Good afternoon, everyone. This is Diane Grunick and I have been associated with Stanford for quite some time and actually a Humbio graduate many years ago. But the reason I'm here today is to introduce Carla Peterman, who is our speaker who I've known. I think now about two decades she is absolutely one of the most terrific leaders in California nationally and internationally on clean energy and energy regulation. She is currently an executive vice president for corporate affairs and the chief sustainability officer for PG&E Corporation. But before that she was with Southern California Edison from October 2019 to June 2021, where she was a senior vice president of strategy and regulatory affairs. And before that she served a six year term as a commissioner with the California PUC. Unfortunately, our terms did not overlap that we stayed in touch but I too was a commissioner. And while there she made absolutely international news by the adoption of the first utility requirements for storage, which all of you who are now getting to learn about clean energy know without storage, we don't have much of a system. So this was groundbreaking but she also oversaw electric vehicle charging over structure, utility energy efficiency programs, something near and dear to my heart. And the implementation of California's renewable portfolio standard. And then what's amazing is before that she was a commissioner with the California Energy Commission. She's also been on the board of one of our leading consumer advocate organizations in energy turn and has so many other things we couldn't even begin to list them, but her academic credentials are sterling. She graduated from Howard University summa cum laude. She then went on and got a PhD and energy and resources from UC Berkeley.  So for all the students out there set your sights high given what Carla has done and then not but least she's got MS and MBA degrees from Oxford University where she was a Rhodes scholar. This is Carla's third appearance at the energy seminar, and we're just thrilled to hear from her and update on what's going on. Carla. Thank you Diane and hello everyone is great to join you today. I have appreciated always invitation to come back from from Stanford to come and talk about the things that I'm working on. A real hallmark for me for my career has been to go places where I think I can have impact and California is definitely a place where you can do that and I've been privileged to work in lots of different institutions but are all focused on the same thing figuring out how do we deliver clean affordable safe power and heating to all of our customers in California. I also just want to highlight and share the role that Diane personally played in my life in graduate school so I came out to California for graduate school. My late 20s and that first summer I interned at the public utilities commission, and I had the opportunity to one day shadow Diane when she was a commissioner, and shadowing her and seeing her opportunity and her ability to go broad and deep on policy issues while being mindful of the politics and the equity impacts. I just thought it seemed like a really great job, something that I hope one day I could do. So I was really inspired by Diane, and just thank you for paving the way for me and many other commissioners have come down the line and just grateful for the friendship we've been able to maintain over these years. So, you know it was interesting reflecting on the first talk I gave I think it was maybe on distributed energy resources and really thinking about how in California we can be advancing the dialogue around climate mitigation and clean energy supply. And as you hear from my comments we're still doing that, but we also, as a state utility sector are also having to turn our attention to increasing climate risk, because as a nation and as a globe, we have not yet really address climate change the way we should. So we're focusing now on mitigation as well as adaptation, and I'm at specific gas and electric, which has been a leader on clean energy for many years, and now we're a leader in the fight against climate change, and particularly increasing climate risk like wildfire. So looking forward to sharing that with you, and as well as looking forward to your questions. So a bit of a background, you know Pacific gas and electric is one of the largest combined natural gas and electric companies in this in the country. Our company employees 25,000 people and nearly 15,000 contractors, and we serve 16 million customers through the northern industrial California service areas. We are more than anything, you know I say we're really driven by our purpose to make sure that we're providing safe, reliable, clean and affordable energy to everyone in California. We really see ourselves as having an important part of everyday life and really driving the economic engine for California. Our company has gone through some changes and so I wanted to share with you our revised that purpose statement because that'll give you a sense of what we're focused on. So this year where we find what our purpose statement is, and it is three parts, delivering for our hometowns serving our planet and leading with love. I wanted to share that with you, especially the last part leading with love, because it's what attracted me to PG knee when I started four months ago is you don't hear utilities talking about love typically right. But what leading with love means is having a commitment to working through difficult problems. And we have a set of difficult challenges that we need to work through with our customers with our policymakers with other industry, as we're working to deliver power safely and responsibly. And I think leading with love really ties well to our focus on being a safety leader, and also leading in the fight against climate change. Because to lead with love you have to be patient, you have to be thoughtful you have to trust, and you can't do it alone. And if anything that I've learned in my you know several years working in this space is that everybody needs to be a part of the solution. We're no longer in a place where one company can do it all or one policy, we all have to work together. And so I will say that there's room at the table for everybody. So I don't know what you're interested in or you're working on.  So a little bit again more about our background and clean energy. PG&E has over 35% of our power comes from renewable portfolio standard eligible resources, like solar, wind and biomass. And then when you add the nuclear we have in our portfolio and the hydroelectric facilities we have over 85% of our power is low carbon. We also have one out of every five rooftop solar systems is with any PG&E service territory, as well as one in five electric vehicles, and we're a leader in battery storage. We are in an era that's been following a decade that has included several tragic and troubling events for PG&E and our customers including a natural gas pipeline explosion and multiple wildfires. To help ensure these tragedies of the past are never repeated. We've undergone significant change and progress at PG&E, and that's why I've been attracted to the company. We're really focused on strengthening our operations and programs to face climate risks, and in particular reduce the wildfire risks that we're seeing and doing everything we can to harden our infrastructure. I'll speak more about wildfire later, but just to give you some perspective. Just this year, we implemented new safety settings on our lines that have reduced ignitions by 90% since late July compared to previous years. And we're using technology to both limit the impact of wildfires and limit the scope when we have to do intentional power shutoffs designed to prevent wildfires. So I'll speak a little bit more about the risk, but every day we're adapting and innovating and putting new solutions to manage it. But let's just take a second and talk about some of the climate change trends that we are seeing. Our service territory is wide, and we are seeing increased climate risk, and we're also modeling what risks we think we'll see in the future. So we are ready and will continue to see heat waves, more frequent and extreme storms and wildfires, drought, subsidence and rising sea levels. In our territory, average and extreme temperatures are projected to increase over the course of this century, and our coastal areas will still remain cooler than inland areas. Sea level rise in storms are a concern for the region. For example, in Sonoma County, we estimate that in 2050, the chances of a large rain event increased by 50%. So at the same time, we're predicting more extreme storms, we're also predicting bigger droughts. So droughts are likely to become longer and more severe due to increases in temperature and decline in the Sierra Nevada snow packs. Much of our region is also within high wildfire threat. So by 2050, we expect that the average annual burn in our territory could increase by 31%. We're very focused on reducing wildfires, but utility wildfires are 10% of the ignitions that we see. They have been some of the more catastrophic fires, but we're supportive of doing everything we can to reduce wildfires from all sources. And then when you have wildfire scarred landscapes, they are more susceptible to precipitation driven landslides, especially in Marin, Sonoma and Santa Clara counties. So we are expecting to see these impacts in the future, but we're also seeing them now. Don't have to tell you that we are currently in a significant drought situation. Drought is affecting 100% of our service territory. Almost 50% of the state falls into the top two intense categories for drought right now. When we look at our hydroelectric system, which is the largest investor owned hydroelectric system in the nation, I think it might only be second to vulnerable power. When we measured precipitation and snowpack were expected to be the highest level back in April, it was under half of normal conditions. So again, we're seeing drought, not just impact the terrain in which we operate, making it more dangerous to provide electricity, but also impacting our supply from our hydroelectric facilities, which are a big part of our low carbon supply. So to manage the physical risk from climate change, we are working to integrate climate change projections into our planning process, our risk models and our engineering standards, just to give you a sense of what this actually means. So I have the corporate fairs organization. So I had the sustainability team amongst many teams. I also used to have the climate resilience team as well. As we were working through a lot of the state and regulatory policy about climate resilience, but we recently decided to move our climate resilience team into our engineering and planning organization. They were already working very closely together, but this move further reinforce the importance of integrating climate modeling and climate risk into the everyday utility models. It also leads to a change over the scale in which you do this work. So typically utility resource planning will look at out 10 years, but when we're looking at climate risk, we're now looking at 10, 20, 30, 40, up to 50 years about what the impacts to our system will be. We have long lived assets. So it really is important to start preparing them now for the risks that we anticipate seeing. PG&E and all the investor-owned utilities in California are conducting climate vulnerability assessments. These are assessments that we're doing to look at what risks there is to our infrastructure from climate change, and then working with local communities to make sure they're able to adapt to any of those risks. So we're just at the beginning stages of that, but we're doing our climate assessment in a regional manner. And so we're focused right now on the Bay Area region. And our early findings are consistent with what I shared earlier in terms of some of the risks that we expect to see. Our electric assets are more at risk than our gas assets, and the highest threats are high heat events, flooding, and wildfire. So part of what we're going to do as well as I was mentioning is we're going to be working directly with communities to help them understand what climate risks we see and understanding what their adaptive capacity is if there are stresses to the electric and gas system from these climate risks. And the point of this is to give them that visibility early on and to really help co-create solutions with them, as well as empower them with data as cities and counties in the state go about doing their own planning to manage climate change. In addition to providing communities with information about climate change, we're also directly working with them to ensure climate resilience. We're especially building climate resilience capacity through our grant programs. One of the other cool things that I get to do in my job is that I have our charitable giving program and our PG&E foundation is within my organization. And one of the grant programs we have is called the Better Together Resilient Communities Grant Program. It's in its fifth year, and this program provides four different $100,000 grants to support local initiatives to build greater climate resilience. Each project addresses the needs of disadvantaged and or vulnerable communities. I'll just give you a couple of examples of types of projects that we fund. So the West Oakland Environmental Indicators Project, an environmental environmental justice organization, use their grant to meet the needs for cooling and related health services during extreme heat events for the low income underserved and disadvantaged community of West Oakland. Another grant we provided to the We Yacht Tribe near Humboldt Bay, and they're using their grant to fund a climate change adaptation planning project, which will identify cultural and natural resources within the tribe's ancestral lands and waters vulnerable to climate change and at risk from flooding. And we have another project with Ag Innovations, who are working to launch a fire safe council in Calistoga that will mobilize residents to protect their homes, communities, and their environments from wildfire. So we're focused on climate resilience broadly with an acute focus on wildfire risk, as that is the biggest risk that we currently see in our system. So I wanted to do a click down about our work in this area. So first is a little bit more about the nature of the risk. According to Cal Fire, eight of the 10 largest wildfires by acreage and state history have occurred in PG&E service area, and seven of these fires have occurred since July of 2018. So significant amount of catastrophic fires caused by many sources of the last few years. Last year alone in 2020, Cal Fire records show that more than 4.2 million acres burned during wildfire season, and more than 10,000 structures which are buildings were destroyed. That amount of acreage is bigger than the state of Connecticut. That is how much burned statewide in 2020. And it's estimated that 4% of our states roughly 100 million acres of land burned during last year's fire season, making it the largest wildfire season recorded in California's modern history. 2021 has also been an active year. We've seen more than 1.9 million acres burn and over 7,000 structures destroyed. And that's just through the first. 8,000 structures destroyed during the first nine months of the year. There was over 7,000 fires already this year. So many of them you don't hear about. Thankfully, many of them are put out before they have significant damage. But we've also seen some catastrophic fires this year as well. When I do my work and I look at PG&E service territory, I'm amazed about how much of our territory is now in a high fire threat area and condition. A decade ago, 15% of our territory was considered high fire risk. And again, these are areas that are high fire risk because of the amount of fuel there, the dryness, so it's a combination of both temperature, vegetation, precipitation. That 15% a decade ago has grown to 50% over our service territory. And we think it's an upwards of that. A third of our electric lines that serve PG&E customers are now in high fire threat districts. About 10% of our customers live in significant high fire threat areas, but due to the way the network is designed, we have transmission distribution lines that must span significant parts of the state they're at risk. So given this threat and the real possible harm to our, you know, to our fellow Californians, we have taken a stand at PG&E that catastrophic wildfires will stop. Not just catastrophic wildfires associated with utility equipment, but all catastrophic wildfires. And we are doing our part to lead the way in demonstrating advances in technology, as well as forest management. We spend now annually 5 billion a year in mitigation efforts, and within that we spend 1.3 billion a year on managing vegetation. So that means that we prune or cut more than 1 million trees annually to maintain clearance from power lines. This year we anticipate we'll have cut down 300,000 trees. There are almost 8 million trees that are within strike distance of our line. And so what's what I reflect on a lot is that the relationship between power lines and trees have fundamentally changed with climate change, and we have to adapt to that. We have a responsibility to provide power to all folks in our service territory. And so we are looking again about how do we live up to that obligation while doing it in a safe manner. And I'll talk about some of the things that we're thinking about that are pretty innovative in a minute. But I do in addition to veg management, just want to highlight some of the areas where we've been investing in technology, technology that's really focused on grid design and system hardening, situational awareness and forecasting, asset management and communications, veg management already mentioned. So what this looks like in practice, all the utilities have invested in a high definition camera network. So all across our territory, we've got greater visibility to what's happening on the ground. And this has made it easier and faster to identify when wildfires and sparks are starting. We also are very much focused on understanding the weather in real time and understanding wind conditions, since in the past many fires have been driven by high wind events. So we have an extensive weather station network. I can't imagine that any other state has extensive one as we do now, given the investments that have happened across the state by the utilities in this area. We're doing a lot to upgrade the system in a way that other states have not had to do in terms of covering our lines, vegetation management. But we also understand in the PG&E's territory that there may be some areas where simply is not safe or cost effective to keep lines above ground. So we made a commitment this summer to underground 10,000 miles of overhead power lines, which will significantly reduce the risk we face in the years to come to both reduce the risk, as well as reduce our need to do proactive power shutoffs. This is a significant investment. It represents the largest effort in the US to underground power lines as a wildfire risk reduction. 10,000 miles is almost halfway around the world, just to give you some perspective in terms of the scale and scope. We've been doing undergrounding of wires, but that process has been 30, 50 miles a year. So this is going to require a massive ramp up. But we believe we can do it. We've had some recent undergrounding projects where we've been able to see the cost go down. So, for example, back in 2019, we announced that we will rebuild all of our power lines underground in the town of Paradise, as we help the community recover from the campfire. We're also rebuilding power lines underground within the 2020 North complex fire footprint in Butte County. And we're already seeing the benefits in reduction of power safety shutoffs in Sonoma County, where we recently completed an undergrounding project that will prevent 11,000 customers from being repeatedly impacted by these power shutoff events. Through these projects, we've been able to see the real opportunities from partnership and coordination with permitting agencies, with telecom and internet providers, with natural gas projects. Our gas team has said, you know, we've been doing things underground forever, right? And so we're learning, we're borrowing techniques from the gas side to think about how do you, for example, do horizontal drilling and different things to help lower the cost of undergrounding. It's not going to be this cost-effective solution for every part of the state or even part of the country, but given our terrain and what we are seeing with the forest, we do think that it's going to make sense. This comes with a cost, and the challenge right now is how quickly can we do this while still keeping power bills affordable. One of the things that I'm really excited about that I get to do is I chair an undergrounding advisory group where we've got participation from state agencies, local and county officials, anyone who does permitting environmental organizations, firefighters, and we're coming together meeting monthly and saying, how can we coordinate on this massive infrastructure project? What do we need to do to help the community accept these projects? What are people looking to do? How can we take advantage of this initiative to also provide, for example, better service in broadband? So that's the conversation we're happening, and I do think it's another area where we are going to set leadership for the nation and show how this can be done. We probably won't be in a place where we're ever going to transmit power without wires completely, but we do think we can do it with a lot less wires. In addition, we're also looking at microgrid opportunities. We've done some remote microgrids already in areas with few customers that are hard to serve and seeing some of those pencil out as well. We're doing a lot of investment obviously in infrastructure, but there still are times when our safest course of action is to shut off power for a period. Many of you have probably experienced or may have experienced some of these proactive power safety shutoffs, and we recognize, I truly recognize that this is very disruptive. We're not in the utility business to not provide power, and so it has been a hard but important tool for us to use, and our protocols are getting better. We're getting more surgical. We risk is really driven by when we think that the conditions for wind and the fuel load is so significant. We will shut off the power in advance de-energized so there's not a risk of the line igniting a fire. Our protocols get better every year. And what I wanted to share with you is that if our 2021 PSPS protocols were in place from 2012 to 2020, we would have prevented 96% of the structures damaged or destroyed by wildfires due to overhead electrical equipment in our service territory. So the grid hardening plus using selective thoughtful use of power shutoffs has had a significant impact in reducing and could have had a significant impact in reducing wildfires on the system. Where we are very focused now as well is on that 4%, where that 4% includes situations where you have, well, we did not have significant wind. And so we did not have triggered or triggered a power shutoff, but the heat and the fuel loads were such that there was extreme risk of wildfire. So that's where we're targeting as well. We're also doing all we can from a customer perspective to help mitigate the impacts of these safety shutoffs. So for example, we provide backup batteries to any of our customers who have medical issues. We also provide food vouchers and hotel stays for these customers as well. We're partnering with community based organizations to provide rebate programs as well for well water for purchase generation, no replacement options. I know none of these things are perfect but we're doing what we can to make the power shutoffs as invisible as possible to our customers. I wanted to just also hit what's happening at the federal level, because again, we can't succeed with our partnership with our federal agencies, as well as Congress and the administration. We've been advocating for legislative proposals that prioritize federal investment and extreme weather related grid resilience. I'm thankful that some of these proposals have been included in the bipartisan infrastructure deal that passed the Senate, and we're hoping to see them further progress. Nearly one third of PG&E service area is on federal land, which is why it's incredibly important that we have good partnerships, for example, with the US Forest Service. And we're working cooperatively. We've accelerated renewals of assisting right a ways on certain federal lands incorporated master use permits so that we're able to execute our veg management in a timely manner. We are really supporting thoughtful frameworks for the work that we're doing while being mindful of the need to preserve these areas for other uses by Californians as well. No, just, I know you all may have some questions so I'll just wrap up by saying that adapting the electric and gas sector to climate change does require significant amount of investment at unprecedented speed and scale. We're going to need capital markets, we're going to need government funding, and we're going to need a lot of thought leadership. The more tools we can have in our tool set, the better. I'm proud of the opportunities I've had to increase that tool set, for example, by working on energy storage. We need continued research and development, including on things like carbon capture sequestration, hydrogen building electrification, as well as behavioral work about how do we design incentives, rates programs in a way that customers will want to adopt them. We really need to be moving with a faster pace. We have a sense of urgency, but we've got to translate that into even faster action in order to meet our climate commitments. And I'll just end with an example of some of the public private partnership work that is important and underway that we need to continue. So not far from Stanford, we partnered with the city of Menlo Park, and the San Francisco Creek Joint Power Authority and Facebook to submit a grant application to FEMA. And FEMA has a program called Building Resilient Infrastructure and Communities, and this grant is called the Menlo Park Safer Bay Project seeks to protect critical infrastructure and communities from flooding associated with sea level rise. And by partnering together, we were all able to pool our resources and leverage them to get a bigger source of funding for building a sustainable seawall than we otherwise might. And these types of projects, they do take, they take some time and collaboration, but what was really cool is that it's going to be a win-win for everyone. And so this is something where instead of us just going out and protecting our infrastructure in the area by partnering with the city and Facebook, we were able to look more broadly at protecting the community. These types of partnerships are going to be critical moving forward. So whatever you do when you leave Stanford, wherever you're going to work, I think there's going to be, there is a role for you to play in helping Californians adapt and respond to climate change and actually in helping us continue to be a global leader in this area. So with that, thanks for the time and looking forward to our discussion. I'm going to call you Commissioner, Secretary Seedleman for the great talk and ending with a plea for all of you to follow out with all of these challenges she's taking on, which seems to be just about everything currently confronting society. Thank you. So probably up any unlikely, but you can get first priority to register students. We've got about 70 of those in the room. So does any student might pick up the questioning period. I like about how your day to day work looks like it seems like there's something. I was afraid to ask that. So the question was, how does your day to day work? I was afraid to ask that. So is the question is what is my, how is my day to day work look. Yeah, it seems like there's an awful lot in there you're responsible for. I am I'm thankful that you know, continue to work on my leadership to work through people so I'll say in my day to day work begins with making my five year olds lunch. Because we're all multitasking so he's the first customer I have to have to please. And then, you know, one of the, you know, share something that we have been instituting in PG&E over this year and it's going to be a multi year process but share with me as I explain this but we're implementing something called lean, and it's a lean operating system. And this is something that was developed in the auto industry as a way to be able to manage one's work and time in a manner where the highest priority issues get attention and visibility. One of the challenges historically for PG&E and companies of this size has been there is so much going on. It's hard to always identify what needs attention. Right. And very quickly you can be on to the next thing the next thing. I mean, neglecting something fundamental. And we need to be able to, you know, build the plane as we fly it so to speak. So one of the things that our new CEO brought to the company this year was this lean architecture and in lean, you quickly use visual management tools, like a PowerPoint slide or piece of paper to understand and really track and have a conversation about every day. What are the most important things you need to be looking at and being able to visually see are you on track or off track. So we have been employing this across the company and including a corporate affairs and every day I meet with my team for 15 minutes, and we go over are we on track with these important matters are we on track with our sustainability plan. Are we on track with our wildfire mitigation plan. What issues are coming up. What are we hearing from customers they're concerned about. What are we hearing from regulators that they're concerned about. And every supervisor in PG&E is having one of these daily operating reviews 15 minutes. And after a supervisor has theirs, they take the most important pressing issues, and they go share them in another DOR with their supervisor. So, by the time 1015 comes every morning, I'm in a meeting with the other EVPs and our CEO, and we have gotten through the organization already. A sense of what are the biggest priority issues facing us this day. And so there's 1100 plus of these meetings happening before 10 in the morning. And so, when I go into that meeting with my team at 945, and then with my colleagues at 1015. I have a good understanding about what we think is the most pressing issue facing us that day, and understanding what I have to do to help solve it. So that's one part of my day is just keeping track of that. But in terms of what my day normally looks like, I gotta admit it's kind of fun. Like, I've got meetings with, I've got a couple of standing meetings on things around sustainability on, on regulatory.  What are we going to do in terms of environmental leadership, because we are what is our strategy going to be, because the work's getting done every day, but part of what my job is to help set the clear vision going forward. And so, we have these substantive conversations. And sometimes it seems like you're not making progress, but ultimately, every conversation is tackling something challenging, and we're committing ourselves to to come forward with plans in different ways. So, my day is a mix of things. And it's also sometimes responding to angry phone calls from people but usually I get someone else to handle that. And I try to read to I'm trying to fit more time into read to like read academic literature. One of the things that I thought made me a good CEC commissioner was I knew how to look up something and read an article and we was happening in the academic community. And so, I try to get away from that. And so, I trying to spend more time also just talking to people outside of the utility world to make sure we're not missing good stuff. Great question. Thank you. Other questions in the room here. So, we have one here and two over there. Thank you so much for sharing a little bit about your day and it sounds like you're Santa being to like text from meetings every morning so very cool. I wanted to ask a little bit about the politics of what's happening behind the scene. For example, when you use your revenue to do, you know, fire resilience and some mitigation of disasters, for example, carrying overhead lines in these towns like paradise, etc. You seem like really logical and great things to do to get pushed back from other residences and other communities saying you're using our money to benefit this one town. They're getting the benefit of crime resilience and, you know, aesthetically, they're making the town without the lines up what are you doing in our town and things like that. So how do you balance the revenue and where the resources actually go to benefit certain communities. Great questions and questions that will come up even more as we talk about scaling this so I'll I'll share it a couple ways one. You do an enterprise risk management exercise every year to identify what our top risk are as a company and what our top risk are for our customers. And the public utilities commission so we are we are regulated by the public utilities commission and they approve all of our increases and rates and they approve our plan for spending so we do our plan for spending. It's a four year plan our general rate case. And there's also a separate plan for wildfire mitigation where the wildfire we submit an annual wildfire mitigation plan we're not third year now where we lay out everything we're going to do related to wildfire. And then we get approval for those costs and our general rate case. And so, as a part of the general rate case process at the PUC. How about, gosh, maybe six or seven years ago, they introduced something called a process where all the utilities provide information on their top risk, and that's discussed and a part of the formal process of the general rate case so that interveners and the regulators can see how what you're asking for funding for ties back to what we've identified as our top risk. So I give you that context to say, there's a real regulated formal process for talking about what are the risks that we're facing, and then how are we going to address them. What I think of the utility model is that we socialize big costs amongst a large customer base. So are things sometimes that we do that benefit the central valley and don't event benefit the Bay Area, but all customers pay for them. Same with wildfire. If we only had customers and wildfire threat areas pay for the cost of mitigating the system. It would not be affordable. So one of the tenets is that by socializing these costs power essential service becomes affordable for everyone. The risk of wildfire is really testing this model, because these expenses are so significant, you know, in order to reduce the risk that electricity might provide here. Significant spend. And so we do hear from communities who are asking hey why am I paying for this right and what we're focused on is showing it here is the value to everyone to be able to have this that this is a risk. This is one climate risk we're dealing with now we're going to deal with others in the future we're going to deal with drought and do a subsidence, and we're also going to socialize those costs so I think it's about really helping people understand the broader situation. I think also what we are focused on to is are there some costs that should not be in the electric bill right are there costs that should be paid through taxpayer money for example so that we don't see electricity rates rise as we're fighting climate change. This is a really active discussion right now, and I think it's only going to increase with time, but we are trying to balance a lot of competing factors, and the reality is, even if climate change wasn't happening. And wildfires weren't happening grid costs. We're going to be going up, because we're a company that's a bit over 100 years old, we have infrastructure some of it the useful life is 50 years 100 years. So across the economy, electric and gas companies are having to invest in their infrastructure. We're having to do that at the same time, we're having to make it resilient to climate change. Again, which is driving some of the cost increases. Okay, thanks. You talked about all these issues facing PG right now, the droughts and what are affecting generation. But you also have the closure deal with getting on the horizon in 2024, which, you know, is a significant portion of California's generation so I'm wondering what's PG's plan to reconcile all those issues with the closure of the all looking in a climate conscious way. So three external questions the same subject. So thank you for that. Right. So, yeah, thank you for the question. It is one that's top of mind. A few years ago, I think it was probably 20 2018 maybe before that, there was a decision by the PUC supported by a host of stakeholders environmental groups PG and the labor to not seek real licensing of Diablo Canyon. There are other environmental concerns related to the facility, particularly the impact on aquatic life from the hot water that flows from plants on the coast. So we have a state policy around addressing generation plants that do once through aging so there's several gas plants that have now closed on the coast, because of this, and then it's also an aging generation source so it's very expensive to operate as well and so looking at this combination of factors it was decided not to This was several years before we saw some of the reliability shortfalls and challenges that we are seeing, but the commitment there and it is now is to move forward and replace that power and still stay on track to meet our state rps goals and our carbon neutrality goals for 2045. The replacement of that power is not only or even mostly PG&E's responsibility, because what's happened since then so we own Diablo Canyon, but we also in the last several years have seen a growth and community choice aggregation. And these are local providers of energy, and they supply the energy while PG&E continues to supply the transmission distribution. So replacing the power from Diablo now is going to be replaced by several different low serving entities. PG&E is one of them, but it also was a resource for the entire state. So Edison, San Diego, Marin, all of these different energy providers are going to pay for their share of replacing the power. So what exactly will look like, I don't know, but I think you have highlighted something which is Diablo's 15% of our low carbon energy in the state. And so it will have some impact on the state's carbon emissions as we ramp up to replace that power in the years to come. Great. Any other questions in here? Thank you so much for your talk. I was just curious. It's watching a recent talk by Jesse Jenkins and he was talking about the need for expanding US transmission capacity by 60% in your by your 2030. And so you talk a lot about transmission capacity in the context of moving lines underground for improved resiliency, but I was wondering if you could speak to actual expansion of grid connectivity to enable higher penetrations of renewables on the grid. And what does that look like and what is PG&E's role in that transmission infrastructure bill? Sure, really important question. And depending on what there's various pieces of analysis out there that talk about what our power supply will need to grow to in 2030 or really 2050 people talk about a lot in order to reach like carbon neutrality goals, you know, in terms of the power supply. And we're expecting electrification to be a big part of how the electric and the energy sector is going to meet some of the carbon reduction is typically for transportation. And so no doubt we're going to need an increase in transmission in order to meet that need, no matter how much you think we already need transmission now. The challenge around transmission just is it takes a while to permit is expensive. 10 years or so as the average length of time it takes to build a permanent a large transmission project. And it becomes more complicated when you're starting to go across different state lines and different territories and so it is an active question that we're involved in with utilities all around the west, which is how can we do more coordinated transmission planning, you know, each utility each RTO, you know, Kaiso's RTO does its own transmission planning, but it needs to be more integrated. So in terms of our direct role, we both own transmission, as well as their third party sitting on transmission as well. You know, we work with the Kaiso on supporting their transmission planning, where we make them aware of what transmission needs are coming. And we continue to advocate for faster approvals. So we can go about doing the investments. There's a need to not just invest in transmission to bring clean energy in the state, but we also need to invest just to upgrade the existing transmission. And some parts of it which need upgrades as well so we have seen an increase overall in the cost of transmission that's going into our customer bills from this combination of a need to build more as well as to do the upgrades. This is an area where I think you're going to see more focus. So we had SB 100 is passed by the state a couple years ago, targeted 100% of electric sales come from clean energy in 2045. And so the energy commission put out a report, maybe six months ago now times passing me about what that might take. And one of the areas flagged is we're not yet building the transmission needed. So it's a conversation aspect is going to ramp up. I don't have an easy answer. I think it's going to be really is there the will, right, because you do have to figure out a way to streamline the permitting process and also be willing to accept the cost. One of the last things I'll share is that Edison did an analysis showing just how you might go about meeting the electric demand, if it's trying if you have transmission constraint or not or land constraint, because the trade off is if you don't build transmission, you've got to do more in state. And so then you've got to look at what is the capacity for land and state, including using rooftops, the reality you can't just do that you're going to need some combination. But I anticipate also, there'll be support for doing more distributed generation as well, given some of the transmission challenges. I'd like to sneak in for that great question. How much of the underground you're doing transmission lines is high voltage lines. I don't think the answer is wrong. So good catch the 10,000 miles I'm talking about is almost as distribution line is not going to be chivalrous transmission lines. And that's because we see the risk on our system. We're not seeing the risk. It's the risk is limited at the transmission level where we're seeing the risks is on the distribution system. Great. So a couple of questions, a personal question for me and probably the audience might be wondering this. Do you see Southern California send PG differently now than when you were a commissioner for all those years. In what ways. Yes, I know. I would say the no in the sense that I mean I got the question when I went to utility about. Yeah how's it different than the public sector like what's it like over there right, and I had to laugh because the people are pretty much the same I mean literally the mission statements. This is mission statement is just like the PUC is the words are a little bit ordered differently but everyone's really committed to making the system better and I think people just have strong perspectives about how much they they do to contribute to that so I have found it very mission driven to be at a utility it's private sector but just frankly over the line from public sector, and that's so much as being driven by public policy and regulation. What I think differently is, I have a better appreciation of what it takes to implement projects. And that's why I wanted to come to a utility. I love policies my love, but I wanted to see what happens after I made a decision right like how do you actually get the work done. What does it look like to mobilize labor and workforce, and that has been insightful. The most insightful thing I've appreciated is the importance of funding billing systems and it infrastructure. The type of stuff is not sexy policy, but so much of the clean energy future is dependent on digitization and automation. And as we are talking about real time pricing let your vehicle rates and solar rates. The ability to have a billing system that can handle all those permutations should not be underestimated and utility billing systems like 50 years old so PG knees redoing it's ours now. And just redid their San Diego as well. And this can be billion dollar projects, and not the type of thing that people automatically jump to funding, but I think are so critical to actually making sure there's a better customer experience so we're just trying to modernize these things out of the 1900s and preparing for this, you know, 21st century 22nd century world. And that's where I'm probably keeping up at night the most. Great as a transition to your close and personal session with marlies and a smaller group of students. You have touched on this a couple of times what advice would you offer the students in the audience including you have any internships or jobs that you might be interested in students number one and number two, which areas do you think are going to be the most productive to get into to help solve the problems that you described. All good questions I mean this is not a, this is not a cop out but every area, just like when you think even things that we're really mature and like power procurement are changing and energy efficiency so we need folks working on things that we've been doing for a couple of decades to new because everything's got to scale and evolve. So that's one to my advice would be, don't underestimate the contribution you can make right away. When I was in graduate school as a, when I was an intern at the PUC, I had the opportunity to work on a proceeding and got to suggest some things that actually got into the policy, and the reality is at public institutions and the utilities. You've got 2526 year olds running billion dollar programs, and it's exciting the impact you can have. And the policies are really early on, like when I started working on energy storage. We didn't know what the policy should be we're figuring it out so it's not like studying Shakespeare where there's been, you know hundreds of years of writings and experience, we're all just figuring this out. And frankly you all are so close to the latest science and engineering that you can go somewhere and have a major impact. And that's why I began a utility like if you like doing cultural resource issues, you like community engagement like engineering. It's really a microcosm of the different skills that you need. And so it's just a great place to work. In terms of internships and jobs, yes, all of those types of things are available. I'm still getting up to speed on what that looks like at PG&E being for a few months. But if anyone's interested in something, just shoot me a note on LinkedIn and I'll connect you to the right person or you can shoot me an email at CJPS at PG&E.com. Well, Commissioner VP, CEO, Secretary Peter and thanks very much for that inspiring and pleasingly hopeful talk. My pleasure. I'm sorry I can't be there in person that you have beautiful campus and I'm always inspired to. Hopefully when COVID leads you'll be able to visit us in person. I would love that. Thank you for your time.


I'm chilling on the internet and all of a sudden I see that Nathan Fillion's in a fan film Oh, that's cool, but it's uncharted. Yes, this is something that a lot of people have been praising They've won a Nathan Fillion favor do a movie make Nathan Fillion Nathan Drake himself because the guy literally looks like him He's they took it from him. So Seeing this short film.  This thing's awesome Like it's fun. It's thrilling. There's a ton of great things to it. You know, this is the uncharted fan film We've wanted, you know, I love the uncharted series. It's one of my favorite series in video game culture today Nathan Drake's one of my favorite video games of all time. I love naughty dogs games And this is exactly what I wanted you got Nathan Fillion playing Drake Steven Lang playing sully actors You know, especially Steven Lang assault He was great But Nathan Fillion really fit the role of Drake and I think the direction by Alan Unger who also wrote this film what?  It feels thrilling. It feels intense It feels like an uncharted game, but especially with the action sequences when it gets to the punches and that When it gets to that type of stuff, it literally feels like an uncharted movie it feels like an uncharted game and this is what the uncharted Movie should be like when they make one, you know, I know Tom Holland's gonna be in the other one That's a whole different discussion. I could bring it and I do like Tom Holland. I just don't think he should be Nathan Drake, I don't think they should be doing in younger Nathan Drake They should be going for the older one use them in the flashbacks. That's fine with me not gonna lie That's fine with me kind of do with uncharted 3 did that that would be cool with me But we need that older Nathan Drake and I think this really shows why there's a lot of good aspects to me No, he's in his prime in a sense. He's a treasure hunter. He's already been going through all this stuff I don't need any more orange and stuff with Nathan Drake, but this short film again going back to the action It felt like a Nathan Drake if they were to do this in a live action actual movie This would be great. You know if you add like another hour to this you could make it a full-fleet feature film I would be down for that. They should do it. Go fund me. Let's do it Let's get it the way that this short film leaves off makes me want to do it And the reason I'm doing this video is because of some of my subscribers might not know about this Now I want you guys to go check it out. So hit it down below guys Go hit up at this uncharted screen. I want you guys to go check out this fan film come back and tell me What your guys thoughts are where it I absolutely dug it a lot I think that it's thrilling. It's funny that the Nathan feeling totally is Drake like the script really was perfectly Perfected to Drake's dialogue, you know when he's making fun of the dude's hair that that was solid You know, he has that charisma smile that Nathan Drake feels when he's in those Dark times where he could die, but he's making light of the moments Which is stuff that I love in the series and after watching the short film I'm gonna go play the games now because I love them because these games are awesome One two and three four and even the last legacy was great. You know, I love each and every one of these games So without said I'm gonna watch the short film four more times Then I'm gonna go play the games because why not I got today off. Let's do it Yeah, I'm low way your guys thoughts are up uncharted the short film You know, it's called um uncharted live-action fan film 2018 Nathan feeling again. I'm gonna put down in the I'm gonna put down in the bio like where you guys can find it out because I really want you guys to check it out So can't wait here you guys thoughts on it again Nathan billion this goes more of like why he is Nathan Drake The score is great. The action was fun. Sully Steven Lange is Sully I never even thought of that but that that that that's great casting you know, and I hope they do another one I want another one now Honestly another one now Please but thank you guys so much for watching if you're new here hit that like and subscribe button Go hit up sandwich on films for advanced movies can you check out some movie news and also movie reviews over there And of course until next time stay classy


Everybody forced here ripping one box of twenty twenty once like football hobby for Robert s appreciate it Robert. Good luck, bud See what you got 12 backs here we go. All right sermon concourse rookie first up is a Darius slayton jersey card 57 of 75 You got from your level silver rookie kelin mont And a JC Jackson a Pete Werner Shrike Keller field level there 12 of 75 Cold level silver rookie Niko Collins Josh Palmer premier level Etn selections concourse silver Carson Wentz In the field level rookie Derek Gore Ellinger Elijah Moore a tie die snapshots Josh Allen beautiful-looking card 15 of 25 Heck yeah, Robert. There you go, man Tied I snapshots Josh Allen Concourse silver Almond Ross St. Brown rookie Dwayne Eskridge field level rookie zebra coming up now and It is a concourse rookie Joe try and show yinca Very nice tie-dye and zebra in the same box Silver Club level rookie Amari Rogers Collins So I haven't hit an auto yet either so You more good stuff coming concourse blue Charles Woodson Numbered 188 of 199 and a silver field level Josh Allen now Zach Wilson concourse rookie base Caterious Tony five of 15 tie-dye die-cut auto Great box Robert seriously great box man. It's up there. They need to end premier level rookie base Silver phenomenon Ezekiel Elliott silver concourse Quitty pay That's Fitzpatrick at well. We got a club level white Aaron Jones now a lot of low numbers in this Aaron Jones 32 a 35 club level white a silver premier level Ian book rookie Parsons. There's a Trevor Lawrence Tylen Wallace Rookie Jersey auto 28 of 199 Tylen smoochy Wallace Allen Robinson Carter silver selections Ricky Zach Wilson a silver concourse DK Metcalf Justin Fields premier level rookie base concourse maroon Joe burrow Joe shiesty there 29 of 149 a silver premier level Devonte Parker You line Mitchell Yo, congrats Robert on the very good box there. We'll get those cards right out


During the past 25 years, an increase in the prevalence of methicillin-resistant staphylococcus aureus, HMRSA, has been recorded worldwide. Additionally, MRSA infections may occur outside and independent of hospitals, caused by community-associated MRSA, CAMRSA. In Germany, it was found that at least 10% of sporadic infections are due to livestock associated MRSA, LAMRSA, which is initially associated with livestock. The majority of these MRSA cases are attributed to clonal complex CC398. LAMRSA CC398 colonizes the animals asymptomatically in about half of conventional pig farms. For about 77% to 86% of humans with occupational exposure to pigs, nasal carriage has been reported, it can be lost when exposure is interrupted. Among family members living at the same farms, only 4% to 5% are colonized. Spread beyond this group of people is less frequent. The prevalence of LAMRSA in livestock seems to be influenced by farm size, farming systems, usage of disinfectants, and infeed zinc. LAMRSA CC398 is able to cause the same kind of infections in humans as S. aureus and MRSA in general. It can be introduced to hospitals and cause no sacomial infections such as postoperative surgical site infections, ventilator-associated pneumonia, septicemia, and infections after joint replacement. For this reason, screening for MRSA colonization at hospital admittance is recommended for farmers and veterinarians with livestock contacts. Intra-hospital dissemination, typical for HMRSA in the absence of sufficient hygiene, has only rarely been observed for LAMRSA to date. The proportion of LAMRSA among all MRR. This article was authored by Christian Cuny, Lothar H. Wheeler, and Wolf Gangwet. We are article.tv, links in the description below.


Hello everyone, my name is Brian Parman, I'm the North Dakota State University Agricultural Finance Specialist and today I'm going to do a video on North Dakota cattle production costs and budgeting and talk a little bit about the advantages to backgrounding heifers at the end. I've looked through a lot, I'm going to use the farm business managers data for some of this. What I'm showing here is average net return per beef cow in the state of North Dakota since 2005. You can see in 2019 that was around $60 per head. It's down off of 18 and down off of 17, kind of approaching the lower period of 2016 but on average as a state still positive well off the high of 2014 but again still positive per cow. This is the net return per cow across North Dakota. Now the difference between high net income and low net income without going through all the data and showing just reams of tables I can tell you it's costs. Year over year what you wind up seeing is that average market price for the that received for calves for the top producers versus the bottom producers in terms of net income is very similar within a few bucks per hundred weight and actually weaning weights for the most part are very similar for the top end and the bottom end in terms of net income. So in other words most producers are receiving similar market prices year over year. They're weaning similar weight calves on average and weaning percentages as well. In other words the low low net income 20% are not just poor at keeping their calves alive. No, their weaning percent is about the same as the top end producers. So these factors right here while very important it doesn't appear as though there's a huge discrepancy between the bottom and the top end in the state. The largest difference between the higher net revenue beef cow producers and the lower net revenue is in costs especially feed costs. When you go comb through the data you can see that feed costs are one of the biggest reason often maybe a hundred hundred and fifty dollars more per head than the higher end producers in terms of net revenue. And so that's really making all the difference in the world right there. So let's look at efficiency for beef cattle production just one statistic one metric going forward and that is this operating expense ratio. The top 20% in terms of operating expense ratio about 68.8% of their revenues are going to pay operating expenses on average since 2010. Never really going above in 2016 was a little little tighter at 78% but for the most part hanging around that 70 high 60s to 70% mark now if we look at the low 20% it's closer to 79 to 80% and in the leaner years even 90% going to operating costs like in 2018. So that's a lot of money not left over to pay overhead and depreciation and these other other fees that have to be paid for any beef cattle operation with that much money paid toward operating expenses. And if you look at the middle 40 to 80% well that's about that's closer to what the top 20% are paying that's that 70 69 to 70% in operating expense ratio. So it just shows and by the way the middle 40 to 80% have a positive net return as well. So it just shows that there's this group of producers down near in the low 20 that are having a hard time being able to account for and source and generate feed especially in these cold winter months at a financially sustainable rate. It gets expensive and I understand that I think we all do but that's the area where it tends to be the difference between the higher net revenue and the lower net revenue individuals is right there in the costs. Now the biggest and best thing that you can do is budgeting capital but capital budgeting partial enterprise budgeting that's it's it's hard to identify where a lot of this money is going if it's not detailed out like it is here and this is North Dakota State University's cow-calf enterprise budget. We just use averages across the state with total cost per cow at $659 your costs may differ that's why when you go to this link here you can download this budget you put in your numbers be as detailed as you can here's where you put in your revenue type figures and then it comes out with your total returns okay. So the first thing to identifying some cost saving measures is knowing where all your costs are going and indeed finding out are we spending too much on silage hay are we spending too much on pasture other protein feed minerals etc. etc. So that's one thing to really keep in mind is that detailed enterprise budgets are the first step towards finding out where all the money is going and trying to evaluate are there some cost saving measures that can be taken or when you're comparing yourself maybe to some of the state averages why are my feed costs so much higher is it because I'm paying too much pasture or brand is it because I'm paying too much for hay and silage those kind of things that's what this helps identify the most and without it it's really nearly impossible to determine where a lot of the money is going and then the final thing I wanted to say that Tim Petrie has mentioned several times and as have I and that is backgrounding heifers we talk about ways that we can at a relatively low-cost increase revenue for our beef producers and backgrounding heifers is one of those ways when you look at the difference between heifers at say 500 weight versus 800 weight the price slide changes from $28 difference per hundred weight to $14 per difference per hundred weight so in other words you can make money simply closing the gap between steers and heifers by holding on to them to 800 pounds even if you break even on the feed okay and break even on the overhead and feed just closing that price gap you can make you know upwards of $50 a head per more then if prices swing your way it can be much much better but the point of this is if you and then if you can put on some weight even cheaper if you have the access to some cheaper feed or something then then then the possibilities grow it's a little more tricky with steers because of the fact simply because of the fact that you know they're worth a lot more so this is closing the price gap there with heifers is is is another way so with that I'd like to thank you for watching if you have any questions about cow-calf enterprise budgets or some more info information requested about the data showing the difference in in production costs for our lower higher cost producers feel free to email or call me and thank you for watching


The Narcissist refuses to let you go. You have made the choice to move on from the Narcissist.   Everything you stand for and everything you are interested in. Yet when you want to leave and move on with your life, they can't let you go. They can't just leave you alone. They are completely obsessed with you. They are addicted to you. You want nothing to do with them. Believe me, they get it. But they are not ready to let you go. So even though you want nothing to do with them, they are still going to be around. COVID Narcissist will stalk you from the shadows. They will take note of the places you go to, the times and dates. People over at Narcissist will be open about it and they may even tell you that they are stalking you. They will approach you and try to appeal to your own ideals. It can often feel like the Narcissist just doesn't get it. No matter how obvious you make it to them, they can't help themselves. They can't just leave you alone, it's a sickness. This is clear identification of the disorder. Every time they try to leave you alone, something triggers in their minds. It makes them want to check in with you again. They are always wondering what they might be missing.  So of course they are going to stalk and harass you.  They are not going to go out of their way to do this. They have their own lives. They don't have time to keep checking in and seeing what you are doing. If their lives are so great, they are not even going to care. But the Narcissist is miserable, bored and dissatisfied with their lives. So the only fun and excitement they get is from being around you. This is why they cannot get away from you. The only fun and excitement they have in their lives is from being in your presence. Apart from that it's all dull and boring.  Remember you have what they want. The good qualities, the fun, the excitement. They love all that. They want to be a part of it. But it's not meant for their consumption, especially now that you are healing and practicing self-love. No self-loving, self-respecting person belongs with a Narcissist. And once you reach a certain level of self-love, in a regular situation with a Narcissist, it will repel them. They will not want anything to do with you from that point.  This is why they try so hard to make you like that. So they can still keep you as a source of supply. In some situations the Narcissist will even stick around as you are developing self-love. The Human Magnet Syndrome by Dr. Ross Rosenberg states that it is Narcissists and codependents who have this intense attraction to each other. Both Narcissists and codependents are not attracted to people who practice real self-love. Only other self-loving people are. But even though the Narcissist is no longer attracted to you, in these situations they will still stick around, doing whatever they can to break your boundaries and turn you into a codependent once more. It's like they never give up because for them, this is it. This is all they've got. Without you they have nothing. So even though they are no longer attracted to you, they will still stick around when we are not meant for their consumption. And don't feel as though it is a bad thing to not be attractive to the Narcissist. That's a good thing. That should be your goal. Because the Narcissist is only attracted to other self-hating people, like themselves. And just remember the toddler and the $100 bill analogy.  They will not treat it with any respect. But that doesn't mean it's not worth anything. It just means that you need certain qualities and maturity to be able to appreciate its value. Just like you need to be self-love-abundant to be attracted to other people who are self-love-abundant. You cannot appreciate self-love and all these other good qualities until you begin to develop them yourself. The Narcissist may still stick around as you are developing your self-love.  You bring the fun and excitement into their lives. Without you it's completely miserable for them. But we are not meant for their consumption. A Narcissist cannot partake in the development of your self-love. They are bound to self-hate while pretending that they really love themselves. So when you are in their presence and you display real, true self-love to them, the very thing that they are pretending to have, of course it is going to trigger their hate, anger, envy and jealousy within them.  They like your qualities. I'm sure they find you physically appealing too, but they cannot partake in your development. So what good are they?  So what can you do from here? Just let them try to be a part of your life. Let them try to partake in the very qualities and beliefs that they want. They do not have. They can try all they want. But they ain't getting nothing from me.  So leave the Narcissist in the past where they belong. They may have affected your past, but that doesn't mean they have to affect your future. Continue to heal yourself and practice self-love. Please like and subscribe if you haven't subscribed yet. Share your thoughts in the comments. If you are interested in coaching for recovery from narcissistic abuse, please contact me at NarcSurviverCoaching at gmail.com and I will talk to you soon.


Okay, well good morning or good evening or good afternoon wherever you you are right now. Welcome to Q&A with a gals roar. We have a little bit of business to take care of first. This is gals first time speaking and presenting at DEF CON. And not only that it's also I understand his his wedding anniversary right and and his and his wedding occurred actually in Las Vegas so personally as you guys know we are all stuck at home so we're not we're not ones to let let let the Rona get in the way of staying fairly well lubricated so to everybody playing the the home version of DEF CON tradition we have we have shots here there we go all right congratulations on making the stage with my wife congratulations to your bride I'm so glad to be here with it with a hacker who made it through DEF CON so not a bad way to start okay I'm okay so welcome to Q&A with gals roar gal gave a fantastic presentation on wreckus wireless gear and some of the problems that seem to be resonant in that over and over and over again right so gal why don't you introduce yourself a little bit tell us tell us about yourself in case some folks maybe glaze over that part of your presentation and we'll start Q&A some of these questions from the from the audience sure so I work for other research which is a part of HCL and I've been I've been doing reverse engineering for something like 10 11 years especially in better devices this is the subject that I was you know I was exploring for a while and actually something that I did not say in my talk I talked about it in the previous talk was that the inspiration for this research was because last year I visited DEF CON and blackhead and I noticed that blackhead are using this year so this is what started everything yeah you saw I'm in the wild like oh no I got to do that right right I've heard about them but I never really had opportunity to really do a full research and and yeah so it turns out to be two to research one was presented half a year ago in lighting in triple C and this one which is the follow-up research that I managed to find additional vulnerabilities and some some fixes that did not fix the the vulnerabilities I already found very good so you found a number of different problems and kind of triggered them to take some action on their part do you know it does ruckus actually patch any of their gear automatically such that you know what you found or what they did fix or try to fix did that get pushed out to all that all the gear worldwide right so as far as I know ruckus avoid automatic update I I understand where it comes from because you know pushing and automatic updates through the air on network gear might sometimes mess configuration and and do something that you don't necessarily want to happen so I get I get why they don't push their updates but but yeah so I the thing I I think is the most important from my talks is ruckus users should stay up to date you know even even now even after this I even my before my previous research and on this research as well they need to keep everything up to date so there's a general question out then from Hawkeye Dank about how did ruckus respond to your research and what sort of a communication did you get back and forth with him yeah so in my research group we I think like most of the the research group we try to do a full disclosure which is a 90-day disclosure and with ruckus both the first research and this follow-up research we gave them enough time eventually it was a bit more than 90 days it was around 100 and 100 and so days and we just send them a report with all the things we found we just talked about it a bit and they fixed well they they they try to fix everything so all in all they did the disclosure was pretty standard that's a it's one of the interesting things to have the conversation with folks about how did your disclosure go how did that conversation go with the with the developers and with the people on that team because there's a lot that you can learn about a company by how that relationship evolves so it's a you know nice to get that data point right if I may add something if we if we are talking about a disclosure I think one thing if this is from my first research and not from this one I think one thing that took ruckus by let's say a surprise was the fact that I managed to recover a lot of function names from their binaries because they left a lot of debug information both in the debug logs and some assertion in the in the code itself so so yeah so when I send them the report it was you know with the right function names and the right architecture so I think it was a bit of a shock for them but well it's a lesson that I I bet they learned to try to not give free free stuff for hackers yeah no that's good well that goes pretty well with this question about how does owning the device help you with the research that you did oh yeah so well yes of my first research was done on emulation 100% based on emulation I just extracted the firmware from from ruckus and then I managed to emulate most of the of the device itself which well all the vulnerabilities were found on the web interface so I managed to to get the the web interface up and running which included different binaries but I think when I got the actual device when I bought it so I bought it for I you know for live demos and stuff and so when I got the device itself I could I could debug and see different different things that were more related to the configuration of the device itself because sometimes the device you get from the firmware the device you emulate not necessarily has there all the configuration or all the binaries depends you know on how the vendor is deploying the firmware and yeah and when I got the device itself it really helped me to override the admin credentials so one of the vulnerabilities I demonstrated is admin override and I just you know by debugging the just the binary itself on the device I could see all the files it tried to let me actually it was with a simple S trace all the files he was opening and writing to and this is how I realized those are the configuration files that are important and if I managed to override one of them well specifically the cease dot XML I would win and thankfully it happened well so you're definitely not afraid of diving into the very technical stuff here so would you talk just a little bit more than about how how that was different doing it how you were able to find those things easier on the physical device than you were with the emulated device I'd like to hear more about that right so it's really common in embedded devices that they usually separate the web server and the logic to different binaries and usually they find this way to communicate with each other it's very popular to use Unix domain socket and this is exactly the case in ruckus so so it eventually the web server is just talks with other services with other binaries with domain sockets and at first when I was emulating the the device itself I was emulating only a single socket to the logic itself and that's about it but when I had the physical device I you know just by running a simple TS on the device I could see all the other binaries that I had to trigger and all the way and all the domain sockets they had to to use to get everything work together so yeah that's really really helped a lot with the other research that's probably a good thing for a lot of folks who are getting into this field to have some understanding of is you can do a lot from emulation but there does come a point where having the physical device is going to be a benefit to you right I agree I think that well if you put enough effort I tend to think that you can get most of the things done by emulation depends user space of course but even you can even emulate like the kernel and Ruckus actually gives you the config file for the kernels itself so theoretically you can just compile yourself that the Ruckus kernel exact kernel and run drivers and everything but yeah there's this when having a physical device really really speeds things up you can things that you need to spend some time and understand how to emulate you just don't you don't need to do it so it really helps very cool you know kind of once once you found out that Ruckus had tried to fix one of the vulnerabilities how did you then figure out that they didn't fix it properly okay so well that that was kind of hunch because so my first research I found several bugs and and I so when I got the fix I was going through them but I realized that the function they're using to validate the actually the everything that they are validating all the inputs from the user are well let's say it's not like airtight it's not that they got some some bad practices there and and hopefully I was managed to find these three primitives which were the new line the shabang and slash and thankfully with those with those primitive I was able to to understand that this validation function is not doing a good enough job and that's how I get the injection again to get the command injection back to work so from the perspective of a bug hunter doing this work would you in the future change the way you wrote your bug report and sent that in to help the team come up with more of these to fix more of the the to fix more of your avenue in or would you do it the same way in the future you give them the this is the area that I hit and you know how would you structure that in the future knowing what you know now right so I think that well I did not know that they're using this so apparently this validator function was been there the entire time even before my research it was using this bad validation function like since since the beginning of the first research I would if I would knew that they're going to use this function and actually I did not knew this function even exist but if I if I knew that they're going to use it I would definitely tell them to use a different function with more robust white placed or black placed to be exact do you think any of the any of those vulnerabilities like like that that function you were just talking about do you think that is present in other similar devices that are out there or do you think that was kind of a custom rolled thing from ruckus that's going to be about one and done kind of deal. Oh yeah so I think by by the name of the functions because a lot of as I said before a lot of information I managed to extract from the debug functions and debug logs in ruckus and because a lot of them are ruckus related I think that's only ruckus code base I don't think that other vendors are using this this code but what I did realize and I already mentioned it in just in the research I did realize that they're using this code base for for more than one product line so for both of the product line also the Wi-Fi controller as well of the at the access point they all use the same code base and that's why they were vulnerable to both of them were vulnerable to some of the text. I like this Hawkeye Dank has the question did you find a way to brick the ruckus brick no actually so at first yeah while doing a relation it wasn't even in my mind but of course when I bought an actual device I bought two of course because I already broke a brick some devices in my in my in back in the time so I I don't think because I was dealing with user space and nothing that was too deep in the internals of the of the device I did not manage to break in although that well it was for another research but I realized that if you write echo like any any echo right a character a character to slash dev slash aspects usually the device get get brick that happened to me before I don't even know why I did that but I just I think it was like a last last resort I was like okay nothing works let's try to echo to the entire dev and that worked fully that's good to know yeah so yeah no rm slash rm minus rf slash and no slash dev aspects I'll keep that in mind the next time I'm hunting around in these things yeah so in the stack overflowed did you have to use any sort of brute force to overcome the SLR yes so well so that this stack overflow I was lucky enough to just basic that so the same payload for my first stock over flow although they were in different binaries the the library that I was using to rope guy to create the rope chains were both in lipsy so I only had to fix the addresses and basically I use the same gadgets but the thing is so in my first stock overflow back back in my first research I I was I was trying to deal with the SLR in a non brute force way yeah just to not to you know to create something a bit more robust and I just decided after I I'm after I found the command injection I just decided to ditch it because you know there's already an easier exploit for it so let's just see like let's do a POC for the command injection and sorry for the stack overflow and on okay so we with this research I realized that because this is a different binary this is the web server binary which is way more bigger than the the zap binary from my first research so I think I can overcome the SLR not by doing brute force maybe just you know take something from the binary itself and use it but again because I already because I found and command injection as well so I just decided to stick with the with the most basic POC because the command injection in my opinion is way more it's not way more critical but it just different it's easier to exploit you're talking about the web server can you can you talk more about the web server correlation with with the binary yeah so as I said as I mentioned before so the web server is in and it's super common for embedded devices it just communicate with different processes with different binaries and one in particular was this like the device logic called emfd so this binary is the one that actually executes the commands and just do like net for configuration and just about everything and the interesting part about about this binary is that Ruckus so they Ruckus were using this embedded JavaScript developed I think by embed this I'm not sure this is theirs but I think so that they work together embed this which is the web server supports the embedded JavaScript EME GS and so this this in back server or back end JavaScript that was the one that this is the language they use to trigger different function that would be sent to different binaries so I get into it in the first in my first start but also in my second that so they added a card to trigger these these functions that were using the domain socket that I talked about to just pass commands to different binaries and some of them were vulnerable I'm how I date does ask the question here he's talking that you found a cross-site scripting and some other exploits was looks like he's specifically wondering about a C-Surf vulnerabilities did you find any C-Surf in there no actually so the the entire C-Surf token in I didn't pay too much attention to it because so in one of the pages or in some of the pages in records in the in the embedded JavaScript language that I mentioned before some of them were expecting a C-Surf token but the thing is that some of them looks to be like hard-coded there so probably I can just overcome the this token but I did not pay too much attention for it I must honestly say yeah and well and the excess vulnerability as well it just it was just out there it just for every request you send you just get the reflected you know reflection for what you send so I'm like okay there's there's an excess here I gotta I gotta tell them you can't not report that one when it he didn't sounds like he didn't really try it just came back to you so and that that's actually an interesting idea of how you are approaching this so if there are some vulnerabilities that just show up without you having to really hunt for them when you are reporting that do you ever leave commentary around hey so I found this one I wasn't really looking for it I didn't really hunt down this direction or is this something that you're leaving open for future research for yourself or would you tell anybody else in the community oh hey there's probably some findings here if you want to aim in this quadrant right that's a good question so no I don't leave anything I try not to leave anything open I just you know try to report everything that I you know managed to to found even even things that are not necessarily a full exploit I would still let them know a good example for it is the information leakage I also noticed that there's this state that you just go to this page UPNP.JSP and you get just everything about the device and I'm like okay this is a bad practice it can lead to a jailbreak and you guys should fix it so no I'm not I think that the responsible thing to do is just to tell them you know to report everything that you find but that being said I must honestly say that the excess I only reported on this report and not on my previous report because as I said it was really obvious but I just you know I just I don't know if I forget I forgot about it but I just on this round I just said okay I I have to report it very good well we're we're kind of coming to the end of the Q&A session and one thing that Fowler and I like to do is kind of give you an opportunity to talk to the community about what's next right what's next in this kind of vein of research where you're going to be taking this kind of thing next and where do you think that other people that are interested in the in the same kind of thing how can they how can they take what you've done and then run with it in other directions all right so I I think so in our group there are a lot of going on with you all different sorts of research project and I think I already got another research that I just started it's not going to be in better devices because I just want to experience with something else probably going to be around a bit a bit pausing and and that's it for now but except for that so in my group we are also doing a very impressive research on iOS simulation which is a really really cool project that I might also take some part of it or in general I think I so as I already said emulation in general I think it's it's a really good thing to have in your arsenal as a researcher so yeah so probably some more emulation for sure and then my next research I think is going to be I hope it's going to be on something else with brand new vulnerabilities there's a lot of exciting stuff to look forward to then thank you very much that's cool thank you guys yeah thanks a lot and thanks thank you everybody for coming out for the Q&A session and we will we will see you guys later on congratulations again on on a great talk and happy anniversary thank you very much guys all right we'll talk to you guys soon okay


I just got done listening to Michaela Peterson on the Joe Rogan podcast and I wanted to clarify a few things on the carnivore diet, mainly the concerns about nutrient density, as well as correct a few points that they talked about. And I guess I might as well summarize the podcast along on that. So, you know, for about the first hour, you know, Joe kind of started with also you and your dad are on this wacky diet. She gets into how she started this diet. And this took about an hour, just her talking about how she started the elimination diet, her past problems. And then about an hour in what was brought up was the concern about nutrients in the carnivore diet, particularly vitamin C. Joe Rogan was saying, oh, this diet is deficient in nutrients. And he asked her about her blood work. And she said her blood work, she was deficient in zinc and vitamin D3. And that she actually tried supplementing vitamin D for about a year, and it didn't work. And that and the thing is, meat is very high in zinc. So this didn't make sense to me. So what I figured was she either was supplementing the wrong form of vitamin D, maybe she wasn't supplementing D3. And she didn't have the precursor vitamins to metabolize it, because vitamin D3 also requires vitamin A, vitamin K2, magnesium, a bunch of other vitamins that she may have been deficient in on her diet. Definitely something to consider about her blood work, because on a carnivore diet, if she's in the sun, those are the last two vitamins that should be deficient in. And then they brought up how Sean Baker had low testosterone. The guy dead lifted 800 pounds 10 years ago. I think there's a few more things we need to talk about than just diet here. Then they went into kind of like sauna and cryotherapy benefits. And then he brought up something that his friend sent him on the carnivore diet, talking about how a diet with less nutrients might be immunosuppressing, which might be helping. But that's actually contradictory because the carnivore diet is incredibly high nutrients. They just don't know that. And his friend also said the diet is very deficient in vitamin A, which is not true. The carnivore diet has vitamin A in the form of retinolic acid, especially in incredible amounts in liver and any high quality animal foods. He said it had no vitamin C, but vitamin C is in liver and high amounts, certain organs, fish, same with vitamin E. Liver has all these vitamins they were concerned about not getting. Vitamin K as well. Vitamin A, vitamin C, vitamin E, vitamin K, liver has in abundant amounts. And there are other various, even eggs, for example, have all of those vitamins besides vitamin C. Salmon roe, fish eggs, for example, have all of those vitamins.  But you know, they're following an all beef diet, not necessarily a carnivore diet. A carnivore would pretty much be eating nocetail. And then they brought up that nutritionists kind of wanted people to be freaking out, but the opposite is happening. And they were like, oh, why is this happening? Well, you know, if you knew about the nutrient density of these foods and why the diet works, maybe you'd be able to explain it. And then they went into how she, you know, when she consults people, she just kind of tells them how she cooks. And if you wanted to see that she's alive and healthy. And what I was excited about was she brought up a book by Vialma Steffitson called Fat of the Land. And this guy was an arctic explorer, I believe, in the late 1800s and early 1900s, not 100% sure on the years, but she said that, oh, they pretty much only ate beaten eggs. But that's not true. When he primarily ate fish, a lot of very fatty caribou, things like that, a lot of organs, that's primarily what they ate. And that food is multiple times more nutrient dense than the beef that people are eating now on this diet. And you know, she, I mean, if she read that book, she would have known about the nutrient density of animal foods. She would have known how they prized certain parts of the animal. And then she brought up a study they did on them where they only ate meat for a year. But if you read that study, they ate liver, they ate a lot of fat, they ate a lot of lamb foods that are much more nutrient dense than the beef that she's eating now, the grain fed beef. So, you know, she didn't really read that book all the way through. I don't know if she only just read a few pages or someone told her about it. But you know, I got excited that she was going to bring it up. And then she didn't really deliver on the information that's actually in that book. And then they started talking about how inflammation can be caused by certain foods and how much of a difference it makes. She started talking about how she's not trained. And Joe mentioned, Oh, are you going to get dietitian training or anything? And she was like, Oh, no, they still say that grains are good for you. But there is a lot of information to be learned in dietetics training in regards to metabolic function and what foods contain what vitamins. So there's definitely some to be learned. And what's also worth mentioning is she was, they're so against grains, but grains were consumed by nearly every indigenous civilization in some degree, but they were prepared in certain ways, whether sourdough fermentation or, you know, every group had their own preparation of certain grains and certain foods to make them more nutritious and have less negative things in them. And then she didn't really bring up the anti-nutrients in vegetables, but that does actually come up later. They brought up the vitamin supplementation thing again. She'd said, Oh, no, I don't take up a multivitamin because of the additives and the vitamins, but she didn't know too much about the negative things that could be in the vitamins. And the main negative thing is the stirrates like magnesium, stirrate, vegetable stirrate, which are oxidized vegetable facts that are used to bind the pills together. That's definitely something worth mentioning that she didn't know. Then they kind of went into how maybe people haven't run into problems on this diet because it works short-term, but not long-term. And that's not necessarily true. They've been talking about someone who's been on this diet for 20 years, for parts of the podcast. And then they kind of got into the debate about how why this diet is better than keto. And she was like, Oh, this diet is way better than keto. And Joe asked her and she was like, Oh, well, I don't know. And I think the problem here is that Joe kind of pushed her to really give out some solid information on the carnivore diet. And she kind of went in there just with the anecdotal information and just to kind of talk about herself. So definitely a conflict there. And she did bring up toxins and vegetables and she'd said oxalates and lectins, but she didn't know that they were normally classified as anti-nutrients as well as what those specific, the specific function of oxalates were like binding to calcium and magnesium and taking them out of the body and things like that. And the main reason that zero carb is better than keto is because it tends to remove dairy. It removes all those plant foods that can cause inflammation. Overall, it's much less inflammatory and slightly higher in vitamins for the most part. So to just summarize the main problem with this is that someone needs to tell Joe Rogan, please guys, that the elk liver that he's eating every day has every vitamin that your body needs. And this doesn't just include vitamins A, D, E, K2, C. It includes all the minerals, all the elements, all of those things. We need to really get the importance of the nutrient density of the carnivore diet out there. And once it's understood that this diet is the most nutrient dense diet, if you eat the right foods, organ meats, high quality pastries, animal foods, then we can start to discuss the possible benefits of, you know, how beneficial is removing all these foods from your diet? What foods should we be eating? You know, but it needs to be known that there are no nutrient deficiencies on this diet because that seems to be the glaringly obvious problem that people like to poke at. So thank you guys for watching. Hopefully this saves some of you guys like two or three hours. I know I was, I can't believe, I was like a little disappointed I sat down and listened to this. But above all guys, if you could share this video, please do. If you'd like to support me on various social media and other things in the comments and hey, let me know what videos you guys would like to see in the near future related to the carnivore diet. I'm definitely going to do one touching on the nutrient density tomorrow.