This video is a disclaimer video. I recently just finished up a series on transmitting Information through the airwaves using mini modem and I want to point out because there was some concern in the comments One I am not a lawyer and I am also not a licensed ham radioist So take everything I've said And everything I'm about to say with a grain of salt so first off a lot of people are concerned about The the legality of me transmitting information like that over radio waves and it all depends on you know What frequency you're doing and what licenses you have now if you were to take a CB radio or most walkie-talkies and transmit from one To another using digital signals. Yes in the United States that would be illegal now in the case of one of my videos I use a little FM transmitter now I built a big FM radio tower and transmitted across the county that would be illegal You need to get a license for the frequency you're going to be transmitting on But the the little dongle I had the little transmitter Which transmits on FM channels that your car would pick up? Only transmits a couple of feet and although the FCC Regulates how that device is made it since it doesn't transmit more than a couple of feet You're allowed to transmit so I don't think there'd be any legalities Issues when I'm transmitting that information I'm only transmitting a couple feet which again is impractical for the scenario But it was just an example I gave just show that you can transmit over the airwaves now there are radio frequencies that you can transmit on up to a certain distance that you don't need a license for like 433 megahertz or 315 megahertz which is a lot of you little devices around your house may run on like all my lights are controlled on those Frequencies and you don't need a license for that. They don't go very far And you're I'm transmitting a digital signal through that but there's digital signals being transmitted through the airwaves all the time with a Little USB dongle you can pick up Signals coming from planes flying overhead that are just transmitting out So it all depends now in the scenario that I was giving I was giving an example of the fire department and a time of emergency Transmitting data like that and in the past there have been ham radios to have helped the fire departments I remember back in 15 years ago or so with Katrina and stuff that the fire department north of us I knew some guys who were licensed ham radios and they were helping You do radio stuff now. I don't know what they were doing But they had licenses and I'm sure that they would know legal ways to transmit during emergency times if we need to transmit digital audio digital information So yes, be very careful, but my example was just a theoretical scenario and to show you that you can transmit data Through audio waves, whether it's across the room with a microphone and speaker Or through a recording on a voicemail. It was all just examples of doing the same thing different ways Also, let me bring up a lot of people were bringing up different protocols I was using mini-mode and people were worried about error correction and using other protocols that allowed for error corrections such as Z modem or x modem or y modem. They were the problem with those with error correction is that in most those cases you have two-way Communications I send you a bit of information. You reply back. I go. Yeah. Yeah, that is what I said blah blah blah back and forth In my theoretical scenario, that's not practical What we're trying to do in my scenario is just blast out the information to everybody because you might have a hundred trucks driving around Trying to pick up the information and we don't have time enough frequencies or time to transmit back and forth Over and over again. So there is no real error correction I mean you could transmit everything twice and compare it, but even then if they don't match up There's no way to tell the server that sends it out that They didn't match up. So you just have to look at them both and go. Okay. This looks like the correct one We're not transmitting binary files like images or xcubal files. We were transmitting plain text ask key characters So if a character character gets dropped here or there, it's not a big deal Yes, we were talking about transmitting addresses if you drop a letter in the name of the street It may not be a big deal You drop a number a digit it may or may not because you know in your area If this road has four digit numbers and you're only getting a three-digit number that that may not be right Also, the error correction in my scenario is we're still going to be doing audible voice dispatch so I say Engine 24 you're being dispatched to one two three pine Street for a stroke, but we also send that out digitally The digital thing is just in case you missed something over the radio. It's like, okay Oh, they weren't what was the address so you're double checking So that is kind of your error correction there again It's a theoretical time of emergency Scenario so anyway, just want to touch on those things again Yeah, like I said there were concerns about transmitting through airwaves all depends on what you're transmitting the frequency Transmitting what licenses you have that sort of thing So definitely look into that thing more my main point of this was the software that allowed you to do that What how you transmit it is up to you. I do. Thank you for watching I hope you enjoyed that series and originally the whole Original thought on that series was to communicate through two cheap computers like a raspberry pi and something else I never did that I might do a follow-up video where I just basically redo what I did but just use a raspberry pi But I have a lot of other videos I need to get to so I do thank you for watching and I hope that you have a great day


Fish and Freaks, welcome back to the channel. Got something interesting for you here today. Me and Pops are back here out on the water at Old Commodero. It's kind of midday. We just pushed back here in this creek. And I thought, you know what? I'm just gonna take a couple of hours here and try to complete a slam, MTB slam. You guys know about Mystery Taco Box. They've been helping us out on this channel for a while now. If you want to get $10 off your first box, link down in the description. You can go ahead and do that and get rolling with it. And we got the February box right now. So I figured since I'm down in Mexico, I'd take it at some point, I'd do a challenge. We are at that point. I don't know how many lures we got in here, but I'm gonna say, I think we're gonna do two fish for each lure on this slam. And then we're gonna do two hours. Dad's hooked up right away. You're trying to sabotage my, you're trying to sabotage my slam, dude. That's right, trying to get the, that's all right. You're trying to get the slam all before you get to them.  Females are out a little bit deeper, but I thought, you know what, let's try to get up there close to the bank and just see how, if we can catch a lot of those buck bass in two hours. So that's a good challenge. Let's get to it. All right, first lure we're gonna start out with, one that's always good.  This is a Berkeley cutter. This is the 110 right here. So actually what we've got going on here, I've seen some shad. We've got trees in here. I'm gonna have to avoid, but I think we'll be able to get it done right here.  The hard version should get it done too. A lot of structure in here. This is gonna be a big challenge trying to, trying to get a fish on all of these baits and get them through here. Plus a lot of these are designed to fish, boom, gosh, I mean, right away, right away. First freaking cast, boom. Now we can handle fish that size. If we get one that's pretty big, we're gonna be in trouble. Cause I mean, I'm fishing this on 20 pound test. I wouldn't normally fish this on 20 pound test. I'd normally fish it on like 12. When a big one hits it and goes down in those bushes, like pretty much what you see on the banks, what we got under the water. So it's gonna make this one a pretty good challenge. Oh man, right on the bank. Like, well, bam, oh my gosh, that's a tilapia. What? I don't know if we should count this one. Maybe. Tilapia. See? Oh, it's bonita. Yeah, we'll just keep that at one. Not gonna throw the tilapia into the mix this quick. These fish are like spawn, pre-spawn, post-spawn. Everything is going on right now. So this is a great time to be fishing. Jerk baits are also pretty effective on spawning fish. They'll come up, topwater and jerk baits can be effective on them if they got clear enough water. All right, we've encountered our first snag. Second fish, little guy. Doesn't matter though, we'll take him. Okay, time to switch it up. 10 minutes in right now. Hmm, man. Feeling like this is gonna be really good. Texas rig is gonna be really good. Probably gonna Texas rig the Exo-Stick and this. This is gonna be the biggest challenge right here. All right, we're gonna Texas rig this. Got a five-out hook in here. Right over to the tail. Drop that down. This bait changes colors. Look at that, just changed colors. Crazy, just had a bite. Fish came back, got it, got him. Over the limb, bonus points. Yes, we need a little wind. The bite is tough right now because we don't have any wind. I'm really having to make some good casts here. Not sure what they think this is, they're probably like, why are there goblies in here? Number two, batteries are down on the GoPro so I gotta change them out. But that one's done. Smart bait, color changing. See if chartreuse, right there. It's red and purple right there. Okay, we're gonna take that Bio-Spawn Exo-Stick. Should be a phenomenal bait for right now. We're gonna put that on, but since the water's so clear, we're gonna call an audible right here. Put a little chartreuse on the tail. Same, gotta make that a half-ounce weight there I'm gonna give it a good, healthy dip there. We're back in the game. Time check is now 105. So we're just past 30 minutes into the competition. Need two fish on this thing, quick. Goals to get this thing done, less than two hours. This is kind of like middle of the day, it's pretty tough. Typically the bite's tough during the middle of the day, but why not, why not add to the challenge, baby? Oh, there's another one, it's got it. Yes, oh, dang it, didn't land him freaking Exo-Stick. It's just perfect for right now. It's a stick bait, stick baits. We're just amazing this time of year. Oh, yeah, all right, Exo-Stick is done. New of those, those two are gonna be pretty easy. Three down. Take those out. We got the Vennrig, we got the Swimjig, we got this. It's pretty much it, pretty much all we got. Okay, I think I'm gonna go get the jig with the Swimjig. Gonna cut the skirt down, put a little customization here. Really cut that skirt down so it'll move a little quicker. There we go, take this crawl right here. Match the chartreuse and the skirt. I'm gonna rig that tail down, see here, right there. Think that'll do it. Oh, there he is. Some shad come through here in this pocket. I've seen him get busted, so thing to throw right on the bank. Took my, tore me up. Well, taco, taco, necesito taco, por favor. This is gonna cut it in my time, but it's absolutely crucial. I think I'm gonna take a five minute little break here, just get refueled, I'm getting low on blood sugar, energy, and I'm not fishing my bait effective enough. Ah, muchas gracias. Okay. There we go, I'm not even sure what's in this thing, but it's gonna give me the fuel I need. Pops, you better fuel up too. I think I will.  I've had one come up on that little Zoro Swimjig, put my tail off. There's these little minnows swimming around here. And that's where these little bats are eating, they're eating the little minnows, like right on the shoreline. Every once in a while, when they screw up, they swim right by the shoreline, boom, they get popped. So that's what I'm trying to imitate there with that Swimjig. So we gotta catch two on the Zoro jig. Then we gotta go to that little Nedrick thing. That's gonna be the biggest challenge, I think. And then we gotta lipple this in there as well. We got a lot of work to do. Let's get to it. Okay, fueled up to lunch. Spot looks pretty good. Precise cast. Yes, yes. Get out of the net. Oh yes, avoided the net. Landed. There's one, baby. Going on the Swimjig, and that was actually swimming it. There's one. Come on, get out of the tree. Yes. Yes, there we go. All right, they're just eating those little minnows right on the bank. Got him, got him. Okay, that one's done. We're gonna move on. So we got a little wind right here. We're gonna move on to this bad boy. Hooked up. Got yourself one. Oh yeah. There you go. The left tee's hooked up. I got my lure back. James, get it done. Okay, here we go. Come on.  Gosh, freaking inhaled that. Look at that. Oh, good. Okay, should have been number two, but I lost the other one, so still trucking. This is a typical, look at this crankbait spot right here. A little, some wind blowing on it in the middle of the creek. This is actually how I love to fish them in the fall. There he is. This is going to be the biggest challenge of the day. I saved it for last. We have got windy conditions now, of course. It wasn't like that calm before, which I wanted for this.  I know they're going to eat this right on the rocks. It's just, you don't really necessarily think 20-pound test when you're going to throw one of these. You're thinking like six, eight, finesse type fishing. I don't have that down here in Mexico, but these fish are starting to bite a little bit better. I just gotta, this is going to be more angling rather than the fish actually wanting to eat this. I know that they'll eat this. We have got, I think it's about 30 minutes left to complete my goal for the day of catching two on everything under two hours. So we're approaching that. I think we're going to get it done, though, folks. That is just, that's ridiculous. Let's put it on, let's get it done. Here's the move. I'm going to go right on this rocky edge where there's a minimal amount of trees. Get this thing right on the rocks. Oh, because it's windy. Nice for you guys, you go for a jacket. Okay, should be better, 15 minutes. This is when you start thinking about those lunch breaks. I got a cast over here. How does he not eat the hook? Are you kidding me? One fish landed uno mas. Thanks, dad. Right on the bank. Last one, baby. Get in the boat. Get in the boat! Right into my bag. Got it done. Yes, let's do a time check right now. 218, 12 minutes to spare. Booyah! Fanito! Ladies and gentlemen, we've just completed the two hour Mexican edition MTB slan for the February box. Man, I didn't think I was going to be able to get it done on that last one. It was getting kind of down to the wire. 20 pound test on that little thing. Are you kidding me? I had to really take my drag down and it was super hard to cast. We got wind now. We didn't catch any mandos back here. I knew there was going to be a lot of small fish around the bank, but just key you guys in on a pattern and what's coming because this is ahead of the game down here in Mexico. These fish are, some are moving up to spawn, some are done spawning. We're approaching a full moon. So these fish are going to be, the small buck bass are going to be moving on the bank. And during this time of day, midday, they'll start to get up on the bank and the afternoons, usually when the water warms up more, they'll just flood the banks. The females are always farther behind, they're always in that deeper water. But I thought it'd be fun to get it done now here with the February box. So want to give another thanks to MTB for being a part of this channel for a long time now. Appreciate my homies over there at Mr. Taco Box. And if you guys want to go check them out, subscribe to their YouTube channel. Plus you get $10 off your first box. Subscription if you use the code down in the description. Did that, did that just rhyme? I think it did. Wow. Alrighty, fishing freaks. Make sure to subscribe right here to my channel. And me and dad are going to get back after it. So stay tuned for more action and we'll catch you on the next one. Adios.


Pepsi-Cola, P-E-P-S-I, that's your smartest cola buy. Pepsi-Cola presents Counter-Spy. Bing, Counter-Spy, calling Washington. Especially appointed to investigate the case of the international intrigue. Another Counter-Spy report to the American people. Brought to you each Tuesday and Thursday by Pepsi-Cola. Pepsi-Cola hits a spot, two full glasses, that's a lot more zest. Why take less when Pepsi's best? And now it's proved. Pepsi's best because Pepsi and only Pepsi gives you more bounce to the ounce. More real value and quick food energy ounce for ounce than any other leading cola drink. No other leading cola can say that. Proven highest quality and homogenized for finer, smoother flavor. More bounce to the ounce, that's Pepsi. Listen later in this program for a sensational special offer. Meanwhile remember, get more bounce to the ounce. Get delicious ice cold Pepsi-Cola. And now to Counter-Spy. Early one evening in the glass and steel railroad terminal in the lovely Swiss city of Lucerne, a train chugged busily to a stop at the platform. Among the crowd waiting at the platform was a tall, swarthy man in a dark gray chauffeur's uniform. Half hidden behind a post, his eyes scanned the faces of the disembarking passengers. As a dignified gray-haired man stepped from the train, the chauffeur smoothed down his uniform and approached the gray-haired man deferentially. Dr. Brewster, the American scientist? Yes. The car you ordered is over here, sir. Just a few steps. Good, good. Uh, tell me this cottage up the valley. I'm going to, is it quiet, secluded, well-hidden? Oh, yes, Dr. Brewster. Once you're there, you will believe yourself to be in another world. You're slowing down, are we near the cottage already? No, Dr. Brewster. But the young lady up ahead on the road seems to be having difficulty with her car. I thought I might see if I could help her. Old world courtesy, of course. Of course. Mademoiselle, can I be of some assistance? For starters, something seems to be wrong. Allow me. Everything is going well, Carol. Have you contacted the agents of the nations that might be interested? Yes, they're there. They are eager to see you, particularly that young one, Victor Modesto. I'll be ready to talk to them in 48 hours. Dr. Brewster and I should have reached an understanding by then. Very well. 48 hours. There you are, Mademoiselle. It was just a loose bolt. Thank you. I fixed it now so that nothing can go wrong. Karen, as many times as I've been here, I never cease being amazed. Really, Victor? Do you think that this chateau, the most impressive in all of CERN, in all Switzerland, belongs to such a scoundrel as Belair? If you feel that way, why do business with him? Unfortunately, my profession compels me to deal with swine. Such as I? You are the exception, Karen. Not be too sure, Victor. Shall we go in? Tell me, what is it Belair has to sell this time? I act only as his messenger. He does not share his secrets with me. What does he share? His leisure hours. He sounds delightful, Karen. That depends. Oh, Karen, you're brought in. Yes, Belair. Hello, Belair. So formal, Victor. We know each other better than that. I'm afraid we do. And Karen? Yes, Belair. They are performing a particularly fine ballet at the opera house tonight. I thought we might go there and follow it with a late supper and a little gambling at the casino. As you wish. Then, um, hadn't you better return to your hotel so you can change and perform whatever mysterious rites you must to keep yourself so attractive? Oh, of course. Goodbye, Mr. Modesto. I may see you at the casino later, Karen. Come, Victor, my study. It is the only place in this chateau I permit business to be transacted. A moment. I close the doors. Drink, Victor. Brandy, aquavit, vodka. Or did you pick up a taste for scotch during your years as diplomatic attaché in the United States? I never drink well on duty, Belair. You have something to sell. What is it? That is why I am so fond of you, Victor. So correct and so direct. Why, that such a prim young man as you ever enter his country's espionage service? For a reason you would not understand, Belair. Patriotism. I not understand patriotism. Don't be ridiculous, Victor. I make my living from selling secrets to patriots so that they may kill other patriots. It is a matter of honor I prefer not to discuss with one such as you. So righteous. Get to the point, Belair. Not only do you speak English like an American, but you do business the same way with the same directness. Very well. I offer you a most valuable article. In fact, to your country, to any country, it is priceless. Be more specific. I will when we have talked price. Oh, what did you figure? One million dollars, American. That is the starting price for this knowledge. Starting price. What does that mean? There are other nations besides yours. You could use this information. And I'm not particular. You are making this offer to others, too. You are the fourth representative of as many nations that I've talked to. Have you no sense of honor, Belair? Have a good sense of business. Four possible buyers mean a better price than just one possible buyer would. And that is the lowest price you will consider. Yes, but I'm sure there will be higher. So return to the age diplomats at your embassy.  The secret of American know-how in the field of modern miracles. This information, Belair, is it on film, on paper? What is it? It is imprinted on a human mind. You see, I'm selling not secrets and papers, but a human being. A man. The most experienced atomic scientist in the United States. Counters by headquarters, Washington. 7-2, revised. Code 7-2, revised. Are you ready, Code Division? Go ahead, Flyhardy. Go ahead, Q8. Honor spies from Archer Codes Division. Here follows the coded message from Switzerland, Q8. Man named Belair, leading espionage operator living in Switzerland, claims to hold American scientist informed all phases American atomic progress. Belair acting as agent for scientists to sell his services and knowledge to highest bidder amongst by-services here. End of message. Thank you, Archer. Dave, that message means big trouble. Maybe, Peter. Maybe, with someone selling us out on our atomic secrets, if they fell into the wrong hands. As long as they're a secret, anyone's hands are the wrong hands. Who could that scientist be? I have no idea, but I think this is important enough for you and me to move to the actual point of operation. Switzerland? Call Airfield, Peter, and have our C-54 made ready for transatlantic flight and take care of all the necessary clearance routine. Right, David. Not so fast, Peter. Oh, sorry. We'll be operating in alien territory without our usual facilities. You better have one of our portable laboratories transferred to the plane. Flying lab, good idea. Now you can put on speed, Peter. Right, I'll call you as soon as everything's set. If I'm not here, try the communication room. I want to get right to the business of ferreting out the identity of that scientist in Switzerland. Good evening, Karen. Ah, Belair. I've known you only four months, my dear, but you continually amaze me. Good.  Make me wonder more about your life before we met. Belair, did you finish your business with Victor this afternoon? Yes. He made an attractive offer. How does fortune favor you at the gambling tables tonight? She's smiled pleasingly since I have adopted this charming gentleman as a lucky teacher. Belair, let me present Monsieur Fulda. Fulda? I've heard that name, Monsieur. And I, the name of Belair. It is not strange since we are in allied fields. But it is strange we have never met before. I have dealt with representatives of your government. Yes, they submit very flattering reports on you. Gentlemen, gentlemen, am I to be completely ignored? Karen, I am sorry. But it is not every evening one meets such a notable foreign agent as Monsieur Fulda. I return the compliment, Belair. You will be here in Lucerne for some time, Fulda? Quite some time. Lisbon, where I've been until now, is not quite the beehive of information, if what's was. You may find Lucerne has taken its place. Gentlemen, this was to be an evening of pleasure. I am sorry, my dear. I apologize, too, Karen. However, if Belair has something of interest to me, perhaps we can arrange an appointment. I was just going to suggest that. You will bring your credentials? Naturally. Then come to my chateau tomorrow at four. Where is your chateau, Belair? I will send Karen. Oh, my good fortune continues. And I have stopped with all this talk. Can we return to the table? With pleasure, my dear. Some success at gambling might well be a forecast of larger stakes yet to be won. Going on time, Peter. Pretty good day. The weather holds we should be in Lucerne by early evening. Conway in Washington to C-54A to C-54A. Yeah, I'll take it. C-54H to Washington, receiving clear. Go ahead, Conway. We've checked passport records, Mr. Harding. Five atomic scientists have European travel permits. What countries are they in now? Sweden hired the counter-spy attachés in the various cities to verify their presence. Good. Radio photo was complete identification on the men involved. That's all. Peter, let's see if we can raise Agent Q8 in Switzerland on the co-transmitter so our arrival won't be too unexpected. We may get more news of the man Belair. Find my chateau attractive, Mr. Fulda? Very much so, Mr. Belair, but to business. These offers you've had from other nations. What is the highest? Two and a half million, Fulda. But I want more. Shall we say two hundred and fifty thousand dollars more? Fulda, let's not quibble over a quarter of a million dollars. There's only the money of the taxpayers of your nation. Let's say a round sum. Three million dollars. Of course, I would first have to know who the atomic scientist is and have material proof that you can deliver him. That will do. And if he is not as important as you say, I withdraw the offer. The gentleman on whom I speak is Dr. Simon Brewster. Brewster? In some respects the foremost atomic research physicist in all America. It's incredible. It's unbelievable. Oh, why should Dr. Brewster betray his country? Men betray only institutions that have been unjust to them. Dr. Brewster feels the injustice of the rewards he received from the United States. And have you material proof I can submit to my government? You shall see him this evening. From a distance, he does not wish to be bothered until the transaction is complete. My eyes could be deceived. You shall have his fingerprints. They could be obtained fraudulently in many ways.  The final identification will be a plastic cast of his teeth. You can compare that with a dental chart. Why would I get such a shot? Surely your agents in America could obtain it. That would take time, Belair. I'm in no hurry. Neither is the Dr. Brewster. He withdrew from the atomic project a few months ago. He's enjoying his rest. What about that glimpse of him, you promised me? He's at a cottage in the mountains. He can leave immediately. Good. A folder. I'm afraid I must be melodramatic and ask you to submit to a blind court as we approach the cottage. I understand. All right, I'll see you, Belair. Ah, Victor. Back into that room. Was this a polite way to come calling at my chateau? Or the gun in your hands? You too, Monsieur. Certainly. Victor, you will give my guest a bad impression of my friends. Belair, I want to know the name of the scientist we talk about. The price you offered was not high enough, this gentleman's words. You take my price for my bullet. I do not bargain for my country's welfare. Now, how can one do business on such a basis? You see what I must put up with, Fuller? A gun can be very persuasive, Belair. But such evidence of bad faith.  Ah, that trick would not fool a child. It is not a trick, Victor, and you are not a child. Good drop, Ed. You better let me go, Belair. You see, Fuller, these patriotic fools? Always violence. I say something else, too. Mademoiselle Karen is much more than decorative. Much more. Shall we go? What about Victor? When he regains consciousness, Karen, slap him on the wrist and send him on his way. He will undoubtedly kill himself for failing in his duty to his country, unless he has more sense than I give him credit for. Once again, Fuller. Shall we go? Listen to an amazing special offer. Think of it. A genuine, super-speed, candidate-style snapshot camera that takes wonderful, clear, sharp pictures for only 50 cents and one bottle top from Pepsi-Cola. Did you ever hear anything so amazing? Here's what a high-quality camera it is. Genuine Plano Convex double-element lens. Beautiful black plastic case. Take 16 pictures, not just eight. On every reel of film, standard-sized film that you can get at your nearby camera store. Pictures are one-and-one-quarter inches by one-and-five-eighths inches. So clear you can have them enlarged. Instant eye-level viewfinder. Instantaneous 125th of a second speed shutter needs no adjustment. Just the thing to take to the beach with a carton of Pepsi-Cola. In fact, this is such a wonderful camera, it's guaranteed for one year against mechanical defects. The same type of camera David Harding uses to catch criminals. Now, here's all you do. Send only 50 cents in coin with your name and address and only one Pepsi-Cola bottle top to counterspy headquarters box 12, New York 8, New York. Now, please print your name and address clearly and be sure to enclose 50 cents. Your camera will be sent to you post-paid, but don't delay. This offer will not last. Send for your camera now, tonight. I'll repeat that address later. And now, back to counterspy. On a small side street in Lucerne, Switzerland, counterspy Harry Peters stops at the doorway of a watchmaker's shop. He looks at the window display briefly, glances up and down the street, and then, certain that no one has followed him, he enters the shop. Quite a collection of clocks you've got here. I only wish they were mine. The shopkeeper has stepped up for a moment. Oh. Okay, Peters, it's safe to talk. You're sure? Mr. Fulda? Positive, and skip the Fulda. Okay, Mallory, though you do that accent wonderfully. The chiefs in Switzerland? Yes. He's staying undercover, living in the plane out at the airport. That's a good idea. This town's a hotbed of spies. Someone be sure to recognize him. That's why he wants fast action on this case, Mallory. Oh, he's got it. The lair's got hold of something really big. He told you?  I know it's risky, but I'd like to report to Mr. Harding direct. That big? Yeah. Okay, Mallory, you leave this shop first. I'll cover you. If you're clear, I'll give you a high sign and head for the plane. You can meet us then. Good to see you. Hello, Mr. Harding. Peter says you're getting action. Too much. You mean Belair's suspicion? On the contrary, posing as Fulda, I've made a deal for the scientist involved. Three million dollars. Who is he? Dr. Simon Brewster. Brewster? You're kidding. I've seen him. You've talked to him? No. Belair only let me see him from a distance. He's hiding in a cottage in the mountains. I was blindfolded and taken there. Brewster, a traitor? I can't believe... You saw him from a little distance there, Mallory. Could have been an imposter. It must have been... I doubt it. Here are his fingerprints. I made Belair get them on this sheet of paper I gave him. And one thing more. This dental cast to check against Brewster's chart. My agents are supposed to obtain it from America. Yes, we've got it. A radio photo. Peter, check this right away in the laboratory compartment of the plane. Well, Peter? No doubt about it, Dave. The prints and the dental chart check exactly... Then it is Brewster. What do we do now? Well, there's one point in our paper. Brewster's been off the project for quite a while now and a lot of new progress has been made. But still, I'd rather gamble three million dollars than the atomic information Brewster does have. I might be able to locate that cottage, Mr. Harding. No. No, Mallory. That's too much of a chance to take. No, instead, contact Belair again tomorrow. Make final arrangements to complete the deed. I'll see if the money's transmitted to you from our export bank. Dave, why don't we at least try to find that cottage? No. No, we'll cover Mallory on the money. If I want him to get Brewster actually into his possession. If there's a slip-up, I'd rather lose the money than the man. Okay, Mr. Harding. I'll take the money to Belair and his chateau right away. Father of the bargain satisfactory? Perfectly, Fulham. I haven't realized how big a package the money would make. Even in large denominations. And now, Dr. Brewster. Of course. I haven't write you for you. Got it. This is Dr. Brewster. Shall we go, Dr. Brewster? Yes. A drink, first gentleman. To celebrate the most profitable transaction for all. Not the... I insist. Very well. To your help, Fulham. Thank you. And yours too, Dr. Brewster. Thank you. Uh, Fulham. Yes. I am Dr. Brewster's banker. If any attempt should be made to regain this money, part his, part mine, he will lose his power of speech. As far as atomic information is concerned. Correct, Dr. Brewster? Yes. Come along, Dr. Brewster. I want to get you into the jurisdiction of my government as soon as possible. Goodbye, Belair. Goodbye, Fulham. Karen. Karen, are you upstairs? Yes, Belair. Then pack up quickly. You must move fast. We're going to take a vacation. A very long one. With three million dollars. Sit down, Dr. Brewster. I, I don't understand, Mr. Fulham. This plane isn't even warming up. There's someone I want you to meet. All right, Chief. Hello, Dr. Brewster. Hello.  Why, no, you're, you're... What's the matter? Hold him, Melry. What's the Sam Hill? His pulse, Melry. Right. He's dead. What's the matter, David? I've heard a scuffle. Brewster's dead of a heart seizure. Brewster? I wouldn't bet on that. What? This man is not Dr. Simon Brewster. Look at him closely. The features are generally the same, but here. Long the chin and the side of the nose. Faint scar tissue. See? Plastic surgery. An imposter, as we thought. But the fingerprints, the dental chart, you checked them. They were Brewsters. What's happened to him? I'm afraid of the answer to that question. We can get it out of Belair. I think you're right, Peters. It's time we came out in the open, Melry. You'll come with me to Belair Chateau, right, Peters? Yes. We'll take the pilot and the copilot along for additional support. You'll cover us from outside. Let's get going. Who, Doc? Yes, sir. Where's Belair? Why, I do not... All right, I don't have anything to complain to. Come in, gentlemen. Ah, why the gun, Belair? You seem angry, Fulldown. You bring strangers to my house. I think it's advisable to have a gun. Very discreet. Particularly since I came to take back the money I paid you. With this other gentleman to assist you? Yes. Why? Dr. Simon Brewster is dead. How unfortunate. But, Fulldown, I kept my part of the bargain. I delivered it to you. I want that money, Belair. My country cannot afford to waste dollars. Ridiculous. Your country wastes more than any other in the world. Doesn't it, Mr. David Hart? What do you mean?  It's Malory, Belair. Thank you, Mr. Harding. Do you think that I, a dealer in espionage, would not recognize the head of the largest counter-spy organization in the world? Karen? Yes, Belair? Leave them of any weapons they may be carrying. They didn't. So, I was dealing with the United States all the time, Mr. Hart. You didn't suspect it, did you? Give this agent of yours credit. He was very clever to assume the identity of a known spy. What about Dr. Brewster? Of course, you soon realized the man I delivered was an impostor. A fool I hired to impersonate the doctor. But the real, Dr. like the fake one, is dead, too. Can you prove that, Belair? That's how I got his dental cast and fingerprints. I thought I could persuade him to talk. Unfortunately, his heart was not as strong as his conviction. You're lucky with heart trouble, aren't you? You mean the gentleman who died on your hands? That wasn't heart trouble, Malory. Definitely not. It was poised. The drink he took before you left full, the, um, Malory. Now, Mr. Harding, I have no doubt you have other agents outside, but I, too, have an ace. There are many exits from the chateau. I shall leave by one, and leave you two here, dead. Your first shot will bring our men in. And you're not going to ferret, Belair. I have a trump ace to play yet. The agent who informed me of this in the first place. All right, Belair. Drop your gun. Caron. Drop it, Belair. That's right, Belair. Meet Miss Karen Delphus, counter-spy, my trump ace. But the dead one... You all right, Karen? I'm okay, Mr. Harding. He missed by just enough. I didn't think he'd try that, Mr. Harding. Not just as well. It'll save a lot of explanation all around. It's all right, Peter. Everything's under control. Who's the dude? An agent you haven't met. Meet Karen Delphus, code name, Q8. Glad to meet you at last, Mr. Peter. Glad to meet you. Mallory, stay here with the body. Call the Swiss police. I want to report everything to Washington. Peter, you can escort Karen to her hotel. She'll probably fly back home with us. That'll be a pleasure, Dave. Yes, that's what I'm afraid of. Let's go. Now, everybody, act immediately. Send only 50 cents. With your name and address clearly printed, and only one Pepsi-Cola bottle top, for $1. Pepsi-Cola bottle top, for a genuine, candid-style camera. Send to Counter Spy headquarters, Box 12, New York 8, New York. And remember... Pepsi-Cola kits a spot. Truthful glasses, that's a lot. Lots more value, lots more zest. I take less when Pepsi's best. Do it every Tuesday and Thursday. Same time, same station to Counter Spy. Listen next Tuesday for the exciting Counter Spy case of the beefy buyer.  These were some of the memorable facts in an action-packed investigation we're going to dramatize next week. Be sure to be listening for... Case of the Beefy Buyer on Counter Spy. Tonight's Counter Spy program originated in New York, was directed by Mark B. Lowell, dramatized by Palmer Thompson, and featured on McLaughlin and Mandel Kramer, with music by Jesse Crawford, Bob Shepard speaking. Counter Spy is a Phillips H. Lord production for Pepsi-Cola. Enjoy some Pepsi, ice cold, tonight.


Even though I call this a stir-fry, I like to steam the vegetables beforehand to kind of make them extra soft because I'm gross and I like that. Hi, I'm Erica, also known as the Pancake Princess, where I do data-driven bake-offs, so I am someone who has a ton of baked goods in their house at all times.  So for me, meal prepping is really important to save me time because I tend to work out during the week, right after work, and then I'm starving by the time I come back to save me money and to keep me healthy when I'm not eating all of these baked goods. Okay, let's start cooking. First, we're gonna start with stir-fry, so stir-fry is one of my favorite things to prep because it's so easy, so versatile, you can throw whatever you have into the stir-fry. I always like to plan my meals, thinking about three components, so protein, vegetable, and carb. Today, my carb is gonna be rice that I have prepped for this meal prep session. My protein is gonna be this tempeh, and then the vegetables are gonna be carrots, broccoli, and kale. I tend to lean towards plant-based proteins like tofu, tempeh, beans, and lentils. So when I'm cutting my carrots, I like to cut them into like coin sizes just because it's easier to stub with a fork that way and they still cook through pretty fast. When prepping broccoli, I also love to use the stems. These are perfectly good, so I just throw them in with the rest of the stir-fry. They cook up nice and soft, or you can keep them kind of crisp-tender, if you like. One of the challenges that I encountered when I first started meal prepping was the quantity of the recipe, so over the years I kind of found if I make a recipe that has more than four servings, I will get sick of it by the end of the week, but anything around four servings is great. So when I'm making stir-fry, I don't really follow a recipe, but I just know roughly that I might eat three carrots and like two heads of broccoli and a head of kale in a stir-fry that will feed me for like four or five meals, but I also love to eat a lot of vegetables, so obviously scale and like kind of test it out and see what works for you. So I love cooking with tempeh. It's a great alternative to tofu because it will just take on whatever flavor you're cooking with. So if you like tofu, I would give tempeh a try, and it has a great texture for stir-fries.  So I have my tempeh already, the vegetables are all prepped, so we're ready to make stir-fry. Okay, so I'm gonna start by adding just a little bit of oil. So I'm gonna dump the tempeh in, and while it's cooking, I'm just gonna add a little bit of soy sauce and adding the soy sauce not only seasons it, but it gives it some nice flavor. So this tempeh looks like it's done to me. You can see those nice golden edges. So I'm gonna put all of this tempeh into a meal prep container that I'm gonna use to store all of the stir-fry. So we're gonna move on to doing the vegetables. Start with the carrots because these take the longest to cook. When I'm adding water to steam, I just put a little bit of water in the lid and then put that on top to save on dishes that I'm using. I'm gonna add the broccoli because this just needs to steam for about five or six more minutes and cover it again. Pretty much done here, and I'm just gonna add the kale since it doesn't take very long to cook. And this kale looks nice and wilted. Since these vegetables are super plain right now, this is when I add the sauce and then I'll add the tempeh back and maybe do a little bit more seasoning. So I'm gonna start with the oyster sauce. Fish sauce is super pundit, so I just do a little dash. Some soy sauce. Today, since I'm being fancy, I'm gonna do a little bit of rice vinegar, cooking the vegetables, and now I'm gonna add the tempeh. And now I'm just gonna finish it with a little drizzle of sesame oil. And that's it. That's the stir-fry or the steam fry. All right, so now that our stir-fry or steam fry has cooled a little bit, I'm gonna put this in my biggest meal prep container. And so I love using glass because it doesn't stain. Like if you're doing like a turmeric stew, it's really easy to clean and it's easy to microwave. So again, waiting for the food to cool so that you're not putting steaming hot food in the fridge. So I made myself a little plate of the steam fry and I'm gonna give it a try. So good. Next, we're gonna move on to some tofu spring rolls. And I love this dish for when it starts to get warmer because it's a super fresh dish. Lots of vegetables incorporated. So typically when I make spring rolls, I like to incorporate cucumber. I prepped a lot of this ahead of time, just some sliced cucumber. These are some quick-pickled carrots. It's a really simple mixture of just some apple cider vinegar, water, a little sugar, and salt. So if you don't have time to prep them ahead of time, they'll still taste good even if you do a quick pickle for like 30 minutes. I also have some vermicelli noodles, some lettuce, and this is a block of tofu that I am pressing to get all of the water out as much as possible before I bake it. As you can see, a lot of water has leaked out. I dumped most of it in the sink. So now I'm just gonna chop it up into slices for baking. When I cut tofu for spring rolls, I like to do it in big, kind of like long slabs because obviously spring rolls are kind of on the longer side. If you're looking for something that's gonna fit nicely inside a spring roll. I cut the tofu into four thin slices and then into thirds. I have 12 slabs of tofu about this size. That's perfect for making 12 spring rolls. So about like three per meal. I just put a little bit of oil on the tray and I'm just gonna use this piece of tofu to spread the oil around because honestly, I don't want to dirty another dish. Now I'm just gonna lay out the tofu on the tray and I'm just gonna season it with soy sauce. Honestly, whenever I go to the Asian market, I just buy whatever soy sauce is on sale. But if you have any good soy sauce recommendations, let me know in the comments. The tofu is like pretty well covered in soy sauce so I'm just gonna pop this in the oven for about 25, 30 minutes. The tofu is done baking and so it's nice and golden with a little bit of, you can see that soy sauce kind of speckled on top. Now I'm gonna transfer the tofu to a plate to cool and then we can start assembling the spring rolls. I typically will start by just soaking the rice paper in a large plate of water and this usually doesn't need more than like 30 seconds to one minute. All right, so you wanna take it out when it is soft but not too soft because it's gonna be impossible to work with if it's just mush and try to get it as flat as possible. While I'm assembling the spring roll, I'm gonna put another paper in the water just so that it can get a head start on softening. Okay, so with my spring roll, I'm gonna just use like maybe one leaf of lettuce. Gonna do a little pile of noodles. Vermicelli is super easy to prepare. It looks super kind of just like clear and spiky but all you have to do is soap it in hot water for like 10 to 15 minutes and it'll soften up. Some cucumber on here, add some pickled carrot. Try to drain off as much liquid as I can before I add them. And then I'm gonna add my tofu. Rolling it up is pretty darn easy, especially because I'm only making these for myself so I don't really care if they look pretty as long as they taste good. So I usually start by just rolling the ends up and then I tuck one end under the lettuce if I can get it there and just try to roll it as tightly as I can. I thought that was gonna be really ugly but it's actually not bad. So this is spring roll number one and I'm gonna put it in my Tupperware for later. So sometimes I will roll all of my spring rolls ahead of time and just kind of do it all at once. And sometimes if I know I'm gonna have a little more time throughout the week, I might just prep all of the components but roll them fresh either before lunch or dinner. My least favorite part of meal prepping is definitely the cleaning. I hate washing dishes which is why you've seen me use a lot of shortcuts when I'm in the kitchen to try to use as few dishes as possible. I love the process of cooking but just cleaning is the worst. But on the other hand, the bonus of meal prepping is that I only have to do dishes basically one day a week and so I get them all out of the way that one day and I don't have to worry about them for the rest of the week. Even if you don't have time for a full meal prep, just do a mini one. So sometimes I don't have time on Sunday to do a full two meals for the week. So I'll just cut some broccoli because I know if I have a full head of broccoli in my fridge, I'm never gonna cook it but if it's cut up into florets, I might just toss it in a pan and steam it throughout the week. And I'm gonna go ahead and taste this one. So I'm gonna dip it in some dipping sauce and try it. I just love these spring rolls because you got so much flavor from the dipping sauce but so many veggies packed into this little, it's actually pretty giant spring roll with the tofu for protein. It's just such a nice like light summer meal. So I have finished meal prepping for the week and yes, I'm gonna be eating the same thing all week, basically the same two meals but one great tip is if you do takeout during the week and it's kind of compatible with what you've cooked, you can add some in and just kind of jazz up your meal prep for the week with takeout. I hope today's video inspired you to try meal prepping for yourself. If you liked today's video, subscribe to The Spruce Eats for more content like this.


Welcome back to Kids Fun Science. My name is Ken. Today's experiment is shrinking a styrofoam cup. As always, adult supervision is required. What you need for this experiment is a pressure cooker, a stove, and a styrofoam cup. A couple safety precautions do only under adult supervision. Never operate a pressure cooker without safety relief valve and never operate a pressure cooker without thorough knowledge of its operation. Never attempt to open a pressure cooker while it's hot in proper use of the pressure cooker can result in serious injuries. So you're going to fill the pressure cooker with about an inch or 2.54 centimeters of water. In the first experiment I'm doing three experiments. I'm going to put a styrofoam plate on first and then I'm going to add the styrofoam cup upside down on the plate so it's not in the water. So this could take a different effect as I've never done it this way before. After I've set the stove for high for 10 minutes and when it's done, you'll remove it off the heat and you can either let it sit there for an hour or run it underneath cold water right away and that will release the pressure and then you're ready to open it up and this is kind of the exact opposite of what I was expecting. So to the right is the original and to the left is the one that's been in the pressure cooker. It actually got bigger. That's crazy. So the second time I'm going to do a second test here. I'm setting it on high again. This time I'm going to do it for 20 minutes. Same cup. Nope, styrofoam plate this time. So I'm doing a traditional way of just putting the cup in the water upside down and so it's inside the water and I'm increasing the time to 20 minutes and we'll see how what comes of that from there. So go ahead and seal your pressure ice cooker there and you have it on high and I'm going to do it for 20 minutes. So test two is finished 20 minutes and you can still see it's still cooking away. So remove it from the hot stove, turn the stove off and you can let it sit for one hour or you could run it underneath cold water to release the pressure which I'm going to do and then I'm ready to open it up and once I open it up this time is exactly what kind of what I expected but not. It completely crushed that because of the pressure and reduced the size of the styrofoam. It's supposed to be in a single piece as a small just shrinking it. This actually just crushed it in so that's pretty amazing. So I'm going to do one more test with a smaller cup but I'm going to explain the science behind it. So the science behind this is the results of the experiment is amazing right. The styrofoam cup shrink it amazingly small size yet a perfect replica in every way an undisturbed cup which we'll see in the third experiment because the first one kind of went wacko and went larger and I wasn't really quite sure why that happened.  So this greatly enhances the in insulating ability so the volume of the air is greatly reduced by the high pressures of the pressure cooker. Here's a smaller cup I was talking about that's what it's supposed to do just like that and as a result much of the air is forced out causing the cup to shrink down to a smaller size. Pressure cookers work by not allowing steam to escape but build up the tremendous amount of pressure. Water thrust boils at temperatures much higher than 100 degrees Celsius. As a result food can cook much faster. Pressure cookers are especially useful in high altitudes where the boiling point of water is low lower due to the air pressure. A combination of high pressure and intense heat shrinks the styrofoam. So the same effects have been observed with styrofoam cups submerged in the depths of the ocean so the intense pressure of the water compresses the air of the cup and drives it out. This is verification as you guys should know of Boyle's Law. Since the increase in pressure results in a decrease in volume. I knew you remember. So those are the results back. This is the first one that went wacko. I don't know why it went much larger but then the second time when I cook it up to 20 minutes it actually crush it like the depths of the ocean so it and made it a lot smaller squeezing that gas out. And here's the same one right here. You can see it's a lot smaller. I hope you enjoyed this video. Remember to click thumbs up or to share if you liked this and thanks for watching.


Okay. To get an idea of how fast I should go through some of the material that was gone over at DEF CON 16, how many of you actually attended the DEF CON 16 speech? Raise your hand. Okay. So a pretty good number. So we'll go through it pretty quick. So anyways, our old humor was the whole series of tubes of Ted Stevens.  I don't know. But anyways, it's a ‑‑ So you guys already know the backgrounds of most of you. I do research with CERC. It's actually what was CERC. Now it's S2RC, Security and Software Engineering Research Center, which is National Science Foundation Industry University Cooperative Research Center. And this is by my taco. He's a root admin over at SBHacker. And at DEF CON 16, we covered doxis 2 and below. And our last speech actually led to a huge number of people coming over to the SBHacker forums and discussing the modem technology to include ISPs and, you know, contractors and everybody else. So what we're going to cover, pretty similar format to our last talk, is our requirements for our examples. We're going to do a previous speech overview, which I'll try to get through rather quickly since most of you are already familiar with it. Then we'll get into doxis 3. Going to touch a little bit on packet cable. Then I'm going to go over the United States versus modem hackers. If you guys didn't know, after our DEF CON 16 speech, a number of people got arrested for, you know, making and selling modified modems. Then we'll go over some of the new tools and, of course, the new firmware and then kind of basically leave it open for the future. So what do you need for our examples? A coax connection to the cable company. Now, everyone wanted me to stress that had seen the last speech that I'm talking about a legitimate connection to your cable company because I guess supposedly I was telling people to climb poles or something, but I'm actually not. I'm saying go ahead and pay for your connection to your cable company. In SPIJ tag cable, then there's a number of modems. Last time we were focused on the 5100 or the 5101. Now we're talking about the surfboard 6120, SPV 6220, DPC 3000, all doxis 3 cable modems. Some soldering skills. Or if you don't have soldering skills, SPHacker actually sells, you know, pre-modified modems. So then you can get around that. Then, of course, tools for flashing, which there's a number of those, USBJ tag NT, hacksomatic, which is a new thing from SPHacker. And you can always, you know, do it yourself, cables. So as we covered last time, why is it possible? Well, manufacturers didn't really put any physical security into the modems. So it made it really easy to modify them. The software, you know, the software was very easy to modify as well. And, of course, the ISPs, CMTSs aren't configured properly. They're security falls in CMTS and in the iOS. And my stance is really, is doxis really even a good platform? I mean, in terms of security, I would say no. But, you know, it's still, they keep pushing out new versions of it, new specs, and in my opinion, it's not getting any better security-wise, but, you know, it's still in use. So you can still do this. A quick cable network overview. You've got, you know, your cable modem termination systems, which is where your internet connection is going through. Your customer database is where it's going to do a lookup and that's based on your, you know, your MAC address. You know, the operation support system is basically you call in and you have a problem, then they can, you know, hook into that, look at the CMTS, see power levels, all that good stuff.  So the big thing we pushed last time, we're talking about anonymous internet access and we used Comcast. Comcast is still the largest ISP, so we're still using Comcast. The whole idea is if you take a modem that's not tied to an account and you hook it up online, it's going to ask you to sign up for service. But if you change the DNS service, and I don't know why this still works, I actually figured they would have done something to change this. But for some reason, this still works. You change the DNS service or servers and you're online with, you know, a modem that's not tied to an account or anything. You're completely online.  Then once you get your anonymous access, like I said, a lot of this is all review, but anonymous access is good, but faster anonymous access is better.  Everybody knows that. It's my form of signature. Sure.  So one of the funny things to me is that even after our last talk, and we're pretty much showing them how this is all working, so you have the DOCSIS one that's really not so much in use. You can still use it on most of the network. And you have DOCSIS 1.123. The config files from the last talk are still working on DOCSIS 3. To me, there's something wrong with that. But hey, whatever, you know, I guess they're still making money so they're happy.  When we spoke last time, it was pretty much like a beta type thing. As far as we know, all the bugs have been worked out. It's very stable. It's very good. I have a huge following over it. I think it's, you know, personally it's, you know, leaps and bounds ahead of the Sigma firmware. Then we'll go techniques for remaining anonymous. Like I said, still just going through review. To save less NMP, hide the modems HFC IP address. These are just commands you can do to do that stuff. Hide the reported software version. You know, because if you're using like some weird software version that isn't what they, because they'll actually push out updates to your modem, so you want to try to match that, because if you don't match that, they're like, hey, why, you know, we push out an update to this modem. Why is it on a different, you know, software version? So all these settings, you know, basically put them in and it will make your modem look more normal. That's the whole idea. You want to just kind of lay under the radar. Cloning. I know SB Hacker really against cloning. I still said I want to go over it real quick. Yeah, you can clone modems. That's pretty much, I think, viewed by everyone as just really illegal because you're taking someone else's modem settings and for like a true clone, taking their certificates and actually cloning that with your modem and getting on under their account. And so, you know, especially in the nature that we can get on anonymously, why would you really want to clone someone? But we'll just leave it at don't do it. So that's a quick overview of that. That because they're on different CMTSs, you can clone them. Like you couldn't clone someone from the same CMTS as you. That's really the only restriction that you have. And then, actually, I think I'm just going to skip through this just because it's on the CD if you want to do cloning. Like we're pretty much saying don't do it, but if you really want to, the information's there. And this is always interesting to me. People always ask me, well, how anonymous are you? And from what I can tell, and from texts that I've talked to, people that work higher up some of the ISPs, they can pinpoint down to a node is what I call a node, like a CMTS, yeah, a neighborhood, but not a specific house. Or a tap. Or a tap.  Because maybe if you pull off some large hack and they actually say, okay, we go to this IP address, it's not tied to an account, you know, it's in this general neighborhood. Are there any convicted hackers that live around here?  So it's, I think it's still fairly anonymous, but it's not perfect. There's also some ISPs will pull for poor signal levels. So the solution we gave is to use a drop amp. Had a pretty good response from that for people that were trying this stuff out, said they were able to maintain good signal levels. Nobody had any, you know, impacts or party vans or anything coming out and giving them a hard time. The ISPs sometimes do perform routine audits.  If he's a contractor, he probably doesn't care. If it happens to be somebody that does care, they might look and say, hey, that tag's not supposed to be hooked in and unhook it. And then, you know, some ISPs have adopted and implemented at a cost regional operating centers. I think he'll get into that later. But most of them haven't. So lists of precautions. If you're going to play around with this stuff doing, you know, a diagnostic modem and actually putting modems online. Personal precautions, I'd say, don't transfer personal information over unencrypted connections ever. Yeah. BPI enabled? Yeah. Okay. Keeping out for the party van.  Just a word of advice. Pay for service. I really, and I, you know, I'm not a lawyer, but I strongly feel that if you're paying for the service, then it is going to be a lot harder for them to say that you're actually breaking the law. I think at the point that you're paying for service and you're putting another modem online, it's technically a terms of service violation, but not a theft of pay for service.  Use the modified modems to test confirm, diagnose your existing service. That's the legitimate reason for these modems. So if you're buying them, that's what you're buying them for, not for any bad stuff that you might happen to do. Be mindful of HFC MAC addresses you may choose to clone. I'm actually going to say we were giving people maybe potentially bad advice. Yeah, okay, the next one, don't do that. That's leftover. Don't cut line identifiers off of cable lines. So the previous firmware, like I said, we were a little riskier at DEF CON 16 and we're trying to, because all the people were arrested, we're really trying to get this to be more legitimate if we have everyone. There are plenty of legitimate uses that really are. Just saying if we have people running around cutting tags off and hooking up modems and, you know, get it somewhat legitimate. So the old firmware had all these different things it could do. I'm actually not really going to go over those who already went over the anonymous internet and that stuff, like I said, it's all, you can read it. And at this point I would like to hand over to Taco and let him start going over DOCSIS 3. So DOCSIS 3 has been certified by Cable Labs since our last presentation. Basically it's just DOCSIS 2 with channel bonding, native IPv6, like it says, and optional AES encryption before they've been using 56-bit DES for BPI and BPI plus. As far as the RF stuff goes, DOCSIS systems like in America, South America use a 6 megahertz wide channel for the downstream. It can handle 43 megabits per downstream channel. EuroDOCSIS, if you're lucky if you live in Europe they have 8 megahertz channels. It can handle about 55 megabits per channel. DOCSIS 3 SPET calls for a minimum of 4 downstream and 4 upstream bonded channels. So basically you're getting a lot more speed. Let's see here. I had a little too much to drink before you came up here. It's okay. In America basically if you have 4 channels down you're going to get up to 160 megabits depending on what your cable operator offers. Most upstream packages now get 10 to 15 megabits. The potential is for about 120. That'll come sometime in the future. The basic foundation being companies Broadcom and Texas Instruments. Before, with DOCSIS 2, Texas Instruments had a garbage chipset. Motorola had a big fiasco with them.  Comcast started pulling them from the field. Blah, blah, blah, long story short. Broadcom was the leader. Well now with DOCSIS 3, Texas Instruments released the Puma 5 chip long before Broadcom released theirs. It's an ARM V6 architecture. It runs Montevista Linux, open source of course. Right now there are 4 channels down, 4 channels up bonded on that CPU. TI just recently released an 8x4 Puma 5 chip meaning 8 channels down, 4 channels up to compete with the Broadcom BCM3380 which is 8x4 which was really late to market and the current firmwares for all those modems have a lot of bugs and that runs on Ecos and it's MIPS. How many people here have hacksaware modems? Good, good, you guys see a lot of hands. You all know Ryco then, the Serbian prodigy who wrote hacksaware when he was 16 years old. He's now 18 and he plans on doing a hacksaware 3.0 probably around sometime from the end of this year for the Broadcom modems. The TI modems, Linux, open source anybody can develop for it and we're trying to find more developers because the possibilities with that are quite endless. Let's see. Every modem manufacturer has a Puma 5 modem out Motorola, Cisco, Ares, Netgear, SMC, you name it. And then the Broadcom modems. The Motorola SPG6580 it's a modem with a Wi-Fi in Gateway. They released it about a month ago to Best Buy at Retail and they've already stopped shipping it because of so many firmware bugs. They released it with a serial port and a JTAG port which they should have known better because this modem hack has been going on since about 2002, 2001. The next batch is supposed to have that stuff removed and hopefully some firmware bugs fixed. My favorite Broadcom one is the Cisco DPC 3010 works pretty well.  The DCM is doxxus the TCM is Eurodoxxus. Let's see.  He plans on doing hacksaware. The Puma 5 I think is going to be the big popular thing since anybody can develop for it who is a Linux developer. As far as American doxxus 3 offerings, Comcast has the most D3 offered in America. Competitor to Fios and other fiber 2 whatever services. Comcast for 100 bucks a month or 80 bucks a month, you get 15 megs down, 10 megs up. There's 100 meg down, 10 meg up business packages, it's about $300 a month.  You can. I was saying you should do that. Charter. Yeah, I know we're going to Comcast shirt, I don't have Comcast, it's just more for the irony. Charter has a 60 meg package, 175 meg coming soon. Cablevision up in New England, they claim the fastest internet in America, 101 megs down for 99 bucks a month, it's pretty cool. Time Warner, Roadrunner. They are very slow in deploying Doxus 3 right now. They've hit New York City, I think Dallas, but they are dragging their heels. So if you've got Time Warner, feel sorry for you. I actually, I have Charter, I just got Doxus 3 about a month ago and I love it. It's great. Oh, in Europe some of those companies are already offering eight channel bonded downstreams. In the USA yet. One of my friends in Norway pulls about 170 megs down with a 6120. It's pretty sick. And the potential with eight channels bonded downstream is about 400 megabits. Yeah. Packet Cable. They really want me to talk more about this than I should. Just as a proof of concept packet cable is anyone have cable phone service, Comcast Digital Voice? That's run on packet cable, which runs on top of Doxus. Basically with the permission of the phone line owner I was able to in a couple of hours hijack their phone line completely. No need to clone the MAC address by simply cloning the FQDN which is the fully qualified domain name and a couple other pieces of information you can hijack somebody's phone line and that's cable phone service. And that's not something I recommend you do. I did it just to prove it could be done and there's a lot of flaws in packet cable. I think it's more so vulnerabilities in the call management servers. Not necessarily packet cable, but packet cables like Doxus, there's inherent flaws in it.  I'm going to pass this back to Blake to talk about some of the people who have been arrested since 2008. There you go. All these people getting arrested actually at the end you'll see a very important lesson that is from one of my friends he's actually in prison right now unfortunately but over everybody heard of the TJ Maxx hacks Steven Watt and so I got a picture from him to show you guys just to push a message to everybody, you know, the hacker community in general. You got Tom Swingler, a.k.a. Massadog he was the first guy that was arrested I think it was actually big enough it ended up being on G4 hack of the show or whatever He's got a nose job. So anyways, that heavy media attention the case ended up being dismissed after six months without any official reason but what ended up happening is Massadog then snitched on MassMods so you also had TCNSO last speech, heard about them they kind of started a lot of the cable modem hacking in general, that's Ryan Harris, a.k.a. Deringl he was arrested in October of 2009 generally regarded the godfather of cable modem hacking. How did he get arrested? Snitched on by D Shocker he's currently out on bond awaiting trial. So we'll go on to the Deringl actually literally wrote the book it's called Hacking the Cable Modem no starch press publishes it they probably have it in the vendor area they wrote the book on it and he was the big fish and they busted him based on a snitch and we believe that he's innocent but that's my opinion So then you have MassMods.com Matthew Dallery, arrested February 2010 he advertised preconfigured modems to still service from Comcast which is obviously a no-no you don't say hey, still Comcast here but still again he was raided after being snitched on by Massadog he was arrested to plead guilty of course the way the case is set up What's that? This guy he's so freaking stupid he was on YouTube with videos how to steal from Comcast how to steal Dish Network with an FTA box on his forums he had tutorials on how to get away with murder he sold lockpicks this guy just a freaking moron so he's getting what he deserved but yeah he got snitched on so that's the bottom line where theft of service is apparently in South Florida is a joke that trafficking illegal cable modems has taken over popularity and trafficking cocaine so the people in the retirement homes down there are sitting there with chrome rims on their wheelchairs soldering up modems and shit so so a couple key things is all the current arrests have involved theft of service selling preconfigured devices set up to steal service except for Durringle and using modems for legitimate diagnostic purposes is still by our belief completely legal the key factor that I like to point out is that the majority of arrests have been by snitches so it comes to my next slide which he wants me to send a picture to him in prison so if anyone takes pictures of this can actually email it to me but that's a brief message from Steven Watt he gave a speech at Def Con 10 and he's the Unix terrorist basically saying hey stop snitching that's why half of you guys end up going to jail if everybody would just not say things half the time sometimes I have evidence but a lot of the times they wouldn't now we're going to go into the new tools and firmware which taco is going to cover that ready? sorry, balancing backwards okay we got the Motorola 6120 out about a year ago started playing with it we went over before I had an orange modem with me the Motorola factory diagnostic modem with the shelled firmware we had that firmware before the modems even came out and basically Durringle the government used in ISO for a while was working on something called DreamOS which is going to be a Linux based operating system that could just do anything it never came to fruition since he got busted lo and behold, Texas Instruments released their reference firmware for all the Puma 5 modems Montavista Linux and so basically they gave us DreamOS a fully capable diagnostic firmware to consumers and that's very cool let's see we don't have a name for the firmware yet nothing cool like Haxerware we're just calling it SBH Alpha we're on build 1.1 right now it's kind of like DDWRT open WRT anybody can develop for it Motorola and all the manufacturers they've released their source code but I'm going to say this and hopefully this is not slander but they're all in violation of the GPL because they have not released compilable sources they've not released the Montavista toolchain whatever they're releasing can be compiled but it won't run on the ARM architecture so hopefully maybe someone in this room can compile it in the GPL anybody, lawyers no, I'll talk to EFF last time we spoke here there were about 25,000 users on the SB Hacker forum as of today we have about 69,000 close to 70,000 people on our forum and talk to Ryko he plans on making Haxerware 3.0 for the Broadcom modems sometime around the end of this year those of you who have Haxerware know that's going to be freaking awesome and then DOCSIS 2 modems mostly use parallel flash chips and we use the JTAG to flash those all of the new modems DOCSIS 3.0 and whatnot have SPI flash chips so we've had to switch over to new programmers that support SPI and system programming there's the USB JTAG NT it's a proven device it's very good Haxerware has been working on for six months to a year the HaxoMatic using FTDI chip it does JTAG, SPI and it has a serial port USB to TTL it's all and we'll actually have one really small oh there's a picture over there and then that works with Tom's JTAG utility the software that Ryko's writing blah blah blah you can build your own parallel port SPI programmer but that's for all the new modems have SPI flash chips basically let's see the SPH alpha firmware we really didn't have to do a whole lot to it because Texas Instruments gave us basically everything we need we just modified some of the scripting so you can force your own config file disabling firmware updates from your ISP is automatic you can do so disabling SNMP so they can't pull your modem after it's online Ryko's a MIPS guy he doesn't know arm but he actually figured out how to disable BPI plus and BPI so we're using that for people who choose to do so now if you disable BPI all of your traffic goes over the network unencrypted and the nature of HFC networks is that your neighbors can sniff your traffic and if it's not encrypted or isn't anything not secure it's going to be a vulnerable to your neighbors running Wireshark or whatever DefCon 16 there's a packet omatic speech Guy Martin actually has a tool to sniff DOCSIS traffic if anybody's interested you can look that up he gave a speech at the same time we did it at 16 and a lot of DOCSIS engineers were very concerned after they saw the video of it and they've all started enabling BPI BPI has been around since 99 took charter about 10 years to enable it but they were bankrupt so can't blame them oh let me see we have the one of the checks they use now is checking your firmware version we have the latest firmware basically we're working with Motorola 6120 firmware the latest version is spoofed so reports to the cable company we're running the latest firmware version we're trying to add a feature where you can change it to whatever you want like in hacksaware you can spoof any modem you want and it looks like you're running that modem and right now there's no web GUI like with hacksaware you can change all the settings it'll also be done via serial port or SSH there's two reasons for that one is because hacksaware invited a lot of morons who don't even know how to run a computer into this community who started stealing service and just trying to ruin the hobby for everybody so one of the reasons is that the other reason is toolchain issues like I said some of those companies are filing the GPL not releasing the Montevista toolchain we only know one person with a working toolchain for the Puma 5 but I'm sure plenty of people in the audience here are gifted Linux developers and could write their own toolchains let's see I'm going to set up a demo and show you guys the 6120 shell and the hacksawmatic how many of you guys show of hands heard of DDWRT so this is kind of the same thing what's going on with this now that you have Linux on your modems you have a whole world of potential that you could do so you can port all this stuff to it run all the different types of tools and whatnot so what SBHackers really looking for is to get more people that could build into DDWRT to put this onto the modems and really give you a lot of power on your modems and I mean who knows what all I mean I don't know if they could handle snort or whatnot but I remember people using DDWRT with snort and things like that all the current modems have 8 or 16 meg flash chips and 32 or 64 megs of RAM so there's plenty of power there to be used so that's really looking for people to get more involved with this project that's the new port hacker firmware since it does run on Linux the idea is instead of having just one guy coding it like Ryco actually having a community of people contributing and helping to develop it this is a Motorola SB6120 this is the most popular DOCSIS 3 cable modem you can buy it at Fry's best buy whatever it's the most popular one it's really hack blah blah blah let's see I'm going to load up it has a breakout board we've got a USB to serial port and we've got a little port here for flashing the SPI chip and inside it's the board is wired directly to the SPI chip and when we power it on and cut the cable it cuts the power to the CPU for those of you who are familiar with SPI programming so you can program the chip directly and it's quite a bit faster than using JTAG is this going to work? boot loader is decompressing the firmware the process is it's maximized you're not missing anything and this has a a busy box Linux shell and also a Texas Instruments shell here we go so what TI has given us is basically like I said fully capable diagnostic firmware type you on the shell and type in prod show you've got the you know the hardware vision serial number file names for spoofing firmware versions change the modems IP the MAC addresses basically and if you type prod set you can go in and change all those parameters and then save it and it's very simple you're done doing something let's see and outside of that we have the standard busy box Linux console here so basically you know it's very powerful you know Linux on the modem you can do whatever you want with it next I'm going to show you guys Hax-O-Matic after Hax-O-Matic has been working on this programmer Hax-O-Matic does SPI JTAG and has a serial port as well where is it he was up apparently all night last night programming this for me just he has a DEF CON demonstration and there's a lot of people who are working with this FTDI chip making their own programmers this one's just targeted for it does Kail modems Xbox 360 NAND anything with SPI he programmed Acer one of those new 3D monitors with it just because he felt like it no, USB JTAG has a Cypress chip and some other chip in it this is FTDI just one chip I have a USB JTAG NT with me it's a good thing but the software sucks it really does this software is gooey and more user friendly and this is actually about twice as fast on SPI it reads and a little bit faster on writes it generally reads about 2 megabytes per second and writes the 6120 will write about 200k a second the newer expansion flash chips will write about 475k a second I do not have one of those modems with me that has one of the newer chips I plug it in, it cuts the power to the CPU and let's see on Hax-O-Matic lets you choose your clock speed for programming 30 megahertz right now and detect we got a expansion flash chip and then just reading the flash right now right now he's still finishing up the software we're beta testing it see it's pretty fast read 8 megs right there so we're going to put this into mass production once the software is finished and it's a really cool device so I just read the whole flash I can write it back I can program any of these areas flash the firmware whatever what have you there's another application that does you can program PIC controllers as well basically anything that this chip will handle let's see sorry I'm trying to figure out where we left off probably went over that stuff oh new tools there's some various tools that some of our admins and members have written this is called this one SNMP cert grabber will scan the HFC network for modems that are in factory mode if it finds one it'll grab the certs the max and whatever you need if you're going to be cloning of course like we said don't do that exactly yeah the way I see this if you pay for you know say Comcast you pay like a bit of service you're paying $100 a month if you want to run a diagnostic modem for whatever reason it shouldn't matter you're paying them and you know it's not illegal it's just against the terms of service if they catch you they will ban you for life but it's not against the law so there you go that's the way I see it but they probably don't agree with me because I called a monkey last time I was here and there's a Comcast executive who's like their head of broadband who's an active member of the SP hacker forum and when noobs come on and say oh my modem's not working anymore why blah blah blah he comes on and talks shit to him and laughs at him but they actually Comcast and the rest of the big ISPs use our forum to find out what the holes in their system are and how to fix them but they failed to fix them after two years this is true I thought after speaking you know in 2008 that they would immediately increase security the major companies you know Comcast, Charter, Time Warner, Cox really have not started increasing security until this year enforcing BPI plus which verifies the MAC address based on a certificate which is issued by Verisign and the reason for all the security holes still is that they're still allowing DOCSIS 1.0 modems on their networks DOCSIS 1.0 had no way to verify all it has is BPI which encrypts your traffic but they did not have BPI plus which verifies the MAC and serial number to the certificate and Comcast has tried to get rid of all the 1.0 modems on their networks but there's still holes in Comcast because their walled garden is not configured correctly and the rest of the ISPs you know there's just so many holes in DOCSIS 1 and they don't want to spend the money to go out in the field and replace all these modems with DOCSIS 2 modems, 3 whatever what's that? depends on where you are though I've heard COXLoss Vegas is fairly secure but it really depends what's that? I don't know I don't have them but I know people are hacking DOCSIS 3 on COX but some ISPs take more time than others to figure out how to do it he's right this is a program one of the other admins wrote it allows you to back up if you're going to hack your modem you want to back up the flash chip before you do that because if you just fuck it up you want to have an original backup if you don't have an SPI programmer you can use utility to back it up via the virtual comport they're using the U-boot bootloader for the Puma 5 modems that's pretty cool how do I back up my full flash without buying the $60 programmer? well, we have an application for it now can I stay here? basically the future I'm not really sure what they're going to do the problems will actually fix them or not but one thing that we had thought the faster the home users internet connections get the bigger threat botnets will be if you think about it botnets on like dial up you have to have a huge number of machines that cause sufficient denial of service attack if you have people on DOCSIS 3 with these really high speeds you don't need as many computers I'm sure some of you have dedicated servers average port speed is probably 100 megabits some of you have a gigabit take 10 DOCSIS 3 modems on Comcast with 10 megs up that's a 10 modem botnet to knock out your server so they just have to be really mindful of that because if people are getting exploited and being used for botnets it can get bad or on the other side not just botnets but if somebody we're inclined to get a number of diagnostic modems and put them all online like you said put 10 diagnostic modems online all of a sudden you can start taking down pretty heavy servers in terms of denial of service attack also with the features I think there's a good possibility they're going to keep trying to crack down on the modem hacking but it's kind of tough and I haven't actually seen any real convictions that's what I'm wondering what's going to happen with these cases Master Dog's case got thrown out Mass Mods he told me he's going to plead guilty and he is guilty so he should Deringle will not plead guilty he's going to go to trial if he has to he's lost my train of thought you can go on to the next slide if you want I'm sorry I had too much to drink I'm so sorry actually skip this just role playing it's not too fun all stuff we've already went over okay so problems and solutions one thing that we brought up last time and DOCSIS 3 does have the spec for AES but so far it doesn't look like many people are using it is that if you're using a 56-bit desk that's crackable that's kind of scary for your privacy when you already have the packet omatic it can watch your traffic your neighbors can see your traffic if it's unencrypted with the BPI plus if it's just a 56-bit desk probably only a matter of time if somebody is motivated to actually write a plugin for packet omatic and go ahead and start sniffing all the encrypted DOCSIS traffic which maybe people already are doing it I want to add something Haxerware has the ability to create and generate a self-signed BPI plus certificate so if you change your Mac it's actually something that Motorola added to the SB 4100 I believe it's a DOCSIS 1 modem they wanted it to be DOCSIS 1.1 compliant so Motorola wrote these code where you can sign your own certificates and we took that and Ryco put it into Haxerware however it doesn't really work because like a Cisco CMTS by default will not accept self-signed certificates but I like to say a third world country where they want to have 4100s keep working they want to enable self-signed certificates to work and there you go so there is code to generate the self-signed ones but if you want a real certificate you got to get it from VeriSign and nobody has yet to crack BPI plus sure we had clone detection last time really hasn't been anything that I've seen that's come out to try to really detect that with the actual perfect clones meaning you actually clone the certificates and get away with it so from my perspective situation for the ISPs is pretty bleak that's why I said I don't really think DOCSIS is a good protocol in terms of security on providing people with internet access I mean it's great for us as hackers if you want anonymous internet or you want to be able to put as much stuff online as you want or get whatever speed you want but from an ISP perspective I'd say it's pretty bleak with any solution in the at least immediate future the way I explained this to Blake DOCSIS 1.1 was certified about 10 years ago DOCSIS 3.0 was certified in 2008 basically all the US cable operators are running DOCSIS 1.1 networks with channel bonding so they're using 10 year old technology and just bonding the channels to give you more speed and they're not using the AES security or anything else and bad men's don't know what the hell they're doing they're getting better at it because they're going to SP hacker and seeing what they need to do to fix the holes but they just don't know what the hell they're doing I'll see there's a little bit of stuff for you guys to remember how to get anonymous fast internet on DOCSIS network the equipment used how to stay anonymous different firmwares we're at this point pretty much for using the older like 5101 the Haxware Alpha why it's possible hardware security what DOCSIS 3.0 really is bonding at faster speeds development and reversing is as easy as your sister was added by Dev Delay he couldn't make it here this year Dev spoke with us last time but he couldn't make it out and these new security adoptions so far they can be defeated it seems to be a recurring trend the same problems every time there's a new device or new technology it still has problems from the past it just keeps repeating itself people just keep breaking it enabling one security feature on a CMTS may mean disabling or sacrificing another it seems like every time Cisco releases a new code train for their CMTS IOS it creates new security and then opens up old bugs Cable Labs has a tiered qualification system for the CMTS is they have bronze silver and gold I believe like Olympic medals Cisco and Eris which is the majority of use in the world they're all bronze certified they can only do downstream bonding not upstream CASA Systems has gold certification for theirs but they're really a small company and nobody's using them I have a friend down in south Florida who has upstream bonding and he's the only person I know who's been 5 megs up but it's coming and potential for upstream speed is doxxus has become more symmetrical as opposed to the past where it's been really asymmetrical sorry about that we have our thanks and I have a couple minutes left all the anonymous network technicians that answered questions about OSS for me Deringl you know essentially started this whole thing so a big thanks to him for that got Ryco DevDelay for Detox, ScanMan1 BMHoff, Spender, Snaggle PureUp, Cisco Ninja the UT and the entire surfboard hacker community the anonymous cable modem hackers who shared their stories with us and actually gave us enough information to verify that that was the case of course to manufacturers for creating such insecure hardware and software sbhacker.net and soldrex.com thank you everybody