a show devoted to all things eSports. I'm your host, Catherine Norr. Today, my guest is Micah Maderos, the owner of Empire Gaming. Our topic is why eSports update catching up with Empire Gaming and more. Welcome Micah. Hey, thank you for having me Catherine. All right, it's great to see you again today. We've had you on before, and actually our locations are right next to each other in Kaneohe. So what's going on with Empire Gaming? Oh, it's been a lot since we last came on. I think the last time I came on, Empire Gaming just started. And it's been now a little over a year, and we've gone through some ups and downs. So I don't know where you want to start. I guess for now I can kind of touch up. We did start in Warzone, right?  And since then we moved away from Warzone. I only have one player still in Warzone. The rest of them have gone on to do other things. And then we shifted our focus a little bit. Empire has a few things that we're working on. The first thing we're working on right now is we have an all women's apex team. Our goal is to push the women in gaming and to help give them support. And so we want to be the first organization to get an all women's gaming team into Pro League, which is the professional division of Apex. Has it been done in North America yet? And that's our goal right now. Wow, that's fantastic. How many women are on the team? So Apex for Pro League is three. So three women and a coach. We've gone through a few rosters trying to find what works, what doesn't work. The girls have to have good chemistry together. They're going to play a lot.  They practice. So I would say at least six days out of the week, they're on the game anywhere from seven to eight hours in the day. So they're putting in a lot of time. We're bringing in coaches. We've brought in coaches from all over. We've brought in the Hundred Thieves coach. We've brought in another coach now who is playing in the CCs. He's been helping out. And then we had a few others. So it's been a journey. But the girls are excited. All right. What are the age ranges of the girls on the team? So for our girls, they're all in their low 20s to mid 20s. In gaming, as you know, once you start approaching the 30s, it's retirement age. And that's crazy to think, right? When you think of a job as 30s is retirement age. So they're all in their low to mid 20s. How do you recruit? That's a secret now. But it's a lot of work. So I do all of the recruiting right now. I do it all myself. And so what I've been doing is I inserted Empire into the APEC scene and then went from there. Found some girls who were interested and we kind of built and got to know the scene a little better. There is a women's scene that happens. It's more community driven than professional. So we're trying to put support there and then kind of meet some of our players in the women's scene. Oh, all right. Well, that's exciting. What are some future goals you have for the company? So outside of that, besides the women's APEC, we always want to tie back to Hawaii. So that's our big thing outside of the women's APEC. And what I want to do is I really want to put Hawaii on the map in eSports. That's kind of been a big goal of mine from the beginning. And rather than taking Hawaii to eSports, wherever it is in the mainland or internationally, I want to try and get eSports here. So I've had good conversations with Sky at UAH. I've talked with Jordan at HPU and we've kind of talked about things that we all want to do. So it's been a really good support system to make that happen. So yeah, we're trying to gauge what our scene looks like right now. As you know, with eSports, the online gaming experience is not the best here because of paying issues and things like that. So really our answer moving forward in my opinion is we have to get gaming here. We have to get LAN events here to put our players on the same type of level, if you will. So that's my goal. I really want to get some gaming events here. I want to get some LAN events running here. It's not very popular right now. So I'm hoping to start driving that. So do you think that eSports can become part of tourism for Hawaii so that players will come here to play but also to enjoy the beautiful environment? Absolutely. I kind of look back and I think of the days when the Pro Bowl would come and things like that. And I know there was a lot of background things with us paying them to come and things like that. But with eSports, it's so much so in its infancy still that we have the power to kind of build this, engage this and kind of point it in the direction that we want it to go. And so I think Hawaii can play a big role in that in that one. It's Hawaii, right? Everybody wants to visit, wants to kind of like see what it looks like, the beaches and they see all these pictures. So why can't we host these events? A good example is they just threw the first-ever Warzone LAN last year through Call of Duty sponsored and they went international. And so why not get them to come here? Why not make it the Hawaii event where all these players can come down, enjoy the beach, push tourism, really shopping and all the money that they'll spend there but also we can have an eSports event, throw it up someplace like the convention center or the blaze there or make something like that happen where we can have an arena that these eSports players can go and we can have a great event here. Yeah, what I would do is I would try to partner with Japan. The reason why is if you look at the Honolulu Marathon, it attracts 15,000 people or so and that's just the runners and then you get their families. And they've been Japanese people who have been, they've been coming here every year for the Honolulu Marathon so much that it has almost become a Japan event and they also come for the Great Aloha Run as well. And I would think you could probably get Japan eSports interested in doing events here or coming here. I think it's a matter of partnering with different, you're targeting different markets and I think that Japan market is probably a really good market. What do you think about that? You're absolutely right and I think that with these international partnerships, I'd like to talk with Skye at UH about it a lot because he's very experienced with that. He runs internships that go to Japan. He's had internships that go to South Korea. He does all these internships with these international destinations that he could really introduce them to Hawaii as far as eSports schools. And I think you're absolutely right. We already have the tourism that comes here and they love it and why not bring events here where even more tourists, whether it be Japan or even South Korea or wherever else, to come and participate. I think you could even get Germany. I think there are a lot of Germans that come and certainly eSports is big in Europe. And I think there's a lot of opportunity there that can be explored. Now, in terms of UH and HPU, what do you see is going on with kind of collegiate eSports right now and how that's in events that you see happening? I think collegiate is really blowing up right now. Collegiate is getting a lot of attention. This year at the eSports Awards, they made a whole collegiate event for the collegiate scene. And I think it's getting more and more recognition as colleges are picking up programs to participate. And as we build collegiate and these great programs, I think it'll be super important. And this is kind of where Empire kind of plays a good part in it is that if I'm focused on the professional side, it kind of gives a gateway for collegiate players who have something after they compete collegially, right? Is now maybe I have the avenue to go professional. And it really is kind of setting up like how a professional sports would go.  I kind of can see it happening similar to where I want to go play collegiate eSports and then, hey, you know, Hawaii has a professional team. Let's go play for the Hawaii professional team. So I'm hoping that that's something we can build. Sure, sure. Of course, by the time they graduate from college, they're almost middle age. Yeah, we might have to have a shorter time frame. So are there any LAN events that are planned or coming up in Hawaii? Yeah, so we actually partnered up with HPU. They have their arena down there. And we also partnered up with a few other local organizations, but met up with each HPU and also met up with the Hawaii eSports Alliance casing over there. They've been a lot of help and we're going to throw an Apex LAN event. Originally, we hadn't slated for this month. We didn't realize that the Apex professional league qualifiers are happening at the same time. So yeah, we went ahead and we moved it. So the date is upcoming. I will announce it on the Empire social medias. They'll announce it on the Hawaii eSports Alliance pages. And I'm looking at somewhere in January. We're just not sure exact date until we get the CC schedule for Apex, which is another qualifying event. We want to make sure that we can get these teams out. And I think UH, their varsity Apex team is already showing interest in coming out, which is cool. They've been doing really well in the collegiate scene. So hopefully we'll get a lot of people out. It'll be totally free entry. Everything's covered already. We're going to giveaways. We'll have some prizes. It'll be a good time. All right. Fantastic. You know, we have a ninth island. Okay? So I was just there and I went to HyperX and I got a little tour of the arena. And I was just thinking that what better for Hawaii to do than to partner with our ninth island? Have you ever had discussions with Las Vegas or anyone there at HyperX or anything about doing something in Hawaii? I have not. But what's funny is that I did just go to the Esports awards and just so happened my seat, we were seated in a booth and the person next to me is the owner of the Las Vegas Inferno and he runs their organization there. So maybe we got something we could talk about. Yeah. I mean, I would think that it goes both ways.  But why not get Las Vegas people over to Hawaii and maybe bring some of the vibrant Esports activity that's going on there to Hawaii? Because I know that Las Vegas is pretty big in Esports. Right. You're absolutely right. And just talking with him with the Las Vegas Inferno and he was talking about some of the professional. They have a Las Vegas Legion, which is a CDL team. They have a few others. They're really growing in the Esports world, if you will. So yeah, I think it would work. Sure. Sure. Well, and what about sponsorship? Have you been able to attract sponsors for Empire Gaming? Are you looking for sponsors? So I'm definitely looking for sponsors. Being very transparent with Empire Gaming, with any Esports owner, I pretty much put everything in. Everything is through me. And sponsors are always a help, even for our events, even if it's just products from a sponsor to help get people out or whatever it may be. And I'm hoping with Empire, we can be the people to introduce local businesses into Esports. I'd like to see some of these smaller local businesses and not even necessarily monetary, but maybe we can put their business out for them or whatever kind of help we can provide to the Esports scene. There's a lot of people getting into Esports. So why not get these local businesses involved? So to ask your question, yeah, we're always kind of looking at sponsors. But I'm very selective. I do want to support local. So we've been reached. We've had companies reach out, mainland companies, more like apparel and things like that. But I really want to try my best to gear as local as possible. And anyone who's interested in reaching younger people, which it can be difficult, especially companies that want to bring in people, consumers, that are young, and they haven't been able to find an avenue to target that market yet. This is a great avenue. Absolutely. No, it really is. I actually had the privilege to go and check out the high school championships this past weekend at HPU. And Vanta was throwing on that event, and I was able to just go and sit down and enjoy, and they were playing a rocket league. And the amount of kids that showed up to these championships to play, I think Milani ended up winning it. But it was just crazy to see so many people watching Esports. It still blows my mind, because you can probably vouch for this, is that we've seen it from its smaller stages. And to see it slowly starting to catch traction even within our high schools here, all the way down to our middle schools, it's crazy. Do you think that parents are embracing it more favorably at this point? When you see kids engaging, do you think that the parents get that this is what their kids are going to be doing and support the interest? I think it's starting to change. When I was younger, my parents, they just looked at video games as just a waste of time. I mean, that's how it was, right?  But I think now, as more and more people are establishing a career in video games, and maybe not even a player, right? Some people might play and end up doing other things. People become owners, people become developers. There's all kinds of different avenues. And I think that's back where I kind of point it back to the college, to where somebody like, let's say UH, they have an Esports program that not only brings up players, but it's also people behind the scenes, tournament organizers, casters, other things that you can do in the Esports field. So I think as parents start to see that happening more and more, they're becoming more on board. And it's funny, because when I went to the arena to watch this past weekend, there was a mom and a dad sitting in front of me and watching them celebrate as they scored in Rocket League. It's such an awesome feeling to see parents support it. Yeah. And so you talk about HPU and UH, we know UH has attracted the Overwatch World Championships. But what about UH West O'ahu? Have you seen anything going on in their beautiful, amazing Esports venue? You know, I've heard of this venue. I actually have never seen it myself. I haven't talked to anybody from that side. But I would be curious to see. I've heard things. I think you were talking to me last time. It's a really nice place, but I just haven't had a chance to see it yet. Yeah, I'm surprised that they haven't really done much there. But okay, and speaking about venues, okay, one of the big things on the news for years has been Aloha Stadium and the Entertainment District. Do you see that as a possible place in the future to attract Esports events? Absolutely. I think if we can have it, I don't want to say built correctly, because I don't think there's a correct way. But if we can have it catered to host Esports, I think we could attract a lot of events. You look at a game like Counter Strike, when they do their big events. It is international, but they sell out big places. League of Legends sells out stadiums. We could potentially be building a state-of-the-art facility to host these types of events. We have that power right now.  Sure. And you know, whenever they have these kind of huge events, just like the Honolulu Marathon, the economic impact is incredible to our island and to our state. So what do you, you know, we've been in this kind of strange time in our world where we had COVID and that kind of shut down traditional sports. Esports has become bigger and it sort of is growing exponentially. However, you know, I kind of wonder what you think about how it's growing post-COVID. Is it still continuing? Well, that's a really weird place to be. And this was a hot topic at the awards.  A lot of businesses kind of inflated the esports scene, right? They came in, there was a lot of sponsorships, a lot of involvement by businesses that wanted to get in like, oh, this esports thing is taking off. But what I think happened is when everything got inflated, you know, things from player salaries, values, whatever it may be, after we got through COVID and where we are now, I don't want to say got through, but where we are now, it's starting to settle. The dust is kind of settling. A lot of these bigger brands are now pulling out, you know, they're not getting the big return they thought they'd get. They were looking for quick returns. And I think now we're kind of in a, you know, they call it an esports winter, right? We're kind of settling. But I think things will balance. And for the businesses and the esports organizations and whatever esports involvement that these people have, for the ones that can kind of hold on through this, that can manage well through this, there's a lot of light on the other side. It'll take, it'll start to climb again. It's not to say that it's not climbing now, it just slowed down a lot. Things are balancing. People are starting to realize what salaries look like, what the actual value of these organizations look like. It doesn't look as high as it did during COVID, but it's just a balance. And once we kind of figure out these things, it'll be okay. Yeah, I think it's here to stay. It's just kind of balancing out. And, you know, during COVID, these non-endemic advertisers, they had big budgets and they didn't know what to do with them. So they put the money into esports. So you mentioned the awards. Where was it and what was the scope of the awards ceremony that you went to? Yeah, so the esports awards this year was in Vegas. So speaking of the ninth island, it was in Vegas. This is the second year they've done it in Vegas. And this year, this past year, they topped last year. They moved the venue in Vegas. They made it a little more intimate. A lot of people, you know, we're able to sit, like I said, I sat next to the Las Vegas Inferno owner and we're in like a booth and we're able to talk and chat about things. You know, it's a great event. Not only is it just an award show where they're handing out awards to all these deserving players and organizations and businesses, but they also do the day before a networking event. And they bring in a bunch of different businesses that are involved in esports. It could be a peripheral business. They've brought in Oakley. They've brought in a lot of these businesses to talk about what they look for, what, you know, what they're doing or where they came from. So it's a really cool event. So Micah, when you were in high school in Hawaii or in junior high, did you ever think you were going to have a career in esports or gaming? I dreamt of it. I dreamt it. Well, okay. There was, it was just starting to take off. I used to watch a lot of optic gaming and they were the up and coming thing at the time.  Did I ever think I would try and own an organization? No, not at all. But, you know, they say when you can't do it, you've got to find something else or whatever the saying goes. So here I am.  It's a slow and steady road. But yeah, I'm excited for this. What advice would you give someone who's interested in having a career in esports? I would say, depending on what you want to do, the very first thing is, well, really it's going to take some time. You've got to be patient with it. You know, you're going to have to, if you want to be a player, you're going to have to practice a lot. If you want to go and own your own organization, you're going to have to meet a lot of people. Like it's going to take time. It's not something you can just turn on and start doing. In a sense, you can start doing it, but to actually get to the point to compete professionally or to, you know, be really involved, you just can't give up and put in that time that it's going to take. So for Hawaii people, do you think that it's important to network in the esports industry with people in Hawaii, outside of Hawaii, or both? It's definitely both. And I can say this firsthand, you know, I've met a lot of the Hawaii gaming scene and I love it. You know, everybody in Hawaii, so they all have that aloha spirit, you know, and they're all so nice and so friendly. And when you go and meet people in the scene outside of Hawaii, you know, they're not all like that. And so, you know, when you go and you network with these people, you really learn different things from both sides, you know, from the Hawaii scene, they all understand the struggles we have with, let's say, something like ping, but you may go and talk with somebody who's not here. They don't understand that. So I think it's super important that you network with both sides so that they can understand what you're trying to do and where you come from. And then also, the people here can teach you valuable lessons on what kind of struggles or things that they're trying to overcome within eSports. So both sides are very important. You know, Hawaii people, if they talk to people in certain places in the U.S. or they talk to people in Africa or different countries, they're going to find out that they also have a lot of problems with ping. It isn't just Hawaii. And they have a lot of economic challenges. In fact, I at the eSports Trade Association Conference eSports Next that I went to in Chicago, I met a guy from Sri Lanka and he's been on the show as a guest. And think about that island. I mean, you know, there are other islands like Malta and stuff where they have some of the similar issues that Hawaii does. So, you know, we are not alone. Yeah, absolutely. No, it's crazy. And what's crazy to me too is that like when you do go and network outside in the mainland or like just even at the wars, when they ask you like, Oh, where are you from? Oh, you know, we're eSports Oregon. We're trying to make it out of Hawaii and they're like Hawaii, you know, Hawaii has like eSports or it's like, I mean, yeah, we do. So it's quite surprising. Yeah. All right. Well, Mike, it's been great to have you on here today. And we've learned a lot about what's going on in Hawaii and with Empire Gaming. Thank you for having me, Catherine. I'll see you again. I'm sure you got it. Anyway, thank you to our viewers for joining us today. We look forward to seeing you next time. Aloha.


Glass ionomers are a type of dental material used in restorative dentistry. They are composed of glass powder, phosphate glass, and acrylic monomer, and when mixed together, they form a hard, durable material. The material is biocompatible and releases fluoride, making it ideal for use as a filling material. Glass ionomers are known for their quick setting time, two to three minutes, and ability to bond to teeth. Additionally, they can be modified to increase strength and improve physical properties. This article was authored by Sharon Burkay-Sidue and John W. Nicholson.


in this picture to Ben, he might use that one. And then there's another one, look. Oh, Ben, you chode.  I'm Ricky. Is it about circumcision? No, World War II. Oh, I was close, man, a little bit. Yeah. It's World War II from India's perspective. Yay, Churchill! Yeah, right. But, so this is actually from the armchair of the story, we've seen one video of his. And we actually did a fantastic job. Yeah. So I thought this was really, because it's so interesting how everybody's taught history. They're taught history from their own perspective, right? Their people. India's probably taught history from India's perspective. Yeah. England from England's Germany. Well, Germany, actually I do think they taught it from their perspective, which is why they, you know. Outlawed Nazis. Exactly. Yes. Yep. But yeah, obviously the United States is very guilty of teaching stuff from just their perspective. Boys and girls, we've done nothing wrong. And we are the heroes of everything.  But my dad said you can go see the principal, Bobby. Anyways, so I thought it'd be really interesting. I do know, obviously, but obviously at the time that World War II was happening, India was not a free, they were under Britain still at the time. Right. And I know that obviously the Sikhs were, some people that were sent. Yes. In two battles. World War I as well. Really to fight for the British, even if they didn't want to. Yep. And they were kind of like some unsung heroes and I'm sure there was millions and millions of, and then also obviously the famine, that church hell and all that kind of stuff. But hopefully this is a very informative video. I thought it would be very interesting to see. I love learning. I like learning from different perspectives of other, because obviously once again, we're just taught the American. American, World War II, American, World War I. We come in, we save the day. Everybody loves us, right? No. And then we come at war crimes. Do, do, do, do, do, drop the nuke. Here we go. You ain't wrong. Special thanks to India Shastra and Historia Maxima for helping out with this video. Thanks. Break a war in Europe and the Far East, and every corner of our empire must stand ready to answer the call of king and country. And nowhere is a faction for his Britannic Majesty stronger than in the fabled lands of India. As our government's policy of Indianization takes root, the natives assume great control over their destiny as we march together into battle against the foes of our common empire. The great bread basket of our far-off empire happily keeps us in war material with enough food, cotton, and rubber to keep our boys fighting forever. No sacrifice is too great for victory. That was great. I'm wondering if that's like a real... I bet it was a real audio job. The armchair historian, yeah. When one thinks of British participation in the Second World War, images of Tommies in their Brody helmets slogging through the dust of Egypt were charging the beaches of Normandy spring to mind. Others may picture the maroon-buried boys of the airborne descending on Pegasus Bridge or gentlemen spies like the late Sir Christopher Lee slinking through the shadows of occupied Europe. These images all have one thing in common, however. Their protagonists are universally Anglo-Saxon. In reality, the Second World War was a clash of empires, empires who called upon all of their people to take up arms and fight for the survival of their dominion. For the British Empire, this included over 370 million people of India, their largest colony, and the much touted jewel in the imperial crown. In today's episode, we'll take a look at the Second World War from the perspective of the jewel rather than the head that wore it and how this conflict realized Indian independence. During any major conflict, information can be just as valuable as bullets. The Axis powers, in particular, sunk vast amounts of resources into the science of encryption. But while the vaunted enigma machine was eventually cracked by allied code breakers, our sponsor, NordVPN, promises to keep your data safe and anonymous with over 5200 servers in 60 countries. I think it's having a last one too. It has really nice seamless in search of ads. By passing region-locked content filters and letting you access historical videos, research papers, documentaries, anywhere at any time. A single subscription supports up to six devices on every major platform, from Windows to Linux, ensuring continued protection no matter what system you're operating on. Fans of the Armshare Historian can also take advantage of a unique discount by going to nordvpn.com slash historyvpn to get a huge discount with a bonus gift. Try today without risk thanks to Nord's 30-day money-back guarantee. The India of 1939 was a vastly different place than we know today. The British colonial government, or Raj, was a racially segregated and socially stratified body with a white ruling class held above the native Indians. The caste system assisted in maintaining social control. White's only businesses were common and Indian people were even prohibited from entering certain districts of cities in their own country. Despite these prohibitions, a kind of Indian middle class developed. Professionals who managed to work within the system to find some measure of security and prosperity. A young Gandhi belonged to this class as an up-and-coming lawyer. However, the vast majority of Indians were, to put it mildly, dissatisfied with the system. Perhaps since in the rising tide of anti-colonial sentiment, the Raj began a policy of Indianization in the 1920s and 30s which saw more and more native Indians placed in government and military positions. A particular note was the introduction of Indian officers to the local military forces which until this point had been under exclusively white command. These native officers were often placed in charge of all Indian units. While on their face, these reforms were billed as steps towards self-rule and Indian success, the reality was that they were token concessions to silence nationalist rumblings, a way for the British to simultaneously modify their critics and maintain control. Britannia rules the Indians as they rule the waves. This was, to the Raj's mind, a fact. The Second World War would put this fact to the test. The fall of Poland in 1939 brought the infamous Sitzkrieg and eight months of little change to the subcontinent. This gave the people of India time to reflect, time to begin seeing the war in Europe as a far-off matter, a news item that wouldn't touch their homeland. Like the United States, India was thousands of miles from Europe protected by sea and desert, mountain and plain. Being in India was like being in a grandstand, watching some game or other, according to British civil service officer, hey, MacDonald. MacDonald's attitude was not a popular one, however. Many of his compatriots were firmly fixed on joining the coming fight. Thus, the British ordered the Indian army mobilized at the start of the war in 1939 with viceroy of India, Lord Linlethgarh, believing wholeheartedly that the Indian people would sign on in droves to fight for democracy and freedom, king and country. Don't you want to fight for us in our war? And in one group of native Indians came to talking to the Indian Jack, the wealthy Maharajas of the princely states. Within the structure of the Raj, roughly one-third of the native population was ruled over by Indian princes who administered fiefdoms in the empire's name. When Linlethgarh called, the Maharajas saw an opportunity to shore up their power in the face of the rising Indian independence movement. The princes viewed Indian nationalism as an existential threat and hoped that by eagerly and vigorously supporting the British crown, their survival would be guaranteed in an independent India. Revolutions, even peaceful ones, are often unkind to the crowned heads. The princes raised battalions of infantry and artillery were funneled their wealth into the British war chest, scores of princes writing six-figure checks to the British air ministry and other departments. With their men and their money, these old royals hoped to preserve their preeminence in Indian society, be it under British rule or in a free Indian state. Average Indians were equally interested in the conflict and public opinion was surprisingly varied over who was in the right. India at this time included a variety of ethnic and religious groups, groups that did not always coexist peacefully. The cause of Indian independence sometimes ran along these religious and ethnic lines and Hitler's idea of racial purity found willing adoptees in the militant wings of the Indian independence movement. Such Hitlerians included the Rashtriya Swayamsavak Sankh, Hindu nationalist group who openly celebrated Adolf Hitler and his desire for racial purity as well as his methods in obtaining it. It's funny, we had a president who did this. Meanwhile, those Indians who favored the allies found themselves increasingly frustrated with the British who should have been their compatriots. While Indian politicians were anxious to defend their homes and promote their people's prosperity, the British showed interest in India solely as a well of manpower from which to draw colonial troops. Hopes of a new cooperation came in 1940 when the British and Indian governments reached an astonishing agreement. London would pay for the entirety of India's war expenses and flood the colony with investment. The British would flip the bill for recruitment and transport of Indian soldiers and bankroll-sweeping infrastructure improvements. I wonder where they got the money from. But London's generosity proved hollow. The British paid their debts with sterling credits, essentially government IOUs that forced India to front the actual money, devastating the Indian economy. Shocker! When the British government enacted the Defense of India Act, granting government officials unlimited power to crack down on any sentiment, speech, or action they considered disloyal, the Imperial government's priorities were spelled out. Focus on the war and keep India under political and economic control. While the British worked to consolidate control on the home front, Indian soldiers found their life in the field surprisingly varied. The social dynamics of some units were perfect mirrors of the Raj, with white officers enforcing a kind of de facto segregation. Disputes broke out over pay discrepancies between white and Indian officers of equal rank, the content of ration tins, and even whether radios should be tuned to Western or Indian musical stations. While this form of petty, racially driven office politics was the rule in some units, others turned out to be surprisingly progressive for the era. A common rule for these units was the prohibition of speaking in derogatory terms in the presence of Indian officers about their political leaders, customs, traditions, or music, while others accepted their Indian peers of their own accord, once they'd proven their metal and competence in the field. This attitude began to work its way up to the lines, with the Infantry Committee penning a report midway through the war identifying segregation within units as a critical issue. The most strenuous efforts must be made to ensure that no discrimination of any nature is permitted. By the end of the war, 2.5 million Indians would fight for the British Empire, providing a critical component of the Allied forces that defeated the Axis powers, powers that succeeded in bringing the war to India's doorstep. Imperial Japan's attack on Pearl Harbor was like a bucket of icy water dumped onto India's head. Up till now, the people of India thought the Second World War would play out much like the First, with Indian troops sent to far-off lands and the subcontinent spared of actual fighting. The Japanese were all too happy to disabuse India of this notion, and Pearl Harbor was followed by an East Asian blitzkrieg that toppled colonial government after colonial government. The Japanese carved a beach head into India's neighbor, Burma, and seized Hong Kong, Singapore, and British Malaya. India, therefore, became a crucial staging ground for the Allies in the Pacific, and refugees fled the Japanese advance for the perceived safety of Iraq, a flow which only intensified after the Japanese captured the Burmese capital in March. By the end of the month, the Japanese had captured all of Burma and cut the critical overland supply route from India to China. Burma's fall opened India up to a direct Japanese invasion, with Bengal first on the block. Panic swept through this province. In this desperate hour, as their imperial subjects were wracked with fear, the British Walsh stacked in to restore calm by enacting a scorched earth policy that devastated the civilian population. Food stockpiles were seized by government forces, bridges were destroyed, civilian watercraft confiscated or sunk, waterways sabotaged. If the Japanese invaded Bengal, they would inherit a ruin. However, the Japanese had reached the end of their supply lines in Burma and were unable to advance in India, so they bombed it. As British soldiers sacked what they should have been defending and Japanese ordinance fell from the sky, the people of Bengal found themselves straddling a tightrope over the bottomless chasm of starvation. Fishermen had no craft with which to ply their trade. Farmers had no crops nor way to get them to market if they did. In 1942, the ravening claws of hunger would snare India in their clutches. The Bengal famine had begun. The famine was a tragedy within a tragedy, an epidemic of hunger and disease that saw between two to three million people die. While the dominant narrative for some time has been that extreme weather was a leading cause of the famine, more modern research seems to indicate British policies in India as the true cause of the famine. Indian-American scientist and journalist Madhushree Mukherjee posits that over-exploitation of Indian resources by British leadership directly caused the famine, with London continuing to pull tons of rice from India even as a use of a large bed for emergency food aid. There's no pussy-footing around it. Hordes of refugees from Burma poured into India, increasing demand for what food was available. Fungus devastated rice crops, severely limiting edible produce. British industrialists and landowners intervened, engaging in profiteering during the crisis, freak weather devastated farmland and wiped out villages. And lastly, though not exhaustively, the Raj made great efforts to keep the famine out of the press, which prevented the possibility of international aid that could have saved lives. What is beyond debate is the devastating impact the famine had on the people of Bengal. The British inquiry into the famine noted a breakdown of family units as husbands deserted wives and wives' husbands. Elderly dependents were left behind in villages. Babies and young children were sometimes abandoned. And they don't teach it here in America. Historian Dr. Janam Rukorju describes the health scheme that Bengal became. Corpses lay scattered over several thousand square miles of devastated land. 7400 villages were partly or wholly destroyed by the storm. Cholera, dysentery and other water-borne diseases flourished. As the Japanese postured and people starved in the streets, social pressures began to mount. Politics in India did not stop with the declaration of war, and Indian nationalism only intensified as British administrators fumbled and fumbled again. The discussion was dominated by Mahatma Gandhi's Indian National Congress, drawn from the Hindu majority of Indians, and Muhammad Ali Jinnah's Muslim League, who feared becoming second-class citizens in an independent India. As time wore on, the INC began to emphasize Hinduism as a critical component to Indian society, leading to the Muslim League's Lahore Resolution calling for separate Muslim and Hindu states. This marked the effective end of cooperation between the two, and Indian nationalists were driven into the arms of militant extremist leaders. These included pro-access forces, such as the Indian National Army, led by Subhas Chandra Bose. Bose grew the INA to 43,000 members at its peak, rallying the disaffected Indians with his promise, give me blood and I will give you freedom. The INA would go on to fight in Burma against the British, collaborating with the Japanese until the wars end. Other Indians chose less drastic methods of expressing their displeasure with the British. As numbers of British and American troops in India swelled, cultural clashes and outright crime ensued, American troops began slaughtering cattle, held sacred in Hinduism, while allegations of sexual assault scandalized the Indian population. Gandhi and the INC responded by issuing the Quit India Resolution in August of 1942, a largely symbolic call for India to cease cooperation with the British until they guaranteed independence. The British responded by arresting Gandhi and many INC leaders who they would hold for three years. Gandhi, even from prison, exhorted his followers to peaceful protest. Instead, the Indian independence movement chose violence. Protests in Bombay saw 33 people killed by police in the four days following the INC leadership's arrest and a wave of attacks on government buildings ensued. A British cracked down hard and 2,500 Indians were killed. The Raj ultimately succeeded in putting down the insurrection and Indian independence would have to wait until the war was won. While the British fought the Indian people, the Japanese fought the Indian army. Indian troops managed to reclaim some of Burma in December of 1942, and the Japanese responded by bombing Calcutta for several days. Most of 1943 in India would be dedicated to reorganization and rearming of the Indian army, as the Japanese had taught the Raj a bloody lesson. They were not ready to face the Japanese in open battle. While troops in the subcontinent ready to defend their home, Indians abroad helped liberate North Africa before participating in Operation Husky, seeing action throughout Sicily. As 1943 drew to a close, the reinvigorated Indian army prepared to march against the Japanese. The Japanese watched the Indian revitalization with concern and decided they needed to once again launch a surprise attack to keep the initiative. In March of 1944, they enacted their plan, dubbed Operation Hugo, which saw intense fighting on the Burmese border. The Indians stood against the Japanese at the border towns of Imphal and Kohima. The determined Indians stood their ground against the Japanese invasion and come July, their foe had no choice but to break off the attack. The Indian national army under both fought in the Japanese attack and along with civilian collaborators rendered aid and comfort to the retreating Japanese. As the allies gave chase to the Japanese and encountered these collaborators, they chose honey over vinegar, sending doctors and food supplies to the isolated villages that had helped the Japanese. In this way, they hoped to win the locals back to the Allied side rather than punish them for collaborating. August brought an Allied drive deep into Burma and the bloody and brutal campaign to liberate the country merits its own video. Regardless, May of 1945 saw the Indian army successfully capture the Burmese capital. For India, the war was over. And the end could not have come soon enough. Food shortages were rampant even after the official end of the Bengal famine in 1944 and basic necessities like cloth were in equally short supply. Demobilization meant an epidemic of unemployment as war workers were unceremoniously laid off. Members of the INA were arrested and interrogated but public outcry saw many of them spared prosecution. Some Indians saw the INA as a legitimate member of the independence movement rather than Japanese chrislings. Speaking of independence, the British agreed to discussions with Indian leaders regarding the possibility of Indian statehood and released political prisoners as an opening gesture including Gandhi. Independence soon became an inevitability and Indian statehood talks opened. Tensions between Hindus and Muslims were a key issue of the negotiations leading to an agreement to partition the colonial territory into the Hindu state of India and the Muslim states of Pakistan and East Pakistan now known as Bangladesh. The results of these negotiations are outside the scope of our discussion today but suffice to say the liberated colony would experience some growing payments. India would go into the Second World War as a colony and emerge a pair of nations. In terms of military dead, India lost 87,000 soldiers in the fight against the Axis but accounting for civilian dead in the Bengal famine and other incidents, the death toll rises to a staggering 2.2 million at a minimum. The Indian economy was devastated by the war despite being on the winning side and the country remains economically troubled into the modern day. Nevertheless, India was able to throw off the shackles of colonialism kicking off a wave of decolonization in the aftermath of the Second World War. It is no hyperbole to say that Indian troops and material were a substantial contribution to the total Allied war effort. A contribution paid for in the spilled blood and empty stomachs of those living on the subcontinent. Great job. Great video. Very in-depth. I always love the animation too. Yeah, I don't know if he does it or if he hives it. Somebody in his team does their animation. I'll obviously probably say here in the credits but yeah, I think he does a fantastic job and if any of the information is correct, talk to him. Not us. We're just commenting on his video. Yep. But yeah, it's always, because whenever I'm thinking obviously, World War II is pretty early here, right? Yeah. But it's talking from the American perspective. I don't ever recall India being in the conversation. I don't ever remember hearing India. I didn't even know there was a famine in Bengal during World War II until we started this channel. And that would include not just my education but Ashley Alexis and Micah's education. Yep. And I was a teacher in a school. Now, I taught junior high school history for one year, filling in for somebody who couldn't teach that year. Yeah. It was not given to me in syllabus or criteria and we covered World War II. There was nothing in there for me to cover anything that pertained to India. For World War II, it's usually, stuff's going wrong, United States was like, we're good, we don't wanna be part of it. Yep. And then Japan was like, we're gonna bomb you. And then we're like, okay. And we came in and we saved the day. That's that, obviously there's more to it. Obviously. No, but that's what you're basically taught. And there is so much.  We waited too long because it was on the other side of the world. This is the synopsis you're taught. The Japanese partnering with Hitler bombed us. We're like, you sons of bitches, we didn't deserve that.  That's the way it's taught. And then jumped to bomb. Yeah. But how many? Yeah. Yeah.  And so you don't hear the bad stuff that we did, obviously, and the bombing is not taught from a bad perspective. A few schools that are known for being progressive have done it, and that's a small handful. And I guess it is like Berkeley would have taught that. And I guess it is hard, because obviously it's called World War for reasons. There was count, I don't know how many total countries involved, but essentially if one person would have won, that would have affected the entire world. It did, obviously, if Hitler would have won, that would have affected everyone, because that would not have been good for anyone. Yeah, so many countries were directly involved, and then every country was impacted. So it's hard to teach it from every perspective, of course. But it's like, there's all this that happened, I'm guessing because our history books, there's the whole problem with how our history books in the United States have come about. Right. The Dixie Crats, I believe, once kind of formed our history books, sadly. But, and so since we are friends with the English, we're not taught the bad part about what they did to India, that is never taught a year. No, as we've said many times. And so, obviously, they're not gonna tell us, oh yeah, we caused this famine over here. Do you guys wanna learn about that? There's been a lot of films in Hollywood that have been done that are international films that are big, people have watched them for years that focused on the Holocaust, as it should be. You know, there's obviously Schiller, Stenwood's List, The Pianist. You can rack off probably 10 World War II films that either talk about major battles, like Saving Private Ryan, or The Holocaust. I would like to see at least one major motion picture that has international acclaim done about what happened in Bengal. Yeah, yeah, I would too, I think. And depict it appropriately. Give it to Sujith Sarkar, he just did a fantastic job with that film. But you could give it to any number of great film makers. Also, fantastic video. I love learning about different things that I never knew about. But Rangoon, I feel like Vishal had a film, as a film, it was a military film, and I believe that's the name of it, is Rangoon. So is it about the recapturing of that city during World War II? You can let us know. I think we've reacted to the trailer of it. Shit, is she in there? I don't think she's in there. I don't remember. I just remember Vishal. And I'm wondering, and Johnny, is World War II obviously heavily taught especially in Bengal about the famine. So you guys learn all about that at nauseam probably, right? Yeah, during school. Do you learn about the American's perspective at all? How much of that do you typically learn? Not as much as Indian history, I don't know if it's true. Yeah. Yeah, okay. The World War especially, my highlight is the war. We've had a lot about the Civil War. Yeah, that's super interesting because we only learn ours. Yeah, we have American history, there's world history, but that's I think like one semester. That's like one semester. And it's always predating 20th century stuff. And then if you live in Texas, you have Texas history. That's not a joke. That is a legit class. Only Texas history. Told you Texas cares more about Texas than America. 1,000%. Texas is a cult, it always has been. It's the only country that flies their flag, their state flag as high as the American flag. Yeah. The only country. They are a cult. They are a country. If everything toxic that is about the United States and how we think we're great and everything, they think all that on top of it about their own state as well. They are insane. I grew up there. Ah. Anyway, it's a fantastic video. If there's more informational videos from him, others that we can learn some stuff, please always send it to us. We do enjoy these types of videos. Let us know down below. Josh.


All right A sign of one questions or anything else? Oh, I guess I shouldn't Any questions or questions anything today? Or we start talking about smirks. We have any questions? Yeah Yes, the deadline has been extended to Wednesday Okay Got extra two days Yeah, see I think I don't know if people want to get deadlines, but like deadlines have been sucked and you'd like continually work on Same thing with papers when you're submitting to like a conference and they extend the deadline for a week You're like up to like work on this thing for another week Any other Happy to answer them now Yeah Yeah, I'll But it should be fairly simple, right? So I make a request Say that I accept visa for coding and I make sure that you say that you're sending me back jizid And then I make sure that it's the exact same thing, you know with jizid with not jizid, right? So it shouldn't be any I mean it shouldn't be time getting trickier except for the fact that like it better be jizid encoding that I get back Yeah Yeah, I mean generally so Like it's kind of about any software, right? So specifically this is a server, right? So in So do the test cases, right? We start the server We run test cases and we stop it So if your server crashes during the test cases, right? Then it's going to get an error like hey I couldn't connect to the server because it crashed, right? So this is part of building robust a robust server that works To me that would probably be what I would look at and be like, okay What are some like is there a possible way I could crash the server, right? Or crashing is one thing hanging would be another right if it's not accepting any new connections because it's busy You know, maybe they went into an infinite while loop or something, right? I mean those are the kind of things that Uh, I would be looking for Uh, you know other questions are making sure that the output is like exactly as As we we say it is right that you're sending the right headers you're sending the right You're sending the exact amount of content length that you specify your header that your headers are properly terminated I've seen a lot of like Not correct line endings that still work correctly in browsers, right the correct line ending is a crlf Which is a slash r slash n Um Oh, it is required it specifically says in the spec an http request is this this this followed by crlf Right where crlf is a slash r slash n Is it that I don't know there's a lot of mistakes that could be made These are generally some of the You should be Returning a proper http 1.1 for y which couldn't form to the spec, right? So this is about Kind of read the spec and see like is what i'm actually returning Read the spec I'm not saying that's what the problem is right. It's too. It's too. I can't debug everybody's code But when I see snippets of code and I see that there's that stuff in there, right? It means that you You got to read the spec to understand exactly what you should be spending When you fix those kind of things like it's like little errors that magically go away, right? There's somebody who was not Even terminating headers. I think there's two headers that were concatenated together and like that was clearly the problem, right? The problem is how it manifests itself. It's it varies completely, right? Maybe some test cases will pass while others will fail Some things are just checking that something's listening on there You know, it's hard to say a hundred percent the other things are You know URL decoding, right? Are you doing it properly based on what we said in the spec? Are like on our assignment description, right? So making sure those test cases pass Are you accurately emulating like if your language doesn't support system or whatever? Are you accurately emulating it? Hey guys in the corner You guys So yeah, if you want to talk about the project you can talk about happy to do so except Obviously direct questions or anything. I mean I'll answer something So yeah, I mean hopefully that helps like it's not you know, it's not supposed to be Intentionally incredibly tricky, right? But if you're adding additional output, right? I mean, this is how we do test cases, right? We run it We compare the output of what your program sends with whatever You're not just the output, right? But what curl says the output is or what a browser says the output is We compare that with what we expect if it's not there because there's extra html stuff or whatever Because that's not what we said to do in the spec or because you're including standard out There shouldn't be standard out for Because you're including standard error and there shouldn't be standard error in there, right? These are all things where if you're not lining up exactly with what the specs with what the assignment says then it's going to be your promise Any other questions? You can talk about it Yeah, do you need to redirect post send out and send the direct to one place? Is it like a bulletin one or the other? Say again? Like I have situations wherein there are There's something in standard out as well as in standard error So do I need to like put them together and put it on or the standard? No, only standard out only Only standard out just like the assignment description says Take the program you put it in system. Whatever the standard out is you output that like standard out is not a Not a net because it's like a well-defined thing, right? Standard out standard error. Um, so yeah, so you should Toss away. You don't ever care about what's in standard error. You only want the standard out of the command Yeah, so Sending a command that doesn't exist like asdf should it return Whatever the standard error I'm trying to run system of that command outputs. All right It does not exist. No, I think it does nothing. It's an empty string. I think that's printed out to standard error Yes, so you should output nothing A standard output of whatever you try to run that command does that's it So it's it's not I don't know It's complicated, right? But it should be complicated in reading the spec and understanding the spec right not these kinds of things should be fairly simple Yeah So if the user sends a command that runs forever That's kind of up to you, right? I would just let it run forever, right?  They shouldn't have done that but You know I don't even know I don't know if I want to continue Uh, so if you guys want to have discussions you can always leave Right. I'm trying to answer these questions. So it'll be helpful, right? So yeah, if you do that, right the user does that you can absolutely let it run forever But if I make another request to your server it better respond And not hang right? That's I think the key Um, so if that ever were to happen you'd have to make sure that your server still responds So, yeah, yeah Yes It's not of the type you would want to have any questions No So there's only Yeah, there's only the two cases So the only thing we're special casing is the comment section of authorize key If it's if it's one thing just one word you should return that if it's user at host You should return whatever that host thing is if it's multiple stuff you just ignore If it's one word, yes Correct, but I we said there were you can special case that It's likely that that's a host name Yeah, that's what special case it means. We're gonna do that. We're gonna do that thing But just for that, right? You don't have to worry about you shouldn't be parsing any other comments. It's just That file format any other questions Cool. Uh, so we left off with the smurf attack, right? So the smurf attack. So what, um What level of the networking stack Is the smurf attack targeting the targeting htp is targeting Using the icmp message, right? We're using the icmp ping the echo command Not in the command, but the icmp protocol the echo request in response The attacker is using that right and what they're gonna do is they use the fact that we can spoof ip packets Right, we can spoof the source of an ip packet. So we say hey, this is a request from This machine that I want to take off 128 111 41 10 Right, this is who it came from I'm gonna Make an echo request to Uh, in this case, we're sending it to 192 one 168.1.255 Right and as we talked about that's the broadcast address of the 192 168.1 network Which means that every host is supposed to reply to that address So they all get that and they say oh this host wants to see if i'm up. Of course, yeah, I'll send I'll send packets back. These are all my return packets, right back to that host dot 10 And then I also do the same thing So I Do another packet to 192 168 dot 2 dot 255, right and so then all of them respond back to this ping finally The different network was it 191 10 dot 110 10 dot 20 dot 255 right this other sub network And so then they all reply back Right, so the effect is by sending three packets Right, I've been able to get all these hosts to generate traffic towards this dot 10 machine Right, and so this is actually I guess nowadays we talk about a denial of service We're concerned with really distributed with like botnets and you control thousands of machines and can generate a bunch of traffic, right But the idea is here the sperm attack you actually do this by just controlling basically one machine And knowing some subnet where you do this and the subnets themselves with generating traffic, right? You would leverage all these other hosts ability to respond to this icmp message to take this machine offline And so this goes into actually one of the things that is really important. So why don't I just send these three packets? to the dot 10 machine itself To take it offline like I'm trying to do the denial of service. Why don't I just send them there? Yeah, so the kind of the idea to think about is yeah, I could send three packets to dot 10, right Is that going to crash the machine? No, it says I'm going to saturate the bandwidth of the link between the machine Probably not right just three packets But so the idea here is leverage, right? So denial of service attacks are all about the attacker trying to use some leverage So the idea is by sending three packets Now I could potentially have 154 hosts reply Right, so I have an increase of one packet to 200 What did I say 254? possible, right if every host is on that subnet not likely but In the worst case, that's what I could do, right? So now I have a lot of leverage so I can generate a bunch of traffic to dot 10 Right because that's kind of one of the things to think about with denial of service It's like okay if I could generate enough traffic to do a denial of service to dot 10 Right, then I'll probably denial of service myself if I'm Saturating the ethernet links or something right that traffic still has to get there somehow So these are kind of important things that we'll see in denial of service attacks that a it's about the leverage So it's about using and finding some way to or what they call amplification, right? So what's the amplification of me sending one packet? How many does the victim receive? So if you remember You can't remember one of us was that a year and a half ago where they had the ntp the network time protocol daemon Had a really bad amplification attack. So people were using that to take off To take down a bunch of servers, but it's the same principle, right different different technical Implementation but the same principle of amplification So there's a bunch of icmp messages. The specific one we're going to look at is the destination unreachable This is the next one we're gonna look at The idea is the gateway can can tell the host that sent there like I don't know how to get I don't know how to get to this destination Um, it could be that the network is unreachable. It could be that that host is unreachable It could be that it can't send on that protocol for whatever reason Uh, can't send to that port. So it could be a message saying that like, hey, there's nothing listening on this port um It could be that we requested that our packet not be fragmented But we got a reply saying that like hey, we've had to fragment your packet, right? So So these are all right. So to kind of refresh ourselves at the icmp level, right these are all helpful useful debugging information, right? So you want to know if you tried to send a packet and um You said hey, don't fragment this packet, right? If they have to fragment it and then just drop it and it disappears You'll never know if it got there didn't get there or why it didn't get there Right. So this kind of helps try to answer that why question and so This there's another type of attack here um, where we can try to Once again kind of denial of service try to cut a A node out from a of the network um So basically the idea is We are sending let's see man. Okay. I gotta look at this screen. This is too small. I gotta fix it um We are sending traffic right to 123 Right, and we're saying that host. Ah, yes. Yes. Yes host 56 is uh Wow, uh host 56 is unreachable. Really understand what's going on here We're forging it The packet is being sent specifically to so here we're sending it to dot 10 Which is this machine from 123 Which is that machine. All right. We're trying to okay. Got it. Cool. I still understand where the leverage comes from here Uh, I tell you what I'm gonna have to look this up because I don't Understand what's going on here So I love that Yeah, I was thinking that maybe we're trying to take it out by telling other Hosts that we can't reach that host and so they'll try not to contact it Uh, so yeah, there's no way to send it. That should be how it works But maybe it does work like that and I just have a That idea of how it does work Yeah, the cloud part is just a router so we're just showing you these are two different submits Uh, okay, we're going to come back to that. Sorry about that Okay, so we'll go to the last I think it's the last Yeah, okay, cool. So we're gonna have the last ICMP message This one is really important. So what was the I think we mentioned it a little bit. What is the time exceeded? TTL, so what was the TTL? Time to live. Yeah, which is yeah always very exciting Right so the idea is when the TTL becomes zero Right or if we couldn't reassemble a fragmented datagram packet We get a time exceeded message back, right? So that's the switch this job or the host job to tell us that hey, we couldn't like this packet timed out So what is this? I think most of us or most of the people who've done network programming are pretty familiar with What what's the main way this is used and like a network diagnostic tool So that the packet doesn't Stay in the network, whatever. Yes, that's why you do this, but we could just drop So if we were using TTL, right, we could just drop the packet, right? We don't have to Tell anybody and the network I think will still be secure or still be uh, we won't have packets floating around forever, right? but what like Yeah, we don't have to this is kind of like a nice to have right so ip doesn't give any guarantees on delivery, right? So this is definitely not something we need It's something that's very helpful and handy and it's actually Using a tool that probably a lot of you have used before to try to debug network connections trace route Right, so this is actually exactly how trace route works, which is really cool. So it Um, what it does is it sends a packet out on the network with a TTL of one Right, and then it sees who responds back with that icmp message Timeout received, right and then it sends a new packet of TTL to Right and then gets a response back So that this way if you're getting icmp timeout messages from each of these Hops in between these switches You can actually from one host side map out the entire number of hops and Where your packets are being and where and how your packets are being routed through the network So it's actually a really handy cool tool to use Definitely not in any way malicious. So you don't have to worry about about that Yeah, so idea is you send a series of I believe they're probably ping messages or something But it doesn't really matter you send out ip datagrams And you start at one and each packet you give a unique id and you increase the TTL field by one So the idea is you do this collect all of the time exceeded messages And then now you have the IP addresses Of where those icmp time exceeded messages came from and because you have the id of the original ip packet You tried to send you can map that to the TTL number so you can see exactly how many hops So this is actually incredibly useful for from a security perspective, right? So why was this be useful? You can manipulate the path Yeah, so you can maybe you can manipulate the packet, right? So yeah, so but you'll never know until you know how it's getting there, right? So you may not know if it's a good path or Maybe you can find out information about those switches somehow about the path Yeah, basically It also goes back to basic kind of reconnaissance and information gathering, right? So an attacker is trying to find out about the network, right? And so if they're able to trace how packets are flowing through the network they can get information about how the Hosts are switched together what hosts are in different subnets, right? Which can try to help them infiltrate the network Oh, yeah, so there's another actual So it's also really handy to for you the user when you're doing this To try to determine actually it's kind of fun to look at so you can try to do What's the trace route from me to google, right? Like how many hops does it take? Or me too if you have like, I don't know a video game server or whatever you're trying to get to you can actually use this to determine How many hops there are you can try to determine slow connections? So you can look at like a quick kind of trace route thing if you do this so it'll tell you Specifically, okay We're trying to get to this machine here 206 132 152 33 We will do oh, that's right. Okay, cool so the other interesting thing about the ttl oftentimes Does anybody remember when I think the It was the iPhones AT&T didn't allow you to tether your phone like your internet your computer to your phone and they would be blocking and Blocking people from doing that if they detected it, right? If you didn't pay for whatever their tethering thing was So they actually use the ttl and some other fields to detect that That was one way they tried to do that is if your computer is using your phone as a router This is not a phone. It's in my bag But if your computer is using your phone as a router, right? Then whatever packets you normally would send their ttl is going to be decreased by one when it gets to horizon Right based on what it normally is So then you could actually tell that that packet was probably from the phone on the other side So then the people who made the routing software with then on jailbroken phones would then make it so that they would Change back the ttl and not decrease it, right? So this kind of arms race then I think they use Like hdp headers to try to detect, right? If you're having hdp like the user agent that says it's like a not a mobile browser coming from a phone Anyways holding deal, but kind of interesting ttl stuff. You can do it So we can look at this this trace route so we can say okay. This machine's the gateway Then after that it went to this other machine So how is it getting these names? host names They are host names, but how does it get it because it only knows the ip, right? What we give is we tell it either this host name Right so we can use dns to translate that to this ip address What about these host names in the middle? What information isn't getting back when it receives the timeout exceeded packet? That particular machines Not host name, right, but it's an ip packet, right? It knows who sent that ip packet Right and then it does actually a reverse dns look up to then try and map This name to this host name and if you can't do it Probably will not show you or you can use I think the dash n flag again to make to tell it not to do that So we can see our packets go out and then at each point it has the These values are the time to live values of the hops So it is trace write is measuring the time we sent the packet versus when we got that reply And so these you know Should be increasing But there's actually no guarantee that they will because of congestion and all the crazy networking stuff that can happen So you can see here I should do this for here, but it's actually kind of crazy you can Looking at where the traffic goes Um When I did this in santa barbara not in the network like in my home It would go like the traffic would go like sometimes up to san francisco sometimes down to la sometimes like from there It goes all over the place Sometimes some intermediary knows if they don't want to be discovered like Yeah So All right, so this is probably my wireless Right, so what happened here? What this uh, what does this asterisk mean? How does it know it failed? But I can ping right if I ping this ip address two one six fifty eight So two one six again two one six dot fourteen I actually don't okay It's the asc network Go to your homework submission server. Hopefully there's nothing sensitive on there. There we go. See I was the dash end It was it's trying to reverse it So I can even ping let's do it from here All right, so I can see that I can get packets to and from that IP address I can do trace route What can't I have any extra utilities on them? uh, this is The second isn't this is the submission server and then there's uh Anyways, it's complicated But yeah, there's it goes into a queue and there's workers that pull from the queue to execute all your submissions But even then it's done in like a ch group jail. So any package is getting solved on effect the outside. So Yeah, so we can kind of see the difference here, right? So any of these stars? So what does that mean? Right? So we said that we saw that I can get packets to this IP address, right? But they won't respond to that. What was that? They won't respond to that. What do you mean respond back? I'm not sending them a message What was it? Masking Just think about what happens, right? So I'm sending I take a packet, right? I said the TT on the 1 I send it on the first hop Right, so this is this first hop here Is my gateway, right? so Then so you gotta think about it then from the switches perspective, right? So the switch gets this packet It decrements the ttl. It sees that it's zero Now it has to decide what to do, right? So we can send an icmp Timeout exceeded message and then we'll see it here, right? Like this machine clearly is doing that but The switch can also decide to just drop the packet on the floor and not do anything and not respond with the timeout exceeded Right, so then how does tracer out of the tech back? In specific time, right? Because that's actually all it can do. It's actually it can't tell Did I not receive a timeout in 30 seconds because the network's congested? Maybe I never got back the reply, right? Maybe there was congestion in the network and my packet got dropped on the way back Which is actually why I believe it makes three by default Packets so that you can tell if there's any congestion in the network you can tell So yeah, you can see that like That went out on I don't know quest net and then to Down to lax so we can see that like this ip address that google gives us is in la so it's maybe doing some tricks of When we do a dns request it's trying to give us a local A local server so it tries to give us a server in la to go to Um, and we can see here that like the route these packets took is very different And we're not getting any response back on the wireless Which is kind of crazy, but yeah, it's it's uh pretty cool Something has a really cool tracer out that's like a story all the host names Ah Okay, yeah, yeah, and actually like route route. I think your router will do that a lot of the web interfaces all that kind of stuff Very handy feature handy tool to use Actually, that's right. The other thing I want to mention about this so There's actually a group of researchers who propose the new denial of service attack Using trace route Well, I'm not using trace out but using trace route to plan the attack in some sense Right, so one way we saw with the smurf attack Right is we can just send you a bunch of traffic, right? That's how I can knock you offline.  But I have to send this directly to this host Right, so I have to send this traffic to your host You've got the host itself is going to be overwhelmed with processing all this information Or some of the switches is going to the switches are going to be overwhelmed or the you know, the ethernet is going to get saturated I can do that or So in this subnet, right What if I cut off this blue link here Then can any traffic get to the subnet? So this traffic all this traffic to get this subnet is going through some switch somewhere, right? So what if I target that switch? Then if I target that switch, it's going to knock off the whole subnet So basically what these researchers found out I can't remember where they're from But their idea was they could use trace route to map all the different connections in the internet And try to identify a switch such that It was upstream from my target, right? So traffic to my target has to go through this switch But I can send traffic to another host And it will go through that switch too So then I get to take your machine off the network by sending traffic that's not even directed towards you It's directed to other people, but because of how it travels through the network I know it's going through that specific node So it's kind of an interesting way of Like indirect firing of packets You're trying to hit one of the other switches and they use trace route to try to determine that So I thought that was a cool approach to actually Leverage this for a malicious purpose Of course one of the problems there as we saw right is oftentimes networks will not tell you you can't trace route every network Plus there is actually some people at the talk who are saying that at big ISPs Oftentimes they won't even What are they saying sometimes that when a packet comes in they'll encapsulate it in something else And then route it through their own network. So it actually comes out as the same TTL on both sides So you'll never actually know Any of the hops within their network. Any questions on trace route? It's fun. You should play with it It's not malicious at all. So Don't worry about that Cool. All right. So now moving up from IP, right? So what's in the layer above IP? Yeah, the transport layer. So one of the two main transport layer protocols TCP and UDP, right? So UDP is the first one we're going to talk about At a high level, what's the purpose of UDP? When do I want to use UDP? Connectionless, what does that mean? Yeah, okay, so connectionless so I don't have to establish a Descend the UDP packet or connect us to you, right? I don't have to establish an entire connection again Why real-time communication? It's fast If in a video if a packet drops it doesn't change the video Right, so we said it's connectionless. If it is lost all around then you can use UDP All right, so what is it about UDP? What does that mean about UDP? So it doesn't guarantee any service, right? So we don't have to establish a connection first. We No guarantee that a packet's going to get there Or some other things that kind of relate but they're all kind of It doesn't have an unchecking Right, we got that with a connection Yeah, no order, right? So not only can packets get dropped but they can come to us in any order, right? Ah, yeah, yeah, that's kind of a good one Yeah, so There's no Explicit mechanisms to limit UDP traffic, right so we can kind of send as much as we want So yeah, so basically It's connectionless, right? It's unreliable, which means that the packets could drop anything could happen Best effort which just also means unreliable, right? If somebody's going to tell you they'll do their best effort, I mean It means whatever it means I guess Datagram which means it's going to send some data, right? So there's no kind of limitations on what it's going to send So the important thing right delivery the fact that it's delivered or not You will not know when you send out a UDP packet, right? That's the other thing So not only can it be dropped, but you may never know if it was accepted or not The integrity of the packet is Not guaranteed I believe that, I think there's a check something, yeah, no overall integrity The ordering packets could be duplicated, right? UDP packets can be duplicated, we'll not know And bandwidth is not guaranteed, which goes kind of like to the congestion control But so it's I'd say the dominant is definitely TCP as far as like, I don't know amount of traffic and all that stuff But UDP is definitely using a lot of key internet technologies and protocol And that's why it's incredibly important So typically DNS uses UDP, right? Which is really important And also some peer-to-peer networking type stuff or some I guess I'm Video conferencing is kind of the classic UDP The important thing here is so up till now, how did we talk to a different machine? What do we need the what? IP yeah, we need an IP address, right? So UDP and kind of the higher levels introduce this port abstraction, right which says that well Okay If the I if you think about everyone living in a building right the IP address is the building But the port would be the apartment number Right, so it's like what because now we're starting to get closer to the application So I'm not just trying to get a piece of information from me to you. I'm trying to get it to a specific Program running on your machine um Yeah, so there's it's it's used So if we look at a UDP message We have a source port so some portances us so the the port of the application or whoever that sent it The destination port where we want the destination port to go to The length of the message a check sum And then the data So wait, what about the IP address? How do we get this packet to them? Yeah Yeah, right, so it's the packets are layered right so just as we saw Uh an IP packet right is encapsulated within a what packet? On a wire network an ethernet packet right the link layer So the same way UDP packet is inside an IP packet, right? So before the IP the UDP header is going to be an IP header, right? And then within that that's all encapsulated within the frame.  So the IP adds its own headers on top of that And then the ethernet frame that's headers before that so each layer when it processes it right like the network card basically essentially Investigates these headers and then returns as data to whoever wants it this IP packet And then above that this UDP packet is what The application would receive More or less they can also read those other packets if it's important to them So what does this mean? So we looked at so looking at this message Right, will we learn about the source? So would we learn about the source and destination IP? In the security context Yeah, they're not explicitly checked, right? We can just make an IP packet with whoever source or destination IP we want What about these ports here on UDP? What about security so who checks that it actually came from our source port? If I were an attacker crafting a UDP message, what are this can I control? Everything yeah everything right I control everything and in fact I control everything on here right which is what makes Security so difficult right because I as an attacker can control everything on here. So we saw that by manipulating the source IP address and the specifically spoofing the source IP address or maybe changing the destination IP address we can play games with that So we can do the same thing with UDP right so we saw that we can spoof IP packets. Well UDP packets are basically the same thing as IP packets Right, so if we have this trusted client and this server and we're in the middle We can spoof a UDP request from the trusted client to the server So what do we need to make sure we specified? What The port number yeah, so which port number Yeah, both right we're gonna have to make sure it's the trusted client port number and the server that we're trying to get to We'd have to make sure the IP address is right the from IP address is the trusted client the to IP address is the server So then what happens when the server tries to respond here? Right yeah, so it's going to get that UDP request Right and the only information you have to respond to a UDP request right is inside that packet So what's the IP address of who sent it to you and what port were they? And that's how you send the connection back so that reply is going to go back to the trusted client So if we can Get it to the point. Oh, it's going on a variation. Oh, yeah, this is very okay. It's a very yeah It's UDP hijacking similar to IP hijacking Variation of the spoofing attack the basic idea is the client is going to request something from the server like a dns request And say hey, what's the IP address of google.com? So if we get this request also, right, so when can we get the request? Sniffing the network if we're on the same subnet. Maybe we've done some hard poisoning or our spoofing, right? Maybe we can if we can get that request Now if I reply back As long as my reply gets there before the servers Now the client's going to think that I respond it as the server. So when the server gets these two packets Right, what's different from them from these two packets the spoofed UDP reply and the UDP reply The source what are the source of both of these packets going to be? The server Yeah, we're spoofing it right so that's the important point. So we are we control the source port and the source IP address Right, so we can spoof The reply to make it seem like it came from the server. So we set the source port to be whatever the We use the UDP request and we set whatever the destination port is the destination port the source port Let's see. Am I doing this right? Yeah, we set the destination here of the UDP reply to the the Source of yeah, we switched those around. Okay, that's all I'm gonna say because I'm getting confused talking about The idea the yeah the the basic idea here is right in this UDP request We have all the information we need to be able to generate a reply and because and this goes back because UDP is a connectionless protocol, right client and server aren't talking Really, it's just a hey send a packet and then send a reply Right when you get a packet and send a reply So why would this be useful? Distinguish between right because even an act is going to come from the client's gateway Right and so all it sees is hey, this is a reply to that request I sent great, so Yeah, so it's really difficult to kind of detect this thing unless you see this spoof reply But even then I can prove that it's not just a duplicated reply So what does DNS do? Yeah, right, it's just like a simple at a high level. It's very simple So it just takes in the names right human names translates them to numbers, right like IP addresses How it works is it works for UDP so Your each of your machines knows of a DNS server right either through DHCP or something right So when it gets a request for a name it's never seen before it asks that DHCP server Hey, what's the IP address of google.com? Right, and then it's exactly like this it makes a UDP request to I can't remember the port it's 53 52 53 yeah, so it makes a UDP request to port 53 and says hey, what's the IP address of google.com? Right, and then it gets a response a UDP response back that says hey Google.com is that was a 216 something 216 and I remember it's in a 2216 in it Right, this is the IP address of google Right, so would that be really cool if we could pretend to be google.com to people? It's as simple as this Right, so think about a wireless network right with no security We see all the UDP requests, right? We're on the same sub network as the client. We see all the UDP requests At that point it's very trivial to respond faster than the dns server and say yep Don't worry about it google.com is <IP_ADDRESS> Definitely me send all your stuff to google.com right and then they'll contact us and we can pretend to be google So this is actually kind of a fundamental problem that A lot of the upper networking layers have to deal with and that's why we have certificate pinning and all these other kind of things at the top layer because This fundamental problem with UDP that it's so trivial and easy to hijack The UDP connection and the fact that dns relies on this unreliable connectionless protocol Well, so we'll stop here. We'll get into some port scanning and then we'll Hopefully our wednesday will knock out all the rest of the networking stuff and finish your tcp