This study examined the impact of an insecticide-based intervention program on the elimination of triatoma infestants, the main domestic vector of trapanosoma cruzi, in Pampa del Indio, a municipality in the Grand Chaco region of Argentina. The study found that the intervention program successfully reduced the number of infected houses and the abundance of triatoma infestants. However, the study also identified several factors that could have impeded the success of the program, including the presence of pyrethroid resistance, as well as socio-economic and cultural differences between the indigenous calm population and the Creole population. This article was authored by Ricardo Esteban-Girdler, Maria Solgaspi, Natalia Paula Machiaverna, and others.


RCA Victor, world leader in radio, first in recorded music and first in television, presents the Phil Harris Alice Faye Show.  This Tuesday, one of the most famous events of the year takes place in California. Pasadena's celebrated Tournament of Roses Parade. Thousands will see it in person. Millions will see it on television. But today, Frankie invents an entirely new way to view it. But first, a word from RCA Victor. Christmas is over, and while you're making your entertainment plans for 1952, make sure you include RCA Victor Television. A superset like the 21-inch Rockingham, for example. In the year ahead, the Rockingham will bring into your home a great deal of pleasure and entertainment. The whole family will enjoy it. Not only is the Rockingham a beautiful addition to any living room, but its performance is unmatched anywhere. This stunning Regency console with a bow front is the most luxurious model in the superset line. And on this 21-inch Rockingham, you'll enjoy the kind of reception you've been waiting for. Unbelievably clear, strong pictures. Wherever you live, city or country, the Rockingham brings in the best reception possible thanks to television with picture power. So buy the Rockingham by RCA Victor, cornerstone of home entertainment for three generations. And now the stars of the RCA Victor program, Alice Faye and Phil Harris. A few weeks ago, Alice's brother William bought a home recording machine and made a tape recording of Alice and Phil's radio show. And as we look in, he is about to play it back for them. These tape recorders are amazing. I took your program of December 9th right off the air. Can we hear it, Willie? Oh, I certainly. Well then go ahead and play it, Willie. I'm anxious to hear it because if I say so myself, I gave my greatest performance that week. That was your greatest? Yeah. Hmm. Never mind. Just play that tape and you'll see how good I was. Wait till you hear the pear-shaped tones that come out of this golden-throated lush. Thrush! Now go ahead, Willie. Play the show. Very well. Here we go. And now the stars of the RCA Victor program, Alice Faye and Phil Harris. It's very good, Willie. It is. It's good reception. Well, all right. You know, Alice, one of these days, we've got to get one of these. We can take it home and play. With Christmas two weeks away, Phil has decided not to wait until the last minute to do his shopping. He is now making up his list, and Alice is helping him. Are you sure you have everyone down, Phil? Yeah, I come on next. Listen. I've got something down for the kids, Willie. Oh, my, my, my, my, my, my, my, my, my. Don't you think we ought to get something so such a nice name? Well, you're talking more like a little lady every day.  Phil, I don't like that. I'm not going to say this now. I'm going to say this now. All right, Willie, stop it.   Will you stop it? Phil, Phil, I don't think you read your lines right. You talked much too fast. You didn't exactly have a Gary Cooper delivery yourself. Willie, what's wrong with that machine? Oh, I didn't have the tape set for the right speed at the beginning, but I slowed it down later. Now, listen, why don't I play the rest of the tape? Mike, you're right. I've done enough for the... Something in there. Something in the sporting line. What kind of tape were you using? Adhesive? Look, have you got my song on there, Willie? Oh, yes. Well, then let's try that. Very well. It's better. That's it. Now you've got something. That's it. Long, long ago, Willie... Willie, that ain't it. I said that ain't it, Willie. No, Willie, that ain't it. Willie, I don't want that. Willie, I don't want that. Now you've got it. That's me. Where are you, pretty thing? Sing it. Let it go, baby.  I can't stand it. Your voice is getting worse. That was my normal voice. Normal, shnormal. It's driving me nuts. All right.  Take it home. You never could... I'll get that. Hello? This is the home of Phil Harris. This is the operator, sir. I have a local call for you, and the party wants to reverse the charges. Will you accept the call? Yes, yes. Very well. Go ahead, sir. Hello, Frankie? Curly, how'd you know it was me? Who else would reverse the charges on a local call? Hey, Curly, I took care of the thing you asked me to. That's a good boy. Hey, look, come on over here. I want to show Alice what I got. I can't leave right now, Curly.  Oh, well, I'm sorry to hear that she... Remly. Sir?  Of course not. You don't think I... Granny, you must stop cracking your knuckles. Tell her to keep one foot on the floor, too. Remly, get over here right now. Goodbye. Goodbye. Operator. Operator. Yes, sir? My party didn't answer, honey. Will you please return my dime? Get off that phone! What did Frankie get that you wanted to show me? Honey, have I got a surprise for you? I sent Frankie out to Pasadena to buy reserve seats for the Rose Parade. Oh, honey, you and the kids are going to love seeing that parade. Oh, I'm sure we will, Phil, but why do we have to go all the way out to Pasadena to see it? Why don't we just stay home and see it on television? Well, honey, you miss all the color that way.  The artistry of the floral arrangements is positively thrilling. Well, tell me more. You fascinate me, Carly. Now, Phil, why are you so anxious to see the parade? Because I appreciate the beauties of nature. Oh, I can't wait to see those floats with the blankets of flowers that serve as a background for the tableaus of live girls standing around in scanty bathing suits and abbreviated co- They ain't going! What's the matter? Don't you like flowers? You're not going just to see the flowers. Believe me, honey, that's the only reason I'm going. Oh, listen, I can just picture roll-up on roll of delphiniums banked against masses of marigolds running rampant on a field of blocksperre that's just oozing with Canterbury Bell. How does that sound? Simply scrumptious, Gwendolyn. It gives me goosebumps. Wait a minute, quiet. You just ain't artistic like me. You have no anesthetic sense. I have the soul of an artist. You take my voice, for example. Oh, you can take a better example than that. Like what? Like my voice. Tricked again? Now, sit down and I'll show you just what I mean. Sit down, sit down. What are you gonna do, you're so undecided? You say you do, and then you don't. You say you will, and then you won't. So what are you gonna do? First you say you do, then you don't. Then you say you will, then you won't. You're undecided now, so what are you gonna do? Now you wanna play, and then it's long. And when you say you'll stay, that's when you go. You're undecided now, so what are you gonna do? I've been sitting on a fence, and it doesn't make much sense cause you keep me in suspense and you know it. Then you promise to return when you don't, I really burn. Well, I guess I'll never learn, and I'll show it. If you got a heart, and if you're kind, don't keep us apart, make up your mind. You're undecided now, so what are you gonna do? It seems that you keep slowly driving us crazy. We can't make hand or tail out of you. My mind's gone bad, I feel that everything's hazy. Don't know exactly just what to do. What are you gonna do? First you say you do, and then you don't. And then you say you will, and then you won't. I'm undecided now, I don't know just what to do. So undecided, undecided. Now you wanna play, and then it's long. And when you say you'll stay, that's when you go. I'm undecided now, I don't know just what to do. Sit on a fence, and it doesn't make much sense. Cause you keep us in suspense, and you know it. Then I'll promise to return when you don't, we really burn. Well, I guess I'll never learn, and I'll show it. If you got a heart, and if you're kind, then don't keep us apart, make up your mind. You're undecided now, so what are you gonna do? If you got a heart, and if you're kind, then make up your mind. Don't be undecided now, so what are you gonna do? Step aside and listen to a real voice. I'll re- uh-oh, I'll get it. Hey, don't go away, Alice. When I come back, I'm gonna show you a real operatic baritone. Something like this. It's your pins-a, mario-longs-a, car-o, and wing-a-mon-o. Curly, huh? Why don't you change doctors? He's getting these attacks more often. What attacks? I'm singing. Oh, I thought your gallbladder was acting up again. Don't be funny. Hey, look, did you get the reservations for the rose parade? Of course I did, you can depend on me. If you send me out to get something, I get it. All right, I knew you'd get it. Hey, did you get good reserve seats? Well, they're not exactly reserved, and I guess you couldn't call them seats. Frankie, what'd you buy with the money I gave you? An empty lot.  Well, I looked at one, but it wasn't exactly what you- Never mind. What's the idea of buying me an empty lot? I didn't buy it. I only leased it for 99 years. This way, you not only see the parade, you can make money besides it. Yeah? How do you figure that? You put up bleachers.  You'll make a fortune. You ever tell me, Remly, I got to hand it to you? Ha! You pulled a shrewd deal. Taking the money and leasing a lot. I happened to be a clever businessman. I got it up here. You certainly have. Hey, tell me, Frank, where is this lot, and what does it look like? How should I know? I haven't seen it yet. Uh-huh.  Yeah. Look around, it's slipped. Why didn't you ask the guy who leased you the lot to show it to you first? Surely he was a stranger. I didn't know him well enough to get that personal. But you got nothing to worry about. This guy is honest, trustworthy, and beyond reproach. Oh, that's different. Sounds like a pretty high-class gentleman. He is. He didn't even stagger when we got off the bar stools. You met this guy in a bar room? Is there someplace else to meet people? All I did was tell you to drive out to Pasadena and buy tickets. What were you doing in a bar room? I had to stop to get gas. And after you got gasped up, then what? Remly, what's the matter with you? Every time I ask you to do something, you mess it up. One of these days, Alice is going to... Phil, Phil, who are you yelling at like that? Frankie. Oh. What did the sad sack do now? Alice, you'll never believe this. But do you know what he did?  What did he do? Look, I gave him money to buy seats for the parade, and instead he leased a empty lot. So? What do you mean, so? He came back with an empty lot. What did you expect from him? Seats? See? She understands, Curly. Alice and I think alike we're on the same mental plane. Our brains work the same way, don't they, Alice? Doh, doh, doh, doh, doh. And you slap C. Maxi. That's a no. Now Phil, that settles it. I'm not going out to any empty lot that Frankie got. We're going to stay home and see the parade on television. No, we're not. Now look, Alice, I'll drive out to Pasadena with Frankie now, and then I'll buy tickets. Then will you go? Well, first I want to see where the seats are located. Oh, this is silly. I leased Curly a beautiful empty lot. Will you keep quiet, please? Alice, if you want to see where the seats are, drive out with me, and then you can see when I buy. Well, I can't right now. Phil, I have something to do. I'll get somebody to drive me out a little later. And where will I meet you? At Curly's Empty Lot. Here's the address. Yeah, meet us at Curly's Empty Lot. Come on, Renly. I'll drive us out. Yeah, Curly. On the way to Pasadena, we're going to see the parade on television. Yeah, Curly. On the way to Pasadena, will you sing to me? Why? It's a dull trip, and your voice always puts me to sleep.  Here we go. Young Johnny Jones, he had a cute little boat. And all the girlies he would take for a float. He had girlies by the score. Sweet little peaches on the shore. But Johnny was a Weisenheimer, you know. His steady girl was flow. And every Sunday afternoon, they'd drop in his boat, and then they'd spoon. And then he'd row, row, row. Right up that river, he would row, row, row. A huggy giver then, he'd kiss her now and then. She would tell him when.  A little further he would row, just he and flow. With her head on his chest, he'd take a few measures rest, and then he'd row, row, row. In Johnny's boat, he had a cute little seat. And all the kisses that he stole were so sweet. And he knew just how to row. He was a rowing Romeo. He had an island where the trees were so bright. He knew just how to land. Then tales of love, he'd tell the flow, until it was time for them to go. And then he'd row, row, row. Right up that river, he would row so slow. A huggy giver then, he'd kiss her now and then. She would tell him when.  A little further he would row, just he and flow. Then he'd drop off his oas, take a few more encores, and then he'd row, row, row. Just he and Florence, row, row, row. Right into heaven, row, row. He had no Johnson motor, so Johnny'd flow, but row, row, row. Hey, Curly, we've walked all over Pasadena. There just aren't any reserved seats left. I'm not going to give up, Remli. If I can't get tickets for the regular price, then I'll go to a scalper. I'm willing to pay more. How much more? Oh, it's Harrison Remli. What are you guys doing in Pasadena? Well, we came out to get seats for the parade. Think you can help us, Grogu? Yeah, sure. Just happen to have some tickets in the reviewer's stand, and I want you fellas to be my guests. Here, take six tickets. Gee, thanks, Grogu. That'll be $50 apiece. $50 apiece? That's a lot of money. I ain't gonna...  You're gonna afford it. Besides, this money goes to a very worthy cause. It's for my benevolent society. Benevolent society? Yeah. I'm engaged in a very noble work. I rehabilitate ex-convicts. Only last week, Adam got out a star. I lined up jobs for them. Gee, that's a very charitable thing to do, Grogu. Yeah, well, I figure that's the least I can do. Seeing as how I framed them in the first place... What kind of jobs did you get them? What are they doing? Well, at present, they are waking their way up in a bank in Pomona. How are they doing? About two more feet and they'll reach the Vaughan. Well, at least they're working. Sure, it's better than having them hang around a pool room. On behalf of my grandmother, I resent that. Hey, Grogu, your society doesn't sound very, shall we say, dignified. Now, what are you talking about? Why don't you see the beautiful float that we entered in the parade? It's got social significance. It's symbolic of the wink that our organization is doing. It's a very touch and tableau. Yeah? What do you call it? Flight from Alcatraz. Or tippy-toeing off at a rock. Well, we're going to run along now. How about the tickets? You want to buy them or don't you? No, thanks. That's too much money, Grogu. Well, that's too bad. You're going to miss seeing my society's float. Oh, this is a beautiful thing to see. Would all them flower beddeck machine guns? I'm sure we'll win first prize. What makes you so sure? The head judge is gun-shy. Well, so long, fellas, and I wish you both a trigger-happy New Year.  All right, Remli, what are we going to do now? You see, I can't get any reserved seats. Well, why bother? You still have your empty lot. Why don't we go look at it? Why waste our time? It's probably nowhere near where the parade's going to be. Well, let's find out. How should we find out? All right, I'll ask that guy. Hey, mister? Yes? What street is the rose parade going to be on? Colorado Street. Colorado Street? Hey, Curly, that's the street your lot's on. No kidding. Gee, that's wonderful. Hey, mister, are you sure the parade's on Colorado Street? Yes, sir. The parade starts at number four Colorado Street and goes up to the 2400 block. Did you hear that? Hey, that's great. Frankie, this time you really came through, kid. I'm proud of you. What's the address, uh, my lot? Uh, 68,700. Oh, it's just down the road a piece, huh? Well, maybe it's a little further, but it's right on Colorado. Are you sure it's not in Colorado? The guy said the parade answered to 2400 block. Ah, I hate to know what he's talking about. I happen to know it goes all the way down Colorado. I got news for you. It better be a good spot. I guarantee it. I assure you you'll be very happy with this lot. Let's go see it, huh? How do you like your lot, Curly? I don't know. Drop the anchor. I'll dive in. Oh, no, don't be sarcastic. It's not bad walking here. Grass just happens to be a little dewy. A little dewy. Remly, I got a message for you. That dew is laughing at my armpits. What's the matter with you? You got me a lot that's four feet. You've got four feet of water on it. Now what am I supposed to do with all this water? Bottle it and sell it to the natives. Will you stop already? No, you can call it Curly cold. Yeah, I understand. Just stop already. Or how about Canada wet?  All right. Please. All I wanted was some seats to see the parade. All I asked you to do was to get me something along the line of March. Oh, March. I thought you said March. Will you stop already? I mean, the place is impossible.  And let's leave before Alice gets here.  Oh, Bill. Bill, where are you? Can you hear it? That's Alice. Where are you two? The monster's with her. Now why'd she have to bring Julius? Will you keep quiet? They haven't seen this. Let's not answer and maybe they'll go away. Bill? Bill, are you and Frankie out there? Nobody out here but us frogs. Croak, croak, oink, oink, croak, croak, oink, oink, croak. That's as close as I can get. So we're here. Alice, here we are, honey. Come on out and see my lot. That's not too deep. Just walk straight out. This lot's too tall for Julius. Yeah, they're making them grocery boys too short these days. You think you'll come up? I don't know. Why, is it important? I'm going to bottle this stuff. I don't want that kid floating around here. It's not much call for sparkling Julius, you know. Hey, maybe we ought to go down there and shoot... Hey, kid, we missed you.  Let me help you up. Get your climbing... I've been about you came up, didn't you? What were you doing down there so long?  Well, you keep quiet. I'm not going to do it. This is my lot. The parade goes right by this place. Which way? I'm full of water and it's halfway to Chicago. Oh, don't exaggerate. It's not that far out. The man said the parade goes right past this lot and we're going to stay here and see it. A little bit of water never hurt anybody. Curly! Huh? I hear music. Hey, the parade must be starting already. It can't be. It's not supposed to start... Hey, you're right. Yeah. Hey, here comes the first float through the fog. Hey, it's pretty, too. Hey, look at it. It's all done up like a ship. Hey, mister, that's a nice float you got there. What float, son? This is the Mississippi Showboat. Which way to Natchez, boy? Phil will be back in just a moment. RCA Victor's new Victrola-45 instruments represent a completely new system of recorded music, the 45 system. And it's the system that makes the difference. The handy 7-inch record and automatic changer are the first ever designed together to play together as a unit. Both are the result of not just months, but years of scientific tests. That's why RCA Victor's 45 system sounds better, plays easier, and costs less than any other system of recorded music. And listen to this. If you buy a Victrola-45 instrument now, you'll receive at no extra cost over $6 worth of RCA Victor hit record albums as a bonus. Over $6 worth of record albums are yours for the purchase of any RCA Victor instrument that plays 45s exclusively. So act now. Don't miss this wonderful holiday season offer brought to you by RCA Victor. Folks, this is Phil again. You know, nice things you can't hear too often. So from our entire cast here on the RCA Victor program, may we wish you everything you want for the coming year. For your safety and for that of your loved ones, please drive carefully. If you drink, don't drive. And if you're sleepy, pull over to the curb and take a nap. You'll lose a little time, but at least you'll wake up. Thank you. Good night, everybody. Happy New Year, everybody. This program is produced and directed by Paul Phillips. Remember, whether you're buying a television set, a radio, a Victoria phonograph, or record, put your faith in the cornerstone of American home entertainment for three generations. RCA Victor, world leader in radio, first in television. Next Theater Guild on the Air and goodbye, Mr. Chips on NBC.


Isaac, why do you care so much about people believing in the God of the Bible? After all, all religions are basically true. Wait, why do you say that? Who told you that? Well, some guy on TikTok.  You know what I told you about scrolling TikTok at 1 a.m. at night. Are you kidding me, man? Okay, to the studio. All the major world religions are true. All religions work. Here's three reasons why. Okay, I'm really interested in what he's going to say here. He says that all world religions work. I'm interested in what he means by work. I guess he means that you all end up in an ideal or good place, a heaven or oneness or something like that. The interesting thing here we get to realize is that this statement is completely absurd because they teach different things. So what do we mean by all religions are true? How can things that are different be true equally? This is breaking the law of non-contradiction. Doesn't make sense. So let's see what he has to say. Firstly, by the definition of most religions, God is an infinite being. That means an infinite being should be able to express itself in an infinite number of ways and be reached through an infinite number of ways. Okay, okay, so this is interesting. So if God is infinite, then he can express himself in an infinite number of ways. Well this would be maybe correct if God did not already reveal himself in a specific way. So through the scripture, through the Bible, God has said, hey, this is the way that I am expressing myself. This is what my character is, this is what my nature is, all that other stuff. That's not me. So if you're worshiping that, that's not me. So just because God is infinite, we're kind of mangling this definition of what it means to be infinite. Just because God's infinite doesn't mean that he is infinitely bad and infinitely good and infinitely righteous and infinitely terrible at the same time. It's like we're not understanding that God has a specific nature, that he is one way. Every way. And he's revealed that through the Bible. Obviously this guy doesn't recognize the Bible as God's word and we're going to get into more of that. So let's see his conclusion here. So what is our theological mistake here, buddy? So to limit an unlimited being to this or that religion is therefore a theological mistake. Interesting. So to limit being to this religion or that religion is a theological mistake. Well, they're teaching different things. This is the thing, right? They're teaching different things. If you look at Islam, right? What do they teach about God? Well, they don't teach the Trinity. So what we would understand is the Father, Son and Holy Spirit. They think that's heresy, right? So that's God's nature that we believe this is how he has revealed himself. Islam says no, that is not how he's revealed himself at all. And also this kind of, and we're going to get into this later, this kind of works righteousness, mentality, a lot of these religions hold on to that you need to do something or you need to take on some sort of practice in order to gain salvation or gain access to this good place when you die. Christianity operates from a whole different angle. We'll talk about that in a little bit. So let's hear a second kind of take on this. Second, if we are to judge a tree, we should judge it by its fruits. Now all the major world religions have created innumerable saints and mystics and teachers who have inspired people, inspired people today and continue to inspire people. These saints of all the major world religions are paragons of virtue and charity and service. This is a terrible argument. This is really bad. Like I don't want to be beat to this guy. Like he seems like a genuine guy and I'd probably love to have a conversation with him if we had the opportunity. But honestly, this is just not a good point. Maybe, you know, I love arguments and threes too. So sometimes you're making up, oh, OK, these are three reasons why so and so, and you only have two. And then you're kind of like, well, what am I going to do about this? Maybe this is kind of a weaker one. But let me put this in the middle. This is not a good argument at all. Think about it just because somebody is nice or they do nice things or like they're a great person or at least, you know, quote unquote, great person. We know in the scriptures that no one is good. No, not one. No one seeks for God. No one does what is right. But on the outside, OK, maybe they might be a nice person. But does that mean automatically that what they're teaching or what they're believing is true? Hey there. Hey, I wanted to share my faith with you. Doug, the donkey deity, he is the only true God. No, he's not. How can you say I'm wrong? I just mowed your lawn and bought Girl Scout cookies from your kid. OK, well, three things. Number one, that's not my lawn and that's not my kid. And also Doug, the donkey deity. Seriously, you couldn't have been more creative. Look, guys, just because somebody's nice or they did a lot of good things, that doesn't mean that what they're teaching is true. This gets to our understanding of true. Is something true just because we believe it sincerely? Does that make it true? Well, no, actually, that's not at all what it means. Multiple realities can't both be true if they are contradicting one another. That's just a logical fallacy. The practices of all the major religions are for the most part the same. Meditation, devotional prayer, contemplation of spiritual philosophy and selfless service of other human beings. If the practices are the same, the destination is the same, too. No, no, no, absolutely not. Well, here's the thing. A lot of those practices, like I was talking about earlier in a lot of these religions are motivated out of a desire to become either one with God or earn salvation or kind of get brownie points in order to please God so then you can earn the special place at the end of your life or whatever that might be. Well, Christianity operates out of a very different philosophy. This idea that we are all dead in our trust uses and sins, that we are incapable of doing good things, which is like no other religion has that, right? Because that's not a popular message.  Like, that's scary. Come on now. But the great thing is, is that through Jesus sacrifice, God sacrificing himself for the sake of his people to buy us back from the sin that we are enslaved to, actually, that he made us free so that we could have forgiveness and new life in him and that we actually want to do these things out of love, that we want to pray, we want to read a Bible, we want to do these selfless acts of service because of the love that we've already received through Christ. So here's the thing, guys, this ultimately gets to where we find truth. What is truth? And a lot of people in this world are going to tell you what is true or that there are multiple truths or that the truth is relative. It's whatever you believe. But in the Word of God, we are given God's revealed revelation to us. Yes, you can believe it. Yes, you can trust it. We look in the New Testament. Jesus fulfilled so many prophecies that were prophesied hundreds of years before they actually happened. Amazing. All these eyewitness accounts, all these scriptures over hundreds of years that were compilated that were preserved over years and years and years. Claims that are verifiable. Claims that we can actually test and understand that are true, that are backed up by archaeology. We can understand that this is true, but also without God's revealed revelation, we are subject to our own understanding of truth, our own subjective standard of truth, which is just meaningless. It's just changes with culture to culture to culture. But when we look at God, Jesus said that He is the truth, that He is the way, the truth and the life that no one comes to the Father except through Him. So if you want to know truth, you need to know Jesus. Thank you so much for watching this video, guys. If you enjoyed it, subscribe because I'm putting up new videos all the time. Also, give it a like because that helps get the video out to more people as well. If you want to support what I'm doing, head on over to Patreon, link in my bio. I'm trying to do this full time one day, and we're almost to the point where we have enough Patreon supporters for me to be able to do that. So thank you so much for all of you who are on there, and I will see you next time. God bless.


All right, so please join me in welcoming Alfonso and Alejo. Hi Defcon, our presentation today is about TLS 1.3, which is going to be the next major version of TLS, which will be released soon. It has a new feature, which is called Zero RTT, Zero Round Trip time and resumption, which speeds up the session resumption. However, it has some security impacts. This is a known issue that has been acknowledged by the protocol specification. So our 10 today is to give you a better understanding of TLS 1.3 and this new feature, Zero RTT. Two is to raise awareness across the audience about the potential risks of using Zero RTT. And three is to provide you recommendations about how to mitigate those risks of using Zero RTT. Finally, a minor disclaimer. What we are going to discuss here is just our own opinion and does not reflect the view of our employer. Hi Defcon, my name is Alfonso García Guacil. I work for Cisco as a senior security consultant. I mostly do penetration testing and some research and development focused on offensive security and I'm glad to be here for the first time. Hi, my name is Alejo Murillo-Moya. I am a senior security consultant at Cisco. I am the red team lead for EMEAR, Europe, Middle East, Africa and Russia. I have more than 10 years of experience in the security field and as Alfonso said, we are really happy to be here at Defcon. So once we have introduced ourselves, let's introduce TLS 1.3. So first a bit of history. So four years ago, a working group was created at that working group had a mission. That mission was to develop the new version of TLS, TLS 1.3. There has been 28 iterations of the protocol specification and as you can imagine, that has been a long journey. So now with this introduction, let's move on to some of the good things that TLS is going to bring to us, 1.3. One of the good things is that it has followed a keep the simple approach. So only five ciphers are going to be defined on the TLS 1.3 specification. That means that the implementation is going to be easier and also that will reduce the complexity of the protocol. If we compare this to previous version of TLS, that's a huge improvement because if you recall, those previous versions support those sense of ciphers. Another good thing is that TLS 1.3 is not going to be vulnerable to previous known attacks against previous versions of TLS. So for example, you can think about RC4, RSA, CVC increase in mode, or even compression attacks. Good luck finding them on TLS 1.3 because you are not going to find them. Also another good thing is that it supports perfect forward secrecy by default. It's by default enabled and that's something that is not going to be optional like on previous version of TLS. There's a quick recap of the forward secrecy. Imagine that an attacker is able to store all your secure communications. Perfect forward secrecy is going to ensure that even that if the attacker managed to steal the server private keys, he wouldn't be able to decrypt your secure communications because ephemeral session keys were used. Also the TLS 1.3 protocol went through some formal security analysis which basically it took and the protocol specification, its machine state, its security assumption and those were analyzed and some witnesses were identified. With that information, the protocol was refined and improved before its final release. Let's talk now about the compatibility issues. So last year, Chrome and Firefox were doing some field tests and what they found is that around five percent of the users were not able to connect to the website using TLS 1.3. They analyzed the data and they found that that behavior was caused by something called middle boxes. A middle box is a corporate networking device that is inspecting or intercepting HTTPS. What happened at the end is that they made some modifications to the protocol specifically they changed the TLS 1.3 handshake in order to look like one looks like a TLS 1.2 session resumption and that fixed the issues with the middle boxes. So at the end the protocol it may not be as pure as it could be but given circumstances I think it was the right thing to do. Then let's focus on the topic for this presentation. So one of the things that the working group wanted to do is to have a faster TLS and that's especially important on mobile networks due to the latency. So CRTT was created. CRTT is a session resumption that can push data to the server also called early data. Basically the important thing about the CRTT is that it should have a session ticket the message and also the early data will be encrypted using a pre-shared key and then when the server receives that message if he can decrypt it it will process that data. So it seems that CRTT is making things faster because it's pushing data to the server however it has some security implications. So which are those security implications? The first one is that we lose perfect forward secrecy on CRTT messages and the second thing is that CRTT messages could be vulnerable to replay attacks. Yes and that's something really important because we know TLS and replay attacks was never one of our concerns but that's going to change with CRTT. So you may be wondering hopefully I have convinced you or take your attention on the previous slide but maybe you can say that okay you're not going to use TLS when monitoring or that TLS is not yet an official internet standard which is true but however you should at least I will try to convince you because TLS is going to be presenting their browsers, implementations or even CDNs right now. So for example it will look at Firefox. You will see that Firefox has been supporting TLS 1.3 and CRTT by default for months. Also Chrome is supporting TLS 1.3. If we move to the implementations we can see that OpenSSL on the next version of OpenSSL which is going to be 1.1.1 is on pre-release status and will support TLS 1.3 with CRTT. Same goes for boring SSL and maybe you have heard the news but Facebook has just released their own implementation of TLS 1.3 which also supports zero RTT and then we have the CDNs and the CDNs may be supporting or planning to be supporting zero RTT also. Just going back a bit about Facebook and their implementation they mentioned on that announcement that they are receiving around 50% of all the traffic that they are receiving is using TLS 1.3 which is a lot. So that means that TLS 1.3 is already with us and its use is going to be increased over the upcoming weeks and months. So let's dig a bit more about TLS specifically on the TLS 1.3 handshake. So first the client will send a client hello message to the server making some educated guesses about which options the server would prefer. The server will receive that message and then we'll send back the required cryptographic material in order to complete the handshake including the certificate and a proof that he has the secret keys of that certificate. The client will receive that message, it will verify that the certificate is valid in order to ensure that he's talking with the right end point. He will also check for that proof of knowledge and then he will send that finished message saying okay we have finished the TLS handshake, let's start the secret communications. And as you can see here after the TLS 1.3 handshake has been completed application data can be transmitted securely. We have also added the new session ticket message because that's important and it will be used in the future. So now let's discuss the CRDT message which is used to do session resumptions. So imagine that we have a browser that needs to resume the previous established session with a web application what it's going to do is going to create a CRDT message. But the bits that are interesting to us is that it will contain a session ticket and it will contain data that is going to be pushed to the server that will be encrypted using a pressure key. That will be sent to the server. The server will process that information, we will check if the session ticket is valid one and also we'll try to decrypt the data. If the encryption is successful it will push that data to the web application and then it will send the response back to the to the client including a new session ticket. And then the client will receive that message and will say okay we have done this session resumption then I'm not going to send you any more early data let's continue the conversation and as you can see there the application data will be sent securely. So hopefully as you can see it may be feasible to do replay attacks and that's because the only thing that an attacker needs to have is to have that message that can be replayed to the server and the server will just check that he has a valid session ticket and that he can decrypt the data. So let's see how a real attacker may look like. So imagine that we have a banking application and there is a customer that is using the banking application because he wants to do a money transfer to one of his friends. However he doesn't know that this friend is not really trustworthy because he's the attacker that is on that diagram. Okay so the customer when he clicks submit on the browser form the browser is going to create a zero RTT message that will include that HTTP request of transfer funds and this message will have a session ticket and then this data encrypted with a pressure key. Oops sorry that message will be sent to the server in this case the attacker is not going to do anything with it he will only copy that message because he plans to replay it later on. So then the server will receive the message he will decrypt because he has the right pressure key and will send that message up to the to the web application which will perform the first money transfer and then the server will send back the response to the browser. So what could happen if the if the attacker replays that original message? Let's see. So as that message has the right session ticket and is encrypted with the right pressure key the server will receive it process it send to the web application which would perform the second money transfer and then as we can see the attacker can do this as many times as he wants he just need to keep repaying that original message again and again. So is it everything as bad as this looks like? Not really. Okay the working group put a lot of effort in order to describe these potential security risks and security implications regarding the zero RTT functionality and they also added within the RFC the recommended protections and even mitigations. One of those two protections is single use tickets. With single use tickets the server is able to prevent replay attacks because it has a database of fresh session tickets. How it will work is when the server sends a session ticket to the browser it will add to his database and when he receives a zero RTT message with a session ticket he will verify that that session ticket is on the database and then he will accept the message and then will remove that session ticket from the database of fresh session tickets. The next time he receives a second message, zero RTT message, he will check again that session ticket and will find that it's no longer in the database and then he will read that message because it means that it is a replay attack. So it seems that this protection is quite good however it has one potential issue and it's how you keep that database synchronized in medium or big environments and that's the challenge here is to synchronize the database across multiple systems without allowing and without creating an opportunity window that an attacker can take advantage of. Another protection will be the client-hello recording. Same is similar to before in this instance the server will keep a list of all the client-hello that he is receiving so the first time that he receives a zero RTT message he will store that client-hello on his list and if he receives that message again he will see that that client-hello has been already processed so he will read that zero RTT message. Same as before the challenge here is how you synchronize that list on global and distributed environments. Another mitigation that is specified within the RFC is called freshness checks. So when the client is sending zero RTT messages to the server it's including a time stamp which is basically from the perspective of the client when that message was sent. So what a server can do is that he can just read any messages that has arrived outside an acceptable time frame window. Another protection that is mentioned in the RFC is application profiles and according to the TLS 1.3 specification or to the RFC let me see if I can quote it properly. Application protocols must not use zero RTT data unless it has a profile that defines its use which basically means that the application should be able to define which functionality or which paths are going to be exposed over zero RTT. Application profiles is a RFC which is related to TLS but it's still working progress. And after that we can have different other types of protections or mitigations. For example OpenSSL has decided to have segregated APIs for the traditional TLS and this new zero RTT TLS feature. That means that if a developer wants to use zero RTT it's because he really wants to do it and because he ideally knows what which are the potential security risks. Other security controls can be added also at the browser or at the server level like for example not allowing zero RTT on only allowing zero RTT messages on HTTP safe methods which would be get, head or option methods. Finally what also can be done is just for example for the requests that are being sent to the web application make sure that those requests are idempotent. What means that? It means that the final state of the web application or backend it will be the same independently of how many times you receive the same request. If it's once or multiple times it shouldn't matter. Now let's see here a table that we have put together of after our research of what we have seen so far. So the first two columns are basically related to the two protections that are mentioned on the RFC. Single use tickets and client hello recordings. You don't need to implement both you just need to implement one of those two. Then the third column is for application profile and finally we have added a fourth column for some interesting notes. So as you can see here open SSL is using single use tickets and as I mentioned before it has different APA in order to handle the zero RTT and normal TLS. Warrior SSL has a support for zero RTT but it's disabled by default. Cloudflare is working to implement single use tickets. They have implemented application profiles using HTTP headers and they have zero RTT disabled by default. You can enable it but you need to go to the dashboard and doing that explicitly and if you enable that zero RTT will only be available on HTTP safe methods like get and they added on top of that another protection which is that they are only allowing get methods without parameters for zero RTT messages. Then we have Chrome. Chrome has no zero RTT at the moment support and Firefox is support zero RTT by default and as we can see here it will only send zero RTT messages on safe methods. In this case get request will be over zero RTT but not post request. Okay so we are going to show the potential impact of zero RTT when an attacker is in the middle of the communications path between the web browser and the web server. Of course both the web browser and the web server will have TLS 1.3 and zero RTT enabled. As a web browser we are going to use Firefox with HTTP 2 enabled which is already enabled by default. As a victim application we are going to use our own banking application which uses a get request with REST format to perform a money transfer. Firefox only uses zero RTT for safe methods. However how many applications you get to perform actions which should be made using post or other methods but we see a lot of them while we are performing web service assessments. In a normal situation in which the web browser well in which there is not any attacker in in the middle of the communications the web browser will only show a message or will only send a request using zero RTT the first one. Then the TLS connection would be established and the following request will be sent using this created secure channel until the KIPA lifetime times out. So this is why we think that it is highly unlikely that an attacker could catch a tempting request to be replayed only with passive techniques but let's see this with a video. As I mentioned before we are going to use the latest Firefox version. This is the tool that we created to test the replay attacks. The tool is in the middle of the communications and in this first mode it will only show a message when zero RTT is detected. The tool is not a HTTPS proxy it is only a TCP proxy which means that it is not the TLS termination point and therefore it cannot see the unencrypted data. However it can see the TCP the TLS packet headers and using this information it can detect when zero RTT is used. This is our banking application. The domain points directly to the web server and as you can see the certificate was correctly validated by the web browser so I would not note that we are performing the money in the middle. As you are performing requests nothing is shown by the tool because nothing is sent using zero RTT. As seen on the timer we go forward three minutes without performing any request to consume the KIPA lifetime. Now that the KIPA lifetime has been consumed the first request and only the first request that the user performs will be sent using zero RTT. This is the request and this request could be potentially replaced but the next requests until the KIPA lifetime times out again will be sent using the established secure channel. This is why we think that passive attack is unlikely to work. Okay but can we control when the web browser uses zero RTT? So can we improve this attack? The response is let's see. This is the TLS handshake that Alejo already explained. After a full TLS handshake or a zero RTT handshake we want the server to receive the HTTP request and the browser to receive the server response. After that if we don't do anything the next request will be sent using the established secure channel like we show before. However we can finish the connection at the TCP layer by sending fins or reset packets and then the browser will send the next HTTP request using zero RTT. If we do this for every new TLS connection there will be much more chances that the attacker can replay the request that he wants because the most part of the request will be sent using zero RTT. Let's see this with another video. Well now the tool is configured to do this technique. Now it's hosted behind Cloudflare with zero RTT enabled. As you can see now the most part of the requests are sent using zero RTT. Well due to the use of HTTP 2 some of the get requests are not really sent over zero RTT. Only the HTTP 2 preface is sent over it and the real request is sent later in the established secure channel. However we have noticed that for the requests initiated by Ajax the most part of them are sent using zero RTT. Now we perform a money transfer of two dollars but we don't want to replay it just to demonstrate that we are not tricking you and as you can see we have one money transfer. Now we perform a money transfer of three dollars and this time we want to replay it three times and refreshing the transaction list it can be seen that the attack was successful because well the only the user only sent one money transfer but we have four. Okay but now we have seen that a replay attack can work against a vulnerable application which is hosted behind a server which doesn't implement single use ticket or client help. What about a server that demands these techniques. Is it possible to replay yet? Well as you can imagine the response is yes and I'm going to try to explain how. In this situation the web browser will send money transfer request using zero RTT. The attacker intercepts it and sends it to the web server. The web server will accept it because it is a fresh zero RTT. At this moment the web browser is waiting for the server confirmation that the zero RTT was accepted but the attacker sends this message. The attacker can well open in any UTCP connection but he sends again the same zero RTT packets to the web browser to the web server. And now the web server rejects it because it is implementing single use ticket and a simple reply like this one doesn't work because it is a non fresh zero RTT. The attacker now sends back the rejection to the web browser. From the point of view of the web browser the zero RTT was rejected and no money transfer was made. However in reality one money transfer was made. According to the TLS 1.3 RFC after a zero RTT rejection a full handshake has to be done. So the web browser and the web server do the full handshake and after that the web browser since it thinks that the money transfer was not made at the first time now it repeats the request the HTTP request and the web server accept it because now it is not using zero RTT it is using the established secure channel. So after the attack from the point of view of the web browser only one money transfer has been made but really what has happened is that two money transfers has been made. With this we can basically perform only one replay but at least we can perform one replay against a server which has these anti replay protections. Let's see this in a new video. The tool is now configured to perform this last replay technique in combination with the killing technique of zero RTT. The banking application is now hosted behind a reverse proxy which has enabled zero RTT. This reverse proxy uses OpenSSL the pre-release version which implements single use ticket. Like in the previous video we perform a money transfer of two dollars without replaying it and refreshing the transactions list can be seen that only one money transfer was made because we didn't perform any replay attack. However now we perform a money transfer of three dollars and we perform this last replay technique in which the web browser helps us and as you can see here instead of having one money transfer we have two money transfers so the attack was successful. Okay this brings me to tell you that we are going to release this tool and if you want to use it you have to redirect somehow the traffic from the web browser to the tool. As you saw in the in the demos we were using tags for the HTTP requests like for example send money. The tags are based on the encrypted packets lens and you can create them in the monitor mode of the tool. The tool also provides two other modes to perform the two different replay techniques and also with the kill parameter it performs the killing technique to force the web browser to use zero RTT and all. The tool should be available now at this Github repo. So let's talk about the side effects of zero RTT. When we deploy previous version of TLS how the data is being transmitted is totally transparent to the web application. However with zero RTT that's going to change because it creates a dependency between the TLS and the application layer which was not present before so that means that the application will need to know if zero RTT is being used so he can prevent replay attacks and at the end the ultimate responsibility would be on the application itself to prevent replay attacks and you can ask how we can do that. Let's see what we can do. So first thing that you can do and you should do is disable zero RTT and only enable it if you are really really really sure of what you're doing. Other things that can be done is just for example you can try to make sure that your application is and is replay safe but that can be quite a challenge but if you go there what you can do is you can apply I street cross request for the policy not only at the session level not only at the form level but at the request level. Another mitigation that you can deploy is to migrate those get requests that are not replay safe to post requests and why because most likely the browsers are not going to send zero RTT data on post requests. Also you can make sure regarding the web services and especially with the rest web services you need to make sure that those are developed properly and that get, post, put and delete are used properly and with regarding the get methods you need to make sure that those sessions are either read-only or idempotent and finally you should deploy a street application profile which basically defines which are the functionality that you really want to expose over zero RTT. To finish this presentation we have some takeaways the first one is that TLS 1.3 is awesome and all of us will use it but take care with zero RTT. The second one is that your application should be zero RTT a web to prevent side effects and the last one is that maybe you need to change your application or your server configuration in order to prevent replay attacks. Thank you so much and if you have any questions we will be around.


After what feels like years of waiting, we finally have a new Dragon Ball game in Dragon Ball The Breakers and it's uh... Well you know, it might not be easy on the eyes, but it's a lot of fun. I played the game day one with a lot of people over on Twitch, so I wanted to put together a highlight of moments as I was learning the game.  Alright chat, this time we're making it. Yeah, I'm doing it really hard. This time we're surviving.   I did the Kaio Ken thing, but then I didn't know what to do. I mean that's really it. You're not going to win those fights alone. I just thought it'd be funny if I made you go fight them. Oh, you made me think I could do anything. What's your number on your profile pic on the bottom left? What's your number? A 1, and it says R1 change. What's that mean? R1 change? That probably means you can go into your form. Don't do it now. Oh! Go fight Majin Boo. Go fight Majin Boo, Barry. Go, he's up there.       Kick his ass! Yeah!   Alright, you might want to start running.  I pissed them off to go and fight him! Run, because he escaped. This way, this way, this way, this way! Well, you trans- No, well hold on. First of all, you're transformed. You should always just keep it, honestly, and use it in like a pinch. I didn't know what the fight did. But you powered up immediately, so I might as well make you go fight him.  I'mma emote on Frieza. Hi, Frieza! Alright, maybe Frieza is the one we can beat.  Alright, Kenza, hear me out. I think we avoid it. I think we just do everything we've been doing the right way, and then we do it right, and don't die. Okay.  I see Frieza's dumbass flying around. Wait, is that the Doria? I definitely have to be. There's no way, who is that? Man, he's just sitting there.  Oh, there's different levels to the radar?  Wait a second, what are you- We're rescuing Namekians. I didn't even put that together. Frieza, second form. Be free, little guy.  Whoa, you can like taunt the lobby.  Oh, Frieza don't know about me. Shit, I'm gonna get this. It wasn't worth it, it wasn't worth it, it wasn't worth it. What is the scouter doing? Oh, I think I died here. You're dying! The bullshit! Did you die?  Boss, wait, this is literally sniping you out of nowhere!  Like, I'm actually fucked. Am I dead? I'm actually fucked. I'm fucked. Yeah, go add them, smash them. Oh, you are- you are- thank you. This guy is the best guy I've ever got. You are- you are the goat, my man. You- I appreciate you. He's the guy of all time, I think. He is the guy of all time, but I- Oh shit, I just- This Frieza's kind of slowing down, though. I'll give you a dollar. Where are you? I don't know. Don't know. Well, you're over there. Did he get you? Well, yeah, I was- I grabbed something, and then I just got lasered out of nowhere. It's okay, 14 seconds. It's not my family, I love them. No, I'm gonna come save you. It's not gonna work. Didn't expect to see me here, huh? What? Dad! I'm a hero. You're that guy! I've always been that guy. Now remember to pick up your barrier devices so you can get your barrier back. Welcome back! That was so- W-Rizz, that was so cool. Use your barrier. Now! RT, and then follow it, like, right trigger, and then the shield, whatever the shield button says.  What?! Uh, where'd he go? I went to a cave.  Shit! I made a horrible decision to come out of here. No! I tried myself! Use your thing, use your thing, use your thing!    No, no, no, I'm underwater, I'm underwater. The startup system? Oh, the super time machine is here! Oh, he's transforming. Does he wanna go- He's trying to buy time! Leave him alone! Hey, leave my friend alone! Kayo! Gaaag! Eeeh! Beach!   Everybody's jumping him! Kenzie, if you're here, I can use your help on the time machine. I'm here, I'm here, I'm here. Everybody, if you're not- If you're not fighting the villain, get out the time machine! We gotta get out of here! I'm actually the startup! Oh, it's my turn! I'll hold him off!  Damn, he got hands up!   Hi, Dotto! I'm watching you get down! Get out of the time machine!  Yeah, yeah, heal it, heal it! There you go!  Go, Kenzie, go, Kenzie! Stay behind it! Just keep, keep cover, keep cover! Nice moves! Shit! I didn't get the solar flare. Dotto, come here! Ew, what's up? One last time.  No, shit! Are you gonna- No, Kenzie! Not me, too! Are you gonna be first? Are you curling you?  Are you watching now, Vince? Vince, how come Vince wasn't there when we were- when we was in with the ship? Oh, wow, nice to see you! Oh, I noticed you didn't go super sad with Kenzie guys, huh? I was already fuckin' dead. Vince was the first to fight- Oh, is that true? Vince is just good at the fuckin' game, man. Whoa, this guy's got movement.  Somebody's fighting Frieza again. Oh, it's Israel Zuna in his 18 cosplay! Whoa, he's back to be in that guy! Whoa!  Maybe they have a slight chance. The time machine is pretty busted up, though. But Marvel's workin' on it, Marvel's workin' on it! These guys might be able to do it! Vince just needs some help. I don't know why- Oh, Israel Zuna's out of his form now. Oh, they're done. Whoa, how did you get his key bonus? So there's more people dead? Yeah, these guys are probably done. Vince's kinda good at the game. He is, he's up. There goes the time machine. I kinda want him to get the dragon balls. If Vince goes- If Vince powers up, this guy is fuckin' good. Yeah, that other guy has it. We just won't give it to him. They might be able to meet up with the Saiyan Pop. Yeah, let's go give it to him, give it to him, give it to him, give it to him! Yes, yes, yes! No way! Let's go! Oh, they might be able to do it! Oh no, they're just gonna escape, though. Okay, well, that's how they- No, he put it- he put it down for Vince. But I don't know if Vince is gonna take him up on it. Oh, he's not, they're out. They're out. Wait, did- is it glitched? What happened? I can't even- Fuck! He got fucked! Fuck, the game broke! No!  Oh!  Alright, I'm rescuing my first civilian already. This is the escape round. Oh, baby, this is it. No, I don't rescue civilians. Why not? Why? Because we want- we want them to get stronger. You know what I mean? No, not for- Leaving for- leaving for Spopovich, bro. Not gonna- not- that's not me. Do you want a challenge? Dude, it's so easy, bro. Bro, I'm gonna win. That's what I want. I don't care if it's a challenge. I don't care if it's bad. Alright, I see that. I mean, how many wins do you guys have? Two of us have level one. Zero. Whoa, what a Vegeta's glove. You get a one-time Gallagun. Whoa! That's once only, though. Is that Dada-doya? What? With a red pants? Yeah, and the Gallagun gloves. Yo! We haven't found a single key. No, but what do we need keys for? Spopovich is still running around all scared. Not all trying to find you. I'm right next to you. What? Yeah, right here. I'll just leave my chocolate. Is something really looking hard or hardly looking? Spopovich, do you really want this? Spopovich, do you really want this, though?  Where'd he go? Damn! Damn!  Oh, my God! Help me! How? You asked if you wanted the hands. Yeah, I was wrong, bro. I didn't want the hands. Wait, though. Somebody's beating up on him. Or he's just a human, man. Bro, and he's stronger than he looks. Oh, Spopovich better hope he finds you soon. He better hope he finds me soon, though. He's got to transform, boys. If anybody has a barrier restoring device, I'd appreciate it. Oh, I found it. Never mind. I'm playing the game right now. I am genuinely playing the game right now. I've got level two. I'm ready to play. Is Spopovich not transforming yet? He's got to go, he's got to go take it back, you know? Got to take the energy back to awaken Majin Buu. Knocked him out. I got a dragon ball! He's going up. Sounds like it might be, uh... It's Majin Buu time. Majin Buu time? Oh, no shot, Tom. But he's innocent, so he won't do anything to us, right? Dammit, he's too strong for me now! Dragon ball for you, doll. You have four dragon balls, doll. I know, I'm working pretty hard to get these. I'll find the other ones, I'll find the other ones still.  Hey, Gen Z, how do I take you? Hey, yeah, look, I got this for you! Happy birthday! Thanks, no shot! You got that for me! Yeah! I've encountered Majin Buu a lot of times. Oh, no! That's not us, that's not us. It's close to us, but it's not us. How many more do you need? Um, I think you just need one more. Oh, do we have that many? Well, I think Ariel Zunia has one. That Buu can't sense Ki, apparently, so we're good. Yeah, he can't sense Ki until he plays Super Buu.  Do you want my ride? No, I was going to put the trampoline down. Alright, we only need one more.   It does not go all the way up there. Does it not? No, I guess we just have to climb up. The highest you can go is three without the dragon balls? Yes. Are you three? I am three. Alright, I'm by the dragon thing. If somebody wants to bring me that final dragon ball, I would not complain. Is that it? You find it? No. Do y'all know where the power key thing is? Do you see it? No, I found the dragon ball. Somebody cover me. You did? Buu's right here, though. You found the ball? Oh, there it is. Buu's on the dragon ball. We need to get B. Where'd the dragon ball go? Did Buu pick it up? Buu might have it. Yes, you got to go punch him in and he'll drop it if he got it. I'll rush him for you. Yeah, if somebody could Kyle get rushed up, I could slip in and maybe grab him. Oh, he dropped it. You got it? You got it? I'm going to slip in there and take it. Do you want me to distract him? I can chain.  I can't yet.  As a human, I'm going to have to Kyle can rush him.  I missed. I got it.  We got the final power key. Can you drop it? No. He's still holding on to it. I can't help you. I can't trace him over yet. I'm fine. I'm fine. We are starting up now. I can fire my rocket launcher on him.  How did he hit me with that?  That's what I need, that Dragon Ball, but I don't know how to take it from him. I'm literally hitting him. Did anything drop? He dropped. He dropped. Yeah, here we go. Put it down! Put it down! Hurry! Yes! Good job! Yeah, go summon. Go do it. Go do it. And then I'll transform. I'm on it. I'm on it. Just distract him.   Beat his ass, Nano! 5 more seconds! 5 more seconds! 5 more seconds, guys! 5 more seconds!  He's here! Yes! Good job! Good job! Beat his ass!  You're him! You're Lillian! I want to get stronger. Tien is coming! Whoa! You're mine, Buu! Yes! This is so cool! I'm watching from down below. Wow! It's like the Disney fireworks. No, he hit me. I've been waiting for Tien to have his moment. Bitch!  Good job, everybody! Do the Kiko! Kiko! Kiko! Kiko! Get away! Drive him! Drive him! He's trying to kill me. How did he hit me? Yeah!  Oh my god! He's here for the moment. I'm just enjoying the moment. I'm here. I got knocked out.   I still have my Gala Gun. We got him! Just beat his ass! Just beat his ass! He's dead! He's dead! Yes! He's dead! I can't do anything though! We got him! Get away!  Yeah! I got kicked, so that was really cool. I was like, where is Dano? Yeah, I got kicked. Let's go! What? They lucky that my level three was actually my worst guy. I don't know why Tien's my level three. We did it! Wow! That was awesome!  Dude, love you! Yeah, that was so cool. I loved it. The one time where I got kicked, that was really cool. Wait, did you get to fight him though? Or did we do that without you fighting him? Yeah, I literally transformed and then it came up and said, easy anti-cheat is the same. Damn! So we didn't even go full power with him. Kyle can't even shot him with my gun. Damn! I got that dog in me! Wait, why didn't you show me as the baby? Oh my God!  There is the enemy! Barry, remember what you said. Save the men and children. Yeah, remember you said kill the women and children, spare the handsome men. So I don't want to do it, dude. I don't want to do this. This is a lot of pressure. Do you want me to press my bell? Nah, nah, you can stay here if you want. What if I just mute my mic? But you can listen to us. What's up, Donald? What's up, Nino? It's crazy over this area with trees around us. Oh my God! There's a little guy running around! Yeah, you're the larva.   That's what I'm saying for a while.  I'm already at level one, by the way. What? Yeah. You're not lying, you are. Yeah, why would I lie? Well, that's crazy.  Please, no, that's so embarrassing. As a bug, I'm going to take you out. I would still love you as a Cell larva. I haven't seen his gloves. I can't find anybody. I'm level one now too. Oh, Nino, let's go. Wait, there's another one over here. Hang on. He used a dragon ball in this. How do you find a dragon ball? I have a dragon ball. Do you? Yeah. Oh, I have a cool down drink. I don't really care about that.  Well, there's only like one attack button, so... It's where I can't get out of this hole. I'm stuck, actually. I think I'm in baby jail. You're in baby Cell larva jail. Oh, there we go. Nino, you want to go put her out of her misery? I kind of do, but I don't know. I can't find anybody. There's four power keys here, you know? Can you spare a power key? I've got two dragon balls. Just a wee bit of a power key. I haven't seen Steven. You're still here, right? I didn't kick you out again. Yeah, I'm still here. I just don't know any of the controls. Whoa!  Kenzie, find you. Wait, what?  Shit!  I don't even think you noticed. You transformed and sent me flying. You sent me flying. What just happened? Why am I shooting a ball? I have two sets of Vegeta gloves on.   Whoa!  You have to find us. I don't know. Cell, I think, can sense key pretty early, right? It's kind of cool. You're just enjoying your immersive cell experience. Yeah, this is really awesome. Yeah, the Raider is definitely the more fun aspect of the game. What? I like the Earth like stuff.  You can be the Raider is also really fun.  Oh, I feel you. You got to know the tech, you know? You got to understand your eye brains. I'm close to level three, actually. Must be nice.  You're still level zero. How do I sense key? It's like on your three pad abilities, that one. Oh. Probably down, I think, baby. These abilities are so cool.  Hey! Oh! Not here! Not now! No! Hey, hands off data! Hey! Leave him alone! Why are you looking at me? Don't look at me now because you don't want the hands though. You don't want the hands though. You don't want the hands though.   Nah, what did you sense of my key for? I'm right here. You don't want the hands of me?   Get the hands! Get the hands, please! Oh! I know she broke my key! Thank you! Barry, leave me alone! Just crawling away!  Jesus Christ!       Where you going? Where you going?  Hands off the merchandise! No, where you running? The stock don't is... Wait, do you actually... Of course your level three is Krillin.  Shit! Ultimate attack! Oh no! No, no, no, no, no, no!   That move does talk. Shit! Shit! Damn! I've already dropped a few Dragon Balls. Hey! Hey! Steven gets the Dragon Balls and runs! Damn!  No! We're hitting us. We just got supply drops. It could be that. Absolutely doesn't matter. Those are my Dragon Balls! They're mine now. Damn!  Oh, they got... Wait, what is that? Oh, the super time machine? Mano check came in and decided to, you know... Before I got stucked up. Steven was one frame away from just being sucked up. Oh, so I lost. Yeah. Goodbye. I was gonna say it was a good fight. It was a good fight. It was mostly fighting. That was really fun.    Wow, that was cool. That was a good last one. That was really fun. We was scrapping for real.  It hurt! Look at Peter. Wait.


Welcome to Toffy TV, a Jessica Garnagate has left Eddarton for Paris Saint-Germain on a undisclosed fee, which is around £30 million, isn't it? French media report that there's €32 million, I have to give it just £29 million but then there's bonuses in there, so hopefully, and it will go above £30 million on it because they'll be in the league because they weren't even six out of the last seven. And they'll probably get the quarter-finals of a Champions League, I should imagine. Have a decent lead against someone I'm probably blowy. Probably. Yeah, that's what they're generally seen to do, but it's what we were expecting really, it's what we've been expecting from since January, isn't it? It's just, I suppose for us, it's a little bit disappointing that it's happened so late in the marchi because I know he's had the African Nations and fair play to McGenny, he's been 100% focused on that. But number one, it is a big loss, no matter what anyone thinks, he's been, certainly the second half of the season last season when our phone picked up, he was absolutely brilliant, he helped this team play the way it wanted to play because the way he breaks down attacks and then sets everything forward, that's going to be really difficult, I think, to replace. Yeah, he's been incredible, hasn't he? Seven million quid from Villa brought him in and we gave Steve Wall-Stich and some of it's justified, but Garno was one of the successes of a time. Incredible, you know, 99 league games across three seasons. We had to play 33 league games every year for the three seasons. But he was absolutely brilliant for us, really was. Like you say, we expected him. We've expected this since January when he didn't get the move. Yes, it's dragged on, but if you believe the report in France, there was a little bit of two-and-and-throwing between Lee and Ardo's, they're sporting director now, and obviously Thomas Social, who wanted Garno and has maintained that. But it is a big blow to Everton, we can deny it because he's been a fantastic performer, he's probably been our most consistent player over the last three seasons, I would say, comfortably. I mean, that's pretty easy. It is, but there's a lot of other players who've been there, so what I'm saying is he's been that good to come in. No, he's been brilliant. And he surprised us all, let's be honest, when we got him, we were all a bit like... He really remembered when he played against us with Villa, so he come in and now his numbers were great at Lale, on a new team that looked at him earlier in his career. But it will be a massive blow to us, but the flip side to that is it's an opportunity for Everton to create a different type of midfield. Dave, for Paratons, I think the reason they're back in the 29-year-old, they give him a four-year deal with an option of a fifth. I can imagine they'll do that because I think he's so fitting, and the way he plays, he's just get around the pitch so well. I know they're looking to find a tough player playing that kind of thing. I think in the Champions League he'll be brilliant as well. Because he doesn't give away that many fouls. He only gives away fouls when he needs to give away fouls. And even, he's one of those players that in lots of games, he's been booked in the first half and you get worried and it's never a problem.  I mean, he didn't come in the last game against Arsenal, but maybe you've just won to Ronald out of the new. No, but he's tended not to and Paratons are getting a different kind of player, a more professional kind of player. I think maybe that's a change for them, and I think he'll be brilliant for them. But I think for us, listen, the way of times, and we were saying it, even in parts of last season, when we were saying he doesn't do enough, we need someone like a decori who can do both sides of the game. It just happened that towards the end of the season when actually the team started to look like it had more of a shape, that you could start seeing what his role was, because everyone else was doing their job. So maybe early on in the season, when people weren't doing their jobs, we were looking for him to do more, because other people actually weren't doing more. But as that double pivot, as they call it, he was instrumental in winning the ball back, giving it to someone like Gomez and getting us going, getting us higher up the pitch, allowing us to counter-attack quickly. And we've got to find somebody who can do that. Maybe in the short-time, it might be someone like Fabian Delphiwm. He's not a natural successor to him at all. Fabian Delphiwm is more of a passer, more of a Gomez kind of player, actually. But in the short-time, we've got to get that replacement in. And hopefully, if we get something to replace him, this player is in there like Delphiw, who can come in, maybe Snidelin, who can come in and sort of steady the ship early on and allow someone to come in from outside, who can take that on long-time as a younger player, who can come in and get used to the Premier League. Yeah, I mean, Garner's big strength for winning the ball back then. He had still had a very good pass completion rate. I think his pass completion rate was 90s, or certainly closer to that. A lot of it was sure pass, but it's just fine. What we saw from Garner in the final 10 games was an ability to play a little bit higher up the pitch, cos I think once the team settled down, Marko Silver was encouraging him to get forward and do a bit more, and we've seen a slightly different side of him, which made him a better player. So we can get someone who... I've said this, you know, when me and Andy were talking about, you know, Gabbannon, the possible replacement, is that what you might lose in Garner's ability to press and get it back, and you didn't get anything else from him. If you can get someone who's better at doing the forward play, but can still do similar to that, overall, it might make them feel better. Doesn't mean he's not going to be a loss, cos he is, cos he's treated the way we play, but you're right, I remember me and you sitting here in January and going, if they pay 30, 35 million, then why won't we sell him? Because he's 30 this year, and we can get someone else. His performances after that, after the bit, you know, he was out for a couple of games, and then he came back, and he was brilliant so much as where you were thinking. Oh, it's just rather he stayed. But you've got to look at the whole thing, you've got to look at Marcel Branders coming, trying to drag the 80, the team right now. We'd have had to give him a new deal, big money. But I do feel like this is a big blow for Silver though, cos you could tell that Silver really wanted to keep him in January. And in January, obviously, it was a lot easier to keep, and you put your foot down, but it's got to this point now. And even at the weekend when he was saying, I'm still trying to convince him to stay, Silver knows how much of a big part of the team he is, and how if that replacement doesn't come, he's going to have to change something within the team to deal with that. Cos what he was brilliant at as well is, he's brilliant at being at the right place at the right time, or getting over to a position where there'd be right back, left back, helping the centre backs out, and just getting in there and it went... Say, if we doubled up on a player, he would always come in and just clip that ball away, and we'd be a quick feat, and we'd be away, and that's what he was brilliant at. And I think, as a season goes anyway, your team will change and evolve. We've seen that last season, so it might be a bit of a difficult transition at first, but we're going to have to deal with it now. That's just the simple fact, isn't it? Players come and go, don't they? You're altering slightly, no matter what. But I don't... Listen, I'm disappointed. He's gone cos I'd rather he would have stayed, because you're trying to keep a settled team as what you finish the season with. So when I have two players starting that settled team, you finish the season with, obviously, cos Zoom has gone back to Chelsea. But sometimes you can look at a player at what he does and he's doing well because the team has deficiencies in it. Whereas you've ever addressed some of these deficiencies, then we might miss them as the way you think. Do you know what I mean? If we can get on the ball a bit more, if we're more clinical, we're creating more... The big thing, and Andy, the people tell you this when he's in here, you know, when you talk about us not scoring enough goals, but we also said a theme that ran right the way through the season, what we were saying, and Andy said the same thing. We don't create enough, and he looks at the two midfield players as well and going, they don't create, Garnon creates anything. So you might get what I'm saying, you might still get something that you can do the defensive side. Maybe not as well as Garnon, but he can do create, he can create a bit more and go back on, certainly... We're waiting to see, it's going to be a different... I think it, you know... But it is a big loss, it can't... It's a big loss, it can't... Listen, the fella's left the club and he's, you know, I think he leaves with everyone's best wishes.  That's fair enough, I don't think anyone's had any problem with that. You know, he wants to go and play Champions League football and this is his big opportunity at a club that has been made in the last few years, it's a big club. And it's great. Let's meet, he grew up in France, didn't he? Wasn't he happy, I see, when he was a kid? Someone said, I don't know, but I'm sure someone said... Well, he's probably, he's played in France and this is a big opportunity now to play for... Family back to where they are now. Big club in France, so it's, you know, for him, it's the right time. He's done things in such a professional manner, as we've said before, when he was denied the move, he didn't soak, he got on with it and actually was better and the profession hasn't come through. And it was almost like, you know what, I've got a few months left at this club. I'm going to be brilliant. I am going to be brilliant. Well, he goes with our best wishes, doesn't he? It's with all disappointed he's leaving and there's not, I don't have any animosity to him. I just think we'll miss him because he's being... He's just got on with his job and he was great. The real question is, will Zach be getting a garnet PSG top? I don't know. I don't know. I don't know, really. He's got his Brazil, his Ritialason, and he's got it on today, looks amazing. His white Brazil could be brilliant. I'm sure that he looks amazing on that 21. Brilliant. I love it. I don't know, probably because he's getting... I'm having to get all that. I will if you send me the bleeding links for it. And I end up going, actually, yeah, yeah. Best uncle he's got. Yeah, you just pass it to me and I'd buy it. It'd be better if you bought it. There you go. Garnet has left Everton Football Club. What do you think this means for the team? Let us know your thoughts in the comments or are you massively disappointed? Or do you see this as an opportunity to bring the age of the team down, go out there and get someone who can replace him for the next five or six years at Everton? Certainly for the money we've brought in, it seems a fantastic deal. We've nearly quadrupled the money we paid for. Let us know your thoughts in the comments. Thank you for watching Toffee TV. Don't forget to subscribe. We'll be talking about this later live on Patreon. If you want to join us there, the link is in the description. Thanks for watching. We'll see you later.


Bismillahir Rahmanir Raheem and As-Salaamu Alaykum Ladies and Gentlemen, today we are back with corporate governance and we are proceeding with our journey and the journey is basically to understand the implications of the press in relation to the different stakeholders and the different shareholders. What we have been seeing in the past is that the press has a very fundamental role because it basically acts as an external accountability institution or as an external whistleblower. It provides indirect and implied protection to the internal whistleblowers and also to the internal employees and it tends to project those issues and those items which are pushed under the carpet and are not being addressed by the management or by the board of directors and then the press does investigative journalism and then tries to understand what is happening and how all of that is particularly happening and then what we see is that the press basically acts as a bridge between the government, the regulators and the board of directors and the management and the employees and also in between tends to encapsulate the different shareholders. Now what we see is that in this whole process there are different possibilities and different opportunities and some are positive and some are negative and another very important dimension is that when the press becomes selective or when the press becomes discriminatory or biased then ladies and gentlemen we talk about a very important issue which is called selective coverage. Now selective coverage is the topic of today and we are going to see how this tends to reinforce or undermine a particular organization and its board of directors and management because this is what is being seen that with the advent and the further nurturing of the different media their role is expanding and increasing with every passing day. Now when we are looking at selective coverage ladies and gentlemen then the critical issue in media coverage is the credibility of the information. So again there is a lot of news and there is real news and there is fake news. So that distinction has to be done that which is the real news and which is the fake news and media should be avoiding the fake news but unfortunately now fake news is more than the real news and to authenticate all of that and then to understand its very simplifications is a very colossal endeavoring all together. The issue of credibility is particularly delicate because it opens up the question of newspapers incentives to conduct further investigation. So again the whole issue of credibility or reputation is at the forefront of media coverage and again enables the organization to move forward through investigative journalism or tend to backtrack and then it is very important that whatever information which is being shared on any of the media coverages it has to be authenticated by some gentleman source and the media is responsible to ensure that it is able to extricate the real factual information. Newspapers do have an incentive to enter into side deals with the parties involved and be paid for not to reveal damaging information. So this is also done that sometimes newspapers tend to blackmail institutions and they extricate money for not publishing a particular information or a particular post that's to increase over the whole future advertising revenues in exchange for stories that reflect well or badly on company management. So this is another thing this is a tool which is in the hand of the management and because a lot of money is usually spent on advertising then through advertising the management can channelize its revenue to those media platforms which are more conducively and positively inclined to the organization and this itself tends to create a whole process of manipulation and exploitation which should be avoided at all costs. So again it could be increasing or withholding advertising revenues and it could be based upon reflecting well or badly on the company management and therefore this bias, discrimination, favoritism and if we stretch it corruption is very detrimental to the whole relationship of the press with the other stakeholders and again tends to undermine the press as a whole and can have many repercussions at the end of the day and that is what we basically are trying to understand. One of the premise where the newspapers have credibility and thus avoid side deals for fear of losing it. So good reputation newspapers like for example in Pakistan we have done tend to uphold the right news and not go into fake news because they have a high level of credibility and they don't want to lose it. Another is where the newspapers do not have credibility and happily accept rives not to publish damaging news. So the smaller newspapers as we see the evening newspapers that we have over here in Pakistan they tend to have sensationalism focused news and there are even some national newspapers unfortunately who basically are spreading different information based upon sensationalism and based upon that sensationalism they tend to blackmail different situations and individuals which is absolutely abhorrent and has to be curtailed from the very grassroots level because otherwise the press as the fourth pillar of state would be compromised and that would have many negative repercussions because then the elite would further exploit and move forward in whatever they are doing. The factors which determine which equilibrium prevails are the competitive environment in which the newspapers operate, the ownership structure of the media and libel laws. So we see that these three points are very, very important and when we talk about libel laws then in Pakistan we don't have the tort law being practiced as per se but now with the passage of time and the globalization even the law of tort or the law of damages is being practiced in Pakistan. We also have under the Pakistan Penal Code section 499 to 501 which basically deals with libel issues and then besides that a person can also institute a case of damages against the press or against the reporter or against anyone who is damaging and bringing to distribute and individuals or a organizational credibility or reputation. So there are libel laws, there is media structure that again they are being regulated by their own associations like the all Pakistan newspaper society, like the council for Pakistan newspaper editors. Then there could be government regulated bodies which basically are the censorship boards which are PEMRA which again is about electronic media and the Ministry of Information and the role of the direct general of public relations. All of them tend to ensure that a positive equilibrium is maintained and the credibility of the whole sector is not compromised. We further see that demand considerations also lead to a selective focus on stories with a wider interest such as executive compensation levels. Readers may not be able to appreciate the nuances of corporate situations leading to new stories that simplify firm performance. So again this sensationalism, this storytelling can have positive results or negative results and therefore it is very important for the betterment of the whole media sector and also the sanctity of the reporting organization that everything is factual and they should not be moving on to sensationalism just to get a quick buck or to get millions of reviews in a very short time and that is again very sad that such things are being practiced and people are being exploited out of all of this. So this is extremely important. The demand for corporate governance, news might depend on the structure of the corporate ownership and the media selectively reduces the cost of acquiring and verifying information. So again what we are seeing is that through the media the acquisition of information and verifying it has gone down because everything is now digital and electronic and then secondly what we see is that the structure of the corporate ownership also depends upon that and their interface with the management and the rest of the employees and the shareholders is dependent upon what the media is basically projecting. This information is crucial in shaping the reputation of the key players who determine corporate policy. Only concerns about the public image would explain the responsiveness of corporate directors to environmental issues. So nowadays what we see ladies and gentlemen is that environment is a major issue and damaging the environment is actually encapsulated as corruption and therefore there is a great need to control all of the environmental factors and also the environmental fallout within the organizations. And basically we see that the media plays a very critical role over here because if they tend to find out through videos, through pictures, through interface or through disclosure then all of that becomes public and that can have immense consequences for any organization. The more diffuse the press is in a country the more companies are responsive both to environmental issues and to minority shareholder concerns. So again what we see is that if the press is widespread and is well entrenched and is basically diffused then as a consequence what we see is that the corporate response towards environmental issues and minority shareholder concerns tends to increase and then vice versa if it tends to decrease then all of it tends to slide down. So therefore keeping a balance and how many in all of this is extremely important and when we are talking about selective press then we should ensure that it should be more changed towards the positive side rather than the negative side and no one should be damaged or lose credibility or reputation just based upon hearsay. And there has to be authentication of all the information which is coming in and the press has to decide to move towards what is the truth and how it is being represented in the best possible way without compromising any of the stakeholders or the shareholders. Thank you so much.


The dynamic interactions between cancer cells and their microenvironment, including stromal cells and extracellular matrix components, are crucial for the heterogeneity of cancer cells, clonal evolution, multidrug resistance, and progression to metastasis. These interactions force stromal cells to lose function, and acquire new phenotypes that promote tumor cell development and invasion. Understanding these mechanisms can inform the development of novel therapeutic strategies and diagnostic tools for cancer. This review focuses on advanced cancer models, including 3D systems and lab-on-chip devices. This article was authored by Rogeya Bagban, Leila Ross-Hanger, Rana Jahambanes Phalan, and others.