticeable. You look pretty much the same as you did before and it looks nice. I think it looks shinier. It looks healthier. It looks more rich. She better look it in wrong and act like she's happy right now. If she does not, it might send her home. Benta has the same hair as before so I have nothing to say. She looks beautiful. I haven't had fringe like this since I was five. Oh, Chris Lee Ann with this makeover. Yeah, this isn't great. They definitely screwed her a little on this and she was right.  I haven't had bangs like this since I was five yet. You shouldn't have them. It doesn't look great. It's just too bang, long, dark. It's just overpowering her face. It's too much on her face. It's a lot. It's heavy and I don't like it. So I do not blame you, Chris Lee Ann, for not liking it. I would have liked her not to have bangs and maybe have just some highlights, honestly. Just some really nice sun-kissed highlights. Keep it long, put some layers in there. It would look great.  I like her hair better. Sure, I'm sorry. I don't like this length. I like the more androgynous Kodi. It's a little overpowering. Same with the last girl. Same with Kodi. It's too overpowering for me.  The weave is just too heavy and too bulky for my taste. Obviously being in the bottom till I have a lot more pressure on me. Corianne. God, this season's killing me. I do like her hair, but now that I see the before hair, the before hair is so much cuter. Like the fluffiness, this shorter hair. Like I don't like it weighed down. I don't like the perfect curls. I like when it's a little more frizzy and fluffy and sexy and shorter. I think this hair is weighing her down and she looked more youthful before. I would have honestly just kept her hair the same as it was. Just put a gloss or toner, whatever you want to call it, over her hair and give it just a little more richness and vibrancy. I got out there and I just completely forgot that I had no clothes on. It just came naturally kind of, which is a little alarming. So Marissa, I like her before her better. Her curls before were so much cuter. She looked more natural. She looked more bubbly, cute, younger. And this hair is just very serious and it's just giving me like mommy vibes. I don't know. It's not giving me what I wanted. I like her hair before. I think it was perfect before. Maybe a little trim, a little cut-aroon-y. I've been great this too much. Oh, oh my God, the camera. This is the absolute craziest thing I've ever done. Paige, I like this. This is a lot of fun. It's very different. She looks a lot more edgy. She looked a lot more like your girl next door type of vibe. Still very pretty before, but this gives her the ultimate like edgy cool girl vibe and I'm living for it. I love the cut. I love the color. I could have done without the bangs, but it's fine. I'm sick, but I feel confident and comfortable with the shoot. I feel like a 2016 punk version of Marilyn Monroe. I mean, I love the way it's styled in this. Like I love that extreme volume. She looks like the first lady or like a news anchor and I'm just living for it. She has this cute little nose. The makeup looks fabulous on her and I am fully living and vibing with the look. I don't know if it's an everyday look, but for this shoot, oh, she looks stunning. Dude, we don't have time to be playing games like this. Like this is a group shot, bake it till you make it. Gia girl, what did they do to your hair? What is that? Your natural hair looks so pretty. There's a lot of curly girls in this season and I am fully obsessed with their natural hair rather than these weaves and wigs they gave them. None of this is working for you. The hair you had before was so much sexier, so much more model-esque. I don't like this. Go back to what you had before. Tash's hair, I don't mind after. It's definitely giving me like 90s supermodel. I don't hate it. It's kind of fun. It's kind of cool. It's kind of interesting and yeah. Those were very interesting makeovers. My favorite makeover of the entire season was Paige. I just thought I made her look a lot more punk and fun and we always love a good punk moment. It breathed new life into her, you know, normal looking self. I feel like it gave her this whole new energy that I was completely here for. I just love all the punk vibes. If you guys are not already subscribed, make sure you do right down below. I hit the bell icon and the like button so you know I've had every time I post a new video. Check out my hair care brand to get all these colors on me. Plus some more at xmodelhair.com. It is linked below. You can also find hair care products there made by yours truly. You can also get some hair inspiration on our Instagrams. Add xmodelhair for hair care and add xmodelcolor for color. Make sure you guys follow me everywhere else. I'll square all my social media handles all around me. Go for it. You guys can text me. This is my number. Yes, it's really connected to my phone. Yes, I really use to send me your messages. And yes, I'll be texting back a few of you guys if you text me right now. This will also keep you notified every time I post a new video. So you're the first to see the video. Today's Instagram shoutout goes to Amber and she says, I'm thinking about getting curtain bangs but I'm scared that it's not gonna turn out as I imagine slash hoped. Hope you can help me out.  So do not worry. Just do your research before going to a stylist and just make sure you know what you're getting before you do it and bring reference pictures in to show exactly what you want before you get the chopper roomie. Also, I would love to see some more angles in your hair and some more layering along with the curtain bangs. That's all for today guys. Thank you so much for watching. Don't forget to live your extra life and I'll see you next time. Bye guys.


Hi, everyone. Thanks for coming. Today with Baptiste, I'm going to present you Bad Memory. For those who wonder, Gustave is not here today. He has visa issues, so he's stuck in Stockholm. So Bad Memory is a talk a little bit different from what you might have seen before. We tried to give you something which is out of the box thinking, and we're going to show you a lot of cool attacks, and we have made a lot of video for you because usually the god of demo are against me, so now I'm doing video. They are on YouTube, so if you want to watch a video afterwards, you can just browse the channel and you have them. So usually, and you're all there for security, there is three ways we can know and know how to break a security mechanism. The first one is when you find a design flow, for instance, web is broken by design. You all know that, and you also have the most well-known way, which is we try to find exploit and find vulnerability into the code, this implementation. And the third one which would be the focus of this talk is how you can try to make this security mechanism a little bit irrelevant. Closer. Okay, sorry. So what do we mean by irrelevant? For a second, bear with me, let's assume you have this nice house in Wonderland, and of course you like your house, so you're going to prevent people to try to break through it. The way you do that is you have a nice security mechanism, which is a door. So the bigger the door, the more secure you are, but the clever attacker might try to do what we call side channel, and that would be the focus of this talk is try to break through the windows or try to break through the roof, right? So that's what we call side channel. Now what we're going to tell you is not about Wonderland, it's about real security. So what we have is four different stories in this talk. So the first one would be how you can actually break into a WPA network from a web page. The second one would be how you can attack HTTPS with cache injection. The third one would be how you can steal private data with what we call framework attack. And the third one would be how to attack this guy, smartphone, with something which is a new generation of click jacking. So, well, I hope we will be as loud as this guy. So, over the year, we see something which is really good. We see people moving away from web, or at least they should, from something which is more secure, which is WPA, right? And so the world is more secure, and even at the DEF CON this year, we have a secure network, so the world ship is kind of empty now. But still something remain. We are still storing the WPA key to a web interface. And our idea was, well, maybe we can't break WPA because we don't really know how to do that right now, but we probably can try to attack this web interface. And to confirm that, we went to a store and buy a huge bunch of routers from different brands, eight of them, and try to our hypothesis. And the result, that we're able to break all of this brand, and actually retrieve the WPA key. What I'm going to show you now is how we do that. So, the basic idea of this attack is we are able to execute a malicious JavaScript inside the local network because the user is browsing the web. It's not an unreasonable assumption. First reason is because a lot of websites have access to vulnerability. Go to access these websites, if you not trust me, there is a ton of them, but also because you can serve ads. And actually ads contain malicious code. It's well-known. For instance, at the beginning of this year, Avaaz released a study which shows that a lot of ad advertisement networks did a very bad job at sanitizing the advertisement. And as a result, there is a lot of malware which are distributed via a network. In case you wonder how much it costs, if you want to have 100,000 it's about 100 dollars. So it's a really cost-effective attack. How many of you are familiar with what we call the browser same origin policy? Raise your hand. Not that much people. Okay. So just make sure everyone is on the page and we'll follow what we're going to explain. The same origin policy is one of the key security mechanisms you have in the browser. It's basically meant to protect you when you are browsing multiple websites at the same time because you have multiple tabs or you have one iframe inside your page. The basic idea is the following. If you have two origin in the screen, you have evill.com and you have mail. Google.com. The same origin policy do something very simple, which is one origin can post data. It doesn't mean that the other origin has to process them, but you can post data from one origin to another. That's how web service can interact together. But you are notable from one origin to read the other one, which effectively prevents a bad guy to read your Gmail or malicious page to read your bank account. That's the same origin policy. So we can post data provided there is no CSR defense, but we can't actually read data. And you will see that it actually makes this attack a little bit hard and that's the major error we had to work around. Okay. So back to the attack. The attack requests follow. At the beginning, the attacker will pay ads or file an excess in the website and will be able to inject a malicious JavaScript inside the local network. At this point, you have to realize that the firewall is completely useless. There is no firewall because you are already inside the network. Similarly, you might say, hey, the router interface is only available from inside the network. Well, that's not an issue because we are already inside so we can access from the browser of the user the web interface. So the first thing we have to do, the first thing that this malicious ad has to do is to locate the IP of the router because we have no clue of that. A good way to do that is to look at the RFC and try all the probable IP. We do that by using such a request which is asynchronous request. And we try to see the page load or not. If the page load, then there is a web interface and it's likely that's the router. So we go to common IP and until we find the right one. So at that point, there is two kind of routers in the world. One which is web authentication or web login which is the same thing you see on Facebook, Gmail or that kind of stuff. It's basically an authentication where you have the username and password which is inside the HTML form. The other type of authentication is the one you had in previous life or web 1.0 which was the basic authentication.  And we can have to know which one you are using because if you are using a basic code, we can't really try to brute force it and the type of attack is a little bit different. And once again, the same origin policy prevents us to read the page so we don't have any idea which kind of authentication is used. Fortunately for us, we found one or two bugs in Firefox that are currently reported and we are able to know with 100% accuracy because of this bug whether which kind of authentication you are using. So when we know which authentication you are using, what we are doing is what we call fingerprinting the router. We need to know which model and which brand you have because each brand and each model have a different kind of vulnerability. To do that, we do two tricks. The first one is really one node is we try to fetch one node image from the routers. Every brand has a different logo which has a different size so we can fit gem in JavaScript and read the properties to get an idea of which image are present.  So we're doing port scanning because you can do that with XHR requests. XHR requests are not bound to a specific port. You can do a lot of them except some specific one like support SMTP port. So with this, we first do a first pass of scanning all the port, get an idea of which router you might have and do further fingerprinting with image. As a result, we can tell which one are positive, which one are negative and have a pretty good idea of who you are. Actually now we're an implementation. We have a fingerprinting which works 100% and we were able to actually know each brand and each model as 100% accuracy. When we are at this point, what we have to do is authenticate to the router. Remember, the router is protected by a password. So before I'm going a little bit further, how many of you ever changed the router password at home? All of you. Fantastic. I don't trust you. No, seriously, I don't.  Who choose a password which is more than 10 characters? Raise all your hand. Come on. Okay, right. So everyone has a secure, strong password, never use one-time password only for their home router, right? Well, the nice thing for us is if the default password doesn't work, what we can do is we can actually brute force it for two reasons. The first one is this kind of router do not have a CSRF defense. So we're able to try as many login as we want and we're able to inject page from the malicious JavaScript to the router. And the second one is we know we are successfully logged or not by using what we call timing attack. So a timing attack is the idea that if the page is not logged, you only see login and password which is really fast to display. So the login time will be really, really fast in the order of 300 millisecond. If we are logged, there is a ton of stuff like basic setup, router setup, wireless setup, you know, it's all huge page. So which take about one second to one second and a half. Since we're on a local network, it's really reliable because we don't have any latencies. Remember it's from the router to the browser which is inside the local network. So the latency doesn't play a role here. So we can do a good guess. If you are using basic code, and that's kind of the irony of the story is basic code is more secure because we have only one try. We don't have a way to brute force basic code because we have no way to actually tell whether you're successful or not. And if we fail, we have a pop up. We found a way at some point to actually remove the pop up, but we can't still know whether it's successful or not. So, well, in any case, we are able to brute force most of the router which moves to the web authentication part, a web login form. And as a bonus point, at some point where we had one which was even better, is we tried to authenticate and somehow our code was messed up and petitioned, hey, it's still working and we're looking at each other anyway. What happened? Actually, some of the router actually do not enforce permission so you can actually inject anything you want in it with a supplying password.  But yeah, very famous brand. So, once again, even if we're able to be authenticated to the router, we have no way to redirect the page which contains the WPA key, right? So at that point, we have to find new vulnerability and this time we found vulnerability inside the routers. And what we're going to use is we're going to use exercise vulnerability. We found five out of the eight brands we looked at has exercise vulnerability. And what we're going to do is very simple. We're going to inject a payload which is an external JavaScript. And this JavaScript will be injected into the router and we can do that because once again, there is no CSRF defense so there is no check where the input came from. So some of you might wonder here, well, this might work so you can have an injection but what about if the injection is not in the right page? So usually when we found an exercise, it's not on the page which has the WPA key. Well, it doesn't matter because we have what we call cross origin contamination, which means that if you have an exercise in one page, we can use that to actually open an iframe. And this iframe would be inside the same origin. So this time the same origin policy doesn't prevent us to read inside the iframe. And from this, we are just able to read the key. And at this point, we're almost done. It's almost mission complete because no thing prevents us to send back the key to home to the attacker, right? So you might wonder, well, what happened if you can't find an exercise vulnerability? Well, there is two things for you here. The first is you can use click jacking. And we found that most of any router do not have any click jacking defense. So you can use a trick found by Paul Stone, show it at the black cat show up to hotel, which is a drag and drop click jacking. If you can lose the user into drag and dropping, which is not that hard, think of making a fake game, then you can extract any data you want from a page. So all you have to do is frame the page and have the user do a drag and drop for example, feeding a puppy or moving around their mouse or whatever. And we found that eight of the router out of eight router have never do that. And two days ago, Craig Fner also showed that you can use DNS rebinding attack to actually access a page from outside so you can do this as well. And so you have the key, right? So the key is gone. And we have one problem. Can you guess what it is? Well, I have a key, but where is the network, right? You have a nice key, a long key, and the key doesn't tell you much where the router is. So we have the key, we don't know where the router is. Well, turns out that there is an app for that. And actually it's a courtesy of Firefox. So Firefox did introduce for those who don't know that in 3.5, I guess, something which is caused a leak location or browsing. So what it looked like for those who never see it is it's a little pop up on the top, which is do you want to share your location with the page? It's used to give you to give the page information of where you are so they can provide you more relevant information like restaurant or place to go through. And under the hood, what's happened is there is a partnership with Google. And Google uses this little car you see on the bottom, which are touring all the cities in the world and gathering a lot of information. And there were a lot of discussion whether it's a good thing or a bad thing for Google to collect that much data. Well, this is one example of where this data is actually harmful. So what happened under the hood? And it's also has been found by a semi-canva, which do I think a talk here, which is how I met your girlfriend. So the idea is that Google, you can, there is a protocol with Google where you actually supply the MAC address and Google will do a lookup in the database and give you what they believe is the correct coordinate. And since your access point is usually up 24 hours, 7, there is a good chance that if your city is big enough, they will know where you are. And you can know where your location is with a 500 meter precision, more or less, at least in our test. So you do all these requests, you get longitude latitude. And of course, it's usually using Google, what about just asking for a map. So you actually, the attacker just get a nice map of where the network is. So you have the WPA key, you have the network position, and then you're all set, right? Who cares about WPA? You have the key. And who want to see how it looks like in real? No one? Yeah, okay. Go for it, okay. So this is a demo of our code, fully written in JavaScript. So you see in this type one, we're doing a fingerprinting of the browser to know which kind of exploit we can use. Then we're going to port scan, find what kind of authentication we are using. It's a bug in Firefox. Then fingerprinting the routers, injecting an XSS in this case, and then we have to wait because it's an injected XSS in this case, in this SMC case. So we have to wait 20 seconds until it reboots. And then we're going to, in an invisible life frame, open it and here's your map address and your key. And this is actually the location of my own house. So if you live near me in Palo Alto, happy to take a free beer, right? Wow, it doesn't hurt to try. And that's the end of our first story. The second story is about HTTPS. And HTTPS, so we're going to show you how we can actually try to make HTTPS a little bit irrelevant, same idea. It's a kind of complex attack. So I'm going to go through five steps. First I'm going to give you a background of how a page is actually constructed, because that's where all the story begins. And then I'm going to discuss a little bit about what the cache injection attack is and I'm going to show you what are the current defense in the browser against that, because there is some. And then I'm going to show you how we were able to bypass them, actually. So a web page starts with a HTML5. We all know that. HTML5, sorry, not five. And we add to that a bunch of images and we usually add a lot of JavaScript. And maybe some flash. And all these came from different origin. You don't see it in your browser, but you can have, for instance, a map from Google, some combination from Yelp, and even some information from Facebook. Just yesterday I went to Pandora and said, hey, this is a group you look on Facebook. Do you want to listen to it? I didn't ask for it, but they are probably communicating with Facebook. So to make this faster, there is one key mechanism in the browser, which is the cache. The cache mechanism works as follows. When you request a page, this page might embed a JavaScript library. And so the browser is going to fetch it the first time. And if there is a proper header with this JavaScript library, it will stay into the cache. And the headers say, do not request me this file until a certain amount of time. So the next time you're browsing a page and this page has the same JavaScript, then it's not going to download it, it's going to get it from the cache, right? And this is a fairly common practice. I did a bit of crowding on the top, Alexa top 100, 100,000 website. And I see that 43% at least have an external JavaScript. Can you guess which is the most popular JavaScript library in the world right now? Google? Which one of Google? Google Apps? Google Ads? No, you're wrong. Google Analytics, right. And the second one is the GQuery. So the first one is Google Analytics by four, followed by GQuery. And then you have SF, SWF object, which is basically the library you just to load flash object into your page. Google Ads is fourth. And then you have Prototype, which is another JavaScript framework. So all of these guys are JavaScript library shared. So some of them are different. Google Analytics is shared. You have one instance of Google Analytics shared by everyone. And some people have their own version of GQuery, right? But all of them are external JavaScript finally built into the page. So the attack story works like this.  So at that point, you are in an insecure network, let's say, as in the DEF CON. You connect your laptop and God knows what happened to you. Well, in this case, what we know for sure is that there is a guy which is going to do a man in the middle. What happened during this man in the middle is you're going to request any page, could be CNN, could be whatever you want. And the attacker will stop this page and will add a link to a JavaScript library, which you didn't request. But it doesn't matter because you can modify any HTML page which is not a HTTPS. There is no integrity on that. And your brother will, after that, parse it and actually request it because that's his job. At that point, instead of requesting it to the real server, the attacker will supply you a malicious version of it.  And you go there and you try to log in. And actually, blogger use Google Analytics, I guess, or one of the two. And so you're going to go there. And instead of looking for the real JavaScript libraries, what it's going to do is it's going to load the Poisoned JavaScript library. And this Poisoned JavaScript library will not trigger any error because it's already accepted. And this malicious library will actually steal your login and password of HTTPS. And you will see nothing. It doesn't matter if you move any location. As long as you don't clear your browser cache, it will be in effect. And as I said, a single library is used by many websites which makes this attack so powerful is that Google Analytics is used by many, many websites. GQuery over CDN, Google CDN is used by many, many websites. So if an attacker is able to inject one of these libraries to you, he's going to compromise a lot of your HTTPS session. So you might say, hey, there is a defense against that, right? What is the defense against this one? Hmm? You have a warning, remember? Every time you try to connect to a site over HTTPS which don't have the proper SSR certificate, you get a warning. Did you attend the talk before? So yeah, you have this warning, fairly strong warning, say, hey, this is not the correct certificate. The domain name mismatch. Do not click through it. The Firefox one has three clicks until you get to the point. So every time you try to, the attacker tried to enter a bad library, malicious library, he would have to defeat these warnings. So how we defeat that? Well, the first thing is you can always trust the user to do the bad choice, right? Just trust the user to just ignore the warning and go through. And actually the user is kind of right in this case. So this is Twitter.com, right? How many of you have a Twitter account? Okay, so many people. So if you go to Twitter.com over HTTPS, it works. Now if you go to www.twitter.com, you get this. Why? Because the Twitter certificate is for Twitter.com, not www.twitter.com. And actually E-V-Cert prevents you from having a wild card in it. So there is, until you have two certificates into different IPs and come do that. Same thing for YouTube. If you try to go to www.youtube.htps.youtube.com, you get a Gmail, Google certificate, so you get a warning. So the user is kind of trying to disobey this warning. How many of you ever clicked through this kind of warning? Yeah, a lot of people as well. See, you're trying to not pay attention to this kind of warning. And even from quality show that actually 92% of the SSR certificates have a mismatch. So it's likely that at any point the user will go through them. Same thing if you think that the positive warning like cited entity give any idea and the user will pay attention to it. This is a Firefox study for Firefox 4. It's a heat map where users are clicking. The one you don't see is actually the one where you have HTTPS information. No one is clicking on it. So positive warning don't work as well. This is a more detailed stat. And actually the more expensive SSR certificate become, the less people are clicking on it. And it's bigger, right? So, but it won't be a death control if I'm just saying hey, just trust the user. What about we try to trick the browser into not displaying the warning so it's actually more effective, right? So we're going to do that. The first one is IE. So this is a warning you have for Internet Explorer. It's a pretty, pretty strong warning, right? You have two red shield and say do not, it's not recommended to continue. It will happen a lot of bad things to you. And they hope that the user won't click. Of course he will click, but assume for a second the user is responsible like you and won't click. Then we can actually find a corner case where it's not displayed. Or it's displayed in such a way that you might be confused. Do you want to see a demo of that? Thank you. So here you go. So this is a page. We're going to click to the page with the bad warning. And this is the warning you get. This yellow bar on the top. And that's it. And what you can do is just display the content or display the content. There is absolutely no choice for you. And you're going to accept it. Of course.  It's in the cache. And now the SSL certificate on the top is valid, as you can see. And if I enter a login and password, not going to give you mine, but then you see we are displaying it. And this will last until your browser is cache. And the nice thing about this vulnerability in I is that you can cache when you click to your display and secure content, we actually did cache five different libraries. So if you go to Twitter, over HTTPS, and you see the e-view search on the top and we're going to do non-mixed content. This is not a warning because of the attack, but because on the bottom left there is an image over HTTPS. So we're going to do fully over HTTPS. And you see the bar is green. Everything looks secure. You enter your email and your password. And guess what? Here you go. So no warning, no nothing. And you get all your SSL compensation compromised forever. Or at least you change browser or clear cache. How many people are clearing the cache? Everyone. Okay, I'm going to stop asking questions. Okay, so we found a bunch of these. Microsoft asked us to actually do not explain you how we find them until they are all fixed. So we're not giving you any details, we're going to show you a screenshot. This is one other inconsistency, this one is really weird. Basically they show you the name is not correct and you have view certificate, but you don't have the right warning. So people might also be confused by this one. Although I prefer this one. Let's move to Firefox, right? So here is the Firefox warning. This one is different. They actually try to make it very painful to the user by doing three click. So they hope that the user is not responsible but lazy. So he's not going to do three click to get to the page. And actually Firefox do a very good job into displaying the warning and suddenly we didn't find any corner case where we are not able to display it. So we had to be more creative. How many of you ever heard about clickjacking? Raise your hand. Okay, half of the audience. So for those who never heard about clickjacking, just one slide, everyone on the same page. This is clickjacking. So the idea is the attacker display you a page like the best game ever. Download this awesome movie Iron Man 2. What's the next new movie? Inception.  What happened under the hood is you have a transparent div on top of it which has another input box. And when the user is trying to do something, what he will happen is he will click on this invisible button and do something he will regret later. Of course here for Twitter they have frame busting defense. It doesn't work. It's just to give you an example. So you click and instead of clicking to download or start, you're actually clicking on leaving Twitter. So that's how we saw the Firefox challenge. Well, sure we can't remove it but we can clickjack it. And that's exactly what we're going to show you. So we were able to remove two out of the three clicks. So I assume you have this, you want to download something and you have a user argument so you click on it and actually you just clickjack your warning and you see only the last pop-up. The big warning is completely gone. And if I go to twitter.com, same as previously, you're going, oh, a blogger, sorry. Oops. If you go to blogger and tell your username and password, same story.  That's how you can do cash injection against HTTPS. For the third part of the talk we're going to, I'm going to let Baptiste show you how it works and their audience. Thanks. So for the third part of this presentation, I will show you how we can actually steal private data from users using Framlic attacks. Framlic attacks is an evolution of clickjacking and scrolling attack. Clickjacking, just presented previously by Ellie, is a term coined by Jeremiah Grossman and Robert Ensign in 2008. Scrolling attack is a new attack showed by Paul Stone in the block at Europe this year. This attack works as follow. In the first step, the attacker will double frame the target website. Here in this example, it will be the mobile version of Yahoo Mail. In the second time, the attacker will use a browser feature called the encore scrolling. This feature makes the page scroll automatically to a specific ID when adding it as the hashtag is a URL. So here in this example, every email can be associated to a specific ID. For example, the first mail from just now is associated to the to the ID checkbox 29. So if I add this ID in the URL, automatically the page will scroll. Paul Stone showed that actually from the outside frame, the attacker frame, you can actually know if the targeted website is called or not. And at this point, it breaks the same origin policy because you can know if an element is present on the page or not. If the page don't contain any email, the chain box element will not be present. So the page will not scroll. So we can actually know if there is any email in the inbox or not. In the following demo, here I will show you how we can actually conduct an attack against the mobile version of Yahoo Mail. Here you can see the victim inbox containing email from me. So if I search for my email, automatically the page will contain the ID, chain box 29. So we can actually scroll to it. But if I search for a non-existing sender, the page will be, the search will be empty. So the ID will not be present. We use this binary test to actually search in the inbox to know if the victim received email from specific senders. Here, as you can see, I can know if I receive an email from Ellie or from me. This is a very serious security breach. As you can know, as you can imagine, you can actually know if the victim received either as an account in a specific bank or other drugs on a specific website, looking in his inbox. However, to prevent this kind of attack, framing attacks like click jacking and scrolling attack, most websites use a specific defense called frame busting, which made the frame 8 page become the top of the page. Automatically. However, Facebook use a slightly different approach. When framed, Facebook display a huge dark div on the top of the page, which prevents the user from interacting with the content. But it's still able to see his information. But when you click on this dark div, automatically the page will be frame busting. However, it will not prevent us from scrolling to specific IDs. So we can conduct an attack, a framing attack on Facebook. Using three different IDs, we can actually know if the user is logged on Facebook, who he is and who are his friends. For example, to know if he's logged or not, have you any idea for an ID we can try to check? Actually, we are not searching for a specific ID if he's logged. We are searching if an ID is not present of the page. For example, the registration form was shown only on a non-logged page. So if I frame the first page, it will not scroll, so I will know that the user is not logged. So here is the demo. On the left side, you can see the framing attack result. And on the right side, what really happened under the hood, on the real attack, it will be definitely not showed. Here you can see the page on the right, it doesn't scroll. So I know that the user is logged. Here we are looking for the logged user and the page scrolls, so we know that the ID we are looking for is not the right one. If we search for the ID ID, here the page doesn't scroll, so we know who is logged. This is basically the same test for to know the friendship relation. But using a different ID to search. But actually, Facebook updated their defense to get this kind of attack. Just yesterday, well actually, Wednesday, Facebook made a different defense. Now they don't display any contents anymore, they are just display Facebook logo on the framing page. So we cannot any more use framing attack on Facebook. Okay, that's it for this third story. I will only finish with maybe the more powerful attack in the fourth story. Okay, so for the last 10 minutes, we're going to speak a little bit about this guy, smartphone. How many of you have a smartphone? Okay, once again, everyone. Good. So, I mean, it's not surprising, it will not come to any surprise to anyone. A lot of smartphone has been sold for $54 million in this first quarter into a 10, so it's a lot of smartphone. This has two effects. The first one is ITNG is not working anymore in San Francisco. And the second one is many popular websites has rolled out a mobile version of the website to accommodate this kind of small device. And people might not realize that by now, but suppose you have in your iPhone or in your Android phone or Nokia or BlackBerry is very, very different from the one you are using on your desktop counterpart, in particular because there is a lot of new feature which has been added for usability purpose. The screen is so small that what you try to do is to maximize the space which is used for display. And this actually conflict with something we have been used for almost 20 years now, which is the idea that all the security indicators you have in your browser are located on the top of it, which is what we call the Chrome. So privileged version, privileged part of the okay. Wow, impressive. Micro attack. Okay. Well, so and there are so we trust the Chrome. We really trust the Chrome on the on the browser to display information such as the URL that you can't prove and the identity. And the phone, people try to do full usability purpose. So they are trying to remove as many information, which are closer to the screen. There is also something which is makes them very, very different under the hood is because phone, you actually moving from one application to another. And since Apple did not decide to do multitasking yet, or Clinton, then you have the cookie that you we are usually expired when you close your browser on the desktop right. Do live into the browser forever until basically did not killing session cookie. So let me show you a demo of what I mean, because I think it's more visual than and it will worth a thousand word. This is Wells Fargo mobile website. Any Wells Fargo user here? Okay. Does it look like the real website? Completely. Yeah. And that's the correct idea. And as if you see the lock is here. And URL is correct. The lock is correct. There is no warning. We didn't fake anything on this part of this list. And look what happened when you click on sign in. Here you go. Any idea how we did that? No fake keyboard. No, we didn't fake the keyboard. That's capture of a real Android keyboard. Yeah, you get a correct idea. The problem with the phone, and I think if I could show you this picture, people will see better what I mean, is actually we can draw an image which looked like a URL bar, which is not one. And actually we can use the usability feature to scroll to it. That is not our idea. It was in the paper. When we come up with the idea, we look back in the reference literature. And actually there is a paper two years ago. We say it would be very, very dangerous. And I think no one pay attention to it. I hope people will start to pay attention to that. And that's really, I mean, that's the most easy attack to do, right? You can display any website. We choose WebFago. We can have Jews, Gmail, whatever. So there's coding attack. What we want to show you is tab jacking. So what is the tab jacking?  And tab jacking is actually click jacking on sorry for phone for a very, very good reason. Six months, six months ago, we look at how many websites are using frame busting defense against click jacking. And this is a real desktop part of this website. And you see that people are kind of doing a good job. Can you guess how many websites are using frame, click jacking defense on the mobile site? Two. Like this, right? Yeah, that's Twitter and Facebook because we went to them and knocked on the door and say, hey, you should do something. Actually, how many of you remember the worm on Twitter, which was in May 2009 where you actually had this thing which is do not click here and you try the user to disobey and click here and generating more and more tweets. You remember this one? It was a huge worm. We actually took down Twitter and from for at least a day. We were able to actually reproduce it on the phone. Here's a demo. And what happened here under the hood is you have an invisible iPhone and we are using a very cool feature from the phone which is zooming. So basically the tweet button is actually the entire screen. So no matter what you click, you're actually clicking on I want to tweet and you're going to tweet something for us and you don't see it. So if you go to Twitter.com and we're not making that up, we go to the mobile website because at that time they didn't have a frame busting defense. We were able to do a tap jacking. Of course, we could have say don't not click on this link. Show the game. Click on it and do a worm. Of course, we're a good guy so we didn't do that. So that was a tap jacking. Twitter was really, really efficient to fix that code. So now they have a frame busting code. So this one is safe. But I really hope that you will try to scroll up when you try to log to your bank and realize that actually if someone is using JavaScript, it will prevent you to do that. So it's kind of a plus right now. If I have two more minutes, what I want to show you is what we're going to do demo Sunday. Sunday, we have another talk. We hope you're going to join us. We're going to speak about game security and to show you how cool it is. Here is my invincible tank. You can see it's health bar and we're going to show you how we can do attack on game on Friday afternoon. So I hope you will stay at DevCon and come to see us. Track five. Thanks everyone for showing us. And now...


Hello, this is LaptopMedia, and today, we will show you how to open the Intel version of the HP Envy X360 15 and what's inside of it. To take this notebook apart, you need to undo two Torx head screws. Then, remove the two rubber feet to find four Philips head screws. After that, undo them, and pry the bottom panel with a plastic tool. Please remember, it would be of great help to us if you just hit the like button and subscribe to our channel. That would motivate us to make even more and better videos for you. Its 51 Watt hours battery delivers about 7 hours of web browsing and nearly 11 hours of video playback. At some time, this battery will surely perish, and you might want to replace it. To do so, undo all 5 Philips head screws holding it to the chassis. After that, unplug the battery connector from the motherboard, and unlatch the speaker cables. Storage-wise, there is one M.2 PCI-EX4 slot hidden beneath the metal bracket. In terms of memory upgrades, there are two RAM Sodom slots. To access them, remove the metal cover. As for the cooling, there is one heat pipe and a very long heat sink. In contrast to the AMD model, there is only one fan, with the empty spot for the other filled by a plastic component. If you'd like to see more disassembly videos of the latest notebooks we would highly appreciate if you hit the like button and subscribe to the channel.


Hey guys, welcome back to Comic-Con TV, the only place on YouTube where all geek culture collides. I'm Shannon and today on the show we're taking a look at the pop movies 1001 Stripes, John Wenger, Walmart Exclusive. All right, this is a special week on Comic-Con TV. This week we're not giving you two, but three videos. Each of them will be pop reviews and they'll all be revolving around characters played by Bill Murray. So today we're doing John Wenger from Stripes. Thursday we're going to be doing Bob Wiley. And Saturday we're going to do a special marshmallow covered Peter Venkman. And we're going to compare him to the original 35th anniversary Peter Venkman. So make sure you tune in for those. So as I said, this is John Wenger from Stripes, Walmart Exclusive. They had tons of John Wenger's at Walmart that we went to last night. And I saw they had John Wenger, they had several Bob Wiley's different ones, and they had several Peter Venkman's. I was torn between getting John Wenger and Peter Venkman. However, my daughter did end up getting Peter. So she's going to let me review them this week for you guys. So anyway, on this one, as you can see, there's the Pop Movies logo with the Stripes logo. And it is 1001. So Walmart Exclusive.  Then on the back, we have him in his, that's the fact jack stance. We've also got Russell Ziske, played by Harold Remus, and Ox, played by John Candy. So now that we've gone over the box, let's go ahead and take a look at the Pop Final. All right, so he does come in a clamshell with the clips on the top and bottom, as you can see. I haven't picked up new pops in a while. So I'm kind of starting to wonder if Funko is moving in the direction of adding the clips to each of their clamshells. Okay, so I'm sorry about that, guys. I think I might have hit something on the camera. I'm not sure, but it stopped recording for whatever reason. I just saw my camera turn off. And, but as I was saying, really like the detail on this guy, he's got the three quarters of the way opened eyes, which Bill Murray is kind of known for, at least in his younger years. And I think this might be from the scene right before he does, and that's the fact jack during graduation ceremony. You've got his rifle in his right hand, which is very nice, very nicely detailed. And he's in his Cold War era fatigues, which, again, are really nice, nicely colored. And of course, he does have his hat on backwards, just like Bill Murray's character in the movie. Now, Stripes has always been one of my favorite movies. It's almost like two movies in one.  After the basic training part of the movie, then you have the experimental tank Russian scenes. So it's growing up whenever I'd watched the movie. It almost seemed like two movies in one. But anyway, there you have the Walmart Exclusive Pop Movies 1001 Stripes, John Winger. If you enjoyed that video, make sure you hit the subscribe button right there, so you stay up to date on all things geek culture. Also, go ahead and check out one of these two playlists on the side for more videos just like the one you just watched. I'm Shannon from Comic NTV, the only place on YouTube where all geek culture collides. Take care, geeks.


people like to grade themselves based upon how much money you make right and that necessarily is not always the best way to trade on or rather the best way to grade yourself on how you trade because you can trade like shit break all the rules revenge trade you know add to a loser over and over bail yourself out and make money because you got lucky but that doesn't mean that's a good trade but that what happens is it builds bad habits the more the more you get rewarded for bad habits the more your bad habit becomes like a lifetime of a curse right we always say you know don't worry about the p-mail it will handle itself if you trade well so judge yourself on how you trade well right how do you trade well you make a plan you stick to your plan you cut your losers like you plan to do as long as you plan as long as you stick to your plan that's a win for the day that's you guys count right you guys count as a win for the day


The study uses the density matrix renormalization group and Chebyshev polynomial expansion technique to investigate the two-hole excitation spectrum of the one-dimensional Hubbard model in the entire filling range from completely occupied band down to half-filling. Multiplan physics is observed, with relevant final states characterized by two to more holes forming stable compound objects or resonances with finite lifetime. The complex multiplan phenomenology is analyzed through local and k-resolve two-hole, three-hole, and four-hole spectra, as well as effective low-energy models. A filter operator technique is presented to extract specific information on final states at a given excitation energy. Dublin's and quadruplein's are well-defined resonances, while multiplans composed of an odd number of holes do not form stable compounds or well-defined resonances unless a nearest neighbor density interaction is added. The Dublin lifetime is strongly k-dependent and infinite at the brillouin's own edges due to hidden charge SU-2 symmetry, which is explicitly broken off half-filling and gives rise to a massive collective excitation even for arbitrary high-dimensional but bipartite lattices. This article was authored by Roman Roche and Michael Potthorff. We are article.tv, links in the description below.