I finished watching Neon Genesis Evangelion a few weeks ago, and I still really don't get it. I'm still grappling with understanding the show and its psychoanalytic themes, its religious symbolism and ideas, and many more. But it was a fantastic heart-wrenching and gripping anime, one that encapsulates the despair and loneliness of the world and of oneself. Even while in a very small dosage, shows hope, happiness, individuality, and examines the self quite carefully. I wanted to pen a character analysis of Shinji Yasuka Rei or of Miss Misato, but instead I wanted to look at how Evangelion is able to paint a bleak world, and through this lens I see exactly why this show resonates with so many people. I see why this is a comfort series for so many people. Because of the way these characters can reflect so many people's lives, just as it did for the creator. No character in Evangelion is unscathed or unharmed physically or mentally. Each character deals with loneliness, fear, and despair amongst many other things in one way or another. Misato Katsuragi runs away from reality when it's time to be kind to herself. She's quite judgmental towards herself and believes others judge her as harshly as she judges herself. Rei who wants urine for death and despair searches and has found individuality through her connections and specifically through her relationship with Shinji. Her choice at the end of Evangelion proves her autonomy. Asuka who poses as a tough, strong-willed individual, she desperately craves affection. She wants nothing more than to be looked at and to be held, and to be paid attention to. She has placed all of her self-worth and her desire to be looked at into piloting her Eva unit. And as she was upstaged by Shinji and lost the ability to sync with her Eva, she reverted into her younger self, begging for others to look at her, and this time she begged and pleaded inside of her own head. Even Gendo Ikari was lonely and afraid of living his life without Yui, to the point where he became just like his son running away from reality, as he risks everything to try and bring her back. Which leads us to Shinji. Aided by his father, Shinji grew up not only hating his father, but this abandonment scarred him mentally and emotionally, leading him to fear opening up to others because he is afraid of being hurt again. He becomes cynical, self-loathing, and most of all, lonely. He rejects others but constantly searches for happiness and or help through others, the same people he pushes away. He pilots the Eva unit for validation and for praise from his peers and from his father, but the most glaring of all, Shinji hates himself, and he constantly belittles himself over and over again. Evangelion is Shinji's story. It is a widely known fact that Hideaki Anno, the creator of Evangelion, was battling depression through the making of this series, and is reflected so clearly in his creation. He takes the viewer through 26 episodes of his own mind, and he is Shinji, where there are protagonists like Goku and Naruto as motivational and strong-willed heroes. There is Shinji, who is soft, spoken, timid, and passive. Shinji is incredibly hurt and runs away from life's hardships. Shinji's fear of intimacy, fear of loneliness, alongside his aloof personality are traits that are rare for a protagonist, but here he is. Shinji doesn't possess too many redeeming qualities. He is a hurt, sad, and lonely kid. And that is what's special about his character's journey, and why it resonates with so many, because he isn't strong. Because there are so many Shinji's in the world, just like Anno, who are watching Evangelion, and not only Shinji, there are many Asuka's and Misaros as well, who are struggling with their own worth and self-image. With Shinji, we see a creator at his most vulnerable, creating a reflection of himself, and not of who he wants to be, but of who he is, and of who he is becoming. Over the course of Evangelion, there are moments of happiness and joy, glimmers of hope and positivity sprinkled throughout it. Moments when Shinji, Misaru, and Asuka are making fun of each other. Where kids are allowed to be kids, and especially in the earlier portions of Evangelion, there are brighter days. One of my favorite moments is Shinji playing the cello, doing what he loves. But sadness, danger, depression looms over them every night, and in each episode. And Evangelion takes the time to illustrate these conflicting aspects of their lives and of its creators. Anno takes us on this journey to understand what makes these characters tick, their motivations and their fears, and particularly Shinji, who goes through this process several times. Shinji questions his existence, his self, his motivations, and comes up with so many different conclusions, but the 25th and 26th episodes see Shinji at his absolute lowest, willing to disregard living. Again willing to run away, and this time to human instrumentality. Shinji's breakthrough comes at about a few minutes before the end of the final episode. And when he does break through, he gets a round of applause, a congratulations, and the series ends, kind of abruptly. It's 26 episodes of despair, misery, and sorrow, 26 episodes of a dark tunnel that welcomes light in briefly. It exchanges all of these episodes for 8 minutes of happiness and hope. And that's Shinji's story. The 8 minutes are worth it because he finally saw the light at the end of the tunnel. He began to learn to be kind to himself, he didn't run away from all of the pain and suffering, he faced it head on, and through the end of Evangelion it's ultimately the same conclusion, he's now willing to brave life and willing to see his own worth. The message that stuck with me after watching Evangelion is that Shinji's reality is one that so many people live in. Depression, loneliness, self-loathing, and a complete lack of self-worth. Shinji feels as though he has to pilot the Eva because it's the only way he'll feel good about himself, through the praises of others. But Shinji never lives for himself, he never does anything for himself, instead he feels as though there's no hope for him, and as though everyone around him hates him but just won't say it. However, like Asuka says, you have to find happiness for yourself, not through the praises of others, and it's the same thing with hope. Our favorite uncle, Iroh, says that hope is something you give yourself. For Shinji, that happiness was in the presence of his friends. It was through realizing who he is and his value. The majority of these characters have innately human desires and fears. They all make sense considering their upbringing, but pushing their upbringing aside, these are fears and desires that are human. I think to some degree we all fear abandonment and loneliness, and we all want to be looked at and held. We all have different truths based on our realities, and not one reality is the same as another. Kaji says it's virtually impossible to fully understand another, but living is about coexisting, about trying to understand that these differences exist, and the challenge that is navigating through them. Living is about digging that path towards the small sliver of light at the end of the tunnel, and chasing that light forever. To be alive is to be present in every single moment. Evangelion illustrates the idea that there will be people that like you for you, and not for your accomplishments, or for your ability to pilot an Eva. But if you push these people away, out of fear of intimacy, fear of getting hurt, or a fear period, you won't move forward. Shinji is proof that you will falter and you will fail. Shinji struggled. This was 26 episodes of work and 8 minutes of realization. That work included failure and tons of mistakes. Shinji isn't a perfect character who happens to be depressed and traumatized. He too has his own faults and flaws that he's working on, flaws that he has to embrace, and he did. Despite everything, he was still willing to chase that feeling of being loved, even if it meant possibly being hurt. That is Shinji seeing the worth of being alive, and seeing a path to valuing himself. Shinji had the will to live. And finally, I think Evangelion tells his viewers that you have value and worth beyond your abilities. Beyond your ability to pilot an Eva and beyond what you can give to others. Your worth isn't defined by your productivity, nor can you let yourself be defined by what you can offer. More so, if you don't give yourself a chance to have value, if you don't love yourself and be kind to yourself, you'll never be able to see it. It's not easy, but learn to be kind to yourself. Learn to love yourself, because that's the first step to healing and to growth.  Also give yourself a chance to bloom and to grow into something and someone special. As Shinji says it, what you are now isn't everything you'll ever be. Water the seeds of your soul so that it may blossom into a garden of light and of truth. And in that journey, don't push others away. And don't be afraid or be ashamed to ask for help, ever.


We must understand this engineering means essentially to make things happen the way we want it. That's engineering, isn't it? To engineer this building means what? We want it the way we want it. We could have sat under a tree, but we choose to build this building because we want to sit under something, engineer the way we want it. Are suitable for us? We are conditioned the place because we want the temperature in a certain way. All this we did, but is it not important that you engineer this the way you want it? Hello? Outside is air conditioned, inside is boiling, what's the point? I'm saying power is being wasted on you. In the last hundred-hundred-fifty years, with the advent of science and technology, we have more comforts and conveniences than any generation ever could imagine, isn't it? Yes or no? You have more comforts and conveniences than any generation could ever imagine. We are the most comfortable generation ever, physically, materially. But can you say, are you the most peaceful generation? Joyful? Loving? No.  That'll be wrong thing to say. Anybody who claims he is intelligent amounts to foolishness, isn't it? Because the significance of intelligence is, it shows you how many loopholes are there in your intelligence. Only a fool thinks there are no loopholes.  The significance of being in a technological institute is not about just getting qualified to get some job somewhere or a passport out of the country. It should become a way of creating life. Making life happen better than the way it's happening right now because this is a fundamental responsibility that we have as a generation of people. Because we occupy this space on the planet for a short brief time when the last generation gave this planet to us, whichever way they gave it, it's our business that when we leave it, we leave it little better than the way we had it. Very important. How better, in what way better? You can decide that. I won't say only ecologically better, but in every way better. It must be better than the way we got it. This means we have to engineer ourselves to fit in such a way. See, a well engineered machine means least amount of friction, is it so? Yes? A well engineered machine means what? Least amount of friction. Heavy friction means badly engineered, isn't it? Isn't that the understanding? So the fundamentals of yoga is this. The fundamentals of yoga is in the geometry of physical existence. If you understand the geometry of what this human mechanism is, the body is, the psychological structure is, the chemical processes are, the energy structures are, if you understand the geometry of this and become capable of observing the cosmic geometry, if these two things are well aligned, suddenly your life hits off like a magic. Your life is no more a miserable drag, but it's magical simply because you have gotten the right geometry of things. Anything that is geometrically perfect will functions absolutely smoothly and for a very long time. This is something that you must do to yourself when you're young. It doesn't matter what you want to do in your life.  They must work for you. Yes or no? Hello?  Right now for most people, they themselves are a big issue. When you are a issue, how will you address the issues in the world? If you really want to address the issues in the world, this one should never be a issue, isn't it? I am not the issue here. I am never the problem. If there are problems, I will deal with it, but I am never the problem. This must happen to you, isn't it? Please make yourself like this, that you are never the problem. You are always a part of the solution, never a part of the problem. Right now, right now we have developed a certain attitude in the country, a whole lot of people. For every solution they invent a problem. For every solution they have found a problem. So there are people who are working for problems. There are people who are working for solutions. Young people should stand up and become a solution for future generations to come and your own life to blossom, because the greatest fulfillment in one's life is that you function in such a way that you could do something which is much larger than yourself. This must happen. This is the highest fulfillment of activity, that you are able to do something which is larger than yourself. Only then you will see fulfillment in activity. Activity is one thing, but most important thing is how you are. People come to me like, right now you are all saying your IIT is the problem, so I am inviting you to IYC, Isha Yoga Center. Lot of people come to me and say, Sadhguru, these are people who passed out, okay? Sadhguru, my mother-in-law, she is… she is another, you know, from somewhere else she is. I just don't know how to live with this person. And my husband, after all her son, my wife, impossible. My boss is not even human. Like this it goes on. Then I tell them, see, don't worry. Your husband, wife, mother-in-law, boss, nobody will come here. You're protected, like IIT. Your IYC also well protected. Nobody will come here. You just come and stay. I'll give you a nice place to say, food is good. You don't have to do anything. Just be joyful. That's all. None of these tormentors are there. Just be joyful. Twenty-four hours you leave them in the one room. You must see in how many ways they twist themselves out. When you're alone, if you're miserable, you're obviously in bad company, isn't it? So, all the young people should do this to yourself. At least for three days, one week, I will provide you the atmosphere, otherwise you can walk into the Himalayas. But there, there is no food and supply.  I will provide you food, everything. Just come, spend some time, not with any purpose. Simply. If you sit alone for three days, no television, no book, no texting, simply by yourself. Let's see what happens. You must know the nature of who you are. You should not go on dodging yourself and one day you will explode into something. You must know what is the level of madness you're suffering. When I say madness, if your mind is out of your control, is that called madness in different… in definition? Hello? If your mind does not take instructions from you, it's out of control, is that called madness? Just try. Just today after this event, just go sit quietly in your room. Just see what all your mind does. You… you decide, don't tell anybody. You decide what is the level of madness you're going through. With this, if you enter the world, what will you create? You will only create who you are, isn't it? You cannot do anything other than what you are.  Before you step out into the world, is it not important, at least you're this much equipped that you are not the problem. If you meet a problem and get married, we'll see. But you are not the problem. Can you make this happen for yourself as young people? That you are never the problem. You are not the issue in your life. Other issues if they come, we will deal with it to the best of our ability. But this should not be an issue, isn't it? This can be easily done. Very simple processes.  It is just that it needs a certain orientation because life is continuously outward. To turn inward, it needs a certain help and situation has to be created to make that happen. We are very much willing to do that with you. It's my wish and my blessing, this must happen to every youth of this country because India, the people of India has suffered immensely. I don't know to what extent all of you are exposed, many of you are from good families. I have walked through rural societies right from my, you know, early youth. It's not good, believe me. It's just not good. It's not some idyllic situation out there. It is bad. It's very bad. In most parts of the world, where we are they say they are the better of states. The better of states are like that. I know the Bhima Roos, how they are. We can't just live like this. We can't just continue to live like this, insulating our humanity and thinking everything is okay. It's time we have a living humanity that our heart beats for everything, our heart bleeds for everything and we will do the best we can do. In our lives, if we do not do what we cannot do, there's no problem. But if we do not do what we can do, we are a disastrous life, isn't it? It's my wish and my blessing, you should not be that disastrous.


Hello everybody. Now this particular session we are going to discuss about three tutorials. Again you just watched junk food and you also watched you know why families give junk food to children. This particular tutorial that we are going to show three tutorials, they are not only important for adults but they are also important for children because as you know the CNNS report has just come out couple of years ago and it has shown you know 34% children between 5 to 9 years of age have high triglyceride level. It has also shown that same age group about 9% children have prediabetes. This shows that children are not eating right food, you know probably having formulas, ultra process formulas and they are also having complementary foods which are not very healthy. So you will learn a lot from this next two sessions. I have shown about insulin importance of insulin, complications of insulin resistance.   These are very unhealthy sugars, okay. So here in this session we have shown what happens when you have food which is extremely high in carbohydrate and lacking in important other nutrients like protein and good fats. And what it does, it causes insulin to rise because the effect of insulin is to push that glucose into the cells, okay. And what happens when that cells are overfilled with glucose, it will prevent insulin action to push that glucose because we all know that high glucose level in the blood is not healthy, okay. So here what we can do is to, you know, what body does, it raises the insulin level to push that glucose more into the cell. And this stage is called insulin resistance, okay. Sugar level is still normal in the blood because it's pushing that sugar in the cells but at the cost of high insulin, okay. Many of us are insulin resistant, we don't know because we don't check fasting insulin level. We only check blood glucose and, you know, it takes almost 10 years to 12 years, you know, to get this glucose high because for 10 years insulin was working very hard to push that glucose in the cells, okay. So we have almost good number of years to prevent prediabetes and diabetes but we need to know the fasting insulin level. So that's what we have shown in this session. I'm sure you'll enjoy this three tutorials. Do watch them carefully and do share it with your friends and family. Thank you. Welcome to this spoken tutorial on the importance of insulin. In this tutorial we will learn about secretion of insulin from the pancreas, role of insulin in the body. Insulin is an important hormone. Hormones are secreted directly in the blood. They are carried to various tissues and organs where they exert their functions. Insulin is secreted by the pancreas. Pancreas is an organ located behind the stomach. The pancreas is made up of glands which secretes various enzymes and hormones. Now we will focus on insulin's release and the factors which affect it. There are several factors which stimulate the release of insulin. The most important factor is the level of glucose in the blood. Remember that glucose level increases on eating food. Presence of food in the intestine causes a release of various gut hormones. This also affects the release of insulin. Food contains three main macronutrients. Carbohydrates, protein and fats. Insulin's response to different foods varies. Carbohydrate-rich foods raise blood glucose levels quickly. As a result, large amounts of insulin are secreted. Examples of carbohydrate-rich foods are bread, chapati, potatoes and fruits. Sweets, grains and even vegetables are some other examples. Sugar, jaggery and honey are also included. The release of insulin in response to protein-rich foods is slightly low. Examples of protein-rich foods are eggs, meat, fish. Fat has the least effect on stimulating the release of insulin. Fat-rich foods include ghee, oil, butter, etc. Insulin is released in two phases. It is either in the basal rate or in the peak rate. Insulin is released continuously in small amounts even when no food is consumed. This is the basal rate. When food is consumed, insulin is released in high amounts. This is known as the peak rate. After learning about insulin's secretion, let us understand its role in the body. Insulin promotes the uptake of glucose into the cells. This is the most well-known role of insulin. Insulin acts like a key to open the cells. The cells then take up glucose from the blood. This glucose is used by the cells mainly for producing energy. When we eat food, we are in a fed state. The body uses glucose as a fuel to provide energy. Let us see what happens if we consume extra glucose. In the liver, the excess glucose gets converted to glycogen and triglycerides. Glycogen is the concentrated form of glucose. It gets stored in the liver and the muscles. Triglycerides are the stored fats in our body. These stores can be used later when we are not consuming food. Not consuming food is the non-fed state. A fresh supply of glucose is not available during this state. This is when the body uses glycogen and fat as a fuel to supply energy. The body breaks down glycogen into glucose. This is required for our brain which needs glucose as a fuel. Other non-carbohydrate sources are also converted to glucose. For example, amino acids, lactate, glycerol. This conversion occurs mainly in the liver and kidneys. However, the conversion is inhibited by insulin. Among the various roles of insulin, the most crucial is managing energy. In the fed state, insulin promotes the storage of energy. It does this by promoting conversion of excess glucose into fat. The breakdown and conversion of fat is suppressed. Thus, insulin prevents the loss of fat in the body. This way, a person will not be able to use or melt the stored fat in the body. In the non-fed state, lack of insulin promotes the utilization of fat. The stored fats are broken down to provide energy. There is another hormone that helps insulin to maintain the blood sugar level. It is the glucagon hormone secreted by the pancreas. Let us see how insulin along with glucagon maintains the blood glucose level. When blood sugar level rises, the pancreas releases insulin. Insulin takes up glucose from the blood into the cells. It then promotes the formation of glycogen and triglycerides in the liver. Blood glucose then returns to normal level. When blood sugar levels are low, the pancreas releases glucagon. Glucagon promotes the breakdown of glycogen into glucose in the liver. This releases glucose in the blood. As a result, blood sugar then returns to normal level. This is how insulin and glucagon complement each other. Insulin acts as an anabolic hormone as well, which means it promotes the growth of the cells and tissues. It also helps in bone development and formation. Another role of insulin is to manage the potassium levels in the body. Insulin promotes the entry of potassium into the cells. Potassium is an important mineral for the body. It is involved in muscle contractions, heart functions and fluid balance. These beneficial roles of insulin are seen when it is present in normal level. Fasting insulin in healthy individuals should be between 2 to 5 miu slash ml. Miu slash ml stands for milli-international units per millilitres. High levels of insulin in the blood creates a lot of health issues. This will be discussed in detail in another tutorial. Remember the reasons mentioned in this tutorial to maintain insulin level. Maintain the level within the normal range. It will help you to have a healthy body. This brings us to the end of the tutorial. Thank you for joining. Welcome to the spoken tutorial on introduction to insulin resistance. In this tutorial we will learn about the normal response of cells to insulin. The change in response to insulin when there is insulin resistance. The traditional definition of diabetes, root cause of diabetes. Let us begin. Our body needs energy for survival and growth. Glucose is a very convenient source of energy for humans. Multiple molecules of glucose form starch. Starch is a type of carbohydrate found in our food. Carbohydrate rich foods are abundantly available and are cheap. So we consume a lot of glucose which is a type of sugar through such foods. Harmful consequences of eating a lot of dietary sugar are widely known. Dangers of high and low levels of blood sugar are also well known. So our body should convert dietary glucose quickly into energy or body fat. This helps us to maintain a normal level of blood sugar. The pancreas maintains a fasting blood glucose level between 70 and 99 mg per dl. mg per dl stands for milligram per deciliter. This range is maintained by the insulin hormone produced by the pancreas. Insulin is explained in detail in another tutorial in the same series. Please visit our website for more details. Next let's discuss the traditional definition of diabetes. It is based on blood glucose levels. Fasting blood glucose levels are checked on two separate blood tests. 126 mg per dl or higher level is diagnosed as diabetes. However a higher blood glucose level is just a symptom of a disease. It is not the disease itself. It is an effect of something going wrong in the body. It is not the root cause of diabetes. It does not provide a better understanding of the disease and its treatment. Suppose your blood report shows high blood glucose levels. You consult a doctor. You describe your problem as high blood glucose levels. The doctor will give you a medicine to lower your blood glucose levels. This medicine treats the symptom and not the cause. Let us understand what is the root cause and define diabetes accordingly. Most of the food we consume is converted into glucose in the body. This glucose enters our bloodstream. Glucose from the blood has to enter the cells to be converted into energy. Cells have membranes that allow the entry and exit of molecules such as glucose. Entry of glucose into the cell requires help from insulin. Insulin sits on the insulin receptors present in the cell membranes. This starts a chain of events which results in glucose entering the cell. Glucose will not be able to enter the cells if there is no insulin. It will also not enter if the cells do not respond to the insulin signal well. If glucose does not enter the cells, the body will not get enough energy. The glucose will remain in the blood. This will raise the blood glucose levels which we see in the blood report. Hence the root cause of diabetes is glucose not being able to enter the cells. Now let's understand and define diabetes on the basis of this root cause. A person has diabetes if the mechanism of entry of glucose is impaired. It is not being carried out effectively and efficiently. In the traditional definition, insulin played no part at all. However, insulin is very important. Let's discuss the relationship between insulin and glucose concentration. Suppose your fasting blood glucose level is 70 mg per dl. Your fasting insulin level is 5 units. However for some reason it is not able to push glucose into the cells. This will increase your fasting blood glucose levels from 70 to 75. So 5 units of insulin are not enough to maintain glucose levels of 70. Therefore the pancreas will produce 6 units of insulin. This will push a little more glucose into the cells temporarily. Blood sugar levels will drop down to the normal level of 70. However the mechanism of glucose entry still has a problem. It will only keep getting worse from here on. Soon the 6 units of insulin won't be enough to keep the glucose level at 70. So the pancreas will keep secreting more units of insulin. This will manage to keep the glucose level at 70. It may increase to 80 but it will still be within acceptable limits. The cell is not sensitive to the presence of insulin. It is resisting the effect of insulin and not letting glucose enter the cells. This process is called insulin resistance. Pancreas response to insulin resistance is to produce more units of insulin. This is to keep glucose levels in the normal range. Since insulin resistance is not treated more and more insulin is produced. Soon even higher levels of insulin are not able to keep normal glucose levels. Eventually the blood glucose levels will be higher than 100 units. This is diagnosed as pre-diabetes. Then it progresses further and the blood glucose levels rise beyond 125. This is diagnosed as type 2 diabetes. This is not good. Now the person has both high glucose levels and high insulin levels. Insulin is produced by the beta cells of the pancreas. Higher insulin production at all times increases their workload. Say the body is making 15 units instead of 5. To do this beta cells are working 3 times harder than normal. Beta cells cannot sustain this workload for long.  Also high levels of insulin have many other harmful effects on the body. The effects are discussed in another tutorial in the same series. However it takes many years for the body to be diagnosed with type 2 diabetes. At any point in those years we can focus on improving insulin sensitivity. Lastly let's discuss the main difference between type 1 and type 2 diabetes. In type 1 diabetes the body does not produce insulin at all. Without insulin glucose does not enter the cells. The body does not get enough energy. Insulin is injected externally. That is why this type of diabetes is called insulin dependent diabetes. Whereas in type 2 diabetes there is never a deficit in the production of insulin. The body produces enough or excess insulin due to insulin resistance. The body is not able to use the insulin produced by the beta cells properly. Injecting external insulin becomes necessary when overworked beta cells die. That is when type 2 diabetes gets converted to type 1 diabetes. We must therefore correct insulin resistance. It is the root cause of type 2 diabetes. A higher glucose level is just a symptom of diabetes. Lifestyle changes are important to correct insulin resistance. How to improve insulin sensitivity is explained in another tutorial. This brings us to the end of this tutorial. Thank you for joining. Welcome to this spoken tutorial on effects of high levels of insulin in the body. In this tutorial we will learn about why having too much insulin is bad. Harmful effects of excessive insulin in the body. In our previous tutorial we learnt about insulin and its role in the body. Insulin is a very important hormone. It helps in taking up the glucose from the blood into the cells. Frequently having processed foods and foods rich in carbohydrates is not good. It results in more glucose in our blood. Insulin's action is resisted by the cells if they do not need this glucose. Thus, refusing the entry of glucose into the cells. This mechanism is called insulin resistance. Insulin resistance leads to hyperinsulinemia. It is a condition in which the insulin levels in the blood are constantly high. The body does not respond to insulin adequately or use it efficiently. The cells become less sensitive to the presence of insulin. Let us now look at the various effects of insulin resistance. Some effects have a direct relationship with insulin. High levels of insulin can cause one or more of these ill effects. One of the effects is type 2 diabetes. Let us see how it develops. In the early stages of insulin resistance blood sugar remains normal. Insulin levels rise when cells are not able to take up glucose efficiently. Once insulin levels rise more amount of glucose is pushed into the cells. As a result the blood glucose levels are maintained at normal levels. If insulin level is not checked in the blood this phase may be missed. As blood sugar levels would still be normal. After many years insulin resistance becomes severe. Even the increased levels of insulin is not able to do its work. It is not able to push enough glucose into the cells. That is when the blood sugar levels rise and type 2 diabetes gets detected. Another major problem associated with high insulin levels is obesity. Insulin is a hunger hormone. Excess of unused insulin sends signals to the brain. These signals are sent to supply glucose to the body. As a result hunger is stimulated. Even if a person has just eaten yet their body will crave for more food. This results in a continuous cycle of hunger and overeating. Let us understand this with an example. Suppose you are not hungry at the moment. Someone then offers you a small portion of carbohydrate rich food. For example biscuits, sweets etc.   That is why many of us are not able to restrict ourselves to small portions. The continuous cycle of insulin resistance and overeating goes on. This can result in obesity. There is another way through which high insulin levels can cause obesity. Due to high insulin levels the body is unable to break down fat for energy.  Insulin can cause obesity by affecting the signals of leptin. Leptin is a hormone which gives signals to the brain that the stomach is full. High insulin levels can disrupt the leptin signals. This leads to food cravings and overeating. Detailed relation between insulin and obesity is explained in another tutorial. Being obese is not the only indicator of insulin resistance. Even lean people can have insulin resistance. Instead of fat gain under the skin they gain it inside or around their organs. They may have extra fat in the liver which is known as fatty liver disease. Excess glucose gets converted to triglycerides and gets stored in the liver. High insulin levels inhibit the breakdown of fat. Over a period of time fat keeps getting accumulated in the liver. This burdens the capacity of the liver to handle fat. Eventually the person develops the condition called fatty liver disease. Elevated insulin levels also increase the risk of hypertension. It does so by stimulating sodium reabsorption in the kidney. This results in increased blood pressure. With high insulin levels there is a risk of developing heart diseases as well. This occurs through various mechanisms. First is the inflammation of the blood vessels. Second is the alteration of lipid profile. Next is the formation of plaques and blood clots. Plaques is a buildup of fatty substances on the blood vessels of the heart. Let us understand these steps in detail. Long time high blood sugar levels and high insulin levels cause inflammation. Lining of the blood vessels of the heart gets damaged. Formation of nitric oxide is also impaired in case of insulin resistance. Increased intake of fructose can increase uric acid in the body. Uric acid then reduces the availability of nitric oxide in the body. Nitric oxide causes relaxation of the blood vessels. If it is not formed adequately it will constrict the blood vessels. This restricts the blood flow and increases inflammation. It also raises the blood pressure. Secondly the lipid profile gets affected adversely due to high insulin levels. There is a rise in the levels of VLDL and LDL.  At high insulin levels LDL formed is small and dense. They are dangerous for the blood vessels of the heart. On sighting inflammation in the blood vessel, lipoproteins come to seal it. VLDL and small dense LDL get attached to the walls of the blood vessels. As a result plaques are formed which narrow the blood vessels. Supply of blood, oxygen and nutrients gets affected. Some plaques may break down and result in formation of blood clots. This can result in heart attack or stroke. Many people still have misconceptions about the dietary cause of heart disease. They think it occurs because of the fat and cholesterol in the diet. The real culprit is the consumption of excessive carbohydrates. Foods made with a lot of refined sugars and vegetable oils are also responsible. They initiate inflammation in the body. Whereas good quality fat in the diet helps in reducing inflammation. Examples of good quality fat are coconut oil, ghee, butter, fish, nuts. High insulin levels also accelerate the aging of the cells. This reduces life expectancy. There is a risk of developing Alzheimer's in such individuals.  We know that insulin is an anabolic hormone. It increases cell production and reduces cell death. But if insulin levels are high, it can promote the growth of cancerous cells. There is also a relation between high insulin levels and thyroid dysfunction. High insulin levels affect the conversion of T4 to T3. This results in hypothyroidism. Insulin resistance affects the insulin and glucagon relationship. Let us see the relation between insulin and glucagon in healthy individuals. When the blood sugar levels are high, the pancreas releases insulin. It helps the cells take up the glucose and reduce blood sugar levels. When the blood sugar levels are low, glucagon is released by the pancreas. It acts on the liver to break down glycogen to release glucose in the blood. Glucagon prevents the sugar levels from dropping too low. Thus, glucagon and insulin work in a complementary manner. They balance the blood sugar levels within desirable range in healthy people. This relationship is disturbed in people with insulin resistance. In such people, the pancreas doesn't stop releasing glucagon. This further releases more glucose from the glycogen, hence increasing the blood sugar levels. Apart from these, high insulin levels indirectly cause other health problems. For example, fatty liver, osteoporosis, stress, kidney failure. Pain and stiffness in the joints can also occur. Other effects include damage to blood vessels of the eyes and cataracts. It can also damage the nerves causing numbness and tingling in hands and feet. High insulin also contributes to polycystic ovarian syndrome known as PCOS. High insulin levels cause excessive production of male hormones. Abnormal hormone levels prevent follicles from growing properly. They are unable to mature and release eggs. As a result, these immature follicles get accumulated in the ovaries. This affects ovulation and fertility in women. The production of sex hormones is also affected by high insulin levels. There are some other symptoms of high insulin levels such as frequent or constant hunger, feeling tired, confusion, acidity, etc. Skin tags and pigmentation in the neck and armpit region is also a symptom. Impaired lung functions and increased respiratory infections are other examples. Hence, it is important to keep your insulin levels under control. Insulin levels can be checked before all these harmful effects are manifested. A blood test for fasting insulin should be done. Fasting insulin in healthy individuals should be between 2 to 5 miu slash ml. Miu slash ml stands for milli-international units per millilitres. Anything above 5 miu slash ml indicates increased levels of insulin in the body. This can lead to one or more health complications. Please consult your doctor before taking any tests and medications. This brings us to the end of the tutorial. Thank you for joining.


So, hello everyone, thanks for the introductions and thanks for the invitation. So yeah, this was part of my master thesis. This is a joint research with my advisor, Professor Ali Biham, Tetechnion. And we're talking about the Bluetooth and specifically the Bluetooth pairing and a variant of invalid curve attack or fixed coordinate invalid curve attack, which is slightly different. All right. So I'm sure all of you are familiar with Bluetooth. It's becoming one of the most popular protocol of specifically radio protocols in the world right now. All of you probably have this one Bluetooth-capable device in your pocket and more than one in your bag. Yeah. So today, Bluetooth is becoming very, very popular. IoT devices, audio equipment, and nowadays wearables and computer peripherals all move to Bluetooth. But what most of you probably don't know is that Bluetooth today is actually two protocols. So there is Bluetooth BREDR and Bluetooth Low Energy. BREDR is the former version of Bluetooth, the regional standardization. And Low Energy is more recent, but they coexist together, used for slightly different scenarios. Also, both protocols promise to provide confidentiality and many the middle protection in the link layer. So the application, in theory, shouldn't provide their own authentication. And in this talk, we'll talk about this promise and if it's provided as it should be. All right. So the Bluetooth pairing, which is the connection establishment process, is the process where two devices authenticate with each other and exchange their shared secret and the shared DVR monkey. And the main, the most recent pairing protocols for Bluetooth BREDR and Bluetooth Low Energy are secure, simple pairing, or SSP, and LE secure connections for Bluetooth Low Energy. And they are both very, very, very similar. They share a lot of things. And they're both variants of authenticated elliptical DVR monkey protocol. So the first attack that made me list curious about attacking Bluetooth, there was many, many, many attacks before that, but one of the recent attacks was shown over the first release of Bluetooth Low Energy by Mike Ryan. And he showed that the original pairing protocol used in the Low Energy was susceptible to eavesdropping attack without any interaction from the attacker. The attacker could simply eavesdrop to the pairing, iterate through two to the 20 keys, temporary keys, and that's that way breaking the session key and decrypting all of the remaining traffic without interaction at all. So that's like really bad. That's not provide any security whatsoever because two to the 20 operations today, it's less than a second in every computer. And he also provided an open source software which recovers the session key of Bluetooth sessions from captured traffic. Right, but now they addressed this problem and they moved to the new L-E-Secure Connections protocol which relies on elliptic curve cryptography. So very, very short and extremely shallow introduction to elliptic curve cryptography. So what is an elliptic curve? An elliptic curve is a group which is defined by an equation and an underlaying field. So the equation we're looking at are short varstas forms which are defined with two parameters a and b. So we have y squared equals x to the third plus ax plus b. And all of the figures you're about to see are drawn over real field because in cryptography we always use finite fields so the equations are over fq. Right, so we're talking about groups. So we have a group element. So the elements in elliptic curves are points or pairs of coordinates x and y which satisfy the curve equation over the underlaying field. We include another point which is very important for this attack called the point at infinity which will be the identity element of the group. This is a new point that we introduce to this set of points, set of elements of the group. And because it's a group you have an operation, in this case the operation is addition. So we'll denote it by the plus symbol and we'll use the inverse notation of minus one with brackets for a point b. And we also need a scalar multiplication which is simply adding a point to itself several times. Right, so this is the notation we're going to use. So point addition, we'll divide the point addition into, sorry I have the notation for scalar multiplication twice. Anyway, point addition, we'll divide it to point addition and point doubling. Point doubling will be adding a point to itself and point addition is adding two different points. So how the inverse is defined? The inverse is defined very, very simply. All you have to do in order to inverse a point is to negate the y coordinate, reflect it across the x-axis and then get the inverse of that point, right? So this is how it works. And point addition, adding two different points is done by taking the line that grows both points, p and q, finding the third intersection with the curve and reflecting that point across the x-axis, getting the inverse of that point. And this will be the result of p plus q. And you can see here the simple one way to compute this formula. And as you can see, this formula do not involve the curve parameter b. This means that you can compute all of this computation, find the result point without even knowing what the parameter, what the b parameter of the curve. Now we'll move on to point doubling. So very similarly, but instead of taking two points and finding the line that grows both points, we simply take the tangent line at point b and then again find the second point of intersection, inverse that point and get the resultant point. Note that this formula also do not involve the b parameter of the curve. Finally, I want you to notice last observation, which is that there are some special points of some sort that are an order of two. That means that if you add these points to themself, you will always get the identity element. The simplest way to see that is that if you have the y-coordinate equal zero, then when you negate the y-coordinate, when you get the inverse of this point, you will always get the same point and therefore adding them to themself will give you the identity element. Great. So now I'll go briefly about elliptic curve Diffie-Allemann. I'm sure all of you are familiar with the Diffie-Allemann protocol, so I'll do this very, very fast. All you have to remember is that instead of doing things in multiplicative modular group, we're doing these things on elliptic curve groups. And therefore we have to agree on an elliptic curve, which means the parameters a, b, and the underlying field fq. And we also have to agree on a generator point b. So both parties select the secret key to be a scalar, in this case. They multiply this scalar with the generator point b. They get the public keys. They exchange these public keys. And then they multiply the secret key by the correspondent public key to get the shored Diffie-Allemann key. And since this process is commutative and associative, they will get the same shored key. Great. So now we can talk about the first major attack against protocols that use elliptic curve Diffie-Allemann, which is the invalid curve attack. So introduced by BLL, this cryptographic attack uses points which do not satisfy the curve equation in order to extract, in our case, the secret key of a victim. So how it works. So what we're doing here is the attacker, we are in the scenario again of elliptic curve Diffie-Allemann. So we have a victim and we have an attacker. And the attacker selects a different group, a different elliptic curve, which differs from the original elliptic curve that was agreed upon by the B parameter. And what's special about this new curve is that it has subgroups of small size. So he finds this kind of elliptic curve. It's very, very easy to find. And when he finds one, he simply selects a generator point of a small subgroup. We'll call this point P1. He then, the victim transmits its public key. The attacker transmits Q1, sorry, Q1 will be the point with the small subgroup. It transmits Q1. And then the victim will try to compute the shared Diffie-Allemann key by multiplying its secret key by the point Q1. So since this is a generator of a small subgroup, there are a very small amount of possibilities for this shared Diffie-Allemann key. We will have the assumption that as happens in a lot of protocols, now the victim will transmit some message encrypted using the shared Diffie-Allemann key to the attacker. And again, for simplicity, let's assume that this message is known to the attacker. So the attacker can now try to find the disparate log of the secret key under this small subgroup. So what the attacker is doing is simply iterating through all of the possibilities for this shared key under the small subgroup. And that's finding, after finding the correct value, the correct shared key, it actually reveals the information of what is the secret key, modulo, the size of the small subgroup, in our case P1. So by extracting this information, the attacker can now continue this procedure using a different subgroup, a different elliptic curve, or even the same elliptic curve and a different subgroup, and then extract another information about another modulo of the secret key. And finally, after extracting enough information, enough co-prime modulers, the attacker can reveal the secret key by applying the Chinese reminder theorem. So that's the idea behind the original invalid curve attack. Note that the original invalid curve attack uses two basic assumptions. One of them is that we could initiate the key exchange multiple times with the same private key. And the second one is that we could send any pair of points, coordinates, X and Y, which will not satisfy their curve equation. So these are two assumptions that I used during the original attack. And this attack is known for a very long time, and therefore the Bluto specification suggested as a mitigation to the stack to simply refresh the DfM1 keeper every pairing attempt. And that's preventing this attack because the first assumption will no longer be valid. Because if you refresh the keeper every attempt, the secret key will be different on the next attempt. And as we saw later, all of the implementation we've tested, follow this suggestion, sorry. All right. So the Bluetooth pairing, now we'll go a bit deeper into the pairing procedure. So it responsible for generating the shared encryption keys, as we previously said. And due to the, all of the similarities between SSP and LESC, we will only talk about LESC, but everything I'm going to say regarding LESC will also apply to SSP and vice versa. So don't worry about that. So how the other pairing protocol is comprised? So it comprised of four phases. The first phase is feature exchange. It has no cryptographic properties, so we're going to leave it in the side for now. Phase two is the key exchange. Phase three is the authentication, and which is very important to us. We'll take it into it very soon. And phase four is the key derivation phase. All right. So the key exchange is simply an elliptic curve DfM1 key exchange, as we saw just a few slides ago. And it uses the standardized P256 elliptic curve, NIST elliptic curve, which is I think the most widely used curve today. That's in LESC connection in the Bluetooth PR-EDR, it uses a different curve, but also NIST standardized. These two functions, F4 and G2, you don't really have to remember them. I just put in here for completeness of this lecture. These are two cryptographic functions that will be used during the authentication phase. All right. So now we can dig into the authentication phase. I hope you can see this diagram. I'll go every step and then explain it, so if not, that's not horrible. So the authentication phase begin when both parties, device A and device B, selects a random nonce NA and A and B. Both of them are 128 bits long. Then they both set some value that's called RA and RB. In this case, they set it to zero. Doesn't really matter for us right now. Then device B commits to both public keys and its knowns using function F4 and transmits the commitment value, CB. Then device A transmits its nonce and device B reveals his nonce following by a check of the commitment. This process is merely to make sure that no device have advantage regarding the selection of the nonce, because otherwise a attacker that tries to device a man in the middle attack might use the ability to know the nonce, that the nonce is selected in one device before it was selected in the other, and might device some attack according to that, so that's supposed to prevent it. Because again, both device B commits to the nonce and then device A reveals its nonce and then device B reveals its nonce. The most important part of the authentication phase is what comes next, which is the application of function G2 on both public keys and both nonces. This process should prevent any man in the middle attack to happen in the Bluetooth pairing, since I'm sure most of you at least have encountered the fact that when you pair two Bluetooth devices, you are presented with two numbers and you have to confirm on both devices that these numbers are in fact equal. Or in some cases you have, you are displayed one number and you have to enter this number into the other device, that also happens. That's another different way to do it. But this process is actually the authentication of Bluetooth. And what these numbers should mean is the sort of hash function on both public keys and both nonces. And by confirming that both numbers are equal, you're supposed to prevent any man in the middle who wish to change these public keys and device a simple, naive man in the middle attack. Because if you try to change these public keys, then you cannot make sure that the nonces will be equal in both devices and the user will immediately notice it and say, hey, someone attacking me. So that's the basic idea of the Bluetooth authentication. Now to the confusing part. So despite the fact that these diagrams show that the function G2 and F4 is applied to both public keys, pKa and pKb, it is actually applied only to the x-coordinate of both public keys. So this is later in the specification is defined as pKa x and pKb x, but not in the diagrams. All the diagrams show only pKa and pKb. So very confusing, but that's the case in Bluetooth. All right. So now after we know that, after we know how the authentication works, we can think of some attack. So the attack is sort of based on the fact that the y-coordinate is simply unauthenticated during all this authentication procedure. It is not involved in any of the computations. And with that, we can also remember that the Bluetooth standard do not require implementation to validate whether a given point satisfy the curve equation. Again, the mitigation that was used is not that, it's a different one. So what we can do in order to attack this protocol by changing the y-coordinate to any value that we want without affecting the authentication. So we'll describe two versions of our attack. The first one is the semi-passive and the second one is the fully active. So the semi-passive is extremely simple.  You were in the middle scenario. So both devices, device A and device B, want to pair with each other. So they both compute their public keys. Device A transmits its public key to device B. All the attacker do is modify the y-coordinate to zero before transmitting forward to device B. We'll call the new public key pKa prime. Similarly device B transmits its public key and the attacker set the y-coordinate to zero and transmits pKb prime. What happens now? Now if you think about it, they might not get the same DEFIA monkey anymore. We have no such promise because we're working in totally different elliptic curves, totally different subgroups. This is not necessarily will provide the same value and we call this value DHKa and DHKb. But to be more exact, we can say that with rate of 25%, with rate of quarter, we will always get both points, both DEFIA monkeys to equal that point at infinity. Why is that? We just set two public keys to be generator points of subgroup of order two. So we multiply that by some random value and with a chance of half each of the random values will be even. If this value is even, we're adding generator points of order two, even number of times and then therefore getting the identity element. So with rate with probability of quarter, both secret keys are even and therefore both of the shared key will be the point at infinity. So what happens if this event occurs?  The shared key is synchronized between the two devices. The authentication succeeded. Everything works perfectly and therefore the attacker knows that shared key was the point at infinity. He can derive the long-term key and the MAC key and decrypt and encrypt messages, however he likes, without further intervention with the protocol, without anything else. So that's very simple, very straightforward. Now we need to look at another two functions. Again, you don't really have to remember them. This is function F5 and F6. We need them in order to consider that key derivation. How could we improve this probability, this success probability of quarter? We want to do something better. So how could we, how could you get a better success probability? So in order to do that, we first have to introduce ourselves to the key derivation phase. So the key derivation phase begins where the function F5 is applied on the shared DEFIA monkey, both nonces and both MAC address. We then derive the long-term key and the MAC key using function F5. And then two confirmation values are exchanged, EA and EB. These values are exchanged in order to make sure that both devices actually got the same DEFIA monkey, which is something important if you want to continue encrypting and decrypting messages. So as you remember from the semi-passive attack, we currently succeed, the attack currently succeed only if the two shared DEFIA monkeys are the point at infinity. But in this fully active attack, we want to increase this probability by also, by also using different scenarios. So the scenario we'll be using is the scenario, specifically, when the DEFIA monkey, when the DHKEA equals PKB prime, the attacker already knows that the attack is going to fail. And in the semi-passive version. Because in the semi-passive version, if DHKEA equals PKB prime, there is no chance that DHKEB will equal this value, and therefore the semi-passive attack will fail for sure. And the attacker can do nothing about it in the semi-passive scenario. So how could we use this information in order to improve a success rate? So what we're going to do is simply test during the key derivation phase whether this event occurred. So the attacker could check the value of EA, the confirmation value, send by device A, test it to be either PKB prime or the point at infinity, the identity element. If it equals the point at infinity, it could continue as with the semi-passive attack and it will have a chance of 50%. Otherwise, it knows the semi-passive attack will always fail and therefore it should do something different. So what exactly it should do? So it should arbitrarily select some value DHKEA prime to be one of the two possibilities for DHKEA. It should then compute the correct confirmation value EA to be EA prime by simply inserting the guess, the guess of the DHKEA prime to the function F5 and compute all the confirmation computation as usual, F6, sorry. What the device B will then do, he will try to verify that, again, with probability of 50% of half, this verification will pass, otherwise he will abort the pairing process and if the verification succeeded, the attacker knows what is the Diffie-Amon key chosen by device B because he got the correct guess. So he knows that DHKEA prime just equals DHKEA B.  Note that in this scenario, now the attacker, there are two different session keys and therefore the attacker needs to decrypt and re-encrypt every message, every data packet that is being transmitted between device B and device A, which make it a lot harder to implement than the original semi-passive attack. But with the added benefit of a better success rate, so this is very, very simplifying slide to show you that success rate of the semi-passive attack is only with a quarter of the possibilities and for the active attack, we have quarter of half depending on your guess, but again, it doesn't really matter what your guess is, it's arbitrary. So after we talked about all the details of the attack, we can move on and talk about higher level details and implementation and real-life consideration. All right, so unlike Wi-Fi and other radio frequency-based protocols, Bluetooth has frequency hopping, there are radio-based protocols that use frequency hopping, but some don't. And when we are trying to implement this kind of attacks, we also have to consider this. Even though most of the time these frequency hopping do not provide any cryptographic security, specifically in Bluetooth, I can tell you that the frequency hopping in Bluetooth low energy is extremely simple and could be broken in seconds, if not less, as shown again by Mike Ryan in 2013. And to be honest, it doesn't really matter because Bluetooth protocol is so simple that you can buy slightly more expensive equipment that will simply transmit and listen to all of the Bluetooth channels simultaneously and then that's eliminate this problem once and for all. We should also consider the over-the-air pocket manipulation because as you saw during the attack, we had to capture a packet and then change it before transmitting it to the other party. So there are some projects that try to do it today. As far as I know, but last time I checked was about a year ago or even more, there are no commercially available equipment that could do it reliably for Bluetooth 4.2 with at least secure connections or Bluetooth BREDR, but I'm sure that I don't think it's such a big problem that couldn't be resolved in the following years. And it really depends on the incentive for companies or individuals to design this equipment. If somebody wants, I will be happy to talk about how exactly this thing could be implemented and exactly what is the process that needs to be taken in order to devise these kind of attacks, but it's possible. There has been a lot of work in different protocols that do similar things. So now we can move on to talk about the design flaws in the protocol that made this attack possible. So I think one of the major design flaws, again, I have been approached several times after I gave this talk by several standardization people who told me that as I already knew, there was a lot of problems when standardizing elliptic curve cryptography over the years and especially when we go back to 2007 when Secure Simple Pairing was first designed. So I know some of these critics might be due to this patenting things, but I think it should still be in the slide for future implementations and design of protocols. So using both coordinates during the key exchange is very unadvisable. It highly increased the attack surface and it's really unnecessary today. You have multiple ways to compress points such that you wouldn't have to send both coordinates. There are different elliptic curves that you can work with that do not need the second Y coordinate and you could also simply send the X coordinate and assign and then compute the Y coordinate from that. And secondly, and maybe the most, the more important one is the fact that the protocol authenticates only the X coordinate. We couldn't find any strong reasoning for doing this. I mean, if you already send both coordinates, you should authenticate both coordinates. I don't see why not. I should also point out that original mitigation that was suggested during the standard of refreshing the secret key every pairing attempt do not apply to this attack at all. We don't rely on previous pairing attempts in order to extract information on the current pairing attempt. So this mitigation is irrelevant, sorry. So and the obvious and recommended mitigation against this attack is obviously to validate whether the given public key satisfy the curve equation. If you would do this validation, this attack will be prevented. All right, now as with all the other presentations, we will move on to the disclosure part and the test of vulnerable devices. So we've tested a lot of vulnerable devices and multiple vendors. First we informed the Bluetooth special interest group, which is responsible for the standardization of Bluetooth. The CVE was assigned to this vulnerability. And then we started hunting implementations and checking whether they're vulnerable or not. So first, we had to consider the fact that Bluetooth-ally secure connections and Bluetooth secure simple pairing, the two pairing protocols are implemented in two different places. Any secure connections is implemented in the operating system and therefore we had to look at the implementation of multiple popular operating systems. So the implementation we tested was the implementation of Android, which is called Doodread. We actually haven't tested, but we're informed by Apple that both iOS and the Bluetooth implementation was vulnerable. iOS and macOS implementations were both vulnerable. Microsoft actually at the time didn't have an implementation of any secure connections. But it had only the implementation of the legacy pairing, which as you might remember is vulnerable to the passive, very, very simple attack, so that's not a good thing. Next we moved on to implementation of secure simple pairing. So secure simple pairing opposed to the any secure connection is actually implemented by the Bluetooth chip. So we've tested all of the three major vendors of Bluetooth chips, which is Qualcomm, Broadcom and Intel and found all of them to be vulnerable. So that was, I don't know if surprising or not, because by now we already knew that probably all of them limitations will be vulnerable. And the industry reaction was actually pretty good. It required a lot of effort in order to coordinate between all these vendors, but after we overcome this obstacle, all of the vendors acted very responsibly. They all provided patch to their devices. Some of them released their patches through their vendor partners, like Qualcomm and Broadcom. Others simply released the patch online and all through their update procedures. So yeah, all of the operating systems have been updated. But the more important thing is that the Bluetooth actually addressed this finding very seriously and released a formal statement saying that, yes, this problem occurs and yes, we are aware of it. And we're also, at least as they promised here, will add the vulnerability testing to their qualification program so that no Bluetooth compatible device could be released to the market with this vulnerability in the future, which is very encouraging. And thus, the specification was changed and hopefully this vulnerability will not occur in the future. Finally, I want to sum up by saying that we have introduced a fixed coordinate invalid curve attack, which uses the fixed X coordinate in order to device invalid curve attack in a different way, which might be useful in some other protocols. I currently haven't encountered another protocol that has this special design issue, but maybe. We presented its application on the Bluetooth pairing protocol. We proven that all of the current pairing protocols are insecure. None of them was secure against this attack and previous attacks together. And we've discovered multiple design flaws in the Bluetooth protocol, which again were addressed in protocol specification change. And we found that all of the vendors, all of the big vendors are vulnerable and according to this finding, the protocol was modified and our findings were addressed through all of the channels. Finally, I want to thank the third coordination center for helping us to coordinate with all the vendors. Again, it was very difficult. There were a lot of vendors. And for all of the vendors for patching the system and not having to go through a trouble of ping pong between us a lot about this. That's it. Thank you for the great talk earlier. If you have any question, please come to the micro and thank you. Good work, by the way, not a criticism of the work. But do you have any understanding for how this happened in the Bluetooth process? The checking for the point of infinity, checking for the point on the curve. Those tests were in X9, a gazillion years ago, what, 20 years ago? Do we have any insight into how the Bluetooth people didn't even refer to the ANSI standards that probably existed at the time? So that's totally not an insight information. I really don't know what went through the process. But what I've heard from people that came to me after this talk was that the patenting regarding point validation made things very complicated in the time. There is actually a patent against that covers point validation, which is a very broad thing to cover, which, again, if companies were trying to validate their points by simply testing the curve equation, that might result in a patent violation. So that made things very complicated. So I just had a completely weird question. When you're talking about the existing technology that does over-the-air packet manipulation, is that doing it as it's being broadcast, or is it doing some sort of man-in-the-middle thing? So I haven't tested it fully to understand exactly what it's doing. Again, it doesn't work with the DFM side. So maybe it relies on the fact that you can simply break the encryption key, and that's simply jam the one device and transmit another packet together. I'm not sure. I don't want to confuse you. All right. That's fine. Thanks. Okay. Any other question? If this is not the case, then please thank the speaker once again.


If you activate this dimension of energy, other dimensions of life will open up. One thing is, are you ready for those dimensions? Kundalini yoga in its essence is the most dangerous form of yoga. I'm saying dangerous because it's the most potent also. If you have to jump into an abyss, you should be insane. Or you should have enormous trust in somebody. So what is Kundalini? Right now I'm speaking. This is Kundalini. You are alert and listening. If you are alert and listening, that is Kundalini. A flower is blossoming, that is Kundalini. A dog is barking, that is also Kundalini. Or in other words, the fundamental life force in the existence, we call it Kundalini. Now within the system, within the human system, if you look at this as a kind of a life package, it's a piece of life. This piece of life is packed in a certain way with layers of this energy. One dimension of energy comes alive immediately because that is necessary for your survival process. The other dimensions of energy will not come alive unless you do something about it, unless you are aware of it and activate it in a certain way, they do not come into existence. They remain dormant. The dormant energy is way bigger than the energy that is in use right now.  Out of this one hundred and fourteen, if about twenty-one of them are on, you will live a complete life. You will not feel any inadequacies.  There will be no problem with your life. You will think you are a great success. But you are only twenty-one, that is less than twenty-one percent out of one hundred and fourteen. Less than twenty percent.  The remaining percentage of life, what is it about? It is not even needed if your intention is just to live well. If you activate this dimension of energy, other dimensions of life will open up. One thing is, are you ready for those dimensions? The question is not about whether it's good or bad. The question is just about, are you ready for it? Because even if the best things in life come to your life, when you are not ready for it, it will not be a good thing for you. In your experience it will not be a good thing. If something came to you when you are not ready for it, isn't it so? Even if it's the greatest thing, it may be the greatest thing, but it came to you when you are not ready for it, then it is not a good thing, isn't it? So are you ready for it is the first question. If you are ready for it, what can we do for it? What can we do to activate? The various ways of doing this, many, many ways, but the Kundalini Yoga, are people familiar with Kundalini Yoga, practicing or... Okay, Kundalini Yoga, I'm not making a comment about anybody, okay? Kundalini Yoga in its essence is the most dangerous form of yoga. I'm saying dangerous because it's the most potent also. What is most potent is always the most dangerous. If improperly handled, there are various kinds of energy in the world right now. Even the electricity is being manufactured in, I mean produced in so many different ways. One of the ways that we do it is through nuclear reactions, nuclear reactors rather. It is the most efficient way of producing energy that we know right now, but it is also the most dangerous way, isn't it? When things go wrong, they go seriously wrong. When they're going right, it is the easiest and the best way to produce energy on the planet is nuclear energy actually. But when it goes bad, it goes bad really bad, like in ways that you can't fix it. So similarly with Kundalini Yoga, it is the most potent and it is the most dangerous. Without the necessary preparation and guidance, without expert guidance, constant guidance and observation, nobody should ever attempt it. But the problem is books have been written about it and everybody wants to do the highest yoga. Nobody wants to start with A, everybody wants to start the alphabet with Z. This attitude itself is dangerous. What can be a life-transforming force can become a life-destructive force simply because without the necessary commitment and dedication and focus and understanding it is being handled. Anyway, about rising the Kundalini, if the Kundalini rises, the dimensions of your life will change so rapidly that you must be willing to make the outside adjustments equally quick. Otherwise, things will fall apart in a big way. In the classical yogic traditions, there is a certain type of yoga we teach for people who live in family situations. There is a certain other type of yoga we teach for ascetics. In Isha, we have both the forms. We have ascetic yoga and we have the general yoga. We will never teach you the ascetic form. That is the most potent way to do it. But it will demand a certain dimension of discipline and focus which your regular lives will not allow. If you do that kind of yoga, it will dismantle your outside life instantly. Now, this yoga is not designed to dismantle your life. This yoga is designed to make your life happen better. When life happens better, when things happen better, you make more money, your business is going better, your profession is happening better, you are… generally, unfortunately, you are longing to seek the higher, become slower. Yes? So in the real sense, it is not the good way to do it. But it's the only way it works in today's world and it's the only way it works for majority of the people. For a small number of people, we can do it other ways. We can bypass all these things and just do very powerful ways of doing things. But it will dismantle all social structures around them, which is not good for everybody to do. So these are different dimensions. Kundalini yoga, if it has to be practiced, you must be in a certain kind of atmosphere. You cannot live in social situations and do Kundalini yoga. Otherwise, in the name of Kundalini yoga, you're doing something simplistic. Otherwise, Kundalini yoga can transform the way you are within days. Suddenly, you find you are a stranger in your own home within two days of practice because it will change everything about you. So can we raise the Kundalini? Yes, we can. One way is to create a conducive atmosphere so that slowly it rises. The other way is to provoke it in such a way that it raises quickly. If it rises quickly, then everything changes dramatically. If it rises slowly over a period of time, changes will happen slowly. You will be capable of handling these changes over a period of time. But if it happens very quick, then you will not be able to handle the changes. Things will look like things are falling apart. So there are different ways of doing this. How many ways? There are too many ways. I will not go into how many ways. There are so many ways of doing it. Essentially, there are 112 ways of doing it. There are 112 ways in which you can take this up. From the base to… Oh, for this you have to know the structure, otherwise it will become very elaborate. Out of this 114 chakras, there are seven which we recognize as seven dimensions. Out of this, six are within the body, one just outside the physical body. So if you employ these 112 methods, you will handle the sixth chakra. The seventh one you cannot handle. There are 112 ways in which you can attain to a chakra which we refer to as agna. But from agna to sahasra there is no way. There is no way to do it. You just have to jump into an abyss. If you have to jump into an abyss, you should be insane. Or you should have enormous trust in somebody. Somebody says jump and you are jumping because you have such a deep trust in somebody that when he says jump, it has to be good for you. You simply jump into a bottomless pit. So the journey from the muladhara to agna, there are 112 ways to get there. But from there to there there is no way. It is just one jump that can happen in trust, in devotion or in madness. Choice is yours.


Well, here's just a little quick tip on a tool you might find useful for your Linux shell. It's probably not going to be installed by default. It's called Nmon. I'm not sure if that's how you pronounce it. Nmon. Nmon. But it probably will be in your repositories. So if you're on a Debian-based system, you can use aptitude or apt-get if you're on Debian or on Ubuntu and install it. I already have it installed. You can use whatever package manager you want on your system. Once it's installed, you just call it by typing in the name of it. And it comes up running with a little help screen here. And it's refreshing every two seconds, it says. And what we can do here is you can look here. You have shortcut keys to toggle stuff on and off, CPU, memory, disk, resources, kernel, networking, file systems. So let's go ahead. I am going to hit M for memory. And it will bring up the memory here usage. I can hit N, which will also bring up networking. It still leaves the memory up on the screen. I can hit C for CPU, which also comes up, but now we can't see everything. So I can also hit M and turn off the memory monitoring. And the network will still be there. It's just depending on the size of your screen and your font size there. I have things kind of blown up a little bit here to make it more visible in the video. You can see that at any point you can hit H to bring up the help screen, which gives you a list of all the buttons. And you can see right here that B will toggle black and white mode. So let me hit H again to hide that. So any of the keys you press, you press it again to toggle it off if it's on. So we got our process monitor here. And there are certain things that are color coded. If for some reason you don't want it color coded, maybe you're on a monochrome screen and it might be difficult to read on it is my assumption. You can hit B to go to black and white mode. And you can hit B again to go back to color mode. So once again, I'll hit N to turn off network monitoring and C to turn off CPU monitoring. I'll hit H for help. And you have your list of commands there. So that's a quick tip, just a little tool that you might find useful for looking at stuff. And that's it for the tutorial. I hope you enjoyed it. Just a little quick tip on your Linux system. Please visit my website. It's filmsbychrist.com. That's Chris the K. There should be a link in the description. And I hope that you have a great day.