Disgusting. Rewind. Welcome back to my channel, everybody. For those of you who are new around here, my name is Michael, a.k.a. Dr. Cellini, and I'm a radiologist, sub-specializing in interventional radiology in New York City. Now, if you know any healthcare workers or have any healthcare workers in your family, you know that there's always that one thing that grosses them out, or maybe like two or three things, but most of the people in healthcare don't get grossed out that easily. Now, I am no exception to that rule, but I do have one or two things that gross me out, and on today's video, we are going to get into those, and I will also rank the top six things that gross me out in medicine. From the thing that grosses me out the least to the thing that grosses me out the most, we're gonna get into it right now. Let's go. Did I say we're gonna talk about six things or seven? Either way, we're gonna talk about seven things. If I said six, I don't even know. So the number seven item on this list, or thing that grosses me out the least on this list, is everything I drain on a day-to-day basis, that being bile, when I drain things out of the liver, gastric juices, when I put in G-tubes or J-tubes or whatnot. What was the other one? Or pus, because I drain a lot of abscesses on a daily basis anywhere in the body. And for those of you who don't know what I do, I am an interventional radiologist. So I stick needles in people and drain fluid out of their body. That is what I do for a living. Well, I do a lot more other things than that in my job, but that is one of the sections of my job that I do. So that stuff doesn't really gross me out that much. Now, don't get me wrong. There have been many times where I have drained an abscess from like a post-op disaster that has like a fishless connection between the bowel and this abscess and you drain it and it literally like makes the whole room smell like absolutely terrible. Even that doesn't gross me out that much. And yeah, it's actually kind of relieving when you pull out that pus or that fluid. It's like popping a zit, but a big one in the body or something like that. So the number six item that grosses me out in medicine is urine. And actually, it doesn't really bother me that much to be honest with you. I pretty much deal with urine on a daily basis because when I do a percutaneous nephrostomy tube, I stick a needle directly into the kidney under ultrasound guidance. And how I know I'm in the right spot is if I get urine coming back through the needle, which goes all over my glove and all over the field. So it doesn't really bother me that much because I'm kind of used to it. And as many of you all know, I almost went into urology. So it definitely doesn't bother me. I don't know. It's sterile. It's not not a big deal. It just it's urine, you know, I've never really met anybody that really gets bothered by urine, but I'm sure there's some people out there comment below if urine bothers you. I'm not one of those. Number five on the list of things that gross me out is saliva.  I mean, there are many times I actually interact with saliva on a day to day basis. Maybe the random time like an anesthesiologist like flames saliva on me after they like intubated the patient, which like never happens, by the way. I don't even know. I can't even remember the last time I had saliva on me to be honest with you. Maybe I got it on my hand when I was putting like a nasal cannula on someone, but I usually wear gloves for everything. So yeah, saliva doesn't really bother me that much. The number four item on this list that bothers me in medicine is a necrotic foot. Now I know that is specific, but you'd be surprised how common that is in medicine. There are many uncontrolled diabetics in the US and many of them come in with non-healing foot ulcers. Let me just be frank and tell you those things are pretty gross sometimes. They can be very extensive foot infections. For one, they smell absolutely terrible. They smell like death pretty much. And in order to see these wounds, you have to like slowly unwrapped the dressing on the foot or whatnot. And for some reason, feet just kind of gross me out to begin with because like most people don't take care of their feet. It's just like a common trend among people in the hospital. I mean, I take care of my feet. Everybody I know takes care of their feet, but like for some reason, the foot is always an neglected item on people's bodies. So they let things go more so than they probably should. So some of these wounds can be very extensive and smell very badly. If any of you are in wound care or have a peripheral arterial disease clinic or whatnot, you know exactly what I'm talking about. Some of these wounds are gross and the fact that it's already on the foot and I don't like feet to begin with. So you have a foot, which I don't like gross foot, which I don't like even more in a gross foot with a giant non-healing wound on it. It's not a good combo for me. That's why I didn't do vascular surgery. Well, one of the many reasons why I didn't do vascular surgery. All right. So now we're getting into the good stuff. But before I get into this, why don't you go ahead and comment below. If you work in healthcare, tell me what thing bothers you the most. I'm really curious to see what you all say because some of this stuff bothers some people and it doesn't bother other people. We all have our weird kind of things that bother us the most. And as I get into these kind of top three things, some people will share common disdain for these items or something like that. Also, this is a good opportunity for you all to smash that like and subscribe button. If you haven't already, we're trying to get to 200,000 subscribers. We are oh so close. I think we're like nine or 10,000 away right now and I will do another giveaway at 200,000 subscribers. So why don't you go ahead and smash that subscribe button and go ahead and like this video for the algorithm because it helps out the channel. Thank you in advance. Now, let's get to number three. The number three item that grosses me out in the hospital is human feces. That's right. Human feces. I don't know why human feces is so much more disgusting than animal feces, but it just is. I can walk a dog, pick up their feces with a bag in my hand and like it's still kind of disgusting, but it's not that bad. But human feces, it's just kind of disgusting. Honestly. Some people don't mind it at all. Like there are plenty of nurses out there who, I mean, I don't know how they do this. A lot of times patients will just mess themselves in the bed and they have no problem just going in there, cleaning it up, rolling them over, you know, putting fresh underwear on, all in a day's work. For me, I don't think I could do that. I mean, I would, I wouldn't do radiology for a reason. Now I'll tell you some stories because I did have to deal with that in residency one time.  That med student, I will never forget you. So you really took one for the team. Thank you. Thank you. Thank you. So I'll tell you the quick story. There's a patient in the ER who had an impacted bowel. And what that means is there is so much like rock hard stool in the lower bowel that it is extraordinarily painful for the patient. And the only way for that patient to experience relief and get that stool ball out of there is to manually disinfect it, which means you stick your finger in their rectum and literally digitally disinfect that stool, which I mean, is gross in itself. It's way more disgusting in person because I've actually never done it until that day.  But it wasn't that at all. The pressure built up behind this stool ball that collects in the rectum is so hard.  The only way I can describe it is like, if you have a dam that's blocked off and all the water is backed up behind the dam, and then the dam just breaks the dam being the stool ball, you pull that out and the dam just breaks and stool fluid just comes out like flying.  Nonetheless, the patient was so thankful. I'll never forget that day. They were like, oh my god, I'm so sorry you had to do this, but you made me feel so much better because it's instant relief. So yes, stool does gross me out, not as much as the next two items, but you know, this is the kind of stuff we have to deal with and this is what we sign up for. All right, so the next to last item on this list, this is almost the thing that grosses me out the most and that is secretions. Now, I thought I wanted to go into anesthesiology before I started med school and when I was in med school, I thought I was going to do anesthesia, but then I rotated on anesthesia and I realized something. After every single case, when you extubate someone or pull the tube out of their throat, you have to suction out secretions in their mouth and airway and all that stuff and that part was always kind of gross to me. And now going forward on that topic, working in the ICU as an intern kind of grossed me out more because a lot of your patients have tracheostomies and you have to suction them intermittently to kind of clear their airway and clear their trachea because a lot of them can't expel the secretions on their own. So you have to suction them out. For some reason that sound always grosses me out so much. I don't know. So I just can't do it. Every time they extubate a patient and they have to like suction them out after the case, I just kind of like, I don't go anywhere because I have to be there because the patient's there but it kind of grosses me out just a little bit. So I'll tell you a little story on this topic as well. I don't know how true it is, but one of my family medicine attendees told me while I was on their rotation that one of his attendings was rounding on a patient in the ICU.  So he had a huge trachea loogie on his tie and he asked the nurse for scissors and he just cut his tie over the trash can and for the rest of the day walked around with a tie that was like half cut off, which I think is hilarious if I saw it. But if that happened to me, I'd be super grossed out. So yeah, now let's get to the number one thing that grosses me out. All right, so here we are at number one. The number one thing that grosses me out the most as a doctor in the hospital dealing with patients, you may know this from watching my prior videos, but vomit is the one thing I hate the most and I cannot deal with in medicine. If you may remember from my prior vlogs, I mentioned briefly how I have a metophobia or a fear of vomiting myself. Adding on to that, I don't like when other people vomit either because it makes me want to vomit. I obviously have to deal with vomiting in healthcare as a physician, whether it be a patient of mine waking up from anesthesia or an extremely sick, uncomfortable patient coming down for the floor that needs a procedure. It happens all the time. There's always somebody vomiting or nauseous in the hospital.  Usually what we do in the hospital when somebody's vomiting, we either give them a little bag or they give them a basin to kind of vomit in if they're feeling nauseous. What happens is patient is so uncomfortable, so nauseous that they have this little basin and they're just vomiting consistently into if they need to. You just have vomit just like sloshing around in this basin with them as they get transported down to us in IR. I can't even grab that container to put it in the trash. I have to have someone on my team do it for me because if I see that, I'll just start gagging. I don't know. It's just my thing. I'll tell you a quick story when I was in the ER as a fourth year med student doing a rotation. One time in the ER overnight, I had to deal with a mentally ill patient who had a thing for vomiting on people. That was like his way of getting back at the health care workers who were trying to take care of him. I was told to go see the patient because that's what med students do. We go and interview the patient and get all the information, pertinent information and present it to our attendings. So I went in there. I was standing next to his bed. He was sitting on the bed. I stood like a good six feet away from him. This was like before COVID stuff way back in like 2014. I think he was telling me what's going on in his life. And then he literally just projectile vomited all over my pants. And this was like 30 minutes after I got there. I was working an overnight shift in the ER. I was so disgusted, but I was also so angry at the same time.  For someone who doesn't like vomiting, that was probably the worst case scenario for me. So ever since then, I stand very far away from people who are like actively vomiting because I'm traumatized. So that officially concludes this video. Hopefully you all enjoyed it. Again, comment below about the thing that grosses you out the most in health care or working in the hospital. Or if you know someone that works in the hospital and what's the thing that bothers them the most. As always, smash the like subscribe button, follow me on Instagram and TikTok if you don't already. Leave a comment below. If I liked it, I'll respond to it. Otherwise, I'll see you all on the next video.


What we're going to do now is we're going to take a look at a couple of definitions that are used for wall-bounded shear flows or even free shear flows, but typically we'll start with wall-bounded shear flows, turbulent or laminar boundary layer. The first one is the displacement thickness, and we saw the boundary layer thickness, but displacement thickness is, seems simple as boundary layer thickness, delta, but it has a star and that denotes the displacement thickness. We'll take a look at what that is defined as being. So the displacement thickness is defined as being the distance by which a solid boundary layer would need to be increased or displaced in order to provide the same mass deficit as the boundary layer is providing, and so let's take a look at what that is visually. So what we can see is that this is the mass deficit in this region here where we have lower velocity due to the presence of the boundary layer, and what we would need to do, we would need to increase the body thickness by this amount here, delta star, in order to match that mass deficit. So it's basically a thickening of a body due to the fact that we have a boundary layer present, and then outside of that we would just have the free stream velocity as noted here, and mathematically the displacement thickness can be expressed in the following manner. So that is mathematically how we can express it. Now if we're dealing with incompressible flow, what we're able to do is we're able to take the density out from the integral and we end up with the following for the displacement thickness. So that is the displacement thickness. It's a parameter that you'll sometimes come across when people are talking about boundary layers. Another one that is quite common for free shear flows or wall bounded shear flows like we're looking at here for the boundary layer, is that of momentum thickness. Momentum thickness is a quantification, essentially of the amount of viscous activity that is taking place within the shear flow, and it is a length scale, and this came out of the von Karman analysis, we already saw it, and momentum thickness theta, what it refers to is the following. So drawing out a picture again for the momentum thickness. So that in terms of a diagram is what the momentum thickness represents, it would be the amount that the boundary layer would need to move away from the wall in order to have the same amount of deficit as what occurs within the region of velocity deficit due to the boundary layer. And we can write this out in terms of an equation, very similar to displacement thickness in concept. So we have that, and then we can write out an equation for it, and that is momentum thickness. So for both displacement thickness and momentum thickness, you would need to know what the velocity profile was within your particular flow, either going in and doing a velocity survey or having some estimate that you're going to use. But this doesn't only apply to wall bounded flows like we're looking at here.  But you could also have a free shear flow. So an example would be where you have one velocity here, and then the velocity gets larger over here, and there's no wall, it's just out in the open. So where might you find that? If you have a splitter plate, for example, and you have a higher velocity here, and then a lower velocity down here, and the plate ends, the profile immediately downstream of the splitter plate would be an example of a free shear layer. And so you're going to get a profile like that. And the viscous diffusion will occur, and then eventually you'll get instabilities developing in this shear layer that will roll up and do all kinds of interesting things, and then eventually it becomes turbulent. But there are planar shear layers, jet flows have the same thing, the wake of a cylinder, when you look at the boundary layer, we'll be talking about that in a later segment. The boundary layer lifts off, and it starts to develop a free shear flow. And it's right in this region here, when you look at that velocity profile, we sometimes use the momentum thickness. So momentum thickness is used quite extensively within fluid mechanics to characterize essentially the thickness of the shear zone where viscous effects have become predominant. And that is displacement thickness and momentum thickness. So what we're going to do in the next lecture, we're going to move into Blasius solution that Blasius was a student of Prandtl's, and he came up with an expression for the velocity profile in a laminar boundary layer. And then what we'll do is we'll compare that to what Theodore von Karman did using his momentum integral techniques. That's where we're going, and we're looking at external viscous flows.


I think hacking satellites is fun. I think it's even more fun when it's all security by obscurity. I would like to present you Zeck and Schneider. Both are members of the Munich CCC. Zeck works as a security consultant, but he's probably best known for the Hacker Jeopardy, which he has been doing for more than a decade. And obviously the radio. And Schneider is an awesome developer for hardware and software. So who has been to camp and seen the talk about the radium there? Please raise your hand. Wow. And who has seen the radium talk on 31C3? Even more people. And who hasn't had any radium update at all? Wow. OK, so without further ado, here is your yearly radium update. Yes. Hello. Thank you for coming to this Congress's edition of the radium talk. We've increased our slot size by 100% compared to one year ago. And we've also, I guess, increased the amount of content by quite a bit. In the last year, we've got ourselves some devices to play with from radium. Modems, actually more than one of them. A phone with contract. And that helped us a lot getting more knowledge about radium. Now, apparently, I guess half of you haven't seen any talk about radium from us before. So here's a short introduction. Radium is a global satellite network made out of low-earth orbit satellites built by motorolas in the 90s. It has 66 active logical satellites. And with logical, we mean one satellite can be more than one satellite in orbit. Maybe it has fade a little bit. And now they have two satellites in one spot, producing one logical satellite still functioning. You have worldwide global coverage, even at the poles on every place on Earth, on the water everywhere. Services, you've got messaging, you've got voice, you've got internet, IP, data, and even some special services which are broadcast only, which they only send down to Earth, and the receiver doesn't receive anything. Now, iridium coverage. There's a lot of iridium satellites, and they produce a spot beam pattern on the planet. There's 48 spot beams, each of them covering roughly 400 kilometers in diameter. All spot beams together are roughly 4,500 kilometers. Now, if you have a very sensitive setup, you can receive more than one spot beam at the same time. And that's going to be another issue during this talk. If you want to have a look at this on a global scale, you can see how much area one iridium satellite is covering on Earth, quite a lot. And by receiving them, you get a lot of knowledge. Well, look at it. Now, there's almost no info about iridium available online or in paper anyway. It's a completely proprietary protocol. There's nothing about it available. It's worldwide visible.  You go to the poll, you get iridium signals. So it's nice to have a look at it and talk about it, and everyone can just go out and have a look at it. Low barrier of entry. Cheap RTLs are good enough to get pager messages from iridium. There's lots of interesting services, the pagers, iridium burst. The devices for that are passive. They don't send anything out. So probably interesting for intelligence services also. And future proof, there's nation states interested in iridium, namely the United States, and also quite a commercial venture behind it. There's going to be iridium next launched next year, at least that's the plan. It's going to replace all of these satellites, 66 more satellites, they will de-orbit the old ones, but still the system will stay compatible with the current system. So worth the effort. Applications, tracking, fleet management, mobile data, emergency services. There are devices for emergency responders to tell them where to go based on iridium, maybe that's in a helicopter or a plane. Maritime sensors, very interesting. With iridium antennas, you don't have to point the antenna at a specific point in the sky. If you have something, it can wobble around, will still work, fine. Aircraft communications, we've seen that. While the spot beams cover all of Earth, apparently they also work 10 kilometers up and there's a lot of applications for aircrafts. So, we have been doing this for almost two years and one year ago at Congress, we had pager messages. Nice, we also had the downlink demodulated and the scrambling going on. The Ring Alert channel identified and some data stuff. Then the radio happened and really the radio was a secret project to get more iridium receivers out there. That worked great. It has good coverage on iridium. It did delay us a little bit, so after the radio we spent a lot of time again on iridium and we got a lot of stuff going. Shortburst data decoding, we ran to the phone, had a look at that. We looked at IP traffic on iridium and even got more data out of that SPD modem than just data which it receives. So, one year ago, this was our recommended setup, passive antenna and very expensive bandpass and low noise amplifiers. That works, but since camp we've got a much better setup. Modified GPS antennas, they're super cheap. They work almost out of the box, you remove one filter, you maybe replace one of the components in there, you've got a pretty nice iridium antenna. Optionally, you can add an iridium filter in there and then you can also use it in busy environments. Just one thing, if you get one of these antennas, make sure it has screws in it so you can reseal it again and take it outdoors. Modifications, you remove one filter, you get an iridium patch antenna, available in Mauser, DigiKey, that's not a big deal. You sold it in, you've got a nice antenna. We've got this thing documented in our wiki. Have a look at that, we'll get a good iridium antenna. Though one thing is potentially missing, if you are in an urban environment and there's lots of GSM and UMTS going on, you probably want to add an iridium filter in there. Murata actually makes one specifically for iridium. You pop that in and you've got a nice and clean signal. It depends on your environment, but highly recommended. Now, receiver setups, cheapest option, take that antenna, attach it to an RTL-SDR, preferably E4000 tuner, and you get iridium reception. Just a portion of the band, roughly 20 to 30%, but still enough to get a good idea about iridium. We've started with that. We've been running this for a long time, and example for pagers, more than enough. Next best thing, real SDR, in quote marks, Radio Hacker F, USRP with more coverage. Passive antenna works with these. They have a good enough amplifier to do it, but the cabling must be quite short. You cannot have many losses in the cable. So therefore, the really recommended setup from us is having an active antenna with an SDR. You can take the antenna outside, have five meters of cable, put the SDR inside. We have a proof setup, you can leave it there. We have something like that in Munich, works a treat. Yes. State of the tool chain, we've improved that quite a lot. It's a lot speedier now. We have better signal processing. We get the signals down a little bit nicer, faster, and also now have the option to cover a much wider band of radio milk, a whole band. And now it's feasible for us to actually decode everything on iridium. Not real time. That's way too much computing effort now, but we can put it on the disk and decode it then. For real time processing, really a major effort has still to be done, but, well, we'll see what happens. So, continuing on that, to make use of modern multicore processes, we've added a queue in there, and you can utilize as many cores as you want to decode iridium signals. Just one thing, the stuff on the left still runs on a single CPU, or a single core, and that's limiting us in terms of what we can do. But really, most faster cores right now can handle the whole iridium band, so it should be fine. We had a play with one of the iridium tests set. Dieter from the OsmoCom guys got one. We had a play session. That was a real boost. He also helped us a lot on the link control word and other stuff to decode. That gave us a boost in the beginning this year, just before doing the radio, and we got a lot of that. Very recommended. These devices, nice. Now, SPD modems. We've got ourselves a few of these things. They're short burst data modems. Short burst data means that you get little packets of data. You can send it to Satellite. Satellite can send it back to you. They're used all over the place for all kinds of services for iridium. These ones are specifically cheap. We got a group order going from Steve M, also OsmoCom guy. 50 euros per piece was rather cheap. Now, the thing is these are really simple SPD modems. They don't have a SIM card. They really rely only on the internal EMI. They don't have a secret in there or nothing else. Anything else? They don't authenticate themselves against the network. The network doesn't authenticate it against the modem. Nothing.  Really interesting. Now, this modem also has debug interfaces, a test port interface, which we found interesting because it was mentioned in the documentation for maybe we can change the EMI or stuff like that. Interesting. It runs over the digital peripheral link, which is like some other multiplex thingy over that, which is actually the physical link, and in there there's the TPI. There's absolutely no documentation available about TPI. There's a small bit of documentation about DPL for another device. We had a look at that. DPL format then looks like that. You have a start, byte, length, data, checksum, and an X. That's pretty easy. It was fast to implement. But the TPI stuff was more tricky, so we had to get into the firmware. During the Osmo Defcon TNT got into extracting firmware from an update image, and we had a look at that, and really you get a table of TPI commands, and most of them are not implemented, but some are. And after reversing a lot of the firmware, we figured out where to go and where to look for the EEPROM stuff, and now we have on GitHub available TPI support for this modem. You can change the EMI. So what you can do is get a contract for one modem, take another modem, you clone this modem, onto this modem, now you have a contract for two modems. Interesting. And also, these EMI's are not, I mean they are blocks, probably you can guess one. You shouldn't do that, and I think it's a big hole. They did that on purpose. There are modems with sim. They authenticate themselves against the network, but that's about it. Who knows how secure that is. We'll have a look at that at some point later. Code is on GitHub, but not quite everything. Then there's another thing, there's a debug interface. It spits out debug information all the time. You enable it also by writing to some EEPROM location, and if you do that, what it spits at you is this. From 1990, really. Interesting. So this stuff evolved quite a lot, so we're now 25 years later and this code is still running. If you enable all of the debug information, you get lots of stuff. First two lines. Ring alert channel. We had decoded already earlier this year. Most of it proved that most of the stuff we did is right. We also got more stuff. Broadcast channels, some sync packets, traffic channels. Some of these information we already have integrated into the tool chain. Not all of it yet, but this firmware is a real nice thing to get data from. Packets. Iridium has 10.5 MHz of bandwidth at the moment they're using roughly 8.5 MHz, at least in Europe. We see roughly 2,000 detected bursts per second on average. And we decode of these roughly 1,200 into iridium frames. And roughly 80% of these don't have severe errors, so we can get an incontrol word or decode some stuff or at least categorize it. Yes. And if you look at that, this is a four-minute interval on iridium. The whole band, these are roughly a few hundred thousand packets and so there's quite a lot of going on, a lot going on. At the top you see the pager channels, they're every 20 seconds, small bursts in the ring alert channel, always active, and then down there, there's data channels, broadcast channels, and more of this stuff. Last year we looked at pager channels, that's only 500 kHz of data. Now we're looking at 10 MHz. That's not going to be done in real time with our current tool chain. Now we can look at roughly 2 MHz, do it in real time, so we'll get a lot of good idea about iridium. There's a lot of room for improvement, at least that's what we think. So if someone wants to help us there, we're happy to do that. At the moment it's good enough for us to get more data out of the iridium system. We usually just record to a hard disk, get the data off, there's lots of data. I mean, you have to think about 80 GB per hour for the whole band. So you really only can do that for specific things if you maybe want to have one transaction off a modem. We're only looking at the downlink, but at the same time, iridium suggests that people use their service cell that it goes up to the satellite, across to another satellite, and down again, because that will save them bandwidth on the single gateway somewhere in the US. And now, Sek will tell you more about different frame types. So we're going to look a little bit into what is all coming down from the iridium satellites. I mean, a little bit of it we already know. Like, this is the overview of the packets. I mean, Schneider already told you, the small bits at the top, the green ones are the pager channel, where all the pager methods come, which were part of our last year's talk. The red below that is the ring alert channel, and then we have categorized the other traffic, like the blue is the broadcast channels. Interestingly, not all of the frequencies are used at the same time, but the changes over time. And then we have several things, like blocks of IP packets, blocks of streams of voice packets, and other data packets. And now, we are going to look at them one by one. The first is the pager message frames, which are already known from the talk. We identified them. They start with a unique pattern at the beginning, which is hex 9669 encoded as binary phase shift key. And our toolchain decodes them, and this is the message I think we used last year. It's not very interesting. It was just for testing. There's not much to say about this. I think that's completely, or more or less completely solved. And then we have the... Oh, yeah. What I wanted to say is that iridium doesn't really like you, want you to use this anymore. I mean, they say you can't... If you can get the pager somewhere, then we will still honor it, but you can't get one from us. That makes them hard to get, maybe a little bit expensive, but they're still in use. I mean, we see lots of messages going on. Then there are the little ring alert frames. They can not... Oh, at least we can't identify them by looking at them alone. We identify them by the frequency range they're in. This is a little bit, like, randomly guessed where the best cutoff point is. The format is mostly known from our play session with the Rakhal thing we showed you before. Dita took a lot of work from us by reversing the firmware and getting us info how to de-goat this. We did a brief overview at the camp talk. The frames look like this. It contains mostly information like the current satellite and the beam you are seeing at the moment. Then it contains the position which alternates between the position where the satellite is at and the position where the beam that you are currently seeing hits the earth. It could, in theory, be used for geolocation, but it's really, really very broad information.  Then it also contains the pages. When the network wants a device to contact the network because it has some information for it, it sends the page message. Unfortunately, that's Timsy. That's a temporal identity, so we can't really tell you which actual device it is. We intend to look into how this is mapped in the future, but we didn't have time for it. This is, as the ring alert tunnel sends the beam ID, you can see as the satellite passes over our receiver which beam IDs we see. You can see that depending on the noise and whatever, you can also see several spot beams at the same time or shortly after each other. The next part of the family of packets are the broadcast frames. We can identify them by a BCH checksum. The polynomial is 1207, which is actually the bit reverse of the polynomial that's used to protect the messaging packets. I don't really know why, but that helps to distinguish those packets. Most info about those packets are also taken from the RACAL Test Set firmware. We've also shown them at the camp talk very briefly. They look like this. They contain information about the network where it tells the devices what frequency offset they have and what timing offset they have to correct for this or what power they are receiving so they can adjust their power. That's not really our focus at the moment because that's boring stuff like about the internals of the network. The interesting stuff are the data frames. We can identify them. They have a valid link control word. I mean, at the beginning, a special set of bits that is protected by BCH checksum. But before you get to the correct bits, you have to re-sort those bits. It's the most bizarre scrambling of bits I've seen so far. I have no idea how they came up with this order. If anyone has an idea, I would be offering a beer. This is three different parts. The content after the link control word is always 312 bits long, which is the maximum packet length. If you look at the discrepancy link control word, those three parts are protected by separate BCH. Check some polynomials like the first 29 and then 465 and 41. There's one interesting thing. The middle part of the link control word is missing one bit. Fortunately, the BCH checksum can correct bit errors. So you're expected to have, like, in half of the packets, you're expected to have a bit error there because they obviously didn't have the space to fit this bit and just dropped it on the floor. The first part of the link control word, which is 3 bits long, that gives us eight choices, is the subtype of the data frame. That we can use to differentiate the packets. The second and third part contain more network information about handoff and acquisition channel and stuff, which we took from the TPI debug code that Schneider mentioned before. But we're not too interested in that network management stuff at the moment. So we are going through the subtypes of the data packets now, starting at the top, the subtype 7. This is just a synchronization packet. If you look at the packet in a waterfall diagram, you can see that it's a single line, which can be used by the receiver to get frequency offsets and stuff. It's about 43% of all the packets we see of the data packets we see. It's just alternating 0s and 1 bits, and our tool chain just decodes them as it's a sync packet, and all the bits were as expected. So it's also not very interesting. The next subtype we see is 3. We don't see 4 to 6. We have not seen them anywhere. The subtype 3 is packets that look like this, and they have a little bit of information at the beginning and a little bit more information at the end. So to me, it looks like one of those two parts is supposedly a checksum, but I have no idea what's encoded there. We have found no information, and maybe at some later date. The next subtype... Oh, I forgot. Now it's okay. The next subtype is a subtype 2, which is the packets are descrambled. I mean the same descrambling algorithm as we had before at the Patreon channel, just in three different blocks, and it's again protected with a BCH checksum with yet another polynomial. I can give a whole other talk about reversing BCH checksums and CRCs now. After the BCH checksum is removed, there's a CRC which protects this. Again, it's a common polynomial, the CCITT polynomial, and the packet then has a little bit header at the beginning, which is in blue, and the CRC of this packet is okay. The header has fields that we don't know, but one field is a three-bit counter that can be used to reassemble longer packets. I mean this is one example. We have several packets, and we sorted them by this counter, so we can reassemble them into a larger packet. If you then look at the thus reassembled packets, they have what I call an identifier of two bytes at the start of the datagram, which identifies which kind of data is in there. We've seen about 40 different identifiers so far, roughly. Most of them, we still don't know what's in there. That's about 70% of the stuff we see inside the data packets. Many are empty. I mean they consist of zeroes. Even some of them don't have a valid CRC. They're just zeroes where the CRC is supposed to be. We will be looking at those later on, but we've identified some identifiers which contain interesting stuff. The first one of those is 0901, which contains SMS messages. We did lease a telephone and just sent some SMS and looked at what comes down. This is one reassembled SMS message, and if you put it into our current tool chain, it results in this output. The format is very similar to the SMS PDU format used in GSM. The only difference is the orange bytes, which are not part of the PDU format, and we just remove them. If we remove them, this comes out. This is just a decoded message. The green numbers, one is the SMSC central number, and the other is the sender number. The date and time when it was sent, the blue numbers are just length indicators. The message is encoded in a 7-bit GSM alphabet, which is basically ASCII except for umlauts and other stuff. Then the other identifier we got is 76.08, which contains short burst data messages, which are sent by those modems that Schneider showed you. Those modems, SPD messages, in itself can be from the specification 1,960 or 1,890 bytes, depending if they are mobile-originated or mobile-terminated. That means send them from a modem or receive them with a modem. But the one we have can only send messages up to 340 or 270 bytes. Still, this is longer than what the reassembled 3-bit counter gives us, so we have another type for continuation of those messages. And then we have the SPD message. If you want to send it, the interface is very simple. You just send an email to data at sbederidium.com, put the email you want to send it to in the subject, and put an attachment on it, and it gets sent out. You can also have a contract where you send it via just TCP connection to an IP port. That works in both directions. You can set it from the modem to just your computer. Or the other way, but iridium side, while there is some documentation where you have to connect to, they have a firewall which is source IP based, so if you just send something, you cannot reach random people's SPD modems. Many applications that we've seen use probably transfer from SPD modem to SPD modem. As we are only looking at the downlink, we can still see those messages as they are coming down to another modem. And the cost of this thing is about roughly $1 per kilobyte, which I think reminds me of the 90s internet costs. Yeah, we have an example SPD message that is not very interesting. It looks like this. If you put it through our toolchain, it contains lots of zero bytes because that was one of our test messages to check for the CRCs and the continuation stuff. Yeah, the users we found for this is stuff like voice for tuna fishing or standalone GPS trackers that has sent just the NMEA sentences of GPS over SPD and this moving map system, which is used by the helicopters from the ADAC to tell the pilot where to go, where the next emergency is. We have two more subtypes to go. The subtype 1 packets are protected with a 24-bit frame checksum, yet another CRC polynomial that had to be reversed. And then when you find it, you find out that, oh, hey, it's the same one that GSM uses. The header of those packets contains an 8-bit counter for reassembly, so you can reassemble more packets and the length. The raw data itself is a bit reversed, so you have to reflect each byte. And if you look at it, maybe some of you already realized what this looks like, and otherwise it could have been a jeopardy question. So on the next slide, yes, it is PPP. So they're just transmitting PPP over the serial line that they have on the air. It can also do multilink PPP, and it can also do a raw telnet connection, like just a stream of bytes. Luckily for us, Wireshark supports this PPP dump format, and we tested it with Lidocs and had our PPP connection and put this into Wireshark and hey, yeah, we can see the HTTP request. Wireshark is a little bit annoyed of the fact that we're missing half of the connection, but that's not a problem. The unfortunate problem of this is, on the next slide, nobody uses Linux. Windows also uses PPP, but Windows also uses the Microsoft Point-to-Point compression protocol. The Microsoft Point-to-Point compression protocol has one problem. Wireshark can't decode it. It just says, compress data. So I went and looked it up, and why is the slide here? Go one slide, father. The Microsoft PPP compression is not that difficult. There's an RC for it. It's a very simple algorithm, but someone just needs to do it. We didn't have the time. Maybe someone can do it. Otherwise, we will have to do it next year. The other stuff we found, you remember the green blobs for IP. This is probably multi-link PPP. We have seen up to 14 channels active at the same time. We have not gotten around to looking at this very much, but I think it's a lot of traffic. So now that we've had this, I told you it's not all PPP on it. There's also non-PPP traffic, which is... You can see this string coming around, and it looks like a Cisco, which is telnetting somewhere. And I was, why is there a Cisco telnet somewhere? And if you look around on the Internet, you can find some slides where people are describing the setup. And hey, that's actually a Cisco on site at the Iridium people. And if you do that connection, the Cisco actually executes a telnet command to somewhere. Yeah. And the last subtype we have is the subtype 0. And this is the interesting part of the talk. It's just voice. And this is just 312-bit maximum length of raw voice data. The problem here is that there is a voice codec, an MB voice codec, which is completely undocumented. It has a very low bit rate. And we were stumped and had no idea how to decode this. And so there were several different options. And the first option was, other people can do it for us. Luckily, MB is a family of codecs, and TNT did really great work in Osmo GMR and Toraya, which is a similar MB codec. You can go and see his talk from last year about this. And we gave him some sample files. And in record time, we got the first version of a decoder for Iridium voice frames. He's releasing his code right for this Congress. This is the repository. It should be accessible by now. This is very fast and has good quality. It's not perfect, but it's good. But wait, we have more. So the next option is emulation. As you've seen before, we've got the firmware for the SPD modem. Interestingly, on the SPD modem, there's the whole DSP code also. Also the voice codec is also on there. So this is an TI DSP chip, which has really, really ugly assembler code. But there is an now unavailable, except if you know the right people, version of Code Composer Studio, a Windows software to emulate this DSP chip. And also with the help of TNT, you can get the stuff running. This is the Windows software it looks very Windows software like. And you can run the codec in there. And it produces the same output as a telephone would. The only problem is this thing is slow. It takes about more than one minute to process a second of voice data. Yeah, that's not fun. And it's not really automatable. You have this Windows software and have to click somewhere. No, you don't want to do this. And roughly three or four weeks ago, I thought maybe there's a third option. And the third option is to use the DSP code. But I mean, we don't want to understand it, but maybe we can just wing it and emulate it by translating into crappy C. And the optimizer will fix it. It will run fast. There's documentation for this chip, which describes the CPU and the op codes.  It takes the object dump output, which has the assembler code, and then returns parts of C and puts them all into a file. And we put it all into the compiler. And hey, we've got an option, which produces a bit perfect decoder and is running really fast. The optimizer does it. The only problem is that you need the DSP code for it. So it's not entirely free because we can't really redistribute it. I suspect that nobody really cares about this old codec, but I don't want to risk it. But the firmware updates for the SPD modem are for free on the Internet. So it's just a matter of a little shell script to grab that firmware and put it through the compiler. And then you should have a perfect thing to decode. I didn't get around to write this shell script yet, but it will be there soon. You can pass it to me and I will do it. And now we have perfect voice decoding. And we want to show this to you. So we have a demo. One of those windows. I don't know which is the right window. I'm short-sighted! What are you doing? This is really well prepared. Yeah, that's it. So there's this tool, which you can run on an output of our tool chain, which contains the packets. And it shows you the frequency and the time of packets, which are supposedly voice frames. And then you can just click a start point and an end point. You have 509 minutes and 40 seconds left for this call. Or text 2888 for more account information. Please wait while your call is connected. The video has landed. Coast is clear. Coast is clear. I need to terminate this call now. We have problems. Needless to say, this was of course recorded from this very phone. From one of our members at the Munich CCC knowing what we're doing. No problem there. That's voice and working quite fine. If you get the packets in and for the decoder, no problem, we can decode that. But there's still lots of stuff we're not able to decode. And they look like voice frames, but they're not voice. They decode as 100% non-decodable. They usually come in trains of free. So you have on free channels activity with things that looks like voice. It's not. So what is it? We have no idea at all. Might be encrypted voice. There are people who have the idea maybe they use channel bundling to use some more bandwidth intensive cipher. If anyone has any idea about that, that would be great. But the only way to decode voice which uses this would be more interesting. Range. We had the phone and we were traveling a little bit in Germany. And at a distance of roughly 300 km we placed a call. And in fact could receive that in Munich. Roughly half of it. That puts around this circle around Munich where we can receive calls of iridium. That's quite an area. So there is no encryption at all on the voice frames. Nothing. They just didn't bother. The phone has a little bit of authentication with the usual GSM algorithms from the 90s. Nice. But the voice is unencrypted.  Just be aware. We found at least three different vendors supplying this stuff. Probably only to government agencies and other... Well... Yes. I guess if you really want to get these things you can get them. So our future plans looking at uplink. At the moment if we take this phone place a call. We get what's coming down from the satellite. There's a slightly different modulation at least in the beginning. We suspect that everything else will be the same but so far we haven't looked at that. Shouldn't be a big deal. We just need to take some time and actually do that. Then there's the GSM tab for Wireshark which is a nice interface to put in your own protocol into Wireshark and decode that. Would be very nice and we're already working on that so you can have a nice view in Wireshark to filters that work. Decoding unknown packets. There's lots of stuff going on on type number 2 and type number 0 which we don't know what it's yet. Really the limiting factor there is devices which brings us to the next. We need to get access to more devices and we have some on our list to have a look at because if you have a device it's the easiest option to actually see what's going on. You know which one of these packets is yours. You can send special data and play around a little bit that makes things really easy in fact. Then signalling handover and authentication. We haven't looked at that at all so far. It's actually not needed really if you just want to get to the data but it's quite interesting for example these phones they look all the time at what satellites are available and they choose which satellite they want to use. They perform the handovers and all of these things we want to have a look at that too. Further reusing of firmware has lots of stuff to be learned from firmware and still. I guess we reversed like 10% of that SPD modem. Maybe it has still things to show. Performance we've already mentioned it. Lots of stuff to do. Now the code is on GitHub. Almost all of it, maybe a few bits missing to get the whole tool chain working really smoothly. We're going to jump into the ISC channel and we'll have a look in our stash and see if there's something missing. In general all the information we've presented today is public and in the GitHub repository. Again we're looking for specification and it's actually products, iridium go, open port devices, any SPD enabled devices for example rock 7 devices if you have access to the stuff if you can lend that to us for like 2 weeks would be very nice and then there's also iridium burst which might replace some pages for some of these users. These are modified SPD modems, they're passive and you tell iridium hey, send me this message to Europe, send me this message to the US or maybe to the globe and then these devices will pick it up undetectable and we have an idea which frames these are. These are special pager frames we suspect we see them all around the world same format probably encrypted but maybe only somehow cobbled together encoding which we haven't seen yet so that's going to be very interesting and thanks again to TNT, Dita and Steve M. There was a great help, very inspiring people thanks to the OsmoCom guys thank you very much. Thank you for that awesome talk we don't have any time for questions anymore but I guess we can contact you via email or IRC or anything else I'm sorry We're on time, we're on time we have 15 minutes left Oh yeah I fucked that one up, we have plenty of time for Q&A I am really sorry so please line up with the microphones and get ready to hit and shout out with your questions while you do that, signal Angel is there something we should answer for the internet? Testing, yes Yes, there is one question there is someone asking if the mystery data could be like sensitive, I don't know, military police, something like a custom codec We have absolutely no idea Okay, thanks But likely Thanks Thank you I heard that the NSA was trying to secure the iridium network where did they go on? Secure the iridium network As far as we can tell at least the part that we looked at there was no attempt to secure it, it's still the same stuff that was used when it was built I mean we see some messages that we don't know, it's possible that those are encrypted communications going on but we can't tell at this point so there might be encrypted communication going on in iridium that we don't know about Thank you, microphone number 3 in the back there, no, nobody Since it's conceivable that you can actually I mean the actual database that's verifying the contracts is ground based, does this mean that if you transmit a phone call to the satellite that it has to first send it back to Earth in order to verify that data is allowed to be sent and relayed so you should, I mean typically be able to make a phone call over the 150km radius that the satellite will repeat back to Earth too No idea Actually I don't really know we haven't gotten that far in our protocol understanding to even be able to try this would definitely be interesting to try it I don't mind throwing a bit of money at that if you want to try it Are there any more questions? Right now I can't see any of them Oh, microphone number 4, there is a question Then signal Angel I have currently got three questions from the internet I'm going to start with the first one that is the code composer studio version that you found, the old one Was it specifically to the DSP or did the DSP support go away or what to deal with this version? Yes, exactly At some point code composer studio dropped the support for this specific DSP and we had to get a very old version to have still support for it I think it's CCS version 3 So I would say another question from microphone number 2 I just wanted to ask is it legal to receive these things? This is a very good question and I refer to you the Weltraumtheorie So as far as I can tell there's no problem We'll just overrule you We have another question from the internet The question is what is the state of being able to geolocate iridium terminals? During the ring alert you see where the device gets paged and that's paging a specific cell You know where that cell comes down So that will tell you a rough estimate where that terminal is Of course the cell is big many hundreds of kilometers So probably you can have a look at this over time and see how the paging change when the cells hit some border If the terminal doesn't move you can probably pinpoint it better using that We haven't tried that yet but that's our guess how it would work Before we get to the next question I have a short statement about the door handle The hall is full Please don't let anyone in The next question from the internet The question is is your data that you collected available somewhere for somebody else to have a look at? No Okay We won't publish any recordings or anything like that We might publish some samples of our own messages I mean you've seen a few on the slides now If you bug us on IRC we'll probably have something But in general there's you can't just collect data and make it public I mean the great thing about this iridium is just open your window you will get data Lots of data Then we have another question at microphone number three So since recording the data is obviously legal Is it against some policy of iridium that you get angry emails from them that you have any contact with them? As far as I can tell they are aware of this and for them it's a jungle and I think they just deal with it or in fact who cares? GSM has been shown to be insecure for a long time What's the most used cell phone network on the planet? Thanks for that answer Thank you We've talked about listening What about manipulating? As we said we don't really have a good understanding of all the signaling and more intricate details of the handover and stuff and the authentication We haven't really looked at this because the data we got was so interesting that we spent our time there There's probably lots of possibilities but we haven't tried anything yet And I would recommend to not just try that These things have been built in the beginning of the 90s and I'm not sure maybe just before they de-orbit it if someone can have a play but I wouldn't really Do we have more questions from the internet? We do The next question is if where is it gone? Where is that question gone? If somebody wanted to know they think you know more than you tell and ask if you've got a gag order We definitely have not gotten a gag order I have had no contact from anyone who is affiliated with iridium or any law at all I've once checked the logs of my web server iridium service did access some of my files then I got a little bit scared and then I realized that was me going over the phone and downloading something Okay, then microphone number 2 That's just the microphone Angel No question from that person Then the internet, please go ahead Okay, hello? The internet wants to know how many uplink stations there are There's one civilian use and one for military use at least as far as the published information goes And one more which we don't know what it's exactly doing but it's near the pole There have been many more in the past I mean when they built this thing they had one in Japan but as far as the documentation goes they are all inactive You have to know that iridium went bankrupt beginning 2000s and at that point they scaled down the whole thing a lot to make it more cost efficient and also scaled down the amount of gateways So sometimes you get references for lots of gateways for iridium but they're all inactive I'm not sure what they're doing with these anymore Okay, I think we have questions from the internet left Actually as far as I know right now we don't Great, then give a warm hand of applause for a second Schneider


Gestational diabetes mellitus, GDM, is a condition where women develop high blood sugar levels during pregnancy. It is estimated that up to 14% of pregnancies worldwide are affected by GDM. The causes of GDM are not fully understood, but it has been suggested that disruption of the gut microbiota could play a role. This study investigated the gut microbiome of pregnant women with GDM and healthy pregnant women without GDM. The researchers found that the gut microbiome of pregnant women with GDM was significantly different from that of healthy pregnant women. They also identified specific bacteria that were associated with GDM and linked them to certain metabolic processes. The findings suggest that alterations in the gut microbiome may contribute to the development of GDM. This article was authored by Zhonghan Sun, Zhongfei Pan, Shaoli, and others.


I'm gonna be trying to get him in the mood while we cook Marvel squad you are looking good today. I don't know if it's just a Christmas time of the year or what but you guys are Looking really freaking good No, I'm just kidding Marvel squad that is what I'm gonna be doing to build today I'm gonna be trying to get him in the mood while we cook and you guys already know I'm gonna be trying to flirt with him I'm just gonna set the whole mood I'm just gonna be telling hyping him up telling him how good he looks his body's looking good Since he's been working out like rub his muscles you guys already know what this video is gonna be about So today I'll be trying to get my boyfriend in the mood while cooking He thinks that we're gonna be filming today a video where it's kind of like come cook with us You guys are like basically come make dinner and we're gonna bake cookies on this video Which is super exciting because I know you guys really wanted us to do like a baking video So we are gonna give you that but I also had a spice it up and prank bill in between the video and just try to get him In the mood see what he does he's gonna be like babe What the heck are you doing bill actually just went downstairs to grab a few of our Amazon packages because you guys already know It's Christmas time so we're already mega gifts for our friends and family and I'm super excited for this year And is everything that's happening already. I'm super excited be doing vlogmas. This is vlogmas day five guys We're already getting lit in the marble house baking cookies doing some fun things But if you guys are new make sure to go down and hit that subscribe button and join the marble family It's you guys gonna find every single time we upload and make sure you give video a big thumbs up guys If you guys are not already click the like button go click the like button right now and let's try to give you 20,000 likes. I'm also gonna spice it up too.  It's really fun posting every day I will say it is a lot of work trying to do content because not only on are we on YouTube or on tiktok We're trying to do our live streams. It is a lot of work, but you know what this is probably the most fun We've ever had and I'm so grateful for everything that you guys have given us all the opportunities and Marwa squad We are so close to a million subscribers. I cannot believe it. We're probably gonna hit it soon I'm so excited for this milestone like this is insane Like I in a million years would have never thought I would hit a million subscribers like this is a blessing And I am so thankful for each and every one of you guys who supports us every single day Thank you. We love you if you guys are not subscribed make sure that subscribe button cuz we're on a road to 1 million We're almost there stay tuned guys because our merch is dropping and we know the date that we are dropping it So stay tuned because once bill gets back here and we do the intro We're gonna announce when the merch drops and we are so excited to tell you guys So stay tuned and we're gonna be picking two people today since we didn't pick the person that we were gonna cash out I'm because I want you guys to comment down below when you do your cash app and your name so we can cash up you the money So we're gonna do two people today We're gonna do one in the middle of the video and the answer make sure watching the video all the way through I'm gonna stop talking and we're gonna wait for bill to get here and let's get this prank on a roll I'm super excited. Oh my god. That's a lot of packages. This is all from you. You got a big package What girl? Guess what we have to do the box the box.  Let's see 22 days officially Counting down every day every day of long miss. We're counting down until it hits Christmas until there's zero days left This is gonna be crazy. Oh my god. We're about to hit a million literally 30 K away. Oh my god. This is insane 30,000 subscribers Like two weeks ago. We were like 60 70 K away With something good, but why are you touching me? Why do I feel like every time we start a video I'm always bringing in packages and they're always coming from you So what are you spending our money on they better do they better be Christmas gifts for me? I better see those wrapped up under the tree with a big bill, you know what bill on it be quiet. Uh-huh today guys We're gonna be doing come and cook with us. We gotta show what's on the list Before we get on to that I want to show you guys what we did for one of our tiktok videos I want YouTube to rate it. We already asked to talk to rate it. I want you guys to rate. Who did it better Mariah or bill? I did a little MB. Look at that. It actually matches our merch that's coming out in a couple days No, the merge is coming out December 7 December 7. We can say it now. Yes. We say it Okay, 3 p.m. Central time Monday merch is coming out guys. It's gonna be a candy can collection and it's limited edition We have all-round print and unfortunately We do not have sample products because they're so backed up and everything going on But we will be getting it a couple days after yes, we'll be showing you guys it too So we can't wear it now. Otherwise, we'd be wrapping it right now We'll be showing it to you trust me once the website is up and going we're gonna let you guys know make sure to put In your calendars Monday December December 7 at 3 p.m. Central time so whatever time it is by you 3 p.m. Central time by us rate these down below How do you think Mariah? She's just freakin stencil so she did but yeah, and then this is mine coming down below Girl I did not use a stencil though. That looks amazing. This is an ornament. That's going right on the tree right there So what we got on the menu today on the marble squad menu if you guys don't follow us Instagram Make sure you follow us on Instagram. We post our final product on our Instagram story whenever we're done cooking dinner We always post like the plate full of stuff and it looks better than on the plate I feel like we like butter it up like real nice today. We're making creamy dill chicken So we'll have chicken asparagus potatoes. I don't even know what that I don't even know what creamy dill chicken is but we're gonna make it and I bet you it's gonna be a crazy good It comes in a little package like this. Here's this and I totally forgot Mariah I just reminded me we bought cookie like Christmas like stencil cutouts so we can make I've never used it before so that's what's on the list for today. It's Christmas time. Happy vlogmas day five I hope you are enjoying it. I hope all of you are the YouTube favorite We can't put this in the video man stop doing that. Okay, okay You're gonna Chris's excitement. All right be excited be excited, but right the cameras filming Come on, but before we start cooking. I'm gonna go change real quick. You go change. You already you look cute She's so cringy guys so Mariah's leaving me stranded to make this meal on my own I guess she's apparently changing but this is the lineup that we have that all of this is supposed to make this beautiful meal And oh my gosh, why are you wearing that? Hold on you're not wearing this on camera. I was supposed to spin you. Why are you dressed like this? She had the camera rolling again. Go put on a chair. No I'm wearing this. You're wearing that the whole video. Yes You look cute, but you need you need you stop me a little extra Okay, I already showed him what's all on the lineup and what we got to do we got to start cutting Dicing and while I start dicing you want to start for me to go for the cookies. What are you doing chocolate chip? Why are you acting so weird? Do the dough? Are you stroking the dough? That's what you were doing Okay, tell me I'm wrong really nasty. Why are you being sexy? I understand that you look good and you look sexy wash. Yeah, but can you calm down? Yes, okay? Okay, thank you All right, so as you just saw we got a lot done Mariah finished cutting up all of the stuff that needed to be cut up I only cut up to it's harder than you think you have to smush it out And then you have to cut use these stencils, and then carefully peel them up guys This is more work than I ever thought it was gonna be what what are you missing? Literally we cook and this is how she acts all the time. Oh, you know you like it though, you know you do I do I love it.  He drenched the potatoes potatoes You drenched the potatoes with salt and pepper, and it was so hot I wish I had a picture the pepper there was so much pepper on it that we literally could barely eat them Hey, they still turned out good. Oh my god guys How cute these cookies are coming out better than I thought they would it took a little bit of effort a lot But hey, we're gonna go with six That's we got our potatoes roasted and then now we're about to cook up our chicken, which is super exciting Honestly, I think we're about halfway on both like having our dinner and dessert. Yeah, I gotta go back I'll be back. Okay. You like my cookies though, right? Yeah, I'm excited. Yeah, the best cookies ever I know better than you would make them All right guys so bill just went to the bathroom so at the end for the grand finale when we're eating dinner He's sitting down. I'm gonna pull his seat all the way down and I'm gonna start giving him a laugh dance on camera That's definitely gonna be the final breaking point of today's video He's gonna be like what the heck and that's when I'll end up telling him It's a prank and it's we're just trying to get his reaction because I'm not already go hit that like button right now This is about to be hilarious. I can't wait to see how he reacts.  Well, no, I was trying to figure out where to place it. No, it's on me doing that That's pop these babies in now. You can see it before All right, we're taking one more round the world look before everything is finished except the cookies Hey, no, do I know it's funny she's calling me out for being lazy guys I am the one that always cleans up always does the dishes I swear she has not touched the dish in the two and a half Month that we've been a lot of things that I do the lot of things that you do so it kind of like equals out So you're saying I do a lot. Yeah, we both do exactly But anyways, so we got the deal. This is the chicken. Okay, so we got the asparagus down here We got the potatoes up here guys. This is it. This is it last thing we need to do Just make the sauce and we're good Ah Why don't you feel the heat radiating off feel the heat radiating off the chicken not you? Excuse me. You're hot, but can we finish the video? Why are you acting like this? All right, sorry guys, we're having technical difficulties in Mariah right now But guys we will see you when everything is done. This is the final Perfectionist when it comes to making our plate look really good. So stay tuned. It's gonna look better than this I Look at it.  It looks amazing. The diced potatoes came out great Thisparagus is phenomenal. The only thing that sucks after cooking guys It looks beautiful here, and this is what only Instagram and everyone sees they don't see any Look at this.  Good part is eating.  I'm rewarding you get up and we're warning Okay, oh my god. I feel so bad guys. I flung the edge of the chair I'm so sorry babe Is it bad? Is it broken? I'll be a bad guy. I gotta tell my girlfriend. It's already bruising I'm so sorry, babe. Oh god So back what I was trying to do Mariah show to show me something right now I keep telling her sorry, and she just keeps saying to turn on the camera. I wait. What are you doing? Hold on. What are you doing? We can't put this on camera babe. Is this this is the surprise right actually This is a prize. What are you doing? Babe? We can't put that camera Okay, I'm rewarding you for your awesome success. Okay. Yeah. Yeah, but you're in the mood, right? Yes, you've been putting in this whole freaking time.  You've been acting so I had to get you in the mood while we cook I feel really Like you're joking Did I even hurt when I hit your chin? Yes, I'm in the oh my god.  I am not sorry that I hurt your chin So after we eat we'll be right back and we are going to announce the giveaway. We're doing two right now All right, so we're doing the giveaway throughout this whole like vlogmas every day every time we post a video We're gonna be giving away $50 to one person that subscribes turn on the notifications comment down below your cash app It's just always someone love within the first, you know couple hours 24 hours of us posting a video So we really know that you guys are like, you know putting in that effort So this video we're doing two people because we forgot to you know do one in the other video We didn't have any cash out to do yeah, but now we're doing two people so stay tuned. We'll see you after All right guys, it's the time of the video we give away $50 we're doing two people there since we didn't do it for the last video Yeah, two people today are gonna be get sent $50 and that means that one person from this video that you're watching right now It's gonna get $50 in the next video Yeah, so comment down below your cash up in your name and why we should pick you as Make sure to be active on our account and that's literally how it could be even if you don't get in this video Even if you don't get an X we're doing it every day up until Christmas. So let's go. Who's the first person drum Thank you so much for being on our channel but have your post notification now We're about to send you $50 right now. All right, we just press pay right now Ashley. We just Yeah, she's probably like why did I just give $50 my child? That's so funny. All right, so That's the first person. Let's do the last person before we end out the video. The next person is I'm so you guys are majoring watching videos helping you through my stressful days of college shooting y'all show What a loving relationship looks like and I'm happy to be part of it and she's in college We have to help this girl. We gotta give her some gas money guys. All right. We just sent the money Lindsay You just received a girl. Thank you so much for being a second Good luck I know it's awesome. Literally. Thank you guys so much for supporting us. We love you so much If you are new and make sure to go hit that subscribe button turn on post notifications and comment I'm a moment done because you could be one of those giveaway winners is we just want to have you along with vlogmas We just came out with a new intro a lot of you guys had some awesome feedback on it So we're so happy and March get ready December 7th at 3 p.m. Central time This is the first video. We said it Monday the 7th of December. We're dropping in at 3 p.m. Central time Be there or be square on Teespring. We love you guys and we'll see you in the next video See you tomorrow. Oh, yeah, see you tomorrow. Peace