Hey, this is Brett, and this 2022 Ram 3500 Megacab Short Box Dual Rear Wheel is stock number 14126Z. I am here at Summit Automotive in Fond du Lac, Wisconsin. Your new and used Ram and heavy-duty truck headquarters, this 2022 Ram 3500 Laramie Level B Night Edition has the 6.7-liter high output Cummins diesel, it's paired up with the Eison 6-speed heavy-duty transmission. This truck can pull up to 32,656 pounds and has a max payload of 5,252 pounds. Found those on Ram's tow guide website, I'll link them in the description below. This truck has been fully safe and inspected by our service shop, has a fresh oil and filter change, all the fluids have been checked and topped off, and it is 100% ready to go. I'm going to go all the way around in this video, inside underneath, start it up and take a look under the hood, giving the most accurate representation that I can of the vehicle. Pearl White is the color, I shoot all my videos in 4K, and if you like the video, consider subscribing to the YouTube channel, which is youtube.com slash summit auto. Click the bell notifications and get updates on the videos I do each and every day, as well as having access to one of the largest catalogs of vehicle walk-arounds on YouTube. You'll notice this one comes with the 17-inch painted and polished aluminum wheels. Part of that night edition, you get the black wheels with the polished on the inside, the circles there. That's in Rodean HTX tires, these are LT 235 ADR 17s, and they have probably about, I'd say, 50 to 60% of the tread left in the front here. Frame and underbody is in excellent shape. This is a one-owner, clean title history, clean car facts, and I believe it's out of North Dakota. Has the LED headlamps, front fender, no dents or dings on that.  The bumpers are in really nice shape, I didn't see any dents or dings or chips on there. Looks really good. You get the gloss black grille. This one does have the 360 camera on it, and the hood is in excellent condition. I didn't see any major dents or dings on there. Passenger side front fender is in great shape as well. Note that you get the blacked out RAM Cummins and 3500 logo, also part of that night edition. Passenger side front wheel, no scuffs or scrapes on there. As you go down this side of this 2000 and 22RAM 3500, take note of how clean that body is, how reflective and mirror-like that paint is. I take these HD videos, so if you're far away or even if you're close by, just cannot make the trip down, but you're still interested in purchasing the vehicle, you can see the truck, hear the truck, and have confidence in the vehicle that you're looking at before you even get here, so when you do get here, there is absolutely no surprises. You can make a smart and informed buying decision from wherever you're at. If this video helps you make that buying decision, let your salesmen know that you saw the video, it was helpful and that Brett sent you. See it has the 3M tape here, the dually tubs in really nice shape. I didn't see any danger rock chips or anything like that. Back wheel is in excellent condition as well, and the back tires have just as much tread as those front tires. This one does have the rear airbag suspension, so when you get a heavy load, it pushes that bar up and then it'll tell those airbags to pump up so that it goes back level. It's a pretty neat system. And the frame and underbody is in really nice condition all the way underneath, has all the remaining factory exhaust, so it hasn't been altered in any way, and the lower rockers all look really good. Comes with some really good looking side steps there. Dually tubs in pretty nice shape, I didn't see any major dents on there. You get the LED tail lamps, the painted rear bumper as well. No major dents on that. It does have the backup parking sensors, full towing package, which includes the receiver hitch and the 7-pin wiring. And then this is a hookup for your trailer guidance system. Tailgate is in fantastic condition as well. And note that you get the blacked out Laramie Ram and 4x4 logos back here. This does have the power drop down tailgate. It comes with a most plus soft tonneau cover. I like the material on that. I think it's a roll-up, I'm not sure. But this comes with a spray and bed liner on this truck. Fifth wheel and goose neck prep package. You get 7-pin wiring back here, as well as LED bed lights. The bed's in really nice shape. And you also get a 115 volt, 400 watt plug-in back here. That spray and bed liner goes onto the tailgate, which is nice too. That shuts nice and solidly. And as we come around to the driver's side, just as clean as that passenger side. I didn't see any major dents or dings in the box. On this side, and for full disclosure, this back wheel, very nice condition too. Driver's side, cab and doors all look really good. Really a nice truck all the way around. Heated fold-up tow mirrors. They've built in directional signals. They fold in like that. LED side lights. And you also get the 360 cam on there. Back seats on this one are heated. You get the leather and suede. No rips, no tears on those seats. They're in really nice shape. You get the power sliding rear window with the built-in rear to frost. These seats go down two different ways. So the whole backrest comes down like so. And what happens there is you get a nice flat floor all the way to the back of the cab. And if you've got pets, you can put them back here on this nice flat area. Or if you needed to take a nap from a long drive haul in your trailer, you could sleep back here too because there's enough room. There's also storage bins on this side. And the other way that the seat goes down is just the backrest goes down like so. So what happens there is you get a confined storage area and you get a little bit higher load shelf. All weather floor mats back here. Here's your heated seat buttons, two USBs, two USB Cs and a 115 volt 400 watt plug-in. Child safety locks on the back doors, the inside, and bottoms of the doors all look good. Show you the VIN sticker here. It's on the door on this one. No Canadian trucks here. And there is your tire and loading information sticker. Inside the Laramie Level B package gives you the black leather and suede bucket seats in the front. You get the Laramie stitched into the backrest. Smells very clean inside this truck. I don't think it's ever been smoked in. You get the gray piping on there as well. Driver's side lumbar, power driver's seat, factory all weather floor mats up here. Auto headlamps, power pedals, power windows locks and mirrors. You get the suede insert and kind of the diamond plated finish trim on the door there, memory driver's seat. And these mirrors do power fold in. I always like showing both sides. So you know that both sides are working properly. And then you can control the blind spot mirror, which is pretty cool. It's really handy, especially for the passenger side. Hop inside, check out the miles, the radio, and everything that this one has to offer on the interior. You can see you get the 7-inch LCD display, digital speedometer, average miles per gallon, battery voltage, water temp, oil temp, and you can change all those corners to read whatever you want. 18,405 miles on this truck. Comes with a heated leather wrap steering wheel, cruise controls and gear selector on the right, Bluetooth and information center controls on the left, and audio controls on the back of the steering wheel. There is your shifter for the six-speed ice and heavy-duty transmission, push button four-wheel drive, push button start. This one does have the Uconnect 12-inch Uconnect 5 radio. So this one has AM, FM, and Sirius XM radio capabilities, as well as AUGS and USB hookups. You got your climate controls on here. There we go. You can see you get your dual climate controls. And this one also has the factory navigation system. There's Highway 41, so that is working nicely. And the Uconnect 5 system is supposed to be five times faster than the Uconnect 4 system. And then you have all your different apps here. I'm not gonna go through everything. It does have off-road pages, which is pretty cool, but what I really wanna show you are the cameras because they're awesome. You get the 360 cam right there. All these cameras are crystal clear HD. And then you have your backup cam. You can zoom in on that receiver hitch to get hooked up to your boat camper trailer the first time, every time. And then you have your wide view of the back, your wide view of the front, wide view, narrow view of the front, and then your cargo cam. And then these are my favorite cameras. You can adjust where you're looking down the side of your truck. So you can imagine if you're backing up a boat or camper, how handy would that be to have those cameras and see where you're actually turning your camper into. I think that would be amazing. Wish my truck had that. But anyways, all the different cameras there, really a nice feature on this truck. Up here is your stability control and your more tactile climate controls, volume and tune controls. Factory brake controller, here's your alternate trailer height. So that's for that rear airbag suspension. You can program different trailers and have different heights adjusted for that. So that's really cool. Factory exhaust brake, tow hall mode, front and rear parking sensors, two USBs, two USB-C's, wireless cell phone charge pad, 115 volt, 400 watt plug-in, keyless entry remote start and power drop down tailgate. Passenger side, glove boxes, floor mat and seat are in excellent condition. Once again, I don't think this truck's ever been smoked in. It does have the speakers in the ceiling, part of the Harman Kardon Premium sound system, assistant SOS buttons, map lights and power sliding rear window controls, home link buttons for your garage to our security systems and lane systems. And we'll start it up, take a look under the hood and check out all those LED lights in the front. Starts right up, no check engine lights or anything like that. I would personally like, thank you for checking out the video today and hopefully from this HD video, you've been able to verify the quality condition options and cleanliness of this truck. There are those LED side lights, they are very bright. And hopefully you enjoyed the video. And if you're in the market for this truck, I would highly recommend it. I think you'd be really happy with it if you came to get it. Under the hood, we have the 6.7 liter high output Cummins diesel. It's got 420 horsepower, 1,075 foot pounds of torque. And engine base very clean runs, very smooth. Once again, this truck has been fully safe and inspected and is 100% ready to go. There's the emissions sticker. And I would highly recommend this truck from a quality and condition standpoint. I'd ship this one to California, Texas, New York, Florida, wherever it's gonna go, whoever's gonna get it, it's gonna be very happy with it. And to see more pictures of this truck or one of our 550 new and used cars, trucks, SUVs, minivans, wranglers, you name it, we gotta go to the website right there at summitauto.com, full pictures and descriptions of every single vehicle, all at summitauto.com. And if you'd like to check out more HD videos, you can go to youtube.com slash summitauto. Click the bell notifications, you'll get updates on the videos I do each and every day, as well as having access to one of the largest catalogs of vehicle and heavy duty truck walk-arounds on YouTube. Over 8,000 videos in counting and a lot of RAM videos there too. In fact, the second you'll see a link to subscribe to my YouTube channel in the upper left, a link to all the RAM 3,500 truck videos I've ever done in the upper right, link to this vehicle on our website and lower left and a link to one of our latest YouTube videos in the lower right. Click those, check us out. We're super excited to help you with this ultra clean 2022 RAM 3,500 mega cab in a short box, duly, Laramie level B night edition in pearl white metallic. Thanks again for checking out the video. Remember to like, subscribe and share on the YouTube channel. I really appreciate it. Thanks again.


I'm joined in the studio now. Let me first tell you that there's a winter wellness event happening in the Radisson Hotel tomorrow the 12th of December between 12 noon and 2pm. And I'm joined in the studio now by Bill Vaughan. Good afternoon Bill. Good afternoon. How are you? Nice of you to come up and see us. All good with yourself? Yeah, yeah. All getting ready for Christmas. All getting ready for Christmas. It's building up. Is the Christmas tree up yet? Yes, just went up on the 8th, actually, very traditional. Oh, very good. No chance rather than anything else. Okay. Okay. So Bill, we're here to talk about the winter wellness event happening in the Mount, a bigger part in the Radisson Hotel, letter Kenny tomorrow between 12 noon. And there's loads of speakers. Tell me, what's going to happen tomorrow in the Radisson? It's a community event, really. We have lots of different organisations with information stands, community group, voluntary groups and others. So there'll be lots of information people can come in and look around, talk to people at the various stands. It's also a chance for networking. This was organised between the Public Participation Network in Donegal and Mental Health Ireland. And we just thought it would be nice at this time of the year to have an event like this to get everything together, the various different organisations and the public then to come in and just see what is out there in the various lines of support. Is this the first time it's happened in Donegal or is this an annual event? This is the first time that this would have happened. There's partnership in Mental Health Ireland and the Public Participation Network, but you would have similar events like this quite often. It's a great way to let the public see faces to names of different organisations. Exactly. And who will be there tomorrow, Bill? Who can expect to be there? You have several different people. We'll have the social prescribers, someone from social prescribers. If anyone doesn't know what social prescribers is, it's a service that allows GPs to refer on someone who may be kind of having issues around loneliness, bereavement or something like that. They can meet with a social prescriber and find out what's out there. A social prescriber can then sign, post them on to relevant services. So there'll be someone from there, some of the Liddikenny. The CDP will be there. Liddikenny Youth and Family Services will be there. And then we're going to have some speakers as well. We have Cain Ryan, who's a psychiatric nurse, but Cain also is big into the sport and has gone down that line, kind of linking sport and mental health. Mental health together, yeah. Cain is going to be speaking. There'll be someone speaking about courses that we do in Donegal in relation to suicide prevention, suicide awareness, you know. And it's just short talks, it's not big long talks. The main purpose of having this was just to get everything together towards the end of the year, you know, in a way that just kind of allows a bit of networking. I think the timing of it is absolutely perfect, because as I say, this time of the year, everything is amplified. Everybody's holly jolly jolly, but everybody's not like that. And we've got to take action and support. It's good to know it supports there. I mean, we're just saying earlier on there about the radio station going 34 years now coming up. This would have been unheard of back in the day, 1990. These sort of services that you're providing would be unheard of back in the day. I think we'll have about 20 tables with, you know, different organisations on the day. You know, so a lot of those will be community groups, some voluntary, grow and aware, who would deal very much with the mental health side of things. So it's great. It's great. And you just never know what, you know, when you come along to these kind of events, the connections you make with different people. And also then maybe you'd hear about different courses that are on or something that you thought, oh, well, you know, I couldn't go for that service there because, you know, it would be costly. And you find out, well, actually, it's not. And tomorrow's event, it's absolutely free. There's no admission charge. No admission charge, no. And we're even going to provide a bit of light, shall we say, refreshments at the end. Very nice. That's a huge part of this, is the networking and socialising. And who's it open to? Who do you expect to be there tomorrow? It's open to the whole public. And, you know, we'd welcome anyone to come along to the event, you know. And it's working. It's tomorrow from 12 o'clock to 2 in the Radisson Hotel. And there's Councillor Donald Mandi Kelly will be there as well. He's there for the welcome. Yeah, I think he's saying a few words at the start. Yeah. That's good to get everybody on board on that. And you get the social subscribers as well, as you say. And I always find these events that you need help and you don't know what you need, but these events sort of point in the right direction. Well, if you need X, Y and Z, well, we're here and we can do that for you. Yeah. And that's exactly what it's for, is to let people know that there's help out there, there's support out there. There's lots of very good organisations that are willing to do what they can to help individuals, to help families, and support the community. Yeah, as I say, this time of the year, as I say, everybody's holly jolly, but it's not for everyone. So that's the Winter Wellness event. It's all happening tomorrow in the Radisson Blue Hotel here in Letterkinny. And there will be HSE assistance, safe talks for subscribers, and Ryan mental health support, mental health and sports. So Kane's all into the connection between the sport and mental health. Yeah. And then there's also going to be a talk via Zoom, but a lady called Sue Landsberg from DCM Learning, and that is looking at how to create mental health champions within the workplace. So I'm looking forward to that as well. And you'll be there yourself? I'll be there, yeah. Yeah, I'm emceeing it, I believe. Hopefully won't make too many mistakes. And you can get a cup of coffee or a cup of tea down there while you're down there as well. You can at the Eden, yeah. Well, thank you so, so much for coming on the tell us. That's just to recap on that. It's the Winter Wellness event. It's happening tomorrow, the 12th of December. Radisson Hotel, Letterkinny, 12 noon to 2pm. Bill will be there, as I say, loads and loads of help there as well. And stakeholders and support groups, stands, networking information. All are welcome, not just you and you and you, but everyone is welcome to that. And even if you're not, if you know someone maybe who can't make it, you can maybe go there and get the information for all those people. Well, thank you very much for your time. Thank you, Eden. Thank you. Broadcasting throughout the Northwest and across the world online. This is Highland Radio. Budo statue. Highland Radio.


Hi everyone, Joe for Jaspy's casebreaks.com coming at you with the 2022 Bowman Chrome team random That's gonna fill two cases. It's gonna fill an HTA case and a hobby case Two cases being knocked out and a huge discount here, too. So big. Thanks everybody for getting in. So we're only sold 29 spots We're only randomizing your names not the teams. So the names on top and they're ordered by by price So the names on top are gonna get some get some nice teams right here Point is you're guaranteed something though for getting in and at once again at a nice discount So big thanks to this group for making it happen Appreciate it. Let's roll it. Let's randomize it one and a two three times again Just randomizing your names and matching up with the teams in that order After three good luck fingers crossed one two and three easy Boom Joshua definitely had the odds on his side top two spots and a bunch of other teams as well. Thanks, Josh Thanks everyone After three, so let's line you up here And of course we'll put a rooftop next to your name So, you know you won that team in this in this filler now. This is probably gonna be easier this way So Josh you have all the teams in HTA and a hobby except for Tim you got the Mariners in HTA Jacob with the Rays in HTA Ed with the Orioles in HTA Paul with the Angels in HTA Ben with the Pirates in HTA Matthew with A's and hobby and Tigers in HTA Joshua you have the rest. Thank you. You can see all of your teams lined up right there Get it all on. Can we get it all on one page maybe? There we go. And there you go game I'm Joe for Jaspies case breaks calm. I'll see you in the next videos for those two cases. Bye. Bye


Going on everyone say I'm here with late in sports cards rip in four boxes of the sports card Almanac Well, I'm just gonna say we're ripping the sports card Almanac for Brandon a we got box number 30 Or patches a pack number 30 pack number 85 pack number 67 and pack number 24 So good luck here. What's up Kendall? Start number 30 for you here. Mr. Brandon. Good luck Good luck Brandon Planetary Pursuit it is Shohei Otani on the Uranus Hell yeah, good stuff Brandon. Love to see Uranus. Love to see it man. Nice one there It was a 209.99 a Fissi Nato. So that's number 30 do 67 next. No, no, it's the limited logos of What is it called? Dan Marino? I think it was a double. That's a nasty one. Good Lord, man 13 upper deck exquisite collection limited logos of Dan Marino number 10 of 10 Slabbed authentic on the auto if that's disgusting man Congrats on that. I've never seen I just have to say I've never seen them PSA PSA slab that thick man That's why I thought it was two of them because it looks like from the top it looks like two slabs But that's awesome man. Congrats on that Brandon. Sorry. So there you go. That is number 30 These ran for 209.99 Ken Do number 85 now Nice 22 contenders optic that is gonna be the variation auto purple pulsar breeze hall on card number to 21 I believe that is the first off the line exclusive beast. I swung there congrats on that Brandon not too shabby breeze the beast That's pretty dope Love it, man. Love it. Love it. Love it. Good stuff there Brandon. You New York Jets running back and Then finish off at number 24 here number 24 It's gonna be a wow. That's sick man Dissinguished patch auto 10 of 10 Andre Reed from 22 Panini flawless player worn on that as well That's sick part of that Bill's dynasty from the 90s Andre Reed good stuff there for colored patch auto Very nice. Congrats on that brand and that'll do it for your break buddy Get him right out to my man


like a run a run kind of memory lane kind of show today okay with Cliff Spradlin and Cliff Spradlin doesn't have a shot of Cliff Spradlin there he is that's Cliff Spradlin he's 31 30 30 sorry I'll make you older than you are and I knew Cliff when he was one week old and he was really a fantastic kid even then really yeah he was talking about code yeah that sounds right I remember that I knew you would yeah back when okay when his parents Cliff and and Phyllis we're next door to us in our law firm in the Davies building 31 years ago yeah and they were tax attorneys back then that's right now now Cliff is 31 he's got a life that we're gonna talk about he's got a wife and child outside the whole thing has come full-turn it's really fabulous yeah so nice to see you you too so I've changed yeah you changed you know what you were like that now look at you so you got into computers and that was right that was a thing that really had to happen that was a thing you were born for we all knew at the time yeah I have photos from when I was a kid from like when I say kid I mean when I was two or three like using computers actually Milo is now too but yeah well this Milo he's one and a half but I think I just I definitely fell into it I didn't really pay attention in school and I just played on computers all day and then suddenly people started paying me for it and so then I worked on video games which is like a kid's dream come to true and rocket software and most recently software for driverless cars or autonomous I'm talking about that so tell us a little about how you evolved into the into the world of software engineering I mean professionally well I used to play video games and I used to pry into them to try to figure out how they worked and I met friends online the internet was pretty new at the time but there was ways I could find people who are like MIT professors or just just programmers or software engineers on the internet it's the perfect place to find other software engineers right yeah sure well sure what better place yeah and I remember I remember you came to our office back when and you were either late teens early 20s and you told me you were working on the and I didn't even know what it was at the time the Android operating system that's true that was I worked on the first Android phone ever wow you had one you showed it to me yeah yeah it's it was so different it was different for me too and I had been working on phones previously yeah and now now it's like I don't know maybe even more popular than the iPhone so you're at the top echelon of you know a project software engineers that can come and do things that are disruptive I mean that the front end how did you get there I mean what makes it why can't I do that I think you could well I started just by learning how how computers work at a very low level like I wanted to really understand how video games work and as it turns out video games push the the limits of computers right in every dimension graphics and networking and just like simulation right like like Grand Theft Auto or something is a huge simulated world yeah and basically based on that experience I was able to work on rocket software and it's it's actually the same thing it's the same kind of math linear algebra and you need to simulate a rocket going to space before you launch it so it's rocket science really rocket science or it isn't rocket science you know I work to SpaceX and I still don't know who was the rocket scientist I would probably say the people in the propulsion department like to make the engines but then there's other people who just like you it's not enough to make an engine right it has to go somewhere so I don't know all right well just so I show that in what about Tesla you work with Tesla for a time yeah so Tesla is amazing Tesla is not like any other car company on the planet they have the hardware team and software team integrated they try not to buy parts from external companies because it'll slow them down huh and so of that yeah so it's like the perfect like incubator for new technology right and Tesla's are full of new technology whatever you think you can do yeah and I've seen Tesla release something from concept to like in customers hands on the in the order of a month or less that sounds like things that happen in China yeah maybe they're trying to copy it yeah so now it's somehow you evolved all of this into autonomous cars and I like oh and you're working in in the San Francisco that's where you live right now you have to live in Silicon Valley why why because that's where it's where all the energy is for new ideas and passion and just it's everybody has worked at every other company in that area too and so yeah they move around so all the ideas spread like wildfire whenever somebody has an idea everybody else starts working on too and the same thing is true with autonomous vehicles like there are dozens of companies in the Bay area separately working on autonomous vehicle not necessarily the big guys maybe little guys too little tiny guys you've never heard of two huge people like Apple secretly working on it well secretly but it's an open secret in the Bay yeah yeah so what does it mean to work on software for an autonomous feel I really want to spend time with you yeah because it's so important we know that it's going to happen right you know the people will demand it you know the American psyche is in love with the car they love with the kind of car but the macho car but you know electric will take over and part of electric my right part of electric is autonomous they go hand-in-glove I think it's nice because you know you can you can much more easily charge a car by having it drive over a pad there's less mechanical things like that I've actually seen autonomous vehicle technology on gas cars too so it's not necessarily it's not necessarily I'd say that they're too parallel but equally important steps for cars that hate so it could happen before we have you know huge explosion of electric cars could happen on gas cars yeah I would say that Tesla has made the first big step towards autonomous vehicle technology released to the public yeah and that's on an electric vehicle platform so that's why it's definitely got linked inside of people's mind yeah I would I would link it because in the end gas cars will go away and so much political pressure or they used to be until January 20th they used to be used to be political pressure for that now we'll have to see but anyway so what is it you know you have a brain yeah in the car and the brain what what is what input is the brain getting so the hardest part for for the software is actually the perception seeing the world seeing that there's cars in front of you where the lane lines are making decisions about changing lanes overtaking cars taking exits actually if you had a perfect view of the world then driving the car is actually not that hard it's it's it's actually uses very similar code to what you would write for a car in a video game it's it's you know the car can only turn by its steering wheel and accelerate and decelerate it doesn't have to do very much but so the really hard part is seeing what's around you and so that's what all the new developments been on and then as an extension of that where are you yeah that's actually another hard problem to you and so that there's a graph yeah perfect these are the these are the sensors of the the first Tesla car so what you see there is in the front of the car is there's a camera you can see in front of it yeah there's also a radar the camera radar have different pros and cons of them of what they can see in front of them and the kind of like peanut shaped area around the car is actually it's ultrasonic sensors which are the same sensors used for parking your car we repurpose them for sure just seeing what's around you just they don't work as well at highway speeds but they still work why all three okay well going straight the most important thing in autonomous vehicles is not hitting the car in front of you yeah that's as long as you don't hit the car in front of you you're kind of okay and so that the radar is exceptionally good at seeing metal objects in front of you and that's what you've seen in cruise control and things like that and you need the camera in order to see the lane lines radars can't see lines on the road well that is a huge problem and that's what the the last like the long tail of the development process is because most of the companies working on this already do very well when they can see the lane lines but when they start getting spotty and or disappear entirely that's where it it starts getting into the realm of artificial intelligence come to Hawaii because we have lousy land really we can what about bumpy road in the great environment to do the laboratory yeah I mean that's and bumpy road well so I mean you guys might not see it as as real as I see it because where I live I see autonomous vehicles all around me I see Google's driverless cars every day just driving around me now they're autonomous but they have safety drivers in them just like holding the stick like their hands around the steering wheel but the car is totally in control it stops in front of the traffic lights it makes turns I'm laughing because you remind me of a friend we used to have living in our house yeah his name was safety man who's a stuffed doll okay and we would sit him up in a couch while we were away and people would look into window and see this yeah six foot five guy sitting on the couch in a living room yeah he was safety man well in this case the safety driver is actually doing something because the software is not perfect yet and that's the last bit of development is what happens if like a cat jumps in front of you or there's a baby on top of a bed of leaves like our software might think it's a bed of leaves or it's a baby it's actually hard for it to differentiate let's say it's actually both yeah you have to teach it yeah you have to teach it and that's where you get in the artificial intelligence from so but let's so let's go back to the lanes I mean you know one question that strikes me it's always struck me about autonomous cars is that maybe we need to rebuild the infrastructure in this country and put in magnetic lines or you know reflecting radar devices and otherwise give the car some guidance as to where to go is that is that going to happen is that necessary it's not necessary but it will improve things we we just think that infrastructure will take too long it's gonna be too slow and expensive in the order of decades right yeah so we're just gonna preempt it by making software that can just see things as humans do and that's why we have to focus on cameras so because people see things with cameras or well cameras are like human eyes and we'll just have to make do on any road and later I think the most important infrastructure development would actually be for traffic lights because detecting a red light is actually hard for both a person and a car and a dog and yeah they'll just cross right but in the future you could imagine that each intersection will just broadcast its current status remotely and then you don't have to worry about the accuracy of seeing the traffic light well actually that's you know to me that's a thing whose time has come yeah if you look around this country you find very few modern traffic lights modern traffic sensors and signals you know we're gonna have to lay out the box we're gonna have to upgrade all our traffic signals I agree especially in Hawaii and this could be part of it so you know you've got to get to a point where you can hit that on the historical curve where where these municipalities you know find it necessary to put in new new infrastructure that's when you nail them for infrastructure that will help on autonomous cars I actually talked to Caltrans about this very topic and there's Caltrans is the California Transportation Department and they're so interested in this because they're always doing 20-year planning and they know that autonomous vehicles are the future so they want to know now from the companies that are working on it what does it take good for them yeah good for you for talking to them yeah and they'll set the standard for the rest of the country because once you roll this out and who's working on the traffic signals that the same people are working on the cars working and are you working on the traffic signals well I I didn't personally work on the detection of the traffic signals but it's it's the same group of people that are doing everything yeah transportation software engineers yeah yeah it combines a lot of different fields I've learned a lot just as a software engineer about the chemistry of lane lines on the road and the types of lines there are and there's some places where there's bumps instead of lines it's just it's kind of endless but computers have to learn every single one of those things I hope you're making no speakers this is the talk of the future these are the issues that are being resolved and will change your lives we're talking about major disruption in our world of transportation and energy for that matter we'll take a short break you can think about it you know make some notes come back in one minute hi I'm Tim Appichella I'm the host for moving Hawaii forward and the show is dedicated to transportation and traffic issues in Oahu we are all frustrated by sitting in our cars in bumper to bumper traffic and this show is dedicated to talking to with folks that not only we can define the problem but we hopefully can come to the table with some solutions so I invite you to join me every Tuesday at 12 noon and let's move Hawaii forward hello and Aloha my name is Raya Salter and I am the host of power of Hawaii where Hawaii comes together to figure out how we're going to work towards a clean and renewable energy future we have exciting conversations with all kinds of stakeholders everyone who needs to come together to talk about renewable energy be they engineers advocates lawyers utility executives musicians or artists to see how we can come together to make a renewable future Tuesdays at 1 p.m. we'll be back and we're back Cliff Spradler than me he's the software engineer part excellence going to change the world change the country change transportation you'll see remember the name Cliff Spradler I'm telling you now write it down okay so we got it we got a picture let's look at the picture of the van this is the autonomous van so to say right so this is Google's now they've spun off into a sub company called Waymo this is their collaboration with the Chevy Pacifica platform or Chrysler Pacifica platform and you'll see a lot of additions to the normal car right there's this huge thing on top yeah what is that it's a lot of different things and actually the insides of it are a secret and I haven't worked at google so I don't know anything but what they've told us is that there's a laser radar on top of lidar which is different from a radar there is the lidar is the housing difference it bounced back or not it does bounce back it's just it's like a laser that just comes right back okay and so you can get actually a very good 3d view of the whole world and it's actually something that's spinning around in the top continuously but it's safe for human eyes from what I understand I've had one right out your retina yeah there's a little eye warning on them but they say it's okay okay and then there's just a ton of cameras and all of these sensors are designed to handle like the corner cases of this this problem so like when you're making a turn on an intersection what's in your blind spot autonomous vehicles just don't have blind spots yeah that's great because I know I do always try to check my blind spot sometimes I don't even see what's my blind spot and that's the other thing is that one of their advantages is they can look everywhere at the same time yeah right and integrate yeah so but here I mean just just comes to mind I mean you know you can drive in New England and one all of a sudden there'll be a fog yeah you'll roll in from the ocean on a little cat feet in the words of Carl Sandberg okay and you can't see anything humans can't see anything it can't see anything right yeah so what happens well that's why our different kinds of sensors help out because our cameras won't be able to see just like people do but LiDAR and radar can see through fog just fine well depending on how foggy it is right but in that kind of situation you probably don't want to keep driving anyway so the important thing is to always pull over the side of the road in a safe way so that's one of the core aspects of this is to always have an escape plan yeah well you know but I also I also would imagine that there'd be a little voice in there saying you know Cliff do you think you ought to drive now it seems to be foggy past a certain percentage of precipitation why don't you pull over well that that's something that will happen in the new near future but in the far future I would expect there to not be a steering wheel and so what we're thinking about now is what it'll pull over for you yeah well it will pull over for you yeah but then what should it do are you stuck or should it be able to keep driving a little bit forward calls for an uber yeah right well actually uber is one of the huge players in this is that right yeah they spent hundreds of millions of dollars on this good for them it's easy into the future yeah well I think they just want to replace all of their drivers with autonomous vehicles no labor issues well yeah it's the most expensive part of a taxi service you know they're subsidizing the cost of their service heavily now and I think they just want to replace the humans with robots so that instead of having to subsidize it now it just costs that much and just put everyone else out of business it's a perfect idea yeah they'll advance this technology for sure yeah actually the uber cars in Pittsburgh if you if you reserve an uber there's a chance that you'll be picked up by an autonomous vehicle today in Pittsburgh yeah Pittsburgh is ahead of the game Pittsburgh is where Carnegie Mellon is and uber basically bought a team of roboticists and autonomous vehicle people from Carnegie Mellon and opened up shop next door and so that's where they are and that's where somehow Pittsburgh is like the forefront of this okay put me in Pittsburgh yeah I'm in Pittsburgh I'm standing in front of my house I I call an uber the uber drives up what's my experience like um well it's you just get in and it just takes you there backseat yeah backseat backseat there is no front seat no well there's no no okay so there's still a safety driver but all they're doing is watching right oh there is a driver but he's not he's okay we're moving with evolving into no driver so it'll probably take people estimate four to five years to get real approval to have no driver in the car and what the industry has to demonstrate that it's at least as safe as humans yeah right and there's a big conversation about is as good as humans good enough or should it be two times as good as humans three times as good you think it can be better it can be better but what's the minimum it takes before it's allowed to be on the road then this governmental issue well it will definitely improve some things right like it it's definitely gonna be better than drunk driving or driving if you forgot your glasses at home or like let's say I actually have heard of one case in a tesla where somebody was hurt and they had to drive themselves to the hospital and they used the autopilot feature to stay in lane on the highway on the way there and they did and they were just like dazed and confused and saved them and that's just a limited form of autonomy yeah well this is definitely going places yeah so i get in the backseat yeah i tell the uber where i want to go is it listen no no no no you put it the uber destination from the start on the app okay okay right the app you don't have to say a word yeah i don't have to say a word okay then i get in the backseat it knows it's me yeah it pulls out and it just goes i don't have to talk to the safety man no he's almost irrelevant yeah yeah it will he'll disappear soon enough disappearing safety man yeah okay so then it takes me to my destination and like uber now i don't i don't have to worry about money it builds me later my credit card that's it yeah that's it yeah so how do i feel about this i mean do i do i feel confident to the people in pittsburgh feel confident yeah very confident um they but then they always have the safety driver just in case but that's kind of the problem is right now there's a divide between assistance and full autonomy and unless you're a train safety driver it may be so good that you don't realize that you need to take over right in critical situations and so i think there's going to be a big jump where we we we intentionally don't release something that's in between those the assistance and full autonomy because it can be too dangerous yeah complacency that complacency is a real thing after about 15 minutes of perfect driving pretty much anybody will just stop taking it and get the co-confident on it yeah so you know you talked about the sensors and you talked about the car learning everything in all directions and all this and i suppose you know there's other ways other kinds of information that could be fed to the car for example um it's going to rain if the temperature is going to drop below it's going to be icy yeah reports of traffic jams all that stuff that we we know we can get yeah and it feeds into the car and the car now you know does something with its brain we call that routing decisions routing decisions and it makes those just like if you get in and have uh you know one of those what do you call it navigation systems right now or use the one on your phone um now the brain is is putting a lot more data into that and making decisions about well you can see how google is very well poised to make this happen because they already have all that information for just lump it up yeah and google earth my god you get everything yeah yeah so you know but the question is i mean are we are you confident right now the sensors i mean are the sensors ahead of the brain or is the brain ahead of the sensors because it's two separate things well i would say the sensors are ahead of the brain although it's important to know that cameras are not the same as human eyes there's a lot of deficiencies um compared to a human the human vision system but i would say that the problem is the software because if you look at an image from a camera you almost always know what to do right you could probably drive the car based on like a camera in front of the car and drive just as well as you do seeing the right yeah so it's all about the software now and cameras are getting better i mean yeah what do i hear that iphone has 800 people working on the camera all the time i think that's right it's getting better and better and better yeah and so you know it's like you just wait for wait for it to be developed somewhere else and then you know the coat tail on that technique okay so we're talking about the intelligence now yeah how does it work it's more than a case statement it's more than it's more than anything we can imagine right now it's it's it's running headlong into the future of software right what's it's actually very different from any kind of software i've written before because you don't write code you don't write say if this condition then do that you don't do that at all you train it just like you would train a person you have to design what the the structure of the neural network would look like um but then you feed it images like of roads and cars and you tell it at the same time you say this is a car on this road here is the lines and it learns that um by almost by probability it's like this is most likely this so like if you if you have something that's like a stop sign detector right a stop sign is usually red right and so if you're trying to decide is this a stop sign or not a stop sign then this neural network can quickly figure out that the presence of red in the image is a pretty strong indicator right and it builds on this but to a point where we don't even understand it it's just like a human brain we don't understand how it works sort of like space odyssey 2000 how how what are you doing right well it makes bugs really difficult right because oh yeah yes it does something wrong you don't know why and the only thing you can do is train it with counter examples of like here's situations that are similar you should follow this this different situation so you think it's just cool yeah you do so in the same way that kids and people do it has it's not perfect in its way you know when you write software it will always do the thing you tell it to yeah um but the problem with software and and the roads is there's too many situations to account for with software and logic you need something like a human brain to handle all the different right to learn yeah to get to account account for all those situations and and build it in i mean it gets it gets it's pretty big isn't it how big how physically big is the brain uh well so there's been a lot of work done to miniaturize the the amount of computing hardware necessary but the resources are massive um but actually we've been able to pick up piggyback on graphics cards meant for games because they massively distribute the problem amongst hundreds of little processors on a chip um and those work really well for this problem as it turns out especially because you have a lot of images that you gotta recognize exactly yeah right it's just images um but now that that uses a lot of power and for a car power especially an electric car power is a problem yeah so now a lot of work's being done to make that like special dedicated neural network processors that only do this right so you don't waste anything yeah yeah um so you know i mean i'm really wondering um how dependent the the car and the safety of the car is on the computer is there a failsafe here yeah if the whole thing goes down if there's a you know how about a bolt of lightning comes down and interrupts the the electrical system where somebody does it intentionally yeah um there's the car no enough to say what gotta pull over that's it we're finished now so the way this is usually designed is um there's something that's not been the neural network not the ai kind of like a lizard brain lizard brain okay that always primitive yeah that always has a plan of what to do in case the the higher level cognition fails really that's how we designed the system yeah and we also designed it to be electrically redundant um in case there's like a brown out or the lightning strike everything is redundant so um if the the higher level system just stops publishing information you'll always just pull over to the side of the road i love it i love it to say nothing about all the information you're going to get about weather and an ice on the road and who knows what about everything which can be integrated so one minute left okay what is your vision what is this going to happen how is it going to affect us okay so i think the thing that will affect us most is all these people who will no longer have jobs it's over three million truck drivers in america there's many states where the number one job is truck driver and trucking is the easiest thing for autonomous vehicles to do they just have to you don't even have to go to the end points right you can just drive on the highway and that would eliminate a lot of jobs just like just like uber yeah right just like uber so how will society react to um these jobs are going away and not coming back i don't think it's going to be like the industrial revolution or other times when technology has like deprecated old jobs and people have found new ones i don't think that's going to happen this time so are people going to get basic income are they how will we support people and how will they be happy without a job wow wow from from engineer to social engineer yeah we think about this a lot because we realize the impact we're going to have on the world and it seems like it's going to be in that plus but it's it's definitely going to change society fabulous i'm ready okay thank you cliff thank you wonderful to see you and to have this discussion stimulating


Dear students, I'm going to present to you the concept of a random vector.  So I will do it with reference to an example. Suppose that a coin is tasked three times and our interest is in the ordered pair. Number of heads on the first two tosses. That's the first part of my ordered pair and number of heads on all three tosses, that is the second part of my ordered pair. Look, usually we say that the ordered pair X, Y, that's the first part, Y, that's the second part. Here I am defining that the first head that is the number of heads on the first two tosses and the second head that is the number of heads on all three tosses. So now you have to think about what is possible. If we let C denote the sample space, let us see what are the various possibilities, all possible outcomes that I could have if I am tossing three coins together. So obviously we can start from the T side or from the H side, it's the same thing. So let's start from the tail side.  So sample space, you know that the set of all possible outcomes are done. And it should have been R, because 2 raised to 3 is 8. Every time we toss, there are two possibilities. If we do it three times, it becomes 2 raised to 3 RT. Now, let X1 denote the number of heads on the first two tosses and X2 denote the number of heads on all three tosses. Then our interest can be represented by the ordered pair X1, X2. So now let's see for example what are the possible values of X1. If we evaluate X1 for that particular outcome, which is head, tail, head, then what will come? Students, do you want to say that it is equal to 2? That is not correct. Look, what was X1? The number of heads on the first two tosses.  So first two, look, head, tail, number of heads, 1. X2 is the number of heads on all three tosses. That of course is equal to 2, because head, tail, head is 2. So in this way, we can look at all the possibilities. And then what do we get eventually? We can talk about space. There's a A-T, sample space. Now we can talk about the space D, which contains the following ordered pairs. 0, 0, 0, 1, 1, 1, 2, 2, 2, and 2, 3. You may be thinking that something has been missed. Why did I not say 1, 0? And why did I not say 2, 1, etc.? So look carefully, that in this way, they are actually not possible. So what you have already told, what is written in front of you, what we have written there, which are actually possible. Let me explain this. Why did I not write 1, 0? Because if 1 is coming from the first two tosses, this means that in the first two tosses, there is one head, then how can 0 be after the comma? What was after the comma? Number of heads in all three tosses. If there is already one head in the first two tosses, then how can 0 be in all three tosses? So in this way, you can think of all of them.  Now, I want you to know that these ordered pairs, if we take this for algebraic, bracket x1, x2, bracket close, this is, this can be called a vector function from C to D. Because C, which was sample space, we didn't write 1, 2 there, there is head, tail, head and all that. So now, the way we have defined x1 and x2, because of that, we can make this statement that the ordered pair, x1, x2, is a vector function from the space C to the space D. In simple words, my dear students, aap se vithnayadratne, that the pair of random variables, x1, x2, is called a random vector. Or formal definition iski johay, let us look at that also. It is as follows from a random experiment with a sample space C, consider two random variables, x1 and x2, which assign to each element, small c of the space capital C, one and only one ordered pair of numbers, capital X1 of c equal to small x1 and capital X2 of c equal to small x2. If this is the situation, then we say that capital X1, capital X2, that ordered pair is a random vector. Ye sari baat joh main aapke saamne abhi rakhi, this was for the case when we have only two random variables. Lekin, you must note that this concept is extendable to three, four, or more random variables. Ek aur baat note kane, ke anthorpe aksar, we use the vector notation, capital X bold face denotes the random vector and it is written as being equal to the ordered pair, if it is two, the ordered pair x1, x2, lekin uske saath, ther hum lagaate hain ek prime jesa sign, which actually represents the transpose of the row vector x1, x2. Yehni matrix algebra ki roose, agar ek row vector hain, uska agar hum transpose lehte hain, so that is a column vector. To anthorpe jab hum, books wagaara mein bhi aap dekh hain or research papers wagaara mein bhi dekh hain, so we write it like this, that we write it like a row vector, but then we also apply the transpose sign or the prime in order to represent that random vector. Ek aur baat aur wo yeh hain, khar hum conversely baat karein, to hum yeh kahe sakte hain, yeh, if the ordered pair x1, x2, in case of two, is a random vector, then pooth, x1 and x2 are random variables. Yehni mera matlab yeh hain, ke donoh taraf se yeh statement banti hain, if x1 and x2 are random variables, then x1, x2, that thing is a random vector, transpose laga hain na bhi laga hain to, aur conversely, if x1, x2 ordered pair is a random vector, then x1 and x2 are random variables.


Tommy here from Orange Systems and are you ready for a pen test? This is actually the first reply yet when someone reaches out to me and says, Hey, I'd like to get a pen test done, but are you ready? There's a lot that goes into the actual testing, but before then there's a lot that you should probably cover to make sure things are patched Make sure things are up to date because pen testing can be an expensive process And you really want to make that pen test engineer work for their money You want them to not find the easy things that you'll go well I guess I could have just done that I guess I could have updated the servers I probably could have closed a few of those ports. You want them to come in and look for the hard things You want to leverage all the skill they bring and say I want them to look for the angles I may have missed because that's also me what you're paying them for and yeah Remember they're generally looking for things on a how easy is it? They're gonna try the obvious. Did you patch it? They're gonna try the obvious Did you close RDP and then keep escalating from there? But there's a lot of scoping that goes in this There's a lot of details that goes involved in myself not being a pen tester matter of fact If you reach out and call us for a pen test I refer it over to Jason Slagle president of CNWR and good friend of mine Jason Slagle is an excellent security researcher and he's going to join us an interview here to define what a pen test is What a pen test isn't and how you can prepare for it We're also gonna as I said I'm gonna be referencing some of the links down below Because I want to make sure you have plenty of resources to gain a good understanding and a lot of things You could just do yourself to take a look at your network and take a look at your systems And make sure that you are prepared for the next step All right, and Jason's gonna tell us exactly what a pen test is or actually we probably back it up Do you need one? That's where you really start? Yeah, we it's it's an interesting question Because we you know we get asked this all the time and like oh I need a pen test Can you do a pen test for me and after like a 20 minute conversation what comes out of it? Is that's not actually what they're after? Yeah, you need it You probably maybe need a vulnerability scan if you haven't even done that and this is some stuff You can even start doing yourself poking away at it and like Kenny you said in this Well, I say you said because mean you've talked so much about this before the audience It's really comes down to how the the pen test is going to be conducted You're gonna pop the easy stuff first so you hopefully you have the really easy obvious things fixed first, right? from my perspective the job of a pen tester is to Break into whatever system you give them right like escalate if that's in scope move laterally if that's a scope and right up list of their findings and In most cases it doesn't necessarily matter unless you specifically call something out of scope or you know They're touching things that are off limits. It doesn't necessarily matter to them how they do it So if you don't kill the low-hanging fruit They're gonna totally take advantage of the low-hanging fruit and that's what you're gonna get in your report is oh, yeah, we used this We We use this unpatched windows vulnerability. We we got on the box We were able to pull credentials out of memory. We used them to move laterally, right? Like we escalated to a domain admin by pulling credentials out of memory with any catch right and then and then you're done and it's like well Okay, those are all things that maybe you should have had fixed before you got a pen test Yeah, you want to fix the obvious things because you're doing yourself a disservice if the pen tester comes in and uses the first thing They find they're not gonna go back and go I'm looking for the next hardest way to do this They find the easiest way as based on the scope and we move laterally But that didn't really solve your problem because what if there was actually a little bit more complex way? They could have got in and it was just because you had an unpatched ESXi server or something that was essentially an obvious thing You know patching your firewalls, etc. So you really want to have as much Done as possible as for vulnerability scans just come in and once you have all that done then you want them to Yeah, yeah, and I mean this segway is perfectly into like let's talk about you know based on our little outline we're using here, right? Like I'll share down in the links below so people can have the outline of the scoping of a pen test and all the steps pen tests are Typically time-boxed engagements, right? So when you actually hire a pen tester, you're not hiring them to pen test your application Because you know you can literally throw stuff at the wall forever What you typically are hiring is a fixed scope, right? And typically it'll be a set amount of time a week two weeks is pretty common And then on top of that there'll be a couple of days to end up writing up the report, right?  It just means that in the 40 hours they had to do it They weren't able to do it. So, you know to the point if they do Quickly and easily get in and move laterally and you know, they've got that done in 10 hours Then yeah, they may they may look for other ways to do it a nods their amount of time just goes into initial discovery initial Access initial looking at mapping the environment. Yeah, it's that it's this is time box They they go until they're out of time and then they spend the time writing a report It's one of the reasons when you decide the scoping for this and in the realm that we usually work in for pen testing You're gonna want to define and give us some of the information because that counts against your hours If you want me to go hunt it down or you know, really dig around to use some OSINT to figure out where all your infrastructure is It's probably fastest to let us know where it is assumed someone discovered it a lot of stuff is hopefully you don't have things really publicly Exposed but you want to get us to the part where we're testing things as fast as possible Yeah, and that's I mean for sure there and there's a couple ways to do this, right?  I don't know anything about the system. You know, you just give me the domain name or the web app And it's entirely on me to do it, you know gray box Maybe you give me logins, right? Like in some api documentation Whereas white box I would typically if it's say an application I typically have access to the source or I have network diagrams or I know what all the systems do They serve their own purpose, right? Like but that's one of the first questions that I will ask when asked whether to do this is like what what kind of Thing are we looking at here?  And I will explain each of those things when we do it But they they definitely change the amount of time It's gonna take me to do it and it definitely changed the scope to a certain extent So, you know knowing that going in is actually really helpful One of the things you want it that's gonna happen is you're gonna have to define the rules, right? like because I Anyone that's been to a conference with me knows that you define those lines I will color right up against them. I will do my best and not color over them But I will be calendar at the edge And so if you have legal requirements or you have things that I'm absolutely not allowed to hit or people I'm not allowed to talk to those things need called out because otherwise if you don't tell me I can't do it or You don't tell me that I'm only allowed to do things that are explicitly in scope then Everything is in scope and I'm gonna go down a rabbit hole I'm gonna be trying to social engineer your employees and it all starts other fun things Yeah, I always recommend people listen to one of my favorite episodes, which is Jeremy from marketing of dark net diaries That's a great one where they you know They do define the engagement but it does go into engaging employees to get to FA codes and things like that it Comes down to scoping in time like we said in the beginning of how much of this do you want us to find out? You know, what is the rules of engagement here because yeah, cool You're thinking you're safe with 2fa, but the reality is as that podcast proved a little bit of a spoiler Yes, people will read you to FA codes off of phones You know back to the very high-level piece of this, right? Like that's the thing that most people don't understand It's like they have some sort of regulatory requirement that they get a pen test But they're not necessarily actually after a pen test Because marketing ruins all things. Yeah, so which is why we're making this video. Yeah Marketing around pen tests Sometimes they start at a price that doesn't make any sense and it's not exactly what we would call a pen test You yeah, it's kind of eroded away the word pen test, right? We're a lot of times, you know vulnerability scanner vulnerability scan plus people are calling a pen test and it's not I would consider I Would I wouldn't consider that a pen test, but it seems like the common lexicon is now starting to consider that a pen test So maybe we need to call this a red team engagement, right? Like instead of a pen test because that's essentially what we're talking about here I mean know that they're expensive, right? You know, we're talking probably 40 hours minimum plus eight hours ready report, right? So 48 hours at Three four hundred dollars an hour. Yep, you know, this isn't a small amount of money So it's very important to understand what you're getting into before you, you know, you drive down this road Yeah, I think that's a really important aspect. So let's go a little further down there One of the questions that's probably gonna come up a lot is custom applications or some of these one-off Non-common industry applications move it's in the news here in 2023 a lot But obviously there's been companies that went through pen tests We have to define which applications are gonna be tested and how Extensively they're gonna be tested because fuzzing an application until it breaks may or may not be in scope and also can be It's an important aspect, but it's one of those things that may not you have to really kind of carve out Yeah, it's really so web application testing in particular is really hard You basically just throw stuff at the wall like oh that might be injectable then, you know, you spend Six hours trying to inject something only to go I know that wasn't actually injectable then you move on to the next thing Oh, maybe I can do some authentication bypass stuff here and then you you know spend six hours trying to get it to work It doesn't work. They're like, okay, they protect it against that You end up down these rabbit holes that you know You easily sink hours into this looks like it could be a thing And then it turns out that some Downstream system protects it in a way that isn't immediately obvious to use you end up just waste a bunch of time going down a road there With web applications and applications in particular They're they tend to be somewhat longer engagements if you want to do them correctly and just because you don't have any findings It is I'm sure a lot of these companies that have been hit recently can tell you just because you don't have any Findings doesn't mean that you're safe. It just means that you're safe from the some of the easier low hanging fruit Yeah, and this is something to think about too because you can't just take hey, I had a pen test I'm good. No one can ever get in his system And it can be a bit of a challenge because of these other vulnerabilities and new techniques that come out all the time This is an ever-evolving not a static type of thing that happens. It's not like here's the checklist This is the only things we do we may have a checklist of the process as we follow But when it comes to techniques, that's the ever-evolving part that hey a pen test from even two years ago It's not the same as it is today because the techniques have evolved a few resources I'm gonna throw out there and recommend here as we get to the end of this check out like the Black Hills cyber talks They're definitely stuff if you just want to go deep just how crazy some of these pen tests are It's one of those further reading things besides any of the dark net diaries any of the red team stuffs on a dark night Diaries is always a whole lot of fun. Yeah Do you think of Jason? Are you probably recommend? No, there's I'll send you a couple like basically pen tester Workbooks worksheets stuff like that right so like anything is as we covered earlier in this when you do your first one of these Giving as much information as possible is probably In your favor right because they don't have to spend a bunch of time gathering information and you know it may lead to Your an ability to do a slightly shorter engagement If you're up for it right like the a lot of easy stuff is covered in various pen testing Workbooks and they talk about a bunch of tools You know poke at your own things and fix the things you find before you pay a very expensive resource to find make them work for Their route you want them to really have to use that hacker mindset. Don't give us something really basic or where it's gonna pop it All right, well everything will be linked in the forum post down below and thank you. Okay. Cool. Thanks


Good evening and welcome back to channel 17 town meeting television. We are here with Barbara Rachelson She is a representative from Burlington's sort of middle south end. That's district 6 6 Barbara welcome. Thank you. We're so glad you're here It's great to be here. I want to remind people you can certainly give us a call if you have any questions at 8 6 2 3 9 6 6 we're continuing our coverage here general election 2018 so thanks so much for tuning in so Barbara. Why are you running for re-election?  I am going into my fourth term. Yeah, so my whole professional career has been pretty much focused on social change and I'm a social worker and am very concerned to make sure that all of Vermont is thriving and so It's been While I feel like I have made a little bit of a difference so far there's more work to be done and I'm excited to go back and try to make a difference and what do you want to be working on this next biennium? So I have a wide range of things that I want to work on one thing that's important to me being a director of a nonprofit organization and having worked in the nonprofit sector for I I'd say most of my professional life is Making sure we are Being as efficient and effective as possible with public dollars as we are with You know as nonprofits do so there's lots of work in that area I'm very concerned about the high poverty rates in our state still We need to make Vermont affordable Having heard from constituents in the door knocking I've been doing the last few weeks There are so many people that are scraping by at best and are working hard and not being able to make ends meet and I'm worried about Continuing to look at how to make Vermont affordable and make it so that people can retire here and not feel like they have to move because they can't afford it I Also have a great interest in both consumer protection issues because Many of them are critically important and I'm happy to talk to you about that further As well as Protecting privacy and civil liberties So let me ask you that one of the questions that we sent you had to do with the efficiency and effectiveness of government and How do you know that Vermont government is doing a good job? so mean I Think in some ways we are doing fine, but we could always do better and I'd love to see us one make sure that every Investment that we're making is reflective of something that There's a good reason and there's a return on investment for doing it And not that we're doing it because we always have or it's a sacred cow and you can't mess with it. So one thing for example that I Have been thinking about a lot since my first term when I served on education is I think education is critical. We definitely want kids in Vermont to Do well in public in public school graduate high school being able to read right think and be ready for whatever is next and The number of students has decreased over the years. We're now down to roughly Figures are like 77 to 80,000 students in Vermont down from the high of I don't know 127 something like that a bunch of years ago We're spending $1.8 billion to educate 77,000 students and if we were designing a system from scratch and said let's take that money and Devise a system it would look incredibly different than our current system So while we did some legislation to encourage people to do some mergers we're like We're not necessarily Going to get at the type of savings that we could get at without harming Education. So what am I thinking about Hawaii has one school district for a hundred and thirty thousand students something like that And as we all know Hawaii has many different islands with the ocean between because people have said We can't have one school district in Vermont, you know, we have the mountains, etc But if we did one school district Think of the amount of money that would be going to indirect and overhead That we could be saving from having three hundred something school districts each with its own Principal with it's whatever it's sort of business office looks like the number of supervisory unions that are Again, you know each of them have an audit they have tons they there's tons of overhead Which is not making a difference to kids and the education so we could have one statewide teachers contract and Every time we negotiate a teacher's contract We don't talk about how much does it cost in legal fees or the other fees? Why not put the money towards? We should pay teachers well. It's an admirable important profession and We could have more of the money going towards Programming classroom You could have more magnet schools like Burlington has done and have different high schools so that there would be Again, not necessarily. I mean my goal is not to close schools It's let's not spend as much as we are on all the other stuff So that's just one example of what I think is critical to do and then on this question of a making Vermont affordable Do you have some policy ideas or that you've been able to work with other people or that you have for the next biennium so Again, I think you know, I I know Everybody in the state house is concerned about that. We all have constituents who can barely make their property taxes So I know we've looked at are there different ways to fund That the Items that property taxes are funding so that we don't have so I've talked to two people this past weekend one It's a 89 year old and his Mid-80s girlfriend they can't get married because that would be financially costly and Their property taxes are $7,000 which is Huge for them. We were able to make a dent in Looking at social security not being taxed and again, we're one of not many states that do tax Social security, so we do need to look at you know I had a friend that went to the Social Security office and they said you're not going to retire in Vermont Are you it's the worst place to retire, so that's not a good message for For Vermonters who were you know who lived here who can't afford to retire here So we definitely need to look at that and Social Security again if we're looking at Our investments where a state I'm ashamed to say that spends more on incarceration and corrections than we do on higher education and If you look at the return on investment for how many people go into corrections and recidivate Why are we spending that much money doing that? We would be better off using an evident evidence-based approach especially for people who were not a threat to society To take a different approach rather than continue to incarcerate and in fact To have to incarcerate so much that we have to send people to a for-profit prison In Mississippi that's going to make the chances of reunification horribly difficult for them And we have shareholders who are going to make money at the expense of Vermont tax dollars So talk about consumer rights and privacy. Sure. So a couple of bills that I worked on That became along the last session were one like when you get a magazine and all of a sudden you get the renewal charge on your credit card and it's or Subscription radio and it's like whoa, that's I didn't sign up again And it's way more expensive than it was last year and then you have to figure out how to get it The charge undone. It's it's an onerous burden on the consumer. So the bill that I sponsored That got signed into law Has you opt into wanting? Auto renewal rather than having to opt out and again auto renewal is fine in some circumstances but I want to drive that bus of when I want that and not have to Find all these little surprise charges on my credit card and so do other consumers So a consumer issue that I'm working on And I think maybe I've chatted with you about this before is Vermont has very archaic Toeing laws. So when you get your car towed in Vermont it is very easy for the Company that towed your car to Get possession of the title of your car within 28 days by writing DMV If you haven't kept your address current with DMV The letter is going to go to your old address and you won't necessarily be notified And then they have the ability to sell your car and keep the proceeds Usually cars are like the second most expensive thing most people buy and for most of her monitors for many Vermonters who aren't homeowners It's one of the more expensive things this bill and I mean this law ends up hurting Students it ends up hurting poor people because It's also not regulated what a tow company can charge you for the tow unless it's under like a city contract for Storage and what the rules are for getting your car back. So I'm aware of at least one person who couldn't afford the $600 charge and she had to forfeit her car When I've looked at the data over 230 people in Chittenden County last year alone lost their cars think about our state treasurer if you have five dollars left in a checking account That money is there waiting for you and there's a lot of advertising that goes to find you your money Why aren't we doing that with your car? Why do we have the tow company? Be the one to keep the money like that seems like a perverse unintended consequence. So in Vermont We have people actively trolling all the time You know offering to if you have a private lot to say we will come and tow cars from your lot for free Where other states have looked at only cars being towed if there is like a safety issue or somebody makes a complaint Regulating how much it can be charged and certainly I've not heard of any other state where that tow company keeps the money so So that is something that really needs to be addressed and I'm hoping we can get some public hearings on that All right, let me ask you a couple of environmental questions. How can Vermont turn climate change to its advantage? So I think we all are trying to do what we can as private citizens to Especially I feel like folks in Burlington Care a great deal about the environment and what's happening with climate change and there are so many entrepreneurial efforts going on that I think if we help to continue to promote Vermont as a place a great place to come and Do your business that's related to climate Change efforts, you know, it could be something that we could try to incentivize people to move here It's a growing. I mean, we know that Vermont is doing great in terms of solar Panels and I remember Governor Shumlin really touting how many people have come in to work to do more efforts related to Climate change.  It's it's pretty amazing also Bicycling in Sweden is Incredibly Convenient totally convenient like we you know, it's wonderful that we have some bike lanes starting But this is like an entire system that is set up in a way that Is really geared for for it like here we're sort of competing on the streets with cars still It wasn't designed that way and it's just great to sort of see a different culture and how much really can be done So and what about the financing of the cleaning up of the lake and rivers? I sure wish I had the answer to that and I know that that Pierce had a lot of ideas Which I'd love to see get some more serious play. So I must confess that I My expertise has not been in sort of coming up with proposals for the environment, but And certainly supporting what comes up. So We have to clean up the lake.  Tourism is so important here. We need to find a way to do it and not You know what to do it fairly so that you know, I again, I'm thinking We can't make so many Extra charges that you know People are not able to make ends meet and I'm just really worried about like safety nets for folks So I think in your work, you probably observe the institutional racism that exists in our state And I'm wondering what policies you see as being Credible to helping us dismantle that kind of racism deeply rooted in our state, right? And I'm really glad you asked that So it's interesting because we At my organization just had a mandatory cultural diversity training for everyone on our staff which was Fantastic, and it was a really great approach of sort of calling people in As well as at times calling people out, but not just sitting idly and not doing anything So one of my first thoughts after the training was we need to make Legislators go through that training because frankly in the past few years the number of comments that I have heard on the house floor is unbelievable and That needs to not be tolerated. So I think that's one important thing the other thing that's really important that I know was tried and was not successful is We do need to have Our schools have a mandatory cultural diversity approach and training because again That's the time to Expose children to different views. So if we're not Trying to sort of change the next generation people tend to Pick up what they hear and a lot of it seems like it's both fear lack of understanding and We need to both show people that one Um Diversity is better. It's a better way to live like and we need to celebrate People's differences and help our state sort of look at The diversity of Vermont being a good thing not a bad thing So what's before we wrap up and you do your final comments, what do you think is the single thing we could do to? Redistribute power in Vermont That's a that's a great that's a really good question. So redistribute power in Vermont. I Mean, what's what I mean? I'm gonna approach it from legis the legislative perspective What's great about Vermont is the citizen legislature? What's difficult about Vermont is the citizen legislature? So there's not I mean It's very limited who can run and it's I actually just saw the chart I can't remember a few had done that about what percent of the people have full-time jobs and what percent are retired So one we need to make sure that It's not inaccessible for people to be in the legislature to we have no staff So many people heavily rely on lobbyists for information You know, I I don't think ill of lobbyists, but that's not how we should be making our decisions or getting our information and so We need to sort of put more I mean I Spend a lot of time doing research on issues, which is why I can't necessarily spew off an answer about the environment Because it's like there are so many issues coming at us that at some point we need to look at is this the right Legislative structure for our state including the The governor only having a two-year term late. So in some ways we're setting our state up for not Allowing power to be More distributed frequently people will say we didn't hear from any renters So we know they don't have any complaints about this tax or whatever. It's like, are you kidding? How many renters? Know what's going on in a particular committee room can get off of work if they You know want to come down to Montpelier have transportation and are going to make their views known. So we can't assume silence is Agreement and You know, there are lots of there's lots of people that are paying for representation in the state house But it's like all the people that don't have it that you know is Concerning so closing comment anything you like to say to your voters Get out and vote. It's incredibly important. It is I mean, I I will continue to work hard as a legislator should I be reelected and It really does make a difference to reach out and share your views and Ideas and I wish more people would do that. Thank you so much Barbara Rachelson. Thank you So Barbara is running on a pose in district 6 6 which is in Burlington's south middle and how would you describe that geography? Part of the health section part of downtown. Yeah, partnership playing college The Redstone campus. There you go, and she is running for her fourth term So don't forget to vote and thank you very much for being tuned in here to channel 17 town meeting television for our continuing coverage of General election 2018 and don't forget we will have live election results starting at 7 30 on November 6th. So stay tuned