So, thank you for coming. For those who don't know, this is being taped and webcast, so anything you say, Canon will be used against you in court. So, just be aware of that. So, welcome. We're going to start, Jim Gage is going to give a talk about embedded systems. I met Jim in January, in the spring, at the RSA conference this year. But he's been- No, I-ITF last summer. What's the idea of this, though? Okay. That's right. We actually sat down at RSA. No, we sat down here last fall. Sometime in the past, I think. And some day to be- And talking a lot about these issues, which is really why I wanted to bring him here. He's actually been around for way longer than that. He's sent me his biob. I'll just mention some highlights. Formerly from Bell Labs, VP of software for the One Laptop for Child Project. One of the developers of X-Windows, when he was at MIT, worked at the W3C, editor of HTTP 1.1, which was a long time ago, and been working in systems and embedded systems and computer systems, I think since they were invented. More recently, which is how I got to know him, looking at drivers and buffers and not the computers you're using, but the computers all around the computers you're using. And that's what he's going to talk about today. And I'm excited about this. Okay. Thanks, Bruce. One other thing I worked on was sort of the direct ancestor of these things we carry around. Some of you may remember the IPAC handhelds way back when. And that's where I got my feet wet with embedded systems. In fact, internally, they're not much different than what's in your home router today in terms of not a memory and stuff like that.  I need to sort of make a gauge of the audience here. The first two of these I instigated deliberately. So the article that Bruce wrote that came out in January and wired, he did a wonderful job at. It's called The Internet of Things as Wildly Insecure, and then it goes on and on in terms of the title. Also Dan Geer, who some of you who deal with security know Dan. Dan's an old friend from Project Athena Days. So he also wrote about this problem in May. It's in the Lawfare blog. I recommend those of you who are interested in this problem go look at this. It's also a recent one, which is quite amusing, but unfortunately the nightmares are much worse than this called Nightmare on Connected Home Street by Matt Honin on lawyer last, like, this month. How many of you got familiar with what our friends at the NSA were doing in 2008 in terms of doing interesting things to devices of all sorts, including routers? Remember, that's 2008. There are many other people out there than them, and they've had a long time since then. Take that part. And then there's a final article, which I've, a final pointer, which is a paper that I was quite surprised when I gave a presentation at the MIT Security Seminar was not understood by anybody in the audience. It's called Familiarity Breeds Contempt, the Honeymoon Effect in Something Rather, and I'll talk some more specifically about that because I think the results of that are pretty profound and need to affect how we think about engineering software in the long term. There are links in the slide, in the PDFs, that I believe are online. We're used to throwing computers away. The phone, it often breaks before, you know, before it really stops being useful.  Your desktops tend to last yet longer still, but we still basically throw them away. We've learned through very great pain over the last several decades that we have to keep them up to date. But now we're building these very long-lived systems anywhere from our house to automobiles to the network inside your house, you know, and we're embedding these devices, these computers into these things. And the installation costs or replacement costs of these, it's often the labor dominates the cost by far. The box itself might be a $10, $20, $50 box, right? But to get someone capable of plugging it in and making sure it works for somebody may involve a truck roll and or service calls that you spend hundreds of dollars for. So it's really a fundamentally different game. These things are no longer easily replaceable. They're built into our environment. And some of these now, the potential lifetimes are decades. I mean, I have two Nest thermostats in my house. What am I supposed to do if and when Google stops issuing updates for them? I installed new heating equipment about five years ago that probably has a 30-year lifetime. I had to rewire things to get it to plug in. These timescales are long relative to human organizations. That is fundamental here. What this means is you can't presume sometime later that what you'll need will even be possible to do anymore. Whether it's the engineering groups dissolved, the company may not even exist anymore. What do you do? And we've presumed that we can just forget about these boxes. Is this safe? How many of you know what the acronym SCADA means? Well, some of you know that that's a huge disaster that a certain industries are going through right now. This is a much bigger mess, a much more widespread. That's just one instance of a much more generic problem. I just about hugged Sandy and Matt Blaise when they told me about this paper. It's called Familiarity Breeds Contempt. It's the honeymoon effect and the role of legacy code in zero-day vulnerabilities. It was published in 2010, but doesn't seem to have gotten much coverage. This is figure one out of that paper. Seems to be solid as far as I can tell. Certainly some of the people involved are very well respected in the security area. Bruce can speak that better than I can. The left of these is the sort of classic mythical man month that we expect to discover general purpose bugs. And the reason why it tends to go back up after a bit is that you started to ship product and so now there's 10 or 100 times or 10,000 times as many people poking at it. So you see some additional bugs and at some point you sort of have discovered most of the things out there. However, vulnerabilities don't work this way. They studied like I think a three or 400 different software packages, both open and closed source about when vulnerabilities are discovered. It turns out there's this honeymoon period when typically people don't discover anything evil in them. But once you start finding one, unfortunately the rate of an increases. This leaves me with some interesting takeaways that for those of us who read the mythical man month about software engineering, we've missed something entirely fundamental here, which is there's a really cruel master here that if this is true and I believe it is about software engineering, then you can't leave software and devices unmaintained that updates are fundamental for the life of these things. You don't know when, these are very complex systems. You know, a five or $10 part can have embedded in an entire operating systems and user spaces on it, on top of it that are millions of lines of code. We don't know how to make bug free software. That's just fundamentally true. So fundamentally, we have to for anything which is at least network connected or indirectly connected via people dropping USB sticks and parking lots. You've got to have secure update for the life of these devices and we don't ubiquitously. We do for our end systems, though of course Microsoft would like to stop having to maintain Windows XP. They actually still maintain that for embedded use only they claim. But this has some very interesting consequences.  And the owner's got to have ultimate control. You've got to be able to fix these things even when the network's busted. Many people are locking these systems down. I think Google got it right with the androids where at least the Nexus devices, you can unlock them. Okay, and do what you will with them. There are two reasons for this. In an emergency, you need to be able to take action yourself and you need to have the community of people maintaining and fixing code around it. And if new code isn't able to be easily tested on these devices, you don't have a community of alternative software you can run in these devices. So it's very important that despite the fact that I'm saying you've got to have a secure firmware and the like, you also have to be able to unlock the things. So, you know, how long are these things going to be in an ecosystem? I mean, often, home routers often sit in people's houses now for, you know, seven, ten years or more. There's no reason often to touch them. They're often, you know, us geeks tend to throw them away quickly, right? But your grandmother doesn't, you know. Now, this brings up also an issue of trust. Who do you trust? Think about this from a humanity side thing. And think about the TAO catalog of people deliberately putting in them. Why should the Chinese trust firmware that comes from the United States and vice versa? Why should I trust my ISPs firmware? They don't understand security either. British Telecom is a great example of this, okay? And Bruce is no longer at BT. But as some of you may know, they put a back door into each and every home router that they gave to each and every one of their customers. That means if you break that, if you break their management network, you've broken all of the routers. It doesn't matter. There are so many other ways to get in, it doesn't matter. They just made it particularly easy. But over these long time scales, community maintenance might possibly succeed. The X-Windows system, which Ron and I worked on, you know, we're working on 30 years ago. We celebrated the 30th anniversary last week, okay? For the last 25 years, it's actually been upward compatible and maintained. So there are software artifacts that have been maintained over human lifetime scale things. But as far as I know, they're pretty much all just open source artifacts, okay? But if you've got a, what? Yeah, there are a very small number of such systems out there, but, you know, but the number of them, you can probably number them on non-open source ones. You could probably number on, you know, fingers of one hand maybe. But here's a problem. Binary blobs may leave you helpless and vulnerable forever. You can have vulnerabilities in those too, okay? And you don't have control of those bits. You can't rebuild them. Boy, you got a problem. I've focused mostly on home routers and modems, but most of what I'm saying is true for all of these embedded systems. Most of them are now Linux boxes. So we have close to a monoculture there. I focus mostly on home routers and modems, both because I'm worrying about fixing buffer bloats, so I was interested in understanding how long would it take for me to get fixes for buffer bloat into your hands? So about three years ago, I did a thought experiment, which was how long is it going to take? I could proceed and maybe someday we'd have fixes for it. From the time we get it into Linux, how long can you guys go and buy this stuff at Amazon or Best Buy or wherever? And I was pretty horrified to discover three years ago that these devices start out with four-year-old code on day one on a brand new device. About a year, a year and a half might be what you might consider optimal, but no, it's much older than that. In fact, it's, on day one, almost, these devices are on the last stable maintained kernel that kernel.org publishes.  There's no maintenance on that or any of the other pieces of it. What's more, if somebody patches, the patches almost certainly can't get merged upstream because they're so far out of date that they won't apply on the new thing. So any work that somebody does to maintain it downstream is why you pay red hat and the like big bucks for the enterprise systems. Most embedded devices are no different than routers, except they're not on your path to the rest of the world, which is the most critical thing, right? And we're now, more and more of us are depending on our internet service. In fact, it's only a matter of when the conventional POTS copper system gets turned off. Its economic model is so far gone it's not funny. They have to unplug it because they can't afford to keep it running. Okay? This means that your phone service is coming in over that internet service, too. Okay? And or these guys. Now, these have much the same problems, but we replace them every n years. But these guys have binary blobs, too, despite being either Linux-based, i.e. Android or iOS, as well, usually in the communications drivers. So they're actually a similar problem. Shorter lifetime hardware, but this will break someone. Okay. So there have been a number of wake-up calls which have mostly gone on ignored. There's been a number of different researchers, DEF CON, and elsewhere showing signal vulnerabilities that have done things like, you know, half of the home routers they happened to test, right? DNS changer was also, some of you may remember that, was also attacking home routers as well as hosts, usually just because the password security in these things is sort of not, often non-existent. There's 4.5 million DSL routers in Brazil, which people are doing financial fraud on. Okay? Not in this country, but the scale is beginning to get interesting. This spring there was this interesting worm called the moon. There should be a space in it, I guess, that the sans folks looked into. It's mostly benign except that it doesn't leave you with a worm and fuzzy feeling. What it's doing is going around looking for other vulnerable home routers. It's using home routers to determine other vulnerable home routers, and it's most of the links as routers. You're probably familiar with Heartbleed, if you aren't, you should be. It's really a matter of when, rather than if we have a really big problem. In fact, we probably already haven't and don't know about it yet. Somebody's just waiting, okay? So there's this recent amusing nightmare on Connected Home Street, but it's really only a minor bad dream from my point of view. The real nightmare just as likely as the author of this is that things just stop working one day. Not just necessarily yours, but everybody nearby or whatever scale you care to name. You end up with no internet at all. You can't access bits. If the bits were available or became available, you had no way of getting them. You might even need to replace the devices. I've lived this nightmare or something close to it. I've looked over the abyss into the abyss. In our particular case, and I'm not going to say much more than I say I have in the slide, the root cause was the binary blob in other non-upgradable devices that were all over the place. It doesn't matter whether these are bugs. In fact, I still think even after the TAO catalog was published that what I saw or what we saw was a bug. It doesn't matter whether this is an implant or malware or a bug, it's still a disaster. I've already looked into that abyss. We don't want to go there, guys. Unfortunately, there are people who have motives who wouldn't mind it. There are a lot of hysterical causes for this. None of them are great. The first flash file system for Linux happened to allied the user and group IDs. This means that on most of these devices, these things are all, everything's running as root, which radically increases the number of vulnerabilities that are serious. The simple matter of configuration to fix this problem, but somebody's got to do it in the code basis from which these vendors derive their code. At the time, for example, the IPAC, which was the year 2000, came along. We didn't have much flash or RAM space. We had 16 megabytes of flash. Most of these devices today still only have four or eight megabytes of flash. There were way too small to use conventional Linux distributions from which you would find an update stream. They've usually been using some distribution of Linux and stuff on top. Occasionally, BSD, but it's almost all Linux. At some point, the chip cost will get so cheap that it just will be a crossover in the fact that the much bigger chips are at volume, much higher volumes than the old flash chips means that there won't be any savings on the bill of materials. Then we have the economic disconnect. I'll talk more about this between the costs of things and who gets the benefit of the work. The bomb costs drove the bootloader to unprotected flash, typically. Then we've got the binary blob disaster, which is my next topic.  They typically have taken some random set of bits and freeze on that while they're developing that silicon, debug a pretty bad device driver into existence, and then shop their sample design around to the so-called original device manufacturers or ODMs. Those things are often usually a binary blob in certain cases. Communications devices are one. GPUs are another. Sometimes others. It doesn't happen on servers for lots of reasons, but on these markets, it's not happened. Sometimes these chips and modules have their own processor, which means they have their own code. You have another binary blob. This is turtles all the way down. One of the hardest problems we had to debug at OLPC was in fact the bootloader for the Marvell wireless module, which was an ARM9 processor, and there was a bug in that. We were having about one in ten upgrades fail, so we couldn't even upgrade the module unless we fixed it. That one caused me to lose a lot of sleep and only got fixed because someone was able to look through over somebody else's shoulder and find the line of code. After six months of struggling, it got fixed in five minutes once the code was visible. So ODMs take this pile of Linux and applications, ship this stuff with these binary blobs, and they have no incentive for updates. They've made their sale. When they made the design win, they've locked that ODM into that chip. So their incentive is to do nothing. Anything more just costs them money. So there's no update stream and there's a frozen ecosystem. The ODMs can't do anything about this. They're stuck with the cheapest, often the cheapest chips, having these binary blobs attached. So you don't see a culture of, yes, we will upgrade this thing over time, the way you typically do. As we've learned, the hard way we have to do with conventional machines. And these poor ODMs have no real financial incentive to update either because they've made their money once you've bought it. You having problems is another potential sale. It might affect who you buy the next time. The suppliers, well, and again, the vulnerabilities, remember when the vulnerabilities occur, much, much later. So the silicon provider doesn't see the vulnerabilities. The ODMs don't see the vulnerabilities. The ODMs might give you new firmware for a order a year, usually just to fish crash bugs because they don't have to take the service calls. And the returns from upset customers. They really don't have the expertise anyway. They aren't able to develop the expertise. They don't pool their effort. Whatever fixes they do do is too old to possibly get integrated into the upstream maintained versions of software. And then most of these devices are still manual updates by end users, which means it doesn't happen unless it crashes. Okay? So we have a fundamental problem here. The, you know, the consumers of these are you or on your behalf, your ISP. The ISPs sometimes buy these boxes, sometimes they don't. There's no real competence in this kind of security either. Certainly not in how embedded systems get put together. You guys don't have viable choice out there because in fact there's at least one such binary blob and nearly every one of these devices is currently on the market. So when we're working on buffer bloat, the number of different routers we could run our code on was very small because we knew we needed to go nearly anywhere and deliberately selected a device for which we didn't have, except with one slight exception, any binary blobs to contend with, okay? So how, you can't differentiate it. There's nothing seriously differentiable except for bandwidth in the market right now. So what do you do? This is entirely a race to the bottom. How cheap can you make something work? These things have no place to stand for security. The devices, even those which so-called lock the boot loaders, turns out that usually the flash chips can be unlocked if you know what registry to go poke. You can usually do that if you just get root, which is easy to do. So doing it properly, depending upon whether you are willing to trust the flash chips, which apparently a friend of mine who looked into these couldn't find any flash chips that actually had a one-way lock on flash sectors, could be zero, but it's 28 cents to do right if you have to do it with explicitly a D-flop and a separate serial flash. We have courtesy of the OLPC, a bootloader which actually does all the real crypto and does secure update, even does it in a multicast fashion. So I once upgraded with one other person helping me over 100 OLPCs over a 802.11 g-channel in an hour with a gigabyte per each, so that was 100 gigabytes updated on that. So what do we got to do? We have to forklift upgrade the edge of the internet. These devices are all bad. The only question is how bad they are. I'm talking about the commercial devices. OpenWord, which is an open source router, is actually pretty secure and pretty up-to-date. Even yet, doesn't have everything we need, but it's a starting point. We have to secure the bootloader. There's a bunch of existing technologies that are straightforward to apply in Linux. This is not a highly technical audience, so I will stay away from them, but none of them are being used, and some of the group IDs which some of you will understand aren't there in most of these devices. We could have a disaster in the meanwhile, but if we don't change our business and software engineering practices, it won't matter. We can do it once and we'll just have to do it again. This problem is a really hard problem. This ecosystem and how we think about building software over the long term needs to change. That's what the honeymoon effect paper at least tells me. We have a tragedy of the commons problem going on here. There's lots of money. You pay every month for your internet service, but the money doesn't go to the right place nor do even those intermediaries know how to function where the software comes from. How do we get the funding model of the organizations in place? We have some decent upstream stuff like Open Word, but there's this gulf in the middle, and that gulf has been caused by the binary blob disaster. How do we avoid monoculture? Linux has become close to a monoculture for embedded systems. This is not safe. I'm a Linux bigot. I like it very much. I like its development style, but it doesn't make me sleep at night to know that so much of these embedded devices are all running the same code. How do we change this proprietary information mindset and deal with a binary blob problem? Some very big clue bats have to be applied. They are technically already in copyright violation usually. It's not a battle that the Linux community has been willing to fight, nor is it really... Legal fights are not the way to probably get this solved. How do we get this stuff out? If that code for that piece of silicon that has 100 million of them all over the world, isn't available 10 years from now when you need to rebuild it, what are you going to do? And who do you trust to do that? There are lots of reasons why you may not be willing to trust the manufacturer or the ISP. You don't want a monoculture in even the builds of this. For those of you who are computer scientists who've read On Trusting Trust by Ken Thompson in the Turing Award lecture, you know that we probably ought to have multiple builds from multiple locations. How do we do this? How do we organize ourselves worldwide to face this problem? We have not been thinking about software in the right way. I'm quite surprised to find myself now closer to Richard Stallman than I could possibly imagine. Because the irony of this is the MIT license was defined for the X-Windows system, and it's sort of the prototypical thing you like with this code. Now, I'm not sure this is really properly enforceable by legal copyright means, but Richard also missed the fact that our lives now depend upon us. It isn't just liberty in the pursuit of happiness, which is where he's come from. This is life stuff. If your home network stops working, we're very close to having human lives, and actually some people probably already have a position where they depend upon that continuing to function. We will certainly be there in the next 5 or 10 years where people will die immediately. Okay? You know, so I'm quite surprised to be close to Richard these days. Is there hope? I don't want to be too... terrify you too much. Linux Foundation has various efforts and embedded systems of various sorts, as does the Devian project, has a thing called Embedian. We're very fond of OpenWRT, which is a Linux distribution for more than 150 different models of home routers.  Come back to bite people. You may have noticed that the first of the Google Nexus phones went out of support. I believe the clause was the graphics driver was the chip vendor decided that they weren't going to be in the cell phone business and basically blew up the development group who was maintaining the driver. So a small amount of egg on Google's face from that. This is a generic problem. There are some ISPs who are aware of just how badly served this market is to them. They get the phone calls when things don't work well. It costs them 10 or 15 bucks just to pick up a phone. They have to roll a truck. It must be more than 100 bucks. It's directly out of their bottom line when these things malfunction. So open word is the most interesting of the open source router projects from my perspective at least because they try to keep up to date. That doesn't mean that there aren't lots of things that need to be done but this is actually seriously interesting software that all the community networking groups in Europe at least are using and is being used commercially on a number of the vendors but they're typically having to freeze on the old versions again because of the binary blobs if they are open word based. They can't maintain it and upgrade it typically. So it's roughly four years in advance of what you can see commercially. My home router has real IPv6 support and support for networking and other good stuff, DNS sec in it and things like that in the home router I run. But as soon as you can hope for something like that right now is about four years. Not good. There's a bunch of policy questions. I'm mostly just going to let you read through these and then leave it for questions. But I want to provoke people to think about what does this mean in terms of policy because I know that's what the Berkman Center is about in large part. This is, I believe, means we should be really thinking how do we develop software, right? Over the long haul. Remembering that we now have real issues with Windows XP as an example on the commercial side of how we do this, right? I'll point out that code without a community is worthless, okay? This is why I'm fond of when arguing with Dan Geer I think his ideas about code escrow or any abandoned code should go open doesn't go far enough because you don't have the community able to maintain the code at that point. What you've got is abandoned where there's nobody around who you probably even understands how to build it anymore. This is not a good situation. So I don't believe in code escrow and stuff like this. I mean how do you know you got it all or what version you've got? Again, this is because a lot of software has lifetime much longer than human organizations. Okay? Monocultures are really dangerous, okay? As anybody who studied biology, Dan Geer has a biology background, is aware of, but this is true for a pile of... Linux is just the operating system kernel. We have a bunch of stuff on top of this. It turns out OpenSSL was, which we all are very aware of with Heartbleed, was actually multiple different alternatives for it, too. But it was painful enough as only being a partial monoculture. A problem can be a problem if it's even just a good fraction. How do we encourage alternatives to Linux? Again, the poor BSD guys have been fighting the everything's got to be completely open for years and often they can't run in the hardware of a binary blob someplace, okay? So how are they ever going to achieve critical mass to compete with Linux? Really tough. Think about aftermarket upgrades, okay? Should the fact that you've bought something mean that that vendor who may not even be there in five or 10 years, like, you know, who knows if Tesla will be here in 10 years and you buy one of their cars, you're going to be able to update a wonderful computer and user interface that's now built into the car that's even capable of adjusting the height at which the car goes. Okay? Yeah, we're all thinking about shiny and new, but now let's think a little bit further downstream. Should that whole computer be replaceable? By whom, right? Maybe we have to take a position that the internal interfaces should be open so there can be competition in the computer that's on that. So in the long term, you can buy a replacement in 10 years out because that's better than having to stay with the old hardware. How do we solve this tragedy of the commons problem that Heartbleed made obvious with just one of a pile of projects out there that are much more important than people have appreciated? Okay? How do I get proper support for the open work, guys? Okay? I want to have a somewhat secure router today. That's where I'll point you. And they've been starving for decades. You know, not decades. They're projects only of order 10 years old. But the point is that even the vendors don't throw money. They don't feed the penguins. They have not been supporting that project properly. Now, Linux on servers has organized itself so that ecosystem exists. But in this embedded space, it does not exist. The vendors do not. Often they're working on very tight margins but other people get most of the revenue, like the ISP. How do we make this happen? Yeah. Critical infrastructure is any hardware or software that's widely used in large quantity. Okay? You can't know in advance what's going to become critical infrastructure. Okay? You can't work. Right? Oh, that one actually got shipped in 100 million. Now I care. Well, if you can't regenerate that blob, you're too late. What role should we have? What role should government have in pushing this market into a safer direction? Okay? Without stifling a market, because that's not good either. Yeah. So I will mostly close with the mean to spread. Friends don't let friends run factory firmware. Okay? And remember, those devices, unfortunately you probably can't change your modem to open source, but at least the router you can. It's got that radio. It can listen to anything nearby. And it's between you and the rest of the world. Wonderful. Right? Yeah. So that's pretty much all I'd like to... Yeah. It's really now time for questions. I want to ask the first question. So let's say you're giving this talk to a company like Symantec who says this is fantastic. It's an opportunity we can sell every home, blah, make it. What can a third party do in general for this problem? This is tough. There's very little margin in the hardware. These are all commodity components that are being made in millions. But I'm assuming that Symantec can sell $100 every home needs a security thing that we're going to install on your network and it'll magically fix the problem. Is there something a third party can do without anybody else's help, approval? How do they get... That's your router. You have the rest of the world. You have the problem until... That's your man in the middle. Until you've replaced that man in the middle, you are vulnerable. You got to replace... Remember, you've got to replace these things. These are at least one forklift upgrade to get out of this mess. You know? Of the thing on your network path. Think of this from your network path. That's why I focused... I started worrying about the routers but in terms of ability to manage... There are 14 different devices in my house at this point. If my network doesn't work, I can't update any of them. So the reality is the network connection matters the most for lots of reasons. But the general problems are endemic among the... in this market. Do you want to feel the questions? All right, David. So the carbon monoxide detector in my apartment has an explicit seven-year lifespan and after those seven years are up, it not only stops working, but it keeps making annoying beeping noises so you know that it needs to be replaced and you have to buy another one. Do you think this is a possible model? Well, that's certainly one of Dan Geer's opinions, but I don't think that's always feasible. In particular, to make a stop working entirely may make your network stop working. You see, you can't do that for anything which is actually involved in the network itself because then you've made it impossible to update things. Then you bag a whole lot of other security issues like how does it beep? You don't have any next money so they have an incentive. Well, and these things are now getting so cheap they're getting built into physical devices like probably your furnace and so on, who knows. Will those be available in 10 or 20 years? The question is what's the lifetime of these things? If you want there to be an aftermarket and to protect yourself against a vendor going out of business it needs to be possible for other people to build those things to be built into those other devices later. So how do we enable an aftermarket? That's why I had that up as the question there as a issue. I was thinking kickstart or some form of community organized just let's build a router that can actually be built with no open binary blocks from the start. I think you could sell that for a hundred bucks if you could get an actual buyer. Here's the problem. We probably could have only been considering doing that. So Dave Todd who runs the Serowork project which is this advanced build of open work is a way to think about what Serowork is. We've been doing the buffer block work among other things. We've been looking for the next platform. So we found one which was satisfactorily open for the previous generation, the WNDR 3D800. The problem is that all the chips for the 802 11 AC have binary blobs in them and or at a minimum in firmware that they run but often also the device drivers again. So it's even identifying even one of those is a problem right now. For the last generation of the Atheros 9K series of chips had only a tiny binary blob whose source was available to the Linux device driver maintainer and the driver was open. So we knew that there was code everywhere even though there was still a minor blob that we couldn't be distributed in a source form. So these these silicon vendors have caused this freeze in the ecosystem to the point where it's really tough right now to even identify hardware to do exactly that step for AC which is coming into the market now at this point. Question about redundancy. Is redundancy a possibility to sort of run a component store? Is that a way to well it always is but the redundancy is sometimes much harder to come by than you naively think. So Broadcom for example has a near monopoly like 70-80% I'm told of DSL chips. So most of the DSL routers out there will have a particular device driver and finding something else isn't obvious from the outside. How can you do that redundancy? Right? You can have hidden monocultures. You didn't know that monoculture existed or near monoculture. I mean it's close enough that from a biological point of view it might be it's a monoculture or near to one. I think you're overlooking the role of the professions by jumping straight from vendors to communities. The perspective from healthcare is that the profession that's supposed to be watching over this drift from open source to binary blobs controlled by vendors is asleep at the switch. And though this your talk's not primarily about things like the devices that I've talked to Richard about that are embedded in that he's worried about the same thing I think could apply to the routers and to the more fundamental thing. We traditionally used to have a professional class to mediate the community issues. I understand. I started talking with people like Ben Surf because I believe very much that there's an educational component to the profession about these problems. We've been asleep at the switch in essence. And so part of why I'm giving this talk and we'll be giving another one on Thursday with a slightly different bent is to begin to raise awareness if you're designing one of these things try very hard to avoid those blobs not only are they your biggest schedule risks but downstream they're the disaster no company wants to face where you need to recall them all or things like that. You said I think that retrospectively the MIT license was a mistake. I did not say that. Okay. I'm not sure that the issue is enforceable by the GPL anyway. History has that it hasn't succeeded in this area. I understand Richard's point of view with that. I'm saying there are more fundamental reasons than the license why you should care a lot about there being source available to these things. Okay. There are also consequences of the GPL around patents and so on that may be unacceptable and make it harder for people to go. I'm not saying the MIT license is a mistake I'm saying that it's not the really big reason for the code being open in the first place. And Richard didn't realize it either that this whole thing of vulnerability is occurring way downstream. That piece of information is really a new result as far as I'm concerned that seems to have slipped by since this publication but it's an important one. I think I want to draw the distinction between social and legal issues versus technical issues and I'm wondering if there's a purely technical solution or whether you need to have something based either on government regulations or standard organizations. And one idea is we currently have benchmarks for performance in database, world, TPC whatever. Should we also have database, sorry some kind of benchmark standards for maintainability and security and with that help and with some role of standard organizations in enforcing some degree of openness. I think this is a very multifaceted problem and so the answer would be of course. There's lots of roles for that. How do you know if I mean having something where you know that the insides of this device might be source code might be available to you in the future indefinitely is you know I'd like to know that when I go in and buy this physical box but that needs a certification mark. That's done by various kinds of standards organizations and or government. So yeah I think there's a role for that sort of thing. Sometimes it can be as much, sometimes it doesn't work out all for the positive but at the moment we're just in a bad place. I mean yeah who is liable for this it's an interesting question and yeah I'm sure there are some things that can be learned but it's not an area I've dabbled in so I'm not sure I'm the best person to answer your question. And see we also don't want to stifle innovation as a piece of this and the really interesting observation from my point of view is we don't know in advance what's going to become critical. What really is happening here is it's critical only when it reaches high scale nothing bad happens if a tenth of one percent or a hundredth of one percent of something goes bad when we have the same vulnerability all over the place that's when it's a big deal and we can't predict in advance what that is. So I'm not sure that I'm not sure that a lot of the typical reactions will have thought about quality necessarily apply to that situation but it does imply responsibilities of how we engineer these systems so that in the downstream for the things to succeed we are able to maintain them. To comment and I wish the first comment is has to do with the fact that we see an asymmetry we will see systems that are very heavily maintained and very expensive on the one side and then the price pressures will push systems that are not maintained in the end and what I read in your talk is that the community needs to be active and support the systems so people have to self organize to support their property basically. So those are the two comments and I don't see any easy way to getting away from that. I very much to the comment of setting some standards there on basically having the code with you so my wish would be may the source be with you. Thank you. Yeah I just want to push back a little bit on the premise that these things are landing in the home and rotting in full of the nest is something that is actually connected and has I know it is getting updated. So I think we are moving towards a standard of some of these devices are way better than others in this but the point I want to make are things like I just took the the audio receiver that I bought in college to the dump okay and this is 30 year or more of a lifetime. What do we do how do you make sure that a device like that can't cause a problem 30 until it broke it was perfectly usable we are now beginning to engineer devices that have very long lifetimes there is nothing inherent about these processors having a processor in them to shorten their lifetime these are silicon devices they can last a very long time and we have already seen the example of Google having gotten bit on their on their Google phone very quickly the first Nexus phone unsupported again if there hadn't been a binary blob that they had no control over they probably would have continued to issue updates for it for at least a while longer okay so this goes back to this Nexus of Blobs not under your control even if you don't worry about the NSA or whomever doing bad things in there and as invented devices go and that's pretty expensive right that's $200 $200 device so it's not a $50 or $15 or $10 right so it's more long lines of a cell phone than a it also might be sold with your house so that the person who now has it didn't even know my expectation is I should probably continue to work for the next 10 years my I expect my heating system to last a while and these things are now getting built inside of these things people you know want to be able to turn dampers on and off and that might as well the only way to do that is if you look at what's happening with the ZigBee guys they're trying to get networking into all sorts of places inside the home to be able to control things like that and that's what they're trying to do for the next year I had to replace the entire mother board of my refrigerator I had no idea we had one but we did and they just pulled out the board and stuck in a new one the device lasts but the computerization that's right and that's obviously probably the thing to do with the car my frustration with the cars has always been that I'm going to want a better I buy new cars every 15 years to be able to update them occasionally but the car vendors have not been willing to encourage a viable aftermarket for these things maybe we should because that's a way to help this problem so we don't have to maintain that code base forever any other questions? so there are things you can do okay so Ciro works version of openwork that we work on for buffer bloat and it has real IPv6 support which by the way our friends at Comcast have turned on in the Boston area so you can have native dual stack IPv6 these days Ciro where it differs from what you're used to because it routes rather than bridges and up to date more or less so goodies like that you know about the openwork guys in general in that sense we're part of the openwork community a sort of bleeding edge build on particular hardware what about this Firefox and EFF route a project to share open connections securely there are a number of different such projects they don't communicate as well as they should in fact the most interesting stuff I've seen is often going on in Europe in the community networking area there but I'm a little bit aware of the EFF project for various reasons I haven't been able to pay much attention to it recently so it's going to be around the edge it's like one particular piece of hardware and one particular configuration it's very non-general so it'll be a nice marginal thing but it's really just a marginal thing that going in openwork that sort of behavior just out of the box by the way you really won't need to fix buffer bloat properly to do that because you don't want the other guy to screw your performance and right now buffer bloat's got you badly if you haven't fixed that then sharing your connection is not something you often don't want to it's very much the case that one could these projects I mean this is again support so there isn't a good the closest thing to a community meeting for people working in this area is the one that Sasha Meinrath does in Europe which brings the community networking people together but again that funding would help there are more people who can't afford these are often poor starving student types how do we get the right people to those meetings even though they're very inexpensive they have this meeting called battle mesh every year where they test out mesh networks in Europe and I've been to one of those but how do you get the right people there this whole thing is not properly supported there's no margin and the vendors are clueless so they don't understand they should be supporting that work the way it should be and this is back to the tragedy of the commons the server guys have tons of money relatively tends to be less starvation there any last questions some companies for example Microsoft are pushing softwares to service do you think we're being pushed into that we seem to have two possible directions to go one open source more prevalent and the other more vendors forcing users into softwares as a service where they're essentially instead of buying something outright paying a license how to keep working at the beginning we have to have the network working in the first place so we have to solve this problem but that's the ISP's responsibility it's inside your house arguably your responsibility if bits coming out of the spigot how do those bits get maintained okay how do you get your bits around the house so I don't I also don't think the centralization thing is a good idea once you've properly secured devices like this I much prefer to have my email coming to my server than to Google I don't have my mail go to Google right now because I know I'm incompetent to keep to keep a mail server secure and up to date given the situation with spam I'd like to have a box where where that just worked and under my control and if the upstream source for those bits stopped doing a good job I could switch it to somebody else who is I'd be willing to pay a service for that but you got to secure that device we have to have a place to stand in the home that's a logical place for people security certificates in a box like that but it's got to be secured and they're not today well thank you all for coming thank you very much a lot of people are moving more things to the cloud a lot of vulnerabilities involved with that and the wisdom of that is subject to a long discussion my


Your Coca-Cola bottler presents Claudia based on the famous play and novels by Rose Franken Brought to you transcribed Monday through Friday by your friendly neighbor who bottles Coca-Cola Relax and while you're listening refresh yourself. Have a Coke now Claudia Downtown or you're going downtown now David. I'm gonna pick up some tobacco and there's a new book out of how I get it out Stationary store. I'm disappointed. Oh, I'm not that means we'll be home all evening Perfect evening for a new book and an old white Overcome my disappointment if while you're in the village David you buy me a card of safety pins a spool of number 50 white thread What happens if I buy number 60 you will get We don't want to do that Now let me see if I can remember everything tobacco Book safe and large for Bobby. I can't imagine how a baby goes through so many safety pins He probably wears them out. Let's see a white thread 50. Oh when a bottle of ink for me blue pink blue I should have never opened my mouth. Why not all I said was I was going downtown for a mere can of tobacco He didn't look at me with enough orders to keep a notion shop in business for a year He likes to object mama. It's manly to object men always object to errands.  Very shaggy Tack-fully you're trying to tell me that I need a haircut. Is that it tactfully? Yes Oh, I thought you were planning to give a violin recital next week. They tell her mama He's a little big for violin, but maybe we didn't know it Claudia and men are wearing their hair longer this year Maybe you're right. Maybe they brought their hairlines to match our hemline Well, it might interest you to know that I know that I need a haircut. He knows that's the first step David now seriously, why haven't you gotten the haircut down because Francis has appendicitis who is Francis? Francis is my barber. Oh Of course and he has appendicitis that makes everything clear. Well, is he the only barber in the world David as far as the Nape of my neck is concerned. Yes Took me years to find and training. How long has it been that he's ill from the looks of the back of your neck I'd say a month at least or that's too long for appendicitis. Well, Francis had complications Do they arrest men for long hair mama for vagrancy? I guess the vagrancy is not very stylish No barber besides Francis has touched my hair in the last two years and no barber has touched it in the last two months Period. I must admit Claudia David always looks quite trim. They're well barbed never with that flowery look Mama stop sabotaging.  Why what's it to you? Well, only that if it's true, it's it's worse than being a woman Speaking of women They certainly don't make the fuss about their hairdresser that men make about their barber. Don't they? Anyway, no more than Mrs. Norton may I go now go go where I was under the impression that there were some errands You want to run downtown? Don't forget your tobacco and your book David. That's right. That's right. Don't Your thoughtfulness overwhelms me. Mama's very fond of you David. Don't let her actions Try not to oh David while you're at the stationery store. There's the sweetest little barber next door. How'd you know he's sweet? He's Italian and he looks sweet. He has a turned up moustache and He's an excellent barber. When will you last barbered and shave this last week? Please don't come home looking all sure and naked David all what Sure and naked you see men like that all over the streets, you know I Think the reason most men get such bad haircuts is that they just don't pay attention. They read the stock market instead Can't expect the barber to be interested in your hair if you're not can you David? I'm not following you I lost you in the in the middle of the stock market It's all the same to you now ladies. I'm still intending to go down the village for a can of tobacco You'll be the next to break them, huh? Thank you. Step up to the chair. We clip you good very good, huh? Mr. Chair here, please. I hang up your coat that would you put all those packages with them or I'll forget them Oh, yes, Tony. He will remind you. I You were new up here, huh? Fairly the name is she's an alternate and you live on a river road. Yes You are mind reader.  He's a comedy too. How's your cow? cows fine good Cow as she can act up and up to so good to be for cat for she come. Oh, yes Yes, yesterday Jared the talky. He say you are not the so bad the neighbor. Well, it's very kind of Jared Say does everybody in Eastbrook have their hair cut here? My show. I am a native. He's the brook.  How are you on to your haircut? Not like fritz, please are Jared. Just trim the little on the side him on the side and use the scissors in the back Not the clippers not the clip no and not too much off the top not too much off of the top, right Just one more question. All right, go ahead just to why you want a haircut why I won't Well, look my hair is too long on top and on the sides in the back. It's it's shaggy But don't you think I need one you don't seem to think so you throw away 75 cents if you know let the let me give you a haircut the farmers and the other men that they'd like a real good the haircut You just to throw away your money. Well, don't you worry about my money? You just cut it the way I said and You will have earned it but either hurt me. Well, it hurts me more if you don't my wife will divorce me If I don't get a haircut and she'll scold you if it's a bad one. Okay. Okay. I do what you say, but does she hurt? At least you want a nice treatment then oil and no no no treatment. Thanks. Just just a haircut massage no massage and What do you like on your hair afterwards?  Do you want that's that's what you're gonna get? I hope so Now relax and stop thinking and your head is is it between at Tony's and yes And I feel a cold breath on the back of my neck As a nicer. Hey, you got not the best. I'm gonna cut a fine. I Wish I could show you how good I cut the hay Maybe maybe some other time. I guess no, I'll I'll take your word for it Yes, yes, whenever a man he come to the shop, he knows what he wants. He's a married man And no married the man he's a coming and he says Tony he say cut to my hair and Tony he cuts You sing a nice I think that's enough there on the left side enough How much used to begin so far is only the idea. That's just right. It's neat, but it's not got it That's trim, but it's not showing You know, she's gonna be called a wint and what do you think I'm gonna say call the wint And the stock market that she will go down in a match You don't say look I have a costumie coming here the other day is a city man He come a true by the card to go to Boston and he telling me if I ever got to the stock is to sell it in a February and to buy in a match Yes, da da da da and look I'm a pest of the information to you He was a finer man. He say that the political situation in this country That's just about right on that side Tony, that's fine. Just about the right there. Look I Clip three hairs only mr. Nottingham. That's fine. No, but the costuma I allow him to have an opinion Thank you. He's a free man.  Nottingham.  David mama I can recognize David singing But he has a quality for cutie Hey, David, why are you loitering out in the front hall? Come on in we've been waiting dinner hours for you You can't a man take off his coat and hat and comb his hair. No man supposed to kiss his wife first What have you been running errands for you and mama? Did you remember everything? I refused to answer that means he did mama Well, certainly took you a long while if I hadn't decided there was nothing to worry about I'd worry about you I'll go tell both of us Can hardly believe it took you so long just to buy a spool of thread but you say so and you sound suspicious Maybe I better confess There is more to this than meets the eye Well, it should meet the eye just to show you there's not an ounce of suspicion in me David I don't want to hear another word about what took you so long Couldn't you find a parking space? Hmm? What's that? David why are you staring in the mirror like that? Oh just Looking at myself. You're very handsome So you didn't have a flat tire or something or something maybe honestly when you're not talking you're just impossible Claudia What nothing? You are behaving strangely David. You don't usually go around looking at yourself in the mirror Well, as you said, I'm a very handsome guy. Well, you act as if you never knew it before. Well, maybe I didn't so much Claudia what? I Am surprised at you. What have I done? What have I said?  I just small wonder Fine world when a man's own wife Acting very strange mama look strange. I do how just strange I think it's the way you're holding your eyebrow. Oh, why what did you expect me to say? No, no more than your daughter. You're right Claudia that little trip to the village to buy a spool of thread and he's come back very weird Well, man's got a right to behave weird sometimes Hey David, you know something what? You need a haircut I what? Donnie maybe maybe if you had a haircut you wouldn't so strange that helps a lot You know it makes big difference David for heaven's sakes. We stop rolling your eyes around that way. All I said is you need a haircut Now what is so terrible about that? As you buy your daily household supplies It's nice to be able to pause and refresh right where you're doing your shopping More and more stores are installing coca-cola coolers to enable customers to shop refreshed It's a pleasant service that everyone appreciates. Well, how do you like that, Joe? You mean she didn't even notice After all the fuss you made she never even noticed Say tell me Joe What does a man do to a wife or a thing like that? That David is not written in any of the books But you'll think of something. I think of nothing else until I do. Maybe you'll get even with her tomorrow. Tomorrow? Really? Well, I don't know Better not say now.  Don't worry now. Don't worry. I'm on I'm on your side on this one. We men will have to stick to get it And even then it's tough You never said a truer thing The women have a way of dividing the men Every day Monday through Friday Claudia comes to you transcribed with the best wishes of your friendly neighbor who bottles coca-cola So listen again tomorrow at the same time And now this is Joe King saying or if we're and remember Whoever you are whatever you do wherever you may be When you think of refreshment think of coca-cola or coca-cola makes any pause the pause that refreshes and Ice-cold coca-cola is everywhere This broadcast of Claudia was supervised and directed by William Brown Maloney and now here's a word from your friendly neighbor who bottles coca-cola


Alright guys, what's up? It's me, it's Jacob. Welcome back to another video. Welcome back to the second of two Tyrone Magnus reaction videos. Effectively, I'm giving my reaction to him. I'm not giving my reaction to one of his reaction videos, which is really the main thing here. I'm giving my reaction to him talking. Talking about something close to his heart. Talking about something very inspirational and motivational, apparently. This video today is titled Don't Waste Your Talent. It's by Tyrone Magnus. There is a description here that I can see. It says, I know a lot of young men need to hear this, so I'm saying it. I'm assuming before watching this that we're going to hear Tyrone Magnus, a guy that almost wasted his talent. Almost found himself in a position in life where he was going to give up. You know, he tried a few things, they didn't work. His mum, who was always, you know, one of the ones that believed in him the most. You know, said he could do anything. Back yourself, you can do it. Passed away. Next minute, Tyrone's by himself. There is no major support. If he doesn't do this now, if he doesn't back himself, believe in himself, who's going to? He knew he had some talent. He needed some people to tell him that along the way, but he knew. He knew he had the talent and now he's got a YouTube channel and nearly two million subscribers.  You know, there's a reaction video here with 635,000 views five years ago. So this guy has been doing reaction videos for a very, very long time. I think if anyone's going to come at him for being a reaction channel, I think you're going to have to go back and see how long he's been doing them for. I didn't even know, I didn't even know what a reaction video was back then. I had no clue. He was already in the field, already, you know, building his YouTube career, building his YouTube personality and having fun. And at the end of the day, I can guarantee you one thing. If he wasn't having fun doing this, he wouldn't be doing it. Anyway, let's hear what Tyra Magnus has to say about wasting your talents. What is happening, Magnus? Thanks. I was coming. Magnusites. Well, I'm not sure about that, but I am sure about the fact that I need another coffee. So I'll be back, back shortly. And we're back. Believe it or not. Okay. Don't waste your talent. All right. So I feel like I'm going to hear a few things that I agree with. Guys, there's one thing I want to say before starting this video. There is no, there is nothing more tragic, guys. There is nothing more tragic than wasting talent, wasting talent. You talk about wasting time.  Time is our biggest asset in this world. Our biggest asset and it's running out each and every day. Now, talent is our own personal biggest asset. That is how you are going to achieve anything in this life, is your talent. You can, yes, you can work at it, but you know, if you don't even recognize that you've got that talent in the first place, how are you even going to work on it? Sometimes we need someone else to see that talent, let us know and say, back yourself. Do it. Don't waste that talent.  Live it. We do have the power to do anything we want in life. I, I firmly believe that. I, I firmly believe that as a human being in the world we live in, if you want to do something, if you want to achieve something within your physical capabilities, you can do it. And even if it's not within your physical capabilities, I'm led to believe that the mind is a lot more powerful than the body. So what that means is that even if you don't think you can do something physically with a little bit of motivation, an ordinary person can do something extraordinary. If they just set their mind to it and I firmly, firmly believe that. And as we just said, if you just set your mind to it, you set your mind to it. If you're a man on a mission or a woman on a mission, nothing is going to stop you if you don't want it to or if you won't let it. And if you've got that talent and you know you're destined to get somewhere, but you do have to make sacrifices. You do have to let friends go. You do have to cut people out. You do have to spend nights at home when you want to go out.  So you can get up fresh every single morning and crack into whatever goals you've got. Yes, sacrifices need to be made, but they're going to be worth it in the end. And if you've got that talent and you don't nurture it and you don't use it, then that is an absolute tragedy. So let's hear what Tyrone has to say. Every once in a while, y'all know I will either just turn on the live stream or you'll see me making a video from my car because something just comes to mind. And this came to mind because I was thinking about someone I know. Actually, a few people I know. And that are wasting their time. I have a lot of teenage viewers. Guys that aren't even grown men yet. Guys that are still developing mentally and aren't making clear decisions in their lives. And I'm here to tell you because I've been through it all. Do not waste your talent. Every single one of you is born with at least one God-given talent. Some it's your mind. Some it's your hands. Some it's your athletic ability. So on and so on. Some of you are artists. And like I said, so on and so on. And some of these talents are on display in high school. You all know who you are. All right.  You're the jocks. You're the guys with ideas. You guys that want to invent things. You're the guys that want to help people. You want to open businesses. All these different things. All these different dreams that you have in your head right now. But there's only one thing fighting it. You're limited beliefs. You want to be cool. You want to be cool. I'm here to tell you because I've been through it.   Nothing. Because I'm here to tell you, you can be cool and still get an education. You can be cool and still follow your athletic dreams. Your business dream. Your scholarly dreams. Okay. But cool needs to be thrown to the back of the bus. All right. On the back burner. Because being cool is not the most important thing in the world. You can be successful with swag, but swag should never be your most important thing. And I say this because there are two young men that I'm thinking of right now. Both of them I think are preoccupied with being cool. But one of them has put cool on the back burner. He is following his athletic dreams on college. That is cool. He's trying to make something of his talent. The other one I would say is actually equally, if not more talented at what he does. He is only concerned with being cool. That's it, patient. Two different people, bro.  Having both, as a matter of fact, both of their parents grew up in the same town, which is interesting.  It's not where it's at. Okay. Listen, when you're growing, we go through phases. One of those phases is when you're younger. You usually five, six, seven, all that stuff. When you get to be a teenager, you want to approval. The approval of your peers will not mean anything when you're in your 20s and you need a job. Bro, okay. Originally, when I first started watching this video, I was like, you know, I could have definitely used this advice when I was that age at school, you know, 16, 15, thinking about what I want to do after school. You know, you've got that talent. You do have that athletic talent, but I was letting it go because I didn't believe in myself. I did not believe that I could play at the next level. I didn't believe that I could do it.  And if you start trying to achieve that at age 16, 15, you're going to get there. But I didn't have that. I didn't have that. And here I sit at age 30, able to speak like this. But I tell you what, even like even back at 16, I don't know if I would have listened. I don't know if I would have listened, you know, talking about what you're going to feel like when you're in your 20s. I mean, I don't know if that would have hit. You're talking 10 years in advance. You're talking 10 years in the future. You're asking a teenager to imagine or to plan 10 years into the future. Now that requires a really, really strong mindset at that age. Pears means nothing at that point. But it sounds as if these two people that he's talking about, one has it and one doesn't, simply. I'm here to tell you I've been through it. I tried getting the approval of my peers a couple of times and that was it. I realized that being cool wasn't for me at all. I could be cool later. I could be cool later because first and foremost, I wanted to be successful. I wanted to make something on myself. I wanted to create a legacy. Many of you because you want to run the streets because you want to be cool.    Get you suspended.  Maybe even get you killed.  Let me ask you a question.   Look at those men that you're pattering yourself after. Look at each and every one of them and tell me this. Are they successful? Are they happy? I'm just looking at this car. Is he driving a skyline? Oh, sorry, mate. Are they living their lives to the best of their ability? Are they fulfilled? Are they setting goals and knocking them down? Are they achieving all their life's dreams? Are they doing what makes them happy? Or are they just cool? Are they has-beens that tell stories about how they knocked out three niggas at the same time in the street one time? Or about how they scored four touchdowns in the football game one time? Or about how they hit the buzzer beater one time at a high school game?  This hits home really hard, actually, because there's- I'm not saying that I feel like this right now, but there's certainly been times in the last couple years where I've thought, I can't be that guy. I cannot let myself be that guy that sits there when he's 50, 60, even 40. In 10 short years' time, I could be a guy. If I don't push over these next 10 years, I could be living with so much regret at age 40, let alone 50, 60, 70. I can't let that happen. I can't. I cannot let that happen. So that is why I'm living the life I am right now. And that is why I'll say right now that there is only one thing and one thing only that needs to change in my life for me to be living my best life, because this is my best life for me. But there are two other people out there in the world that need me and that don't have me right now. And those are my two girls. So you guys will see this video before the Top 100 series has finished, right? You guys will see this video pretty shortly, I'd say within a week of me shooting it. Today's date is the 14th of Jan. I know what I need to do. Nothing sits right with me right now, knowing that I'm away from them, knowing that I'm away from my two little girls.  I want to be there as their dad. I want to be letting them know. I want to be telling them things like this. I want to be telling them, don't waste your talent. Do not waste your talent. Now I don't know if that's a difference that we have. I've got children, he doesn't. I have no idea. I feel like he probably doesn't have kids. I feel like he's probably single, no kids grinding on his career, which is fine. Which is absolutely fine. But I'm in a position where I do have two dependents. And I need to be with them. And on and on and on.  I guarantee you, probably 99% of you are going to tell me about it.  Okay? I came from it. I know what it is. And guess what? I never lived it because I saw it. I saw it. Everybody that I went to school with, except for me ran the streets. The majority of all the young men that I knew, the majority, all ran the streets. I could, I could name so many guys. I came from a town that had an exceptional amount of talent. Okay? Mine happens to be community talent, by the way. I have several talents, but I know my best one is entertainment. And I'm living that right now. I've followed my dreams and I'm continuing to follow them and also going to fulfill it in other avenues. I'm doing what I love for a living. I'm happy, very, very happy with my life right now. When you follow your dreams, you will still have hardships and problems.  If it's drudgery, if you're working at this nine to five and this other job or three jobs, whatever it is, and it's killing you, you have no time for yourself. Certainly being in those situations is going to be a lot of people watching right now that's in that situation, but as long as that seed that Tyrone is planting is planted, right? And that seed that he's planting is the fact that this job, this mundane job that you're in, it means to an end, okay? It is means to an end. You know where you want to be. You know you want to be doing what you love for a job, but no one's able to do that just instantly. It's always going to be a process. You've always got to put a plan in place. Set goals, achieve them over and over and over again and focus on what makes you happy and eventually you'll get there. Now I didn't even think about the concept of just focusing on what made you happy until three years ago, three years ago probably and that's when I decided to put plans in place to start living my life with no regret, get out of that job that I hated, travel around, set goals physically, mentally and achieve them and here we are. The start of 2021 and there's really only one thing that needs to be done now. I need to be with my girls. You are stressed out. You've got children. You've got a wife. You've got a girlfriend. You've got children. You know what I mean? Yeah, good luck changing it then. Whatever your particular situation is, you've got all this stuff and you've got nothing to show for and you can't even handle life because you didn't follow your dreams. No, I wouldn't be able to handle it. I've imagined that. I've imagined me sitting there 40, 50, 60, 70 thinking I could have done that. I should have done that. That is not like on the kind of guy that's so passionate and so emotional that those kind of feelings would probably send me to the darkest of dark places and we know what I'm talking about. I couldn't handle it. I couldn't. I couldn't. Simply. When you follow your dreams, life is easier. It's fun. It's fun. Because it's exciting. Follow a line of thinking that I thought was really going to work. You know, I wasn't, I was still, I guess you could say, well, I'm still more successful than most of the dudes that I know. But I wasn't following my passion. What's your passion? Is it thought? Is it philosophy? Is it tinkering? Is it creating things, creating gadgets? Is it software? What is it? Is it athletics in some form or fashion? I mean, who's, who here is going to be? There's so many people in high schools right now that are the next Michael Jordan. That are the next Bill Gates. They really are, man. They're wasting it all to be cool. And I see it happening over and over and over and over.  That's, you know why? That's the reason why the majority of people die without their dreams fulfilled because they don't go for it. It's easier. It is. It's easier to be a bum. It is and not do nothing. It's easier to be a bum and be cool. Do you know what, guys? I could have started a whole lot earlier trying to reach for my dreams and goals and stuff. I firmly believe that I did probably start having a shift of mindset in about 2014, 2015 where I did start believing that anything is possible. But that was at age 24, 25. Not 16 or 15, you know, whatever he's talking about. So definitely some wasted time there, definitely. But I still had my youth. At 25, I was laughing at people telling me I was old.  I still feel 15. I still feel 15. See, here we are at 35 years later and I still feel 20.  But I guess all I can say is that even if you don't back your talent until 30 or 35 or 40, at least, you know, at the very least you've looked after your body to that point. So you can still do things because yes, it's one thing not being able to do something or not doing something because you don't want to do it. But if you find that you can't do something even when you want to, because, you know, physically you can't do it, you've left it too long. Oh, no, not a feeling I'd like. It really is. It's not easy to follow your dreams to the mountaintop. To try at least, to at least try to be the best you could possibly be in your life. Isn't that better than not having tried at all? Absolutely, and it brings me back to a quote that Arnold Schwarzenegger famously said. I think he said it. No, actually, it wasn't Arnold Schwarzenegger. It was a famous philosopher back in the day, but I think he said, I think he said that for a man, and this is, you know, to do with males, females as well, but for a man to never, for a man to never train and exercise his body to his full potential is life's greatest tragedy or life's greatest socrates. Here we go. Here we go. No man has the right to be an amateur in the matter of physical training. Now this is, you know, this is to do with my loving, going to the gym, loving training, loving playing sport. No man has the right to be an amateur in the matter of physical training. No man has the right.  No, you don't. You don't. Because to have these two legs and these two arms is a privilege. It is a shame for a man to grow old without seeing the beauty and strength of which his body is capable. And I'd say I'd have to agree. I've always told y'all I would rather try and fail than be a woodcutter shudder.   About how he used to look, how many girls he used to pull, how many dudes he used to knock out, how much money he used to make doing something illegal and this, that and the third.   And it's the same way for the chicks. And if I am in that position and I do tell you I've done something then you can probably go check it out on my YouTube channel. The opposite for the chicks. The chicks that chase them type of dudes. Y'all, y'all know what I'm going to say. I've been saying it. And it goes the same thing for the ladies because seven percent of my followers are women. Same. Follow a guy, get with a guy, marry a guy, date a guy that has a good head on his shoulders.  And it might get you dead. And follow your dreams. Just as many women listening to me have just as much talent as the men. And you need to follow your dreams too and do what makes you happy. Okay, and if being the side piece or the main chick, the bottom bitch of the coolest nigga in town that ain't going nowhere is your dream, you need to recalibrate. Reboot.  It's true, man. It's true. When I look at someone, right? When I look at someone, I don't see gender, okay? I don't see skin color, okay? I don't see family history, all right?  All I see is a person. All I see is a human being with a brain, with as much capability as anyone else. All they need to do is back themselves and believe in themselves. I just had to think. I appreciate it. I don't want y'all wasting your lives. It's, I'm getting tired of seeing it. I'm getting so sick and tired of seeing people make the dumbest decisions of their lives.  Like they said, your frontal lobe isn't even fully developed. And maybe that's the reason why. I'm lucky that I had a parent and God knows a lot of the parents out there are trying to keep y'all out of the streets. Some parents don't care because that's where they grew up and they think it's cool. Magnus answers. Who is this woman? Right Tyrone, I'm sorry mate, but you've got me. You've got me. Who's this? Tyrone? Excuse me Tyrone, who is this? Scarlo. Scarlo. A lot of you are awesome. Okay, so this must be his misses and if it's not, then... I'm not sure, but anyways. All right, all right. All right, doing a little bit of digging there. Probably a bit too much digging. So we're going to stop that. But Tyrone, I want to say, bro, another good video. I feel like I... Yeah, definitely. I think we're on the same wavelength. In fact, Jacob, my subscriber who recommended me check you out, I know exactly why. And if I had have watched these videos at the time you put them out, I would have definitely taken a lot from them. But I do believe I've developed my own mindset, my own very similar mindset myself. And maybe I can make videos like this in the future. Thank you so much for the motivation, Tyrone. I'll see you around. I'll see all you guys around. Thanks for watching. I've got five seconds of footage left. Three, two, one. Peace out.


Welcome, myself, Mr. Giridhar Jain, Assistant Professor in Electronics and Telecommunication Engineering, Vulture Institute of Technology, Sholop. Now today, I am going to deliver a lecture on enhancement MOSFET. Now, learning outcomes of this session are, at the end of this session, students will be able to draw construction of eMOSFET and describe its working. Now contents of the session are eMOSFET construction, symbols and working. Now figure shows the n-channel enhancement MOSFET, so this is construction diagram and right hand side is the symbol. Now first, let us understand the construction of n-channel enhancement MOSFET. So, in the construction, the p-type substrate is taken, that is the base material, onto this p-substrate, two heavily doped n-regions are obtained by diffusion, one of this is called as a drain and the another is called as a source. And in between drain and source, whatever is available that we call as a channel, onto this channel, you can see an insulating layer of SiO2 is laid as shown in figure. And above that insulating layer of SiO2, the connection for gate is made using a polycrystalline silicon material. So and there are four terminals for the MOSFET, so one is drain source, this is gate and the fourth one is the substrate. Now actually a physically channel is not provided between drain and source. Now the channel is induced by the application of positive voltage between gate and source and that will provide the path for flow of current from drain to source and on the right hand side you can see the symbol of the n-channel enhancement MOSFET. Now for this n-channel enhancement MOSFET, so in this symbol you can see a dotted line is shown here 1, 2, 3, so dotted line, so that will be that indicates that the channel is induced. It is not a physical channel and upper terminal is drain and generally the substrate is connected to the source and this is your gate. So drain gate and the substrate connected to the source. So this is the electrical symbol used for e MOSFET usually in the circuit. Now pause this video and think on the following question. What will be the change in the construction and symbol for the p-channel MOSFET? So for the p-channel MOSFET the layers that is substrate drain source, so these layers are inter layers are changed and in the symbol this arrow is towards the outwards. So you can see this is a p-channel MOSFET. Now for p-channel MOSFET substrate is n-type, on to n-type substrate the heavily doped p-regions are obtained by diffusion. One of them is drain and another is a source and in between drain and source the channel is formed. So insulating layer of SiO2 over the SiO2 again polysilicon for making the contact to the gate and n-type substrate. So this is the construction of p-channel MOSFET and on the right hand side you can see the symbol for the p-channel e MOSFET. So in this symbol this arrow is pointed in such a way that if the substrate is forward biased so direction of the current is the arrow. So for the n-channel MOSFET you can see the arrow is towards inside and for the p-channel MOSFET the arrow is towards the outside. Now for obtaining the characteristics of n-channel MOSFET this is the connection diagram. Now in this connection diagram you can see a positive voltage is applied between gate and source PGS and drain is made positive with respect to source by applying the positive voltage PDS. So this is PDS, this is PGS. Now due to application of positive voltage between gate and source you can see a negative carriers are induced due to application of positive voltage and this channel is induced provided PGS is greater than threshold voltage and once this channel is induced. Now this channel through this channel the electrons can flow from source to the drain and hence the drain current flows from drain to the source as shown in figure. And on the right hand side you can see the same this is a construction along with connection and the right hand side is the circuit diagram using electrical symbol of the E MOSFET. So this is n-channel E MOSFET connection diagram. So this is the characteristics by keeping PGS constant the drain to source voltage is change from 0 to maximum and the readings are taken for drain current and you can see if VGS is less than threshold voltage the drain current is 0 and this is VGS is equal to 5 volt you can see the characteristics. Then next is for VGS is equal to 10 volt and third one is for VGS equal to 15 volt and this is the DC load line the extreme points are VDD and VDD by RD. So this is the drain characteristics. Now what is the transfer characteristics? Transfer characteristic is nothing but the graph of output versus input. So output for this E MOSFET is the drain current and the input is VGS. So drain current taken on Y axis and VGS taken on X axis that will be the transfer curve or it is also called as transconductance curve. Now for this transfer curve you can see that when VGS is equal to VGS TH that is threshold voltage at that point the drain current is 0 and if VGS exceeds threshold voltage then you can see there is increase in drain current and this relationship is a parabolic curve. So this is VDS on and this is ID on so that are one point is shown. So these are the drain curves or VI characteristics of the drain and the right hand side is the transfer curve. Now for this transconductance curve the drain current depends on VGS and this dependence so this transconductance curve is parabolic or a square law the vertex of parabola is at VGS TH because of this the equation for the parabola is in different is from ID equal to K in the bracket VGS minus VGS TH bracket square where K is a constant that depends on the particular MOSFET, it depends on the MOSFET it can be obtained from the data given in the data sheet of the MOSFET. So this is the mathematical equation describing the transconductance curve or transfer characteristics. So this is the characteristics transfer curve and this is the relation which describe the transfer curve. Now in this way the drain current through each channel MOSFET can be controlled by the gate to source voltage so it is a voltage controlled device. So these are the references electronic principles by Malvino, principles of CMOS VLSI design. Thank you for attending the lecture.